@ai-matrx/sharing 0.0.0 → 0.1.1

package/dist/core.d.cts

@@ -0,0 +1,4737 @@
+import * as _supabase_supabase_js from '@supabase/supabase-js';
+import { SupabaseClient } from '@supabase/supabase-js';
+import { DbPermissionLevel, PermissionLevel } from '@ai-matrx/data/access';
+export { DB_PERMISSION_LEVELS, DbPermissionLevel, PERMISSION_LEVELS, PERMISSION_LEVEL_HINTS, PERMISSION_LEVEL_LABELS, PERMISSION_LEVEL_SHORT_LABELS, PermissionLevel, isDbPermissionLevel, isPermissionLevel, normalizePermissionLevel, parsePermissionLevel, toDbPermissionLevel } from '@ai-matrx/data/access';
+import { EntityTypeToken } from '@ai-matrx/associations';
+import * as _ai_matrx_api_account from '@ai-matrx/api/account';
+import { components } from '@ai-matrx/api/types';
+export { extractErrorMessage } from '@ai-matrx/api/net';
+
+type ShareDbClient = SupabaseClient<any, any, any>;
+/** One aidream call — the shape the web's `callApi` takes. */
+interface ShareServerCall {
+    path: string;
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    queryParams?: Record<string, string | number | boolean>;
+    pathParams?: Record<string, string>;
+    body?: unknown;
+    expectedErrorStatuses?: number[];
+    /** aidream declares the route organization-free: send no organization header. */
+    organizationFreeRead?: boolean;
+}
+/** The answer of one aidream call (the web's `ApiCallResult` shape). */
+interface ShareServerResult {
+    data?: unknown;
+    error?: {
+        message?: string;
+        status?: number;
+        detail?: unknown;
+        code?: string;
+        [k: string]: unknown;
+    } | null;
+    status?: number;
+    [k: string]: unknown;
+}
+interface SharingHost {
+    /** REQUIRED. The signed-in supabase-js client (RLS applies). */
+    client: () => ShareDbClient;
+    /** The signed-in person (a token-only client has no `auth` namespace). Default: `client().auth.getUser()`. */
+    getUser?: () => Promise<{
+        id: string;
+        email?: string | null;
+    } | null>;
+    /** aidream calls. Absent → every server call answers a loud "not wired" error. */
+    callServer?: (call: ShareServerCall) => Promise<ShareServerResult>;
+    /** The organization the person is working in (a write target only, never a filter). */
+    getActiveOrgId?: () => string | null;
+    /** Resolve an organization to write into (the web asks the person when none is picked). */
+    ensureOrgId?: (organizationId?: string | null) => Promise<string>;
+    /** The entity registry's route for a token+id (`resolveEntityDoors(...).href`). */
+    resolveEntityHref?: (token: string, id: string) => string | null | undefined;
+    /** True when the entity registry knows the token (a known token with no href = no route). */
+    isKnownEntity?: (token: string) => boolean;
+    /** The site origin links are built on (default `window.location.origin`). */
+    appUrl?: () => string;
+    /** The search-engine-indexed switch (web: a server action that also refreshes its cache). */
+    searchEngineIndexed?: {
+        get: (resourceType: string, resourceId: string) => Promise<{
+            state: unknown;
+            error: string | null;
+        }>;
+        set: (resourceType: string, resourceId: string, indexed: boolean | null) => Promise<{
+            state: unknown;
+            error: string | null;
+        }>;
+    };
+}
+/** Merge host fields over any earlier call (boot-time; tests may call it again). */
+declare function configureSharing(next: Partial<SharingHost>): void;
+declare function sharingHost(): Partial<SharingHost>;
+/** The supabase-js client. Throws when the host never supplied one. */
+declare function shareClient(): ShareDbClient;
+/** web parity: `createClient()` / the `supabase` singleton. */
+declare const createClient: () => ShareDbClient;
+declare const supabase: ShareDbClient;
+declare function getClaimsUser(client: ShareDbClient): Promise<_supabase_supabase_js.UserResponse>;
+declare function getActiveOrgId(): string | null;
+declare function ensureOrgId(organizationId?: string | null): Promise<string>;
+declare function appUrl(): string;
+declare function resolveEntityHref(token: string, id: string): string | null;
+declare function isKnownEntity(token: string): boolean;
+/** web parity: `callApi(...)` — answers a promise of the call's result. */
+declare function callApi(call: ShareServerCall): Promise<ShareServerResult>;
+type ApiCallResult = ShareServerResult;
+/** web parity: `dispatch(callApi(...))` — a dispatch that just hands the promise back. */
+type AppDispatch = <T>(action: T) => T;
+declare const passThroughDispatch: AppDispatch;
+
+declare function isJsonObject(value: unknown): value is Record<string, unknown>;
+/** The share sheet's two notices, on aidream (`/sharing/notify`, `/sharing/email-link`). */
+interface ShareNoticeAnswer {
+    success: boolean;
+    msg?: string;
+    error?: string;
+}
+declare function sendShareNotice(path: "/sharing/notify" | "/sharing/email-link", body: Record<string, unknown>): Promise<ShareNoticeAnswer>;
+
+/**
+ * Shareable Resource Registry — TypeScript mirror
+ *
+ * Single source of truth lives in the Postgres
+ * `platform.shareable_resource_registry` table. This file mirrors the same data
+ * so the FE doesn't have to fetch the registry on every page load. The TS↔DB
+ * mirror is verified at test time by
+ * `utils/permissions/__tests__/registry.parity.test.ts` — if a row is added to
+ * the DB and not here (or vice versa) the test fails.
+ *
+ * REGENERATE (do not hand-edit rows): after any registry migration run
+ *   `pnpm tsx scripts/regen-shareable-registry-snapshot.ts`
+ * to refresh the DB snapshot, then update the rows below to match it.
+ *
+ * ── Token vs. table (post-2026-canonicalization) ─────────────────────────────
+ * Two distinct canonical values live on every row; DO NOT conflate them:
+ *   • `resourceType` — the ENTITY TOKEN. This is the object key, the value
+ *     stored in `iam.permissions.resource_type`, and the `p_resource_type`
+ *     passed to every share RPC. Reference resources by this, never by table.
+ *   • `tableName` (+ `schemaName`) — the PHYSICAL table (schema.table) for
+ *     direct supabase-js `.from()` reads. Equals the DB registry `table_name`.
+ * They coincided before the reorg (public tables named after their token) and
+ * diverge now (token `note` → `workbench.notes`, token `file` → `files.files`).
+ * For permission/RPC/`iam.permissions` work use `resourceType`; for a direct
+ * table read use `.schema(schemaName).from(tableName)`.
+ */
+interface ShareableResourceEntry {
+    /**
+     * The entity TOKEN — public alias used in TS / RPC arguments / UI props and
+     * stored in `iam.permissions.resource_type`. This is what you pass to the
+     * share RPCs; it is NOT the physical table name.
+     */
+    resourceType: string;
+    /**
+     * The PHYSICAL Postgres table name (within `schemaName`), mirroring the DB
+     * registry `table_name`. Used for direct `.from()` reads. NOT the permissions
+     * key — reference resources by `resourceType`. Multiple tokens may share a
+     * physical name across schemas (e.g. `definition` in agent/app/skill/workflow).
+     */
+    tableName: string;
+    /** Primary-key column on the resource table. Almost always 'id'. */
+    idColumn: string;
+    /** Column holding the owner's auth.uid(). Canonical tables use 'created_by'. */
+    ownerColumn: string;
+    /**
+     * Column holding the public-visibility boolean, when the table has one.
+     * Null means only “no legacy boolean is declared”; canonical enum tables and
+     * types with no public-state column both use null. Call
+     * `getShareCapabilities()` to resolve the verified physical state column.
+     */
+    isPublicColumn: string | null;
+    /** Human-readable label used in the share modal title and emails. */
+    displayLabel: string;
+    /**
+     * Optional signed-in destination pattern. `{id}` is substituted with the
+     * resource id. No-login share links use the generic `/s/[token]` route.
+     */
+    urlPathTemplate: string;
+    /**
+     * When false, the table's RLS does NOT call has_permission()/has_access().
+     * A permission grant inserts but does not actually grant the grantee access.
+     * Surfaces broken end-to-end states explicitly.
+     */
+    rlsUsesHasPermission: boolean;
+    /**
+     * Non-`public` Postgres schema the resource table lives in. supabase-js
+     * reaches it via `.schema(schemaName)`. Omitted ⇒ `public`. FE-only — not
+     * part of the DB-registry parity comparison.
+     */
+    schemaName?: string | undefined;
+}
+/**
+ * The canonical client-side mirror of platform.shareable_resource_registry.
+ * Verified against the DB by the parity test. Regenerate rows from the DB — do
+ * not hand-tune individual fields.
+ */
+declare const SHAREABLE_RESOURCE_REGISTRY: {
+    /**
+     * The unified record store (lane W3-HIST added the DB row 2026-09-18; this
+     * mirror followed on 2026-09-19 with lane SHARE, which is what made the one
+     * share dialog reach a record at all — until then `getShareableResource`
+     * answered undefined and the dialog rendered its "not a registered shareable
+     * resource" refusal).
+     *
+     * A TABLE IS A RECORD HERE: `custom.record` holds both, so one token covers
+     * the record screen and the table screen. `rlsUsesHasPermission` is false on
+     * purpose — schema `custom` is read through its own doors (W4-DOOR), never
+     * through the generic has_permission arm. `urlPathTemplate` stays empty: a
+     * record's page is /data/{tableId} plus the record, which this one-id
+     * template cannot express, and an honest "no link" beats a broken one.
+     */
+    readonly record: {
+        readonly resourceType: "record";
+        readonly tableName: "record";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Record";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly browser_profile: {
+        readonly resourceType: "browser_profile";
+        readonly tableName: "profile";
+        readonly schemaName: "browser";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Cloud Browser Profile";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly agent_run: {
+        readonly resourceType: "agent_run";
+        readonly tableName: "agent_run";
+        readonly schemaName: "chat";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Agent Run";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly comparison_set: {
+        readonly resourceType: "comparison_set";
+        readonly tableName: "cmp_comparison_sets";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Comparison Set";
+        readonly urlPathTemplate: "/agents/compare?set={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly crm_sending_identity: {
+        readonly resourceType: "crm_sending_identity";
+        readonly tableName: "sending_identity";
+        readonly schemaName: "crm";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Sending mailbox";
+        readonly urlPathTemplate: "/crm/sending-identities/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly global_request: {
+        readonly resourceType: "global_request";
+        readonly tableName: "global_request";
+        readonly schemaName: "runtime";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Runtime Request";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hindsight_enrollment: {
+        readonly resourceType: "hindsight_enrollment";
+        readonly tableName: "enrollment";
+        readonly schemaName: "hindsight";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hindsight Enrollment";
+        readonly urlPathTemplate: "/administration/agents/hindsight?enrollment={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly plan_node: {
+        readonly resourceType: "plan_node";
+        readonly tableName: "node";
+        readonly schemaName: "plan";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Plan Page";
+        readonly urlPathTemplate: "/marketing/content-plan/nodes/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly sch_task: {
+        readonly resourceType: "sch_task";
+        readonly tableName: "sch_task";
+        readonly schemaName: "scheduler";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Scheduled Task";
+        readonly urlPathTemplate: "/administration/automation/scheduling/tasks?task={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_rank_target: {
+        readonly resourceType: "seo_rank_target";
+        readonly tableName: "rank_target";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "SEO Rank Target";
+        readonly urlPathTemplate: "/marketing/ranks?target={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly sms_conversation: {
+        readonly resourceType: "sms_conversation";
+        readonly tableName: "sms_conversations";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "SMS Conversation";
+        readonly urlPathTemplate: "/sms?conversation={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly agent: {
+        readonly resourceType: "agent";
+        readonly tableName: "definition";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Agent";
+        readonly urlPathTemplate: "/agents/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly agent_card: {
+        readonly resourceType: "agent_card";
+        readonly tableName: "card";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Agent Card";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly app: {
+        readonly resourceType: "app";
+        readonly tableName: "definition";
+        readonly schemaName: "app";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Applet";
+        readonly urlPathTemplate: "/applets/manage/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly assessment: {
+        readonly resourceType: "assessment";
+        readonly tableName: "assessment";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Assessment";
+        readonly urlPathTemplate: "/education/quizzes/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly canvas_item: {
+        readonly resourceType: "canvas_item";
+        readonly tableName: "canvas_items";
+        readonly schemaName: "canvas";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Canvas Item";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly context_item: {
+        readonly resourceType: "context_item";
+        readonly tableName: "context_items";
+        readonly schemaName: "context";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Context Item";
+        readonly urlPathTemplate: "/context-items?item={id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly code_file: {
+        readonly resourceType: "code_file";
+        readonly tableName: "code_files";
+        readonly schemaName: "code";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Code File";
+        readonly urlPathTemplate: "/code?open={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly code_folder: {
+        readonly resourceType: "code_folder";
+        readonly tableName: "code_file_folders";
+        readonly schemaName: "code";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Code Folder";
+        readonly urlPathTemplate: "/code?folder={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly code_repository: {
+        readonly resourceType: "code_repository";
+        readonly tableName: "code_repositories";
+        readonly schemaName: "code";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Code Repository";
+        readonly urlPathTemplate: "/knowledge/repositories?repo={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly message_template: {
+        readonly resourceType: "message_template";
+        readonly tableName: "message_template";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Message Template";
+        readonly urlPathTemplate: "/chat/message-templates/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly marketing_initiative: {
+        readonly resourceType: "marketing_initiative";
+        readonly tableName: "initiative";
+        readonly schemaName: "marketing";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Initiative";
+        readonly urlPathTemplate: "/marketing/initiatives/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly conversation: {
+        readonly resourceType: "conversation";
+        readonly tableName: "conversation";
+        readonly schemaName: "chat";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Conversation";
+        readonly urlPathTemplate: "/chat/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly data_store: {
+        readonly resourceType: "data_store";
+        readonly tableName: "data_stores";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Data Store";
+        readonly urlPathTemplate: "/knowledge/data-stores?store_id={id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly dm_conversation: {
+        readonly resourceType: "dm_conversation";
+        readonly tableName: "dm_conversations";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Direct Conversation";
+        readonly urlPathTemplate: "/messages/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly fc_card: {
+        readonly resourceType: "fc_card";
+        readonly tableName: "fc_card";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Flashcard";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly fc_set: {
+        readonly resourceType: "fc_set";
+        readonly tableName: "fc_set";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Flashcard Deck";
+        readonly urlPathTemplate: "/education/flashcards/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly feature_doc: {
+        readonly resourceType: "feature_doc";
+        readonly tableName: "feature_docs";
+        readonly schemaName: "admin";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Feature Doc";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly file: {
+        readonly resourceType: "file";
+        readonly tableName: "files";
+        readonly schemaName: "files";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "File";
+        readonly urlPathTemplate: "/files/f/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly file_analysis: {
+        readonly resourceType: "file_analysis";
+        readonly tableName: "analysis";
+        readonly schemaName: "files";
+        readonly idColumn: "file_id";
+        readonly ownerColumn: "owner_id";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "File Analysis";
+        readonly urlPathTemplate: "/files/{id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly file_entities: {
+        readonly resourceType: "file_entities";
+        readonly tableName: "entities";
+        readonly schemaName: "files";
+        readonly idColumn: "id";
+        readonly ownerColumn: "owner_id";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "File Entity";
+        readonly urlPathTemplate: "/files/{id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly file_overrides: {
+        readonly resourceType: "file_overrides";
+        readonly tableName: "overrides";
+        readonly schemaName: "files";
+        readonly idColumn: "id";
+        readonly ownerColumn: "owner_id";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "File Override";
+        readonly urlPathTemplate: "/files/{id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly file_page_annotations: {
+        readonly resourceType: "file_page_annotations";
+        readonly tableName: "page_annotations";
+        readonly schemaName: "files";
+        readonly idColumn: "id";
+        readonly ownerColumn: "owner_id";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Page Annotation";
+        readonly urlPathTemplate: "/files/{id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly file_pages: {
+        readonly resourceType: "file_pages";
+        readonly tableName: "pages";
+        readonly schemaName: "files";
+        readonly idColumn: "id";
+        readonly ownerColumn: "owner_id";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "File Page";
+        readonly urlPathTemplate: "/files/{id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly folder: {
+        readonly resourceType: "folder";
+        readonly tableName: "folders";
+        readonly schemaName: "files";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Folder";
+        readonly urlPathTemplate: "/files/folder/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly learn_doc: {
+        readonly resourceType: "learn_doc";
+        readonly tableName: "learn_doc";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Guide";
+        readonly urlPathTemplate: "/education/learn/{slug}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly note: {
+        readonly resourceType: "note";
+        readonly tableName: "notes";
+        readonly schemaName: "workbench";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Note";
+        readonly urlPathTemplate: "/notes/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly pdf_redaction_audit: {
+        readonly resourceType: "pdf_redaction_audit";
+        readonly tableName: "pdf_redaction_audits";
+        readonly schemaName: "pdf";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Redaction Audit";
+        readonly urlPathTemplate: "/files/{id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly project: {
+        readonly resourceType: "project";
+        readonly tableName: "projects";
+        readonly schemaName: "projects";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Project";
+        readonly urlPathTemplate: "/projects/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly quiz_session: {
+        readonly resourceType: "quiz_session";
+        readonly tableName: "quiz_sessions";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Quiz session";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly research_template: {
+        readonly resourceType: "research_template";
+        readonly tableName: "rs_template";
+        readonly schemaName: "research";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Research Template";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly research_topic: {
+        readonly resourceType: "research_topic";
+        readonly tableName: "rs_topic";
+        readonly schemaName: "research";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Research Topic";
+        readonly urlPathTemplate: "/research/topics/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly sandbox_instance: {
+        readonly resourceType: "sandbox_instance";
+        readonly tableName: "sandbox_instances";
+        readonly idColumn: "id";
+        readonly ownerColumn: "user_id";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Sandbox";
+        readonly urlPathTemplate: "/sandbox/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly shared_canvas_item: {
+        readonly resourceType: "shared_canvas_item";
+        readonly tableName: "shared_canvas_items";
+        readonly schemaName: "canvas";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Shared Canvas";
+        readonly urlPathTemplate: "/canvas/shared/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly skill: {
+        readonly resourceType: "skill";
+        readonly tableName: "definition";
+        readonly schemaName: "skill";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Skill";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly studio_session: {
+        readonly resourceType: "studio_session";
+        readonly tableName: "studio_sessions";
+        readonly schemaName: "transcripts";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Transcript Studio session";
+        readonly urlPathTemplate: "/transcripts/studio?session={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly study_media: {
+        readonly resourceType: "study_media";
+        readonly tableName: "study_media";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Media";
+        readonly urlPathTemplate: "/education/media/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly task: {
+        readonly resourceType: "task";
+        readonly tableName: "tasks";
+        readonly schemaName: "projects";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Task";
+        readonly urlPathTemplate: "/tasks/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly thread: {
+        readonly resourceType: "thread";
+        readonly tableName: "threads";
+        readonly schemaName: "projects";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Thread";
+        readonly urlPathTemplate: "/war-room/all";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly transcript: {
+        readonly resourceType: "transcript";
+        readonly tableName: "transcripts";
+        readonly schemaName: "transcripts";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Transcript";
+        readonly urlPathTemplate: "/transcripts/processor?focus={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly udt_document: {
+        readonly resourceType: "udt_document";
+        readonly tableName: "udt_documents";
+        readonly schemaName: "workbench";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Cloud document";
+        readonly urlPathTemplate: "/documents/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly presentation: {
+        readonly resourceType: "presentation";
+        readonly tableName: "presentation";
+        readonly schemaName: "workbench";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Presentation";
+        readonly urlPathTemplate: "/presentations/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly scope: {
+        readonly resourceType: "scope";
+        readonly tableName: "scopes";
+        readonly schemaName: "context";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Scope";
+        readonly urlPathTemplate: "/scopes/s/{id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly workbook: {
+        readonly resourceType: "workbook";
+        readonly tableName: "udt_workbooks";
+        readonly schemaName: "workbench";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Workbook";
+        readonly urlPathTemplate: "/workbooks/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly user_analysis_preference: {
+        readonly resourceType: "user_analysis_preference";
+        readonly tableName: "user_analysis_preferences";
+        readonly schemaName: "users";
+        readonly idColumn: "user_id";
+        readonly ownerColumn: "user_id";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Analysis Preferences";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly web_site: {
+        readonly resourceType: "web_site";
+        readonly tableName: "site";
+        readonly schemaName: "web";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Site";
+        readonly urlPathTemplate: "/marketing/sites/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly web_page: {
+        readonly resourceType: "web_page";
+        readonly tableName: "page";
+        readonly schemaName: "web";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Site page";
+        readonly urlPathTemplate: "/marketing/pages/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly web_property: {
+        readonly resourceType: "web_property";
+        readonly tableName: "property";
+        readonly schemaName: "web";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Marketing Property";
+        readonly urlPathTemplate: "/marketing/properties/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly web_screenshot: {
+        readonly resourceType: "web_screenshot";
+        readonly tableName: "screenshot";
+        readonly schemaName: "web";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Web Screenshot";
+        readonly urlPathTemplate: "/marketing/screenshots/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly web_snapshot: {
+        readonly resourceType: "web_snapshot";
+        readonly tableName: "snapshot";
+        readonly schemaName: "web";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Web Snapshot";
+        readonly urlPathTemplate: "/marketing/snapshots/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly war_room: {
+        readonly resourceType: "war_room";
+        readonly tableName: "war_rooms";
+        readonly schemaName: "projects";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "War Room";
+        readonly urlPathTemplate: "/war-room/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly wc_claim: {
+        readonly resourceType: "wc_claim";
+        readonly tableName: "wc_claim";
+        readonly schemaName: "legal";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "WC Claim";
+        readonly urlPathTemplate: "/legal/ca-wc/pd-ratings-calculator/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly wf_node_data_slot: {
+        readonly resourceType: "wf_node_data_slot";
+        readonly tableName: "node_data_slot";
+        readonly schemaName: "workflow";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Workflow Node Data Slot";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly workflow_run: {
+        readonly resourceType: "workflow_run";
+        readonly tableName: "run";
+        readonly schemaName: "workflow";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Workflow Run";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly workflow_template: {
+        readonly resourceType: "workflow_template";
+        readonly tableName: "template";
+        readonly schemaName: "workflow";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Workflow Template";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly workflow_trigger: {
+        readonly resourceType: "workflow_trigger";
+        readonly tableName: "trigger";
+        readonly schemaName: "workflow";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Workflow Trigger";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly workflow_plan: {
+        readonly resourceType: "workflow_plan";
+        readonly tableName: "plan";
+        readonly schemaName: "workflow";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Workflow Plan";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly workflow: {
+        readonly resourceType: "workflow";
+        readonly tableName: "definition";
+        readonly schemaName: "workflow";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Workflow";
+        readonly urlPathTemplate: "/workflows/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly content_ir_kind_instance: {
+        readonly resourceType: "content_ir_kind_instance";
+        readonly tableName: "kind_instance";
+        readonly schemaName: "content_ir";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Saved Result";
+        readonly urlPathTemplate: "/shapes/instances/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly crm_outreach_list: {
+        readonly resourceType: "crm_outreach_list";
+        readonly tableName: "outreach_list";
+        readonly schemaName: "crm";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Outreach List";
+        readonly urlPathTemplate: "/crm/outreach-lists/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly party: {
+        readonly resourceType: "party";
+        readonly tableName: "party";
+        readonly schemaName: "crm";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Contact";
+        readonly urlPathTemplate: "/crm/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_collection_run: {
+        readonly resourceType: "seo_collection_run";
+        readonly tableName: "collection_run";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "SEO Collection Run";
+        readonly urlPathTemplate: "/marketing/ai-visibility/runs/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_change_set: {
+        readonly resourceType: "seo_change_set";
+        readonly tableName: "change_set";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "SEO Change";
+        readonly urlPathTemplate: "/marketing/changes/{id}";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly seo_topical_map: {
+        readonly resourceType: "seo_topical_map";
+        readonly tableName: "topical_map";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Topical map";
+        readonly urlPathTemplate: "/marketing/topical-maps/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_keyword: {
+        readonly resourceType: "seo_keyword";
+        readonly tableName: "keyword";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "SEO Keyword";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly youtube_search: {
+        readonly resourceType: "youtube_search";
+        readonly tableName: "youtube_search";
+        readonly schemaName: "research";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "YouTube Search";
+        readonly urlPathTemplate: "/marketing/discovery/youtube?search={id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly rulebook: {
+        readonly resourceType: "rulebook";
+        readonly tableName: "rulebook";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Rulebook";
+        readonly urlPathTemplate: "/masterwork/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly interview_decision_interview: {
+        readonly resourceType: "interview_decision_interview";
+        readonly tableName: "decision_interview";
+        readonly schemaName: "interview";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Decision Interview";
+        readonly urlPathTemplate: "/administration/question-desk/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly interview_session: {
+        readonly resourceType: "interview_session";
+        readonly tableName: "session";
+        readonly schemaName: "interview";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Vision Interview";
+        readonly urlPathTemplate: "/masterwork/vision-interview/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly workflow_runtime_surface: {
+        readonly resourceType: "workflow_runtime_surface";
+        readonly tableName: "runtime_surface";
+        readonly schemaName: "workflow";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Run Surface";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly growth_loop_run: {
+        readonly resourceType: "growth_loop_run";
+        readonly tableName: "loop_run";
+        readonly schemaName: "growth";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Growth Loop Run";
+        readonly urlPathTemplate: "/marketing/growth-loop/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly web_brand: {
+        readonly resourceType: "web_brand";
+        readonly tableName: "brand";
+        readonly schemaName: "web";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Brand";
+        readonly urlPathTemplate: "/marketing/brands/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly crm_deal: {
+        readonly resourceType: "crm_deal";
+        readonly tableName: "deal";
+        readonly schemaName: "crm";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Deal";
+        readonly urlPathTemplate: "/crm/deals/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly esign_campaign: {
+        readonly resourceType: "esign_campaign";
+        readonly tableName: "campaign";
+        readonly schemaName: "esign";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Signature campaign";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly esign_envelope: {
+        readonly resourceType: "esign_envelope";
+        readonly tableName: "envelope";
+        readonly schemaName: "esign";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Signature envelope";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_ai_evidence: {
+        readonly resourceType: "hr_ai_evidence";
+        readonly tableName: "ai_evidence";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "AI evidence";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_asset: {
+        readonly resourceType: "hr_asset";
+        readonly tableName: "asset";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Asset";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_background_check: {
+        readonly resourceType: "hr_background_check";
+        readonly tableName: "background_check";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Background check";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_candidate: {
+        readonly resourceType: "hr_candidate";
+        readonly tableName: "candidate";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Candidate";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_checklist_template: {
+        readonly resourceType: "hr_checklist_template";
+        readonly tableName: "checklist_template";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Checklist template";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_compensation: {
+        readonly resourceType: "hr_compensation";
+        readonly tableName: "compensation";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Compensation";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_corrective_action: {
+        readonly resourceType: "hr_corrective_action";
+        readonly tableName: "corrective_action";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Corrective action";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_course: {
+        readonly resourceType: "hr_course";
+        readonly tableName: "course";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Course";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_emergency_contact: {
+        readonly resourceType: "hr_emergency_contact";
+        readonly tableName: "emergency_contact";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Emergency contact";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_employee: {
+        readonly resourceType: "hr_employee";
+        readonly tableName: "employee";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Employee";
+        readonly urlPathTemplate: "/hr/people/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_employee_private: {
+        readonly resourceType: "hr_employee_private";
+        readonly tableName: "employee_private";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Employee private details";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_employer_profile: {
+        readonly resourceType: "hr_employer_profile";
+        readonly tableName: "employer_profile";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Employer profile";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_employment: {
+        readonly resourceType: "hr_employment";
+        readonly tableName: "employment";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Employment spell";
+        readonly urlPathTemplate: "/hr/people/{id}/employment";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_i9: {
+        readonly resourceType: "hr_i9";
+        readonly tableName: "i9";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Form I-9";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_interview: {
+        readonly resourceType: "hr_interview";
+        readonly tableName: "interview";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Interview";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_leave_policy: {
+        readonly resourceType: "hr_leave_policy";
+        readonly tableName: "leave_policy";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Leave policy";
+        readonly urlPathTemplate: "/hr/settings/leave-policies/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_legal_hold: {
+        readonly resourceType: "hr_legal_hold";
+        readonly tableName: "legal_hold";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Legal hold";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_offer: {
+        readonly resourceType: "hr_offer";
+        readonly tableName: "offer";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Offer";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_records_request: {
+        readonly resourceType: "hr_records_request";
+        readonly tableName: "records_request";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Records request";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_reference_check: {
+        readonly resourceType: "hr_reference_check";
+        readonly tableName: "reference_check";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Reference check";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_requisition: {
+        readonly resourceType: "hr_requisition";
+        readonly tableName: "requisition";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Requisition";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_restricted_note: {
+        readonly resourceType: "hr_restricted_note";
+        readonly tableName: "restricted_note";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Restricted note";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_separation: {
+        readonly resourceType: "hr_separation";
+        readonly tableName: "separation";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Separation";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_survey: {
+        readonly resourceType: "hr_survey";
+        readonly tableName: "survey";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Survey";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_tax_withholding: {
+        readonly resourceType: "hr_tax_withholding";
+        readonly tableName: "tax_withholding";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Tax withholding";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_verification_letter_request: {
+        readonly resourceType: "hr_verification_letter_request";
+        readonly tableName: "verification_letter_request";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Verification letter request";
+        readonly urlPathTemplate: "/hr";
+        readonly rlsUsesHasPermission: false;
+    };
+    readonly hr_workflow_instance: {
+        readonly resourceType: "hr_workflow_instance";
+        readonly tableName: "workflow_instance";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "HR approval request";
+        readonly urlPathTemplate: "/hr/tasks/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly processed_document: {
+        readonly resourceType: "processed_document";
+        readonly tableName: "processed_documents";
+        readonly schemaName: "docproc";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Source";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly user_feedback: {
+        readonly resourceType: "user_feedback";
+        readonly tableName: "user_feedback";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Feedback item";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly workflow_recovery_audit: {
+        readonly resourceType: "workflow_recovery_audit";
+        readonly tableName: "recovery_audit";
+        readonly schemaName: "workflow";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Workflow recovery audit";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly agent_mandate_note: {
+        readonly resourceType: "agent_mandate_note";
+        readonly tableName: "mandate_note";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Agent Mandate Note";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly agent_prompt_remediation: {
+        readonly resourceType: "agent_prompt_remediation";
+        readonly tableName: "prompt_remediation";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Agent Prompt Remediation";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly agent_shortcut: {
+        readonly resourceType: "agent_shortcut";
+        readonly tableName: "shortcut";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Agent Shortcut";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly agent_template: {
+        readonly resourceType: "agent_template";
+        readonly tableName: "template";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Agent Template";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly anon_form: {
+        readonly resourceType: "anon_form";
+        readonly tableName: "anon_form";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Form";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly anon_hit: {
+        readonly resourceType: "anon_hit";
+        readonly tableName: "anon_hit";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Anon Hit";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly anon_inbound: {
+        readonly resourceType: "anon_inbound";
+        readonly tableName: "anon_inbound";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Anon Inbound";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly anon_replay: {
+        readonly resourceType: "anon_replay";
+        readonly tableName: "anon_replay";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Anon Replay";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly anon_submission: {
+        readonly resourceType: "anon_submission";
+        readonly tableName: "anon_submission";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Anon Submission";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly anon_token: {
+        readonly resourceType: "anon_token";
+        readonly tableName: "anon_token";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Anon Token";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly app_instance: {
+        readonly resourceType: "app_instance";
+        readonly tableName: "app_instances";
+        readonly schemaName: "public";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "App Instance";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly app_setting: {
+        readonly resourceType: "app_setting";
+        readonly tableName: "app_settings";
+        readonly schemaName: "public";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "App Setting";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly app_sync_status: {
+        readonly resourceType: "app_sync_status";
+        readonly tableName: "app_sync_status";
+        readonly schemaName: "public";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "App Sync Status";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly assessment_result: {
+        readonly resourceType: "assessment_result";
+        readonly tableName: "assessment_result";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Assessment Result";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly assignment_session: {
+        readonly resourceType: "assignment_session";
+        readonly tableName: "session";
+        readonly schemaName: "assignment";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Assignment Session";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly assist: {
+        readonly resourceType: "assist";
+        readonly tableName: "assists";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Assist";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly billing_spend_guardrail: {
+        readonly resourceType: "billing_spend_guardrail";
+        readonly tableName: "spend_guardrail";
+        readonly schemaName: "billing";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Billing Spend Guardrail";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly calendar_event: {
+        readonly resourceType: "calendar_event";
+        readonly tableName: "calendar_event";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Calendar Event";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly canvas_score: {
+        readonly resourceType: "canvas_score";
+        readonly tableName: "canvas_scores";
+        readonly schemaName: "canvas";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Canvas Score";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly canvas_view: {
+        readonly resourceType: "canvas_view";
+        readonly tableName: "canvas_views";
+        readonly schemaName: "canvas";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Canvas View";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly category: {
+        readonly resourceType: "category";
+        readonly tableName: "categories";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Category";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly cmp_feedback: {
+        readonly resourceType: "cmp_feedback";
+        readonly tableName: "cmp_response_feedback";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Cmp Feedback";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly comment: {
+        readonly resourceType: "comment";
+        readonly tableName: "comments";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Comment";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly commerce_certified_printer: {
+        readonly resourceType: "commerce_certified_printer";
+        readonly tableName: "certified_printer";
+        readonly schemaName: "commerce";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Commerce Certified Printer";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly commerce_cloud_sync_connection: {
+        readonly resourceType: "commerce_cloud_sync_connection";
+        readonly tableName: "cloud_sync_connection";
+        readonly schemaName: "commerce";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Commerce Cloud Sync Connection";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly commerce_intake_batch: {
+        readonly resourceType: "commerce_intake_batch";
+        readonly tableName: "intake_batch";
+        readonly schemaName: "commerce";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Commerce Intake Batch";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly commerce_label_batch: {
+        readonly resourceType: "commerce_label_batch";
+        readonly tableName: "label_batch";
+        readonly schemaName: "commerce";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Commerce Label Batch";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly commerce_marketplace_account: {
+        readonly resourceType: "commerce_marketplace_account";
+        readonly tableName: "marketplace_account";
+        readonly schemaName: "commerce";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Commerce Marketplace Account";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly commerce_print_order: {
+        readonly resourceType: "commerce_print_order";
+        readonly tableName: "print_order";
+        readonly schemaName: "commerce";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Commerce Print Order";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly commerce_product: {
+        readonly resourceType: "commerce_product";
+        readonly tableName: "product";
+        readonly schemaName: "commerce";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Commerce Product";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly contact_medium: {
+        readonly resourceType: "contact_medium";
+        readonly tableName: "contact_medium";
+        readonly schemaName: "crm";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Contact Medium";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly contact_submission: {
+        readonly resourceType: "contact_submission";
+        readonly tableName: "contact_submissions";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Contact Submission";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly context_item_suggestion: {
+        readonly resourceType: "context_item_suggestion";
+        readonly tableName: "context_item_suggestions";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Context Item Suggestion";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly crm_blocklist_entry: {
+        readonly resourceType: "crm_blocklist_entry";
+        readonly tableName: "blocklist_entry";
+        readonly schemaName: "crm";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Crm Blocklist Entry";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly crm_registry_ingest_run: {
+        readonly resourceType: "crm_registry_ingest_run";
+        readonly tableName: "registry_ingest_run";
+        readonly schemaName: "crm";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Crm Registry Ingest Run";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly crm_sending_policy: {
+        readonly resourceType: "crm_sending_policy";
+        readonly tableName: "sending_policy";
+        readonly schemaName: "crm";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Crm Sending Policy";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly custom_field_definition: {
+        readonly resourceType: "custom_field_definition";
+        readonly tableName: "custom_field_definition";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Custom Field Definition";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly cx_agent_memory: {
+        readonly resourceType: "cx_agent_memory";
+        readonly tableName: "agent_memory";
+        readonly schemaName: "chat";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Cx Agent Memory";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly cx_user_request: {
+        readonly resourceType: "cx_user_request";
+        readonly tableName: "user_request";
+        readonly schemaName: "chat";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Cx User Request";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly derive_run: {
+        readonly resourceType: "derive_run";
+        readonly tableName: "derive_runs";
+        readonly schemaName: "docproc";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Derive Run";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly dict_entry: {
+        readonly resourceType: "dict_entry";
+        readonly tableName: "dict_entries";
+        readonly schemaName: "dictionary";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Dict Entry";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly dict_setting: {
+        readonly resourceType: "dict_setting";
+        readonly tableName: "dict_settings";
+        readonly schemaName: "dictionary";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Dict Setting";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly doc_render: {
+        readonly resourceType: "doc_render";
+        readonly tableName: "doc_render";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Doc Render";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly doc_signature: {
+        readonly resourceType: "doc_signature";
+        readonly tableName: "doc_signature";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Doc Signature";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly egress_device: {
+        readonly resourceType: "egress_device";
+        readonly tableName: "egress_device";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Egress Device";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly esign_provider_binding: {
+        readonly resourceType: "esign_provider_binding";
+        readonly tableName: "provider_binding";
+        readonly schemaName: "esign";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Esign Provider Binding";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly external_link: {
+        readonly resourceType: "external_link";
+        readonly tableName: "external_link";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "External Link";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly external_source: {
+        readonly resourceType: "external_source";
+        readonly tableName: "external_source";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "External Source";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly game_badge: {
+        readonly resourceType: "game_badge";
+        readonly tableName: "game_badge";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Game Badge";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly game_result: {
+        readonly resourceType: "game_result";
+        readonly tableName: "game_result";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Game Result";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly game_room: {
+        readonly resourceType: "game_room";
+        readonly tableName: "game_room";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Game Room";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly google_document: {
+        readonly resourceType: "google_document";
+        readonly tableName: "google_document";
+        readonly schemaName: "workbench";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Google file";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly guided_checklist_run: {
+        readonly resourceType: "guided_checklist_run";
+        readonly tableName: "guided_checklist_run";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Guided Checklist Run";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly heatmap_save: {
+        readonly resourceType: "heatmap_save";
+        readonly tableName: "heatmap_saves";
+        readonly schemaName: "workbench";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Heatmap Save";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hindsight_regression_case: {
+        readonly resourceType: "hindsight_regression_case";
+        readonly tableName: "regression_case";
+        readonly schemaName: "hindsight";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hindsight Regression Case";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hindsight_replay_step: {
+        readonly resourceType: "hindsight_replay_step";
+        readonly tableName: "replay_step";
+        readonly schemaName: "hindsight";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hindsight Replay Step";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_alert_routing_rule: {
+        readonly resourceType: "hr_alert_routing_rule";
+        readonly tableName: "alert_routing_rule";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Alert Routing Rule";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_auto_close_rule: {
+        readonly resourceType: "hr_auto_close_rule";
+        readonly tableName: "auto_close_rule";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Auto Close Rule";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_careers_portal: {
+        readonly resourceType: "hr_careers_portal";
+        readonly tableName: "careers_portal";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Careers Portal";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_crew: {
+        readonly resourceType: "hr_crew";
+        readonly tableName: "crew";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Crew";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_deduction_code: {
+        readonly resourceType: "hr_deduction_code";
+        readonly tableName: "deduction_code";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Deduction Code";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_department: {
+        readonly resourceType: "hr_department";
+        readonly tableName: "department";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Department";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_earning_code: {
+        readonly resourceType: "hr_earning_code";
+        readonly tableName: "earning_code";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Earning Code";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_holiday_calendar: {
+        readonly resourceType: "hr_holiday_calendar";
+        readonly tableName: "holiday_calendar";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Holiday Calendar";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_interview_kit: {
+        readonly resourceType: "hr_interview_kit";
+        readonly tableName: "interview_kit";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Interview Kit";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_job_title: {
+        readonly resourceType: "hr_job_title";
+        readonly tableName: "job_title";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Job Title";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_jurisdiction_rule_org_decision: {
+        readonly resourceType: "hr_jurisdiction_rule_org_decision";
+        readonly tableName: "jurisdiction_rule_org_decision";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Jurisdiction Rule Org Decision";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_location: {
+        readonly resourceType: "hr_location";
+        readonly tableName: "location";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Location";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_overtime_alert_rule: {
+        readonly resourceType: "hr_overtime_alert_rule";
+        readonly tableName: "overtime_alert_rule";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Overtime Alert Rule";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_pay_group: {
+        readonly resourceType: "hr_pay_group";
+        readonly tableName: "pay_group";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Pay Group";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_posting: {
+        readonly resourceType: "hr_posting";
+        readonly tableName: "posting";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Posting";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_provider_binding: {
+        readonly resourceType: "hr_provider_binding";
+        readonly tableName: "provider_binding";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Provider Binding";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_recalculation_batch: {
+        readonly resourceType: "hr_recalculation_batch";
+        readonly tableName: "recalculation_batch";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Recalculation Batch";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_schedule: {
+        readonly resourceType: "hr_schedule";
+        readonly tableName: "schedule";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Schedule";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_schedule_guidance: {
+        readonly resourceType: "hr_schedule_guidance";
+        readonly tableName: "schedule_guidance";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Schedule Guidance";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_schedule_template: {
+        readonly resourceType: "hr_schedule_template";
+        readonly tableName: "schedule_template";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Schedule Template";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly hr_workflow_definition: {
+        readonly resourceType: "hr_workflow_definition";
+        readonly tableName: "workflow_definition";
+        readonly schemaName: "hr";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Hr Workflow Definition";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly iam_api_key: {
+        readonly resourceType: "iam_api_key";
+        readonly tableName: "api_keys";
+        readonly schemaName: "iam";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Iam Api Key";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly invitation_code: {
+        readonly resourceType: "invitation_code";
+        readonly tableName: "invitation_codes";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Invitation Code";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly invitation_request: {
+        readonly resourceType: "invitation_request";
+        readonly tableName: "invitation_requests";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Invitation Request";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly io_comment: {
+        readonly resourceType: "io_comment";
+        readonly tableName: "io_comment";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Io Comment";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly io_import: {
+        readonly resourceType: "io_import";
+        readonly tableName: "io_import";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Io Import";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly io_outbox: {
+        readonly resourceType: "io_outbox";
+        readonly tableName: "io_outbox";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Io Outbox";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly item_mastery: {
+        readonly resourceType: "item_mastery";
+        readonly tableName: "item_mastery";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Item Mastery";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly kg_alert: {
+        readonly resourceType: "kg_alert";
+        readonly tableName: "kg_alerts";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Kg Alert";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly kg_sweep_queue: {
+        readonly resourceType: "kg_sweep_queue";
+        readonly tableName: "kg_sweep_queue";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Kg Sweep Queue";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly kg_sweep_run: {
+        readonly resourceType: "kg_sweep_run";
+        readonly tableName: "kg_sweep_run";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Kg Sweep Run";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly kg_sweep_state: {
+        readonly resourceType: "kg_sweep_state";
+        readonly tableName: "kg_sweep_state";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Kg Sweep State";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly kg_value_match: {
+        readonly resourceType: "kg_value_match";
+        readonly tableName: "kg_value_matches";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Kg Value Match";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly league_membership: {
+        readonly resourceType: "league_membership";
+        readonly tableName: "league_membership";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "League Membership";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly library_doc: {
+        readonly resourceType: "library_doc";
+        readonly tableName: "library_docs";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Library Doc";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    /**
+     * A user/org-created mandate (`mandate.definition`). Sharing NEVER moves it: a person or
+     * organization share is an iam.permissions grant, "Anyone" is visibility public, and the
+     * creator keeps ownership (mandate_share_without_move.sql, 2026-09-25). No id route —
+     * mandate pages are addressed by key — so `urlPathTemplate` stays honestly empty.
+     */
+    readonly mandate: {
+        readonly resourceType: "mandate";
+        readonly tableName: "definition";
+        readonly schemaName: "mandate";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Mandate";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly mandate_binding: {
+        readonly resourceType: "mandate_binding";
+        readonly tableName: "binding";
+        readonly schemaName: "mandate";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Mandate Binding";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly mandate_treatment: {
+        readonly resourceType: "mandate_treatment";
+        readonly tableName: "treatment";
+        readonly schemaName: "mandate";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Mandate Treatment";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly media_catalog_setting: {
+        readonly resourceType: "media_catalog_setting";
+        readonly tableName: "catalog_setting";
+        readonly schemaName: "media";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Media Catalog Setting";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly media_source_library: {
+        readonly resourceType: "media_source_library";
+        readonly tableName: "source_library";
+        readonly schemaName: "media";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Media Source Library";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly meet_call_invite: {
+        readonly resourceType: "meet_call_invite";
+        readonly tableName: "meet_call_invites";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Meet Call Invite";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly meet_meeting: {
+        readonly resourceType: "meet_meeting";
+        readonly tableName: "meet_meetings";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Meeting";
+        readonly urlPathTemplate: "/meet/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly merge_field_provenance: {
+        readonly resourceType: "merge_field_provenance";
+        readonly tableName: "merge_field_provenance";
+        readonly schemaName: "custom";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Merge Field Provenance";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly ner_shadow: {
+        readonly resourceType: "ner_shadow";
+        readonly tableName: "ner_canonicalizer_shadow";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Ner Shadow";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly notification: {
+        readonly resourceType: "notification";
+        readonly tableName: "notification";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Notification";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly notification_event_override: {
+        readonly resourceType: "notification_event_override";
+        readonly tableName: "notification_event_override";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Notification Event Override";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly notification_event_type: {
+        readonly resourceType: "notification_event_type";
+        readonly tableName: "notification_event_type";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Notification Event Type";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly notification_preference: {
+        readonly resourceType: "notification_preference";
+        readonly tableName: "notification_preference";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Notification Preference";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly ops_proof_check: {
+        readonly resourceType: "ops_proof_check";
+        readonly tableName: "proof_check";
+        readonly schemaName: "ops";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Ops Proof Check";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly ops_proof_scenario: {
+        readonly resourceType: "ops_proof_scenario";
+        readonly tableName: "proof_scenario";
+        readonly schemaName: "ops";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Ops Proof Scenario";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly org_member_control: {
+        readonly resourceType: "org_member_control";
+        readonly tableName: "org_member_controls";
+        readonly schemaName: "iam";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Org Member Control";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly organization: {
+        readonly resourceType: "organization";
+        readonly tableName: "organizations";
+        readonly schemaName: "iam";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Organization";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly output_feedback: {
+        readonly resourceType: "output_feedback";
+        readonly tableName: "output_feedback";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Output Feedback";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly page_extraction_job: {
+        readonly resourceType: "page_extraction_job";
+        readonly tableName: "page_extraction_jobs";
+        readonly schemaName: "docproc";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Page Extraction Job";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly page_extraction_page_run: {
+        readonly resourceType: "page_extraction_page_run";
+        readonly tableName: "page_extraction_page_runs";
+        readonly schemaName: "docproc";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Page Extraction Page Run";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly pc_article: {
+        readonly resourceType: "pc_article";
+        readonly tableName: "pc_articles";
+        readonly schemaName: "podcast";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Pc Article";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly pc_episode: {
+        readonly resourceType: "pc_episode";
+        readonly tableName: "pc_episodes";
+        readonly schemaName: "podcast";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Pc Episode";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly pc_show: {
+        readonly resourceType: "pc_show";
+        readonly tableName: "pc_shows";
+        readonly schemaName: "podcast";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Pc Show";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly pc_studio_run: {
+        readonly resourceType: "pc_studio_run";
+        readonly tableName: "pc_studio_runs";
+        readonly schemaName: "podcast";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Pc Studio Run";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly plan_entity: {
+        readonly resourceType: "plan_entity";
+        readonly tableName: "entity";
+        readonly schemaName: "plan";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Plan Entity";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly plan_profile: {
+        readonly resourceType: "plan_profile";
+        readonly tableName: "profile";
+        readonly schemaName: "plan";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Plan Profile";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly platform_action_request: {
+        readonly resourceType: "platform_action_request";
+        readonly tableName: "action_request";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Platform Action Request";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly platform_outcome_event: {
+        readonly resourceType: "platform_outcome_event";
+        readonly tableName: "outcome_event";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Platform Outcome Event";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly platform_saved_view: {
+        readonly resourceType: "platform_saved_view";
+        readonly tableName: "saved_view";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Platform Saved View";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly platform_share_link: {
+        readonly resourceType: "platform_share_link";
+        readonly tableName: "share_links";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Platform Share Link";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly podcast_race: {
+        readonly resourceType: "podcast_race";
+        readonly tableName: "pc_race";
+        readonly schemaName: "podcast";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Podcast Race";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly product_capture_item: {
+        readonly resourceType: "product_capture_item";
+        readonly tableName: "product_capture_item";
+        readonly schemaName: "workbench";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Product Capture Item";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly purpose: {
+        readonly resourceType: "purpose";
+        readonly tableName: "purpose";
+        readonly schemaName: "platform";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Purpose";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly research_context_bundle: {
+        readonly resourceType: "research_context_bundle";
+        readonly tableName: "rs_context_bundle";
+        readonly schemaName: "research";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Research Context Bundle";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly scope_suggestion: {
+        readonly resourceType: "scope_suggestion";
+        readonly tableName: "scope_suggestions";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Scope Suggestion";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_engine_schedule: {
+        readonly resourceType: "seo_engine_schedule";
+        readonly tableName: "engine_schedule";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Seo Engine Schedule";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_gsc_dig_rule: {
+        readonly resourceType: "seo_gsc_dig_rule";
+        readonly tableName: "gsc_dig_rule";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Seo Gsc Dig Rule";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_keyword_class_rule: {
+        readonly resourceType: "seo_keyword_class_rule";
+        readonly tableName: "keyword_class_rule";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Seo Keyword Class Rule";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_coverage_tracker: {
+        readonly resourceType: "seo_coverage_tracker";
+        readonly tableName: "coverage_tracker";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "News Monitor";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_source_request: {
+        readonly resourceType: "seo_source_request";
+        readonly tableName: "source_request";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Seo Source Request";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly seo_story_angle: {
+        readonly resourceType: "seo_story_angle";
+        readonly tableName: "story_angle";
+        readonly schemaName: "seo";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Seo Story Angle";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly sms_consent: {
+        readonly resourceType: "sms_consent";
+        readonly tableName: "sms_consent";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Sms Consent";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly sms_notification: {
+        readonly resourceType: "sms_notification";
+        readonly tableName: "sms_notifications";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Sms Notification";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly sms_notification_preference: {
+        readonly resourceType: "sms_notification_preference";
+        readonly tableName: "sms_notification_preferences";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Sms Notification Preference";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly sms_phone_number: {
+        readonly resourceType: "sms_phone_number";
+        readonly tableName: "sms_phone_numbers";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Sms Phone Number";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly studio_recording_chunks: {
+        readonly resourceType: "studio_recording_chunks";
+        readonly tableName: "studio_recording_chunks";
+        readonly schemaName: "transcripts";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Studio Recording Chunks";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly studio_run: {
+        readonly resourceType: "studio_run";
+        readonly tableName: "studio_runs";
+        readonly schemaName: "transcripts";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Studio Run";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly study_attempt: {
+        readonly resourceType: "study_attempt";
+        readonly tableName: "study_attempt";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Attempt";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly study_goal: {
+        readonly resourceType: "study_goal";
+        readonly tableName: "study_goal";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Goal";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly study_plan: {
+        readonly resourceType: "study_plan";
+        readonly tableName: "study_plan";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Plan";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly study_plan_block: {
+        readonly resourceType: "study_plan_block";
+        readonly tableName: "study_plan_block";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Plan Block";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly study_plan_day: {
+        readonly resourceType: "study_plan_day";
+        readonly tableName: "study_plan_day";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Plan Day";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly study_session: {
+        readonly resourceType: "study_session";
+        readonly tableName: "study_session";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Session";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly udt_dataset_template: {
+        readonly resourceType: "udt_dataset_template";
+        readonly tableName: "udt_dataset_templates";
+        readonly schemaName: "workbench";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Udt Dataset Template";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly ui_surface_agent_pref: {
+        readonly resourceType: "ui_surface_agent_pref";
+        readonly tableName: "ui_surface_agent_pref";
+        readonly schemaName: "ui";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Ui Surface Agent Pref";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly ui_surface_config: {
+        readonly resourceType: "ui_surface_config";
+        readonly tableName: "ui_surface_config";
+        readonly schemaName: "ui";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Ui Surface Config";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly user_achievement: {
+        readonly resourceType: "user_achievement";
+        readonly tableName: "user_achievements";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "User Achievement";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly user_email_preference: {
+        readonly resourceType: "user_email_preference";
+        readonly tableName: "user_email_preferences";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "User Email Preference";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly user_markdown_sample: {
+        readonly resourceType: "user_markdown_sample";
+        readonly tableName: "user_markdown_samples";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "User Markdown Sample";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly user_memory: {
+        readonly resourceType: "user_memory";
+        readonly tableName: "user_memory";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "User Memory";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly user_profile: {
+        readonly resourceType: "user_profile";
+        readonly tableName: "profiles";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "User Profile";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly user_stat: {
+        readonly resourceType: "user_stat";
+        readonly tableName: "user_stats";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "User Stat";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly user_surface_state: {
+        readonly resourceType: "user_surface_state";
+        readonly tableName: "user_surface_state";
+        readonly schemaName: "users";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "User Surface State";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly wbx_capture: {
+        readonly resourceType: "wbx_capture";
+        readonly tableName: "wbx_capture";
+        readonly schemaName: "extend";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Wbx Capture";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly wbx_demo: {
+        readonly resourceType: "wbx_demo";
+        readonly tableName: "wbx_demo";
+        readonly schemaName: "extend";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Wbx Demo";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly wbx_highlight: {
+        readonly resourceType: "wbx_highlight";
+        readonly tableName: "wbx_highlight";
+        readonly schemaName: "extend";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Wbx Highlight";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly wbx_pattern: {
+        readonly resourceType: "wbx_pattern";
+        readonly tableName: "wbx_pattern";
+        readonly schemaName: "extend";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Wbx Pattern";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly wbx_screenshot: {
+        readonly resourceType: "wbx_screenshot";
+        readonly tableName: "wbx_screenshot";
+        readonly schemaName: "extend";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Wbx Screenshot";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly wbx_seo_audit: {
+        readonly resourceType: "wbx_seo_audit";
+        readonly tableName: "wbx_seo_audit";
+        readonly schemaName: "extend";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Wbx Seo Audit";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly web_youtube_video: {
+        readonly resourceType: "web_youtube_video";
+        readonly tableName: "youtube_video";
+        readonly schemaName: "web";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Web Youtube Video";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly workflow_comparison: {
+        readonly resourceType: "workflow_comparison";
+        readonly tableName: "comparison";
+        readonly schemaName: "workflow";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Workflow Comparison";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly agent_term_list: {
+        readonly resourceType: "agent_term_list";
+        readonly tableName: "term_list";
+        readonly schemaName: "agent";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Term List";
+        readonly urlPathTemplate: "/resources/term-lists";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly document: {
+        readonly resourceType: "document";
+        readonly tableName: "document";
+        readonly schemaName: "content";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Document";
+        readonly urlPathTemplate: "/documents/{id}";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly files_sync_mapping: {
+        readonly resourceType: "files_sync_mapping";
+        readonly tableName: "sync_mappings";
+        readonly schemaName: "files";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Sync Mapping";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly kg_suggestion_ack: {
+        readonly resourceType: "kg_suggestion_ack";
+        readonly tableName: "kg_suggestion_ack";
+        readonly schemaName: "rag";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "KG Suggestion Ack";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly mcp_user_conn: {
+        readonly resourceType: "mcp_user_conn";
+        readonly tableName: "mcp_user_conn";
+        readonly schemaName: "tool";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "MCP user connection";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly notification_channel_preference: {
+        readonly resourceType: "notification_channel_preference";
+        readonly tableName: "notification_channel_preference";
+        readonly schemaName: "communication";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Notification Channel Preference";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly study_reminder_context: {
+        readonly resourceType: "study_reminder_context";
+        readonly tableName: "study_reminder_context";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Reminder Context";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+    readonly study_reminder_delivery: {
+        readonly resourceType: "study_reminder_delivery";
+        readonly tableName: "study_reminder_delivery";
+        readonly schemaName: "education";
+        readonly idColumn: "id";
+        readonly ownerColumn: "created_by";
+        readonly isPublicColumn: null;
+        readonly displayLabel: "Study Reminder Delivery";
+        readonly urlPathTemplate: "";
+        readonly rlsUsesHasPermission: true;
+    };
+};
+/**
+ * Union of all valid resource-type tokens. Exactly mirrors the registry keys.
+ */
+type ResourceType = keyof typeof SHAREABLE_RESOURCE_REGISTRY;
+/** Ordered list of resource-type tokens (useful for tests, dropdowns, etc.) */
+declare const RESOURCE_TYPES: ResourceType[];
+/**
+ * Look up a registry entry by canonical entity token. A physical table name is
+ * never accepted as an identity key: names such as `definition` repeat across
+ * schemas, so a bare-name lookup cannot be made deterministic.
+ */
+declare function getShareableResource(resourceType: string): ShareableResourceEntry | undefined;
+/**
+ * Resolve a resource type to its PHYSICAL Postgres table name. Throws if the
+ * type isn't registered. NOTE: for `iam.permissions.resource_type` filters and
+ * share-RPC arguments use the TOKEN (`resourceType`) instead — this returns the
+ * physical table, which differs from the token on canonical tables.
+ */
+declare function resolveTableName(resourceType: string): string;
+/**
+ * Resolve a resource type to its canonical ENTITY TOKEN — the value stored in
+ * `iam.permissions.resource_type` and passed to the share RPCs. Throws if the
+ * type isn't registered. Use this (never resolveTableName) for any
+ * permissions/grant query or RPC call.
+ */
+declare function resolveResourceToken(resourceType: string): string;
+/** Human-readable label for a resource type (replaces the legacy map). */
+declare function getResourceTypeLabel(resourceType: string): string;
+/**
+ * Build the share path for a resource. Returns a relative path, or `null` when
+ * we genuinely cannot open this resource — the caller must handle null and say
+ * so honestly rather than rendering a broken link.
+ *
+ * THE DOOR LAW, and specifically the "one canonical path per operation" rule:
+ * route truth is the ENTITY REGISTRY (`features/scopes/registry`), so that is
+ * consulted first. `url_path_template` in `platform.shareable_resource_registry`
+ * is a second, DB-side route authority that had drifted badly — 24 of 73 active
+ * rows advertised routes that do not exist (`/apps/{id}` when the real route is
+ * `/applets/manage/{id}`; `/skills/{id}`, `/workflows/{id}`, `/quizzes/{id}`,
+ * `/canvas/{id}`, `/code/files/{id}`, `/runs/{id}`, `/scopes/{id}` …). Audited
+ * and corrected against the live `app/` tree on 2026-08-14
+ * (`migrations/sharing_registry_route_truth_d138.sql`): every row now either
+ * points at a real route or is EMPTY, and empty means "no signed-in destination"
+ * — this function returns null and the caller renders no link.
+ *
+ * It is now only the FALLBACK, used for tokens the entity registry doesn't
+ * cover. **Never add a plausible-looking path to a registry row to make a link
+ * appear**; that guesswork IS defect D138.
+ *
+ * Two guesses were removed, both of which produced 404s that reached other
+ * people:
+ *   - the `/${resourceType}/${resourceId}` fabrication for unregistered types;
+ *   - templates that still contain a placeholder after substitution — either a
+ *     non-id key (`{slug}`) or a second distinct segment the template can't
+ *     express (`/workflows/{id}/triggers/{id}`).
+ */
+declare function getResourceSharePath(resourceType: string, resourceId: string): string | null;
+
+/**
+ * The ONE permission-level ladder.
+ *
+ * Every rank map, label map, ordered array and level union in the app derives
+ * from `PERMISSION_LEVELS` below. Before this module existed the ladder was
+ * hard-coded in eight places as `viewer | editor | admin`, so a fourth level
+ * would have been missing from most of them — and missing SILENTLY: a rank
+ * lookup returned `undefined`, `undefined >= 2` is `false`, and the holder of
+ * the new level was refused with no message anywhere (law 4, nothing fails
+ * silently). `getPermissionLevelLabel` was worse: it returned `undefined` and
+ * the screen rendered a blank string where the level should be.
+ *
+ * ## Code ladder vs database enum — deliberately different widths
+ *
+ * `PERMISSION_LEVELS` (the CODE ladder) is the superset and includes
+ * `commenter`. `DB_PERMISSION_LEVELS` (the DATABASE enum, read at runtime from
+ * the generated `Constants`, never hand-typed) is what `public.permission_level`
+ * actually holds today: `viewer, editor, admin`. `commenter` is NOT there yet.
+ *
+ * That gap is the whole point and it is safe in one direction only:
+ *
+ * - READING / COMPARING / LABELING a level: always use the code ladder. It
+ *   tolerates `commenter` the moment the database gains it, with no code change
+ *   and no silent refusal in between. Nothing breaks while the value never
+ *   arrives — the extra rank and label simply go unused.
+ * - WRITING a level to the database, or OFFERING it in a picker: narrow through
+ *   `toDbPermissionLevel` / `DB_PERMISSION_LEVELS` first. Sending `commenter`
+ *   to Postgres today fails with `invalid input value for enum
+ *   public.permission_level`, so the ladder refuses it HERE, by name, with the
+ *   remedy — rather than letting a picker offer a value the save will reject.
+ *
+ * When `ALTER TYPE public.permission_level ADD VALUE 'commenter' BEFORE 'editor'`
+ * is applied and `pnpm db-types` regenerated, `DB_PERMISSION_LEVELS` widens on
+ * its own and every picker driven by it gains the option with no further edit.
+ *
+ * Doctrine: the access levels are `viewer` · `commenter` · `editor` · `admin`
+ * (AI Matrx Data Doctrine R18, 2026-09-10;
+ * common-docs/systems/platform/access/DECISIONS.md).
+ * Guard: `utils/permissions/__tests__/permission-levels.test.ts` fails if any
+ * rank map, label map or ordered array omits a level.
+ */
+
+/** The levels a picker may offer: what the database stores, never the retired `edit_content`. */
+declare const OFFERED_DB_PERMISSION_LEVELS: readonly DbPermissionLevel[];
+/** Rank of every level; a stray stored `edit_content` ranks as Edit so old data never crashes. */
+declare const PERMISSION_LEVEL_RANK: Record<PermissionLevel, number> & {
+    edit_content: number;
+};
+declare function permissionLevelRank(level: PermissionLevel): number;
+
+/**
+ * Permission System Types
+ *
+ * The single source of truth for which resource types are shareable lives in
+ * the database table `shareable_resource_registry`, mirrored in TypeScript by
+ * `./registry.ts`. Do NOT add resource types here — add them to the registry.
+ */
+
+/**
+ * Complete permission record from database
+ */
+interface Permission {
+    id: string;
+    resourceType: ResourceType;
+    resourceId: string;
+    grantedToUserId?: string | null | undefined;
+    grantedToOrganizationId?: string | null | undefined;
+    isPublic?: boolean | undefined;
+    permissionLevel: PermissionLevel;
+    createdAt?: Date | undefined;
+    createdBy?: string | undefined;
+}
+/**
+ * Enriched permission with user/org details for display
+ */
+interface PermissionWithDetails extends Permission {
+    grantedToUser?: undefined | {
+        id: string;
+        email: string;
+        displayName?: string | undefined;
+        avatarUrl?: string | undefined;
+        /** Not a member of the thing's organization (the store's answer, `get_resource_permissions`): shown as Guest. */
+        isGuest?: boolean | undefined;
+    };
+    grantedToOrganization?: undefined | {
+        id: string;
+        name: string;
+        slug: string;
+        logoUrl?: string | undefined;
+    };
+    createdByUser?: {
+        id: string;
+        email: string;
+        displayName?: string | undefined;
+    };
+}
+interface ShareWithUserOptions {
+    resourceType: ResourceType;
+    resourceId: string;
+    userId: string;
+    permissionLevel: PermissionLevel;
+    /**
+     * Optional human title of the resource, used for the in-app DM notification
+     * card ("X shared '<title>' with you"). Falls back to the type label.
+     */
+    resourceName?: string | undefined;
+    /**
+     * The organization the SHARED OBJECT lives in, from the page that opened the dialog (the
+     * object's own resolver — never the active organization). The in-app notification is filed
+     * there. Absent, the notification is filed in the organization the person is working in, and
+     * when none is picked it is skipped and said — it never raises "Which workspace is this for?"
+     * (lane ACCESS-FIX-18, VERIFIER-18 H4).
+     */
+    organizationId?: string | null | undefined;
+}
+/** Organization AVAILABILITY (org configuration), never a share — see grantOrgAvailability. */
+interface OrgAvailabilityOptions {
+    resourceType: ResourceType;
+    resourceId: string;
+    organizationId: string;
+    /**
+     * Explicit level. Omit to let the server apply the org module's
+     * `default_permission` (falls back to 'viewer'). Pickers pass a level; the
+     * "contribute" flow omits it.
+     */
+    permissionLevel?: PermissionLevel | undefined;
+}
+interface MakePublicOptions {
+    resourceType: ResourceType;
+    resourceId: string;
+    permissionLevel?: PermissionLevel | undefined;
+}
+interface UpdatePermissionOptions {
+    resourceType: ResourceType;
+    resourceId: string;
+    userId?: string | undefined;
+    organizationId?: string | undefined;
+    isPublic?: boolean | undefined;
+    newLevel: PermissionLevel;
+}
+interface RevokeAccessOptions {
+    resourceType: ResourceType;
+    resourceId: string;
+    userId?: string | undefined;
+    organizationId?: string | undefined;
+    isPublic?: boolean | undefined;
+}
+interface PermissionCheckResult {
+    hasAccess: boolean;
+    level?: PermissionLevel | undefined;
+    isOwner: boolean;
+    reason?: string | undefined;
+}
+interface CheckPermissionOptions {
+    resourceType: ResourceType;
+    resourceId: string;
+    requiredLevel?: PermissionLevel | undefined;
+}
+interface OwnedResource {
+    id: string;
+    user_id: string;
+    [key: string]: unknown;
+}
+interface OwnerCheckResult {
+    isOwner: boolean;
+    ownerId: string;
+}
+type ShareTargetType = "user" | "organization" | "public";
+interface SharingState {
+    isOpen: boolean;
+    activeTab: ShareTargetType;
+    permissions: PermissionWithDetails[];
+    loading: boolean;
+    error: string | null;
+    searchQuery: string;
+    selectedPermissionLevel: PermissionLevel;
+}
+interface ShareActionResult {
+    success: boolean;
+    message?: string | undefined;
+    error?: string | undefined;
+    permission?: Permission | undefined;
+}
+/**
+ * Check if a permission level satisfies a required level
+ */
+declare function satisfiesPermissionLevel(current: PermissionLevel, required: PermissionLevel): boolean;
+/**
+ * Get all permission levels equal to or higher than the given level
+ */
+declare function getPermissionLevelsAtOrAbove(level: PermissionLevel): PermissionLevel[];
+/**
+ * Get display label for permission level
+ */
+declare function getPermissionLevelLabel(level: PermissionLevel): string;
+/**
+ * Validate permission data
+ */
+declare function validatePermission(permission: Partial<Permission>): boolean;
+declare class PermissionError extends Error {
+    code: string;
+    details?: unknown | undefined | undefined;
+    constructor(message: string, code: string, details?: unknown | undefined | undefined);
+}
+declare enum PermissionErrorCode {
+    NOT_FOUND = "PERMISSION_NOT_FOUND",
+    ALREADY_EXISTS = "PERMISSION_ALREADY_EXISTS",
+    INVALID_LEVEL = "INVALID_PERMISSION_LEVEL",
+    INVALID_TARGET = "INVALID_SHARE_TARGET",
+    UNAUTHORIZED = "UNAUTHORIZED",
+    DATABASE_ERROR = "DATABASE_ERROR",
+    VALIDATION_ERROR = "VALIDATION_ERROR"
+}
+
+/**
+ * THE PUBLIC LANE — the ONE list of resource types that have a real
+ * anonymous, indexable page at `/p/e/[resourceType]/[id]`.
+ *
+ * Why this module exists: the list used to live as a private const inside the
+ * server loader, so the SHARE UI could not know whether flipping a resource to
+ * `visibility='public'` actually produced a reachable page. It therefore told
+ * every owner "anyone with the link can access this" — for a brand, a site, a
+ * workflow, anything — while no such link existed. A share surface that claims
+ * access it cannot deliver is a defect (features/sharing/FEATURE.md: "a share
+ * surface that can't act must say why").
+ *
+ * Being public is a DATA state (the `pub_read` RLS policy). Having a public
+ * PAGE is a product decision, made here. A type joins this lane only when it
+ * has a public renderer and genuinely belongs in the SEO/community lane — a
+ * public `dm_conversation` or `wc_claim` must never auto-publish to an indexed
+ * page. For everything else, anonymous access is the share-link lane
+ * (`platform.share_links` → `/s/[token]`, noindex).
+ */
+/**
+ * THE PUBLIC COLUMN LANE — for every type in the lane, the EXACT columns the
+ * anonymous viewer reads from its base row.
+ *
+ * Why names and not `select("*")` (DD-186): a signed-out visitor may read only
+ * the columns a relation declares to `anon`, and these tables no longer answer
+ * `*` to the publishable key. `workbench.notes` and `agent.message_template`
+ * both carry `created_by`, `updated_by`, `organization_id`, `metadata` and
+ * `version`, which are nobody's business on an indexed public page — the loader
+ * already refused to render them, but PostgREST was serving them to the browser
+ * anyway, one HTTP round trip before the projection threw them away.
+ *
+ * `visibility` is in every list on purpose: the loader re-checks it in JS after
+ * the read, and PostgREST cannot even filter on a column the role cannot select.
+ *
+ * Adding a type here means checking its columns against
+ * matrx-frontend `lib/security/public-exposure.ts#ANON_COLUMN_SURFACE`; asking
+ * for a column `anon` cannot read returns 42501 for the whole request, which
+ * `pnpm check:anon-column-surface` is there to catch before a user does.
+ *
+ * `fc_set` is absent by design — it never takes this path. Its whole read is a
+ * SECURITY DEFINER RPC (`get_public_flashcard_set`) that projects its own
+ * columns server-side.
+ */
+declare const PUBLIC_LANE_COLUMNS: Readonly<Record<string, readonly string[]>>;
+/** Types served by the indexable public lane. Add only with a public renderer. */
+declare const PUBLIC_LANE_TYPES: ReadonlySet<string>;
+/**
+ * The columns the anonymous viewer may ask PostgREST for, as a `select` string.
+ * Never falls back to `"*"`: a type in the lane with no declared columns is a
+ * programming error, and returning `"*"` would quietly re-open the surface this
+ * register exists to close.
+ */
+declare function publicLaneSelect(resourceType: string): string;
+/** Does `visibility='public'` give this type a reachable anonymous page? */
+declare function hasPublicPage(resourceType: string): boolean;
+/**
+ * The absolute public URL for a type in the lane, or null when the type has no
+ * public page. Never fabricate a URL for a type outside the lane — that is the
+ * exact lie this module was created to kill.
+ */
+declare function publicResourceUrl(resourceType: string, id: string): string | null;
+
+interface ShareLink {
+    id: string;
+    token: string;
+    /** Token of the /r short alias (platform.short_links) — a URL alias only, never authorization. */
+    shortToken: string | null;
+    permissionLevel: PermissionLevel;
+    label: string | null;
+    expiresAt: string | null;
+    maxUses: number | null;
+    useCount: number;
+    isActive: boolean;
+    createdAt: string | null;
+    lastUsedAt: string | null;
+}
+interface ResolvedShareToken {
+    success: boolean;
+    /** Machine error code when success=false (not_found | revoked | expired | exhausted | gone | unknown_type). */
+    error?: string | undefined;
+    /** Human-readable message when success=false. */
+    message?: string | undefined;
+    resourceType?: string | undefined;
+    resourceId?: string | undefined;
+    permissionLevel?: PermissionLevel | undefined;
+    displayLabel?: string | undefined;
+    urlPathTemplate?: string | undefined;
+    /** The resource row as JSON (internal/heavy columns stripped). */
+    resource?: Record<string, unknown> | undefined;
+    /**
+     * What the link holder sees BENEATH the record (children inherit their
+     * parent) — a per-type projection from `platform.share_link_children`, e.g.
+     * a shared chat's visible messages. Null for types without one.
+     */
+    children?: Record<string, unknown> | null | undefined;
+}
+/** What "Publish to the web" writes for a type (access ladder T-13; `get_share_capabilities`). */
+type PublishLane = "published_to_web" | "card" | "boolean";
+interface ShareCapabilities {
+    /** Whether this type can be published to the web at all (`publishLane` is not null). */
+    supportsPublic: boolean;
+    /** Whether the resource type offers no-login share links (admin policy). */
+    isLinkShareable: boolean;
+    /**
+     * The legacy boolean column behind a `boolean` publish lane; null for every other type.
+     */
+    publicState: {
+        column: string;
+        kind: "boolean";
+    } | null;
+    /**
+     * The column naming the thing's OWN organization (`organization_id`), when its table has one.
+     * The Share dialog reads it to tell a thing homed in its owner's own organization — where
+     * "My organization" and "Add everyone in …" name nobody — for every kind (2026-09-26).
+     */
+    organizationColumn: "organization_id" | null;
+    /** The type's level: organization · public · confidential · private; null when unregistered. */
+    tableLevel: string | null;
+    /**
+     * The type carries the Words table's row controls — an Organization or Public table, never a
+     * child. A Private, Confidential or child record has none (common-docs/policies/access-ladder.md).
+     */
+    rowControls: boolean;
+    /** "Shown to" is offered for this type. */
+    shownToOffered: boolean;
+    /**
+     * What "Publish to the web" writes: the row's own switch, the card's own publish (agent,
+     * workflow — the body is never published), or a legacy boolean. Null: never published.
+     */
+    publishLane: PublishLane | null;
+    /**
+     * The column that marks ONE row as a child of another record (`parent_record_type` on files),
+     * when the table has one. A child record carries no row control; read it per record.
+     */
+    rowChildColumn: string | null;
+}
+/**
+ * What share affordances this resource type supports — drives which controls the
+ * ShareModal shows (never render a toggle that would error on click). Admin-
+ * editable, so read at runtime (not from the static registry mirror).
+ */
+declare function getShareCapabilities(resourceType: ResourceType): Promise<ShareCapabilities>;
+interface CreateShareLinkOptions {
+    resourceType: ResourceType;
+    resourceId: string;
+    permissionLevel?: PermissionLevel | undefined;
+    expiresAt?: string | null | undefined;
+    maxUses?: number | null | undefined;
+    label?: string | null | undefined;
+}
+/** Build the absolute share URL for a token. */
+declare function shareLinkUrl(token: string): string;
+/**
+ * The URL to hand a person for a share link — the short alias when one exists
+ * (auto-shorten-every-share-link, owner ruling 2026-08-29), the full /s/ URL
+ * otherwise. The alias is a redirect only; the 64-hex share token stays the
+ * one authorization either way.
+ */
+declare function shareUrlForLink(link: Pick<ShareLink, "token" | "shortToken">): string;
+/** Mint a share link for a resource (owner-only). Returns the token + URL. */
+declare function createShareLink(options: CreateShareLinkOptions): Promise<{
+    success: boolean;
+    token?: string | undefined;
+    shortToken?: string | null | undefined;
+    url?: string | undefined;
+    error?: string | undefined;
+}>;
+/** List a resource's share links (owner-only). */
+declare function listShareLinks(resourceType: ResourceType, resourceId: string): Promise<ShareLink[]>;
+/** Revoke (deactivate) a share link by id (owner-only). */
+declare function revokeShareLink(linkId: string): Promise<{
+    success: boolean;
+    error?: string | undefined;
+}>;
+interface ForkResult {
+    success: boolean;
+    error?: string | undefined;
+    /** Path to open the caller's new copy in the app. */
+    path?: string | undefined;
+}
+/**
+ * "Save a copy & use it" — fork a SHARED resource into the current user's own
+ * account so a recipient can continue/use it (chat takeover, study a set, take a
+ * quiz). Requires auth.
+ *
+ * `shareToken` is the no-login share-link token, passed ONLY when the viewer is
+ * on the `/s/[token]` link lane. The DB RPCs authorize a link fork solely on a
+ * VALID, ACTIVE token for THAT resource (SECURITY FIX — a caller-independent
+ * "any active link exists" check previously let a stranger fork a private
+ * resource the moment its owner had ever minted one link). A record published
+ * to the web and explicit grants stay forkable token-less; the token is only
+ * needed to authorize a private resource shared purely by no-login link. Returns
+ * the path to the copy.
+ */
+declare function forkSharedResource(resourceType: string, resourceId: string, shareToken?: string | undefined, organizationId?: string | null | undefined): Promise<ForkResult>;
+/** Whether a resource type supports "save a copy & use it" (fork). */
+declare function isForkable(resourceType: string | undefined): boolean;
+/**
+ * Resolve a share token to its resource. Anon-safe. Pass a server client from a
+ * Server Component (public `/s/[token]` route); defaults to the browser client.
+ */
+declare function resolveShareToken(token: string, client?: SupabaseClient): Promise<ResolvedShareToken>;
+
+type ShownTo = "only_me" | "my_team" | "everyone" | "everyone_on_ai_matrx";
+/** Per organization id: the type's resolved default (`d`) and the viewer's teammates (`t`). */
+type ShownToContext = Record<string, {
+    d: ShownTo | null;
+    t: string[];
+}>;
+/** One read per list: the viewer's context for one type. Throws on failure (never guesses wider). */
+declare function fetchShownToContext(token: string): Promise<ShownToContext>;
+interface OrCapable<Self> {
+    or(filters: string): Self;
+}
+/**
+ * The PostgREST `or` expression for "does this row belong in my list of organization X?":
+ * mine always; otherwise the row's own Shown to, else the organization's default. (A row the
+ * retiring row column once marked personal carries `shown_to = only_me` — T-13 phase 3 backfilled it
+ * and the dual-write trigger keeps it — so no list reads that column any more.)
+ */
+declare function shownToFilter(ctx: ShownToContext, organizationId: string, userId: string, ownerColumn?: string): string;
+/** Narrow a one-organization list query to what Shown to lets this person's list show. */
+declare function applyShownTo<Q extends OrCapable<Q>>(query: Q, ctx: ShownToContext, organizationId: string, userId: string, ownerColumn?: string): Q;
+/**
+ * The same rule across several organizations at once (a blended "My Orgs" list): each row is
+ * judged by ITS organization's default and ITS organization's teammates.
+ */
+declare function shownToBlendedFilter(ctx: ShownToContext, organizationIds: string[], userId: string, ownerColumn?: string, orgColumn?: string): string;
+/**
+ * THE SAME RULE ACROSS EVERY ORGANIZATION THE VIEWER BELONGS TO — the filter a client list uses when
+ * it opens on "the organization" with no one organization picked (access ladder T-11 leak fixes,
+ * 2026-09-28: the notes sidebar applied no Shown to at all and listed 57 of a coworker's Only-me
+ * notes). Compact on purpose — one arm per distinct rule, not one per organization — because a
+ * person may belong to dozens of organizations and the whole expression rides in a URL:
+ *   mine · shown to everyone · my_team rows of my teammates (per organization that has any) ·
+ *   unset rows in organizations whose default shows them ·
+ *   rows outside my organizations (reached by a direct share) or with no organization.
+ */
+declare function shownToMyOrgsFilter(ctx: ShownToContext, userId: string, ownerColumn?: string, orgColumn?: string): string | null;
+
+/**
+ * Permission Service
+ *
+ * Every write operation routes through a SECURITY DEFINER RPC — no client ever
+ * writes to the permissions table directly; row controls ("Shown to", "Published to the web")
+ * are written on the resource row under RLS.
+ *
+ * Full RPC inventory:
+ *   share_resource_with_user()    — grant user access (validates ownership)
+ *   grant_org_availability()      — make a thing AVAILABLE to an organization as org configuration
+ *                                   (surface binding, library contribution). Never a share: a share
+ *                                   names a person (SHARE-PEOPLE-ONLY, 2026-09-25); the old
+ *                                   share_resource_with_org refuses.
+ *   update_permission_level()     — change user or org permission level (validates ownership)
+ *   revoke_resource_access()      — remove a user's grant (validates ownership)
+ *   revoke_resource_org_access()  — remove an organization's availability row (validates ownership)
+ *   make_resource_public()        — set is_public = true on resource row (validates ownership)
+ *   make_resource_private()       — set is_public = false on resource row (validates ownership)
+ *   get_resource_permissions()    — list all grants with user/org details (owner-only)
+ *   is_resource_owner()           — check ownership for any table
+ *
+ * Which row controls a type carries is resolved by `get_share_capabilities`
+ * (`rowControls`, `shownToOffered`, `publishLane`), never guessed from a column name.
+ *
+ * Access model (common-docs/policies/access-ladder.md):
+ *   - Who may open a record without a share is its TABLE's level, never a row setting.
+ *   - "Published to the web" (Organization and Public tables) is the only anonymous lane.
+ *   - "Shown to" decides which lists show it — never a lock.
+ *   - Read both with getResourceVisibility() — never from the permissions table.
+ *   - The permissions table stores only explicit user/org grants.
+ *   - check_resource_access() is the single RLS engine: evaluates all access paths
+ *     (owner, assignee, direct grant, project, workspace, org hierarchy) in one query.
+ */
+
+interface ResourceVisibility {
+    /**
+     * Published to the web: the row's `published_to_web`, the card's own publish (agent, workflow),
+     * or a legacy boolean. Always false for a type that is never published.
+     */
+    isPublic: boolean;
+    /**
+     * "Shown to" — present only when the type carries it (`shownToOffered`); null means the type's
+     * "Shown to by default" knob decides.
+     */
+    shownTo?: ShownTo | null | undefined;
+    /**
+     * This record is a CHILD of another (a file attached to a chat): it follows its parent and carries
+     * no row control of its own, whatever its type.
+     */
+    childRecord?: boolean | undefined;
+    /**
+     * WHEN MEMBERSHIP ALONE REACHES IT (SHARE-TAILS, chair ruling 2026-09-25). A record-store thing
+     * with no sharing choice is the organization's default — every member reaches it at the member
+     * default level — and the lane door says so. Absent/null when the owner chose "Only me" (hidden
+     * from members' lists; members still open it by link, access ladder T-36) or the organization
+     * shows members nothing by default, and for every type outside the record store.
+     */
+    organizationDefault?: {
+        level: string;
+        organizationName: string;
+        /** The organization whose default it is — its own availability row IS this default. */
+        organizationId?: string | undefined;
+    } | null;
+    /**
+     * WHO CAN SEE THIS (lane SHARE-LANE-CONTROL, VERIFIER-23 item 3). The owner's lane choice, as the
+     * record store's lane door names it in every state. Present only for kinds whose lane has a door
+     * (the record store); absent everywhere else, so no control is drawn that could not work.
+     */
+    whoCanSee?: WhoCanSee | null | undefined;
+    /**
+     * The thing's OWN organization, read off its row (never the active one). Null when its table
+     * names none or the read could not say.
+     */
+    homeOrganizationId?: string | null | undefined;
+}
+/** The three lanes the record store's "Who can see this" control offers. */
+type LaneChoice = "mine" | "organization" | "world";
+interface WhoCanSee {
+    /** The record store's lane doors — the only kind whose lane is not a row control. */
+    source: "store";
+    choice: LaneChoice;
+    /** The object's OWN organization (never the active one). Null when the door names none. */
+    organizationId: string | null;
+    organizationName: string | null;
+    /** What the organization's member default grants on it, whichever lane is chosen. */
+    memberDefaultLevel: string | null;
+    /** Organization members reach it right now through the member default. */
+    membersReachNow: boolean;
+    /** "Anyone with the link" is offered only when the world lane would accept it. */
+    worldOffered: boolean;
+}
+/**
+ * THE ONE WRITER OF THE RECORD STORE'S LANE. `custom.share_lane_set` needs the object's own
+ * organization (the lane door names it) and Admin on the thing; it moves the lane and the
+ * record's reach together, and named people are untouched by it.
+ */
+declare function setStoreLane(organizationId: string, subjectId: string, choice: LaneChoice): Promise<ShareActionResult>;
+/**
+ * Read a record's row controls ("Shown to", "Published to the web") and its own organization.
+ * Single cheap query — safe to call from list-item components like ShareButton.
+ *
+ * Returns `{ isPublic: false }` without a row query when the type carries no row control and no
+ * publish lane; real capability/query failures remain errors.
+ */
+declare function getResourceVisibility(resourceType: ResourceType, resourceId: string): Promise<ResourceVisibility>;
+/**
+ * "Shown to" — which lists show this record to people who can already open it. Never a lock.
+ * Refuses a type that does not carry it rather than writing a column that is not there.
+ */
+declare function setResourceShownTo(resourceType: ResourceType, resourceId: string, shownTo: ShownTo | null): Promise<ShareActionResult>;
+/**
+ * Grant a user access to a resource.
+ * RPC validates: authenticated, valid level, resource exists, caller is owner, no duplicate.
+ */
+declare function shareWithUser(options: ShareWithUserOptions): Promise<ShareActionResult>;
+/**
+ * Make a thing AVAILABLE to an organization, as organization configuration: an agent bound to
+ * the organization's surface, or an item contributed to its library (with moderation). Everyone
+ * in the organization, including people who join later, can use it.
+ *
+ * 🚨 THIS IS NOT SHARING (chair ruling 2026-09-25, owner ruling 2026-09-23 "access is personal").
+ * A share names a person; the store refuses an organization at every share door with
+ * "Shares name a person, not an organization." This door is the only writer of an organization
+ * grantee, and the row it writes carries `granted_via = 'availability'`.
+ * RPC validates: authenticated, resource exists, caller holds Admin on it, caller is a member of
+ * the target organization, the organization's module config (members may add, needs approval).
+ */
+declare function grantOrgAvailability(options: OrgAvailabilityOptions): Promise<ShareActionResult>;
+/**
+ * Ensure an organization has the requested availability row.
+ *
+ * The availability door reports an existing row instead of inserting a duplicate. Composition
+ * workflows (surface binding) need idempotent "ensure" semantics, so the translation of that
+ * answer lives here instead of in each caller.
+ */
+declare function ensureOrgAvailability(options: OrgAvailabilityOptions): Promise<ShareActionResult>;
+/**
+ * Publish a resource to the web — the one way anyone, signed in or not, opens it at its address.
+ * Writes the lane the type carries (published_to_web, the card's own publish, or a legacy boolean).
+ * The permissions table is NOT written to.
+ */
+declare function makePublic(options: MakePublicOptions): Promise<ShareActionResult>;
+/**
+ * Stop publishing a resource to the web. Who in its organization can open it is unchanged —
+ * that is its table's level, never a row setting (access ladder).
+ */
+declare function makePrivate(resourceType: ResourceType, resourceId: string): Promise<ShareActionResult>;
+/**
+ * Remove a user's explicit access grant.
+ * RPC validates ownership before deleting.
+ */
+declare function revokeUserAccess(resourceType: ResourceType, resourceId: string, userId: string): Promise<ShareActionResult>;
+/**
+ * Remove an organization's explicit access grant.
+ * RPC validates ownership before deleting.
+ */
+declare function revokeOrgAccess(resourceType: ResourceType, resourceId: string, organizationId: string): Promise<ShareActionResult>;
+/**
+ * Remove public access — alias for makePrivate.
+ */
+declare function revokePublicAccess(resourceType: ResourceType, resourceId: string): Promise<ShareActionResult>;
+/**
+ * Generic dispatcher — routes to the correct revoke function.
+ */
+declare function revokeAccess(options: RevokeAccessOptions): Promise<ShareActionResult>;
+/**
+ * Change the permission level for an existing user or org grant.
+ * RPC validates ownership before updating.
+ */
+declare function updatePermissionLevel(options: UpdatePermissionOptions): Promise<ShareActionResult>;
+/**
+ * List all grants for a resource (owner-only).
+ * Uses get_resource_permissions() SECURITY DEFINER RPC — includes resolved
+ * user/org display names. Returns empty for non-owners (RPC silently returns nothing).
+ *
+ * NOTE: Does not include is_public state — use getResourceVisibility() for that.
+ */
+declare function listPermissions(resourceType: ResourceType, resourceId: string): Promise<PermissionWithDetails[]>;
+/** Alias kept for compatibility */
+declare const getResourcePermissions: typeof listPermissions;
+/**
+ * Check if the current user is the owner of a resource.
+ * Reads owner_column directly from the resource row — single index scan, no
+ * RPC round-trip required.
+ *
+ * Uses the registry to find the canonical table name, id column, and owner
+ * column so tables like flashcard_sets (set_id, not id) work correctly the
+ * day they're added to the registry — without a code change here.
+ */
+interface OwnershipResolution {
+    /** True only when the ownership read SUCCEEDED and the caller owns the row. */
+    isOwner: boolean;
+    /**
+     * Non-null when ownership could NOT be determined (unknown resource type,
+     * failed read, no session). `isOwner: false` with a non-null `error` means
+     * "unknown", never "not the owner" — UIs must not present it as a denial.
+     */
+    error: string | null;
+}
+/**
+ * Resolve whether the current user owns a resource, distinguishing
+ * "not the owner" from "could not determine".
+ *
+ * LOUD RECOVERY: every failure path returns a message instead of a bare
+ * `false`. A silent `false` here is what renders the canonical ShareModal as a
+ * dead, empty dialog for a user who actually owns the row — the whole class of
+ * bug this function exists to make impossible.
+ *
+ * Reads owner_column directly from the resource row — single index scan, no
+ * RPC round-trip required. Uses the registry to find the canonical table name,
+ * id column, and owner column so tables like flashcard_sets (set_id, not id)
+ * work correctly the day they're added to the registry.
+ */
+declare function resolveResourceOwnership(resourceType: ResourceType, resourceId: string): Promise<OwnershipResolution>;
+/**
+ * "MAY I DECIDE WHO ELSE SEES THIS?" — the question a share dialog actually has.
+ *
+ * `resolveResourceOwnership` above answers a NARROWER one: am I the row's
+ * `created_by`. VIS-17's one ladder says `admin` on a thing means "can change it
+ * and decide who else may", so gating the dialog on ownership made `admin` a
+ * level that could not do the one thing its own definition names — and for the
+ * record store it could not even be ASKED, because `custom.record` carries no
+ * client SELECT grant and the direct read above returns "Could not read Record".
+ *
+ * So this asks the database's own predicate (`public.may_manage_sharing`, lane
+ * SHARE 2026-09-19), which is the same one the six sharing RPCs enforce. The
+ * screen and the door cannot disagree, because there is one answer.
+ *
+ * A failure is reported as "could not determine", never as a denial — the
+ * distinction the dialog needs to tell a stranger from a broken read.
+ */
+declare function resolveSharingAuthority(resourceType: ResourceType, resourceId: string): Promise<OwnershipResolution>;
+/**
+ * Boolean convenience wrapper over {@link resolveResourceOwnership}.
+ *
+ * Prefer `resolveResourceOwnership` anywhere the difference between "not the
+ * owner" and "could not determine" changes what the user sees.
+ */
+declare function isResourceOwner(resourceType: ResourceType, resourceId: string): Promise<boolean>;
+/**
+ * Get all resources explicitly shared with the current user.
+ * Reads from the permissions table — reflects direct grants only,
+ * not hierarchy-inherited access (project/workspace/org membership).
+ */
+declare function getSharedWithMe(resourceType?: ResourceType | undefined): Promise<Permission[]>;
+/**
+ * Check if current user has a specific permission level on a resource.
+ * Used for client-side gating — not a substitute for RLS.
+ */
+declare function checkPermission(options: CheckPermissionOptions): Promise<PermissionCheckResult>;
+/**
+ * Batch grant access to multiple users in parallel.
+ */
+declare function batchShareWithUsers(resourceType: ResourceType, resourceId: string, userIds: string[], permissionLevel: PermissionLevel): Promise<ShareActionResult[]>;
+
+/**
+ * THE WORDS (access ladder Words table, "Shown to"): one label and one sentence per value, used by
+ * every surface that shows or sets it. "Everyone on AI Matrx" is valid only on a record that is
+ * published to the web (a database CHECK refuses it otherwise).
+ */
+declare const SHOWN_TO_WORDS: Record<ShownTo, {
+    label: string;
+    says: string;
+}>;
+declare const SHOWN_TO_ORDER: readonly ShownTo[];
+
+/**
+ * features/sharing/service/accessSummary.ts
+ *
+ * THE honest answer to "who can actually see this, and why?" for ONE entity.
+ *
+ * A list surface can only show what a row says about itself, which is only one of
+ * the SIX ways `iam.has_access_for_base` grants
+ * access: owner, level+org, direct grant, membership, education
+ * assignment, and — the one that kept being missed — reachability through a
+ * CONTAINER (a scope, project, data store…). A file marked `personal` that is
+ * attached to an org-internal scope is readable by that whole org, and saying
+ * "Only you" about it is a lie.
+ *
+ * This is deliberately ONE ENTITY AT A TIME. It walks reachability and resolves
+ * container titles, so it is not something to run per row of a list. List
+ * surfaces stay on cheap bulk signals and simply avoid asserting the specific
+ * claim they cannot back up.
+ *
+ * Direct to Supabase (`public.entity_access_summary`), never through Python —
+ * this is a plain DB read the browser is entitled to make.
+ */
+
+type AccessGranteeType = "user" | "organization";
+interface AccessDirectGrant {
+    granteeType: AccessGranteeType;
+    granteeId: string | null;
+    granteeLabel: string | null;
+    level: string;
+    expiresAt: string | null;
+}
+interface AccessContainer {
+    containerType: string;
+    containerId: string;
+    /** Human label of the container kind, e.g. "Scope". */
+    containerTypeLabel: string | null;
+    /** The container's own name, e.g. "Web Development". */
+    label: string | null;
+    /** Highest permission level conveyed through this container. */
+    level: string;
+    depth: number;
+    organizationId: string | null;
+    organizationName: string | null;
+    /** True when everyone in the container's org can read the container. */
+    orgReadable: boolean;
+    /** Explicit members of the container. */
+    memberCount: number;
+}
+interface AccessSummary {
+    entityType: string;
+    entityId: string;
+    ownerId: string | null;
+    viewerIsOwner: boolean;
+    organizationId: string | null;
+    organizationName: string | null;
+    /** Caller has admin — only then are grantee identities populated. */
+    canManage: boolean;
+    isPublic: boolean;
+    /** Every member of its organization can open it (its table's level). */
+    orgReadable: boolean;
+    directGrantCount: number;
+    directGrants: AccessDirectGrant[];
+    /** Explicit members of the entity itself. */
+    memberCount: number;
+    containers: AccessContainer[];
+    containerCount: number;
+}
+/** Full effective-access explanation for one entity. Throws on RPC failure. */
+declare function fetchAccessSummary(entityType: EntityTypeToken, entityId: string): Promise<AccessSummary>;
+/**
+ * Display titles for a batch of ids of ONE entity token, resolved LIVE from the
+ * owning table. Never render a denormalized association label instead — it goes
+ * stale the moment the target is renamed. Ids the caller cannot view are
+ * omitted by the RPC rather than leaked.
+ *
+ * DEDUP FLAG (associations W0-P1, 2026-08-29): this is sharing's own copy of a
+ * title resolver; the scopes unit has the canonical cached one at
+ * `features/scopes/service/entityTitles.ts` (which `AttachedItemsSheet` now
+ * uses). The sharing node owns converging this copy onto that resolver (or a
+ * shared home) — do not add new consumers here.
+ */
+declare function fetchEntityTitles(entityType: EntityTypeToken, ids: string[]): Promise<Map<string, string | null>>;
+/**
+ * The honest one-line headline for an entity, given everything we know.
+ * Shared by the info panel and anywhere else that must not overstate privacy.
+ */
+declare function describeAccessSummary(summary: AccessSummary): string;
+
+/**
+ * features/sharing/format.ts
+ *
+ * The ONE set of human summaries + rendered-view extractors for every sharing
+ * surface (grant rows, the reachability summary, public state, the whole access
+ * panel). Consumed by `PermissionsList`, `AccessSummaryPanel`, the share tabs,
+ * and any page that composes them — never duplicated at a callsite.
+ *
+ * THE WHAT-I-SEE LAW (agent-copy skill): these builders return the RENDERED
+ * surface converted to data, not the raw rows behind it. Where the panel shows
+ * a sentence, the payload carries that same sentence verbatim — including the
+ * red ones. A user copying an access surface is asking an agent "why can't this
+ * person see this, and what do I change?", so denials and errors are the
+ * highest-value content here, not a footnote.
+ *
+ * `accessReasonRows` is deliberately the SAME function `AccessSummaryPanel`
+ * renders from: mirror the view's extractor, never re-derive it beside the view.
+ */
+
+/** Location line for every sharing payload. */
+declare function sharingLocation(surface: string): string;
+/**
+ * The numbers an access surface LEADS with — the tab counts, the public dot,
+ * and (when the reachability summary is on screen) who can open it and its reason
+ * count. Every payload from such a surface carries these verbatim, in the body
+ * AND the envelope attributes, so the agent never recomputes what the user is
+ * already looking at.
+ *
+ * `null` means "not resolved / not rendered", which is itself information: it
+ * is the difference between "nobody owns this" and "we could not find out".
+ */
+interface AccessKpis {
+    user_grants: number;
+    org_grants: number;
+    public_grants: number;
+    total_grants: number;
+    is_public: boolean;
+    /** null while ownership is loading or failed to resolve. */
+    viewer_is_owner: boolean | null;
+    /** Who can open it without a share, as the summary line reads, when the summary is on screen. */
+    reach: string | null;
+    /** True when every member of its organization can open it. */
+    org_readable: boolean | null;
+    /** How many distinct REASONS grant access (the summary's reason rows). */
+    reachability_reasons: number | null;
+    /** Containers that convey access (scopes, projects, data stores…). */
+    container_count: number | null;
+    [key: string]: string | number | boolean | null | undefined;
+}
+declare function accessKpis(input: {
+    permissions: PermissionWithDetails[];
+    isPublic: boolean;
+    /** null while unresolved — never coerce an unknown owner to false. */
+    viewerIsOwner: boolean | null;
+    /** The reachability summary, when this surface renders one. */
+    summary?: AccessSummary | null | undefined;
+    /** The entity type, needed to phrase the reason rows the way the UI does. */
+    entityType?: string | undefined;
+}): AccessKpis;
+/** Identity + KPIs every sharing payload needs to be interpretable. */
+interface SharingCopyContext {
+    /** Entity/resource token, e.g. "web_site". */
+    resourceType: string;
+    resourceId: string;
+    resourceName?: string | null | undefined;
+    /** Where the user is, in words — e.g. "Site access — example.com". */
+    surface: string;
+    /** The page's leading KPIs, mirrored verbatim into every payload. */
+    kpis: AccessKpis;
+}
+/**
+ * A sentence the surface actually RENDERED — a denial, a blocker, a warning, a
+ * plain-state note. Captured verbatim; never paraphrased into the payload.
+ */
+interface AccessNotice {
+    tone: "error" | "warning" | "info";
+    /** The exact rendered text. */
+    text: string;
+    /** Which part of the surface rendered it. */
+    where: string;
+}
+declare function humanNotices(notices: AccessNotice[]): string;
+type GranteeKind = "user" | "organization" | "public";
+declare function granteeKind(permission: PermissionWithDetails): GranteeKind;
+/** The row's primary line, exactly as PermissionsList renders it. */
+declare function granteeLabel(permission: PermissionWithDetails): string;
+/** The row's secondary line (the email, when a display name took the first). */
+declare function granteeSecondaryLabel(permission: PermissionWithDetails): string | null;
+/**
+ * The badge text the row shows a non-owner. Owners see a level SELECT with the
+ * same value, so this doubles as the level label in both modes.
+ */
+declare function grantLevelLabel(permission: PermissionWithDetails): string;
+declare function humanGrantRow(permission: PermissionWithDetails): string;
+/** One flat row for CSV export. */
+declare function grantCsvRow(permission: PermissionWithDetails): Record<string, unknown>;
+declare function grantCsvRows(permissions: PermissionWithDetails[]): Array<Record<string, unknown>>;
+/**
+ * The empty state PermissionsList renders — copied verbatim, because "no one
+ * has been granted access here" is frequently the whole answer to "why can't
+ * they see this?".
+ */
+declare const NO_GRANTS_HEADLINE = "Not shared with anyone";
+/**
+ * 🚨 THE SAME EMPTY STATE WHEN SOMETHING ELSE IS PENDING ON THE SAME SCREEN
+ * (FIX-10C, VERIFIER-10 F13, 2026-09-22).
+ *
+ * "Not shared with anyone" stood directly above an invited person's row, and a
+ * screen that contradicts itself is worse than either sentence alone. An
+ * invitation is genuinely not a grant — it confers nothing until it is
+ * accepted — so the list does not start counting invitations. It says the
+ * narrower, still-true thing: nobody has access YET.
+ */
+declare const NO_GRANTS_YET_HEADLINE = "Nobody has access yet";
+declare const NO_GRANTS_DETAIL = "No one has been granted access here";
+/**
+ * A DIRECT-GRANT list can only ever say what was granted HERE. It cannot see
+ * its table's level, publishing, org membership, or access conveyed through a container, so every
+ * payload it emits says so out loud — otherwise an agent reads "0 grants" as
+ * "nobody can see it" and tells the user to grant access they already have.
+ */
+declare const GRANT_LIST_SCOPE_NOTE = "This list covers DIRECT grants on this resource only. Access can also come from ownership, its table's level (every member of an Organization record's organization), publishing to the web, organization membership, or a container (scope, project, data store) that conveys it \u2014 see the access summary for the complete picture.";
+declare function humanGrantList(permissions: PermissionWithDetails[], options?: {
+    surface: string;
+    shown?: number | undefined;
+}): string;
+/**
+ * 🚨 WHO CAN OPEN IT, AND THE HEADLINE, ARE ONE TRUTH (lane RECORDS-UI-FIX, guide re-walk
+ * 2026-09-23; access ladder T-13). The line reads what the record actually reaches — published to
+ * the web, every member of its organization, or only its owner and the people named — from the same
+ * summary the headline reads, so the two can never disagree. Who may open a record without a share
+ * is its table's level, never a row setting ("Shown to" only decides which lists show it).
+ */
+declare function summaryReachLabel(summary: AccessSummary): string;
+declare function isPrivateSummary(summary: AccessSummary): boolean;
+declare function containerTitle(container: AccessContainer): string;
+declare function containerDetail(container: AccessContainer): string;
+/** One rendered reason row — the part users act on. */
+interface AccessReasonRow {
+    /** Stable key for React + payload correlation. */
+    id: string;
+    kind: "organization" | "direct-grants" | "container";
+    title: string;
+    detail: string;
+    /** Present for container reasons, so the agent can name what to detach. */
+    containerType?: string | undefined;
+    containerId?: string | undefined;
+}
+/** The person-facing noun for an entity token ("udt_document" reads "document", never the raw token). */
+declare function recordNoun(entityType: string): string;
+/**
+ * THE reason list — rendered by `AccessSummaryPanel` AND copied by every
+ * payload that includes it. One extractor, two consumers; the export can never
+ * drift from the screen.
+ */
+declare function accessReasonRows(summary: AccessSummary, entityType: string): AccessReasonRow[];
+/** The closing line the panel renders when nothing grants access. */
+declare const NOTHING_ELSE_GRANTS = "Nothing else grants access to this yet.";
+/** The panel's rendered error headline, verbatim. */
+declare const ACCESS_SUMMARY_ERROR_HEADLINE = "Couldn\u2019t determine access";
+/**
+ * The reachability panel as DATA — every line it puts on screen, in order.
+ * This is the payload body; the raw `AccessSummary` rides along beside it so
+ * nothing is lost.
+ */
+interface AccessSummaryView {
+    reach_label: string;
+    headline: string;
+    reasons: AccessReasonRow[];
+    nothing_else_grants: string | null;
+    raw: AccessSummary;
+}
+declare function accessSummaryView(summary: AccessSummary, entityType: string): AccessSummaryView;
+declare function humanAccessSummary(summary: AccessSummary, entityType: string): string;
+/** Reason rows as flat CSV rows. */
+declare function reasonCsvRows(rows: AccessReasonRow[]): Array<Record<string, unknown>>;
+/**
+ * Everything an access surface shows, as one payload body. Built by the page
+ * that composes the sharing components, from LIVE state at click time.
+ */
+interface AccessPanelView {
+    resource: {
+        type: string;
+        id: string;
+        name?: string | null | undefined;
+    };
+    kpis: AccessKpis;
+    /** The tab the user is actually looking at. */
+    active_tab?: string | undefined;
+    /** Every error / blocker / notice rendered right now, verbatim. */
+    notices: AccessNotice[];
+    access_summary: AccessSummaryView | null;
+    /** Present instead of `access_summary` when the summary failed to load. */
+    access_summary_error: string | null;
+    user_grants: PermissionWithDetails[];
+    org_grants: PermissionWithDetails[];
+    public_grant: PermissionWithDetails | null;
+    is_public: boolean;
+    scope_note: string;
+}
+declare function humanAccessPanel(view: AccessPanelView): string;
+
+/** A deliberately title-free message for handing a canonical link to a person. */
+declare function createSafeShareMessage(url: string): string;
+/** Refuses links the canonical resolver would reject or exhaust. */
+declare function shareLinkUnavailableReason(link: Pick<ShareLink, "isActive" | "expiresAt" | "maxUses" | "useCount">, now?: number): string | null;
+declare function shareLinkSecurityStateMatches(a: ShareLink, b: ShareLink): boolean;
+/**
+ * A refreshed inactive/expired/exhausted link must be rejected before asking
+ * the owner to review changed fields; otherwise the dialog can imply access
+ * that has already been revoked.
+ */
+declare function evaluateShareLinkHandoff(reviewed: ShareLink, current: ShareLink): {
+    status: "unavailable";
+    reason: string;
+} | {
+    status: "changed";
+} | {
+    status: "ready";
+};
+declare function describeShareLinkAccess(permissionLevel: ShareLink["permissionLevel"]): string;
+declare function describeShareLinkExpiry(expiresAt: string | null): string;
+
+/** One rung this person may actually hand out, in the store's own words. */
+interface OutsideShareLevel {
+    level: string;
+    label: string;
+    means: string;
+}
+/** One outside person on this table, joined or not. */
+interface OutsideShareInvitation {
+    invitation_id: string;
+    email: string;
+    level: string;
+    level_label: string;
+    status: string;
+    /** `false` is the "invited, not yet joined" state the dialog draws. */
+    joined: boolean;
+    say: string;
+    expires_at: string | null;
+    invited_at: string;
+    expired: boolean;
+    /**
+     * 🚨 THE LINK THE SHARER CAN HAND OVER THEMSELVES — the ordinary case, not a
+     * fallback. A plumber texts his customer the link; a lab emails a
+     * collaborator from their own address. `null` when the row has been accepted
+     * (nothing left to open) or when this viewer may not invite.
+     */
+    accept_path: string | null;
+}
+/**
+ * WHETHER THIS SERVER CAN ACTUALLY SEND AN EMAIL — three answers, never two.
+ *
+ * The browser cannot know whether `RESEND_API_KEY` is set on the server, so the
+ * server stamps what its channel adapters found at boot
+ * (`communication.channel_readiness`) and the door reads the stamp. `unknown`
+ * means NOBODY HAS CHECKED — deliberately not `configured: false`, so "we could
+ * not look" can never be drawn as "email is off".
+ */
+interface ChannelReadiness {
+    channel: string;
+    answer: "yes" | "no" | "unknown";
+    configured: boolean | null;
+    checked_at: string | null;
+    detail?: string | undefined;
+    say: string;
+}
+/** What actually happened to the message, and the link either way. */
+interface OutsideShareDelivery {
+    accept_path: string;
+    queued: string[];
+    skipped: {
+        channel: string;
+        why: string;
+    }[];
+    email_answer: ChannelReadiness["answer"];
+    say: string;
+}
+/** Everything the dialog needs to draw itself without guessing anything. */
+interface OutsideShareState {
+    /** False only when an administrator of this organization turned outside sharing off. */
+    lane_open: boolean;
+    /** May THIS viewer invite an outside person to THIS table? */
+    may_invite: boolean;
+    /**
+     * Still answered by the store; deliberately NOT drawn (SHARE-GATE-OFF). The
+     * outside lane is on by default and is an administrator's setting, never a
+     * control in the share flow.
+     */
+    may_open_lane: boolean;
+    /** The level this viewer holds on the table. `null` means none. */
+    my_level: string | null;
+    /** The rungs they may give — already capped at `my_level` by the store. */
+    levels: OutsideShareLevel[];
+    who: string;
+    invitations: OutsideShareInvitation[];
+    /** One sentence for the person, whatever the state. Never a knob key. */
+    say: string;
+    /** What this server can actually do about email, observed and stamped. */
+    email_delivery: ChannelReadiness;
+    /** That answer as one sentence — and it ALWAYS names the copy-the-link route. */
+    email_say: string;
+}
+declare function readOutsideShare(organizationId: string, tableId: string): Promise<OutsideShareState>;
+/**
+ * What the outside share answered. THREE outcomes, one door (MOVE-AND-OUTSIDER,
+ * VERIFIER-19 finding 3).
+ *
+ * `custom.table_share_outside_grant` (G14) decides who the address is:
+ *   · an ACCOUNT OUTSIDE the organization — granted at once (`granted: true`,
+ *     `person: "outside_account"`), told so by notification, no link, no
+ *     "not yet joined". Notion and Airtable give an existing account access the
+ *     moment it is named, and so do we;
+ *   · a MEMBER of the organization — granted like a colleague (`person: "member"`);
+ *   · an address NOBODY signed up with — the invitation, with its link
+ *     (`invited: true`, `person: "no_account"`): the only case a link is needed.
+ * Until this lane the dialog called `table_share_outside_invite` for everyone, so
+ * an existing account got an invitation and, opening the table, read "You have
+ * not been given this table".
+ */
+interface OutsideInviteAnswer {
+    /** An `iam.invitations` row was written and a link minted (no account yet). */
+    invited: boolean;
+    /** They were given the table outright (an existing account, inside or out). */
+    granted: boolean;
+    /** Who the store found the address to be. */
+    person?: "outside_account" | "member" | "no_account" | undefined;
+    say: string;
+    /** Null when nobody was invited — an invitation that did not happen has no link. */
+    accept_path: string | null;
+    delivery: OutsideShareDelivery | null;
+}
+declare function shareWithOutsidePerson(organizationId: string, tableId: string, email: string, level: string): Promise<OutsideInviteAnswer>;
+/** One table somebody else's organization shared with the person signed in, not yet opened. */
+interface MyPendingTableInvitation {
+    invitation_id: string;
+    organization_id: string;
+    organization: string | null;
+    table_id: string;
+    table_name: string;
+    level: string;
+    level_label: string;
+    token: string;
+    expires_at: string | null;
+    say: string;
+}
+/**
+ * The person's own pending table invitations (`custom.table_share_outside_for_me`),
+ * so a table page that is not given to her yet can say "this was shared with you —
+ * open it" instead of "you have not been given this table".
+ */
+declare function myPendingTableInvitations(): Promise<MyPendingTableInvitation[]>;
+declare function resendOutside(organizationId: string, invitationId: string): Promise<{
+    say: string;
+    accept_path: string;
+    delivery: OutsideShareDelivery;
+}>;
+declare function revokeOutside(organizationId: string, invitationId: string): Promise<{
+    say: string;
+    grants_removed: number;
+}>;
+/**
+ * WHAT THE PERSON HOLDING THE LINK IS BEING OFFERED — read BEFORE they are asked
+ * to make an account.
+ *
+ * 🚨 IT IS THE ONLY CALL ON THIS PAGE THAT A SIGNED-OUT READER CAN MAKE, and
+ * that is deliberate: somebody outside an organization usually has no account
+ * at all, so a page that redirects to sign-up before it explains anything is
+ * asking a stranger to make an account for a reason it never gave them. It
+ * lives in schema `public` — beside `inv_peek_invited_email`, which has
+ * answered anonymously off a token for far longer — because schema `custom` is
+ * revoked from `anon` by design and one door is not worth opening it.
+ *
+ * `state` is one of: `ready` · `sign_in_needed` · `wrong_account` · `accepted`
+ * · `revoked` · `expired` · `lane_closed` · `unknown`. An UNKNOWN token gets
+ * one sentence and nothing else, so a link can never be used to learn that
+ * something is there.
+ */
+interface TableSharePeek {
+    state: "ready" | "sign_in_needed" | "wrong_account" | "accepted" | "revoked" | "expired" | "lane_closed" | "unknown";
+    usable: boolean;
+    /** Absent on an unknown token — there is nothing to describe. */
+    table?: string | undefined;
+    table_id?: string | undefined;
+    organization?: string | undefined;
+    organization_id?: string | undefined;
+    level?: string | undefined;
+    level_label?: string | undefined;
+    means?: string | undefined;
+    inviter?: string | undefined;
+    /** Masked (`j••••@example.com`) unless the caller IS that person. */
+    invited_email?: string | undefined;
+    signed_in_as?: string | null | undefined;
+    expires_at?: string | null | undefined;
+    /** One sentence naming the table, the organization and who shared it. */
+    offer?: string | undefined;
+    say: string;
+    /** Who to ask. Never absent — a dead link with nobody to ask is a dead end. */
+    ask: string;
+}
+declare function peekTableShare(token: string): Promise<TableSharePeek>;
+/**
+ * The link somebody can actually paste into a text message. The store answers a
+ * PATH — it has no idea what hostname this app is served on — so the origin is
+ * added here, from the browser the sharer is standing in.
+ */
+declare function absoluteInviteUrl(acceptPath: string): string;
+declare function acceptOutsideShare(token: string): Promise<{
+    say: string;
+    organization_id: string;
+    organization: string | null;
+    table_id: string;
+    table: string;
+    level: string;
+}>;
+
+type SecureDeliveryOptions = components["schemas"]["OptionsResponse"];
+type SecureDeliveryReceipt = components["schemas"]["CreateResponse"];
+type SecureDeliveryPage = components["schemas"]["RecipientPage"];
+type SecureDeliveryCreate = components["schemas"]["CreateBody"];
+/** A refusal the server named, with the remedy it offered. */
+declare class SecureDeliveryRefusal extends Error {
+    readonly code: string;
+    readonly remedy: string | null;
+    constructor(message: string, code: string, remedy: string | null);
+}
+declare function fetchSecureDeliveryOptions(dispatch: AppDispatch, resourceType: string, resourceId: string): Promise<SecureDeliveryOptions>;
+declare function sendSecureDelivery(dispatch: AppDispatch, body: Omit<SecureDeliveryCreate, "organization_id" | "project_id" | "task_id">): Promise<SecureDeliveryReceipt>;
+declare function revokeSecureDelivery(dispatch: AppDispatch, deliveryId: string): Promise<string>;
+/** One delivery the signed-in person sent for one record. Addresses are theirs to see. */
+interface SentSecureDelivery {
+    id: string;
+    recipient_name: string | null;
+    recipient_email: string | null;
+    recipient_phone: string | null;
+    link_channel: string;
+    code_channel: string;
+    field_keys: string[];
+    status: string;
+    created_at: string;
+    expires_at: string;
+    viewed_at: string | null;
+}
+declare function listSentSecureDeliveries(resourceType: string, resourceId: string): Promise<SentSecureDelivery[]>;
+/**
+ * The mobile on file for an existing user with this email — only when that number has agreed to
+ * texts (the send path's own gate) and the caller is that person or shares an organization with
+ * them. Anyone else, or no consent, is null, and the dialog keeps its both-by-email warning.
+ */
+declare function fetchRecipientPhoneOnFile(email: string): Promise<string | null>;
+declare const openSecureDelivery: (dispatch: AppDispatch, token: string) => Promise<_ai_matrx_api_account.RecipientPage>;
+declare const requestSecureDeliveryCode: (dispatch: AppDispatch, token: string) => Promise<_ai_matrx_api_account.RecipientPage>;
+declare function viewSecureDelivery(dispatch: AppDispatch, token: string, code: string): Promise<SecureDeliveryPage>;
+
+/** platform.search_engine_indexed_state(type, id) — access ladder T-12. */
+type SearchEngineIndexedState = {
+    enrolled: false;
+} | {
+    enrolled: true;
+    /** The record is published to the web (its `published_to_web`, plus its own lifecycle). */
+    published_to_web: boolean;
+    /** The creator's choice; null = follow the type default. */
+    value: boolean | null;
+    /** The type knob, resolved for the record's organization. */
+    type_default: boolean;
+    /** What search engines are told right now. */
+    effective: boolean;
+    can_change: boolean;
+};
+
+type Answer = {
+    state: SearchEngineIndexedState | null;
+    error: string | null;
+};
+declare function getSearchEngineIndexedState(resourceType: string, resourceId: string): Promise<Answer>;
+/** `indexed = null` returns the record to its type's default. */
+declare function setSearchEngineIndexed(resourceType: string, resourceId: string, indexed: boolean | null): Promise<Answer>;
+
+type Database = any;
+
+type OrganizationMemberRow = Database["public"]["Functions"]["get_organization_members_with_users"]["Returns"][number];
+/** How long a settled roster is kept: for the tab (a change made here forgets it). */
+declare const MEMBER_ROWS_TTL_MS: number;
+type RosterClient = Pick<ReturnType<typeof createClient>, "rpc">;
+declare function readOrganizationMemberRows(orgId: string, { now, fresh, client, }?: {
+    now?: number | undefined;
+    /** An explicit refresh: skip a settled answer (an in-flight read is still joined). */
+    fresh?: boolean | undefined;
+    client?: RosterClient | undefined;
+}): Promise<OrganizationMemberRow[]>;
+/** A roster changed (role, removal, join, leave): the next read goes to the server. */
+declare function forgetOrganizationMemberRows(orgId?: string | undefined): void;
+
+/** Keep only the organizations whose id is in `openIds`. Order preserved. */
+declare function onlyOpenOrganizations<T extends {
+    id: string;
+}>(orgs: readonly T[], openIds: ReadonlySet<string>): T[];
+/**
+ * The text that tells two live organizations with the same visible name apart:
+ * their address (slug), else a short id. Null when the name is unique in the list.
+ */
+declare function organizationDisambiguators<T extends {
+    id: string;
+    name: string;
+    slug?: string | null | undefined;
+}>(orgs: readonly T[]): Map<string, string | null>;
+
+type TeamRole = "admin" | "member";
+interface Team {
+    id: string;
+    name: string;
+    description: string | null;
+    hrDepartmentId: string | null;
+    hrDepartmentName: string | null;
+    memberCount: number;
+    /** The viewer's role on this team, or null when they are not on it. */
+    myRole: TeamRole | null;
+    /** The viewer may rename it and manage its members (org owner/admin or team admin). */
+    canManage: boolean;
+    /** Set only on archived teams (listed for organization owners and admins). */
+    archivedAt: string | null;
+    createdAt: string;
+}
+interface TeamMember {
+    userId: string;
+    role: TeamRole;
+    /** Added by hand (an iam.memberships row). */
+    isListed: boolean;
+    /** On the team because of the linked HR department. */
+    isFromHr: boolean;
+    listedSince: string | null;
+    email: string | null;
+    displayName: string | null;
+    avatarUrl: string | null;
+}
+interface HrDepartmentOption {
+    id: string;
+    name: string;
+    parentDepartmentId: string | null;
+}
+declare function listTeams(organizationId: string, includeArchived?: boolean): Promise<Team[]>;
+declare function listTeamMembers(teamId: string): Promise<TeamMember[]>;
+
+export { ACCESS_SUMMARY_ERROR_HEADLINE, type AccessContainer, type AccessDirectGrant, type AccessGranteeType, type AccessKpis, type AccessNotice, type AccessPanelView, type AccessReasonRow, type AccessSummary, type AccessSummaryView, type ApiCallResult, type AppDispatch, type ChannelReadiness, type CheckPermissionOptions, type ForkResult, GRANT_LIST_SCOPE_NOTE, type GranteeKind, type HrDepartmentOption, type LaneChoice, MEMBER_ROWS_TTL_MS, type MakePublicOptions, type MyPendingTableInvitation, NOTHING_ELSE_GRANTS, NO_GRANTS_DETAIL, NO_GRANTS_HEADLINE, NO_GRANTS_YET_HEADLINE, OFFERED_DB_PERMISSION_LEVELS, type OrCapable, type OrgAvailabilityOptions, type OrganizationMemberRow, type OutsideInviteAnswer, type OutsideShareDelivery, type OutsideShareInvitation, type OutsideShareLevel, type OutsideShareState, type OwnedResource, type OwnerCheckResult, type OwnershipResolution, PERMISSION_LEVEL_RANK, PUBLIC_LANE_COLUMNS, PUBLIC_LANE_TYPES, type Permission, type PermissionCheckResult, PermissionError, PermissionErrorCode, type PermissionWithDetails, type PublishLane, RESOURCE_TYPES, type ResolvedShareToken, type ResourceType, type ResourceVisibility, type RevokeAccessOptions, SHAREABLE_RESOURCE_REGISTRY, SHOWN_TO_ORDER, SHOWN_TO_WORDS, type SearchEngineIndexedState, type SecureDeliveryCreate, type SecureDeliveryOptions, type SecureDeliveryPage, type SecureDeliveryReceipt, SecureDeliveryRefusal, type SentSecureDelivery, type ShareActionResult, type ShareCapabilities, type ShareDbClient, type ShareLink, type ShareNoticeAnswer, type ShareServerCall, type ShareServerResult, type ShareTargetType, type ShareWithUserOptions, type ShareableResourceEntry, type SharingCopyContext, type SharingHost, type SharingState, type ShownTo, type ShownToContext, type TableSharePeek, type Team, type TeamMember, type TeamRole, type UpdatePermissionOptions, type WhoCanSee, absoluteInviteUrl, acceptOutsideShare, accessKpis, accessReasonRows, accessSummaryView, appUrl, applyShownTo, batchShareWithUsers, callApi, checkPermission, configureSharing, containerDetail, containerTitle, createClient, createSafeShareMessage, createShareLink, describeAccessSummary, describeShareLinkAccess, describeShareLinkExpiry, ensureOrgAvailability, ensureOrgId, evaluateShareLinkHandoff, fetchAccessSummary, fetchEntityTitles, fetchRecipientPhoneOnFile, fetchSecureDeliveryOptions, fetchShownToContext, forgetOrganizationMemberRows, forkSharedResource, getActiveOrgId, getClaimsUser, getPermissionLevelLabel, getPermissionLevelsAtOrAbove, getResourcePermissions, getResourceSharePath, getResourceTypeLabel, getResourceVisibility, getSearchEngineIndexedState, getShareCapabilities, getShareableResource, getSharedWithMe, grantCsvRow, grantCsvRows, grantLevelLabel, grantOrgAvailability, granteeKind, granteeLabel, granteeSecondaryLabel, hasPublicPage, humanAccessPanel, humanAccessSummary, humanGrantList, humanGrantRow, humanNotices, isForkable, isJsonObject, isKnownEntity, isPrivateSummary, isResourceOwner, listPermissions, listSentSecureDeliveries, listShareLinks, listTeamMembers, listTeams, makePrivate, makePublic, myPendingTableInvitations, onlyOpenOrganizations, openSecureDelivery, organizationDisambiguators, passThroughDispatch, peekTableShare, permissionLevelRank, publicLaneSelect, publicResourceUrl, readOrganizationMemberRows, readOutsideShare, reasonCsvRows, recordNoun, requestSecureDeliveryCode, resendOutside, resolveEntityHref, resolveResourceOwnership, resolveResourceToken, resolveShareToken, resolveSharingAuthority, resolveTableName, revokeAccess, revokeOrgAccess, revokeOutside, revokePublicAccess, revokeSecureDelivery, revokeShareLink, revokeUserAccess, satisfiesPermissionLevel, sendSecureDelivery, sendShareNotice, setResourceShownTo, setSearchEngineIndexed, setStoreLane, shareClient, shareLinkSecurityStateMatches, shareLinkUnavailableReason, shareLinkUrl, shareUrlForLink, shareWithOutsidePerson, shareWithUser, sharingHost, sharingLocation, shownToBlendedFilter, shownToFilter, shownToMyOrgsFilter, summaryReachLabel, supabase, updatePermissionLevel, validatePermission, viewSecureDelivery };