@ai-matrx/data 0.22.33 → 0.23.0

package/dist/db.d.cts

@@ -1,7 +1,7 @@
 import { MaybeSingleResponse } from './index.cjs';
 export { a as AuthCookie, b as AuthCookieOptions, A as AuthCookieValue, C as CreateAuthCookieArgs, D as DEFAULT_AUTH_COOKIE_NAME, R as ReconciledAuthCookies, c as createAuthCookie, p as parseCookieHeader } from './auth-cookie-D4QjVz7W.cjs';
 export { uniqueChannelTopic } from '@ai-matrx/realtime';
-import { PostgrestError } from '@supabase/supabase-js';
+import { PostgrestError as PostgrestError$1 } from '@supabase/supabase-js';
 import './credentials-B-rePKU7.cjs';
 import './net.cjs';
 
@@ -740,7 +740,7 @@ type WriteOneRowResult<Row> = {
     error: null;
 } | {
     data: null;
-    error: PostgrestError;
+    error: PostgrestError$1;
 };
 /**
  * The drop-in for `.update(…).eq("id", …).select(…).single()` (and the
@@ -811,4 +811,221 @@ declare class RecordUnavailableError extends Error {
 declare function recordUnavailableMessage(entity: string, reason: RecordUnavailableReason): string;
 declare function isRecordUnavailableError(value: unknown): value is RecordUnavailableError;
 
-export { type ActiveOrgCookie, type ActiveOrgCookieOptions, type ActiveOrgSelection, type AuthRetryableResult, BulkWriteError, type CreateActiveOrgCookieArgs, type CreateOAuthRefreshFetchArgs, type CreateSessionRetryOptions, DEFAULT_ACTIVE_ORG_COOKIE_MAX_AGE, DEFAULT_ACTIVE_ORG_COOKIE_NAME, type GuardedUpdateArgs, type GuardedUpdateResult, IncompleteReadError, type JsonObject, type MergeJsonColumnArgs, type MergeJsonColumnResult, type OAuthRefreshStorage, type PagedReadQuery, type PagedReadResult, type ReadAllRowsOptions, type ReadAllRowsRestOptions, RecordUnavailableError, type RecordUnavailableReason, type RecordUnavailableResolution, type SessionSource, SessionUnavailableError, type TryWriteOneResult, type VersionedRow, WriteDidNotLandError, type WriteDidNotLandReason, type WriteFailureWords, type WriteOneAction, type WriteOneOptions, type WriteOneRowResult, WriteRefusedError, asJsonObject, assertWriteLanded, createActiveOrgCookie, createOAuthRefreshFetch, createSessionRetry, decodeActiveOrgSelection, decodeOAuthRefreshClaims, describeWriteFailure, encodeActiveOrgSelection, guardedUpdate, isMissingSessionError, isRecordUnavailableError, mergeJsonColumn, personSentence, readAllRows, readAllRowsRest, recordUnavailableMessage, serverMessageFromBody, tryReadAllRows, tryReadAllRowsRest, tryWriteOne, writeFailureStatus, writeOne, writeOneRow };
+/** Registry type (`platform.entity_types.type`); null = untyped or no registry row. */
+type TableType = "entity" | "detail" | "ledger" | "reference" | "system" | "restricted" | "deprecated";
+type OrgRule = {
+    readonly rule: "binding";
+} | {
+    readonly rule: "parent";
+    readonly parent: string;
+    readonly via: string;
+} | {
+    readonly rule: "column";
+} | {
+    readonly rule: "none";
+};
+/** Phantom carrier for the generated row types — never present at runtime. */
+declare const ROW: unique symbol;
+interface TableDescriptor<Row = Record<string, unknown>, Insert = Record<string, unknown>, Update = Partial<Insert>> {
+    readonly schema: string;
+    readonly name: string;
+    readonly kind: "table" | "view" | "materialized_view";
+    readonly type: TableType | null;
+    readonly pk: readonly string[];
+    readonly org: OrgRule;
+    readonly versioned: boolean;
+    readonly softDelete: boolean;
+    /** The archive column, when the table archives instead of (or as well as) soft-deleting. */
+    readonly archive: "archived_at" | "is_archived" | null;
+    readonly readOnly: boolean;
+    readonly deletesRefused: boolean;
+    readonly readOnlyColumns: readonly string[];
+    readonly listScope: string | null;
+    readonly realtime: boolean;
+    readonly [ROW]?: {
+        row: Row;
+        insert: Insert;
+        update: Update;
+    };
+}
+interface FunctionDescriptor<Args = Record<string, unknown>, Result = unknown> {
+    readonly schema: string;
+    readonly name: string;
+    readonly roles: readonly ("anon" | "authenticated" | "service_role")[];
+    readonly registered: boolean;
+    readonly [ROW]?: {
+        args: Args;
+        result: Result;
+    };
+}
+type RowOf<T> = T extends TableDescriptor<infer R, any, any> ? R : never;
+type InsertOf<T> = T extends TableDescriptor<any, infer I, any> ? I : never;
+type UpdateOf<T> = T extends TableDescriptor<any, any, infer U> ? U : never;
+type ArgsOf<F> = F extends FunctionDescriptor<infer A, any> ? A : never;
+type ResultOf<F> = F extends FunctionDescriptor<any, infer R> ? R : never;
+interface PostgrestError {
+    message: string;
+    code?: string;
+    details?: string | null;
+    hint?: string | null;
+}
+interface Resp<T> {
+    data: T | null;
+    error: PostgrestError | null;
+    count?: number | null;
+}
+/** The slice of a supabase-js query builder the doors use (structural — any supabase-js 2.x client). */
+interface QueryLike extends PromiseLike<Resp<any>> {
+    select(columns?: string, opts?: {
+        count?: "exact" | "planned" | "estimated";
+        head?: boolean;
+    }): QueryLike;
+    insert(values: unknown): QueryLike;
+    update(values: unknown): QueryLike;
+    delete(): QueryLike;
+    eq(column: string, value: unknown): QueryLike;
+    order(column: string, opts?: {
+        ascending?: boolean;
+    }): QueryLike;
+    range(from: number, to: number): QueryLike;
+    maybeSingle(): PromiseLike<Resp<any>>;
+    single(): PromiseLike<Resp<any>>;
+}
+/** The slice of a supabase-js client the doors use. */
+interface SupabaseLike {
+    schema(name: string): {
+        from(table: string): QueryLike;
+        rpc(fn: string, args?: Record<string, unknown>): PromiseLike<Resp<any>>;
+    };
+    auth?: {
+        getSession(): Promise<{
+            data: {
+                session: {
+                    access_token: string;
+                } | null;
+            };
+        }>;
+        onAuthStateChange(cb: (event: string, session: unknown) => void): {
+            data: {
+                subscription: {
+                    unsubscribe(): void;
+                };
+            };
+        };
+    };
+}
+/** The credential shape `@ai-matrx/api`'s `CredentialsPort` accepts (structural; data owns the session). */
+interface UserCredentialsPort {
+    get(): Promise<{
+        kind: "user";
+        accessToken: string;
+    } | null>;
+    onChange?(cb: () => void): () => void;
+}
+interface Db {
+    readonly client: SupabaseLike;
+    readonly role: "user" | "service";
+    /** The active organization — where NEW entity rows are saved. Never a read filter. */
+    activeOrganization(): string | null;
+    /** The session as `@ai-matrx/api`'s `user` credential (one sign-in feeds both lanes). */
+    readonly credentials: UserCredentialsPort;
+}
+interface CreateDbOptions {
+    /** The app's existing Supabase client (browser, RSC, route or the host's chat client). */
+    client: SupabaseLike;
+    /** Where new entity rows are saved. Read lazily on every insert; never consulted by a read. */
+    organization?: () => string | null | undefined;
+}
+/** The one database connection for a signed-in (or anonymous) person. */
+declare function createDb(options: CreateDbOptions): Db;
+/**
+ * Service-role doors — servers only. No session, no binding: every entity insert
+ * names its organization. Throws in a browser bundle.
+ */
+declare function createServiceDb(options: {
+    client: SupabaseLike;
+}): Db;
+declare class DoorRefusedError extends Error {
+    readonly door: string;
+    readonly reason: string;
+    constructor(door: string, reason: string);
+}
+declare class DatabaseError extends Error {
+    readonly door: string;
+    readonly cause: PostgrestError;
+    constructor(door: string, cause: PostgrestError);
+}
+type Op = "read" | "insert" | "update" | "remove" | "archive";
+/** Refuse before the wire when the descriptor's rules do not open this door. */
+declare function assertDoor(db: Db, table: TableDescriptor<any, any, any>, op: Op): void;
+/** One row by primary key (a composite key takes `{ col: value }`), or null. */
+declare function read<T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown, columns?: string): Promise<RowOf<T> | null>;
+/** A filter callback — the same builder `readAllRows` callers write today (`q => q.or(…).gte(…)`). */
+type Where = (q: any) => any;
+/** EVERY matching row, paged past the 1,000-row cap; throws on a short read. */
+declare function listAll<T extends TableDescriptor<any, any, any>>(db: Db, table: T, where?: Where, opts?: {
+    columns?: string;
+    orderBy?: string;
+    pageSize?: number;
+    maxRows?: number;
+}): Promise<RowOf<T>[]>;
+/** One explicit window (`from`..`to`, inclusive) plus the exact total. */
+declare function page<T extends TableDescriptor<any, any, any>>(db: Db, table: T, window: {
+    from: number;
+    to: number;
+    where?: Where;
+    columns?: string;
+    orderBy?: string;
+    ascending?: boolean;
+}): Promise<{
+    rows: RowOf<T>[];
+    total: number | null;
+}>;
+/** The exact count of matching rows (no rows transferred). */
+declare function count<T extends TableDescriptor<any, any, any>>(db: Db, table: T, where?: Where): Promise<number>;
+/** Insert one row (or many) and return what the database stored. */
+declare function insert<T extends TableDescriptor<any, any, any>>(db: Db, table: T, values: InsertOf<T>): Promise<RowOf<T>>;
+declare function insert<T extends TableDescriptor<any, any, any>>(db: Db, table: T, values: InsertOf<T>[]): Promise<RowOf<T>[]>;
+type UpdateGuard = {
+    expectedVersion: number;
+} | {
+    overwrite: true;
+};
+/**
+ * Update one row by primary key. On a versioned table the guard is required:
+ * `{ expectedVersion }` (a conflict comes back, never a silent overwrite) or
+ * `{ overwrite: true }`.
+ */
+declare function update<T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown, patch: UpdateOf<T>, guard?: UpdateGuard): Promise<GuardedUpdateResult<RowOf<T> & {
+    version: number;
+}> | {
+    status: "saved";
+    row: RowOf<T>;
+} | {
+    status: "not_found";
+}>;
+/**
+ * Remove one row the way the table removes: soft delete (`deleted_at`) where it
+ * has one; an archive-only table refuses (use `archive`); a hard delete only where
+ * the table has neither.
+ */
+declare function remove<T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown): Promise<"soft_deleted" | "deleted" | "not_found">;
+/** Archive (or, with `restore`, bring back) one row by the table's archive column. */
+declare function archive<T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown, opts?: {
+    restore?: boolean;
+}): Promise<RowOf<T> | null>;
+/** Bring back an archived or soft-deleted row. */
+declare const restore: <T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown) => Promise<RowOf<T> | null>;
+/** Call a database function through its generated door (PostgREST chooses an overload by argument names). */
+declare function call<F extends FunctionDescriptor<any, any>>(db: Db, fn: F, args: ArgsOf<F>): Promise<ResultOf<F>>;
+/** The compact flags index `matrx-data generate --flags-index` writes: "schema.table" → descriptor. */
+type FlagsIndex = Readonly<Record<string, TableDescriptor>>;
+/** The door for a table whose name arrives at runtime — loosely typed, the same rules. */
+declare function tableByName(index: FlagsIndex, name: string): TableDescriptor;
+/** The `postgres_changes` filter for a table — only published tables have one (an unpublished table delivers nothing). */
+declare function changesOf(table: TableDescriptor<any, any, any>): {
+    schema: string;
+    table: string;
+};
+
+export { type ActiveOrgCookie, type ActiveOrgCookieOptions, type ActiveOrgSelection, type ArgsOf, type AuthRetryableResult, BulkWriteError, type CreateActiveOrgCookieArgs, type CreateDbOptions, type CreateOAuthRefreshFetchArgs, type CreateSessionRetryOptions, DEFAULT_ACTIVE_ORG_COOKIE_MAX_AGE, DEFAULT_ACTIVE_ORG_COOKIE_NAME, DatabaseError, type Db, DoorRefusedError, type FlagsIndex, type FunctionDescriptor, type GuardedUpdateArgs, type GuardedUpdateResult, IncompleteReadError, type InsertOf, type JsonObject, type MergeJsonColumnArgs, type MergeJsonColumnResult, type OAuthRefreshStorage, type OrgRule, type PagedReadQuery, type PagedReadResult, type QueryLike, type ReadAllRowsOptions, type ReadAllRowsRestOptions, RecordUnavailableError, type RecordUnavailableReason, type RecordUnavailableResolution, type ResultOf, type RowOf, type SessionSource, SessionUnavailableError, type SupabaseLike, type TableDescriptor, type TableType, type TryWriteOneResult, type UpdateGuard, type UpdateOf, type UserCredentialsPort, type VersionedRow, type Where, WriteDidNotLandError, type WriteDidNotLandReason, type WriteFailureWords, type WriteOneAction, type WriteOneOptions, type WriteOneRowResult, WriteRefusedError, archive, asJsonObject, assertDoor, assertWriteLanded, call, changesOf, count, createActiveOrgCookie, createDb, createOAuthRefreshFetch, createServiceDb, createSessionRetry, decodeActiveOrgSelection, decodeOAuthRefreshClaims, describeWriteFailure, encodeActiveOrgSelection, guardedUpdate, insert, isMissingSessionError, isRecordUnavailableError, listAll, mergeJsonColumn, page, personSentence, read, readAllRows, readAllRowsRest, recordUnavailableMessage, remove, restore, serverMessageFromBody, tableByName, tryReadAllRows, tryReadAllRowsRest, tryWriteOne, update, writeFailureStatus, writeOne, writeOneRow };

package/dist/db.d.ts

@@ -1,7 +1,7 @@
 import { MaybeSingleResponse } from './index.js';
 export { a as AuthCookie, b as AuthCookieOptions, A as AuthCookieValue, C as CreateAuthCookieArgs, D as DEFAULT_AUTH_COOKIE_NAME, R as ReconciledAuthCookies, c as createAuthCookie, p as parseCookieHeader } from './auth-cookie-D4QjVz7W.js';
 export { uniqueChannelTopic } from '@ai-matrx/realtime';
-import { PostgrestError } from '@supabase/supabase-js';
+import { PostgrestError as PostgrestError$1 } from '@supabase/supabase-js';
 import './credentials-B-rePKU7.js';
 import './net.js';
 
@@ -740,7 +740,7 @@ type WriteOneRowResult<Row> = {
     error: null;
 } | {
     data: null;
-    error: PostgrestError;
+    error: PostgrestError$1;
 };
 /**
  * The drop-in for `.update(…).eq("id", …).select(…).single()` (and the
@@ -811,4 +811,221 @@ declare class RecordUnavailableError extends Error {
 declare function recordUnavailableMessage(entity: string, reason: RecordUnavailableReason): string;
 declare function isRecordUnavailableError(value: unknown): value is RecordUnavailableError;
 
-export { type ActiveOrgCookie, type ActiveOrgCookieOptions, type ActiveOrgSelection, type AuthRetryableResult, BulkWriteError, type CreateActiveOrgCookieArgs, type CreateOAuthRefreshFetchArgs, type CreateSessionRetryOptions, DEFAULT_ACTIVE_ORG_COOKIE_MAX_AGE, DEFAULT_ACTIVE_ORG_COOKIE_NAME, type GuardedUpdateArgs, type GuardedUpdateResult, IncompleteReadError, type JsonObject, type MergeJsonColumnArgs, type MergeJsonColumnResult, type OAuthRefreshStorage, type PagedReadQuery, type PagedReadResult, type ReadAllRowsOptions, type ReadAllRowsRestOptions, RecordUnavailableError, type RecordUnavailableReason, type RecordUnavailableResolution, type SessionSource, SessionUnavailableError, type TryWriteOneResult, type VersionedRow, WriteDidNotLandError, type WriteDidNotLandReason, type WriteFailureWords, type WriteOneAction, type WriteOneOptions, type WriteOneRowResult, WriteRefusedError, asJsonObject, assertWriteLanded, createActiveOrgCookie, createOAuthRefreshFetch, createSessionRetry, decodeActiveOrgSelection, decodeOAuthRefreshClaims, describeWriteFailure, encodeActiveOrgSelection, guardedUpdate, isMissingSessionError, isRecordUnavailableError, mergeJsonColumn, personSentence, readAllRows, readAllRowsRest, recordUnavailableMessage, serverMessageFromBody, tryReadAllRows, tryReadAllRowsRest, tryWriteOne, writeFailureStatus, writeOne, writeOneRow };
+/** Registry type (`platform.entity_types.type`); null = untyped or no registry row. */
+type TableType = "entity" | "detail" | "ledger" | "reference" | "system" | "restricted" | "deprecated";
+type OrgRule = {
+    readonly rule: "binding";
+} | {
+    readonly rule: "parent";
+    readonly parent: string;
+    readonly via: string;
+} | {
+    readonly rule: "column";
+} | {
+    readonly rule: "none";
+};
+/** Phantom carrier for the generated row types — never present at runtime. */
+declare const ROW: unique symbol;
+interface TableDescriptor<Row = Record<string, unknown>, Insert = Record<string, unknown>, Update = Partial<Insert>> {
+    readonly schema: string;
+    readonly name: string;
+    readonly kind: "table" | "view" | "materialized_view";
+    readonly type: TableType | null;
+    readonly pk: readonly string[];
+    readonly org: OrgRule;
+    readonly versioned: boolean;
+    readonly softDelete: boolean;
+    /** The archive column, when the table archives instead of (or as well as) soft-deleting. */
+    readonly archive: "archived_at" | "is_archived" | null;
+    readonly readOnly: boolean;
+    readonly deletesRefused: boolean;
+    readonly readOnlyColumns: readonly string[];
+    readonly listScope: string | null;
+    readonly realtime: boolean;
+    readonly [ROW]?: {
+        row: Row;
+        insert: Insert;
+        update: Update;
+    };
+}
+interface FunctionDescriptor<Args = Record<string, unknown>, Result = unknown> {
+    readonly schema: string;
+    readonly name: string;
+    readonly roles: readonly ("anon" | "authenticated" | "service_role")[];
+    readonly registered: boolean;
+    readonly [ROW]?: {
+        args: Args;
+        result: Result;
+    };
+}
+type RowOf<T> = T extends TableDescriptor<infer R, any, any> ? R : never;
+type InsertOf<T> = T extends TableDescriptor<any, infer I, any> ? I : never;
+type UpdateOf<T> = T extends TableDescriptor<any, any, infer U> ? U : never;
+type ArgsOf<F> = F extends FunctionDescriptor<infer A, any> ? A : never;
+type ResultOf<F> = F extends FunctionDescriptor<any, infer R> ? R : never;
+interface PostgrestError {
+    message: string;
+    code?: string;
+    details?: string | null;
+    hint?: string | null;
+}
+interface Resp<T> {
+    data: T | null;
+    error: PostgrestError | null;
+    count?: number | null;
+}
+/** The slice of a supabase-js query builder the doors use (structural — any supabase-js 2.x client). */
+interface QueryLike extends PromiseLike<Resp<any>> {
+    select(columns?: string, opts?: {
+        count?: "exact" | "planned" | "estimated";
+        head?: boolean;
+    }): QueryLike;
+    insert(values: unknown): QueryLike;
+    update(values: unknown): QueryLike;
+    delete(): QueryLike;
+    eq(column: string, value: unknown): QueryLike;
+    order(column: string, opts?: {
+        ascending?: boolean;
+    }): QueryLike;
+    range(from: number, to: number): QueryLike;
+    maybeSingle(): PromiseLike<Resp<any>>;
+    single(): PromiseLike<Resp<any>>;
+}
+/** The slice of a supabase-js client the doors use. */
+interface SupabaseLike {
+    schema(name: string): {
+        from(table: string): QueryLike;
+        rpc(fn: string, args?: Record<string, unknown>): PromiseLike<Resp<any>>;
+    };
+    auth?: {
+        getSession(): Promise<{
+            data: {
+                session: {
+                    access_token: string;
+                } | null;
+            };
+        }>;
+        onAuthStateChange(cb: (event: string, session: unknown) => void): {
+            data: {
+                subscription: {
+                    unsubscribe(): void;
+                };
+            };
+        };
+    };
+}
+/** The credential shape `@ai-matrx/api`'s `CredentialsPort` accepts (structural; data owns the session). */
+interface UserCredentialsPort {
+    get(): Promise<{
+        kind: "user";
+        accessToken: string;
+    } | null>;
+    onChange?(cb: () => void): () => void;
+}
+interface Db {
+    readonly client: SupabaseLike;
+    readonly role: "user" | "service";
+    /** The active organization — where NEW entity rows are saved. Never a read filter. */
+    activeOrganization(): string | null;
+    /** The session as `@ai-matrx/api`'s `user` credential (one sign-in feeds both lanes). */
+    readonly credentials: UserCredentialsPort;
+}
+interface CreateDbOptions {
+    /** The app's existing Supabase client (browser, RSC, route or the host's chat client). */
+    client: SupabaseLike;
+    /** Where new entity rows are saved. Read lazily on every insert; never consulted by a read. */
+    organization?: () => string | null | undefined;
+}
+/** The one database connection for a signed-in (or anonymous) person. */
+declare function createDb(options: CreateDbOptions): Db;
+/**
+ * Service-role doors — servers only. No session, no binding: every entity insert
+ * names its organization. Throws in a browser bundle.
+ */
+declare function createServiceDb(options: {
+    client: SupabaseLike;
+}): Db;
+declare class DoorRefusedError extends Error {
+    readonly door: string;
+    readonly reason: string;
+    constructor(door: string, reason: string);
+}
+declare class DatabaseError extends Error {
+    readonly door: string;
+    readonly cause: PostgrestError;
+    constructor(door: string, cause: PostgrestError);
+}
+type Op = "read" | "insert" | "update" | "remove" | "archive";
+/** Refuse before the wire when the descriptor's rules do not open this door. */
+declare function assertDoor(db: Db, table: TableDescriptor<any, any, any>, op: Op): void;
+/** One row by primary key (a composite key takes `{ col: value }`), or null. */
+declare function read<T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown, columns?: string): Promise<RowOf<T> | null>;
+/** A filter callback — the same builder `readAllRows` callers write today (`q => q.or(…).gte(…)`). */
+type Where = (q: any) => any;
+/** EVERY matching row, paged past the 1,000-row cap; throws on a short read. */
+declare function listAll<T extends TableDescriptor<any, any, any>>(db: Db, table: T, where?: Where, opts?: {
+    columns?: string;
+    orderBy?: string;
+    pageSize?: number;
+    maxRows?: number;
+}): Promise<RowOf<T>[]>;
+/** One explicit window (`from`..`to`, inclusive) plus the exact total. */
+declare function page<T extends TableDescriptor<any, any, any>>(db: Db, table: T, window: {
+    from: number;
+    to: number;
+    where?: Where;
+    columns?: string;
+    orderBy?: string;
+    ascending?: boolean;
+}): Promise<{
+    rows: RowOf<T>[];
+    total: number | null;
+}>;
+/** The exact count of matching rows (no rows transferred). */
+declare function count<T extends TableDescriptor<any, any, any>>(db: Db, table: T, where?: Where): Promise<number>;
+/** Insert one row (or many) and return what the database stored. */
+declare function insert<T extends TableDescriptor<any, any, any>>(db: Db, table: T, values: InsertOf<T>): Promise<RowOf<T>>;
+declare function insert<T extends TableDescriptor<any, any, any>>(db: Db, table: T, values: InsertOf<T>[]): Promise<RowOf<T>[]>;
+type UpdateGuard = {
+    expectedVersion: number;
+} | {
+    overwrite: true;
+};
+/**
+ * Update one row by primary key. On a versioned table the guard is required:
+ * `{ expectedVersion }` (a conflict comes back, never a silent overwrite) or
+ * `{ overwrite: true }`.
+ */
+declare function update<T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown, patch: UpdateOf<T>, guard?: UpdateGuard): Promise<GuardedUpdateResult<RowOf<T> & {
+    version: number;
+}> | {
+    status: "saved";
+    row: RowOf<T>;
+} | {
+    status: "not_found";
+}>;
+/**
+ * Remove one row the way the table removes: soft delete (`deleted_at`) where it
+ * has one; an archive-only table refuses (use `archive`); a hard delete only where
+ * the table has neither.
+ */
+declare function remove<T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown): Promise<"soft_deleted" | "deleted" | "not_found">;
+/** Archive (or, with `restore`, bring back) one row by the table's archive column. */
+declare function archive<T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown, opts?: {
+    restore?: boolean;
+}): Promise<RowOf<T> | null>;
+/** Bring back an archived or soft-deleted row. */
+declare const restore: <T extends TableDescriptor<any, any, any>>(db: Db, table: T, id: unknown) => Promise<RowOf<T> | null>;
+/** Call a database function through its generated door (PostgREST chooses an overload by argument names). */
+declare function call<F extends FunctionDescriptor<any, any>>(db: Db, fn: F, args: ArgsOf<F>): Promise<ResultOf<F>>;
+/** The compact flags index `matrx-data generate --flags-index` writes: "schema.table" → descriptor. */
+type FlagsIndex = Readonly<Record<string, TableDescriptor>>;
+/** The door for a table whose name arrives at runtime — loosely typed, the same rules. */
+declare function tableByName(index: FlagsIndex, name: string): TableDescriptor;
+/** The `postgres_changes` filter for a table — only published tables have one (an unpublished table delivers nothing). */
+declare function changesOf(table: TableDescriptor<any, any, any>): {
+    schema: string;
+    table: string;
+};
+
+export { type ActiveOrgCookie, type ActiveOrgCookieOptions, type ActiveOrgSelection, type ArgsOf, type AuthRetryableResult, BulkWriteError, type CreateActiveOrgCookieArgs, type CreateDbOptions, type CreateOAuthRefreshFetchArgs, type CreateSessionRetryOptions, DEFAULT_ACTIVE_ORG_COOKIE_MAX_AGE, DEFAULT_ACTIVE_ORG_COOKIE_NAME, DatabaseError, type Db, DoorRefusedError, type FlagsIndex, type FunctionDescriptor, type GuardedUpdateArgs, type GuardedUpdateResult, IncompleteReadError, type InsertOf, type JsonObject, type MergeJsonColumnArgs, type MergeJsonColumnResult, type OAuthRefreshStorage, type OrgRule, type PagedReadQuery, type PagedReadResult, type QueryLike, type ReadAllRowsOptions, type ReadAllRowsRestOptions, RecordUnavailableError, type RecordUnavailableReason, type RecordUnavailableResolution, type ResultOf, type RowOf, type SessionSource, SessionUnavailableError, type SupabaseLike, type TableDescriptor, type TableType, type TryWriteOneResult, type UpdateGuard, type UpdateOf, type UserCredentialsPort, type VersionedRow, type Where, WriteDidNotLandError, type WriteDidNotLandReason, type WriteFailureWords, type WriteOneAction, type WriteOneOptions, type WriteOneRowResult, WriteRefusedError, archive, asJsonObject, assertDoor, assertWriteLanded, call, changesOf, count, createActiveOrgCookie, createDb, createOAuthRefreshFetch, createServiceDb, createSessionRetry, decodeActiveOrgSelection, decodeOAuthRefreshClaims, describeWriteFailure, encodeActiveOrgSelection, guardedUpdate, insert, isMissingSessionError, isRecordUnavailableError, listAll, mergeJsonColumn, page, personSentence, read, readAllRows, readAllRowsRest, recordUnavailableMessage, remove, restore, serverMessageFromBody, tableByName, tryReadAllRows, tryReadAllRowsRest, tryWriteOne, update, writeFailureStatus, writeOne, writeOneRow };