@ai-matrx/records 0.24.0 → 0.27.0

package/dist/index.cjs

@@ -38,6 +38,8 @@ __export(src_exports, {
   PARITY_FIELD_TYPES: () => PARITY_FIELD_TYPES,
   PERMISSION_LEVELS: () => PERMISSION_LEVELS,
   PER_VALUE_ACCESS_WORDS: () => PER_VALUE_ACCESS_WORDS,
+  PIPELINE_RULE_KINDS: () => PIPELINE_RULE_KINDS,
+  REFUSALS_WORTH_REPEATING: () => REFUSALS_WORTH_REPEATING,
   RELATION_BINDINGS: () => RELATION_BINDINGS,
   RELATION_CARDINALITIES: () => RELATION_CARDINALITIES,
   RELATION_FLAVORS: () => RELATION_FLAVORS,
@@ -61,11 +63,17 @@ __export(src_exports, {
   err: () => err,
   highestLevel: () => highestLevel,
   holdsARetiredChoice: () => holdsARetiredChoice,
+  indexedDbStore: () => indexedDbStore,
+  isDecided: () => isDecided,
   isRecordsErr: () => isRecordsErr,
   isTheChosen: () => isTheChosen,
   looksLikeAnId: () => looksLikeAnId,
+  mayDrag: () => mayDrag,
   measureKey: () => measureKey,
+  memoryStore: () => memoryStore,
+  mintClientKey: () => mintClientKey,
   ok: () => ok,
+  openCaptureQueue: () => openCaptureQueue,
   optionKey: () => optionKey,
   optionLabel: () => optionLabel,
   portalPath: () => portalPath,
@@ -200,6 +208,12 @@ function looksLikeAnId(value) {
   return typeof value === "string" && UUID.test(value);
 }
 
+// src/pipeline.ts
+var PIPELINE_RULE_KINDS = ["moves", "requires", "who", "limit", "entry"];
+function mayDrag(level) {
+  return level === "editor" || level === "admin" || level === "owner";
+}
+
 // src/rule.ts
 function publicFormPath(formId) {
   return `/f/${formId}`;
@@ -215,6 +229,285 @@ function measureKey(measure) {
   return measure.op === "count" ? "count" : `${measure.op}_${measure.key ?? ""}`;
 }
 
+// src/capture-queue.ts
+var DB_NAME = "matrx-capture";
+var DB_VERSION = 1;
+var ITEMS = "captures";
+var META = "meta";
+var REFUSALS_WORTH_REPEATING = /* @__PURE__ */ new Set([
+  "stale_read",
+  "timed_out",
+  "store_limit"
+]);
+var SQLSTATES_WORTH_REPEATING = /* @__PURE__ */ new Set(["40001", "57014", "53400"]);
+function isDecided(error) {
+  if (!error) return false;
+  const { code, sqlstate } = error;
+  if (code && REFUSALS_WORTH_REPEATING.has(code)) return false;
+  if (sqlstate && SQLSTATES_WORTH_REPEATING.has(sqlstate)) return false;
+  return !!(code || sqlstate);
+}
+function mintClientKey() {
+  const c = typeof crypto !== "undefined" ? crypto : void 0;
+  if (c && typeof c.randomUUID === "function") return `cap-${c.randomUUID()}`;
+  if (c && typeof c.getRandomValues === "function") {
+    const b = c.getRandomValues(new Uint8Array(16));
+    return `cap-${Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("")}`;
+  }
+  return `cap-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 12)}`;
+}
+function indexedDbStore(name = DB_NAME) {
+  const idb = typeof globalThis !== "undefined" ? globalThis.indexedDB : void 0;
+  if (!idb) return null;
+  const open = () => new Promise((resolve, reject) => {
+    const req = idb.open(name, DB_VERSION);
+    req.onupgradeneeded = () => {
+      const db = req.result;
+      if (!db.objectStoreNames.contains(ITEMS)) db.createObjectStore(ITEMS, { keyPath: "client_key" });
+      if (!db.objectStoreNames.contains(META)) db.createObjectStore(META);
+    };
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  });
+  const run = (store, mode, fn) => open().then(
+    (db) => new Promise((resolve, reject) => {
+      const tx = db.transaction(store, mode);
+      const req = fn(tx.objectStore(store));
+      req.onsuccess = () => resolve(req.result);
+      req.onerror = () => reject(req.error);
+      tx.oncomplete = () => db.close();
+    })
+  );
+  return {
+    all: () => run(ITEMS, "readonly", (s) => s.getAll()),
+    put: (item) => run(ITEMS, "readwrite", (s) => s.put(item)).then(() => void 0),
+    remove: (key) => run(ITEMS, "readwrite", (s) => s.delete(key)).then(() => void 0),
+    meta: (key) => run(META, "readonly", (s) => s.get(key)).then((v) => v ?? null),
+    setMeta: (key, value) => run(META, "readwrite", (s) => s.put(value, key)).then(() => void 0)
+  };
+}
+function memoryStore() {
+  const rows = /* @__PURE__ */ new Map();
+  const meta = /* @__PURE__ */ new Map();
+  return {
+    all: async () => Array.from(rows.values()),
+    put: async (item) => void rows.set(item.client_key, item),
+    remove: async (key) => void rows.delete(key),
+    meta: async (key) => meta.get(key) ?? null,
+    setMeta: async (key, value) => void meta.set(key, value)
+  };
+}
+function countOf(items) {
+  const c = { waiting: 0, sending: 0, refused: 0, landed: 0 };
+  for (const i of items) c[i.state] += 1;
+  return c;
+}
+function openCaptureQueue(opts) {
+  const now = opts.now ?? (() => /* @__PURE__ */ new Date());
+  const store = opts.store ?? indexedDbStore() ?? memoryStore();
+  let syncing = null;
+  let disposed = false;
+  const online = () => {
+    const nav = typeof navigator !== "undefined" ? navigator : void 0;
+    return nav ? nav.onLine !== false : true;
+  };
+  const announce = async () => {
+    if (!opts.onChange) return;
+    const items = await store.all();
+    opts.onChange(countOf(items), items);
+  };
+  const oldestFirst = (items) => items.slice().sort((a, b) => a.captured_at.localeCompare(b.captured_at));
+  const queue = {
+    async enqueue(input) {
+      const key = input.client_key ?? mintClientKey();
+      const item = {
+        client_key: key,
+        organization_id: input.organization_id,
+        sheet_id: input.sheet_id,
+        sheet_title: input.sheet_title,
+        answers: input.answers ?? {},
+        files: (input.files ?? []).map((f) => ({ ...f, uploaded: null })),
+        device: input.device ?? null,
+        captured_at: input.captured_at ?? now().toISOString(),
+        location: input.location ?? null,
+        state: "waiting",
+        attempts: 0,
+        last_error: null,
+        record_id: null,
+        replayed: false,
+        queued_at: now().toISOString(),
+        landed_at: null
+      };
+      await store.put(item);
+      await announce();
+      return key;
+    },
+    list: () => store.all().then(oldestFirst),
+    counts: () => store.all().then(countOf),
+    async sync() {
+      if (syncing) return syncing;
+      syncing = (async () => {
+        const report = {
+          attempted: 0,
+          landed: 0,
+          replayed: 0,
+          refused: 0,
+          deferred: 0,
+          outcomes: []
+        };
+        const pending = oldestFirst(await store.all()).filter((i) => i.state === "waiting" || i.state === "sending");
+        if (!online()) {
+          report.deferred = pending.length;
+          report.stopped_because = "There is no signal, so nothing was sent. Everything is still here.";
+          return report;
+        }
+        for (const item of pending) {
+          report.attempted += 1;
+          item.state = "sending";
+          item.attempts += 1;
+          await store.put(item);
+          await announce();
+          try {
+            for (const f of item.files) {
+              if (f.uploaded) continue;
+              f.uploaded = await opts.ports.uploadFile(f, item);
+              f.blob = null;
+              await store.put(item);
+            }
+            const refs = item.files.map((f) => ({
+              field: f.field,
+              name: f.name,
+              mime_type: f.mime_type,
+              size_bytes: f.size_bytes,
+              duration_ms: f.duration_ms ?? null,
+              file_id: f.uploaded?.file_id ?? null,
+              url: f.uploaded?.url ?? null
+            }));
+            const res = await opts.ports.submit({
+              sheet_id: item.sheet_id,
+              client_key: item.client_key,
+              answers: item.answers,
+              files: refs,
+              device: item.device,
+              captured_at: item.captured_at,
+              location: item.location
+            });
+            if (res.ok && res.data && res.data.record_id) {
+              item.state = "landed";
+              item.record_id = res.data.record_id;
+              item.replayed = !!res.data.replay;
+              item.landed_at = now().toISOString();
+              item.last_error = null;
+              report.landed += 1;
+              if (item.replayed) report.replayed += 1;
+              report.outcomes.push({
+                client_key: item.client_key,
+                state: item.state,
+                record_id: item.record_id,
+                replay: item.replayed,
+                says: res.data.message ?? null
+              });
+            } else if (res.ok && res.data && !res.data.record_id) {
+              item.state = "refused";
+              item.last_error = res.data.message ?? `This sheet is ${res.data.state}.`;
+              report.refused += 1;
+              report.outcomes.push({
+                client_key: item.client_key,
+                state: item.state,
+                record_id: null,
+                replay: false,
+                says: item.last_error
+              });
+            } else if (isDecided(res.error)) {
+              item.state = "refused";
+              item.last_error = res.error?.message ?? "The store refused this capture.";
+              report.refused += 1;
+              report.outcomes.push({
+                client_key: item.client_key,
+                state: item.state,
+                record_id: null,
+                replay: false,
+                says: item.last_error
+              });
+            } else {
+              item.state = "waiting";
+              item.last_error = res.error?.message ?? "It could not be sent just now.";
+              report.deferred += 1;
+              report.outcomes.push({
+                client_key: item.client_key,
+                state: item.state,
+                record_id: null,
+                replay: false,
+                says: item.last_error
+              });
+            }
+          } catch (err2) {
+            item.state = "waiting";
+            item.last_error = err2 instanceof Error ? err2.message : "It could not be sent just now.";
+            report.deferred += 1;
+            report.outcomes.push({
+              client_key: item.client_key,
+              state: item.state,
+              record_id: null,
+              replay: false,
+              says: item.last_error
+            });
+          }
+          await store.put(item);
+          await announce();
+          if (!online()) {
+            report.stopped_because = "The signal went away again. Everything still on the phone is still here.";
+            break;
+          }
+        }
+        await store.setMeta("last_synced_at", now().toISOString());
+        return report;
+      })();
+      try {
+        return await syncing;
+      } finally {
+        syncing = null;
+      }
+    },
+    async retry(clientKey, patch) {
+      const items = await store.all();
+      const item = items.find((i) => i.client_key === clientKey);
+      if (!item) return;
+      if (patch?.answers) item.answers = { ...item.answers, ...patch.answers };
+      item.state = "waiting";
+      item.last_error = null;
+      await store.put(item);
+      await announce();
+    },
+    async discard(clientKey) {
+      await store.remove(clientKey);
+      await announce();
+    },
+    async clearLanded() {
+      const items = await store.all();
+      const landed = items.filter((i) => i.state === "landed");
+      for (const i of landed) await store.remove(i.client_key);
+      await announce();
+      return landed.length;
+    },
+    lastSyncedAt: () => store.meta("last_synced_at"),
+    isOnline: online,
+    dispose() {
+      disposed = true;
+      if (typeof window !== "undefined" && handler) window.removeEventListener("online", handler);
+    }
+  };
+  let handler = null;
+  const auto = opts.autoSync ?? typeof window !== "undefined";
+  if (auto && typeof window !== "undefined") {
+    handler = () => {
+      if (!disposed) void queue.sync();
+    };
+    window.addEventListener("online", handler);
+  }
+  return queue;
+}
+
 // src/results.ts
 function isRecordsErr(result) {
   return result.ok === false;
@@ -247,6 +540,7 @@ var PARITY_FIELD_TYPES = [
   { parity_type: "url", behavior: "text", made_of: "text whose format is url, with the pattern Rule that makes the format enforceable" }
 ];
 var RULE_NODE_KINDS = [
+  { node: "actor_at_least", evaluated_by: "PIPELINES" },
   { node: "add", evaluated_by: "W1-RULE" },
   { node: "and", evaluated_by: "W1-RULE" },
   { node: "concat", evaluated_by: "W1-RULE" },
@@ -267,6 +561,8 @@ var RULE_NODE_KINDS = [
   { node: "or", evaluated_by: "W1-RULE" },
   { node: "parent_field", evaluated_by: "W1-RULE-APPLY" },
   { node: "present", evaluated_by: "W1-RULE" },
+  { node: "previous", evaluated_by: "PIPELINES" },
+  { node: "stage_count", evaluated_by: "PIPELINES" },
   { node: "sub", evaluated_by: "W1-RULE" }
 ];
 var KERNEL_TABLES = [
@@ -289,16 +585,27 @@ var STORE_DOORS = [
   { name: "agent_table_claim", args: "p_organization uuid, p_table uuid, p_conversation uuid DEFAULT NULL::uuid", returns: "void", security: "definer" },
   { name: "agg_assert_key", args: "p_key text", returns: "text", security: "invoker" },
   { name: "agg_buckets", args: "", returns: "text[]", security: "invoker" },
-  { name: "agg_deliver", args: "p_organization_id uuid, p_rule_id uuid, p_record_id uuid, p_channel text, p_recipient_user_id uuid, p_event_key text, p_subject text, p_body text, p_payload jsonb DEFAULT '{}'::jsonb", returns: "uuid", security: "invoker" },
+  { name: "agg_cadence_normalize", args: "p_cadence text", returns: "text", security: "invoker" },
+  { name: "agg_deliver", args: "p_organization_id uuid, p_rule_id uuid, p_record_id uuid, p_channel text, p_recipient_user_id uuid, p_event_key text, p_subject text, p_body text, p_payload jsonb DEFAULT '{}'::jsonb, p_dedupe_suffix text DEFAULT NULL::text", returns: "uuid", security: "invoker" },
+  { name: "agg_deliver_quietly", args: "p_organization_id uuid, p_rule_id uuid, p_subject_id uuid, p_channel text, p_recipient_user_id uuid, p_event_key text, p_subject text, p_body text, p_payload jsonb, p_quiet_hours jsonb, p_link text, p_dedupe_suffix text DEFAULT NULL::text", returns: "uuid", security: "invoker" },
+  { name: "agg_digest_assemble", args: "p_organization_id uuid, p_rule_id uuid, p_since timestamp with time zone DEFAULT NULL::timestamp with time zone, p_until timestamp with time zone DEFAULT NULL::timestamp with time zone", returns: "jsonb", security: "invoker" },
+  { name: "agg_digest_due_at", args: "p_cadence text, p_schedule text, p_quiet jsonb, p_after timestamp with time zone", returns: "timestamp with time zone", security: "invoker" },
   { name: "agg_digest_run", args: "p_organization_id uuid, p_rule_id uuid DEFAULT NULL::uuid, p_since timestamp with time zone DEFAULT NULL::timestamp with time zone", returns: "integer", security: "invoker" },
+  { name: "agg_digest_tick", args: "", returns: "integer", security: "invoker" },
   { name: "agg_explain", args: "p_organization_id uuid, p_table_id uuid, p_group_by jsonb DEFAULT '[]'::jsonb, p_measures jsonb DEFAULT '[]'::jsonb, p_bucket jsonb DEFAULT NULL::jsonb, p_filter jsonb DEFAULT '{}'::jsonb, p_required text DEFAULT 'viewer'::text", returns: "jsonb", security: "definer" },
+  { name: "agg_last_digest_at", args: "p_organization_id uuid, p_rule_id uuid", returns: "timestamp with time zone", security: "invoker" },
   { name: "agg_operations", args: "", returns: "text[]", security: "invoker" },
+  { name: "agg_quiet_until", args: "p_quiet jsonb, p_at timestamp with time zone", returns: "timestamp with time zone", security: "invoker" },
+  { name: "agg_record_name", args: "p_organization_id uuid, p_record_id uuid, p_state jsonb DEFAULT NULL::jsonb", returns: "text", security: "invoker" },
   { name: "agg_sql", args: "p_organization_id uuid, p_table_id uuid, p_group_by jsonb DEFAULT '[]'::jsonb, p_measures jsonb DEFAULT '[]'::jsonb, p_bucket jsonb DEFAULT NULL::jsonb, p_filter jsonb DEFAULT '{}'::jsonb, p_limit integer DEFAULT 200, p_required text DEFAULT 'viewer'::text", returns: "text", security: "invoker" },
   { name: "agg_subscription_cadences", args: "", returns: "text[]", security: "invoker" },
   { name: "agg_subscription_fire", args: "p_organization_id uuid, p_record_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_changed_field_ids jsonb DEFAULT '[]'::jsonb", returns: "integer", security: "invoker" },
-  { name: "agg_subscriptions", args: "p_organization_id uuid, p_saved_view_id uuid DEFAULT NULL::uuid, p_cadence text DEFAULT NULL::text", returns: "TABLE(rule_id uuid, saved_view_id uuid, cadence text, schedule text, channel text, recipient_user_id uuid, event_key text, name text)", security: "invoker" },
+  { name: "agg_subscription_fire_entered", args: "p_organization_id uuid, p_record_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_since timestamp with time zone DEFAULT NULL::timestamp with time zone", returns: "integer", security: "invoker" },
+  { name: "agg_subscription_tick", args: "p_window interval DEFAULT '00:15:00'::interval", returns: "integer", security: "invoker" },
+  { name: "agg_subscriptions", args: "p_organization_id uuid, p_saved_view_id uuid DEFAULT NULL::uuid, p_cadence text DEFAULT NULL::text", returns: "TABLE(rule_id uuid, saved_view_id uuid, table_id uuid, cadence text, schedule text, quiet_hours jsonb, channel text, recipient_user_id uuid, event_key text, name text)", security: "invoker" },
   { name: "agg_value_sql", args: "p_key text", returns: "text", security: "invoker" },
   { name: "agg_view_admits", args: "p_organization_id uuid, p_saved_view_id uuid, p_record_id uuid", returns: "boolean", security: "invoker" },
+  { name: "agg_view_admits_state", args: "p_definition jsonb, p_state jsonb", returns: "boolean", security: "invoker" },
   { name: "anon_capture", args: "p_organization_id uuid, p_client_key text, p_table_id uuid, p_payload jsonb, p_device text DEFAULT NULL::text, p_captured_at timestamp with time zone DEFAULT NULL::timestamp with time zone", returns: "uuid", security: "definer" },
   { name: "anon_clear", args: "p_organization_id uuid, p_submission_id uuid", returns: "uuid", security: "definer" },
   { name: "anon_inbound_land", args: "p_address text, p_secret text, p_payload jsonb, p_raw_payload jsonb DEFAULT '{}'::jsonb, p_client_key text DEFAULT NULL::text", returns: "uuid", security: "definer" },
@@ -319,9 +626,23 @@ var STORE_DOORS = [
   { name: "assert_organization_admin", args: "p_organization_id uuid, p_door text, p_what text", returns: "void", security: "invoker" },
   { name: "assert_organization_wall", args: "p_kind text, p_organization_id uuid, p_row jsonb", returns: "void", security: "invoker" },
   { name: "assert_store_door", args: "p_organization_id uuid, p_door text", returns: "void", security: "invoker" },
+  { name: "booking_cancel", args: "p_booking_ref text, p_origin text DEFAULT NULL::text", returns: "TABLE(booking_ref text, record_id uuid, slot_key text, state text, message text)", security: "definer" },
+  { name: "booking_confirm", args: "p_form_id uuid, p_hold_id uuid, p_origin text, p_payload jsonb, p_bucket text, p_honeypot text DEFAULT NULL::text, p_client_key text DEFAULT NULL::text", returns: "TABLE(booking_ref text, record_id uuid, submission_id uuid, slot_key text, slot_at timestamp with time zone, state text, message text)", security: "definer" },
+  { name: "booking_declare", args: "p_organization_id uuid, p_table_id uuid, p_title text, p_questions jsonb, p_availability jsonb DEFAULT '{}'::jsonb, p_presentation jsonb DEFAULT '{}'::jsonb, p_submission_cap integer DEFAULT NULL::integer, p_quarantine_rule_id uuid DEFAULT NULL::uuid, p_notify_rule_id uuid DEFAULT NULL::uuid, p_form_id uuid DEFAULT NULL::uuid, p_slug text DEFAULT NULL::text, p_home_id uuid DEFAULT NULL::uuid", returns: "jsonb", security: "definer" },
+  { name: "booking_hold", args: "p_form_id uuid, p_slot_key text, p_origin text, p_bucket text, p_client_key text DEFAULT NULL::text", returns: "TABLE(hold_id uuid, slot_key text, expires_at timestamp with time zone, member_user_id uuid, state text, message text)", security: "definer" },
+  { name: "booking_manage", args: "p_booking_ref text, p_days integer DEFAULT NULL::integer", returns: "TABLE(booking_ref text, form_id uuid, title text, slot_key text, slot_at timestamp with time zone, status text, slots jsonb, availability jsonb, state text, message text)", security: "definer" },
+  { name: "booking_notify", args: "p_organization_id uuid, p_form_id uuid, p_record_id uuid, p_submission_id uuid, p_event text, p_when text", returns: "uuid", security: "invoker" },
+  { name: "booking_public", args: "p_form_id uuid, p_days integer DEFAULT NULL::integer", returns: "TABLE(form_id uuid, organization_id uuid, table_id uuid, title text, presentation jsonb, fields jsonb, honeypot_key text, availability jsonb, slots jsonb, state text, message text)", security: "definer" },
+  { name: "booking_reschedule", args: "p_booking_ref text, p_slot_key text, p_origin text, p_bucket text DEFAULT NULL::text", returns: "TABLE(booking_ref text, record_id uuid, slot_key text, slot_at timestamp with time zone, state text, message text)", security: "definer" },
+  { name: "bookings", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(form_id uuid, table_id uuid, title text, slug text, published_at timestamp with time zone, closed_at timestamp with time zone, slot_minutes integer, timezone text, slot_table_id uuid, booked bigint, cancelled bigint, upcoming bigint, held bigint, next_at timestamp with time zone, state text)", security: "definer" },
   { name: "bump_epoch", args: "p_entity_type text, p_entity_id uuid, p_organization_id uuid DEFAULT NULL::uuid", returns: "bigint", security: "definer" },
   { name: "cache_lookup", args: "p_container_type text, p_container_id uuid, p_item_type text, p_item_id uuid", returns: "permission_level", security: "definer" },
   { name: "caller_role", args: "", returns: "name", security: "invoker" },
+  { name: "capture_open", args: "p_organization_id uuid, p_sheet_id uuid", returns: "TABLE(sheet_id uuid, organization_id uuid, table_id uuid, title text, presentation jsonb, fields jsonb, state text, may_capture boolean, message text)", security: "definer" },
+  { name: "capture_publish", args: "p_organization_id uuid, p_sheet_id uuid, p_open boolean DEFAULT true", returns: "timestamp with time zone", security: "definer" },
+  { name: "capture_sheet_declare", args: "p_organization_id uuid, p_table_id uuid, p_title text, p_questions jsonb, p_presentation jsonb DEFAULT '{}'::jsonb, p_sheet_id uuid DEFAULT NULL::uuid, p_notify_rule_id uuid DEFAULT NULL::uuid", returns: "uuid", security: "definer" },
+  { name: "capture_sheets", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(sheet_id uuid, table_id uuid, title text, slug text, state text, opened_at timestamp with time zone, captures bigint, replays bigint, last_capture_at timestamp with time zone, presentation jsonb)", security: "definer" },
+  { name: "capture_submit", args: "p_organization_id uuid, p_sheet_id uuid, p_client_key text, p_payload jsonb, p_files jsonb DEFAULT '[]'::jsonb, p_device text DEFAULT NULL::text, p_captured_at timestamp with time zone DEFAULT NULL::timestamp with time zone, p_location jsonb DEFAULT NULL::jsonb", returns: "TABLE(record_id uuid, state text, message text, replay boolean, file_ids uuid[])", security: "definer" },
   { name: "carry_unchanged_value_stamps", args: "p_old jsonb, p_new jsonb", returns: "jsonb", security: "invoker" },
   { name: "carrying_edges_in", args: "p_organization_id uuid", returns: "TABLE(container_type text, container_id uuid, item_type text, item_id uuid, conveys_max permission_level)", security: "definer" },
   { name: "carrying_edges_of", args: "p_item_type text, p_item_id uuid", returns: "TABLE(container_type text, container_id uuid, conveys_max permission_level)", security: "definer" },
@@ -432,6 +753,7 @@ var STORE_DOORS = [
   { name: "entity_records_find", args: "p_organization_id uuid, p_token text, p_key text, p_value jsonb DEFAULT NULL::jsonb, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0", returns: "jsonb", security: "invoker" },
   { name: "entity_table", args: "p_token text", returns: "TABLE(token text, schema_name text, table_name text, type text, title_column text, label text, has_organization boolean, has_deleted_at boolean)", security: "invoker" },
   { name: "entity_value_write", args: "p_organization_id uuid, p_token text, p_record_id uuid, p_patch jsonb", returns: "jsonb", security: "invoker" },
+  { name: "export_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "definer" },
   { name: "export_records", args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 1000", returns: "TABLE(id uuid, document jsonb)", security: "invoker" },
   { name: "external_foreign_table_findings", args: "", returns: "SETOF text", security: "definer" },
   { name: "external_history_event", args: "p_organization_id uuid, p_link_id uuid, p_operation text", returns: "bigint", security: "definer" },
@@ -459,6 +781,7 @@ var STORE_DOORS = [
   { name: "form_submit", args: "p_form_id uuid, p_origin text, p_payload jsonb, p_bucket text, p_honeypot text DEFAULT NULL::text, p_client_key text DEFAULT NULL::text", returns: "TABLE(submission_id uuid, record_id uuid, state text, message text)", security: "definer" },
   { name: "forms", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(form_id uuid, table_id uuid, title text, slug text, published_at timestamp with time zone, closed_at timestamp with time zone, submission_cap integer, responses bigint, in_table bigint, held bigint, rejected bigint, state text, quarantine_rule_id uuid, notify_rule_id uuid, presentation jsonb)", security: "definer" },
   { name: "formula_value", args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb, p_values jsonb DEFAULT NULL::jsonb", returns: "jsonb", security: "invoker" },
+  { name: "freshness_verdict", args: "p_written_at timestamp with time zone, p_ceiling_seconds numeric", returns: "jsonb", security: "definer" },
   { name: "guard_refusals_are_complete", args: "", returns: "TABLE(guard text, said text)", security: "invoker" },
   { name: "has_visibility", args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
   { name: "has_visibility_at", args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, p_organization_id uuid DEFAULT NULL::uuid, p_min_version bigint DEFAULT NULL::bigint", returns: "boolean", security: "definer" },
@@ -548,12 +871,20 @@ var STORE_DOORS = [
   { name: "organization_references", args: "p_kind text, p_organization_id uuid, p_row jsonb", returns: "TABLE(site text, what text, ref_id uuid, openable boolean)", security: "invoker" },
   { name: "owning_table", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "invoker" },
   { name: "owning_table_gone", args: "p_organization_id uuid, p_record_id uuid", returns: "boolean", security: "invoker" },
+  { name: "page_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "definer" },
+  { name: "page_contract", args: "p_organization_id uuid", returns: "jsonb", security: "definer" },
+  { name: "page_size", args: "p_organization_id uuid, p_door text, p_limit integer, p_default integer DEFAULT NULL::integer, p_ceiling integer DEFAULT NULL::integer", returns: "integer", security: "definer" },
   { name: "parity_field_types", args: "", returns: "TABLE(parity_type text, behavior text, made_of text)", security: "invoker" },
   { name: "parity_type", args: "p_field_data jsonb", returns: "text", security: "invoker" },
   { name: "parity_values", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(field_key text, field_id uuid, parity_type text, behavior text, unit text, format text, value jsonb, value_version integer, actor text, written_at timestamp with time zone)", security: "invoker" },
   { name: "per_value_access_words", args: "", returns: "text[]", security: "invoker" },
   { name: "person_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "pin_agent_cells", args: "p_new jsonb, p_old jsonb, p_agent_keys text[]", returns: "jsonb", security: "invoker" },
+  { name: "pipeline_board", args: "p_organization_id uuid, p_table_id uuid, p_measure text DEFAULT NULL::text", returns: "TABLE(stage_key text, stage_label text, stage_position integer, cards bigint, total numeric, wip_limit integer, over_limit boolean)", security: "definer" },
+  { name: "pipeline_declare", args: "p_organization_id uuid, p_table_id uuid, p_spec jsonb", returns: "jsonb", security: "definer" },
+  { name: "pipeline_move", args: "p_organization_id uuid, p_record_id uuid, p_to text, p_also jsonb DEFAULT '{}'::jsonb, p_expected_version integer DEFAULT NULL::integer", returns: "jsonb", security: "definer" },
+  { name: "pipeline_read", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
+  { name: "pipeline_transition_refusal", args: "p_organization_id uuid, p_record_id uuid, p_to text", returns: "jsonb", security: "definer" },
   { name: "portal_admits", args: "p_organization_id uuid, p_user_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "definer" },
   { name: "portal_card", args: "p_organization_id uuid, p_portal_id uuid", returns: "jsonb", security: "definer" },
   { name: "portal_declare", args: "p_organization_id uuid, p_title text, p_client_table_id uuid, p_tables jsonb, p_portal_id uuid DEFAULT NULL::uuid, p_slug text DEFAULT NULL::text, p_sign_in_method text DEFAULT 'magic_link'::text", returns: "uuid", security: "definer" },
@@ -581,6 +912,9 @@ var STORE_DOORS = [
   { name: "promoted_read", args: "p_organization_id uuid, p_table_id uuid, p_field_key text, p_value text", returns: "SETOF uuid", security: "invoker" },
   { name: "promoted_value_path", args: "p_field_data jsonb", returns: "text", security: "invoker" },
   { name: "promotion_inline_ceiling", args: "", returns: "integer", security: "invoker" },
+  { name: "provenance_prune", args: "p_organization_id uuid DEFAULT NULL::uuid, p_dry_run boolean DEFAULT true, p_limit integer DEFAULT 200000", returns: "jsonb", security: "definer" },
+  { name: "provenance_retention_days", args: "p_organization_id uuid", returns: "integer", security: "definer" },
+  { name: "provenance_write", args: "p_organization_id uuid, p_conversation_id uuid, p_turn_id text, p_rows jsonb", returns: "integer", security: "definer" },
   { name: "query_access_ids", args: "p_organization_id uuid, p_required text DEFAULT 'viewer'::text", returns: "uuid[]", security: "invoker" },
   { name: "query_across_homes", args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0, p_required text DEFAULT 'viewer'::text", returns: "TABLE(record_id uuid, home_record_id uuid, data jsonb, created_at timestamp with time zone)", security: "definer" },
   { name: "query_by_coordinates", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_coordinates jsonb DEFAULT '[]'::jsonb, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0, p_required text DEFAULT 'viewer'::text", returns: "TABLE(record_id uuid, table_id uuid, data jsonb, coordinates_matched integer)", security: "definer" },
@@ -681,6 +1015,7 @@ var STORE_DOORS = [
   { name: "sign_requests", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(request_id uuid, render_id uuid, record_id uuid, field_key text, document_title text, signer_name text, signer_email text, signer_has_account boolean, state text, sentence text, document_version integer, document_hash text, sent_at timestamp with time zone, expires_at timestamp with time zone, viewed_at timestamp with time zone, signed_at timestamp with time zone, declined_at timestamp with time zone, invalidated_at timestamp with time zone, signature_id uuid, signature_mark text, reminder_count integer)", security: "definer" },
   { name: "sign_token_decode", args: "p_token text", returns: "bytea", security: "invoker" },
   { name: "sign_token_encode", args: "p_bytes bytea", returns: "text", security: "invoker" },
+  { name: "silent_page_doors", args: "", returns: "TABLE(door text, why text)", security: "definer" },
   { name: "size_refusal", args: "p_organization_id uuid, p_data jsonb", returns: "text", security: "invoker" },
   { name: "source_next_pointer", args: "p_sources jsonb", returns: "text", security: "invoker" },
   { name: "source_pointer", args: "p_sources jsonb, p_source jsonb", returns: "text", security: "invoker" },
@@ -688,8 +1023,10 @@ var STORE_DOORS = [
   { name: "storage_modes", args: "", returns: "text[]", security: "invoker" },
   { name: "store_is_open", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "invoker" },
   { name: "subscription_cadences", args: "p_organization_id uuid", returns: "text[]", security: "definer" },
+  { name: "subscription_declare", args: "p_organization_id uuid, p_table_id uuid, p_spec jsonb", returns: "uuid", security: "definer" },
   { name: "subscription_mute", args: "p_organization_id uuid, p_rule_id uuid, p_muted boolean DEFAULT true", returns: "boolean", security: "definer" },
-  { name: "subscriptions", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(rule_id uuid, name text, table_id uuid, saved_view_id uuid, cadence text, schedule text, channel text, recipient_user_id uuid, event_key text, muted boolean, mine boolean, i_may_mute boolean)", security: "definer" },
+  { name: "subscription_preview", args: "p_organization_id uuid, p_rule_id uuid", returns: "jsonb", security: "definer" },
+  { name: "subscriptions", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(rule_id uuid, name text, table_id uuid, saved_view_id uuid, cadence text, schedule text, quiet_hours jsonb, channel text, recipient_user_id uuid, event_key text, muted boolean, mine boolean, i_may_mute boolean, last_sent_at timestamp with time zone, next_digest_at timestamp with time zone)", security: "definer" },
   { name: "table_capacity", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "table_carries_its_rows", args: "p_user_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
   { name: "table_contents", args: "p_organization_id uuid, p_table_id uuid", returns: "TABLE(record_id uuid, kind text, goes_at integer)", security: "invoker" },
@@ -700,6 +1037,7 @@ var STORE_DOORS = [
   { name: "table_record_ceiling", args: "", returns: "integer", security: "invoker" },
   { name: "table_record_ceiling", args: "p_organization_id uuid", returns: "integer", security: "invoker" },
   { name: "table_rules", args: "p_organization_id uuid, p_table_id uuid, p_use text, p_record_type text DEFAULT NULL::text", returns: "SETOF custom.record", security: "invoker" },
+  { name: "table_stage_field", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "definer" },
   { name: "table_storage", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
   { name: "table_type_field", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "definer" },
   { name: "tables_at_home", args: "p_organization_id uuid, p_home_ids uuid[]", returns: "TABLE(table_id uuid, home_record_id uuid, kind text)", security: "definer" },
@@ -787,12 +1125,15 @@ var STORE_KNOBS = [
   { key: "enrichment_sensitivity_ceiling", value: '"internal"', type: "string" },
   { key: "entity_custom_fields_guard", value: "false", type: "boolean" },
   { key: "entity_types_guard", value: "false", type: "boolean" },
+  { key: "export_rows_ceiling", value: "100000", type: "integer" },
   { key: "external_principal_enabled", value: "false", type: "boolean" },
   { key: "field_index_guard", value: "false", type: "boolean" },
   { key: "field_sensitivity_levels", value: '{"edit": {"public": "editor", "internal": "editor", "restricted": "admin", "confidential": "admin"}, "read": {"public": "viewer", "internal": "viewer", "restricted": "admin", "confidential": "editor"}}', type: "json" },
   { key: "inbound_domain", value: '"inbound.matrxserver.com"', type: "string" },
   { key: "member_default_level", value: '"viewer"', type: "enum" },
   { key: "member_default_visibility", value: '"all_records"', type: "enum" },
+  { key: "page_size_ceiling", value: "1000", type: "integer" },
+  { key: "provenance_retention_days", value: "30", type: "number" },
   { key: "records_tool_default", value: "true", type: "boolean" },
   { key: "row_versions_guard", value: "false", type: "boolean" },
   { key: "sandbox_expanded_frame_height_px", value: "20000", type: "integer" },
@@ -809,15 +1150,15 @@ var STORE_REFUSAL_CODES = [
   { code: "02000", raised_by: "_checklist_instantiate,checklist_declare,checklist_run,checklist_step_complete,checklist_step_refusal,checklist_template_shape,conversation_scope_bind,dashboard_delete,dashboard_run,doc_letterhead,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,enrich_pin,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_card,portal_declare,portal_invite,portal_preview,portal_principal_bind,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,sign_request_cancel,sign_request_create,sign_request_remind,sign_request_unchanged,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state" },
   { code: "0A000", raised_by: "checklist_step_complete,external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign" },
   { code: "22003", raised_by: "context_resolve" },
-  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,portal_declare,portal_invite,portal_principal_bind,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,table_declare,value_restore,work_approval_decide,work_approval_request,work_template_declare" },
+  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,value_restore,work_approval_decide,work_approval_request,work_template_declare" },
   { code: "22007", raised_by: "dashboard_window_sql" },
   { code: "22012", raised_by: "rule_eval" },
-  { code: "22023", raised_by: "_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,pin_agent_cells,portal_declare,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
-  { code: "23503", raised_by: "_checklist_instantiate,_containment_guard,_field_document_for,_record_rule_uses,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,work_set_state,work_take_assignment,work_template_instantiate" },
+  { code: "22023", raised_by: "_booking_availability,_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
+  { code: "23503", raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_field_document_for,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,work_set_state,work_take_assignment,work_template_instantiate" },
   { code: "23505", raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,share_grant,sign_request_cancel,sign_request_create,work_approval_decide,work_slot_hold" },
-  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
+  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
-  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,record_table,share_grant,subscription_mute,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
+  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,record_table,share_grant,subscription_mute,subscription_preview,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
   { code: "42703", raised_by: "entity_table,portal_declare" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,enrich_due,enrich_land,promote_field" },
   { code: "54001", raised_by: "record_delete" },
@@ -1434,6 +1775,7 @@ var ENTITY_TOKENS = [
   "notification_event_override",
   "notification_event_type",
   "notification_preference",
+  "notification_submission",
   "notify_outsider_door_baseline",
   "oauth_handoff_claim",
   "opinion_clusters",