@ai-matrx/records 0.30.0 → 0.37.0

package/CHANGELOG.md

@@ -1,5 +1,113 @@
 # Changelog — @ai-matrx/records
 
+## 0.37.0
+
+**Three doors the store already had and this client could not reach.**
+
+Until this release the only way to a booking page or a saved view was to ask an
+agent, because no method on `RecordsClient` called the doors that make them —
+so the agent was not the FASTER path to those things, it was the ONLY one.
+
+* `bookingDeclare` — `custom.booking_declare`, the owner's side of a booking
+  page. `admin` on the Table, because a booking page decides what a stranger may
+  write into it and which hours of the organization's week are on offer. It does
+  NOT publish: `anonPublish` is still the one act that opens a public surface,
+  for a booking page exactly as for a form. `BookingAvailability`,
+  `BookingWindow` and `BookingDeclared` are the answer's shape — a screen shows
+  the availability that came BACK, never the draft it sent, because the store
+  owns every default.
+* `views` — `custom.views`, the saved views of a Table. Narrowed in SQL as the
+  definer to Tables the caller can already open, so a list can never reveal a
+  Table.
+* `viewDeclare` — `custom.view_declare`. VIEWER on the Table, not editor:
+  writing down a question about a Table is not changing it. A subscription is
+  written OVER a saved view, so without this door a person who had never saved
+  one had nothing to subscribe to and "email me this every Monday" had nowhere
+  to land.
+
+## 0.36.0
+
+Republish of 0.35.0's contents. 0.35.0 never reached npm: its gate was red on
+this package's OWN live-doors fixture, which wrote an undeclared column `n` into
+its probe table — refused, correctly, by `custom._undeclared_key_guard` (23514,
+REC-1 / REC-51) the moment lane FIELD-TRUTH landed it. The door had not
+regressed; the fixture was writing a column nobody had declared. Fixed at the
+fixture, never at the guard.
+
+## 0.35.0
+
+**A gate a screen can read back, and a preview of what it would do today.**
+
+A stage gate was saved as one Rule whose expression is an `or` of four arms, and
+that compiled form was the only copy of it. `pipelineRead` handed a settings
+screen the gate's name and its sentence and nothing else — so an editor built on
+it would open the Birchwood Avenue renovation's "$5,000 needs a second quote"
+rule with a BLANK condition and overwrite it the first time somebody pressed
+Save.
+
+`PipelineRule` now carries `when` and `demands` as they were written, and
+`on_fail` — so an approval gate can never read back as a refusal.
+
+`pipelineGatePreview({ table_id, stage, gate })` answers the one question
+somebody writing a rule that refuses their colleagues' work actually has: of the
+cards on this board today, how many would this turn away, and which three. It
+takes the GATE rather than a rule id, because the whole point is judging one
+that has not been saved. The store compiles it with the same compiler
+`pipelineDeclare` uses, so this count and the refusal at the door cannot
+disagree at the edge of the condition — which is the only place anybody looks.
+
+**`PT428` is a real answer and this package called it `internal`.** The release
+gate's live refusal census found it. A gate whose `on_fail` is
+`require_approval` files the request and leaves the record where it was; a
+caller meets that code whenever the move went through the ordinary write door.
+It gets its own `needs_approval` code rather than joining `refused_by_rule`,
+because the work was neither rejected nor done — a screen that drew it as a
+refusal would tell somebody their work was turned down while it is being
+considered.
+
+**The door mirror had gone stale, twice.** `store.generated.ts` claimed
+`pipeline_pending` was absent while the store had it, which is what turned the
+0.32.0 publish red; 0.34.0 then went red on `pipeline_gate_preview` the same
+way, because the regenerated file was lost to a merge in the shared checkout
+before it was committed. Regenerated from the live store and committed with the
+change it describes: 538 doors, 25 rule node kinds — which picks up
+`sibling_count`, the node a second-quote demand is written with.
+
+That census is the guard working, and it has now been the thing that found a
+missing door or a missing refusal class six times. It is worth saying why it
+keeps firing: this package mirrors a store several lanes are landing on at once,
+so a mirror regenerated ten minutes before a commit is already a claim about the
+past.
+
+## 0.33.0
+
+**One closed door beside a record took the record away.**
+
+Cedar Ridge Dental's own owner opened a staff record in his own organization and
+read "You do not have access to this" — above a version history, a running
+onboarding checklist and a comment box that had all loaded perfectly. Reported
+twice: by lane SCREENS-2 on that practice, and by crew E2, who asked the doors
+from that very seat and found the record read answering correctly. It was never
+the store.
+
+`recordRead({ withComputed: true })` makes a second call, to
+`custom.computed_provenance` — which Rule produced which worked-out value (FLD-9),
+a footnote beside the record. Measured on the live catalogue, 2026-09-21:
+`read_record` t, `record_history` t, `field_history` t, `computed_provenance` **f**.
+That footnote's refusal was returned AS THE RECORD'S. `Peek` is the one caller
+that asks with provenance, which is exactly why the record page refused and every
+other panel on it did not.
+
+A decorative read may never fail the primary one — and may not fail silently
+either. The record comes back, `computed` is empty, and the new
+`RecordRead.computedUnavailable` carries what the footnote's door said, so a
+screen can say it could not look rather than draw nothing and mean two different
+things by it. `src/__tests__/a-footnote-never-takes-the-record.test.ts` — three
+clauses, two red on 0.32.0's bytes.
+
+**Consumer action:** none. `computedUnavailable` is optional, and `null` when the
+footnote read fine or was never asked for.
+
 ## 0.30.0
 
 **The chair's two rulings on the no-fake-data law, made structural.**

package/dist/core/index.cjs

@@ -61,6 +61,8 @@ __export(core_exports, {
   RETIRED_ACTOR_WORDS: () => RETIRED_ACTOR_WORDS,
   RULE_NODE_KINDS: () => RULE_NODE_KINDS,
   RULE_USES: () => RULE_USES,
+  STAGE_RULE_ENFORCEMENT: () => STAGE_RULE_ENFORCEMENT,
+  STAGE_RULE_ON_FAIL: () => STAGE_RULE_ON_FAIL,
   STORAGE_MODES: () => STORAGE_MODES,
   STORE_DOORS: () => STORE_DOORS,
   STORE_KNOBS: () => STORE_KNOBS,
@@ -247,6 +249,8 @@ function looksLikeAnId(value) {
 
 // src/pipeline.ts
 var PIPELINE_RULE_KINDS = ["moves", "requires", "who", "limit", "entry"];
+var STAGE_RULE_ON_FAIL = ["refuse", "require_approval"];
+var STAGE_RULE_ENFORCEMENT = ["refuse", "warn"];
 function mayDrag(level) {
   return level === "editor" || level === "admin" || level === "owner";
 }
@@ -603,6 +607,7 @@ var RULE_NODE_KINDS = [
   { node: "parent_field", evaluated_by: "W1-RULE-APPLY" },
   { node: "present", evaluated_by: "W1-RULE" },
   { node: "previous", evaluated_by: "PIPELINES" },
+  { node: "sibling_count", evaluated_by: "STAGE-RULES" },
   { node: "stage_count", evaluated_by: "PIPELINES" },
   { node: "sub", evaluated_by: "W1-RULE" }
 ];
@@ -930,7 +935,9 @@ var STORE_DOORS = [
   { name: "pin_agent_cells", args: "p_new jsonb, p_old jsonb, p_agent_keys text[]", returns: "jsonb", security: "invoker" },
   { name: "pipeline_board", args: "p_organization_id uuid, p_table_id uuid, p_measure text DEFAULT NULL::text", returns: "TABLE(stage_key text, stage_label text, stage_position integer, cards bigint, total numeric, wip_limit integer, over_limit boolean)", security: "definer" },
   { name: "pipeline_declare", args: "p_organization_id uuid, p_table_id uuid, p_spec jsonb", returns: "jsonb", security: "definer" },
+  { name: "pipeline_gate_preview", args: "p_organization_id uuid, p_table_id uuid, p_stage text, p_gate jsonb", returns: "jsonb", security: "definer" },
   { name: "pipeline_move", args: "p_organization_id uuid, p_record_id uuid, p_to text, p_also jsonb DEFAULT '{}'::jsonb, p_expected_version integer DEFAULT NULL::integer", returns: "jsonb", security: "definer" },
+  { name: "pipeline_pending", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "pipeline_read", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "pipeline_transition_refusal", args: "p_organization_id uuid, p_record_id uuid, p_to text", returns: "jsonb", security: "definer" },
   { name: "portal_admits", args: "p_organization_id uuid, p_user_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "definer" },
@@ -997,6 +1004,7 @@ var STORE_DOORS = [
   { name: "record_carrying_edges", args: "p_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(container_id uuid, item_id uuid, edge_role text)", security: "invoker" },
   { name: "record_delete", args: "p_organization_id uuid, p_record_id uuid", returns: "timestamp with time zone", security: "definer" },
   { name: "record_history", args: "p_organization_id uuid, p_record_id uuid, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0", returns: "TABLE(version integer, occurred_at timestamp with time zone, operation text, operation_label text, actor jsonb, changes jsonb, migration_id uuid, undoable boolean)", security: "definer" },
+  { name: "record_platform_keys", args: "", returns: "text[]", security: "invoker" },
   { name: "record_relation_edges", args: "p_organization_id uuid, p_id uuid, p_table_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(target_id uuid, edge_role text, field_id uuid, ord integer)", security: "invoker" },
   { name: "record_reparent", args: "p_organization_id uuid, p_record_id uuid, p_parent_id uuid", returns: "void", security: "definer" },
   { name: "record_resolve", args: "p_organization_id uuid, p_id uuid", returns: "jsonb", security: "definer" },
@@ -1005,6 +1013,7 @@ var STORE_DOORS = [
   { name: "record_restore_version", args: "p_organization_id uuid, p_record_id uuid, p_version integer", returns: "jsonb", security: "definer" },
   { name: "record_restore_version", args: "p_organization_id uuid, p_record_id uuid, p_version integer, p_author jsonb", returns: "jsonb", security: "definer" },
   { name: "record_scope_context", args: "p_organization_id uuid, p_record_id uuid, p_relations integer DEFAULT 12, p_history integer DEFAULT 15, p_siblings integer DEFAULT 8", returns: "jsonb", security: "definer" },
+  { name: "record_stage_pending", args: "p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "definer" },
   { name: "record_state_as_of", args: "p_record_id uuid, p_at timestamp with time zone", returns: "TABLE(state jsonb, replayed boolean)", security: "definer" },
   { name: "record_table", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "definer" },
   { name: "record_update", args: "p_organization_id uuid, p_record_id uuid, p_patch jsonb, p_expected_version integer DEFAULT NULL::integer", returns: "integer", security: "definer" },
@@ -1068,6 +1077,8 @@ var STORE_DOORS = [
   { name: "size_refusal", args: "p_organization_id uuid, p_data jsonb", returns: "text", security: "invoker" },
   { name: "source_next_pointer", args: "p_sources jsonb", returns: "text", security: "invoker" },
   { name: "source_pointer", args: "p_sources jsonb, p_source jsonb", returns: "text", security: "invoker" },
+  { name: "stage_rule_enforcement", args: "p_organization_id uuid", returns: "text", security: "invoker" },
+  { name: "stage_rule_on_fail_kinds", args: "", returns: "TABLE(behaviour text, note text)", security: "invoker" },
   { name: "stamp_value_envelopes", args: "p_data jsonb, p_actor text, p_on_behalf_of text, p_at timestamp with time zone", returns: "jsonb", security: "invoker" },
   { name: "storage_modes", args: "", returns: "text[]", security: "invoker" },
   { name: "store_is_open", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "invoker" },
@@ -1078,6 +1089,7 @@ var STORE_DOORS = [
   { name: "subscriptions", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(rule_id uuid, name text, table_id uuid, saved_view_id uuid, cadence text, schedule text, quiet_hours jsonb, channel text, recipient_user_id uuid, event_key text, muted boolean, mine boolean, i_may_mute boolean, last_sent_at timestamp with time zone, next_digest_at timestamp with time zone)", security: "definer" },
   { name: "table_capacity", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "table_carries_its_rows", args: "p_user_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
+  { name: "table_column_source", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
   { name: "table_contents", args: "p_organization_id uuid, p_table_id uuid", returns: "TABLE(record_id uuid, kind text, goes_at integer)", security: "invoker" },
   { name: "table_declare", args: "p_organization_id uuid, p_spec jsonb", returns: "uuid", security: "definer" },
   { name: "table_has_a_visible_record", args: "p_user uuid, p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "definer" },
@@ -1092,6 +1104,7 @@ var STORE_DOORS = [
   { name: "tables_at_home", args: "p_organization_id uuid, p_home_ids uuid[]", returns: "TABLE(table_id uuid, home_record_id uuid, kind text)", security: "definer" },
   { name: "tables_described_without_asking", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "trg_associations_bump_visibility", args: "", returns: "trigger", security: "definer" },
+  { name: "undeclared_keys", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "text[]", security: "invoker" },
   { name: "validate_custom_fields", args: "p_token text, p_organization_id uuid, p_values jsonb", returns: "void", security: "invoker" },
   { name: "validate_value_envelope", args: "p_organization_id uuid, p_fields custom.record[], p_data jsonb", returns: "void", security: "invoker" },
   { name: "validate_values", args: "p_organization_id uuid, p_fields custom.record[], p_values jsonb, p_record_type text DEFAULT NULL::text", returns: "void", security: "invoker" },
@@ -1192,6 +1205,7 @@ var STORE_KNOBS = [
   { key: "sandbox_message_bytes", value: "65536", type: "integer" },
   { key: "sandbox_org_components", value: "true", type: "boolean" },
   { key: "signup_provisioning_guard", value: "false", type: "boolean" },
+  { key: "stage_rule_enforcement", value: '"refuse"', type: "enum" },
   { key: "system_enabled", value: "false", type: "boolean" },
   { key: "table_record_ceiling", value: "150000", type: "integer" },
   { key: "value_max_bytes", value: "100000", type: "integer" },
@@ -1201,19 +1215,20 @@ var STORE_REFUSAL_CODES = [
   { code: "02000", raised_by: "_checklist_instantiate,checklist_declare,checklist_run,checklist_step_complete,checklist_step_refusal,checklist_template_shape,conversation_scope_bind,dashboard_delete,dashboard_run,doc_letterhead,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,enrich_pin,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_card,portal_declare,portal_invite,portal_preview,portal_principal_bind,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,sign_request_cancel,sign_request_create,sign_request_remind,sign_request_unchanged,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state" },
   { code: "0A000", raised_by: "checklist_step_complete,external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign" },
   { code: "22003", raised_by: "context_resolve" },
-  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,record_write_many,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,value_restore,view_declare,work_approval_decide,work_approval_request,work_template_declare" },
+  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,pipeline_gate_preview,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,record_write_many,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,value_restore,view_declare,work_approval_decide,work_approval_request,work_template_declare" },
   { code: "22007", raised_by: "dashboard_window_sql" },
   { code: "22012", raised_by: "rule_eval" },
   { code: "22023", raised_by: "_booking_availability,_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,io_export,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,record_update,record_write_many,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
   { code: "23503", raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_field_document_for,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,view_declare,work_set_state,work_take_assignment,work_template_instantiate" },
   { code: "23505", raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,share_grant,sign_request_cancel,sign_request_create,work_approval_decide,work_slot_hold" },
-  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
+  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_claimed_column_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
   { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,record_table,share_grant,subscription_mute,subscription_preview,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
   { code: "42703", raised_by: "entity_table,portal_declare" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,enrich_due,enrich_land,promote_field" },
   { code: "54001", raised_by: "record_delete" },
-  { code: "PT409", raised_by: "record_update" }
+  { code: "PT409", raised_by: "record_update" },
+  { code: "PT428", raised_by: "_record_rule_uses" }
 ];
 var ENTITY_TOKENS = [
   "access_delta_probe",
@@ -1877,6 +1892,7 @@ var ENTITY_TOKENS = [
   "plan_node_artifact",
   "plan_node_step",
   "plan_profile",
+  "platform_action_request",
   "platform_actor_session",
   "platform_actor_token",
   "platform_actor_token_event",
@@ -2383,6 +2399,14 @@ var DOORS = {
   pipelineTransitionRefusal: "pipeline_transition_refusal",
   pipelineMove: "pipeline_move",
   tableStageField: "table_stage_field",
+  // STAGE-RULES. A gate can refuse or it can hand the change to the approvals queue; the
+  // closed list is the store's, the knob is the organization's, and what is WAITING on a
+  // card has to be askable or a card that did not move looks like a card nobody dragged.
+  stageRuleOnFailKinds: "stage_rule_on_fail_kinds",
+  stageRuleEnforcement: "stage_rule_enforcement",
+  recordStagePending: "record_stage_pending",
+  pipelinePending: "pipeline_pending",
+  pipelineGatePreview: "pipeline_gate_preview",
   ruleMembers: "rule_members",
   ruleMembership: "rule_membership",
   ruleRun: "rule_run",
@@ -2404,6 +2428,10 @@ var DOORS = {
   // VISITOR's three (`booking_public`, `booking_hold`, `booking_confirm`) are
   // deliberately absent: they are server-lane and a browser never calls them.
   bookings: "bookings",
+  // The OWNER's side of a booking page, and the door that had no client method at
+  // all until 2026-09-21: without it the only way to get a booking page was to ask
+  // an agent, which made the agent the ONLY path rather than the faster one.
+  bookingDeclare: "booking_declare",
   // PRODUCTS row 9 — "pull my spreadsheet in". W4-IO built `io_import_open` and
   // `io_import_rows`; lane IMPORT gave a run an IDENTITY (the file's sha-256, so
   // a re-import doubles nothing), a duplicate key, a policy, per-row outcomes
@@ -2536,6 +2564,13 @@ var DOORS = {
   // the summary it would send right now without sending it.
   subscriptionDeclare: "subscription_declare",
   subscriptionPreview: "subscription_preview",
+  // A SUBSCRIPTION IS OVER A SAVED VIEW, so a person who has never saved one has
+  // nothing to subscribe to. These two are the saved-view pair (lane DIGESTS'
+  // `digests_a_saved_view_has_a_door.sql`), unreachable from this client until
+  // 2026-09-21: `views` lists this Table's, `viewDeclare` writes one. A LIST IS A
+  // DOOR, never a grant on `platform.saved_view` behind it.
+  views: "views",
+  viewDeclare: "view_declare",
   // The cadence CATALOGUE a person's screen may ask for. `agg_subscription_cadences`
   // above is the notifier's own and holds no client grant; this door delegates to
   // it, so a picker and the digest runner can never offer different words.
@@ -2709,7 +2744,17 @@ var BY_SQLSTATE = {
   // the grants not copied, land here.
   PGRST202: "store_not_served",
   PGRST205: "store_not_served",
-  PGRST301: "door"
+  PGRST301: "door",
+  // PT428 — NOT A FAILURE, and the release gate's live census is what found it
+  // missing: the store raises it and this package answered `internal`, which is
+  // the one classification that tells a screen nothing. A stage gate whose
+  // `on_fail` is `require_approval` files the request and leaves the record
+  // where it was; the transaction is rolled back to the pipeline's own block, so
+  // "nothing was written" is a fact rather than a promise. Landed by lane
+  // STAGE-RULES; mapped here by STAGE-RULES-2 the day after, when the census
+  // caught it — the sixth time that census has been the thing that found a
+  // refusal class rather than a person guessing one.
+  PT428: "needs_approval"
 };
 var MAPPED_SQLSTATES = Object.keys(BY_SQLSTATE);
 function parseDetail(details) {
@@ -2888,16 +2933,17 @@ function createRecordsClient(config) {
       if (!door.ok) return err(door.error);
       const { document, hidden } = unfold(door.data);
       let computed = [];
+      let computedUnavailable = null;
       if (withComputed) {
         const provenance = await callDoor(
           DOORS.computedProvenance,
           { p_organization_id: org, p_record_id: record_id },
           "recordRead.computed"
         );
-        if (!provenance.ok) return err(provenance.error);
-        computed = provenance.data ?? [];
+        if (provenance.ok) computed = provenance.data ?? [];
+        else computedUnavailable = provenance.error;
       }
-      return ok({ record_id, document, hidden, computed });
+      return ok({ record_id, document, hidden, computed, computedUnavailable });
     },
     async list({ table_id, limit = 50, offset = 0 }) {
       const door = await callDoor(
@@ -3236,6 +3282,41 @@ function createRecordsClient(config) {
         "tableStageField"
       );
     },
+    async stageRuleOnFailKinds() {
+      return callDoor(
+        DOORS.stageRuleOnFailKinds,
+        {},
+        "stageRuleOnFailKinds"
+      );
+    },
+    async stageRuleEnforcement() {
+      return callDoor(
+        DOORS.stageRuleEnforcement,
+        { p_organization_id: org },
+        "stageRuleEnforcement"
+      );
+    },
+    async recordStagePending({ record_id }) {
+      return callDoor(
+        DOORS.recordStagePending,
+        { p_organization_id: org, p_record_id: record_id },
+        "recordStagePending"
+      );
+    },
+    async pipelinePending({ table_id }) {
+      return callDoor(
+        DOORS.pipelinePending,
+        { p_organization_id: org, p_table_id: table_id },
+        "pipelinePending"
+      );
+    },
+    async pipelineGatePreview({ table_id, stage, gate }) {
+      return callDoor(
+        DOORS.pipelineGatePreview,
+        { p_organization_id: org, p_table_id: table_id, p_stage: stage, p_gate: gate },
+        "pipelineGatePreview"
+      );
+    },
     async ruleMembers({ rule_id }) {
       return callDoor(
         DOORS.ruleMembers,
@@ -3264,6 +3345,30 @@ function createRecordsClient(config) {
         "bookings"
       );
     },
+    async bookingDeclare(args) {
+      return callDoor(
+        DOORS.bookingDeclare,
+        {
+          p_organization_id: org,
+          p_table_id: args.table_id,
+          p_title: args.title,
+          p_questions: args.questions,
+          // AN EMPTY OBJECT IS NOT A MISTAKE. The store owns every default, so a
+          // page declared with no availability comes back Monday-to-Friday,
+          // nine-to-five, in the organization's own zone — and the screen draws
+          // what came BACK rather than what it sent.
+          p_availability: args.availability ?? {},
+          p_presentation: args.presentation ?? {},
+          p_submission_cap: args.submission_cap ?? null,
+          p_quarantine_rule_id: args.quarantine_rule_id ?? null,
+          p_notify_rule_id: args.notify_rule_id ?? null,
+          p_form_id: args.form_id ?? null,
+          p_slug: args.slug ?? null,
+          p_home_id: args.home_id ?? null
+        },
+        "bookingDeclare"
+      );
+    },
     async formDeclare(args) {
       return callDoor(
         DOORS.formDeclare,
@@ -3688,6 +3793,20 @@ function createRecordsClient(config) {
         "subscriptionPreview"
       );
     },
+    async views(args) {
+      return callDoor(
+        DOORS.views,
+        { p_organization_id: org, p_table_id: args?.table_id ?? null },
+        "views"
+      );
+    },
+    async viewDeclare({ table_id, spec }) {
+      return callDoor(
+        DOORS.viewDeclare,
+        { p_organization_id: org, p_table_id: table_id, p_spec: spec },
+        "viewDeclare"
+      );
+    },
     async subscriptionMute({ rule_id, muted }) {
       return callDoor(
         DOORS.subscriptionMute,