@ai-matrx/records 0.7.2 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,55 @@
 # Changelog — @ai-matrx/records
 
+## 0.11.0
+
+**The publish gate stops red-lighting on other lanes' migrations.** `the
+generated door catalogue is the store's` asserted `STORE_DOORS.length === live`,
+so every publish failed in which anybody anywhere had shipped a new `custom`
+routine — 337 mirrored against 342 live on 2026-09-20, and not one of the five
+was this package's. A release that red-lights on somebody else's work teaches
+everyone to ignore red.
+
+What the package must be right about is asserted and still gates: **every door
+this mirror names exists in the live store**. A name here the store does not
+have is this package claiming a door it cannot open, which is the whole reason
+`store.generated.ts` is generated rather than typed. Doors the store has and the
+mirror has not seen are REPORTED by name, loudly, and gate nothing.
+
+### Consumer action
+
+None. No API changed.
+
+## 0.10.0
+
+**The work layer has client doors, and this package can reach them.** Until lane
+WORK-DOORS (2026-09-20) all nineteen `custom.work_*` functions were SECURITY
+INVOKER, held no EXECUTE for `authenticated` and carried zero rows in
+`platform.client_callable_door`: REC-69 (assignment and action state), REC-70
+(template instantiation) and REC-71 (the slot hold) were live in the store and
+unreachable from a browser. Thirteen new client methods, all against doors that
+ask the one ladder first:
+
+* `workInbox` — **THE ONE QUEUE.** Assignments, approvals and the agent's
+  proposals in one ordered list with one row shape (PRODUCTS.md row 6).
+* `workList` — "my work", "work I assigned", "waiting on somebody being chosen",
+  across every Table in the organization, every row decided by the one ladder.
+* `workAssign` — the Assignee value AND editor access, in one transaction. An
+  assignment that did not give access put a row in somebody's inbox that they
+  were refused when they opened it.
+* `workRecordStates` / `workSetState` — the moves the workflow model allows, with
+  the sentence for each one it does not, so a screen offers real moves.
+* `workApprovalRequest` / `workApprovalMayDecide` / `workApprovalDecide` /
+  `workApprovalRead` / `workApprovalApprovers` — asking for a change instead of
+  making it, and a decision that **applies** the change in the same transaction.
+* `workPerson`, `workTemplates`.
+
+New types in `work.ts`: `WorkInboxItem`, `WorkListItem`, `WorkRecordState`,
+`WorkApprover`, `WorkApprovalFiled`, `WorkApprovalDecision`, `WorkAssignment`,
+`WorkChange`, `WorkInboxKind`, `WorkOrigin`, `WorkDueState`, `WorkListFlavour`.
+
+**Consumer action:** none required — every addition is new surface. A host that
+wants the inbox takes `@ai-matrx/records-ui` 0.15.0 with it.
+
 ## 0.7.2
 
 **The door catalogue, regenerated while the store was still growing.** 0.7.1

package/dist/core/index.cjs

@@ -93,6 +93,7 @@ __export(core_exports, {
   predictSizeRefusal: () => predictSizeRefusal,
   predictValueRefusals: () => predictValueRefusals,
   predictWriteRefusals: () => predictWriteRefusals,
+  publicFormPath: () => publicFormPath,
   staleWriteDetail: () => staleWriteDetail,
   supabaseDataSource: () => supabaseDataSource,
   toAoa: () => toAoa
@@ -182,6 +183,11 @@ function highestLevel(left, right) {
   return ORDINAL[left] >= ORDINAL[right] ? left : right;
 }
 
+// src/rule.ts
+function publicFormPath(formId) {
+  return `/f/${formId}`;
+}
+
 // src/aggregate.ts
 function measureKey(measure) {
   return measure.op === "count" ? "count" : `${measure.op}_${measure.key ?? ""}`;
@@ -285,6 +291,8 @@ var STORE_DOORS = [
   { name: "assert_client_may_change", args: "p_organization_id uuid, p_subject_id uuid, p_door text, p_required permission_level DEFAULT 'editor'::permission_level, p_subject_word text DEFAULT 'record'::text", returns: "void", security: "invoker" },
   { name: "assert_client_may_open", args: "p_organization_id uuid, p_subject_id uuid, p_door text, p_required permission_level DEFAULT 'viewer'::permission_level, p_subject_word text DEFAULT 'record'::text", returns: "void", security: "invoker" },
   { name: "assert_client_may_reach", args: "p_organization_id uuid, p_door text", returns: "void", security: "invoker" },
+  { name: "assert_entity_door", args: "p_organization_id uuid, p_door text", returns: "void", security: "definer" },
+  { name: "assert_entity_is_organization_scoped", args: "p_token text, p_label text, p_scoped boolean", returns: "void", security: "invoker" },
   { name: "assert_may_know_table", args: "p_organization_id uuid, p_table_id uuid, p_door text", returns: "void", security: "invoker" },
   { name: "assert_organization_admin", args: "p_organization_id uuid, p_door text, p_what text", returns: "void", security: "invoker" },
   { name: "assert_organization_wall", args: "p_kind text, p_organization_id uuid, p_row jsonb", returns: "void", security: "invoker" },
@@ -314,11 +322,14 @@ var STORE_DOORS = [
   { name: "doc_format_value", args: "p_field_data jsonb, p_value jsonb", returns: "text", security: "invoker" },
   { name: "doc_render_body", args: "p_organization_id uuid, p_template_id uuid, p_record_id uuid", returns: "text", security: "invoker" },
   { name: "doc_render_document", args: "p_organization_id uuid, p_template_id uuid, p_record_id uuid", returns: "uuid", security: "definer" },
+  { name: "doc_render_read", args: "p_organization_id uuid, p_render_id uuid", returns: "jsonb", security: "definer" },
   { name: "doc_render_write", args: "p_organization_id uuid, p_template_id uuid, p_record_id uuid, p_table_id uuid, p_template_version integer, p_body text, p_content_hash text", returns: "uuid", security: "definer" },
   { name: "doc_sign", args: "p_organization_id uuid, p_render_id uuid, p_field_key text, p_signer_name text, p_signer_user_id uuid DEFAULT NULL::uuid", returns: "uuid", security: "definer" },
   { name: "doc_signature_field_ok", args: "p_field_data jsonb", returns: "boolean", security: "invoker" },
   { name: "doc_signature_intact", args: "p_organization_id uuid, p_signature_id uuid", returns: "jsonb", security: "invoker" },
+  { name: "doc_signature_read", args: "p_organization_id uuid, p_signature_id uuid", returns: "jsonb", security: "definer" },
   { name: "doc_signature_write", args: "p_organization_id uuid, p_render_id uuid, p_record_id uuid, p_field_key text, p_signer_name text, p_signer_user_id uuid, p_document_hash text, p_document_version integer", returns: "uuid", security: "definer" },
+  { name: "doc_template_read", args: "p_organization_id uuid, p_template_id uuid", returns: "jsonb", security: "definer" },
   { name: "doc_template_save", args: "p_organization_id uuid, p_table_id uuid, p_name text, p_body text, p_template_id uuid DEFAULT NULL::uuid", returns: "uuid", security: "definer" },
   { name: "doc_token_pattern", args: "", returns: "text", security: "invoker" },
   { name: "doc_tokens", args: "p_body text", returns: "TABLE(ordinal integer, raw text, field_id uuid)", security: "invoker" },
@@ -327,6 +338,15 @@ var STORE_DOORS = [
   { name: "doors_not_deciding_the_record", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "doors_not_on_one_ladder", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "effective_level", args: "p_user_id uuid, p_organization_id uuid, p_id uuid, p_type text DEFAULT 'record'::text", returns: "permission_level", security: "definer" },
+  { name: "entity_field_declare", args: "p_organization_id uuid, p_token text, p_spec jsonb", returns: "uuid", security: "definer" },
+  { name: "entity_field_retire", args: "p_organization_id uuid, p_field_id uuid", returns: "uuid", security: "definer" },
+  { name: "entity_field_rights", args: "p_organization_id uuid, p_token text", returns: "jsonb", security: "definer" },
+  { name: "entity_field_update", args: "p_organization_id uuid, p_field_id uuid, p_patch jsonb", returns: "uuid", security: "definer" },
+  { name: "entity_fields", args: "p_organization_id uuid, p_token text", returns: "SETOF custom.record", security: "definer" },
+  { name: "entity_record_read", args: "p_organization_id uuid, p_token text, p_record_id uuid", returns: "jsonb", security: "invoker" },
+  { name: "entity_records_find", args: "p_organization_id uuid, p_token text, p_key text, p_value jsonb DEFAULT NULL::jsonb, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0", returns: "jsonb", security: "invoker" },
+  { name: "entity_table", args: "p_token text", returns: "TABLE(token text, schema_name text, table_name text, type text, title_column text, label text, has_organization boolean, has_deleted_at boolean)", security: "invoker" },
+  { name: "entity_value_write", args: "p_organization_id uuid, p_token text, p_record_id uuid, p_patch jsonb", returns: "jsonb", security: "invoker" },
   { name: "export_records", args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 1000", returns: "TABLE(id uuid, document jsonb)", security: "invoker" },
   { name: "external_foreign_table_findings", args: "", returns: "SETOF text", security: "definer" },
   { name: "external_history_event", args: "p_organization_id uuid, p_link_id uuid, p_operation text", returns: "bigint", security: "definer" },
@@ -346,6 +366,12 @@ var STORE_DOORS = [
   { name: "field_update", args: "p_organization_id uuid, p_field_id uuid, p_patch jsonb", returns: "uuid", security: "definer" },
   { name: "field_value_convert", args: "p_to jsonb, p_value jsonb", returns: "jsonb", security: "invoker" },
   { name: "file_kernel_id", args: "", returns: "uuid", security: "invoker" },
+  { name: "form_declare", args: "p_organization_id uuid, p_table_id uuid, p_title text, p_questions jsonb, p_presentation jsonb DEFAULT '{}'::jsonb, p_submission_cap integer DEFAULT NULL::integer, p_quarantine_rule_id uuid DEFAULT NULL::uuid, p_notify_rule_id uuid DEFAULT NULL::uuid, p_form_id uuid DEFAULT NULL::uuid, p_slug text DEFAULT NULL::text", returns: "uuid", security: "definer" },
+  { name: "form_notify", args: "p_organization_id uuid, p_form_id uuid, p_record_id uuid, p_submission_id uuid", returns: "uuid", security: "invoker" },
+  { name: "form_public", args: "p_form_id uuid", returns: "TABLE(form_id uuid, organization_id uuid, table_id uuid, title text, presentation jsonb, fields jsonb, honeypot_key text, state text, message text)", security: "definer" },
+  { name: "form_slug", args: "p_organization_id uuid, p_title text, p_form_id uuid DEFAULT NULL::uuid", returns: "text", security: "invoker" },
+  { name: "form_submit", args: "p_form_id uuid, p_origin text, p_payload jsonb, p_bucket text, p_honeypot text DEFAULT NULL::text, p_client_key text DEFAULT NULL::text", returns: "TABLE(submission_id uuid, record_id uuid, state text, message text)", security: "definer" },
+  { name: "forms", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(form_id uuid, table_id uuid, title text, slug text, published_at timestamp with time zone, closed_at timestamp with time zone, submission_cap integer, responses bigint, in_table bigint, held bigint, rejected bigint, state text, quarantine_rule_id uuid, notify_rule_id uuid, presentation jsonb)", security: "definer" },
   { name: "formula_value", args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb, p_values jsonb DEFAULT NULL::jsonb", returns: "jsonb", security: "invoker" },
   { name: "guard_refusals_are_complete", args: "", returns: "TABLE(guard text, said text)", security: "invoker" },
   { name: "has_visibility", args: "p_user_id uuid, p_type text, p_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
@@ -398,6 +424,8 @@ var STORE_DOORS = [
   { name: "migrations", args: "p_organization_id uuid, p_target_id uuid DEFAULT NULL::uuid, p_limit integer DEFAULT 100", returns: "TABLE(id uuid, verb text, target_kind text, target_id uuid, note text, applied_at timestamp with time zone, applied_by uuid, undone_at timestamp with time zone)", security: "definer" },
   { name: "my_level", args: "p_organization_id uuid, p_id uuid, p_type text DEFAULT 'record'::text", returns: "permission_level", security: "definer" },
   { name: "my_levels", args: "p_organization_id uuid, p_ids jsonb, p_type text DEFAULT 'record'::text", returns: "TABLE(id uuid, level permission_level)", security: "definer" },
+  { name: "organization_clear", args: "p_organization_id uuid, p_confirm text, p_and_destroy boolean DEFAULT false", returns: "jsonb", security: "definer" },
+  { name: "organization_contents", args: "p_organization_id uuid", returns: "jsonb", security: "definer" },
   { name: "organization_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "organization_references", args: "p_kind text, p_organization_id uuid, p_row jsonb", returns: "TABLE(site text, what text, ref_id uuid, openable boolean)", security: "invoker" },
   { name: "owning_table", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "invoker" },
@@ -462,6 +490,7 @@ var STORE_DOORS = [
   { name: "record_values_versioned", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(field_key text, field_id uuid, value jsonb, value_version integer, source jsonb, absent_reason text, actor text, on_behalf_of text, written_at timestamp with time zone, alternates jsonb)", security: "definer" },
   { name: "record_write", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "uuid", security: "definer" },
   { name: "relation_carry", args: "p_organization_id uuid, p_container_id uuid, p_item_id uuid", returns: "uuid", security: "definer" },
+  { name: "relation_edges_withdraw", args: "p_organization_id uuid, p_field_ids uuid[], p_why text", returns: "integer", security: "definer" },
   { name: "relation_own", args: "p_organization_id uuid, p_owner_id uuid, p_target_id uuid", returns: "uuid", security: "definer" },
   { name: "relation_target_card", args: "p_organization_id uuid, p_record_id uuid, p_via_key text DEFAULT NULL::text", returns: "TABLE(target_id uuid, target_organization_id uuid, is_foreign boolean, masked boolean, reader_level permission_level, card jsonb, why text)", security: "definer" },
   { name: "relation_target_external", args: "p_connection_token text, p_external_table text, p_external_key text", returns: "jsonb", security: "definer" },
@@ -476,6 +505,7 @@ var STORE_DOORS = [
   { name: "rollup_value", args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb", returns: "jsonb", security: "invoker" },
   { name: "rule_applies", args: "p_organization_id uuid, p_rule_id uuid, p_record_id uuid", returns: "jsonb", security: "invoker" },
   { name: "rule_context", args: "p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "invoker" },
+  { name: "rule_declare", args: "p_organization_id uuid, p_spec jsonb, p_rule_id uuid DEFAULT NULL::uuid", returns: "uuid", security: "definer" },
   { name: "rule_dependency_edges", args: "p_organization_id uuid, p_row custom.record DEFAULT NULL::custom.record", returns: "TABLE(needs text, needed text)", security: "invoker" },
   { name: "rule_eval", args: "p_organization_id uuid, p_expr jsonb, p_values jsonb, p_context jsonb DEFAULT '{}'::jsonb", returns: "jsonb", security: "invoker" },
   { name: "rule_field_key", args: "p_organization_id uuid, p_field_id uuid", returns: "text", security: "invoker" },
@@ -536,24 +566,36 @@ var STORE_DOORS = [
   { name: "visible_record_ids", args: "p_user_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "TABLE(id uuid)", security: "definer" },
   { name: "visible_set", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, OUT o_all_visible boolean, OUT o_true_visibility platform.visibility[], OUT o_granted_all uuid[], OUT o_granted_visible uuid[], OUT o_carried_visible uuid[], OUT o_ladder_calls integer, OUT o_fallback boolean, OUT o_note text", returns: "record", security: "definer" },
   { name: "widget_kernel_id", args: "", returns: "uuid", security: "invoker" },
+  { name: "work_approval_approvers", args: "p_organization_id uuid, p_subject_id uuid, p_approver_id uuid DEFAULT NULL::uuid", returns: "TABLE(user_id uuid, name text, why text)", security: "definer" },
+  { name: "work_approval_decide", args: "p_organization_id uuid, p_approval_id uuid, p_approve boolean, p_note text DEFAULT NULL::text", returns: "jsonb", security: "definer" },
+  { name: "work_approval_may_decide", args: "p_organization_id uuid, p_approval_id uuid", returns: "boolean", security: "definer" },
+  { name: "work_approval_read", args: "p_organization_id uuid, p_approval_id uuid", returns: "jsonb", security: "definer" },
+  { name: "work_approval_request", args: "p_organization_id uuid, p_subject_id uuid, p_change jsonb, p_note text DEFAULT NULL::text, p_approver_id uuid DEFAULT NULL::uuid, p_origin text DEFAULT 'person'::text, p_conversation_id uuid DEFAULT NULL::uuid", returns: "jsonb", security: "definer" },
+  { name: "work_assign", args: "p_organization_id uuid, p_record_id uuid, p_assignee_user_id uuid, p_due_date timestamp with time zone DEFAULT NULL::timestamp with time zone, p_clear_due boolean DEFAULT false", returns: "jsonb", security: "definer" },
   { name: "work_assignment_fields", args: "p_options_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(key text, label text, spec jsonb)", security: "invoker" },
-  { name: "work_has_assignment", args: "p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "invoker" },
-  { name: "work_instantiation_shape", args: "p_organization_id uuid, p_instantiation_id uuid", returns: "jsonb", security: "invoker" },
+  { name: "work_has_assignment", args: "p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "definer" },
+  { name: "work_inbox", args: "p_organization_id uuid, p_limit integer DEFAULT 50, p_offset integer DEFAULT 0, p_include_decided boolean DEFAULT false", returns: "TABLE(item_id uuid, kind text, origin text, title text, subject_id uuid, subject_kind text, summary text, state text, due_on timestamp with time zone, due_state text, actionable boolean, requested_by uuid, requested_by_name text, at timestamp with time zone)", security: "definer" },
+  { name: "work_instantiation_shape", args: "p_organization_id uuid, p_instantiation_id uuid", returns: "jsonb", security: "definer" },
+  { name: "work_list", args: "p_organization_id uuid, p_flavour text DEFAULT 'mine'::text, p_include_finished boolean DEFAULT false, p_limit integer DEFAULT 100, p_offset integer DEFAULT 0", returns: "TABLE(record_id uuid, table_id uuid, table_name text, title text, assignee_id uuid, assignee_name text, assignee_user_id uuid, due_on timestamp with time zone, due_state text, status text, terminal boolean, assigned_by uuid, updated_at timestamp with time zone)", security: "definer" },
+  { name: "work_person", args: "p_organization_id uuid, p_user_id uuid, p_create boolean DEFAULT true", returns: "uuid", security: "definer" },
+  { name: "work_record_states", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(state_id uuid, name text, sort integer, terminal boolean, is_current boolean, allowed boolean, refusal text)", security: "definer" },
   { name: "work_relation_kinds", args: "", returns: "TABLE(kind text, available boolean, why text)", security: "invoker" },
-  { name: "work_slot_expire", args: "p_organization_id uuid, p_table_id uuid", returns: "integer", security: "invoker" },
-  { name: "work_slot_hold", args: "p_organization_id uuid, p_table_id uuid, p_slot_key text, p_holder text, p_ttl interval DEFAULT '00:15:00'::interval", returns: "jsonb", security: "invoker" },
-  { name: "work_slot_holds", args: "p_organization_id uuid, p_table_id uuid", returns: "TABLE(hold_id uuid, slot_key text, holder text, expires_at timestamp with time zone, expired boolean)", security: "invoker" },
+  { name: "work_set_state", args: "p_organization_id uuid, p_record_id uuid, p_state_id uuid", returns: "jsonb", security: "definer" },
+  { name: "work_slot_expire", args: "p_organization_id uuid, p_table_id uuid", returns: "integer", security: "definer" },
+  { name: "work_slot_hold", args: "p_organization_id uuid, p_table_id uuid, p_slot_key text, p_holder text, p_ttl interval DEFAULT '00:15:00'::interval", returns: "jsonb", security: "definer" },
+  { name: "work_slot_holds", args: "p_organization_id uuid, p_table_id uuid", returns: "TABLE(hold_id uuid, slot_key text, holder text, expires_at timestamp with time zone, expired boolean)", security: "definer" },
   { name: "work_slot_index_name", args: "p_table_id uuid", returns: "text", security: "invoker" },
-  { name: "work_slot_release", args: "p_organization_id uuid, p_hold_id uuid", returns: "boolean", security: "invoker" },
-  { name: "work_slots_declare", args: "p_organization_id uuid, p_name text, p_slug text, p_home_id uuid DEFAULT NULL::uuid", returns: "jsonb", security: "invoker" },
+  { name: "work_slot_release", args: "p_organization_id uuid, p_hold_id uuid", returns: "boolean", security: "definer" },
+  { name: "work_slots_declare", args: "p_organization_id uuid, p_name text, p_slug text, p_home_id uuid DEFAULT NULL::uuid", returns: "jsonb", security: "definer" },
   { name: "work_states", args: "", returns: "TABLE(sort integer, name text, terminal boolean, next text[])", security: "invoker" },
-  { name: "work_take_assignment", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "invoker" },
-  { name: "work_template_declare", args: "p_organization_id uuid, p_name text, p_graph jsonb", returns: "uuid", security: "invoker" },
-  { name: "work_template_instantiate", args: "p_organization_id uuid, p_template_id uuid, p_overrides jsonb DEFAULT '{}'::jsonb", returns: "jsonb", security: "invoker" },
+  { name: "work_take_assignment", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
+  { name: "work_template_declare", args: "p_organization_id uuid, p_name text, p_graph jsonb", returns: "uuid", security: "definer" },
+  { name: "work_template_instantiate", args: "p_organization_id uuid, p_template_id uuid, p_overrides jsonb DEFAULT '{}'::jsonb", returns: "jsonb", security: "definer" },
   { name: "work_template_refusal", args: "p_graph jsonb", returns: "text", security: "invoker" },
-  { name: "work_template_shape", args: "p_organization_id uuid, p_template_id uuid", returns: "jsonb", security: "invoker" },
-  { name: "work_transition_refusal", args: "p_organization_id uuid, p_from_state_id uuid, p_to_state_id uuid", returns: "text", security: "invoker" },
-  { name: "work_whose_turn", args: "p_organization_id uuid, p_table_id uuid, p_include_finished boolean DEFAULT false", returns: "TABLE(record_id uuid, title text, assignee_id uuid, turn text, due_on timestamp with time zone, state text, status text, terminal boolean)", security: "invoker" }
+  { name: "work_template_shape", args: "p_organization_id uuid, p_template_id uuid", returns: "jsonb", security: "definer" },
+  { name: "work_templates", args: "p_organization_id uuid, p_limit integer DEFAULT 100", returns: "TABLE(template_id uuid, name text, nodes integer, relations integer, created_at timestamp with time zone)", security: "definer" },
+  { name: "work_transition_refusal", args: "p_organization_id uuid, p_from_state_id uuid, p_to_state_id uuid", returns: "text", security: "definer" },
+  { name: "work_whose_turn", args: "p_organization_id uuid, p_table_id uuid, p_include_finished boolean DEFAULT false", returns: "TABLE(record_id uuid, title text, assignee_id uuid, turn text, due_on timestamp with time zone, state text, status text, terminal boolean)", security: "definer" }
 ];
 var STORE_KNOBS = [
   { key: "accessible_entity_ids_guard", value: "true", type: "boolean" },
@@ -593,16 +635,17 @@ var STORE_KNOBS = [
   { key: "world_publish_enabled", value: "false", type: "boolean" }
 ];
 var STORE_REFUSAL_CODES = [
-  { code: "02000", raised_by: "doc_render_body,doc_render_document,doc_sign,doc_signature_intact,doc_template_save,external_history_event,external_rows,external_stub_upsert,external_writes_set,migrate_delete,migrate_extract_parent,migrate_merge,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,read_record,record_delete,record_restore,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,visibility_as_of" },
-  { code: "0A000", raised_by: "external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_slots_declare" },
-  { code: "22004", raised_by: "_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,doc_render_write,doc_sign,doc_signature_write,doc_template_save,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,home_add,io_comment_write,io_import_open,io_outbox_drain,io_restore,migrate_purge,migrate_split,migrate_undo,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,relation_carry,relation_own,share_grant,table_declare,work_template_declare" },
+  { code: "02000", raised_by: "doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_read,doc_template_save,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,migrate_delete,migrate_extract_parent,migrate_merge,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,read_record,record_delete,record_restore,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state" },
+  { code: "0A000", raised_by: "external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign,work_slots_declare" },
+  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,doc_render_write,doc_sign,doc_signature_write,doc_template_save,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,form_declare,form_submit,home_add,io_comment_write,io_import_open,io_outbox_drain,io_restore,migrate_purge,migrate_split,migrate_undo,organization_clear,organization_contents,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,relation_carry,relation_own,rule_declare,share_grant,table_declare,work_approval_decide,work_approval_request,work_template_declare" },
   { code: "22012", raised_by: "rule_eval" },
-  { code: "22023", raised_by: "_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,doc_render_body,doc_render_write,doc_signature_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,io_import_open,io_proposal_accept,migrate_merge,my_levels,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,table_rules,visibility_as_of,work_slot_hold" },
-  { code: "23503", raised_by: "_containment_guard,_record_rule_uses,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,delete_rule,doc_sign,doc_template_save,home_add,io_comment_write,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_eval,rule_members,rule_run,work_take_assignment,work_template_instantiate" },
-  { code: "23505", raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,field_declare,home_add,io_proposal_accept,relation_carry,relation_own,share_grant,work_slot_hold" },
-  { code: "23514", raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,doc_sign,doc_signature_write,doc_template_save,field_declare,field_retire,field_update,home_add,migrate_merge,relation_carry,relation_own,validate_value_envelope,validate_values,work_slots_declare,work_take_assignment,work_template_instantiate" },
+  { code: "22023", raised_by: "_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,doc_render_body,doc_render_write,doc_signature_write,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,io_import_open,io_proposal_accept,migrate_merge,my_levels,organization_clear,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
+  { code: "23503", raised_by: "_containment_guard,_field_document_for,_record_rule_uses,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,delete_rule,doc_sign,doc_template_save,form_declare,form_submit,home_add,io_comment_write,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,work_set_state,work_take_assignment,work_template_instantiate" },
+  { code: "23505", raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,io_proposal_accept,relation_carry,relation_own,share_grant,work_approval_decide,work_slot_hold" },
+  { code: "23514", raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,migrate_merge,relation_carry,relation_own,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
-  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,external_write_through,io_comment_resolve,io_comment_write,io_restore,migrate_purge,my_levels,promote_table,query_visibility_parity,read_record,read_records,share_grant,visibility_as_of" },
+  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,io_comment_resolve,io_comment_write,io_restore,migrate_purge,my_levels,organization_clear,promote_table,query_visibility_parity,read_record,read_records,share_grant,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
+  { code: "42703", raised_by: "entity_table" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,promote_field" },
   { code: "54001", raised_by: "record_delete" },
   { code: "PT409", raised_by: "record_update" }
@@ -1712,6 +1755,24 @@ var DOORS = {
   fieldDeclare: "field_declare",
   fieldUpdate: "field_update",
   fieldRetire: "field_retire",
+  // CUSTOM FIELDS ON A STANDARD BUSINESS TABLE. Every door above is keyed by a
+  // custom Table's uuid, and a standard table has no Table record - so until
+  // 2026-09-20 `custom.applicable_fields(org, 'party', null)` answered `22P02
+  // invalid input syntax for uuid` and there was no other way in. These are
+  // keyed by the REGISTRY TOKEN instead, and they are one set for all 643
+  // tables the registry types Entity or Detail. The three value doors are
+  // SECURITY INVOKER in the database on purpose: the standard table's own
+  // row-level security is what decides who may read and write its rows, and a
+  // definer wrapper would replace it with a second access system.
+  entityTable: "entity_table",
+  entityFields: "entity_fields",
+  entityFieldDeclare: "entity_field_declare",
+  entityFieldUpdate: "entity_field_update",
+  entityFieldRetire: "entity_field_retire",
+  entityFieldRights: "entity_field_rights",
+  entityRecordRead: "entity_record_read",
+  entityValueWrite: "entity_value_write",
+  entityRecordsFind: "entity_records_find",
   tableCapacity: "table_capacity",
   tableStorage: "table_storage",
   promoteTable: "promote_table",
@@ -1749,6 +1810,17 @@ var DOORS = {
   ruleMembership: "rule_membership",
   ruleRun: "rule_run",
   ruleEval: "rule_eval",
+  // REC-15: the door that makes a Rule a RULE. `custom.record_write` into the
+  // Rule kernel produces a valid Rule document carrying `data_class = 'record'`,
+  // and every reader that goes LOOKING for a Rule looks for the class — so a
+  // subscription written that way was invisible to DOOR-18 and nothing fired.
+  // PRODUCTS row 1 — a form is a view on a real Table. `forms` lists an
+  // organization's own, `formDeclare` writes one, and `anonPublish` is the one
+  // act that opens it to people with no account. The PUBLIC pair
+  // (`custom.form_public`, `custom.form_submit`) is deliberately absent: those
+  // are server-lane doors and a browser never calls them.
+  forms: "forms",
+  formDeclare: "form_declare",
   // The eighth verb (AGT-N-8): a grouped, bucketed, filtered count/sum/avg/
   // min/max computed INSIDE the read door's own query, so a chart shows exactly
   // the rows this person may see and never fetches the ones they may not.
@@ -1807,6 +1879,23 @@ var DOORS = {
   workSlotRelease: "work_slot_release",
   workSlotHolds: "work_slot_holds",
   workSlotExpire: "work_slot_expire",
+  // THE WORK LAYER'S OWN DOORS (lane WORK-DOORS, 2026-09-20). Until this lane
+  // all nineteen `custom.work_*` functions were SECURITY INVOKER with no client
+  // grant: REC-69, REC-70 and REC-71 were live in the store and unreachable
+  // from a browser. These are the verbs a person actually uses.
+  workPerson: "work_person",
+  workAssign: "work_assign",
+  workRecordStates: "work_record_states",
+  workSetState: "work_set_state",
+  workList: "work_list",
+  workTemplates: "work_templates",
+  /** THE ONE QUEUE: assignments, approvals and the agent's proposals together. */
+  workInbox: "work_inbox",
+  workApprovalApprovers: "work_approval_approvers",
+  workApprovalRequest: "work_approval_request",
+  workApprovalMayDecide: "work_approval_may_decide",
+  workApprovalDecide: "work_approval_decide",
+  workApprovalRead: "work_approval_read",
   // Declared here BECAUSE they do not exist yet: naming them is what makes the
   // absence visible to `pnpm check:store-registry` and to the suite.
   metadataSearch: "metadata_search",
@@ -1838,6 +1927,14 @@ var BY_SQLSTATE = {
   // is wrong for the shape the store holds, which is what `invalid_argument`
   // already means — the store's own sentence names the value and the type.
   "22P02": "invalid_argument",
+  // 42703 — a column that is not there. The store raises it from
+  // `custom.entity_table`, which is asked for a column by NAME, so the class is
+  // exactly "the call named something the shape does not have": the same thing
+  // `invalid_argument` already means, and the store's own sentence names the
+  // column. Added 2026-09-20 (lane FORMS) because the package's live-door suite
+  // caught it raised by a door this package did not know about — which is the
+  // suite working, and is why the map is a census rather than a guess.
+  "42703": "invalid_argument",
   "02000": "not_found",
   "23503": "missing_reference",
   "23505": "already_exists",
@@ -2232,6 +2329,88 @@ function createRecordsClient(config) {
         "fieldDeclare"
       );
     },
+    async entityTable({ token }) {
+      const answer = await callDoor(
+        DOORS.entityTable,
+        { p_token: token },
+        "entityTable"
+      );
+      if (!answer.ok) return err(answer.error);
+      const row = Array.isArray(answer.data) ? answer.data[0] : answer.data;
+      if (!row) {
+        return err({
+          code: "not_found",
+          message: `The registry answered nothing for the table "${token}".`,
+          hint: "REC-33: a standard table is named by its registry token. Nothing was read."
+        });
+      }
+      return ok(row);
+    },
+    async entityFields({ token }) {
+      const rows = await callDoor(
+        DOORS.entityFields,
+        { p_organization_id: org, p_token: token },
+        "entityFields"
+      );
+      if (!rows.ok) return err(rows.error);
+      return ok((rows.data ?? []).map((row) => ({ id: row.id, ...row.data })));
+    },
+    async entityFieldDeclare({ token, spec }) {
+      return callDoor(
+        DOORS.entityFieldDeclare,
+        { p_organization_id: org, p_token: token, p_spec: spec },
+        "entityFieldDeclare"
+      );
+    },
+    async entityFieldUpdate({ field_id, patch }) {
+      return callDoor(
+        DOORS.entityFieldUpdate,
+        { p_organization_id: org, p_field_id: field_id, p_patch: patch },
+        "entityFieldUpdate"
+      );
+    },
+    async entityFieldRetire({ field_id }) {
+      return callDoor(
+        DOORS.entityFieldRetire,
+        { p_organization_id: org, p_field_id: field_id },
+        "entityFieldRetire"
+      );
+    },
+    async entityFieldRights({ token }) {
+      return callDoor(
+        DOORS.entityFieldRights,
+        { p_organization_id: org, p_token: token },
+        "entityFieldRights"
+      );
+    },
+    async entityRecordRead({ token, record_id }) {
+      return callDoor(
+        DOORS.entityRecordRead,
+        { p_organization_id: org, p_token: token, p_record_id: record_id },
+        "entityRecordRead"
+      );
+    },
+    async entityValueWrite({ token, record_id, patch }) {
+      return callDoor(
+        DOORS.entityValueWrite,
+        { p_organization_id: org, p_token: token, p_record_id: record_id, p_patch: patch },
+        "entityValueWrite"
+      );
+    },
+    async entityRecordsFind({ token, key, value, limit, offset }) {
+      return callDoor(
+        DOORS.entityRecordsFind,
+        {
+          p_organization_id: org,
+          p_token: token,
+          p_key: key,
+          p_value: value === void 0 ? null : value,
+          ...limit === void 0 ? {} : { p_limit: limit },
+          ...offset === void 0 ? {} : { p_offset: offset }
+        },
+        "entityRecordsFind"
+      );
+    },
     async fieldUpdate({ field_id, patch }) {
       return callDoor(
         DOORS.fieldUpdate,
@@ -2276,6 +2455,31 @@ function createRecordsClient(config) {
         "ruleMembership"
       );
     },
+    async forms(args) {
+      return callDoor(
+        DOORS.forms,
+        { p_organization_id: org, p_table_id: args?.table_id ?? null },
+        "forms"
+      );
+    },
+    async formDeclare(args) {
+      return callDoor(
+        DOORS.formDeclare,
+        {
+          p_organization_id: org,
+          p_table_id: args.table_id,
+          p_title: args.title,
+          p_questions: args.questions,
+          p_presentation: args.presentation ?? {},
+          p_submission_cap: args.submission_cap ?? null,
+          p_quarantine_rule_id: args.quarantine_rule_id ?? null,
+          p_notify_rule_id: args.notify_rule_id ?? null,
+          p_form_id: args.form_id ?? null,
+          p_slug: args.slug ?? null
+        },
+        "formDeclare"
+      );
+    },
     async ruleRun({ rule_id, values, context }) {
       return callDoor(
         DOORS.ruleRun,
@@ -2624,6 +2828,128 @@ function createRecordsClient(config) {
         "workSlotExpire"
       );
     },
+    // ── the work layer a person actually uses ────────────────────────────
+    async workInbox(args) {
+      return callDoor(
+        DOORS.workInbox,
+        {
+          p_organization_id: org,
+          p_limit: args?.limit ?? 50,
+          p_offset: args?.offset ?? 0,
+          p_include_decided: args?.includeDecided ?? false
+        },
+        "workInbox"
+      );
+    },
+    async workList(args) {
+      return callDoor(
+        DOORS.workList,
+        {
+          p_organization_id: org,
+          p_flavour: args?.flavour ?? "mine",
+          p_include_finished: args?.includeFinished ?? false,
+          p_limit: args?.limit ?? 100,
+          p_offset: args?.offset ?? 0
+        },
+        "workList"
+      );
+    },
+    async workAssign({ record_id, user_id = null, dueDate = null, clearDue = false }) {
+      return callDoor(
+        DOORS.workAssign,
+        {
+          p_organization_id: org,
+          p_record_id: record_id,
+          p_assignee_user_id: user_id,
+          p_due_date: dueDate,
+          p_clear_due: clearDue
+        },
+        "workAssign"
+      );
+    },
+    async workRecordStates({ record_id }) {
+      return callDoor(
+        DOORS.workRecordStates,
+        { p_organization_id: org, p_record_id: record_id },
+        "workRecordStates"
+      );
+    },
+    async workSetState({ record_id, state_id }) {
+      return callDoor(
+        DOORS.workSetState,
+        { p_organization_id: org, p_record_id: record_id, p_state_id: state_id },
+        "workSetState"
+      );
+    },
+    async workPerson({ user_id, create = true }) {
+      return callDoor(
+        DOORS.workPerson,
+        { p_organization_id: org, p_user_id: user_id, p_create: create },
+        "workPerson"
+      );
+    },
+    async workTemplates(args) {
+      return callDoor(
+        DOORS.workTemplates,
+        { p_organization_id: org, p_limit: args?.limit ?? 100 },
+        "workTemplates"
+      );
+    },
+    async workApprovalApprovers({ subject_id, approver_id = null }) {
+      return callDoor(
+        DOORS.workApprovalApprovers,
+        { p_organization_id: org, p_subject_id: subject_id, p_approver_id: approver_id },
+        "workApprovalApprovers"
+      );
+    },
+    async workApprovalRequest({
+      subject_id,
+      change,
+      note = null,
+      approver_id = null,
+      origin = "person",
+      conversation_id = null
+    }) {
+      return callDoor(
+        DOORS.workApprovalRequest,
+        {
+          p_organization_id: org,
+          p_subject_id: subject_id,
+          p_change: change,
+          p_note: note,
+          p_approver_id: approver_id,
+          p_origin: origin,
+          p_conversation_id: conversation_id
+        },
+        "workApprovalRequest"
+      );
+    },
+    async workApprovalMayDecide({ approval_id }) {
+      return callDoor(
+        DOORS.workApprovalMayDecide,
+        { p_organization_id: org, p_approval_id: approval_id },
+        "workApprovalMayDecide"
+      );
+    },
+    async workApprovalDecide({ approval_id, approve, note = null }) {
+      return callDoor(
+        DOORS.workApprovalDecide,
+        {
+          p_organization_id: org,
+          p_approval_id: approval_id,
+          p_approve: approve,
+          p_note: note
+        },
+        "workApprovalDecide"
+      );
+    },
+    async workApprovalRead({ approval_id }) {
+      return callDoor(
+        DOORS.workApprovalRead,
+        { p_organization_id: org, p_approval_id: approval_id },
+        "workApprovalRead"
+      );
+    },
     // ── the trust doors ──────────────────────────────────────────────────
     async isExternalPrincipal(args) {
       return trustDoor(
@@ -2684,10 +3010,12 @@ function createRecordsClient(config) {
         "publishToWorld"
       );
     },
-    async ruleDeclare() {
-      const refusal = doorAbsent(DOORS.ruleDeclare);
-      scream({ code: refusal.code, message: refusal.message, ...refusal.hint ? { hint: refusal.hint } : {}, where: "ruleDeclare" });
-      return err(refusal);
+    async ruleDeclare({ spec, rule_id }) {
+      return callDoor(
+        DOORS.ruleDeclare,
+        { p_organization_id: org, p_spec: spec, p_rule_id: rule_id ?? null },
+        "ruleDeclare"
+      );
     },
     async metadataSearch() {
       const refusal = doorAbsent(DOORS.metadataSearch);