@ai-matrx/records 0.29.0 → 0.36.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { U as Uuid, T as TableType, a as TableDisplay, S as StorageMode, g as Timestamp, an as TableOrigin, h as RecordDocument, l as StoredRecord, k as Field, a0 as ParityFieldType, ad as RuleUse, ac as RuleNodeKind, R as RelationFlavor, O as OnDelete, aa as RelationBinding, f as RelationCardinality, W as MergeFieldSource, V as MergeFieldSemanticType, Q as MergeFieldModifier, Z as OverridePolicy, w as Delivery, H as Freshness, a2 as PerValueAccessWord, t as Actor } from './field-DrOTIPCF.js';
-export { A as ABSENCE_REASONS, r as ACTOR_VOCABULARY, s as AbsenceReason, u as COMPUTE_ON, v as CONTEXT_POLICIES, C as ComputeOn, e as ContextPolicy, D as DELIVERIES, E as ENTITY_TOKENS, x as EntityToken, y as FIELD_SENSITIVITIES, z as FIELD_SOURCES, B as FRESHNESS, G as FieldBehavior, m as FieldPatch, p as FieldProposal, c as FieldRule, d as FieldSensitivity, b as FieldSource, F as FieldTypeWord, I as HiddenFieldNotice, K as KERNEL_TABLES, J as KernelTableName, M as MERGE_FIELD_MODIFIERS, L as MERGE_FIELD_SEMANTIC_TYPES, P as MERGE_FIELD_SOURCES, N as NewFieldDeclaration, X as ON_DELETE, Y as OVERRIDE_POLICIES, _ as PARITY_FIELD_TYPES, $ as PER_VALUE_ACCESS_WORDS, a1 as ParityFieldTypeDescriptor, a3 as ProvenancePointer, a4 as RELATION_BINDINGS, a5 as RELATION_CARDINALITIES, a6 as RELATION_FLAVORS, a7 as RETIRED_ACTOR_WORDS, a8 as RULE_NODE_KINDS, a9 as RULE_USES, j as ReadRow, o as ReadValue, i as RecordRead, n as RecordRevision, ab as RetiredActorWord, ae as STORAGE_MODES, af as STORE_DOORS, ag as STORE_KNOBS, ah as STORE_REFUSAL_CODES, ai as StoreDoorName, aj as StoreRefusalCode, ak as TABLE_DISPLAYS, al as TABLE_ORIGINS, am as TABLE_TYPES, q as TableProposal, ao as VALUE_ALTERNATE_KEYS, ap as VALUE_ENVELOPE_KEYS, aq as ValueAlternate, ar as ValueAlternateKey, as as ValueEnvelope, at as ValueEnvelopeKey, au as ValueSource } from './field-DrOTIPCF.js';
+import { U as Uuid, T as TableType, a as TableDisplay, S as StorageMode, g as Timestamp, av as TableOrigin, h as RecordDocument, m as StoredRecord, l as Field, a7 as ParityFieldType, al as RuleUse, ak as RuleNodeKind, R as RelationFlavor, O as OnDelete, ai as RelationBinding, f as RelationCardinality, a1 as MergeFieldSource, a0 as MergeFieldSemanticType, $ as MergeFieldModifier, a4 as OverridePolicy, B as Delivery, M as Freshness, x as Actor, P as PgError } from './field-CWBdZfFv.js';
+export { A as ABSENCE_REASONS, v as ACTOR_VOCABULARY, w as AbsenceReason, y as COMPUTE_ON, z as CONTEXT_POLICIES, C as ComputeOn, e as ContextPolicy, D as DELIVERIES, E as ENTITY_TOKENS, G as EntityToken, H as FIELD_SENSITIVITIES, I as FIELD_SOURCES, J as FRESHNESS, K as FieldBehavior, n as FieldPatch, q as FieldProposal, c as FieldRule, d as FieldSensitivity, b as FieldSource, F as FieldTypeWord, L as ForbiddenEnvelopeWord, Q as HiddenFieldNotice, V as KERNEL_TABLES, X as KernelTableName, Y as MERGE_FIELD_MODIFIERS, Z as MERGE_FIELD_SEMANTIC_TYPES, _ as MERGE_FIELD_SOURCES, N as NewFieldDeclaration, a2 as ON_DELETE, a3 as OVERRIDE_POLICIES, a5 as PARITY_FIELD_TYPES, a6 as PER_VALUE_ACCESS_WORDS, a8 as ParityFieldTypeDescriptor, a9 as PerValueAccessWord, u as PredictedRefusal, aa as ProvenancePointer, ab as RELATION_BINDINGS, ac as RELATION_CARDINALITIES, ad as RELATION_FLAVORS, ae as RETIRED_ACTOR_WORDS, af as RULE_NODE_KINDS, ag as RULE_USES, k as ReadRow, p as ReadValue, j as RecordRead, o as RecordRevision, s as RecordsError, ah as RecordsErrorCode, i as RecordsResult, aj as RetiredActorWord, am as STORAGE_MODES, an as STORE_DOORS, ao as STORE_KNOBS, ap as STORE_REFUSAL_CODES, t as StaleWriteDetail, aq as StoreDoorName, ar as StoreRefusalCode, as as TABLE_DISPLAYS, at as TABLE_ORIGINS, au as TABLE_TYPES, r as TableProposal, aw as VALUE_ALTERNATE_KEYS, ax as VALUE_ENVELOPE_KEYS, ay as ValueAlternate, az as ValueAlternateKey, aA as ValueEnvelope, aB as ValueEnvelopeKey, aC as ValueSource, W as WriteConflict, aD as err, aE as isRecordsErr, aF as ok } from './field-CWBdZfFv.js';
 
 /** `public.permission_level`, in the store's own order. */
 type PermissionLevel = "viewer" | "commenter" | "editor" | "admin";
@@ -274,7 +274,25 @@ interface PipelineStage {
 }
 /** What each Rule of a pipeline is about. Closed, and the store is the authority. */
 declare const PIPELINE_RULE_KINDS: readonly ["moves", "requires", "who", "limit", "entry"];
-type PipelineRuleKind = (typeof PIPELINE_RULE_KINDS)[number];
+/**
+ * A GATE is the general form under `requires`, `who` and `limit`, and the store spells it
+ * `gate:1`, `gate:2` … so several gates can sit on one stage without one overwriting the
+ * next. It is matched as a prefix rather than listed, because the number is open.
+ */
+type PipelineRuleKind = (typeof PIPELINE_RULE_KINDS)[number] | `gate:${number}`;
+/**
+ * WHAT A GATE DOES WHEN IT SAYS NO. The closed list `custom.stage_rule_on_fail_kinds()`
+ * answers — a screen offering a third answer would be offering something no Rule can carry.
+ */
+declare const STAGE_RULE_ON_FAIL: readonly ["refuse", "require_approval"];
+type StageRuleOnFail = (typeof STAGE_RULE_ON_FAIL)[number];
+/**
+ * THE ORGANIZATION'S ONE KNOB (`custom/stage_rule_enforcement`). `refuse` is the default and
+ * what a gate is for; `warn` lets the move through and hands the same sentence back. It never
+ * softens `require_approval` — "ask somebody" and "carry on with a note" are different answers.
+ */
+declare const STAGE_RULE_ENFORCEMENT: readonly ["refuse", "warn"];
+type StageRuleEnforcement = (typeof STAGE_RULE_ENFORCEMENT)[number];
 /**
  * One transition Rule, as `custom.pipeline_read` hands it back — WITH the sentence it says
  * when it refuses, because a screen that knows a rule exists but not what it refuses in
@@ -291,8 +309,64 @@ interface PipelineRule {
     uses: string[];
     /** What happens when a card ARRIVES in this stage — assign, notify, start a checklist. */
     on_entry: Record<string, unknown> | null;
+    /**
+     * What this Rule does when it STOPS a move. `refuse` is the default and what every
+     * pipeline Rule did before gates existed; `require_approval` files the change in the
+     * approvals queue with this Rule's sentence as the reason and leaves the record alone.
+     */
+    on_fail?: StageRuleOnFail;
+    /**
+     * THE GATE AS IT WAS WRITTEN, which is the only thing that makes it EDITABLE.
+     *
+     * A gate is saved as one Rule whose expression is an `or` of four arms — not this
+     * stage, OR not a move, OR the gate is not about this card, OR the demand holds. That
+     * compiled form used to be the only copy, so a settings screen could read a gate's name
+     * and its sentence and nothing else: it would open every existing rule with a blank
+     * condition and overwrite it the first time somebody pressed Save.
+     *
+     * Absent on the four sugar rules (`moves`, `requires`, `who`, `limit`), which nobody
+     * writes in a condition builder, and on any gate declared before the store started
+     * keeping them. Absent means "this one was not written here" — never "it has no
+     * condition", which is a different and dangerous thing to draw.
+     */
+    when?: Record<string, unknown> | null;
+    /** @see {@link PipelineRule.when} — the condition that has to hold, as it was written. */
+    demands?: Record<string, unknown> | null;
     version: number;
 }
+/**
+ * WHAT A GATE WOULD DO TO THIS BOARD TODAY, from `custom.pipeline_gate_preview`.
+ *
+ * The one question somebody writing a rule that will refuse their colleagues' work
+ * actually has, answered while they are still typing it — the gate is judged as an
+ * argument, nothing is saved, and nothing is written. The store compiles it with the
+ * SAME compiler `pipeline_declare` uses, so this count and the refusal at the door are
+ * the same rule.
+ */
+interface PipelineGatePreview {
+    is_pipeline: boolean;
+    /** Present, and it says what would make a board exist, when `is_pipeline` is false. */
+    why?: string;
+    /** The stage key the gate was tried against. */
+    stage?: string;
+    /** Live cards of this board this person may see that are not already in that stage. */
+    considered: number;
+    /** How many of them this gate would turn away. */
+    refused: number;
+    /**
+     * Up to three of them, BY NAME. A count with no names is a number nobody can check, and
+     * checking it is the whole reason to show it before saving.
+     */
+    examples: {
+        record_id: Uuid;
+        title: string;
+    }[];
+    /** True when the board is larger than the preview will walk, so the count is a floor. */
+    truncated?: boolean;
+    on_fail?: StageRuleOnFail;
+    /** The word this board uses for one of its cards — "quote", "deal" — for the sentence. */
+    noun?: string;
+}
 /** The whole board's definition, from `custom.pipeline_read`. */
 interface Pipeline {
     is_pipeline: boolean;
@@ -338,6 +412,20 @@ interface PipelineMissingField {
 interface PipelineVerdict {
     allowed: boolean;
     is_pipeline: boolean;
+    /**
+     * The THREE answers a board has to draw differently, and the reason `allowed` alone is
+     * not enough: a card that is going for approval has not been refused, and a card that
+     * moved under `warn` has not been waved through silently.
+     */
+    outcome?: "allowed" | "refused" | "needs_approval" | "warned";
+    /** What this organization's one knob says right now. */
+    enforcement?: StageRuleEnforcement;
+    /** Set on `needs_approval`: what pressing on will actually do, in plain words. */
+    what_happens?: string;
+    /** Set on `warned`: the gates this organization asked to be told about, not stopped by. */
+    warnings?: StageRuleWarning[];
+    /** Approvals already filed against this card's own stage column that nobody has decided. */
+    pending?: StagePending[];
     /** The stage key the move was asked about. */
     to?: string;
     /** The store's own sentence — shown verbatim, never paraphrased by a screen. */
@@ -346,6 +434,8 @@ interface PipelineVerdict {
     rule_id?: Uuid;
     rule_version?: number;
     kind?: PipelineRuleKind;
+    /** What this Rule does when it stops a move. */
+    on_fail?: StageRuleOnFail;
     /**
      * When a stage demands columns that are empty, exactly which ones — so the screen can
      * prompt for them on entry instead of sending the person away to find them.
@@ -382,9 +472,80 @@ interface PipelineSpec {
     limits?: Record<string, number>;
     /** Stage name → what happens when a card arrives: assign, notify, start a checklist. */
     on_entry?: Record<string, Record<string, unknown>>;
+    /**
+     * Stage name → the gates a card has to get past to land there. The general form under
+     * `requires`, `who` and `limits`, and the only one that can say `require_approval`.
+     */
+    gates?: Record<string, PipelineGate[]>;
     moves_message?: string;
     requires_messages?: Record<string, string>;
 }
+/**
+ * A gate the organization's own knob overruled. NOTHING FAILS SILENTLY: the move happened
+ * and the sentence comes back WITH it, together with what to do about it.
+ */
+interface StageRuleWarning {
+    rule_id: Uuid;
+    rule: string;
+    /** The gate's own sentence, shown verbatim. */
+    why: string;
+    what_to_do: string;
+}
+/** An approval filed against this card's stage column that nobody has decided yet. */
+interface StagePending {
+    approval_id: Uuid;
+    /** The stage key the card is waiting to go to. */
+    to: string;
+    why: string | null;
+    requested_at: string;
+    state: string;
+}
+/**
+ * The same wait, asked for a WHOLE BOARD in one question (`custom.pipeline_pending`), so a
+ * board can badge every card that is waiting without a round trip per card — and therefore
+ * actually does it, instead of drawing a filed card as if nobody had ever dragged it.
+ */
+interface StagePendingOnBoard extends StagePending {
+    record_id: Uuid;
+}
+/** What `custom.pipeline_move` answers — an OBJECT on every path, never a bare number. */
+interface PipelineMoveResult {
+    applied: boolean;
+    moved: boolean;
+    outcome: "moved" | "moved_with_warnings" | "needs_approval";
+    to: string;
+    version: number;
+    /** Set on `moved_with_warnings`. */
+    warnings?: StageRuleWarning[];
+    /** Set on `needs_approval`: the gate's sentence, the wait that was filed, and who has it. */
+    why?: string;
+    rule?: string;
+    rule_id?: Uuid;
+    approval_id?: Uuid;
+    approvers?: {
+        user_id: Uuid;
+        name: string | null;
+        why: string;
+    }[];
+    what_happens?: string;
+}
+/**
+ * ONE GATE ON A STAGE, as the condition builder on the stage settings screen writes it.
+ * `requires`, `who` and `limits` are sugar over this shape; this is the general form, and
+ * it speaks the SAME condition language as filters and formulas — never a second one.
+ */
+interface PipelineGate {
+    /** What the gate is called in the settings list. */
+    name?: string;
+    /** The sentence a person reads when it stops them. Required: a refusal with no words is a dead end. */
+    message: string;
+    /** WHEN this gate is about this record at all. Absent means always. */
+    when?: Record<string, unknown>;
+    /** What has to hold. One condition node of the one Rule language. */
+    demands: Record<string, unknown>;
+    /** Default `refuse`. */
+    on_fail?: StageRuleOnFail;
+}
 /**
  * THE ONE PLACE A SCREEN DECIDES WHETHER A CARD LOOKS DRAGGABLE — and it decides on the
  * PERSON, not on the rules. Whether a particular move is allowed is
@@ -2347,143 +2508,6 @@ interface ResolvedPublishBinding {
     notice: string;
 }
 
-/**
- * What KIND of refusal it was. The mapping from SQLSTATE to code lives in
- * `/core`, and it is checked against `STORE_REFUSAL_CODES` — the list of every
- * SQLSTATE the store's own bodies raise, generated from the live catalogue. A
- * code the store can raise and this union cannot name is a hole, and the
- * real-door suite fails on it.
- */
-type RecordsErrorCode = 
-/** `PT409` — somebody else's write won. The record clock moved under you. */
-"stale_write"
-/** `42501` — a door. Either the schema is revoked, or the store is switched off, or this principal may not pass. */
- | "door"
-/** `23514` — a Rule, a shape guard, or a validation the store enforces refused it. */
- | "refused_by_rule"
-/**
- * `22004` / `22023` / `22P02` — the call itself was malformed: a missing id, a
- * patch that is not an object, or a value that does not fit the type the
- * store holds for that Field. The store's own message names the value and the
- * type it could not be read as.
- */
- | "invalid_argument"
-/** `02000` — the record is not here (deleted, never existed, or another organization's). */
- | "not_found"
-/** `23503` — something it points at is not there. */
- | "missing_reference"
-/** `23505` — that thing is already here. */
- | "already_exists"
-/** `0A000` — the store does not do this yet, and says which part. */
- | "not_supported"
-/** `53400` / `22012` — the store ran out of something, or the arithmetic could not be done. */
- | "store_limit"
-/**
- * `40001` — the visibility snapshot this connection carries is older than a
- * write the reader has already observed, so the store refused to answer at
- * all rather than hand back something they just lost. Retry on a fresh
- * connection; it is the one refusal in this list that is worth repeating.
- */
- | "stale_read"
-/**
- * `57014` — the store cancelled the statement at its own timeout. Nothing was
- * refused on its merits and nothing was written; the same call can succeed on
- * a smaller page or a quieter moment. With `stale_read`, one of the only two
- * refusals in this list worth repeating.
- */
- | "timed_out"
-/**
- * THE DOOR THAT DOES NOT EXIST YET. Not an error condition in the database —
- * this package asked for a door that is not in the live catalogue, so it
- * refused to guess. `door_absent` always names the door and the lane that
- * owns it; it is never a silent no-op and never an empty list.
- */
- | "door_absent"
-/**
- * `PGRST202` / `PGRST205` — PostgREST could not find the function or the
- * schema. The database this client is pointed at is not serving the record
- * store: the schema is not exposed, or the grants are not there.
- */
- | "store_not_served"
-/** Anything the mapper could not place. It still carries the store's own words. */
- | "internal";
-/** A refusal, in the store's own words. */
-interface RecordsError {
-    code: RecordsErrorCode;
-    /** THE STORE'S message, verbatim. Never paraphrased. */
-    message: string;
-    /** THE STORE'S hint, verbatim — this is where the remedy is written. */
-    hint?: string;
-    /** The SQLSTATE, so a caller can be exact when a code is not exact enough. */
-    sqlstate?: string;
-    /** Whatever the store put in DETAIL, parsed when it was json. */
-    detail?: unknown;
-}
-type RecordsResult<T> = {
-    ok: true;
-    data: T;
-} | {
-    ok: false;
-    error: RecordsError;
-};
-/** Narrowing helper for hosts compiled without `strictNullChecks`. */
-declare function isRecordsErr<T>(result: RecordsResult<T>): result is {
-    ok: false;
-    error: RecordsError;
-};
-declare const ok: <T>(data: T) => RecordsResult<T>;
-declare const err: <T>(error: RecordsError) => RecordsResult<T>;
-/**
- * A `stale_write` carries everything the screen needs to show the conflict
- * rather than a toast: which version you wrote against, which one won, and the
- * value of every field you touched as it stands now. The store builds this and
- * this type is its shape — nothing is reconstructed on the client.
- */
-interface StaleWriteDetail {
-    expected_version: number;
-    current_version: number;
-    contested_fields: Record<string, unknown>;
-}
-/** The parsed form of a `stale_write`, for `useRecordMutation`'s conflict state. */
-interface WriteConflict extends StaleWriteDetail {
-    record_id: Uuid;
-    /** The store's own sentence — what the screen shows. */
-    message: string;
-    /** The store's own remedy. */
-    hint: string;
-}
-/**
- * The structural shape of a PostgREST failure as supabase-js resolves it: a
- * PLAIN OBJECT parsed from the response body, NOT an `Error`. Reading
- * `.message` off `instanceof Error` discards the real database message on every
- * genuine failure.
- */
-interface PgError {
-    code?: string | null;
-    message: string;
-    details?: string | null;
-    hint?: string | null;
-}
-/** What the validation mirror answers: the same sentence the trigger would raise. */
-interface PredictedRefusal {
-    /** The field key the store would name, when it names one. */
-    field_key?: string;
-    /** The message the store's own body would raise, word for word. */
-    message: string;
-    hint?: string;
-    sqlstate: string;
-    /**
-     * Which of the store's bodies would raise it, so a reader can go and check
-     * that this mirror still tells the truth.
-     */
-    predicted_by: string;
-}
-/** VAL-5 / VAL-6, named so a caller can say which word was the problem. */
-interface ForbiddenEnvelopeWord {
-    field_key: string;
-    word: PerValueAccessWord;
-}
-
 /**
  * The data seam: a structural subset of `SupabaseClient`. The package never
  * opens a database connection of its own and never holds a key — the HOST
@@ -2720,4 +2744,4 @@ interface ConversationScopeContext {
 /** `About: Acme Industrial` — the chip a bound chat wears. */
 declare function scopeChip(scope: ConversationScope): string;
 
-export { Actor, type AggregateBucket, type AggregateFilter, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AggregateWindow, type AnonTokenBinding, type BookingSummary, type CaptureField, type CaptureFileRef, type CaptureOutcome, type CaptureQuestion, type CaptureQueue, type CaptureQueueCounts, type CaptureQueueOptions, type CaptureQueuePorts, type CaptureQueueStore, type CaptureSheetFace, type CaptureSheetSummary, type CaptureSyncReport, type ChecklistDeclared, type ChecklistRequirement, type ChecklistRequirementKind, type ChecklistRoleSpec, type ChecklistRunStarted, type ChecklistRunStep, type ChecklistRunSummary, type ChecklistSpec, type ChecklistStepCompleted, type ChecklistStepSpec, type ChecklistTemplateShape, type ChecklistTemplateSummary, type ChecklistTrigger, type ChecklistTriggerKind, type ChoiceOption, type CommentThreadRead, type CommentWritten, type ConversationScope, type ConversationScopeContext, type CustomFieldTableType, type DashboardBlock, type DashboardBlockKind, type DashboardBlockResult, type DashboardRunResult, type DashboardSummary, Delivery, type DigestPreview, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, type EnrichAlternate, type EnrichCell, type EnrichDeclared, type EnrichDueRow, type EnrichRun, type EnrichSource, type Enrichment, type EnrichmentSummary, type EntityFieldRights, type EntityFieldValue, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityTableFacts, type ExternalPrincipalCard, Field, type FieldHistoryEntry, type ForbiddenEnvelopeWord, type FormSummary, Freshness, type HistoryActor, type HistoryActorKind, type HistoryChange, type Home, type ImportBatchResult, type ImportColumnPlan, type ImportFinished, type ImportOpened, type ImportOutcome, type ImportPlan, type ImportPolicy, type ImportProposal, type ImportReport, type ImportRun, type InboundAddress, type InboundDeclared, type MergeField, MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type MyLevel, type MySubscription, type NewEntityFieldDeclaration, OnDelete, OverridePolicy, PERMISSION_LEVELS, PIPELINE_RULE_KINDS, ParityFieldType, PerValueAccessWord, type PermissionLevel, type PgError, type Pipeline, type PipelineColumn, type PipelineDeclared, type PipelineMissingField, type PipelineRule, type PipelineRuleKind, type PipelineSpec, type PipelineStage, type PipelineVerdict, type PortalCard, type PortalInvitation, type PortalPreviewRow, type PortalPrincipal, type PortalRevocation, type PortalSummary, type PortalTableExposure, type PredictedRefusal, type PublishBinding, type QueuedCapture, type QueuedCaptureFile, type QueuedCaptureState, type QuietHours, REFUSALS_WORTH_REPEATING, type RecordComment, RecordDocument, type RecordHistoryEntry, type RecordScopeComment, type RecordScopeContext, type RecordScopeField, type RecordScopeHistoryEntry, type RecordScopeRelation, type RecordScopeWithheld, type RecordsActor, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, type RecordsTableQuery, type RegisteredTable, type Relation, RelationBinding, RelationCardinality, type RelationCarries, type RelationCoordinate, RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RestorePreview, type RestoreResult, type Rule, type RuleAnswer, type RuleExpression, RuleNodeKind, RuleUse, type StaleWriteDetail, StorageMode, StoredRecord, type StuckRow, type Subscription, type SubscriptionBlock, type SubscriptionCadence, type SubscriptionSpec, type Table, type TableCapacity, TableDisplay, TableOrigin, TableType, Timestamp, Uuid, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, asPermissionLevel, atLeast, bookingPath, choiceSlug, choiceValuesOf, choicesOf, err, highestLevel, holdsARetiredChoice, indexedDbStore, isDecided, isRecordsErr, isTheChosen, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, ok, openCaptureQueue, optionKey, optionLabel, portalPath, publicFormPath, scopeChip };
+export { Actor, type AggregateBucket, type AggregateFilter, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AggregateWindow, type AnonTokenBinding, type BookingSummary, type CaptureField, type CaptureFileRef, type CaptureOutcome, type CaptureQuestion, type CaptureQueue, type CaptureQueueCounts, type CaptureQueueOptions, type CaptureQueuePorts, type CaptureQueueStore, type CaptureSheetFace, type CaptureSheetSummary, type CaptureSyncReport, type ChecklistDeclared, type ChecklistRequirement, type ChecklistRequirementKind, type ChecklistRoleSpec, type ChecklistRunStarted, type ChecklistRunStep, type ChecklistRunSummary, type ChecklistSpec, type ChecklistStepCompleted, type ChecklistStepSpec, type ChecklistTemplateShape, type ChecklistTemplateSummary, type ChecklistTrigger, type ChecklistTriggerKind, type ChoiceOption, type CommentThreadRead, type CommentWritten, type ConversationScope, type ConversationScopeContext, type CustomFieldTableType, type DashboardBlock, type DashboardBlockKind, type DashboardBlockResult, type DashboardRunResult, type DashboardSummary, Delivery, type DigestPreview, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, type EnrichAlternate, type EnrichCell, type EnrichDeclared, type EnrichDueRow, type EnrichRun, type EnrichSource, type Enrichment, type EnrichmentSummary, type EntityFieldRights, type EntityFieldValue, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityTableFacts, type ExternalPrincipalCard, Field, type FieldHistoryEntry, type FormSummary, Freshness, type HistoryActor, type HistoryActorKind, type HistoryChange, type Home, type ImportBatchResult, type ImportColumnPlan, type ImportFinished, type ImportOpened, type ImportOutcome, type ImportPlan, type ImportPolicy, type ImportProposal, type ImportReport, type ImportRun, type InboundAddress, type InboundDeclared, type MergeField, MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type MyLevel, type MySubscription, type NewEntityFieldDeclaration, OnDelete, OverridePolicy, PERMISSION_LEVELS, PIPELINE_RULE_KINDS, ParityFieldType, type PermissionLevel, PgError, type Pipeline, type PipelineColumn, type PipelineDeclared, type PipelineGate, type PipelineGatePreview, type PipelineMissingField, type PipelineMoveResult, type PipelineRule, type PipelineRuleKind, type PipelineSpec, type PipelineStage, type PipelineVerdict, type PortalCard, type PortalInvitation, type PortalPreviewRow, type PortalPrincipal, type PortalRevocation, type PortalSummary, type PortalTableExposure, type PublishBinding, type QueuedCapture, type QueuedCaptureFile, type QueuedCaptureState, type QuietHours, REFUSALS_WORTH_REPEATING, type RecordComment, RecordDocument, type RecordHistoryEntry, type RecordScopeComment, type RecordScopeContext, type RecordScopeField, type RecordScopeHistoryEntry, type RecordScopeRelation, type RecordScopeWithheld, type RecordsActor, type RecordsConfig, type RecordsDataSource, type RecordsErrorSink, type RecordsFilter, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsTableQuery, type RegisteredTable, type Relation, RelationBinding, RelationCardinality, type RelationCarries, type RelationCoordinate, RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RestorePreview, type RestoreResult, type Rule, type RuleAnswer, type RuleExpression, RuleNodeKind, RuleUse, STAGE_RULE_ENFORCEMENT, STAGE_RULE_ON_FAIL, type StagePending, type StagePendingOnBoard, type StageRuleEnforcement, type StageRuleOnFail, type StageRuleWarning, StorageMode, StoredRecord, type StuckRow, type Subscription, type SubscriptionBlock, type SubscriptionCadence, type SubscriptionSpec, type Table, type TableCapacity, TableDisplay, TableOrigin, TableType, Timestamp, Uuid, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, asPermissionLevel, atLeast, bookingPath, choiceSlug, choiceValuesOf, choicesOf, highestLevel, holdsARetiredChoice, indexedDbStore, isDecided, isTheChosen, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, openCaptureQueue, optionKey, optionLabel, portalPath, publicFormPath, scopeChip };

package/dist/index.js

@@ -126,6 +126,8 @@ function looksLikeAnId(value) {
 
 // src/pipeline.ts
 var PIPELINE_RULE_KINDS = ["moves", "requires", "who", "limit", "entry"];
+var STAGE_RULE_ON_FAIL = ["refuse", "require_approval"];
+var STAGE_RULE_ENFORCEMENT = ["refuse", "warn"];
 function mayDrag(level) {
   return level === "editor" || level === "admin" || level === "owner";
 }
@@ -445,6 +447,7 @@ var RULE_USES = ["validate", "compute", "membership", "applicability"];
 var PER_VALUE_ACCESS_WORDS = ["visibility", "access", "share", "acl", "permission", "permissions", "secret"];
 var PARITY_FIELD_TYPES = [
   { parity_type: "attachment", behavior: "relation", made_of: "REC-31: a File record reached through a relation, target the kernel `File` Table" },
+  { parity_type: "checkbox", behavior: "boolean", made_of: "a ticked or unticked answer, stored as a REAL boolean \u2014 and a record that never answered holds neither, so filters and group-by see three states, not two" },
   { parity_type: "currency", behavior: "range", made_of: "FLD-N-1: a number whose UNIT is the currency and whose format is currency \u2014 on the Field, never in presentation" },
   { parity_type: "datetime", behavior: "range", made_of: "a range of kind date or datetime \u2014 the dated modifier says the VALUES are dated, which is a different question" },
   { parity_type: "email", behavior: "text", made_of: "text whose format is email" },
@@ -481,6 +484,7 @@ var RULE_NODE_KINDS = [
   { node: "parent_field", evaluated_by: "W1-RULE-APPLY" },
   { node: "present", evaluated_by: "W1-RULE" },
   { node: "previous", evaluated_by: "PIPELINES" },
+  { node: "sibling_count", evaluated_by: "STAGE-RULES" },
   { node: "stage_count", evaluated_by: "PIPELINES" },
   { node: "sub", evaluated_by: "W1-RULE" }
 ];
@@ -499,6 +503,8 @@ var STORE_DOORS = [
   { name: "absence_reasons", args: "", returns: "text[]", security: "invoker" },
   { name: "actor_vocabulary", args: "", returns: "text[]", security: "invoker" },
   { name: "actor_word", args: "p_declared text", returns: "text", security: "invoker" },
+  { name: "addressed_cap", args: "p_user_id uuid, p_type text, p_id uuid, p_organization_id uuid DEFAULT NULL::uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "permission_level", security: "definer" },
+  { name: "addressed_cap_specific", args: "p_user_id uuid, p_type text, p_id uuid, p_organization_id uuid DEFAULT NULL::uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "permission_level", security: "definer" },
   { name: "agent_change_approval", args: "p_organization uuid, p_conversation uuid DEFAULT NULL::uuid, p_table uuid DEFAULT NULL::uuid", returns: "jsonb", security: "definer" },
   { name: "agent_context", args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 50", returns: "jsonb", security: "invoker" },
   { name: "agent_table_claim", args: "p_organization uuid, p_table uuid, p_conversation uuid DEFAULT NULL::uuid", returns: "void", security: "definer" },
@@ -672,7 +678,7 @@ var STORE_DOORS = [
   { name: "entity_records_find", args: "p_organization_id uuid, p_token text, p_key text, p_value jsonb DEFAULT NULL::jsonb, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0", returns: "jsonb", security: "invoker" },
   { name: "entity_table", args: "p_token text", returns: "TABLE(token text, schema_name text, table_name text, type text, title_column text, label text, has_organization boolean, has_deleted_at boolean)", security: "invoker" },
   { name: "entity_value_write", args: "p_organization_id uuid, p_token text, p_record_id uuid, p_patch jsonb", returns: "jsonb", security: "invoker" },
-  { name: "export_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "definer" },
+  { name: "export_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "invoker" },
   { name: "export_records", args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 1000", returns: "TABLE(id uuid, document jsonb)", security: "invoker" },
   { name: "external_foreign_table_findings", args: "", returns: "SETOF text", security: "definer" },
   { name: "external_history_event", args: "p_organization_id uuid, p_link_id uuid, p_operation text", returns: "bigint", security: "definer" },
@@ -752,6 +758,9 @@ var STORE_DOORS = [
   { name: "io_proposal_reject", args: "p_organization_id uuid, p_import_id uuid, p_column text", returns: "boolean", security: "definer" },
   { name: "io_proposal_spec", args: "p_proposal jsonb", returns: "jsonb", security: "invoker" },
   { name: "io_record_changed", args: "", returns: "trigger", security: "definer" },
+  { name: "io_record_changed_stmt_delete", args: "", returns: "trigger", security: "definer" },
+  { name: "io_record_changed_stmt_insert", args: "", returns: "trigger", security: "definer" },
+  { name: "io_record_changed_stmt_update", args: "", returns: "trigger", security: "definer" },
   { name: "io_relation_candidate", args: "p_organization_id uuid, p_table_id uuid, p_words text[]", returns: "uuid", security: "invoker" },
   { name: "io_restore", args: "p_organization_id uuid, p_record_id uuid, p_version integer", returns: "integer", security: "definer" },
   { name: "io_restore", args: "p_organization_id uuid, p_record_id uuid, p_version integer, p_author jsonb", returns: "integer", security: "definer" },
@@ -760,6 +769,8 @@ var STORE_DOORS = [
   { name: "io_value_shape", args: "p_envelope jsonb", returns: "jsonb", security: "invoker" },
   { name: "is_a_retirement", args: "p_old_deleted timestamp with time zone, p_new_deleted timestamp with time zone, p_old_data jsonb, p_new_data jsonb, p_old_table uuid, p_new_table uuid, p_old_org uuid, p_new_org uuid, p_old_class text, p_new_class text", returns: "boolean", security: "invoker" },
   { name: "ladder_replanners", args: "p_roots text[] DEFAULT ARRAY['custom.has_visibility'::text, 'custom.effective_level'::text, 'custom.reaches_directly'::text, 'custom.visible_set'::text]", returns: "TABLE(fn text, lang text, why text, remedy text)", security: "definer" },
+  { name: "level_floor", args: "", returns: "permission_level", security: "definer" },
+  { name: "levels_raised_by_a_less_specific_rung", args: "", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, member_email text, record_id uuid, addressed_level permission_level, answered_level permission_level)", security: "definer" },
   { name: "list_door_disagreements", args: "p_pretend text DEFAULT NULL::text, p_only_organization uuid DEFAULT NULL::uuid, p_sample integer DEFAULT 200", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, table_id uuid, record_id uuid, door text, why text)", security: "invoker" },
   { name: "list_door_disagreements", args: "p_pretend text, p_only_organization uuid, p_sample integer, p_exhaustive boolean", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, table_id uuid, record_id uuid, door text, why text)", security: "invoker" },
   { name: "lookup_value", args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb", returns: "jsonb", security: "invoker" },
@@ -790,9 +801,9 @@ var STORE_DOORS = [
   { name: "organization_references", args: "p_kind text, p_organization_id uuid, p_row jsonb", returns: "TABLE(site text, what text, ref_id uuid, openable boolean)", security: "invoker" },
   { name: "owning_table", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "invoker" },
   { name: "owning_table_gone", args: "p_organization_id uuid, p_record_id uuid", returns: "boolean", security: "invoker" },
-  { name: "page_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "definer" },
+  { name: "page_ceiling", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "integer", security: "invoker" },
   { name: "page_contract", args: "p_organization_id uuid", returns: "jsonb", security: "definer" },
-  { name: "page_size", args: "p_organization_id uuid, p_door text, p_limit integer, p_default integer DEFAULT NULL::integer, p_ceiling integer DEFAULT NULL::integer", returns: "integer", security: "definer" },
+  { name: "page_size", args: "p_organization_id uuid, p_door text, p_limit integer, p_default integer DEFAULT NULL::integer, p_ceiling integer DEFAULT NULL::integer", returns: "integer", security: "invoker" },
   { name: "parity_field_types", args: "", returns: "TABLE(parity_type text, behavior text, made_of text)", security: "invoker" },
   { name: "parity_type", args: "p_field_data jsonb", returns: "text", security: "invoker" },
   { name: "parity_values", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(field_key text, field_id uuid, parity_type text, behavior text, unit text, format text, value jsonb, value_version integer, actor text, written_at timestamp with time zone)", security: "invoker" },
@@ -801,7 +812,9 @@ var STORE_DOORS = [
   { name: "pin_agent_cells", args: "p_new jsonb, p_old jsonb, p_agent_keys text[]", returns: "jsonb", security: "invoker" },
   { name: "pipeline_board", args: "p_organization_id uuid, p_table_id uuid, p_measure text DEFAULT NULL::text", returns: "TABLE(stage_key text, stage_label text, stage_position integer, cards bigint, total numeric, wip_limit integer, over_limit boolean)", security: "definer" },
   { name: "pipeline_declare", args: "p_organization_id uuid, p_table_id uuid, p_spec jsonb", returns: "jsonb", security: "definer" },
+  { name: "pipeline_gate_preview", args: "p_organization_id uuid, p_table_id uuid, p_stage text, p_gate jsonb", returns: "jsonb", security: "definer" },
   { name: "pipeline_move", args: "p_organization_id uuid, p_record_id uuid, p_to text, p_also jsonb DEFAULT '{}'::jsonb, p_expected_version integer DEFAULT NULL::integer", returns: "jsonb", security: "definer" },
+  { name: "pipeline_pending", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "pipeline_read", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "pipeline_transition_refusal", args: "p_organization_id uuid, p_record_id uuid, p_to text", returns: "jsonb", security: "definer" },
   { name: "portal_admits", args: "p_organization_id uuid, p_user_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "definer" },
@@ -868,6 +881,7 @@ var STORE_DOORS = [
   { name: "record_carrying_edges", args: "p_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(container_id uuid, item_id uuid, edge_role text)", security: "invoker" },
   { name: "record_delete", args: "p_organization_id uuid, p_record_id uuid", returns: "timestamp with time zone", security: "definer" },
   { name: "record_history", args: "p_organization_id uuid, p_record_id uuid, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0", returns: "TABLE(version integer, occurred_at timestamp with time zone, operation text, operation_label text, actor jsonb, changes jsonb, migration_id uuid, undoable boolean)", security: "definer" },
+  { name: "record_platform_keys", args: "", returns: "text[]", security: "invoker" },
   { name: "record_relation_edges", args: "p_organization_id uuid, p_id uuid, p_table_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(target_id uuid, edge_role text, field_id uuid, ord integer)", security: "invoker" },
   { name: "record_reparent", args: "p_organization_id uuid, p_record_id uuid, p_parent_id uuid", returns: "void", security: "definer" },
   { name: "record_resolve", args: "p_organization_id uuid, p_id uuid", returns: "jsonb", security: "definer" },
@@ -876,12 +890,14 @@ var STORE_DOORS = [
   { name: "record_restore_version", args: "p_organization_id uuid, p_record_id uuid, p_version integer", returns: "jsonb", security: "definer" },
   { name: "record_restore_version", args: "p_organization_id uuid, p_record_id uuid, p_version integer, p_author jsonb", returns: "jsonb", security: "definer" },
   { name: "record_scope_context", args: "p_organization_id uuid, p_record_id uuid, p_relations integer DEFAULT 12, p_history integer DEFAULT 15, p_siblings integer DEFAULT 8", returns: "jsonb", security: "definer" },
+  { name: "record_stage_pending", args: "p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "definer" },
   { name: "record_state_as_of", args: "p_record_id uuid, p_at timestamp with time zone", returns: "TABLE(state jsonb, replayed boolean)", security: "definer" },
   { name: "record_table", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "definer" },
   { name: "record_update", args: "p_organization_id uuid, p_record_id uuid, p_patch jsonb, p_expected_version integer DEFAULT NULL::integer", returns: "integer", security: "definer" },
   { name: "record_values", args: "p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "invoker" },
   { name: "record_values_versioned", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(field_key text, field_id uuid, value jsonb, value_version integer, source jsonb, absent_reason text, actor text, on_behalf_of text, written_at timestamp with time zone, alternates jsonb)", security: "definer" },
   { name: "record_write", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "uuid", security: "definer" },
+  { name: "record_write_many", args: "p_organization_id uuid, p_table_id uuid, p_rows jsonb[], p_ids uuid[] DEFAULT NULL::uuid[]", returns: "uuid[]", security: "definer" },
   { name: "refusals_claiming_a_level_never_asked", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "relation_carry", args: "p_organization_id uuid, p_container_id uuid, p_item_id uuid", returns: "uuid", security: "definer" },
   { name: "relation_edges_withdraw", args: "p_organization_id uuid, p_field_ids uuid[], p_why text", returns: "integer", security: "definer" },
@@ -938,6 +954,8 @@ var STORE_DOORS = [
   { name: "size_refusal", args: "p_organization_id uuid, p_data jsonb", returns: "text", security: "invoker" },
   { name: "source_next_pointer", args: "p_sources jsonb", returns: "text", security: "invoker" },
   { name: "source_pointer", args: "p_sources jsonb, p_source jsonb", returns: "text", security: "invoker" },
+  { name: "stage_rule_enforcement", args: "p_organization_id uuid", returns: "text", security: "invoker" },
+  { name: "stage_rule_on_fail_kinds", args: "", returns: "TABLE(behaviour text, note text)", security: "invoker" },
   { name: "stamp_value_envelopes", args: "p_data jsonb, p_actor text, p_on_behalf_of text, p_at timestamp with time zone", returns: "jsonb", security: "invoker" },
   { name: "storage_modes", args: "", returns: "text[]", security: "invoker" },
   { name: "store_is_open", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "invoker" },
@@ -948,6 +966,7 @@ var STORE_DOORS = [
   { name: "subscriptions", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(rule_id uuid, name text, table_id uuid, saved_view_id uuid, cadence text, schedule text, quiet_hours jsonb, channel text, recipient_user_id uuid, event_key text, muted boolean, mine boolean, i_may_mute boolean, last_sent_at timestamp with time zone, next_digest_at timestamp with time zone)", security: "definer" },
   { name: "table_capacity", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "table_carries_its_rows", args: "p_user_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
+  { name: "table_column_source", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
   { name: "table_contents", args: "p_organization_id uuid, p_table_id uuid", returns: "TABLE(record_id uuid, kind text, goes_at integer)", security: "invoker" },
   { name: "table_declare", args: "p_organization_id uuid, p_spec jsonb", returns: "uuid", security: "definer" },
   { name: "table_has_a_visible_record", args: "p_user uuid, p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "definer" },
@@ -962,6 +981,7 @@ var STORE_DOORS = [
   { name: "tables_at_home", args: "p_organization_id uuid, p_home_ids uuid[]", returns: "TABLE(table_id uuid, home_record_id uuid, kind text)", security: "definer" },
   { name: "tables_described_without_asking", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "trg_associations_bump_visibility", args: "", returns: "trigger", security: "definer" },
+  { name: "undeclared_keys", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "text[]", security: "invoker" },
   { name: "validate_custom_fields", args: "p_token text, p_organization_id uuid, p_values jsonb", returns: "void", security: "invoker" },
   { name: "validate_value_envelope", args: "p_organization_id uuid, p_fields custom.record[], p_data jsonb", returns: "void", security: "invoker" },
   { name: "validate_values", args: "p_organization_id uuid, p_fields custom.record[], p_values jsonb, p_record_type text DEFAULT NULL::text", returns: "void", security: "invoker" },
@@ -973,6 +993,8 @@ var STORE_DOORS = [
   { name: "value_restore", args: "p_organization_id uuid, p_record_id uuid, p_field_key text, p_version integer", returns: "jsonb", security: "definer" },
   { name: "value_restore", args: "p_organization_id uuid, p_record_id uuid, p_field_key text, p_version integer, p_author jsonb", returns: "jsonb", security: "definer" },
   { name: "value_versions", args: "p_old jsonb, p_new jsonb", returns: "jsonb", security: "invoker" },
+  { name: "view_declare", args: "p_organization_id uuid, p_table_id uuid, p_spec jsonb", returns: "uuid", security: "definer" },
+  { name: "views", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(view_id uuid, name text, table_id uuid, filters jsonb, definition jsonb, created_at timestamp with time zone)", security: "definer" },
   { name: "visibility_ancestors", args: "p_item_type text, p_item_id uuid", returns: "TABLE(container_type text, container_id uuid, depth integer, max_level permission_level)", security: "definer" },
   { name: "visibility_as_of", args: "p_organization_id uuid, p_record_id uuid, p_at timestamp with time zone", returns: "TABLE(principal_kind text, principal_id uuid, level permission_level, through_kind text, through_id uuid, reason text, replayed boolean, held_from timestamp with time zone, held_to timestamp with time zone)", security: "definer" },
   { name: "visibility_cache_rebuild", args: "", returns: "integer", security: "definer" },
@@ -1060,6 +1082,7 @@ var STORE_KNOBS = [
   { key: "sandbox_message_bytes", value: "65536", type: "integer" },
   { key: "sandbox_org_components", value: "true", type: "boolean" },
   { key: "signup_provisioning_guard", value: "false", type: "boolean" },
+  { key: "stage_rule_enforcement", value: '"refuse"', type: "enum" },
   { key: "system_enabled", value: "false", type: "boolean" },
   { key: "table_record_ceiling", value: "150000", type: "integer" },
   { key: "value_max_bytes", value: "100000", type: "integer" },
@@ -1069,19 +1092,20 @@ var STORE_REFUSAL_CODES = [
   { code: "02000", raised_by: "_checklist_instantiate,checklist_declare,checklist_run,checklist_step_complete,checklist_step_refusal,checklist_template_shape,conversation_scope_bind,dashboard_delete,dashboard_run,doc_letterhead,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,enrich_pin,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_card,portal_declare,portal_invite,portal_preview,portal_principal_bind,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,sign_request_cancel,sign_request_create,sign_request_remind,sign_request_unchanged,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state" },
   { code: "0A000", raised_by: "checklist_step_complete,external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign" },
   { code: "22003", raised_by: "context_resolve" },
-  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,value_restore,work_approval_decide,work_approval_request,work_template_declare" },
+  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,pipeline_gate_preview,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,record_write_many,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,value_restore,view_declare,work_approval_decide,work_approval_request,work_template_declare" },
   { code: "22007", raised_by: "dashboard_window_sql" },
   { code: "22012", raised_by: "rule_eval" },
-  { code: "22023", raised_by: "_booking_availability,_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
-  { code: "23503", raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_field_document_for,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,work_set_state,work_take_assignment,work_template_instantiate" },
+  { code: "22023", raised_by: "_booking_availability,_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,io_export,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,record_update,record_write_many,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
+  { code: "23503", raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_field_document_for,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,view_declare,work_set_state,work_take_assignment,work_template_instantiate" },
   { code: "23505", raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,share_grant,sign_request_cancel,sign_request_create,work_approval_decide,work_slot_hold" },
-  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
+  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_claimed_column_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
   { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,record_table,share_grant,subscription_mute,subscription_preview,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
   { code: "42703", raised_by: "entity_table,portal_declare" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,enrich_due,enrich_land,promote_field" },
   { code: "54001", raised_by: "record_delete" },
-  { code: "PT409", raised_by: "record_update" }
+  { code: "PT409", raised_by: "record_update" },
+  { code: "PT428", raised_by: "_record_rule_uses" }
 ];
 var ENTITY_TOKENS = [
   "access_delta_probe",
@@ -1745,6 +1769,7 @@ var ENTITY_TOKENS = [
   "plan_node_artifact",
   "plan_node_step",
   "plan_profile",
+  "platform_action_request",
   "platform_actor_session",
   "platform_actor_token",
   "platform_actor_token_event",
@@ -2138,6 +2163,8 @@ export {
   RETIRED_ACTOR_WORDS,
   RULE_NODE_KINDS,
   RULE_USES,
+  STAGE_RULE_ENFORCEMENT,
+  STAGE_RULE_ON_FAIL,
   STORAGE_MODES,
   STORE_DOORS,
   STORE_KNOBS,