@ai-matrx/records 0.6.2 → 0.7.2

package/dist/index.d.ts

@@ -179,11 +179,21 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_declared text";
     readonly returns: "text";
     readonly security: "invoker";
+}, {
+    readonly name: "agent_change_approval";
+    readonly args: "p_organization uuid, p_conversation uuid DEFAULT NULL::uuid, p_table uuid DEFAULT NULL::uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "agent_context";
     readonly args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 50";
     readonly returns: "jsonb";
     readonly security: "invoker";
+}, {
+    readonly name: "agent_table_claim";
+    readonly args: "p_organization uuid, p_table uuid, p_conversation uuid DEFAULT NULL::uuid";
+    readonly returns: "void";
+    readonly security: "definer";
 }, {
     readonly name: "agg_assert_key";
     readonly args: "p_key text";
@@ -269,6 +279,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_form_id uuid, p_bucket text, p_token_id uuid DEFAULT NULL::uuid";
     readonly returns: "integer";
     readonly security: "definer";
+}, {
+    readonly name: "anon_submissions";
+    readonly args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_state text DEFAULT NULL::text, p_limit integer DEFAULT 100, p_offset integer DEFAULT 0";
+    readonly returns: "TABLE(id uuid, form_id uuid, inbound_id uuid, table_id uuid, source text, state text, payload jsonb, raw_payload jsonb, client_key text, record_id uuid, remote_origin text, rejection_reason text, created_at timestamp with time zone, cleared_at timestamp with time zone)";
+    readonly security: "definer";
 }, {
     readonly name: "anon_token_issue";
     readonly args: "p_organization_id uuid, p_mode text, p_allowed_origins jsonb, p_form_id uuid DEFAULT NULL::uuid, p_saved_view_id uuid DEFAULT NULL::uuid, p_record_id uuid DEFAULT NULL::uuid, p_expires_at timestamp with time zone DEFAULT NULL::timestamp with time zone";
@@ -344,6 +359,16 @@ declare const STORE_DOORS: readonly [{
     readonly args: "";
     readonly returns: "name";
     readonly security: "invoker";
+}, {
+    readonly name: "carrying_edges_in";
+    readonly args: "p_organization_id uuid";
+    readonly returns: "TABLE(container_type text, container_id uuid, item_type text, item_id uuid, conveys_max permission_level)";
+    readonly security: "definer";
+}, {
+    readonly name: "carrying_edges_of";
+    readonly args: "p_item_type text, p_item_id uuid";
+    readonly returns: "TABLE(container_type text, container_id uuid, conveys_max permission_level)";
+    readonly security: "definer";
 }, {
     readonly name: "client_write_grants";
     readonly args: "";
@@ -389,6 +414,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_record_id uuid";
     readonly returns: "uuid[]";
     readonly security: "invoker";
+}, {
+    readonly name: "delete_preview";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "delete_rule";
     readonly args: "p_organization_id uuid, p_record_id uuid, p_apply boolean DEFAULT true";
@@ -563,7 +593,7 @@ declare const STORE_DOORS: readonly [{
     readonly name: "field_dependants";
     readonly args: "p_organization_id uuid, p_field_id uuid";
     readonly returns: "TABLE(kind text, dependant_id uuid, label text, how text)";
-    readonly security: "invoker";
+    readonly security: "definer";
 }, {
     readonly name: "field_kernel_id";
     readonly args: "";
@@ -604,6 +634,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb, p_values jsonb DEFAULT NULL::jsonb";
     readonly returns: "jsonb";
     readonly security: "invoker";
+}, {
+    readonly name: "guard_refusals_are_complete";
+    readonly args: "";
+    readonly returns: "TABLE(guard text, said text)";
+    readonly security: "invoker";
 }, {
     readonly name: "has_visibility";
     readonly args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level";
@@ -759,6 +794,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_record_id uuid";
     readonly returns: "TABLE(version integer, changed_at timestamp with time zone, changed_by uuid, summary text, operation text, changed_fields jsonb)";
     readonly security: "definer";
+}, {
+    readonly name: "is_a_retirement";
+    readonly args: "p_old_deleted timestamp with time zone, p_new_deleted timestamp with time zone, p_old_data jsonb, p_new_data jsonb, p_old_table uuid, p_new_table uuid, p_old_org uuid, p_new_org uuid, p_old_class text, p_new_class text";
+    readonly returns: "boolean";
+    readonly security: "invoker";
 }, {
     readonly name: "lookup_value";
     readonly args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb";
@@ -823,7 +863,7 @@ declare const STORE_DOORS: readonly [{
     readonly name: "migrate_retype";
     readonly args: "p_organization_id uuid, p_id uuid, p_to text, p_note text DEFAULT NULL::text";
     readonly returns: "jsonb";
-    readonly security: "invoker";
+    readonly security: "definer";
 }, {
     readonly name: "migrate_split";
     readonly args: "p_organization_id uuid, p_record_id uuid, p_moved_keys text[], p_note text DEFAULT NULL::text";
@@ -834,6 +874,21 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_log_id uuid";
     readonly returns: "jsonb";
     readonly security: "definer";
+}, {
+    readonly name: "migrations";
+    readonly args: "p_organization_id uuid, p_target_id uuid DEFAULT NULL::uuid, p_limit integer DEFAULT 100";
+    readonly returns: "TABLE(id uuid, verb text, target_kind text, target_id uuid, note text, applied_at timestamp with time zone, applied_by uuid, undone_at timestamp with time zone)";
+    readonly security: "definer";
+}, {
+    readonly name: "my_level";
+    readonly args: "p_organization_id uuid, p_id uuid, p_type text DEFAULT 'record'::text";
+    readonly returns: "permission_level";
+    readonly security: "definer";
+}, {
+    readonly name: "my_levels";
+    readonly args: "p_organization_id uuid, p_ids jsonb, p_type text DEFAULT 'record'::text";
+    readonly returns: "TABLE(id uuid, level permission_level)";
+    readonly security: "definer";
 }, {
     readonly name: "organization_kernel_id";
     readonly args: "";
@@ -1034,6 +1089,31 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_roots uuid[]";
     readonly returns: "TABLE(record_id uuid, depth integer, via text)";
     readonly security: "invoker";
+}, {
+    readonly name: "reaches_directly";
+    readonly args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "read_door_carried_ids";
+    readonly args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level, OUT o_ids uuid[], OUT o_containers integer";
+    readonly returns: "record";
+    readonly security: "definer";
+}, {
+    readonly name: "read_door_granted_ids";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "uuid[]";
+    readonly security: "definer";
+}, {
+    readonly name: "read_door_ladder_ceiling";
+    readonly args: "";
+    readonly returns: "integer";
+    readonly security: "invoker";
+}, {
+    readonly name: "read_door_parity";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_user uuid, p_required permission_level, p_sample integer";
+    readonly returns: "TABLE(record_id uuid, set_based boolean, per_row boolean, verdict text)";
+    readonly security: "definer";
 }, {
     readonly name: "read_paths_outside_the_door";
     readonly args: "";
@@ -1059,6 +1139,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_record_id uuid";
     readonly returns: "TABLE(rule_id uuid, rule_name text, rule_version integer, applies boolean, answer jsonb)";
     readonly security: "invoker";
+}, {
+    readonly name: "record_as_of";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_at timestamp with time zone";
+    readonly returns: "TABLE(state jsonb, replayed boolean)";
+    readonly security: "definer";
 }, {
     readonly name: "record_card";
     readonly args: "p_viewer uuid, p_organization_id uuid, p_record_id uuid";
@@ -1254,6 +1339,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_rule_id uuid";
     readonly returns: "integer";
     readonly security: "invoker";
+}, {
+    readonly name: "said";
+    readonly args: "p_value text, p_when_there_is_none text";
+    readonly returns: "text";
+    readonly security: "invoker";
 }, {
     readonly name: "share_access";
     readonly args: "p_organization_id uuid, p_subject_id uuid";
@@ -1294,6 +1384,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_type text, p_id uuid";
     readonly returns: "text";
     readonly security: "definer";
+}, {
+    readonly name: "shared_only_disagreements";
+    readonly args: "p_pretend text DEFAULT NULL::text";
+    readonly returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, record_id uuid, table_id uuid, ladder boolean, read_door boolean, rls_mirror boolean, why text)";
+    readonly security: "invoker";
 }, {
     readonly name: "size_refusal";
     readonly args: "p_organization_id uuid, p_data jsonb";
@@ -1339,6 +1434,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_spec jsonb";
     readonly returns: "uuid";
     readonly security: "definer";
+}, {
+    readonly name: "table_has_a_visible_record";
+    readonly args: "p_user uuid, p_organization_id uuid, p_table_id uuid";
+    readonly returns: "boolean";
+    readonly security: "definer";
 }, {
     readonly name: "table_is_live";
     readonly args: "p_organization_id uuid, p_table_id uuid";
@@ -1373,7 +1473,7 @@ declare const STORE_DOORS: readonly [{
     readonly name: "table_type_field";
     readonly args: "p_organization_id uuid, p_table_id uuid";
     readonly returns: "text";
-    readonly security: "invoker";
+    readonly security: "definer";
 }, {
     readonly name: "tables_at_home";
     readonly args: "p_organization_id uuid, p_home_ids uuid[]";
@@ -1428,7 +1528,7 @@ declare const STORE_DOORS: readonly [{
     readonly name: "value_read";
     readonly args: "p_organization_id uuid, p_record_id uuid, p_key text";
     readonly returns: "TABLE(field_key text, field_id uuid, value jsonb, value_version integer, source jsonb, absent_reason text, actor text, on_behalf_of text, written_at timestamp with time zone, alternates jsonb)";
-    readonly security: "invoker";
+    readonly security: "definer";
 }, {
     readonly name: "value_versions";
     readonly args: "p_old jsonb, p_new jsonb";
@@ -1459,11 +1559,21 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_container_type text, p_container_id uuid";
     readonly returns: "integer";
     readonly security: "definer";
+}, {
+    readonly name: "visible_predicate_sql";
+    readonly args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, p_alias text DEFAULT 'r'::text";
+    readonly returns: "text";
+    readonly security: "definer";
 }, {
     readonly name: "visible_record_ids";
     readonly args: "p_user_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level";
     readonly returns: "TABLE(id uuid)";
     readonly security: "definer";
+}, {
+    readonly name: "visible_set";
+    readonly args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, OUT o_all_visible boolean, OUT o_true_visibility platform.visibility[], OUT o_granted_all uuid[], OUT o_granted_visible uuid[], OUT o_carried_visible uuid[], OUT o_ladder_calls integer, OUT o_fallback boolean, OUT o_note text";
+    readonly returns: "record";
+    readonly security: "definer";
 }, {
     readonly name: "widget_kernel_id";
     readonly args: "";
@@ -1563,15 +1673,15 @@ declare const STORE_DOORS: readonly [{
 /** The campaign's own knobs, with the value the store resolves them to today. */
 declare const STORE_KNOBS: readonly [{
     readonly key: "accessible_entity_ids_guard";
-    readonly value: "false";
+    readonly value: "true";
     readonly type: "boolean";
 }, {
     readonly key: "agent_schema_changes";
-    readonly value: "\"propose\"";
+    readonly value: "\"ask\"";
     readonly type: "string";
 }, {
     readonly key: "associations_guard";
-    readonly value: "false";
+    readonly value: "true";
     readonly type: "boolean";
 }, {
     readonly key: "code_paths_enabled";
@@ -1652,7 +1762,7 @@ declare const STORE_KNOBS: readonly [{
 }, {
     readonly key: "member_default_level";
     readonly value: "\"viewer\"";
-    readonly type: "string";
+    readonly type: "enum";
 }, {
     readonly key: "member_default_visibility";
     readonly value: "\"all_records\"";
@@ -1722,22 +1832,22 @@ declare const STORE_REFUSAL_CODES: readonly [{
     readonly raised_by: "rule_eval";
 }, {
     readonly code: "22023";
-    readonly raised_by: "_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,doc_render_body,doc_render_write,doc_signature_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,io_import_open,io_proposal_accept,migrate_merge,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,table_rules,visibility_as_of,work_slot_hold";
+    readonly raised_by: "_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,doc_render_body,doc_render_write,doc_signature_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,io_import_open,io_proposal_accept,migrate_merge,my_levels,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,table_rules,visibility_as_of,work_slot_hold";
 }, {
     readonly code: "23503";
     readonly raised_by: "_containment_guard,_record_rule_uses,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,delete_rule,doc_sign,doc_template_save,home_add,io_comment_write,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_eval,rule_members,rule_run,work_take_assignment,work_template_instantiate";
 }, {
     readonly code: "23505";
-    readonly raised_by: "doc_sign,doc_signature_write,field_declare,home_add,io_proposal_accept,relation_carry,relation_own,share_grant,work_slot_hold";
+    readonly raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,field_declare,home_add,io_proposal_accept,relation_carry,relation_own,share_grant,work_slot_hold";
 }, {
     readonly code: "23514";
-    readonly raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,doc_sign,doc_signature_write,doc_template_save,field_declare,field_retire,field_update,home_add,migrate_merge,relation_carry,relation_own,validate_value_envelope,validate_values,work_slots_declare,work_take_assignment,work_template_instantiate";
+    readonly raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,doc_sign,doc_signature_write,doc_template_save,field_declare,field_retire,field_update,home_add,migrate_merge,relation_carry,relation_own,validate_value_envelope,validate_values,work_slots_declare,work_take_assignment,work_template_instantiate";
 }, {
     readonly code: "40001";
     readonly raised_by: "has_visibility_at";
 }, {
     readonly code: "42501";
-    readonly raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_organization_admin,assert_store_door,external_write_through,io_comment_resolve,io_comment_write,io_restore,migrate_purge,promote_table,query_visibility_parity,read_record,read_records,share_grant,visibility_as_of";
+    readonly raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,external_write_through,io_comment_resolve,io_comment_write,io_restore,migrate_purge,my_levels,promote_table,query_visibility_parity,read_record,read_records,share_grant,visibility_as_of";
 }, {
     readonly code: "53400";
     readonly raised_by: "anon_rate_take,delete_cascade_closure,promote_field";
@@ -2038,6 +2148,27 @@ interface RecordRead {
     }>;
 }
 
+/** `public.permission_level`, in the store's own order. */
+type PermissionLevel = "viewer" | "commenter" | "editor" | "admin";
+/** The order the store writes them in, lowest first. */
+declare const PERMISSION_LEVELS: readonly PermissionLevel[];
+/** Whether `held` is the same rung as `needed` or a higher one. Nothing held is never enough. */
+declare function atLeast(held: PermissionLevel | null | undefined, needed: PermissionLevel): boolean;
+/** A level word the store sent, or null when it sent something this package does not know. */
+declare function asPermissionLevel(word: unknown): PermissionLevel | null;
+/** The higher of two levels — what a person holds when two ways in both let them through. */
+declare function highestLevel(left: PermissionLevel | null | undefined, right: PermissionLevel | null | undefined): PermissionLevel | null;
+/**
+ * What one subject's level is, as `custom.my_levels` answers it. `null` is an
+ * ANSWER — "you hold nothing on this" — and never a missing row: a screen that
+ * could not tell "no access" from "not asked yet" would draw one of them as the
+ * other.
+ */
+interface MyLevel {
+    id: string;
+    level: PermissionLevel | null;
+}
+
 /**
  * REC-1. A Table declares its fields, exactly one Home, and the properties
  * `display`, `ordered`, `heavy` | `light`, `retention` and `detail`.
@@ -3081,4 +3212,4 @@ interface RecordsConfig {
     schema?: string;
 }
 
-export { ABSENCE_REASONS, ACTOR_VOCABULARY, type AbsenceReason, type Actor, type AggregateBucket, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AnonTokenBinding, COMPUTE_ON, CONTEXT_POLICIES, type ComputeOn, type ContextPolicy, DELIVERIES, type Delivery, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, ENTITY_TOKENS, type EntityToken, type ExternalPrincipalCard, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, type Field, type FieldBehavior, type FieldPatch, type FieldProposal, type FieldRule, type FieldSensitivity, type FieldSource, type ForbiddenEnvelopeWord, type Freshness, type HiddenFieldNotice, type Home, KERNEL_TABLES, type KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, type MergeField, type MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, type MergeFieldSemanticType, type MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type NewFieldDeclaration, ON_DELETE, OVERRIDE_POLICIES, type OnDelete, type OverridePolicy, PARITY_FIELD_TYPES, PER_VALUE_ACCESS_WORDS, type ParityFieldType, type ParityFieldTypeDescriptor, type PerValueAccessWord, type PgError, type PredictedRefusal, type ProvenancePointer, type PublishBinding, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, type ReadRow, type ReadValue, type RecordDocument, type RecordRead, type RecordRevision, type RecordsActor, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, type RecordsTableQuery, type RegisteredTable, type Relation, type RelationBinding, type RelationCardinality, type RelationCarries, type RelationCoordinate, type RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RetiredActorWord, type Rule, type RuleAnswer, type RuleExpression, type RuleNodeKind, type RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, type StaleWriteDetail, type StorageMode, type StoreDoorName, type StoreRefusalCode, type StoredRecord, type Subscription, type SubscriptionBlock, type SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, type Table, type TableCapacity, type TableDisplay, type TableOrigin, type TableProposal, type TableType, type Timestamp, type Uuid, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, type ValueAlternate, type ValueAlternateKey, type ValueEnvelope, type ValueEnvelopeKey, type ValueSource, type WorkAssignmentField, type WorkGraph, type WorkInstantiation, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, err, isRecordsErr, measureKey, ok };
+export { ABSENCE_REASONS, ACTOR_VOCABULARY, type AbsenceReason, type Actor, type AggregateBucket, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AnonTokenBinding, COMPUTE_ON, CONTEXT_POLICIES, type ComputeOn, type ContextPolicy, DELIVERIES, type Delivery, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, ENTITY_TOKENS, type EntityToken, type ExternalPrincipalCard, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, type Field, type FieldBehavior, type FieldPatch, type FieldProposal, type FieldRule, type FieldSensitivity, type FieldSource, type ForbiddenEnvelopeWord, type Freshness, type HiddenFieldNotice, type Home, KERNEL_TABLES, type KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, type MergeField, type MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, type MergeFieldSemanticType, type MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type MyLevel, type NewFieldDeclaration, ON_DELETE, OVERRIDE_POLICIES, type OnDelete, type OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, type ParityFieldType, type ParityFieldTypeDescriptor, type PerValueAccessWord, type PermissionLevel, type PgError, type PredictedRefusal, type ProvenancePointer, type PublishBinding, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, type ReadRow, type ReadValue, type RecordDocument, type RecordRead, type RecordRevision, type RecordsActor, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, type RecordsTableQuery, type RegisteredTable, type Relation, type RelationBinding, type RelationCardinality, type RelationCarries, type RelationCoordinate, type RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RetiredActorWord, type Rule, type RuleAnswer, type RuleExpression, type RuleNodeKind, type RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, type StaleWriteDetail, type StorageMode, type StoreDoorName, type StoreRefusalCode, type StoredRecord, type Subscription, type SubscriptionBlock, type SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, type Table, type TableCapacity, type TableDisplay, type TableOrigin, type TableProposal, type TableType, type Timestamp, type Uuid, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, type ValueAlternate, type ValueAlternateKey, type ValueEnvelope, type ValueEnvelopeKey, type ValueSource, type WorkAssignmentField, type WorkGraph, type WorkInstantiation, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, asPermissionLevel, atLeast, err, highestLevel, isRecordsErr, measureKey, ok };

package/dist/index.js

@@ -54,6 +54,33 @@ var OVERRIDE_POLICIES = [
 var FRESHNESS = ["live", "cached", "snapshot"];
 var TABLE_DISPLAYS = ["list", "grid", "board", "calendar", "timeline"];
 
+// src/level.ts
+var PERMISSION_LEVELS = [
+  "viewer",
+  "commenter",
+  "editor",
+  "admin"
+];
+var ORDINAL = {
+  viewer: 1,
+  commenter: 2,
+  editor: 3,
+  admin: 4
+};
+function atLeast(held, needed) {
+  if (!held) return false;
+  const have = ORDINAL[held];
+  return have !== void 0 && have >= ORDINAL[needed];
+}
+function asPermissionLevel(word) {
+  return typeof word === "string" && word in ORDINAL ? word : null;
+}
+function highestLevel(left, right) {
+  if (!left) return right ?? null;
+  if (!right) return left;
+  return ORDINAL[left] >= ORDINAL[right] ? left : right;
+}
+
 // src/aggregate.ts
 function measureKey(measure) {
   return measure.op === "count" ? "count" : `${measure.op}_${measure.key ?? ""}`;
@@ -128,7 +155,9 @@ var STORE_DOORS = [
   { name: "absence_reasons", args: "", returns: "text[]", security: "invoker" },
   { name: "actor_vocabulary", args: "", returns: "text[]", security: "invoker" },
   { name: "actor_word", args: "p_declared text", returns: "text", security: "invoker" },
+  { name: "agent_change_approval", args: "p_organization uuid, p_conversation uuid DEFAULT NULL::uuid, p_table uuid DEFAULT NULL::uuid", returns: "jsonb", security: "definer" },
   { name: "agent_context", args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 50", returns: "jsonb", security: "invoker" },
+  { name: "agent_table_claim", args: "p_organization uuid, p_table uuid, p_conversation uuid DEFAULT NULL::uuid", returns: "void", security: "definer" },
   { name: "agg_assert_key", args: "p_key text", returns: "text", security: "invoker" },
   { name: "agg_buckets", args: "", returns: "text[]", security: "invoker" },
   { name: "agg_deliver", args: "p_organization_id uuid, p_rule_id uuid, p_record_id uuid, p_channel text, p_recipient_user_id uuid, p_event_key text, p_subject text, p_body text, p_payload jsonb DEFAULT '{}'::jsonb", returns: "uuid", security: "invoker" },
@@ -146,6 +175,7 @@ var STORE_DOORS = [
   { name: "anon_inbound_land", args: "p_address text, p_secret text, p_payload jsonb, p_raw_payload jsonb DEFAULT '{}'::jsonb, p_client_key text DEFAULT NULL::text", returns: "uuid", security: "definer" },
   { name: "anon_publish", args: "p_organization_id uuid, p_form_id uuid, p_published boolean DEFAULT true", returns: "timestamp with time zone", security: "definer" },
   { name: "anon_rate_take", args: "p_organization_id uuid, p_form_id uuid, p_bucket text, p_token_id uuid DEFAULT NULL::uuid", returns: "integer", security: "definer" },
+  { name: "anon_submissions", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_state text DEFAULT NULL::text, p_limit integer DEFAULT 100, p_offset integer DEFAULT 0", returns: "TABLE(id uuid, form_id uuid, inbound_id uuid, table_id uuid, source text, state text, payload jsonb, raw_payload jsonb, client_key text, record_id uuid, remote_origin text, rejection_reason text, created_at timestamp with time zone, cleared_at timestamp with time zone)", security: "definer" },
   { name: "anon_token_issue", args: "p_organization_id uuid, p_mode text, p_allowed_origins jsonb, p_form_id uuid DEFAULT NULL::uuid, p_saved_view_id uuid DEFAULT NULL::uuid, p_record_id uuid DEFAULT NULL::uuid, p_expires_at timestamp with time zone DEFAULT NULL::timestamp with time zone", returns: "TABLE(token_id uuid, secret text)", security: "definer" },
   { name: "anon_token_revoke", args: "p_organization_id uuid, p_token_id uuid", returns: "boolean", security: "definer" },
   { name: "anon_token_verify", args: "p_secret text, p_origin text, p_required_mode text", returns: "TABLE(token_id uuid, organization_id uuid, form_id uuid, saved_view_id uuid, record_id uuid, mode text)", security: "definer" },
@@ -161,6 +191,8 @@ var STORE_DOORS = [
   { name: "bump_epoch", args: "p_entity_type text, p_entity_id uuid, p_organization_id uuid DEFAULT NULL::uuid", returns: "bigint", security: "definer" },
   { name: "cache_lookup", args: "p_container_type text, p_container_id uuid, p_item_type text, p_item_id uuid", returns: "permission_level", security: "definer" },
   { name: "caller_role", args: "", returns: "name", security: "invoker" },
+  { name: "carrying_edges_in", args: "p_organization_id uuid", returns: "TABLE(container_type text, container_id uuid, item_type text, item_id uuid, conveys_max permission_level)", security: "definer" },
+  { name: "carrying_edges_of", args: "p_item_type text, p_item_id uuid", returns: "TABLE(container_type text, container_id uuid, conveys_max permission_level)", security: "definer" },
   { name: "client_write_grants", args: "", returns: "TABLE(role_name text, object_name text, privilege text)", security: "invoker" },
   { name: "computed_provenance", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(field_key text, field_id uuid, value jsonb, rule_id uuid, rule_version integer, computed_at timestamp with time zone)", security: "invoker" },
   { name: "containment_chain", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(ancestor_id uuid, depth integer)", security: "invoker" },
@@ -170,6 +202,7 @@ var STORE_DOORS = [
   { name: "cross_organization_links_open", args: "p_source_organization_id uuid, p_target_organization_id uuid", returns: "boolean", security: "invoker" },
   { name: "custom_fields_tables", args: "", returns: "TABLE(token text, schema_name text, table_name text)", security: "invoker" },
   { name: "delete_cascade_closure", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid[]", security: "invoker" },
+  { name: "delete_preview", args: "p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "definer" },
   { name: "delete_rule", args: "p_organization_id uuid, p_record_id uuid, p_apply boolean DEFAULT true", returns: "jsonb", security: "definer" },
   { name: "dependency_cycle", args: "p_organization_id uuid, p_row custom.record", returns: "text[]", security: "invoker" },
   { name: "dependency_label", args: "p_organization_id uuid, p_node text", returns: "text", security: "invoker" },
@@ -204,7 +237,7 @@ var STORE_DOORS = [
   { name: "external_writes_set", args: "p_organization_id uuid, p_source_id uuid, p_enabled boolean", returns: "boolean", security: "definer" },
   { name: "field_behaviour", args: "p_field_data jsonb", returns: "text", security: "invoker" },
   { name: "field_declare", args: "p_organization_id uuid, p_table_id uuid, p_spec jsonb", returns: "uuid", security: "definer" },
-  { name: "field_dependants", args: "p_organization_id uuid, p_field_id uuid", returns: "TABLE(kind text, dependant_id uuid, label text, how text)", security: "invoker" },
+  { name: "field_dependants", args: "p_organization_id uuid, p_field_id uuid", returns: "TABLE(kind text, dependant_id uuid, label text, how text)", security: "definer" },
   { name: "field_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "field_options", args: "p_organization_id uuid, p_field_id uuid", returns: "SETOF custom.record", security: "definer" },
   { name: "field_retire", args: "p_organization_id uuid, p_field_id uuid", returns: "boolean", security: "definer" },
@@ -213,6 +246,7 @@ var STORE_DOORS = [
   { name: "field_value_convert", args: "p_to jsonb, p_value jsonb", returns: "jsonb", security: "invoker" },
   { name: "file_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "formula_value", args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb, p_values jsonb DEFAULT NULL::jsonb", returns: "jsonb", security: "invoker" },
+  { name: "guard_refusals_are_complete", args: "", returns: "TABLE(guard text, said text)", security: "invoker" },
   { name: "has_visibility", args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
   { name: "has_visibility_at", args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, p_organization_id uuid DEFAULT NULL::uuid, p_min_version bigint DEFAULT NULL::bigint", returns: "boolean", security: "definer" },
   { name: "hidden_field_notice", args: "p_field custom.record, p_action text DEFAULT 'read'::text", returns: "jsonb", security: "invoker" },
@@ -244,6 +278,7 @@ var STORE_DOORS = [
   { name: "io_record_changed", args: "", returns: "trigger", security: "definer" },
   { name: "io_restore", args: "p_organization_id uuid, p_record_id uuid, p_version integer", returns: "integer", security: "definer" },
   { name: "io_revisions", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(version integer, changed_at timestamp with time zone, changed_by uuid, summary text, operation text, changed_fields jsonb)", security: "definer" },
+  { name: "is_a_retirement", args: "p_old_deleted timestamp with time zone, p_new_deleted timestamp with time zone, p_old_data jsonb, p_new_data jsonb, p_old_table uuid, p_new_table uuid, p_old_org uuid, p_new_org uuid, p_old_class text, p_new_class text", returns: "boolean", security: "invoker" },
   { name: "lookup_value", args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb", returns: "jsonb", security: "invoker" },
   { name: "mask_document", args: "p_document jsonb, p_visible_keys text[], p_notices jsonb, p_by_id boolean DEFAULT false, p_key_ids jsonb DEFAULT '{}'::jsonb", returns: "jsonb", security: "invoker" },
   { name: "mask_document", args: "p_document jsonb, p_visible_keys text[], p_notices jsonb, p_by_id boolean DEFAULT false, p_key_ids jsonb DEFAULT '{}'::jsonb, p_declared_keys text[] DEFAULT NULL::text[]", returns: "jsonb", security: "invoker" },
@@ -256,9 +291,12 @@ var STORE_DOORS = [
   { name: "migrate_purge", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_dry_run boolean DEFAULT true", returns: "jsonb", security: "definer" },
   { name: "migrate_rename", args: "p_organization_id uuid, p_id uuid, p_to text, p_note text DEFAULT NULL::text", returns: "jsonb", security: "definer" },
   { name: "migrate_reparent", args: "p_organization_id uuid, p_id uuid, p_parent_id uuid, p_note text DEFAULT NULL::text", returns: "jsonb", security: "definer" },
-  { name: "migrate_retype", args: "p_organization_id uuid, p_id uuid, p_to text, p_note text DEFAULT NULL::text", returns: "jsonb", security: "invoker" },
+  { name: "migrate_retype", args: "p_organization_id uuid, p_id uuid, p_to text, p_note text DEFAULT NULL::text", returns: "jsonb", security: "definer" },
   { name: "migrate_split", args: "p_organization_id uuid, p_record_id uuid, p_moved_keys text[], p_note text DEFAULT NULL::text", returns: "jsonb", security: "definer" },
   { name: "migrate_undo", args: "p_organization_id uuid, p_log_id uuid", returns: "jsonb", security: "definer" },
+  { name: "migrations", args: "p_organization_id uuid, p_target_id uuid DEFAULT NULL::uuid, p_limit integer DEFAULT 100", returns: "TABLE(id uuid, verb text, target_kind text, target_id uuid, note text, applied_at timestamp with time zone, applied_by uuid, undone_at timestamp with time zone)", security: "definer" },
+  { name: "my_level", args: "p_organization_id uuid, p_id uuid, p_type text DEFAULT 'record'::text", returns: "permission_level", security: "definer" },
+  { name: "my_levels", args: "p_organization_id uuid, p_ids jsonb, p_type text DEFAULT 'record'::text", returns: "TABLE(id uuid, level permission_level)", security: "definer" },
   { name: "organization_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "organization_references", args: "p_kind text, p_organization_id uuid, p_row jsonb", returns: "TABLE(site text, what text, ref_id uuid, openable boolean)", security: "invoker" },
   { name: "owning_table", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "invoker" },
@@ -299,11 +337,17 @@ var STORE_DOORS = [
   { name: "query_visibility_parity", args: "p_organization_id uuid", returns: "TABLE(side text, container_type text, container_id uuid, item_type text, item_id uuid, stored_level permission_level, derived_level permission_level, reason text)", security: "definer" },
   { name: "query_visible_ids", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_required text DEFAULT 'viewer'::text", returns: "SETOF uuid", security: "definer" },
   { name: "reachable_from", args: "p_organization_id uuid, p_roots uuid[]", returns: "TABLE(record_id uuid, depth integer, via text)", security: "invoker" },
+  { name: "reaches_directly", args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
+  { name: "read_door_carried_ids", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level, OUT o_ids uuid[], OUT o_containers integer", returns: "record", security: "definer" },
+  { name: "read_door_granted_ids", args: "p_organization_id uuid, p_table_id uuid", returns: "uuid[]", security: "definer" },
+  { name: "read_door_ladder_ceiling", args: "", returns: "integer", security: "invoker" },
+  { name: "read_door_parity", args: "p_organization_id uuid, p_table_id uuid, p_user uuid, p_required permission_level, p_sample integer", returns: "TABLE(record_id uuid, set_based boolean, per_row boolean, verdict text)", security: "definer" },
   { name: "read_paths_outside_the_door", args: "", returns: "TABLE(object_name text, why text)", security: "invoker" },
   { name: "read_record", args: "p_organization_id uuid, p_record_id uuid, p_by_id boolean DEFAULT false", returns: "jsonb", security: "definer" },
   { name: "read_records", args: "p_organization_id uuid, p_table_id uuid, p_by_id boolean DEFAULT false, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0", returns: "TABLE(id uuid, document jsonb, level permission_level)", security: "definer" },
   { name: "record_aggregate", args: "p_organization_id uuid, p_table_id uuid, p_group_by jsonb DEFAULT '[]'::jsonb, p_measures jsonb DEFAULT '[]'::jsonb, p_bucket jsonb DEFAULT NULL::jsonb, p_filter jsonb DEFAULT '{}'::jsonb, p_limit integer DEFAULT 200, p_required text DEFAULT 'viewer'::text", returns: "TABLE(groups jsonb, measures jsonb, row_count bigint)", security: "definer" },
   { name: "record_applicability", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(rule_id uuid, rule_name text, rule_version integer, applies boolean, answer jsonb)", security: "invoker" },
+  { name: "record_as_of", args: "p_organization_id uuid, p_record_id uuid, p_at timestamp with time zone", returns: "TABLE(state jsonb, replayed boolean)", security: "definer" },
   { name: "record_card", args: "p_viewer uuid, p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "definer" },
   { name: "record_carrying_edges", args: "p_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(container_id uuid, item_id uuid, edge_role text)", security: "invoker" },
   { name: "record_delete", args: "p_organization_id uuid, p_record_id uuid", returns: "timestamp with time zone", security: "definer" },
@@ -343,6 +387,7 @@ var STORE_DOORS = [
   { name: "rule_truth", args: "p_answer jsonb", returns: "boolean", security: "invoker" },
   { name: "rule_uses", args: "", returns: "text[]", security: "invoker" },
   { name: "rule_version", args: "p_organization_id uuid, p_rule_id uuid", returns: "integer", security: "invoker" },
+  { name: "said", args: "p_value text, p_when_there_is_none text", returns: "text", security: "invoker" },
   { name: "share_access", args: "p_organization_id uuid, p_subject_id uuid", returns: "TABLE(principal_kind text, principal_id uuid, principal_label text, level permission_level, reason text, reason_detail text, via_type text, via_id uuid, revocable boolean)", security: "definer" },
   { name: "share_grant", args: "p_organization_id uuid, p_subject_id uuid, p_principal_kind text, p_principal_id uuid, p_level permission_level DEFAULT 'viewer'::permission_level", returns: "jsonb", security: "definer" },
   { name: "share_lane_set", args: "p_organization_id uuid, p_subject_id uuid, p_choice text, p_level permission_level DEFAULT NULL::permission_level", returns: "jsonb", security: "definer" },
@@ -351,6 +396,7 @@ var STORE_DOORS = [
   { name: "share_people", args: "p_organization_id uuid, p_subject_id uuid DEFAULT NULL::uuid, p_query text DEFAULT NULL::text, p_limit integer DEFAULT 25", returns: "TABLE(user_id uuid, email text, display_name text, membership text, already_at permission_level, already_why text)", security: "definer" },
   { name: "share_revoke", args: "p_organization_id uuid, p_subject_id uuid, p_principal_kind text, p_principal_id uuid", returns: "jsonb", security: "definer" },
   { name: "share_subject_name", args: "p_organization_id uuid, p_type text, p_id uuid", returns: "text", security: "definer" },
+  { name: "shared_only_disagreements", args: "p_pretend text DEFAULT NULL::text", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, record_id uuid, table_id uuid, ladder boolean, read_door boolean, rls_mirror boolean, why text)", security: "invoker" },
   { name: "size_refusal", args: "p_organization_id uuid, p_data jsonb", returns: "text", security: "invoker" },
   { name: "source_next_pointer", args: "p_sources jsonb", returns: "text", security: "invoker" },
   { name: "source_pointer", args: "p_sources jsonb, p_source jsonb", returns: "text", security: "invoker" },
@@ -360,13 +406,14 @@ var STORE_DOORS = [
   { name: "table_capacity", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "table_contents", args: "p_organization_id uuid, p_table_id uuid", returns: "TABLE(record_id uuid, kind text, goes_at integer)", security: "invoker" },
   { name: "table_declare", args: "p_organization_id uuid, p_spec jsonb", returns: "uuid", security: "definer" },
+  { name: "table_has_a_visible_record", args: "p_user uuid, p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "definer" },
   { name: "table_is_live", args: "p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "invoker" },
   { name: "table_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "table_record_ceiling", args: "", returns: "integer", security: "invoker" },
   { name: "table_record_ceiling", args: "p_organization_id uuid", returns: "integer", security: "invoker" },
   { name: "table_rules", args: "p_organization_id uuid, p_table_id uuid, p_use text, p_record_type text DEFAULT NULL::text", returns: "SETOF custom.record", security: "invoker" },
   { name: "table_storage", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
-  { name: "table_type_field", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
+  { name: "table_type_field", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "definer" },
   { name: "tables_at_home", args: "p_organization_id uuid, p_home_ids uuid[]", returns: "TABLE(table_id uuid, home_record_id uuid, kind text)", security: "definer" },
   { name: "tables_described_without_asking", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "trg_associations_bump_visibility", args: "", returns: "trigger", security: "definer" },
@@ -377,14 +424,16 @@ var STORE_DOORS = [
   { name: "value_envelope_keys", args: "", returns: "text[]", security: "invoker" },
   { name: "value_envelope_ok", args: "p_data jsonb", returns: "boolean", security: "invoker" },
   { name: "value_envelope_refusal", args: "p_data jsonb", returns: "text", security: "invoker" },
-  { name: "value_read", args: "p_organization_id uuid, p_record_id uuid, p_key text", returns: "TABLE(field_key text, field_id uuid, value jsonb, value_version integer, source jsonb, absent_reason text, actor text, on_behalf_of text, written_at timestamp with time zone, alternates jsonb)", security: "invoker" },
+  { name: "value_read", args: "p_organization_id uuid, p_record_id uuid, p_key text", returns: "TABLE(field_key text, field_id uuid, value jsonb, value_version integer, source jsonb, absent_reason text, actor text, on_behalf_of text, written_at timestamp with time zone, alternates jsonb)", security: "definer" },
   { name: "value_versions", args: "p_old jsonb, p_new jsonb", returns: "jsonb", security: "invoker" },
   { name: "visibility_ancestors", args: "p_item_type text, p_item_id uuid", returns: "TABLE(container_type text, container_id uuid, depth integer, max_level permission_level)", security: "definer" },
   { name: "visibility_as_of", args: "p_organization_id uuid, p_record_id uuid, p_at timestamp with time zone", returns: "TABLE(principal_kind text, principal_id uuid, level permission_level, through_kind text, through_id uuid, reason text, replayed boolean, held_from timestamp with time zone, held_to timestamp with time zone)", security: "definer" },
   { name: "visibility_cache_rebuild", args: "", returns: "integer", security: "definer" },
   { name: "visibility_parity", args: "", returns: "TABLE(side text, container_type text, container_id uuid, item_type text, item_id uuid, stored_level permission_level, derived_level permission_level, reason text)", security: "definer" },
   { name: "visibility_warm", args: "p_container_type text, p_container_id uuid", returns: "integer", security: "definer" },
+  { name: "visible_predicate_sql", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, p_alias text DEFAULT 'r'::text", returns: "text", security: "definer" },
   { name: "visible_record_ids", args: "p_user_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "TABLE(id uuid)", security: "definer" },
+  { name: "visible_set", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, OUT o_all_visible boolean, OUT o_true_visibility platform.visibility[], OUT o_granted_all uuid[], OUT o_granted_visible uuid[], OUT o_carried_visible uuid[], OUT o_ladder_calls integer, OUT o_fallback boolean, OUT o_note text", returns: "record", security: "definer" },
   { name: "widget_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "work_assignment_fields", args: "p_options_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(key text, label text, spec jsonb)", security: "invoker" },
   { name: "work_has_assignment", args: "p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "invoker" },
@@ -406,9 +455,9 @@ var STORE_DOORS = [
   { name: "work_whose_turn", args: "p_organization_id uuid, p_table_id uuid, p_include_finished boolean DEFAULT false", returns: "TABLE(record_id uuid, title text, assignee_id uuid, turn text, due_on timestamp with time zone, state text, status text, terminal boolean)", security: "invoker" }
 ];
 var STORE_KNOBS = [
-  { key: "accessible_entity_ids_guard", value: "false", type: "boolean" },
-  { key: "agent_schema_changes", value: '"propose"', type: "string" },
-  { key: "associations_guard", value: "false", type: "boolean" },
+  { key: "accessible_entity_ids_guard", value: "true", type: "boolean" },
+  { key: "agent_schema_changes", value: '"ask"', type: "string" },
+  { key: "associations_guard", value: "true", type: "boolean" },
   { key: "code_paths_enabled", value: "false", type: "boolean" },
   { key: "consumer_chat_seeding_enabled", value: "false", type: "boolean" },
   { key: "consumer_checkout_enabled", value: "false", type: "boolean" },
@@ -428,7 +477,7 @@ var STORE_KNOBS = [
   { key: "external_principal_enabled", value: "false", type: "boolean" },
   { key: "field_index_guard", value: "false", type: "boolean" },
   { key: "field_sensitivity_levels", value: '{"edit": {"public": "editor", "internal": "editor", "restricted": "admin", "confidential": "admin"}, "read": {"public": "viewer", "internal": "viewer", "restricted": "admin", "confidential": "editor"}}', type: "json" },
-  { key: "member_default_level", value: '"viewer"', type: "string" },
+  { key: "member_default_level", value: '"viewer"', type: "enum" },
   { key: "member_default_visibility", value: '"all_records"', type: "enum" },
   { key: "records_tool_default", value: "true", type: "boolean" },
   { key: "row_versions_guard", value: "false", type: "boolean" },
@@ -447,12 +496,12 @@ var STORE_REFUSAL_CODES = [
   { code: "0A000", raised_by: "external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_slots_declare" },
   { code: "22004", raised_by: "_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,doc_render_write,doc_sign,doc_signature_write,doc_template_save,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,home_add,io_comment_write,io_import_open,io_outbox_drain,io_restore,migrate_purge,migrate_split,migrate_undo,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,relation_carry,relation_own,share_grant,table_declare,work_template_declare" },
   { code: "22012", raised_by: "rule_eval" },
-  { code: "22023", raised_by: "_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,doc_render_body,doc_render_write,doc_signature_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,io_import_open,io_proposal_accept,migrate_merge,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,table_rules,visibility_as_of,work_slot_hold" },
+  { code: "22023", raised_by: "_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,doc_render_body,doc_render_write,doc_signature_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,io_import_open,io_proposal_accept,migrate_merge,my_levels,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,table_rules,visibility_as_of,work_slot_hold" },
   { code: "23503", raised_by: "_containment_guard,_record_rule_uses,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,delete_rule,doc_sign,doc_template_save,home_add,io_comment_write,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_eval,rule_members,rule_run,work_take_assignment,work_template_instantiate" },
-  { code: "23505", raised_by: "doc_sign,doc_signature_write,field_declare,home_add,io_proposal_accept,relation_carry,relation_own,share_grant,work_slot_hold" },
-  { code: "23514", raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,doc_sign,doc_signature_write,doc_template_save,field_declare,field_retire,field_update,home_add,migrate_merge,relation_carry,relation_own,validate_value_envelope,validate_values,work_slots_declare,work_take_assignment,work_template_instantiate" },
+  { code: "23505", raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,field_declare,home_add,io_proposal_accept,relation_carry,relation_own,share_grant,work_slot_hold" },
+  { code: "23514", raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,doc_sign,doc_signature_write,doc_template_save,field_declare,field_retire,field_update,home_add,migrate_merge,relation_carry,relation_own,validate_value_envelope,validate_values,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
-  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_organization_admin,assert_store_door,external_write_through,io_comment_resolve,io_comment_write,io_restore,migrate_purge,promote_table,query_visibility_parity,read_record,read_records,share_grant,visibility_as_of" },
+  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,external_write_through,io_comment_resolve,io_comment_write,io_restore,migrate_purge,my_levels,promote_table,query_visibility_parity,read_record,read_records,share_grant,visibility_as_of" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,promote_field" },
   { code: "54001", raised_by: "record_delete" },
   { code: "PT409", raised_by: "record_update" }
@@ -1496,6 +1545,7 @@ export {
   ON_DELETE,
   OVERRIDE_POLICIES,
   PARITY_FIELD_TYPES,
+  PERMISSION_LEVELS,
   PER_VALUE_ACCESS_WORDS,
   RELATION_BINDINGS,
   RELATION_CARDINALITIES,
@@ -1512,7 +1562,10 @@ export {
   TABLE_TYPES,
   VALUE_ALTERNATE_KEYS,
   VALUE_ENVELOPE_KEYS,
+  asPermissionLevel,
+  atLeast,
   err,
+  highestLevel,
   isRecordsErr,
   measureKey,
   ok