@ai-matrx/records 0.8.0 → 0.11.0

package/dist/core/index.d.cts

@@ -1,5 +1,5 @@
-import { Timestamp, Uuid, RelationCoordinate, RecordsConfig, RecordDocument, RecordsResult, RecordRead, ReadRow, Table, Field, StoredRecord, TableCapacity, NewFieldDeclaration, FieldPatch, FormSummary, AggregateMeasure, AggregateBucket, AggregateRow, Subscription, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordRevision, ReadValue, AnonTokenBinding, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, FieldProposal, TableProposal, MyLevel, RecordsError, WriteConflict, PgError, RecordsDataSource, StaleWriteDetail, PredictedRefusal } from '../index.cjs';
-export { ABSENCE_REASONS, ACTOR_VOCABULARY, AbsenceReason, Actor, AggregateOperation, COMPUTE_ON, CONTEXT_POLICIES, ComputeOn, ContextPolicy, DELIVERIES, Delivery, DocSignatureCheck, ENTITY_TOKENS, EntityToken, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, FieldBehavior, FieldRule, FieldSensitivity, FieldSource, ForbiddenEnvelopeWord, Freshness, HiddenFieldNotice, Home, KERNEL_TABLES, KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, MergeField, MergeFieldModifier, MergeFieldProvenance, MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, MergeFieldTransform, MissingBehavior, ON_DELETE, OVERRIDE_POLICIES, OnDelete, OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, ParityFieldType, ParityFieldTypeDescriptor, PerValueAccessWord, PermissionLevel, ProvenancePointer, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, RecordsActor, RecordsErrorCode, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationBinding, RelationCardinality, RelationCarries, RelationFlavor, RelationProperties, RelationTarget, ResolutionTriple, RetiredActorWord, Rule, RuleAnswer, RuleExpression, RuleNodeKind, RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, StorageMode, StoreDoorName, StoreRefusalCode, SubscriptionBlock, SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, TableDisplay, TableOrigin, TableType, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, ValueAlternate, ValueAlternateKey, ValueEnvelope, ValueEnvelopeKey, ValueSource, WorkTemplateNode, WorkTemplateRelation, asPermissionLevel, atLeast, err, highestLevel, isRecordsErr, measureKey, ok, publicFormPath } from '../index.cjs';
+import { Timestamp, Uuid, RelationCoordinate, RecordsConfig, RecordDocument, RecordsResult, RecordRead, ReadRow, Table, Field, StoredRecord, TableCapacity, NewFieldDeclaration, FieldPatch, EntityTableFacts, NewEntityFieldDeclaration, EntityFieldRights, EntityRecordRead, EntityRecordsFound, FormSummary, AggregateMeasure, AggregateBucket, AggregateRow, Subscription, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordRevision, ReadValue, AnonTokenBinding, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, WorkInboxItem, WorkListFlavour, WorkListItem, WorkAssignment, WorkRecordState, WorkApprover, WorkChange, WorkApprovalFiled, WorkApprovalDecision, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, FieldProposal, TableProposal, MyLevel, RecordsError, WriteConflict, PgError, RecordsDataSource, StaleWriteDetail, PredictedRefusal } from '../index.cjs';
+export { ABSENCE_REASONS, ACTOR_VOCABULARY, AbsenceReason, Actor, AggregateOperation, COMPUTE_ON, CONTEXT_POLICIES, ComputeOn, ContextPolicy, CustomFieldTableType, DELIVERIES, Delivery, DocSignatureCheck, ENTITY_TOKENS, EntityFieldValue, EntityRecordMatch, EntityToken, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, FieldBehavior, FieldRule, FieldSensitivity, FieldSource, ForbiddenEnvelopeWord, Freshness, HiddenFieldNotice, Home, KERNEL_TABLES, KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, MergeField, MergeFieldModifier, MergeFieldProvenance, MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, MergeFieldTransform, MissingBehavior, ON_DELETE, OVERRIDE_POLICIES, OnDelete, OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, ParityFieldType, ParityFieldTypeDescriptor, PerValueAccessWord, PermissionLevel, ProvenancePointer, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, RecordsActor, RecordsErrorCode, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationBinding, RelationCardinality, RelationCarries, RelationFlavor, RelationProperties, RelationTarget, ResolutionTriple, RetiredActorWord, Rule, RuleAnswer, RuleExpression, RuleNodeKind, RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, StorageMode, StoreDoorName, StoreRefusalCode, SubscriptionBlock, SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, TableDisplay, TableOrigin, TableType, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, ValueAlternate, ValueAlternateKey, ValueEnvelope, ValueEnvelopeKey, ValueSource, WorkDueState, WorkInboxKind, WorkOrigin, WorkTemplateNode, WorkTemplateRelation, asPermissionLevel, atLeast, err, highestLevel, isRecordsErr, measureKey, ok, publicFormPath } from '../index.cjs';
 
 /**
  * DOOR-8. As-of on EITHER clock, and they are different questions:
@@ -179,6 +179,51 @@ interface RecordsClient {
     fieldRetire(args: {
         field_id: Uuid;
     }): Promise<RecordsResult<boolean>>;
+    /** What the registry says about a token, and whether it can hold a value at all. */
+    entityTable(args: {
+        token: string;
+    }): Promise<RecordsResult<EntityTableFacts>>;
+    /** The fields THIS organization added to that standard table. */
+    entityFields(args: {
+        token: string;
+    }): Promise<RecordsResult<Field[]>>;
+    /** Add a column to a standard table. An organization admin's right - it changes the table for everybody. */
+    entityFieldDeclare(args: {
+        token: string;
+        spec: NewEntityFieldDeclaration;
+    }): Promise<RecordsResult<Uuid>>;
+    /** One field's own settings. A TYPE change is refused here by name, as it is on a custom table. */
+    entityFieldUpdate(args: {
+        field_id: Uuid;
+        patch: Record<string, unknown>;
+    }): Promise<RecordsResult<Uuid>>;
+    /** Take a custom field off a standard table. The values already written stay in each row. */
+    entityFieldRetire(args: {
+        field_id: Uuid;
+    }): Promise<RecordsResult<Uuid>>;
+    /** May this person add a column here - and if not, the store's own sentence saying why. */
+    entityFieldRights(args: {
+        token: string;
+    }): Promise<RecordsResult<EntityFieldRights>>;
+    /** REC-53 in one answer: the row's real columns AND its custom values AND the definitions. */
+    entityRecordRead(args: {
+        token: string;
+        record_id: Uuid;
+    }): Promise<RecordsResult<EntityRecordRead>>;
+    /** A patch: a key left out is left alone, a key set to null is cleared with its envelope. */
+    entityValueWrite(args: {
+        token: string;
+        record_id: Uuid;
+        patch: Record<string, unknown>;
+    }): Promise<RecordsResult<EntityRecordRead>>;
+    /** Rows of that standard table with this custom value. Refuses a field nobody declared. */
+    entityRecordsFind(args: {
+        token: string;
+        key: string;
+        value?: unknown;
+        limit?: number;
+        offset?: number;
+    }): Promise<RecordsResult<EntityRecordsFound>>;
     /** The kernel Tables a caller writes a Home, a Field or a Rule into. */
     personKernelId(): Promise<RecordsResult<Uuid>>;
     fieldKernelId(): Promise<RecordsResult<Uuid>>;
@@ -462,6 +507,86 @@ interface RecordsClient {
     workSlotExpire(args: {
         table_id: Uuid;
     }): Promise<RecordsResult<number>>;
+    /**
+     * THE ONE INBOX. Assignments, approvals and the agent's proposals, in one
+     * ordered list with ONE row shape — PRODUCTS.md row 6. A second queue for the
+     * agent's suggestions is the thing this replaces.
+     */
+    workInbox(args?: {
+        limit?: number;
+        offset?: number;
+        includeDecided?: boolean;
+    }): Promise<RecordsResult<WorkInboxItem[]>>;
+    /** "My work", "work I assigned", "waiting on somebody being chosen". */
+    workList(args?: {
+        flavour?: WorkListFlavour;
+        includeFinished?: boolean;
+        limit?: number;
+        offset?: number;
+    }): Promise<RecordsResult<WorkListItem[]>>;
+    /**
+     * Give one record to one person: the Assignee value AND editor access, in one
+     * transaction. Passing no `user_id` un-assigns and says plainly that nobody's
+     * access was taken away.
+     */
+    workAssign(args: {
+        record_id: Uuid;
+        user_id?: Uuid | null;
+        dueDate?: string | null;
+        clearDue?: boolean;
+    }): Promise<RecordsResult<WorkAssignment>>;
+    /** The states this record may be moved to, and the sentence for each it may not. */
+    workRecordStates(args: {
+        record_id: Uuid;
+    }): Promise<RecordsResult<WorkRecordState[]>>;
+    /** Move it. The store refuses a move the model forbids, in its own words. */
+    workSetState(args: {
+        record_id: Uuid;
+        state_id: Uuid | null;
+    }): Promise<RecordsResult<unknown>>;
+    /** The person-kernel record standing for a signed-in person here. */
+    workPerson(args: {
+        user_id: Uuid;
+        create?: boolean;
+    }): Promise<RecordsResult<Uuid | null>>;
+    /** The templates this person may run, so a picker has ids to offer. */
+    workTemplates(args?: {
+        limit?: number;
+    }): Promise<RecordsResult<Array<{
+        template_id: Uuid;
+        name: string;
+        nodes: number;
+        relations: number;
+        created_at: string;
+    }>>>;
+    /** Who may decide a change about this subject, and why each of them may. */
+    workApprovalApprovers(args: {
+        subject_id: Uuid | null;
+        approver_id?: Uuid | null;
+    }): Promise<RecordsResult<WorkApprover[]>>;
+    /** Ask for a change instead of making it. Viewer on the subject is enough to ASK. */
+    workApprovalRequest(args: {
+        subject_id: Uuid;
+        change: WorkChange;
+        note?: string | null;
+        approver_id?: Uuid | null;
+        origin?: "person" | "agent";
+        conversation_id?: Uuid | null;
+    }): Promise<RecordsResult<WorkApprovalFiled>>;
+    /** Whether THIS person may decide THIS one — so a screen never draws a dead button. */
+    workApprovalMayDecide(args: {
+        approval_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
+    /** Approve or decline. Approving APPLIES the change, as the person approving. */
+    workApprovalDecide(args: {
+        approval_id: Uuid;
+        approve: boolean;
+        note?: string | null;
+    }): Promise<RecordsResult<WorkApprovalDecision>>;
+    /** One waiting change in full, for the person deciding it or the one who asked. */
+    workApprovalRead(args: {
+        approval_id: Uuid;
+    }): Promise<RecordsResult<Record<string, unknown>>>;
     /** VIS-31. Is this account a signed-in outsider — no NON-personal organization? */
     isExternalPrincipal(args?: {
         user_id?: Uuid | null;
@@ -569,6 +694,15 @@ declare const DOORS: {
     readonly fieldDeclare: "field_declare";
     readonly fieldUpdate: "field_update";
     readonly fieldRetire: "field_retire";
+    readonly entityTable: "entity_table";
+    readonly entityFields: "entity_fields";
+    readonly entityFieldDeclare: "entity_field_declare";
+    readonly entityFieldUpdate: "entity_field_update";
+    readonly entityFieldRetire: "entity_field_retire";
+    readonly entityFieldRights: "entity_field_rights";
+    readonly entityRecordRead: "entity_record_read";
+    readonly entityValueWrite: "entity_value_write";
+    readonly entityRecordsFind: "entity_records_find";
     readonly tableCapacity: "table_capacity";
     readonly tableStorage: "table_storage";
     readonly promoteTable: "promote_table";
@@ -631,6 +765,19 @@ declare const DOORS: {
     readonly workSlotRelease: "work_slot_release";
     readonly workSlotHolds: "work_slot_holds";
     readonly workSlotExpire: "work_slot_expire";
+    readonly workPerson: "work_person";
+    readonly workAssign: "work_assign";
+    readonly workRecordStates: "work_record_states";
+    readonly workSetState: "work_set_state";
+    readonly workList: "work_list";
+    readonly workTemplates: "work_templates";
+    /** THE ONE QUEUE: assignments, approvals and the agent's proposals together. */
+    readonly workInbox: "work_inbox";
+    readonly workApprovalApprovers: "work_approval_approvers";
+    readonly workApprovalRequest: "work_approval_request";
+    readonly workApprovalMayDecide: "work_approval_may_decide";
+    readonly workApprovalDecide: "work_approval_decide";
+    readonly workApprovalRead: "work_approval_read";
     readonly metadataSearch: "metadata_search";
     readonly ruleDeclare: "rule_declare";
     readonly fieldPropose: "field_propose";
@@ -751,4 +898,4 @@ declare function parseCsv(text: string): string[][];
 declare function importCsv(fields: Field[], text: string): ParsedImport;
 declare function importXlsx(fields: Field[], bytes: ArrayBuffer | Uint8Array): Promise<ParsedImport>;
 
-export { AggregateBucket, AggregateMeasure, AggregateRow, AnonTokenBinding, type AsOf, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, type ExportRow, ExternalPrincipalCard, Field, FieldPatch, FieldProposal, FormSummary, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, NewFieldDeclaration, type ParsedImport, PgError, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, type RecordQuery, RecordRead, RecordRevision, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsResult, RelationCoordinate, ResolvedPublishBinding, StaleWriteDetail, StoredRecord, Subscription, type SupabaseLike, Table, TableCapacity, TableProposal, Timestamp, Uuid, WorkAssignmentField, WorkGraph, WorkInstantiation, WorkSlotHold, WorkState, WorkTurn, WriteConflict, asWriteConflict, cellText, createRecordsClient, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, importCsv, importXlsx, intersectIds, mapPgError, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa };
+export { AggregateBucket, AggregateMeasure, AggregateRow, AnonTokenBinding, type AsOf, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, EntityFieldRights, EntityRecordRead, EntityRecordsFound, EntityTableFacts, type ExportRow, ExternalPrincipalCard, Field, FieldPatch, FieldProposal, FormSummary, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, NewEntityFieldDeclaration, NewFieldDeclaration, type ParsedImport, PgError, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, type RecordQuery, RecordRead, RecordRevision, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsResult, RelationCoordinate, ResolvedPublishBinding, StaleWriteDetail, StoredRecord, Subscription, type SupabaseLike, Table, TableCapacity, TableProposal, Timestamp, Uuid, WorkApprovalDecision, WorkApprovalFiled, WorkApprover, WorkAssignment, WorkAssignmentField, WorkChange, WorkGraph, WorkInboxItem, WorkInstantiation, WorkListFlavour, WorkListItem, WorkRecordState, WorkSlotHold, WorkState, WorkTurn, WriteConflict, asWriteConflict, cellText, createRecordsClient, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, importCsv, importXlsx, intersectIds, mapPgError, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa };

package/dist/core/index.d.ts

@@ -1,5 +1,5 @@
-import { Timestamp, Uuid, RelationCoordinate, RecordsConfig, RecordDocument, RecordsResult, RecordRead, ReadRow, Table, Field, StoredRecord, TableCapacity, NewFieldDeclaration, FieldPatch, FormSummary, AggregateMeasure, AggregateBucket, AggregateRow, Subscription, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordRevision, ReadValue, AnonTokenBinding, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, FieldProposal, TableProposal, MyLevel, RecordsError, WriteConflict, PgError, RecordsDataSource, StaleWriteDetail, PredictedRefusal } from '../index.js';
-export { ABSENCE_REASONS, ACTOR_VOCABULARY, AbsenceReason, Actor, AggregateOperation, COMPUTE_ON, CONTEXT_POLICIES, ComputeOn, ContextPolicy, DELIVERIES, Delivery, DocSignatureCheck, ENTITY_TOKENS, EntityToken, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, FieldBehavior, FieldRule, FieldSensitivity, FieldSource, ForbiddenEnvelopeWord, Freshness, HiddenFieldNotice, Home, KERNEL_TABLES, KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, MergeField, MergeFieldModifier, MergeFieldProvenance, MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, MergeFieldTransform, MissingBehavior, ON_DELETE, OVERRIDE_POLICIES, OnDelete, OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, ParityFieldType, ParityFieldTypeDescriptor, PerValueAccessWord, PermissionLevel, ProvenancePointer, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, RecordsActor, RecordsErrorCode, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationBinding, RelationCardinality, RelationCarries, RelationFlavor, RelationProperties, RelationTarget, ResolutionTriple, RetiredActorWord, Rule, RuleAnswer, RuleExpression, RuleNodeKind, RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, StorageMode, StoreDoorName, StoreRefusalCode, SubscriptionBlock, SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, TableDisplay, TableOrigin, TableType, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, ValueAlternate, ValueAlternateKey, ValueEnvelope, ValueEnvelopeKey, ValueSource, WorkTemplateNode, WorkTemplateRelation, asPermissionLevel, atLeast, err, highestLevel, isRecordsErr, measureKey, ok, publicFormPath } from '../index.js';
+import { Timestamp, Uuid, RelationCoordinate, RecordsConfig, RecordDocument, RecordsResult, RecordRead, ReadRow, Table, Field, StoredRecord, TableCapacity, NewFieldDeclaration, FieldPatch, EntityTableFacts, NewEntityFieldDeclaration, EntityFieldRights, EntityRecordRead, EntityRecordsFound, FormSummary, AggregateMeasure, AggregateBucket, AggregateRow, Subscription, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordRevision, ReadValue, AnonTokenBinding, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, WorkInboxItem, WorkListFlavour, WorkListItem, WorkAssignment, WorkRecordState, WorkApprover, WorkChange, WorkApprovalFiled, WorkApprovalDecision, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, FieldProposal, TableProposal, MyLevel, RecordsError, WriteConflict, PgError, RecordsDataSource, StaleWriteDetail, PredictedRefusal } from '../index.js';
+export { ABSENCE_REASONS, ACTOR_VOCABULARY, AbsenceReason, Actor, AggregateOperation, COMPUTE_ON, CONTEXT_POLICIES, ComputeOn, ContextPolicy, CustomFieldTableType, DELIVERIES, Delivery, DocSignatureCheck, ENTITY_TOKENS, EntityFieldValue, EntityRecordMatch, EntityToken, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, FieldBehavior, FieldRule, FieldSensitivity, FieldSource, ForbiddenEnvelopeWord, Freshness, HiddenFieldNotice, Home, KERNEL_TABLES, KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, MergeField, MergeFieldModifier, MergeFieldProvenance, MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, MergeFieldTransform, MissingBehavior, ON_DELETE, OVERRIDE_POLICIES, OnDelete, OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, ParityFieldType, ParityFieldTypeDescriptor, PerValueAccessWord, PermissionLevel, ProvenancePointer, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, RecordsActor, RecordsErrorCode, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationBinding, RelationCardinality, RelationCarries, RelationFlavor, RelationProperties, RelationTarget, ResolutionTriple, RetiredActorWord, Rule, RuleAnswer, RuleExpression, RuleNodeKind, RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, StorageMode, StoreDoorName, StoreRefusalCode, SubscriptionBlock, SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, TableDisplay, TableOrigin, TableType, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, ValueAlternate, ValueAlternateKey, ValueEnvelope, ValueEnvelopeKey, ValueSource, WorkDueState, WorkInboxKind, WorkOrigin, WorkTemplateNode, WorkTemplateRelation, asPermissionLevel, atLeast, err, highestLevel, isRecordsErr, measureKey, ok, publicFormPath } from '../index.js';
 
 /**
  * DOOR-8. As-of on EITHER clock, and they are different questions:
@@ -179,6 +179,51 @@ interface RecordsClient {
     fieldRetire(args: {
         field_id: Uuid;
     }): Promise<RecordsResult<boolean>>;
+    /** What the registry says about a token, and whether it can hold a value at all. */
+    entityTable(args: {
+        token: string;
+    }): Promise<RecordsResult<EntityTableFacts>>;
+    /** The fields THIS organization added to that standard table. */
+    entityFields(args: {
+        token: string;
+    }): Promise<RecordsResult<Field[]>>;
+    /** Add a column to a standard table. An organization admin's right - it changes the table for everybody. */
+    entityFieldDeclare(args: {
+        token: string;
+        spec: NewEntityFieldDeclaration;
+    }): Promise<RecordsResult<Uuid>>;
+    /** One field's own settings. A TYPE change is refused here by name, as it is on a custom table. */
+    entityFieldUpdate(args: {
+        field_id: Uuid;
+        patch: Record<string, unknown>;
+    }): Promise<RecordsResult<Uuid>>;
+    /** Take a custom field off a standard table. The values already written stay in each row. */
+    entityFieldRetire(args: {
+        field_id: Uuid;
+    }): Promise<RecordsResult<Uuid>>;
+    /** May this person add a column here - and if not, the store's own sentence saying why. */
+    entityFieldRights(args: {
+        token: string;
+    }): Promise<RecordsResult<EntityFieldRights>>;
+    /** REC-53 in one answer: the row's real columns AND its custom values AND the definitions. */
+    entityRecordRead(args: {
+        token: string;
+        record_id: Uuid;
+    }): Promise<RecordsResult<EntityRecordRead>>;
+    /** A patch: a key left out is left alone, a key set to null is cleared with its envelope. */
+    entityValueWrite(args: {
+        token: string;
+        record_id: Uuid;
+        patch: Record<string, unknown>;
+    }): Promise<RecordsResult<EntityRecordRead>>;
+    /** Rows of that standard table with this custom value. Refuses a field nobody declared. */
+    entityRecordsFind(args: {
+        token: string;
+        key: string;
+        value?: unknown;
+        limit?: number;
+        offset?: number;
+    }): Promise<RecordsResult<EntityRecordsFound>>;
     /** The kernel Tables a caller writes a Home, a Field or a Rule into. */
     personKernelId(): Promise<RecordsResult<Uuid>>;
     fieldKernelId(): Promise<RecordsResult<Uuid>>;
@@ -462,6 +507,86 @@ interface RecordsClient {
     workSlotExpire(args: {
         table_id: Uuid;
     }): Promise<RecordsResult<number>>;
+    /**
+     * THE ONE INBOX. Assignments, approvals and the agent's proposals, in one
+     * ordered list with ONE row shape — PRODUCTS.md row 6. A second queue for the
+     * agent's suggestions is the thing this replaces.
+     */
+    workInbox(args?: {
+        limit?: number;
+        offset?: number;
+        includeDecided?: boolean;
+    }): Promise<RecordsResult<WorkInboxItem[]>>;
+    /** "My work", "work I assigned", "waiting on somebody being chosen". */
+    workList(args?: {
+        flavour?: WorkListFlavour;
+        includeFinished?: boolean;
+        limit?: number;
+        offset?: number;
+    }): Promise<RecordsResult<WorkListItem[]>>;
+    /**
+     * Give one record to one person: the Assignee value AND editor access, in one
+     * transaction. Passing no `user_id` un-assigns and says plainly that nobody's
+     * access was taken away.
+     */
+    workAssign(args: {
+        record_id: Uuid;
+        user_id?: Uuid | null;
+        dueDate?: string | null;
+        clearDue?: boolean;
+    }): Promise<RecordsResult<WorkAssignment>>;
+    /** The states this record may be moved to, and the sentence for each it may not. */
+    workRecordStates(args: {
+        record_id: Uuid;
+    }): Promise<RecordsResult<WorkRecordState[]>>;
+    /** Move it. The store refuses a move the model forbids, in its own words. */
+    workSetState(args: {
+        record_id: Uuid;
+        state_id: Uuid | null;
+    }): Promise<RecordsResult<unknown>>;
+    /** The person-kernel record standing for a signed-in person here. */
+    workPerson(args: {
+        user_id: Uuid;
+        create?: boolean;
+    }): Promise<RecordsResult<Uuid | null>>;
+    /** The templates this person may run, so a picker has ids to offer. */
+    workTemplates(args?: {
+        limit?: number;
+    }): Promise<RecordsResult<Array<{
+        template_id: Uuid;
+        name: string;
+        nodes: number;
+        relations: number;
+        created_at: string;
+    }>>>;
+    /** Who may decide a change about this subject, and why each of them may. */
+    workApprovalApprovers(args: {
+        subject_id: Uuid | null;
+        approver_id?: Uuid | null;
+    }): Promise<RecordsResult<WorkApprover[]>>;
+    /** Ask for a change instead of making it. Viewer on the subject is enough to ASK. */
+    workApprovalRequest(args: {
+        subject_id: Uuid;
+        change: WorkChange;
+        note?: string | null;
+        approver_id?: Uuid | null;
+        origin?: "person" | "agent";
+        conversation_id?: Uuid | null;
+    }): Promise<RecordsResult<WorkApprovalFiled>>;
+    /** Whether THIS person may decide THIS one — so a screen never draws a dead button. */
+    workApprovalMayDecide(args: {
+        approval_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
+    /** Approve or decline. Approving APPLIES the change, as the person approving. */
+    workApprovalDecide(args: {
+        approval_id: Uuid;
+        approve: boolean;
+        note?: string | null;
+    }): Promise<RecordsResult<WorkApprovalDecision>>;
+    /** One waiting change in full, for the person deciding it or the one who asked. */
+    workApprovalRead(args: {
+        approval_id: Uuid;
+    }): Promise<RecordsResult<Record<string, unknown>>>;
     /** VIS-31. Is this account a signed-in outsider — no NON-personal organization? */
     isExternalPrincipal(args?: {
         user_id?: Uuid | null;
@@ -569,6 +694,15 @@ declare const DOORS: {
     readonly fieldDeclare: "field_declare";
     readonly fieldUpdate: "field_update";
     readonly fieldRetire: "field_retire";
+    readonly entityTable: "entity_table";
+    readonly entityFields: "entity_fields";
+    readonly entityFieldDeclare: "entity_field_declare";
+    readonly entityFieldUpdate: "entity_field_update";
+    readonly entityFieldRetire: "entity_field_retire";
+    readonly entityFieldRights: "entity_field_rights";
+    readonly entityRecordRead: "entity_record_read";
+    readonly entityValueWrite: "entity_value_write";
+    readonly entityRecordsFind: "entity_records_find";
     readonly tableCapacity: "table_capacity";
     readonly tableStorage: "table_storage";
     readonly promoteTable: "promote_table";
@@ -631,6 +765,19 @@ declare const DOORS: {
     readonly workSlotRelease: "work_slot_release";
     readonly workSlotHolds: "work_slot_holds";
     readonly workSlotExpire: "work_slot_expire";
+    readonly workPerson: "work_person";
+    readonly workAssign: "work_assign";
+    readonly workRecordStates: "work_record_states";
+    readonly workSetState: "work_set_state";
+    readonly workList: "work_list";
+    readonly workTemplates: "work_templates";
+    /** THE ONE QUEUE: assignments, approvals and the agent's proposals together. */
+    readonly workInbox: "work_inbox";
+    readonly workApprovalApprovers: "work_approval_approvers";
+    readonly workApprovalRequest: "work_approval_request";
+    readonly workApprovalMayDecide: "work_approval_may_decide";
+    readonly workApprovalDecide: "work_approval_decide";
+    readonly workApprovalRead: "work_approval_read";
     readonly metadataSearch: "metadata_search";
     readonly ruleDeclare: "rule_declare";
     readonly fieldPropose: "field_propose";
@@ -751,4 +898,4 @@ declare function parseCsv(text: string): string[][];
 declare function importCsv(fields: Field[], text: string): ParsedImport;
 declare function importXlsx(fields: Field[], bytes: ArrayBuffer | Uint8Array): Promise<ParsedImport>;
 
-export { AggregateBucket, AggregateMeasure, AggregateRow, AnonTokenBinding, type AsOf, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, type ExportRow, ExternalPrincipalCard, Field, FieldPatch, FieldProposal, FormSummary, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, NewFieldDeclaration, type ParsedImport, PgError, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, type RecordQuery, RecordRead, RecordRevision, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsResult, RelationCoordinate, ResolvedPublishBinding, StaleWriteDetail, StoredRecord, Subscription, type SupabaseLike, Table, TableCapacity, TableProposal, Timestamp, Uuid, WorkAssignmentField, WorkGraph, WorkInstantiation, WorkSlotHold, WorkState, WorkTurn, WriteConflict, asWriteConflict, cellText, createRecordsClient, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, importCsv, importXlsx, intersectIds, mapPgError, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa };
+export { AggregateBucket, AggregateMeasure, AggregateRow, AnonTokenBinding, type AsOf, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, EntityFieldRights, EntityRecordRead, EntityRecordsFound, EntityTableFacts, type ExportRow, ExternalPrincipalCard, Field, FieldPatch, FieldProposal, FormSummary, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, NewEntityFieldDeclaration, NewFieldDeclaration, type ParsedImport, PgError, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, type RecordQuery, RecordRead, RecordRevision, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsResult, RelationCoordinate, ResolvedPublishBinding, StaleWriteDetail, StoredRecord, Subscription, type SupabaseLike, Table, TableCapacity, TableProposal, Timestamp, Uuid, WorkApprovalDecision, WorkApprovalFiled, WorkApprover, WorkAssignment, WorkAssignmentField, WorkChange, WorkGraph, WorkInboxItem, WorkInstantiation, WorkListFlavour, WorkListItem, WorkRecordState, WorkSlotHold, WorkState, WorkTurn, WriteConflict, asWriteConflict, cellText, createRecordsClient, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, importCsv, importXlsx, intersectIds, mapPgError, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa };

package/dist/core/index.js

@@ -1653,6 +1653,24 @@ var DOORS = {
   fieldDeclare: "field_declare",
   fieldUpdate: "field_update",
   fieldRetire: "field_retire",
+  // CUSTOM FIELDS ON A STANDARD BUSINESS TABLE. Every door above is keyed by a
+  // custom Table's uuid, and a standard table has no Table record - so until
+  // 2026-09-20 `custom.applicable_fields(org, 'party', null)` answered `22P02
+  // invalid input syntax for uuid` and there was no other way in. These are
+  // keyed by the REGISTRY TOKEN instead, and they are one set for all 643
+  // tables the registry types Entity or Detail. The three value doors are
+  // SECURITY INVOKER in the database on purpose: the standard table's own
+  // row-level security is what decides who may read and write its rows, and a
+  // definer wrapper would replace it with a second access system.
+  entityTable: "entity_table",
+  entityFields: "entity_fields",
+  entityFieldDeclare: "entity_field_declare",
+  entityFieldUpdate: "entity_field_update",
+  entityFieldRetire: "entity_field_retire",
+  entityFieldRights: "entity_field_rights",
+  entityRecordRead: "entity_record_read",
+  entityValueWrite: "entity_value_write",
+  entityRecordsFind: "entity_records_find",
   tableCapacity: "table_capacity",
   tableStorage: "table_storage",
   promoteTable: "promote_table",
@@ -1759,6 +1777,23 @@ var DOORS = {
   workSlotRelease: "work_slot_release",
   workSlotHolds: "work_slot_holds",
   workSlotExpire: "work_slot_expire",
+  // THE WORK LAYER'S OWN DOORS (lane WORK-DOORS, 2026-09-20). Until this lane
+  // all nineteen `custom.work_*` functions were SECURITY INVOKER with no client
+  // grant: REC-69, REC-70 and REC-71 were live in the store and unreachable
+  // from a browser. These are the verbs a person actually uses.
+  workPerson: "work_person",
+  workAssign: "work_assign",
+  workRecordStates: "work_record_states",
+  workSetState: "work_set_state",
+  workList: "work_list",
+  workTemplates: "work_templates",
+  /** THE ONE QUEUE: assignments, approvals and the agent's proposals together. */
+  workInbox: "work_inbox",
+  workApprovalApprovers: "work_approval_approvers",
+  workApprovalRequest: "work_approval_request",
+  workApprovalMayDecide: "work_approval_may_decide",
+  workApprovalDecide: "work_approval_decide",
+  workApprovalRead: "work_approval_read",
   // Declared here BECAUSE they do not exist yet: naming them is what makes the
   // absence visible to `pnpm check:store-registry` and to the suite.
   metadataSearch: "metadata_search",
@@ -2192,6 +2227,88 @@ function createRecordsClient(config) {
         "fieldDeclare"
       );
     },
+    async entityTable({ token }) {
+      const answer = await callDoor(
+        DOORS.entityTable,
+        { p_token: token },
+        "entityTable"
+      );
+      if (!answer.ok) return err(answer.error);
+      const row = Array.isArray(answer.data) ? answer.data[0] : answer.data;
+      if (!row) {
+        return err({
+          code: "not_found",
+          message: `The registry answered nothing for the table "${token}".`,
+          hint: "REC-33: a standard table is named by its registry token. Nothing was read."
+        });
+      }
+      return ok(row);
+    },
+    async entityFields({ token }) {
+      const rows = await callDoor(
+        DOORS.entityFields,
+        { p_organization_id: org, p_token: token },
+        "entityFields"
+      );
+      if (!rows.ok) return err(rows.error);
+      return ok((rows.data ?? []).map((row) => ({ id: row.id, ...row.data })));
+    },
+    async entityFieldDeclare({ token, spec }) {
+      return callDoor(
+        DOORS.entityFieldDeclare,
+        { p_organization_id: org, p_token: token, p_spec: spec },
+        "entityFieldDeclare"
+      );
+    },
+    async entityFieldUpdate({ field_id, patch }) {
+      return callDoor(
+        DOORS.entityFieldUpdate,
+        { p_organization_id: org, p_field_id: field_id, p_patch: patch },
+        "entityFieldUpdate"
+      );
+    },
+    async entityFieldRetire({ field_id }) {
+      return callDoor(
+        DOORS.entityFieldRetire,
+        { p_organization_id: org, p_field_id: field_id },
+        "entityFieldRetire"
+      );
+    },
+    async entityFieldRights({ token }) {
+      return callDoor(
+        DOORS.entityFieldRights,
+        { p_organization_id: org, p_token: token },
+        "entityFieldRights"
+      );
+    },
+    async entityRecordRead({ token, record_id }) {
+      return callDoor(
+        DOORS.entityRecordRead,
+        { p_organization_id: org, p_token: token, p_record_id: record_id },
+        "entityRecordRead"
+      );
+    },
+    async entityValueWrite({ token, record_id, patch }) {
+      return callDoor(
+        DOORS.entityValueWrite,
+        { p_organization_id: org, p_token: token, p_record_id: record_id, p_patch: patch },
+        "entityValueWrite"
+      );
+    },
+    async entityRecordsFind({ token, key, value, limit, offset }) {
+      return callDoor(
+        DOORS.entityRecordsFind,
+        {
+          p_organization_id: org,
+          p_token: token,
+          p_key: key,
+          p_value: value === void 0 ? null : value,
+          ...limit === void 0 ? {} : { p_limit: limit },
+          ...offset === void 0 ? {} : { p_offset: offset }
+        },
+        "entityRecordsFind"
+      );
+    },
     async fieldUpdate({ field_id, patch }) {
       return callDoor(
         DOORS.fieldUpdate,
@@ -2609,6 +2726,128 @@ function createRecordsClient(config) {
         "workSlotExpire"
       );
     },
+    // ── the work layer a person actually uses ────────────────────────────
+    async workInbox(args) {
+      return callDoor(
+        DOORS.workInbox,
+        {
+          p_organization_id: org,
+          p_limit: args?.limit ?? 50,
+          p_offset: args?.offset ?? 0,
+          p_include_decided: args?.includeDecided ?? false
+        },
+        "workInbox"
+      );
+    },
+    async workList(args) {
+      return callDoor(
+        DOORS.workList,
+        {
+          p_organization_id: org,
+          p_flavour: args?.flavour ?? "mine",
+          p_include_finished: args?.includeFinished ?? false,
+          p_limit: args?.limit ?? 100,
+          p_offset: args?.offset ?? 0
+        },
+        "workList"
+      );
+    },
+    async workAssign({ record_id, user_id = null, dueDate = null, clearDue = false }) {
+      return callDoor(
+        DOORS.workAssign,
+        {
+          p_organization_id: org,
+          p_record_id: record_id,
+          p_assignee_user_id: user_id,
+          p_due_date: dueDate,
+          p_clear_due: clearDue
+        },
+        "workAssign"
+      );
+    },
+    async workRecordStates({ record_id }) {
+      return callDoor(
+        DOORS.workRecordStates,
+        { p_organization_id: org, p_record_id: record_id },
+        "workRecordStates"
+      );
+    },
+    async workSetState({ record_id, state_id }) {
+      return callDoor(
+        DOORS.workSetState,
+        { p_organization_id: org, p_record_id: record_id, p_state_id: state_id },
+        "workSetState"
+      );
+    },
+    async workPerson({ user_id, create = true }) {
+      return callDoor(
+        DOORS.workPerson,
+        { p_organization_id: org, p_user_id: user_id, p_create: create },
+        "workPerson"
+      );
+    },
+    async workTemplates(args) {
+      return callDoor(
+        DOORS.workTemplates,
+        { p_organization_id: org, p_limit: args?.limit ?? 100 },
+        "workTemplates"
+      );
+    },
+    async workApprovalApprovers({ subject_id, approver_id = null }) {
+      return callDoor(
+        DOORS.workApprovalApprovers,
+        { p_organization_id: org, p_subject_id: subject_id, p_approver_id: approver_id },
+        "workApprovalApprovers"
+      );
+    },
+    async workApprovalRequest({
+      subject_id,
+      change,
+      note = null,
+      approver_id = null,
+      origin = "person",
+      conversation_id = null
+    }) {
+      return callDoor(
+        DOORS.workApprovalRequest,
+        {
+          p_organization_id: org,
+          p_subject_id: subject_id,
+          p_change: change,
+          p_note: note,
+          p_approver_id: approver_id,
+          p_origin: origin,
+          p_conversation_id: conversation_id
+        },
+        "workApprovalRequest"
+      );
+    },
+    async workApprovalMayDecide({ approval_id }) {
+      return callDoor(
+        DOORS.workApprovalMayDecide,
+        { p_organization_id: org, p_approval_id: approval_id },
+        "workApprovalMayDecide"
+      );
+    },
+    async workApprovalDecide({ approval_id, approve, note = null }) {
+      return callDoor(
+        DOORS.workApprovalDecide,
+        {
+          p_organization_id: org,
+          p_approval_id: approval_id,
+          p_approve: approve,
+          p_note: note
+        },
+        "workApprovalDecide"
+      );
+    },
+    async workApprovalRead({ approval_id }) {
+      return callDoor(
+        DOORS.workApprovalRead,
+        { p_organization_id: org, p_approval_id: approval_id },
+        "workApprovalRead"
+      );
+    },
     // ── the trust doors ──────────────────────────────────────────────────
     async isExternalPrincipal(args) {
       return trustDoor(