@ai-matrx/records 0.8.0 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,55 @@
 # Changelog — @ai-matrx/records
 
+## 0.11.0
+
+**The publish gate stops red-lighting on other lanes' migrations.** `the
+generated door catalogue is the store's` asserted `STORE_DOORS.length === live`,
+so every publish failed in which anybody anywhere had shipped a new `custom`
+routine — 337 mirrored against 342 live on 2026-09-20, and not one of the five
+was this package's. A release that red-lights on somebody else's work teaches
+everyone to ignore red.
+
+What the package must be right about is asserted and still gates: **every door
+this mirror names exists in the live store**. A name here the store does not
+have is this package claiming a door it cannot open, which is the whole reason
+`store.generated.ts` is generated rather than typed. Doors the store has and the
+mirror has not seen are REPORTED by name, loudly, and gate nothing.
+
+### Consumer action
+
+None. No API changed.
+
+## 0.10.0
+
+**The work layer has client doors, and this package can reach them.** Until lane
+WORK-DOORS (2026-09-20) all nineteen `custom.work_*` functions were SECURITY
+INVOKER, held no EXECUTE for `authenticated` and carried zero rows in
+`platform.client_callable_door`: REC-69 (assignment and action state), REC-70
+(template instantiation) and REC-71 (the slot hold) were live in the store and
+unreachable from a browser. Thirteen new client methods, all against doors that
+ask the one ladder first:
+
+* `workInbox` — **THE ONE QUEUE.** Assignments, approvals and the agent's
+  proposals in one ordered list with one row shape (PRODUCTS.md row 6).
+* `workList` — "my work", "work I assigned", "waiting on somebody being chosen",
+  across every Table in the organization, every row decided by the one ladder.
+* `workAssign` — the Assignee value AND editor access, in one transaction. An
+  assignment that did not give access put a row in somebody's inbox that they
+  were refused when they opened it.
+* `workRecordStates` / `workSetState` — the moves the workflow model allows, with
+  the sentence for each one it does not, so a screen offers real moves.
+* `workApprovalRequest` / `workApprovalMayDecide` / `workApprovalDecide` /
+  `workApprovalRead` / `workApprovalApprovers` — asking for a change instead of
+  making it, and a decision that **applies** the change in the same transaction.
+* `workPerson`, `workTemplates`.
+
+New types in `work.ts`: `WorkInboxItem`, `WorkListItem`, `WorkRecordState`,
+`WorkApprover`, `WorkApprovalFiled`, `WorkApprovalDecision`, `WorkAssignment`,
+`WorkChange`, `WorkInboxKind`, `WorkOrigin`, `WorkDueState`, `WorkListFlavour`.
+
+**Consumer action:** none required — every addition is new surface. A host that
+wants the inbox takes `@ai-matrx/records-ui` 0.15.0 with it.
+
 ## 0.7.2
 
 **The door catalogue, regenerated while the store was still growing.** 0.7.1

package/dist/core/index.cjs

@@ -1755,6 +1755,24 @@ var DOORS = {
   fieldDeclare: "field_declare",
   fieldUpdate: "field_update",
   fieldRetire: "field_retire",
+  // CUSTOM FIELDS ON A STANDARD BUSINESS TABLE. Every door above is keyed by a
+  // custom Table's uuid, and a standard table has no Table record - so until
+  // 2026-09-20 `custom.applicable_fields(org, 'party', null)` answered `22P02
+  // invalid input syntax for uuid` and there was no other way in. These are
+  // keyed by the REGISTRY TOKEN instead, and they are one set for all 643
+  // tables the registry types Entity or Detail. The three value doors are
+  // SECURITY INVOKER in the database on purpose: the standard table's own
+  // row-level security is what decides who may read and write its rows, and a
+  // definer wrapper would replace it with a second access system.
+  entityTable: "entity_table",
+  entityFields: "entity_fields",
+  entityFieldDeclare: "entity_field_declare",
+  entityFieldUpdate: "entity_field_update",
+  entityFieldRetire: "entity_field_retire",
+  entityFieldRights: "entity_field_rights",
+  entityRecordRead: "entity_record_read",
+  entityValueWrite: "entity_value_write",
+  entityRecordsFind: "entity_records_find",
   tableCapacity: "table_capacity",
   tableStorage: "table_storage",
   promoteTable: "promote_table",
@@ -1861,6 +1879,23 @@ var DOORS = {
   workSlotRelease: "work_slot_release",
   workSlotHolds: "work_slot_holds",
   workSlotExpire: "work_slot_expire",
+  // THE WORK LAYER'S OWN DOORS (lane WORK-DOORS, 2026-09-20). Until this lane
+  // all nineteen `custom.work_*` functions were SECURITY INVOKER with no client
+  // grant: REC-69, REC-70 and REC-71 were live in the store and unreachable
+  // from a browser. These are the verbs a person actually uses.
+  workPerson: "work_person",
+  workAssign: "work_assign",
+  workRecordStates: "work_record_states",
+  workSetState: "work_set_state",
+  workList: "work_list",
+  workTemplates: "work_templates",
+  /** THE ONE QUEUE: assignments, approvals and the agent's proposals together. */
+  workInbox: "work_inbox",
+  workApprovalApprovers: "work_approval_approvers",
+  workApprovalRequest: "work_approval_request",
+  workApprovalMayDecide: "work_approval_may_decide",
+  workApprovalDecide: "work_approval_decide",
+  workApprovalRead: "work_approval_read",
   // Declared here BECAUSE they do not exist yet: naming them is what makes the
   // absence visible to `pnpm check:store-registry` and to the suite.
   metadataSearch: "metadata_search",
@@ -2294,6 +2329,88 @@ function createRecordsClient(config) {
         "fieldDeclare"
       );
     },
+    async entityTable({ token }) {
+      const answer = await callDoor(
+        DOORS.entityTable,
+        { p_token: token },
+        "entityTable"
+      );
+      if (!answer.ok) return err(answer.error);
+      const row = Array.isArray(answer.data) ? answer.data[0] : answer.data;
+      if (!row) {
+        return err({
+          code: "not_found",
+          message: `The registry answered nothing for the table "${token}".`,
+          hint: "REC-33: a standard table is named by its registry token. Nothing was read."
+        });
+      }
+      return ok(row);
+    },
+    async entityFields({ token }) {
+      const rows = await callDoor(
+        DOORS.entityFields,
+        { p_organization_id: org, p_token: token },
+        "entityFields"
+      );
+      if (!rows.ok) return err(rows.error);
+      return ok((rows.data ?? []).map((row) => ({ id: row.id, ...row.data })));
+    },
+    async entityFieldDeclare({ token, spec }) {
+      return callDoor(
+        DOORS.entityFieldDeclare,
+        { p_organization_id: org, p_token: token, p_spec: spec },
+        "entityFieldDeclare"
+      );
+    },
+    async entityFieldUpdate({ field_id, patch }) {
+      return callDoor(
+        DOORS.entityFieldUpdate,
+        { p_organization_id: org, p_field_id: field_id, p_patch: patch },
+        "entityFieldUpdate"
+      );
+    },
+    async entityFieldRetire({ field_id }) {
+      return callDoor(
+        DOORS.entityFieldRetire,
+        { p_organization_id: org, p_field_id: field_id },
+        "entityFieldRetire"
+      );
+    },
+    async entityFieldRights({ token }) {
+      return callDoor(
+        DOORS.entityFieldRights,
+        { p_organization_id: org, p_token: token },
+        "entityFieldRights"
+      );
+    },
+    async entityRecordRead({ token, record_id }) {
+      return callDoor(
+        DOORS.entityRecordRead,
+        { p_organization_id: org, p_token: token, p_record_id: record_id },
+        "entityRecordRead"
+      );
+    },
+    async entityValueWrite({ token, record_id, patch }) {
+      return callDoor(
+        DOORS.entityValueWrite,
+        { p_organization_id: org, p_token: token, p_record_id: record_id, p_patch: patch },
+        "entityValueWrite"
+      );
+    },
+    async entityRecordsFind({ token, key, value, limit, offset }) {
+      return callDoor(
+        DOORS.entityRecordsFind,
+        {
+          p_organization_id: org,
+          p_token: token,
+          p_key: key,
+          p_value: value === void 0 ? null : value,
+          ...limit === void 0 ? {} : { p_limit: limit },
+          ...offset === void 0 ? {} : { p_offset: offset }
+        },
+        "entityRecordsFind"
+      );
+    },
     async fieldUpdate({ field_id, patch }) {
       return callDoor(
         DOORS.fieldUpdate,
@@ -2711,6 +2828,128 @@ function createRecordsClient(config) {
         "workSlotExpire"
       );
     },
+    // ── the work layer a person actually uses ────────────────────────────
+    async workInbox(args) {
+      return callDoor(
+        DOORS.workInbox,
+        {
+          p_organization_id: org,
+          p_limit: args?.limit ?? 50,
+          p_offset: args?.offset ?? 0,
+          p_include_decided: args?.includeDecided ?? false
+        },
+        "workInbox"
+      );
+    },
+    async workList(args) {
+      return callDoor(
+        DOORS.workList,
+        {
+          p_organization_id: org,
+          p_flavour: args?.flavour ?? "mine",
+          p_include_finished: args?.includeFinished ?? false,
+          p_limit: args?.limit ?? 100,
+          p_offset: args?.offset ?? 0
+        },
+        "workList"
+      );
+    },
+    async workAssign({ record_id, user_id = null, dueDate = null, clearDue = false }) {
+      return callDoor(
+        DOORS.workAssign,
+        {
+          p_organization_id: org,
+          p_record_id: record_id,
+          p_assignee_user_id: user_id,
+          p_due_date: dueDate,
+          p_clear_due: clearDue
+        },
+        "workAssign"
+      );
+    },
+    async workRecordStates({ record_id }) {
+      return callDoor(
+        DOORS.workRecordStates,
+        { p_organization_id: org, p_record_id: record_id },
+        "workRecordStates"
+      );
+    },
+    async workSetState({ record_id, state_id }) {
+      return callDoor(
+        DOORS.workSetState,
+        { p_organization_id: org, p_record_id: record_id, p_state_id: state_id },
+        "workSetState"
+      );
+    },
+    async workPerson({ user_id, create = true }) {
+      return callDoor(
+        DOORS.workPerson,
+        { p_organization_id: org, p_user_id: user_id, p_create: create },
+        "workPerson"
+      );
+    },
+    async workTemplates(args) {
+      return callDoor(
+        DOORS.workTemplates,
+        { p_organization_id: org, p_limit: args?.limit ?? 100 },
+        "workTemplates"
+      );
+    },
+    async workApprovalApprovers({ subject_id, approver_id = null }) {
+      return callDoor(
+        DOORS.workApprovalApprovers,
+        { p_organization_id: org, p_subject_id: subject_id, p_approver_id: approver_id },
+        "workApprovalApprovers"
+      );
+    },
+    async workApprovalRequest({
+      subject_id,
+      change,
+      note = null,
+      approver_id = null,
+      origin = "person",
+      conversation_id = null
+    }) {
+      return callDoor(
+        DOORS.workApprovalRequest,
+        {
+          p_organization_id: org,
+          p_subject_id: subject_id,
+          p_change: change,
+          p_note: note,
+          p_approver_id: approver_id,
+          p_origin: origin,
+          p_conversation_id: conversation_id
+        },
+        "workApprovalRequest"
+      );
+    },
+    async workApprovalMayDecide({ approval_id }) {
+      return callDoor(
+        DOORS.workApprovalMayDecide,
+        { p_organization_id: org, p_approval_id: approval_id },
+        "workApprovalMayDecide"
+      );
+    },
+    async workApprovalDecide({ approval_id, approve, note = null }) {
+      return callDoor(
+        DOORS.workApprovalDecide,
+        {
+          p_organization_id: org,
+          p_approval_id: approval_id,
+          p_approve: approve,
+          p_note: note
+        },
+        "workApprovalDecide"
+      );
+    },
+    async workApprovalRead({ approval_id }) {
+      return callDoor(
+        DOORS.workApprovalRead,
+        { p_organization_id: org, p_approval_id: approval_id },
+        "workApprovalRead"
+      );
+    },
     // ── the trust doors ──────────────────────────────────────────────────
     async isExternalPrincipal(args) {
       return trustDoor(