@ai-matrx/records 0.57.3 → 0.58.0

package/dist/index.cjs

@@ -56,6 +56,7 @@ __export(src_exports, {
   PERMISSION_LEVELS: () => PERMISSION_LEVELS,
   PER_VALUE_ACCESS_WORDS: () => PER_VALUE_ACCESS_WORDS,
   PIPELINE_RULE_KINDS: () => PIPELINE_RULE_KINDS,
+  PORTAL_ACCENTS: () => PORTAL_ACCENTS,
   PORTAL_ARCHIVE_FILTERS: () => PORTAL_ARCHIVE_FILTERS,
   REFUSALS_WORTH_REPEATING: () => REFUSALS_WORTH_REPEATING,
   RELATION_BINDINGS: () => RELATION_BINDINGS,
@@ -90,6 +91,11 @@ __export(src_exports, {
   coercionLabel: () => coercionLabel,
   emptyArchiveLine: () => emptyArchiveLine,
   emptyPortalArchiveLine: () => emptyPortalArchiveLine,
+  entityReferenceKinds: () => entityReferenceKinds,
+  entityReferenceKindsOf: () => entityReferenceKindsOf,
+  entityReferenceWords: () => entityReferenceWords,
+  entityRefsOf: () => entityRefsOf,
+  entityRefsToWrite: () => entityRefsToWrite,
   err: () => err,
   exampleSpec: () => exampleSpec,
   exportPageXlsx: () => exportPageXlsx,
@@ -100,16 +106,24 @@ __export(src_exports, {
   indexedDbStore: () => indexedDbStore,
   isArchiveLane: () => isArchiveLane,
   isDecided: () => isDecided,
+  isEntityReferenceConfig: () => isEntityReferenceConfig,
   isOwnOp: () => isOwnOp,
+  isPortalAccent: () => isPortalAccent,
   isPortalArchiveFilter: () => isPortalArchiveFilter,
   isRecordsErr: () => isRecordsErr,
+  isRuleFilter: () => isRuleFilter,
   isTheChosen: () => isTheChosen,
+  keptGroups: () => keptGroups,
+  keptOutOfSight: () => keptOutOfSight,
+  keptTableHref: () => keptTableHref,
   looksLikeAnId: () => looksLikeAnId,
   mayDrag: () => mayDrag,
   measureKey: () => measureKey,
   memoryStore: () => memoryStore,
   mintClientKey: () => mintClientKey,
   mintOpId: () => mintOpId,
+  moveInOrder: () => moveInOrder,
+  offeredAsContext: () => offeredAsContext,
   ok: () => ok,
   openCaptureQueue: () => openCaptureQueue,
   optionKey: () => optionKey,
@@ -123,7 +137,10 @@ __export(src_exports, {
   rememberedOpCount: () => rememberedOpCount,
   sameDocument: () => sameDocument,
   scopeChip: () => scopeChip,
-  stableFilterKey: () => stableFilterKey
+  sheetSyncSpec: () => sheetSyncSpec,
+  stableFilterKey: () => stableFilterKey,
+  withRowCounts: () => withRowCounts,
+  withTablePlacement: () => withTablePlacement
 });
 module.exports = __toCommonJS(src_exports);
 
@@ -305,6 +322,7 @@ var FIELD_KINDS = [
   "currency",
   "datetime",
   "email",
+  "entity_reference",
   "formula",
   "json",
   "long_text",
@@ -343,6 +361,7 @@ function fieldKindFor(field, kernel) {
     case "list":
       return field.multi ? "multi_select" : "select";
     case "relation": {
+      if (isEntityReferenceConfig(config)) return "entity_reference";
       const parity = String(config["parity"] ?? "");
       if (parity === "attachment" || parity === "member") return parity;
       if (kernel?.file && field.relation_target === kernel.file) return "attachment";
@@ -360,6 +379,14 @@ function fieldKindFor(field, kernel) {
   }
 }
 var UUID_TEXT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isEntityReferenceConfig(config) {
+  const allowed = config?.["allowed_types"];
+  return Array.isArray(allowed) && allowed.length > 0;
+}
+function entityReferenceKindsOf(field) {
+  const allowed = field.config?.["allowed_types"];
+  return Array.isArray(allowed) ? allowed.map((k) => String(k).trim().toLowerCase()).filter(Boolean) : [];
+}
 var TRUE_WORDS = /* @__PURE__ */ new Set(["true", "yes", "y", "1", "\u2713", "x", "checked", "on"]);
 var FALSE_WORDS = /* @__PURE__ */ new Set(["false", "no", "n", "0", "", "unchecked", "off"]);
 function coercionLabel(field) {
@@ -475,6 +502,23 @@ function coerceTypedAnswer(field, raw, opts = {}) {
       return {
         refusal: `${label} points at another record, so it is chosen rather than typed. Open it and pick the record.`
       };
+    // SC-R / P12. An entity reference names a platform thing by kind and id.
+    // An import or an agent may hand over `note:<id>` — or a bare id when the
+    // column allows exactly one kind; the store then decides whether the thing
+    // is there and whether the writer may open it. Words are chosen, not typed.
+    case "entity_reference": {
+      const allowed = entityReferenceKindsOf(field);
+      const [maybeToken, maybeId] = text.includes(":") ? text.split(/:(.*)/s, 2) : ["", text];
+      const token = (maybeToken ?? "").trim().toLowerCase() || (allowed.length === 1 ? allowed[0] : "");
+      const id = (maybeId ?? "").trim();
+      if (token && UUID_TEXT.test(id)) {
+        const ref = { token, id: id.toLowerCase() };
+        return { value: field.multi ? [ref] : ref };
+      }
+      return {
+        refusal: `${label} points at something on the platform, so it is chosen rather than typed. Open it and pick it.`
+      };
+    }
     case "formula":
     case "lookup":
     case "rollup":
@@ -531,6 +575,10 @@ function publicFormPath(formId) {
 }
 
 // src/portal.ts
+var PORTAL_ACCENTS = ["slate", "green", "amber", "red", "blue", "violet", "teal"];
+function isPortalAccent(word) {
+  return typeof word === "string" && PORTAL_ACCENTS.includes(word);
+}
 function portalPath(slug) {
   return `/portal/c/${slug}`;
 }
@@ -554,11 +602,17 @@ function emptyPortalArchiveLine() {
 }
 
 // src/aggregate.ts
+function isRuleFilter(filter) {
+  if (!filter || typeof filter !== "object" || Array.isArray(filter)) return false;
+  const node = filter;
+  return typeof node.op === "string" && Array.isArray(node.args);
+}
 function measureKey(measure) {
   return measure.op === "count" ? "count" : `${measure.op}_${measure.key ?? ""}`;
 }
 function stableFilterKey(filter) {
   if (!filter) return "{}";
+  if (isRuleFilter(filter)) return JSON.stringify(filter);
   const keys = Object.keys(filter).sort();
   if (keys.length === 0) return "{}";
   const parts = keys.map((key) => {
@@ -654,6 +708,101 @@ function recordChangeTrigger(tableId, options = {}) {
     ...options.changedFields && options.changedFields.length > 0 ? { changed_fields: options.changedFields } : {}
   };
 }
+function sheetSyncSpec(args) {
+  const [header = [], ...body] = args.cells;
+  const columns = header.map((c, i) => {
+    const name = c == null ? "" : String(c).trim();
+    return name === "" ? `Column ${i + 1}` : name;
+  });
+  if (columns.length === 0) {
+    throw new Error("The sheet has no header row, so there are no columns to sync. Nothing was sent.");
+  }
+  const seenCol = /* @__PURE__ */ new Set();
+  for (const c of columns) {
+    if (seenCol.has(c)) throw new Error(`The sheet has two columns named "${c}". Rename one and sync again.`);
+    seenCol.add(c);
+  }
+  const refIdx = args.refColumn == null ? -1 : columns.indexOf(args.refColumn);
+  if (args.refColumn != null && refIdx < 0) {
+    throw new Error(`The id column "${args.refColumn}" is not in the sheet's header. Nothing was sent.`);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const rows = [];
+  body.forEach((cells, i) => {
+    if (cells.every((v) => v == null || String(v).trim() === "")) return;
+    const ref = refIdx >= 0 ? String(cells[refIdx] ?? "").trim() : `row-${i + 2}`;
+    if (ref === "") throw new Error(`Sheet row ${i + 2} has no value in the id column "${args.refColumn}".`);
+    if (seen.has(ref)) throw new Error(`Two sheet rows share the id "${ref}"; each row needs its own.`);
+    seen.add(ref);
+    const values = {};
+    columns.forEach((c, j) => {
+      const v = cells[j];
+      values[c] = v === void 0 || v === "" ? null : v;
+    });
+    rows.push({ ref, values });
+  });
+  return { source: args.source, table_name: args.tableName, columns, rows };
+}
+function withRowCounts(tables, counts) {
+  if (!counts) return [...tables];
+  const byId = new Map(counts.map((c) => [c.table_id, Number(c.visible_rows)]));
+  return tables.map((t) => byId.has(t.id) ? { ...t, row_count: byId.get(t.id) } : t);
+}
+function moveInOrder(order, moved, toIndex) {
+  const rest = order.filter((id) => id !== moved);
+  const at = Math.max(0, Math.min(Math.trunc(toIndex), rest.length));
+  return [...rest.slice(0, at), moved, ...rest.slice(at)];
+}
+
+// src/placement.ts
+function keptOutOfSight(placement) {
+  return placement?.kept_by_the_app === true;
+}
+function offeredAsContext(placement) {
+  return placement?.offered_as_context === true;
+}
+function withTablePlacement(tables, facts) {
+  if (!facts) return [...tables];
+  const byId = new Map(facts.map((f) => [f.table_id, f]));
+  return tables.map((table) => {
+    const fact = byId.get(table.id);
+    if (!fact || fact.kept_by_the_app === void 0) return table;
+    return {
+      ...table,
+      kept_by_the_app: fact.kept_by_the_app,
+      kept_for: fact.kept_for ?? null,
+      offered_as_context: fact.offered_as_context ?? false,
+      keeper_group: fact.keeper_group ?? null,
+      keeper_says: fact.keeper_says ?? null,
+      used_in_kind: fact.used_in_kind ?? null,
+      used_in_id: fact.used_in_id ?? null,
+      used_in_table_id: fact.used_in_table_id ?? null
+    };
+  });
+}
+function keptGroups(tables) {
+  const out = [];
+  const at = /* @__PURE__ */ new Map();
+  for (const table of tables) {
+    if (!keptOutOfSight(table)) continue;
+    const group = table.keeper_group?.trim() || "Kept by the app";
+    let i = at.get(group);
+    if (i === void 0) {
+      i = out.length;
+      at.set(group, i);
+      out.push({ group, tables: [] });
+    }
+    out[i].tables.push(table);
+  }
+  return out;
+}
+function keptTableHref(fact, hrefs) {
+  if (fact.used_in_kind === "scope" && fact.used_in_id) return hrefs.scope(fact.used_in_id);
+  if (fact.used_in_kind === "table" && (fact.used_in_table_id || fact.used_in_id)) {
+    return hrefs.table(fact.used_in_table_id || fact.used_in_id);
+  }
+  return hrefs.table(fact.table_id);
+}
 
 // src/capture-queue.ts
 var DB_NAME = "matrx-capture";
@@ -941,6 +1090,182 @@ function isRecordsErr(result) {
 var ok = (data) => ({ ok: true, data });
 var err = (error) => ({ ok: false, error });
 
+// src/core/pgError.ts
+var BY_SQLSTATE = {
+  PT409: "stale_write",
+  "42501": "door",
+  "23514": "refused_by_rule",
+  "22004": "invalid_argument",
+  "22023": "invalid_argument",
+  // 22P02 — a value does not fit the type the store holds for it. The class is
+  // real and was hit live: an organization whose copy of a package table grew
+  // `status` as a uuid-valued Field was sent the text "open", and the store
+  // answered `invalid input syntax for type uuid: "open"`. It is the CALL that
+  // is wrong for the shape the store holds, which is what `invalid_argument`
+  // already means — the store's own sentence names the value and the type.
+  "22P02": "invalid_argument",
+  // 42703 — a column that is not there. The store raises it from
+  // `custom.entity_table`, which is asked for a column by NAME, so the class is
+  // exactly "the call named something the shape does not have": the same thing
+  // `invalid_argument` already means, and the store's own sentence names the
+  // column. Added 2026-09-20 (lane FORMS) because the package's live-door suite
+  // caught it raised by a door this package did not know about — which is the
+  // suite working, and is why the map is a census rather than a guess.
+  "42703": "invalid_argument",
+  // 22007 — a date or a time the store could not read as one. It is raised by
+  // `custom.dashboard_window_sql`, which is handed a window a caller wrote
+  // ("last 30 days", a literal date), so the class is again "the call named
+  // something the shape does not accept" and the store's own sentence names the
+  // text it could not read. Added 2026-09-20 (lane SCREEN-BREAK) after the
+  // live-door census caught it — the same way 42703 arrived, which is the
+  // census working rather than a guess.
+  "22007": "invalid_argument",
+  // 22003 — a number the store could not hold at the size it was handed. It is
+  // raised by `custom.context_resolve`, which is given a window or a depth a
+  // caller wrote, so the class is the same one 22P02, 42703 and 22007 already
+  // are: the CALL named a value the shape does not accept, and the store's own
+  // sentence names the number and the range. Added 2026-09-20 (lane GRID-TWO)
+  // when the live-door census caught the release gate red on it — which is the
+  // census working, and the fourth time it has been the thing that found a new
+  // refusal class rather than a person guessing one.
+  "22003": "invalid_argument",
+  "02000": "not_found",
+  "23503": "missing_reference",
+  "23505": "already_exists",
+  "0A000": "not_supported",
+  "53400": "store_limit",
+  "22012": "store_limit",
+  // 54001 — `custom.record_delete` stops a cascade that nests past sixty-four
+  // levels of containment, because that is a loop somebody built rather than a
+  // hierarchy, and saying so beats recursing until the server runs out of
+  // stack. It is a LIMIT of the store, and the store's own sentence names what
+  // to do about it, so it reads as one.
+  "54001": "store_limit",
+  // 54000 — the grid primitives' organization ceilings (GRID-PRIMITIVES, 2026-09-23):
+  // `custom.action_run` on a selection past its knob, `custom.table_decorate` past the
+  // rule count, `custom.table_from_example` past `custom/example_rows_max`,
+  // `custom.table_webhook_declare` past `custom/table_webhooks_max`, and
+  // `custom.hub_changed_by`. Each names its knob in the hint and writes nothing, so it
+  // reads exactly like 54001: a limit of the store, in the store's own sentence.
+  "54000": "store_limit",
+  // VIS: `custom.has_visibility_at` refuses to answer from a snapshot older
+  // than a write this reader has already seen, rather than returning something
+  // they just lost access to. It is retryable on a fresher connection, which is
+  // a different instruction from every other refusal here.
+  "40001": "stale_read",
+  // 57014 — the store cancelled the statement at its own timeout. Like
+  // `stale_read` and unlike every other refusal here, the call was never
+  // refused on its merits: the same call on a smaller page, or once the
+  // organization's kernel is not being rewritten, can succeed. It gets its own
+  // code so a screen can offer "try again" honestly instead of showing a
+  // failure sentence the caller cannot act on.
+  "57014": "timed_out",
+  // PostgREST's own two: the store is not being SERVED, which is a different
+  // thing from the store refusing. `custom` absent from `pgrst.db_schemas`, or
+  // the grants not copied, land here.
+  PGRST202: "store_not_served",
+  PGRST205: "store_not_served",
+  PGRST301: "door",
+  // PT428 — NOT A FAILURE, and the release gate's live census is what found it
+  // missing: the store raises it and this package answered `internal`, which is
+  // the one classification that tells a screen nothing. A stage gate whose
+  // `on_fail` is `require_approval` files the request and leaves the record
+  // where it was; the transaction is rolled back to the pipeline's own block, so
+  // "nothing was written" is a fact rather than a promise. Landed by lane
+  // STAGE-RULES; mapped here by STAGE-RULES-2 the day after, when the census
+  // caught it — the sixth time that census has been the thing that found a
+  // refusal class rather than a person guessing one.
+  PT428: "needs_approval"
+};
+var MAPPED_SQLSTATES = Object.keys(BY_SQLSTATE);
+function parseDetail(details) {
+  if (!details) return void 0;
+  const trimmed = details.trim();
+  if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) return details;
+  try {
+    return JSON.parse(trimmed);
+  } catch {
+    return details;
+  }
+}
+function isNotASqlstate(code) {
+  if (!code) return true;
+  return /^[0-9]{3}$/.test(code);
+}
+function mapPgError(error, where) {
+  const raw = error.code ?? void 0;
+  const sqlstate = raw && raw !== "" ? raw : void 0;
+  const mapped = {
+    code: "internal",
+    message: error.message,
+    ...error.hint ? { hint: error.hint } : {},
+    ...sqlstate ? { sqlstate } : {}
+  };
+  if (isNotASqlstate(sqlstate)) {
+    mapped.code = "unreachable";
+  } else {
+    mapped.code = BY_SQLSTATE[sqlstate] ?? "internal";
+  }
+  const detail = parseDetail(error.details);
+  if (detail !== void 0) mapped.detail = detail;
+  if (mapped.code === "internal") {
+    mapped.unmapped = true;
+    mapped.diagnostic = `@ai-matrx/records did not recognise SQLSTATE ${sqlstate ?? "(none)"} from ${where}; the store's own message is the thing to act on.`;
+  } else if (mapped.code === "unreachable") {
+    mapped.unmapped = true;
+    mapped.diagnostic = `@ai-matrx/records never reached the store from ${where}: ${raw ? `the transport answered ${raw}` : "no response"} \u2014 ${error.message}`;
+    mapped.message = "We could not reach your data.";
+    delete mapped.hint;
+  }
+  return mapped;
+}
+
+// src/relation.ts
+var ENTITY_REF_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isRefLike(value) {
+  return typeof value === "object" && value !== null && "token" in value && "id" in value;
+}
+function entityRefsOf(value) {
+  const items = Array.isArray(value) ? value : value == null ? [] : [value];
+  const out = [];
+  for (const item of items) {
+    if (!isRefLike(item)) continue;
+    const token = String(item.token ?? "").trim().toLowerCase();
+    const id = String(item.id ?? "").trim();
+    if (!token || !ENTITY_REF_ID.test(id)) continue;
+    const label = item.label;
+    out.push({ token, id: id.toLowerCase(), label: typeof label === "string" ? label : null });
+  }
+  return out;
+}
+function entityRefsToWrite(value, multi) {
+  const seen = /* @__PURE__ */ new Set();
+  const refs = [];
+  for (const ref of entityRefsOf(value)) {
+    const k = `${ref.token}:${ref.id}`;
+    if (seen.has(k)) continue;
+    seen.add(k);
+    refs.push({ token: ref.token, id: ref.id });
+  }
+  if (multi) return refs;
+  return refs[0] ?? null;
+}
+async function entityReferenceKinds(source) {
+  const { data, error } = await source.rpc("entity_reference_kinds", {}, { schema: "custom" });
+  if (error) return err(mapPgError(error, "entityReferenceKinds"));
+  return ok(Array.isArray(data) ? data : []);
+}
+async function entityReferenceWords(source, organizationId, refs) {
+  if (refs.length === 0) return ok([]);
+  const { data, error } = await source.rpc(
+    "entity_reference_words",
+    { p_organization_id: organizationId, p_refs: refs.map((r) => ({ token: r.token, id: r.id })) },
+    { schema: "custom" }
+  );
+  if (error) return err(mapPgError(error, "entityReferenceWords"));
+  return ok(entityRefsOf(data));
+}
+
 // src/ops.ts
 var REMEMBER_MS = 3e4;
 var REMEMBER_MAX = 500;
@@ -1654,6 +1979,7 @@ var STORE_DOORS = [
   { name: "table_work_kind", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
   { name: "tables_at_home", args: "p_organization_id uuid, p_home_ids uuid[]", returns: "TABLE(table_id uuid, home_record_id uuid, kind text)", security: "definer" },
   { name: "tables_described_without_asking", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
+  { name: "tables_i_can_open", args: "", returns: "TABLE(table_id uuid, table_name text, organization_id uuid, organization_name text, member boolean, visibility text, updated_at timestamp with time zone)", security: "definer" },
   { name: "tables_shared_with_me", args: "", returns: "TABLE(table_id uuid, organization_id uuid, organization text, table_name text, level text, level_label text, shared_at timestamp with time zone, opens boolean, say text)", security: "definer" },
   { name: "trg_associations_bump_visibility", args: "", returns: "trigger", security: "definer" },
   { name: "undeclared_keys", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "text[]", security: "invoker" },
@@ -1678,6 +2004,7 @@ var STORE_DOORS = [
   { name: "visible_predicate_sql", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, p_alias text DEFAULT 'r'::text", returns: "text", security: "definer" },
   { name: "visible_record_ids", args: "p_user_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "TABLE(id uuid)", security: "definer" },
   { name: "visible_set", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, OUT o_all_visible boolean, OUT o_true_visibility platform.visibility[], OUT o_granted_all uuid[], OUT o_granted_visible uuid[], OUT o_carried_visible uuid[], OUT o_ladder_calls integer, OUT o_fallback boolean, OUT o_note text", returns: "record", security: "definer" },
+  { name: "where_id_opens", args: "p_id uuid", returns: "jsonb", security: "definer" },
   { name: "widget_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "withheld_marker", args: "p_mask jsonb, p_key text", returns: "jsonb", security: "invoker" },
   { name: "withheld_sentence", args: "p_mask jsonb, p_key text", returns: "text", security: "invoker" },
@@ -1784,7 +2111,7 @@ var STORE_REFUSAL_CODES = [
   { code: "23505", raised_by: "_share_write_person,_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,sign_request_cancel,sign_request_create,table_share_outside_resend,work_approval_decide,work_slot_hold" },
   { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_display_format_check,_display_spec_for,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_relation_halves_agree,_relation_kernel_targets,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_with_display,_work_shape_guard,_workdoors_approval_guard,action_run,assert_columns_are_defined,assert_entity_is_organization_scoped,booking_declare,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_comment_write,io_import_rows,migrate_merge,migrate_purge_hard,portal_archive,portal_restore,record_write_graph,relation_carry,relation_halves_repair,relation_own,sign_request_create,sign_request_sign,table_declare,table_from_example,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
-  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,agent_table_claim,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,doc_sign,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_purge_hard,migrate_purge_hard_request,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_invite_accept,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,read_records_archived,read_records_by_ids,read_records_matching,record_table,record_write_graph,relation_halves_disagreements,relation_halves_repair,share_grant,subscription_mute,subscription_preview,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_webhook_declare,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
+  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,agent_table_claim,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,doc_sign,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_purge_hard,migrate_purge_hard_request,migrate_reclass,my_levels,organization_clear,organization_contents,portal_declare,portal_invitation,portal_invite,portal_invite_accept,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,read_records_archived,read_records_by_ids,read_records_matching,record_table,record_write_graph,relation_halves_disagreements,relation_halves_repair,share_grant,subscription_mute,subscription_preview,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_webhook_declare,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
   { code: "42703", raised_by: "entity_table,portal_declare" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,enrich_due,enrich_land,promote_field" },
   { code: "54000", raised_by: "action_run,hub_changed_by,table_decorate,table_from_example,table_webhook_declare" },