@ai-matrx/records 0.30.0 → 0.37.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { U as Uuid, T as TableType, a as TableDisplay, S as StorageMode, g as Timestamp, an as TableOrigin, h as RecordDocument, l as StoredRecord, k as Field, a0 as ParityFieldType, ad as RuleUse, ac as RuleNodeKind, R as RelationFlavor, O as OnDelete, aa as RelationBinding, f as RelationCardinality, W as MergeFieldSource, V as MergeFieldSemanticType, Q as MergeFieldModifier, Z as OverridePolicy, w as Delivery, H as Freshness, a2 as PerValueAccessWord, t as Actor } from './field-D08d_e7R.js';
-export { A as ABSENCE_REASONS, r as ACTOR_VOCABULARY, s as AbsenceReason, u as COMPUTE_ON, v as CONTEXT_POLICIES, C as ComputeOn, e as ContextPolicy, D as DELIVERIES, E as ENTITY_TOKENS, x as EntityToken, y as FIELD_SENSITIVITIES, z as FIELD_SOURCES, B as FRESHNESS, G as FieldBehavior, m as FieldPatch, p as FieldProposal, c as FieldRule, d as FieldSensitivity, b as FieldSource, F as FieldTypeWord, I as HiddenFieldNotice, K as KERNEL_TABLES, J as KernelTableName, M as MERGE_FIELD_MODIFIERS, L as MERGE_FIELD_SEMANTIC_TYPES, P as MERGE_FIELD_SOURCES, N as NewFieldDeclaration, X as ON_DELETE, Y as OVERRIDE_POLICIES, _ as PARITY_FIELD_TYPES, $ as PER_VALUE_ACCESS_WORDS, a1 as ParityFieldTypeDescriptor, a3 as ProvenancePointer, a4 as RELATION_BINDINGS, a5 as RELATION_CARDINALITIES, a6 as RELATION_FLAVORS, a7 as RETIRED_ACTOR_WORDS, a8 as RULE_NODE_KINDS, a9 as RULE_USES, j as ReadRow, o as ReadValue, i as RecordRead, n as RecordRevision, ab as RetiredActorWord, ae as STORAGE_MODES, af as STORE_DOORS, ag as STORE_KNOBS, ah as STORE_REFUSAL_CODES, ai as StoreDoorName, aj as StoreRefusalCode, ak as TABLE_DISPLAYS, al as TABLE_ORIGINS, am as TABLE_TYPES, q as TableProposal, ao as VALUE_ALTERNATE_KEYS, ap as VALUE_ENVELOPE_KEYS, aq as ValueAlternate, ar as ValueAlternateKey, as as ValueEnvelope, at as ValueEnvelopeKey, au as ValueSource } from './field-D08d_e7R.js';
+import { U as Uuid, T as TableType, a as TableDisplay, S as StorageMode, g as Timestamp, av as TableOrigin, h as RecordDocument, m as StoredRecord, l as Field, a7 as ParityFieldType, al as RuleUse, ak as RuleNodeKind, R as RelationFlavor, O as OnDelete, ai as RelationBinding, f as RelationCardinality, a1 as MergeFieldSource, a0 as MergeFieldSemanticType, $ as MergeFieldModifier, a4 as OverridePolicy, B as Delivery, M as Freshness, x as Actor, P as PgError } from './field-CWBdZfFv.js';
+export { A as ABSENCE_REASONS, v as ACTOR_VOCABULARY, w as AbsenceReason, y as COMPUTE_ON, z as CONTEXT_POLICIES, C as ComputeOn, e as ContextPolicy, D as DELIVERIES, E as ENTITY_TOKENS, G as EntityToken, H as FIELD_SENSITIVITIES, I as FIELD_SOURCES, J as FRESHNESS, K as FieldBehavior, n as FieldPatch, q as FieldProposal, c as FieldRule, d as FieldSensitivity, b as FieldSource, F as FieldTypeWord, L as ForbiddenEnvelopeWord, Q as HiddenFieldNotice, V as KERNEL_TABLES, X as KernelTableName, Y as MERGE_FIELD_MODIFIERS, Z as MERGE_FIELD_SEMANTIC_TYPES, _ as MERGE_FIELD_SOURCES, N as NewFieldDeclaration, a2 as ON_DELETE, a3 as OVERRIDE_POLICIES, a5 as PARITY_FIELD_TYPES, a6 as PER_VALUE_ACCESS_WORDS, a8 as ParityFieldTypeDescriptor, a9 as PerValueAccessWord, u as PredictedRefusal, aa as ProvenancePointer, ab as RELATION_BINDINGS, ac as RELATION_CARDINALITIES, ad as RELATION_FLAVORS, ae as RETIRED_ACTOR_WORDS, af as RULE_NODE_KINDS, ag as RULE_USES, k as ReadRow, p as ReadValue, j as RecordRead, o as RecordRevision, s as RecordsError, ah as RecordsErrorCode, i as RecordsResult, aj as RetiredActorWord, am as STORAGE_MODES, an as STORE_DOORS, ao as STORE_KNOBS, ap as STORE_REFUSAL_CODES, t as StaleWriteDetail, aq as StoreDoorName, ar as StoreRefusalCode, as as TABLE_DISPLAYS, at as TABLE_ORIGINS, au as TABLE_TYPES, r as TableProposal, aw as VALUE_ALTERNATE_KEYS, ax as VALUE_ENVELOPE_KEYS, ay as ValueAlternate, az as ValueAlternateKey, aA as ValueEnvelope, aB as ValueEnvelopeKey, aC as ValueSource, W as WriteConflict, aD as err, aE as isRecordsErr, aF as ok } from './field-CWBdZfFv.js';
 
 /** `public.permission_level`, in the store's own order. */
 type PermissionLevel = "viewer" | "commenter" | "editor" | "admin";
@@ -274,7 +274,25 @@ interface PipelineStage {
 }
 /** What each Rule of a pipeline is about. Closed, and the store is the authority. */
 declare const PIPELINE_RULE_KINDS: readonly ["moves", "requires", "who", "limit", "entry"];
-type PipelineRuleKind = (typeof PIPELINE_RULE_KINDS)[number];
+/**
+ * A GATE is the general form under `requires`, `who` and `limit`, and the store spells it
+ * `gate:1`, `gate:2` … so several gates can sit on one stage without one overwriting the
+ * next. It is matched as a prefix rather than listed, because the number is open.
+ */
+type PipelineRuleKind = (typeof PIPELINE_RULE_KINDS)[number] | `gate:${number}`;
+/**
+ * WHAT A GATE DOES WHEN IT SAYS NO. The closed list `custom.stage_rule_on_fail_kinds()`
+ * answers — a screen offering a third answer would be offering something no Rule can carry.
+ */
+declare const STAGE_RULE_ON_FAIL: readonly ["refuse", "require_approval"];
+type StageRuleOnFail = (typeof STAGE_RULE_ON_FAIL)[number];
+/**
+ * THE ORGANIZATION'S ONE KNOB (`custom/stage_rule_enforcement`). `refuse` is the default and
+ * what a gate is for; `warn` lets the move through and hands the same sentence back. It never
+ * softens `require_approval` — "ask somebody" and "carry on with a note" are different answers.
+ */
+declare const STAGE_RULE_ENFORCEMENT: readonly ["refuse", "warn"];
+type StageRuleEnforcement = (typeof STAGE_RULE_ENFORCEMENT)[number];
 /**
  * One transition Rule, as `custom.pipeline_read` hands it back — WITH the sentence it says
  * when it refuses, because a screen that knows a rule exists but not what it refuses in
@@ -291,8 +309,64 @@ interface PipelineRule {
     uses: string[];
     /** What happens when a card ARRIVES in this stage — assign, notify, start a checklist. */
     on_entry: Record<string, unknown> | null;
+    /**
+     * What this Rule does when it STOPS a move. `refuse` is the default and what every
+     * pipeline Rule did before gates existed; `require_approval` files the change in the
+     * approvals queue with this Rule's sentence as the reason and leaves the record alone.
+     */
+    on_fail?: StageRuleOnFail;
+    /**
+     * THE GATE AS IT WAS WRITTEN, which is the only thing that makes it EDITABLE.
+     *
+     * A gate is saved as one Rule whose expression is an `or` of four arms — not this
+     * stage, OR not a move, OR the gate is not about this card, OR the demand holds. That
+     * compiled form used to be the only copy, so a settings screen could read a gate's name
+     * and its sentence and nothing else: it would open every existing rule with a blank
+     * condition and overwrite it the first time somebody pressed Save.
+     *
+     * Absent on the four sugar rules (`moves`, `requires`, `who`, `limit`), which nobody
+     * writes in a condition builder, and on any gate declared before the store started
+     * keeping them. Absent means "this one was not written here" — never "it has no
+     * condition", which is a different and dangerous thing to draw.
+     */
+    when?: Record<string, unknown> | null;
+    /** @see {@link PipelineRule.when} — the condition that has to hold, as it was written. */
+    demands?: Record<string, unknown> | null;
     version: number;
 }
+/**
+ * WHAT A GATE WOULD DO TO THIS BOARD TODAY, from `custom.pipeline_gate_preview`.
+ *
+ * The one question somebody writing a rule that will refuse their colleagues' work
+ * actually has, answered while they are still typing it — the gate is judged as an
+ * argument, nothing is saved, and nothing is written. The store compiles it with the
+ * SAME compiler `pipeline_declare` uses, so this count and the refusal at the door are
+ * the same rule.
+ */
+interface PipelineGatePreview {
+    is_pipeline: boolean;
+    /** Present, and it says what would make a board exist, when `is_pipeline` is false. */
+    why?: string;
+    /** The stage key the gate was tried against. */
+    stage?: string;
+    /** Live cards of this board this person may see that are not already in that stage. */
+    considered: number;
+    /** How many of them this gate would turn away. */
+    refused: number;
+    /**
+     * Up to three of them, BY NAME. A count with no names is a number nobody can check, and
+     * checking it is the whole reason to show it before saving.
+     */
+    examples: {
+        record_id: Uuid;
+        title: string;
+    }[];
+    /** True when the board is larger than the preview will walk, so the count is a floor. */
+    truncated?: boolean;
+    on_fail?: StageRuleOnFail;
+    /** The word this board uses for one of its cards — "quote", "deal" — for the sentence. */
+    noun?: string;
+}
 /** The whole board's definition, from `custom.pipeline_read`. */
 interface Pipeline {
     is_pipeline: boolean;
@@ -338,6 +412,20 @@ interface PipelineMissingField {
 interface PipelineVerdict {
     allowed: boolean;
     is_pipeline: boolean;
+    /**
+     * The THREE answers a board has to draw differently, and the reason `allowed` alone is
+     * not enough: a card that is going for approval has not been refused, and a card that
+     * moved under `warn` has not been waved through silently.
+     */
+    outcome?: "allowed" | "refused" | "needs_approval" | "warned";
+    /** What this organization's one knob says right now. */
+    enforcement?: StageRuleEnforcement;
+    /** Set on `needs_approval`: what pressing on will actually do, in plain words. */
+    what_happens?: string;
+    /** Set on `warned`: the gates this organization asked to be told about, not stopped by. */
+    warnings?: StageRuleWarning[];
+    /** Approvals already filed against this card's own stage column that nobody has decided. */
+    pending?: StagePending[];
     /** The stage key the move was asked about. */
     to?: string;
     /** The store's own sentence — shown verbatim, never paraphrased by a screen. */
@@ -346,6 +434,8 @@ interface PipelineVerdict {
     rule_id?: Uuid;
     rule_version?: number;
     kind?: PipelineRuleKind;
+    /** What this Rule does when it stops a move. */
+    on_fail?: StageRuleOnFail;
     /**
      * When a stage demands columns that are empty, exactly which ones — so the screen can
      * prompt for them on entry instead of sending the person away to find them.
@@ -382,9 +472,80 @@ interface PipelineSpec {
     limits?: Record<string, number>;
     /** Stage name → what happens when a card arrives: assign, notify, start a checklist. */
     on_entry?: Record<string, Record<string, unknown>>;
+    /**
+     * Stage name → the gates a card has to get past to land there. The general form under
+     * `requires`, `who` and `limits`, and the only one that can say `require_approval`.
+     */
+    gates?: Record<string, PipelineGate[]>;
     moves_message?: string;
     requires_messages?: Record<string, string>;
 }
+/**
+ * A gate the organization's own knob overruled. NOTHING FAILS SILENTLY: the move happened
+ * and the sentence comes back WITH it, together with what to do about it.
+ */
+interface StageRuleWarning {
+    rule_id: Uuid;
+    rule: string;
+    /** The gate's own sentence, shown verbatim. */
+    why: string;
+    what_to_do: string;
+}
+/** An approval filed against this card's stage column that nobody has decided yet. */
+interface StagePending {
+    approval_id: Uuid;
+    /** The stage key the card is waiting to go to. */
+    to: string;
+    why: string | null;
+    requested_at: string;
+    state: string;
+}
+/**
+ * The same wait, asked for a WHOLE BOARD in one question (`custom.pipeline_pending`), so a
+ * board can badge every card that is waiting without a round trip per card — and therefore
+ * actually does it, instead of drawing a filed card as if nobody had ever dragged it.
+ */
+interface StagePendingOnBoard extends StagePending {
+    record_id: Uuid;
+}
+/** What `custom.pipeline_move` answers — an OBJECT on every path, never a bare number. */
+interface PipelineMoveResult {
+    applied: boolean;
+    moved: boolean;
+    outcome: "moved" | "moved_with_warnings" | "needs_approval";
+    to: string;
+    version: number;
+    /** Set on `moved_with_warnings`. */
+    warnings?: StageRuleWarning[];
+    /** Set on `needs_approval`: the gate's sentence, the wait that was filed, and who has it. */
+    why?: string;
+    rule?: string;
+    rule_id?: Uuid;
+    approval_id?: Uuid;
+    approvers?: {
+        user_id: Uuid;
+        name: string | null;
+        why: string;
+    }[];
+    what_happens?: string;
+}
+/**
+ * ONE GATE ON A STAGE, as the condition builder on the stage settings screen writes it.
+ * `requires`, `who` and `limits` are sugar over this shape; this is the general form, and
+ * it speaks the SAME condition language as filters and formulas — never a second one.
+ */
+interface PipelineGate {
+    /** What the gate is called in the settings list. */
+    name?: string;
+    /** The sentence a person reads when it stops them. Required: a refusal with no words is a dead end. */
+    message: string;
+    /** WHEN this gate is about this record at all. Absent means always. */
+    when?: Record<string, unknown>;
+    /** What has to hold. One condition node of the one Rule language. */
+    demands: Record<string, unknown>;
+    /** Default `refuse`. */
+    on_fail?: StageRuleOnFail;
+}
 /**
  * THE ONE PLACE A SCREEN DECIDES WHETHER A CARD LOOKS DRAGGABLE — and it decides on the
  * PERSON, not on the rules. Whether a particular move is allowed is
@@ -520,6 +681,56 @@ interface BookingSummary {
     /** draft · open · closed — the store's own word, never derived on a screen. */
     state: string;
 }
+/**
+ * ONE WINDOW OF AN ORGANIZATION'S WEEK, in the shape `custom._booking_availability`
+ * normalises to and `custom._booking_slots` generates from. `weekday` is 0 for Sunday
+ * and 6 for Saturday — the database's own numbering, so a picker and the store cannot
+ * disagree about which day Monday is. A window may name ONE member, which is the "with
+ * whom" of an appointment; naming somebody who is not a member is refused BY NAME.
+ */
+interface BookingWindow {
+    weekday: number;
+    /** "09:00" */
+    from: string;
+    /** "17:00" — later in the day than `from`, or the store refuses it by name. */
+    to: string;
+    member_user_id?: string | null;
+}
+/**
+ * WHAT IS ON OFFER. Every field is the store's to default: a page declared with an
+ * empty availability comes back with the organization's timezone, a 30-minute slot and
+ * Monday-to-Friday nine-to-five, because a booking page that offered nothing would look
+ * broken rather than unconfigured. A screen shows what came BACK, never what it sent.
+ */
+interface BookingAvailability {
+    timezone: string;
+    slot_minutes: number;
+    /** Dead time kept after each appointment, so two never touch. */
+    buffer_minutes: number;
+    /** How far ahead of now the earliest bookable slot is. */
+    lead_minutes: number;
+    /** Most appointments in one day, across every window. */
+    max_per_day: number;
+    /** How many days ahead the page offers. */
+    days: number;
+    windows: BookingWindow[];
+}
+/**
+ * WHAT `custom.booking_declare` ANSWERS. `availability` is the NORMALISED offer —
+ * show that, not the draft — and `questions_filled_in` is how many questions the store
+ * took over (`slot`, `status`, `booked_with`), which a visitor is never asked.
+ *
+ * It does NOT publish. `anonPublish` is still the one act that opens the link, exactly
+ * as it is for a form, so there is one act and one word for opening a public surface.
+ */
+interface BookingDeclared {
+    form_id: string;
+    slot_table_id: string;
+    availability: BookingAvailability;
+    questions_asked: number;
+    questions_filled_in: number;
+    ms: number;
+}
 /**
  * THE VISITOR'S OWN LINK to a booking page. The page id IS the capability, exactly
  * as it is for a form; `custom.anon_submission.booking_ref` is the separate secret
@@ -1691,6 +1902,28 @@ interface DigestPreview {
      */
     incomplete: string | null;
 }
+/**
+ * ONE SAVED VIEW — `custom.views`. A subscription is written OVER one of these, so
+ * a person with no saved view has nothing to be told about; `viewDeclare` is how a
+ * screen gives them one without leaving the screen they are on.
+ *
+ * `filters` is written in the ONE shape `custom.agg_view_admits` reads, so a view
+ * saved here needs no translation before the notifier can admit records to it.
+ */
+interface SavedViewRow {
+    view_id: Uuid;
+    name: string;
+    table_id: Uuid | null;
+    filters: Record<string, unknown>;
+    created_at: string;
+}
+/** What `custom.view_declare` is asked for. `view_id` re-states rather than doubling. */
+interface SavedViewSpecIn {
+    name: string;
+    filters?: Record<string, unknown> | null;
+    definition?: Record<string, unknown> | null;
+    view_id?: Uuid | null;
+}
 /** What `custom.subscription_declare` is asked for. The store refuses the rest BY NAME. */
 interface SubscriptionSpec {
     name: string;
@@ -2347,143 +2580,6 @@ interface ResolvedPublishBinding {
     notice: string;
 }
 
-/**
- * What KIND of refusal it was. The mapping from SQLSTATE to code lives in
- * `/core`, and it is checked against `STORE_REFUSAL_CODES` — the list of every
- * SQLSTATE the store's own bodies raise, generated from the live catalogue. A
- * code the store can raise and this union cannot name is a hole, and the
- * real-door suite fails on it.
- */
-type RecordsErrorCode = 
-/** `PT409` — somebody else's write won. The record clock moved under you. */
-"stale_write"
-/** `42501` — a door. Either the schema is revoked, or the store is switched off, or this principal may not pass. */
- | "door"
-/** `23514` — a Rule, a shape guard, or a validation the store enforces refused it. */
- | "refused_by_rule"
-/**
- * `22004` / `22023` / `22P02` — the call itself was malformed: a missing id, a
- * patch that is not an object, or a value that does not fit the type the
- * store holds for that Field. The store's own message names the value and the
- * type it could not be read as.
- */
- | "invalid_argument"
-/** `02000` — the record is not here (deleted, never existed, or another organization's). */
- | "not_found"
-/** `23503` — something it points at is not there. */
- | "missing_reference"
-/** `23505` — that thing is already here. */
- | "already_exists"
-/** `0A000` — the store does not do this yet, and says which part. */
- | "not_supported"
-/** `53400` / `22012` — the store ran out of something, or the arithmetic could not be done. */
- | "store_limit"
-/**
- * `40001` — the visibility snapshot this connection carries is older than a
- * write the reader has already observed, so the store refused to answer at
- * all rather than hand back something they just lost. Retry on a fresh
- * connection; it is the one refusal in this list that is worth repeating.
- */
- | "stale_read"
-/**
- * `57014` — the store cancelled the statement at its own timeout. Nothing was
- * refused on its merits and nothing was written; the same call can succeed on
- * a smaller page or a quieter moment. With `stale_read`, one of the only two
- * refusals in this list worth repeating.
- */
- | "timed_out"
-/**
- * THE DOOR THAT DOES NOT EXIST YET. Not an error condition in the database —
- * this package asked for a door that is not in the live catalogue, so it
- * refused to guess. `door_absent` always names the door and the lane that
- * owns it; it is never a silent no-op and never an empty list.
- */
- | "door_absent"
-/**
- * `PGRST202` / `PGRST205` — PostgREST could not find the function or the
- * schema. The database this client is pointed at is not serving the record
- * store: the schema is not exposed, or the grants are not there.
- */
- | "store_not_served"
-/** Anything the mapper could not place. It still carries the store's own words. */
- | "internal";
-/** A refusal, in the store's own words. */
-interface RecordsError {
-    code: RecordsErrorCode;
-    /** THE STORE'S message, verbatim. Never paraphrased. */
-    message: string;
-    /** THE STORE'S hint, verbatim — this is where the remedy is written. */
-    hint?: string;
-    /** The SQLSTATE, so a caller can be exact when a code is not exact enough. */
-    sqlstate?: string;
-    /** Whatever the store put in DETAIL, parsed when it was json. */
-    detail?: unknown;
-}
-type RecordsResult<T> = {
-    ok: true;
-    data: T;
-} | {
-    ok: false;
-    error: RecordsError;
-};
-/** Narrowing helper for hosts compiled without `strictNullChecks`. */
-declare function isRecordsErr<T>(result: RecordsResult<T>): result is {
-    ok: false;
-    error: RecordsError;
-};
-declare const ok: <T>(data: T) => RecordsResult<T>;
-declare const err: <T>(error: RecordsError) => RecordsResult<T>;
-/**
- * A `stale_write` carries everything the screen needs to show the conflict
- * rather than a toast: which version you wrote against, which one won, and the
- * value of every field you touched as it stands now. The store builds this and
- * this type is its shape — nothing is reconstructed on the client.
- */
-interface StaleWriteDetail {
-    expected_version: number;
-    current_version: number;
-    contested_fields: Record<string, unknown>;
-}
-/** The parsed form of a `stale_write`, for `useRecordMutation`'s conflict state. */
-interface WriteConflict extends StaleWriteDetail {
-    record_id: Uuid;
-    /** The store's own sentence — what the screen shows. */
-    message: string;
-    /** The store's own remedy. */
-    hint: string;
-}
-/**
- * The structural shape of a PostgREST failure as supabase-js resolves it: a
- * PLAIN OBJECT parsed from the response body, NOT an `Error`. Reading
- * `.message` off `instanceof Error` discards the real database message on every
- * genuine failure.
- */
-interface PgError {
-    code?: string | null;
-    message: string;
-    details?: string | null;
-    hint?: string | null;
-}
-/** What the validation mirror answers: the same sentence the trigger would raise. */
-interface PredictedRefusal {
-    /** The field key the store would name, when it names one. */
-    field_key?: string;
-    /** The message the store's own body would raise, word for word. */
-    message: string;
-    hint?: string;
-    sqlstate: string;
-    /**
-     * Which of the store's bodies would raise it, so a reader can go and check
-     * that this mirror still tells the truth.
-     */
-    predicted_by: string;
-}
-/** VAL-5 / VAL-6, named so a caller can say which word was the problem. */
-interface ForbiddenEnvelopeWord {
-    field_key: string;
-    word: PerValueAccessWord;
-}
-
 /**
  * The data seam: a structural subset of `SupabaseClient`. The package never
  * opens a database connection of its own and never holds a key — the HOST
@@ -2720,4 +2816,4 @@ interface ConversationScopeContext {
 /** `About: Acme Industrial` — the chip a bound chat wears. */
 declare function scopeChip(scope: ConversationScope): string;
 
-export { Actor, type AggregateBucket, type AggregateFilter, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AggregateWindow, type AnonTokenBinding, type BookingSummary, type CaptureField, type CaptureFileRef, type CaptureOutcome, type CaptureQuestion, type CaptureQueue, type CaptureQueueCounts, type CaptureQueueOptions, type CaptureQueuePorts, type CaptureQueueStore, type CaptureSheetFace, type CaptureSheetSummary, type CaptureSyncReport, type ChecklistDeclared, type ChecklistRequirement, type ChecklistRequirementKind, type ChecklistRoleSpec, type ChecklistRunStarted, type ChecklistRunStep, type ChecklistRunSummary, type ChecklistSpec, type ChecklistStepCompleted, type ChecklistStepSpec, type ChecklistTemplateShape, type ChecklistTemplateSummary, type ChecklistTrigger, type ChecklistTriggerKind, type ChoiceOption, type CommentThreadRead, type CommentWritten, type ConversationScope, type ConversationScopeContext, type CustomFieldTableType, type DashboardBlock, type DashboardBlockKind, type DashboardBlockResult, type DashboardRunResult, type DashboardSummary, Delivery, type DigestPreview, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, type EnrichAlternate, type EnrichCell, type EnrichDeclared, type EnrichDueRow, type EnrichRun, type EnrichSource, type Enrichment, type EnrichmentSummary, type EntityFieldRights, type EntityFieldValue, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityTableFacts, type ExternalPrincipalCard, Field, type FieldHistoryEntry, type ForbiddenEnvelopeWord, type FormSummary, Freshness, type HistoryActor, type HistoryActorKind, type HistoryChange, type Home, type ImportBatchResult, type ImportColumnPlan, type ImportFinished, type ImportOpened, type ImportOutcome, type ImportPlan, type ImportPolicy, type ImportProposal, type ImportReport, type ImportRun, type InboundAddress, type InboundDeclared, type MergeField, MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type MyLevel, type MySubscription, type NewEntityFieldDeclaration, OnDelete, OverridePolicy, PERMISSION_LEVELS, PIPELINE_RULE_KINDS, ParityFieldType, PerValueAccessWord, type PermissionLevel, type PgError, type Pipeline, type PipelineColumn, type PipelineDeclared, type PipelineMissingField, type PipelineRule, type PipelineRuleKind, type PipelineSpec, type PipelineStage, type PipelineVerdict, type PortalCard, type PortalInvitation, type PortalPreviewRow, type PortalPrincipal, type PortalRevocation, type PortalSummary, type PortalTableExposure, type PredictedRefusal, type PublishBinding, type QueuedCapture, type QueuedCaptureFile, type QueuedCaptureState, type QuietHours, REFUSALS_WORTH_REPEATING, type RecordComment, RecordDocument, type RecordHistoryEntry, type RecordScopeComment, type RecordScopeContext, type RecordScopeField, type RecordScopeHistoryEntry, type RecordScopeRelation, type RecordScopeWithheld, type RecordsActor, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, type RecordsTableQuery, type RegisteredTable, type Relation, RelationBinding, RelationCardinality, type RelationCarries, type RelationCoordinate, RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RestorePreview, type RestoreResult, type Rule, type RuleAnswer, type RuleExpression, RuleNodeKind, RuleUse, type StaleWriteDetail, StorageMode, StoredRecord, type StuckRow, type Subscription, type SubscriptionBlock, type SubscriptionCadence, type SubscriptionSpec, type Table, type TableCapacity, TableDisplay, TableOrigin, TableType, Timestamp, Uuid, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, asPermissionLevel, atLeast, bookingPath, choiceSlug, choiceValuesOf, choicesOf, err, highestLevel, holdsARetiredChoice, indexedDbStore, isDecided, isRecordsErr, isTheChosen, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, ok, openCaptureQueue, optionKey, optionLabel, portalPath, publicFormPath, scopeChip };
+export { Actor, type AggregateBucket, type AggregateFilter, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AggregateWindow, type AnonTokenBinding, type BookingAvailability, type BookingDeclared, type BookingSummary, type BookingWindow, type CaptureField, type CaptureFileRef, type CaptureOutcome, type CaptureQuestion, type CaptureQueue, type CaptureQueueCounts, type CaptureQueueOptions, type CaptureQueuePorts, type CaptureQueueStore, type CaptureSheetFace, type CaptureSheetSummary, type CaptureSyncReport, type ChecklistDeclared, type ChecklistRequirement, type ChecklistRequirementKind, type ChecklistRoleSpec, type ChecklistRunStarted, type ChecklistRunStep, type ChecklistRunSummary, type ChecklistSpec, type ChecklistStepCompleted, type ChecklistStepSpec, type ChecklistTemplateShape, type ChecklistTemplateSummary, type ChecklistTrigger, type ChecklistTriggerKind, type ChoiceOption, type CommentThreadRead, type CommentWritten, type ConversationScope, type ConversationScopeContext, type CustomFieldTableType, type DashboardBlock, type DashboardBlockKind, type DashboardBlockResult, type DashboardRunResult, type DashboardSummary, Delivery, type DigestPreview, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, type EnrichAlternate, type EnrichCell, type EnrichDeclared, type EnrichDueRow, type EnrichRun, type EnrichSource, type Enrichment, type EnrichmentSummary, type EntityFieldRights, type EntityFieldValue, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityTableFacts, type ExternalPrincipalCard, Field, type FieldHistoryEntry, type FormSummary, Freshness, type HistoryActor, type HistoryActorKind, type HistoryChange, type Home, type ImportBatchResult, type ImportColumnPlan, type ImportFinished, type ImportOpened, type ImportOutcome, type ImportPlan, type ImportPolicy, type ImportProposal, type ImportReport, type ImportRun, type InboundAddress, type InboundDeclared, type MergeField, MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type MyLevel, type MySubscription, type NewEntityFieldDeclaration, OnDelete, OverridePolicy, PERMISSION_LEVELS, PIPELINE_RULE_KINDS, ParityFieldType, type PermissionLevel, PgError, type Pipeline, type PipelineColumn, type PipelineDeclared, type PipelineGate, type PipelineGatePreview, type PipelineMissingField, type PipelineMoveResult, type PipelineRule, type PipelineRuleKind, type PipelineSpec, type PipelineStage, type PipelineVerdict, type PortalCard, type PortalInvitation, type PortalPreviewRow, type PortalPrincipal, type PortalRevocation, type PortalSummary, type PortalTableExposure, type PublishBinding, type QueuedCapture, type QueuedCaptureFile, type QueuedCaptureState, type QuietHours, REFUSALS_WORTH_REPEATING, type RecordComment, RecordDocument, type RecordHistoryEntry, type RecordScopeComment, type RecordScopeContext, type RecordScopeField, type RecordScopeHistoryEntry, type RecordScopeRelation, type RecordScopeWithheld, type RecordsActor, type RecordsConfig, type RecordsDataSource, type RecordsErrorSink, type RecordsFilter, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsTableQuery, type RegisteredTable, type Relation, RelationBinding, RelationCardinality, type RelationCarries, type RelationCoordinate, RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RestorePreview, type RestoreResult, type Rule, type RuleAnswer, type RuleExpression, RuleNodeKind, RuleUse, STAGE_RULE_ENFORCEMENT, STAGE_RULE_ON_FAIL, type SavedViewRow, type SavedViewSpecIn, type StagePending, type StagePendingOnBoard, type StageRuleEnforcement, type StageRuleOnFail, type StageRuleWarning, StorageMode, StoredRecord, type StuckRow, type Subscription, type SubscriptionBlock, type SubscriptionCadence, type SubscriptionSpec, type Table, type TableCapacity, TableDisplay, TableOrigin, TableType, Timestamp, Uuid, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, asPermissionLevel, atLeast, bookingPath, choiceSlug, choiceValuesOf, choicesOf, highestLevel, holdsARetiredChoice, indexedDbStore, isDecided, isTheChosen, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, openCaptureQueue, optionKey, optionLabel, portalPath, publicFormPath, scopeChip };

package/dist/index.js

@@ -126,6 +126,8 @@ function looksLikeAnId(value) {
 
 // src/pipeline.ts
 var PIPELINE_RULE_KINDS = ["moves", "requires", "who", "limit", "entry"];
+var STAGE_RULE_ON_FAIL = ["refuse", "require_approval"];
+var STAGE_RULE_ENFORCEMENT = ["refuse", "warn"];
 function mayDrag(level) {
   return level === "editor" || level === "admin" || level === "owner";
 }
@@ -482,6 +484,7 @@ var RULE_NODE_KINDS = [
   { node: "parent_field", evaluated_by: "W1-RULE-APPLY" },
   { node: "present", evaluated_by: "W1-RULE" },
   { node: "previous", evaluated_by: "PIPELINES" },
+  { node: "sibling_count", evaluated_by: "STAGE-RULES" },
   { node: "stage_count", evaluated_by: "PIPELINES" },
   { node: "sub", evaluated_by: "W1-RULE" }
 ];
@@ -809,7 +812,9 @@ var STORE_DOORS = [
   { name: "pin_agent_cells", args: "p_new jsonb, p_old jsonb, p_agent_keys text[]", returns: "jsonb", security: "invoker" },
   { name: "pipeline_board", args: "p_organization_id uuid, p_table_id uuid, p_measure text DEFAULT NULL::text", returns: "TABLE(stage_key text, stage_label text, stage_position integer, cards bigint, total numeric, wip_limit integer, over_limit boolean)", security: "definer" },
   { name: "pipeline_declare", args: "p_organization_id uuid, p_table_id uuid, p_spec jsonb", returns: "jsonb", security: "definer" },
+  { name: "pipeline_gate_preview", args: "p_organization_id uuid, p_table_id uuid, p_stage text, p_gate jsonb", returns: "jsonb", security: "definer" },
   { name: "pipeline_move", args: "p_organization_id uuid, p_record_id uuid, p_to text, p_also jsonb DEFAULT '{}'::jsonb, p_expected_version integer DEFAULT NULL::integer", returns: "jsonb", security: "definer" },
+  { name: "pipeline_pending", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "pipeline_read", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "pipeline_transition_refusal", args: "p_organization_id uuid, p_record_id uuid, p_to text", returns: "jsonb", security: "definer" },
   { name: "portal_admits", args: "p_organization_id uuid, p_user_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "definer" },
@@ -876,6 +881,7 @@ var STORE_DOORS = [
   { name: "record_carrying_edges", args: "p_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(container_id uuid, item_id uuid, edge_role text)", security: "invoker" },
   { name: "record_delete", args: "p_organization_id uuid, p_record_id uuid", returns: "timestamp with time zone", security: "definer" },
   { name: "record_history", args: "p_organization_id uuid, p_record_id uuid, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0", returns: "TABLE(version integer, occurred_at timestamp with time zone, operation text, operation_label text, actor jsonb, changes jsonb, migration_id uuid, undoable boolean)", security: "definer" },
+  { name: "record_platform_keys", args: "", returns: "text[]", security: "invoker" },
   { name: "record_relation_edges", args: "p_organization_id uuid, p_id uuid, p_table_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(target_id uuid, edge_role text, field_id uuid, ord integer)", security: "invoker" },
   { name: "record_reparent", args: "p_organization_id uuid, p_record_id uuid, p_parent_id uuid", returns: "void", security: "definer" },
   { name: "record_resolve", args: "p_organization_id uuid, p_id uuid", returns: "jsonb", security: "definer" },
@@ -884,6 +890,7 @@ var STORE_DOORS = [
   { name: "record_restore_version", args: "p_organization_id uuid, p_record_id uuid, p_version integer", returns: "jsonb", security: "definer" },
   { name: "record_restore_version", args: "p_organization_id uuid, p_record_id uuid, p_version integer, p_author jsonb", returns: "jsonb", security: "definer" },
   { name: "record_scope_context", args: "p_organization_id uuid, p_record_id uuid, p_relations integer DEFAULT 12, p_history integer DEFAULT 15, p_siblings integer DEFAULT 8", returns: "jsonb", security: "definer" },
+  { name: "record_stage_pending", args: "p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "definer" },
   { name: "record_state_as_of", args: "p_record_id uuid, p_at timestamp with time zone", returns: "TABLE(state jsonb, replayed boolean)", security: "definer" },
   { name: "record_table", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "definer" },
   { name: "record_update", args: "p_organization_id uuid, p_record_id uuid, p_patch jsonb, p_expected_version integer DEFAULT NULL::integer", returns: "integer", security: "definer" },
@@ -947,6 +954,8 @@ var STORE_DOORS = [
   { name: "size_refusal", args: "p_organization_id uuid, p_data jsonb", returns: "text", security: "invoker" },
   { name: "source_next_pointer", args: "p_sources jsonb", returns: "text", security: "invoker" },
   { name: "source_pointer", args: "p_sources jsonb, p_source jsonb", returns: "text", security: "invoker" },
+  { name: "stage_rule_enforcement", args: "p_organization_id uuid", returns: "text", security: "invoker" },
+  { name: "stage_rule_on_fail_kinds", args: "", returns: "TABLE(behaviour text, note text)", security: "invoker" },
   { name: "stamp_value_envelopes", args: "p_data jsonb, p_actor text, p_on_behalf_of text, p_at timestamp with time zone", returns: "jsonb", security: "invoker" },
   { name: "storage_modes", args: "", returns: "text[]", security: "invoker" },
   { name: "store_is_open", args: "p_organization_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "invoker" },
@@ -957,6 +966,7 @@ var STORE_DOORS = [
   { name: "subscriptions", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(rule_id uuid, name text, table_id uuid, saved_view_id uuid, cadence text, schedule text, quiet_hours jsonb, channel text, recipient_user_id uuid, event_key text, muted boolean, mine boolean, i_may_mute boolean, last_sent_at timestamp with time zone, next_digest_at timestamp with time zone)", security: "definer" },
   { name: "table_capacity", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "table_carries_its_rows", args: "p_user_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
+  { name: "table_column_source", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
   { name: "table_contents", args: "p_organization_id uuid, p_table_id uuid", returns: "TABLE(record_id uuid, kind text, goes_at integer)", security: "invoker" },
   { name: "table_declare", args: "p_organization_id uuid, p_spec jsonb", returns: "uuid", security: "definer" },
   { name: "table_has_a_visible_record", args: "p_user uuid, p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "definer" },
@@ -971,6 +981,7 @@ var STORE_DOORS = [
   { name: "tables_at_home", args: "p_organization_id uuid, p_home_ids uuid[]", returns: "TABLE(table_id uuid, home_record_id uuid, kind text)", security: "definer" },
   { name: "tables_described_without_asking", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "trg_associations_bump_visibility", args: "", returns: "trigger", security: "definer" },
+  { name: "undeclared_keys", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "text[]", security: "invoker" },
   { name: "validate_custom_fields", args: "p_token text, p_organization_id uuid, p_values jsonb", returns: "void", security: "invoker" },
   { name: "validate_value_envelope", args: "p_organization_id uuid, p_fields custom.record[], p_data jsonb", returns: "void", security: "invoker" },
   { name: "validate_values", args: "p_organization_id uuid, p_fields custom.record[], p_values jsonb, p_record_type text DEFAULT NULL::text", returns: "void", security: "invoker" },
@@ -1071,6 +1082,7 @@ var STORE_KNOBS = [
   { key: "sandbox_message_bytes", value: "65536", type: "integer" },
   { key: "sandbox_org_components", value: "true", type: "boolean" },
   { key: "signup_provisioning_guard", value: "false", type: "boolean" },
+  { key: "stage_rule_enforcement", value: '"refuse"', type: "enum" },
   { key: "system_enabled", value: "false", type: "boolean" },
   { key: "table_record_ceiling", value: "150000", type: "integer" },
   { key: "value_max_bytes", value: "100000", type: "integer" },
@@ -1080,19 +1092,20 @@ var STORE_REFUSAL_CODES = [
   { code: "02000", raised_by: "_checklist_instantiate,checklist_declare,checklist_run,checklist_step_complete,checklist_step_refusal,checklist_template_shape,conversation_scope_bind,dashboard_delete,dashboard_run,doc_letterhead,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,enrich_pin,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_card,portal_declare,portal_invite,portal_preview,portal_principal_bind,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,sign_request_cancel,sign_request_create,sign_request_remind,sign_request_unchanged,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state" },
   { code: "0A000", raised_by: "checklist_step_complete,external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign" },
   { code: "22003", raised_by: "context_resolve" },
-  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,record_write_many,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,value_restore,view_declare,work_approval_decide,work_approval_request,work_template_declare" },
+  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,pipeline_gate_preview,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,record_write_many,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,value_restore,view_declare,work_approval_decide,work_approval_request,work_template_declare" },
   { code: "22007", raised_by: "dashboard_window_sql" },
   { code: "22012", raised_by: "rule_eval" },
   { code: "22023", raised_by: "_booking_availability,_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,io_export,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,record_update,record_write_many,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
   { code: "23503", raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_field_document_for,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,view_declare,work_set_state,work_take_assignment,work_template_instantiate" },
   { code: "23505", raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,share_grant,sign_request_cancel,sign_request_create,work_approval_decide,work_slot_hold" },
-  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
+  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_claimed_column_guard,_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
   { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,record_table,share_grant,subscription_mute,subscription_preview,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
   { code: "42703", raised_by: "entity_table,portal_declare" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,enrich_due,enrich_land,promote_field" },
   { code: "54001", raised_by: "record_delete" },
-  { code: "PT409", raised_by: "record_update" }
+  { code: "PT409", raised_by: "record_update" },
+  { code: "PT428", raised_by: "_record_rule_uses" }
 ];
 var ENTITY_TOKENS = [
   "access_delta_probe",
@@ -1756,6 +1769,7 @@ var ENTITY_TOKENS = [
   "plan_node_artifact",
   "plan_node_step",
   "plan_profile",
+  "platform_action_request",
   "platform_actor_session",
   "platform_actor_token",
   "platform_actor_token_event",
@@ -2149,6 +2163,8 @@ export {
   RETIRED_ACTOR_WORDS,
   RULE_NODE_KINDS,
   RULE_USES,
+  STAGE_RULE_ENFORCEMENT,
+  STAGE_RULE_ON_FAIL,
   STORAGE_MODES,
   STORE_DOORS,
   STORE_KNOBS,