@ai-matrx/records 0.58.9 → 0.58.12

package/CHANGELOG.md

@@ -1,12 +1,59 @@
 # Changelog — @ai-matrx/records
 
+## 0.58.12 (2026-09-25)
+
+### Lane DECLARE-ENTITY-REF (2026-09-25)
+
+* **Every column word reaches the door as `type`.** `declareTable` / `addFields` / `fieldDeclarationFor`
+  mapped `text` / `long_text` / `number` synonyms to `plain` and sent EVERY other word as
+  `parity_type` — but `custom._field_document_for` accepts `parity_type` only for the fourteen parity
+  types, while its `type` arm resolves them all. So eight words were refused ("There is no field type
+  called …"): `entity_reference`, `relation`, `signature`, `autonumber`, `created_time`,
+  `modified_time`, `list`, `boolean`. The word is now sent as `type`, unmapped (multiline text still
+  becomes `long_text`), and `NewFieldSpec.allowedTypes` carries an entity reference's kinds as
+  `allowed_types`. Guard: `every-declarable-word-reaches-the-door-as-its-word.test.ts` holds the
+  door's rule against every word it resolves. Proven live: a table with an
+  `entity_reference → ai_model` column declared as admin, a record written with
+  `{token: "ai_model", id}`, one `platform.associations` row answered.
+  **Consumer action:** a caller that put `allowed_types` in `config` may keep it (the door reads both)
+  or move it to `allowedTypes`; nothing else changes.
+
+## 0.58.11 (2026-09-25 — published by PUBLISH-SWEEP-6)
+
+0.58.10 was tagged but never reached npm: its publish gate (`real-doors.test.ts`, "no signed-out caller
+reaches the store") counted `custom._older_table_copy_refusal(uuid)`, an anonymous door lane
+WHERE-LIVES-SWITCH declared in `platform.client_callable_door`. The gate now counts only UNDECLARED
+anon grants and also asserts anon holds no USAGE on schema `custom`. Everything under 0.58.10 below
+ships here.
+
+## 0.58.10 (2026-09-25 — tagged by PUBLISH-SWEEP-5; never published, see 0.58.11)
+
+Carries S5-PRIME-2's decision hold (`WorkInboxItem.undo_seconds` / `undo_refusal`, `3e2c93da3c`; registry
+689 doors), which records-ui 0.85.12 reads, so it publishes first. ORDER-FILTER shipped in 0.58.9 (below).
+
+### Lane MOVER-BIG-VALUES (2026-09-25)
+
+* **A value kept as a file** (`core/wholeValue.ts`): a value over the organization's ceiling for one
+  value is kept as a file and the cell holds its first 1000 characters, its envelope pointing at a
+  `whole_value_in_file` provenance entry. `wholeValueOf(document, key)` / `wholeValueOfRead(value)`
+  recognise it; `withWholeValues(rows, readFileText)` makes an export write the file's whole content;
+  `cellText` never passes the words off as the whole value (it says where the rest is).
+
+### Lane S5-PRIME-2, VERIFIER-20 (2026-09-25)
+
+* **`WorkInboxItem.undo_seconds` / `undo_refusal`** (uichamp_s5c, applied to production
+  2026-09-25): how long a decision on the row is held with Undo — the organization's
+  `custom/decision_undo_seconds` (default 5) for a pending approval or proposal, 0 with the store's
+  sentence when a run already waits on the answer, null for work and closed rows. Registry
+  regenerated (689 doors).
+
 ## 0.58.9
 
 Automatic changed-only republish (docs/metadata drift since the last tag — see
 `git diff npm/records/v0.58.8..npm/records/v0.58.9 -- apps/shared/records`).
 No source changes intended and no consumer action required.
 
-## Unreleased — lane ORDER-FILTER (2026-09-25)
+### Lane ORDER-FILTER (2026-09-25)
 
 * **The order door takes the view's filter.** `readInViewOrder({ view_id, filter, limit, offset })`
   now takes `filter` (`StoreFilter`: the flat map or a nested Rule — the view's own `where`, or a

package/dist/core/index.cjs

@@ -2247,6 +2247,7 @@ __export(core_exports, {
   TABLE_TYPES: () => TABLE_TYPES,
   VALUE_ALTERNATE_KEYS: () => VALUE_ALTERNATE_KEYS,
   VALUE_ENVELOPE_KEYS: () => VALUE_ENVELOPE_KEYS,
+  WHOLE_VALUE_SOURCE_KIND: () => WHOLE_VALUE_SOURCE_KIND,
   actionRefusals: () => actionRefusals,
   addFields: () => addFields,
   allowsOtherValues: () => allowsOtherValues,
@@ -2343,9 +2344,14 @@ __export(core_exports, {
   supabaseDataSource: () => supabaseDataSource,
   toAoa: () => toAoa,
   tokenFor: () => tokenFor,
+  wholeValueNotRead: () => wholeValueNotRead,
+  wholeValueOf: () => wholeValueOf,
+  wholeValueOfRead: () => wholeValueOfRead,
+  wholeValueSize: () => wholeValueSize,
   withRowCounts: () => withRowCounts,
   withTableFacts: () => withTableFacts,
-  withTablePlacement: () => withTablePlacement
+  withTablePlacement: () => withTablePlacement,
+  withWholeValues: () => withWholeValues
 });
 module.exports = __toCommonJS(core_exports);
 
@@ -4401,7 +4407,7 @@ var STORE_DOORS = [
   { name: "work_assignment_fields", args: "p_options_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(key text, label text, spec jsonb)", security: "invoker" },
   { name: "work_decide_many", args: "p_organization_id uuid, p_decisions jsonb", returns: "jsonb", security: "definer" },
   { name: "work_has_assignment", args: "p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "definer" },
-  { name: "work_inbox", args: "p_organization_id uuid, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0, p_include_decided boolean DEFAULT false, p_view text DEFAULT 'inbox'::text", returns: "TABLE(item_id uuid, kind text, origin text, title text, subject_id uuid, subject_kind text, summary text, state text, due_on timestamp with time zone, due_state text, actionable boolean, requested_by uuid, requested_by_name text, at timestamp with time zone, table_id uuid, table_name text, decided_by uuid, decided_by_name text, decided_at timestamp with time zone, outcome text, snoozed_until timestamp with time zone, cleared_at timestamp with time zone, snoozed_count integer, cleared_count integer)", security: "definer" },
+  { name: "work_inbox", args: "p_organization_id uuid, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0, p_include_decided boolean DEFAULT false, p_view text DEFAULT 'inbox'::text", returns: "TABLE(item_id uuid, kind text, origin text, title text, subject_id uuid, subject_kind text, summary text, state text, due_on timestamp with time zone, due_state text, actionable boolean, requested_by uuid, requested_by_name text, at timestamp with time zone, table_id uuid, table_name text, decided_by uuid, decided_by_name text, decided_at timestamp with time zone, outcome text, snoozed_until timestamp with time zone, cleared_at timestamp with time zone, snoozed_count integer, cleared_count integer, undo_seconds integer, undo_refusal text)", security: "definer" },
   { name: "work_instantiation_shape", args: "p_organization_id uuid, p_instantiation_id uuid", returns: "jsonb", security: "definer" },
   { name: "work_list", args: "p_organization_id uuid, p_flavour text DEFAULT 'mine'::text, p_include_finished boolean DEFAULT false, p_limit integer DEFAULT 100, p_offset integer DEFAULT 0", returns: "TABLE(record_id uuid, table_id uuid, table_name text, title text, assignee_id uuid, assignee_name text, assignee_user_id uuid, due_on timestamp with time zone, due_state text, status text, terminal boolean, assigned_by uuid, updated_at timestamp with time zone)", security: "definer" },
   { name: "work_person", args: "p_organization_id uuid, p_user_id uuid, p_create boolean DEFAULT true", returns: "uuid", security: "definer" },
@@ -4445,6 +4451,7 @@ var STORE_KNOBS = [
   { key: "containment_depth_ceiling", value: "16", type: "integer" },
   { key: "context_copy_following", value: "true", type: "boolean" },
   { key: "cross_organization_links", value: "false", type: "boolean" },
+  { key: "decision_undo_seconds", value: "5", type: "integer" },
   { key: "decoration_rules_max", value: "50", type: "integer" },
   { key: "decorations_max_bytes", value: "262144", type: "integer" },
   { key: "document_letterhead", value: "{}", type: "json" },
@@ -8552,7 +8559,8 @@ function fieldDeclarationFor(field) {
     ...field.options ? { options: field.options } : {},
     ...field.relationTarget ? { relation_target: field.relationTarget } : {},
     ...field.unit ? { unit: field.unit } : {},
-    ...field.kind ? { kind: field.kind } : {}
+    ...field.kind ? { kind: field.kind } : {},
+    ...field.allowedTypes ? { allowed_types: field.allowedTypes } : {}
   };
 }
 async function declareTable(client, spec) {
@@ -8619,25 +8627,12 @@ async function addFields(client, tableId, fields) {
   }
   return { ok: true, data: tableId };
 }
-var PLAIN_WORDS = {
-  text: "text",
-  string: "text",
-  long_text: "long_text",
-  longtext: "long_text",
-  paragraph: "long_text",
-  number: "number",
-  range: "number",
-  integer: "number",
-  decimal: "number",
-  float: "number"
-};
 function declaredType(field) {
   const word = (field.type ?? "text").toLowerCase();
-  const plain = PLAIN_WORDS[word];
-  if (plain) {
-    return { plain: plain === "text" && field.config?.["multiline"] === true ? "long_text" : plain };
+  if ((word === "text" || word === "string") && field.config?.["multiline"] === true) {
+    return { type: "long_text" };
   }
-  return { parity_type: word };
+  return { type: word };
 }
 
 // src/core/supabase.ts
@@ -9032,6 +9027,57 @@ function predictWriteRefusals(args) {
   return found;
 }
 
+// src/core/wholeValue.ts
+var WHOLE_VALUE_SOURCE_KIND = "whole_value_in_file";
+function asPointer(source) {
+  if (!source || typeof source !== "object") return null;
+  const s = source;
+  if (s.kind !== WHOLE_VALUE_SOURCE_KIND || typeof s.file_id !== "string" || !s.file_id) return null;
+  return s;
+}
+function wholeValueOf(document, key) {
+  if (!document) return null;
+  const envelope = (document._values ?? {})[key];
+  const pointer = envelope?.src;
+  if (typeof pointer !== "string") return null;
+  return asPointer((document._sources ?? {})[pointer]);
+}
+function wholeValueOfRead(value) {
+  return asPointer(value?.source ?? null);
+}
+function wholeValueSize(pointer) {
+  const kb = pointer.bytes / 1024;
+  return kb >= 1024 ? `${(kb / 1024).toFixed(1)} MB` : `${Math.round(kb)} KB`;
+}
+function wholeValueNotRead(words, pointer, why) {
+  return `${words}\u2026 [This is the start of a ${wholeValueSize(pointer)} text kept as file ${pointer.file_id}` + (why ? `; it could not be read for this export: ${why}` : "") + "]";
+}
+async function withWholeValues(rows, read) {
+  const texts = /* @__PURE__ */ new Map();
+  const out = [];
+  for (const row of rows) {
+    const next = { ...row };
+    for (const [key, value] of Object.entries(row)) {
+      const pointer = wholeValueOfRead(value);
+      if (!pointer || !value) continue;
+      const words = typeof value.value === "string" ? value.value : "";
+      if (!read) {
+        next[key] = { ...value, value: wholeValueNotRead(words, pointer, "this screen has no way to read files"), source: null };
+        continue;
+      }
+      if (!texts.has(pointer.file_id)) texts.set(pointer.file_id, read(pointer.file_id));
+      try {
+        next[key] = { ...value, value: await texts.get(pointer.file_id), source: null };
+      } catch (thrown) {
+        const why = thrown instanceof Error ? thrown.message : String(thrown);
+        next[key] = { ...value, value: wholeValueNotRead(words, pointer, why), source: null };
+      }
+    }
+    out.push(next);
+  }
+  return out;
+}
+
 // src/core/io.ts
 var escape = (value) => /[",\n\r]/.test(value) ? `"${value.replace(/"/g, '""')}"` : value;
 function cellText(value) {
@@ -9039,6 +9085,8 @@ function cellText(value) {
   if (value.absent_reason) return `(${value.absent_reason})`;
   const raw = value.value;
   if (raw === null || raw === void 0) return "";
+  const pointer = wholeValueOfRead(value);
+  if (pointer && typeof raw === "string") return wholeValueNotRead(raw, pointer);
   if (typeof raw === "string") return raw;
   return JSON.stringify(raw);
 }