@ai-matrx/records 0.92.1 → 0.93.0

package/dist/react/index.d.cts

@@ -11524,1135 +11524,595 @@ interface SubscriptionBlock {
 }
 
 /**
- * The data seam: a structural subset of `SupabaseClient`. The package never
- * opens a database connection of its own and never holds a key — the HOST
- * supplies a client that already carries the operating person's session, which
- * is what makes DOOR-5 and AGT-N-4 true (the store sees the person, not us).
+ * One of the five states, as `custom.work_states()` lists them — with what it
+ * may become next and whether it is the end. A screen that hardcoded these
+ * would be a second source of truth for the one question the store answers.
  */
-interface RecordsDataSource {
-    /**
-     * Call a door. The name is always a door the live catalogue has; `/core`
-     * refuses `door_absent` before it ever reaches here for one that does not.
-     */
-    rpc(fn: string, args: Record<string, unknown>, 
-    /**
-     * THE SCHEMA THE DOOR LIVES IN, always supplied: `custom` for the store's
-     * own doors, `iam` for the trust doors (the external principal and the
-     * publish binding, which are the PLATFORM's). A host binding supabase-js
-     * routes this to `client.schema(options.schema).rpc(fn, args)`; a host that
-     * ignores it calls its own default PostgREST profile — `public` — and is
-     * refused by name, which is the failure we want rather than a silent answer
-     * from the wrong system. (Before 2026-09-18 this was described as "only ever
-     * `iam`" and the store's doors went unqualified; the extension's first real
-     * turn proved that asks `public.store_is_open` and finds nothing.)
-     */
-    options?: {
-        schema?: string;
-    }): PromiseLike<{
-        data: unknown;
-        error: PgError | null;
-    }>;
-    /**
-     * OPTIONAL. True for the real supabase adapters: the client may open a table page with ONE
-     * `custom.table_page_bundle` call instead of a dozen shape doors one after another (PAGE-BUNDLE).
-     * Leave it off for a test or replay source that does not model the bundle door.
-     */
-    opensInOneCall?: boolean;
-    /** Reads of `custom.*` go through the schema-qualified builder, never a bare `from`. */
-    schema(name: string): {
-        from(table: string): RecordsTableQuery;
-    };
+interface WorkState {
+    sort: number;
+    name: string;
+    terminal: boolean;
+    next: string[];
 }
-/** The read surface the list and query paths use. A real supabase-js client satisfies it. */
-interface RecordsTableQuery {
-    select(columns: string, options?: {
-        count?: "exact" | "planned" | "estimated";
-        head?: boolean;
-    }): RecordsFilter;
+/** One node of a template graph: a record-to-be, in a named Table, under a ref. */
+interface WorkTemplateNode {
+    /** The name the graph refers to this node by, and the key an override is filed under. */
+    ref: string;
+    /** The Table the record lands in. */
+    table: Uuid;
+    /** The document it starts life with. An override merges on top at instantiation. */
+    data?: Record<string, unknown>;
 }
-interface RecordsFilter extends PromiseLike<RecordsResponse> {
-    eq(column: string, value: unknown): RecordsFilter;
-    neq(column: string, value: unknown): RecordsFilter;
-    in(column: string, values: readonly unknown[]): RecordsFilter;
-    is(column: string, value: null | boolean): RecordsFilter;
-    gte(column: string, value: unknown): RecordsFilter;
-    lte(column: string, value: unknown): RecordsFilter;
-    order(column: string, options?: {
-        ascending?: boolean;
-    }): RecordsFilter;
-    range(from: number, to: number): RecordsFilter;
-    limit(count: number): RecordsFilter;
+/** One edge. `owned` is what `custom.relation_own` makes; W1-REL owns the rest. */
+interface WorkTemplateRelation {
+    from: string;
+    to: string;
+    kind?: string;
 }
-interface RecordsResponse {
-    data: unknown;
-    error: PgError | null;
-    count?: number | null;
+/**
+ * THE WHOLE TEMPLATE, DECLARATIVELY. REC-70: the graph is created in ONE act
+ * and judged before any of it is written, so an agent writes a twelve-step
+ * checklist in a single call and a half-made checklist is not a state the store
+ * can be in.
+ */
+interface WorkGraph {
+    nodes: WorkTemplateNode[];
+    relations?: WorkTemplateRelation[];
+}
+/** What `custom.work_template_instantiate` answers: what it made, and how much. */
+interface WorkInstantiation {
+    template_id: Uuid;
+    /** The log row. Until W3-HIST lands, this row IS the log of the act, and says so. */
+    instantiation_id: Uuid;
+    records_created: number;
+    relations_created: number;
+    relation_kind: string;
+    /** ref → the record it became, which is how a step finds its own record. */
+    refs: Record<string, Uuid>;
+    records: Uuid[];
+    relations: Uuid[];
+    ms?: number;
+}
+/** One row of `custom.work_whose_turn`: a record, whose turn it is, and where it is up to. */
+interface WorkTurn {
+    record_id: Uuid;
+    title: string | null;
+    assignee_id: Uuid | null;
+    turn: string | null;
+    due_on: Timestamp | null;
+    state: string | null;
+    status: string | null;
+    terminal: boolean | null;
+}
+/** A Field assignment is made of, as the store itself describes it. */
+interface WorkAssignmentField {
+    key: string;
+    label: string;
+    spec: Record<string, unknown>;
 }
 /**
- * WHO IS ACTING. AGT-N-4: an agent carries the exact authority of the person
- * operating it — there is no agent identity and there are no service roles. So
- * the actor word and the person are two separate facts, and `on_behalf_of` is
- * meaningful only when the actor is `agent`.
+ * One hold on one slot. `expired` is the STORE's answer, not a clock comparison
+ * a screen ran: a hold whose time is up is named as lapsed rather than quietly
+ * disappearing, so a person can see why the slot came back.
  */
-interface RecordsActor {
-    actor: Actor;
-    /** The signed-in person. The store reads this from the session, not from us; this is for the client's own mirror. */
-    user_id?: Uuid;
-    /** Only an agent acts on behalf of a person (the store refuses it otherwise). */
-    on_behalf_of?: Uuid;
+interface WorkSlotHold {
+    hold_id: Uuid;
+    slot_key: string;
+    holder: string;
+    expires_at: Timestamp | null;
+    expired: boolean;
 }
 /**
- * OPTIONAL. A live-updates seam. The default degradation is stated rather than
- * silent: with no port bound, `useRecords` reports `live: false` and the screen
- * can say "not live" instead of quietly going stale.
- *
- * A host binds this with `@ai-matrx/data/react`'s channel hygiene — the package
- * deliberately does NOT depend on it, so the headless core stays free of a
- * realtime client and a host that has one keeps using the one it already has.
+ * What an embed token is good for, from `custom.anon_token_verify`. A token
+ * carries ONE decision: `read` or `write`, never both.
  */
-interface RecordsRealtimePort {
+interface AnonTokenBinding {
+    token_id: Uuid;
+    organization_id: Uuid;
+    form_id: Uuid | null;
+    saved_view_id: Uuid | null;
+    record_id: Uuid | null;
+    mode: "read" | "write";
+}
+/** The three things that land in the one inbox. Closed, one word each. */
+type WorkInboxKind = "assignment" | "approval" | "proposal";
+/** Who filed it: a colleague, or an agent acting for one. */
+type WorkOrigin = "person" | "agent";
+/** Where a due date stands, in the store's own words. */
+type WorkDueState = "overdue" | "due_today" | "scheduled" | "undated" | "finished";
+/** One row of `custom.work_inbox` — the SAME shape whichever of the three it is. */
+interface WorkInboxItem {
+    item_id: Uuid;
+    kind: WorkInboxKind;
+    origin: WorkOrigin;
+    title: string;
+    subject_id: Uuid | null;
+    subject_kind: string;
+    summary: string | null;
+    state: string;
+    due_on: Timestamp | null;
+    due_state: WorkDueState | null;
+    /** False for a decided row a person asked to see. A screen shows it, inert. */
+    actionable: boolean;
+    requested_by: Uuid | null;
+    requested_by_name: string | null;
+    at: Timestamp;
     /**
-     * Watch one organization's records of one table. Returns an unsubscribe.
-     *
-     * THE HOST NUDGES THROUGH THIS SINK AND REACHES AROUND NOTHING. Until 0.43.0 the callback
-     * was `(recordId: Uuid) => void` and a host that also wanted to say "the SHAPE moved"
-     * imported `tableShapeChanged` from `@ai-matrx/records/react` and called it directly —
-     * which worked, and which meant the port contract did not describe half of what a port
-     * actually does. A column appearing is not a row changing, and the package owns the
-     * difference.
-     *
-     * NOTHING THAT ARRIVES HERE IS DATA. A nudge has not passed the read door, so the hook
-     * re-reads — by id set when the nudge names ids, whole-page when it cannot.
+     * The table it is about (lane S5-PRIME): the table itself for a new column, new records or a
+     * template; the record's table for a change to a record; null for a new table (it waits on a
+     * home). An assignment carries its record's table. What an inbox groups by.
      */
-    subscribeRecords(args: {
-        organization_id: Uuid;
-        table_id: Uuid;
-    }, sink: RecordsChangeSink): () => void;
-}
-/** What a realtime port may tell the package. Two calls, because a column is not a row. */
-interface RecordsChangeSink {
+    table_id?: Uuid | null;
+    table_name?: string | null;
     /**
-     * THESE RECORDS MOVED. `null` means "I cannot tell you which" — a reconnect, a tab wake, or
-     * a change above the store's own id cap — and is the one case that costs a whole-page read.
-     * An EMPTY array is not the same thing and is not a nudge at all.
+     * A CLOSED ITEM SAYS WHO AND WHEN (lane S5-PRIME). Null while it is waiting. For `withdrawn`
+     * — nobody decided it; the thing it would change was archived — `decided_by` is whoever
+     * archived it (null when the store's own backlog sweep closed it).
      */
-    records(ids: readonly Uuid[] | null): void;
+    decided_by?: Uuid | null;
+    decided_by_name?: string | null;
+    decided_at?: Timestamp | null;
+    /** The store's own sentence: what was applied, what was left alone, or why it was withdrawn. */
+    outcome?: string | null;
     /**
-     * THIS TABLE'S SHAPE MOVED — a column added, retired or changed. Re-reading the rows would
-     * redraw the same table without the new column in it, which is a screen that is out of date
-     * while looking healthy.
+     * THIS PERSON'S OWN STATE (lane S5-PRIME-2). Set only in the view that shows it: `snoozed_until`
+     * in the snoozed view, `cleared_at` in the done view. Nobody else's snooze or clear is ever read.
      */
-    shape(): void;
+    snoozed_until?: Timestamp | null;
+    cleared_at?: Timestamp | null;
+    /** How many of this person's items are snoozed / cleared right now — the same on every row. */
+    snoozed_count?: number;
+    cleared_count?: number;
+    /**
+     * HOW LONG A DECISION ON THIS ROW IS HELD WITH UNDO before it is made (VERIFIER-20), in seconds:
+     * the organization's `custom/decision_undo_seconds` (default 5) for a pending approval or
+     * proposal; 0 when something already waits on the answer; null for work and closed rows.
+     */
+    undo_seconds?: number | null;
+    /** Why a decision here cannot be held (it is made at once) — the store's sentence, or null. */
+    undo_refusal?: string | null;
 }
 /**
- * OPTIONAL. Where a refusal that nobody asked about goes — the loud funnel.
- * Default degradation: `console.error` with the store's own words, never
- * silence.
- */
-type RecordsErrorSink = (error: {
-    code: string;
-    message: string;
-    hint?: string;
-    where: string;
-}) => void;
-/**
- * OPTIONAL. The merge-field resolver's server half (`W5-MERGE-B`). While it is
- * not bound, `useMergeField` answers `pending` WITH THE REASON — never a blank,
- * never a literal placeholder left in the text (DYN-14).
+ * Which of a person's three inbox views `custom.work_inbox` answers (lane S5-PRIME-2): what is
+ * waiting now, what they snoozed (soonest back first), what they cleared (latest first).
  */
-interface RecordsResolverPort {
-    resolve(args: {
-        organization_id: Uuid;
-        merge_field_keys: string[];
-        /** The live selection the `state` source reads (DYNAMIC-VALUES §C). */
-        state?: Record<string, unknown>;
-    }): Promise<unknown>;
-}
-/** The one config a host binds. */
-interface RecordsConfig {
-    /** REQUIRED. */
-    dataSource: RecordsDataSource;
-    /** REQUIRED. */
-    actor: RecordsActor;
-    /**
-     * REQUIRED. REC-29: organizations are hard walls, and the store is keyed
-     * `(organization_id, id)`. There is no "current organization" this package
-     * discovers for itself — the host says which one, every time.
-     *
-     * `null` is the ALL-ORGANIZATIONS mode (access belongs to the person, not the selected
-     * organization): a host whose page lists across every organization the person belongs to
-     * mounts with none. Doors that answer for the person (`custom.data_home*`) take it; a door that
-     * needs one is sent NULL and refuses in its own words, never a guessed organization.
-     */
-    organizationId: Uuid | null;
-    /**
-     * EVERY organization the person belongs to (active-org-is-never-a-list-filter.md).
-     * `organizationId` above is where NEW things are written and which org a write
-     * runs in; it never decides what a READ shows. With this set, `tableList` /
-     * `tableFacts` span all of these organizations (or one, when the page passes
-     * its `organization_id` filter), and `tableRead` / `recordRead` /
-     * `recordValuesVersioned` open a record in ITS OWN organization. Absent ⇒ the
-     * client reads only `organizationId`, exactly as before.
-     */
-    organizationIds?: readonly Uuid[];
-    realtime?: RecordsRealtimePort;
-    onError?: RecordsErrorSink;
-    resolver?: RecordsResolverPort;
-    /**
-     * The schema the record store lives in. Exists so a rehearsal branch and
-     * production can differ without a fork; it is `custom` everywhere today.
-     */
-    schema?: string;
-    /**
-     * Doors the generated catalogue (`STORE_DOORS`) does not list YET but this store is known to have —
-     * the nightly clone after a rehearsal, a test store. A screen reading an owed door asks
-     * `doorReady(config, name)` first, so production (which lacks the door until the chair applies it)
-     * is never asked and logs nothing. Leave it out in a shipped host: the regenerated catalogue is
-     * the switch.
-     */
-    knownDoors?: readonly string[];
-}
-
-/**
- * REL-6. Whether Visibility flows along this relation and the MAXIMUM access
- * level it carries. Default off on `referenced`, on for `owned`.
- */
-interface RelationCarries {
-    carries: boolean;
-    /** The ceiling — a relation never carries more access than this. */
-    max_access: string | null;
-}
-/** The seven properties, each its own question. */
-interface RelationProperties {
-    /** REL-1. Stored once on the contained table, read from the field's side. */
-    flavor: RelationFlavor;
-    /** REL-2. Separate from flavour. */
-    on_delete: OnDelete;
-    /** REL-3. A snapshot is a frozen copy in the relation's payload — never a pointer into History. */
-    binding: RelationBinding;
-    /** REL-4. */
-    ordered: boolean;
-    /** REL-5. */
-    loops: "allowed" | "refused";
-    /** REL-6. */
-    carries: RelationCarries;
-    /** REL-7. */
-    cardinality: RelationCardinality;
+type WorkInboxView = "inbox" | "snoozed" | "done";
+/** What `custom.inbox_snooze` / `inbox_unsnooze` / `inbox_clear` / `inbox_unclear` answer. */
+interface InboxStateChange {
+    item_id: Uuid;
+    /** Where the item stands for this person now. */
+    state: "snoozed" | "cleared" | "waiting";
+    /** False when an un-snooze / un-clear found nothing to undo (it says so in `sentence`). */
+    changed?: boolean;
+    snoozed_until?: Timestamp;
+    cleared_at?: Timestamp;
+    /** The store's own sentence, for the person. */
+    sentence: string;
 }
 /**
- * REL-8 / REL-N-1. A target is a REFERENCE, written that way from the first
- * line of code, because it may name a row outside our database. One Table,
- * several, or any — polymorphic without restriction. External targets are
- * read-only in v1.
+ * One organization's line of `custom.inbox_counts` — what waits on this person there, counted by
+ * the same predicate the inbox lists with. The shell badge's number.
  */
-type RelationTarget = {
-    kind: "ours";
-    entity_token: string;
-    row_id: Uuid;
-} | {
-    kind: "external";
-    connection_token: string;
-    external_table: string;
-    external_key: string;
-} | {
-    kind: "any";
-};
-/** One edge, as the store holds it in `platform.associations`. */
-interface Relation {
-    id: Uuid;
+interface InboxCounts {
     organization_id: Uuid;
-    /** REL-10. The field key, which is what `role` holds. */
-    role: string;
-    source: RelationTarget;
-    target: RelationTarget;
-    properties: RelationProperties;
-    /** REL-4. Meaningful only when `ordered`. */
-    position: number | null;
-    /** REL-3. The frozen copy, when `binding` is `snapshot`. */
-    payload: Record<string, unknown> | null;
-    /** REL-14. Hydrated from the target's title field AT READ — never stored. */
-    label: string | null;
-    created_at: Timestamp;
-    updated_at: Timestamp;
-    /** REL-13 / REL-16. Associations are versioned, so relation history exists. */
-    version: number;
+    organization_name: string | null;
+    waiting: number;
+    snoozed: number;
+    cleared: number;
+    overdue: number;
+    oldest_waiting_at: Timestamp | null;
 }
 /**
- * DOOR-6. A query coordinate: "related to THIS, along THAT role, in that
- * direction". Any combination, and any subset of them.
+ * The states an approval moves through. `withdrawn` (lane S5-PRIME) is closed by the store, not
+ * decided by a person: the record or table it would change was archived.
  */
-interface RelationCoordinate {
-    /** The record at the other end. */
+type WorkApprovalState = "pending" | "approved" | "declined" | "withdrawn";
+/** Which of the three lists `custom.work_list` answers. */
+type WorkListFlavour = "mine" | "assigned" | "unassigned";
+/** One row of `custom.work_list`: a record, whose it is, and where it is up to. */
+interface WorkListItem {
     record_id: Uuid;
-    /** The field key the edge carries as its role. Omit to mean any role. */
-    role?: string;
-    /** Which way to walk. `out` is this record's own relation fields. */
-    direction?: "out" | "in" | "either";
+    table_id: Uuid;
+    table_name: string | null;
+    title: string | null;
+    assignee_id: Uuid | null;
+    assignee_name: string | null;
+    assignee_user_id: Uuid | null;
+    due_on: Timestamp | null;
+    due_state: WorkDueState;
+    status: string | null;
+    terminal: boolean;
+    assigned_by: Uuid | null;
+    updated_at: Timestamp;
 }
 /**
- * The arguments of the ONE relation-words resolver: the FIELD, because that is where its display
- * spec is declared and judged (`custom._display_of_field` reads it server-side; the caller never
- * carries it), and the ids of a page of cells.
+ * One state a record may be moved to, with the model's own answer about whether
+ * it may — and, when it may not, the sentence saying why. A screen offers what
+ * is allowed and explains what is not; it never renders a dead control.
  */
-/** A linked record's icon, and its table's icon for a record that has none (`relationWordsMany`). */
-interface RelationIcons {
-    icon: string | null;
-    tableIcon: string | null;
+interface WorkRecordState {
+    state_id: Uuid;
+    name: string;
+    sort: number;
+    terminal: boolean;
+    is_current: boolean;
+    allowed: boolean;
+    refusal: string | null;
 }
-interface RelationWordsManyArgs {
-    field_id: Uuid;
-    record_ids: Uuid[];
+/** The change a pending approval carries. Two kinds, because two can be applied. */
+type WorkChange = {
+    kind: "record_patch";
+    patch: Record<string, unknown>;
+} | {
+    kind: "field_add";
+    field: Record<string, unknown>;
+};
+/** Somebody who may decide a particular request, and the reason they may. */
+interface WorkApprover {
+    user_id: Uuid;
+    name: string;
+    why: string;
 }
-/** One reference as the store keeps it. */
-interface EntityRef {
-    /** The `platform.entity_types` token: `note`, `web_site`, `agent` … */
-    token: string;
-    id: Uuid;
+/** What `custom.work_approval_request` answers: it is filed, and who it waits on. */
+interface WorkApprovalFiled {
+    approval_id: Uuid;
+    state: "pending";
+    subject_id: Uuid;
+    subject_kind: string;
+    origin: WorkOrigin;
+    approvers: WorkApprover[];
+    message: string;
 }
-/** One reference as a read door answers it. */
-interface EntityRefWithWords extends EntityRef {
-    /**
-     * The thing's own title — or the store's withheld sentence when the reader
-     * may not open it; `null` when the kind names no title.
-     */
-    label: string | null;
+/** What a decision answers — including whether the change was actually made. */
+interface WorkApprovalDecision {
+    approval_id: Uuid;
+    state: "approved" | "declined";
+    subject_id: Uuid;
+    /** The whole point: approving APPLIES the change, in the same transaction. */
+    applied: boolean;
+    field_id: Uuid | null;
+    version: number | null;
+    message: string;
 }
-/** One kind of platform thing a record may point at (`custom.entity_reference_kinds`). */
-interface EntityReferenceKind {
-    token: string;
-    /** What a person reads: "Note", "Site", "Agent". */
-    label: string;
-    /** The picker's grouping: the admin-assigned reference category, else the schema. */
-    category: string;
+/** One inbox decision of a batch (`custom.work_decide_many`). */
+interface WorkDecideManyItem {
+    /** The inbox item — a `work_approval` record's id (`WorkInboxItem.item_id`). */
+    item: Uuid;
+    decision: "approve" | "decline";
+    note?: string | null;
 }
 /**
- * The references a cell holds, whichever shape it arrived in — one object, a
- * list, or what a read door rendered (with labels). Anything that is not a
- * reference is left out, never guessed at.
- */
-declare function entityRefsOf(value: unknown): EntityRefWithWords[];
-/**
- * What to WRITE for an entity-reference cell: `{token, id}` only, each thing
- * once, first mention first — the label a read door added is dropped, because
- * the store reads it and never keeps it (REL-14). A single-valued column gets
- * the one object (or `null`), a multi-valued one the list.
- */
-declare function entityRefsToWrite(value: unknown, multi: boolean): EntityRef | EntityRef[] | null;
-/**
- * The kinds of platform thing a record may point at — what the field editor's
- * kind picker lists. `custom.entity_reference_kinds()`.
- */
-declare function entityReferenceKinds(source: RecordsDataSource): Promise<RecordsResult<EntityReferenceKind[]>>;
-/**
- * THE SEARCH DOOR (lane REFERENCE-CARRY). The platform things of these kinds whose words hold
- * `search`, that THIS person may point a record at — each one a thing the store's own write check
- * (`custom._entity_reference_target_ok`) would accept, so a picked reference is never refused on
- * save. `custom.entity_reference_search`. An empty search lists the first things by name.
+ * `archived` (lane S5-PRIME): the thing it would change is archived, so it cannot be decided; the
+ * sentence names it. A withdrawn approval answers `already_decided` with "That was withdrawn on …".
  */
-declare function entityReferenceSearch(source: RecordsDataSource, organizationId: Uuid | null, tokens: readonly string[], search: string, limit?: number): Promise<RecordsResult<EntityRefWithWords[]>>;
-/**
- * THE WORDS HELPER. The words of each `{token, id}` for a picker or a chip
- * before anything is saved — each label read by the store for THIS person and
- * withheld when they may not open the thing. `custom.entity_reference_words`.
- * A saved cell needs no call: every read door already answers its labels.
- */
-declare function entityReferenceWords(source: RecordsDataSource, organizationId: Uuid | null, refs: readonly EntityRef[]): Promise<RecordsResult<EntityRefWithWords[]>>;
-/** One reverse column of a Table, as `custom.reverse_columns` answers it. */
-interface ReverseColumn {
-    /** Stable key: the linking Field's `inverse_key`, else `linked_<field id>`. Never a Field key of B. */
-    key: string;
-    /** What the column is called on B: the linking table's name (plus the column's when ambiguous). */
-    label: string;
-    /** The relation Field on the linking table. */
-    source_field_id: Uuid;
-    source_field_key: string;
-    source_field_label: string;
-    /** The linking table. */
-    source_table_id: Uuid;
-    source_table_name: string;
-    /** Always `many`: any number of records may link to one. */
-    cardinality: "many";
-    /**
-     * True for a virtual back-link (written only from the linking table's side). False for a TWO-WAY
-     * LINK (NOTION-PROPS): the reverse end is a real Field on this table — `key` is its key, `label`
-     * its label — and `relationReverseSet` writes its links from here.
-     */
-    read_only: boolean;
+type WorkDecideVerdict = "approved" | "declined" | "already_decided" | "no_right" | "archived" | "refused";
+interface WorkDecideManyResult {
+    index: number;
+    item: Uuid;
+    decision: "approve" | "decline";
+    verdict: WorkDecideVerdict;
+    /** The store's own sentence: what was applied, or why it was not. */
+    sentence: string;
+    subject_id?: Uuid;
+    version?: number | null;
+    record_ids?: Uuid[];
+    code?: string;
 }
-/**
- * NOTION-PROPS. A two-way link's reverse Field: a relation whose `config.reverse_of` names the
- * forward relation it mirrors. It holds no value of its own — its links are the forward Field's.
- */
-declare function isReverseField(field: {
-    type?: unknown;
-    config?: unknown;
-} | null | undefined): boolean;
-/** One linking record, as a chip shows it. */
-interface ReverseLink {
-    id: Uuid;
-    /** The linking record's name, read by the store for this reader. */
-    words: string;
+/** What `custom.work_decide_many` answers: the counts, then one verdict per item in order. */
+interface WorkDecideMany {
+    asked: number;
+    approved: number;
+    declined: number;
+    not_decided: number;
+    results: WorkDecideManyResult[];
 }
-/** The links of one record through one reverse column: how many the reader may see, and one page. */
-interface ReverseLinks {
-    total: number;
-    links: ReverseLink[];
+/** What `custom.work_assign` answers: the value, the access, and who holds it now. */
+interface WorkAssignment {
+    record_id: Uuid;
+    assigned: boolean;
+    assignee: Uuid | null;
+    assignee_user_id: Uuid | null;
+    assignee_name: string | null;
+    was: Uuid | null;
+    due_date: Timestamp | null;
+    version: number | null;
+    /** The share sentence, or why nothing was taken away when un-assigning. */
+    access: string;
+    message: string;
 }
-interface ReverseLinksManyArgs {
-    /** The Table whose records are being shown (B). */
-    table_id: Uuid;
-    /** `ReverseColumn.source_field_id`. */
-    source_field_id: Uuid;
-    /** A page of B's record ids — up to 200 a call; more are sent in groups by the client. */
-    record_ids: readonly Uuid[];
-    /** Links per record, 1–50 (the store holds it there). Default 10. */
-    limit?: number;
-    /** Skip this many links of each record — the next page of one hub record. Default 0. */
-    offset?: number;
+
+/** What a step asks for before it counts as done. Every one of these is CHECKED. */
+type ChecklistRequirementKind = 
+/** A person says it is done. */
+"none"
+/** A sentence of evidence, under `note`. */
+ | "note"
+/** A named value filled in on the step itself. */
+ | "answer"
+/** A named Field on the record the run is about must hold a value. */
+ | "record_field"
+/** The step IS a form (SCR-19): finishing it needs a response record. */
+ | "form"
+/** The step IS a document from a doc template (REC-68): finishing it needs a render. */
+ | "document";
+interface ChecklistRequirement {
+    kind: ChecklistRequirementKind;
+    /** For `answer` and `record_field`: which value. */
+    key?: string;
+    /** What a person is asked for, in their words. */
+    label?: string;
+    /** For `form`: the published form this step is. */
+    form_id?: Uuid;
+    /** For `document`: the doc template this step renders. */
+    template_id?: Uuid;
 }
-/** `reverseLinksFields`: the links of a page through several reverse columns, in one call. */
-interface ReverseLinksFieldsArgs {
-    table_id: Uuid;
-    /** Each `ReverseColumn.source_field_id` — at most 20. */
-    source_field_ids: readonly Uuid[];
-    record_ids: readonly Uuid[];
-    limit?: number;
-    offset?: number;
+/** One step of a checklist, as it is WRITTEN — not as it is run. */
+interface ChecklistStepSpec {
+    /** The name the checklist refers to this step by; lower-case, unique. */
+    ref: string;
+    /** What a person reads in their work. */
+    title: string;
+    /** Which role owns it. A role the checklist never declares is refused at save. */
+    role?: string;
+    /** How many days after the run starts it is due. */
+    due_days?: number;
+    /** Steps it waits for. A step waits only for steps listed above it. */
+    depends_on?: string[];
+    requires?: ChecklistRequirement;
 }
-/** The store's per-call ceiling on records for `custom.reverse_links_many`. */
-declare const REVERSE_LINKS_RECORDS_PER_CALL = 200;
-/** The store's ceiling on links a record per call. */
-declare const REVERSE_LINKS_PAGE_MAX = 50;
-/** The store's typed "source archived" answer for a lookup or roll-up. */
-interface SourceArchived {
-    __unavailable: "source_archived";
-    /** `link`: the relation it reads through is archived; `column`: the far column it reads is. */
-    reads: "link" | "column";
-    /** The archived Field. Absent when the reader may not know its Table. */
-    field_id?: Uuid;
-    /** Its label. Absent when the reader may not know its Table. */
+/** A role, and the person who stands in it by default. */
+interface ChecklistRoleSpec {
+    role: string;
     label?: string;
+    user_id?: Uuid | null;
+}
+/** What starts a run. */
+type ChecklistTriggerKind = "manual" | "record_created" | "status_reached";
+interface ChecklistTrigger {
+    kind: ChecklistTriggerKind;
+    /** The Table being watched, for the two kinds that watch one. */
     table_id?: Uuid;
-    /** Its Table's name. Absent when the reader may not know that Table. */
-    table?: string;
+    /** The state, for `status_reached`. */
+    status?: string;
 }
-/** The typed "source archived" answer, when `value` is one; null for any other value. */
-declare function sourceArchivedOf(value: unknown): SourceArchived | null;
-
-/**
- * DYN-14 / DYN-15. An ordered list of merge fields ENDING IN A LITERAL, or the
- * decision to block the turn, or a named absence. No unresolved value is ever
- * rendered blank or left as a literal placeholder.
- */
-type MissingBehavior = {
-    kind: "fallback";
-    chain: Array<{
-        merge_field_key: string;
-    } | {
-        literal: unknown;
-    }>;
-} | {
-    kind: "block_turn";
-} | {
-    kind: "named_absence";
-    say: string;
-};
-/** DYN-16. Applied AFTER resolution, on the merge field and never on the Field. */
-interface MergeFieldTransform {
-    /** e.g. `currency`, `upper`, `date`; the organization's own list. */
+/** THE COMPLETE DECLARATIVE CHECKLIST — one object, one call, a whole process. */
+interface ChecklistSpec {
     name: string;
-    options?: Record<string, unknown>;
-}
-/** DYN-1. A Record of the kernel Table `Merge Field`. */
-interface MergeField {
-    id: Uuid;
-    organization_id: Uuid;
-    key: string;
-    label: string;
-    /** DYN-3. Exactly one of eight. Relationships and rules are NOT sources. */
-    source: MergeFieldSource;
-    /** DYN-4. What it resolves INTO. The consumer never learns which. */
-    semantic_type: MergeFieldSemanticType;
-    /** §A. Any number. Never fused into the source. */
-    modifiers: MergeFieldModifier[];
-    /**
-     * DYN-12. Exactly one, and it drives the input surface. It OUTRANKS the
-     * precedence ladder: `server_fixed` is not offered as an input at all, and a
-     * value sent for one anyway is discarded and recorded — never merged.
-     */
-    override_policy: OverridePolicy;
-    /**
-     * DYN-13. Whether an override is POSSIBLE and WHO MAY perform it are two
-     * settings. This is the second one: an access level or an organization role.
-     */
-    override_requires: string | null;
-    /** DYN-16. */
-    format: MergeFieldTransform | null;
-    /** DYN-17. `inline`, `on_demand`, or `auto` by budget. A value in no tier is a defect. */
-    delivery?: Delivery;
-    /** DYN-14. Declared, always. */
-    missing?: MissingBehavior;
-    /**
-     * What the source needs: for `record`, the starting record and the chain; for
-     * `tool`, the connection token and the freshness ceiling (DYN-20); for
-     * `literal`, the literal.
-     */
-    source_config: Record<string, unknown>;
-    created_by: Uuid | null;
-    updated_by: Uuid | null;
-    created_at: Timestamp;
-    updated_at: Timestamp;
-    version: number;
-    metadata: Record<string, unknown>;
-    visibility: string;
+    /** The Table a run is ABOUT: People, Hires, Jobs, Matters. */
+    about_table_id: Uuid;
+    roles?: ChecklistRoleSpec[];
+    trigger?: ChecklistTrigger;
+    steps: ChecklistStepSpec[];
 }
-/** DYN-8. The triple the RUN gets. Every audit question is answerable from it. */
-interface ResolutionTriple {
-    record_id: Uuid | null;
-    field_id: Uuid | null;
-    value_version: number | null;
+/** What `custom.checklist_declare` answers. */
+interface ChecklistDeclared {
+    template_id: Uuid;
+    name: string;
+    about_table_id: Uuid;
+    steps_table_id: Uuid;
+    steps: number;
+    roles: number;
+    trigger: ChecklistTrigger;
+    created: boolean;
+    message: string;
+    ms: number;
 }
-/** DYN-22. The one provenance row per merge field per turn. */
-interface MergeFieldProvenance {
-    merge_field_id: Uuid;
-    declared_source: MergeFieldSource;
-    /** Which source actually answered — the fallback chain makes these differ. */
-    actual_source: MergeFieldSource | null;
-    record_id: Uuid | null;
-    field_id: Uuid | null;
-    value_version: number | null;
-    rule_id: Uuid | null;
-    rule_version: number | null;
-    /** DYN-11. Who overrode it, and every LOSER of the ladder, not only the winner. */
-    override_by: Uuid | null;
-    losers?: Array<{
-        source: MergeFieldSource;
-        value: unknown;
-        why_lost: string;
-    }>;
-    /** DYN-11/DYN-12. A value a client sent for a field it may not supply, discarded and recorded. */
-    discarded_attempt?: {
-        value: unknown;
-        because: string;
-    } | null;
-    resolved_at: Timestamp;
-    freshness: Freshness;
-    outcome: string;
-}
-/**
- * What a consumer gets back. `pending` is a first-class answer, not a blank:
- * until the server's resolver exists, a merge field says so and says WHY
- * (AGT-N-7 — anything that could not be delivered is named, never omitted).
- */
-type MergeFieldResolution = {
-    state: "resolved";
-    /** The rendered string the prompt gets. */
-    rendered: string;
-    value: unknown;
-    triple: ResolutionTriple;
-    provenance: MergeFieldProvenance;
-} | {
-    state: "absent";
-    /** DYN-14's named absence — what the screen says instead of a blank. */
-    say: string;
-    reason: string;
-    provenance: MergeFieldProvenance | null;
-} | {
-    state: "pending";
-    /** WHY it is pending, in the words a person can act on. Never empty. */
-    reason: string;
-};
-
-/**
- * One of the five states, as `custom.work_states()` lists them — with what it
- * may become next and whether it is the end. A screen that hardcoded these
- * would be a second source of truth for the one question the store answers.
- */
-interface WorkState {
-    sort: number;
+/** One row of `custom.checklist_templates`. */
+interface ChecklistTemplateSummary {
+    template_id: Uuid;
     name: string;
-    terminal: boolean;
-    next: string[];
-}
-/** One node of a template graph: a record-to-be, in a named Table, under a ref. */
-interface WorkTemplateNode {
-    /** The name the graph refers to this node by, and the key an override is filed under. */
-    ref: string;
-    /** The Table the record lands in. */
-    table: Uuid;
-    /** The document it starts life with. An override merges on top at instantiation. */
-    data?: Record<string, unknown>;
-}
-/** One edge. `owned` is what `custom.relation_own` makes; W1-REL owns the rest. */
-interface WorkTemplateRelation {
-    from: string;
-    to: string;
-    kind?: string;
-}
-/**
- * THE WHOLE TEMPLATE, DECLARATIVELY. REC-70: the graph is created in ONE act
- * and judged before any of it is written, so an agent writes a twelve-step
- * checklist in a single call and a half-made checklist is not a state the store
- * can be in.
- */
-interface WorkGraph {
-    nodes: WorkTemplateNode[];
-    relations?: WorkTemplateRelation[];
+    about_table_id: Uuid | null;
+    about_table: string | null;
+    steps: number;
+    roles: number;
+    trigger_kind: ChecklistTriggerKind;
+    trigger_status: string | null;
+    open_runs: number;
+    total_runs: number;
+    updated_at: Timestamp;
 }
-/** What `custom.work_template_instantiate` answers: what it made, and how much. */
-interface WorkInstantiation {
+/** `custom.checklist_template_shape` — the spec, plus what the editor needs. */
+type ChecklistTemplateShape = ChecklistSpec & {
     template_id: Uuid;
-    /** The log row. Until W3-HIST lands, this row IS the log of the act, and says so. */
-    instantiation_id: Uuid;
-    records_created: number;
-    relations_created: number;
-    relation_kind: string;
-    /** ref → the record it became, which is how a step finds its own record. */
-    refs: Record<string, Uuid>;
-    records: Uuid[];
-    relations: Uuid[];
-    ms?: number;
+    steps_table_id: Uuid | null;
+    may_change: boolean;
+};
+/** What `custom.checklist_start` answers. */
+interface ChecklistRunStarted {
+    run_id: Uuid;
+    template_id: Uuid;
+    template: string;
+    about_record_id: Uuid | null;
+    about: string | null;
+    steps_table_id: Uuid;
+    steps_created: number;
+    assigned: number;
+    unassigned: number;
+    origin: string;
+    steps: Array<{
+        ref: string;
+        step_id: Uuid;
+        title: string;
+        role: string | null;
+    }>;
+    /** Roles nobody is named for, so the screen can say so rather than show blanks. */
+    waiting_on_a_name: string[];
+    message: string;
+    ms: number;
 }
-/** One row of `custom.work_whose_turn`: a record, whose turn it is, and where it is up to. */
-interface WorkTurn {
-    record_id: Uuid;
-    title: string | null;
-    assignee_id: Uuid | null;
-    turn: string | null;
+/** One step of a RUN, as `custom.checklist_run` answers it. */
+interface ChecklistRunStep {
+    step_id: Uuid;
+    step_order: number;
+    ref: string;
+    title: string;
+    role: string | null;
+    assignee_name: string | null;
+    assignee_user_id: Uuid | null;
     due_on: Timestamp | null;
-    state: string | null;
+    due_state: WorkDueState;
     status: string | null;
-    terminal: boolean | null;
+    finished: boolean;
+    requires: ChecklistRequirementKind;
+    /**
+     * The key the answer is filed under, as the checklist named it. A screen files
+     * evidence under THIS, never under a name it invented — the store looks for
+     * exactly this key and nothing else.
+     */
+    requires_key: string | null;
+    requires_label: string | null;
+    /** The form or the document template this step is, when it is one. */
+    requires_id: Uuid | null;
+    evidence: Record<string, unknown>;
+    /** The titles of the steps it is still waiting for. */
+    blocked_by: string[];
+    may_complete: boolean;
+    /** Why it cannot be finished right now, in the words a person would use. */
+    refusal: string | null;
 }
-/** A Field assignment is made of, as the store itself describes it. */
-interface WorkAssignmentField {
-    key: string;
-    label: string;
-    spec: Record<string, unknown>;
+/** One row of `custom.checklist_runs`. */
+interface ChecklistRunSummary {
+    run_id: Uuid;
+    name: string;
+    template_id: Uuid | null;
+    template: string | null;
+    about_record_id: Uuid | null;
+    about: string | null;
+    about_table_id: Uuid | null;
+    started_at: Timestamp | null;
+    started_by: Uuid | null;
+    origin: string;
+    step_count: number;
+    done: number;
+    overdue: number;
+    next_step: string | null;
+    next_due: Timestamp | null;
+    closed_at: Timestamp | null;
 }
-/**
- * One hold on one slot. `expired` is the STORE's answer, not a clock comparison
- * a screen ran: a hold whose time is up is named as lapsed rather than quietly
- * disappearing, so a person can see why the slot came back.
- */
-interface WorkSlotHold {
-    hold_id: Uuid;
-    slot_key: string;
-    holder: string;
-    expires_at: Timestamp | null;
-    expired: boolean;
+/** What `custom.checklist_step_complete` answers. */
+interface ChecklistStepCompleted {
+    step_id: Uuid;
+    run_id?: Uuid;
+    completed: boolean;
+    evidence?: Record<string, unknown>;
+    steps_left?: number;
+    run_closed?: boolean;
+    message: string;
 }
+
 /**
- * What an embed token is good for, from `custom.anon_token_verify`. A token
- * carries ONE decision: `read` or `write`, never both.
+ * VIS-31. A signed-in OUTSIDER, with the reason in plain English.
+ *
+ * "No organization" cannot mean "no row in the membership table": signup mints
+ * every account a PERSONAL organization, so under that reading nobody would
+ * ever be external. It means no membership of a NON-personal organization, and
+ * `iam.is_external_principal` says that once so no surface can invent a second
+ * answer.
  */
-interface AnonTokenBinding {
-    token_id: Uuid;
+interface ExternalPrincipalCard {
+    user_id: Uuid | null;
+    /** The answer itself. */
+    external: boolean;
+    signed_in: boolean;
+    /**
+     * WHY, in the platform's own words — the sentence a portal shows instead of
+     * an empty screen. `iam` writes it, not us, so the portal and the API and the
+     * admin screen all say the same thing about the same person.
+     */
+    explanation: string;
+    /** How many NON-personal organizations they belong to. Zero is what external means. */
+    organization_memberships: number;
+    [key: string]: unknown;
+}
+/** VIS-32. A record or a view bound to a public address, with a declared render mode. */
+interface PublishBinding {
+    id: Uuid;
+    slug: string;
+    resource_type: string;
+    resource_id: Uuid;
     organization_id: Uuid;
-    form_id: Uuid | null;
-    saved_view_id: Uuid | null;
-    record_id: Uuid | null;
-    mode: "read" | "write";
-}
-/** The three things that land in the one inbox. Closed, one word each. */
-type WorkInboxKind = "assignment" | "approval" | "proposal";
-/** Who filed it: a colleague, or an agent acting for one. */
-type WorkOrigin = "person" | "agent";
-/** Where a due date stands, in the store's own words. */
-type WorkDueState = "overdue" | "due_today" | "scheduled" | "undated" | "finished";
-/** One row of `custom.work_inbox` — the SAME shape whichever of the three it is. */
-interface WorkInboxItem {
-    item_id: Uuid;
-    kind: WorkInboxKind;
-    origin: WorkOrigin;
-    title: string;
-    subject_id: Uuid | null;
-    subject_kind: string;
-    summary: string | null;
-    state: string;
-    due_on: Timestamp | null;
-    due_state: WorkDueState | null;
-    /** False for a decided row a person asked to see. A screen shows it, inert. */
-    actionable: boolean;
-    requested_by: Uuid | null;
-    requested_by_name: string | null;
-    at: Timestamp;
-    /**
-     * The table it is about (lane S5-PRIME): the table itself for a new column, new records or a
-     * template; the record's table for a change to a record; null for a new table (it waits on a
-     * home). An assignment carries its record's table. What an inbox groups by.
-     */
-    table_id?: Uuid | null;
-    table_name?: string | null;
-    /**
-     * A CLOSED ITEM SAYS WHO AND WHEN (lane S5-PRIME). Null while it is waiting. For `withdrawn`
-     * — nobody decided it; the thing it would change was archived — `decided_by` is whoever
-     * archived it (null when the store's own backlog sweep closed it).
-     */
-    decided_by?: Uuid | null;
-    decided_by_name?: string | null;
-    decided_at?: Timestamp | null;
-    /** The store's own sentence: what was applied, what was left alone, or why it was withdrawn. */
-    outcome?: string | null;
-    /**
-     * THIS PERSON'S OWN STATE (lane S5-PRIME-2). Set only in the view that shows it: `snoozed_until`
-     * in the snoozed view, `cleared_at` in the done view. Nobody else's snooze or clear is ever read.
-     */
-    snoozed_until?: Timestamp | null;
-    cleared_at?: Timestamp | null;
-    /** How many of this person's items are snoozed / cleared right now — the same on every row. */
-    snoozed_count?: number;
-    cleared_count?: number;
-    /**
-     * HOW LONG A DECISION ON THIS ROW IS HELD WITH UNDO before it is made (VERIFIER-20), in seconds:
-     * the organization's `custom/decision_undo_seconds` (default 5) for a pending approval or
-     * proposal; 0 when something already waits on the answer; null for work and closed rows.
-     */
-    undo_seconds?: number | null;
-    /** Why a decision here cannot be held (it is made at once) — the store's sentence, or null. */
-    undo_refusal?: string | null;
-}
-/**
- * Which of a person's three inbox views `custom.work_inbox` answers (lane S5-PRIME-2): what is
- * waiting now, what they snoozed (soonest back first), what they cleared (latest first).
- */
-type WorkInboxView = "inbox" | "snoozed" | "done";
-/** What `custom.inbox_snooze` / `inbox_unsnooze` / `inbox_clear` / `inbox_unclear` answer. */
-interface InboxStateChange {
-    item_id: Uuid;
-    /** Where the item stands for this person now. */
-    state: "snoozed" | "cleared" | "waiting";
-    /** False when an un-snooze / un-clear found nothing to undo (it says so in `sentence`). */
-    changed?: boolean;
-    snoozed_until?: Timestamp;
-    cleared_at?: Timestamp;
-    /** The store's own sentence, for the person. */
-    sentence: string;
+    render_mode: string;
+    is_active: boolean;
+    created_at?: Timestamp;
+    [key: string]: unknown;
 }
 /**
- * One organization's line of `custom.inbox_counts` — what waits on this person there, counted by
- * the same predicate the inbox lists with. The shell badge's number.
+ * What a SIGNED-OUT visitor resolves. An invented address, a revoked one and an
+ * unpublished one all resolve to NOTHING — the same 404 — because an address
+ * that answered differently for a revoked binding would be an existence oracle.
+ *
+ * `notice` is D-15's admission, carried on every read: nothing was scanned
+ * before this was listed, and nothing here pretends otherwise.
  */
-interface InboxCounts {
+interface ResolvedPublishBinding {
+    slug: string;
+    resource_type: string;
+    resource_id: Uuid;
     organization_id: Uuid;
-    organization_name: string | null;
-    waiting: number;
-    snoozed: number;
-    cleared: number;
-    overdue: number;
-    oldest_waiting_at: Timestamp | null;
+    render_mode: string;
+    namespace: string | null;
+    notice: string;
 }
+/** What a public address holds, as `iam.resolve_publish_binding_kind` names it. */
+type PublishBindingKind = "table" | "record" | "dashboard" | "page" | "view";
 /**
- * The states an approval moves through. `withdrawn` (lane S5-PRIME) is closed by the store, not
- * decided by a person: the record or table it would change was archived.
+ * `iam.resolve_publish_binding_kind` — the same resolution, plus WHAT the address holds. Tables,
+ * records and dashboards all carry the entity token `record`, so the token alone cannot say which;
+ * this door can. `table_id` is the table a list or a record belongs to (a view's subject, a
+ * dashboard's subject table); `title` is its name. Anon may call it.
  */
-type WorkApprovalState = "pending" | "approved" | "declined" | "withdrawn";
-/** Which of the three lists `custom.work_list` answers. */
-type WorkListFlavour = "mine" | "assigned" | "unassigned";
-/** One row of `custom.work_list`: a record, whose it is, and where it is up to. */
-interface WorkListItem {
-    record_id: Uuid;
-    table_id: Uuid;
-    table_name: string | null;
+interface ResolvedPublishBindingKind extends ResolvedPublishBinding {
+    kind: PublishBindingKind | string;
+    table_id: Uuid | null;
     title: string | null;
-    assignee_id: Uuid | null;
-    assignee_name: string | null;
-    assignee_user_id: Uuid | null;
-    due_on: Timestamp | null;
-    due_state: WorkDueState;
-    status: string | null;
-    terminal: boolean;
-    assigned_by: Uuid | null;
-    updated_at: Timestamp;
-}
-/**
- * One state a record may be moved to, with the model's own answer about whether
- * it may — and, when it may not, the sentence saying why. A screen offers what
- * is allowed and explains what is not; it never renders a dead control.
- */
-interface WorkRecordState {
-    state_id: Uuid;
-    name: string;
-    sort: number;
-    terminal: boolean;
-    is_current: boolean;
-    allowed: boolean;
-    refusal: string | null;
-}
-/** The change a pending approval carries. Two kinds, because two can be applied. */
-type WorkChange = {
-    kind: "record_patch";
-    patch: Record<string, unknown>;
-} | {
-    kind: "field_add";
-    field: Record<string, unknown>;
-};
-/** Somebody who may decide a particular request, and the reason they may. */
-interface WorkApprover {
-    user_id: Uuid;
-    name: string;
-    why: string;
-}
-/** What `custom.work_approval_request` answers: it is filed, and who it waits on. */
-interface WorkApprovalFiled {
-    approval_id: Uuid;
-    state: "pending";
-    subject_id: Uuid;
-    subject_kind: string;
-    origin: WorkOrigin;
-    approvers: WorkApprover[];
-    message: string;
 }
-/** What a decision answers — including whether the change was actually made. */
-interface WorkApprovalDecision {
-    approval_id: Uuid;
-    state: "approved" | "declined";
-    subject_id: Uuid;
-    /** The whole point: approving APPLIES the change, in the same transaction. */
-    applied: boolean;
-    field_id: Uuid | null;
-    version: number | null;
-    message: string;
+
+/** One value the agent was given, with the triple that makes it citable. */
+interface RecordScopeField {
+    key: string;
+    label: string;
+    type: string;
+    value: unknown;
+    /** DYN: a merge field resolves to a TRIPLE, not a string. */
+    cite: {
+        record_id: Uuid;
+        field_id: Uuid;
+        value_version: number;
+        written_at: string | null;
+    };
 }
-/** One inbox decision of a batch (`custom.work_decide_many`). */
-interface WorkDecideManyItem {
-    /** The inbox item — a `work_approval` record's id (`WorkInboxItem.item_id`). */
-    item: Uuid;
-    decision: "approve" | "decline";
-    note?: string | null;
+/** A Field the agent was NOT given, and which of the two reasons it is. */
+interface RecordScopeWithheld {
+    key: string;
+    label: string;
+    because: "masked" | "policy";
+    reason: string;
+    needs?: string;
+    /** The whole sentence, already written — a screen prints it rather than composing one. */
+    says: string;
 }
-/**
- * `archived` (lane S5-PRIME): the thing it would change is archived, so it cannot be decided; the
- * sentence names it. A withdrawn approval answers `already_decided` with "That was withdrawn on …".
- */
-type WorkDecideVerdict = "approved" | "declined" | "already_decided" | "no_right" | "archived" | "refused";
-interface WorkDecideManyResult {
-    index: number;
-    item: Uuid;
-    decision: "approve" | "decline";
-    verdict: WorkDecideVerdict;
-    /** The store's own sentence: what was applied, or why it was not. */
-    sentence: string;
-    subject_id?: Uuid;
-    version?: number | null;
-    record_ids?: Uuid[];
-    code?: string;
+interface RecordScopeRelation {
+    via: string;
+    target_id: Uuid;
+    foreign: boolean;
+    masked: boolean;
+    your_level: PermissionLevel | null;
+    card: Record<string, unknown> | null;
+    why: string | null;
 }
-/** What `custom.work_decide_many` answers: the counts, then one verdict per item in order. */
-interface WorkDecideMany {
-    asked: number;
-    approved: number;
-    declined: number;
-    not_decided: number;
-    results: WorkDecideManyResult[];
+interface RecordScopeHistoryEntry {
+    version: number;
+    at: string;
+    what: string;
+    who: string | null;
+    changes: Array<Record<string, unknown>>;
 }
-/** What `custom.work_assign` answers: the value, the access, and who holds it now. */
-interface WorkAssignment {
-    record_id: Uuid;
-    assigned: boolean;
-    assignee: Uuid | null;
-    assignee_user_id: Uuid | null;
-    assignee_name: string | null;
-    was: Uuid | null;
-    due_date: Timestamp | null;
-    version: number | null;
-    /** The share sentence, or why nothing was taken away when un-assigning. */
-    access: string;
-    message: string;
-}
-
-/** What a step asks for before it counts as done. Every one of these is CHECKED. */
-type ChecklistRequirementKind = 
-/** A person says it is done. */
-"none"
-/** A sentence of evidence, under `note`. */
- | "note"
-/** A named value filled in on the step itself. */
- | "answer"
-/** A named Field on the record the run is about must hold a value. */
- | "record_field"
-/** The step IS a form (SCR-19): finishing it needs a response record. */
- | "form"
-/** The step IS a document from a doc template (REC-68): finishing it needs a render. */
- | "document";
-interface ChecklistRequirement {
-    kind: ChecklistRequirementKind;
-    /** For `answer` and `record_field`: which value. */
-    key?: string;
-    /** What a person is asked for, in their words. */
-    label?: string;
-    /** For `form`: the published form this step is. */
-    form_id?: Uuid;
-    /** For `document`: the doc template this step renders. */
-    template_id?: Uuid;
-}
-/** One step of a checklist, as it is WRITTEN — not as it is run. */
-interface ChecklistStepSpec {
-    /** The name the checklist refers to this step by; lower-case, unique. */
-    ref: string;
-    /** What a person reads in their work. */
-    title: string;
-    /** Which role owns it. A role the checklist never declares is refused at save. */
-    role?: string;
-    /** How many days after the run starts it is due. */
-    due_days?: number;
-    /** Steps it waits for. A step waits only for steps listed above it. */
-    depends_on?: string[];
-    requires?: ChecklistRequirement;
-}
-/** A role, and the person who stands in it by default. */
-interface ChecklistRoleSpec {
-    role: string;
-    label?: string;
-    user_id?: Uuid | null;
-}
-/** What starts a run. */
-type ChecklistTriggerKind = "manual" | "record_created" | "status_reached";
-interface ChecklistTrigger {
-    kind: ChecklistTriggerKind;
-    /** The Table being watched, for the two kinds that watch one. */
-    table_id?: Uuid;
-    /** The state, for `status_reached`. */
-    status?: string;
-}
-/** THE COMPLETE DECLARATIVE CHECKLIST — one object, one call, a whole process. */
-interface ChecklistSpec {
-    name: string;
-    /** The Table a run is ABOUT: People, Hires, Jobs, Matters. */
-    about_table_id: Uuid;
-    roles?: ChecklistRoleSpec[];
-    trigger?: ChecklistTrigger;
-    steps: ChecklistStepSpec[];
-}
-/** What `custom.checklist_declare` answers. */
-interface ChecklistDeclared {
-    template_id: Uuid;
-    name: string;
-    about_table_id: Uuid;
-    steps_table_id: Uuid;
-    steps: number;
-    roles: number;
-    trigger: ChecklistTrigger;
-    created: boolean;
-    message: string;
-    ms: number;
-}
-/** One row of `custom.checklist_templates`. */
-interface ChecklistTemplateSummary {
-    template_id: Uuid;
-    name: string;
-    about_table_id: Uuid | null;
-    about_table: string | null;
-    steps: number;
-    roles: number;
-    trigger_kind: ChecklistTriggerKind;
-    trigger_status: string | null;
-    open_runs: number;
-    total_runs: number;
-    updated_at: Timestamp;
-}
-/** `custom.checklist_template_shape` — the spec, plus what the editor needs. */
-type ChecklistTemplateShape = ChecklistSpec & {
-    template_id: Uuid;
-    steps_table_id: Uuid | null;
-    may_change: boolean;
-};
-/** What `custom.checklist_start` answers. */
-interface ChecklistRunStarted {
-    run_id: Uuid;
-    template_id: Uuid;
-    template: string;
-    about_record_id: Uuid | null;
-    about: string | null;
-    steps_table_id: Uuid;
-    steps_created: number;
-    assigned: number;
-    unassigned: number;
-    origin: string;
-    steps: Array<{
-        ref: string;
-        step_id: Uuid;
-        title: string;
-        role: string | null;
-    }>;
-    /** Roles nobody is named for, so the screen can say so rather than show blanks. */
-    waiting_on_a_name: string[];
-    message: string;
-    ms: number;
-}
-/** One step of a RUN, as `custom.checklist_run` answers it. */
-interface ChecklistRunStep {
-    step_id: Uuid;
-    step_order: number;
-    ref: string;
-    title: string;
-    role: string | null;
-    assignee_name: string | null;
-    assignee_user_id: Uuid | null;
-    due_on: Timestamp | null;
-    due_state: WorkDueState;
-    status: string | null;
-    finished: boolean;
-    requires: ChecklistRequirementKind;
-    /**
-     * The key the answer is filed under, as the checklist named it. A screen files
-     * evidence under THIS, never under a name it invented — the store looks for
-     * exactly this key and nothing else.
-     */
-    requires_key: string | null;
-    requires_label: string | null;
-    /** The form or the document template this step is, when it is one. */
-    requires_id: Uuid | null;
-    evidence: Record<string, unknown>;
-    /** The titles of the steps it is still waiting for. */
-    blocked_by: string[];
-    may_complete: boolean;
-    /** Why it cannot be finished right now, in the words a person would use. */
-    refusal: string | null;
-}
-/** One row of `custom.checklist_runs`. */
-interface ChecklistRunSummary {
-    run_id: Uuid;
-    name: string;
-    template_id: Uuid | null;
-    template: string | null;
-    about_record_id: Uuid | null;
-    about: string | null;
-    about_table_id: Uuid | null;
-    started_at: Timestamp | null;
-    started_by: Uuid | null;
-    origin: string;
-    step_count: number;
-    done: number;
-    overdue: number;
-    next_step: string | null;
-    next_due: Timestamp | null;
-    closed_at: Timestamp | null;
-}
-/** What `custom.checklist_step_complete` answers. */
-interface ChecklistStepCompleted {
-    step_id: Uuid;
-    run_id?: Uuid;
-    completed: boolean;
-    evidence?: Record<string, unknown>;
-    steps_left?: number;
-    run_closed?: boolean;
-    message: string;
-}
-
-/**
- * VIS-31. A signed-in OUTSIDER, with the reason in plain English.
- *
- * "No organization" cannot mean "no row in the membership table": signup mints
- * every account a PERSONAL organization, so under that reading nobody would
- * ever be external. It means no membership of a NON-personal organization, and
- * `iam.is_external_principal` says that once so no surface can invent a second
- * answer.
- */
-interface ExternalPrincipalCard {
-    user_id: Uuid | null;
-    /** The answer itself. */
-    external: boolean;
-    signed_in: boolean;
-    /**
-     * WHY, in the platform's own words — the sentence a portal shows instead of
-     * an empty screen. `iam` writes it, not us, so the portal and the API and the
-     * admin screen all say the same thing about the same person.
-     */
-    explanation: string;
-    /** How many NON-personal organizations they belong to. Zero is what external means. */
-    organization_memberships: number;
-    [key: string]: unknown;
-}
-/** VIS-32. A record or a view bound to a public address, with a declared render mode. */
-interface PublishBinding {
-    id: Uuid;
-    slug: string;
-    resource_type: string;
-    resource_id: Uuid;
-    organization_id: Uuid;
-    render_mode: string;
-    is_active: boolean;
-    created_at?: Timestamp;
-    [key: string]: unknown;
-}
-/**
- * What a SIGNED-OUT visitor resolves. An invented address, a revoked one and an
- * unpublished one all resolve to NOTHING — the same 404 — because an address
- * that answered differently for a revoked binding would be an existence oracle.
- *
- * `notice` is D-15's admission, carried on every read: nothing was scanned
- * before this was listed, and nothing here pretends otherwise.
- */
-interface ResolvedPublishBinding {
-    slug: string;
-    resource_type: string;
-    resource_id: Uuid;
-    organization_id: Uuid;
-    render_mode: string;
-    namespace: string | null;
-    notice: string;
-}
-/** What a public address holds, as `iam.resolve_publish_binding_kind` names it. */
-type PublishBindingKind = "table" | "record" | "dashboard" | "page" | "view";
-/**
- * `iam.resolve_publish_binding_kind` — the same resolution, plus WHAT the address holds. Tables,
- * records and dashboards all carry the entity token `record`, so the token alone cannot say which;
- * this door can. `table_id` is the table a list or a record belongs to (a view's subject, a
- * dashboard's subject table); `title` is its name. Anon may call it.
- */
-interface ResolvedPublishBindingKind extends ResolvedPublishBinding {
-    kind: PublishBindingKind | string;
-    table_id: Uuid | null;
-    title: string | null;
-}
-
-/** One value the agent was given, with the triple that makes it citable. */
-interface RecordScopeField {
-    key: string;
-    label: string;
-    type: string;
-    value: unknown;
-    /** DYN: a merge field resolves to a TRIPLE, not a string. */
-    cite: {
-        record_id: Uuid;
-        field_id: Uuid;
-        value_version: number;
-        written_at: string | null;
-    };
-}
-/** A Field the agent was NOT given, and which of the two reasons it is. */
-interface RecordScopeWithheld {
-    key: string;
-    label: string;
-    because: "masked" | "policy";
-    reason: string;
-    needs?: string;
-    /** The whole sentence, already written — a screen prints it rather than composing one. */
-    says: string;
-}
-interface RecordScopeRelation {
-    via: string;
-    target_id: Uuid;
-    foreign: boolean;
-    masked: boolean;
-    your_level: PermissionLevel | null;
-    card: Record<string, unknown> | null;
-    why: string | null;
-}
-interface RecordScopeHistoryEntry {
-    version: number;
-    at: string;
-    what: string;
-    who: string | null;
-    changes: Array<Record<string, unknown>>;
-}
-interface RecordScopeComment {
-    id: Uuid;
-    body: string;
-    created_at: string;
-    created_by_name: string;
-    field_key: string | null;
+interface RecordScopeComment {
+    id: Uuid;
+    body: string;
+    created_at: string;
+    created_by_name: string;
+    field_key: string | null;
 }
 interface RecordScopeContext {
     record: {
@@ -15106,365 +14566,1005 @@ interface RecordsClient {
         discoverable?: boolean;
     }): Promise<RecordsResult<unknown>>;
     /**
-     * Declare a Rule. It is NOT `recordWrite` into the rule kernel, and that is
-     * the whole point: `custom.record_write` inserts `data_class = 'record'`, so a
-     * document written that way is not a Rule and the store's own rule doors
-     * (`custom.rule_members`, `custom.agg_subscriptions`) never see it. Writing
-     * one through the record door and calling it a Rule would be a silent
-     * failure — a screen that looked like it had subscribed you to something.
+     * Declare a Rule. It is NOT `recordWrite` into the rule kernel, and that is
+     * the whole point: `custom.record_write` inserts `data_class = 'record'`, so a
+     * document written that way is not a Rule and the store's own rule doors
+     * (`custom.rule_members`, `custom.agg_subscriptions`) never see it. Writing
+     * one through the record door and calling it a Rule would be a silent
+     * failure — a screen that looked like it had subscribed you to something.
+     */
+    ruleDeclare(args: {
+        spec: Record<string, unknown>;
+        rule_id?: Uuid | null;
+    }): Promise<RecordsResult<Uuid>>;
+    fieldPropose(proposal: FieldProposal): Promise<RecordsResult<never>>;
+    tablePropose(proposal: TableProposal): Promise<RecordsResult<never>>;
+    promoteTable(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<unknown>>;
+    promoteField(args: {
+        table_id: Uuid;
+        field_id: Uuid;
+    }): Promise<RecordsResult<unknown>>;
+    /**
+     * @deprecated The record store is never off (owner ruling, 2026-10-03: everything is on by
+     * default). This answers `true` whenever the door answers; a refusal means the store could not
+     * be reached, never that it is off. Do not gate a screen on it.
+     */
+    storeIsOpen(): Promise<RecordsResult<boolean>>;
+    /**
+     * WHAT THIS PERSON MAY DO TO THESE THINGS — asked once, for a whole page.
+     *
+     * There is no principal argument, on purpose: the door resolves the caller
+     * from the session, so a person can ask about their OWN access and about
+     * nobody else's. A subject they hold nothing on answers `level: null`, which
+     * is an answer; the row is never omitted, because a screen that could not
+     * tell "no access" from "not asked yet" would draw one of them as the other.
+     */
+    myLevels(args: {
+        ids: Uuid[];
+        subject?: "record";
+    }): Promise<RecordsResult<MyLevel[]>>;
+    /** G1. Write ONE leaf of a Table's colors, or clear it with `null`. Editor on the Table. */
+    tableDecorate(args: {
+        table_id: Uuid;
+        path: DecorationPath;
+        value: unknown;
+    }): Promise<RecordsResult<TableDecorations>>;
+    /** G1. A Table's colors as a screen paints them, with what went stale named. */
+    tableDecorations(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<TableDecorations>>;
+    /** G1. The layout a grid opens with: platform → organization knob → the view's own. */
+    gridLayout(args: {
+        table_id: Uuid;
+        view_id?: Uuid | null;
+    }): Promise<RecordsResult<GridLayout>>;
+    /** G3. The older grid's formula text → the store's expression. Never refuses a typo: answers ok:false. */
+    formulaParse(args: {
+        table_id: Uuid;
+        text: string;
+    }): Promise<RecordsResult<FormulaParse>>;
+    /**
+     * NOTION-PROPS. The formula being typed, parsed AND worked out for one record of the table
+     * (`custom.formula_preview`): the parse, plus `value` — what a saved formula column would show on
+     * that record — or `error` when it parses and cannot be worked out there. Writes nothing.
+     */
+    formulaPreview(args: {
+        table_id: Uuid;
+        record_id: Uuid | null;
+        text: string;
+    }): Promise<RecordsResult<FormulaPreview>>;
+    /** G2. Declare a Table's row actions — the whole list. Editor on the Table. */
+    actionDeclare(args: {
+        table_id: Uuid;
+        actions: RowAction[];
+    }): Promise<RecordsResult<RowAction[]>>;
+    /** G2. A Table's row actions, each saying whether it can run here. */
+    rowActions(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<{
+        actions: RowAction[];
+        stale: unknown[];
+    }>>;
+    /**
+     * G2. Run one action on a selection, in ONE transaction. A refusal changed NOTHING; read
+     * every record and field that refused with `actionRefusals(result.error)`.
+     */
+    actionRun(args: {
+        action_id: Uuid;
+        record_ids: Uuid[];
+    }): Promise<RecordsResult<ActionRunResult>>;
+    /**
+     * AUTOMATION-DOOR. Declare (or, with `automation_id`, replace) one automation on a Table — editor on the Table.
+     * A spec the store refuses comes back as `data.ok === false` with `_errors`, one sentence per path.
+     */
+    automationDeclare(args: {
+        table_id: Uuid;
+        spec: AutomationSpec;
+        automation_id?: Uuid | null;
+    }): Promise<RecordsResult<AutomationDeclared>>;
+    /** AUTOMATION-DOOR. A Table's automations with their last run; archived ones only when asked. */
+    automations(args: {
+        table_id: Uuid;
+        include_archived?: boolean;
+    }): Promise<RecordsResult<AutomationList>>;
+    /** AUTOMATION-DOOR. Archive one (it switches off and keeps its history). Editor on the Table. */
+    automationArchive(args: {
+        automation_id: Uuid;
+    }): Promise<RecordsResult<AutomationFlipped>>;
+    /** AUTOMATION-DOOR. Bring an archived one back (it stays off until `automationSetEnabled`). */
+    automationRestore(args: {
+        automation_id: Uuid;
+    }): Promise<RecordsResult<AutomationFlipped>>;
+    /** AUTOMATION-DOOR. Switch one on or off. */
+    automationSetEnabled(args: {
+        automation_id: Uuid;
+        enabled: boolean;
+    }): Promise<RecordsResult<AutomationFlipped>>;
+    /** AUTOMATION-DOOR. Run history, newest first: status, the store's own sentence, every step. */
+    automationRuns(args: {
+        automation_id: Uuid;
+        limit?: number;
+        cursor?: string | null;
+    }): Promise<RecordsResult<AutomationRuns>>;
+    /** G4. Send every change to this Table's records to an https webhook. Admin. The secret is shown once. */
+    tableWebhookDeclare(args: {
+        table_id: Uuid;
+        target_url: string;
+        events?: RecordEvent[] | null;
+        description?: string | null;
+    }): Promise<RecordsResult<TableWebhookDeclared>>;
+    /** G4. The webhooks a Table sends to, with their delivery health — never the secret. */
+    tableWebhooks(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<TableWebhook[]>>;
+    /** G4. Switch one off. It is never deleted. */
+    tableWebhookArchive(args: {
+        webhook_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
+    /** G5. Number the records an autonumber column found already there, in creation order. */
+    autonumberBackfill(args: {
+        field_id: Uuid;
+    }): Promise<RecordsResult<{
+        numbered: number;
+        highest: number | null;
+        says: string;
+    }>>;
+    /**
+     * NOTION-PROPS-3. PRESS A BUTTON COLUMN ON ONE ROW (`custom.button_press`): a link comes back filled from
+     * the row for the screen to open; a row action or an automation runs in the store and its result comes
+     * back. A button with nothing set up is refused by name (22023).
+     */
+    buttonPress(args: {
+        record_id: Uuid;
+        field_id: Uuid;
+    }): Promise<RecordsResult<ButtonPressed>>;
+    /**
+     * NOTION-PROPS-3. The knob `data/timeline_dependency_shift` for the signed-in person in this organization:
+     * whether moving a record on a timeline moves the records waiting on it (default true).
      */
-    ruleDeclare(args: {
-        spec: Record<string, unknown>;
-        rule_id?: Uuid | null;
-    }): Promise<RecordsResult<Uuid>>;
-    fieldPropose(proposal: FieldProposal): Promise<RecordsResult<never>>;
-    tablePropose(proposal: TableProposal): Promise<RecordsResult<never>>;
-    promoteTable(args: {
-        table_id: Uuid;
-    }): Promise<RecordsResult<unknown>>;
-    promoteField(args: {
+    timelineDependencyShift(): Promise<RecordsResult<boolean>>;
+    /** G5. One page of the export door — exactly the rows and columns the read door serves this person. */
+    ioExport(args: {
         table_id: Uuid;
-        field_id: Uuid;
-    }): Promise<RecordsResult<unknown>>;
+        columns?: string[] | null;
+        limit?: number;
+    }): Promise<RecordsResult<IoExportPage>>;
+    /** G5. That page as an .xlsx; a withheld column is named on its own sheet. */
     /**
-     * @deprecated The record store is never off (owner ruling, 2026-10-03: everything is on by
-     * default). This answers `true` whenever the door answers; a refusal means the store could not
-     * be reached, never that it is off. Do not gate a screen on it.
+     * G9. Every table a picker may offer here, from BOTH stores, each saying which store opens it.
+     * A table the app keeps out of default lists (`custom.table_kept_out_of_lists`: an agent's
+     * outputs) is left out unless `include_platform_tables` is true — the "Show platform tables" switch.
      */
-    storeIsOpen(): Promise<RecordsResult<boolean>>;
+    tableListEverywhere(args?: {
+        include_platform_tables?: boolean;
+    }): Promise<RecordsResult<{
+        success: boolean;
+        tables: TableListEntry[];
+    }>>;
     /**
-     * WHAT THIS PERSON MAY DO TO THESE THINGS — asked once, for a whole page.
-     *
-     * There is no principal argument, on purpose: the door resolves the caller
-     * from the session, so a person can ask about their OWN access and about
-     * nobody else's. A subject they hold nothing on answers `level: null`, which
-     * is an answer; the row is never omitted, because a screen that could not
-     * tell "no access" from "not asked yet" would draw one of them as the other.
+     * Every table the person reaches (`custom.data_home_tables`), as the data home lists them.
+     * `organization_id` names one organization; `null` asks for every organization the person
+     * reaches — never the client's bound organization by default. A table the app keeps out of
+     * default lists (an agent's outputs) is answered only with `include_platform_tables: true`.
      */
-    myLevels(args: {
+    dataHomeTables(args: {
+        organization_id: Uuid | null;
+        include_platform_tables?: boolean;
+    }): Promise<RecordsResult<DataHomeTable[]>>;
+    /**
+     * G10. Refresh a synced source (a sheet tab) into ONE Table under `home_id`: new rows added,
+     * changed rows updated, rows the source dropped archived — never destroyed; columns the
+     * person added in Matrx survive. Build the spec with `sheetSyncSpec`.
+     */
+    tableSync(args: {
+        home_id: Uuid;
+        spec: TableSyncSpec;
+    }): Promise<RecordsResult<TableSyncResult>>;
+    /**
+     * G11. The record-store Table a context scope's template-bound item provisions — one per item
+     * and scope. A scope provisioned before the move answers with its moved Table (same id); the
+     * Home defaults to the organization's own.
+     */
+    scopeTableProvision(args: {
+        item_id: Uuid;
+        scope_id: Uuid;
+        home_id?: Uuid | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /** G12. The rows of each Table this reader may see, in one call (fold with `withRowCounts`). A Table she may not know gets no row. */
+    tableRowCounts(args: {
+        table_ids: Uuid[];
+    }): Promise<RecordsResult<TableRowCount[]>>;
+    /** G12. Each live record's own header (created, updated, version) that the read door does not answer. */
+    recordHeaders(args: {
         ids: Uuid[];
-        subject?: "record";
-    }): Promise<RecordsResult<MyLevel[]>>;
-    /** G1. Write ONE leaf of a Table's colors, or clear it with `null`. Editor on the Table. */
-    tableDecorate(args: {
-        table_id: Uuid;
-        path: DecorationPath;
-        value: unknown;
-    }): Promise<RecordsResult<TableDecorations>>;
-    /** G1. A Table's colors as a screen paints them, with what went stale named. */
-    tableDecorations(args: {
-        table_id: Uuid;
-    }): Promise<RecordsResult<TableDecorations>>;
-    /** G1. The layout a grid opens with: platform → organization knob → the view's own. */
-    gridLayout(args: {
+    }): Promise<RecordsResult<RecordHeader[]>>;
+    /**
+     * G14. Share a Table with a person by email or account id: an existing account outside the
+     * organization is granted at once and notified (never made a member); an address with no
+     * account is invited. The organization's outside-sharing setting decides first.
+     */
+    tableShareOutsideGrant(args: {
         table_id: Uuid;
-        view_id?: Uuid | null;
-    }): Promise<RecordsResult<GridLayout>>;
-    /** G3. The older grid's formula text → the store's expression. Never refuses a typo: answers ok:false. */
-    formulaParse(args: {
+        person: string;
+        level?: "viewer" | "commenter" | "editor" | "admin";
+    }): Promise<RecordsResult<OutsideShareAnswer>>;
+    /** G13. Keep a hand-set order on a saved view: the named rows first, in this order (build it with `moveInOrder`). */
+    viewRecordOrderSet(args: {
+        view_id: Uuid;
+        record_ids: Uuid[];
+    }): Promise<RecordsResult<ViewOrderSet>>;
+    /**
+     * G13 + ORDER-FILTER. A page of a hand-ordered view: placed rows by position, then the rest by
+     * created time. `filter` is the list door's question (`StoreFilter`: a flat map or a nested
+     * Rule — the view's own `where`, or a number clicked on a dashboard); given, the store reads
+     * exactly the rows that match, in their places, and `limit`/`offset` page THAT order. Each row
+     * answers the position stored for it; rows the filter hides keep theirs.
+     */
+    readInViewOrder(args: {
+        view_id: Uuid;
+        filter?: StoreFilter | null | undefined;
+        limit?: number;
+        offset?: number;
+    }): Promise<RecordsResult<Array<ReadRow & {
+        position: number | null;
+    }>>>;
+    exportXlsx(args: {
         table_id: Uuid;
-        text: string;
-    }): Promise<RecordsResult<FormulaParse>>;
+        columns?: string[] | null;
+        limit?: number;
+        labels?: Record<string, string>;
+        sheetLabel?: string;
+    }): Promise<RecordsResult<Uint8Array>>;
+}
+/** One Table's two lane facts, as `custom.table_facts` answers them. */
+interface TableFact {
+    table_id: Uuid;
+    /**
+     * The old lane word (personal · internal · public), now worked out by the store from `shown_to`
+     * and `published_to_web` (access ladder). Read those two; this stays for older stores.
+     */
+    visibility: string;
+    /** Whether the person signed in MADE this Table. Never who did. */
+    mine: boolean;
+    /** Access ladder "Shown to": only_me · my_team · everyone · everyone_on_ai_matrx; null = the default. */
+    shown_to?: string | null;
+    /** Access ladder "Published to the web": the only way anyone outside the organization opens it. */
+    published_to_web?: boolean;
+}
+/**
+ * WHERE A TABLE IS CURRENTLY READ AND WRITTEN during the older-table cutover.
+ * `tableHome` is an address read from one Table record; this applies the
+ * organization's migration switch to a batch of ids, including same-id copies.
+ */
+interface TableLiveLocation {
+    table_id: Uuid;
+    lives_in: "record" | "older";
+    why: string | null;
+}
+
+/** One Field a person asked for, in the words a person uses (FLD-1 / FLD-11). */
+interface NewFieldSpec {
+    key: string;
+    label: string;
+    /**
+     * The word for what this column holds — any word `custom._field_document_for`
+     * resolves for `type` (a parity type, a behaviour, a plain synonym, or a kind
+     * such as `signature`, `relation`, `entity_reference`, `autonumber`). It is
+     * sent to the door as `type`, unmapped; a word that means nothing is refused
+     * by name, with the list.
+     */
+    type: FieldTypeWord;
+    sort?: number;
+    required?: boolean;
+    multi?: boolean;
+    config?: Record<string, unknown>;
+    /** A choice list's choices, as words. The store keeps them as a Table (FLD-5). */
+    options?: string[];
+    /** A column that points at another Table of this organization (FLD-11 / REL-8). */
+    relationTarget?: Uuid;
+    /** A currency column's symbol; a date column's day-or-day-and-time. */
+    unit?: string;
+    kind?: "date" | "datetime";
+    /**
+     * An `entity_reference` column's kinds: the platform entity tokens it may point
+     * at (`ai_model`, `note`, `web_site` …; `custom.entity_reference_kinds()` lists
+     * them). The store refuses an entity reference that names none.
+     */
+    allowedTypes?: string[];
+    /**
+     * No two live records may hold the same value here (a `unique` Rule, FLD-3 / B1). A column
+     * `recordUpsert` finds a record by must carry it.
+     */
+    unique?: boolean;
+    /**
+     * An EXISTING choice list's Table — the column uses those very option records instead of making a
+     * new list (a drafts table copying its source table's column keeps the same choices). Sent as
+     * `config.options_table_id`.
+     */
+    optionsTableId?: Uuid;
+    /**
+     * Anything else `custom.field_declare` accepts, passed through verbatim and applied LAST (a stored
+     * Field document copied key for key, `format`, `sensitivity`, `via` / `pick` / `agg` / `of`, …).
+     * The store judges every key; a word it does not take is refused by name.
+     */
+    declaration?: Partial<NewFieldDeclaration> & Record<string, unknown>;
+}
+
+/** One door's answer, under its exact arguments. Plain JSON: it crosses from server to browser. */
+interface RecordsSeedAnswer {
+    door: string;
+    args: Record<string, unknown>;
+    data: unknown;
+}
+/** What a server asked for a page, as the person, and when. */
+interface RecordsSeed {
+    /** Epoch ms when the server asked. */
+    at: number;
+    answers: RecordsSeedAnswer[];
+}
+
+/**
+ * One client's memory of its own operations. `mint()` names a write and remembers it; `isOwn(opId)`
+ * answers whether a notice is that write's echo.
+ *
+ * OWN-WRITE DETECTION IS PER CLIENT INSTANCE. Two setups in ONE process (a server holding two
+ * identities, a worker beside a UI) must hear each other: a realm-wide ledger made A's write "ours" to
+ * B as well, and B dropped it as an echo (2026-10-08, the README proof). `createRecords` gives every
+ * setup its own ledger and hands it to its client, its entity port and its live-changes port.
+ */
+interface OpLedger {
+    mint(): Uuid;
+    isOwn(opId: string | null | undefined): boolean;
+    /** Test seam: forget everything. */
+    clear(): void;
+    /** Test seam: how many operations are currently remembered. */
+    readonly size: number;
+}
+/** A ledger of one client's own: hand the SAME one to the client that writes and the port that listens. */
+declare function createOpLedger(): OpLedger;
+/**
+ * THE REALM'S DEFAULT LEDGER, IN A GLOBAL SLOT — for hosts that mount one client per realm (a browser
+ * tab) and never name a ledger. Every section of the built package (root, core, react, realtime, data,
+ * typed-table) carries its own copy of this module, and the ESM and CJS builds are two more graphs; a
+ * module-level Map split it so `records/core` minted in one and `records/realtime` checked another — own
+ * writes came back as strangers' changes (2026-10-08). Guarded on the packed tarball by
+ * scripts/check-shared-state.mjs.
+ */
+declare const defaultOpLedger: OpLedger;
+/**
+ * Mint the id for one client operation and remember it as ours (the realm's default ledger).
+ *
+ * ONE CALL IS ONE OPERATION. A fifty-row paste through `recordWriteMany` is ONE op id, because
+ * the store announces one statement once — and it REFUSES a batch carrying two different ones
+ * by name, for exactly that reason.
+ */
+declare function mintOpId(): Uuid;
+/**
+ * Is this notice the echo of a write this realm's default ledger made?
+ *
+ * `undefined`/`null` is NOT ours and never has been: a notice with no `op_id` came from a
+ * server-side write, an agent tool, another client, or a store older than this mechanism —
+ * all of which are changes this browser has not seen and must read.
+ */
+declare function isOwnOp(opId: string | null | undefined): boolean;
+/** Test seam: forget everything. Never called by product code. */
+declare function forgetAllOps(): void;
+/** Test seam: how many operations are currently remembered. */
+declare function rememberedOpCount(): number;
+
+/**
+ * The data seam: a structural subset of `SupabaseClient`. The package never
+ * opens a database connection of its own and never holds a key — the HOST
+ * supplies a client that already carries the operating person's session, which
+ * is what makes DOOR-5 and AGT-N-4 true (the store sees the person, not us).
+ */
+interface RecordsDataSource {
     /**
-     * NOTION-PROPS. The formula being typed, parsed AND worked out for one record of the table
-     * (`custom.formula_preview`): the parse, plus `value` — what a saved formula column would show on
-     * that record — or `error` when it parses and cannot be worked out there. Writes nothing.
+     * Call a door. The name is always a door the live catalogue has; `/core`
+     * refuses `door_absent` before it ever reaches here for one that does not.
      */
-    formulaPreview(args: {
-        table_id: Uuid;
-        record_id: Uuid | null;
-        text: string;
-    }): Promise<RecordsResult<FormulaPreview>>;
-    /** G2. Declare a Table's row actions — the whole list. Editor on the Table. */
-    actionDeclare(args: {
-        table_id: Uuid;
-        actions: RowAction[];
-    }): Promise<RecordsResult<RowAction[]>>;
-    /** G2. A Table's row actions, each saying whether it can run here. */
-    rowActions(args: {
-        table_id: Uuid;
-    }): Promise<RecordsResult<{
-        actions: RowAction[];
-        stale: unknown[];
-    }>>;
+    rpc(fn: string, args: Record<string, unknown>, 
     /**
-     * G2. Run one action on a selection, in ONE transaction. A refusal changed NOTHING; read
-     * every record and field that refused with `actionRefusals(result.error)`.
+     * THE SCHEMA THE DOOR LIVES IN, always supplied: `custom` for the store's
+     * own doors, `iam` for the trust doors (the external principal and the
+     * publish binding, which are the PLATFORM's). A host binding supabase-js
+     * routes this to `client.schema(options.schema).rpc(fn, args)`; a host that
+     * ignores it calls its own default PostgREST profile — `public` — and is
+     * refused by name, which is the failure we want rather than a silent answer
+     * from the wrong system. (Before 2026-09-18 this was described as "only ever
+     * `iam`" and the store's doors went unqualified; the extension's first real
+     * turn proved that asks `public.store_is_open` and finds nothing.)
      */
-    actionRun(args: {
-        action_id: Uuid;
-        record_ids: Uuid[];
-    }): Promise<RecordsResult<ActionRunResult>>;
+    options?: {
+        schema?: string;
+    }): PromiseLike<{
+        data: unknown;
+        error: PgError | null;
+    }>;
     /**
-     * AUTOMATION-DOOR. Declare (or, with `automation_id`, replace) one automation on a Table — editor on the Table.
-     * A spec the store refuses comes back as `data.ok === false` with `_errors`, one sentence per path.
+     * OPTIONAL. True for the real supabase adapters: the client may open a table page with ONE
+     * `custom.table_page_bundle` call instead of a dozen shape doors one after another (PAGE-BUNDLE).
+     * Leave it off for a test or replay source that does not model the bundle door.
      */
-    automationDeclare(args: {
-        table_id: Uuid;
-        spec: AutomationSpec;
-        automation_id?: Uuid | null;
-    }): Promise<RecordsResult<AutomationDeclared>>;
-    /** AUTOMATION-DOOR. A Table's automations with their last run; archived ones only when asked. */
-    automations(args: {
-        table_id: Uuid;
-        include_archived?: boolean;
-    }): Promise<RecordsResult<AutomationList>>;
-    /** AUTOMATION-DOOR. Archive one (it switches off and keeps its history). Editor on the Table. */
-    automationArchive(args: {
-        automation_id: Uuid;
-    }): Promise<RecordsResult<AutomationFlipped>>;
-    /** AUTOMATION-DOOR. Bring an archived one back (it stays off until `automationSetEnabled`). */
-    automationRestore(args: {
-        automation_id: Uuid;
-    }): Promise<RecordsResult<AutomationFlipped>>;
-    /** AUTOMATION-DOOR. Switch one on or off. */
-    automationSetEnabled(args: {
-        automation_id: Uuid;
-        enabled: boolean;
-    }): Promise<RecordsResult<AutomationFlipped>>;
-    /** AUTOMATION-DOOR. Run history, newest first: status, the store's own sentence, every step. */
-    automationRuns(args: {
-        automation_id: Uuid;
-        limit?: number;
-        cursor?: string | null;
-    }): Promise<RecordsResult<AutomationRuns>>;
-    /** G4. Send every change to this Table's records to an https webhook. Admin. The secret is shown once. */
-    tableWebhookDeclare(args: {
-        table_id: Uuid;
-        target_url: string;
-        events?: RecordEvent[] | null;
-        description?: string | null;
-    }): Promise<RecordsResult<TableWebhookDeclared>>;
-    /** G4. The webhooks a Table sends to, with their delivery health — never the secret. */
-    tableWebhooks(args: {
-        table_id: Uuid;
-    }): Promise<RecordsResult<TableWebhook[]>>;
-    /** G4. Switch one off. It is never deleted. */
-    tableWebhookArchive(args: {
-        webhook_id: Uuid;
-    }): Promise<RecordsResult<boolean>>;
-    /** G5. Number the records an autonumber column found already there, in creation order. */
-    autonumberBackfill(args: {
-        field_id: Uuid;
-    }): Promise<RecordsResult<{
-        numbered: number;
-        highest: number | null;
-        says: string;
-    }>>;
+    opensInOneCall?: boolean;
+    /** Reads of `custom.*` go through the schema-qualified builder, never a bare `from`. */
+    schema(name: string): {
+        from(table: string): RecordsTableQuery;
+    };
+}
+/** The read surface the list and query paths use. A real supabase-js client satisfies it. */
+interface RecordsTableQuery {
+    select(columns: string, options?: {
+        count?: "exact" | "planned" | "estimated";
+        head?: boolean;
+    }): RecordsFilter;
+}
+interface RecordsFilter extends PromiseLike<RecordsResponse> {
+    eq(column: string, value: unknown): RecordsFilter;
+    neq(column: string, value: unknown): RecordsFilter;
+    in(column: string, values: readonly unknown[]): RecordsFilter;
+    is(column: string, value: null | boolean): RecordsFilter;
+    gte(column: string, value: unknown): RecordsFilter;
+    lte(column: string, value: unknown): RecordsFilter;
+    order(column: string, options?: {
+        ascending?: boolean;
+    }): RecordsFilter;
+    range(from: number, to: number): RecordsFilter;
+    limit(count: number): RecordsFilter;
+}
+interface RecordsResponse {
+    data: unknown;
+    error: PgError | null;
+    count?: number | null;
+}
+/**
+ * WHO IS ACTING. AGT-N-4: an agent carries the exact authority of the person
+ * operating it — there is no agent identity and there are no service roles. So
+ * the actor word and the person are two separate facts, and `on_behalf_of` is
+ * meaningful only when the actor is `agent`.
+ */
+interface RecordsActor {
+    actor: Actor;
+    /** The signed-in person. The store reads this from the session, not from us; this is for the client's own mirror. */
+    user_id?: Uuid;
+    /** Only an agent acts on behalf of a person (the store refuses it otherwise). */
+    on_behalf_of?: Uuid;
+}
+/**
+ * OPTIONAL. A live-updates seam. The default degradation is stated rather than
+ * silent: with no port bound, `useRecords` reports `live: false` and the screen
+ * can say "not live" instead of quietly going stale.
+ *
+ * A host binds this with `@ai-matrx/data/react`'s channel hygiene — the package
+ * deliberately does NOT depend on it, so the headless core stays free of a
+ * realtime client and a host that has one keeps using the one it already has.
+ */
+interface RecordsRealtimePort {
     /**
-     * NOTION-PROPS-3. PRESS A BUTTON COLUMN ON ONE ROW (`custom.button_press`): a link comes back filled from
-     * the row for the screen to open; a row action or an automation runs in the store and its result comes
-     * back. A button with nothing set up is refused by name (22023).
+     * Watch one organization's records of one table. Returns an unsubscribe.
+     *
+     * THE HOST NUDGES THROUGH THIS SINK AND REACHES AROUND NOTHING. Until 0.43.0 the callback
+     * was `(recordId: Uuid) => void` and a host that also wanted to say "the SHAPE moved"
+     * imported `tableShapeChanged` from `@ai-matrx/records/react` and called it directly —
+     * which worked, and which meant the port contract did not describe half of what a port
+     * actually does. A column appearing is not a row changing, and the package owns the
+     * difference.
+     *
+     * NOTHING THAT ARRIVES HERE IS DATA. A nudge has not passed the read door, so the hook
+     * re-reads — by id set when the nudge names ids, whole-page when it cannot.
      */
-    buttonPress(args: {
-        record_id: Uuid;
-        field_id: Uuid;
-    }): Promise<RecordsResult<ButtonPressed>>;
+    subscribeRecords(args: {
+        organization_id: Uuid;
+        table_id: Uuid;
+    }, sink: RecordsChangeSink): () => void;
+}
+/** What a realtime port may tell the package. Two calls, because a column is not a row. */
+interface RecordsChangeSink {
     /**
-     * NOTION-PROPS-3. The knob `data/timeline_dependency_shift` for the signed-in person in this organization:
-     * whether moving a record on a timeline moves the records waiting on it (default true).
+     * THESE RECORDS MOVED. `null` means "I cannot tell you which" — a reconnect, a tab wake, or
+     * a change above the store's own id cap — and is the one case that costs a whole-page read.
+     * An EMPTY array is not the same thing and is not a nudge at all.
      */
-    timelineDependencyShift(): Promise<RecordsResult<boolean>>;
-    /** G5. One page of the export door — exactly the rows and columns the read door serves this person. */
-    ioExport(args: {
-        table_id: Uuid;
-        columns?: string[] | null;
-        limit?: number;
-    }): Promise<RecordsResult<IoExportPage>>;
-    /** G5. That page as an .xlsx; a withheld column is named on its own sheet. */
+    records(ids: readonly Uuid[] | null): void;
     /**
-     * G9. Every table a picker may offer here, from BOTH stores, each saying which store opens it.
-     * A table the app keeps out of default lists (`custom.table_kept_out_of_lists`: an agent's
-     * outputs) is left out unless `include_platform_tables` is true — the "Show platform tables" switch.
+     * THIS TABLE'S SHAPE MOVED — a column added, retired or changed. Re-reading the rows would
+     * redraw the same table without the new column in it, which is a screen that is out of date
+     * while looking healthy.
      */
-    tableListEverywhere(args?: {
-        include_platform_tables?: boolean;
-    }): Promise<RecordsResult<{
-        success: boolean;
-        tables: TableListEntry[];
-    }>>;
+    shape(): void;
+}
+/**
+ * OPTIONAL. Where a refusal that nobody asked about goes — the loud funnel.
+ * Default degradation: `console.error` with the store's own words, never
+ * silence.
+ */
+type RecordsErrorSink = (error: {
+    code: string;
+    message: string;
+    hint?: string;
+    where: string;
+}) => void;
+/**
+ * OPTIONAL. The merge-field resolver's server half (`W5-MERGE-B`). While it is
+ * not bound, `useMergeField` answers `pending` WITH THE REASON — never a blank,
+ * never a literal placeholder left in the text (DYN-14).
+ */
+interface RecordsResolverPort {
+    resolve(args: {
+        organization_id: Uuid;
+        merge_field_keys: string[];
+        /** The live selection the `state` source reads (DYNAMIC-VALUES §C). */
+        state?: Record<string, unknown>;
+    }): Promise<unknown>;
+}
+/** The one config a host binds. */
+interface RecordsConfig {
+    /** REQUIRED. */
+    dataSource: RecordsDataSource;
+    /** REQUIRED. */
+    actor: RecordsActor;
     /**
-     * Every table the person reaches (`custom.data_home_tables`), as the data home lists them.
-     * `organization_id` names one organization; `null` asks for every organization the person
-     * reaches — never the client's bound organization by default. A table the app keeps out of
-     * default lists (an agent's outputs) is answered only with `include_platform_tables: true`.
+     * REQUIRED. REC-29: organizations are hard walls, and the store is keyed
+     * `(organization_id, id)`. There is no "current organization" this package
+     * discovers for itself — the host says which one, every time.
+     *
+     * `null` is the ALL-ORGANIZATIONS mode (access belongs to the person, not the selected
+     * organization): a host whose page lists across every organization the person belongs to
+     * mounts with none. Doors that answer for the person (`custom.data_home*`) take it; a door that
+     * needs one is sent NULL and refuses in its own words, never a guessed organization.
      */
-    dataHomeTables(args: {
-        organization_id: Uuid | null;
-        include_platform_tables?: boolean;
-    }): Promise<RecordsResult<DataHomeTable[]>>;
+    organizationId: Uuid | null;
     /**
-     * G10. Refresh a synced source (a sheet tab) into ONE Table under `home_id`: new rows added,
-     * changed rows updated, rows the source dropped archived — never destroyed; columns the
-     * person added in Matrx survive. Build the spec with `sheetSyncSpec`.
+     * EVERY organization the person belongs to (active-org-is-never-a-list-filter.md).
+     * `organizationId` above is where NEW things are written and which org a write
+     * runs in; it never decides what a READ shows. With this set, `tableList` /
+     * `tableFacts` span all of these organizations (or one, when the page passes
+     * its `organization_id` filter), and `tableRead` / `recordRead` /
+     * `recordValuesVersioned` open a record in ITS OWN organization. Absent ⇒ the
+     * client reads only `organizationId`, exactly as before.
      */
-    tableSync(args: {
-        home_id: Uuid;
-        spec: TableSyncSpec;
-    }): Promise<RecordsResult<TableSyncResult>>;
+    organizationIds?: readonly Uuid[];
+    realtime?: RecordsRealtimePort;
     /**
-     * G11. The record-store Table a context scope's template-bound item provisions — one per item
-     * and scope. A scope provisioned before the move answers with its moved Table (same id); the
-     * Home defaults to the organization's own.
+     * This client's own-write memory (`createOpLedger()`). Hand the SAME ledger to the live-changes port
+     * that listens for this client. Absent ⇒ the realm's default ledger (one client per browser tab).
      */
-    scopeTableProvision(args: {
-        item_id: Uuid;
-        scope_id: Uuid;
-        home_id?: Uuid | null;
-    }): Promise<RecordsResult<Uuid>>;
-    /** G12. The rows of each Table this reader may see, in one call (fold with `withRowCounts`). A Table she may not know gets no row. */
-    tableRowCounts(args: {
-        table_ids: Uuid[];
-    }): Promise<RecordsResult<TableRowCount[]>>;
-    /** G12. Each live record's own header (created, updated, version) that the read door does not answer. */
-    recordHeaders(args: {
-        ids: Uuid[];
-    }): Promise<RecordsResult<RecordHeader[]>>;
+    opLedger?: OpLedger;
+    onError?: RecordsErrorSink;
+    resolver?: RecordsResolverPort;
     /**
-     * G14. Share a Table with a person by email or account id: an existing account outside the
-     * organization is granted at once and notified (never made a member); an address with no
-     * account is invited. The organization's outside-sharing setting decides first.
+     * The schema the record store lives in. Exists so a rehearsal branch and
+     * production can differ without a fork; it is `custom` everywhere today.
      */
-    tableShareOutsideGrant(args: {
-        table_id: Uuid;
-        person: string;
-        level?: "viewer" | "commenter" | "editor" | "admin";
-    }): Promise<RecordsResult<OutsideShareAnswer>>;
-    /** G13. Keep a hand-set order on a saved view: the named rows first, in this order (build it with `moveInOrder`). */
-    viewRecordOrderSet(args: {
-        view_id: Uuid;
-        record_ids: Uuid[];
-    }): Promise<RecordsResult<ViewOrderSet>>;
+    schema?: string;
     /**
-     * G13 + ORDER-FILTER. A page of a hand-ordered view: placed rows by position, then the rest by
-     * created time. `filter` is the list door's question (`StoreFilter`: a flat map or a nested
-     * Rule — the view's own `where`, or a number clicked on a dashboard); given, the store reads
-     * exactly the rows that match, in their places, and `limit`/`offset` page THAT order. Each row
-     * answers the position stored for it; rows the filter hides keep theirs.
+     * Doors the generated catalogue (`STORE_DOORS`) does not list YET but this store is known to have —
+     * the nightly clone after a rehearsal, a test store. A screen reading an owed door asks
+     * `doorReady(config, name)` first, so production (which lacks the door until the chair applies it)
+     * is never asked and logs nothing. Leave it out in a shipped host: the regenerated catalogue is
+     * the switch.
      */
-    readInViewOrder(args: {
-        view_id: Uuid;
-        filter?: StoreFilter | null | undefined;
-        limit?: number;
-        offset?: number;
-    }): Promise<RecordsResult<Array<ReadRow & {
-        position: number | null;
-    }>>>;
-    exportXlsx(args: {
-        table_id: Uuid;
-        columns?: string[] | null;
-        limit?: number;
-        labels?: Record<string, string>;
-        sheetLabel?: string;
-    }): Promise<RecordsResult<Uint8Array>>;
+    knownDoors?: readonly string[];
 }
-/** One Table's two lane facts, as `custom.table_facts` answers them. */
-interface TableFact {
-    table_id: Uuid;
+/**
+ * RUN AN AGENT ON THIS ROW — a PORT (step 10, 2026-10-08). A table's agent button ("Draft follow-up") hands
+ * the row to an agent with the action's own prompt. The store ships no agent: the host binds the run (the
+ * agent run itself belongs to `@ai-matrx/agents`; the website starts it through the `data.row_action`
+ * mandate). Everything the run needs rides the target, read as THIS reader sees it — no second read.
+ */
+interface RowAgentTarget {
+    tableId: Uuid;
+    recordId: Uuid;
+    title: string;
+    action: string;
+    prompt: string;
+    /** The table's name, as the reader sees it. */
+    tableName: string;
+    /** The table's columns. */
+    fields: readonly Field[];
+    /** The row, masked for this reader. */
+    document: RecordDocument;
+    /** This reader's level on the row. */
+    level: PermissionLevel | null;
+}
+/** The host's agent runner — `createRecords({ rowAgent })`; records-ui's grid calls it for `kind: "agent"` actions. */
+interface RowAgentPort {
+    run(target: RowAgentTarget): void | Promise<void>;
+}
+
+/**
+ * REL-6. Whether Visibility flows along this relation and the MAXIMUM access
+ * level it carries. Default off on `referenced`, on for `owned`.
+ */
+interface RelationCarries {
+    carries: boolean;
+    /** The ceiling — a relation never carries more access than this. */
+    max_access: string | null;
+}
+/** The seven properties, each its own question. */
+interface RelationProperties {
+    /** REL-1. Stored once on the contained table, read from the field's side. */
+    flavor: RelationFlavor;
+    /** REL-2. Separate from flavour. */
+    on_delete: OnDelete;
+    /** REL-3. A snapshot is a frozen copy in the relation's payload — never a pointer into History. */
+    binding: RelationBinding;
+    /** REL-4. */
+    ordered: boolean;
+    /** REL-5. */
+    loops: "allowed" | "refused";
+    /** REL-6. */
+    carries: RelationCarries;
+    /** REL-7. */
+    cardinality: RelationCardinality;
+}
+/**
+ * REL-8 / REL-N-1. A target is a REFERENCE, written that way from the first
+ * line of code, because it may name a row outside our database. One Table,
+ * several, or any — polymorphic without restriction. External targets are
+ * read-only in v1.
+ */
+type RelationTarget = {
+    kind: "ours";
+    entity_token: string;
+    row_id: Uuid;
+} | {
+    kind: "external";
+    connection_token: string;
+    external_table: string;
+    external_key: string;
+} | {
+    kind: "any";
+};
+/** One edge, as the store holds it in `platform.associations`. */
+interface Relation {
+    id: Uuid;
+    organization_id: Uuid;
+    /** REL-10. The field key, which is what `role` holds. */
+    role: string;
+    source: RelationTarget;
+    target: RelationTarget;
+    properties: RelationProperties;
+    /** REL-4. Meaningful only when `ordered`. */
+    position: number | null;
+    /** REL-3. The frozen copy, when `binding` is `snapshot`. */
+    payload: Record<string, unknown> | null;
+    /** REL-14. Hydrated from the target's title field AT READ — never stored. */
+    label: string | null;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    /** REL-13 / REL-16. Associations are versioned, so relation history exists. */
+    version: number;
+}
+/**
+ * DOOR-6. A query coordinate: "related to THIS, along THAT role, in that
+ * direction". Any combination, and any subset of them.
+ */
+interface RelationCoordinate {
+    /** The record at the other end. */
+    record_id: Uuid;
+    /** The field key the edge carries as its role. Omit to mean any role. */
+    role?: string;
+    /** Which way to walk. `out` is this record's own relation fields. */
+    direction?: "out" | "in" | "either";
+}
+/**
+ * The arguments of the ONE relation-words resolver: the FIELD, because that is where its display
+ * spec is declared and judged (`custom._display_of_field` reads it server-side; the caller never
+ * carries it), and the ids of a page of cells.
+ */
+/** A linked record's icon, and its table's icon for a record that has none (`relationWordsMany`). */
+interface RelationIcons {
+    icon: string | null;
+    tableIcon: string | null;
+}
+interface RelationWordsManyArgs {
+    field_id: Uuid;
+    record_ids: Uuid[];
+}
+/** One reference as the store keeps it. */
+interface EntityRef {
+    /** The `platform.entity_types` token: `note`, `web_site`, `agent` … */
+    token: string;
+    id: Uuid;
+}
+/** One reference as a read door answers it. */
+interface EntityRefWithWords extends EntityRef {
     /**
-     * The old lane word (personal · internal · public), now worked out by the store from `shown_to`
-     * and `published_to_web` (access ladder). Read those two; this stays for older stores.
+     * The thing's own title — or the store's withheld sentence when the reader
+     * may not open it; `null` when the kind names no title.
      */
-    visibility: string;
-    /** Whether the person signed in MADE this Table. Never who did. */
-    mine: boolean;
-    /** Access ladder "Shown to": only_me · my_team · everyone · everyone_on_ai_matrx; null = the default. */
-    shown_to?: string | null;
-    /** Access ladder "Published to the web": the only way anyone outside the organization opens it. */
-    published_to_web?: boolean;
+    label: string | null;
+}
+/** One kind of platform thing a record may point at (`custom.entity_reference_kinds`). */
+interface EntityReferenceKind {
+    token: string;
+    /** What a person reads: "Note", "Site", "Agent". */
+    label: string;
+    /** The picker's grouping: the admin-assigned reference category, else the schema. */
+    category: string;
+}
+/**
+ * The references a cell holds, whichever shape it arrived in — one object, a
+ * list, or what a read door rendered (with labels). Anything that is not a
+ * reference is left out, never guessed at.
+ */
+declare function entityRefsOf(value: unknown): EntityRefWithWords[];
+/**
+ * What to WRITE for an entity-reference cell: `{token, id}` only, each thing
+ * once, first mention first — the label a read door added is dropped, because
+ * the store reads it and never keeps it (REL-14). A single-valued column gets
+ * the one object (or `null`), a multi-valued one the list.
+ */
+declare function entityRefsToWrite(value: unknown, multi: boolean): EntityRef | EntityRef[] | null;
+/**
+ * The kinds of platform thing a record may point at — what the field editor's
+ * kind picker lists. `custom.entity_reference_kinds()`.
+ */
+declare function entityReferenceKinds(source: RecordsDataSource): Promise<RecordsResult<EntityReferenceKind[]>>;
+/**
+ * THE SEARCH DOOR (lane REFERENCE-CARRY). The platform things of these kinds whose words hold
+ * `search`, that THIS person may point a record at — each one a thing the store's own write check
+ * (`custom._entity_reference_target_ok`) would accept, so a picked reference is never refused on
+ * save. `custom.entity_reference_search`. An empty search lists the first things by name.
+ */
+declare function entityReferenceSearch(source: RecordsDataSource, organizationId: Uuid | null, tokens: readonly string[], search: string, limit?: number): Promise<RecordsResult<EntityRefWithWords[]>>;
+/**
+ * THE WORDS HELPER. The words of each `{token, id}` for a picker or a chip
+ * before anything is saved — each label read by the store for THIS person and
+ * withheld when they may not open the thing. `custom.entity_reference_words`.
+ * A saved cell needs no call: every read door already answers its labels.
+ */
+declare function entityReferenceWords(source: RecordsDataSource, organizationId: Uuid | null, refs: readonly EntityRef[]): Promise<RecordsResult<EntityRefWithWords[]>>;
+/** One reverse column of a Table, as `custom.reverse_columns` answers it. */
+interface ReverseColumn {
+    /** Stable key: the linking Field's `inverse_key`, else `linked_<field id>`. Never a Field key of B. */
+    key: string;
+    /** What the column is called on B: the linking table's name (plus the column's when ambiguous). */
+    label: string;
+    /** The relation Field on the linking table. */
+    source_field_id: Uuid;
+    source_field_key: string;
+    source_field_label: string;
+    /** The linking table. */
+    source_table_id: Uuid;
+    source_table_name: string;
+    /** Always `many`: any number of records may link to one. */
+    cardinality: "many";
+    /**
+     * True for a virtual back-link (written only from the linking table's side). False for a TWO-WAY
+     * LINK (NOTION-PROPS): the reverse end is a real Field on this table — `key` is its key, `label`
+     * its label — and `relationReverseSet` writes its links from here.
+     */
+    read_only: boolean;
 }
 /**
- * WHERE A TABLE IS CURRENTLY READ AND WRITTEN during the older-table cutover.
- * `tableHome` is an address read from one Table record; this applies the
- * organization's migration switch to a batch of ids, including same-id copies.
+ * NOTION-PROPS. A two-way link's reverse Field: a relation whose `config.reverse_of` names the
+ * forward relation it mirrors. It holds no value of its own — its links are the forward Field's.
  */
-interface TableLiveLocation {
+declare function isReverseField(field: {
+    type?: unknown;
+    config?: unknown;
+} | null | undefined): boolean;
+/** One linking record, as a chip shows it. */
+interface ReverseLink {
+    id: Uuid;
+    /** The linking record's name, read by the store for this reader. */
+    words: string;
+}
+/** The links of one record through one reverse column: how many the reader may see, and one page. */
+interface ReverseLinks {
+    total: number;
+    links: ReverseLink[];
+}
+interface ReverseLinksManyArgs {
+    /** The Table whose records are being shown (B). */
     table_id: Uuid;
-    lives_in: "record" | "older";
-    why: string | null;
+    /** `ReverseColumn.source_field_id`. */
+    source_field_id: Uuid;
+    /** A page of B's record ids — up to 200 a call; more are sent in groups by the client. */
+    record_ids: readonly Uuid[];
+    /** Links per record, 1–50 (the store holds it there). Default 10. */
+    limit?: number;
+    /** Skip this many links of each record — the next page of one hub record. Default 0. */
+    offset?: number;
+}
+/** `reverseLinksFields`: the links of a page through several reverse columns, in one call. */
+interface ReverseLinksFieldsArgs {
+    table_id: Uuid;
+    /** Each `ReverseColumn.source_field_id` — at most 20. */
+    source_field_ids: readonly Uuid[];
+    record_ids: readonly Uuid[];
+    limit?: number;
+    offset?: number;
+}
+/** The store's per-call ceiling on records for `custom.reverse_links_many`. */
+declare const REVERSE_LINKS_RECORDS_PER_CALL = 200;
+/** The store's ceiling on links a record per call. */
+declare const REVERSE_LINKS_PAGE_MAX = 50;
+/** The store's typed "source archived" answer for a lookup or roll-up. */
+interface SourceArchived {
+    __unavailable: "source_archived";
+    /** `link`: the relation it reads through is archived; `column`: the far column it reads is. */
+    reads: "link" | "column";
+    /** The archived Field. Absent when the reader may not know its Table. */
+    field_id?: Uuid;
+    /** Its label. Absent when the reader may not know its Table. */
+    label?: string;
+    table_id?: Uuid;
+    /** Its Table's name. Absent when the reader may not know that Table. */
+    table?: string;
 }
+/** The typed "source archived" answer, when `value` is one; null for any other value. */
+declare function sourceArchivedOf(value: unknown): SourceArchived | null;
 
-/** One Field a person asked for, in the words a person uses (FLD-1 / FLD-11). */
-interface NewFieldSpec {
+/**
+ * DYN-14 / DYN-15. An ordered list of merge fields ENDING IN A LITERAL, or the
+ * decision to block the turn, or a named absence. No unresolved value is ever
+ * rendered blank or left as a literal placeholder.
+ */
+type MissingBehavior = {
+    kind: "fallback";
+    chain: Array<{
+        merge_field_key: string;
+    } | {
+        literal: unknown;
+    }>;
+} | {
+    kind: "block_turn";
+} | {
+    kind: "named_absence";
+    say: string;
+};
+/** DYN-16. Applied AFTER resolution, on the merge field and never on the Field. */
+interface MergeFieldTransform {
+    /** e.g. `currency`, `upper`, `date`; the organization's own list. */
+    name: string;
+    options?: Record<string, unknown>;
+}
+/** DYN-1. A Record of the kernel Table `Merge Field`. */
+interface MergeField {
+    id: Uuid;
+    organization_id: Uuid;
     key: string;
     label: string;
+    /** DYN-3. Exactly one of eight. Relationships and rules are NOT sources. */
+    source: MergeFieldSource;
+    /** DYN-4. What it resolves INTO. The consumer never learns which. */
+    semantic_type: MergeFieldSemanticType;
+    /** §A. Any number. Never fused into the source. */
+    modifiers: MergeFieldModifier[];
     /**
-     * The word for what this column holds — any word `custom._field_document_for`
-     * resolves for `type` (a parity type, a behaviour, a plain synonym, or a kind
-     * such as `signature`, `relation`, `entity_reference`, `autonumber`). It is
-     * sent to the door as `type`, unmapped; a word that means nothing is refused
-     * by name, with the list.
-     */
-    type: FieldTypeWord;
-    sort?: number;
-    required?: boolean;
-    multi?: boolean;
-    config?: Record<string, unknown>;
-    /** A choice list's choices, as words. The store keeps them as a Table (FLD-5). */
-    options?: string[];
-    /** A column that points at another Table of this organization (FLD-11 / REL-8). */
-    relationTarget?: Uuid;
-    /** A currency column's symbol; a date column's day-or-day-and-time. */
-    unit?: string;
-    kind?: "date" | "datetime";
-    /**
-     * An `entity_reference` column's kinds: the platform entity tokens it may point
-     * at (`ai_model`, `note`, `web_site` …; `custom.entity_reference_kinds()` lists
-     * them). The store refuses an entity reference that names none.
-     */
-    allowedTypes?: string[];
-    /**
-     * No two live records may hold the same value here (a `unique` Rule, FLD-3 / B1). A column
-     * `recordUpsert` finds a record by must carry it.
+     * DYN-12. Exactly one, and it drives the input surface. It OUTRANKS the
+     * precedence ladder: `server_fixed` is not offered as an input at all, and a
+     * value sent for one anyway is discarded and recorded — never merged.
      */
-    unique?: boolean;
+    override_policy: OverridePolicy;
     /**
-     * An EXISTING choice list's Table — the column uses those very option records instead of making a
-     * new list (a drafts table copying its source table's column keeps the same choices). Sent as
-     * `config.options_table_id`.
+     * DYN-13. Whether an override is POSSIBLE and WHO MAY perform it are two
+     * settings. This is the second one: an access level or an organization role.
      */
-    optionsTableId?: Uuid;
+    override_requires: string | null;
+    /** DYN-16. */
+    format: MergeFieldTransform | null;
+    /** DYN-17. `inline`, `on_demand`, or `auto` by budget. A value in no tier is a defect. */
+    delivery?: Delivery;
+    /** DYN-14. Declared, always. */
+    missing?: MissingBehavior;
     /**
-     * Anything else `custom.field_declare` accepts, passed through verbatim and applied LAST (a stored
-     * Field document copied key for key, `format`, `sensitivity`, `via` / `pick` / `agg` / `of`, …).
-     * The store judges every key; a word it does not take is refused by name.
+     * What the source needs: for `record`, the starting record and the chain; for
+     * `tool`, the connection token and the freshness ceiling (DYN-20); for
+     * `literal`, the literal.
      */
-    declaration?: Partial<NewFieldDeclaration> & Record<string, unknown>;
+    source_config: Record<string, unknown>;
+    created_by: Uuid | null;
+    updated_by: Uuid | null;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    version: number;
+    metadata: Record<string, unknown>;
+    visibility: string;
 }
-
-/** One door's answer, under its exact arguments. Plain JSON: it crosses from server to browser. */
-interface RecordsSeedAnswer {
-    door: string;
-    args: Record<string, unknown>;
-    data: unknown;
+/** DYN-8. The triple the RUN gets. Every audit question is answerable from it. */
+interface ResolutionTriple {
+    record_id: Uuid | null;
+    field_id: Uuid | null;
+    value_version: number | null;
 }
-/** What a server asked for a page, as the person, and when. */
-interface RecordsSeed {
-    /** Epoch ms when the server asked. */
-    at: number;
-    answers: RecordsSeedAnswer[];
+/** DYN-22. The one provenance row per merge field per turn. */
+interface MergeFieldProvenance {
+    merge_field_id: Uuid;
+    declared_source: MergeFieldSource;
+    /** Which source actually answered — the fallback chain makes these differ. */
+    actual_source: MergeFieldSource | null;
+    record_id: Uuid | null;
+    field_id: Uuid | null;
+    value_version: number | null;
+    rule_id: Uuid | null;
+    rule_version: number | null;
+    /** DYN-11. Who overrode it, and every LOSER of the ladder, not only the winner. */
+    override_by: Uuid | null;
+    losers?: Array<{
+        source: MergeFieldSource;
+        value: unknown;
+        why_lost: string;
+    }>;
+    /** DYN-11/DYN-12. A value a client sent for a field it may not supply, discarded and recorded. */
+    discarded_attempt?: {
+        value: unknown;
+        because: string;
+    } | null;
+    resolved_at: Timestamp;
+    freshness: Freshness;
+    outcome: string;
 }
-
-/**
- * Mint the id for one client operation and remember it as ours.
- *
- * ONE CALL IS ONE OPERATION. A fifty-row paste through `recordWriteMany` is ONE op id, because
- * the store announces one statement once — and it REFUSES a batch carrying two different ones
- * by name, for exactly that reason.
- */
-declare function mintOpId(): Uuid;
 /**
- * Is this notice the echo of a write this browser made?
- *
- * `undefined`/`null` is NOT ours and never has been: a notice with no `op_id` came from a
- * server-side write, an agent tool, another client, or a store older than this mechanism —
- * all of which are changes this browser has not seen and must read.
+ * What a consumer gets back. `pending` is a first-class answer, not a blank:
+ * until the server's resolver exists, a merge field says so and says WHY
+ * (AGT-N-7 — anything that could not be delivered is named, never omitted).
  */
-declare function isOwnOp(opId: string | null | undefined): boolean;
-/** Test seam: forget everything. Never called by product code. */
-declare function forgetAllOps(): void;
-/** Test seam: how many operations are currently remembered. */
-declare function rememberedOpCount(): number;
+type MergeFieldResolution = {
+    state: "resolved";
+    /** The rendered string the prompt gets. */
+    rendered: string;
+    value: unknown;
+    triple: ResolutionTriple;
+    provenance: MergeFieldProvenance;
+} | {
+    state: "absent";
+    /** DYN-14's named absence — what the screen says instead of a blank. */
+    say: string;
+    reason: string;
+    provenance: MergeFieldProvenance | null;
+} | {
+    state: "pending";
+    /** WHY it is pending, in the words a person can act on. Never empty. */
+    reason: string;
+};
+
+/** What kind of object the id is, as `custom.where_id_opens` names it — carried as the door's own word. */
+type ObjectKind = string;
+type ObjectOrganizationAnswer = 
+/** The store named the object's organization, and the person may open the object. */
+{
+    state: "found";
+    organizationId: string;
+    kind: ObjectKind;
+    /** The screen the store says opens it (`/data/<table>?record=…`), or null for a part with none. */
+    path: string | null;
+    /** False when it is in the trash — the person may still open it, to bring it back. */
+    live: boolean;
+    /** The id it answers as — a merged record's survivor. */
+    resolvedId: string;
+}
+/** Not given to this person — or not there at all. The store does not say which, on purpose. */
+ | {
+    state: "not-given";
+}
+/** We could not ask. NOT an answer about the person's access. */
+ | {
+    state: "unavailable";
+    why: string;
+};
+/** Which organization owns an object — the port `createRecords({ organizationOf })` accepts. */
+interface RecordOrganizationPort {
+    organizationOf(id: string): Promise<ObjectOrganizationAnswer>;
+}
+declare const WHERE_ID_OPENS_DOOR = "where_id_opens";
+/** Ask the store which organization `id` lives in — the one call an object page makes before any other door. */
+declare function resolveObjectOrganization(dataSource: Pick<RecordsDataSource, "rpc">, id: string): Promise<ObjectOrganizationAnswer>;
+/** Read one `custom.where_id_opens` answer — asked here, or asked by a server render as the same person. */
+declare function readObjectOrganizationAnswer(answered: {
+    data: unknown;
+    error: {
+        code?: string | null;
+        message?: string | null;
+    } | null;
+}, id: string): ObjectOrganizationAnswer;
+/** The default port: one `custom.where_id_opens` call per ask, nothing kept. */
+declare function whereIdOpensPort(dataSource: Pick<RecordsDataSource, "rpc">): RecordOrganizationPort;
 
 interface RecordsProviderProps {
     config: RecordsConfig;
@@ -16537,4 +16637,4 @@ interface AppAutomationSpec {
  */
 declare function ensureAppAutomations(client: RecordsClient, def: AnyTypedTableDef, specs: readonly AppAutomationSpec[], options?: TypedTableOrgOptions): Promise<RecordsResult<Uuid[]>>;
 
-export { ABSENCE_REASONS, ACTOR_VOCABULARY, ADDRESS_PARTS, AGENT_WRITER_WORDS, APP_ROWS_CEILING, ARCHIVE_LANES, ARCHIVE_LANE_LABEL, ARCHIVE_LANE_MEANS, type AbsenceReason, type ActionRefusal, type ActionRunResult, type Actor, type AddressPart, type AddressValue, type AggregateBucket, type AggregateCompare, type AggregateCompareKind, type AggregateCompareWindows, type AggregateDelta, type AggregateFilter, type AggregateGroupValue, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AggregateWindow, type AnonTokenBinding, type AnyStoreTable, type AnyTypedTableDef, type AppAutomationSpec, type AppField, type AppFields, type AppRows, type AppUpsertOptions, type ArchiveDeliberatelyArgs, type ArchiveLane, type ArchivedChecklistTemplate, type ArchivedDoorRow, type ArchivedForm, type ArchivedRow, type AutomationAction, type AutomationDeclared, type AutomationFilter, type AutomationFlipped, type AutomationItem, type AutomationLastRun, type AutomationList, type AutomationRun, type AutomationRunStatus, type AutomationRuns, type AutomationSpec, type AutomationStep, type AutomationTrigger, type AutomationValue, type AutomationValues, BARCODE_SYMBOLOGIES, BUILT_KIND_WORD, BUTTON_DOES, type BookingAvailability, type BookingDeclared, type BookingSummary, type BookingWindow, type ButtonDoes, type ButtonPressed, type ButtonSettings, CHOICE_NUDGES, COMPUTE_ON, CONTEXT_POLICIES, type CaptureField, type CaptureFileRef, type CaptureOutcome, type CaptureQuestion, type CaptureQueue, type CaptureQueueCounts, type CaptureQueueOptions, type CaptureQueuePorts, type CaptureQueueStore, type CaptureSheetFace, type CaptureSheetSummary, type CaptureSyncReport, type ChecklistDeclared, type ChecklistRequirement, type ChecklistRequirementKind, type ChecklistRoleSpec, type ChecklistRunStarted, type ChecklistRunStep, type ChecklistRunSummary, type ChecklistSpec, type ChecklistStepCompleted, type ChecklistStepSpec, type ChecklistTemplateShape, type ChecklistTemplateSummary, type ChecklistTrigger, type ChecklistTriggerKind, type ChoiceCellBack, type ChoiceLike, type ChoiceNudge, type ChoiceOption, type ChoiceOptions, type ChoiceRehome, type ChoiceUsage, type ChoicesRehomed, type CoerceOptions, type Coerced, type CoercedAnswers, type CoercibleField, type CommentThreadRead, type CommentWritten, type ComputeOn, type ConfidentialRequest, type ConfidentialState, type ContextPolicy, type ConversationScope, type ConversationScopeContext, type CustomFieldTableType, DECLARABLE_FIELD_KINDS, DEFAULT_ARCHIVE_LANE, DEFAULT_PORTAL_ARCHIVE_FILTER, DELIVERIES, DRILL_CHART_TOKENS, DRILL_DESCRIPTION_MAX, DRILL_DOORS, DRILL_SCHEMA, type DashboardBlock, type DashboardBlockKind, type DashboardBlockResult, type DashboardRunResult, type DashboardSummary, type DashboardTarget, type DashboardTargetBase, type DashboardTargetOp, type DashboardTargetResult, type DashboardTotals, type DataHomeTable, type DeclarableFieldKind, type DecorationColor, type DecorationPath, type DecorationRule, type DecorationRuleOp, type DecorationTarget, type Delivery, type DigestPreview, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, type DrillAdHocOp, type DrillAnswer, type DrillAnswerRow, type DrillChartToken, type DrillDeclaration, type DrillDefinition, type DrillDimension, type DrillFinding, type DrillGrain, type DrillHaving, type DrillLane, type DrillLevel, type DrillMeasure, type DrillMeasureOp, type DrillMeasureWhereValue, type DrillPath, type DrillQuestion, type DrillRecords, type DrillRowsPage, type DrillSource, type DrillView, ENTITY_TOKENS, type EnrichAlternate, type EnrichCell, type EnrichDeclared, type EnrichDueRow, type EnrichRun, type EnrichSource, type Enrichment, type EnrichmentSummary, type EntityBackLinkItem, type EntityBackLinks, type EntityFieldRights, type EntityFieldValue, type EntityFieldsAcross, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityRef, type EntityRefWithWords, type EntityReferenceKind, type EntityReferenceRead, type EntityRowWritten, type EntityTableFacts, type EntityToken, type ExternalPrincipalCard, FIELD_KINDS, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, type Field, type FieldBehavior, type FieldDrift, type FieldDriftAspect, type FieldDuplicated, type FieldHistoryEntry, type FieldKind, type FieldOptionEdit, type FieldOptions, type FieldPatch, type FieldProposal, type FieldRetyped, type FieldRule, type FieldSensitivity, type FieldSource, type FieldTypeWord, type ForbiddenEnvelopeWord, type FormArchiveAnswer, type FormLookOptions, type FormResults, type FormRoute, type FormSummary, type FormulaParse, type FormulaPreview, type Freshness, GRADUATION_BASE_COLUMNS, type GraduatedRelation, type GraduatedRow, type GridLayout, type GridLayoutMode, type GridRowHeight, type HiddenFieldNotice, type HistoryActor, type HistoryActorKind, type HistoryChange, type Home, type ImportBatchResult, type ImportColumnPlan, type ImportColumnsDeclared, type ImportFinished, type ImportOpened, type ImportOutcome, type ImportPlan, type ImportPolicy, type ImportProposal, type ImportReport, type ImportRun, type InboundAddress, type InboundDeclared, type InboxCounts, type InboxStateChange, type InsertOf, type IoExportPage, KERNEL_TABLES, type KernelTableName, type KernelTargets, type KeysetRow, type ListTableRowsOptions, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, type MergeField, type MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, type MergeFieldSemanticType, type MergeFieldSource, type MergeFieldTransform, type MigrationUndone, type MissingBehavior, type MyLevel, type MySubscription, NEWER_FIELD_KINDS, NOT_A_MEMBER_WORDS, type NewEntityFieldDeclaration, type NewFieldDeclaration, type NewerFieldKind, ON_DELETE, OVERRIDE_POLICIES, type OnDelete, type OutsideShareAnswer, type OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, PIPELINE_RULE_KINDS, PORTAL_ACCENTS, PORTAL_ARCHIVE_FILTERS, type ParityFieldType, type ParityFieldTypeDescriptor, type PerValueAccessWord, type PermissionLevel, type PersonStamp, type PgError, type Pipeline, type PipelineColumn, type PipelineDeclared, type PipelineGate, type PipelineGatePreview, type PipelineMissingField, type PipelineMoveMany, type PipelineMoveManyItem, type PipelineMoveManyResult, type PipelineMoveResult, type PipelineMoveVerdict, type PipelineRule, type PipelineRuleKind, type PipelineSpec, type PipelineStage, type PipelineVerdict, type PortalAccent, type PortalArchiveAnswer, type PortalArchiveFilter, type PortalCard, type PortalConfig, type PortalConfigInput, type PortalFooterLink, type PortalFormAnswer, type PortalFormInput, type PortalFormRef, type PortalFormSpec, type PortalInvitation, type PortalPreviewRow, type PortalPrincipal, type PortalRevocation, type PortalStage, type PortalStyle, type PortalStyleInput, type PortalSummary, type PortalTableExposure, type PortalTableRef, type PredictedRefusal, type ProvenancePointer, type PublicPicture, type PublishBinding, type PublishBindingKind, type QueuedCapture, type QueuedCaptureFile, type QueuedCaptureState, type QuietHours, RECORDS_CACHE_GRACE_MS, REFUSALS_WORTH_REPEATING, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, REVERSE_LINKS_PAGE_MAX, REVERSE_LINKS_RECORDS_PER_CALL, ROW_WEB_NOT_READY, RULE_NODE_KINDS, RULE_USES, type ReadRow, type ReadValue, type RecordChange, type RecordChangeAction, type RecordChangeResult, type RecordComment, type RecordDocument, type RecordEvent, type RecordFilter, type RecordGraphWritten, type RecordHeader, type RecordHistoryEntry, type RecordKeysetPage, type RecordPage, type RecordPageData, type RecordPageSort, type RecordRead, type RecordRevision, type RecordRowControls, type RecordScopeComment, type RecordScopeContext, type RecordScopeField, type RecordScopeHistoryEntry, type RecordScopeRelation, type RecordScopeWithheld, type RecordsActor, type RecordsChangeSink, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, RecordsHoldScope, type RecordsMerged, RecordsProvider, type RecordsProviderProps, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, RecordsSeedProvider, type RecordsSeedProviderProps, type RecordsTableQuery, type RegisteredTable, type Relation, type RelationBinding, type RelationCardinality, type RelationCarries, type RelationCoordinate, type RelationDisplay, type RelationFlavor, type RelationIcons, type RelationNameIndex, type RelationNameMatch, type RelationNamesAnswer, type RelationProperties, type RelationTarget, type RelationWordsManyArgs, type ResolutionTriple, type ResolvedPublishBinding, type ResolvedPublishBindingKind, type RestorePreview, type RestoreResult, type RetiredActorWord, type RetypeBehaviour, type RetypePreview, type ReverseColumn, type ReverseLink, type ReverseLinks, type ReverseLinksFieldsArgs, type ReverseLinksManyArgs, type RowAction, type RowActionStep, type RowDefaultsApplied, type RowOf, type RowTemplateRow, type Rule, type RuleAnswer, type RuleExpression, type RuleNodeKind, type RuleUse, SEED_FRESH_MS, SHOWN_TO_LABEL, SHOWN_TO_VALUES, SHOWN_TO_WHO_MAY_CHANGE, STAGE_RULE_ENFORCEMENT, STAGE_RULE_ON_FAIL, STATUS_GROUPS, STATUS_GROUP_WORDS, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, STORE_ROWS_CEILING, SYSTEM_WRITER_WORDS, type SavedViewColorBy, type SavedViewDefinition, type SavedViewLayout, type SavedViewRow, type SavedViewSpecIn, type ShownTo, type SourceArchived, type StagePending, type StagePendingOnBoard, type StageRuleEnforcement, type StageRuleOnFail, type StageRuleWarning, type StaleWriteDetail, type StatusGroup, type StorageMode, type StoreDoorName, type StoreFilter, type StoreInsertOf, type StoreRefusalCode, type StoreRowOf, type StoreRowSnapshot, type StoreTable, type StoreTableColumn, type StoreTableRows, type StoreTableSort, type StoreTableWhere, type StoredRecord, type StuckRow, type Subscription, type SubscriptionBlock, type SubscriptionCadence, type SubscriptionSpec, TABLE_DISPLAYS, TABLE_KIND_PREFIX, TABLE_ORIGINS, TABLE_TYPES, TO_ASSOCIATION, TO_CUSTOM_FIELDS, type Table, type TableArchiveProgress, type TableCapacity, type TableCopyInProgress, type TableDecorations, type TableDisplay, type TableDuplicateProgress, type TableDuplicated, type TableHome, type TableHomeDestination, type TableKindFacts, type TableLevel, type TableLevelApproval, type TableLevelFacts, type TableLevelSet, type TableListEntry, type TableMoved, type TableOrigin, type TablePlacement, type TablePlacementFact, type TableProposal, type TableReaderRule, type TableRenderSchema, type TableRestoreProgress, type TableRowCount, type TableRowDefaults, type TableRowDefaultsPatch, type TableSchemaMode, type TableSyncResult, type TableSyncSource, type TableSyncSpec, type TableType, type TableWebhook, type TableWebhookDeclared, type Timestamp, type TypedChoiceDecision, type TypedDate, type TypedMatchScore, type TypedNumber, type TypedTableChecked, type TypedTableConfidential, type TypedTableDef, type TypedTableEnsured, type TypedTableGraduation, type TypedTableInput, type TypedTableOrgOptions, type TypedTableReader, type TypedTableScope, type TypedTableStatus, type TypedTime, type UniqueKeys, type UseEntityBackLinks, type UseEntityFieldMutation, type UseFieldMutation, type UseRecordMutation, type UseRecordOptions, type UseRecordPageOptions, type UseRecordPageState, type UseRecordsOptions, type UseRecordsState, type UseStoreTable, type UseTableArchive, type UseTypedTable, type UseTypedTableOptions, type Uuid, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, type ValueAlternate, type ValueAlternateKey, type ValueEnvelope, type ValueEnvelopeKey, type ValueSource, type ViewLayout, type ViewOrderSet, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprovalState, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDecideMany, type WorkDecideManyItem, type WorkDecideManyResult, type WorkDecideVerdict, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInboxView, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, actionRefusals, addressFromText, addressMapUrl, addressText, allowsOtherValues, archiveTableRow, archiveTypedTableDeliberately, archivedByLine, archivedWhen, asChoiceNudge, asPermissionLevel, atLeast, autonumberJoin, autonumberPrefixOf, autonumberSearchOf, autonumberWords, bookingPath, buttonNeeds, buttonOf, buttonUrlPlaceholders, callersTimeZone, checkTypedTable, choiceSlug, choiceValuesOf, choicesOf, coerceTypedAnswer, coerceTypedAnswers, coercionLabel, confidentialGate, confidentialRefusal, confidentialRequest, confidentialState, decideTypedChoice, declareDrillDefinition, defineTypedTable, drillAnswerOf, drillFindingKnob, durationText, emptyArchiveLine, emptyPortalArchiveLine, ensureAppAutomations, ensureTypedTable, entityReferenceKinds, entityReferenceKindsOf, entityReferenceSearch, entityReferenceWords, entityRefsOf, entityRefsToWrite, err, exportPageXlsx, f, fieldKindFor, fieldKindOf, filterWithAutonumber, forgetAllOps, graduatedRow, graduationProblems, hasQuietHours, highestLevel, holdsARetiredChoice, indexedDbStore, isAddressValue, isArchiveLane, isAutonumberField, isButtonField, isDecided, isEntityReferenceConfig, isFoundation, isLockedStub, isOwnOp, isPersonStamp, isPortalAccent, isPortalArchiveFilter, isRecordsErr, isReverseField, isRuleFilter, isShownTo, isTableKind, isTheChosen, keptGroups, keptOutOfSight, keptTableHref, levelHasShownTo, liftWithheld, listAppRows, listTableRows, localeDateOrder, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, mintOpId, moveConsequence, moveInOrder, newerKindExportWords, newerKindOf, newerKindWords, offeredAsContext, ok, openCaptureQueue, optionKey, optionLabel, parseFieldDrift, parseTableCopiesInProgress, parseTableDuplicateProgress, parseTableDuplicated, parseTableHome, parseTableMoved, personStampText, portalArchiveConsequence, portalConfirmLine, portalPath, portalTitleTypedBack, previewRetype, previewRuleChange, publicFormPath, rankTypedMatches, ratingMaxOf, readTypedDate, readTypedDuration, readTypedNumber, readTypedTime, readersMatch, recordChangeTrigger, recordSourceKey, recordSourceTable, recordsCacheCounters, recordsUseSentence, rehomeSentence, relationNameIndexOf, relationNameKey, relationNamesIn, rememberedOpCount, removeAppRow, removedChoicesInUse, richTextPlain, rowFromDocument, ruleThatRefuses, rulesWithTopStar, safeLinkHref, sameDocument, scopeChip, sha256Hex, sheetSyncSpec, sourceArchivedOf, splitListCell, splitLockedRows, stableFilterKey, statusGroupOf, storeTable, tableIdOf, tableJsonSchema, tableKindMapping, tableKindSlug, tableRenderSchema, tableShapeChanged, twoDigitYear, typedDateText, typedMatchScore, typedTimeText, updateTableRow, upsertAppRow, useEntityBackLinks, useEntityFieldMutation, useEntityFieldRights, useEntityFields, useEntityRecord, useEntityReferenceKinds, useEntityReferenceSearch, useEntityReferenceWords, useEntityTable, useFieldMutation, useFields, useMergeField, useMyLevel, useMyLevels, useOptionalRecordsClient, useRecord, useRecordChangeRevision, useRecordMutation, useRecordPage, useRecordWrites, useRecords, useRecordsActor, useRecordsClient, useRecordsHold, useReverseColumns, useReverseLinks, useRowActions, useSeededAggregate, useSeededAnswer, useSeededAnswerAt, useSeededSource, useStoreTable, useTable, useTableArchive, useTables, useTypedTable, valueConverts, withCallersClock, withRowCounts, withTablePlacement, writeTableRow };
+export { ABSENCE_REASONS, ACTOR_VOCABULARY, ADDRESS_PARTS, AGENT_WRITER_WORDS, APP_ROWS_CEILING, ARCHIVE_LANES, ARCHIVE_LANE_LABEL, ARCHIVE_LANE_MEANS, type AbsenceReason, type ActionRefusal, type ActionRunResult, type Actor, type AddressPart, type AddressValue, type AggregateBucket, type AggregateCompare, type AggregateCompareKind, type AggregateCompareWindows, type AggregateDelta, type AggregateFilter, type AggregateGroupValue, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AggregateWindow, type AnonTokenBinding, type AnyStoreTable, type AnyTypedTableDef, type AppAutomationSpec, type AppField, type AppFields, type AppRows, type AppUpsertOptions, type ArchiveDeliberatelyArgs, type ArchiveLane, type ArchivedChecklistTemplate, type ArchivedDoorRow, type ArchivedForm, type ArchivedRow, type AutomationAction, type AutomationDeclared, type AutomationFilter, type AutomationFlipped, type AutomationItem, type AutomationLastRun, type AutomationList, type AutomationRun, type AutomationRunStatus, type AutomationRuns, type AutomationSpec, type AutomationStep, type AutomationTrigger, type AutomationValue, type AutomationValues, BARCODE_SYMBOLOGIES, BUILT_KIND_WORD, BUTTON_DOES, type BookingAvailability, type BookingDeclared, type BookingSummary, type BookingWindow, type ButtonDoes, type ButtonPressed, type ButtonSettings, CHOICE_NUDGES, COMPUTE_ON, CONTEXT_POLICIES, type CaptureField, type CaptureFileRef, type CaptureOutcome, type CaptureQuestion, type CaptureQueue, type CaptureQueueCounts, type CaptureQueueOptions, type CaptureQueuePorts, type CaptureQueueStore, type CaptureSheetFace, type CaptureSheetSummary, type CaptureSyncReport, type ChecklistDeclared, type ChecklistRequirement, type ChecklistRequirementKind, type ChecklistRoleSpec, type ChecklistRunStarted, type ChecklistRunStep, type ChecklistRunSummary, type ChecklistSpec, type ChecklistStepCompleted, type ChecklistStepSpec, type ChecklistTemplateShape, type ChecklistTemplateSummary, type ChecklistTrigger, type ChecklistTriggerKind, type ChoiceCellBack, type ChoiceLike, type ChoiceNudge, type ChoiceOption, type ChoiceOptions, type ChoiceRehome, type ChoiceUsage, type ChoicesRehomed, type CoerceOptions, type Coerced, type CoercedAnswers, type CoercibleField, type CommentThreadRead, type CommentWritten, type ComputeOn, type ConfidentialRequest, type ConfidentialState, type ContextPolicy, type ConversationScope, type ConversationScopeContext, type CustomFieldTableType, DECLARABLE_FIELD_KINDS, DEFAULT_ARCHIVE_LANE, DEFAULT_PORTAL_ARCHIVE_FILTER, DELIVERIES, DRILL_CHART_TOKENS, DRILL_DESCRIPTION_MAX, DRILL_DOORS, DRILL_SCHEMA, type DashboardBlock, type DashboardBlockKind, type DashboardBlockResult, type DashboardRunResult, type DashboardSummary, type DashboardTarget, type DashboardTargetBase, type DashboardTargetOp, type DashboardTargetResult, type DashboardTotals, type DataHomeTable, type DeclarableFieldKind, type DecorationColor, type DecorationPath, type DecorationRule, type DecorationRuleOp, type DecorationTarget, type Delivery, type DigestPreview, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, type DrillAdHocOp, type DrillAnswer, type DrillAnswerRow, type DrillChartToken, type DrillDeclaration, type DrillDefinition, type DrillDimension, type DrillFinding, type DrillGrain, type DrillHaving, type DrillLane, type DrillLevel, type DrillMeasure, type DrillMeasureOp, type DrillMeasureWhereValue, type DrillPath, type DrillQuestion, type DrillRecords, type DrillRowsPage, type DrillSource, type DrillView, ENTITY_TOKENS, type EnrichAlternate, type EnrichCell, type EnrichDeclared, type EnrichDueRow, type EnrichRun, type EnrichSource, type Enrichment, type EnrichmentSummary, type EntityBackLinkItem, type EntityBackLinks, type EntityFieldRights, type EntityFieldValue, type EntityFieldsAcross, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityRef, type EntityRefWithWords, type EntityReferenceKind, type EntityReferenceRead, type EntityRowWritten, type EntityTableFacts, type EntityToken, type ExternalPrincipalCard, FIELD_KINDS, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, type Field, type FieldBehavior, type FieldDrift, type FieldDriftAspect, type FieldDuplicated, type FieldHistoryEntry, type FieldKind, type FieldOptionEdit, type FieldOptions, type FieldPatch, type FieldProposal, type FieldRetyped, type FieldRule, type FieldSensitivity, type FieldSource, type FieldTypeWord, type ForbiddenEnvelopeWord, type FormArchiveAnswer, type FormLookOptions, type FormResults, type FormRoute, type FormSummary, type FormulaParse, type FormulaPreview, type Freshness, GRADUATION_BASE_COLUMNS, type GraduatedRelation, type GraduatedRow, type GridLayout, type GridLayoutMode, type GridRowHeight, type HiddenFieldNotice, type HistoryActor, type HistoryActorKind, type HistoryChange, type Home, type ImportBatchResult, type ImportColumnPlan, type ImportColumnsDeclared, type ImportFinished, type ImportOpened, type ImportOutcome, type ImportPlan, type ImportPolicy, type ImportProposal, type ImportReport, type ImportRun, type InboundAddress, type InboundDeclared, type InboxCounts, type InboxStateChange, type InsertOf, type IoExportPage, KERNEL_TABLES, type KernelTableName, type KernelTargets, type KeysetRow, type ListTableRowsOptions, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, type MergeField, type MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, type MergeFieldSemanticType, type MergeFieldSource, type MergeFieldTransform, type MigrationUndone, type MissingBehavior, type MyLevel, type MySubscription, NEWER_FIELD_KINDS, NOT_A_MEMBER_WORDS, type NewEntityFieldDeclaration, type NewFieldDeclaration, type NewerFieldKind, ON_DELETE, OVERRIDE_POLICIES, type ObjectKind, type ObjectOrganizationAnswer, type OnDelete, type OpLedger, type OutsideShareAnswer, type OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, PIPELINE_RULE_KINDS, PORTAL_ACCENTS, PORTAL_ARCHIVE_FILTERS, type ParityFieldType, type ParityFieldTypeDescriptor, type PerValueAccessWord, type PermissionLevel, type PersonStamp, type PgError, type Pipeline, type PipelineColumn, type PipelineDeclared, type PipelineGate, type PipelineGatePreview, type PipelineMissingField, type PipelineMoveMany, type PipelineMoveManyItem, type PipelineMoveManyResult, type PipelineMoveResult, type PipelineMoveVerdict, type PipelineRule, type PipelineRuleKind, type PipelineSpec, type PipelineStage, type PipelineVerdict, type PortalAccent, type PortalArchiveAnswer, type PortalArchiveFilter, type PortalCard, type PortalConfig, type PortalConfigInput, type PortalFooterLink, type PortalFormAnswer, type PortalFormInput, type PortalFormRef, type PortalFormSpec, type PortalInvitation, type PortalPreviewRow, type PortalPrincipal, type PortalRevocation, type PortalStage, type PortalStyle, type PortalStyleInput, type PortalSummary, type PortalTableExposure, type PortalTableRef, type PredictedRefusal, type ProvenancePointer, type PublicPicture, type PublishBinding, type PublishBindingKind, type QueuedCapture, type QueuedCaptureFile, type QueuedCaptureState, type QuietHours, RECORDS_CACHE_GRACE_MS, REFUSALS_WORTH_REPEATING, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, REVERSE_LINKS_PAGE_MAX, REVERSE_LINKS_RECORDS_PER_CALL, ROW_WEB_NOT_READY, RULE_NODE_KINDS, RULE_USES, type ReadRow, type ReadValue, type RecordChange, type RecordChangeAction, type RecordChangeResult, type RecordComment, type RecordDocument, type RecordEvent, type RecordFilter, type RecordGraphWritten, type RecordHeader, type RecordHistoryEntry, type RecordKeysetPage, type RecordOrganizationPort, type RecordPage, type RecordPageData, type RecordPageSort, type RecordRead, type RecordRevision, type RecordRowControls, type RecordScopeComment, type RecordScopeContext, type RecordScopeField, type RecordScopeHistoryEntry, type RecordScopeRelation, type RecordScopeWithheld, type RecordsActor, type RecordsChangeSink, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, RecordsHoldScope, type RecordsMerged, RecordsProvider, type RecordsProviderProps, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, RecordsSeedProvider, type RecordsSeedProviderProps, type RecordsTableQuery, type RegisteredTable, type Relation, type RelationBinding, type RelationCardinality, type RelationCarries, type RelationCoordinate, type RelationDisplay, type RelationFlavor, type RelationIcons, type RelationNameIndex, type RelationNameMatch, type RelationNamesAnswer, type RelationProperties, type RelationTarget, type RelationWordsManyArgs, type ResolutionTriple, type ResolvedPublishBinding, type ResolvedPublishBindingKind, type RestorePreview, type RestoreResult, type RetiredActorWord, type RetypeBehaviour, type RetypePreview, type ReverseColumn, type ReverseLink, type ReverseLinks, type ReverseLinksFieldsArgs, type ReverseLinksManyArgs, type RowAction, type RowActionStep, type RowAgentPort, type RowAgentTarget, type RowDefaultsApplied, type RowOf, type RowTemplateRow, type Rule, type RuleAnswer, type RuleExpression, type RuleNodeKind, type RuleUse, SEED_FRESH_MS, SHOWN_TO_LABEL, SHOWN_TO_VALUES, SHOWN_TO_WHO_MAY_CHANGE, STAGE_RULE_ENFORCEMENT, STAGE_RULE_ON_FAIL, STATUS_GROUPS, STATUS_GROUP_WORDS, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, STORE_ROWS_CEILING, SYSTEM_WRITER_WORDS, type SavedViewColorBy, type SavedViewDefinition, type SavedViewLayout, type SavedViewRow, type SavedViewSpecIn, type ShownTo, type SourceArchived, type StagePending, type StagePendingOnBoard, type StageRuleEnforcement, type StageRuleOnFail, type StageRuleWarning, type StaleWriteDetail, type StatusGroup, type StorageMode, type StoreDoorName, type StoreFilter, type StoreInsertOf, type StoreRefusalCode, type StoreRowOf, type StoreRowSnapshot, type StoreTable, type StoreTableColumn, type StoreTableRows, type StoreTableSort, type StoreTableWhere, type StoredRecord, type StuckRow, type Subscription, type SubscriptionBlock, type SubscriptionCadence, type SubscriptionSpec, TABLE_DISPLAYS, TABLE_KIND_PREFIX, TABLE_ORIGINS, TABLE_TYPES, TO_ASSOCIATION, TO_CUSTOM_FIELDS, type Table, type TableArchiveProgress, type TableCapacity, type TableCopyInProgress, type TableDecorations, type TableDisplay, type TableDuplicateProgress, type TableDuplicated, type TableHome, type TableHomeDestination, type TableKindFacts, type TableLevel, type TableLevelApproval, type TableLevelFacts, type TableLevelSet, type TableListEntry, type TableMoved, type TableOrigin, type TablePlacement, type TablePlacementFact, type TableProposal, type TableReaderRule, type TableRenderSchema, type TableRestoreProgress, type TableRowCount, type TableRowDefaults, type TableRowDefaultsPatch, type TableSchemaMode, type TableSyncResult, type TableSyncSource, type TableSyncSpec, type TableType, type TableWebhook, type TableWebhookDeclared, type Timestamp, type TypedChoiceDecision, type TypedDate, type TypedMatchScore, type TypedNumber, type TypedTableChecked, type TypedTableConfidential, type TypedTableDef, type TypedTableEnsured, type TypedTableGraduation, type TypedTableInput, type TypedTableOrgOptions, type TypedTableReader, type TypedTableScope, type TypedTableStatus, type TypedTime, type UniqueKeys, type UseEntityBackLinks, type UseEntityFieldMutation, type UseFieldMutation, type UseRecordMutation, type UseRecordOptions, type UseRecordPageOptions, type UseRecordPageState, type UseRecordsOptions, type UseRecordsState, type UseStoreTable, type UseTableArchive, type UseTypedTable, type UseTypedTableOptions, type Uuid, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, type ValueAlternate, type ValueAlternateKey, type ValueEnvelope, type ValueEnvelopeKey, type ValueSource, type ViewLayout, type ViewOrderSet, WHERE_ID_OPENS_DOOR, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprovalState, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDecideMany, type WorkDecideManyItem, type WorkDecideManyResult, type WorkDecideVerdict, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInboxView, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, actionRefusals, addressFromText, addressMapUrl, addressText, allowsOtherValues, archiveTableRow, archiveTypedTableDeliberately, archivedByLine, archivedWhen, asChoiceNudge, asPermissionLevel, atLeast, autonumberJoin, autonumberPrefixOf, autonumberSearchOf, autonumberWords, bookingPath, buttonNeeds, buttonOf, buttonUrlPlaceholders, callersTimeZone, checkTypedTable, choiceSlug, choiceValuesOf, choicesOf, coerceTypedAnswer, coerceTypedAnswers, coercionLabel, confidentialGate, confidentialRefusal, confidentialRequest, confidentialState, createOpLedger, decideTypedChoice, declareDrillDefinition, defaultOpLedger, defineTypedTable, drillAnswerOf, drillFindingKnob, durationText, emptyArchiveLine, emptyPortalArchiveLine, ensureAppAutomations, ensureTypedTable, entityReferenceKinds, entityReferenceKindsOf, entityReferenceSearch, entityReferenceWords, entityRefsOf, entityRefsToWrite, err, exportPageXlsx, f, fieldKindFor, fieldKindOf, filterWithAutonumber, forgetAllOps, graduatedRow, graduationProblems, hasQuietHours, highestLevel, holdsARetiredChoice, indexedDbStore, isAddressValue, isArchiveLane, isAutonumberField, isButtonField, isDecided, isEntityReferenceConfig, isFoundation, isLockedStub, isOwnOp, isPersonStamp, isPortalAccent, isPortalArchiveFilter, isRecordsErr, isReverseField, isRuleFilter, isShownTo, isTableKind, isTheChosen, keptGroups, keptOutOfSight, keptTableHref, levelHasShownTo, liftWithheld, listAppRows, listTableRows, localeDateOrder, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, mintOpId, moveConsequence, moveInOrder, newerKindExportWords, newerKindOf, newerKindWords, offeredAsContext, ok, openCaptureQueue, optionKey, optionLabel, parseFieldDrift, parseTableCopiesInProgress, parseTableDuplicateProgress, parseTableDuplicated, parseTableHome, parseTableMoved, personStampText, portalArchiveConsequence, portalConfirmLine, portalPath, portalTitleTypedBack, previewRetype, previewRuleChange, publicFormPath, rankTypedMatches, ratingMaxOf, readObjectOrganizationAnswer, readTypedDate, readTypedDuration, readTypedNumber, readTypedTime, readersMatch, recordChangeTrigger, recordSourceKey, recordSourceTable, recordsCacheCounters, recordsUseSentence, rehomeSentence, relationNameIndexOf, relationNameKey, relationNamesIn, rememberedOpCount, removeAppRow, removedChoicesInUse, resolveObjectOrganization, richTextPlain, rowFromDocument, ruleThatRefuses, rulesWithTopStar, safeLinkHref, sameDocument, scopeChip, sha256Hex, sheetSyncSpec, sourceArchivedOf, splitListCell, splitLockedRows, stableFilterKey, statusGroupOf, storeTable, tableIdOf, tableJsonSchema, tableKindMapping, tableKindSlug, tableRenderSchema, tableShapeChanged, twoDigitYear, typedDateText, typedMatchScore, typedTimeText, updateTableRow, upsertAppRow, useEntityBackLinks, useEntityFieldMutation, useEntityFieldRights, useEntityFields, useEntityRecord, useEntityReferenceKinds, useEntityReferenceSearch, useEntityReferenceWords, useEntityTable, useFieldMutation, useFields, useMergeField, useMyLevel, useMyLevels, useOptionalRecordsClient, useRecord, useRecordChangeRevision, useRecordMutation, useRecordPage, useRecordWrites, useRecords, useRecordsActor, useRecordsClient, useRecordsHold, useReverseColumns, useReverseLinks, useRowActions, useSeededAggregate, useSeededAnswer, useSeededAnswerAt, useSeededSource, useStoreTable, useTable, useTableArchive, useTables, useTypedTable, valueConverts, whereIdOpensPort, withCallersClock, withRowCounts, withTablePlacement, writeTableRow };