@ai-matrx/records 0.3.0

package/dist/react/index.d.ts

@@ -0,0 +1,3238 @@
+import * as react from 'react';
+import { ReactNode } from 'react';
+
+declare const ACTOR_VOCABULARY: readonly ["user", "agent", "system"];
+/** The three words the store still accepts and rewrites, and what each becomes. */
+declare const RETIRED_ACTOR_WORDS: {
+    readonly ai: "agent";
+    readonly code: "system";
+    readonly human: "user";
+};
+declare const ABSENCE_REASONS: readonly ["never asked", "none", "refused", "conflicting"];
+declare const VALUE_ENVELOPE_KEYS: readonly ["ver", "src", "actor", "on_behalf_of", "at", "absent", "alternates", "dated"];
+declare const VALUE_ALTERNATE_KEYS: readonly ["value", "src", "rank"];
+declare const STORAGE_MODES: readonly ["light", "heavy"];
+declare const RULE_USES: readonly ["validate", "compute", "membership", "applicability"];
+declare const PER_VALUE_ACCESS_WORDS: readonly ["visibility", "access", "share", "acl", "permission", "permissions", "secret"];
+/** FLD-11's parity floor, each with the behaviour it is MADE OF (FLD-1). */
+declare const PARITY_FIELD_TYPES: readonly [{
+    readonly parity_type: "attachment";
+    readonly behavior: "relation";
+    readonly made_of: "REC-31: a File record reached through a relation, target the kernel `File` Table";
+}, {
+    readonly parity_type: "currency";
+    readonly behavior: "range";
+    readonly made_of: "FLD-N-1: a number whose UNIT is the currency and whose format is currency — on the Field, never in presentation";
+}, {
+    readonly parity_type: "datetime";
+    readonly behavior: "range";
+    readonly made_of: "a range of kind date or datetime — the dated modifier says the VALUES are dated, which is a different question";
+}, {
+    readonly parity_type: "email";
+    readonly behavior: "text";
+    readonly made_of: "text whose format is email";
+}, {
+    readonly parity_type: "formula";
+    readonly behavior: "formula";
+    readonly made_of: "FLD-9: a declared computation, on read or on write, evaluated by custom.rule_eval";
+}, {
+    readonly parity_type: "lookup";
+    readonly behavior: "formula";
+    readonly made_of: "a Value read THROUGH a relation — config.via names the relation field, config.pick the Value on the far side";
+}, {
+    readonly parity_type: "member";
+    readonly behavior: "relation";
+    readonly made_of: "a person: a relation whose target is the kernel `Person` Table";
+}, {
+    readonly parity_type: "multi_select";
+    readonly behavior: "list";
+    readonly made_of: "many choices from the same Table — the multi modifier, never a second behaviour";
+}, {
+    readonly parity_type: "percent";
+    readonly behavior: "range";
+    readonly made_of: "a number whose unit is % and whose format is percent";
+}, {
+    readonly parity_type: "phone";
+    readonly behavior: "text";
+    readonly made_of: "text whose format is phone";
+}, {
+    readonly parity_type: "rollup";
+    readonly behavior: "formula";
+    readonly made_of: "an aggregate ALONG a relation — config.via, config.of, config.agg; far-side ids are taken DISTINCT, so nothing is counted twice";
+}, {
+    readonly parity_type: "select";
+    readonly behavior: "list";
+    readonly made_of: "one choice from a Table shown as a list (FLD-5/FLD-6)";
+}, {
+    readonly parity_type: "url";
+    readonly behavior: "text";
+    readonly made_of: "text whose format is url, with the pattern Rule that makes the format enforceable";
+}];
+/** The node kinds `custom.rule_eval` evaluates, and the lane that owns each. */
+declare const RULE_NODE_KINDS: readonly [{
+    readonly node: "add";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "and";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "concat";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "const";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "div";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "eq";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "field";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "gt";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "gte";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "length";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "lt";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "lte";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "matches";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "merge_field";
+    readonly evaluated_by: "W5-MERGE-B";
+}, {
+    readonly node: "mul";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "ne";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "not";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "or";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "parent_field";
+    readonly evaluated_by: "W1-RULE-APPLY";
+}, {
+    readonly node: "present";
+    readonly evaluated_by: "W1-RULE";
+}, {
+    readonly node: "sub";
+    readonly evaluated_by: "W1-RULE";
+}];
+/** REC-27. The kernel, by name and by id, as the store holds it. */
+declare const KERNEL_TABLES: readonly [{
+    readonly id: "11111111-0000-4000-8000-000000000002";
+    readonly name: "Field";
+}, {
+    readonly id: "11111111-0000-4000-8000-000000000006";
+    readonly name: "File";
+}, {
+    readonly id: "11111111-0000-4000-8000-000000000009";
+    readonly name: "Merge Field";
+}, {
+    readonly id: "11111111-0000-4000-8000-000000000004";
+    readonly name: "Organization";
+}, {
+    readonly id: "11111111-0000-4000-8000-000000000005";
+    readonly name: "Person";
+}, {
+    readonly id: "11111111-0000-4000-8000-000000000007";
+    readonly name: "Presentation";
+}, {
+    readonly id: "11111111-0000-4000-8000-000000000003";
+    readonly name: "Rule";
+}, {
+    readonly id: "11111111-0000-4000-8000-000000000001";
+    readonly name: "Table";
+}, {
+    readonly id: "11111111-0000-4000-8000-000000000008";
+    readonly name: "Widget";
+}];
+/**
+ * Every door the store actually has, with the argument list and the result the
+ * catalogue reports. A client call whose door is not in this list is answered
+ * `door_absent` by name — never a guess, never a silent no-op.
+ */
+declare const STORE_DOORS: readonly [{
+    readonly name: "absence_reasons";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "actor_vocabulary";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "actor_word";
+    readonly args: "p_declared text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "agent_context";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 50";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_assert_key";
+    readonly args: "p_key text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_buckets";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_deliver";
+    readonly args: "p_organization_id uuid, p_rule_id uuid, p_record_id uuid, p_channel text, p_recipient_user_id uuid, p_event_key text, p_subject text, p_body text, p_payload jsonb DEFAULT '{}'::jsonb";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_digest_run";
+    readonly args: "p_organization_id uuid, p_rule_id uuid DEFAULT NULL::uuid, p_since timestamp with time zone DEFAULT NULL::timestamp with time zone";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_explain";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_group_by jsonb DEFAULT '[]'::jsonb, p_measures jsonb DEFAULT '[]'::jsonb, p_bucket jsonb DEFAULT NULL::jsonb, p_filter jsonb DEFAULT '{}'::jsonb, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_operations";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_sql";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_group_by jsonb DEFAULT '[]'::jsonb, p_measures jsonb DEFAULT '[]'::jsonb, p_bucket jsonb DEFAULT NULL::jsonb, p_filter jsonb DEFAULT '{}'::jsonb, p_limit integer DEFAULT 200, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_subscription_cadences";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_subscription_fire";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_changed_field_ids jsonb DEFAULT '[]'::jsonb";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_subscriptions";
+    readonly args: "p_organization_id uuid, p_saved_view_id uuid DEFAULT NULL::uuid, p_cadence text DEFAULT NULL::text";
+    readonly returns: "TABLE(rule_id uuid, saved_view_id uuid, cadence text, schedule text, channel text, recipient_user_id uuid, event_key text, name text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_value_sql";
+    readonly args: "p_key text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "agg_view_admits";
+    readonly args: "p_organization_id uuid, p_saved_view_id uuid, p_record_id uuid";
+    readonly returns: "boolean";
+    readonly security: "invoker";
+}, {
+    readonly name: "anon_capture";
+    readonly args: "p_organization_id uuid, p_client_key text, p_table_id uuid, p_payload jsonb, p_device text DEFAULT NULL::text, p_captured_at timestamp with time zone DEFAULT NULL::timestamp with time zone";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "anon_clear";
+    readonly args: "p_organization_id uuid, p_submission_id uuid";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "anon_inbound_land";
+    readonly args: "p_address text, p_secret text, p_payload jsonb, p_raw_payload jsonb DEFAULT '{}'::jsonb, p_client_key text DEFAULT NULL::text";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "anon_publish";
+    readonly args: "p_organization_id uuid, p_form_id uuid, p_published boolean DEFAULT true";
+    readonly returns: "timestamp with time zone";
+    readonly security: "definer";
+}, {
+    readonly name: "anon_rate_take";
+    readonly args: "p_organization_id uuid, p_form_id uuid, p_bucket text, p_token_id uuid DEFAULT NULL::uuid";
+    readonly returns: "integer";
+    readonly security: "definer";
+}, {
+    readonly name: "anon_token_issue";
+    readonly args: "p_organization_id uuid, p_mode text, p_allowed_origins jsonb, p_form_id uuid DEFAULT NULL::uuid, p_saved_view_id uuid DEFAULT NULL::uuid, p_record_id uuid DEFAULT NULL::uuid, p_expires_at timestamp with time zone DEFAULT NULL::timestamp with time zone";
+    readonly returns: "TABLE(token_id uuid, secret text)";
+    readonly security: "definer";
+}, {
+    readonly name: "anon_token_revoke";
+    readonly args: "p_organization_id uuid, p_token_id uuid";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "anon_token_verify";
+    readonly args: "p_secret text, p_origin text, p_required_mode text";
+    readonly returns: "TABLE(token_id uuid, organization_id uuid, form_id uuid, saved_view_id uuid, record_id uuid, mode text)";
+    readonly security: "definer";
+}, {
+    readonly name: "anon_write";
+    readonly args: "p_secret text, p_origin text, p_payload jsonb, p_client_key text DEFAULT NULL::text, p_raw_payload jsonb DEFAULT '{}'::jsonb";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "applicable_fields";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_record_type text DEFAULT NULL::text";
+    readonly returns: "SETOF custom.record";
+    readonly security: "definer";
+}, {
+    readonly name: "assert_client_may_reach";
+    readonly args: "p_organization_id uuid, p_door text";
+    readonly returns: "void";
+    readonly security: "invoker";
+}, {
+    readonly name: "assert_organization_wall";
+    readonly args: "p_kind text, p_organization_id uuid, p_row jsonb";
+    readonly returns: "void";
+    readonly security: "invoker";
+}, {
+    readonly name: "assert_store_door";
+    readonly args: "p_organization_id uuid, p_door text";
+    readonly returns: "void";
+    readonly security: "invoker";
+}, {
+    readonly name: "bump_epoch";
+    readonly args: "p_entity_type text, p_entity_id uuid, p_organization_id uuid DEFAULT NULL::uuid";
+    readonly returns: "bigint";
+    readonly security: "definer";
+}, {
+    readonly name: "cache_lookup";
+    readonly args: "p_container_type text, p_container_id uuid, p_item_type text, p_item_id uuid";
+    readonly returns: "permission_level";
+    readonly security: "definer";
+}, {
+    readonly name: "caller_role";
+    readonly args: "";
+    readonly returns: "name";
+    readonly security: "invoker";
+}, {
+    readonly name: "client_write_grants";
+    readonly args: "";
+    readonly returns: "TABLE(role_name text, object_name text, privilege text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "computed_provenance";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "TABLE(field_key text, field_id uuid, value jsonb, rule_id uuid, rule_version integer, computed_at timestamp with time zone)";
+    readonly security: "invoker";
+}, {
+    readonly name: "containment_chain";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "TABLE(ancestor_id uuid, depth integer)";
+    readonly security: "invoker";
+}, {
+    readonly name: "containment_depth_ceiling";
+    readonly args: "p_organization_id uuid DEFAULT NULL::uuid";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "containment_edges";
+    readonly args: "p_organization_id uuid";
+    readonly returns: "TABLE(parent_id uuid, child_id uuid, via text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "containment_parent";
+    readonly args: "p_data jsonb";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "custom_fields_tables";
+    readonly args: "";
+    readonly returns: "TABLE(token text, schema_name text, table_name text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "dependency_cycle";
+    readonly args: "p_organization_id uuid, p_row custom.record";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "dependency_label";
+    readonly args: "p_organization_id uuid, p_node text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "derive_visibility";
+    readonly args: "p_container_type text, p_container_id uuid";
+    readonly returns: "TABLE(item_type text, item_id uuid, depth integer, max_level permission_level)";
+    readonly security: "definer";
+}, {
+    readonly name: "derived_value";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb, p_values jsonb DEFAULT NULL::jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "derived_values";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "doc_content_hash";
+    readonly args: "p_body text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "doc_format_value";
+    readonly args: "p_field_data jsonb, p_value jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "doc_render_body";
+    readonly args: "p_organization_id uuid, p_template_id uuid, p_record_id uuid";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "doc_render_document";
+    readonly args: "p_organization_id uuid, p_template_id uuid, p_record_id uuid";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "doc_render_write";
+    readonly args: "p_organization_id uuid, p_template_id uuid, p_record_id uuid, p_table_id uuid, p_template_version integer, p_body text, p_content_hash text";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "doc_sign";
+    readonly args: "p_organization_id uuid, p_render_id uuid, p_field_key text, p_signer_name text, p_signer_user_id uuid DEFAULT NULL::uuid";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "doc_signature_field_ok";
+    readonly args: "p_field_data jsonb";
+    readonly returns: "boolean";
+    readonly security: "invoker";
+}, {
+    readonly name: "doc_signature_intact";
+    readonly args: "p_organization_id uuid, p_signature_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "doc_signature_write";
+    readonly args: "p_organization_id uuid, p_render_id uuid, p_record_id uuid, p_field_key text, p_signer_name text, p_signer_user_id uuid, p_document_hash text, p_document_version integer";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "doc_template_save";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_name text, p_body text, p_template_id uuid DEFAULT NULL::uuid";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "doc_token_pattern";
+    readonly args: "";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "doc_tokens";
+    readonly args: "p_body text";
+    readonly returns: "TABLE(ordinal integer, raw text, field_id uuid)";
+    readonly security: "invoker";
+}, {
+    readonly name: "doc_unresolved_tokens";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_body text";
+    readonly returns: "TABLE(raw text, field_id uuid, why text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "export_records";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 1000";
+    readonly returns: "TABLE(id uuid, document jsonb)";
+    readonly security: "invoker";
+}, {
+    readonly name: "external_foreign_table_findings";
+    readonly args: "";
+    readonly returns: "SETOF text";
+    readonly security: "definer";
+}, {
+    readonly name: "external_history_event";
+    readonly args: "p_organization_id uuid, p_link_id uuid, p_operation text";
+    readonly returns: "bigint";
+    readonly security: "definer";
+}, {
+    readonly name: "external_rows";
+    readonly args: "p_organization_id uuid, p_source_id uuid";
+    readonly returns: "SETOF jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "external_source_declare";
+    readonly args: "p_organization_id uuid, p_tier text, p_connection_token text, p_external_schema text, p_external_table text, p_link_template text";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "external_stub_upsert";
+    readonly args: "p_organization_id uuid, p_source_id uuid, p_table_id uuid, p_external_key text, p_link_url text, p_cached_title text";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "external_tier_contract";
+    readonly args: "";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "external_write_through";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_patch jsonb";
+    readonly returns: "void";
+    readonly security: "definer";
+}, {
+    readonly name: "external_writes_set";
+    readonly args: "p_organization_id uuid, p_source_id uuid, p_enabled boolean";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "field_dependants";
+    readonly args: "p_organization_id uuid, p_field_id uuid";
+    readonly returns: "TABLE(kind text, dependant_id uuid, label text, how text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "field_kernel_id";
+    readonly args: "";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "field_options";
+    readonly args: "p_organization_id uuid, p_field_id uuid";
+    readonly returns: "SETOF custom.record";
+    readonly security: "invoker";
+}, {
+    readonly name: "field_rules";
+    readonly args: "p_field_data jsonb";
+    readonly returns: "TABLE(kind text, spec jsonb)";
+    readonly security: "invoker";
+}, {
+    readonly name: "file_kernel_id";
+    readonly args: "";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "formula_value";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb, p_values jsonb DEFAULT NULL::jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "has_visibility";
+    readonly args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "has_visibility_at";
+    readonly args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, p_organization_id uuid DEFAULT NULL::uuid, p_min_version bigint DEFAULT NULL::bigint";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "hidden_field_notice";
+    readonly args: "p_field custom.record, p_action text DEFAULT 'read'::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "home_add";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_home_record_id uuid";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "home_relations";
+    readonly args: "";
+    readonly returns: "TABLE(table_id uuid, home_record_id uuid, organization_id uuid, relation_id uuid)";
+    readonly security: "invoker";
+}, {
+    readonly name: "index_payload";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 1000";
+    readonly returns: "TABLE(id uuid, searchable text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "intern_provenance";
+    readonly args: "p_data jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "io_changed_field_ids";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_old jsonb, p_new jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "io_changed_keys";
+    readonly args: "p_old jsonb, p_new jsonb";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "io_comment_resolve";
+    readonly args: "p_organization_id uuid, p_comment_id uuid, p_resolved boolean DEFAULT true";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "io_comment_write";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_body text, p_anchor jsonb DEFAULT '{}'::jsonb, p_parent_comment_id uuid DEFAULT NULL::uuid";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "io_comments";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_include_resolved boolean DEFAULT false";
+    readonly returns: "TABLE(id uuid, body text, anchor jsonb, parent_comment_id uuid, created_by uuid, created_at timestamp with time zone, resolved_at timestamp with time zone, resolved_by uuid)";
+    readonly security: "definer";
+}, {
+    readonly name: "io_csv_escape";
+    readonly args: "p_value text, p_delimiter text DEFAULT ','::text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "io_csv_parse";
+    readonly args: "p_text text, p_delimiter text DEFAULT NULL::text";
+    readonly returns: "TABLE(row_number integer, cells text[])";
+    readonly security: "invoker";
+}, {
+    readonly name: "io_export";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_columns text[] DEFAULT NULL::text[], p_limit integer DEFAULT 10000, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "io_export_csv";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_columns text[] DEFAULT NULL::text[], p_limit integer DEFAULT 10000, p_delimiter text DEFAULT ','::text, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "text";
+    readonly security: "definer";
+}, {
+    readonly name: "io_import_open";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_format text DEFAULT 'csv'::text, p_source_name text DEFAULT NULL::text, p_source_columns jsonb DEFAULT '[]'::jsonb";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "io_import_rows";
+    readonly args: "p_organization_id uuid, p_import_id uuid, p_rows jsonb, p_mapping jsonb DEFAULT '{}'::jsonb";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "io_infer_type";
+    readonly args: "p_samples jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "io_outbox_announce";
+    readonly args: "";
+    readonly returns: "trigger";
+    readonly security: "definer";
+}, {
+    readonly name: "io_outbox_drain";
+    readonly args: "p_organization_id uuid, p_consumer text, p_limit integer DEFAULT 100, p_event_key text DEFAULT 'records.changed'::text";
+    readonly returns: "TABLE(outbox_id uuid, record_id uuid, table_id uuid, operation text, changed_field_ids jsonb, actor jsonb, occurred_at timestamp with time zone)";
+    readonly security: "definer";
+}, {
+    readonly name: "io_outbox_release";
+    readonly args: "p_organization_id uuid, p_consumer text, p_older_than interval DEFAULT '00:15:00'::interval";
+    readonly returns: "integer";
+    readonly security: "definer";
+}, {
+    readonly name: "io_proposal_accept";
+    readonly args: "p_organization_id uuid, p_import_id uuid, p_column text, p_type text DEFAULT NULL::text, p_label text DEFAULT NULL::text";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "io_proposal_reject";
+    readonly args: "p_organization_id uuid, p_import_id uuid, p_column text";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "io_record_changed";
+    readonly args: "";
+    readonly returns: "trigger";
+    readonly security: "definer";
+}, {
+    readonly name: "io_restore";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_version integer";
+    readonly returns: "integer";
+    readonly security: "definer";
+}, {
+    readonly name: "io_revisions";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "TABLE(version integer, changed_at timestamp with time zone, changed_by uuid, summary text)";
+    readonly security: "definer";
+}, {
+    readonly name: "lookup_value";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "mask_document";
+    readonly args: "p_document jsonb, p_visible_keys text[], p_notices jsonb, p_by_id boolean DEFAULT false, p_key_ids jsonb DEFAULT '{}'::jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "mask_document";
+    readonly args: "p_document jsonb, p_visible_keys text[], p_notices jsonb, p_by_id boolean DEFAULT false, p_key_ids jsonb DEFAULT '{}'::jsonb, p_declared_keys text[] DEFAULT NULL::text[]";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "merge_field_kernel_id";
+    readonly args: "";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_delete";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_demote";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_extract_parent";
+    readonly args: "p_organization_id uuid, p_id uuid, p_parent_table_id uuid, p_moved_keys text[], p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_merge";
+    readonly args: "p_organization_id uuid, p_winner_id uuid, p_loser_id uuid, p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_promote";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_purge";
+    readonly args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_dry_run boolean DEFAULT true";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_rename";
+    readonly args: "p_organization_id uuid, p_id uuid, p_to text, p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_reparent";
+    readonly args: "p_organization_id uuid, p_id uuid, p_parent_id uuid, p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_retype";
+    readonly args: "p_organization_id uuid, p_id uuid, p_to text, p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "migrate_split";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_moved_keys text[], p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "organization_references";
+    readonly args: "p_kind text, p_organization_id uuid, p_row jsonb";
+    readonly returns: "TABLE(site text, what text, ref_id uuid, openable boolean)";
+    readonly security: "invoker";
+}, {
+    readonly name: "parity_field_types";
+    readonly args: "";
+    readonly returns: "TABLE(parity_type text, behavior text, made_of text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "parity_type";
+    readonly args: "p_field_data jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "parity_values";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "TABLE(field_key text, field_id uuid, parity_type text, behavior text, unit text, format text, value jsonb, value_version integer, actor text, written_at timestamp with time zone)";
+    readonly security: "invoker";
+}, {
+    readonly name: "per_value_access_words";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "person_kernel_id";
+    readonly args: "";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "promote_field";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_field_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "promote_table";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "promoted_field_cap";
+    readonly args: "";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "promoted_fields";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "TABLE(field_id uuid, field_key text, parity_type text, is_unique boolean, value_path text, index_arm text, index_expr text, index_name text, indexable boolean, why_not text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "promoted_index_arm";
+    readonly args: "p_field_data jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "promoted_index_ddl";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "TABLE(step integer, purpose text, statement text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "promoted_index_expr";
+    readonly args: "p_field_data jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "promoted_index_name";
+    readonly args: "p_table_id uuid, p_field_key text, p_unique boolean";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "promoted_query_sql";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_field_key text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "promoted_read";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_field_key text, p_value text";
+    readonly returns: "SETOF uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "promoted_value_path";
+    readonly args: "p_field_data jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "promotion_inline_ceiling";
+    readonly args: "";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_access_ids";
+    readonly args: "p_organization_id uuid, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "uuid[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_across_homes";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "TABLE(record_id uuid, home_record_id uuid, data jsonb, created_at timestamp with time zone)";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_by_coordinates";
+    readonly args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_coordinates jsonb DEFAULT '[]'::jsonb, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "TABLE(record_id uuid, table_id uuid, data jsonb, coordinates_matched integer)";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_can_see";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "boolean";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_hot_paths";
+    readonly args: "";
+    readonly returns: "TABLE(name text, statement text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_hot_paths_prepared";
+    readonly args: "";
+    readonly returns: "TABLE(name text, prepared boolean, generic_plans bigint)";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_is_store_owner";
+    readonly args: "";
+    readonly returns: "boolean";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_prepare_hot";
+    readonly args: "";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_principal";
+    readonly args: "";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_record_as_of";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_recorded_at timestamp with time zone DEFAULT NULL::timestamp with time zone, p_world_on date DEFAULT NULL::date, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_relation_edges";
+    readonly args: "p_organization_id uuid, p_flavor text DEFAULT NULL::text, p_role text DEFAULT NULL::text";
+    readonly returns: "TABLE(parent_id uuid, child_id uuid, role text, flavor text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_rollup";
+    readonly args: "p_organization_id uuid, p_roots uuid[], p_flavor text DEFAULT NULL::text, p_role text DEFAULT NULL::text, p_max_depth integer DEFAULT 33, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "TABLE(record_id uuid, depth integer)";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_rollup_sum";
+    readonly args: "p_organization_id uuid, p_roots uuid[], p_field_key text, p_flavor text DEFAULT NULL::text, p_role text DEFAULT NULL::text, p_max_depth integer DEFAULT 33, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "numeric";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_table_as_of";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_recorded_at timestamp with time zone DEFAULT NULL::timestamp with time zone, p_world_on date DEFAULT NULL::date, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "TABLE(record_id uuid, data jsonb)";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_table_homes";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "SETOF uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "query_visible_ids";
+    readonly args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "SETOF uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "reachable_from";
+    readonly args: "p_organization_id uuid, p_roots uuid[]";
+    readonly returns: "TABLE(record_id uuid, depth integer, via text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "read_paths_outside_the_door";
+    readonly args: "";
+    readonly returns: "TABLE(object_name text, why text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "read_record";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_by_id boolean DEFAULT false";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "read_records";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_by_id boolean DEFAULT false, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0";
+    readonly returns: "TABLE(id uuid, document jsonb, level permission_level)";
+    readonly security: "definer";
+}, {
+    readonly name: "record_aggregate";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_group_by jsonb DEFAULT '[]'::jsonb, p_measures jsonb DEFAULT '[]'::jsonb, p_bucket jsonb DEFAULT NULL::jsonb, p_filter jsonb DEFAULT '{}'::jsonb, p_limit integer DEFAULT 200, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "TABLE(groups jsonb, measures jsonb, row_count bigint)";
+    readonly security: "invoker";
+}, {
+    readonly name: "record_applicability";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "TABLE(rule_id uuid, rule_name text, rule_version integer, applies boolean, answer jsonb)";
+    readonly security: "invoker";
+}, {
+    readonly name: "record_delete";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "timestamp with time zone";
+    readonly security: "definer";
+}, {
+    readonly name: "record_reparent";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_parent_id uuid";
+    readonly returns: "void";
+    readonly security: "invoker";
+}, {
+    readonly name: "record_restore";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "void";
+    readonly security: "definer";
+}, {
+    readonly name: "record_update";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_patch jsonb, p_expected_version integer DEFAULT NULL::integer";
+    readonly returns: "integer";
+    readonly security: "definer";
+}, {
+    readonly name: "record_values";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "record_values_versioned";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "TABLE(field_key text, field_id uuid, value jsonb, value_version integer, source jsonb, absent_reason text, actor text, on_behalf_of text, written_at timestamp with time zone, alternates jsonb)";
+    readonly security: "invoker";
+}, {
+    readonly name: "record_write";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_data jsonb";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "relation_own";
+    readonly args: "p_organization_id uuid, p_owner_id uuid, p_target_id uuid";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "relation_target_external";
+    readonly args: "p_connection_token text, p_external_table text, p_external_key text";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "relation_target_ours";
+    readonly args: "p_entity_token text, p_row_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "relation_targets";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_via_key text";
+    readonly returns: "SETOF uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "reopen_declared_doors";
+    readonly args: "";
+    readonly returns: "TABLE(reopened text)";
+    readonly security: "definer";
+}, {
+    readonly name: "required_epoch";
+    readonly args: "p_container_type text, p_container_id uuid, p_item_type text, p_item_id uuid";
+    readonly returns: "bigint";
+    readonly security: "definer";
+}, {
+    readonly name: "resolve_first_match";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "resolve_id";
+    readonly args: "p_organization_id uuid, p_id uuid";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "retired_actor_words";
+    readonly args: "";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "rollup_value";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_applies";
+    readonly args: "p_organization_id uuid, p_rule_id uuid, p_record_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_context";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_dependency_edges";
+    readonly args: "p_organization_id uuid, p_row custom.record DEFAULT NULL::custom.record";
+    readonly returns: "TABLE(needs text, needed text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_eval";
+    readonly args: "p_organization_id uuid, p_expr jsonb, p_values jsonb, p_context jsonb DEFAULT '{}'::jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_field_key";
+    readonly args: "p_organization_id uuid, p_field_id uuid";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_field_label";
+    readonly args: "p_organization_id uuid, p_field_id uuid";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_kernel_id";
+    readonly args: "";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_members";
+    readonly args: "p_organization_id uuid, p_rule_id uuid";
+    readonly returns: "SETOF custom.record";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_membership";
+    readonly args: "p_organization_id uuid, p_rule_id uuid, p_record_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_node_kinds";
+    readonly args: "";
+    readonly returns: "TABLE(node text, evaluated_by text, note text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_run";
+    readonly args: "p_organization_id uuid, p_rule_id uuid, p_values jsonb, p_context jsonb DEFAULT '{}'::jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_truth";
+    readonly args: "p_answer jsonb";
+    readonly returns: "boolean";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_uses";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "rule_version";
+    readonly args: "p_organization_id uuid, p_rule_id uuid";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "size_refusal";
+    readonly args: "p_organization_id uuid, p_data jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "source_next_pointer";
+    readonly args: "p_sources jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "source_pointer";
+    readonly args: "p_sources jsonb, p_source jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "stamp_value_envelopes";
+    readonly args: "p_data jsonb, p_actor text, p_on_behalf_of text, p_at timestamp with time zone";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "storage_modes";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "store_is_open";
+    readonly args: "p_organization_id uuid DEFAULT NULL::uuid";
+    readonly returns: "boolean";
+    readonly security: "invoker";
+}, {
+    readonly name: "table_capacity";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "table_declare";
+    readonly args: "p_organization_id uuid, p_spec jsonb";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "table_kernel_id";
+    readonly args: "";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "table_record_ceiling";
+    readonly args: "";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "table_record_ceiling";
+    readonly args: "p_organization_id uuid";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "table_rules";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_use text, p_record_type text DEFAULT NULL::text";
+    readonly returns: "SETOF custom.record";
+    readonly security: "invoker";
+}, {
+    readonly name: "table_storage";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "table_type_field";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "tables_at_home";
+    readonly args: "p_organization_id uuid, p_home_ids uuid[]";
+    readonly returns: "TABLE(table_id uuid, home_record_id uuid, kind text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "trg_associations_bump_visibility";
+    readonly args: "";
+    readonly returns: "trigger";
+    readonly security: "definer";
+}, {
+    readonly name: "validate_custom_fields";
+    readonly args: "p_token text, p_organization_id uuid, p_values jsonb";
+    readonly returns: "void";
+    readonly security: "invoker";
+}, {
+    readonly name: "validate_value_envelope";
+    readonly args: "p_organization_id uuid, p_fields custom.record[], p_data jsonb";
+    readonly returns: "void";
+    readonly security: "invoker";
+}, {
+    readonly name: "validate_values";
+    readonly args: "p_organization_id uuid, p_fields custom.record[], p_values jsonb, p_record_type text DEFAULT NULL::text";
+    readonly returns: "void";
+    readonly security: "invoker";
+}, {
+    readonly name: "value_alternate_keys";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "value_envelope_keys";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "value_envelope_ok";
+    readonly args: "p_data jsonb";
+    readonly returns: "boolean";
+    readonly security: "invoker";
+}, {
+    readonly name: "value_envelope_refusal";
+    readonly args: "p_data jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "value_read";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_key text";
+    readonly returns: "TABLE(field_key text, field_id uuid, value jsonb, value_version integer, source jsonb, absent_reason text, actor text, on_behalf_of text, written_at timestamp with time zone, alternates jsonb)";
+    readonly security: "invoker";
+}, {
+    readonly name: "value_versions";
+    readonly args: "p_old jsonb, p_new jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "visibility_ancestors";
+    readonly args: "p_item_type text, p_item_id uuid";
+    readonly returns: "TABLE(container_type text, container_id uuid, depth integer, max_level permission_level)";
+    readonly security: "definer";
+}, {
+    readonly name: "visibility_cache_rebuild";
+    readonly args: "";
+    readonly returns: "integer";
+    readonly security: "definer";
+}, {
+    readonly name: "visibility_parity";
+    readonly args: "";
+    readonly returns: "TABLE(side text, container_type text, container_id uuid, item_type text, item_id uuid, stored_level permission_level, derived_level permission_level, reason text)";
+    readonly security: "definer";
+}, {
+    readonly name: "visibility_warm";
+    readonly args: "p_container_type text, p_container_id uuid";
+    readonly returns: "integer";
+    readonly security: "definer";
+}, {
+    readonly name: "visible_record_ids";
+    readonly args: "p_user_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level";
+    readonly returns: "TABLE(id uuid)";
+    readonly security: "definer";
+}, {
+    readonly name: "work_assignment_fields";
+    readonly args: "p_options_table_id uuid DEFAULT NULL::uuid";
+    readonly returns: "TABLE(key text, label text, spec jsonb)";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_has_assignment";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "boolean";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_instantiation_shape";
+    readonly args: "p_organization_id uuid, p_instantiation_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_relation_kinds";
+    readonly args: "";
+    readonly returns: "TABLE(kind text, available boolean, why text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_slot_expire";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_slot_hold";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_slot_key text, p_holder text, p_ttl interval DEFAULT '00:15:00'::interval";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_slot_holds";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "TABLE(hold_id uuid, slot_key text, holder text, expires_at timestamp with time zone, expired boolean)";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_slot_index_name";
+    readonly args: "p_table_id uuid";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_slot_release";
+    readonly args: "p_organization_id uuid, p_hold_id uuid";
+    readonly returns: "boolean";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_slots_declare";
+    readonly args: "p_organization_id uuid, p_name text, p_slug text, p_home_id uuid DEFAULT NULL::uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_states";
+    readonly args: "";
+    readonly returns: "TABLE(sort integer, name text, terminal boolean, next text[])";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_take_assignment";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_template_declare";
+    readonly args: "p_organization_id uuid, p_name text, p_graph jsonb";
+    readonly returns: "uuid";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_template_instantiate";
+    readonly args: "p_organization_id uuid, p_template_id uuid, p_overrides jsonb DEFAULT '{}'::jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_template_refusal";
+    readonly args: "p_graph jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_template_shape";
+    readonly args: "p_organization_id uuid, p_template_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_transition_refusal";
+    readonly args: "p_organization_id uuid, p_from_state_id uuid, p_to_state_id uuid";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "work_whose_turn";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_include_finished boolean DEFAULT false";
+    readonly returns: "TABLE(record_id uuid, title text, assignee_id uuid, turn text, due_on timestamp with time zone, state text, status text, terminal boolean)";
+    readonly security: "invoker";
+}];
+/** The campaign's own knobs, with the value the store resolves them to today. */
+declare const STORE_KNOBS: readonly [{
+    readonly key: "accessible_entity_ids_guard";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "associations_guard";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "code_paths_enabled";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "containment_depth_ceiling";
+    readonly value: "16";
+    readonly type: "integer";
+}, {
+    readonly key: "document_max_bytes";
+    readonly value: "1048576";
+    readonly type: "integer";
+}, {
+    readonly key: "emergency_door_guard";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "emergency_door_sweep_enabled";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "entity_custom_fields_guard";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "entity_types_guard";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "external_principal_enabled";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "field_index_guard";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "field_sensitivity_levels";
+    readonly value: "{\"edit\": {\"public\": \"editor\", \"internal\": \"editor\", \"restricted\": \"admin\", \"confidential\": \"admin\"}, \"read\": {\"public\": \"viewer\", \"internal\": \"viewer\", \"restricted\": \"admin\", \"confidential\": \"editor\"}}";
+    readonly type: "json";
+}, {
+    readonly key: "member_default_level";
+    readonly value: "\"viewer\"";
+    readonly type: "string";
+}, {
+    readonly key: "row_versions_guard";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "sandbox_expanded_frame_height_px";
+    readonly value: "20000";
+    readonly type: "integer";
+}, {
+    readonly key: "sandbox_frame_height_px";
+    readonly value: "4000";
+    readonly type: "integer";
+}, {
+    readonly key: "sandbox_message_bytes";
+    readonly value: "65536";
+    readonly type: "integer";
+}, {
+    readonly key: "sandbox_org_components";
+    readonly value: "true";
+    readonly type: "boolean";
+}, {
+    readonly key: "signup_provisioning_guard";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "system_enabled";
+    readonly value: "false";
+    readonly type: "boolean";
+}, {
+    readonly key: "table_record_ceiling";
+    readonly value: "150000";
+    readonly type: "integer";
+}, {
+    readonly key: "value_max_bytes";
+    readonly value: "100000";
+    readonly type: "integer";
+}, {
+    readonly key: "world_publish_enabled";
+    readonly value: "false";
+    readonly type: "boolean";
+}];
+/**
+ * Every SQLSTATE the store's own function bodies raise, with the functions that
+ * raise it. This is the list the client's refusal mapper is checked against: a
+ * code the store can raise and the package cannot name is a hole, and the
+ * real-door suite says so by name.
+ */
+declare const STORE_REFUSAL_CODES: readonly [{
+    readonly code: "02000";
+    readonly raised_by: "doc_render_body,doc_render_document,doc_sign,doc_signature_intact,doc_template_save,external_history_event,external_rows,external_stub_upsert,external_writes_set,migrate_delete,migrate_extract_parent,migrate_merge,migrate_rename,migrate_reparent,migrate_retype,migrate_split,read_record,record_delete,record_restore,record_update";
+}, {
+    readonly code: "0A000";
+    readonly raised_by: "external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_slots_declare";
+}, {
+    readonly code: "22004";
+    readonly raised_by: "_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,doc_render_write,doc_sign,doc_signature_write,doc_template_save,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,home_add,io_comment_write,io_import_open,io_outbox_drain,io_restore,migrate_purge,migrate_split,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_restore,record_update,record_write,relation_own,table_declare,work_template_declare";
+}, {
+    readonly code: "22012";
+    readonly raised_by: "rule_eval";
+}, {
+    readonly code: "22023";
+    readonly raised_by: "_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,doc_render_body,doc_render_write,doc_signature_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,io_import_open,io_proposal_accept,migrate_merge,query_by_coordinates,query_rollup,record_update,rule_eval,rule_members,table_rules,work_slot_hold";
+}, {
+    readonly code: "23503";
+    readonly raised_by: "_containment_guard,_record_rule_uses,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,doc_sign,doc_template_save,home_add,io_comment_write,io_import_rows,io_proposal_accept,migrate_delete,migrate_demote,migrate_promote,promote_field,promote_table,record_applicability,record_reparent,relation_own,resolve_first_match,rule_applies,rule_eval,rule_members,rule_run,work_take_assignment,work_template_instantiate";
+}, {
+    readonly code: "23505";
+    readonly raised_by: "doc_sign,doc_signature_write,home_add,io_proposal_accept,work_slot_hold";
+}, {
+    readonly code: "23514";
+    readonly raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_rule_shape_guard,_rule_topology_guard,_table_shape_guard,_value_envelope,_work_shape_guard,doc_sign,doc_signature_write,doc_template_save,home_add,validate_value_envelope,validate_values,work_slots_declare,work_take_assignment,work_template_instantiate";
+}, {
+    readonly code: "40001";
+    readonly raised_by: "has_visibility_at";
+}, {
+    readonly code: "42501";
+    readonly raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_reach,assert_store_door,external_write_through,io_comment_resolve,io_comment_write,io_restore,migrate_purge,promote_table,read_record,read_records";
+}, {
+    readonly code: "53400";
+    readonly raised_by: "anon_rate_take,promote_field";
+}, {
+    readonly code: "PT409";
+    readonly raised_by: "record_update";
+}];
+/** `platform.entity_types` — the registered tokens a Table or relation may name. */
+declare const ENTITY_TOKENS: readonly ["access_delta_probe", "access_delta_run", "access_request", "account_addon", "acquisition_block", "activity", "admin_audit_log", "admin_email_log", "admin_markdown_sample", "admin_user", "admission_config", "agent", "agent_card", "agent_definition_version", "agent_drift_alert", "agent_exemplar", "agent_mandate_note", "agent_prompt_remediation", "agent_provision_legacy", "agent_run", "agent_run_stage", "agent_schedule", "agent_schedule_claim", "agent_shortcut", "agent_surface_binding", "agent_template", "agent_usage", "agent_user_kv", "ai_api", "ai_endpoint", "ai_model", "ai_model_alias", "ai_offering", "ai_provider", "ai_setting", "analysis_result", "anon_form", "anon_function_birth_grandfather", "anon_hit", "anon_inbound", "anon_replay", "anon_submission", "anon_token", "api_field_warning", "api_request_log", "app", "app_config", "app_config_history", "app_definition_version", "app_error", "app_execution", "app_instance", "app_log", "app_log_muted_pattern", "app_log_norm_exception", "app_rate_limit", "app_setting", "app_sync_status", "approach", "artifact", "assessment", "assessment_item", "assessment_result", "assignment_session", "assist", "assist_producer_policy", "assist_producer_policy_history", "association_type", "assurance_level", "attempt", "audit_broken_functions", "audit_canonical_findings", "audit_exemption", "audit_function_deps", "audit_function_runtime_probe", "audit_m2m_candidates", "audit_refresh_log", "audit_stale_registry", "audit_unregistered_candidates", "bak_assoc_file_processed_document_20260812", "bak_assoc_type_file_processed_document_20260812", "bak_organization_name_dd043", "base_entity_template", "batch_cost_event", "batch_provider_batch", "batch_work_item", "billing_capability", "billing_capability_limit", "billing_connect_account", "billing_customer", "billing_plan", "billing_plan_limit", "billing_price", "billing_product", "billing_spend_guardrail", "billing_stripe_event", "billing_subscription", "billing_usage_ledger", "billing_user_plan", "browser_account_binding", "browser_action_event", "browser_authenticator_window", "browser_capture", "browser_control_request", "browser_handoff", "browser_login_attempt", "browser_login_recipe", "browser_profile", "browser_profile_checkpoint", "browser_run", "browser_site_observation", "browser_site_policy", "browser_stream_ticket", "build_lock", "calendar_event", "canvas_comment", "canvas_comment_like", "canvas_item", "canvas_item_state", "canvas_like", "canvas_score", "canvas_view", "capture_window", "carrying_rule", "catalog_entries_history", "catalog_entry", "category", "change_type_default", "chat_user_usage_summary", "citations", "class_purchase", "classifier_revision_ledger", "client_callable_door", "client_callable_door_retirement", "client_excluded_column_unregistered", "cmp_entry", "cmp_feedback", "code_file", "code_folder", "code_repository", "coding_session", "coding_session_entry", "comment", "commerce_asset_allocation", "commerce_asset_grading", "commerce_asset_identifier", "commerce_asset_lot_event", "commerce_asset_mandate_result", "commerce_asset_price_factor", "commerce_asset_reshoot_request", "commerce_asset_review", "commerce_asset_unknown", "commerce_certified_printer", "commerce_cloud_sync_connection", "commerce_ebay_business_policy", "commerce_ebay_category", "commerce_ebay_category_aspect", "commerce_ebay_category_tree", "commerce_ebay_custom_policy", "commerce_ebay_inventory_item", "commerce_ebay_inventory_item_group", "commerce_ebay_inventory_item_group_member", "commerce_ebay_inventory_location", "commerce_ebay_listing", "commerce_ebay_marketplace_policy", "commerce_ebay_media_asset", "commerce_ebay_notification_destination", "commerce_ebay_notification_event", "commerce_ebay_notification_subscription", "commerce_ebay_notification_topic", "commerce_ebay_offer", "commerce_ebay_order", "commerce_ebay_order_line_item", "commerce_ebay_shipping_fulfillment", "commerce_ebay_store_category", "commerce_human_correction", "commerce_intake_artifact", "commerce_intake_asset", "commerce_intake_batch", "commerce_label_batch", "commerce_label_code", "commerce_marketplace_account", "commerce_marketplace_account_deletion_audit", "commerce_marketplace_api_call", "commerce_marketplace_rate_budget", "commerce_marketplace_site", "commerce_marketplace_sync_run", "commerce_prediction_outcome", "commerce_print_order", "commerce_product", "commerce_product_channel_ref", "commerce_product_media", "commerce_product_variant", "commerce_recall_audit", "comparison_set", "component_group", "contact_medium", "contact_submission", "content_certification", "content_ir_kind", "content_ir_kind_component", "content_ir_kind_component_incident", "content_ir_kind_conformance", "content_ir_kind_edge", "content_ir_kind_example", "content_ir_kind_instance", "content_ir_kind_surface", "context_access_log", "context_item", "context_item_suggestion", "context_item_value", "context_value_refs", "conversation", "conversation_value", "courts", "credential_attachment", "credential_item", "credential_mutation_receipt", "crm_address", "crm_affiliation", "crm_blocklist_entry", "crm_contact_candidate", "crm_deal", "crm_deal_stage_event", "crm_enrichment_call", "crm_interaction", "crm_merge_candidate", "crm_outreach_list", "crm_outreach_list_member", "crm_party_merge", "crm_registry_ingest_run", "crm_registry_source", "crm_saved_view", "crm_sending_event", "crm_sending_identity", "crm_sending_identity_check", "crm_sending_policy", "custom_entity_definition", "custom_field_definition", "custom_field_target", "custom_record", "cx_agent_memory", "cx_agent_plan", "cx_agent_task", "cx_code_edit", "cx_code_message_file", "cx_conversation_documents", "cx_media", "cx_observational_memory", "cx_observational_memory_event", "cx_pending_injection", "cx_request", "cx_request_snapshot", "cx_tool_trace", "cx_user_request", "cx_user_todo", "dashboard_saved_view", "data_rights_event", "data_store", "data_store_members", "dataset", "dd171_containment_baseline", "dd175_cast", "dd175_component_lane_baseline", "ddl_guard_log", "deck_suggestion", "definer_class_exemption", "definer_client_grant_grandfather", "definer_grant_baseline", "deprecated_relation", "derive_run", "dev_login_audit", "dict_entry", "dict_provider_publication", "dict_setting", "dm_conversation", "dm_message", "dm_participant", "doc_render", "doc_signature", "dockets", "domain_classification", "edge_payload_kind", "egress_device", "egress_pairing", "egress_ticket", "emails", "embedding_cache", "embeddings_google_gemini_2_1536", "embeddings_oai_3_small_1536", "embeddings_voyage_4_large_1024", "embeddings_voyage_code_3_1024", "endpoint_family_sweep_state", "engine_owner_task", "entity_grant", "entity_relationship", "entity_type", "esign_campaign", "esign_campaign_member", "esign_consent_disclosure", "esign_envelope", "esign_envelope_certificate", "esign_envelope_document", "esign_envelope_event", "esign_envelope_external_ref", "esign_envelope_signer", "esign_provider", "esign_provider_binding", "esign_signing_key", "execution_event_cursor", "extension_auth_code", "external_link", "external_source", "extract_sweep_state", "fc_card", "fc_detail", "fc_set", "feature_doc", "feature_knob", "feedback_comments", "feedback_user_messages", "field_component", "file", "file_analysis", "file_entities", "file_overrides", "file_page_annotations", "file_pages", "file_rag_job", "file_version", "files_account_tier", "files_machine_written_prefix", "files_sync_mapping", "files_user_account", "flashcard_data", "flashcard_history", "flashcard_review", "flashcard_set", "flashcard_sets", "flexible_data", "folder", "function_contract", "game_badge", "game_result", "game_room", "global_execution", "global_execution_checkpoint", "global_execution_control", "global_execution_event", "global_meter_entry", "global_origin", "global_request", "google_document", "growth_loop_event", "growth_loop_run", "growth_loop_stage_run", "guardian_link", "guest_conversion_audit", "guest_execution_log", "guest_executions", "guided_checklist_run", "heatmap_save", "hindsight_enrollment", "hindsight_finding", "hindsight_regression_case", "hindsight_replay", "hindsight_replay_step", "hindsight_review", "hr_access_audit", "hr_access_role", "hr_accommodation_request", "hr_ai_evidence", "hr_alert_routing_rule", "hr_application", "hr_approval_authority", "hr_approval_delegation", "hr_asset", "hr_asset_assignment", "hr_attendance_exception", "hr_auto_close_rule", "hr_availability", "hr_background_check", "hr_benefits_event", "hr_calculation_snapshot", "hr_candidate", "hr_candidate_conversion", "hr_candidate_message", "hr_careers_portal", "hr_checklist_item", "hr_checklist_run", "hr_checklist_template", "hr_checklist_template_item", "hr_compensation", "hr_corrective_action", "hr_course", "hr_course_version", "hr_credential", "hr_crew", "hr_deduction_code", "hr_department", "hr_derived_grant", "hr_disposition_event", "hr_earning_code", "hr_eeo_response", "hr_emergency_contact", "hr_employee", "hr_employee_private", "hr_employer_profile", "hr_employment", "hr_employment_pin", "hr_engagement", "hr_establishment", "hr_external_identity", "hr_field_policy", "hr_holiday", "hr_holiday_calendar", "hr_i9", "hr_i9_document", "hr_incident", "hr_incident_party", "hr_interview", "hr_interview_kit", "hr_job_title", "hr_jurisdiction", "hr_jurisdiction_rule", "hr_jurisdiction_rule_class", "hr_jurisdiction_rule_org_decision", "hr_jurisdiction_rule_test", "hr_kiosk_device", "hr_kiosk_session", "hr_labor_target", "hr_leave_case", "hr_leave_enrollment", "hr_leave_ledger", "hr_leave_policy", "hr_leave_request", "hr_legal_hold", "hr_legal_hold_item", "hr_location", "hr_new_hire_report", "hr_offer", "hr_opening", "hr_overtime_alert", "hr_overtime_alert_rule", "hr_overtime_preapproval", "hr_pay_group", "hr_pay_period", "hr_pay_period_employment", "hr_payroll_export", "hr_payroll_export_line", "hr_position_assignment", "hr_posting", "hr_posting_publication", "hr_provider_binding", "hr_provider_event", "hr_provisioning_result", "hr_punch", "hr_recalculation_batch", "hr_record_class", "hr_records_request", "hr_reference_check", "hr_reporting_line", "hr_requisition", "hr_restricted_note", "hr_retention_rule", "hr_role_assignment", "hr_schedule", "hr_schedule_change", "hr_schedule_guidance", "hr_schedule_template", "hr_schedule_template_shift", "hr_scorecard", "hr_separation", "hr_shift", "hr_shift_claim", "hr_staffing_requirement", "hr_survey", "hr_survey_invitation", "hr_survey_question", "hr_survey_response", "hr_tax_registration", "hr_tax_withholding", "hr_time_adjustment", "hr_training_assignment", "hr_training_attempt", "hr_transcript_entry", "hr_verification_letter_request", "hr_work_interval", "hr_workflow_binding", "hr_workflow_decision", "hr_workflow_definition", "hr_workflow_event", "hr_workflow_failure", "hr_workflow_flow_type", "hr_workflow_instance", "hr_workflow_step", "hr_workflow_step_definition", "hr_workweek", "html_extraction", "iam_access_audit", "iam_api_key", "iam_emergency_door_request", "idempotency", "industry", "industry_curator", "infra_status", "ingest_runs", "integration_connection", "integration_connection_resource", "interview_decision_interview", "interview_decision_question", "interview_document_revision", "interview_hole", "interview_question", "interview_session", "interview_turn", "invitation", "invitation_code", "invitation_request", "io_comment", "io_contract", "io_import", "io_outbox", "item", "item_mastery", "judge_verdict", "jurisdiction_policy", "keyword_classification_queue", "kg_alert", "kg_chunk_entities", "kg_chunks", "kg_clusters", "kg_edges", "kg_entities", "kg_entity_aliases", "kg_suggestion_ack", "kg_sweep_queue", "kg_sweep_run", "kg_sweep_state", "kg_value_match", "knob_override", "knob_override_audit", "knob_rung_lock", "knob_scope_kind", "knob_write_door", "league_membership", "learn_doc", "library_doc", "lifecycle_archive", "lifecycle_archive_row", "lifecycle_audit", "lifecycle_entity_plan", "lifecycle_map_build", "lifecycle_reference_map", "lifecycle_run", "lifecycle_tier_ledger", "location", "mandate", "mandate_advance_batch_row", "mandate_binding", "mandate_binding_legacy", "mandate_legacy", "mandate_observation", "mandate_reference", "mandate_scan", "mandate_treatment", "marketing_initiative", "masterwork_corpus_item", "masterwork_run", "masterwork_run_kind", "masterwork_source", "math_course_structure", "math_problem", "matrx_action_ledger", "mcp_config", "mcp_server", "mcp_user_conn", "media_capture_handoff", "media_catalog_setting", "media_library_item", "media_selection_item", "media_selection_job", "media_source_library", "meet_call_invite", "meet_meeting", "meet_note", "meet_participant", "meet_recording", "meet_transcript_segment", "membership", "membership_grant", "merge_field_provenance", "message", "message_template", "meta_excluded_schema", "meta_table_stats_history", "metadata_reserved_keys", "microservice_project", "migration_log", "mtx_media_heal_queue", "mtx_public_url_guard", "ner_shadow", "note", "note_folder", "notification", "notification_channel_preference", "notification_event_override", "notification_event_type", "notification_preference", "notify_outsider_door_baseline", "oauth_handoff_claim", "opinion_clusters", "opinions", "ops_issue_class", "ops_issue_event", "ops_proof_check", "ops_proof_run", "ops_proof_scenario", "org_admin_audit", "org_change_policy", "org_context_ledger", "org_industries", "org_member_control", "org_module_config", "org_plan", "org_repair_0253_backup", "organization", "organization_preferences", "organization_visibility_version", "output_feedback", "outreach_acceptance", "page_extraction_job", "page_extraction_page_run", "page_extraction_results", "page_extraction_runs", "page_intent_queue", "page_mapping_queue", "part_config", "part_config_sub", "party", "party_contact_point", "path_drift_repair_2026_09", "pc_article", "pc_episode", "pc_show", "pc_studio_run", "pc_studio_run_asset", "pdf_consolidation_log", "pdf_redaction_audit", "pdf_redaction_key_escrow", "permission_grant", "plan_cms_fill_item", "plan_cms_fill_job", "plan_entity", "plan_node", "plan_node_artifact", "plan_node_step", "plan_profile", "platform_actor_session", "platform_actor_token", "platform_actor_token_event", "platform_continued_access", "platform_org_knob_override", "platform_outcome_event", "platform_outsider_consumer", "platform_reachability", "platform_reference_category", "platform_reference_declaration", "platform_repo", "platform_saved_view", "platform_schema", "platform_share_link", "platform_user_knob_override", "podcast_race", "policy_overlap_backup", "policy_overlap_probe", "processed_document", "processed_document_page", "product_capture_file", "product_capture_item", "product_capture_payload", "product_capture_product", "product_capture_question", "profile", "project", "prompt", "provider_account", "provider_account_credential", "provision", "provision_generate_target", "provision_grant", "provision_marker", "provision_rule_message", "provision_schema", "provision_shape_debt", "provision_spec", "provision_spec_grandfather", "provision_vocabulary", "purpose", "quiz_session", "rag_ingest_run", "rag_library_audit_log", "rate_limit_buckets", "recompute_queue", "record", "record_alias", "redaction_mapping", "research_analysis", "research_content", "research_context_bundle", "research_document", "research_intent", "research_keyword", "research_media", "research_source", "research_synthesis", "research_tag", "research_template", "research_topic", "retention_policy", "retrieval_audit", "review_queue", "route_manifest_entry", "row_version", "rulebook", "runtime_operation_stream", "runtime_operation_stream_batch", "sandbox_instance", "sch_agent_task", "sch_run", "sch_task", "sch_trigger", "schema_client_exposure", "schema_migration_ledger", "schema_migration_legacy", "schema_migration_slot_grandfather", "schema_templates", "scope", "scope_association_suggestion", "scope_dataset_instance", "scope_door_registry", "scope_item_value_suggestion", "scope_suggestion", "scope_type", "scrape_domain", "scrape_domain_settings", "scrape_failure_log", "scrape_parsed_page", "scrape_path_override", "scrape_path_pattern", "scrape_retry_queue", "seo_ai_capability", "seo_ai_visibility_citation", "seo_ai_visibility_claim", "seo_ai_visibility_panel", "seo_ai_visibility_response", "seo_ai_visibility_signal", "seo_backlink", "seo_backlink_change_event", "seo_backlink_dimension_snapshot", "seo_backlink_observation", "seo_backlink_snapshot", "seo_change_assessment", "seo_change_event", "seo_change_item", "seo_change_metric", "seo_change_set", "seo_change_theory", "seo_collection_run", "seo_competitor", "seo_competitor_observation", "seo_competitor_opportunity", "seo_coverage_mention", "seo_coverage_tracker", "seo_dimension_value_matcher", "seo_engine_schedule", "seo_geo_place", "seo_gsc_dig_rule", "seo_keyword", "seo_keyword_class_rule", "seo_keyword_edge", "seo_keyword_facet", "seo_keyword_market", "seo_keyword_market_observation", "seo_keyword_place", "seo_keyword_saved_view", "seo_keyword_topic", "seo_landscape_brief", "seo_link_gap_domain", "seo_link_gap_match", "seo_map_facet", "seo_map_facet_value", "seo_map_topic", "seo_page_measurement_health", "seo_page_performance", "seo_provider_call", "seo_provider_task", "seo_rank_observation", "seo_rank_target", "seo_raw_payload", "seo_referring_domain_profile", "seo_reputation_case", "seo_search_performance_daily", "seo_serp_mention", "seo_serp_opportunity", "seo_serp_result", "seo_serp_snapshot", "seo_site_geo_area", "seo_site_keyword_offering", "seo_site_keyword_value", "seo_site_offering_value", "seo_site_topic_value", "seo_site_value_combo", "seo_site_value_worth", "seo_site_vocabulary", "seo_source_request", "seo_starter_pack", "seo_starter_pack_item", "seo_story_angle", "seo_topic", "seo_topical_map", "seo_web_analytics_daily", "share_link", "shareable_resource_registry", "shared_canvas_item", "short_link", "shortcut_category", "skill", "skill_category", "skill_render_definition", "sms_consent", "sms_conversation", "sms_message", "sms_message_media", "sms_notification", "sms_notification_preference", "sms_phone_number", "sms_rate_limits", "sms_webhook_logs", "soft_delete_edge", "source_authority", "stage_dockets_966c18eca7", "stage_ref_kind", "stamped_write_table", "structure", "structured_list", "studio_cleaned_segments", "studio_concept_items", "studio_documents", "studio_module_segments", "studio_raw_segments", "studio_recording_chunks", "studio_recording_segments", "studio_run", "studio_session", "studio_session_settings", "study_attempt", "study_goal", "study_media", "study_plan", "study_plan_block", "study_plan_day", "study_reminder_context", "study_reminder_delivery", "study_session", "study_source_chunk", "study_streak", "study_structured_section", "superseded_policy", "surface", "system_announcement", "system_context_item", "system_error", "system_orgs", "system_personal_org_failure", "system_write_failure", "task", "task_user_state", "taxonomy_node", "template_context_items", "template_scope_types", "templates", "thread", "tool", "tool_binding", "tool_bundle", "tool_call", "tool_definition_version", "tool_executor", "tool_surface_defaults", "tool_test_sample", "tool_ui", "tool_ui_incident", "tool_ui_version", "topic_placement_queue", "transcript", "trigger_event", "udt_dataset_fields", "udt_dataset_row_versions", "udt_dataset_rows", "udt_dataset_template", "udt_dataset_template_fields", "udt_document", "udt_document_snapshot", "udt_structured_list_items", "udt_workbook_snapshot", "ui_client", "ui_surface_agent_pref", "ui_surface_agent_role", "ui_surface_client_tool", "ui_surface_config", "ui_surface_value", "ui_surface_write_target", "unsubscribe_token", "uploads_inflight", "user_achievement", "user_active_context", "user_analysis_preference", "user_bookmark", "user_email_preference", "user_entity_state", "user_feedback", "user_follows", "user_form_profile", "user_markdown_sample", "user_memory", "user_preference", "user_profile", "user_secret", "user_secret_audit", "user_secret_grant", "user_stat", "user_storage_usage", "user_surface_state", "visibility_cache", "visibility_epoch", "voice", "war_room", "wbx_capture", "wbx_demo", "wbx_guidance", "wbx_highlight", "wbx_pattern", "wbx_recipe", "wbx_screenshot", "wbx_seo_audit", "wc_claim", "wc_impairment_definition", "wc_injury", "wc_report", "web_analysis_item", "web_brand", "web_brand_asset", "web_brand_offering", "web_business_fact", "web_business_location", "web_channel_analytics_daily", "web_crawl_event", "web_crawl_preset", "web_crawl_schedule", "web_crawl_session", "web_crawl_url", "web_discovered_item", "web_finding", "web_gsc_page_stat", "web_link_edge", "web_listing_publisher", "web_location_listing", "web_offering_template", "web_page", "web_page_content", "web_page_evidence", "web_page_sitemap", "web_property", "web_provider", "web_result", "web_screenshot", "web_site", "web_site_endpoint_rule", "web_site_item_config", "web_site_offering", "web_sitemap", "web_snapshot", "web_tag_manager_snapshot", "web_youtube_video", "webhook_deliveries", "webhook_dispatch_state", "webhooks", "wf_node_data_slot", "work_claim", "work_item", "workbook", "worker_heartbeat", "workflow", "workflow_card", "workflow_checkpoint", "workflow_comparison", "workflow_definition_version", "workflow_idempotency", "workflow_job", "workflow_node_events", "workflow_node_outcome", "workflow_plan", "workflow_plan_event", "workflow_plan_sample", "workflow_recovery_audit", "workflow_run", "workflow_run_log", "workflow_runtime_surface", "workflow_template", "workflow_trigger", "workflow_trigger_fire", "workflow_work_item", "working_document", "write_guard_key", "youtube_quota_day", "youtube_search", "youtube_video"];
+type StoreRefusalCode = (typeof STORE_REFUSAL_CODES)[number]["code"];
+type StoreDoorName = (typeof STORE_DOORS)[number]["name"];
+type EntityToken = (typeof ENTITY_TOKENS)[number];
+type KernelTableName = (typeof KERNEL_TABLES)[number]["name"];
+
+/**
+ * VAL-8. Who wrote a value. `user`, `agent`, `system` — enforced by every write
+ * door, and the three retired words (`human`, `ai`, `code`) are translated by
+ * the store's own `custom.actor_word`, never by a caller.
+ */
+type Actor = (typeof ACTOR_VOCABULARY)[number];
+/** The words the store still accepts and rewrites, mapped to what they become. */
+type RetiredActorWord = keyof typeof RETIRED_ACTOR_WORDS;
+/**
+ * VAL-2. Why a value is missing. A value is never blank for an unexplained
+ * reason: it either holds something or it says one of these four words.
+ */
+type AbsenceReason = (typeof ABSENCE_REASONS)[number];
+/** The closed key set of one value envelope (VAL-1 … VAL-4). */
+type ValueEnvelopeKey = (typeof VALUE_ENVELOPE_KEYS)[number];
+/** The closed key set of one ranked alternate (VAL-3). */
+type ValueAlternateKey = (typeof VALUE_ALTERNATE_KEYS)[number];
+/**
+ * REC-4. `heavy` is indexed storage with Rules on write; `light` is
+ * whole-document storage with Rules on read. Per Table, one store.
+ */
+type StorageMode = (typeof STORAGE_MODES)[number];
+/** REC-15. One Rule object, four uses. */
+type RuleUse = (typeof RULE_USES)[number];
+/**
+ * VAL-5 / VAL-6. The words that may NOT appear inside a value envelope:
+ * visibility and access belong to a Field and to a Record, never to a value.
+ * The store refuses each of them by name and so does this package's mirror.
+ */
+type PerValueAccessWord = (typeof PER_VALUE_ACCESS_WORDS)[number];
+/** FLD-11. The parity floor: the field type a person picks in the UI. */
+type ParityFieldType = (typeof PARITY_FIELD_TYPES)[number]["parity_type"];
+/** FLD-1. The five behaviours a Field can have. One, exactly, and closed. */
+type FieldBehavior = (typeof PARITY_FIELD_TYPES)[number]["behavior"];
+/** The node kinds `custom.rule_eval` evaluates. */
+type RuleNodeKind = (typeof RULE_NODE_KINDS)[number]["node"];
+/**
+ * REC-32. The seven table types, closed. The parenthesised names are the
+ * retired ones the doctrine records; never coin an eighth.
+ */
+declare const TABLE_TYPES: readonly ["entity", "detail", "reference", "ledger", "restricted", "system", "deprecated"];
+type TableType = (typeof TABLE_TYPES)[number];
+/** REC-33. The two origins. A table we ship in schema `custom` is `standard`. */
+declare const TABLE_ORIGINS: readonly ["standard", "custom"];
+type TableOrigin = (typeof TABLE_ORIGINS)[number];
+/** REL-1. Ownership is one fact, stored once, read from the field's side. */
+declare const RELATION_FLAVORS: readonly ["owned", "referenced"];
+type RelationFlavor = (typeof RELATION_FLAVORS)[number];
+/** REL-2. What happens to the far side, separate from flavour. */
+declare const ON_DELETE: readonly ["cascade", "set_null", "restrict"];
+type OnDelete = (typeof ON_DELETE)[number];
+/** REL-3. A snapshot is a frozen copy in the relation's payload, never a pointer. */
+declare const RELATION_BINDINGS: readonly ["live", "snapshot"];
+type RelationBinding = (typeof RELATION_BINDINGS)[number];
+/** REL-7. */
+declare const RELATION_CARDINALITIES: readonly ["one", "many"];
+type RelationCardinality = (typeof RELATION_CARDINALITIES)[number];
+/** FLD-7. Where a Field's values come from. */
+declare const FIELD_SOURCES: readonly ["manual", "formula", "agent", "synced"];
+type FieldSource = (typeof FIELD_SOURCES)[number];
+/** FLD-9. A Formula declares whether it computes on read or on write. */
+declare const COMPUTE_ON: readonly ["read", "write"];
+type ComputeOn = (typeof COMPUTE_ON)[number];
+/**
+ * AGT-7 / FLD-12. A Field's sensitivity sets a ceiling a merge field can never
+ * widen — and these are THE STORE'S four words, checked against its own guard.
+ *
+ * This list used to read `standard · sensitive · secret`, which the store has
+ * never accepted: writing a Field with `sensitivity: "standard"` is refused
+ * with "the field <name> has to say how sensitive its values are, and it says
+ * standard". The knob `custom/field_sensitivity_levels` keys off these same
+ * four words to decide which level may read and edit each one, so a package
+ * carrying three different words could never have agreed with it. Corrected
+ * against the live store, 2026-09-18.
+ */
+declare const FIELD_SENSITIVITIES: readonly ["public", "internal", "confidential", "restricted"];
+type FieldSensitivity = (typeof FIELD_SENSITIVITIES)[number];
+/** DYN-17 / §D. Which tier a MERGE FIELD's value is delivered in. */
+declare const DELIVERIES: readonly ["inline", "on_demand", "auto"];
+type Delivery = (typeof DELIVERIES)[number];
+/**
+ * FLD-12. WHETHER AN AGENT MAY SEE A FIELD'S VALUES, and these are the STORE'S
+ * four words — not the merge field's delivery tiers.
+ *
+ * `Field.context_policy` used to be typed as `Delivery` here, which is a
+ * different question with a different vocabulary: writing a Field with
+ * `context_policy: "inline"` is refused with "the field <name> has to say
+ * whether an agent may see its values, and it says inline". Delivery is about
+ * HOW MUCH of a value a merge field carries into a turn; this is about WHETHER
+ * the value reaches an agent at all, and conflating them let a screen offer a
+ * word the store has never accepted. Corrected against the live store,
+ * 2026-09-18.
+ */
+declare const CONTEXT_POLICIES: readonly ["include", "summarize", "exclude", "on_request"];
+type ContextPolicy = (typeof CONTEXT_POLICIES)[number];
+/** DYN-3. The eight sources, closed. Relationships and rules are not sources. */
+declare const MERGE_FIELD_SOURCES: readonly ["literal", "record", "state", "actor", "platform", "user_input", "tool", "derived"];
+type MergeFieldSource = (typeof MERGE_FIELD_SOURCES)[number];
+/** DYN-4. What a merge field resolves INTO. The consumer never learns which. */
+declare const MERGE_FIELD_SEMANTIC_TYPES: readonly ["value", "reference", "resolver", "computed", "collection"];
+type MergeFieldSemanticType = (typeof MERGE_FIELD_SEMANTIC_TYPES)[number];
+/** DYNAMIC-VALUES §A. Any number of these; never fused into the source. */
+declare const MERGE_FIELD_MODIFIERS: readonly ["scoped", "temporal", "collection", "live", "fallback", "formatted", "required"];
+type MergeFieldModifier = (typeof MERGE_FIELD_MODIFIERS)[number];
+/** DYN-12. The five override policies. Exactly one, and it outranks the ladder. */
+declare const OVERRIDE_POLICIES: readonly ["must_supply", "shown_overridable", "shown_locked", "server_fixed", "derived"];
+type OverridePolicy = (typeof OVERRIDE_POLICIES)[number];
+/** DYNAMIC-VALUES §C. What a resolved merge field's freshness was. */
+declare const FRESHNESS: readonly ["live", "cached", "snapshot"];
+type Freshness = (typeof FRESHNESS)[number];
+/** REC-1. How a Table shows itself. */
+declare const TABLE_DISPLAYS: readonly ["list", "grid", "board", "calendar", "timeline"];
+type TableDisplay = (typeof TABLE_DISPLAYS)[number];
+
+/** A `uuid` as the store writes it. */
+type Uuid = string;
+/** An ISO-8601 timestamp, as jsonb carries it. */
+type Timestamp = string;
+/**
+ * VAL-1. WHERE a value came from, addressed by a pointer the STORE interns —
+ * `s1`, `s2`, `s3`. A writer supplies the source itself and the store interns
+ * it; a writer that invents a pointer is refused by name. Interned once per
+ * save: two pointers holding the same description is the defect the word
+ * "interned" exists to prevent, and the store refuses that too.
+ */
+type ProvenancePointer = string;
+/** The description a pointer resolves to. Free-shaped by design: the store checks that it is an object, and the organization decides what it says. */
+type ValueSource = Record<string, unknown>;
+/**
+ * VAL-3 / VAL-4. Another candidate for the same value, with the source it came
+ * from and the RANK — the order an organization trusts its sources in, never a
+ * score or a confidence a machine invented. Ranks are whole, start at 1, and
+ * two alternates never claim the same one. They live INSIDE this record's
+ * document; there is never a row per value.
+ */
+interface ValueAlternate {
+    value: unknown;
+    /** A pointer this record's `_sources` block resolves. */
+    src?: ProvenancePointer | null;
+    rank: number;
+}
+/**
+ * The value envelope. One per field key, in the record's `_values` block, with
+ * the value itself sitting at the top level under the same key.
+ *
+ * The key set is CLOSED (`custom.value_envelope_keys()`). In particular it can
+ * never carry visibility, access, share, acl, permission, permissions or
+ * secret: VAL-5 puts those on the Field and on the Record, and VAL-6 says a
+ * value that must be secret goes in a contained record with its own visibility.
+ * The store refuses each of those words by name.
+ */
+interface ValueEnvelope {
+    /** The per-value version, 1 or more. THE STORE WRITES IT — no caller sets it. */
+    ver: number;
+    /** A provenance pointer this record's `_sources` block resolves. */
+    src?: ProvenancePointer | null;
+    /** VAL-8. Who wrote it. */
+    actor: Actor;
+    /** Only an agent acts on behalf of a person; a person's id. */
+    on_behalf_of?: Uuid | null;
+    at?: Timestamp | null;
+    /** VAL-2. Why it is missing. A value either holds something or says this. */
+    absent?: AbsenceReason | null;
+    alternates?: ValueAlternate[] | null;
+    /**
+     * FLD-2's `dated` modifier: the WORLD clock for this value — when it was true
+     * of the world, which is a different question from when it was written. Added
+     * to the store's closed key set after this package's first generation, and
+     * caught by `pnpm check:store-registry` rather than by anybody noticing.
+     */
+    dated?: string | null;
+}
+/**
+ * The one jsonb document. Field keys sit at the top level; the store's own
+ * blocks are underscore-prefixed and are never a writer's value.
+ */
+interface RecordDocument {
+    /** The store's interned provenance table: pointer -> source. */
+    _sources?: Record<ProvenancePointer, ValueSource>;
+    /** The envelopes, keyed by field key. */
+    _values?: Record<string, ValueEnvelope>;
+    /** FLD-10. Which type of record this is, selecting the Fields and Rules that apply. */
+    _type?: string;
+    /** REC-7. Zero or one parent. Never two. */
+    _parent?: Uuid | null;
+    [fieldKey: string]: unknown;
+}
+/** `custom.record` as the store holds it — the row around the document. */
+interface StoredRecord {
+    id: Uuid;
+    organization_id: Uuid;
+    table_id: Uuid | null;
+    /** `record` for ordinary rows, `kernel` for the nine kernel Tables (REC-27). */
+    data_class: string;
+    data: RecordDocument;
+    created_by: Uuid | null;
+    updated_by: Uuid | null;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    /** REC-23: soft, and reversible within `retention`. */
+    deleted_at: Timestamp | null;
+    /** The RECORD clock. `recordUpdate` writes against it (optimistic concurrency). */
+    version: number;
+    metadata: Record<string, unknown>;
+    custom_fields: Record<string, unknown>;
+    visibility: string;
+}
+/**
+ * One value read back with everything the store knows about it — the shape
+ * `custom.record_values_versioned` and `custom.value_read` answer in. This is
+ * what a screen needs to explain a value (DYN-24) without a second query.
+ */
+interface ReadValue {
+    field_key: string;
+    field_id: Uuid | null;
+    value: unknown;
+    value_version: number | null;
+    source: ValueSource | null;
+    absent_reason: AbsenceReason | null;
+    actor: Actor | null;
+    on_behalf_of: Uuid | null;
+    written_at: Timestamp | null;
+    alternates: ValueAlternate[] | null;
+}
+/**
+ * Why one field of a record came back empty — `custom.hidden_field_notice`, as
+ * the read door attaches it under `_hidden`. It is the store's own sentence, so
+ * a screen says "you need X to see this" instead of drawing a blank cell.
+ */
+interface HiddenFieldNotice {
+    /** The field's sensitivity word. */
+    reason: string | null;
+    /** The level this person would need. */
+    needs: string | null;
+    /** The other way in — "a share of this one field with you". */
+    or: string | null;
+}
+/**
+ * One row as the read door `custom.read_records` answers it: the id, the
+ * document the store decided this reader may see, and the reader's level on the
+ * Table. A field this reader may not see is PRESENT and null, with its reason
+ * in `hidden` — the masking is the store's, never this client's.
+ */
+interface ReadRow {
+    id: Uuid;
+    document: RecordDocument;
+    /** `public.permission_level` — the caller's level on the Table. */
+    level: string;
+    hidden: Record<string, HiddenFieldNotice>;
+}
+/**
+ * One revision of one record, as `custom.io_revisions` answers it, newest
+ * first. `version` is the record's own version at that point — the number a
+ * screen hands back as `expectedVersion` so the store, not the screen, decides
+ * whether someone else got there first.
+ */
+interface RecordRevision {
+    version: number;
+    changed_at: string;
+    changed_by: Uuid | null;
+    summary: string | null;
+}
+/** A whole record as `recordRead` answers it, through `custom.read_record`. */
+interface RecordRead {
+    record_id: Uuid;
+    /** The masked document. A hidden field is present and null. */
+    document: RecordDocument;
+    /** Why each masked field is masked, in the store's words. */
+    hidden: Record<string, HiddenFieldNotice>;
+    /**
+     * FLD-9 / REC-19. Which Rule version produced each computed value. Present
+     * only where the store has computed provenance for this record.
+     */
+    computed: Array<{
+        field_key: string;
+        field_id: Uuid;
+        value: unknown;
+        rule_id: Uuid;
+        rule_version: number;
+        computed_at: Timestamp;
+    }>;
+}
+
+/**
+ * REC-1. A Table declares its fields, exactly one Home, and the properties
+ * `display`, `ordered`, `heavy` | `light`, `retention` and `detail`.
+ */
+interface Table {
+    id: Uuid;
+    organization_id: Uuid;
+    /** The token this Table is addressed by. */
+    slug: string;
+    name: string;
+    label_singular: string | null;
+    label_plural: string | null;
+    icon: string | null;
+    color: string | null;
+    /** REC-32. One of the seven, closed. */
+    type: TableType;
+    /** REC-11. A detail Table inherits only: no direct shares, never a Home. */
+    detail: boolean;
+    parent_token: string | null;
+    /** AGT-1 / AGT-2. On by default for a custom table; an organization turns it off. */
+    agent_writable: boolean;
+    display: TableDisplay | null;
+    ordered: boolean;
+    /** REC-4. `heavy` is indexed with Rules on write; `light` is the whole document with Rules on read. */
+    weight: StorageMode;
+    /** REC-23. How long a soft delete stays reversible. */
+    retention_days: number | null;
+    /** REC-2. Every Table has one; without it a record cannot be a chip. */
+    title_field: string | null;
+    /** The field ids this Table declares, in declaration order. */
+    fields: Uuid[];
+    default_sort: string | null;
+    row_order: string | null;
+    /** REC-14. Where this Table lives. Exactly one primary Home. */
+    home_id: Uuid | null;
+    /** REC-27. One of the nine, defined in code and not editable by Migration. */
+    is_kernel: boolean;
+    created_by: Uuid | null;
+    updated_by: Uuid | null;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    version: number;
+    metadata: Record<string, unknown>;
+    visibility: string;
+}
+/**
+ * REC-33. `origin` is `standard` or `custom`, and it is orthogonal to `type`.
+ * A Table we ship in schema `custom` is `standard` — the schema name is not the
+ * origin.
+ */
+interface RegisteredTable {
+    token: string;
+    type: TableType;
+    origin: TableOrigin;
+    /** REC-34. Carried per table type: true for Entity and Detail, false for the other five. */
+    custom_fields_enabled: boolean;
+}
+/**
+ * REC-3 / REC-26. A Home is where a Table appears. The declared organization
+ * Home is the tree's root; every additional Home is a referenced carrying
+ * relation from the Home record to the Table record, which is why this shape
+ * names a relation id rather than a second placement column.
+ */
+interface Home {
+    table_id: Uuid;
+    home_record_id: Uuid;
+    organization_id: Uuid;
+    /** `declared` for the Table's own Home, `carried` for an additional one. */
+    kind: string;
+    relation_id: Uuid | null;
+}
+/** What `tablePropose` / `tableList` hands back about how full a Table is (REC-N-5). */
+interface TableCapacity {
+    records: number;
+    ceiling: number;
+    full: boolean;
+    /** The knob that decides the ceiling, named so a person can act on it. */
+    knob: string;
+}
+
+/** FLD-3. A constraint attached to a Field. A Rule, never a behaviour. */
+interface FieldRule {
+    kind: "min" | "max" | "length" | "pattern" | "equals_field" | "differs_from_field";
+    value: string | number;
+    /** FLD-10. Empty means "wherever the Field applies". */
+    applies_to_types?: string[];
+}
+/**
+ * `custom.field` — the ONE definitions table (FLD-8), organization-scoped, so
+ * two organizations add different fields to the same standard table.
+ */
+interface Field {
+    id: Uuid;
+    organization_id: Uuid;
+    /** Set when this Field extends a standard entity rather than a custom Table. */
+    entity_definition_id: Uuid | null;
+    /** The token of the Table this Field belongs to. */
+    table_token: string | null;
+    key: string;
+    label: string;
+    name: string | null;
+    /** FLD-1. Exactly one of five. */
+    type: FieldBehavior;
+    /** FLD-2. The shape of the value, never a second behaviour. */
+    multi: boolean;
+    /** FLD-2. The values carry their own dates — the world clock, not History. */
+    dated: boolean;
+    /** FLD-3. Any number of attached validation Rules. */
+    rules: FieldRule[];
+    config: Record<string, unknown>;
+    required: boolean;
+    default: unknown;
+    sort: number | null;
+    /** The Table this relation points at. */
+    relation_target: Uuid | null;
+    relation_max: number | null;
+    on_target_delete: OnDelete | null;
+    /** REL-9. The reverse is visible from both ends and is NOT a second Field. */
+    inverse_key: string | null;
+    source: FieldSource;
+    source_config: Record<string, unknown>;
+    /** FLD-9. A Formula declares whether it computes on read or on write. */
+    compute_on: ComputeOn | null;
+    /** The unit, on the Field, because it changes the meaning. Never presentation. */
+    unit: string | null;
+    format: string | null;
+    /** AGT-7. A ceiling a merge field's delivery can never widen. */
+    sensitivity: FieldSensitivity | null;
+    /** FLD-12. Whether an agent may see this Field's values: include · summarize · exclude · on_request. */
+    context_policy: ContextPolicy | null;
+    /** AGT-6. How often a `source = agent` Field is refilled. */
+    review_interval_days: number | null;
+    /**
+     * §D says this is on the wrong object and moves to the merge field. It is
+     * still carried here because the live column is, and the client reads what
+     * the store holds — never what the plan wishes it held.
+     */
+    depends_on: Uuid[] | null;
+    /** FLD-10. Which record types this Field applies to. Empty means all of them. */
+    applies_to_types: string[];
+    /** FLD-5 / FLD-6. A list field's choices are the records of THIS Table. */
+    options_table_id: Uuid | null;
+    created_by: Uuid | null;
+    updated_by: Uuid | null;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    version: number;
+    metadata: Record<string, unknown>;
+    visibility: string;
+}
+/**
+ * FLD-11. What the person picked, and what the store says it is made of. The
+ * list itself is generated from `custom.parity_field_types()`; this is its type.
+ */
+interface ParityFieldTypeDescriptor {
+    parity_type: ParityFieldType;
+    behavior: FieldBehavior;
+    made_of: string;
+}
+/** AGT-8 / AGT-4. What an agent (or a person) proposes when a Field is missing. */
+interface FieldProposal {
+    table_id: Uuid;
+    key: string;
+    label: string;
+    type: FieldBehavior;
+    multi?: boolean;
+    required?: boolean;
+    config?: Record<string, unknown>;
+    relation_target?: Uuid;
+    /** Why this Field should exist — what an approver reads before approving. */
+    because: string;
+}
+/** AGT-8. What a table proposal looks like, same shape of question. */
+interface TableProposal {
+    name: string;
+    slug: string;
+    title_field: string;
+    fields: Array<Omit<FieldProposal, "table_id" | "because">>;
+    because: string;
+}
+
+/**
+ * A rule expression as `custom.rule_eval` ACTUALLY evaluates it — read off the
+ * door's own body, not invented here. A leaf is the node's name carrying its
+ * payload (`{"const": 3}`, `{"field": "<uuid>"}`); an operator is
+ * `{"op": "eq", "args": [...]}`.
+ *
+ * `field` / `parent_field` name a Field BY ID (REC-17 — the door refuses
+ * `field_name`, `field_key` and `field_label` by name), and `merge_field` is
+ * the resolver's seam, storable today and refused `0A000` until W5-MERGE-B.
+ *
+ * `p_values` is keyed by the Field's KEY: the door resolves the id to a key
+ * (`custom.rule_field_key`) and then reads `p_values -> key`.
+ */
+type RuleExpression = {
+    const: unknown;
+} | {
+    field: Uuid;
+} | {
+    parent_field: Uuid;
+} | {
+    merge_field: string;
+} | {
+    op: RuleNodeKind;
+    args: RuleExpression[];
+};
+/** REC-15. One Rule, four uses; a Rule may serve more than one. */
+interface Rule {
+    id: Uuid;
+    organization_id: Uuid;
+    name: string;
+    kind: string | null;
+    /** The Table this Rule is scoped to. */
+    scope_table_id: Uuid | null;
+    uses: RuleUse[];
+    validates: boolean;
+    computes: boolean;
+    defines_membership: boolean;
+    /**
+     * REC-16. An applicability Rule reads the record's own Values and its
+     * parent's, ONE level up, and no further.
+     */
+    decides_applicability: boolean;
+    applies_to_types: string[];
+    use_types: string[];
+    expr: RuleExpression;
+    /** Which Field this Rule's answer is about (REC-17: by id). */
+    target_field_id: Uuid | null;
+    /** What a person reads when this Rule refuses. */
+    message: string | null;
+    sort: number | null;
+    created_by: Uuid | null;
+    updated_by: Uuid | null;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    /** REC-19. Rules have versions, and History knows which one produced a Value. */
+    version: number;
+    metadata: Record<string, unknown>;
+    visibility: string;
+}
+/** What the store answers when a Rule is run: the answer and the version that gave it. */
+interface RuleAnswer {
+    rule_id: Uuid;
+    rule_name: string;
+    rule_version: number;
+    applies: boolean;
+    answer: unknown;
+}
+
+/** The measures the store offers. Asked of `custom.agg_operations()` at run time too. */
+type AggregateOperation = "count" | "sum" | "avg" | "min" | "max";
+/** The periods a date Field can be bucketed into (`custom.agg_buckets()`). */
+type AggregateBucket = "day" | "week" | "month" | "quarter" | "year";
+/** One measure. `count` counts rows and needs no Field; the rest read one. */
+interface AggregateMeasure {
+    op: AggregateOperation;
+    /** The Field's key. Required for every operation except `count`. */
+    key?: string;
+}
+/**
+ * One row of an aggregate: which group it is, what each measure came to, and
+ * how many records it was worked out from. The measure keys are the store's
+ * own (`count`, `sum_amount`, `avg_amount`, …), never renamed on the way out.
+ */
+interface AggregateRow {
+    groups: Record<string, string | null>;
+    measures: Record<string, number | null>;
+    row_count: number;
+}
+/** The measure key the store answers with, so a chart can find its own series. */
+declare function measureKey(measure: AggregateMeasure): string;
+
+/** One token found in a body, in the order it appears. */
+interface DocToken {
+    ordinal: number;
+    /** Exactly as it is written in the body. */
+    raw: string;
+    field_id: Uuid | null;
+}
+/** A token this Table cannot answer, with the store's own reason. */
+interface DocUnresolvedToken {
+    raw: string;
+    field_id: Uuid | null;
+    /** The store's sentence. Shown verbatim — a template is not published over it. */
+    why: string;
+}
+/** What the store says about a signature when it is asked whether it still holds. */
+interface DocSignatureCheck {
+    intact: boolean;
+    /** The store's own sentence when it is not. */
+    reason?: string;
+    signed_at?: Timestamp;
+}
+/** `custom.doc_template` — a body with tokens, and the Table it renders. */
+interface DocTemplateRow {
+    id: Uuid;
+    organization_id: Uuid;
+    renders_table_id: Uuid;
+    name: string;
+    body: string;
+    /** REC-68 / VAL-10: a seal is over a document VERSION, so the version is first-class. */
+    template_version: number;
+    token_count: number;
+    updated_at: Timestamp;
+}
+/**
+ * `custom.doc_render` — a rendered document, FROZEN. The bytes and their
+ * SHA-256 are what a signature seals, which is why a render is never edited:
+ * a further agreement is a further version with its own seal.
+ */
+interface DocRenderRow {
+    id: Uuid;
+    template_id: Uuid;
+    record_id: Uuid;
+    table_id: Uuid;
+    template_version: number;
+    body: string;
+    content_hash: string;
+    rendered_at: Timestamp;
+}
+/** `custom.doc_signature` — one seal, immutable once made. */
+interface DocSignatureRow {
+    id: Uuid;
+    render_id: Uuid;
+    record_id: Uuid;
+    field_key: string;
+    signer_name: string;
+    signer_user_id: Uuid | null;
+    signed_at: Timestamp;
+    document_hash: string;
+    document_version: number;
+}
+
+/** `immediate` fires on the change; `digest` is collected and sent on a schedule. */
+type SubscriptionCadence = "immediate" | "digest";
+/** One subscription, exactly as `custom.agg_subscriptions` reports it. */
+interface Subscription {
+    rule_id: Uuid;
+    saved_view_id: Uuid | null;
+    cadence: string;
+    /** The digest's schedule. Null for `immediate`. */
+    schedule: string | null;
+    channel: string;
+    /** Null means this subscription fires at nobody, and the store says so. */
+    recipient_user_id: Uuid | null;
+    event_key: string;
+    name: string;
+}
+/** The `subscription` block a Rule record carries. Written through `record_write`. */
+interface SubscriptionBlock {
+    saved_view_id: Uuid;
+    cadence: SubscriptionCadence;
+    schedule?: string | null;
+    channel?: string;
+    recipient_user_id?: Uuid | null;
+    event_key?: string;
+}
+
+/**
+ * REL-6. Whether Visibility flows along this relation and the MAXIMUM access
+ * level it carries. Default off on `referenced`, on for `owned`.
+ */
+interface RelationCarries {
+    carries: boolean;
+    /** The ceiling — a relation never carries more access than this. */
+    max_access: string | null;
+}
+/** The seven properties, each its own question. */
+interface RelationProperties {
+    /** REL-1. Stored once on the contained table, read from the field's side. */
+    flavor: RelationFlavor;
+    /** REL-2. Separate from flavour. */
+    on_delete: OnDelete;
+    /** REL-3. A snapshot is a frozen copy in the relation's payload — never a pointer into History. */
+    binding: RelationBinding;
+    /** REL-4. */
+    ordered: boolean;
+    /** REL-5. */
+    loops: "allowed" | "refused";
+    /** REL-6. */
+    carries: RelationCarries;
+    /** REL-7. */
+    cardinality: RelationCardinality;
+}
+/**
+ * REL-8 / REL-N-1. A target is a REFERENCE, written that way from the first
+ * line of code, because it may name a row outside our database. One Table,
+ * several, or any — polymorphic without restriction. External targets are
+ * read-only in v1.
+ */
+type RelationTarget = {
+    kind: "ours";
+    entity_token: string;
+    row_id: Uuid;
+} | {
+    kind: "external";
+    connection_token: string;
+    external_table: string;
+    external_key: string;
+} | {
+    kind: "any";
+};
+/** One edge, as the store holds it in `platform.associations`. */
+interface Relation {
+    id: Uuid;
+    organization_id: Uuid;
+    /** REL-10. The field key, which is what `role` holds. */
+    role: string;
+    source: RelationTarget;
+    target: RelationTarget;
+    properties: RelationProperties;
+    /** REL-4. Meaningful only when `ordered`. */
+    position: number | null;
+    /** REL-3. The frozen copy, when `binding` is `snapshot`. */
+    payload: Record<string, unknown> | null;
+    /** REL-14. Hydrated from the target's title field AT READ — never stored. */
+    label: string | null;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    /** REL-13 / REL-16. Associations are versioned, so relation history exists. */
+    version: number;
+}
+/**
+ * DOOR-6. A query coordinate: "related to THIS, along THAT role, in that
+ * direction". Any combination, and any subset of them.
+ */
+interface RelationCoordinate {
+    /** The record at the other end. */
+    record_id: Uuid;
+    /** The field key the edge carries as its role. Omit to mean any role. */
+    role?: string;
+    /** Which way to walk. `out` is this record's own relation fields. */
+    direction?: "out" | "in" | "either";
+}
+
+/**
+ * DYN-14 / DYN-15. An ordered list of merge fields ENDING IN A LITERAL, or the
+ * decision to block the turn, or a named absence. No unresolved value is ever
+ * rendered blank or left as a literal placeholder.
+ */
+type MissingBehavior = {
+    kind: "fallback";
+    chain: Array<{
+        merge_field_key: string;
+    } | {
+        literal: unknown;
+    }>;
+} | {
+    kind: "block_turn";
+} | {
+    kind: "named_absence";
+    say: string;
+};
+/** DYN-16. Applied AFTER resolution, on the merge field and never on the Field. */
+interface MergeFieldTransform {
+    /** e.g. `currency`, `upper`, `date`; the organization's own list. */
+    name: string;
+    options?: Record<string, unknown>;
+}
+/** DYN-1. A Record of the kernel Table `Merge Field`. */
+interface MergeField {
+    id: Uuid;
+    organization_id: Uuid;
+    key: string;
+    label: string;
+    /** DYN-3. Exactly one of eight. Relationships and rules are NOT sources. */
+    source: MergeFieldSource;
+    /** DYN-4. What it resolves INTO. The consumer never learns which. */
+    semantic_type: MergeFieldSemanticType;
+    /** §A. Any number. Never fused into the source. */
+    modifiers: MergeFieldModifier[];
+    /**
+     * DYN-12. Exactly one, and it drives the input surface. It OUTRANKS the
+     * precedence ladder: `server_fixed` is not offered as an input at all, and a
+     * value sent for one anyway is discarded and recorded — never merged.
+     */
+    override_policy: OverridePolicy;
+    /**
+     * DYN-13. Whether an override is POSSIBLE and WHO MAY perform it are two
+     * settings. This is the second one: an access level or an organization role.
+     */
+    override_requires: string | null;
+    /** DYN-16. */
+    format: MergeFieldTransform | null;
+    /** DYN-17. `inline`, `on_demand`, or `auto` by budget. A value in no tier is a defect. */
+    delivery?: Delivery;
+    /** DYN-14. Declared, always. */
+    missing?: MissingBehavior;
+    /**
+     * What the source needs: for `record`, the starting record and the chain; for
+     * `tool`, the connection token and the freshness ceiling (DYN-20); for
+     * `literal`, the literal.
+     */
+    source_config: Record<string, unknown>;
+    created_by: Uuid | null;
+    updated_by: Uuid | null;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    version: number;
+    metadata: Record<string, unknown>;
+    visibility: string;
+}
+/** DYN-8. The triple the RUN gets. Every audit question is answerable from it. */
+interface ResolutionTriple {
+    record_id: Uuid | null;
+    field_id: Uuid | null;
+    value_version: number | null;
+}
+/** DYN-22. The one provenance row per merge field per turn. */
+interface MergeFieldProvenance {
+    merge_field_id: Uuid;
+    declared_source: MergeFieldSource;
+    /** Which source actually answered — the fallback chain makes these differ. */
+    actual_source: MergeFieldSource | null;
+    record_id: Uuid | null;
+    field_id: Uuid | null;
+    value_version: number | null;
+    rule_id: Uuid | null;
+    rule_version: number | null;
+    /** DYN-11. Who overrode it, and every LOSER of the ladder, not only the winner. */
+    override_by: Uuid | null;
+    losers?: Array<{
+        source: MergeFieldSource;
+        value: unknown;
+        why_lost: string;
+    }>;
+    /** DYN-11/DYN-12. A value a client sent for a field it may not supply, discarded and recorded. */
+    discarded_attempt?: {
+        value: unknown;
+        because: string;
+    } | null;
+    resolved_at: Timestamp;
+    freshness: Freshness;
+    outcome: string;
+}
+/**
+ * What a consumer gets back. `pending` is a first-class answer, not a blank:
+ * until the server's resolver exists, a merge field says so and says WHY
+ * (AGT-N-7 — anything that could not be delivered is named, never omitted).
+ */
+type MergeFieldResolution = {
+    state: "resolved";
+    /** The rendered string the prompt gets. */
+    rendered: string;
+    value: unknown;
+    triple: ResolutionTriple;
+    provenance: MergeFieldProvenance;
+} | {
+    state: "absent";
+    /** DYN-14's named absence — what the screen says instead of a blank. */
+    say: string;
+    reason: string;
+    provenance: MergeFieldProvenance | null;
+} | {
+    state: "pending";
+    /** WHY it is pending, in the words a person can act on. Never empty. */
+    reason: string;
+};
+
+/**
+ * One of the five states, as `custom.work_states()` lists them — with what it
+ * may become next and whether it is the end. A screen that hardcoded these
+ * would be a second source of truth for the one question the store answers.
+ */
+interface WorkState {
+    sort: number;
+    name: string;
+    terminal: boolean;
+    next: string[];
+}
+/** One node of a template graph: a record-to-be, in a named Table, under a ref. */
+interface WorkTemplateNode {
+    /** The name the graph refers to this node by, and the key an override is filed under. */
+    ref: string;
+    /** The Table the record lands in. */
+    table: Uuid;
+    /** The document it starts life with. An override merges on top at instantiation. */
+    data?: Record<string, unknown>;
+}
+/** One edge. `owned` is what `custom.relation_own` makes; W1-REL owns the rest. */
+interface WorkTemplateRelation {
+    from: string;
+    to: string;
+    kind?: string;
+}
+/**
+ * THE WHOLE TEMPLATE, DECLARATIVELY. REC-70: the graph is created in ONE act
+ * and judged before any of it is written, so an agent writes a twelve-step
+ * checklist in a single call and a half-made checklist is not a state the store
+ * can be in.
+ */
+interface WorkGraph {
+    nodes: WorkTemplateNode[];
+    relations?: WorkTemplateRelation[];
+}
+/** What `custom.work_template_instantiate` answers: what it made, and how much. */
+interface WorkInstantiation {
+    template_id: Uuid;
+    /** The log row. Until W3-HIST lands, this row IS the log of the act, and says so. */
+    instantiation_id: Uuid;
+    records_created: number;
+    relations_created: number;
+    relation_kind: string;
+    /** ref → the record it became, which is how a step finds its own record. */
+    refs: Record<string, Uuid>;
+    records: Uuid[];
+    relations: Uuid[];
+    ms?: number;
+}
+/** One row of `custom.work_whose_turn`: a record, whose turn it is, and where it is up to. */
+interface WorkTurn {
+    record_id: Uuid;
+    title: string | null;
+    assignee_id: Uuid | null;
+    turn: string | null;
+    due_on: Timestamp | null;
+    state: string | null;
+    status: string | null;
+    terminal: boolean | null;
+}
+/** A Field assignment is made of, as the store itself describes it. */
+interface WorkAssignmentField {
+    key: string;
+    label: string;
+    spec: Record<string, unknown>;
+}
+/**
+ * One hold on one slot. `expired` is the STORE's answer, not a clock comparison
+ * a screen ran: a hold whose time is up is named as lapsed rather than quietly
+ * disappearing, so a person can see why the slot came back.
+ */
+interface WorkSlotHold {
+    hold_id: Uuid;
+    slot_key: string;
+    holder: string;
+    expires_at: Timestamp | null;
+    expired: boolean;
+}
+/**
+ * What an embed token is good for, from `custom.anon_token_verify`. A token
+ * carries ONE decision: `read` or `write`, never both.
+ */
+interface AnonTokenBinding {
+    token_id: Uuid;
+    organization_id: Uuid;
+    form_id: Uuid | null;
+    saved_view_id: Uuid | null;
+    record_id: Uuid | null;
+    mode: "read" | "write";
+}
+
+/**
+ * VIS-31. A signed-in OUTSIDER, with the reason in plain English.
+ *
+ * "No organization" cannot mean "no row in the membership table": signup mints
+ * every account a PERSONAL organization, so under that reading nobody would
+ * ever be external. It means no membership of a NON-personal organization, and
+ * `iam.is_external_principal` says that once so no surface can invent a second
+ * answer.
+ */
+interface ExternalPrincipalCard {
+    user_id: Uuid | null;
+    /** The answer itself. */
+    external: boolean;
+    signed_in: boolean;
+    /**
+     * WHY, in the platform's own words — the sentence a portal shows instead of
+     * an empty screen. `iam` writes it, not us, so the portal and the API and the
+     * admin screen all say the same thing about the same person.
+     */
+    explanation: string;
+    /** How many NON-personal organizations they belong to. Zero is what external means. */
+    organization_memberships: number;
+    [key: string]: unknown;
+}
+/** VIS-32. A record or a view bound to a public address, with a declared render mode. */
+interface PublishBinding {
+    id: Uuid;
+    slug: string;
+    resource_type: string;
+    resource_id: Uuid;
+    organization_id: Uuid;
+    render_mode: string;
+    is_active: boolean;
+    created_at?: Timestamp;
+    [key: string]: unknown;
+}
+/**
+ * What a SIGNED-OUT visitor resolves. An invented address, a revoked one and an
+ * unpublished one all resolve to NOTHING — the same 404 — because an address
+ * that answered differently for a revoked binding would be an existence oracle.
+ *
+ * `notice` is D-15's admission, carried on every read: nothing was scanned
+ * before this was listed, and nothing here pretends otherwise.
+ */
+interface ResolvedPublishBinding {
+    slug: string;
+    resource_type: string;
+    resource_id: Uuid;
+    organization_id: Uuid;
+    render_mode: string;
+    namespace: string | null;
+    notice: string;
+}
+
+/**
+ * What KIND of refusal it was. The mapping from SQLSTATE to code lives in
+ * `/core`, and it is checked against `STORE_REFUSAL_CODES` — the list of every
+ * SQLSTATE the store's own bodies raise, generated from the live catalogue. A
+ * code the store can raise and this union cannot name is a hole, and the
+ * real-door suite fails on it.
+ */
+type RecordsErrorCode = 
+/** `PT409` — somebody else's write won. The record clock moved under you. */
+"stale_write"
+/** `42501` — a door. Either the schema is revoked, or the store is switched off, or this principal may not pass. */
+ | "door"
+/** `23514` — a Rule, a shape guard, or a validation the store enforces refused it. */
+ | "refused_by_rule"
+/** `22004` / `22023` — the call itself was malformed: a missing id, a patch that is not an object. */
+ | "invalid_argument"
+/** `02000` — the record is not here (deleted, never existed, or another organization's). */
+ | "not_found"
+/** `23503` — something it points at is not there. */
+ | "missing_reference"
+/** `23505` — that thing is already here. */
+ | "already_exists"
+/** `0A000` — the store does not do this yet, and says which part. */
+ | "not_supported"
+/** `53400` / `22012` — the store ran out of something, or the arithmetic could not be done. */
+ | "store_limit"
+/**
+ * `40001` — the visibility snapshot this connection carries is older than a
+ * write the reader has already observed, so the store refused to answer at
+ * all rather than hand back something they just lost. Retry on a fresh
+ * connection; it is the one refusal in this list that is worth repeating.
+ */
+ | "stale_read"
+/**
+ * THE DOOR THAT DOES NOT EXIST YET. Not an error condition in the database —
+ * this package asked for a door that is not in the live catalogue, so it
+ * refused to guess. `door_absent` always names the door and the lane that
+ * owns it; it is never a silent no-op and never an empty list.
+ */
+ | "door_absent"
+/**
+ * `PGRST202` / `PGRST205` — PostgREST could not find the function or the
+ * schema. The database this client is pointed at is not serving the record
+ * store: the schema is not exposed, or the grants are not there.
+ */
+ | "store_not_served"
+/** Anything the mapper could not place. It still carries the store's own words. */
+ | "internal";
+/** A refusal, in the store's own words. */
+interface RecordsError {
+    code: RecordsErrorCode;
+    /** THE STORE'S message, verbatim. Never paraphrased. */
+    message: string;
+    /** THE STORE'S hint, verbatim — this is where the remedy is written. */
+    hint?: string;
+    /** The SQLSTATE, so a caller can be exact when a code is not exact enough. */
+    sqlstate?: string;
+    /** Whatever the store put in DETAIL, parsed when it was json. */
+    detail?: unknown;
+}
+type RecordsResult<T> = {
+    ok: true;
+    data: T;
+} | {
+    ok: false;
+    error: RecordsError;
+};
+/** Narrowing helper for hosts compiled without `strictNullChecks`. */
+declare function isRecordsErr<T>(result: RecordsResult<T>): result is {
+    ok: false;
+    error: RecordsError;
+};
+declare const ok: <T>(data: T) => RecordsResult<T>;
+declare const err: <T>(error: RecordsError) => RecordsResult<T>;
+/**
+ * A `stale_write` carries everything the screen needs to show the conflict
+ * rather than a toast: which version you wrote against, which one won, and the
+ * value of every field you touched as it stands now. The store builds this and
+ * this type is its shape — nothing is reconstructed on the client.
+ */
+interface StaleWriteDetail {
+    expected_version: number;
+    current_version: number;
+    contested_fields: Record<string, unknown>;
+}
+/** The parsed form of a `stale_write`, for `useRecordMutation`'s conflict state. */
+interface WriteConflict extends StaleWriteDetail {
+    record_id: Uuid;
+    /** The store's own sentence — what the screen shows. */
+    message: string;
+    /** The store's own remedy. */
+    hint: string;
+}
+/**
+ * The structural shape of a PostgREST failure as supabase-js resolves it: a
+ * PLAIN OBJECT parsed from the response body, NOT an `Error`. Reading
+ * `.message` off `instanceof Error` discards the real database message on every
+ * genuine failure.
+ */
+interface PgError {
+    code?: string | null;
+    message: string;
+    details?: string | null;
+    hint?: string | null;
+}
+/** What the validation mirror answers: the same sentence the trigger would raise. */
+interface PredictedRefusal {
+    /** The field key the store would name, when it names one. */
+    field_key?: string;
+    /** The message the store's own body would raise, word for word. */
+    message: string;
+    hint?: string;
+    sqlstate: string;
+    /**
+     * Which of the store's bodies would raise it, so a reader can go and check
+     * that this mirror still tells the truth.
+     */
+    predicted_by: string;
+}
+/** VAL-5 / VAL-6, named so a caller can say which word was the problem. */
+interface ForbiddenEnvelopeWord {
+    field_key: string;
+    word: PerValueAccessWord;
+}
+
+/**
+ * The data seam: a structural subset of `SupabaseClient`. The package never
+ * opens a database connection of its own and never holds a key — the HOST
+ * supplies a client that already carries the operating person's session, which
+ * is what makes DOOR-5 and AGT-N-4 true (the store sees the person, not us).
+ */
+interface RecordsDataSource {
+    /**
+     * Call a door. The name is always a door the live catalogue has; `/core`
+     * refuses `door_absent` before it ever reaches here for one that does not.
+     */
+    rpc(fn: string, args: Record<string, unknown>, 
+    /**
+     * THE SCHEMA THE DOOR LIVES IN, always supplied: `custom` for the store's
+     * own doors, `iam` for the trust doors (the external principal and the
+     * publish binding, which are the PLATFORM's). A host binding supabase-js
+     * routes this to `client.schema(options.schema).rpc(fn, args)`; a host that
+     * ignores it calls its own default PostgREST profile — `public` — and is
+     * refused by name, which is the failure we want rather than a silent answer
+     * from the wrong system. (Before 2026-09-18 this was described as "only ever
+     * `iam`" and the store's doors went unqualified; the extension's first real
+     * turn proved that asks `public.store_is_open` and finds nothing.)
+     */
+    options?: {
+        schema?: string;
+    }): PromiseLike<{
+        data: unknown;
+        error: PgError | null;
+    }>;
+    /** Reads of `custom.*` go through the schema-qualified builder, never a bare `from`. */
+    schema(name: string): {
+        from(table: string): RecordsTableQuery;
+    };
+}
+/** The read surface the list and query paths use. A real supabase-js client satisfies it. */
+interface RecordsTableQuery {
+    select(columns: string, options?: {
+        count?: "exact" | "planned" | "estimated";
+        head?: boolean;
+    }): RecordsFilter;
+}
+interface RecordsFilter extends PromiseLike<RecordsResponse> {
+    eq(column: string, value: unknown): RecordsFilter;
+    neq(column: string, value: unknown): RecordsFilter;
+    in(column: string, values: readonly unknown[]): RecordsFilter;
+    is(column: string, value: null | boolean): RecordsFilter;
+    gte(column: string, value: unknown): RecordsFilter;
+    lte(column: string, value: unknown): RecordsFilter;
+    order(column: string, options?: {
+        ascending?: boolean;
+    }): RecordsFilter;
+    range(from: number, to: number): RecordsFilter;
+    limit(count: number): RecordsFilter;
+}
+interface RecordsResponse {
+    data: unknown;
+    error: PgError | null;
+    count?: number | null;
+}
+/**
+ * WHO IS ACTING. AGT-N-4: an agent carries the exact authority of the person
+ * operating it — there is no agent identity and there are no service roles. So
+ * the actor word and the person are two separate facts, and `on_behalf_of` is
+ * meaningful only when the actor is `agent`.
+ */
+interface RecordsActor {
+    actor: Actor;
+    /** The signed-in person. The store reads this from the session, not from us; this is for the client's own mirror. */
+    user_id?: Uuid;
+    /** Only an agent acts on behalf of a person (the store refuses it otherwise). */
+    on_behalf_of?: Uuid;
+}
+/**
+ * OPTIONAL. A live-updates seam. The default degradation is stated rather than
+ * silent: with no port bound, `useRecords` reports `live: false` and the screen
+ * can say "not live" instead of quietly going stale.
+ *
+ * A host binds this with `@ai-matrx/data/react`'s channel hygiene — the package
+ * deliberately does NOT depend on it, so the headless core stays free of a
+ * realtime client and a host that has one keeps using the one it already has.
+ */
+interface RecordsRealtimePort {
+    /**
+     * Watch one organization's records of one table. Returns an unsubscribe. The
+     * callback fires with the record id that changed; the hook re-reads through
+     * the read door, because a realtime payload has NOT passed the door.
+     */
+    subscribeRecords(args: {
+        organization_id: Uuid;
+        table_id: Uuid;
+    }, onChange: (recordId: Uuid) => void): () => void;
+}
+/**
+ * OPTIONAL. Where a refusal that nobody asked about goes — the loud funnel.
+ * Default degradation: `console.error` with the store's own words, never
+ * silence.
+ */
+type RecordsErrorSink = (error: {
+    code: string;
+    message: string;
+    hint?: string;
+    where: string;
+}) => void;
+/**
+ * OPTIONAL. The merge-field resolver's server half (`W5-MERGE-B`). While it is
+ * not bound, `useMergeField` answers `pending` WITH THE REASON — never a blank,
+ * never a literal placeholder left in the text (DYN-14).
+ */
+interface RecordsResolverPort {
+    resolve(args: {
+        organization_id: Uuid;
+        merge_field_keys: string[];
+        /** The live selection the `state` source reads (DYNAMIC-VALUES §C). */
+        state?: Record<string, unknown>;
+    }): Promise<unknown>;
+}
+/** The one config a host binds. */
+interface RecordsConfig {
+    /** REQUIRED. */
+    dataSource: RecordsDataSource;
+    /** REQUIRED. */
+    actor: RecordsActor;
+    /**
+     * REQUIRED. REC-29: organizations are hard walls, and the store is keyed
+     * `(organization_id, id)`. There is no "current organization" this package
+     * discovers for itself — the host says which one, every time.
+     */
+    organizationId: Uuid;
+    realtime?: RecordsRealtimePort;
+    onError?: RecordsErrorSink;
+    resolver?: RecordsResolverPort;
+    /**
+     * The schema the record store lives in. Exists so a rehearsal branch and
+     * production can differ without a fork; it is `custom` everywhere today.
+     */
+    schema?: string;
+}
+
+/**
+ * DOOR-8. As-of on EITHER clock, and they are different questions:
+ *   · `record` — the record clock: what this record looked like at version time.
+ *   · `world` — the world clock: which values were true of the world then
+ *     (the Field's `dated` modifier).
+ */
+interface AsOf {
+    clock: "record" | "world";
+    at: Timestamp;
+}
+/** A predicate over a PROMOTED field (REC-5: promotion light -> heavy). */
+interface PromotedPredicate {
+    field_key: string;
+    /** The value as text, exactly as `custom.promoted_read` takes it. */
+    equals: string;
+}
+interface RecordQuery {
+    table_id: Uuid;
+    /** DOOR-6. Any combination, any subset. An empty list means "no relation constraint". */
+    relations?: RelationCoordinate[];
+    /** Predicates the store can answer from an index. */
+    promoted?: PromotedPredicate[];
+    /** DOOR-8. */
+    asOf?: AsOf;
+    /** DOOR-9. Ask across EVERY Home of this Table in one answer. */
+    acrossHomes?: boolean;
+    /** REC-23. Soft-deleted rows are out unless you say otherwise. */
+    includeDeleted?: boolean;
+    /** FLD-10. */
+    recordType?: string;
+    orderBy?: {
+        column: "created_at" | "updated_at";
+        ascending?: boolean;
+    };
+    limit?: number;
+    offset?: number;
+}
+
+interface RecordsClient {
+    /** The config this client was built with, so a screen can show who it is acting as. */
+    readonly config: RecordsConfig;
+    recordWrite(args: {
+        table_id: Uuid;
+        data: RecordDocument;
+    }): Promise<RecordsResult<Uuid>>;
+    recordUpdate(args: {
+        record_id: Uuid;
+        patch: Record<string, unknown>;
+        /** Leave it out and the last writer wins; supply it and a loser is TOLD. */
+        expectedVersion?: number;
+    }): Promise<RecordsResult<number>>;
+    /** REC-23. Soft, and reversible within `retention`. */
+    recordDelete(args: {
+        record_id: Uuid;
+    }): Promise<RecordsResult<Timestamp>>;
+    recordRestore(args: {
+        record_id: Uuid;
+    }): Promise<RecordsResult<void>>;
+    recordRead(args: {
+        record_id: Uuid;
+        withComputed?: boolean;
+    }): Promise<RecordsResult<RecordRead>>;
+    /**
+     * DOOR-1. A page of one Table's records THROUGH `custom.read_records`: the
+     * store decides which rows this reader may see and which fields of them, and
+     * a field it masked comes back present-and-null with its reason in `hidden`.
+     * `total` is null because the door counts nothing it has not read — a count
+     * of rows a person may not see is a leak with a number on it.
+     */
+    list(args: {
+        table_id: Uuid;
+        limit?: number;
+        offset?: number;
+    }): Promise<RecordsResult<{
+        rows: ReadRow[];
+        total: number | null;
+    }>>;
+    query(query: RecordQuery): Promise<RecordsResult<{
+        rows: ReadRow[];
+        total: number | null;
+    }>>;
+    tableList(): Promise<RecordsResult<Table[]>>;
+    fields(args: {
+        table_id: Uuid;
+        recordType?: string;
+    }): Promise<RecordsResult<Field[]>>;
+    /**
+     * FLD-5 / FLD-6: a list field stores the id of an option RECORD, because
+     * every pick-list is already a Table. These are that Table's records — the
+     * store resolves which Table from the Field's own config, so no caller has to
+     * know it.
+     */
+    fieldOptions(args: {
+        field_id: Uuid;
+    }): Promise<RecordsResult<StoredRecord[]>>;
+    tableCapacity(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<TableCapacity>>;
+    /**
+     * REC-1: a Table has to live somewhere, so a Home comes first — and a Home is
+     * an ordinary record in the person kernel. `homeId` is therefore required and
+     * `personKernelId()` is how a caller gets a Table to write one into.
+     */
+    tableDeclare(args: {
+        spec: Record<string, unknown>;
+        homeId: Uuid;
+    }): Promise<RecordsResult<Uuid>>;
+    /** The kernel Tables a caller writes a Home, a Field or a Rule into. */
+    personKernelId(): Promise<RecordsResult<Uuid>>;
+    fieldKernelId(): Promise<RecordsResult<Uuid>>;
+    ruleKernelId(): Promise<RecordsResult<Uuid>>;
+    /** Every record the Rule says is a member. A saved view's list is this, not a filter a screen ran. */
+    ruleMembers(args: {
+        rule_id: Uuid;
+    }): Promise<RecordsResult<StoredRecord[]>>;
+    /** Is this one record a member, and WHY — the store's own answer. */
+    ruleMembership(args: {
+        rule_id: Uuid;
+        record_id: Uuid;
+    }): Promise<RecordsResult<unknown>>;
+    /** Run a stored Rule against a document. */
+    ruleRun(args: {
+        rule_id: Uuid;
+        values: Record<string, unknown>;
+        context?: Record<string, unknown>;
+    }): Promise<RecordsResult<unknown>>;
+    /** Evaluate a Rule expression that has not been stored — the conditional logic a form runner asks about. */
+    ruleEval(args: {
+        expr: unknown;
+        values: Record<string, unknown>;
+        context?: Record<string, unknown>;
+    }): Promise<RecordsResult<unknown>>;
+    /**
+     * Group, bucket, filter and measure INSIDE `custom.record_aggregate`. The
+     * aggregate node sits above the visibility join, so what a chart draws is
+     * exactly what this person may see — the rest is never fetched, let alone
+     * summed and then hidden.
+     */
+    recordAggregate(args: {
+        table_id: Uuid;
+        /** Field keys whose values become the groups. */
+        groupBy?: string[];
+        /** `count` needs no key; every other operation reads one Field. */
+        measures?: AggregateMeasure[];
+        /** A date Field truncated to a period — a group whose expression is a date_trunc. */
+        bucket?: {
+            key: string;
+            by: AggregateBucket;
+        } | null;
+        /** Equality only, and it lands in the SAME WHERE as visibility. */
+        filter?: Record<string, string>;
+        limit?: number;
+    }): Promise<RecordsResult<AggregateRow[]>>;
+    /** The measures the store itself offers. Asked, never hardcoded in a picker. */
+    aggOperations(): Promise<RecordsResult<string[]>>;
+    /** The periods the store itself buckets by. */
+    aggBuckets(): Promise<RecordsResult<string[]>>;
+    /**
+     * Every subscription in this organization, optionally narrowed to one saved
+     * view or one cadence. There is no subscription table: each one is a Rule
+     * record carrying a `subscription` block, so a subscription is readable,
+     * historied and agent-writable like anything else.
+     */
+    aggSubscriptions(args?: {
+        saved_view_id?: Uuid | null;
+        cadence?: string | null;
+    }): Promise<RecordsResult<Subscription[]>>;
+    /** The cadences the store itself offers. Asked, never hardcoded in a picker. */
+    aggSubscriptionCadences(): Promise<RecordsResult<string[]>>;
+    docTemplateSave(args: {
+        table_id: Uuid;
+        name: string;
+        body: string;
+        template_id?: Uuid | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /** The body with every token resolved against one record. Read-only, no render row. */
+    docRenderBody(args: {
+        template_id: Uuid;
+        record_id: Uuid;
+    }): Promise<RecordsResult<string>>;
+    /** Write the render — frozen bytes a signature can be checked against. */
+    docRenderDocument(args: {
+        template_id: Uuid;
+        record_id: Uuid;
+    }): Promise<RecordsResult<Uuid>>;
+    /** Every token in a body, in order, with the Field id each one points at. */
+    docTokens(args: {
+        body: string;
+    }): Promise<RecordsResult<DocToken[]>>;
+    /** The tokens this Table cannot answer, each with the store's own reason. */
+    docUnresolvedTokens(args: {
+        table_id: Uuid;
+        body: string;
+    }): Promise<RecordsResult<DocUnresolvedToken[]>>;
+    docSign(args: {
+        render_id: Uuid;
+        field_key: string;
+        signer_name: string;
+        signer_user_id?: Uuid | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /** Is what was signed still what is there? The store answers, never the screen. */
+    docSignatureIntact(args: {
+        signature_id: Uuid;
+    }): Promise<RecordsResult<unknown>>;
+    /** Every template that renders one Table. */
+    docTemplates(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<DocTemplateRow[]>>;
+    /** Every frozen render of one record, newest first. */
+    docRenders(args: {
+        record_id: Uuid;
+    }): Promise<RecordsResult<DocRenderRow[]>>;
+    /** Every signature on one record. */
+    docSignatures(args: {
+        record_id: Uuid;
+    }): Promise<RecordsResult<DocSignatureRow[]>>;
+    /**
+     * DOOR-11. One record's revisions, newest first. The read door answers
+     * documents and deliberately not versions, so a screen that wants to save
+     * optimistically reads the version of the record it LOADED from here — for
+     * the one record being edited, never for a list.
+     */
+    revisions(args: {
+        record_id: Uuid;
+    }): Promise<RecordsResult<RecordRevision[]>>;
+    /**
+     * Every value of one record WITH its envelope — its own version, who wrote
+     * it, who they were acting for and when. The timeline IS the record (REC-19);
+     * there is no second history table.
+     */
+    recordValuesVersioned(args: {
+        record_id: Uuid;
+    }): Promise<RecordsResult<ReadValue[]>>;
+    metadataSearch(args: {
+        text: string;
+    }): Promise<RecordsResult<never>>;
+    /**
+     * Mint an embed token. `mode` is `read` OR `write` and never both — the store
+     * refuses a token carrying two decisions. The secret comes back ONCE, because
+     * only its digest is stored: a database read cannot produce a working token.
+     * `allowedOrigins` is required and matched EXACTLY, so `example.com.evil.test`
+     * fails a check that a suffix match would pass.
+     */
+    anonTokenIssue(args: {
+        mode: "read" | "write";
+        allowedOrigins: string[];
+        formId?: Uuid | null;
+        savedViewId?: Uuid | null;
+        recordId?: Uuid | null;
+        expiresAt?: Timestamp | null;
+    }): Promise<RecordsResult<{
+        token_id: Uuid;
+        secret: string;
+    }>>;
+    /** What a secret is good for, from an origin. The store's sentence when it is not. */
+    anonTokenVerify(args: {
+        secret: string;
+        origin: string;
+        requiredMode?: "read" | "write" | null;
+    }): Promise<RecordsResult<AnonTokenBinding>>;
+    anonTokenRevoke(args: {
+        token_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
+    /**
+     * A STRANGER'S WRITE. The token supplies the organization, so this call names
+     * none — and what it produces is a QUARANTINED SUBMISSION, not a record:
+     * `custom.record` is never touched here. `clientKey` makes a replay free and
+     * idempotent, which is what lets a flaky phone retry safely.
+     */
+    anonWrite(args: {
+        secret: string;
+        origin: string;
+        payload: Record<string, unknown>;
+        clientKey?: string | null;
+        rawPayload?: Record<string, unknown>;
+    }): Promise<RecordsResult<Uuid>>;
+    /**
+     * SCR-30, and it is the SIGNED-IN offline path, not the stranger's. The client
+     * mints `clientKey` BEFORE the first attempt, offline, and the store's own
+     * replay ledger dedupes on it — so a reconnect that fires the same capture
+     * thirty times writes one record and returns the same id every time.
+     */
+    anonCapture(args: {
+        table_id: Uuid;
+        clientKey: string;
+        payload: Record<string, unknown>;
+        device?: string | null;
+        capturedAt?: Timestamp | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /** Open or close a form to strangers. An admin act on the Table, never an editor one. */
+    anonPublish(args: {
+        form_id: Uuid;
+        published?: boolean;
+    }): Promise<RecordsResult<Timestamp | null>>;
+    /** The five states and what each one may become. Asked, never hardcoded in a picker. */
+    workStates(): Promise<RecordsResult<WorkState[]>>;
+    /** Why this graph would be refused — asked BEFORE it is written. `null` means it is fine. */
+    workTemplateRefusal(args: {
+        graph: WorkGraph;
+    }): Promise<RecordsResult<string | null>>;
+    workTemplateDeclare(args: {
+        name: string;
+        graph: WorkGraph;
+    }): Promise<RecordsResult<Uuid>>;
+    /**
+     * REC-70: the WHOLE graph is created in one act, judged before any of it is
+     * written, so a half-made checklist is not a state this store can be in.
+     */
+    workTemplateInstantiate(args: {
+        template_id: Uuid;
+        overrides?: Record<string, Record<string, unknown>>;
+    }): Promise<RecordsResult<WorkInstantiation>>;
+    workTemplateShape(args: {
+        template_id: Uuid;
+    }): Promise<RecordsResult<unknown>>;
+    workInstantiationShape(args: {
+        instantiation_id: Uuid;
+    }): Promise<RecordsResult<unknown>>;
+    /** Whose turn each record is, with its state and whether that state is terminal. */
+    workWhoseTurn(args: {
+        table_id: Uuid;
+        includeFinished?: boolean;
+    }): Promise<RecordsResult<WorkTurn[]>>;
+    /** Does this Table carry assignment at all? A screen asks before it offers one. */
+    workHasAssignment(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
+    /** The Fields assignment is made of, so nothing here invents a column name. */
+    workAssignmentFields(args?: {
+        options_table_id?: Uuid | null;
+    }): Promise<RecordsResult<WorkAssignmentField[]>>;
+    /** Add assignment to a Table. */
+    workTakeAssignment(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<unknown>>;
+    /** Why this move would be refused. `null` means it is allowed. */
+    workTransitionRefusal(args: {
+        from_state_id: Uuid;
+        to_state_id: Uuid;
+    }): Promise<RecordsResult<string | null>>;
+    /** Declare the Table slots are held in. Idempotent — a second call finds the first. */
+    workSlotsDeclare(args: {
+        name: string;
+        slug: string;
+        homeId?: Uuid | null;
+    }): Promise<RecordsResult<unknown>>;
+    /**
+     * SCR-29. Take a slot for a while. THE STORE decides, under a unique index —
+     * two people racing for the same slot do not both get it, whatever either
+     * screen believed a moment earlier.
+     */
+    workSlotHold(args: {
+        table_id: Uuid;
+        slotKey: string;
+        holder: string;
+        ttl?: string;
+    }): Promise<RecordsResult<unknown>>;
+    workSlotRelease(args: {
+        hold_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
+    /** Every hold on this Table, with whether it has already lapsed. */
+    workSlotHolds(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<WorkSlotHold[]>>;
+    workSlotExpire(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<number>>;
+    /** VIS-31. Is this account a signed-in outsider — no NON-personal organization? */
+    isExternalPrincipal(args?: {
+        user_id?: Uuid | null;
+    }): Promise<RecordsResult<boolean>>;
+    /** The same answer WITH the plain-English reason a screen shows. */
+    externalPrincipalCard(args?: {
+        user_id?: Uuid | null;
+    }): Promise<RecordsResult<ExternalPrincipalCard>>;
+    /** Exactly the resource ids Visibility gave that outsider. Never an organization's list. */
+    externalPrincipalReach(args: {
+        resourceType: string;
+        user_id?: Uuid | null;
+    }): Promise<RecordsResult<Array<{
+        resource_id: Uuid;
+    }>>>;
+    /** VIS-32. Bind a record or a view to a public address with a declared render mode. */
+    publishBindingCreate(args: {
+        slug: string;
+        resourceType: string;
+        resource_id: Uuid;
+        renderMode?: string;
+    }): Promise<RecordsResult<PublishBinding>>;
+    publishBindingRevoke(args: {
+        slug: string;
+    }): Promise<RecordsResult<unknown>>;
+    /** What a SIGNED-OUT visitor resolves. Empty for an invented, revoked or unpublished address. */
+    resolvePublishBinding(args: {
+        slug: string;
+    }): Promise<RecordsResult<ResolvedPublishBinding[]>>;
+    /** D-15. The ONE sentence admitting nothing was scanned, so four surfaces cannot drift. */
+    worldPublishGapNotice(): Promise<RecordsResult<string>>;
+    /** Put a resource in the world lane. Refuses by name while the lane is closed. */
+    publishToWorld(args: {
+        resourceType: string;
+        resource_id: Uuid;
+        discoverable?: boolean;
+    }): Promise<RecordsResult<unknown>>;
+    /**
+     * Declare a Rule. It is NOT `recordWrite` into the rule kernel, and that is
+     * the whole point: `custom.record_write` inserts `data_class = 'record'`, so a
+     * document written that way is not a Rule and the store's own rule doors
+     * (`custom.rule_members`, `custom.agg_subscriptions`) never see it. Writing
+     * one through the record door and calling it a Rule would be a silent
+     * failure — a screen that looked like it had subscribed you to something.
+     */
+    ruleDeclare(args: {
+        spec: Record<string, unknown>;
+    }): Promise<RecordsResult<never>>;
+    fieldPropose(proposal: FieldProposal): Promise<RecordsResult<never>>;
+    tablePropose(proposal: TableProposal): Promise<RecordsResult<never>>;
+    promoteTable(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<unknown>>;
+    promoteField(args: {
+        table_id: Uuid;
+        field_id: Uuid;
+    }): Promise<RecordsResult<unknown>>;
+    /** Is the store switched on for this organization? A product switch, never the boundary. */
+    storeIsOpen(): Promise<RecordsResult<boolean>>;
+}
+
+interface RecordsProviderProps {
+    config: RecordsConfig;
+    children: ReactNode;
+}
+declare function RecordsProvider({ config, children }: RecordsProviderProps): react.FunctionComponentElement<react.ProviderProps<RecordsClient | null>>;
+/**
+ * The client, or a loud failure. A hook that quietly did nothing because nobody
+ * mounted the provider is the silent failure this throws instead of.
+ */
+declare function useRecordsClient(): RecordsClient;
+/** For a screen that wants to show who it is acting as (AGT-N-4). */
+declare function useRecordsActor(): RecordsActor;
+
+interface Async<T> {
+    data: T | null;
+    loading: boolean;
+    /** The store's own refusal. Never null-and-empty at the same time. */
+    error: RecordsError | null;
+    reload: () => void;
+}
+/** One Table's declaration. */
+declare function useTable(tableId: Uuid | null): Async<Table | null>;
+/** Every Table this person can see in this organization. */
+declare function useTables(): Async<Table[]>;
+/**
+ * FLD-10. The Fields that APPLY — the store decides, from the record type, and
+ * the client asks rather than filtering a list it has.
+ */
+declare function useFields(tableId: Uuid | null, recordType?: string): Async<Field[]>;
+interface UseRecordsOptions {
+    pageSize?: number;
+    page?: number;
+}
+interface UseRecordsState extends Async<{
+    rows: ReadRow[];
+    total: number | null;
+}> {
+    /**
+     * Whether this list is actually live. FALSE with a reason is an answer a
+     * screen can print; a list that silently stopped updating is not.
+     */
+    live: boolean;
+    liveReason: string;
+}
+/** A page of records, realtime-aware when the host bound the port. */
+declare function useRecords(tableId: Uuid | null, options?: UseRecordsOptions): UseRecordsState;
+/** One record, its values and (optionally) which Rule version computed each. */
+declare function useRecord(recordId: Uuid | null, withComputed?: boolean): Async<RecordRead | null>;
+interface UseRecordMutation {
+    write: (args: {
+        table_id: Uuid;
+        data: Record<string, unknown>;
+    }) => Promise<Uuid | null>;
+    update: (args: {
+        record_id: Uuid;
+        patch: Record<string, unknown>;
+        expectedVersion?: number;
+    }) => Promise<number | null>;
+    remove: (args: {
+        record_id: Uuid;
+    }) => Promise<string | null>;
+    restore: (args: {
+        record_id: Uuid;
+    }) => Promise<boolean>;
+    saving: boolean;
+    error: RecordsError | null;
+    /**
+     * THE CONFLICT, as something a screen can SHOW rather than a toast it flashes:
+     * the version you wrote against, the version that won, and every field you
+     * touched as it stands now. Nothing was overwritten and nothing was lost —
+     * which is exactly what the store's own hint says, and it is carried here.
+     */
+    conflict: WriteConflict | null;
+    clearConflict: () => void;
+}
+/** Writes, with optimistic concurrency surfaced instead of swallowed. */
+declare function useRecordMutation(): UseRecordMutation;
+/**
+ * DYN-14 / AGT-N-7. A merge field's value — and while the resolver's server half
+ * does not exist, `pending` WITH THE REASON. Never a blank, never a leftover
+ * `{{brace}}`, never an empty string that a prompt would carry into a model.
+ */
+declare function useMergeField(key: string | null, state?: Record<string, unknown>): MergeFieldResolution | null;
+
+export { ABSENCE_REASONS, ACTOR_VOCABULARY, type AbsenceReason, type Actor, type AggregateBucket, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AnonTokenBinding, COMPUTE_ON, CONTEXT_POLICIES, type ComputeOn, type ContextPolicy, DELIVERIES, type Delivery, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, ENTITY_TOKENS, type EntityToken, type ExternalPrincipalCard, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, type Field, type FieldBehavior, type FieldProposal, type FieldRule, type FieldSensitivity, type FieldSource, type ForbiddenEnvelopeWord, type Freshness, type HiddenFieldNotice, type Home, KERNEL_TABLES, type KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, type MergeField, type MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, type MergeFieldSemanticType, type MergeFieldSource, type MergeFieldTransform, type MissingBehavior, ON_DELETE, OVERRIDE_POLICIES, type OnDelete, type OverridePolicy, PARITY_FIELD_TYPES, PER_VALUE_ACCESS_WORDS, type ParityFieldType, type ParityFieldTypeDescriptor, type PerValueAccessWord, type PgError, type PredictedRefusal, type ProvenancePointer, type PublishBinding, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, type ReadRow, type ReadValue, type RecordDocument, type RecordRead, type RecordRevision, type RecordsActor, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, RecordsProvider, type RecordsProviderProps, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, type RecordsTableQuery, type RegisteredTable, type Relation, type RelationBinding, type RelationCardinality, type RelationCarries, type RelationCoordinate, type RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RetiredActorWord, type Rule, type RuleAnswer, type RuleExpression, type RuleNodeKind, type RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, type StaleWriteDetail, type StorageMode, type StoreDoorName, type StoreRefusalCode, type StoredRecord, type Subscription, type SubscriptionBlock, type SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, type Table, type TableCapacity, type TableDisplay, type TableOrigin, type TableProposal, type TableType, type Timestamp, type UseRecordMutation, type UseRecordsOptions, type UseRecordsState, type Uuid, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, type ValueAlternate, type ValueAlternateKey, type ValueEnvelope, type ValueEnvelopeKey, type ValueSource, type WorkAssignmentField, type WorkGraph, type WorkInstantiation, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, err, isRecordsErr, measureKey, ok, useFields, useMergeField, useRecord, useRecordMutation, useRecords, useRecordsActor, useRecordsClient, useTable, useTables };