@ai-matrx/data 0.18.33 → 0.18.35

package/dist/db.d.cts

@@ -1,6 +1,7 @@
 import { MaybeSingleResponse } from './index.cjs';
 export { a as AuthCookie, b as AuthCookieOptions, A as AuthCookieValue, C as CreateAuthCookieArgs, D as DEFAULT_AUTH_COOKIE_NAME, R as ReconciledAuthCookies, c as createAuthCookie, p as parseCookieHeader } from './auth-cookie-BpgVyFw9.cjs';
 export { uniqueChannelTopic } from '@ai-matrx/realtime';
+import { PostgrestError } from '@supabase/supabase-js';
 import './credentials-B-rePKU7.cjs';
 import './net.cjs';
 
@@ -561,4 +562,203 @@ declare function decodeOAuthRefreshClaims(token: string): JwtClaims | null;
  */
 declare function createOAuthRefreshFetch(args: CreateOAuthRefreshFetchArgs): typeof globalThis.fetch;
 
-export { type ActiveOrgCookie, type ActiveOrgCookieOptions, type ActiveOrgSelection, type AuthRetryableResult, type CreateActiveOrgCookieArgs, type CreateOAuthRefreshFetchArgs, type CreateSessionRetryOptions, DEFAULT_ACTIVE_ORG_COOKIE_MAX_AGE, DEFAULT_ACTIVE_ORG_COOKIE_NAME, type GuardedUpdateArgs, type GuardedUpdateResult, IncompleteReadError, type JsonObject, type MergeJsonColumnArgs, type MergeJsonColumnResult, type OAuthRefreshStorage, type PagedReadQuery, type PagedReadResult, type ReadAllRowsOptions, type ReadAllRowsRestOptions, type SessionSource, SessionUnavailableError, type VersionedRow, asJsonObject, createActiveOrgCookie, createOAuthRefreshFetch, createSessionRetry, decodeActiveOrgSelection, decodeOAuthRefreshClaims, encodeActiveOrgSelection, guardedUpdate, isMissingSessionError, mergeJsonColumn, readAllRows, readAllRowsRest, tryReadAllRows, tryReadAllRowsRest };
+/** A non-2xx answer from a server, with the words already chosen. */
+declare class WriteRefusedError extends Error {
+    readonly status: number;
+    /** What the server said for a person, when it said something a person can read. */
+    readonly serverMessage: string | null;
+    /** The developer line (method, path, status, body) — for diagnostics, never for the screen. */
+    readonly technical: string;
+    constructor(args: {
+        status: number;
+        serverMessage?: string | null;
+        technical: string;
+    });
+}
+/** Pull a human sentence out of a FastAPI-style error body, or null when there is none. */
+declare function serverMessageFromBody(body: unknown): string | null;
+/**
+ * THE STORE'S OWN WORDS, WHEN IT SAID SOME (lane HANDOVER, 2026-09-27). A door that refuses raises a
+ * sentence for a person — `You can see this record, but "Allergies" is not yours to change.` — or the
+ * same sentence behind its own name (`cat_write: this category is not yours to change.`). Postgres's
+ * native refusals (`permission denied for table …`, `new row violates …`) are never that. This hands
+ * back the door's sentence, capitalised and ended, or null when the text is not a person's words.
+ * test@test.com's refused Allergies edit read "Permission denied" because the scopes mapper threw
+ * the door's sentence away for a fixed string.
+ */
+declare function personSentence(text: unknown): string | null;
+/**
+ * A direct Supabase write that matched no row answers WITHOUT an error (RLS filters the row out,
+ * or it is gone), so the screen would say "saved" over nothing. Pass the `.select()` rows of an
+ * update/upsert: zero rows is a refusal, said in words.
+ */
+declare function assertWriteLanded<T>(rows: T[] | T | null | undefined, technical: string): void;
+interface WriteFailureWords {
+    /** "Could not pause this schedule." */
+    title: string;
+    /** Why, in words, then the remedy. */
+    description: string;
+}
+/**
+ * The words for a failed write. `action` completes "Could not …" ("pause this schedule");
+ * `remedy` is what to do next ("Try again or open the schedule's activity.").
+ */
+declare function describeWriteFailure(err: unknown, { action, remedy }: {
+    action: string;
+    remedy?: string;
+}): WriteFailureWords;
+
+/**
+ * @ai-matrx/data/db — writeOne: THE single-record write that PROVES it landed.
+ *
+ * Ported verbatim from matrx-frontend `utils/supabase/writeOne.ts` (which now
+ * re-exports this module, so `WriteDidNotLandError` is ONE class everywhere).
+ *
+ * THE CLASS (flashcards, 2026-09-25). PostgREST answers an `.update()` or
+ * `.delete()` that row-level security filters to zero rows with
+ * `{ data: [], error: null }` — status 200, no error. A caller that judges
+ * success by `error == null` therefore tells the person "Card deleted" while
+ * nothing happened. The same is true when the row is already gone. Nothing
+ * fails silently: zero rows written is a refusal, and it is said in words.
+ *
+ * USE IT for every write aimed at ONE record (`.eq("id", …)`):
+ *
+ *   await writeOne(
+ *     supabase.from("notes").update({ label }).eq("id", noteId).select("id"),
+ *     { action: "rename", noun: "note" },
+ *   );
+ *
+ * - The builder MUST end in `.select(...)` — that is what makes PostgREST
+ *   return the rows it actually wrote. Select only what you need (`"id"` is
+ *   fine); the first written row is returned.
+ * - A database error is thrown AS IS (the PostgrestError), so existing error
+ *   handling and `describeWriteFailure` keep working.
+ * - Zero rows throws `WriteDidNotLandError` — a `WriteRefusedError` whose
+ *   message is already a sentence for a person:
+ *   "Nothing was deleted: this card no longer exists, or your access does not
+ *   allow deleting it."
+ * - `tryWriteOne` is the same check for result-style services that never
+ *   throw: it returns `{ row, error }`.
+ *
+ * TWO MODES for writes that carry an extra condition (coordinator ruling,
+ * 2026-09-25):
+ *
+ * - IDEMPOTENT (`alreadyDone`): an archive filtered `.is("deleted_at", null)`
+ *   writes zero rows when the record is ALREADY archived — and also when RLS
+ *   refused. On zero rows the primitive re-reads the row by id: visible and
+ *   already in the target state → success (the re-read row is returned);
+ *   invisible or still live → the plain refusal.
+ *
+ * - COMPARE-AND-SET (`compareAndSet: true`): `.eq("status", "pending")`,
+ *   `.is("answered_at", null)`… zero rows means someone else got there first.
+ *   That is still told to the person: "This answer was already handled —
+ *   refresh to see the latest." (`WriteDidNotLandError.reason === "taken"`).
+ *
+ * Optimistic-concurrency edits with a `version` token use `guardedUpdate`
+ * from `@ai-matrx/data/db`, which classifies zero rows as conflict or gone.
+ * A bulk `.in(...)` write is not a single-record write.
+ *
+ * Guard: `pnpm check:single-record-writes` (scripts/check-single-record-writes.ts)
+ * fails on a new single-record update/delete that judges success by error alone.
+ */
+
+/** The verb the person asked for. Drives the refusal sentence. */
+type WriteOneAction = "save" | "update" | "rename" | "move" | "delete" | "remove" | "archive" | "restore" | "publish" | "unpublish" | "change";
+interface WriteOneOptions<Row = unknown> {
+    /** What the person asked for: "delete", "save", "archive"… */
+    action: WriteOneAction;
+    /** What it is, in the person's words: "card", "note", "saved view". */
+    noun: string;
+    /**
+     * Idempotent mode. On zero rows, `reread()` the record by id (end it in
+     * `.maybeSingle()`); when it is visible and `isDone(row)`, the write is a
+     * success and that row is returned. Otherwise the plain refusal.
+     */
+    alreadyDone?: {
+        reread: () => PromiseLike<{
+            data: Row | null;
+            error: unknown;
+        }>;
+        isDone: (row: Row) => boolean;
+    };
+    /** Compare-and-set mode: zero rows means someone else got there first. */
+    compareAndSet?: boolean;
+}
+/** Why nothing was written: refused/gone, or another writer took it first. */
+type WriteDidNotLandReason = "refused" | "taken";
+/** Zero rows were written: the record is gone, or the person may not change it. */
+declare class WriteDidNotLandError extends WriteRefusedError {
+    readonly action: WriteOneAction;
+    readonly noun: string;
+    readonly reason: WriteDidNotLandReason;
+    constructor({ action, noun }: Pick<WriteOneOptions, "action" | "noun">, reason?: WriteDidNotLandReason);
+}
+/** Structural shape of an awaited supabase-js builder that ended in `.select()`. */
+interface RowsResponse<Row> {
+    data: Row[] | null;
+    error: unknown;
+}
+/**
+ * Run a single-record write and prove it landed. Returns the first written
+ * row; throws the database error as is, or `WriteDidNotLandError` on zero rows.
+ */
+declare function writeOne<Row>(write: PromiseLike<RowsResponse<Row>>, options: WriteOneOptions<Row>): Promise<Row>;
+type TryWriteOneResult<Row> = {
+    row: Row;
+    error: null;
+} | {
+    row: null;
+    error: Error;
+};
+/** `writeOne` for services that return results instead of throwing. */
+declare function tryWriteOne<Row>(write: PromiseLike<RowsResponse<Row>>, options: WriteOneOptions<Row>): Promise<TryWriteOneResult<Row>>;
+/**
+ * The HTTP status a route handler answers with for a failed write: the
+ * refusal's own status (403 refused / 409 taken) for `WriteDidNotLandError`,
+ * Database authorization/not-found/conflict codes retain their HTTP meaning;
+ * unknown failures remain 500. Server twin of the client's toast path.
+ */
+declare function writeFailureStatus(error: unknown): number;
+/**
+ * Several single-record writes where some did not land. The message names how
+ * many of how many failed and why (the first reason); `failures` keeps each
+ * record id with its own sentence so a screen can mark exactly those rows.
+ */
+declare class BulkWriteError extends Error {
+    readonly failures: {
+        id: string;
+        message: string;
+    }[];
+    readonly attempted: number;
+    constructor(failures: {
+        id: string;
+        message: string;
+    }[], attempted: number);
+}
+type WriteOneRowResult<Row> = {
+    data: Row;
+    error: null;
+} | {
+    data: null;
+    error: PostgrestError;
+};
+/**
+ * The drop-in for `.update(…).eq("id", …).select(…).single()` (and the
+ * `.maybeSingle()` twin whose caller never looks at `data`): same
+ * `{ data, error }` shape, same `PostgrestError` type, same `PGRST116` code on
+ * zero rows — but the message is the person's sentence ("Nothing was updated:
+ * this deal no longer exists, or your access does not allow updating it.")
+ * instead of PostgREST's "JSON object requested, multiple (or no) rows
+ * returned", which every screen rendered as a vague failure.
+ *
+ *   const { data, error } = await writeOneRow(
+ *     db.from("deal").update(patch).eq("id", id).select("*"),
+ *     { action: "update", noun: "deal" },
+ *   );
+ *
+ * Guard: `pnpm check:single-record-writes` flags the bare `.select().single()`
+ * shape on a write.
+ */
+declare function writeOneRow<Row>(write: PromiseLike<RowsResponse<Row>>, options: Pick<WriteOneOptions, "action" | "noun" | "compareAndSet">): Promise<WriteOneRowResult<Row>>;
+
+export { type ActiveOrgCookie, type ActiveOrgCookieOptions, type ActiveOrgSelection, type AuthRetryableResult, BulkWriteError, type CreateActiveOrgCookieArgs, type CreateOAuthRefreshFetchArgs, type CreateSessionRetryOptions, DEFAULT_ACTIVE_ORG_COOKIE_MAX_AGE, DEFAULT_ACTIVE_ORG_COOKIE_NAME, type GuardedUpdateArgs, type GuardedUpdateResult, IncompleteReadError, type JsonObject, type MergeJsonColumnArgs, type MergeJsonColumnResult, type OAuthRefreshStorage, type PagedReadQuery, type PagedReadResult, type ReadAllRowsOptions, type ReadAllRowsRestOptions, type SessionSource, SessionUnavailableError, type TryWriteOneResult, type VersionedRow, WriteDidNotLandError, type WriteDidNotLandReason, type WriteFailureWords, type WriteOneAction, type WriteOneOptions, type WriteOneRowResult, WriteRefusedError, asJsonObject, assertWriteLanded, createActiveOrgCookie, createOAuthRefreshFetch, createSessionRetry, decodeActiveOrgSelection, decodeOAuthRefreshClaims, describeWriteFailure, encodeActiveOrgSelection, guardedUpdate, isMissingSessionError, mergeJsonColumn, personSentence, readAllRows, readAllRowsRest, serverMessageFromBody, tryReadAllRows, tryReadAllRowsRest, tryWriteOne, writeFailureStatus, writeOne, writeOneRow };

package/dist/db.d.ts

@@ -1,6 +1,7 @@
 import { MaybeSingleResponse } from './index.js';
 export { a as AuthCookie, b as AuthCookieOptions, A as AuthCookieValue, C as CreateAuthCookieArgs, D as DEFAULT_AUTH_COOKIE_NAME, R as ReconciledAuthCookies, c as createAuthCookie, p as parseCookieHeader } from './auth-cookie-BpgVyFw9.js';
 export { uniqueChannelTopic } from '@ai-matrx/realtime';
+import { PostgrestError } from '@supabase/supabase-js';
 import './credentials-B-rePKU7.js';
 import './net.js';
 
@@ -561,4 +562,203 @@ declare function decodeOAuthRefreshClaims(token: string): JwtClaims | null;
  */
 declare function createOAuthRefreshFetch(args: CreateOAuthRefreshFetchArgs): typeof globalThis.fetch;
 
-export { type ActiveOrgCookie, type ActiveOrgCookieOptions, type ActiveOrgSelection, type AuthRetryableResult, type CreateActiveOrgCookieArgs, type CreateOAuthRefreshFetchArgs, type CreateSessionRetryOptions, DEFAULT_ACTIVE_ORG_COOKIE_MAX_AGE, DEFAULT_ACTIVE_ORG_COOKIE_NAME, type GuardedUpdateArgs, type GuardedUpdateResult, IncompleteReadError, type JsonObject, type MergeJsonColumnArgs, type MergeJsonColumnResult, type OAuthRefreshStorage, type PagedReadQuery, type PagedReadResult, type ReadAllRowsOptions, type ReadAllRowsRestOptions, type SessionSource, SessionUnavailableError, type VersionedRow, asJsonObject, createActiveOrgCookie, createOAuthRefreshFetch, createSessionRetry, decodeActiveOrgSelection, decodeOAuthRefreshClaims, encodeActiveOrgSelection, guardedUpdate, isMissingSessionError, mergeJsonColumn, readAllRows, readAllRowsRest, tryReadAllRows, tryReadAllRowsRest };
+/** A non-2xx answer from a server, with the words already chosen. */
+declare class WriteRefusedError extends Error {
+    readonly status: number;
+    /** What the server said for a person, when it said something a person can read. */
+    readonly serverMessage: string | null;
+    /** The developer line (method, path, status, body) — for diagnostics, never for the screen. */
+    readonly technical: string;
+    constructor(args: {
+        status: number;
+        serverMessage?: string | null;
+        technical: string;
+    });
+}
+/** Pull a human sentence out of a FastAPI-style error body, or null when there is none. */
+declare function serverMessageFromBody(body: unknown): string | null;
+/**
+ * THE STORE'S OWN WORDS, WHEN IT SAID SOME (lane HANDOVER, 2026-09-27). A door that refuses raises a
+ * sentence for a person — `You can see this record, but "Allergies" is not yours to change.` — or the
+ * same sentence behind its own name (`cat_write: this category is not yours to change.`). Postgres's
+ * native refusals (`permission denied for table …`, `new row violates …`) are never that. This hands
+ * back the door's sentence, capitalised and ended, or null when the text is not a person's words.
+ * test@test.com's refused Allergies edit read "Permission denied" because the scopes mapper threw
+ * the door's sentence away for a fixed string.
+ */
+declare function personSentence(text: unknown): string | null;
+/**
+ * A direct Supabase write that matched no row answers WITHOUT an error (RLS filters the row out,
+ * or it is gone), so the screen would say "saved" over nothing. Pass the `.select()` rows of an
+ * update/upsert: zero rows is a refusal, said in words.
+ */
+declare function assertWriteLanded<T>(rows: T[] | T | null | undefined, technical: string): void;
+interface WriteFailureWords {
+    /** "Could not pause this schedule." */
+    title: string;
+    /** Why, in words, then the remedy. */
+    description: string;
+}
+/**
+ * The words for a failed write. `action` completes "Could not …" ("pause this schedule");
+ * `remedy` is what to do next ("Try again or open the schedule's activity.").
+ */
+declare function describeWriteFailure(err: unknown, { action, remedy }: {
+    action: string;
+    remedy?: string;
+}): WriteFailureWords;
+
+/**
+ * @ai-matrx/data/db — writeOne: THE single-record write that PROVES it landed.
+ *
+ * Ported verbatim from matrx-frontend `utils/supabase/writeOne.ts` (which now
+ * re-exports this module, so `WriteDidNotLandError` is ONE class everywhere).
+ *
+ * THE CLASS (flashcards, 2026-09-25). PostgREST answers an `.update()` or
+ * `.delete()` that row-level security filters to zero rows with
+ * `{ data: [], error: null }` — status 200, no error. A caller that judges
+ * success by `error == null` therefore tells the person "Card deleted" while
+ * nothing happened. The same is true when the row is already gone. Nothing
+ * fails silently: zero rows written is a refusal, and it is said in words.
+ *
+ * USE IT for every write aimed at ONE record (`.eq("id", …)`):
+ *
+ *   await writeOne(
+ *     supabase.from("notes").update({ label }).eq("id", noteId).select("id"),
+ *     { action: "rename", noun: "note" },
+ *   );
+ *
+ * - The builder MUST end in `.select(...)` — that is what makes PostgREST
+ *   return the rows it actually wrote. Select only what you need (`"id"` is
+ *   fine); the first written row is returned.
+ * - A database error is thrown AS IS (the PostgrestError), so existing error
+ *   handling and `describeWriteFailure` keep working.
+ * - Zero rows throws `WriteDidNotLandError` — a `WriteRefusedError` whose
+ *   message is already a sentence for a person:
+ *   "Nothing was deleted: this card no longer exists, or your access does not
+ *   allow deleting it."
+ * - `tryWriteOne` is the same check for result-style services that never
+ *   throw: it returns `{ row, error }`.
+ *
+ * TWO MODES for writes that carry an extra condition (coordinator ruling,
+ * 2026-09-25):
+ *
+ * - IDEMPOTENT (`alreadyDone`): an archive filtered `.is("deleted_at", null)`
+ *   writes zero rows when the record is ALREADY archived — and also when RLS
+ *   refused. On zero rows the primitive re-reads the row by id: visible and
+ *   already in the target state → success (the re-read row is returned);
+ *   invisible or still live → the plain refusal.
+ *
+ * - COMPARE-AND-SET (`compareAndSet: true`): `.eq("status", "pending")`,
+ *   `.is("answered_at", null)`… zero rows means someone else got there first.
+ *   That is still told to the person: "This answer was already handled —
+ *   refresh to see the latest." (`WriteDidNotLandError.reason === "taken"`).
+ *
+ * Optimistic-concurrency edits with a `version` token use `guardedUpdate`
+ * from `@ai-matrx/data/db`, which classifies zero rows as conflict or gone.
+ * A bulk `.in(...)` write is not a single-record write.
+ *
+ * Guard: `pnpm check:single-record-writes` (scripts/check-single-record-writes.ts)
+ * fails on a new single-record update/delete that judges success by error alone.
+ */
+
+/** The verb the person asked for. Drives the refusal sentence. */
+type WriteOneAction = "save" | "update" | "rename" | "move" | "delete" | "remove" | "archive" | "restore" | "publish" | "unpublish" | "change";
+interface WriteOneOptions<Row = unknown> {
+    /** What the person asked for: "delete", "save", "archive"… */
+    action: WriteOneAction;
+    /** What it is, in the person's words: "card", "note", "saved view". */
+    noun: string;
+    /**
+     * Idempotent mode. On zero rows, `reread()` the record by id (end it in
+     * `.maybeSingle()`); when it is visible and `isDone(row)`, the write is a
+     * success and that row is returned. Otherwise the plain refusal.
+     */
+    alreadyDone?: {
+        reread: () => PromiseLike<{
+            data: Row | null;
+            error: unknown;
+        }>;
+        isDone: (row: Row) => boolean;
+    };
+    /** Compare-and-set mode: zero rows means someone else got there first. */
+    compareAndSet?: boolean;
+}
+/** Why nothing was written: refused/gone, or another writer took it first. */
+type WriteDidNotLandReason = "refused" | "taken";
+/** Zero rows were written: the record is gone, or the person may not change it. */
+declare class WriteDidNotLandError extends WriteRefusedError {
+    readonly action: WriteOneAction;
+    readonly noun: string;
+    readonly reason: WriteDidNotLandReason;
+    constructor({ action, noun }: Pick<WriteOneOptions, "action" | "noun">, reason?: WriteDidNotLandReason);
+}
+/** Structural shape of an awaited supabase-js builder that ended in `.select()`. */
+interface RowsResponse<Row> {
+    data: Row[] | null;
+    error: unknown;
+}
+/**
+ * Run a single-record write and prove it landed. Returns the first written
+ * row; throws the database error as is, or `WriteDidNotLandError` on zero rows.
+ */
+declare function writeOne<Row>(write: PromiseLike<RowsResponse<Row>>, options: WriteOneOptions<Row>): Promise<Row>;
+type TryWriteOneResult<Row> = {
+    row: Row;
+    error: null;
+} | {
+    row: null;
+    error: Error;
+};
+/** `writeOne` for services that return results instead of throwing. */
+declare function tryWriteOne<Row>(write: PromiseLike<RowsResponse<Row>>, options: WriteOneOptions<Row>): Promise<TryWriteOneResult<Row>>;
+/**
+ * The HTTP status a route handler answers with for a failed write: the
+ * refusal's own status (403 refused / 409 taken) for `WriteDidNotLandError`,
+ * Database authorization/not-found/conflict codes retain their HTTP meaning;
+ * unknown failures remain 500. Server twin of the client's toast path.
+ */
+declare function writeFailureStatus(error: unknown): number;
+/**
+ * Several single-record writes where some did not land. The message names how
+ * many of how many failed and why (the first reason); `failures` keeps each
+ * record id with its own sentence so a screen can mark exactly those rows.
+ */
+declare class BulkWriteError extends Error {
+    readonly failures: {
+        id: string;
+        message: string;
+    }[];
+    readonly attempted: number;
+    constructor(failures: {
+        id: string;
+        message: string;
+    }[], attempted: number);
+}
+type WriteOneRowResult<Row> = {
+    data: Row;
+    error: null;
+} | {
+    data: null;
+    error: PostgrestError;
+};
+/**
+ * The drop-in for `.update(…).eq("id", …).select(…).single()` (and the
+ * `.maybeSingle()` twin whose caller never looks at `data`): same
+ * `{ data, error }` shape, same `PostgrestError` type, same `PGRST116` code on
+ * zero rows — but the message is the person's sentence ("Nothing was updated:
+ * this deal no longer exists, or your access does not allow updating it.")
+ * instead of PostgREST's "JSON object requested, multiple (or no) rows
+ * returned", which every screen rendered as a vague failure.
+ *
+ *   const { data, error } = await writeOneRow(
+ *     db.from("deal").update(patch).eq("id", id).select("*"),
+ *     { action: "update", noun: "deal" },
+ *   );
+ *
+ * Guard: `pnpm check:single-record-writes` flags the bare `.select().single()`
+ * shape on a write.
+ */
+declare function writeOneRow<Row>(write: PromiseLike<RowsResponse<Row>>, options: Pick<WriteOneOptions, "action" | "noun" | "compareAndSet">): Promise<WriteOneRowResult<Row>>;
+
+export { type ActiveOrgCookie, type ActiveOrgCookieOptions, type ActiveOrgSelection, type AuthRetryableResult, BulkWriteError, type CreateActiveOrgCookieArgs, type CreateOAuthRefreshFetchArgs, type CreateSessionRetryOptions, DEFAULT_ACTIVE_ORG_COOKIE_MAX_AGE, DEFAULT_ACTIVE_ORG_COOKIE_NAME, type GuardedUpdateArgs, type GuardedUpdateResult, IncompleteReadError, type JsonObject, type MergeJsonColumnArgs, type MergeJsonColumnResult, type OAuthRefreshStorage, type PagedReadQuery, type PagedReadResult, type ReadAllRowsOptions, type ReadAllRowsRestOptions, type SessionSource, SessionUnavailableError, type TryWriteOneResult, type VersionedRow, WriteDidNotLandError, type WriteDidNotLandReason, type WriteFailureWords, type WriteOneAction, type WriteOneOptions, type WriteOneRowResult, WriteRefusedError, asJsonObject, assertWriteLanded, createActiveOrgCookie, createOAuthRefreshFetch, createSessionRetry, decodeActiveOrgSelection, decodeOAuthRefreshClaims, describeWriteFailure, encodeActiveOrgSelection, guardedUpdate, isMissingSessionError, mergeJsonColumn, personSentence, readAllRows, readAllRowsRest, serverMessageFromBody, tryReadAllRows, tryReadAllRowsRest, tryWriteOne, writeFailureStatus, writeOne, writeOneRow };