@ai-matrx/records 0.29.0 → 0.36.0

package/CHANGELOG.md

@@ -1,5 +1,116 @@
 # Changelog — @ai-matrx/records
 
+## 0.36.0
+
+Republish of 0.35.0's contents. 0.35.0 never reached npm: its gate was red on
+this package's OWN live-doors fixture, which wrote an undeclared column `n` into
+its probe table — refused, correctly, by `custom._undeclared_key_guard` (23514,
+REC-1 / REC-51) the moment lane FIELD-TRUTH landed it. The door had not
+regressed; the fixture was writing a column nobody had declared. Fixed at the
+fixture, never at the guard.
+
+## 0.35.0
+
+**A gate a screen can read back, and a preview of what it would do today.**
+
+A stage gate was saved as one Rule whose expression is an `or` of four arms, and
+that compiled form was the only copy of it. `pipelineRead` handed a settings
+screen the gate's name and its sentence and nothing else — so an editor built on
+it would open the Birchwood Avenue renovation's "$5,000 needs a second quote"
+rule with a BLANK condition and overwrite it the first time somebody pressed
+Save.
+
+`PipelineRule` now carries `when` and `demands` as they were written, and
+`on_fail` — so an approval gate can never read back as a refusal.
+
+`pipelineGatePreview({ table_id, stage, gate })` answers the one question
+somebody writing a rule that refuses their colleagues' work actually has: of the
+cards on this board today, how many would this turn away, and which three. It
+takes the GATE rather than a rule id, because the whole point is judging one
+that has not been saved. The store compiles it with the same compiler
+`pipelineDeclare` uses, so this count and the refusal at the door cannot
+disagree at the edge of the condition — which is the only place anybody looks.
+
+**`PT428` is a real answer and this package called it `internal`.** The release
+gate's live refusal census found it. A gate whose `on_fail` is
+`require_approval` files the request and leaves the record where it was; a
+caller meets that code whenever the move went through the ordinary write door.
+It gets its own `needs_approval` code rather than joining `refused_by_rule`,
+because the work was neither rejected nor done — a screen that drew it as a
+refusal would tell somebody their work was turned down while it is being
+considered.
+
+**The door mirror had gone stale, twice.** `store.generated.ts` claimed
+`pipeline_pending` was absent while the store had it, which is what turned the
+0.32.0 publish red; 0.34.0 then went red on `pipeline_gate_preview` the same
+way, because the regenerated file was lost to a merge in the shared checkout
+before it was committed. Regenerated from the live store and committed with the
+change it describes: 538 doors, 25 rule node kinds — which picks up
+`sibling_count`, the node a second-quote demand is written with.
+
+That census is the guard working, and it has now been the thing that found a
+missing door or a missing refusal class six times. It is worth saying why it
+keeps firing: this package mirrors a store several lanes are landing on at once,
+so a mirror regenerated ten minutes before a commit is already a claim about the
+past.
+
+## 0.33.0
+
+**One closed door beside a record took the record away.**
+
+Cedar Ridge Dental's own owner opened a staff record in his own organization and
+read "You do not have access to this" — above a version history, a running
+onboarding checklist and a comment box that had all loaded perfectly. Reported
+twice: by lane SCREENS-2 on that practice, and by crew E2, who asked the doors
+from that very seat and found the record read answering correctly. It was never
+the store.
+
+`recordRead({ withComputed: true })` makes a second call, to
+`custom.computed_provenance` — which Rule produced which worked-out value (FLD-9),
+a footnote beside the record. Measured on the live catalogue, 2026-09-21:
+`read_record` t, `record_history` t, `field_history` t, `computed_provenance` **f**.
+That footnote's refusal was returned AS THE RECORD'S. `Peek` is the one caller
+that asks with provenance, which is exactly why the record page refused and every
+other panel on it did not.
+
+A decorative read may never fail the primary one — and may not fail silently
+either. The record comes back, `computed` is empty, and the new
+`RecordRead.computedUnavailable` carries what the footnote's door said, so a
+screen can say it could not look rather than draw nothing and mean two different
+things by it. `src/__tests__/a-footnote-never-takes-the-record.test.ts` — three
+clauses, two red on 0.32.0's bytes.
+
+**Consumer action:** none. `computedUnavailable` is optional, and `null` when the
+footnote read fine or was never asked for.
+
+## 0.30.0
+
+**The chair's two rulings on the no-fake-data law, made structural.**
+
+Both are things crews ACTUALLY shipped under the law on the day it was written, so
+they are now refusals rather than advice in a README.
+
+`suffixed-mailbox` — a mailbox whose name-shaped local part ends in a bare counter
+(`linda.reyes0@`, `wei.singh.m34@`) is a generated row wearing a person's name, and
+a whole column of them reads to the owner as one fake person repeated. People in a
+template are fictional but REALISTIC, holding mailboxes on the fictional business's
+own domain. The pattern is narrow on purpose — two or more words joined by `.` `_`
+`-` AND a trailing counter — so the real mailboxes a business has (`support365@`,
+`ap2@`, `frontdesk@`) are left alone, and the suite asserts both halves.
+
+`fixture-in-name`, plus a name-field check in the validator — "test fixture" is a
+CLASSIFICATION the organization carries in its kind/metadata (`test_fixture: true`
+in its settings, which is also how cleanup finds it), never part of a name. The
+validator now reads the business name, its legal name, every table's name and both
+its labels, the form's name and the pipeline's name, and refuses the parenthesised
+suffix, the bare words, and the `Fixture …` PREFIX — which the whole-document junk
+sweep cannot see, because there the word is simply the first word of a name. The
+settings key itself is exempt, since that is where the classification belongs.
+
+Both patterns ship in `./use-cases`, so aidream's guard, matrx-frontend's guard and
+this library's own validator can never disagree about what junk means.
+
+
 ## 0.28.0
 
 **The owner's side of a booking page — the one method that was standing between

package/dist/core/index.cjs

@@ -61,6 +61,8 @@ __export(core_exports, {
   RETIRED_ACTOR_WORDS: () => RETIRED_ACTOR_WORDS,
   RULE_NODE_KINDS: () => RULE_NODE_KINDS,
   RULE_USES: () => RULE_USES,
+  STAGE_RULE_ENFORCEMENT: () => STAGE_RULE_ENFORCEMENT,
+  STAGE_RULE_ON_FAIL: () => STAGE_RULE_ON_FAIL,
   STORAGE_MODES: () => STORAGE_MODES,
   STORE_DOORS: () => STORE_DOORS,
   STORE_KNOBS: () => STORE_KNOBS,
@@ -247,6 +249,8 @@ function looksLikeAnId(value) {
 
 // src/pipeline.ts
 var PIPELINE_RULE_KINDS = ["moves", "requires", "who", "limit", "entry"];
+var STAGE_RULE_ON_FAIL = ["refuse", "require_approval"];
+var STAGE_RULE_ENFORCEMENT = ["refuse", "warn"];
 function mayDrag(level) {
   return level === "editor" || level === "admin" || level === "owner";
 }
@@ -566,6 +570,7 @@ var RULE_USES = ["validate", "compute", "membership", "applicability"];
 var PER_VALUE_ACCESS_WORDS = ["visibility", "access", "share", "acl", "permission", "permissions", "secret"];
 var PARITY_FIELD_TYPES = [
   { parity_type: "attachment", behavior: "relation", made_of: "REC-31: a File record reached through a relation, target the kernel `File` Table" },
+  { parity_type: "checkbox", behavior: "boolean", made_of: "a ticked or unticked answer, stored as a REAL boolean \u2014 and a record that never answered holds neither, so filters and group-by see three states, not two" },
   { parity_type: "currency", behavior: "range", made_of: "FLD-N-1: a number whose UNIT is the currency and whose format is currency \u2014 on the Field, never in presentation" },
   { parity_type: "datetime", behavior: "range", made_of: "a range of kind date or datetime \u2014 the dated modifier says the VALUES are dated, which is a different question" },
   { parity_type: "email", behavior: "text", made_of: "text whose format is email" },
@@ -602,6 +607,7 @@ var RULE_NODE_KINDS = [
   { node: "parent_field", evaluated_by: "W1-RULE-APPLY" },
   { node: "present", evaluated_by: "W1-RULE" },
   { node: "previous", evaluated_by: "PIPELINES" },
+  { node: "sibling_count", evaluated_by: "STAGE-RULES" },
   { node: "stage_count", evaluated_by: "PIPELINES" },
   { node: "sub", evaluated_by: "W1-RULE" }
 ];
@@ -620,6 +626,8 @@ var STORE_DOORS = [
   { name: "absence_reasons", args: "", returns: "text[]", security: "invoker" },
   { name: "actor_vocabulary", args: "", returns: "text[]", security: "invoker" },
   { name: "actor_word", args: "p_declared text", returns: "text", security: "invoker" },
+  { name: "addressed_cap", args: "p_user_id uuid, p_type text, p_id uuid, p_organization_id uuid DEFAULT NULL::uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "permission_level", security: "definer" },
+  { name: "addressed_cap_specific", args: "p_user_id uuid, p_type text, p_id uuid, p_organization_id uuid DEFAULT NULL::uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "permission_level", security: "definer" },
   { name: "agent_change_approval", args: "p_organization uuid, p_conversation uuid DEFAULT NULL::uuid, p_table uuid DEFAULT NULL::uuid", returns: "jsonb", security: "definer" },
   { name: "agent_context", args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 50", returns: "jsonb", security: "invoker" },
   { name: "agent_table_claim", args: "p_organization uuid, p_table uuid, p_conversation uuid DEFAULT NULL::uuid", returns: "void", security: "definer" },
@@ -793,7 +801,7 @@ var STORE_DOORS = [
   { name: "entity_records_find", args: "p_organization_id uuid, p_token text, p_key text, p_value jsonb DEFAULT NULL::jsonb, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0", returns: "jsonb", security: "invoker" },
   { name: "entity_table", args: "p_token text", returns: "TABLE(token text, schema_name text, table_name text, type text, title_column text, label text, has_organization boolean, has_deleted_at boolean)", security: "invoker" },
   { name: "entity_value_write", args: "p_organization_id uuid, p_token text, p_record_id uuid, p_patch jsonb", returns: "jsonb", security: "invoker" },
-  { name: "export_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "definer" },
+  { name: "export_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "invoker" },
   { name: "export_records", args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 1000", returns: "TABLE(id uuid, document jsonb)", security: "invoker" },
   { name: "external_foreign_table_findings", args: "", returns: "SETOF text", security: "definer" },
   { name: "external_history_event", args: "p_organization_id uuid, p_link_id uuid, p_operation text", returns: "bigint", security: "definer" },
@@ -873,6 +881,9 @@ var STORE_DOORS = [
   { name: "io_proposal_reject", args: "p_organization_id uuid, p_import_id uuid, p_column text", returns: "boolean", security: "definer" },
   { name: "io_proposal_spec", args: "p_proposal jsonb", returns: "jsonb", security: "invoker" },
   { name: "io_record_changed", args: "", returns: "trigger", security: "definer" },
+  { name: "io_record_changed_stmt_delete", args: "", returns: "trigger", security: "definer" },
+  { name: "io_record_changed_stmt_insert", args: "", returns: "trigger", security: "definer" },
+  { name: "io_record_changed_stmt_update", args: "", returns: "trigger", security: "definer" },
   { name: "io_relation_candidate", args: "p_organization_id uuid, p_table_id uuid, p_words text[]", returns: "uuid", security: "invoker" },
   { name: "io_restore", args: "p_organization_id uuid, p_record_id uuid, p_version integer", returns: "integer", security: "definer" },
   { name: "io_restore", args: "p_organization_id uuid, p_record_id uuid, p_version integer, p_author jsonb", returns: "integer", security: "definer" },
@@ -881,6 +892,8 @@ var STORE_DOORS = [
   { name: "io_value_shape", args: "p_envelope jsonb", returns: "jsonb", security: "invoker" },
   { name: "is_a_retirement", args: "p_old_deleted timestamp with time zone, p_new_deleted timestamp with time zone, p_old_data jsonb, p_new_data jsonb, p_old_table uuid, p_new_table uuid, p_old_org uuid, p_new_org uuid, p_old_class text, p_new_class text", returns: "boolean", security: "invoker" },
   { name: "ladder_replanners", args: "p_roots text[] DEFAULT ARRAY['custom.has_visibility'::text, 'custom.effective_level'::text, 'custom.reaches_directly'::text, 'custom.visible_set'::text]", returns: "TABLE(fn text, lang text, why text, remedy text)", security: "definer" },
+  { name: "level_floor", args: "", returns: "permission_level", security: "definer" },
+  { name: "levels_raised_by_a_less_specific_rung", args: "", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, member_email text, record_id uuid, addressed_level permission_level, answered_level permission_level)", security: "definer" },
   { name: "list_door_disagreements", args: "p_pretend text DEFAULT NULL::text, p_only_organization uuid DEFAULT NULL::uuid, p_sample integer DEFAULT 200", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, table_id uuid, record_id uuid, door text, why text)", security: "invoker" },
   { name: "list_door_disagreements", args: "p_pretend text, p_only_organization uuid, p_sample integer, p_exhaustive boolean", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, table_id uuid, record_id uuid, door text, why text)", security: "invoker" },
   { name: "lookup_value", args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb", returns: "jsonb", security: "invoker" },
@@ -911,9 +924,9 @@ var STORE_DOORS = [
   { name: "organization_references", args: "p_kind text, p_organization_id uuid, p_row jsonb", returns: "TABLE(site text, what text, ref_id uuid, openable boolean)", security: "invoker" },
   { name: "owning_table", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "invoker" },
   { name: "owning_table_gone", args: "p_organization_id uuid, p_record_id uuid", returns: "boolean", security: "invoker" },
-  { name: "page_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "definer" },
+  { name: "page_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "invoker" },
   { name: "page_contract", args: "p_organization_id uuid", returns: "jsonb", security: "definer" },
-  { name: "page_size", args: "p_organization_id uuid, p_door text, p_limit integer, p_default integer DEFAULT NULL::integer, p_ceiling integer DEFAULT NULL::integer", returns: "integer", security: "definer" },
+  { name: "page_size", args: "p_organization_id uuid, p_door text, p_limit integer, p_default integer DEFAULT NULL::integer, p_ceiling integer DEFAULT NULL::integer", returns: "integer", security: "invoker" },
   { name: "parity_field_types", args: "", returns: "TABLE(parity_type text, behavior text, made_of text)", security: "invoker" },
   { name: "parity_type", args: "p_field_data jsonb", returns: "text", security: "invoker" },
   { name: "parity_values", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(field_key text, field_id uuid, parity_type text, behavior text, unit text, format text, value jsonb, value_version integer, actor text, written_at timestamp with time zone)", security: "invoker" },
@@ -922,7 +935,9 @@ var STORE_DOORS = [
   { name: "pin_agent_cells", args: "p_new jsonb, p_old jsonb, p_agent_keys text[]", returns: "jsonb", security: "invoker" },
   { name: "pipeline_board", args: "p_organization_id uuid, p_table_id uuid, p_measure text DEFAULT NULL::text", returns: "TABLE(stage_key text, stage_label text, stage_position integer, cards bigint, total numeric, wip_limit integer, over_limit boolean)", security: "definer" },
   { name: "pipeline_declare", args: "p_organization_id uuid, p_table_id uuid, p_spec jsonb", returns: "jsonb", security: "definer" },
+  { name: "pipeline_gate_preview", args: "p_organization_id uuid, p_table_id uuid, p_stage text, p_gate jsonb", returns: "jsonb", security: "definer" },
   { name: "pipeline_move", args: "p_organization_id uuid, p_record_id uuid, p_to text, p_also jsonb DEFAULT '{}'::jsonb, p_expected_version integer DEFAULT NULL::integer", returns: "jsonb", security: "definer" },
+  { name: "pipeline_pending", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "pipeline_read", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "pipeline_transition_refusal", args: "p_organization_id uuid, p_record_id uuid, p_to text", returns: "jsonb", security: "definer" },
   { name: "portal_admits", args: "p_organization_id uuid, p_user_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "definer" },
@@ -989,6 +1004,7 @@ var STORE_DOORS = [
   { name: "record_carrying_edges", args: "p_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(container_id uuid, item_id uuid, edge_role text)", security: "invoker" },
   { name: "record_delete", args: "p_organization_id uuid, p_record_id uuid", returns: "timestamp with time zone", security: "definer" },
   { name: "record_history", args: "p_organization_id uuid, p_record_id uuid, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0", returns: "TABLE(version integer, occurred_at timestamp with time zone, operation text, operation_label text, actor jsonb, changes jsonb, migration_id uuid, undoable boolean)", security: "definer" },
+  { name: "record_platform_keys", args: "", returns: "text[]", security: "invoker" },
   { name: "record_relation_edges", args: "p_organization_id uuid, p_id uuid, p_table_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(target_id uuid, edge_role text, field_id uuid, ord integer)", security: "invoker" },
   { name: "record_reparent", args: "p_organization_id uuid, p_record_id uuid, p_parent_id uuid", returns: "void", security: "definer" },
   { name: "record_resolve", args: "p_organization_id uuid, p_id uuid", returns: "jsonb", security: "definer" },
@@ -997,12 +1013,14 @@ var STORE_DOORS = [
   { name: "record_restore_version", args: "p_organization_id uuid, p_record_id uuid, p_version integer", returns: "jsonb", security: "definer" },
   { name: "record_restore_version", args: "p_organization_id uuid, p_record_id uuid, p_version integer, p_author jsonb", returns: "jsonb", security: "definer" },
   { name: "record_scope_context", args: "p_organization_id uuid, p_record_id uuid, p_relations integer DEFAULT 12, p_history integer DEFAULT 15, p_siblings integer DEFAULT 8", returns: "jsonb", security: "definer" },
+  { name: "record_stage_pending", args: "p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "definer" },
   { name: "record_state_as_of", args: "p_record_id uuid, p_at timestamp with time zone", returns: "TABLE(state jsonb, replayed boolean)", security: "definer" },
   { name: "record_table", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "definer" },
   { name: "record_update", args: "p_organization_id uuid, p_record_id uuid, p_patch jsonb, p_expected_version integer DEFAULT NULL::integer", returns: "integer", security: "definer" },
   { name: "record_values", args: "p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "invoker" },
   { name: "record_values_versioned", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(field_key text, field_id uuid, value jsonb, value_version integer, source jsonb, absent_reason text, actor text, on_behalf_of text, written_at timestamp with time zone, alternates jsonb)", security: "definer" },
   { name: "record_write", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "uuid", security: "definer" },
+  { name: "record_write_many", args: "p_organization_id uuid, p_table_id uuid, p_rows jsonb[], p_ids uuid[] DEFAULT NULL::uuid[]", returns: "uuid[]", security: "definer" },
   { name: "refusals_claiming_a_level_never_asked", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "relation_carry", args: "p_organization_id uuid, p_container_id uuid, p_item_id uuid", returns: "uuid", security: "definer" },
   { name: "relation_edges_withdraw", args: "p_organization_id uuid, p_field_ids uuid[], p_why text", returns: "integer", security: "definer" },
@@ -1059,6 +1077,8 @@ var STORE_DOORS = [
   { name: "size_refusal", args: "p_organization_id uuid, p_data jsonb", returns: "text", security: "invoker" },
   { name: "source_next_pointer", args: "p_sources jsonb", returns: "text", security: "invoker" },
   { name: "source_pointer", args: "p_sources jsonb, p_source jsonb", returns: "text", security: "invoker" },
+  { name: "stage_rule_enforcement", args: "p_organization_id uuid", returns: "text", security: "invoker" },
+  { name: "stage_rule_on_fail_kinds", args: "", returns: "TABLE(behaviour text, note text)", security: "invoker" },
   { name: "stamp_value_envelopes", args: "p_data jsonb, p_actor text, p_on_behalf_of text, p_at timestamp with time zone", returns: "jsonb", security: "invoker" },
   { name: "storage_modes", args: "", returns: "text[]", security: "invoker" },
   { name: "store_is_open", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "invoker" },
@@ -1069,6 +1089,7 @@ var STORE_DOORS = [
   { name: "subscriptions", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(rule_id uuid, name text, table_id uuid, saved_view_id uuid, cadence text, schedule text, quiet_hours jsonb, channel text, recipient_user_id uuid, event_key text, muted boolean, mine boolean, i_may_mute boolean, last_sent_at timestamp with time zone, next_digest_at timestamp with time zone)", security: "definer" },
   { name: "table_capacity", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "table_carries_its_rows", args: "p_user_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
+  { name: "table_column_source", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
   { name: "table_contents", args: "p_organization_id uuid, p_table_id uuid", returns: "TABLE(record_id uuid, kind text, goes_at integer)", security: "invoker" },
   { name: "table_declare", args: "p_organization_id uuid, p_spec jsonb", returns: "uuid", security: "definer" },
   { name: "table_has_a_visible_record", args: "p_user uuid, p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "definer" },
@@ -1083,6 +1104,7 @@ var STORE_DOORS = [
   { name: "tables_at_home", args: "p_organization_id uuid, p_home_ids uuid[]", returns: "TABLE(table_id uuid, home_record_id uuid, kind text)", security: "definer" },
   { name: "tables_described_without_asking", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "trg_associations_bump_visibility", args: "", returns: "trigger", security: "definer" },
+  { name: "undeclared_keys", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "text[]", security: "invoker" },
   { name: "validate_custom_fields", args: "p_token text, p_organization_id uuid, p_values jsonb", returns: "void", security: "invoker" },
   { name: "validate_value_envelope", args: "p_organization_id uuid, p_fields custom.record[], p_data jsonb", returns: "void", security: "invoker" },
   { name: "validate_values", args: "p_organization_id uuid, p_fields custom.record[], p_values jsonb, p_record_type text DEFAULT NULL::text", returns: "void", security: "invoker" },
@@ -1094,6 +1116,8 @@ var STORE_DOORS = [
   { name: "value_restore", args: "p_organization_id uuid, p_record_id uuid, p_field_key text, p_version integer", returns: "jsonb", security: "definer" },
   { name: "value_restore", args: "p_organization_id uuid, p_record_id uuid, p_field_key text, p_version integer, p_author jsonb", returns: "jsonb", security: "definer" },
   { name: "value_versions", args: "p_old jsonb, p_new jsonb", returns: "jsonb", security: "invoker" },
+  { name: "view_declare", args: "p_organization_id uuid, p_table_id uuid, p_spec jsonb", returns: "uuid", security: "definer" },
+  { name: "views", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(view_id uuid, name text, table_id uuid, filters jsonb, definition jsonb, created_at timestamp with time zone)", security: "definer" },
   { name: "visibility_ancestors", args: "p_item_type text, p_item_id uuid", returns: "TABLE(container_type text, container_id uuid, depth integer, max_level permission_level)", security: "definer" },
   { name: "visibility_as_of", args: "p_organization_id uuid, p_record_id uuid, p_at timestamp with time zone", returns: "TABLE(principal_kind text, principal_id uuid, level permission_level, through_kind text, through_id uuid, reason text, replayed boolean, held_from timestamp with time zone, held_to timestamp with time zone)", security: "definer" },
   { name: "visibility_cache_rebuild", args: "", returns: "integer", security: "definer" },
@@ -1181,6 +1205,7 @@ var STORE_KNOBS = [
   { key: "sandbox_message_bytes", value: "65536", type: "integer" },
   { key: "sandbox_org_components", value: "true", type: "boolean" },
   { key: "signup_provisioning_guard", value: "false", type: "boolean" },
+  { key: "stage_rule_enforcement", value: '"refuse"', type: "enum" },
   { key: "system_enabled", value: "false", type: "boolean" },
   { key: "table_record_ceiling", value: "150000", type: "integer" },
   { key: "value_max_bytes", value: "100000", type: "integer" },
@@ -1190,19 +1215,20 @@ var STORE_REFUSAL_CODES = [
   { code: "02000", raised_by: "_checklist_instantiate,checklist_declare,checklist_run,checklist_step_complete,checklist_step_refusal,checklist_template_shape,conversation_scope_bind,dashboard_delete,dashboard_run,doc_letterhead,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,enrich_pin,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_card,portal_declare,portal_invite,portal_preview,portal_principal_bind,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,sign_request_cancel,sign_request_create,sign_request_remind,sign_request_unchanged,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state" },
   { code: "0A000", raised_by: "checklist_step_complete,external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign" },
   { code: "22003", raised_by: "context_resolve" },
-  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,value_restore,work_approval_decide,work_approval_request,work_template_declare" },
+  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,pipeline_gate_preview,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,record_write_many,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,value_restore,view_declare,work_approval_decide,work_approval_request,work_template_declare" },
   { code: "22007", raised_by: "dashboard_window_sql" },
   { code: "22012", raised_by: "rule_eval" },
-  { code: "22023", raised_by: "_booking_availability,_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
-  { code: "23503", raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_field_document_for,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,work_set_state,work_take_assignment,work_template_instantiate" },
+  { code: "22023", raised_by: "_booking_availability,_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,io_export,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,record_update,record_write_many,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
+  { code: "23503", raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_field_document_for,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,view_declare,work_set_state,work_take_assignment,work_template_instantiate" },
   { code: "23505", raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,share_grant,sign_request_cancel,sign_request_create,work_approval_decide,work_slot_hold" },
-  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
+  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_claimed_column_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
   { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,record_table,share_grant,subscription_mute,subscription_preview,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
   { code: "42703", raised_by: "entity_table,portal_declare" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,enrich_due,enrich_land,promote_field" },
   { code: "54001", raised_by: "record_delete" },
-  { code: "PT409", raised_by: "record_update" }
+  { code: "PT409", raised_by: "record_update" },
+  { code: "PT428", raised_by: "_record_rule_uses" }
 ];
 var ENTITY_TOKENS = [
   "access_delta_probe",
@@ -1866,6 +1892,7 @@ var ENTITY_TOKENS = [
   "plan_node_artifact",
   "plan_node_step",
   "plan_profile",
+  "platform_action_request",
   "platform_actor_session",
   "platform_actor_token",
   "platform_actor_token_event",
@@ -2372,6 +2399,14 @@ var DOORS = {
   pipelineTransitionRefusal: "pipeline_transition_refusal",
   pipelineMove: "pipeline_move",
   tableStageField: "table_stage_field",
+  // STAGE-RULES. A gate can refuse or it can hand the change to the approvals queue; the
+  // closed list is the store's, the knob is the organization's, and what is WAITING on a
+  // card has to be askable or a card that did not move looks like a card nobody dragged.
+  stageRuleOnFailKinds: "stage_rule_on_fail_kinds",
+  stageRuleEnforcement: "stage_rule_enforcement",
+  recordStagePending: "record_stage_pending",
+  pipelinePending: "pipeline_pending",
+  pipelineGatePreview: "pipeline_gate_preview",
   ruleMembers: "rule_members",
   ruleMembership: "rule_membership",
   ruleRun: "rule_run",
@@ -2698,7 +2733,17 @@ var BY_SQLSTATE = {
   // the grants not copied, land here.
   PGRST202: "store_not_served",
   PGRST205: "store_not_served",
-  PGRST301: "door"
+  PGRST301: "door",
+  // PT428 — NOT A FAILURE, and the release gate's live census is what found it
+  // missing: the store raises it and this package answered `internal`, which is
+  // the one classification that tells a screen nothing. A stage gate whose
+  // `on_fail` is `require_approval` files the request and leaves the record
+  // where it was; the transaction is rolled back to the pipeline's own block, so
+  // "nothing was written" is a fact rather than a promise. Landed by lane
+  // STAGE-RULES; mapped here by STAGE-RULES-2 the day after, when the census
+  // caught it — the sixth time that census has been the thing that found a
+  // refusal class rather than a person guessing one.
+  PT428: "needs_approval"
 };
 var MAPPED_SQLSTATES = Object.keys(BY_SQLSTATE);
 function parseDetail(details) {
@@ -2877,16 +2922,17 @@ function createRecordsClient(config) {
       if (!door.ok) return err(door.error);
       const { document, hidden } = unfold(door.data);
       let computed = [];
+      let computedUnavailable = null;
       if (withComputed) {
         const provenance = await callDoor(
           DOORS.computedProvenance,
           { p_organization_id: org, p_record_id: record_id },
           "recordRead.computed"
         );
-        if (!provenance.ok) return err(provenance.error);
-        computed = provenance.data ?? [];
+        if (provenance.ok) computed = provenance.data ?? [];
+        else computedUnavailable = provenance.error;
       }
-      return ok({ record_id, document, hidden, computed });
+      return ok({ record_id, document, hidden, computed, computedUnavailable });
     },
     async list({ table_id, limit = 50, offset = 0 }) {
       const door = await callDoor(
@@ -3225,6 +3271,41 @@ function createRecordsClient(config) {
         "tableStageField"
       );
     },
+    async stageRuleOnFailKinds() {
+      return callDoor(
+        DOORS.stageRuleOnFailKinds,
+        {},
+        "stageRuleOnFailKinds"
+      );
+    },
+    async stageRuleEnforcement() {
+      return callDoor(
+        DOORS.stageRuleEnforcement,
+        { p_organization_id: org },
+        "stageRuleEnforcement"
+      );
+    },
+    async recordStagePending({ record_id }) {
+      return callDoor(
+        DOORS.recordStagePending,
+        { p_organization_id: org, p_record_id: record_id },
+        "recordStagePending"
+      );
+    },
+    async pipelinePending({ table_id }) {
+      return callDoor(
+        DOORS.pipelinePending,
+        { p_organization_id: org, p_table_id: table_id },
+        "pipelinePending"
+      );
+    },
+    async pipelineGatePreview({ table_id, stage, gate }) {
+      return callDoor(
+        DOORS.pipelineGatePreview,
+        { p_organization_id: org, p_table_id: table_id, p_stage: stage, p_gate: gate },
+        "pipelineGatePreview"
+      );
+    },
     async ruleMembers({ rule_id }) {
       return callDoor(
         DOORS.ruleMembers,