@lotics/cli 0.277.0 → 0.278.0

package/dist/src/cli.js

@@ -9054,8 +9054,8 @@ function datetime(args) {
     opts.push("");
   if (args.offset)
     opts.push(`([+-](?:[01]\\d|2[0-3]):[0-5]\\d)`);
-  const timeRegex = `${time3}(?:${opts.join("|")})`;
-  return new RegExp(`^${dateSource}T(?:${timeRegex})$`);
+  const timeRegex2 = `${time3}(?:${opts.join("|")})`;
+  return new RegExp(`^${dateSource}T(?:${timeRegex2})$`);
 }
 var string = (params) => {
   const regex = params ? `[\\s\\S]{${params?.minimum ?? 0},${params?.maximum ?? ""}}` : `[\\s\\S]*`;
@@ -10643,8 +10643,8 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
   });
   defineLazy(inst._zod, "pattern", () => {
     if (def.options.every((o) => o._zod.pattern)) {
-      const patterns = def.options.map((o) => o._zod.pattern);
-      return new RegExp(`^(${patterns.map((p) => cleanRegex(p.source)).join("|")})$`);
+      const patterns2 = def.options.map((o) => o._zod.pattern);
+      return new RegExp(`^(${patterns2.map((p) => cleanRegex(p.source)).join("|")})$`);
     }
     return void 0;
   });
@@ -19191,7 +19191,7 @@ var formatMap = {
 var stringProcessor = (schema, ctx, _json, _params) => {
   const json2 = _json;
   json2.type = "string";
-  const { minimum, maximum, format: format2, patterns, contentEncoding } = schema._zod.bag;
+  const { minimum, maximum, format: format2, patterns: patterns2, contentEncoding } = schema._zod.bag;
   if (typeof minimum === "number")
     json2.minLength = minimum;
   if (typeof maximum === "number")
@@ -19206,8 +19206,8 @@ var stringProcessor = (schema, ctx, _json, _params) => {
   }
   if (contentEncoding)
     json2.contentEncoding = contentEncoding;
-  if (patterns && patterns.size > 0) {
-    const regexes = [...patterns];
+  if (patterns2 && patterns2.size > 0) {
+    const regexes = [...patterns2];
     if (regexes.length === 1)
       json2.pattern = regexes[0].source;
     else if (regexes.length > 1) {
@@ -19539,14 +19539,14 @@ var recordProcessor = (schema, ctx, _json, params) => {
   json2.type = "object";
   const keyType = def.keyType;
   const keyBag = keyType._zod.bag;
-  const patterns = keyBag?.patterns;
-  if (def.mode === "loose" && patterns && patterns.size > 0) {
+  const patterns2 = keyBag?.patterns;
+  if (def.mode === "loose" && patterns2 && patterns2.size > 0) {
     const valueSchema = process2(def.valueType, ctx, {
       ...params,
       path: [...params.path, "patternProperties", "*"]
     });
     json2.patternProperties = {};
-    for (const pattern of patterns) {
+    for (const pattern of patterns2) {
       json2.patternProperties[pattern.source] = valueSchema;
     }
   } else {
@@ -21994,6 +21994,181 @@ function toDate(argument, context) {
   return constructFrom(context || argument, argument);
 }
 
+// ../../node_modules/date-fns/parseISO.js
+function parseISO(argument, options) {
+  const invalidDate = () => constructFrom(options?.in, NaN);
+  const additionalDigits = options?.additionalDigits ?? 2;
+  const dateStrings = splitDateString(argument);
+  let date5;
+  if (dateStrings.date) {
+    const parseYearResult = parseYear(dateStrings.date, additionalDigits);
+    date5 = parseDate(parseYearResult.restDateString, parseYearResult.year);
+  }
+  if (!date5 || isNaN(+date5)) return invalidDate();
+  const timestamp = +date5;
+  let time3 = 0;
+  let offset;
+  if (dateStrings.time) {
+    time3 = parseTime(dateStrings.time);
+    if (isNaN(time3)) return invalidDate();
+  }
+  if (dateStrings.timezone) {
+    offset = parseTimezone(dateStrings.timezone);
+    if (isNaN(offset)) return invalidDate();
+  } else {
+    const tmpDate = new Date(timestamp + time3);
+    const result = toDate(0, options?.in);
+    result.setFullYear(
+      tmpDate.getUTCFullYear(),
+      tmpDate.getUTCMonth(),
+      tmpDate.getUTCDate()
+    );
+    result.setHours(
+      tmpDate.getUTCHours(),
+      tmpDate.getUTCMinutes(),
+      tmpDate.getUTCSeconds(),
+      tmpDate.getUTCMilliseconds()
+    );
+    return result;
+  }
+  return toDate(timestamp + time3 + offset, options?.in);
+}
+var patterns = {
+  dateTimeDelimiter: /[T ]/,
+  timeZoneDelimiter: /[Z ]/i,
+  timezone: /([Z+-].*)$/
+};
+var dateRegex = /^-?(?:(\d{3})|(\d{2})(?:-?(\d{2}))?|W(\d{2})(?:-?(\d{1}))?|)$/;
+var timeRegex = /^(\d{2}(?:[.,]\d*)?)(?::?(\d{2}(?:[.,]\d*)?))?(?::?(\d{2}(?:[.,]\d*)?))?$/;
+var timezoneRegex = /^([+-])(\d{2})(?::?(\d{2}))?$/;
+function splitDateString(dateString) {
+  const dateStrings = {};
+  const array2 = dateString.split(patterns.dateTimeDelimiter);
+  let timeString;
+  if (array2.length > 2) {
+    return dateStrings;
+  }
+  if (/:/.test(array2[0])) {
+    timeString = array2[0];
+  } else {
+    dateStrings.date = array2[0];
+    timeString = array2[1];
+    if (patterns.timeZoneDelimiter.test(dateStrings.date)) {
+      dateStrings.date = dateString.split(patterns.timeZoneDelimiter)[0];
+      timeString = dateString.substr(
+        dateStrings.date.length,
+        dateString.length
+      );
+    }
+  }
+  if (timeString) {
+    const token2 = patterns.timezone.exec(timeString);
+    if (token2) {
+      dateStrings.time = timeString.replace(token2[1], "");
+      dateStrings.timezone = token2[1];
+    } else {
+      dateStrings.time = timeString;
+    }
+  }
+  return dateStrings;
+}
+function parseYear(dateString, additionalDigits) {
+  const regex = new RegExp(
+    "^(?:(\\d{4}|[+-]\\d{" + (4 + additionalDigits) + "})|(\\d{2}|[+-]\\d{" + (2 + additionalDigits) + "})$)"
+  );
+  const captures = dateString.match(regex);
+  if (!captures) return { year: NaN, restDateString: "" };
+  const year = captures[1] ? parseInt(captures[1]) : null;
+  const century = captures[2] ? parseInt(captures[2]) : null;
+  return {
+    year: century === null ? year : century * 100,
+    restDateString: dateString.slice((captures[1] || captures[2]).length)
+  };
+}
+function parseDate(dateString, year) {
+  if (year === null) return /* @__PURE__ */ new Date(NaN);
+  const captures = dateString.match(dateRegex);
+  if (!captures) return /* @__PURE__ */ new Date(NaN);
+  const isWeekDate = !!captures[4];
+  const dayOfYear = parseDateUnit(captures[1]);
+  const month = parseDateUnit(captures[2]) - 1;
+  const day = parseDateUnit(captures[3]);
+  const week = parseDateUnit(captures[4]);
+  const dayOfWeek = parseDateUnit(captures[5]) - 1;
+  if (isWeekDate) {
+    if (!validateWeekDate(year, week, dayOfWeek)) {
+      return /* @__PURE__ */ new Date(NaN);
+    }
+    return dayOfISOWeekYear(year, week, dayOfWeek);
+  } else {
+    const date5 = /* @__PURE__ */ new Date(0);
+    if (!validateDate(year, month, day) || !validateDayOfYearDate(year, dayOfYear)) {
+      return /* @__PURE__ */ new Date(NaN);
+    }
+    date5.setUTCFullYear(year, month, Math.max(dayOfYear, day));
+    return date5;
+  }
+}
+function parseDateUnit(value) {
+  return value ? parseInt(value) : 1;
+}
+function parseTime(timeString) {
+  const captures = timeString.match(timeRegex);
+  if (!captures) return NaN;
+  const hours = parseTimeUnit(captures[1]);
+  const minutes = parseTimeUnit(captures[2]);
+  const seconds = parseTimeUnit(captures[3]);
+  if (!validateTime(hours, minutes, seconds)) {
+    return NaN;
+  }
+  return hours * millisecondsInHour + minutes * millisecondsInMinute + seconds * 1e3;
+}
+function parseTimeUnit(value) {
+  return value && parseFloat(value.replace(",", ".")) || 0;
+}
+function parseTimezone(timezoneString) {
+  if (timezoneString === "Z") return 0;
+  const captures = timezoneString.match(timezoneRegex);
+  if (!captures) return 0;
+  const sign = captures[1] === "+" ? -1 : 1;
+  const hours = parseInt(captures[2]);
+  const minutes = captures[3] && parseInt(captures[3]) || 0;
+  if (!validateTimezone(hours, minutes)) {
+    return NaN;
+  }
+  return sign * (hours * millisecondsInHour + minutes * millisecondsInMinute);
+}
+function dayOfISOWeekYear(isoWeekYear, week, day) {
+  const date5 = /* @__PURE__ */ new Date(0);
+  date5.setUTCFullYear(isoWeekYear, 0, 4);
+  const fourthOfJanuaryDay = date5.getUTCDay() || 7;
+  const diff = (week - 1) * 7 + day + 1 - fourthOfJanuaryDay;
+  date5.setUTCDate(date5.getUTCDate() + diff);
+  return date5;
+}
+var daysInMonths = [31, null, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+function isLeapYearIndex(year) {
+  return year % 400 === 0 || year % 4 === 0 && year % 100 !== 0;
+}
+function validateDate(year, month, date5) {
+  return month >= 0 && month <= 11 && date5 >= 1 && date5 <= (daysInMonths[month] || (isLeapYearIndex(year) ? 29 : 28));
+}
+function validateDayOfYearDate(year, dayOfYear) {
+  return dayOfYear >= 1 && dayOfYear <= (isLeapYearIndex(year) ? 366 : 365);
+}
+function validateWeekDate(_year, week, day) {
+  return week >= 1 && week <= 53 && day >= 0 && day <= 6;
+}
+function validateTime(hours, minutes, seconds) {
+  if (hours === 24) {
+    return minutes === 0 && seconds === 0;
+  }
+  return seconds >= 0 && seconds < 60 && minutes >= 0 && minutes < 60 && hours >= 0 && hours < 25;
+}
+function validateTimezone(_hours, minutes) {
+  return minutes >= 0 && minutes <= 59;
+}
+
 // ../../node_modules/date-fns/isDate.js
 function isDate(value) {
   return value instanceof Date || typeof value === "object" && Object.prototype.toString.call(value) === "[object Date]";
@@ -22052,6 +22227,9 @@ function differenceInCalendarDays(laterDate, earlierDate, options) {
   return Math.round((laterTimestamp - earlierTimestamp) / millisecondsInDay);
 }
 
+// ../shared/src/formula_helpers.ts
+var FORMULA_ERROR_PREFIX = "#ERROR: ";
+
 // ../shared/src/aggregate.ts
 var baseAggregateOperationSchema = external_exports.enum([
   "empty",
@@ -22251,6 +22429,24 @@ function keepsAggregatedUnit(operation) {
 function rollupOutputType(operation) {
   return operation === "earliest" || operation === "latest" ? "date" : "number";
 }
+function rollupOutputFormat(operation, aggregated, rowSelect = {}) {
+  if (keepsAggregatedUnit(operation)) {
+    return {
+      aggregate_field_format: aggregated.format,
+      aggregate_field_currency: aggregated.currency,
+      aggregate_field_unit: aggregated.unit,
+      aggregate_field_unit_field: rowSelect.unit_field,
+      aggregate_field_currency_field: rowSelect.currency_field
+    };
+  }
+  return {
+    aggregate_field_format: operation.startsWith("percent_") ? "percentage" : "number",
+    aggregate_field_currency: void 0,
+    aggregate_field_unit: void 0,
+    aggregate_field_unit_field: void 0,
+    aggregate_field_currency_field: void 0
+  };
+}
 var OPERATION_FIELD_TYPES = {
   empty: ["text", "number", "date", "select", "select_member", "select_record_link", "files", "formula", "rollup", "autonumber"],
   filled: ["text", "number", "date", "select", "select_member", "select_record_link", "files", "formula", "rollup", "autonumber"],
@@ -25719,6 +25915,12 @@ function isPlatformWrittenField(field) {
 }
 
 // ../shared/src/binding_keys.ts
+function fieldKeyName(entityAlias, fieldAlias2) {
+  return `${entityAlias}.${fieldAlias2}`;
+}
+function optionKeyName(entityAlias, fieldAlias2, optionAlias) {
+  return `${entityAlias}.${fieldAlias2}:${optionAlias}`;
+}
 function parseFieldKeyName(key) {
   const dot = key.indexOf(".");
   if (dot <= 0) return null;
@@ -25728,6 +25930,14 @@ function parseFieldKeyName(key) {
   if (field === "" || field.includes(".") || field.includes(":")) return null;
   return { entity, field };
 }
+function parseOptionKeyName(key) {
+  const colon = key.indexOf(":");
+  if (colon <= 0) return null;
+  const option = key.slice(colon + 1);
+  if (option === "" || option.includes(":") || option.includes(".")) return null;
+  const field = parseFieldKeyName(key.slice(0, colon));
+  return field === null ? null : { ...field, option };
+}
 
 // ../shared/src/formula_references.ts
 var FIELD_REF_TOKEN = /\{([^{}]+)\}/g;
@@ -25768,6 +25978,9 @@ function prepareFormulaExpression(expression, fields) {
     unresolved
   };
 }
+function referencedFieldKeys(expression, fields) {
+  return prepareFormulaExpression(expression, fields).referencedKeys;
+}
 var CONTRACT_OPTION_REF = /^([a-z][a-z0-9_]*):([a-z][a-z0-9_]*)$/;
 function contractOptionRef(token2) {
   const match2 = CONTRACT_OPTION_REF.exec(token2);
@@ -30420,6 +30633,17 @@ function parseWholeExpression(expression, astFactory2) {
 function parseExpression(expression) {
   return parseWholeExpression(expression, astFactory);
 }
+function evaluateJsExpression(expression, data, additionalFunctions, defaultTimezone) {
+  const timezoneAwareFunctions = createTimezoneAwareFunctions(defaultTimezone);
+  const expr = parseWholeExpression(expression, astFactory);
+  const result = expr?.evaluate({
+    ...data,
+    ...timezoneAwareFunctions,
+    ...additionalFunctions
+  });
+  return result;
+}
+var EMPTINESS_PREDICATES = /* @__PURE__ */ new Set(["isEmpty", "isNull", "isNotNull"]);
 function createTimezoneAwareFunctions(defaultTimezone) {
   return {
     // Number functions
@@ -30870,6 +31094,27 @@ function resolvedFieldType(field, entity, entities, hops = 0) {
       return field.type;
   }
 }
+function holdsMoment(field, entity, entities, hops = 0) {
+  if (hops >= RESULT_HOPS) return false;
+  switch (field.type) {
+    case "date":
+      return field.format === "datetime";
+    case "formula":
+      return field.formula.output_type === "datetime";
+    case "lookup": {
+      const target = linkTarget(entity, entities, field.source_field_alias);
+      const shown = target?.fields.find((candidate) => candidate.alias === field.lookup_field_alias);
+      return target !== void 0 && shown !== void 0 && holdsMoment(shown, target, entities, hops + 1);
+    }
+    case "rollup": {
+      const target = linkTarget(entity, entities, field.source_field_alias);
+      const aggregated = target?.fields.find((candidate) => candidate.alias === field.aggregate_option.field_key);
+      return target !== void 0 && aggregated !== void 0 && holdsMoment(aggregated, target, entities, hops + 1);
+    }
+    default:
+      return false;
+  }
+}
 var PLURAL_VOCABULARY = { unit: "units", currency: "currencies" };
 function contractRollupSelect(entity, link, child, select) {
   const lookup = child.fields.find((field) => field.alias === select);
@@ -32005,7 +32250,7 @@ var MODEL_RULES = {
     sentence: "A label is unique where apply finds it by label: entities, roles and templates in the model, fields and views in their entity, options in their select \u2014 and no view takes its entity's own label, which names the whole-table grid apply makes."
   },
   "model.template-sha": { sentence: "A template's `content_sha256`, where stated, is the 64-character lowercase hex sha256 of its content." },
-  "model.template-kind": { sentence: "An act makes its document from an html template; a register's `export` fills an html or an excel one." },
+  "model.template-kind": { sentence: "An act's paper and a register's `export` are made from an html or an excel template, never an email one." },
   "register.export-report": {
     sentence: "A register's reports each have their own label; `per` picks one option, person or one-link row \u2014 never of the status, the folder or a field its `where` fixes."
   },
@@ -32070,6 +32315,9 @@ var MODEL_RULES = {
   "records.milestones": { sentence: "Milestones are dates a person ticks, each named once; `closed` names some of them, and a deadline (`due`) is never one." },
   "records.milestone-add": { sentence: "An add asks the first milestone at most \u2014 each after it is ticked in order." },
   "records.figure": { sentence: "A figure is a number." },
+  "records.applies": {
+    sentence: "`applies` holds a field of the row other than its title to conditions of the same row \u2014 a yes/no (stored or a formula) by `true` or `false`, a single select by its options, its own or looked up through a one-row link \u2014 never to itself; a required field it holds starts at a `default`."
+  },
   "records.limits": {
     sentence: "`limits` bounds a number by a number field of the row, in its unit or one of the same dimension \u2014 or by a constant, where every row reads the figure in one unit."
   },
@@ -32094,6 +32342,7 @@ var MODEL_RULES = {
   "write.bound-per-row-unit": {
     sentence: "On a figure whose unit or currency is the row's own (`unit_field`, `currency_field`) a constant bound is only 0 \u2014 bound it by a field of the row."
   },
+  "write.suggest": { sentence: "`suggest` stands on a stored text field and names `<entity>.<field>`, a stored text field of a declared entity; the app reads that entity, so it has a `records` entry." },
   "write.same": { sentence: "`same` stands on a link and names one-row links this entity and the link's target both hold to one entity." },
   "write.options-where": {
     sentence: "`options_where` narrows a link by an `and` group of plain conditions over the target's own fields \u2014 a number compared in one unit on every row, a select by options it declares."
@@ -32127,7 +32376,7 @@ var MODEL_RULES = {
   },
   "app.row": { sentence: "An app's `row` states only what differs from `records`: a line that is not the title, a number for its figure, a files picture no act makes documents into." },
   "app.files-shown": {
-    sentence: "Every files field is drawn by some app over its entity \u2014 a section's `fields`, a `files` block, a column, the `image`, or where an act making papers into it stands: the field an act keeps its document in (`into`) is placed where the paper reads."
+    sentence: "Every files field is drawn by some app over its entity \u2014 a section's `fields`, a `files` block, a column, the `image`, or where an act making its papers into it (`into`) stands, a section naming the act: the made paper reads under the act, one per template."
   },
   "app.document-image": { sentence: "A linked entity holding one files field and no `image`: `image` lets a link preview its paper.", note: true },
   "app.tasks": {
@@ -32155,7 +32404,7 @@ var MODEL_RULES = {
     sentence: "A register's `tabs` each name a tab of their own, never a key a report already holds; a tab's `in` and `open` dates are dates of its rows, `open`'s two different; its `where` and `sort` hold as the register's do, and never narrow by the status, which its chips split. Only a table or cards reads tabs, and a band reading's `tab` names one of them."
   },
   "register.group": {
-    sentence: "`group` names one value per row \u2014 a single select, a one-row link, one member, a date, a yes/no or a text, a lookup through one-row links as the field it reads \u2014 never the status (its chips); only a table groups, and grouping by the title needs a subtitle to lead each row."
+    sentence: "`group` names one value per row \u2014 a single select, a one-row link, one member, a date, a yes/no or a text, a lookup through one-row links as the field it reads \u2014 never the status (its chips); only a table groups, and a gantt into its lanes; grouping by the title needs a subtitle to lead each row."
   },
   "register.readings-own": { sentence: "A register's `readings` read its own entity; another entity's stand on a dashboard." },
   "register.readings-restate": {
@@ -32168,6 +32417,9 @@ var MODEL_RULES = {
     sentence: '`layout: "roster"` and `roster` go together: the roster\'s entity has one single link to this one and a date on its line, a roster draws no `columns`, `expect` needs `roster` and `of` needs `expect`.'
   },
   "register.roster-expect": { sentence: "A roster's `expect` is a single select of its rows, and `of` this entity's multi-select whose every option is one of `expect`'s." },
+  "register.gantt": {
+    sentence: '`layout: "gantt"` and `gantt` go together: `start` and `end` (absent, the entity\'s first `due`) are two different dates of the row, both days or both moments; each milestone another date of it, each planned date read as `start` is, `progress` a percent and `after` a link to rows of the same entity.'
+  },
   "register.lanes": {
     sentence: '`layout: "lanes"` and `lanes` go together: `lanes` is a one-row link to an entity with a `records` entry, the rows name a date on their line, a block\'s two ends are read alike (two days or two moments), and `loads` needs `lanes`.'
   },
@@ -32199,8 +32451,12 @@ var MODEL_RULES = {
   "record.section-holds": { sentence: "A section holds fields, blocks or acts." },
   "record.at": { sentence: "`at` names options of the record's stored status, or its milestones; a record with no status has no steps." },
   "record.page": {
-    sentence: "A section is a `page` only on a page door and never a step (`at`), its title naming an address no other page shares (a letter or a digit at least), and never every section."
+    sentence: "A section is a `page` only on a page door \u2014 never a drawer's or one beside the list \u2014 and never a step (`at`), its title naming an address no other page shares (a letter or a digit at least), and never every section."
+  },
+  "record.side": {
+    sentence: "At most one section stands beside the rest (`side`), on a page door, and never also a page of its own."
   },
+  "record.beside": { sentence: 'A `door: "beside"` record opens beside a table register \u2014 never a board, cards or a calendar, which draw no list to stand beside.' },
   "record.history": { sentence: "`record.history` draws a status history the entity records (`status.history`); no block reads that history." },
   "record.section-acts": {
     sentence: "A section's `acts` name acts of the record itself: an act of a child (`of`) stands on the child's row, and one over the register's rows (`on`) on the register."
@@ -32228,6 +32484,18 @@ var MODEL_RULES = {
     sentence: "`under` names the child's one-row link to a document entity that pairs a many-link back and is read under this record by its one link; the lines' columns never read the document (its heading does) nor hold long text."
   },
   "block.under-once": { sentence: "Documents drawn over their lines (`under`) are never listed again as a block of their own." },
+  "block.edits": {
+    sentence: "A rows block's `edits` name at most two of the child's columns or its figure that the row's own save writes \u2014 a number, a date, a few words or one option \u2014 never on an `expect` block, whose lines are filled in place already."
+  },
+  "register.remove": {
+    sentence: "A register's `remove: false` hides the Delete its records would offer, so it stands only where the app writes its records."
+  },
+  "block.remove": {
+    sentence: "A rows block's `remove: false` hides the Delete its rows would offer, so it stands only where the app writes those rows."
+  },
+  "block.narrow": {
+    sentence: "A rows block's `filters`, `search`, `group` and `sort` follow the register's rules over the child's rows, its status among them but on a task list (its chips); never on the link back to the record or a select its `where` holds at one option, never on an `expect` block, and an `under` block is grouped by its documents."
+  },
   "block.expect": {
     sentence: "`expect` names the child's title \u2014 a single select or a one-row link a person writes, never the link back \u2014 on a child added in the block; the block's `columns` name at least one field a person fills in place, and its `create` takes the file where the child is pictured by one."
   },
@@ -32244,7 +32512,12 @@ var MODEL_RULES = {
   "block.agenda-note": { sentence: "Rows each on a day and within it (at an hour, in a part of the day) listed as a table: an `agenda` draws them by day.", note: true },
   "block.under-note": { sentence: "Rows holding a paper that cover another block's lines, listed apart with no add of their own stated: `under` draws them over the lines they cover.", note: true },
   // ─── Acts ────────────────────────────────────────────────────────────────────
-  "act.set-not-asked": { sentence: "A field an act `set`s is the act's to write: read-only everywhere else and never asked by an add (`create`) \u2014 a required one takes a `default`." },
+  "act.set-not-asked": {
+    sentence: "A field an act `set`s \u2014 an option, a value, `now`, `me`, an input \u2014 is the act's outcome: read-only everywhere else and never asked by an add (`create`); a required one takes a `default`. A field an act computes by a `formula` is a starting value, which a person may change after."
+  },
+  "act.set-formula": {
+    sentence: "`set: { <field>: { formula } }` reads fields of the acted row and computes what the field holds \u2014 a number, a date, text or a yes/no, typed as the entity's own formulas are \u2014 never the status or a milestone; a bound a write rule holds the field to is checked on the computed value as the act runs."
+  },
   "act.of": {
     sentence: 'An act\'s `of` names a child the record lists in a rows block; it works on the one child row it is pressed on \u2014 or, `on: "rows"`, on the rows ticked together where the record lists that child as tasks \u2014 never on the rows in view.'
   },
@@ -32294,7 +32567,7 @@ var error51 = (rule, path15, message2) => ({ severity: "error", path: path15, me
 var note = (rule, path15, message2) => ({ severity: "note", path: path15, message: message2, rule });
 
 // ../shared/src/schemas/app_spec_version.ts
-var APP_SPEC_VERSION = 11;
+var APP_SPEC_VERSION = 12;
 
 // ../shared/src/schemas/app_query_aggregate.ts
 var AGGREGATE_MAX_BY = 3;
@@ -32392,6 +32665,9 @@ var specFieldSchema = zod_default.object({
    *  does: nothing accumulated yet is zero, which a meter draws — any other computed value holding nothing has no
    *  answer. */
   accumulates: zod_default.literal(true).optional(),
+  /** A formula in a fixed currency or unit that computes this figure of the same row again where the row's own
+   *  currency or unit (its `currency_field`, `unit_field`) is that one — a conversion: blank on such a row. */
+  restates: specColumnAliasSchema.optional(),
   /** What an add starts at where the model says it is certain: a date at today (a moment at now), a
    *  member at the reader adding the row. */
   starts: zod_default.enum(["today", "me"]).optional(),
@@ -32426,7 +32702,15 @@ var specFieldSchema = zod_default.object({
   /** The read a link's picker lists from, where the model narrows which rows it may point at; absent, the entity's `list`.
    *  `same`: the one-row links of this row whose row the picked one must name too, each handed to the read in
    *  its `param` — the picker offers nothing until the row names it. */
-  pick: specReadSchema.extend({ same: zod_default.array(zod_default.object({ field: specColumnAliasSchema, param: zod_default.string().min(1) }).strict()).min(1).optional() }).strict().optional()
+  pick: specReadSchema.extend({ same: zod_default.array(zod_default.object({ field: specColumnAliasSchema, param: zod_default.string().min(1) }).strict()).min(1).optional() }).strict().optional(),
+  /** A text field's control offers, as the reader types, the values this read answers — a group read, one row per
+   *  distinct value under `column` with `__count`, most held first, `param` taking what the reader typed. Any
+   *  text is still written. */
+  suggest: specReadSchema.extend({ param: zod_default.string().min(1), column: specColumnAliasSchema }).strict().optional(),
+  /** It applies only while each condition holds on its row — where it does not, no add asks it and no surface shows it.
+   *  Each names a column of the same row: a yes/no or single select, or a lookup of one through a one-row link
+   *  (`through`), whose value a form reads off the linked row once picked — the link's `face` carries it. */
+  applies: specWhenSchema.min(1).optional()
 }).strict();
 var specTaskMoveSchema = zod_default.object({ to: specOptionIdSchema, act: contractAliasSchema.optional() }).strict();
 var specTaskSchema = zod_default.object({
@@ -32597,6 +32881,21 @@ var specLanesSchema = zod_default.object({
    *  taking the folder as the register's list does; absent, every row the link may point at. */
   read: specReadSchema.extend({ param: zod_default.string().min(1) }).strict().optional()
 }).strict();
+var specGanttSchema = zod_default.object({
+  /** Where each bar starts and ends: two dates (an axis of days) or two datetimes (of moments). A bar moves, and its
+   *  end stretches, where `entities[entity].update` exists and that field is not `readonly` — the update writes it. */
+  start: specColumnAliasSchema,
+  end: specColumnAliasSchema,
+  /** Other dates of the row, each a diamond on its bar's line named by its label. */
+  milestones: zod_default.array(specColumnAliasSchema).min(1).optional(),
+  /** The plan the bar is read against, a thin bar under it; a date not named is the bar's own. */
+  planned: zod_default.object({ start: specColumnAliasSchema.optional(), end: specColumnAliasSchema.optional() }).strict().refine((planned) => planned.start !== void 0 || planned.end !== void 0, { error: "a gantt's plan names its start, its end, or both" }).optional(),
+  /** A percent column (0–100) filling the bar; absent, the bar wears the row's status tone. */
+  progress: specColumnAliasSchema.optional(),
+  /** A link column to rows of the register's own entity each row waits on, finish-to-start: an arrow from each in view. */
+  after: specColumnAliasSchema.optional()
+}).strict();
+var specFilterSchema = zod_default.union([specColumnAliasSchema, zod_default.object({ field: specColumnAliasSchema, tiers: zod_default.array(zod_default.number()).min(1) }).strict()]);
 var registerPeriodDaysSchema = zod_default.object({ days: zod_default.number().int().min(1).max(REGISTER_PERIOD_DAYS_MAX).describe(`How many days through today, at most ${REGISTER_PERIOD_DAYS_MAX}`) }).strict();
 var registerPeriodSchema = zod_default.union([zod_default.enum(REGISTER_PERIODS), registerPeriodDaysSchema]);
 var specSortSchema = zod_default.array(zod_default.object({ field: specColumnAliasSchema, desc: zod_default.literal(true).optional() }).strict()).min(1);
@@ -32612,9 +32911,7 @@ var specTabSchema = zod_default.object({
 }).strict();
 var specRegisterSchema = zod_default.object({
   columns: zod_default.array(specColumnAliasSchema),
-  /** Each a chip on the band: a column, or a number read in the bands its ascending `tiers` cut — under the first,
-   *  from each to the next, from the last up. */
-  filters: zod_default.array(zod_default.union([specColumnAliasSchema, zod_default.object({ field: specColumnAliasSchema, tiers: zod_default.array(zod_default.number()).min(1) }).strict()])),
+  filters: zod_default.array(specFilterSchema),
   /** The columns the search box matches, a link by its display — each line of a pasted list on its own. Absent, the list read's `search` param. */
   search: zod_default.array(specColumnAliasSchema).min(1).optional(),
   /** The keys rows open ordered by, most significant first, each breaking the ties of the ones before it. */
@@ -32625,17 +32922,22 @@ var specRegisterSchema = zod_default.object({
   tabs: zod_default.array(specTabSchema).min(2).optional(),
   /** The period the tabs open on; absent, this month so far. */
   period: registerPeriodSchema.optional(),
-  layout: zod_default.enum(["table", "cards", "calendar", "roster", "lanes"]),
+  layout: zod_default.enum(["table", "cards", "calendar", "roster", "lanes", "gantt"]),
   /** A `roster` layout's cells. */
   roster: specRosterSchema.optional(),
   /** A `lanes` layout's lanes and the dates its blocks run between. */
   lanes: specLanesSchema.optional(),
+  /** A `gantt` layout's bars. */
+  gantt: specGanttSchema.optional(),
   /** The rows this app works — its entity's `list` read keeps them on the server; an add writes a select holding
    *  one option and a stored yes/no here, and offers only these options of a select holding several. */
   where: specWhenSchema.optional(),
   /** The narrowing the register opens on while its address states none of it — each a chip the reader may take
    *  away; one on the status is the chips' opening choice, a member entry the rows the reader's. */
   opens: specNarrowingSchema.optional(),
+  /** The register's records offer no Delete — neither a row's ⋯ nor its record's — though `entities[entity].remove`
+   *  stands where another list of them in this app offers it. */
+  remove: zod_default.literal(false).optional(),
   /** What an add from the register asks; absent, rows are not added here. */
   create: zod_default.array(specColumnAliasSchema).min(1).optional(),
   /**
@@ -32670,6 +32972,9 @@ var specRegisterSchema = zod_default.object({
   if (ctx.value.layout === "lanes" !== (ctx.value.lanes !== void 0)) {
     ctx.issues.push({ code: "custom", input: ctx.value.lanes, path: ["lanes"], message: "a `lanes` layout and its `lanes` come together" });
   }
+  if (ctx.value.layout === "gantt" !== (ctx.value.gantt !== void 0)) {
+    ctx.issues.push({ code: "custom", input: ctx.value.gantt, path: ["gantt"], message: "a `gantt` layout and its `gantt` come together" });
+  }
 });
 var specTimelineBlockSchema = zod_default.object({
   kind: zod_default.literal("timeline"),
@@ -32715,6 +33020,21 @@ var specBlockSchema = zod_default.discriminatedUnion("kind", [
     /** The child's selects each row here holds one of these options of: its read keeps only them, and a
      *  row added here is written holding them. */
     where: zod_default.array(specOptionsHeldSchema).optional(),
+    /** The block's chips, as the register's `filters` — narrowing the rows its read keeps, as the register's do. */
+    filters: zod_default.array(specFilterSchema).min(1).optional(),
+    /** The columns the block's search box matches, as the register's `search`; absent, the block has no search box. */
+    search: zod_default.array(specColumnAliasSchema).min(1).optional(),
+    /** The column the rows open grouped by, as the register's `group`. */
+    group: specColumnAliasSchema.optional(),
+    /** The order the rows open in, as the register's `sort` — within each group; its read is ordered so. Absent, the
+     *  read's own order. */
+    sort: specSortSchema.optional(),
+    /** The columns each line holds as its control, written in place through the child's update; every other
+     *  value reads. */
+    edits: zod_default.array(specColumnAliasSchema).min(1).optional(),
+    /** Its rows offer no Delete here — neither in their ⋯ nor where they open; another list of them or their own
+     *  record deletes them. */
+    remove: zod_default.literal(false).optional(),
     /** The document the lines stand under, each a heading over the lines it covers. A document is made here
      *  where `entities[entity].create` is: the lines picked are sent as `back`'s pieces added, the record in
      *  `via`, and `where` as it states — its other fields are the form's. */
@@ -32786,10 +33106,13 @@ var specSectionSchema = zod_default.object({
   /** A page of its own at `/<record id>/<page>`, off the record's scroll: its own heading and a way back,
    *  reached from the rail after the scroll's sections, or from a link at its place where the record has no
    *  rail. Its title folded to an address segment, unique among the record's pages; only on a page door, never a step. */
-  page: zod_default.string().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/).optional()
+  page: zod_default.string().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/).optional(),
+  /** Drawn in the pane beside the other sections — what they are worked from; at most one, on a page door. */
+  side: zod_default.literal(true).optional()
 }).strict();
 var specRecordSchema = zod_default.object({
-  door: zod_default.enum(["page", "drawer"]),
+  /** `beside`: the register's list and the open record side by side — over a table register alone. */
+  door: zod_default.enum(["page", "drawer", "beside"]),
   sections: zod_default.array(specSectionSchema),
   /** The record's comment thread stands beside its sections. */
   comments: zod_default.literal(true).optional(),
@@ -32803,12 +33126,15 @@ var specRecordSchema = zod_default.object({
   if (history === true && moves === void 0) {
     ctx.issues.push({ code: "custom", input: history, path: ["history"], message: "draws a status history it does not read \u2014 `moves` is the read" });
   }
+  const sides = sections.flatMap((section, index) => section.side === true ? [index] : []);
+  if (sides.length > 0 && door !== "page") ctx.issues.push({ code: "custom", input: door, path: ["door"], message: "a record with a section beside the rest opens on a page" });
+  for (const index of sides.slice(1)) ctx.issues.push({ code: "custom", input: true, path: ["sections", index, "side"], message: "one section stands beside the rest" });
   const seen = /* @__PURE__ */ new Set();
   sections.forEach((section, index) => {
     const page = section.page;
     if (page === void 0) return;
     const refuse = (message2) => ctx.issues.push({ code: "custom", input: page, path: ["sections", index, "page"], message: message2 });
-    if (door === "drawer") refuse("a drawer has no pages");
+    if (door !== "page") refuse(`a ${door} door has no pages`);
     if (section.at !== void 0) refuse("a step is read on the record's path, never a page of its own");
     if (seen.has(page)) refuse(`two sections are the page "${page}"`);
     seen.add(page);
@@ -33004,6 +33330,14 @@ var recordDisplaySchema = zod_default.object({
   task: zod_default.literal(true).optional().describe(
     "A row is work someone finishes: wherever rows of it stand in a table \u2014 a register, a record's rows, the rows filed under one \u2014 each is led by a ring ticking it done and unticking it by the one write of the app making that move. Its status is a stored select with `closed`"
   ),
+  applies: zod_default.record(
+    fieldAlias,
+    conditionsHold(
+      "The conditions it applies under, every entry ANDed: a yes/no of the row (stored, or a formula) holding this value, or a single select holding one of these options \u2014 the row's own, or looked up through a one-row link of the row, decided once the link is picked"
+    )
+  ).optional().describe(
+    "Fields that apply only while their conditions hold (a length only on a line whose tariff charges by the metre): where one does not apply no add asks it and no surface shows it. Never the title; a required one starts at its `default`"
+  ),
   starts: zod_default.record(fieldAlias, zod_default.enum(["today", "me"])).optional().describe(
     "What a field of a row being added starts at, where that start is certain: `today` a date (a moment starts now), `me` a member, the reader adding it; every other field starts empty unless the reader narrowed the register to a value or the field declares a `default`"
   )
@@ -33078,6 +33412,8 @@ var tieredFilterSchema = zod_default.object({
     ctx.issues.push({ code: "custom", input: ctx.value, path: ["tiers"], message: "tiers ascend, each above the one before it" });
   }
 });
+var LINE_EDITS = 2;
+var lineFilters = (owner) => zod_default.array(zod_default.union([fieldAlias, tieredFilterSchema])).max(LINE_FILTERS, { error: `${owner} states at most ${LINE_FILTERS} filters \u2014 keep the ones narrowed by daily` });
 var sortKeySchema = zod_default.object({
   field: fieldAlias.describe("The field rows are ordered by"),
   desc: zod_default.literal(true).optional().describe("Latest or largest first; absent, soonest or smallest first")
@@ -33098,9 +33434,20 @@ var registerTabSchema = zod_default.object({
   where: narrowingHolds('Only the rows whose select holds one of these options, whose yes/no is this value, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed').optional(),
   sort: sortSchema.optional().describe("The order this tab's rows read in, as the register's `sort`; absent, the register's")
 }).strict().refine((tab) => tab.in === void 0 || tab.open === void 0, { error: "a tab holds the rows dated `in` the period or those `open` at its end \u2014 state one" });
+var registerGanttSchema = zod_default.object({
+  start: fieldAlias.describe("A date of this entity each row's bar starts at (a sailing, a hire's start, a task's start)"),
+  end: fieldAlias.optional().describe("The date each row's bar ends at, read as `start` is \u2014 two days or two moments; absent, the entity's first `due`"),
+  milestones: zod_default.array(fieldAlias).min(1).optional().describe("Dates of the row marked on its bar's line as diamonds, each named by its label (a cut-off, a delivery, the end of free time) \u2014 never `start` or `end`"),
+  planned: zod_default.object({
+    start: fieldAlias.optional().describe("The date the row was planned to start at"),
+    end: fieldAlias.optional().describe("The date the row was planned to end at (a booked arrival)")
+  }).strict().refine((planned) => planned.start !== void 0 || planned.end !== void 0, { error: "a plan names the date it was to start at, end at, or both" }).optional().describe("The plan each row is read against, drawn as a thin bar under its own \u2014 each date read as `start` is; a missing one is the bar's own"),
+  progress: fieldAlias.optional().describe("A percent of this entity (0\u2013100) filling each row's bar as far as the work is done; absent, the bar wears its status's tone"),
+  after: fieldAlias.optional().describe("A link of this entity to its own rows each row waits on \u2014 it starts once they end (finish-to-start), an arrow from each; a row starting before one ends is drawn in the danger tone")
+}).strict();
 var registerSchema = zod_default.object({
   columns: zod_default.array(fieldAlias).optional().describe("Fields read as columns after the row's title \u2014 on a calendar's entry or a lane's block, its facts after its title; never what the row draws itself (its subtitle, image, status, figure, or the bound its figure's meter reads against), which the runtime places"),
-  filters: zod_default.array(zod_default.union([fieldAlias, tieredFilterSchema])).max(LINE_FILTERS, { error: `a register states at most ${LINE_FILTERS} filters \u2014 keep the ones narrowed by daily` }).optional().describe(
+  filters: lineFilters("a register").optional().describe(
     `The fields the reader narrows the rows by every day, in that order \u2014 each earns its place by that daily use, so none to ${LINE_FILTERS} is normal and ${LINE_FILTERS} is a cap, never a quota (a select, a member, a link, a date, a yes/no, a number as a range, or its \`tiers\` where the business narrows by those bands daily) \u2014 each on a desk's line, in one Filters sheet on a phone. Never the status (its chips); each a field the rows show \u2014 a column, or a part of the row. A threshold the business names ("large orders") is a formula yes/no here; a column's header sorts by a day or an amount`
   ),
   search: zod_default.array(fieldAlias).min(1).optional().describe(
@@ -33118,9 +33465,10 @@ var registerSchema = zod_default.object({
   period: registerPeriodSchema.optional().describe(
     "With `tabs`: the period they open on \u2014 `today`, `week`, `month`, `quarter` or `year` so far, or `{ days }`, the last that many days through now (a night shift running past midnight reads two); absent, this month so far"
   ),
-  layout: zod_default.enum(["table", "cards", "calendar", "roster", "lanes"]).optional().describe(
-    "`cards` for rows read by their picture; `calendar` for rows read by their day \u2014 a month, a week, a day or a list, an entry at its hour where its date holds one and over its span where its line holds a second date; `roster` for what each row did on each day of a week or a month (who worked which shift, which vehicle ran), or with `expect` which of a set each row holds; `lanes` for rows booked on a resource over time (an appointment in its chair, a hire on its machine); absent, a table"
+  layout: zod_default.enum(["table", "cards", "calendar", "roster", "lanes", "gantt"]).optional().describe(
+    "`cards` for rows read by their picture; `calendar` for rows read by their day \u2014 a month, a week, a day or a list, an entry at its hour where its date holds one and over its span where its line holds a second date; `roster` for what each row did on each day of a week or a month (who worked which shift, which vehicle ran), or with `expect` which of a set each row holds; `lanes` for rows booked on a resource over time (an appointment in its chair, a hire on its machine); `gantt` for rows each planned over a run of days, one bar a row on one axis of time (a shipment from its sailing to its arrival, a hire from its start to its return, a task of a project) \u2014 its dates in `gantt`, its lanes the register's `group`; absent, a table"
   ),
+  gantt: registerGanttSchema.optional().describe('With `layout: "gantt"`: the dates and facts each row\'s bar is drawn from'),
   roster: alias.optional().describe(
     "With `layout: \"roster\"`: the entity whose rows fill the days \u2014 one single link to this entity, and a date on its row line (`records` title or subtitle). A cell reads its row's status, else the first single select on its line, several rows a mark each, the cell read by the one latest in that select's options; a row whose line holds a second date after the first fills every day to it; a day with none stays empty, never an absence"
   ),
@@ -33148,6 +33496,9 @@ var registerSchema = zod_default.object({
   opens: narrowingHolds(
     'The view the register opens on: each entry a narrowing on a field the rows show that stands as a chip the reader may take away (the rows still owed), `"me"` a member field holding the reader (the rows mine). One on the status replaces the chips\' opening on the open work'
   ).optional(),
+  remove: zod_default.literal(false).optional().describe(
+    "The app edits its records and offers no Delete on them (a row's \u22EF, its record's \u22EF) \u2014 a desk correcting a date of records another app makes and closes; absent, a record the app writes is deleted where it stands"
+  ),
   create: zod_default.union([zod_default.array(fieldAlias).min(1), zod_default.literal(false)]).optional().describe("The fields asked when a row is added; absent, the title, the subtitle and figure no default fills, the natural key and every required field \u2014 each a person writes; false, rows are not added here"),
   export: zod_default.union([
     zod_default.literal(true),
@@ -33194,7 +33545,9 @@ var blockSchema = zod_default.union([
     rows: alias.describe("A child entity whose rows belong to this record"),
     via: blockVia,
     title: blockTitle,
-    columns: zod_default.array(fieldAlias).optional().describe("The child's fields read as columns after its title \u2014 never what its row draws (subtitle, image, status, figure, or the bound its figure's meter reads against), though an `expect` block's figure is a column, filled in place"),
+    columns: zod_default.array(fieldAlias).optional().describe(
+      "The child's fields read as columns after its title \u2014 never what its row draws (subtitle, image, status, figure, or the bound its figure's meter reads against), though an `expect` block's figure is a column, filled in place."
+    ),
     create: blockCreateSchema("its title, its picture, the subtitle and figure no default fills, the block's columns, its natural key and every required field"),
     where: selectsHold(
       "Only the child rows whose single select holds one of these options \u2014 every entry ANDed, read so on the server; a row added here holds them (one leg's fees, of a record holding both legs'). Each select is one the child requires, so no row stands in no block"
@@ -33208,6 +33561,18 @@ var blockSchema = zod_default.union([
     under: fieldAlias.optional().describe(
       "The child's one-link to a document that covers its rows (an invoice over its fee lines), whose many-link points back and which links to this record: each document stands as a heading over the lines it covers; a filled line no document covers says so on its own row with a make for one document over it, and two or more waiting take a combined make in the block's heading. Never also a rows block of the document"
     ),
+    filters: lineFilters("a rows block").optional().describe(
+      `The child's fields the reader narrows the block's rows by, as a register's \`filters\` \u2014 none to ${LINE_FILTERS}, each a field its rows show (a column, or a part of the row), its status among them where the business narrows by it \u2014 never on a task list, whose status chips narrow it`
+    ),
+    search: zod_default.array(fieldAlias).min(1).optional().describe("The child's fields the block's search box matches (a link by its row's title), a pasted list line by line; absent, the block has no search box"),
+    group: fieldAlias.optional().describe("The child's field the block's rows open grouped by, as a register's `group` \u2014 the reader's grouping starting there; absent, ungrouped"),
+    sort: sortSchema.optional().describe("The order the block's rows open in, as a register's `sort` \u2014 within each group where the block groups them; absent, the child's first deadline soonest first, else the newest first"),
+    edits: zod_default.array(fieldAlias).min(1).max(LINE_EDITS, { error: `a line writes at most ${LINE_EDITS} fields in place \u2014 a line is read, not a form; the rest are written in the row it opens` }).optional().describe(
+      `The child's fields each line holds as its control, written where the line stands (a quote line's sell price) \u2014 a number, a date, words or one option the row's save writes, each a column or the figure, at most ${LINE_EDITS}; every other value reads, and the row opens to write it`
+    ),
+    remove: zod_default.literal(false).optional().describe(
+      "This list offers no Delete on its rows (its open row and \u22EF); they are deleted where another list of them or their own record offers it \u2014 e.g. lines that are a selection of rows kept elsewhere"
+    ),
     when: shownWhen.optional()
   }).strict(),
   zod_default.object({
@@ -33269,6 +33634,9 @@ var recordSectionSchema = zod_default.object({
     "Acts of this app drawn under the section's fields, their asks as more of them and what each lacks said above its button; the header draws no act, so every act of the record itself is named by one section \u2014 an act of a child (`of`) stands on the child's row and is never named here. An act moving the status, offered at ONE step (the stage its `when` holds), stands at that step's foot when it moves the work forward \u2014 to a later option, an exit too \u2014 or back to a step the work passes anyway; one offered at several steps, or moving back into a detour, stands in the section it enters, which draws it while the work waits \u2014 an exit's in the header's \u22EF, since an exit stands only once the record is in it. A correction \u2014 `danger` and not one of its step's outcomes (no other status move offered at the same moment) \u2014 waits in the section heading's \u22EF, and one no section names in the header's \u22EF; every other act is named by a section"
   ),
   when: shownWhen.optional(),
+  side: zod_default.literal(true).optional().describe(
+    "The section the rest are worked from, drawn in a pane beside them rather than in their scroll \u2014 the photos looked at, the pool picked from, the paper typed off; at most one on a record, which opens on a page door. It holds what any section holds"
+  ),
   page: zod_default.literal(true).optional().describe(
     "A page of its own, off the record's scroll: its own heading and a way back, reached from the record's rail after the scroll's sections, or from a link at its place where the record has no rail \u2014 for what makes the record worse stacked in it: a long list of related rows, a workspace of its own. Only on a page door, never a step (`at`)"
   )
@@ -33276,8 +33644,8 @@ var recordSectionSchema = zod_default.object({
 var RETIRED_RECORD_KEYS = /* @__PURE__ */ new Set(["facts", "blocks"]);
 var recordSchema = zod_default.object(
   {
-    door: zod_default.enum(["page", "drawer"]).optional().describe(
-      "A page for work read at length; a drawer for rows worked one after another from the register. Either stacks its sections, and from three sections on navigates them \u2014 a page by a rail, a drawer by tabs; absent, a page where a section has `at` or is a `page` or the record has more than three sections, else a drawer"
+    door: zod_default.enum(["page", "drawer", "beside"]).optional().describe(
+      "A page for work read at length; a drawer for rows worked one after another from the register; `beside` for rows worked one after another while the list stays in view \u2014 the register's list and the open record side by side, over a table register alone. Each stacks its sections, and from three sections on navigates them \u2014 a page by a rail, a drawer by tabs; absent, a page where a section has `at` or is a `page`, the record has more than three sections or one stands beside the rest (`side`), else a drawer"
     ),
     sections: zod_default.array(recordSectionSchema).min(1).optional().describe(
       "The record in the order its work reaches it \u2014 each section its fields, then its blocks, then its acts. Absent, one section of every field a person writes that no other place shows"
@@ -33306,7 +33674,7 @@ var actInputSchema = zod_default.object({
   default: fieldAlias.optional().describe("A field of the row whose value the input starts from, still changed at will")
 }).strict();
 var actTemplateSchema = zod_default.object({
-  template: alias.describe("A document template the act makes a paper of, kept in `into`"),
+  template: alias.describe("A document template the act makes a paper of, kept in `into` \u2014 an html one made a PDF, an excel one a workbook"),
   when: conditionsHold(
     "The paper starts ticked while each named select of the record holds one of these options and each named yes/no (stored, or a formula \u2014 how a multi-select is tested: `includes({needs}, {needs:x})`) is this value \u2014 a suggestion the reader changes, never a refusal; absent, it starts ticked"
   ).optional()
@@ -33320,14 +33688,15 @@ var actRecordSchema = zod_default.object({
   by: fieldAlias.optional().describe("The child's member field set to the person who recorded")
 }).strict();
 var FILL_REF = /^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)?$/;
+var setFormulaSchema = zod_default.object({ formula: zod_default.string().min(1).describe("A formula over the acted row's fields, `{alias}` each, read as the entity's own formulas read them") }).strict();
 var actSchema = zod_default.object({
   alias: alias.describe("The act's name within its app \u2014 its workflow is `act_<alias>`"),
   label: zod_default.string().min(1).describe("The verb, as the reader says it"),
   on: zod_default.enum(["record", "rows", "view"]).optional().describe(
-    "`rows` runs on the rows ticked in the register \u2014 with `of`, on the child rows ticked in the record's task list; `view` on every row the register shows (offered while the view is narrowed to its `when`; it states no `requires`); absent, on one record (its page and its row's menu)"
+    "`rows` runs on the rows ticked in the register \u2014 with `of`, on the child rows ticked together in a rows block of the record; `view` on every row the register shows (offered while the view is narrowed to its `when`; it states no `requires`); absent, on one record (its page and its row's menu)"
   ),
   of: alias.optional().describe(
-    "A rows block's child entity the act works on: offered on each child row \u2014 or, `on: \"rows\"`, on the rows ticked together in a task list \u2014 its conditions and its write that row's"
+    "A rows block's child entity the act works on: offered on each child row \u2014 or, `on: \"rows\"`, on the rows ticked together in the block \u2014 its conditions and its write that row's"
   ),
   when: conditionsHold(
     "The act works only while each named select holds one of these options, and each named yes/no (stored, or a formula) is this value"
@@ -33335,13 +33704,26 @@ var actSchema = zod_default.object({
   requires: zod_default.array(fieldAlias).min(1).optional().describe("Fields that must be filled first, each drawn where the act stands (its section's fields, a block's, or the act's asks \u2014 never the header alone); a blocked act names each one missing"),
   recommends: zod_default.array(fieldAlias).min(1).optional().describe("Fields the act runs without and reads when filled: while one is empty, the act says what it will leave blank"),
   asks: zod_default.array(zod_default.union([fieldAlias, actInputSchema])).min(1).optional().describe("What the reader states when pressing it \u2014 fields of the record (written by the act) or inputs"),
-  set: zod_default.record(fieldAlias, zod_default.union([zod_default.string(), zod_default.number(), zod_default.boolean(), zod_default.null()])).optional().describe('What the act writes: an option alias, a value, `"now"`, `"me"` or `"input:<name>"`'),
+  set: zod_default.record(
+    fieldAlias,
+    zod_default.union([
+      zod_default.string(),
+      zod_default.number(),
+      zod_default.boolean(),
+      zod_default.null(),
+      setFormulaSchema
+    ])
+  ).optional().describe(
+    'What the act writes: an option alias, a value, `"now"`, `"me"` or `"input:<name>"` \u2014 each the act\'s outcome, read-only elsewhere; or `{ "formula": \u2026 }`, computed over each acted row as it stands when the act runs and written then (a sell price at cost and markup): a starting value, which a person may change after and the act never recomputes'
+  ),
   workflow: alias.optional().describe("An authored workflow (src/workflows/<alias>.ts) the act runs after its checks, for what `set` cannot say"),
-  template: alias.optional().describe("A document template the act makes a file from \u2014 over several rows, one file of them all, the rows listed under the entity's alias"),
+  template: alias.optional().describe(
+    "A document template the act makes a file from \u2014 an html one made a PDF, an excel one a workbook; over several rows, one file of them all, the rows listed under the entity's alias"
+  ),
   templates: zod_default.array(actTemplateSchema).min(2).optional().describe(
     "Several papers the act makes into `into` (a case's forms), instead of one `template`: drawn where the act stands as a list of its papers \u2014 each made one as its file, each not yet made as a placeholder naming it \u2014 the reader ticks which to make, and one press makes those, each replacing the paper its template made before"
   ),
-  into: fieldAlias.optional().describe("The files field of the one record the made document is kept in"),
+  into: fieldAlias.optional().describe("The files field of the one record the made document is kept in \u2014 remade, it replaces the paper its template made before, never a file a person put there"),
   intake: alias.optional().describe(
     "A child the record lists in a rows block whose rows are its papers: the press takes papers, an agent reads them, and each is filed as a row of this child \u2014 its kind the child's title, its file in the child's files field"
   ),
@@ -34071,6 +34453,26 @@ function readField(model, entity, field, hops = 0) {
   if (inner === void 0 || link?.type !== "select_record_link") return void 0;
   return { ...inner, several: inner.several || link.cardinality !== "one" };
 }
+function appliesKind(model, entity, field) {
+  if (isSingleSelect(field)) return "select";
+  return field.type === "boolean" || field.type === "formula" && resolvedFieldType(field, entity, model.entities) === "boolean" ? "yes/no" : void 0;
+}
+function appliesCondition(model, entity, alias2) {
+  const field = fieldOf(entity, alias2);
+  if (field === void 0) return { refused: `names "${alias2}", which is not a field of "${entity.alias}"` };
+  if (field.type !== "lookup") {
+    const kind2 = appliesKind(model, entity, field);
+    return kind2 === void 0 ? { refused: `"${alias2}" is a ${field.type} field \u2014 a field applies by a yes/no or a single select` } : { kind: kind2, field };
+  }
+  const link = fieldOf(entity, field.source_field_alias);
+  const target = link?.type === "select_record_link" && link.cardinality === "one" ? entityOf(model, link.target_entity) : void 0;
+  const read = target === void 0 ? void 0 : fieldOf(target, field.lookup_field_alias);
+  const kind = target === void 0 || read === void 0 ? void 0 : appliesKind(model, target, read);
+  if (target === void 0 || read === void 0 || kind === void 0) {
+    return { refused: `"${alias2}" looks up no yes/no or single select through a one-row link \u2014 a field applies by one of the row's own, or one looked up through a link naming one row` };
+  }
+  return { kind, field: read, through: { link: field.source_field_alias, entity: target.alias, field: read.alias } };
+}
 function linkedEntity(model, entity, field) {
   const read = readField(model, entity, field);
   return read?.field.type === "select_record_link" ? read.field.target_entity : void 0;
@@ -34139,8 +34541,8 @@ function isTaskEntity(model, entity) {
 function isTaskBlock(model, block) {
   return isRowsBlock(block) && block.expect === void 0 && block.under === void 0 && isTaskEntity(model, block.rows);
 }
-function listsTasks(model, app, child) {
-  return recordBlocks(app.record).some((block) => isTaskBlock(model, block) && block.rows === child);
+function listsRows(app, child) {
+  return recordBlocks(app.record).some((block) => isRowsBlock(block) && block.expect === void 0 && block.rows === child);
 }
 function actEntity(app, act) {
   return act.of ?? app.entity;
@@ -34195,11 +34597,14 @@ function actStamps(model, entity) {
   for (const app of registerApps(model)) {
     for (const [act, one] of (app.acts ?? []).entries()) {
       if (actEntity(app, one) !== entity) continue;
-      for (const name of Object.keys(one.set ?? {})) if (!stamps.has(name)) stamps.set(name, { app: app.alias, act });
+      for (const [name, value] of Object.entries(one.set ?? {})) if (!isSetFormula(value) && !stamps.has(name)) stamps.set(name, { app: app.alias, act });
     }
   }
   return stamps;
 }
+function isSetFormula(value) {
+  return value !== null && typeof value === "object";
+}
 function actSetFields(model, entity) {
   return new Set(actStamps(model, entity).keys());
 }
@@ -34218,7 +34623,7 @@ function unfillable(model, entity, field) {
   if (actOwnedFields(model, entity.alias).has(field.alias)) return "written by an act, the one way it changes";
   return void 0;
 }
-function blockTotals(model, parent, child, via, columns, where) {
+function blockTotals(model, parent, child, via, columns, where, blocks) {
   const record2 = entityOf(model, parent);
   if (record2 === void 0) return /* @__PURE__ */ new Map();
   const figure = recordDisplay(model, child)?.figure;
@@ -34232,7 +34637,8 @@ function blockTotals(model, parent, child, via, columns, where) {
         (field) => field.type === "rollup" && links.has(field.source_field_alias) && field.aggregate_option.operation === "sum" && field.aggregate_option.field_key === column ? [field] : []
       );
       const narrowedAlike = sums.filter((sum2) => sameSelects(selectsOf(sum2.filter), where));
-      const candidates = where.length > 0 ? narrowedAlike : sums.length === 1 ? sums : narrowedAlike;
+      const homed = (sum2) => selectsOf(sum2.filter).length > 0 && blocks.some((other) => other.length > 0 && sameSelects(selectsOf(sum2.filter), other));
+      const candidates = where.length > 0 ? narrowedAlike : sums.length === 1 ? sums.filter((sum2) => !homed(sum2)) : narrowedAlike;
       const [only] = candidates;
       return candidates.length === 1 && only !== void 0 ? [[column, only.alias]] : [];
     })
@@ -34349,6 +34755,7 @@ function historyShape(model, parent) {
 }
 function actSetValue(field, value, inputs) {
   if (!isAsked(field)) return { refused: `writes "${field.alias}", a ${field.type} field no write can set` };
+  if (value !== null && typeof value === "object") return { kind: "formula", expression: value.formula };
   if (value === null) {
     return field.required === true ? { refused: `clears "${field.alias}", which is required` } : { kind: "clear" };
   }
@@ -34435,6 +34842,70 @@ function lineSpan(model, entity) {
   const [start, end] = typedLine(model, entity).filter((one) => one.type === "date");
   return { ...start === void 0 ? {} : { start: start.name }, ...end === void 0 ? {} : { end: end.name } };
 }
+function ganttShape(model, parent, gantt) {
+  const entity = entityOf(model, parent);
+  if (entity === void 0) return { refused: [{ at: "", reason: `reads "${parent}", which this model does not declare` }] };
+  const refused = [];
+  const refuse = (at2, reason) => {
+    refused.push({ at: at2, reason });
+  };
+  const dated = (name, at2, role) => {
+    const field = fieldOf(entity, name);
+    if (field === void 0) refuse(at2, `names "${name}", which is not a field of "${parent}"`);
+    else if (resolvedFieldType(field, entity, model.entities) !== "date") refuse(at2, `"${name}" is a ${field.type} field \u2014 ${role} is a date`);
+    else return field;
+    return void 0;
+  };
+  const moment = (field) => holdsMoment(field, entity, model.entities);
+  const alike = (field, against, at2, role) => {
+    if (field !== void 0 && against !== void 0 && moment(field) !== moment(against)) {
+      refuse(at2, `"${field.alias}" is ${moment(field) ? "a moment" : "a day"} and "${against.alias}" ${moment(against) ? "a moment" : "a day"} \u2014 ${role} is read as the bar's start is`);
+    }
+  };
+  const start = dated(gantt.start, "start", "a bar's start");
+  const due = model.records?.[parent]?.due?.[0];
+  const endName = gantt.end ?? due;
+  if (endName === void 0) refuse("end", `"${parent}" states no deadline (\`records.${parent}.due\`) \u2014 name the date each bar ends at in \`end\``);
+  const end = endName === void 0 ? void 0 : dated(endName, "end", "a bar's end");
+  if (endName !== void 0 && endName === gantt.start) refuse("end", `ends each bar at "${endName}", the date it starts at \u2014 a bar runs between two dates`);
+  else alike(end, start, "end", "its end");
+  const ends = /* @__PURE__ */ new Set([gantt.start, ...endName === void 0 ? [] : [endName]]);
+  const marked = /* @__PURE__ */ new Set();
+  for (const [index, name] of (gantt.milestones ?? []).entries()) {
+    const at2 = `milestones.${index}`;
+    if (ends.has(name)) refuse(at2, `"${name}" is the bar's own ${name === gantt.start ? "start" : "end"} \u2014 a milestone is another date on its line`);
+    else if (marked.has(name)) refuse(at2, `names "${name}" twice \u2014 a date is one diamond`);
+    else dated(name, at2, "a milestone");
+    marked.add(name);
+  }
+  for (const key of ["start", "end"]) {
+    const name = gantt.planned?.[key];
+    if (name === void 0) continue;
+    alike(dated(name, `planned.${key}`, `a planned ${key}`), start, `planned.${key}`, `a planned ${key}`);
+  }
+  if (gantt.progress !== void 0) {
+    const field = fieldOf(entity, gantt.progress);
+    if (field === void 0) refuse("progress", `names "${gantt.progress}", which is not a field of "${parent}"`);
+    else if (resolvedFieldType(field, entity, model.entities) !== "number" || contractNumberUnit(field, entity, model.entities).percent !== true) {
+      refuse("progress", `"${gantt.progress}" is ${field.type === "number" ? "a number that is no percent" : `a ${field.type} field`} \u2014 how far a row is done is a percent (0\u2013100)`);
+    }
+  }
+  if (gantt.after !== void 0) {
+    const field = fieldOf(entity, gantt.after);
+    if (field === void 0) refuse("after", `names "${gantt.after}", which is not a field of "${parent}"`);
+    else if (field.type !== "select_record_link") refuse("after", `"${gantt.after}" is a ${field.type} field \u2014 the rows a row waits on are a link to "${parent}" rows`);
+    else if (field.target_entity !== parent) refuse("after", `"${gantt.after}" links to "${field.target_entity}" \u2014 a row waits on rows of its own entity, "${parent}"`);
+  }
+  if (refused.length > 0 || endName === void 0) return { refused };
+  return {
+    start: gantt.start,
+    end: endName,
+    milestones: gantt.milestones ?? [],
+    ...gantt.planned === void 0 ? {} : { planned: { ...gantt.planned } },
+    ...gantt.progress === void 0 ? {} : { progress: gantt.progress },
+    ...gantt.after === void 0 ? {} : { after: gantt.after }
+  };
+}
 function rosterShape(model, parent, alias2, dated = true) {
   const child = entityOf(model, alias2);
   if (child === void 0) return { refused: `names "${alias2}", which this model does not declare` };
@@ -34639,19 +35110,18 @@ function checkNarrowing(entities, entity, narrowing, at2) {
   const conditions = Object.fromEntries(entries2.filter((entry) => entry[1] !== "me"));
   return [...mine, ...checkWhen(entities, entity, conditions, at2, "offer")];
 }
-var FILLS = { act: ["html"], export: ["html", "excel"] };
-function checkTemplate(model, template, path15, by) {
+var MADE_FROM = ["html", "excel"];
+function checkTemplate(model, template, path15) {
   if (model.templates === void 0) return [];
   const declared = model.templates.find((one) => one.alias === template);
   if (declared === void 0) return [error51("model.names-declared", path15, `names template "${template}", which this model does not declare`)];
-  if (!FILLS[by].includes(declared.type)) {
-    const fills = by === "act" ? "an act makes its document from an html one" : "an export fills an html or an excel one";
-    return [error51("model.template-kind", path15, `names the ${declared.type} template "${template}" \u2014 ${fills}`)];
+  if (!MADE_FROM.includes(declared.type)) {
+    return [error51("model.template-kind", path15, `names the ${declared.type} template "${template}" \u2014 a document is made from an html or an excel one`)];
   }
   return [];
 }
 function checkExportTemplate(model, entity, tabs, template, path15) {
-  const kind = checkTemplate(model, template, path15, "export");
+  const kind = checkTemplate(model, template, path15);
   if (kind.length > 0 || model.templates === void 0) return kind;
   const reports = APP_EXPORT_REPORT_KEYS;
   if (reports.includes(entity)) {
@@ -34870,6 +35340,28 @@ function checkAppRow(model, app, at2) {
   }
   return findings;
 }
+function checkApplies(model, entity, display, at2) {
+  return Object.entries(display.applies ?? {}).flatMap(([name, conditions]) => {
+    const path15 = `${at2}.applies.${name}`;
+    const applying = fieldOf(entity, name);
+    if (applying === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`)];
+    if (name === display.title) return [error51("records.applies", path15, `"${name}" is the row's title, which names it wherever it is drawn \u2014 it always applies`)];
+    const own = applying.required === true && !hasDefault(applying) ? [error51("records.applies", path15, `"${name}" is required and starts at no \`default\` \u2014 where it does not apply no add asks it, so a row could not be made; give it a default, or make it optional`)] : [];
+    const held = Object.entries(conditions).flatMap(([condition, value]) => {
+      const at3 = `${path15}.${condition}`;
+      if (condition === name) return [error51("records.applies", at3, `"${name}" applies by itself \u2014 a field applies by another of the row's`)];
+      const shape = appliesCondition(model, entity, condition);
+      if ("refused" in shape) return [error51(shape.refused.startsWith("names") ? "model.names-declared" : "records.applies", at3, shape.refused)];
+      if (typeof value === "boolean") {
+        return shape.kind === "yes/no" ? [] : [error51("records.applies", at3, `"${condition}" is a single select \u2014 it applies by its options, never \`${String(value)}\``)];
+      }
+      if (shape.kind !== "select" || shape.field.type !== "select") return [error51("records.applies", at3, `"${condition}" is a yes/no \u2014 it applies by \`true\` or \`false\``)];
+      const declared = new Set(shape.field.options.map((option) => option.alias));
+      return value.flatMap((option, index) => declared.has(option) ? [] : [error51("model.names-declared", `${at3}.${index}`, `names "${option}", which is not an option of "${shape.field.alias}"`)]);
+    });
+    return [...own, ...held];
+  });
+}
 function checkRecords(model) {
   const findings = [];
   for (const [alias2, display] of Object.entries(model.records ?? {})) {
@@ -34890,6 +35382,7 @@ function checkRecords(model) {
       findings.push(error51("records.title", `${at2}.title`, `"${title.alias}" is a code \u2014 a row is named by what it is (a name, a party); put the code in \`subtitle\``));
     }
     for (const [index, name] of (display.subtitle ?? []).entries()) field(name, `${at2}.subtitle.${index}`);
+    findings.push(...checkApplies(model, entity, display, at2));
     if (display.image !== void 0) {
       const image = field(display.image, `${at2}.image`);
       if (image !== void 0 && image.type !== "files") findings.push(error51("records.image", `${at2}.image`, `"${image.alias}" is a ${image.type} field \u2014 a row is pictured by a files field`));
@@ -35089,68 +35582,350 @@ function readingFields(reading) {
   }
 }
 
-// ../shared/src/schemas/app_model_plan.ts
-function recordHeaderFields(display) {
-  if (display === void 0) return [];
-  return [
-    display.title,
-    ...display.subtitle ?? [],
-    ...display.image === void 0 ? [] : [display.image],
-    ...display.status?.field === void 0 ? [] : [display.status.field],
-    ...(milestonesOf(display) ?? []).map((stage) => stage.field),
-    ...display.figure === void 0 ? [] : [display.figure],
-    ...display.description === void 0 ? [] : [display.description]
-  ];
-}
-function historyOf(model, parent) {
-  const shape = historyShape(model, parent);
-  return shape === void 0 || "refused" in shape ? void 0 : shape;
-}
-function defaultCreate(model, entity, excluded) {
-  return createAsking(model, entity, excluded, []);
+// ../shared/src/schemas/write_rules.ts
+var BOUND_REF = /^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)?$/;
+var BOUND_REF_MESSAGE = 'a bound is a number, "<field alias>" or "<link alias>.<field alias>"';
+var SUGGEST_REF = /^[a-z][a-z0-9_]*\.[a-z][a-z0-9_]*$/;
+function suggestRef(stated) {
+  const [entity = "", field = ""] = stated.split(".");
+  return { entity, field };
 }
-function defaultBlockCreate(model, child, excluded, columns) {
-  const image = model.records?.[child.alias]?.image;
-  return createAsking(model, child, excluded, [...image === void 0 ? [] : [image], ...columns]);
+var fieldWriteRuleSchema = zod_default.object({
+  default_from: zod_default.string().regex(/^[a-z][a-z0-9_]*\.[a-z][a-z0-9_]*$/, 'default_from is "<link alias>.<field alias>"').optional().describe(
+    "Copy this field's value from the linked row at CREATE time \u2014 `<link alias>.<field alias>`, the link being a one-row link on this entity, required or filled by the add (the record a row is added under). The value is copied rather than looked up, so the source changing later leaves the row alone."
+  ),
+  min: zod_default.union([zod_default.number(), zod_default.string().regex(BOUND_REF, BOUND_REF_MESSAGE)]).optional().describe(
+    "Refuse a create or update whose value is below this: a constant for a number, or a field \u2014 `<field alias>` of the same row, or `<link alias>.<field alias>` of the one row a link names \u2014 of the same type (a return date after the departure, a line's day inside its trip). On a figure whose unit or currency is per row (`unit_field`, `currency_field`) a constant bound is only 0; bound it by a field of the row"
+  ),
+  max: zod_default.union([zod_default.number(), zod_default.string().regex(BOUND_REF, BOUND_REF_MESSAGE)]).optional().describe("Refuse a create or update whose value is above this: a constant for a number, or a field of the same row or of the one row a link names"),
+  options_where: tableRecordFiltersSchema.optional().describe(
+    "Which rows of the target this link may point at \u2014 an `and` group of plain conditions over the TARGET entity's own fields, each `field_key` a field alias. It narrows the picker's read and is refused again where the write lands."
+  ),
+  same: zod_default.array(contractAliasSchema).min(1).optional().describe(
+    "One-row links this row and each row this link points at must name alike \u2014 a fee's invoice is one of its own visit's, a box's seal one of its own shipping line's: each a one-row link of both entities to the same entity. It narrows the picker's read to the rows naming what this row names, and a write is refused wherever it lands \u2014 on the link, or on what the two rows compare."
+  ),
+  suggest: zod_default.string().regex(SUGGEST_REF, 'suggest is "<entity alias>.<field alias>"').optional().describe(
+    "A text field whose control offers, as the reader types, the distinct values a text field of a catalog holds \u2014 `<entity alias>.<field alias>` (a damage position's code among the codes on file); any text is still written"
+  )
+}).strict();
+var entityWriteRulesSchema = zod_default.object({
+  natural_key: zod_default.array(contractAliasSchema).min(1).optional().describe(
+    "The field aliases a row of this entity is RECOGNISED by. A write that names a row of this entity by these values reuses the row it finds, minting one only where nothing matches."
+  ),
+  fields: zod_default.record(contractAliasSchema, fieldWriteRuleSchema).optional().describe("Field alias \u2192 what that field's value is copied from, bounded by or picked among"),
+  no_overlap: zod_default.object({
+    from: contractAliasSchema.describe("The stored date (or datetime) a row's span starts on"),
+    to: contractAliasSchema.describe(
+      "The stored date (or datetime) a row's span ends on \u2014 a day it holds, unless `records` names it the day the row `frees`; a moment another row may start at"
+    ),
+    by: zod_default.array(contractAliasSchema).min(1).optional().describe("Fields two rows share to compete for a span (the same employee, the same room); absent, every row"),
+    while: zod_default.record(contractAliasSchema, zod_default.array(contractAliasSchema).min(1)).optional().describe("Only rows at these options of these selects hold their span (running, not closed); absent, every row")
+  }).strict().optional().describe("No two rows hold overlapping spans \u2014 a create or update that would is refused")
+}).strict();
+var writeRulesSchema = zod_default.record(contractAliasSchema, entityWriteRulesSchema);
+function boundRef(bound) {
+  if (typeof bound !== "string") return void 0;
+  const [first2 = "", second] = bound.split(".");
+  return second === void 0 ? { field: first2 } : { link: first2, field: second };
 }
-function createAsking(model, entity, excluded, read) {
-  const display = recordDisplay(model, entity.alias);
-  const title = display?.title;
-  const later = new Set((milestonesOf(display) ?? []).slice(1).map((stage) => stage.field));
-  const rules = model.write_rules?.[entity.alias];
-  const copied = copiedOnCreate(model, entity, excluded);
-  const stamped = actSetFields(model, entity.alias);
-  const asked = (field) => field !== void 0 && isAsked(field) && !excluded.includes(field.alias) && !copied.has(field.alias) && !stamped.has(field.alias);
-  const withUnit = (alias2) => {
-    const field = fieldOf(entity, alias2);
-    const select = field === void 0 ? void 0 : contractFigureSelect(field, entity, model.entities);
-    const held = select === void 0 ? void 0 : fieldOf(entity, select.alias);
-    return asked(held) ? [alias2, held.alias] : [alias2];
-  };
-  const titleField = title === void 0 ? void 0 : fieldOf(entity, title);
-  const figure = display?.figure;
-  const bound = figure === void 0 ? void 0 : display?.limits?.[figure];
-  const undefaulted = (name) => {
-    const field = fieldOf(entity, name);
-    return field === void 0 || !hasDefault(field);
-  };
-  const line = (display?.subtitle ?? []).filter(undefaulted);
-  const measured = [...figure === void 0 ? [] : [figure], ...typeof bound === "string" ? [bound] : []].filter(undefaulted);
-  const shown = [...line, ...read, ...measured].filter((name) => !later.has(name)).map((name) => fieldOf(entity, name)).filter(asked);
-  const keyed = (rules?.natural_key ?? []).map((key) => fieldOf(entity, key)).filter(asked);
-  return unique2(
-    [
-      ...asked(titleField) ? [titleField.alias] : [],
-      ...shown.map((field) => field.alias),
-      ...keyed.map((field) => field.alias),
-      ...requiredOnCreate(model, entity, [...excluded, ...stamped])
-    ].flatMap(withUnit)
-  );
+var BOUNDED_TYPES = ["number", "date"];
+var NATURAL_KEY_TYPES = ["text", "number", "select_record_link"];
+var OPTIONS_WHERE_OPERATORS = {
+  number: ["equals", "not_equals", "greater_than", "less_than", "greater_than_or_equal_to", "less_than_or_equal_to"],
+  text: ["equals", "not_equals"],
+  boolean: ["equals"],
+  select: ["has_any_of", "has_none_of"]
+};
+function optionsWhereConditions(filter2, target) {
+  if (filter2.node_type !== "group" || filter2.logic !== "and") return void 0;
+  const out = [];
+  for (const child of filter2.children) {
+    if (child.node_type !== "condition") return void 0;
+    const field = target.fields.find((one) => one.alias === child.field_key);
+    if (field === void 0) return void 0;
+    const allowed = OPTIONS_WHERE_OPERATORS[child.type ?? ""];
+    if (allowed === void 0 || !allowed.includes(child.operator)) return void 0;
+    out.push({ type: child.type ?? "", field, operator: child.operator, value: child.value });
+  }
+  return out.length === 0 ? void 0 : out;
 }
-function ownAsks(app) {
-  return app.acts.flatMap((act) => act.of === void 0 ? act.asks.filter((ask) => typeof ask === "string") : []);
+function checkBoundRef(entity, field, ref, byAlias, path15) {
+  const entities = [...byAlias.values()];
+  let on = entity;
+  if ("link" in ref) {
+    const link = entity.fields.find((one) => one.alias === ref.link);
+    if (link === void 0 || link.type !== "select_record_link" || link.cardinality !== "one") {
+      return [error51("write.bounds", path15, `reads "${ref.link}", which is not a one-row link of ${entity.label} \u2014 a bound is read off this row or the one row a link names`)];
+    }
+    const target = byAlias.get(link.target_entity);
+    if (target === void 0) return [error51("model.names-declared", path15, `reads "${ref.link}", whose entity "${link.target_entity}" this model does not declare`)];
+    on = target;
+  }
+  const source = on.fields.find((one) => one.alias === ref.field);
+  if (source === void 0) return [error51("model.names-declared", path15, `names "${ref.field}", which is not a field of ${on.label}`)];
+  if (!("link" in ref) && source.alias === field.alias) return [error51("write.bounds", path15, `bounds ${field.label} by itself`)];
+  const from = resolvedFieldType(source, on, entities);
+  const into = resolvedFieldType(field, entity, entities);
+  if (from !== into) return [error51("write.bounds", path15, `bounds ${field.label} (${String(into)}) by "${source.label}" (${String(from)}) \u2014 a bound is of the value's own type`)];
+  const apart = boundUnitRefusal(field, source, entity, entities, "link" in ref ? { link: ref.link, on } : void 0);
+  return apart === void 0 ? [] : [error51("write.bounds", path15, apart)];
 }
-function appWritePlan(given, app) {
+function checkSame(entity, field, same, byAlias, path15) {
+  if (field.type !== "select_record_link") {
+    return [error51("write.same", path15, `${field.label} is a ${field.type} field \u2014 \`same\` narrows the rows a LINK points at`)];
+  }
+  const target = byAlias.get(field.target_entity);
+  if (target === void 0) return [];
+  const oneLink = (on, alias2) => on.fields.find((one) => one.alias === alias2 && one.type === "select_record_link" && one.cardinality === "one");
+  return same.flatMap((alias2, index) => {
+    const own = oneLink(entity, alias2);
+    const theirs = oneLink(target, alias2);
+    const at2 = `${path15}.${index}`;
+    if (own === void 0) return [error51("write.same", at2, `"${alias2}" is not a one-row link of ${entity.label}`)];
+    if (theirs === void 0) return [error51("write.same", at2, `"${alias2}" is not a one-row link of ${target.label} \u2014 the row ${field.label} points at names nothing to compare`)];
+    if (own.type !== "select_record_link" || theirs.type !== "select_record_link" || own.target_entity !== theirs.target_entity) {
+      return [error51("write.same", at2, `"${alias2}" names rows of different entities on ${entity.label} and ${target.label}`)];
+    }
+    return [];
+  });
+}
+function checkSuggest(entity, field, stated, byAlias, path15) {
+  if (field.type !== "text") return [error51("write.suggest", path15, `${field.label} is a ${field.type} field \u2014 \`suggest\` offers values to a text field a person types`)];
+  const ref = suggestRef(stated);
+  const catalog = byAlias.get(ref.entity);
+  if (catalog === void 0) return [error51("model.names-declared", path15, `names entity "${ref.entity}", which this model does not declare`)];
+  const source = catalog.fields.find((one) => one.alias === ref.field);
+  if (source === void 0) return [error51("model.names-declared", path15, `names "${ref.field}", which is not a field of ${catalog.label}`)];
+  if (source.type !== "text") return [error51("write.suggest", path15, `offers the values of "${source.label}", a ${source.type} field of ${catalog.label} \u2014 the values offered are a stored text field's`)];
+  return [];
+}
+function checkNoOverlap(entity, rule, at2) {
+  const findings = [];
+  const own = (name) => entity.fields.find((one) => one.alias === name);
+  for (const side of ["from", "to"]) {
+    const date5 = own(rule[side]);
+    if (date5?.type !== "date") findings.push(error51("write.no-overlap", `${at2}.${side}`, `"${rule[side]}" is not a date field of ${entity.label} \u2014 a span runs between two dates`));
+  }
+  for (const [index, name] of (rule.by ?? []).entries()) {
+    const by = own(name);
+    if (by === void 0 || !["select_record_link", "select_member", "select", "text", "number"].includes(by.type) || "multi" in by && by.multi === true) {
+      findings.push(error51("write.no-overlap", `${at2}.by.${index}`, `"${name}" is not one value rows can share \u2014 a link, a person, one option, a text or a number`));
+    }
+  }
+  for (const [name, options] of Object.entries(rule.while ?? {})) {
+    const select = own(name);
+    if (select?.type !== "select" || select.multi === true) {
+      findings.push(error51("write.no-overlap", `${at2}.while.${name}`, `"${name}" is not a single select of ${entity.label}`));
+      continue;
+    }
+    for (const option of options) {
+      if (!select.options.some((one) => one.alias === option)) findings.push(error51("model.names-declared", `${at2}.while.${name}`, `names option "${option}", which "${select.label}" does not declare`));
+    }
+  }
+  return findings;
+}
+function checkWriteRules(entities, rules) {
+  const findings = [];
+  const byAlias = new Map(entities.map((entity) => [entity.alias, entity]));
+  for (const [alias2, entry] of Object.entries(rules)) {
+    const at2 = `write_rules.${alias2}`;
+    const entity = byAlias.get(alias2);
+    if (entity === void 0) {
+      findings.push(error51("model.names-declared", at2, `names entity "${alias2}", which this model does not declare \u2014 write rules are keyed by entity alias (${byAlias.size > 0 ? [...byAlias.keys()].join(", ") : "this model declares none"})`));
+      continue;
+    }
+    const fieldByAlias = new Map(entity.fields.map((field) => [field.alias, field]));
+    if (entry.no_overlap !== void 0) findings.push(...checkNoOverlap(entity, entry.no_overlap, `${at2}.no_overlap`));
+    const keyed = new Set(entry.natural_key ?? []);
+    const uniqueAsSet = (entity.unique ?? []).some((set2) => set2.every((name) => keyed.has(name)));
+    for (const [index, key] of (entry.natural_key ?? []).entries()) {
+      const field = fieldByAlias.get(key);
+      if (field === void 0) {
+        findings.push(error51("model.names-declared", `${at2}.natural_key.${index}`, `names "${key}", which is not a field of ${entity.label}`));
+        continue;
+      }
+      if (!NATURAL_KEY_TYPES.includes(field.type)) {
+        findings.push(error51("write.natural-key", `${at2}.natural_key.${index}`, `${field.label} is a ${field.type} field \u2014 a row is recognised by a value a person types back or the one row it belongs with, so a natural key is text, a number or a one-row link`));
+        continue;
+      }
+      if (field.type === "select_record_link" && field.cardinality !== "one") {
+        findings.push(error51("write.natural-key", `${at2}.natural_key.${index}`, `${field.label} holds MANY rows \u2014 a row is recognised by the one row it belongs with, so a link in a natural key is of cardinality "one"`));
+        continue;
+      }
+      if (field.type === "text" && field.unique !== true && !uniqueAsSet) {
+        findings.push(error51("write.natural-key", `${at2}.natural_key.${index}`, `${field.label} recognises a row and nothing makes it unique \u2014 declare \`unique: true\` on it, or the key's fields as a set in the entity's \`unique\`; two rows sharing it would make find-or-create pick whichever the read answered first`));
+      }
+    }
+    for (const [fieldAlias2, rule] of Object.entries(entry.fields ?? {})) {
+      const path15 = `${at2}.fields.${fieldAlias2}`;
+      const field = fieldByAlias.get(fieldAlias2);
+      if (field === void 0) {
+        findings.push(error51("model.names-declared", path15, `names "${fieldAlias2}", which is not a field of ${entity.label}`));
+        continue;
+      }
+      if (rule.default_from !== void 0) {
+        findings.push(...checkDefaultFrom(entity, field, rule.default_from, byAlias, `${path15}.default_from`));
+      }
+      const bounded = resolvedFieldType(field, entity, entities);
+      if ((rule.min !== void 0 || rule.max !== void 0) && !BOUNDED_TYPES.includes(bounded ?? field.type)) {
+        findings.push(error51("write.bounds", path15, `${field.label} is a ${field.type} field \u2014 \`min\`/\`max\` bound a number or a date`));
+      }
+      for (const side of ["min", "max"]) {
+        const bound = rule[side];
+        if (typeof bound === "number" && bounded === "date") {
+          findings.push(error51("write.bounds", `${path15}.${side}`, `bounds the date ${field.label} by a number \u2014 a date is bounded by a date field`));
+        }
+        const perRow = typeof bound === "number" && bound !== 0 ? contractUnitSource(field, entity, entities) : void 0;
+        if (perRow !== void 0) {
+          findings.push(error51("write.bound-per-row-unit", `${path15}.${side}`, `bounds ${field.label} by ${String(bound)}, which is in no ${perRow.vocabulary}, and each row reads it in the ${perRow.vocabulary} its ${unitSourceName(perRow)} holds \u2014 only 0 is the same in every ${perRow.vocabulary}`));
+        }
+        const ref = boundRef(bound);
+        if (ref !== void 0) findings.push(...checkBoundRef(entity, field, ref, byAlias, `${path15}.${side}`));
+      }
+      if (typeof rule.min === "number" && typeof rule.max === "number" && rule.min > rule.max) {
+        findings.push(error51("write.bounds", `${path15}.min`, `is above \`max\` (${rule.min} > ${rule.max}) \u2014 the bound refuses every figure`));
+      }
+      if (rule.same !== void 0) findings.push(...checkSame(entity, field, rule.same, byAlias, `${path15}.same`));
+      if (rule.suggest !== void 0) findings.push(...checkSuggest(entity, field, rule.suggest, byAlias, `${path15}.suggest`));
+      if (rule.options_where === void 0) continue;
+      if (field.type !== "select_record_link") {
+        findings.push(error51("write.options-where", `${path15}.options_where`, `${field.label} is a ${field.type} field \u2014 \`options_where\` narrows the rows a LINK may point at`));
+        continue;
+      }
+      const target = byAlias.get(field.target_entity);
+      if (target === void 0) continue;
+      const conditions = optionsWhereConditions(rule.options_where, target);
+      if (conditions === void 0) {
+        findings.push(error51("write.options-where", `${path15}.options_where`, `is not a narrowing this clause can both filter a picker by and refuse a write with: an \`and\` group of plain conditions over ${target.label}'s own fields, each \`field_key\` a field alias and each operator one of ${Object.entries(OPTIONS_WHERE_OPERATORS).map(([type, ops]) => `${type} ${ops.join("/")}`).join("; ")}`));
+        continue;
+      }
+      for (const condition of conditions) {
+        const at3 = `${path15}.options_where`;
+        const perRow = condition.type === "number" ? contractUnitSource(condition.field, target, entities) : void 0;
+        if (perRow !== void 0) {
+          findings.push(error51("write.options-where", at3, `compares "${condition.field.label}", which each row reads in the ${perRow.vocabulary} its ${unitSourceName(perRow)} holds, with a bare number \u2014 a narrowing compares a figure read in one ${perRow.vocabulary} for every row`));
+        }
+        if (condition.type !== "select") continue;
+        if (condition.field.type !== "select") {
+          findings.push(error51("write.options-where", at3, `compares "${condition.field.label}" as a select \u2014 it is a ${condition.field.type} field`));
+          continue;
+        }
+        if (!Array.isArray(condition.value)) {
+          findings.push(error51("write.options-where", at3, `narrows "${condition.field.label}" by no option at all \u2014 a select narrowing names the options it admits`));
+          continue;
+        }
+        const declared = new Set(condition.field.options.map((option) => option.alias));
+        for (const named of condition.value) {
+          if (typeof named === "string" && declared.has(named)) continue;
+          findings.push(error51("model.names-declared", at3, `names option "${String(named)}", which "${condition.field.label}" does not declare (${[...declared].join(", ")})`));
+        }
+      }
+    }
+  }
+  return findings;
+}
+function checkDefaultFrom(entity, field, stated, byAlias, path15) {
+  const entities = [...byAlias.values()];
+  const [linkAlias, sourceAlias] = stated.split(".");
+  const link = entity.fields.find((one) => one.alias === linkAlias);
+  if (link === void 0 || link.type !== "select_record_link") {
+    return [
+      error51("write.default-from", path15, `names "${linkAlias}", which is not a link field of ${entity.label} \u2014 a default is copied from a row this one points at`)
+    ];
+  }
+  if (link.cardinality !== "one") {
+    return [
+      error51("write.default-from", path15, `reads "${link.label}", which holds MANY rows \u2014 a default copied from a list would take whichever row came back first`)
+    ];
+  }
+  const target = byAlias.get(link.target_entity);
+  const source = target?.fields.find((one) => one.alias === sourceAlias);
+  if (target === void 0 || source === void 0) {
+    return [
+      error51("model.names-declared", path15, `names "${sourceAlias}", which is not a field of entity "${link.target_entity}"`)
+    ];
+  }
+  const from = resolvedFieldType(source, target, entities);
+  const into = resolvedFieldType(field, entity, entities);
+  if (from !== into) {
+    return [
+      error51("write.default-from", path15, `copies ${target.label}'s "${source.label}" (${String(from)}) into a ${String(into)} field`)
+    ];
+  }
+  if (source.type !== "select" || field.type !== "select") return [];
+  const findings = [];
+  if (source.multi === true && field.multi !== true) {
+    findings.push(error51("write.default-from", path15, `copies ${target.label}'s "${source.label}", which holds several options, into ${field.label}, which holds one \u2014 a copy would keep whichever came first`));
+  }
+  const missing = source.options.filter((option) => !field.options.some((one) => one.alias === option.alias));
+  if (missing.length > 0) {
+    findings.push(error51("write.default-from", path15, `copies ${target.label}'s "${source.label}" into ${field.label}, which declares no option ${missing.map((option) => `"${option.alias}"`).join(", ")} \u2014 a copied option is written as the one of the same alias`));
+  }
+  return findings;
+}
+
+// ../shared/src/schemas/app_model_plan.ts
+function recordHeaderFields(display) {
+  if (display === void 0) return [];
+  return [
+    display.title,
+    ...display.subtitle ?? [],
+    ...display.image === void 0 ? [] : [display.image],
+    ...display.status?.field === void 0 ? [] : [display.status.field],
+    ...(milestonesOf(display) ?? []).map((stage) => stage.field),
+    ...display.figure === void 0 ? [] : [display.figure],
+    ...display.description === void 0 ? [] : [display.description]
+  ];
+}
+function historyOf(model, parent) {
+  const shape = historyShape(model, parent);
+  return shape === void 0 || "refused" in shape ? void 0 : shape;
+}
+function defaultCreate(model, entity, excluded) {
+  return createAsking(model, entity, excluded, []);
+}
+function defaultBlockCreate(model, child, excluded, columns) {
+  const image = model.records?.[child.alias]?.image;
+  return createAsking(model, child, excluded, [...image === void 0 ? [] : [image], ...columns]);
+}
+function createAsking(model, entity, excluded, read) {
+  const display = recordDisplay(model, entity.alias);
+  const title = display?.title;
+  const later = new Set((milestonesOf(display) ?? []).slice(1).map((stage) => stage.field));
+  const rules = model.write_rules?.[entity.alias];
+  const copied = copiedOnCreate(model, entity, excluded);
+  const stamped = actSetFields(model, entity.alias);
+  const asked = (field) => field !== void 0 && isAsked(field) && !excluded.includes(field.alias) && !copied.has(field.alias) && !stamped.has(field.alias);
+  const withUnit = (alias2) => {
+    const field = fieldOf(entity, alias2);
+    const select = field === void 0 ? void 0 : contractFigureSelect(field, entity, model.entities);
+    const held = select === void 0 ? void 0 : fieldOf(entity, select.alias);
+    return asked(held) ? [alias2, held.alias] : [alias2];
+  };
+  const titleField = title === void 0 ? void 0 : fieldOf(entity, title);
+  const figure = display?.figure;
+  const bound = figure === void 0 ? void 0 : display?.limits?.[figure];
+  const undefaulted = (name) => {
+    const field = fieldOf(entity, name);
+    return field === void 0 || !hasDefault(field);
+  };
+  const line = (display?.subtitle ?? []).filter(undefaulted);
+  const measured = [...figure === void 0 ? [] : [figure], ...typeof bound === "string" ? [bound] : []].filter(undefaulted);
+  const shown = [...line, ...read, ...measured].filter((name) => !later.has(name)).map((name) => fieldOf(entity, name)).filter(asked);
+  const keyed = (rules?.natural_key ?? []).map((key) => fieldOf(entity, key)).filter(asked);
+  return unique2(
+    [
+      ...asked(titleField) ? [titleField.alias] : [],
+      ...shown.map((field) => field.alias),
+      ...keyed.map((field) => field.alias),
+      ...requiredOnCreate(model, entity, [...excluded, ...stamped])
+    ].flatMap(withUnit)
+  );
+}
+function ownAsks(app) {
+  return app.acts.flatMap((act) => act.of === void 0 ? act.asks.filter((ask) => typeof ask === "string") : []);
+}
+function appWritePlan(given, app) {
   const model = withAppRow(given, app);
   const plan = /* @__PURE__ */ new Map();
   const entity = entityOf(model, app.entity);
@@ -35167,6 +35942,8 @@ function appWritePlan(given, app) {
       ...recordHeaderFields(display),
       // A lanes board moves a row to another lane where it stands.
       ...app.register.lanes === void 0 ? [] : [app.register.lanes.field],
+      // A gantt moves a bar and stretches its end where it stands.
+      ...app.register.gantt === void 0 ? [] : [app.register.gantt.start, app.register.gantt.end],
       ...app.record.sections.flatMap((section) => section.fields),
       ...resolvedBlocks(app.record).flatMap((block) => block.kind === "files" ? block.fields : block.kind === "text" ? [block.field] : [])
     ]);
@@ -35176,7 +35953,8 @@ function appWritePlan(given, app) {
       ...app.register.create === void 0 ? {} : { create: added(entity.alias, app.register.create), ...app.scope === void 0 ? {} : { parent: app.scope.field } },
       stamps: [],
       update: saves(entity, fields),
-      remove: true
+      // A register saying it offers no Delete leaves its records to a list that does, or to none.
+      remove: app.register.remove !== false
     });
   }
   const saved = (child, fixed) => {
@@ -35203,10 +35981,16 @@ function appWritePlan(given, app) {
       plan.set(document.alias, { ...under.create === void 0 ? {} : { create: added(document.alias, under.create, fixed), parent: under.via }, stamps: [], update: saved(document, fixed), remove: true });
     }
     const child = entityOf(model, block.entity);
-    if (child === void 0 || !peopleWrite(child) || plan.has(child.alias)) continue;
+    if (child === void 0 || !peopleWrite(child)) continue;
+    const removes = block.kind !== "rows" || block.remove !== false;
+    const held = plan.get(child.alias);
+    if (held !== void 0) {
+      if (removes && !held.remove) plan.set(child.alias, { ...held, remove: true });
+      continue;
+    }
     const update = saved(child, [block.via, ...under === void 0 ? [] : [under.field]]);
     if (block.kind === "rows" || block.kind === "agenda") {
-      plan.set(child.alias, { ...block.create === void 0 ? {} : { create: added(child.alias, block.create), parent: block.via }, stamps: [], update, remove: true });
+      plan.set(child.alias, { ...block.create === void 0 ? {} : { create: added(child.alias, block.create), parent: block.via }, stamps: [], update, remove: removes });
       continue;
     }
     const asked = new Set(block.create ?? []);
@@ -35273,6 +36057,17 @@ function actFields(act) {
     ...act.intake === void 0 ? [] : [...act.intake.fields, ...act.intake.parties.map((party) => party.link)]
   ];
 }
+function ganttFields(gantt) {
+  return [
+    gantt.start,
+    gantt.end,
+    ...gantt.milestones,
+    ...gantt.planned?.start === void 0 ? [] : [gantt.planned.start],
+    ...gantt.planned?.end === void 0 ? [] : [gantt.planned.end],
+    ...gantt.progress === void 0 ? [] : [gantt.progress],
+    ...gantt.after === void 0 ? [] : [gantt.after]
+  ];
+}
 function appDrawnFields(given, app) {
   const model = withAppRow(given, app);
   const drawn = /* @__PURE__ */ new Map();
@@ -35292,6 +36087,7 @@ function appDrawnFields(given, app) {
     ...[...app.register.where, ...app.register.opens].map((one) => one.field),
     ...app.register.lanes === void 0 ? [] : [app.register.lanes.field, app.register.lanes.start, ...app.register.lanes.end === void 0 ? [] : [app.register.lanes.end], ...(app.register.lanes.loads ?? []).map((load) => load.value)],
     ...app.register.roster?.of === void 0 ? [] : [app.register.roster.of],
+    ...app.register.gantt === void 0 ? [] : ganttFields(app.register.gantt),
     ...app.register.readings.flatMap(readingFields),
     ...app.record.sections.flatMap((section) => [...section.fields, ...section.when.map((gate) => gate.field)]),
     ...resolvedBlocks(app.record).flatMap((block) => [
@@ -35335,8 +36131,18 @@ function appDrawnFields(given, app) {
     if (block.kind === "rows") {
       const child = entityOf(model, block.entity);
       const written = child === void 0 ? [] : child.fields.filter((field) => isAsked(field) && field.alias !== block.via).map((field) => field.alias);
-      add(block.entity, [...block.columns, ...block.create ?? [], ...block.where.map((one) => one.field), ...written]);
-      add(app.entity, [...blockTotals(model, app.entity, block.entity, block.via, block.columns, block.where).values(), ...block.of === void 0 ? [] : [block.of]]);
+      add(block.entity, [
+        ...block.columns,
+        ...block.create ?? [],
+        ...block.where.map((one) => one.field),
+        ...block.filters.map(filterField),
+        ...block.search ?? [],
+        ...block.group === void 0 ? [] : [block.group],
+        ...(block.sort ?? []).map((key) => key.field),
+        ...written
+      ]);
+      const siblings = resolvedBlocks(app.record).flatMap((one) => one.kind === "rows" && one.entity === block.entity && one.via === block.via ? [one.where] : []);
+      add(app.entity, [...blockTotals(model, app.entity, block.entity, block.via, block.columns, block.where, siblings).values(), ...block.of === void 0 ? [] : [block.of]]);
       const under = block.under;
       const document = under === void 0 ? void 0 : entityOf(model, under.entity);
       if (under !== void 0 && document !== void 0) {
@@ -35367,6 +36173,10 @@ function appDrawnFields(given, app) {
     const written = /* @__PURE__ */ new Set([...writes.create ?? [], ...writes.update]);
     const entity = entityOf(model, alias2);
     for (const [field, rule] of Object.entries(model.write_rules?.[alias2]?.fields ?? {})) {
+      if (rule.suggest !== void 0 && written.has(field)) {
+        const offered = suggestRef(rule.suggest);
+        add(offered.entity, [offered.field]);
+      }
       if (rule.default_from === void 0 || !written.has(field) || entity === void 0) continue;
       const [via = "", source = ""] = rule.default_from.split(".");
       const link = fieldOf(entity, via);
@@ -35391,6 +36201,17 @@ function followLinks(model, drawn) {
     const alias2 = order[index];
     add(alias2, recordDisplayFields(recordDisplay(model, alias2)));
     const entity = entityOf(model, alias2);
+    for (const [name, conditions] of Object.entries(recordDisplay(model, alias2)?.applies ?? {})) {
+      if (entity === void 0 || !(drawn.get(alias2) ?? []).includes(name)) continue;
+      for (const condition of Object.keys(conditions)) {
+        const shape = appliesCondition(model, entity, condition);
+        if ("refused" in shape) continue;
+        add(alias2, [condition, ...shape.through === void 0 ? [] : [shape.through.link]]);
+        if (shape.through === void 0) continue;
+        if (!drawn.has(shape.through.entity)) order.push(shape.through.entity);
+        add(shape.through.entity, [shape.through.field]);
+      }
+    }
     if (entity !== void 0) {
       add(
         alias2,
@@ -35432,7 +36253,8 @@ function checkFilesShown(model) {
           ...display?.subtitle ?? [],
           ...app.register?.columns ?? [],
           ...sections.flatMap((section) => [...section.fields ?? [], ...(section.blocks ?? []).flatMap((block) => "files" in block ? block.files : [])]),
-          ...(app.acts ?? []).flatMap((act) => act.templates === void 0 || act.into === void 0 || !standing.has(act.alias) ? [] : [act.into])
+          // The paper an act makes — one template's, or each of a set's — reads where the act stands.
+          ...(app.acts ?? []).flatMap((act) => act.into === void 0 || !standing.has(act.alias) ? [] : [act.into])
         ];
       })
     );
@@ -35483,6 +36305,501 @@ function noteRegisterReadings(model, app, at2) {
   return [note("register.band-headline", `${at2}.register`, `states no \`readings\` over "${app.entity}", whose rows move through ${moving} \u2014 lead the band with the job's headline number`)];
 }
 
+// ../shared/src/formula.ts
+function getSyntheticValue(field) {
+  switch (field.type) {
+    case "number":
+      return 1;
+    case "autonumber":
+      return "a";
+    case "text":
+      return "a";
+    case "lookup": {
+      switch ("lookup_field_type" in field ? field.lookup_field_type : void 0) {
+        case "number":
+          return 1;
+        case "date":
+          return "2024-01-15T00:00:00Z";
+        case "boolean":
+          return true;
+        case "select":
+        case "select_member":
+        case "select_record_link":
+        case "files":
+          return ["a"];
+        default:
+          return "a";
+      }
+    }
+    case "date":
+      return "2024-01-15T00:00:00Z";
+    case "boolean":
+      return true;
+    case "select":
+    case "select_member":
+      return "option";
+    case "select_record_link":
+      return [];
+    case "files":
+      return [];
+    case "rollup":
+      return ("aggregate_field_type" in field ? field.aggregate_field_type : void 0) === "date" ? "2024-01-15T00:00:00Z" : 1;
+    case "formula": {
+      switch ("output_type" in field.formula ? field.formula.output_type : void 0) {
+        case "number":
+          return 1;
+        case "date":
+        case "datetime":
+          return "2024-01-15T00:00:00Z";
+        case "boolean":
+          return true;
+        // Read as a select's cell is.
+        case "select":
+          return "option";
+        case "text":
+        case void 0:
+          return "a";
+      }
+      return "a";
+    }
+    case "button":
+      return null;
+    default:
+      return null;
+  }
+}
+function isISODateString(value) {
+  if (typeof value !== "string") return false;
+  return isValid(parseISO(value));
+}
+function inferFormulaOutputType(expression, fields) {
+  const syntheticData = {};
+  for (const field of fields) {
+    syntheticData[field.key] = getSyntheticValue(field);
+  }
+  const { evaluable } = prepareFormulaExpression(expression, fields);
+  if (evaluable === null) return "text";
+  const result = evaluateFormulaWithJS(evaluable, { data: syntheticData }, "UTC", false);
+  if (result === null || result === void 0) {
+    const sampled = sampleTypedResult(evaluable, syntheticData, expression, fields);
+    if (sampled !== null) return sampled;
+    return "text";
+  }
+  if (typeof result === "number") return "number";
+  if (typeof result === "boolean") return "boolean";
+  if (isISODateString(result)) {
+    return formulaDateHasTimeOfDay(expression, fields, result) ? "datetime" : "date";
+  }
+  return "text";
+}
+function sampleTypedResult(evaluable, filled, expression, fields) {
+  const referenced = referencedFieldKeys(expression, fields);
+  if (referenced.length === 0) return null;
+  const assignments = [];
+  assignments.push({ ...filled, ...Object.fromEntries(referenced.map((k) => [k, null])) });
+  for (const key of referenced) {
+    assignments.push({ ...filled, [key]: null });
+  }
+  for (const data of assignments) {
+    const result = evaluateFormulaWithJS(evaluable, { data }, "UTC", false);
+    if (result === null || result === void 0) continue;
+    if (typeof result === "string" && result.startsWith(FORMULA_ERROR_PREFIX)) continue;
+    if (typeof result === "number") return "number";
+    if (typeof result === "boolean") return "boolean";
+    if (isISODateString(result)) {
+      return formulaDateHasTimeOfDay(expression, fields, result) ? "datetime" : "date";
+    }
+    return "text";
+  }
+  return null;
+}
+function formulaDateHasTimeOfDay(expression, fields, result) {
+  const referenced = new Set(referencedFieldKeys(expression, fields));
+  for (const f of fields) {
+    if (!referenced.has(f.key)) continue;
+    if (f.type === "date" && (f.format === "datetime" || f.format === "datetime_range")) return true;
+    if (f.type === "lookup" && f.lookup_field_type === "date" && (f.lookup_field_format === "datetime" || f.lookup_field_format === "datetime_range")) return true;
+    if (f.type === "rollup" && (f.aggregate_field_format === "datetime" || f.aggregate_field_format === "datetime_range")) return true;
+    if (f.type === "formula" && f.formula.output_type === "datetime") return true;
+  }
+  if (typeof result !== "string") return false;
+  const m = /T(\d{2}):(\d{2})(?::(\d{2}))?/.exec(result);
+  if (!m) return false;
+  return m[1] !== "00" || m[2] !== "00" || (m[3] ?? "00") !== "00";
+}
+function readsFieldsOnlyThroughEmptinessPredicates(node) {
+  if (node === void 0) return true;
+  if (isFieldRead(node)) return false;
+  switch (node.type) {
+    case "Invoke": {
+      const args = node.arguments ?? [];
+      const predicate = node.method === void 0 && node.receiver.type === "ID" && EMPTINESS_PREDICATES.has(node.receiver.value);
+      return (predicate || readsFieldsOnlyThroughEmptinessPredicates(node.receiver)) && args.every(
+        (arg) => predicate && isFieldRead(arg) || readsFieldsOnlyThroughEmptinessPredicates(arg)
+      );
+    }
+    case "Unary":
+      return readsFieldsOnlyThroughEmptinessPredicates(node.child);
+    case "Binary":
+      return readsFieldsOnlyThroughEmptinessPredicates(node.left) && readsFieldsOnlyThroughEmptinessPredicates(node.right);
+    case "Getter":
+      return readsFieldsOnlyThroughEmptinessPredicates(node.receiver);
+    case "Index":
+      return readsFieldsOnlyThroughEmptinessPredicates(node.receiver) && readsFieldsOnlyThroughEmptinessPredicates(node.argument);
+    case "Ternary":
+      return readsFieldsOnlyThroughEmptinessPredicates(node.condition) && readsFieldsOnlyThroughEmptinessPredicates(node.trueExpr) && readsFieldsOnlyThroughEmptinessPredicates(node.falseExpr);
+    case "List":
+      return (node.items ?? []).every(readsFieldsOnlyThroughEmptinessPredicates);
+    case "Map":
+      return Object.values(node.entries ?? {}).every(readsFieldsOnlyThroughEmptinessPredicates);
+    case "ArrowFunction":
+      return readsFieldsOnlyThroughEmptinessPredicates(node.body);
+    case "ID":
+      return node.value !== "data";
+    case "Literal":
+    case "Empty":
+      return true;
+  }
+}
+function isFieldRead(node) {
+  return node !== void 0 && node.type === "Index" && node.receiver.type === "ID" && node.receiver.value === "data";
+}
+function evaluateFormulaWithJS(preparedExpression, data, timezone, everyReferenceEmpty) {
+  try {
+    if (everyReferenceEmpty && !readsFieldsOnlyThroughEmptinessPredicates(parseExpression(preparedExpression))) {
+      return null;
+    }
+    const result = evaluateJsExpression(preparedExpression, data, void 0, timezone);
+    if (result === null || result === void 0) {
+      return null;
+    }
+    if (typeof result === "number" || typeof result === "string" || typeof result === "boolean") {
+      return result;
+    }
+    return `${FORMULA_ERROR_PREFIX}Unexpected result type`;
+  } catch (error52) {
+    return `${FORMULA_ERROR_PREFIX}Formula evaluation error: ${error52 instanceof Error ? error52.message : String(error52)}`;
+  }
+}
+
+// ../shared/src/schemas/contract_filter_binding.ts
+function remapContractFilterGroup(group, entity, resolve) {
+  return { ...group, children: group.children.map((child) => remapContractFilter(child, entity, resolve)) };
+}
+function remapContractFilter(node, entity, resolve) {
+  if (node.node_type === "group") return remapContractFilterGroup(node, entity, resolve);
+  if (node.node_type === "traversal") {
+    return {
+      ...node,
+      path: node.path.map((hop) => resolve.qualified(hop).key),
+      condition: remapTraversalCondition(node.condition, resolve)
+    };
+  }
+  const roleOf = resolve.role;
+  if (node.type === "current_member" && roleOf !== void 0 && Array.isArray(node.value)) {
+    return { ...node, value: node.value.map((one) => typeof one === "string" ? roleOf(one) : one) };
+  }
+  if (entity === null || node.field_key === void 0 || node.field_key === "") return node;
+  return {
+    ...node,
+    field_key: resolve.field(entity, node.field_key),
+    value: remapOptionValue(node.value, entity, node.field_key, resolve),
+    ...remapUnitOption(node.unit_option, resolve)
+  };
+}
+function remapTraversalCondition(condition, resolve) {
+  if (condition.field_key === void 0 || condition.field_key === "") return condition;
+  const { key, entity, field } = resolve.qualified(condition.field_key);
+  return {
+    ...condition,
+    field_key: key,
+    value: remapOptionValue(condition.value, entity, field, resolve),
+    ...remapUnitOption(condition.unit_option, resolve)
+  };
+}
+function remapUnitOption(unitOption, resolve) {
+  if (unitOption === void 0) return {};
+  const parsed = parseOptionKeyName(unitOption);
+  return { unit_option: parsed === null ? unitOption : resolve.option(parsed.entity, parsed.field, parsed.option) };
+}
+function remapOptionValue(value, entity, field, resolve) {
+  if (!resolve.isSelect(entity, field)) return value;
+  const one = (candidate) => typeof candidate === "string" ? resolve.option(entity, field, candidate) : candidate;
+  return Array.isArray(value) ? value.map(one) : one(value);
+}
+
+// ../shared/src/app_compile/model_error.ts
+var ModelError = class extends Error {
+  constructor(message2) {
+    super(message2);
+    this.name = "ModelError";
+  }
+};
+function fail2(message2) {
+  throw new ModelError(message2);
+}
+
+// ../shared/src/app_compile/synthetic_workspace.ts
+function tableId(t) {
+  return `tbl_${t}`;
+}
+function syntheticFields(entities) {
+  const binding = bindAliases(entities);
+  return entities.map((entity) => entity.fields.map((field) => syntheticField(entity, field, binding)));
+}
+function syntheticFormula(entities, entity, expression) {
+  const binding = bindAliases(entities);
+  return bindContractFormula(expression, {
+    field: (alias2) => binding.field.get(fieldKeyName(entity, alias2)) ?? alias2,
+    option: (field, option) => binding.option.get(optionKeyName(entity, field, option)) ?? option
+  });
+}
+function bindAliases(entities) {
+  const table = /* @__PURE__ */ new Map();
+  const field = /* @__PURE__ */ new Map();
+  const option = /* @__PURE__ */ new Map();
+  const declared = /* @__PURE__ */ new Map();
+  entities.forEach((entity, t) => {
+    table.set(entity.alias, tableId(t));
+    entity.fields.forEach((one, f) => {
+      field.set(fieldKeyName(entity.alias, one.alias), `fld_${t}_${f}`);
+      declared.set(fieldKeyName(entity.alias, one.alias), one);
+      (contractSelectOptions(one) ?? []).forEach((choice, o) => {
+        option.set(optionKeyName(entity.alias, one.alias, choice.alias), `opt_${t}_${f}_${o}`);
+      });
+    });
+  });
+  return { table, field, option, declared, entities };
+}
+function requireField(binding, entity, alias2, at2) {
+  const key = binding.field.get(fieldKeyName(entity, alias2));
+  if (key === void 0) fail2(`${at2} names "${alias2}", which entity "${entity}" does not declare`);
+  return key;
+}
+function perRowKeys(binding, entity, field, at2) {
+  const select = contractFigureSelect(field, entity, binding.entities);
+  if (select === void 0) return {};
+  const key = requireField(binding, entity.alias, select.alias, `${at2}.${select.vocabulary}_field`);
+  return select.vocabulary === "unit" ? { unit_field: key } : { currency_field: key };
+}
+function requireTarget(binding, entity, alias2, at2) {
+  const found = linkTarget(entity, binding.entities, alias2);
+  if (found === void 0) {
+    fail2(`${at2} reaches through "${alias2}", which is not a link on entity "${entity.alias}"`);
+  }
+  return found;
+}
+function syntheticField(entity, field, binding) {
+  const at2 = `${entity.alias}.${field.alias}`;
+  const base = {
+    key: requireField(binding, entity.alias, field.alias, at2),
+    name: field.label,
+    description: field.description ?? "",
+    ...field.required !== void 0 && { required: field.required }
+  };
+  switch (field.type) {
+    case "text":
+      return { ...base, type: "text", ...field.format !== void 0 && { format: field.format } };
+    case "number":
+      return {
+        ...base,
+        type: "number",
+        format: field.format ?? "number",
+        ...field.currency !== void 0 && { currency: field.currency },
+        ...field.unit !== void 0 && { unit: field.unit },
+        ...perRowKeys(binding, entity, field, at2)
+      };
+    case "date":
+      return {
+        ...base,
+        type: "date",
+        ...field.format !== void 0 && { format: field.format },
+        ...field.timezone !== void 0 && { timezone: field.timezone }
+      };
+    case "boolean":
+      return { ...base, type: "boolean" };
+    case "files":
+      return { ...base, type: "files" };
+    case "select_member":
+      return { ...base, type: "select_member", ...field.multi !== void 0 && { multi: field.multi } };
+    case "select":
+      return {
+        ...base,
+        type: "select",
+        options: mintedOptions(binding, entity.alias, field.alias, field.options, at2),
+        ...field.multi !== void 0 && { multi: field.multi }
+      };
+    case "autonumber":
+      return {
+        ...base,
+        type: "autonumber",
+        ...field.prefix !== void 0 && { prefix: field.prefix },
+        ...field.padding !== void 0 && { padding: field.padding },
+        ...field.template !== void 0 && { template: field.template }
+      };
+    case "select_record_link": {
+      const table = binding.table.get(field.target_entity);
+      if (table === void 0) fail2(`${at2} points at entity "${field.target_entity}", which this model does not declare`);
+      const displays = field.display_field_aliases;
+      return {
+        ...base,
+        type: "select_record_link",
+        table_id: table,
+        // A DISPLAY RULE ONLY WHERE THE MODEL STATES ONE, the way the copy path
+        // writes it: unstated, the platform settles the list when the field is
+        // created, and nothing this synthesis feeds reads it.
+        display_field_keys: displays === void 0 ? [] : displays.map((alias2) => requireField(binding, field.target_entity, alias2, `${at2}.display_field_aliases`)),
+        ...field.cardinality !== void 0 && { cardinality: field.cardinality }
+      };
+    }
+    case "formula": {
+      const { options, ...formula } = field.formula;
+      return {
+        ...base,
+        type: "formula",
+        // Alias → field KEY, and `{field:option}` → that option's key: the
+        // expression the engine runs addresses opaque keys, exactly as the copy
+        // writes it.
+        formula: {
+          ...formula,
+          expression: bindContractFormula(field.formula.expression, {
+            field: (alias2) => requireField(binding, entity.alias, alias2, `${at2}.formula`),
+            option: (select, option) => requireOption(binding, entity.alias, select, option, `${at2}.formula`)
+          }),
+          ...perRowKeys(binding, entity, field, `${at2}.formula`),
+          ...options === void 0 ? {} : { output_type: "select", options: mintedOptions(binding, entity.alias, field.alias, options, at2) }
+        }
+      };
+    }
+    case "rollup": {
+      const target = requireTarget(binding, entity, field.source_field_alias, at2);
+      const aggregate = field.aggregate_option;
+      const aggregated = aggregate.field_key === void 0 ? void 0 : requireDeclared(binding, target.alias, aggregate.field_key, `${at2}.aggregate_option`);
+      return {
+        ...base,
+        type: "rollup",
+        source_field_key: requireField(binding, entity.alias, field.source_field_alias, at2),
+        aggregate_option: aggregate.field_key === void 0 ? aggregate : { ...aggregate, field_key: requireField(binding, target.alias, aggregate.field_key, `${at2}.aggregate_option`) },
+        // WHAT THE CELL HOLDS, derived the way the write path derives it: the
+        // type from the OPERATION alone, the format, currency and unit from the
+        // aggregated field only where the operation keeps its unit. Absent, a
+        // `latest` over a datetime reads as a day and a `sum` of a VND column
+        // draws as a bare count.
+        aggregate_field_type: rollupOutputType(aggregate.operation),
+        ...rollupOutputFormat(
+          aggregate.operation,
+          aggregated === void 0 ? {} : resolvedFormatOf(aggregated, target, binding.entities),
+          perRowKeys(binding, entity, field, at2)
+        ),
+        // The filter reads the LINKED entity's fields and options, so it
+        // resolves against that entity rather than this one.
+        ...field.filter !== void 0 ? { filter: remapFilter(field.filter, target.alias, binding, `${at2}.filter`) } : {}
+      };
+    }
+    case "lookup": {
+      const target = requireTarget(binding, entity, field.source_field_alias, at2);
+      const surfaced = requireDeclared(binding, target.alias, field.lookup_field_alias, at2);
+      const resolved = resolvedFieldType(surfaced, target, binding.entities);
+      const carried = resolvedFormatOf(surfaced, target, binding.entities);
+      return {
+        ...base,
+        type: "lookup",
+        source_field_key: requireField(binding, entity.alias, field.source_field_alias, at2),
+        lookup_field_key: requireField(binding, target.alias, field.lookup_field_alias, at2),
+        ...resolved !== void 0 && { lookup_field_type: resolved },
+        ...carried.format !== void 0 && { lookup_field_format: carried.format },
+        ...carried.currency !== void 0 && { lookup_field_currency: carried.currency },
+        ...carried.unit !== void 0 && { lookup_field_unit: carried.unit },
+        ...resolved === "select" && {
+          lookup_field_options: surfacedOptions(binding, carried, at2)
+        },
+        ...field.order_by !== void 0 && {
+          order_by: {
+            field_key: requireField(binding, target.alias, field.order_by.field_key, `${at2}.order_by`),
+            direction: field.order_by.direction
+          }
+        }
+      };
+    }
+  }
+}
+function mintedOptions(binding, entity, field, options, at2) {
+  return options.map((option) => ({
+    key: requireOption(binding, entity, field, option.alias, at2),
+    name: option.label,
+    color: option.color,
+    ...option.mark === void 0 ? {} : { mark: option.mark }
+  }));
+}
+function surfacedOptions(binding, carried, at2) {
+  const owner = carried.options;
+  if (owner === void 0) {
+    fail2(`${at2} surfaces a select, but this model states no options for the column it reaches`);
+  }
+  return mintedOptions(binding, owner.entity, owner.field, owner.options, at2);
+}
+var SURFACE_HOPS = 8;
+function resolvedFormatOf(field, entity, entities, hops = 0) {
+  if (hops >= SURFACE_HOPS) return {};
+  switch (field.type) {
+    case "number":
+      return { format: field.format ?? "number", currency: field.currency, unit: field.unit };
+    case "text":
+    case "date":
+      return { format: field.format };
+    case "select":
+      return { options: { entity: entity.alias, field: field.alias, options: field.options } };
+    case "formula":
+      if (field.formula.options !== void 0) return { options: { entity: entity.alias, field: field.alias, options: field.formula.options } };
+      return {
+        format: field.formula.output_type === "datetime" ? "datetime" : field.formula.format,
+        currency: field.formula.currency,
+        unit: field.formula.unit
+      };
+    case "rollup": {
+      const { operation, field_key } = field.aggregate_option;
+      const target = linkTarget(entity, entities, field.source_field_alias);
+      const aggregated = field_key === void 0 ? void 0 : target?.fields.find((one) => one.alias === field_key);
+      const inherited = target === void 0 || aggregated === void 0 ? {} : resolvedFormatOf(aggregated, target, entities, hops + 1);
+      const { aggregate_field_format, aggregate_field_currency, aggregate_field_unit } = rollupOutputFormat(operation, inherited);
+      return { format: aggregate_field_format, currency: aggregate_field_currency, unit: aggregate_field_unit };
+    }
+    case "lookup": {
+      const target = linkTarget(entity, entities, field.source_field_alias);
+      const shown = target?.fields.find((one) => one.alias === field.lookup_field_alias);
+      return target === void 0 || shown === void 0 ? {} : resolvedFormatOf(shown, target, entities, hops + 1);
+    }
+    default:
+      return {};
+  }
+}
+function requireDeclared(binding, entity, alias2, at2) {
+  const found = binding.declared.get(fieldKeyName(entity, alias2));
+  if (found === void 0) fail2(`${at2} names "${alias2}", which entity "${entity}" does not declare`);
+  return found;
+}
+function requireOption(binding, entity, field, option, at2) {
+  const key = binding.option.get(optionKeyName(entity, field, option));
+  if (key === void 0) fail2(`${at2} names option "${option}", which "${entity}.${field}" does not declare`);
+  return key;
+}
+function remapFilter(group, entity, binding, at2) {
+  const resolver = {
+    field: (owner, alias2) => requireField(binding, owner, alias2, at2),
+    qualified: (position) => {
+      const parsed = parseFieldKeyName(position);
+      if (parsed === null) fail2(`${at2} addresses "${position}", which is not an "entity.field" alias`);
+      return { key: requireField(binding, parsed.entity, parsed.field, at2), ...parsed };
+    },
+    option: (owner, field, alias2) => requireOption(binding, owner, field, alias2, `${owner}.${field}`),
+    isSelect: (owner, field) => {
+      const declared = binding.declared.get(fieldKeyName(owner, field));
+      return declared !== void 0 && contractSelectOptions(declared) !== void 0;
+    }
+  };
+  return remapContractFilterGroup(group, entity, resolver);
+}
+
 // ../shared/src/app_workflow_inputs.ts
 var RECORD_INPUT = "record_id";
 var RECORDS_INPUT = "record_ids";
@@ -35575,11 +36892,12 @@ function checkAct(model, entity, act, at2) {
     if (field === void 0) continue;
     const written = actSetValue(field, value, inputs);
     if ("refused" in written) findings.push(error51("act.set", `${at2}.set.${name}`, written.refused));
+    else if (written.kind === "formula") findings.push(...checkSetFormula(model, entity, field, written.expression, `${at2}.set.${name}`));
     else if (written.kind === "clear" && stages.has(name)) {
       findings.push(error51("act.set-milestone", `${at2}.set.${name}`, `clears the milestone "${name}" \u2014 a milestone is cleared by unticking it, which clears every later one`));
     }
   }
-  if (act.template !== void 0) findings.push(...checkTemplate(model, act.template, `${at2}.template`, "act"));
+  if (act.template !== void 0) findings.push(...checkTemplate(model, act.template, `${at2}.template`));
   if (act.templates !== void 0) findings.push(...checkTemplates(model, entity, act, at2));
   if (act.into !== void 0) {
     const into = own(act.into, `${at2}.into`);
@@ -35602,7 +36920,7 @@ function checkTemplates(model, entity, act, at2) {
   }
   for (const [index, one] of templates.entries()) {
     const each = `${path15}.${index}`;
-    findings.push(...checkTemplate(model, one.template, `${each}.template`, "act"), ...checkWhen(model.entities, entity, one.when, `${each}.when`, "offer"));
+    findings.push(...checkTemplate(model, one.template, `${each}.template`), ...checkWhen(model.entities, entity, one.when, `${each}.when`, "offer"));
     if (templates.findIndex((other) => other.template === one.template) !== index) findings.push(error51("act.templates", `${each}.template`, `names "${one.template}" twice \u2014 each template is one paper of the set`));
   }
   return findings;
@@ -35885,6 +37203,28 @@ function checkFootNeeds(model, entity, section, drawn, act, path15) {
     return [error51("act.requires-written", at2, `"${act.alias}" needs "${name}", which no act offered together with it writes \u2014 it reads locked while "${act.alias}" waits; have "${act.alias}" ask it`)];
   });
 }
+var FORMULA_INTO = {
+  number: ["number"],
+  date: ["date", "datetime"],
+  text: ["text"],
+  boolean: ["boolean"]
+};
+function checkSetFormula(model, entity, field, expression, at2) {
+  const display = recordDisplay(model, entity.alias);
+  if (field.alias === display?.status?.field || (milestonesOf(display) ?? []).some((stage) => stage.field === field.alias)) {
+    return [error51("act.set-formula", at2, `computes "${field.alias}", which moves the work \u2014 an act moves it to an option or stamps it, never by a formula`)];
+  }
+  const refused = formulaExpressionRefusals(expression);
+  if (refused.length > 0) return refused.map((message2) => error51("act.set-formula", at2, message2));
+  const unknown2 = contractFormulaFieldRefs({ alias: field.alias, formula: { expression } }).filter((name) => fieldOf(entity, name) === void 0);
+  if (unknown2.length > 0) return [error51("act.set-formula", at2, `reads ${unknown2.map((name) => `"${name}"`).join(", ")}, which ${unknown2.length === 1 ? "is not a field" : "are not fields"} of "${entity.alias}"`)];
+  const into = FORMULA_INTO[field.type];
+  if (into === void 0) return [error51("act.set-formula", at2, `computes the ${field.type} "${field.alias}" \u2014 a formula computes a number, a date, text or a yes/no`)];
+  const index = model.entities.findIndex((one) => one.alias === entity.alias);
+  const fields = syntheticFields(model.entities)[index] ?? [];
+  const computed = inferFormulaOutputType(syntheticFormula(model.entities, entity.alias, expression), fields);
+  return into.includes(computed) ? [] : [error51("act.set-formula", at2, `computes a ${computed} into the ${field.type} "${field.alias}" \u2014 the formula computes what the field holds`)];
+}
 
 // ../shared/src/schemas/app_model_resolve_tasks.ts
 function tasksOf(model, app, resolved) {
@@ -36414,6 +37754,7 @@ function translateAct(act, lining, listed) {
   for (const [alias2, value] of Object.entries(act.set ?? {})) {
     const own = to(alias2);
     if (own === void 0) return { dropped: `it sets "${alias2}", which "${book.alias}" lacks` };
+    if (typeof value === "object" && value !== null) return { dropped: `it computes "${alias2}" by a formula over the app's own fields` };
     const option = typeof value === "string" && value !== SET_NOW && value !== SET_ME && !value.startsWith(SET_INPUT) && optionsOf(fieldOf(book, own)) !== void 0;
     if (option && held(alias2, [value]).length === 0) return { dropped: `it sets "${alias2}" to "${value}", an option "${book.alias}.${own}" lacks` };
     set2[own] = value;
@@ -36469,7 +37810,7 @@ var whereOf = (stated) => Object.entries(stated ?? {}).map(([field, options]) =>
 function resolveModelApp(given, app) {
   const model = withAppRow(given, app);
   const entity = entityOf(model, app.entity);
-  if (entity === void 0) throw new Error(`resolveModelApp: "${app.entity}" is not an entity of this model \u2014 validate it first`);
+  if (entity === void 0) fail2(`resolveModelApp: "${app.entity}" is not an entity of this model \u2014 validate it first`);
   const display = model.records?.[entity.alias];
   const setBy = actSetFields(model, entity.alias);
   const writes = app.writes === "children" ? "children" : "record";
@@ -36489,7 +37830,8 @@ function resolveModelApp(given, app) {
       ...splitEntry(model, app, section.acts ?? [], at2),
       actsLast: false,
       when: whenConditions(section.when),
-      ...section.page === true ? { page: pageSegment(section.title) } : {}
+      ...section.page === true ? { page: pageSegment(section.title) } : {},
+      ...section.side === true ? { side: true } : {}
     };
   });
   if (statedSections === void 0) {
@@ -36504,15 +37846,16 @@ function resolveModelApp(given, app) {
     const acts2 = (app.acts ?? []).flatMap((act) => act.of === void 0 && (act.on ?? "record") === "record" ? [act.alias] : []);
     sections = fields.length === 0 && acts2.length === 0 ? [] : [{ at: [], fields, blocks: [], acts: acts2, entry: [], actsLast: false, when: [] }];
   }
-  const door = app.record?.door ?? (sections.some((section) => section.at.length > 0 || section.page !== void 0) || sections.length > 3 ? "page" : "drawer");
+  const door = app.record?.door ?? (sections.some((section) => section.at.length > 0 || section.page !== void 0 || section.side === true) || sections.length > 3 ? "page" : "drawer");
   if (app.record?.door === void 0) defaulted.push("record.door");
-  const layout = app.register?.layout ?? "table";
+  const registerLayout = app.register?.layout ?? "table";
   if (app.register?.layout === void 0) defaulted.push("register.layout");
   const roster = app.register?.roster === void 0 ? void 0 : resolveRoster(model, entity.alias, app.register.roster, app.register.expect, app.register.of);
   const lanes = app.register?.lanes === void 0 ? void 0 : resolveLanes(model, entity.alias, app.register.lanes, app.register.loads, scope);
+  const gantt = app.register?.gantt === void 0 ? void 0 : ganttShape(model, entity.alias, app.register.gantt);
+  if (gantt !== void 0 && "refused" in gantt) fail2(`resolveModelApp: the gantt ${gantt.refused.map((one) => one.reason).join("; ")} \u2014 validate it first`);
   const where = whenConditions(app.register?.where);
-  const statedSort = registerSortKeys(app.register?.sort);
-  let sort = statedSort.length === 0 ? void 0 : statedSort.map((key) => ({ field: key.field, ...key.desc === true ? { desc: true } : {} }));
+  let sort = statedSort(app.register?.sort);
   if (sort === void 0) {
     defaulted.push("register.sort");
     const due = display?.due?.[0];
@@ -36559,17 +37902,19 @@ function resolveModelApp(given, app) {
       ...sort === void 0 ? {} : { sort },
       ...app.register?.group === void 0 ? {} : { group: app.register.group },
       tabs: (app.register?.tabs ?? []).map((tab) => {
-        const keys2 = registerSortKeys(tab.sort).map((key) => ({ field: key.field, ...key.desc === true ? { desc: true } : {} }));
+        const keys2 = statedSort(tab.sort);
         const term = tab.in !== void 0 ? { kind: "in", field: tab.in } : tab.open === void 0 ? void 0 : { kind: "open", ...tab.open };
-        return { tab: tab.tab, label: tab.label, ...term === void 0 ? {} : { term }, where: narrowingConditions(tab.where), ...keys2.length === 0 ? {} : { sort: keys2 } };
+        return { tab: tab.tab, label: tab.label, ...term === void 0 ? {} : { term }, where: narrowingConditions(tab.where), ...keys2 === void 0 ? {} : { sort: keys2 } };
       }),
       ...app.register?.period === void 0 ? {} : { period: app.register.period },
-      layout,
+      layout: registerLayout,
       ...roster === void 0 ? {} : { roster },
       ...lanes === void 0 ? {} : { lanes },
+      ...gantt === void 0 ? {} : { gantt },
       where,
       opens: narrowingConditions(app.register?.opens),
       ...create === void 0 || create.length === 0 ? {} : { create },
+      ...app.register?.remove === void 0 ? {} : { remove: app.register.remove },
       ...stated === void 0 ? {} : {
         export: stated === true ? true : stated.map((report) => ({
           label: report.label,
@@ -36637,7 +37982,7 @@ function resolveDashboard(model, app) {
 }
 function resolveRoster(model, parent, alias2, expect, of) {
   const shape = rosterShape(model, parent, alias2, expect === void 0);
-  if ("refused" in shape) throw new Error(`resolveModelApp: the roster ${shape.refused} \u2014 validate it first`);
+  if ("refused" in shape) fail2(`resolveModelApp: the roster ${shape.refused} \u2014 validate it first`);
   const child = entityOf(model, shape.entity);
   const key = expect ?? shape.day;
   const keyed = child === void 0 || key === void 0 ? void 0 : fieldOf(child, key);
@@ -36646,7 +37991,7 @@ function resolveRoster(model, parent, alias2, expect, of) {
 }
 function resolveLanes(model, parent, alias2, stated, scope) {
   const shape = lanesShape(model, parent, alias2);
-  if ("refused" in shape) throw new Error(`resolveModelApp: the lanes ${shape.refused} \u2014 validate it first`);
+  if ("refused" in shape) fail2(`resolveModelApp: the lanes ${shape.refused} \u2014 validate it first`);
   const lane = entityOf(model, shape.entity);
   const folders = scope === void 0 || lane === void 0 ? [] : lane.fields.filter((field) => field.type === "select_record_link" && field.cardinality === "one" && field.target_entity === scope.entity);
   const [folder] = folders.length === 1 ? folders : [];
@@ -36654,7 +37999,7 @@ function resolveLanes(model, parent, alias2, stated, scope) {
   if (stated === void 0) return { ...shape, ...filed };
   const { loads, refused } = laneLoads(model, parent, shape, stated);
   const [first2] = refused;
-  if (first2 !== void 0) throw new Error(`resolveModelApp: the load "${first2.value}" ${first2.reason} \u2014 validate it first`);
+  if (first2 !== void 0) fail2(`resolveModelApp: the load "${first2.value}" ${first2.reason} \u2014 validate it first`);
   return { ...shape, loads, ...filed };
 }
 function keptFields(entity, where) {
@@ -36666,9 +38011,13 @@ function keptFields(entity, where) {
 function scopeOf(entity, field) {
   if (field === void 0) return void 0;
   const link = fieldOf(entity, field);
-  if (link?.type !== "select_record_link") throw new Error(`resolveModelApp: scope "${field}" is not a link of "${entity.alias}" \u2014 validate it first`);
+  if (link?.type !== "select_record_link") fail2(`resolveModelApp: scope "${field}" is not a link of "${entity.alias}" \u2014 validate it first`);
   return { field, entity: link.target_entity };
 }
+function statedSort(sort) {
+  const keys2 = registerSortKeys(sort);
+  return keys2.length === 0 ? void 0 : keys2.map((key) => ({ field: key.field, ...key.desc === true ? { desc: true } : {} }));
+}
 function resolveBlock(model, parent, block, at2) {
   const defaulted = [];
   const when = whenConditions(block.when);
@@ -36682,18 +38031,18 @@ function resolveBlock(model, parent, block, at2) {
     const reading = figure.reading;
     defaulted.push(...figure.defaulted);
     const child = entityOf(model, reading.entity);
-    if (child === void 0) throw new Error(`resolveModelApp: block ${at2} reads "${reading.entity}", which is not an entity \u2014 validate it first`);
+    if (child === void 0) fail2(`resolveModelApp: block ${at2} reads "${reading.entity}", which is not an entity \u2014 validate it first`);
     const link = childLink(child, parent.alias, block.via);
-    if ("refused" in link) throw new Error(`resolveModelApp: block ${at2} ${link.refused}`);
+    if ("refused" in link) fail2(`resolveModelApp: block ${at2} ${link.refused}`);
     return { block: { kind: "reading", reading, via: link.link, when }, defaulted };
   }
   if (isAgendaBlock(block)) {
     const child = entityOf(model, block.agenda);
-    if (child === void 0) throw new Error(`resolveModelApp: block ${at2} reads "${block.agenda}", which is not an entity \u2014 validate it first`);
+    if (child === void 0) fail2(`resolveModelApp: block ${at2} reads "${block.agenda}", which is not an entity \u2014 validate it first`);
     const link = childLink(child, parent.alias, block.via);
-    if ("refused" in link) throw new Error(`resolveModelApp: block ${at2} ${link.refused}`);
+    if ("refused" in link) fail2(`resolveModelApp: block ${at2} ${link.refused}`);
     const axis = agendaAxis(model, child);
-    if ("refused" in axis) throw new Error(`resolveModelApp: block ${at2} ${axis.refused}`);
+    if ("refused" in axis) fail2(`resolveModelApp: block ${at2} ${axis.refused}`);
     const stated = block.create;
     const create = Array.isArray(stated) ? stated : stated === false || !peopleWrite(child) ? [] : defaultBlockCreate(model, child, [link.link], block.columns ?? []);
     if (stated === void 0 && create.length > 0) defaulted.push(`${at2}.create`);
@@ -36715,9 +38064,9 @@ function resolveBlock(model, parent, block, at2) {
   if ("rows" in block || "timeline" in block) {
     const childAlias = "rows" in block ? block.rows : block.timeline;
     const child = entityOf(model, childAlias);
-    if (child === void 0) throw new Error(`resolveModelApp: block ${at2} reads "${childAlias}", which is not an entity \u2014 validate it first`);
+    if (child === void 0) fail2(`resolveModelApp: block ${at2} reads "${childAlias}", which is not an entity \u2014 validate it first`);
     const link = childLink(child, parent.alias, block.via);
-    if ("refused" in link) throw new Error(`resolveModelApp: block ${at2} ${link.refused}`);
+    if ("refused" in link) fail2(`resolveModelApp: block ${at2} ${link.refused}`);
     const title = titled(block.title, child.label);
     const stated = block.create;
     if ("rows" in block) {
@@ -36738,6 +38087,12 @@ function resolveBlock(model, parent, block, at2) {
           where,
           ...block.expect === void 0 ? {} : { expect: block.expect },
           ...block.of === void 0 ? {} : { of: block.of },
+          filters: block.filters ?? [],
+          ...block.search === void 0 ? {} : { search: block.search },
+          ...block.group === void 0 ? {} : { group: block.group },
+          ...block.sort === void 0 ? {} : { sort: statedSort(block.sort) },
+          ...block.edits === void 0 ? {} : { edits: block.edits },
+          ...block.remove === void 0 ? {} : { remove: block.remove },
           ...under === void 0 ? {} : { under },
           when
         },
@@ -36745,7 +38100,7 @@ function resolveBlock(model, parent, block, at2) {
       };
     }
     const date5 = child.fields.find((field) => resolvedFieldType(field, child, model.entities) === "date")?.alias;
-    if (date5 === void 0) throw new Error(`resolveModelApp: block ${at2} reads "${child.alias}", which has no date \u2014 validate it first`);
+    if (date5 === void 0) fail2(`resolveModelApp: block ${at2} reads "${child.alias}", which has no date \u2014 validate it first`);
     const by = child.fields.find((field) => field.type === "select_member")?.alias;
     const create = Array.isArray(stated) ? stated : stated === false || !peopleWrite(child) ? [] : defaultCreate(model, child, [link.link, date5, ...by === void 0 ? [] : [by]]);
     if (stated === void 0 && create.length > 0) defaulted.push(`${at2}.create`);
@@ -36802,7 +38157,7 @@ function resolveIntake(model, app, intake, fills, sections) {
   const papers = blocks.find((block) => block.entity === intake && block.expect === kind);
   const files = child?.fields.find((field) => field.type === "files");
   if (record2 === void 0 || child === void 0 || kind === void 0 || papers === void 0 || files === void 0) {
-    throw new Error(`resolveModelApp: "${intake}" is no child the record files papers as \u2014 validate it first`);
+    fail2(`resolveModelApp: "${intake}" is no child the record files papers as \u2014 validate it first`);
   }
   const listed = new Set(blocks.map((block) => block.entity));
   const parties = /* @__PURE__ */ new Map();
@@ -36820,7 +38175,7 @@ function resolveIntake(model, app, intake, fills, sections) {
     }
     const block = blocks.find((one) => one.entity === name && one.expect === void 0 && one.under === void 0 && one.where.length === 0 && one.create !== void 0);
     const added = entityOf(model, name);
-    if (block === void 0 || added === void 0) throw new Error(`resolveModelApp: "${name}" rows are added in no plain rows block \u2014 validate it first`);
+    if (block === void 0 || added === void 0) fail2(`resolveModelApp: "${name}" rows are added in no plain rows block \u2014 validate it first`);
     const filled = (block.create ?? []).filter((alias2) => {
       const field = fieldOf(added, alias2);
       return alias2 !== block.via && field !== void 0 && unfillable(model, added, field) === void 0;
@@ -36833,7 +38188,7 @@ function resolveIntake(model, app, intake, fills, sections) {
     fields,
     parties: [...parties].map(([link, named]) => {
       const field = fieldOf(record2, link);
-      if (field?.type !== "select_record_link") throw new Error(`resolveModelApp: "${link}" is not a link of "${record2.alias}" \u2014 validate it first`);
+      if (field?.type !== "select_record_link") fail2(`resolveModelApp: "${link}" is not a link of "${record2.alias}" \u2014 validate it first`);
       return { link, entity: field.target_entity, fields: named };
     }),
     rows
@@ -36844,9 +38199,9 @@ function resolveRecord(model, app, recorded, fills, sections) {
     (one) => (one.kind === "timeline" || one.kind === "rows" && one.expect === void 0 && one.under === void 0 && one.where.length === 0) && one.entity === recorded.into
   );
   if (block === void 0 || block.kind !== "rows" && block.kind !== "timeline") {
-    throw new Error(`resolveModelApp: "${recorded.into}" is drawn in no rows or timeline block of "${app.alias}" \u2014 validate it first`);
+    fail2(`resolveModelApp: "${recorded.into}" is drawn in no rows or timeline block of "${app.alias}" \u2014 validate it first`);
   }
-  if (entityOf(model, recorded.into) === void 0) throw new Error(`resolveModelApp: "${recorded.into}" is not an entity \u2014 validate it first`);
+  if (entityOf(model, recorded.into) === void 0) fail2(`resolveModelApp: "${recorded.into}" is not an entity \u2014 validate it first`);
   return {
     entity: recorded.into,
     via: block.via,
@@ -36874,13 +38229,13 @@ function actsReadBlocks(model, entity, section, acts) {
 function resolveAct(model, app, act, checks, sections) {
   const alias2 = actEntity(app, act);
   const entity = entityOf(model, alias2);
-  if (entity === void 0) throw new Error(`resolveModelApp: act "${act.alias}" works on "${alias2}", which is not an entity \u2014 validate it first`);
+  if (entity === void 0) fail2(`resolveModelApp: act "${act.alias}" works on "${alias2}", which is not an entity \u2014 validate it first`);
   const inputs = (act.asks ?? []).filter(isInput);
   const set2 = Object.fromEntries(
     Object.entries(act.set ?? {}).map(([name, value]) => {
       const field = fieldOf(entity, name);
       const written2 = field === void 0 ? void 0 : actSetValue(field, value, inputs);
-      if (written2 === void 0 || "refused" in written2) throw new Error(`resolveModelApp: act "${act.alias}" sets "${name}" in a way the check refuses \u2014 validate it first`);
+      if (written2 === void 0 || "refused" in written2) fail2(`resolveModelApp: act "${act.alias}" sets "${name}" in a way the check refuses \u2014 validate it first`);
       return [name, written2];
     })
   );
@@ -36920,9 +38275,9 @@ function resolveAct(model, app, act, checks, sections) {
 }
 function resolveUnder(model, parent, child, field, where) {
   const shape = documentUnder(model, parent, child, field);
-  if ("refused" in shape) throw new Error(`resolveModelApp: the lines of "${child.alias}" ${shape.refused} \u2014 validate it first`);
+  if ("refused" in shape) fail2(`resolveModelApp: the lines of "${child.alias}" ${shape.refused} \u2014 validate it first`);
   const document = entityOf(model, shape.entity);
-  if (document === void 0) throw new Error(`resolveModelApp: "${shape.entity}" is not an entity \u2014 validate it first`);
+  if (document === void 0) fail2(`resolveModelApp: "${shape.entity}" is not an entity \u2014 validate it first`);
   const held = where.filter((one) => {
     const own = fieldOf(document, one.field);
     return own !== void 0 && isSingleSelect(own) && one.options.every((option) => own.options.some((declared) => declared.alias === option));
@@ -37077,6 +38432,7 @@ function checkRegisterApp(model, app, at2) {
     findings: [
       ...noteTasks(model, resolved, at2),
       ...checkCreates(ownModel, resolved, at2),
+      ...checkEdits(ownModel, resolved, at2),
       ...noteChildLists(ownModel, app, at2),
       ...noteIntake(ownModel, app, resolved, at2),
       ...checkFirstClass(ownModel, app, resolved, at2),
@@ -37112,6 +38468,28 @@ function checkReadsRows(model, reads, entities, at2) {
   }
   return findings;
 }
+function checkEdits(model, resolved, at2) {
+  const plan = appWritePlan(model, resolved);
+  const register = resolved.register.remove === false && plan.get(resolved.entity) === void 0 ? [error51("register.remove", `${at2}.register.remove`, `hides a Delete this app never offers on a "${resolved.entity}" record \u2014 it writes no "${resolved.entity}" record here; drop \`remove\``)] : [];
+  return [...register, ...resolved.record.sections.flatMap(
+    (section, index) => section.blocks.flatMap((block, order) => {
+      if (block.kind !== "rows") return [];
+      const saved = new Set(plan.get(block.entity)?.update ?? []);
+      const hidden = block.remove === false && plan.get(block.entity) === void 0 ? [error51("block.remove", `${at2}.record.sections.${index}.blocks.${order}.remove`, `hides a Delete this app never offers on a "${block.entity}" row \u2014 no person writes "${block.entity}" here; drop \`remove\``)] : [];
+      return [...hidden, ...(block.edits ?? []).flatMap(
+        (name, place) => saved.has(name) ? [] : [error51("block.edits", `${at2}.record.sections.${index}.blocks.${order}.edits.${place}`, `writes "${name}" in place, and this app's save of a "${block.entity}" row does not write it \u2014 an act owns it, or no person writes "${block.entity}" here`)]
+      )];
+    })
+  )];
+}
+function heldAtStart(model, entity, where) {
+  const declared = entityOf(model, entity);
+  return where.flatMap((gate) => {
+    const field = declared?.fields.find((one) => one.alias === gate.field);
+    const [only, ...more] = gate.options;
+    return field?.type === "select" && more.length === 0 && field.default?.length === 1 && field.default[0] === only ? [gate.field] : [];
+  });
+}
 function checkCreates(model, resolved, at2) {
   const lists = [
     ...resolved.register.create === void 0 ? [] : [{ entity: resolved.entity, asked: resolved.register.create, fills: resolved.scope === void 0 ? [] : [resolved.scope.field], path: `${at2}.register.create` }],
@@ -37123,8 +38501,9 @@ function checkCreates(model, resolved, at2) {
           {
             entity: block.entity,
             asked: block.create,
-            // The link to the record is set by the add; a composer stamps the moment and the author.
-            fills: [block.via, ...block.kind === "timeline" ? [block.at, ...block.by === void 0 ? [] : [block.by]] : []],
+            // The link to the record is set by the add; a composer stamps the moment and the author; a select the
+            // block holds at the option its rows start at is where the add's row starts, no statement of its own.
+            fills: [block.via, ...block.kind === "timeline" ? [block.at, ...block.by === void 0 ? [] : [block.by]] : [], ...block.kind === "rows" ? heldAtStart(model, block.entity, block.where) : []],
             path: `${at2}.record.sections.${index}.blocks.${order}.create`
           }
         ] : [],
@@ -37208,45 +38587,16 @@ function checkApp(model, app, at2) {
   }
   const splits = new Set((app.register?.readings ?? []).flatMap((reading) => "metric" in reading ? [] : pressFields(modelPressed(reading))));
   for (const [index, stated] of (app.register?.filters ?? []).entries()) {
-    const name = filterField(stated);
     const path15 = `${at2}.register.filters.${index}`;
-    const filter2 = own(name, typeof stated === "string" ? path15 : `${path15}.field`);
-    const type = filter2 === void 0 ? void 0 : resolvedFieldType(filter2, entity, model.entities) ?? filter2.type;
-    if (filter2 !== void 0 && name === display.status?.field) {
-      findings.push(error51("register.filter", path15, `"${name}" is the status, already the register's chips \u2014 drop it`));
-    } else if (filter2 !== void 0 && (type === void 0 || !FILTER_TYPES.has(type))) {
-      const read = filter2.type === "lookup" ? readField(model, entity, filter2) : void 0;
-      const kind = read === void 0 ? `a ${filter2.type} field` : `a lookup of a ${read.field.type} field`;
-      findings.push(error51("register.filter", path15, `"${name}" is ${kind} \u2014 a register narrows by a select, a member, a link, a date, a yes/no or a number`));
-    } else if (filter2 !== void 0 && typeof stated !== "string") {
-      findings.push(...checkTiers(model, entity, filter2, type, `${path15}.tiers`));
-    } else if (filter2 !== void 0 && splits.has(name) && type !== "select_member") {
-      findings.push(note("register.filter-split", path15, `"${name}" is also what a picture above the rows splits them by \u2014 a press on its part narrows by it`));
-    }
-    scoped(name, path15, "it lists");
+    findings.push(...checkFilter(model, entity, stated, path15, { owner: "a register", chips: display.status?.field, splits }));
+    scoped(filterField(stated), path15, "it lists");
   }
   for (const [index, name] of (app.register?.search ?? []).entries()) {
     const path15 = `${at2}.register.search.${index}`;
-    const field = own(name, path15);
-    const type = field === void 0 ? void 0 : resolvedFieldType(field, entity, model.entities) ?? field.type;
-    if (field !== void 0 && (type === void 0 || !SEARCH_TYPES.has(type))) {
-      findings.push(error51("register.search", path15, `"${name}" is a ${field.type} field \u2014 a search matches words: text, a code, or a link by its row's title`));
-    }
+    findings.push(...checkSearch(model, entity, name, path15));
     scoped(name, path15, "it lists");
   }
-  const checkSort = (sort, base) => {
-    const sorted = /* @__PURE__ */ new Set();
-    for (const [index, key] of registerSortKeys(sort).entries()) {
-      const path15 = `${base}${Array.isArray(sort) ? `.${index}` : ""}.field`;
-      const field = own(key.field, path15);
-      if (field !== void 0 && !isSortableFieldType(field.type)) {
-        findings.push(error51("register.sort", path15, `"${key.field}" is a ${field.type} field, which holds no order`));
-      }
-      if (sorted.has(key.field)) findings.push(error51("register.sort", path15, `"${key.field}" is already a key of this order \u2014 a field orders the rows once`));
-      sorted.add(key.field);
-    }
-  };
-  checkSort(app.register?.sort, `${at2}.register.sort`);
+  findings.push(...checkOrder(entity, app.register?.sort, `${at2}.register.sort`));
   const tabs = app.register?.tabs ?? [];
   const dated = (name, path15) => {
     const field = own(name, path15);
@@ -37279,11 +38629,17 @@ function checkApp(model, app, at2) {
     if (status !== void 0 && tab.where?.[status] !== void 0) {
       findings.push(error51("register.tabs", `${path15}.where.${status}`, `narrows by "${status}", the status \u2014 its chips split the rows by it, each with its count; a tab splits them by the period or another field`));
     }
-    checkSort(tab.sort, `${path15}.sort`);
+    findings.push(...checkOrder(entity, tab.sort, `${path15}.sort`));
+  }
+  const group = app.register?.group;
+  if (group !== void 0 && group === app.scope) {
+    findings.push(error51("app.scope", `${at2}.register.group`, `"${group}" is the folder the app is inside, one group of every row \u2014 group by another field`));
+  } else if (group !== void 0) {
+    findings.push(...checkGroup(model, entity, display, group, `${at2}.register.group`, { chips: display.status?.field, layout: app.register?.layout ?? "table" }));
   }
-  if (app.register?.group !== void 0) findings.push(...checkGroup(model, entity, display, app, app.register.group, `${at2}.register.group`));
   findings.push(...checkRoster(model, entity, app, at2));
   findings.push(...checkLanes(model, entity, app, at2));
+  findings.push(...checkGantt(model, entity, app, at2));
   findings.push(...checkRegisterNarrowing(model, entity, app, at2));
   findings.push(...checkFiltersShown(model, entity, app, at2));
   const create = app.register?.create;
@@ -37336,6 +38692,7 @@ function checkApp(model, app, at2) {
   if (scope !== void 0 && !placed.has(scope)) place(scope, "the header's folder", `${at2}.record`);
   const sections = app.record?.sections ?? [];
   findings.push(...checkPages(app.record?.door, sections, `${at2}.record`));
+  findings.push(...checkRecordLayout(app, `${at2}.record`));
   if (app.record?.history === true && display.status?.history === void 0) {
     findings.push(error51("record.history", `${at2}.record.history`, `draws the status history of "${entity.alias}", which records none \u2014 name the history entity in \`records.${entity.alias}.status.history\`, or drop it`));
   }
@@ -37388,13 +38745,20 @@ function checkApp(model, app, at2) {
       const first2 = identity === void 0 ? void 0 : blocksPlaced.get(identity);
       if (first2 !== void 0) findings.push(error51("record.placed-once", path15, `places the same block a second time on the record (it is already in ${first2}) \u2014 a block is read once`));
       else if (identity !== void 0) blocksPlaced.set(identity, `the section "${section.title}"`);
-      findings.push(...checkBlock(model, entity, block, path15, place, app.reads !== "shared"));
+      findings.push(...checkBlock(model, entity, block, path15, place, app.reads !== "shared", app.checks ?? []));
       if (!isRowsBlock(block)) continue;
       const child = entityOf(model, block.rows);
       const link = child === void 0 ? void 0 : childLink(child, entity.alias, block.via);
       if (child === void 0 || link === void 0 || !("link" in link)) continue;
-      const where = Object.entries(block.where ?? {}).map(([field, options]) => ({ field, options }));
-      for (const total of blockTotals(model, entity.alias, child.alias, link.link, block.columns ?? [], where).values()) {
+      const whereOf2 = (one) => Object.entries(one.where ?? {}).map(([field, options]) => ({ field, options }));
+      const siblings = sections.flatMap(
+        (other) => (other.blocks ?? []).flatMap((one) => {
+          if (!isRowsBlock(one) || one.rows !== block.rows) return [];
+          const theirs = childLink(child, entity.alias, one.via);
+          return theirs !== void 0 && "link" in theirs && theirs.link === link.link ? [whereOf2(one)] : [];
+        })
+      );
+      for (const total of blockTotals(model, entity.alias, child.alias, link.link, block.columns ?? [], whereOf2(block), siblings).values()) {
         const inFact = inFacts.get(total);
         if (inFact !== void 0) findings.push(error51("record.foot-total", inFact, `"${total}" is already the total at the foot of the "${block.title ?? child.label}" block \u2014 drop it from the section`));
       }
@@ -37414,14 +38778,8 @@ function checkApp(model, app, at2) {
     if (act.of !== void 0 && act.on === "view") {
       findings.push(error51("act.of", `${path15}.on`, `is "${act.on}", and an act of a child works on the one child row it is pressed on \u2014 drop it`));
     }
-    if (act.of !== void 0 && act.on === "rows" && !listsTasks(model, app, act.of)) {
-      findings.push(
-        error51(
-          "act.of",
-          `${path15}.on`,
-          `is "rows", and "${act.of}" rows are picked together only where the record lists them as tasks \u2014 \`records.${act.of}.task\` over a stored status select with \`closed\`, in a rows block without \`expect\` or \`under\``
-        )
-      );
+    if (act.of !== void 0 && act.on === "rows" && !listsRows(app, act.of)) {
+      findings.push(error51("act.of", `${path15}.on`, `is "rows", and the record lists no "${act.of}" rows to pick together \u2014 list them in a rows block without \`expect\``));
     }
     const on = entityOf(model, actEntity(app, act));
     if (on === void 0) continue;
@@ -37566,7 +38924,43 @@ function hiddenWhenOffered(shown, offered) {
     return !held.some((option) => options.includes(option));
   });
 }
-function checkGroup(model, entity, display, app, name, path15) {
+function checkFilter(model, entity, stated, path15, around) {
+  const name = filterField(stated);
+  const filter2 = fieldOf(entity, name);
+  if (filter2 === void 0) return [error51("model.names-declared", typeof stated === "string" ? path15 : `${path15}.field`, `names "${name}", which is not a field of "${entity.alias}"`)];
+  const type = resolvedFieldType(filter2, entity, model.entities) ?? filter2.type;
+  if (name === around.chips) return [error51("register.filter", path15, `"${name}" is the status, already the register's chips \u2014 drop it`)];
+  if (!FILTER_TYPES.has(type)) {
+    const read = filter2.type === "lookup" ? readField(model, entity, filter2) : void 0;
+    const kind = read === void 0 ? `a ${filter2.type} field` : `a lookup of a ${read.field.type} field`;
+    return [error51("register.filter", path15, `"${name}" is ${kind} \u2014 ${around.owner} narrows by a select, a member, a link, a date, a yes/no or a number`)];
+  }
+  if (typeof stated !== "string") return checkTiers(model, entity, filter2, type, `${path15}.tiers`);
+  if (around.splits.has(name) && type !== "select_member") {
+    return [note("register.filter-split", path15, `"${name}" is also what a picture above the rows splits them by \u2014 a press on its part narrows by it`)];
+  }
+  return [];
+}
+function checkOrder(entity, sort, base) {
+  const findings = [];
+  const sorted = /* @__PURE__ */ new Set();
+  for (const [index, key] of registerSortKeys(sort).entries()) {
+    const path15 = `${base}${Array.isArray(sort) ? `.${index}` : ""}.field`;
+    const field = fieldOf(entity, key.field);
+    if (field === void 0) findings.push(error51("model.names-declared", path15, `names "${key.field}", which is not a field of "${entity.alias}"`));
+    else if (!isSortableFieldType(field.type)) findings.push(error51("register.sort", path15, `"${key.field}" is a ${field.type} field, which holds no order`));
+    if (sorted.has(key.field)) findings.push(error51("register.sort", path15, `"${key.field}" is already a key of this order \u2014 a field orders the rows once`));
+    sorted.add(key.field);
+  }
+  return findings;
+}
+function checkSearch(model, entity, name, path15) {
+  const field = fieldOf(entity, name);
+  if (field === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`)];
+  const type = resolvedFieldType(field, entity, model.entities) ?? field.type;
+  return SEARCH_TYPES.has(type) ? [] : [error51("register.search", path15, `"${name}" is a ${field.type} field \u2014 a search matches words: text, a code, or a link by its row's title`)];
+}
+function checkGroup(model, entity, display, name, path15, around) {
   const field = fieldOf(entity, name);
   if (field === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`)];
   const type = resolvedFieldType(field, entity, model.entities) ?? field.type;
@@ -37577,9 +38971,8 @@ function checkGroup(model, entity, display, app, name, path15) {
   if (several || many || !GROUP_TYPES.has(type)) {
     return [error51("register.group", path15, `"${name}" is a ${several || many ? `${field.type} field holding several values` : `${field.type} field`} \u2014 a row stands in one group: a single select, a one-row link, one member, a date, a yes/no or text`)];
   }
-  if (name === display.status?.field) return [error51("register.group", path15, `"${name}" is the status, whose chips already split the rows \u2014 group by another field`)];
-  if (name === app.scope) return [error51("app.scope", path15, `"${name}" is the folder the app is inside, one group of every row \u2014 group by another field`)];
-  if ((app.register?.layout ?? "table") !== "table") return [error51("register.group", path15, `groups a ${app.register?.layout ?? ""} register \u2014 rows are grouped in a table`)];
+  if (name === around.chips) return [error51("register.group", path15, `"${name}" is the status, whose chips already split the rows \u2014 group by another field`)];
+  if (around.layout !== "table" && around.layout !== "gantt") return [error51("register.group", path15, `groups a ${around.layout} register \u2014 rows are grouped in a table, and a gantt's lanes`)];
   if (name === display.title && (display.subtitle ?? []).length === 0) {
     return [error51("register.group", path15, `groups by "${name}", the row's title, so each row leads with its first subtitle \u2014 state \`records.${entity.alias}.subtitle\` (the person, the party)`)];
   }
@@ -37621,7 +39014,10 @@ function checkPages(door, sections, at2) {
   for (const [index, section] of sections.entries()) {
     if (section.page !== true) continue;
     const path15 = `${at2}.sections.${index}.page`;
-    if (door === "drawer") findings.push(error51("record.page", path15, `"${section.title}" is a page of its own, and a drawer has no pages; drop \`page\`, or make the door a page`));
+    if (door === "drawer" || door === "beside") {
+      const has = door === "drawer" ? "a drawer" : "a record beside the list";
+      findings.push(error51("record.page", path15, `"${section.title}" is a page of its own, and ${has} has no pages; drop \`page\`, or make the door a page`));
+    }
     if (section.at !== void 0) findings.push(error51("record.page", path15, `"${section.title}" is a step of the record's path, read in its scroll \u2014 drop \`page\`, or \`at\``));
     const segment = pageSegment(section.title);
     const first2 = addressed.get(segment);
@@ -37634,6 +39030,25 @@ function checkPages(door, sections, at2) {
   }
   return findings;
 }
+function checkRecordLayout(app, at2) {
+  const record2 = app.record;
+  const findings = [];
+  const sides = (record2?.sections ?? []).flatMap((section, index) => section.side === true ? [{ section, index }] : []);
+  if (sides.length > 0 && record2?.door !== void 0 && record2.door !== "page") {
+    findings.push(error51("record.side", `${at2}.door`, `"${sides[0]?.section.title ?? ""}" stands beside the rest, and a ${record2.door} has no room beside its sections \u2014 drop \`door: "${record2.door}"\`, or \`side\``));
+  }
+  for (const { section, index } of sides.slice(1)) {
+    findings.push(error51("record.side", `${at2}.sections.${index}.side`, `"${section.title}" stands beside the rest, as "${sides[0]?.section.title ?? ""}" already does \u2014 one section stands beside the others`));
+  }
+  for (const { section, index } of sides) {
+    if (section.page === true) findings.push(error51("record.side", `${at2}.sections.${index}`, `"${section.title}" stands beside the rest and is a page of its own \u2014 it is one or the other`));
+  }
+  const layout = app.register?.layout ?? "table";
+  if (record2?.door === "beside" && layout !== "table") {
+    findings.push(error51("record.beside", `${at2}.door`, `opens the record beside the register's list, and the register is \`${layout}\`, which draws no list \u2014 drop \`door: "beside"\`, or the layout`));
+  }
+  return findings;
+}
 function checkSectionAt(entity, display, at2, path15) {
   if (at2 === void 0) return [];
   const status = display.status;
@@ -37828,6 +39243,17 @@ function checkLanes(model, entity, app, at2) {
   if (count2 === 0 || count2 > LANE_LOADS) return [error51("register.loads", `${at2}.register.loads`, `names ${count2} loads \u2014 a lane reads one or ${LANE_LOADS}, the ones it runs out of first (its weight, its volume)`)];
   return laneLoads(model, entity.alias, shape, loads).refused.map((one) => error51("register.loads", `${at2}.register.loads.${one.value}`, one.reason));
 }
+function checkGantt(model, entity, app, at2) {
+  const layout = app.register?.layout;
+  const gantt = app.register?.gantt;
+  const path15 = `${at2}.register.gantt`;
+  if (gantt === void 0) {
+    return layout === "gantt" ? [error51("register.gantt", path15, "a gantt draws each row as a bar between two dates \u2014 name them in `gantt` (`start`, and `end` where the entity states no `due`)")] : [];
+  }
+  if (layout !== "gantt") return [error51("register.gantt", path15, `names the dates a gantt's bars run between, and the register is ${layout === void 0 ? "a table" : `\`${layout}\``} \u2014 state \`layout: "gantt"\`, or drop it`)];
+  const shape = ganttShape(model, entity.alias, gantt);
+  return "refused" in shape ? shape.refused.map((one) => error51("register.gantt", one.at === "" ? path15 : `${path15}.${one.at}`, one.reason)) : [];
+}
 function checkTiers(model, entity, field, type, path15) {
   if (type !== "number") return [error51("register.tiers", path15, `"${field.alias}" is a ${field.type} field \u2014 tiers band a number; name it bare`)];
   const select = contractFigureSelect(field, entity, model.entities);
@@ -37893,24 +39319,13 @@ function checkFiltersShown(model, entity, app, at2) {
   const register = app.register;
   const display = recordDisplay(withAppRow(model, app), entity.alias);
   if (register === void 0 || display === void 0) return [];
-  const columns = register.columns ?? [];
-  const drawn = [...partsOf(display).keys(), ...meterBounds(display, columns).keys(), ...columns];
-  const shown = /* @__PURE__ */ new Set([
-    ...drawn,
-    // A figure read in its row's own unit or currency says that select beside its number.
-    ...drawn.flatMap((name) => {
-      const field = fieldOf(entity, name);
-      const select = field === void 0 ? void 0 : contractFigureSelect(field, entity, model.entities);
-      return select === void 0 ? [] : [select.alias];
-    }),
-    ...display.due ?? [],
+  const shown = rowShows(model, entity, display, register.columns ?? [], [
     // A guard waits at the act it refuses; a register's row says its warnings.
     ...(app.checks ?? []).flatMap((check2) => check2.of === void 0 && check2.blocks === void 0 ? [check2.field] : []),
     ...register.group === void 0 ? [] : [register.group],
     ...register.lanes === void 0 ? [] : [register.lanes]
   ]);
   const fixed = /* @__PURE__ */ new Set([...heldBy(register.where).flatMap((held) => held.values === 1 ? [held.field] : []), ...app.scope === void 0 ? [] : [app.scope]]);
-  const unshown = (name) => `"${name}" is drawn nowhere on the rows it narrows \u2014 make it a column or part of the row's line, or drop it`;
   const pressed = (part) => (name) => `a press on its ${part} narrows the rows by "${name}", which is drawn nowhere on them \u2014 make it a column or part of the row's line, or drop the reading`;
   const narrowed = [
     ...(register.filters ?? []).map((stated, index) => ({ name: filterField(stated), path: `${at2}.register.filters.${index}`, says: unshown })),
@@ -37922,6 +39337,23 @@ function checkFiltersShown(model, entity, app, at2) {
       return pressFields(modelPressed(reading)).map((name) => ({ name, path: path15, says: pressed(part) }));
     })
   ];
+  return unshownFilters(model, entity, narrowed, shown, fixed);
+}
+var unshown = (name) => `"${name}" is drawn nowhere on the rows it narrows \u2014 make it a column or part of the row's line, or drop it`;
+function rowShows(model, entity, display, columns, more) {
+  const drawn = [...partsOf(display).keys(), ...meterBounds(display, columns).keys(), ...columns];
+  return /* @__PURE__ */ new Set([
+    ...drawn,
+    ...drawn.flatMap((name) => {
+      const field = fieldOf(entity, name);
+      const select = field === void 0 ? void 0 : contractFigureSelect(field, entity, model.entities);
+      return select === void 0 ? [] : [select.alias];
+    }),
+    ...display?.due ?? [],
+    ...more
+  ]);
+}
+function unshownFilters(model, entity, narrowed, shown, fixed) {
   return narrowed.flatMap(({ name, path: path15, says }) => {
     const field = fieldOf(entity, name);
     const type = field === void 0 ? void 0 : resolvedFieldType(field, entity, model.entities) ?? field.type;
@@ -37929,7 +39361,7 @@ function checkFiltersShown(model, entity, app, at2) {
     return [error51("register.filter-unshown", path15, says(name))];
   });
 }
-function checkBlock(model, entity, block, at2, place, scoped) {
+function checkBlock(model, entity, block, at2, place, scoped, checks) {
   const findings = [];
   const unruled = (child, through) => scoped ? unruledChild(model, entity, child, through, at2) : [];
   if (isReadingBlock(block)) {
@@ -37987,6 +39419,8 @@ function checkBlock(model, entity, block, at2, place, scoped) {
       if (block.expect !== void 0) findings.push(...checkExpect(model, child, block, back, `${at2}.expect`));
       if (block.of !== void 0) findings.push(...checkExpectOf(entity, child, block, `${at2}.of`));
       if (block.under !== void 0) findings.push(...checkUnder(model, entity, child, block, at2));
+      findings.push(...checkBlockNarrowing(model, child, block, back, checks, at2));
+      findings.push(...checkBlockEdits(model, child, block, at2));
     } else if (!child.fields.some((field) => resolvedFieldType(field, child, model.entities) === "date")) {
       findings.push(error51("block.timeline", at2, `reads "${child.alias}" as a timeline, and it has no date to place its entries by`));
     }
@@ -38011,6 +39445,59 @@ function checkBlock(model, entity, block, at2, place, scoped) {
   }
   return findings;
 }
+function checkBlockNarrowing(model, child, block, back, checks, at2) {
+  const display = recordDisplay(model, child.alias);
+  const filters = block.filters ?? [];
+  if (display === void 0 || filters.length === 0 && block.search === void 0 && block.group === void 0 && block.sort === void 0) return [];
+  const findings = [];
+  if (block.expect !== void 0) {
+    findings.push(error51("block.narrow", at2, `expects a line per "${block.expect}", each drawn filled or not in its key's order \u2014 a narrowing would hide one, an order of its own shuffle them; drop \`filters\`, \`search\`, \`group\` and \`sort\``));
+  }
+  const chips = isTaskBlock(model, block) ? display.status?.field : void 0;
+  const fixed = /* @__PURE__ */ new Set([...back === void 0 ? [] : [back], ...Object.entries(block.where ?? {}).flatMap(([field, options]) => options.length === 1 ? [field] : [])]);
+  const same = (name, path15) => fixed.has(name) ? [error51("block.narrow", path15, `"${name}" is ${name === back ? "the link back to this record" : "held at one option by the block's `where`"}, the same on every row it narrows \u2014 drop it here`)] : [];
+  for (const [index, stated] of filters.entries()) {
+    const path15 = `${at2}.filters.${index}`;
+    findings.push(...checkFilter(model, child, stated, path15, { owner: "a rows block", chips, splits: /* @__PURE__ */ new Set() }), ...same(filterField(stated), path15));
+  }
+  for (const [index, name] of (block.search ?? []).entries()) findings.push(...checkSearch(model, child, name, `${at2}.search.${index}`));
+  findings.push(...checkOrder(child, block.sort, `${at2}.sort`));
+  if (block.group !== void 0) {
+    const path15 = `${at2}.group`;
+    const fixedGroup = same(block.group, path15);
+    if (block.under !== void 0) findings.push(error51("block.narrow", path15, `stands its lines under their documents ("${block.under}"), which already group them \u2014 drop \`group\``));
+    else if (fixedGroup.length > 0) findings.push(...fixedGroup);
+    else findings.push(...checkGroup(model, child, display, block.group, path15, { chips, layout: "table" }));
+  }
+  const shown = rowShows(model, child, display, block.columns ?? [], [
+    // A child row's line says the warnings standing on it.
+    ...checks.flatMap((check2) => check2.of === child.alias && check2.blocks === void 0 ? [check2.field] : []),
+    ...block.group === void 0 ? [] : [block.group]
+  ]);
+  const narrowed = filters.map((stated, index) => ({ name: filterField(stated), path: `${at2}.filters.${index}`, says: unshown }));
+  return [...findings, ...unshownFilters(model, child, narrowed, shown, fixed)];
+}
+var LINE_EDIT_TYPES = /* @__PURE__ */ new Set(["number", "date", "text", "select"]);
+function checkBlockEdits(model, child, block, at2) {
+  const edits = block.edits ?? [];
+  if (edits.length === 0) return [];
+  if (block.expect !== void 0) return [error51("block.edits", `${at2}.edits`, `expects a line per "${block.expect}", whose columns a person fills in place already \u2014 drop \`edits\``)];
+  const figure = recordDisplay(model, child.alias)?.figure;
+  const shown = /* @__PURE__ */ new Set([...block.columns ?? [], ...figure === void 0 ? [] : [figure]]);
+  return edits.flatMap((name, index) => {
+    const path15 = `${at2}.edits.${index}`;
+    const field = fieldOf(child, name);
+    if (field === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${child.alias}"`)];
+    if (!shown.has(name)) return [error51("block.edits", path15, `"${name}" is drawn nowhere on the line \u2014 make it a column, or drop it here`)];
+    if (!isAsked(field)) return [error51("block.edits", path15, `"${name}" is a ${field.type} field nobody writes \u2014 a line writes a value a person keys`)];
+    const long = field.type === "text" && field.format === "markdown";
+    const several = field.type === "select" && field.multi === true;
+    if (!LINE_EDIT_TYPES.has(field.type) || long || several) {
+      return [error51("block.edits", path15, `"${name}" is a ${long ? "long text" : several ? "multi-select" : `${field.type}`} field \u2014 a line holds a number, a date, a few words or one option as its control; the row opens to write the rest`)];
+    }
+    return [];
+  });
+}
 function checkExpectOf(entity, child, block, at2) {
   const name = block.of;
   if (name === void 0) return [];
@@ -38071,269 +39558,6 @@ function fileLed(model, child) {
   return field?.type === "files" && isAsked(field) ? image : void 0;
 }
 
-// ../shared/src/schemas/write_rules.ts
-var BOUND_REF = /^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)?$/;
-var BOUND_REF_MESSAGE = 'a bound is a number, "<field alias>" or "<link alias>.<field alias>"';
-var fieldWriteRuleSchema = zod_default.object({
-  default_from: zod_default.string().regex(/^[a-z][a-z0-9_]*\.[a-z][a-z0-9_]*$/, 'default_from is "<link alias>.<field alias>"').optional().describe(
-    "Copy this field's value from the linked row at CREATE time \u2014 `<link alias>.<field alias>`, the link being a one-row link on this entity, required or filled by the add (the record a row is added under). The value is copied rather than looked up, so the source changing later leaves the row alone."
-  ),
-  min: zod_default.union([zod_default.number(), zod_default.string().regex(BOUND_REF, BOUND_REF_MESSAGE)]).optional().describe(
-    "Refuse a create or update whose value is below this: a constant for a number, or a field \u2014 `<field alias>` of the same row, or `<link alias>.<field alias>` of the one row a link names \u2014 of the same type (a return date after the departure, a line's day inside its trip). On a figure whose unit or currency is per row (`unit_field`, `currency_field`) a constant bound is only 0; bound it by a field of the row"
-  ),
-  max: zod_default.union([zod_default.number(), zod_default.string().regex(BOUND_REF, BOUND_REF_MESSAGE)]).optional().describe("Refuse a create or update whose value is above this: a constant for a number, or a field of the same row or of the one row a link names"),
-  options_where: tableRecordFiltersSchema.optional().describe(
-    "Which rows of the target this link may point at \u2014 an `and` group of plain conditions over the TARGET entity's own fields, each `field_key` a field alias. It narrows the picker's read and is refused again where the write lands."
-  ),
-  same: zod_default.array(contractAliasSchema).min(1).optional().describe(
-    "One-row links this row and each row this link points at must name alike \u2014 a fee's invoice is one of its own visit's, a box's seal one of its own shipping line's: each a one-row link of both entities to the same entity. It narrows the picker's read to the rows naming what this row names, and a write is refused wherever it lands \u2014 on the link, or on what the two rows compare."
-  )
-}).strict();
-var entityWriteRulesSchema = zod_default.object({
-  natural_key: zod_default.array(contractAliasSchema).min(1).optional().describe(
-    "The field aliases a row of this entity is RECOGNISED by. A write that names a row of this entity by these values reuses the row it finds, minting one only where nothing matches."
-  ),
-  fields: zod_default.record(contractAliasSchema, fieldWriteRuleSchema).optional().describe("Field alias \u2192 what that field's value is copied from, bounded by or picked among"),
-  no_overlap: zod_default.object({
-    from: contractAliasSchema.describe("The stored date (or datetime) a row's span starts on"),
-    to: contractAliasSchema.describe(
-      "The stored date (or datetime) a row's span ends on \u2014 a day it holds, unless `records` names it the day the row `frees`; a moment another row may start at"
-    ),
-    by: zod_default.array(contractAliasSchema).min(1).optional().describe("Fields two rows share to compete for a span (the same employee, the same room); absent, every row"),
-    while: zod_default.record(contractAliasSchema, zod_default.array(contractAliasSchema).min(1)).optional().describe("Only rows at these options of these selects hold their span (running, not closed); absent, every row")
-  }).strict().optional().describe("No two rows hold overlapping spans \u2014 a create or update that would is refused")
-}).strict();
-var writeRulesSchema = zod_default.record(contractAliasSchema, entityWriteRulesSchema);
-function boundRef(bound) {
-  if (typeof bound !== "string") return void 0;
-  const [first2 = "", second] = bound.split(".");
-  return second === void 0 ? { field: first2 } : { link: first2, field: second };
-}
-var BOUNDED_TYPES = ["number", "date"];
-var NATURAL_KEY_TYPES = ["text", "number", "select_record_link"];
-var OPTIONS_WHERE_OPERATORS = {
-  number: ["equals", "not_equals", "greater_than", "less_than", "greater_than_or_equal_to", "less_than_or_equal_to"],
-  text: ["equals", "not_equals"],
-  boolean: ["equals"],
-  select: ["has_any_of", "has_none_of"]
-};
-function optionsWhereConditions(filter2, target) {
-  if (filter2.node_type !== "group" || filter2.logic !== "and") return void 0;
-  const out = [];
-  for (const child of filter2.children) {
-    if (child.node_type !== "condition") return void 0;
-    const field = target.fields.find((one) => one.alias === child.field_key);
-    if (field === void 0) return void 0;
-    const allowed = OPTIONS_WHERE_OPERATORS[child.type ?? ""];
-    if (allowed === void 0 || !allowed.includes(child.operator)) return void 0;
-    out.push({ type: child.type ?? "", field, operator: child.operator, value: child.value });
-  }
-  return out.length === 0 ? void 0 : out;
-}
-function checkBoundRef(entity, field, ref, byAlias, path15) {
-  const entities = [...byAlias.values()];
-  let on = entity;
-  if ("link" in ref) {
-    const link = entity.fields.find((one) => one.alias === ref.link);
-    if (link === void 0 || link.type !== "select_record_link" || link.cardinality !== "one") {
-      return [error51("write.bounds", path15, `reads "${ref.link}", which is not a one-row link of ${entity.label} \u2014 a bound is read off this row or the one row a link names`)];
-    }
-    const target = byAlias.get(link.target_entity);
-    if (target === void 0) return [error51("model.names-declared", path15, `reads "${ref.link}", whose entity "${link.target_entity}" this model does not declare`)];
-    on = target;
-  }
-  const source = on.fields.find((one) => one.alias === ref.field);
-  if (source === void 0) return [error51("model.names-declared", path15, `names "${ref.field}", which is not a field of ${on.label}`)];
-  if (!("link" in ref) && source.alias === field.alias) return [error51("write.bounds", path15, `bounds ${field.label} by itself`)];
-  const from = resolvedFieldType(source, on, entities);
-  const into = resolvedFieldType(field, entity, entities);
-  if (from !== into) return [error51("write.bounds", path15, `bounds ${field.label} (${String(into)}) by "${source.label}" (${String(from)}) \u2014 a bound is of the value's own type`)];
-  const apart = boundUnitRefusal(field, source, entity, entities, "link" in ref ? { link: ref.link, on } : void 0);
-  return apart === void 0 ? [] : [error51("write.bounds", path15, apart)];
-}
-function checkSame(entity, field, same, byAlias, path15) {
-  if (field.type !== "select_record_link") {
-    return [error51("write.same", path15, `${field.label} is a ${field.type} field \u2014 \`same\` narrows the rows a LINK points at`)];
-  }
-  const target = byAlias.get(field.target_entity);
-  if (target === void 0) return [];
-  const oneLink = (on, alias2) => on.fields.find((one) => one.alias === alias2 && one.type === "select_record_link" && one.cardinality === "one");
-  return same.flatMap((alias2, index) => {
-    const own = oneLink(entity, alias2);
-    const theirs = oneLink(target, alias2);
-    const at2 = `${path15}.${index}`;
-    if (own === void 0) return [error51("write.same", at2, `"${alias2}" is not a one-row link of ${entity.label}`)];
-    if (theirs === void 0) return [error51("write.same", at2, `"${alias2}" is not a one-row link of ${target.label} \u2014 the row ${field.label} points at names nothing to compare`)];
-    if (own.type !== "select_record_link" || theirs.type !== "select_record_link" || own.target_entity !== theirs.target_entity) {
-      return [error51("write.same", at2, `"${alias2}" names rows of different entities on ${entity.label} and ${target.label}`)];
-    }
-    return [];
-  });
-}
-function checkNoOverlap(entity, rule, at2) {
-  const findings = [];
-  const own = (name) => entity.fields.find((one) => one.alias === name);
-  for (const side of ["from", "to"]) {
-    const date5 = own(rule[side]);
-    if (date5?.type !== "date") findings.push(error51("write.no-overlap", `${at2}.${side}`, `"${rule[side]}" is not a date field of ${entity.label} \u2014 a span runs between two dates`));
-  }
-  for (const [index, name] of (rule.by ?? []).entries()) {
-    const by = own(name);
-    if (by === void 0 || !["select_record_link", "select_member", "select", "text", "number"].includes(by.type) || "multi" in by && by.multi === true) {
-      findings.push(error51("write.no-overlap", `${at2}.by.${index}`, `"${name}" is not one value rows can share \u2014 a link, a person, one option, a text or a number`));
-    }
-  }
-  for (const [name, options] of Object.entries(rule.while ?? {})) {
-    const select = own(name);
-    if (select?.type !== "select" || select.multi === true) {
-      findings.push(error51("write.no-overlap", `${at2}.while.${name}`, `"${name}" is not a single select of ${entity.label}`));
-      continue;
-    }
-    for (const option of options) {
-      if (!select.options.some((one) => one.alias === option)) findings.push(error51("model.names-declared", `${at2}.while.${name}`, `names option "${option}", which "${select.label}" does not declare`));
-    }
-  }
-  return findings;
-}
-function checkWriteRules(entities, rules) {
-  const findings = [];
-  const byAlias = new Map(entities.map((entity) => [entity.alias, entity]));
-  for (const [alias2, entry] of Object.entries(rules)) {
-    const at2 = `write_rules.${alias2}`;
-    const entity = byAlias.get(alias2);
-    if (entity === void 0) {
-      findings.push(error51("model.names-declared", at2, `names entity "${alias2}", which this model does not declare \u2014 write rules are keyed by entity alias (${byAlias.size > 0 ? [...byAlias.keys()].join(", ") : "this model declares none"})`));
-      continue;
-    }
-    const fieldByAlias = new Map(entity.fields.map((field) => [field.alias, field]));
-    if (entry.no_overlap !== void 0) findings.push(...checkNoOverlap(entity, entry.no_overlap, `${at2}.no_overlap`));
-    const keyed = new Set(entry.natural_key ?? []);
-    const uniqueAsSet = (entity.unique ?? []).some((set2) => set2.every((name) => keyed.has(name)));
-    for (const [index, key] of (entry.natural_key ?? []).entries()) {
-      const field = fieldByAlias.get(key);
-      if (field === void 0) {
-        findings.push(error51("model.names-declared", `${at2}.natural_key.${index}`, `names "${key}", which is not a field of ${entity.label}`));
-        continue;
-      }
-      if (!NATURAL_KEY_TYPES.includes(field.type)) {
-        findings.push(error51("write.natural-key", `${at2}.natural_key.${index}`, `${field.label} is a ${field.type} field \u2014 a row is recognised by a value a person types back or the one row it belongs with, so a natural key is text, a number or a one-row link`));
-        continue;
-      }
-      if (field.type === "select_record_link" && field.cardinality !== "one") {
-        findings.push(error51("write.natural-key", `${at2}.natural_key.${index}`, `${field.label} holds MANY rows \u2014 a row is recognised by the one row it belongs with, so a link in a natural key is of cardinality "one"`));
-        continue;
-      }
-      if (field.type === "text" && field.unique !== true && !uniqueAsSet) {
-        findings.push(error51("write.natural-key", `${at2}.natural_key.${index}`, `${field.label} recognises a row and nothing makes it unique \u2014 declare \`unique: true\` on it, or the key's fields as a set in the entity's \`unique\`; two rows sharing it would make find-or-create pick whichever the read answered first`));
-      }
-    }
-    for (const [fieldAlias2, rule] of Object.entries(entry.fields ?? {})) {
-      const path15 = `${at2}.fields.${fieldAlias2}`;
-      const field = fieldByAlias.get(fieldAlias2);
-      if (field === void 0) {
-        findings.push(error51("model.names-declared", path15, `names "${fieldAlias2}", which is not a field of ${entity.label}`));
-        continue;
-      }
-      if (rule.default_from !== void 0) {
-        findings.push(...checkDefaultFrom(entity, field, rule.default_from, byAlias, `${path15}.default_from`));
-      }
-      const bounded = resolvedFieldType(field, entity, entities);
-      if ((rule.min !== void 0 || rule.max !== void 0) && !BOUNDED_TYPES.includes(bounded ?? field.type)) {
-        findings.push(error51("write.bounds", path15, `${field.label} is a ${field.type} field \u2014 \`min\`/\`max\` bound a number or a date`));
-      }
-      for (const side of ["min", "max"]) {
-        const bound = rule[side];
-        if (typeof bound === "number" && bounded === "date") {
-          findings.push(error51("write.bounds", `${path15}.${side}`, `bounds the date ${field.label} by a number \u2014 a date is bounded by a date field`));
-        }
-        const perRow = typeof bound === "number" && bound !== 0 ? contractUnitSource(field, entity, entities) : void 0;
-        if (perRow !== void 0) {
-          findings.push(error51("write.bound-per-row-unit", `${path15}.${side}`, `bounds ${field.label} by ${String(bound)}, which is in no ${perRow.vocabulary}, and each row reads it in the ${perRow.vocabulary} its ${unitSourceName(perRow)} holds \u2014 only 0 is the same in every ${perRow.vocabulary}`));
-        }
-        const ref = boundRef(bound);
-        if (ref !== void 0) findings.push(...checkBoundRef(entity, field, ref, byAlias, `${path15}.${side}`));
-      }
-      if (typeof rule.min === "number" && typeof rule.max === "number" && rule.min > rule.max) {
-        findings.push(error51("write.bounds", `${path15}.min`, `is above \`max\` (${rule.min} > ${rule.max}) \u2014 the bound refuses every figure`));
-      }
-      if (rule.same !== void 0) findings.push(...checkSame(entity, field, rule.same, byAlias, `${path15}.same`));
-      if (rule.options_where === void 0) continue;
-      if (field.type !== "select_record_link") {
-        findings.push(error51("write.options-where", `${path15}.options_where`, `${field.label} is a ${field.type} field \u2014 \`options_where\` narrows the rows a LINK may point at`));
-        continue;
-      }
-      const target = byAlias.get(field.target_entity);
-      if (target === void 0) continue;
-      const conditions = optionsWhereConditions(rule.options_where, target);
-      if (conditions === void 0) {
-        findings.push(error51("write.options-where", `${path15}.options_where`, `is not a narrowing this clause can both filter a picker by and refuse a write with: an \`and\` group of plain conditions over ${target.label}'s own fields, each \`field_key\` a field alias and each operator one of ${Object.entries(OPTIONS_WHERE_OPERATORS).map(([type, ops]) => `${type} ${ops.join("/")}`).join("; ")}`));
-        continue;
-      }
-      for (const condition of conditions) {
-        const at3 = `${path15}.options_where`;
-        const perRow = condition.type === "number" ? contractUnitSource(condition.field, target, entities) : void 0;
-        if (perRow !== void 0) {
-          findings.push(error51("write.options-where", at3, `compares "${condition.field.label}", which each row reads in the ${perRow.vocabulary} its ${unitSourceName(perRow)} holds, with a bare number \u2014 a narrowing compares a figure read in one ${perRow.vocabulary} for every row`));
-        }
-        if (condition.type !== "select") continue;
-        if (condition.field.type !== "select") {
-          findings.push(error51("write.options-where", at3, `compares "${condition.field.label}" as a select \u2014 it is a ${condition.field.type} field`));
-          continue;
-        }
-        if (!Array.isArray(condition.value)) {
-          findings.push(error51("write.options-where", at3, `narrows "${condition.field.label}" by no option at all \u2014 a select narrowing names the options it admits`));
-          continue;
-        }
-        const declared = new Set(condition.field.options.map((option) => option.alias));
-        for (const named of condition.value) {
-          if (typeof named === "string" && declared.has(named)) continue;
-          findings.push(error51("model.names-declared", at3, `names option "${String(named)}", which "${condition.field.label}" does not declare (${[...declared].join(", ")})`));
-        }
-      }
-    }
-  }
-  return findings;
-}
-function checkDefaultFrom(entity, field, stated, byAlias, path15) {
-  const entities = [...byAlias.values()];
-  const [linkAlias, sourceAlias] = stated.split(".");
-  const link = entity.fields.find((one) => one.alias === linkAlias);
-  if (link === void 0 || link.type !== "select_record_link") {
-    return [
-      error51("write.default-from", path15, `names "${linkAlias}", which is not a link field of ${entity.label} \u2014 a default is copied from a row this one points at`)
-    ];
-  }
-  if (link.cardinality !== "one") {
-    return [
-      error51("write.default-from", path15, `reads "${link.label}", which holds MANY rows \u2014 a default copied from a list would take whichever row came back first`)
-    ];
-  }
-  const target = byAlias.get(link.target_entity);
-  const source = target?.fields.find((one) => one.alias === sourceAlias);
-  if (target === void 0 || source === void 0) {
-    return [
-      error51("model.names-declared", path15, `names "${sourceAlias}", which is not a field of entity "${link.target_entity}"`)
-    ];
-  }
-  const from = resolvedFieldType(source, target, entities);
-  const into = resolvedFieldType(field, entity, entities);
-  if (from !== into) {
-    return [
-      error51("write.default-from", path15, `copies ${target.label}'s "${source.label}" (${String(from)}) into a ${String(into)} field`)
-    ];
-  }
-  if (source.type !== "select" || field.type !== "select") return [];
-  const findings = [];
-  if (source.multi === true && field.multi !== true) {
-    findings.push(error51("write.default-from", path15, `copies ${target.label}'s "${source.label}", which holds several options, into ${field.label}, which holds one \u2014 a copy would keep whichever came first`));
-  }
-  const missing = source.options.filter((option) => !field.options.some((one) => one.alias === option.alias));
-  if (missing.length > 0) {
-    findings.push(error51("write.default-from", path15, `copies ${target.label}'s "${source.label}" into ${field.label}, which declares no option ${missing.map((option) => `"${option.alias}"`).join(", ")} \u2014 a copied option is written as the one of the same alias`));
-  }
-  return findings;
-}
-
 // ../shared/src/schemas/workspace_model.ts
 var workspaceModelContractSchema = zod_default.object({
   entities: zod_default.array(contractEntitySchema).describe("The tables this model creates, with their fields, options and views"),
@@ -38901,8 +40125,8 @@ function resultSideEffects(result) {
 }
 
 // src/version.ts
-var VERSION = "0.277.0";
-var APP_SDK_VERSION = "0.106.0";
+var VERSION = "0.278.0";
+var APP_SDK_VERSION = "0.106.1";
 
 // src/timezone.ts
 function machineTimezone() {
@@ -38918,7 +40142,7 @@ function machineTimezone() {
 import { spawn as spawn2 } from "node:child_process";
 
 // src/model_reference.md
-var model_reference_default = '# The Lotics workspace model (`model.json`)\n\nOne JSON file describing a workspace: its tables, fields, options, views, roles,\nfirst rows, how a row of each table is recognised, and the apps over them. Each \xA7\nis its own page at `model/<section>` \u2014 `lotics docs`, or the `docs` tool. Complete models of several trades, to read as\nworked examples: `https://lotics.ai/presets/index.json`.\n\n**What a model composes with**\n\n- **Entities and fields** (\xA7 Entity, \xA7 Field) \u2014 the tables, their columns, options and links.\n- **Records** (\xA7 Records) \u2014 how a row of each entity is RECOGNISED: its title, the line\n  under it, its picture, its status, the one number it stands for. Stated once per entity\n  and read by every surface that draws one of its rows.\n- **Write rules** (\xA7 Write rules) \u2014 what a write finds, copies, bounds and picks among.\n- **Apps** (\xA7 Apps) \u2014 one register over one entity and the record each row opens: which\n  fields go where, the acts, and the checks that guard them \u2014 or a dashboard of readings.\n  How each thing LOOKS is the runtime\'s, one treatment per concept; no key here changes it.\n  A screen the job needs and no key states is a `lotics report` \u2014 the job, what the model\n  drew, the word wanted \u2014 never keys bent to approximate it.\n\n**The working order**\n\n1. Name the people and each one\'s JOB \u2014 the work they alone decide or write.\n2. The entities and fields those jobs touch, and a `records` entry for every entity an\n   app lists, opens or picks.\n3. One app per job in `apps[]`, each one register over one entity.\n4. `lotics model apply model.json` \u2014 the file is checked first, every problem in one run;\n   then the tables, then a new version of every app, live\n   (`lotics setup model.json --email you@company.com` where no account exists yet).\n5. Change the file and apply it again; `lotics model pull` writes what the workspace holds.\n   Rolling an app back (`lotics run rollback_app`) restores its earlier version \u2014 table\n   changes and data writes stay.\n\n## The rules\n\n- **At least one entity, at most 50.** More tables than that is a data model\n  being designed, not applied \u2014 apply the rest in a second call.\n- **An existing table is adopted.** `lotics model apply` binds an entity whose `label`\n  already names a table in the workspace, and adds the fields, options and\n  views it is missing. No stored value is ever changed or deleted: a field it\n  adopts takes the model\'s `default`, and the `format` and `unit` it reads in,\n  where that only relabels \u2014 a date\'s format and a unit converting its figures are\n  left. Applying the same model twice changes nothing the second time.\n- **Renaming a field is `lotics run update_table`**, then the same label in this\n  file; deleting is `lotics run delete_table`. Neither goes through the file\n  (\xA7 What a run remembers).\n- **The file\'s own majority is the language.** A model names no locale \u2014 which\n  language it is in is what it mostly says, and `model apply` notes the label\n  written the other way. The generated screens read the kit\'s pack, and a\n  generated WRITE cannot: its refusals run on the server, so they are worded in\n  that same majority. Mix the two and the workspace answers in two languages.\n- **Rows land only where every bound table is empty.** One table already holding\n  records and no rows are written anywhere: sample rows landing among a\n  customer\'s real ones cannot be told apart from them.\n- **`lotics model apply` checks all of it before anything is written**, and\n  reports every problem in one run rather than the first. Each section of this\n  page ends its keys with the rules the check enforces there, one sentence each\n  under an id; a finding names its rule\'s id (`[register.filter]`), and\n  `model/<rule id>` is that one rule\'s page.\n\n<!-- generated:start rules-model -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `model.schema` | Every key is one its table lists, holding the type its row gives, and every required key is stated. |\n| `model.retired` | `field_roles`, `table_workflows` and `connections` are no longer part of a model: `records` states how a row is recognised, and an app\'s own writes do what a table automation did. |\n| `model.names-declared` | Every alias a key names is declared: an entity of this model, a field of the entity the key reads, an option of the select it names, an act of the app, a template or an app of this model. |\n| `model.tables` | A model declares at least one table and at most 50; apply the rest as a second model. |\n| `model.rows-cap` | Rows are a sample: at most 200 per entity, 2000 per model and 2000 documents attached \u2014 a real data set belongs in an import. |\n| `model.language` | *Noted, never refused:* A label or description written in the other language than the model\'s majority \u2014 with or without diacritics. |\n| `model.alias-unique` | An alias is unique where it is named: entities, roles and templates in the model, fields and views in their entity, options in their select. |\n| `model.label-unique` | A label is unique where apply finds it by label: entities, roles and templates in the model, fields and views in their entity, options in their select \u2014 and no view takes its entity\'s own label, which names the whole-table grid apply makes. |\n| `model.template-sha` | A template\'s `content_sha256`, where stated, is the 64-character lowercase hex sha256 of its content. |\n| `model.template-kind` | An act makes its document from an html template; a register\'s `export` fills an html or an excel one. |\n| `model.filter` | A filter \u2014 a view\'s, a rollup\'s \u2014 tests fields of the entity it reads, through links as `entity.field` hops each standing on the entity the last lands on, by options its select declares. |\n\n<!-- generated:end rules-model -->\n\n## Top level\n\nEvery table of keys on this page is generated from the schema `model apply`\nparses the file with, so it is the whole of what a key may hold.\n\n<!-- generated:start top-level -->\n\n#### Model file\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `entities` | list of [Entity](#entity) | yes | The tables this model creates, with their fields, options and views |\n| `roles` | list of [Role](#role) | no | Workspace groups to create; members are added to them afterwards |\n| `templates` | list of [Template](#template) | no | Document templates: html and email inline, excel made from an uploaded workbook |\n| `rows` | map of alias \u2192 list of [Row](#row) | no | First records, keyed by entity alias \u2014 written only where every table they land in is empty |\n| `records` | map of alias \u2192 [Record](#record) | no | How a row of each entity is recognised, keyed by entity alias. Every entity an app lists, opens or picks has one |\n| `write_rules` | map of alias \u2192 [Entity write rules](#entity-write-rules) | no | Entity alias \u2192 what a create of that entity finds, copies and refuses |\n| `apps` | list of ([App](#app) \\| [Dashboard app](#dashboard-app)) | no | The apps this workspace will have \u2014 each one register over an entity, or a dashboard of readings |\n\n<!-- generated:end top-level -->\n\n**A model carries no** `fixtures`, `knowledge` or `knowledge_expects`, and no\n`word` / `pdf-form` template: file content is uploaded to the workspace, never\nstated in a model \u2014 an `excel` template names its uploaded workbook by `file_id`. `apps` here is what an agent states to make an app,\nnever built code. An unknown top-level key is an error, never ignored.\n\n### Aliases\n\nEvery `alias` is a lowercase slug \u2014 a letter, then letters, digits and\nunderscores (`unit_price`, `so_1001`). Aliases are how the file cross-references\nitself; they are never shown to anyone. `label` is what a person sees.\n\nLabels must be unique within their namespace \u2014 two entities, two fields on one\nentity, two options on one field, two views on one entity, two roles or two\ntemplates cannot share a label, because `apply` matches by label.\n\n## Entity\n\n<!-- generated:start entity -->\n\n#### Entity\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | Stable entity alias, unique within the contract |\n| `label` | text | yes | The table\'s name in the workspace, which apply names it |\n| `singular` | text | no | One row of this table, in the business\'s own words \u2014 what a create\'s button and panel name |\n| `description` | text | no | The table\'s description, written onto the table in the workspace |\n| `writes` | `false` | no | false: no person writes this table\'s rows \u2014 only the writes that keep it do, and no app opens or edits one |\n| `fields` | list of [Field](#field) (at least one) | yes | The table\'s columns |\n| `read_scope` | [Read scope](#read-scope) | no | Which rows a member reads. Absent, every member with access to the table reads every row. |\n| `unique` | list of list of alias (at least one) (at least one) | no | Sets of fields whose values no two live rows share \u2014 each a list of field aliases (text, number, date, a single select, or a link of cardinality "one"). A create or update landing a second row with the same values is refused. |\n| `views` | list of [View](#view) | no | Saved views, in the order they are listed; with none, the table still opens on its default grid |\n\n#### Read scope\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `any` | list of ([Read scope by role](#read-scope-by-role) \\| [Read scope by member](#read-scope-by-member) \\| [Read scope by option](#read-scope-by-option)) (at least one) | yes | A row is readable when ANY of these holds |\n\n#### Read scope by role\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `member_of` | alias | yes | A role alias: whoever is in the group it binds to reads the row |\n\n#### Read scope by member\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `through` | list of alias (1\u20133) | no | select_record_link aliases from this entity outward, each of cardinality "one" \u2014 the clause\'s field is on the entity the last hop lands on |\n| `field` | alias | yes | A select_member field alias on this entity, or on the entity `through` lands on |\n| `is` | `"self"` | yes | The members this column names on a row read that row |\n\n#### Read scope by option\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `through` | list of alias (1\u20133) | no | select_record_link aliases from this entity outward, each of cardinality "one" \u2014 the clause\'s field is on the entity the last hop lands on |\n| `field` | alias | yes | A single-select field alias on this entity, or on the entity `through` lands on |\n| `is` | list of alias (at least one) | yes | Its option aliases whose rows are readable \u2014 naming none would hide every row |\n\n<!-- generated:end entity -->\n\n<!-- generated:start rules-entity -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `entity.singular` | An entity a create is mounted over \u2014 a register that adds, a rows block \u2014 states its `singular`: one row of it, in the business\'s words. |\n| `entity.required-cycle` | Required links never wait on each other in a loop: no row of the loop could be created first. |\n| `entity.link-format` | A text field of `format: "link"` holds web addresses; one whose rows hold a phone or a mail address states no format. |\n| `entity.read-scope` | A `read_scope` clause names a declared role (`member_of`) or a field of its entity reached through one-row links: `"self"` a member field, options a single select declares. |\n| `entity.unique` | A `unique` set names two fields or more of its entity once each, each holding one value to compare \u2014 text, a number, a date, a single select, a one-row link \u2014 and is stated once; one field alone is `unique: true` on it. |\n\n<!-- generated:end rules-entity -->\n\n**`unique` is a set of values no two live rows share.** Each entry names fields\nof this entity holding ONE value \u2014 text, number, date, a single select, a link\nof cardinality `"one"` \u2014 and a create or update landing a second row with the\nsame values is refused. A set of one text field is that field\'s own `unique:\ntrue`, so it is refused here. A create carries each set in the names its panel\nsends, so the panel can name the duplicate before the write does.\n\n**`singular` is what a create says** \u2014 `New Order`, `Add Claim line`, `H\u1ED3 s\u01A1\nm\u1EDBi` \u2014 while `label` names the table, so without it the button reads `New\nOrders`. Nothing derives it: English plurals are irregular, and no language is\nexempt. In a language without plural forms it is usually the label itself,\nless any word for the collection. `model apply` REFUSES a model where a table\nsome create opens \u2014 a register\'s own, or a record section\'s add \u2014 states none.\n\n**`writes: false` says only the workspace\'s automations write these rows** \u2014 a\nlog of what the system sent, a copy of what another system holds. No app opens,\nedits or files one: a record listing them keeps the section and opens each row\nat rest, with no Add; a screen over the entity operates at most the rows its\nrecord owns; a party of it is picked, never found or minted; and the generator\nwrites no create and no update for it, and never notes it as created nowhere.\nA `lifecycle` on it is refused \u2014 a row walked\nthrough stages is worked by a person \u2014 and so is a publish desk over it. Absent,\npeople write the rows; `true` is not a value.\n\n**`read_scope` is a ROW rule, enforced by the platform.** It is resolved at\napply into the table\'s own row filters, so an app, a workflow reading for a\nviewer, and the API all answer the same rows \u2014 a per-record visibility field the\napp merely honours is a convention, not a gate. A `"self"` clause reads a column\nof one member or several, and every role alias and option alias a clause names\nmust be one this model declares. `apply` writes the rule onto a table it\nCREATES; a table it adopted that ALREADY CARRIES a rule keeps that one, because\nthe rule is the workspace\'s own statement about its rows \u2014 and a run whose model\nstates a different rule reports the entity rather than leaving the claim silent.\n\n**An app may state that its sharing is its read gate: `"reads": "shared"`.** An\napp reads as its owner, so the rule reaches a viewer only as the predicate every\nquery and editor guard of every app over the entity carries \u2014 right for a desk of\none\'s own rows, wrong for a desk whose audience its sharing already decides, where\nwidening the rule meant a role group nobody remembers to fill. Stated on an APP,\nits queries, pickers and guards carry no entity\'s rule and whoever the app is\nshared with reads and writes every row it draws; every other app and the table\'s\nown filters keep the rule. Share it deliberately. Refused on an app none of whose\ntables states a `read_scope`.\n\n**The rows under a private record INHERIT its rule.** An entity that states no\n`read_scope` and hangs under one that does \u2014 through its `parent` link, over one\nhop or several \u2014 is read by the ancestor\'s rule, answered through that link, on\nits table\'s own filters and in every query and guard alike; nothing is restated,\nso a child needs none of the ancestor\'s columns. Stating a rule on the child\nkeeps that one instead, an ancestor with no rule passes nothing down, and a row\nhanging further under the scoped one than a row filter reaches is refused by\nname \u2014 state a rule on it. So is a hop over a link that names more than one row:\nthe rule would admit a reader any one of them admits while the editor\'s guard\nreads the first, so give the link `"cardinality": "one"` or state a rule on the\nchild.\n\n**ONLY the `parent` role is walked.** A register a scoped record reaches by any\nother link \u2014 the rows that NAME it \u2014 is read by that record\'s id with no rule\ntravelling to it, so it is refused until it states one of its own.\n\n## Field\n\nEvery field carries the keys below, and its `type`\'s section adds the rest; a\ntype whose section names no `default` takes none. `label` may not contain `{` or\n`}` (formulas reference fields by label at the platform level). Every row in `rows` states each\n`required` field it carries (a default is not applied to them), and a required\nLINK is written with its row: the entity it names is created first, and entities\nwhose required links name each other are refused, since none of their rows could\never be created.\n\n<!-- generated:start field -->\n\n#### Field\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `type` | `"text"` \\| `"number"` \\| `"date"` \\| `"boolean"` \\| `"select"` \\| `"select_member"` \\| `"select_record_link"` \\| `"files"` \\| `"formula"` \\| `"rollup"` \\| `"lookup"` \\| `"autonumber"` | yes | What the field holds \u2014 each type takes the further keys its own section lists |\n| `alias` | alias | yes | Stable local alias, unique within the entity |\n| `label` | text | yes | The field\'s name in the workspace, which apply names it |\n| `description` | text | no | The field\'s description, written onto the field in the workspace |\n| `required` | boolean | no | Refuse a record whose cell for this field is empty. Apply writes it onto the field, and every write path \u2014 create, update, an agent\'s tool call, a workflow\'s set \u2014 refuses the row by field name. |\n\n<!-- generated:end field -->\n\n### `text`\n\n<!-- generated:start field-text -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | text | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. |\n| `unique` | boolean | no | Unique values required |\n| `format` | `"text"` \\| `"link"` \\| `"markdown"` | no | How the words are drawn \u2014 plain, as a link that opens, or as markdown |\n\n<!-- generated:end field-text -->\n\n### `number`\n\n<!-- generated:start field-number -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | number | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. |\n| `format` | `"number"` \\| `"currency"` \\| `"percentage"` | no | What the figure is \u2014 a plain number, money in `currency`, or a percent |\n| `currency` | text | no | ISO 4217 code |\n| `unit` | text | no | What a plain figure counts or measures, drawn after it: a measured code (g, kg, t, l, m3, cbm, mm, cm, m, km, m2, min, h, day), which converts and scales within its dimension, or any other noun of at most 12 characters (ki\u1EC7n, pallet, TEU), which never does. Only beside format "number". |\n| `unit_field` | alias | no | A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s unit: every option label is a unit as `unit` takes one. In place of `unit`; only beside format "number". |\n| `currency_field` | alias | no | A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s currency: every option label is an ISO 4217 code. In place of `currency`; only beside format "currency". |\n\n<!-- generated:end field-number -->\n\n`format` is what the number IS, and every surface reads it: `currency` prints as\nmoney in the code the row or the field states, `percentage` as a whole percent\nwith its sign. An ABSENT number is drawn absent \u2014 the one exception is a\n`sum` or count rollup the plan reads as a **`measure`**: that is the thing\naccumulated toward a bound, so nothing accumulated yet is zero and the meter\ndraws it. The same rollup read as an `amount` keeps its blank, and so does every\nother role: nothing added to what a row is WORTH means unpriced, not free. A\nformula reading only such sums and counts, and reading zero where each does\n(`{received} - {refunded}`), is one too. A `min`, an `avg`, a percentage of\nnothing and every other formula stay blank in any role, because none of them has\nan answer to give. This is why the pair on one\nscreen reads two ways \u2014 what has come in against what is owed \u2014 and why a\nmeasure\'s own LIMIT, an amount, leaves an unquoted row out of the count rather\nthan reporting it as nothing collected. **AND WHERE THAT LIMIT IS ABSENT \u2014 OR\nZERO \u2014 THERE IS NO LEVEL AT ALL**: a level is a reading AGAINST a bound, so a row\nthat states no bound, or a bound of nothing, draws nothing \u2014 cell, fact and all \u2014\nrather than a numerator whose whole meaning was the comparison. "Collected 0"\nbeside a blank total reads as money against a job worth nothing, and "0 of 0"\nagainst a count of nothing owed claims a comparison nobody can make. A measure the model gives no limit is a plain figure\nand is unaffected. A share is stored in percent units \u2014 68.1 is 68.1 % \u2014 and the\ncolumn, the fact behind it, the meter it is judged by and the figure over the\nregister all say so.\n\n`unit` is what a plain figure counts or measures, and stands only beside\n`format: "number"`. A **measured** unit is a code of one catalog \u2014 mass `g`\n`kg` `t`, volume `l` `m3` `cbm` (a cubic metre under freight\'s name), length\n`mm` `cm` `m` `km`, area `m2`, duration `min` `h` `day` \u2014 so a figure typed in\nanother unit of its dimension converts (`12,5 t` into a `kg` field is 12 500),\nand a tile or a chart reads it in the largest unit it reaches (12 500 kg as\n12,5 t\u1EA5n; CBM never scales) while a cell, a fact and a column always read in the\nfield\'s own. Any other noun of at most 12 characters (`ki\u1EC7n`, `pallet`, `TEU`) is a\n**counted** unit: a word after the figure that never converts. A measured unit is\nwritten as its code \u2014 `t\u1EA5n`, `KG` or `m\xB3` is refused, naming the code. A formula\nstates its own in `formula.unit`; a rollup that keeps the value (`sum`, `avg`,\n`median`, `min`, `max`, `range`) and a lookup carry the unit of the figure they\nread, exactly as they carry a currency, and a count carries none. A quantity is a\nnumber with its unit, never words (`3 cartons` in a text field): only a number\nsums, converts and reads down a column.\n\nA field\'s cells always hold figures in its own unit, so moving it between two\nunits of one dimension (`kg` to `t`) converts every stored figure \u2014 a change made\nin the workspace, in the field\'s settings (which say how many first) or through\n`lotics run update_table`. `model apply` never makes it: the model states the\nworkspace\'s unit until then. Any other change of unit\nrelabels.\n\nA figure whose unit or currency varies by row names a single select of its own\nrow in `unit_field` or `currency_field` (a formula in `formula.unit_field` /\n`formula.currency_field`) \u2014 or a lookup of one through a one-link, a line\nreading its shipment\'s currency. That select\'s options are the vocabulary:\neach label a unit as `unit` takes one (`chi\u1EBFc`, `kg`), or an ISO 4217 code\n(`USD`). A label outside it is refused when the figure is written and when the\nselect is \u2014 its options, its type or its deletion while a figure names it. A row\nwhose select is empty reads its figure bare. Every app reads each row\'s figure in\nits own row\'s unit, and a sum never mixes units: totals are one per unit, a\nchart draws one at a time. A rollup that keeps the value (`sum`, `avg`, `min`\u2026)\nover such a figure stands only where the child\'s select is a lookup, through\nthe rollup\'s own link, of a select on this entity \u2014 the rollup reads that\nselect\'s unit; otherwise it is refused, as is any lookup of such a figure (its\nunit lives on the other row). A count is unaffected. Moving a field between a\nfixed and a per-row unit relabels.\n\n### `date`\n\n<!-- generated:start field-date -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | text | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. A date string in the field\'s format. |\n| `format` | `"date"` \\| `"datetime"` \\| `"date_range"` \\| `"datetime_range"` | no | Whether the field holds a day or a moment, alone or as a span |\n| `timezone` | text | no | IANA timezone |\n| `derive_from` | `"created_at"` \\| `"updated_at"` | no | Auto-populate from the row\'s system timestamp; the field becomes read-only. |\n\n<!-- generated:end field-date -->\n\nA `default` is refused beside `derive_from`: the platform stamps that date.\n\n### `boolean`\n\n<!-- generated:start field-boolean -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | boolean | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. |\n\n<!-- generated:end field-boolean -->\n\n### `select`\n\n<!-- generated:start field-select -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | list of alias | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. Option alias(es) this field declares \u2014 one for single-select. |\n| `options` | list of [Select option](#select-option) (at least one) | yes | The choices, in the order every picker and every ladder lists them |\n| `multi` | boolean | no | Allow multiple selections |\n\n#### Select option\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | Stable local alias, unique within the field |\n| `label` | text | yes | Display label for the option |\n| `color` | [colour](#select) | yes | The colour the option\'s badge is drawn in |\n| `mark` | [mark](#select) | no | The option\'s own mark, drawn in place of its colour dot wherever the option is shown: the brand it is ({kind: "brand", name: one of facebook, instagram, threads, meta, tiktok, google-ads, zalo, linkedin, x, google-meet, youtube, telegram, whatsapp, gmail, google-drive, outlook, kiotviet, misa, lark, payos}) or a kit glyph ({kind: "icon", name: "wrench"}). Every option of a field has one, or none does. A mark a reader does not draw falls back to the dot |\n\n<!-- generated:end field-select -->\n\n`color` is one of: `red`, `orange`, `amber`, `yellow`, `lime`, `green`,\n`emerald`, `teal`, `cyan`, `sky`, `blue`, `indigo`, `violet`, `purple`,\n`fuchsia`, `pink`, `rose`, `slate`, `gray`, `zinc`, `neutral`, `stone`.\nEvery option is drawn in its colour wherever it shows \u2014 a cell, a row\'s line,\na record, a picker, the bar a reading splits the rows by.\n\nAn option may carry its own `mark`, drawn in place of its colour dot wherever\nthe option is shown \u2014 a stage, a chip, a filter, a fact, an entry of a log, a\nreading\'s part, a lookup of the select on another entity. A select a reader scans\ndown a column \u2014 how a payment was made, the channel, the mode \u2014 states one on every\noption, since a glyph reads before its word: the brand it IS\n(`{"kind": "brand", "name": "tiktok"}` \u2014 one of `facebook`, `instagram`,\n`threads`, `meta`, `tiktok`, `google-ads`, `zalo`, `linkedin`, `x`,\n`google-meet`, `youtube`, `telegram`, `whatsapp`, `gmail`, `google-drive`,\n`outlook`, `kiotviet`, `misa`, `lark`, `payos`), or a glyph the kit draws\n(`{"kind": "icon", "name": "wrench"}`; any other name is refused). Every option of a select has one, or none does: a run of chips\nwhere one carries no mark reads as the one missing something. `apply` writes the\nmarks onto the table, sets one an adopted option lacks, and reports one it wears\ndifferently rather than overwrite it. The glyphs:\n\n<!-- generated:start field-select-glyphs -->\n\nactivity, align-center, align-left, align-right, arrow-down, arrow-down-up, arrow-down-wide-narrow, arrow-left, arrow-left-from-line, arrow-right, arrow-right-from-line, arrow-right-left, arrow-up, arrow-up-down, arrow-up-wide-narrow, ban, banknote, bed, bell, bold, bolt, book-marked, book-open, book-text, bot, box, brackets, brain, briefcase, building-2, calculator, calendar, calendar-clock, calendar-off, camera, car, chart-column, check, chevron-down, chevron-left, chevron-right, chevron-up, chevrons-down-up, chevrons-up-down, circle-alert, circle-check, clipboard-list, clock, code, code-xml, columns-3, columns-3-cog, construction, container, copy, credit-card, database, download, ellipsis, eraser, expand, external-link, eye, eye-off, facebook, file, file-csv, file-down, file-question, file-spreadsheet, file-stack, file-text, file-up, folder, folder-closed, folder-open, folder-pen, form, funnel-plus, funnel-x, gauge, globe, gpu, grip-vertical, group, hand-coins, heading, heading-1, heading-2, heading-3, history, house, image, inbox, info, instagram, italic, keyboard, languages, layout-dashboard, layout-grid, library-big, link-2, link-2-off, linkedin, list, list-checks, list-collapse, list-filter, list-filter-plus, list-ordered, loader, lock, lock-keyhole, lock-keyhole-open, lock-open, log-in, log-out, mail, map-pin, maximize-2, megaphone, menu, message-circle, message-circle-question-mark, message-square, messages-square, mic, minimize-2, minus, monitor, mouse, mouse-pointer-click, music, newspaper, notepad-text-dashed, package, paint-bucket, palette, panel-left, panel-left-close, panel-left-open, panel-right, panel-right-close, panel-right-open, paperclip, pause, pencil, phone, pin, pin-off, plane, play, plug, plus, receipt, rectangle-ellipsis, redo, refresh-cw, repeat, rotate-ccw, rotate-cw, scan, search, send, settings, share, share-2, shield, shield-alert, shield-check, shopping-cart, sliders-horizontal, smile, smile-plus, sparkles, split, square, square-check, square-pen, square-sigma, stethoscope, sticky-note, table, table-2, tag, target, text-quote, thumbs-down, thumbs-up, ticket, trash, trending-down, trending-up, triangle-alert, truck, tv-minimal, twitter, underline, undo, upload, user, user-check, user-pen, users, utensils, waypoints, workflow, wrench, x, zap\n\n<!-- generated:end field-select-glyphs -->\n\n```jsonc\n"options": [\n  { "alias": "short_video", "label": "Short video", "color": "zinc", "mark": { "kind": "brand", "name": "tiktok" } },\n  { "alias": "print",       "label": "Print",       "color": "amber", "mark": { "kind": "icon", "name": "newspaper" } }\n]\n```\n\n### `select_member`\n\nA person picker over the workspace\'s members. No default: a model cannot name\nmembers of a workspace that does not exist yet. With no role it is still drawn \u2014\nface and name, ranked as a `party` \u2014 in a screen\'s `columns` and in the register\na record draws of these rows.\n\n<!-- generated:start field-select_member -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `multi` | boolean | no | Allow multiple selections |\n\n<!-- generated:end field-select_member -->\n\n### `select_record_link`\n\n<!-- generated:start field-select_record_link -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `target_entity` | alias | yes | Alias of the entity this field links to |\n| `sync_both_ways` | boolean | no | Create a paired link field on the target entity for bidirectional sync |\n| `paired_field_alias` | alias | no | The pair edge of a bidirectional link: the field alias ON THE TARGET ENTITY that is this link\'s sync partner. Both sides of a pair carry it, each naming the other. Apply creates whichever side it reaches first WITH the pairing (the platform auto-creates the partner) and binds the partner alias to the auto-created field \u2014 without this edge the two contract fields would be created independently and collide with the auto-created partner. |\n| `cardinality` | `"one"` \\| `"many"` | no | How many linked records this field holds. Default \'many\'. \'one\' holds a single row and needs no partner; where the link IS paired, the partner side holds many. |\n| `display_field_aliases` | list of alias | no | Field aliases on the target entity shown as the link\'s display text / picker columns |\n\n<!-- generated:end field-select_record_link -->\n\nA two-way link is declared on BOTH sides, each naming the other as its\n`paired_field_alias`; the pair must be symmetric or the model is refused.\n\n**A single-valued link needs no partner.** `"cardinality": "one"` on its own is a\nlink that holds one row \u2014 one customer on an invoice, one project on a device \u2014\nand nothing is created on the target. The mirror invariant belongs to a PAIRED\nlink: pair a link when the target\'s own record should list what points at it, and\nleave it unpaired when it should not. Either way the record plan draws the\nrelation as a section on the side it points at, so an unpaired link costs the\ntarget nothing.\n\n### `files`\n\nNo keys beyond every field\'s; a row attaches documents to it (\xA7 Rows). Each file\nis drawn by its kind, with no key to choose: a picture (an image, a video) as its\nthumbnail, a document (a PDF, a sheet) as its type\'s badge and its filename.\n\n### `formula`\n\n<!-- generated:start field-formula -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `formula` | [Formula](#formula) | yes | Formula config. The expression references other fields on the SAME entity by alias in braces, e.g. `{quantity} * {unit_price}`. |\n\n#### Formula\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `expression` | text | yes | The expression, over fields of THIS entity by alias in braces \u2014 `{quantity} * {unit_price}` |\n| `format` | `"number"` \\| `"currency"` \\| `"percentage"` \\| `"link"` | no | Display format. \'number\' / \'currency\' / \'percentage\' for numeric results; \'link\' for text-output formulas that return a URL \u2014 renders the result as a clickable link. |\n| `currency` | text | no | ISO 4217 currency code, e.g. USD, VND, EUR |\n| `unit` | text | no | What a plain figure counts or measures, drawn after it: a measured code (g, kg, t, l, m3, cbm, mm, cm, m, km, m2, min, h, day), which converts and scales within its dimension, or any other noun of at most 12 characters (ki\u1EC7n, pallet, TEU), which never does. Only beside format "number". |\n| `unit_field` | alias | no | A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s unit: every option label is a unit as `unit` takes one. In place of `unit`; only beside format "number". |\n| `currency_field` | alias | no | A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s currency: every option label is an ISO 4217 code. In place of `currency`; only beside format "currency". |\n| `options` | list of [Select option](#select-option) (at least one) | no | The categories the formula yields, drawn as a single select\'s options are (read-only). The expression yields one of them as `{this_field:option}`, or null \u2014 `{days_idle} > 30 ? {warmth:cold} : {warmth:hot}`. Omit for a formula yielding a plain value. |\n| `output_type` | `"number"` \\| `"text"` \\| `"date"` \\| `"datetime"` \\| `"boolean"` \\| `"select"` | no | What the expression YIELDS \u2014 the kind the platform infers at write time, declared here so the offline checks can read it. `format` beside it is how that result is drawn, not what it is. Ignored on the wire (the platform re-infers it); `lotics model pull` writes the inferred value. |\n\n<!-- generated:end field-formula -->\n\n`output_type` is what lets a role or a screen clause accept a computed value: a\ncaption over a derived name (`output_type: "text"`), a period over a settled date\n(`"date"`). A formula declaring neither it nor a `format` says nothing about its\nresult, and every rule that needs one refuses it by name. A formula stating\n`options` is a computed category: read-only, and read as a single select\nwherever it is drawn \u2014 a column, a filter, a reading\'s `by` or `where`.\n\n**A select reaches a formula as the KEYS of its chosen options**, a list \u2014\nnever their labels, and never their aliases \u2014 and a model has no keys: the\nworkspace mints them when the table is made. So an option is named in a formula\nas `{field:option}`, both aliases, and the copy writes that option\'s key in its\nplace: `includes({kind}, {kind:crate})` for a select holding one or several,\n`{kind}[0] == {kind:crate}` for a single one. A select compared to its own words\n(`{kind} != "Crate"`) matches no row and computes the other branch everywhere,\nso the check refuses it and names the token. A select looked up from another\nentity is tested there, in a formula of its own, and that result looked up.\n\n**The language.** The offline check and the platform compute a formula with one\nengine, and the check refuses a call or a name it cannot run, naming what to write:\n\n<!-- generated:start field-formula-language -->\n\n- Operators: `+ - * / %`, `== != > < >= <=`, `&& || !`; `+` also joins text\n- Conditionals: a ternary only \u2014 `{amount} > 100 ? "High" : "Low"`\n- Not supported: optional chaining (`?.`), nullish coalescing (`??`), template literals, arrow functions \u2014 use `get(obj, "path", default)`, `coalesce(v1, v2)`\n- Helpers are these names, spelled exactly; a spreadsheet function (`IF`, `SUM`, `LEN`, `DATEDIF`) is none of them, and a formula calling one is refused\n- Math: round(n,decimals?), ceil(n), floor(n), abs(n), min(a,b), max(a,b), sum(arr), mean(arr), clamp(n,min,max), percentage(part,total,decimals?), pow(base,exp), sqrt(n), mod(n,divisor)\n- Strings: upper(s), lower(s), trim(s), capitalize(s), length(s), contains(s,search), join(arr,sep), split(s,sep), replace(s,search,rep), replaceAll(s,search,rep), startsWith(s,prefix), endsWith(s,suffix), substring(s,start,end?), padStart(s,len,char), padEnd(s,len,char), numberToWords(n)\n- Lists: includes(list,value), first(list), last(list), unique(list), compact(list) \u2014 length(list) counts one\n- Dates: now(), formatDate(d,fmt), addDays(d,n), subDays(d,n), addHours(d,n), subHours(d,n), addMinutes(d,n), subMinutes(d,n), startOfDay(d), endOfDay(d), differenceInCalendarDays(later,earlier), differenceInHours(later,earlier), differenceInMinutes(later,earlier), isBefore(d1,d2), isAfter(d1,d2), isSameDay(d1,d2), isToday(d), isWithinRange(d,start,end), parseDate(d)\n- Null/type: isNull(v), isEmpty(v) (also true for "" and []), coalesce(v1,v2,...), isString(v), isNumber(v), isBoolean(v), isArray(v), toNumber(v), toString(v)\n- Other: formatCurrency(amount,locale,currency), formatDecimal(value,decimals,locale) (grouped quantity, no symbol), get(obj,"path",default?)\n- Empty cells: a cell nobody filled is null inside a formula, whatever its type; one holding 0, false or "0" is not empty. Test it with `isEmpty({note})` \u2014 `{note} == ""` and `{done} == false` are false on an unset cell\n- Arithmetic over an empty cell: `+` and `-` read it as 0 beside a value (`{fee} + {surcharge}` is `{fee}` when the surcharge is empty, null when both are); `*`, `/`, `%` and a unary `-` yield null (`{price} * {qty}` is null, not 0, when the quantity is empty)\n- No helper throws on an empty cell: the math helpers and toNumber return null, the string helpers "". A value of the wrong type still errors. When EVERY field a formula reads is empty it is null \u2014 unless it reads each only as the argument of isEmpty, isNull or isNotNull (`!isEmpty({file})` is false there, not null)\n\n<!-- generated:end field-formula-language -->\n\n### `rollup`\n\nAggregates the records reached through a link on this entity.\n\n<!-- generated:start field-rollup -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `source_field_alias` | alias | yes | Alias of a select_record_link field on this entity to roll up from |\n| `aggregate_option` | [aggregation](#rollup) | yes | Aggregation operation. Its `field_key` names a field alias on the linked entity. |\n| `filter` | [filter](#views) group | no | Only linked records matching this filter are aggregated; one condition on its own is a group of one. Every `field_key` in it names a field alias on the linked entity, and a select condition\'s value names an option alias there. A traversal node reaches past that entity, so its `path` hops and inner `field_key` are fully-qualified `entity.field` aliases. |\n\n<!-- generated:end field-rollup -->\n\n`aggregate_option` is `{ "operation": \u2026, "field_key": \u2026 }` \u2014 `field_key` a field\nalias on the linked entity (`count` may omit it), and `operation` one of `count`,\n`sum`, `avg`, `median`, `min`, `max`, `range`, `empty`, `filled`,\n`percent_empty`, `percent_filled`, `unique`, `percent_unique`, `earliest`,\n`latest`, `date_range`, `checked`, `unchecked`, `percent_checked`,\n`percent_unchecked`. The operation must be one the aggregated field\'s type\nallows \u2014 `sum` over a number, `earliest` over a date, `filled` over any stored or\nformula field. A lookup is never rolled up: roll up the child\'s own field, or a formula\nover it.\n\n### `lookup`\n\nDisplays a field from the linked records.\n\n<!-- generated:start field-lookup -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `source_field_alias` | alias | yes | Alias of a select_record_link field on this entity to look up through |\n| `lookup_field_alias` | alias | yes | Alias of the field on the linked entity to display |\n| `order_by` | [Lookup order](#lookup-order) | no | Show ONE linked row\'s value \u2014 the first in this order \u2014 rather than every linked row\'s |\n\n#### Lookup order\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field_key` | text | yes | A field alias on the linked entity the rows are ordered by |\n| `direction` | `"asc"` \\| `"desc"` | yes | Which end of that order the one row is taken from |\n\n<!-- generated:end field-lookup -->\n\nInside a formula, a lookup holding one value is that value (`{due_soon}` is\n`true`, not `[true]`); several values are a list.\n\n### `autonumber`\n\n<!-- generated:start field-autonumber -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `prefix` | text | no | Literal prefix prepended to every display value (e.g. \'KH-\' \u2192 \'KH-001\'). Ignored when `template` is set. |\n| `padding` | integer | no | Zero-pad the integer to this width. Default 1 (no padding). 3 \u2192 \'001\', \'012\', \'123\', \'1234\' (overflow uses the actual width). Ignored when `template` is set. |\n| `template` | text | no | Format template with placeholder tokens evaluated at insert time. Tokens: {N} (raw integer), {N:W} (zero-padded to width W, e.g. {N:3} \u2192 001), {YEAR} (4-digit year), {YEAR:2} (2-digit year), {MONTH} (2-digit month), {DAY} (2-digit day). Date tokens use the workspace timezone. Example: \'HM-{YEAR}-{N:3}\' yields \'HM-2026-001\'. Stored as the composed string; subsequent template edits do NOT re-format existing rows (date tokens would lose the original creation date). |\n\n<!-- generated:end field-autonumber -->\n\n<!-- generated:start rules-field -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `field.default` | A default names options its select declares \u2014 one on a single select \u2014 and a date stamped by `derive_from` states none. |\n| `field.option-mark` | An option\'s `mark` is one the kit draws, and a select\'s options mark every one or none. |\n| `field.unit-select` | A `unit_field` or `currency_field` is a single select of the same row, or a lookup of one through a one-link, whose every option label is a unit, or an ISO 4217 code. |\n| `field.link` | A link targets a declared entity: its `display_field_alias` a field of it, its `paired_field_alias` a link on it naming this one back \u2014 and of two paired links at most one reads one row. |\n| `field.formula` | A formula parses, reads fields of its own entity by alias, names an option as `{field:option}` of one a select declares, and compares a select to its options\' keys, never their words. |\n| `field.rollup` | A rollup aggregates, through a link of its entity, a field of the linked entity by an operation a model declares and that field\'s type takes \u2014 never a figure read in each row\'s own unit or currency \u2014 filtered on fields of the linked entity. |\n| `field.lookup` | A lookup reads, through a link of its entity, a field of the linked entity \u2014 never one read in each row\'s own unit or currency \u2014 ordered by a field of it. |\n| `field.computed-cycle` | Computed fields never wait on each other in a loop: each is computed after what it reads. |\n\n<!-- generated:end rules-field -->\n\n## Views\n\nSaved views live under the entity they belong to. Every field reference is a\nfield ALIAS on that entity.\n\n<!-- generated:start views -->\n\n#### View\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | Stable view alias, unique within the entity |\n| `label` | text | yes | Display name of the view |\n| `description` | text | no | The view\'s description, written onto the view in the workspace |\n| `columns` | list of [View column](#view-column) (at least one) | no | The columns the view shows, in this order and no others; absent, every field |\n| `filters` | [filter](#views) | no | The rows the view keeps |\n| `sort` | [sort](#views) | no | The order the view reads its rows in |\n| `summary` | map of text \u2192 text | no | Field alias \u2192 the operation its footer cell states |\n| `frozen_columns` | integer \\| `null` | no | How many leading columns stay in place while the rest scroll |\n\n#### View column\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field_alias` | alias | yes | A field of this entity |\n| `visibility` | `"visible"` \\| `"hidden"` | yes | Field visibility state: \'visible\' = shown to everyone, \'hidden\' = not shown by default but members can toggle |\n| `width` | number | no | The column\'s width, in pixels |\n\n<!-- generated:end views -->\n\nA filter is a group \u2014 `{ "node_type": "group", "logic": "and" | "or",\n"children": [ \u2026 ] }` \u2014 or one condition on its own, `{ "node_type":\n"condition", "type": "select", "field_key": "tier", "operator": "has_any_of",\n"value": ["gold"] }`. A sort is a list of `{ "field_key": \u2026, "order": "asc" |\n"desc" | null }`. A condition\'s `type` is the field\'s type and its `operator` is\none that type admits \u2014 `has_any_of` / `has_none_of` / `has_all_of` / `is_empty` /\n`is_not_empty` for a select, `equals` / `greater_than` / `less_than` for a\nnumber, `on` / `before` / `after` / `between` for a date, `contains` /\n`is_any_of` for text. A select condition\'s `value` names option ALIASES.\n\n<!-- generated:start rules-view -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `view.fields` | A view\'s columns, summary, sort and filters name fields of its entity. |\n\n<!-- generated:end rules-view -->\n\n## Roles\n\nA role becomes a workspace group.\n\n<!-- generated:start roles -->\n\n#### Role\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | Stable role alias, bound to a workspace group when the model is applied |\n| `label` | text | yes | The group\'s name in the workspace |\n\n<!-- generated:end roles -->\n\n## Templates\n\nAn `html` or `email` template carries its content inline, and `{{name}}` in it is filled\nfrom the workflow\'s data; an `excel` template names an uploaded workbook by its `file_id`,\nfilled with the register\'s report by its `export` alone.\n\n<!-- generated:start templates -->\n\n#### Template\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `type` | `"html"` \\| `"email"` \\| `"excel"` | yes | html is a page a workflow renders to a PDF; email is a message a workflow sends; excel is a workbook a register\'s export fills |\n| `alias` | alias | yes | Stable template alias, unique within the contract |\n| `label` | text | yes | The template\'s name in the workspace |\n\n<!-- generated:end templates -->\n\n### `html` and `email`\n\n<!-- generated:start template-inline -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `content` | text | yes | Inline template content; placeholders reference field aliases |\n| `content_sha256` | text | no | sha256 (64-char lowercase hex) of the utf-8 content; derived where the template is written when absent |\n\n<!-- generated:end template-inline -->\n\n### `excel`\n\n<!-- generated:start template-excel -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `file_id` | text | yes | The uploaded .xlsx (`fil_\u2026`) the template is made from; its markers read what the export fills it with |\n\n<!-- generated:end template-excel -->\n\nA paper that has to look like a counterparty produced it \u2014 an official letter,\nan acceptance minute, a supplier\'s bill \u2014 is the same `html` template with a\nshell around the body: a letterhead, a reference line, a seal and a signature\nblock, and paper grain over everything. One shell, many bodies; the data is the\nonly thing that changes, so a workflow can re-issue it over any record.\n\n```jsonc\n{ "alias": "cong_van", "label": "C\xF4ng v\u0103n", "type": "html",\n  "content": "\u2026the page below, as one JSON string\u2026" }\n```\n\n```html\n<style>\n    .sheet{position:relative;width:718px;padding:44px 58px 30px;background:#fbfaf6;color:#111;font:14.2px/1.5 \'Liberation Serif\',serif}\n    .grain{position:absolute;inset:0;opacity:.34;mix-blend-mode:multiply;background:url("data:image/svg+xml;utf8,<svg xmlns=\'http://www.w3.org/2000/svg\' width=\'140\' height=\'140\'><filter id=\'f\'><feTurbulence baseFrequency=\'.9\' numOctaves=\'2\'/><feColorMatrix values=\'0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .35 0\'/></filter><rect width=\'140\' height=\'140\' filter=\'url(%23f)\'/></svg>")}\n    .top{display:flex;text-align:center;font-size:13.4px} .top>div{flex:1} .u{display:inline-block;border-bottom:1px solid #111;font-weight:700}\n    .ref{display:flex;text-align:center;font-size:13.4px;margin-top:6px} .ref>div{flex:1} .ref .r{font-style:italic}\n    h1{text-align:center;font-size:15.6px;margin:26px 0 18px} p{text-align:justify;text-indent:26px;margin:0 0 9px}\n    .sig{display:flex;margin-top:20px} .sig .l{flex:1} .sig .r{width:290px;text-align:center;position:relative}\n    .sig .nm{font-weight:700;margin-top:96px} .seal{position:absolute;left:4px;top:8px;width:166px;height:166px;opacity:.66;mix-blend-mode:multiply;transform:rotate(-17deg)}\n  </style>\n  <div class=\'sheet\'><div class=\'grain\'></div>\n    <div class=\'top\'><div><b>{{issuer_parent}}</b><br><span class=\'u\'>{{issuer}}</span></div>\n      <div><b>C\u1ED8NG H\xD2A X\xC3 H\u1ED8I CH\u1EE6 NGH\u0128A VI\u1EC6T NAM</b><br><span class=\'u\'>\u0110\u1ED9c l\u1EADp - T\u1EF1 do - H\u1EA1nh ph\xFAc</span></div></div>\n    <div class=\'ref\'><div>S\u1ED1: {{number}}</div><div class=\'r\'>{{place}}, ng\xE0y {{day}} th\xE1ng {{month}} n\u0103m {{year}}</div></div>\n    <h1>{{title}}</h1>\n    <p>K\xEDnh g\u1EEDi: {{recipient}}.</p>\n    {{{body}}}\n    <div class=\'sig\'><div class=\'l\'><b>N\u01A1i nh\u1EADn:</b><br>- Nh\u01B0 tr\xEAn;<br>- L\u01B0u VT.</div>\n      <div class=\'r\'><img class=\'seal\' src=\'{{seal_url}}\'><b>{{signer_title}}</b><div class=\'nm\'>{{signer}}</div></div></div>\n  </div>\n```\n\n**What an act\'s template is handed** is its record\'s own fields by alias: a\nselect, a member and a link as their words (a link as the linked row\'s title), a\nnumber, a date and a computed value that declares its kind raw (`2800000`,\n`2026-09-14`) \u2014 never a files field or a computed select. On one record it is\nhanded, too, the rows of each child the record draws as `rows` whose alias the\ntemplate names, listed under that alias for `{{#each <alias>}}` in place of the\nrecord\'s own link to them: every row filed under the record, oldest first, each\nby its own fields as the record\'s are, less its link back to the record. Over\nseveral rows the rows are listed under the entity\'s alias, for\n`{{#each <alias>}}`, without their child rows.\n\n## Rows\n\nFirst records, keyed by entity alias. Up to 200 rows per entity and 2000 across\nthe model, attaching at most 2000 documents between them \u2014 a real data set\nbelongs in an import, not a model.\n\n```jsonc\n"rows": {\n  "customer": [\n    { "ref": "acme", "fields": { "name": "Acme Trading", "tier": "gold" } }\n  ]\n}\n```\n\n<!-- generated:start rows -->\n\n#### Row\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `ref` | text | yes | Local handle for this row, referenced by other rows\' link fields |\n| `fields` | map of text \u2192 any value | yes | Field alias \u2192 the value, read against the field\'s declared type |\n\n<!-- generated:end rows -->\n\n<!-- generated:start rules-rows -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `rows.ref` | A row\'s `ref` is unique within its entity. |\n| `rows.required` | A row states every field its entity requires: it is created with what it states, its fields\' defaults unapplied. |\n| `rows.distinct` | Open rows of an entity a register lists read apart: no two state the same title and the same line under it. |\n| `rows.value` | A row\'s value fits its field: an option alias for a select, `"<entity>:<ref>"` of a row of the linked entity in this file for a link, `"self"` for a member, a relative path beside the file or a `fil_` id for files, a date in the date grammar (an hour only on a datetime), a text, number, yes/no or null otherwise \u2014 and none on a computed field. |\n\n<!-- generated:end rules-rows -->\n\nA `ref` is lowercase letters, digits and underscores, and is never persisted.\n\nA `files` cell attaches documents: paths relative to this file (no `..`, never\nabsolute), which the check proves exist and `apply` uploads into the workspace\nbefore any row is written \u2014 a paperwork business seeds its papers with its\nrows. The server accepts only `fil_` ids of files this workspace owns, which is\nwhat the upload leaves behind. After a run that wrote rows, the WORKSPACE holds\nwhich record each row became, under the row\'s own `<entity>:<ref>`:\n`delete_records` over them is how a seeded set is reset, and applying again\nre-dates it.\n\n`fields` is keyed by field alias, and every value is read against the field\'s\nDECLARED type:\n\n| Field type | Value |\n|---|---|\n| `text` / `number` / `boolean` | the value itself |\n| `date` | `"2026-03-14"`, or a relative expression (below) |\n| `select` | the option ALIAS \u2014 `"gold"`, or `["gold","vip"]` for a multi-select |\n| `select_record_link` | `"<entity-alias>:<ref>"` naming another row in this file \u2014 `"customer:acme"`, or an array for several; a paired link is stated on ONE side (the child\'s link to its parent) and its partner fills itself |\n| `select_member` | `"self"` only \u2014 the person applying the model |\n| `files` | paths beside this file \u2014 `["scans/pccc_letter.png"]` \u2014 uploaded by `model apply`/`setup` before the model is sent; or `fil_` ids of files already in this workspace |\n| `formula`, `rollup`, `lookup`, `autonumber` | not allowed \u2014 the platform writes these |\n\n### Relative dates\n\nA date cell holds a literal `YYYY-MM-DD`, or an expression relative to the day\nthe model is applied, so a screen that opens on "this month" is not empty a month\nlater:\n\n- `@today` \u2014 the day of the run, in the workspace\'s timezone\n- `@month-start` \u2014 the 1st of that month\n- either with a whole-day offset: `@today-14`, `@month-start+9`\n- on a date that holds its hour (`format: "datetime"`), that hour after the day, and always stated:\n  `@today 14:30`, `@today+1 06:00`\n\n`@month-start` exists because `@today-N` cannot promise a month: applied on the\n2nd, `@today-3` lands in the previous one.\n\n## Records\n\n`records` says how a row of each entity is RECOGNISED \u2014 once per entity, keyed by\nentity alias \u2014 and every surface that draws one of its rows reads the same\nstatement: the register\'s row, a picker\'s option, a link\'s chip, a child table\'s\nrow and the record\'s header. Every entity an app lists, opens or picks has one.\n\n```jsonc\n"records": {\n  "visit": {\n    "title": "container_no",\n    "subtitle": ["customer", "arrived_on"],\n    "image": "photos",\n    "status": { "field": "stage", "closed": ["gone"], "history": "visit_history" },\n    "figure": "total_fees",\n    "due": ["free_until"]\n  },\n  // A release order read against what it allows: a meter wherever it shows.\n  "release": { "title": "release_no", "figure": "issued", "limits": { "issued": "units" } },\n  // A dossier\'s stage is the last date it reached \u2014 no stored select.\n  "dossier": { "title": "applicant", "status": { "milestones": ["received_on", { "field": "appraised_on", "when": { "kind": ["loan"] } }, "signed_on"], "closed": ["signed_on"] } }\n}\n```\n\n<!-- generated:start records -->\n\n#### Record\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `title` | alias | yes | The field that names a row \u2014 the first thing every surface shows: who or what it is, a link naming it by the linked row (a job read by its customer). An autonumber is refused; a typed number is the subtitle |\n| `subtitle` | list of alias (1\u20132) | no | Up to two fields read under the title wherever a row is drawn (a code, a date, a party) |\n| `image` | alias | no | A files field that pictures the row \u2014 never one an act keeps the document it makes in |\n| `description` | alias | no | A text field saying what the row is about \u2014 a plan\'s brief, a customer\'s note: read in its record\'s head under the title\'s line, its first lines at rest and whole on a press, and written from the head\'s \u270E. Never on a row\'s line |\n| `party` | `"person"` \\| `"organization"` | no | What each row is where the rows are people (a contact, a patient) or organisations (a customer, a supplier, a carrier); absent, the rows are things (an order, an item, a paper) |\n| `status` | [Status](#status) | no | The stage a row moves through \u2014 a single select or its milestone dates \u2014 drawn as a badge beside its title |\n| `figure` | alias | no | The one number the row stands for, read at its right (a total, a quantity left) |\n| `limits` | map of alias \u2192 (alias \\| number) | no | A number read against a bound \u2014 a field of the same row or a constant \u2014 drawn as a meter wherever it shows |\n| `gates` | map of alias \u2192 (alias \\| number) | no | A pass mark on a meter `limits` bounds \u2014 a field of the same row or a constant; a percent field is its share of the bound, any other number an amount. The meter marks it and fills complete once past it |\n| `tolerance` | map of alias \u2192 number | no | How far past its `limits` bound a meter may stand, in percent of the bound: the bound is an amount expected (received against ordered), not a cap. Without one the bound is a cap, and past it is an overrun |\n| `due` | list of alias (at least one) | no | Dates that are deadlines (stored, or computed as a date): each counts down and turns overdue |\n| `frees` | alias | no | A date ending the row\'s span of days on which what the row holds is free again (a check-out, a hire\'s return): a stay from the 3rd to the 5th holds the 3rd and the 4th, and another may start on the 5th \u2014 on a lanes board, a calendar, a roster and in `no_overlap` alike. Absent, a span of days holds its last day; a span of moments always frees its end |\n| `task` | `true` | no | A row is work someone finishes: wherever rows of it stand in a table \u2014 a register, a record\'s rows, the rows filed under one \u2014 each is led by a ring ticking it done and unticking it by the one write of the app making that move. Its status is a stored select with `closed` |\n| `starts` | map of alias \u2192 `"today"` \\| `"me"` | no | What a field of a row being added starts at, where that start is certain: `today` a date (a moment starts now), `me` a member, the reader adding it; every other field starts empty unless the reader narrowed the register to a value or the field declares a `default` |\n\n#### Status\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | no | The single select that is the row\'s state \u2014 or `milestones` instead |\n| `milestones` | list of (alias \\| [Milestone](#milestone)) (at least 2) | no | Dates in the order the work reaches them, instead of a stored select: the stage is the last one filled, ticking one stamps today, and clearing one clears every later one |\n| `closed` | list of alias (at least one) | no | Options (or milestones) that end the work: a register opens on the rows not at them, and the badge reads muted |\n| `history` | alias | no | A child entity every status change appends one row to (its link to this entity, the new status, the moment and who) \u2014 written by the app\'s own writes, never a table automation; a row the model seeds opens it at its status, the day the rows land, unless the model states its rows; with `field` only |\n\n#### Milestone\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | yes | A date field: the stage is reached on the day it holds |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | yes | The stage applies only while each named select holds one of these options, and each named stored yes/no is this value; otherwise the row skips it |\n\n<!-- generated:end records -->\n\n<!-- generated:start rules-records -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `records.title` | A title names the row by what it is \u2014 never an autonumber; a code is its subtitle. |\n| `records.image` | `image` is a files field, never one an act keeps the documents it makes in (`into`). |\n| `records.description` | `description` is a text field, read in the record\'s head \u2014 never a section\'s too. |\n| `records.status` | A status is one single select, `closed` naming options of it \u2014 or its `milestones`. |\n| `records.history` | A declared status `history` has exactly one link to the row it records, one single select holding every option of the status (or a text), exactly one date and at most one member. |\n| `records.history-derived` | A `history` the model does not declare is derived and keeps one entity\'s moves, labelled by that entity ("L\u1ECBch s\u1EED <entity label>", or "<entity label> history"): no declared table holds that label, and the entity has no other field under the link it adds. |\n| `records.history-scope` | A status history reads by its record\'s `read_scope`, answered through its one-row link to the record within the links a row rule reaches \u2014 or it states its own. |\n| `records.milestones` | Milestones are dates a person ticks, each named once; `closed` names some of them, and a deadline (`due`) is never one. |\n| `records.milestone-add` | An add asks the first milestone at most \u2014 each after it is ticked in order. |\n| `records.figure` | A figure is a number. |\n| `records.limits` | `limits` bounds a number by a number field of the row, in its unit or one of the same dimension \u2014 or by a constant, where every row reads the figure in one unit. |\n| `records.gates` | `gates` marks a pass on a meter `limits` bounds: a percent field (its share of the bound), another number in the bound\'s unit, or a constant. |\n| `records.tolerance` | `tolerance` stands on a meter `limits` bounds. |\n| `records.starts` | `starts` starts a field a person writes \u2014 `today` a date or a moment (never a span), `me` a member \u2014 and an add that does not ask a field it starts writes that start. |\n| `records.due` | A deadline (`due`) is a date. |\n| `records.frees` | `frees` names a stored day, never a moment: a span of moments already frees its end. |\n| `records.task` | A task entity (`task`) states a `status` of a stored single select with `closed` options \u2014 its ring ticks a row done by moving it to one. |\n\n<!-- generated:end rules-records -->\n\n- **The title names the row** by who or what it is \u2014 a link by the linked row (a job\n  read by its customer). An autonumber is refused as a title; a typed number is the\n  subtitle.\n- **The status** is one single select. `closed` options end the work: a register opens\n  on the rows not in them. A `history` entity gets one row per move \u2014 its link to this\n  entity, the new status (a select holding the same option aliases, or text), the\n  moment and who \u2014 appended by the app\'s own writes that move the status, never by a\n  table automation. A `history` the model does not declare is derived, and needs no\n  `records` entry of its own.\n- **Milestones** are the alternative to a stored select: dates in the order the work\n  reaches them, the stage being the last one filled (never stored). A milestone with a\n  `when` applies only while its select holds those options and its stored yes/no that\n  value; otherwise the row skips it.\n  The record draws them as one block where ticking stamps today and clearing one clears\n  every later one; every save and act re-checks that a date comes after each earlier one\n  that applies. `closed` names the milestones that end the work. A register\'s add may ask\n  the first milestone, never a later one; an act may stamp one, never clear it.\n- **A limit** reads a number against a bound \u2014 another field of the row, or a constant.\n  A `gates` entry marks a pass on that meter: a percent field is its share of the\n  bound, any other number an amount.\n- **A deadline** (`due`) counts down wherever it is drawn and is overdue once past while\n  the work is open. A register over the entity says how many rows in view are overdue on\n  its summary line, and pressing that count narrows to them \u2014 no reading to state.\n- **A span\'s free day** (`frees`) is the end date on which what the row held is free\n  again \u2014 a check-out, a hire\'s return. A stay from the 3rd to the 5th holds two nights:\n  a lanes board, a calendar and a roster draw it through the 4th, and `no_overlap` lets\n  the next stay start on the 5th. Without it a span of days holds its last day; a span of\n  moments always ends as the next may begin.\n- **`starts`** is where an add\'s field begins, stated only where that is certain \u2014 a\n  log\'s own day at `today`, a request\'s requester at `me`. Nothing else starts a field\n  but its declared `default` and what the reader narrowed the register to.\n\n## Write rules\n\n`write_rules` is what a WRITE meets, keyed by entity alias; each entity\'s is held\nby its table. Every generated write of an\napp (`create_<entity>`, `update_<entity>`, each act) re-checks these on the\nserver; the screen only mirrors them.\n\n```jsonc\n"write_rules": {\n  // A customer is RECOGNISED by their address. An add that names one \u2014 from the\n  // customers register or from a picker\'s "new" \u2014 reuses the row it matches and\n  // opens one only where nothing does, so the book never grows a second Acme.\n  "customer": { "natural_key": ["email"] },\n  "order_line": {\n    "fields": {\n      // A line of nothing is not a line. Refused on create and on update.\n      "quantity": { "min": 1, "max": 9999 },\n      // Shipped inside its order\'s window: a bound read off the row a link names\n      // is held from both sides \u2014 moving the order\'s dates never strands a line.\n      "ships_on": { "min": "order.placed_on", "max": "order.due_on" },\n      // The price is fixed at the moment of ordering \u2014 COPIED off the product,\n      // not looked up for ever after.\n      "unit_price": { "default_from": "product.price" },\n      // Nothing is sold off an empty shelf. The picker reads only the rows that\n      // answer this, and the write refuses the same rows again.\n      "product": {\n        "options_where": {\n          "node_type": "group", "logic": "and",\n          "children": [{ "node_type": "condition", "type": "number",\n                         "field_key": "in_stock", "operator": "greater_than", "value": 0 }]\n        }\n      }\n    }\n  },\n  // One booking per room at a time, while it is held: a create or a save whose\n  // span overlaps another held booking of the same room is refused.\n  "booking": {\n    "fields": { "ends_on": { "min": "starts_on" } },\n    "no_overlap": { "from": "starts_on", "to": "ends_on", "by": ["room"], "while": { "state": ["held"] } }\n  }\n}\n```\n\n<!-- generated:start write-rules -->\n\n#### Entity write rules\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `natural_key` | list of alias (at least one) | no | The field aliases a row of this entity is RECOGNISED by. A write that names a row of this entity by these values reuses the row it finds, minting one only where nothing matches. |\n| `fields` | map of alias \u2192 [Field write rule](#field-write-rule) | no | Field alias \u2192 what that field\'s value is copied from, bounded by or picked among |\n| `no_overlap` | [No overlap](#no-overlap) | no | No two rows hold overlapping spans \u2014 a create or update that would is refused |\n\n#### Field write rule\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default_from` | text | no | Copy this field\'s value from the linked row at CREATE time \u2014 `<link alias>.<field alias>`, the link being a one-row link on this entity, required or filled by the add (the record a row is added under). The value is copied rather than looked up, so the source changing later leaves the row alone. |\n| `min` | number \\| text | no | Refuse a create or update whose value is below this: a constant for a number, or a field \u2014 `<field alias>` of the same row, or `<link alias>.<field alias>` of the one row a link names \u2014 of the same type (a return date after the departure, a line\'s day inside its trip). On a figure whose unit or currency is per row (`unit_field`, `currency_field`) a constant bound is only 0; bound it by a field of the row |\n| `max` | number \\| text | no | Refuse a create or update whose value is above this: a constant for a number, or a field of the same row or of the one row a link names |\n| `options_where` | [filter](#views) | no | Which rows of the target this link may point at \u2014 an `and` group of plain conditions over the TARGET entity\'s own fields, each `field_key` a field alias. It narrows the picker\'s read and is refused again where the write lands. |\n| `same` | list of alias (at least one) | no | One-row links this row and each row this link points at must name alike \u2014 a fee\'s invoice is one of its own visit\'s, a box\'s seal one of its own shipping line\'s: each a one-row link of both entities to the same entity. It narrows the picker\'s read to the rows naming what this row names, and a write is refused wherever it lands \u2014 on the link, or on what the two rows compare. |\n\n#### No overlap\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `from` | alias | yes | The stored date (or datetime) a row\'s span starts on |\n| `to` | alias | yes | The stored date (or datetime) a row\'s span ends on \u2014 a day it holds, unless `records` names it the day the row `frees`; a moment another row may start at |\n| `by` | list of alias (at least one) | no | Fields two rows share to compete for a span (the same employee, the same room); absent, every row |\n| `while` | map of alias \u2192 list of alias (at least one) | no | Only rows at these options of these selects hold their span (running, not closed); absent, every row |\n\n<!-- generated:end write-rules -->\n\n<!-- generated:start rules-write -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `write.natural-key` | A `natural_key` is text or a number a person types back, or a one-row link; a text key is unique \u2014 `unique: true`, or the key\'s fields as a set in the entity\'s `unique`. |\n| `write.default-from` | `default_from` copies `<link>.<field>` off the row a one-row link names, wherever an add fills that link (asked, or the record it is added under), into a field of the same type: a select into one declaring each of its options by alias, several options only into a multi-select. |\n| `write.bounds` | `min` and `max` bound a number or a date \u2014 by a constant a number, by a field of this row or of the one row a one-row link names either, of the same type and unit, never by itself \u2014 and `min` is never above `max`. |\n| `write.bound-per-row-unit` | On a figure whose unit or currency is the row\'s own (`unit_field`, `currency_field`) a constant bound is only 0 \u2014 bound it by a field of the row. |\n| `write.same` | `same` stands on a link and names one-row links this entity and the link\'s target both hold to one entity. |\n| `write.options-where` | `options_where` narrows a link by an `and` group of plain conditions over the target\'s own fields \u2014 a number compared in one unit on every row, a select by options it declares. |\n| `write.no-overlap` | `no_overlap` spans two date fields; `by` names values rows share \u2014 a link, a person, one option, a text or a number; `while` names single selects by their options. |\n\n<!-- generated:end rules-write -->\n\n- A `natural_key` is `text` or `number`, because a person types it back, or a\n  one-row link, because a row is also recognised by the one row it belongs with (a\n  fee by its visit and its kind). A key holding a `text` field is unique: `unique:\n  true` on that field, or the key\'s fields as a set in the entity\'s `unique` (a\n  site by its customer and its name) \u2014 two rows sharing it would make\n  find-or-create pick whichever the read answered first. An add asks the key by\n  default.\n- A `min` or `max` naming a field is read off the row as the save would leave it,\n  and one naming `<link>.<field>` off the row the link names \u2014 the link\'s side\n  re-checks its own rows when that bound moves.\n- A `default_from` copies where the add is sure to hold its link\'s row \u2014 a\n  required link, or the record the row is added under (an appointment added under a\n  plan takes the plan\'s patient) \u2014 and the two field types match. The copied field is\n  not asked there; through an optional link the add leaves empty, it is asked.\n- A `same` link names only rows that name what this row names \u2014 a fee\'s invoice\n  is one of its own visit\'s \u2014 through a one-row link both entities hold to one\n  entity; its picker offers nothing until the row names one. A row added under a\n  record names what it copies off it (`default_from`) from the start, so a block\n  expecting one line per row of the link lists that record\'s rows alone. A save\n  moving what the two compare, on either row, is refused while they would name apart.\n- An `options_where` link may be left empty; a row it names is refused again\n  where the write lands unless it holds the narrowing. A link naming one kind of\n  a book\'s rows (a "Shipping line" among the parties) narrows to that kind, or\n  its picker offers every row.\n\nA field\'s own `required` is not here: the contract carries it, and every write\npath refuses the row by field name from it. `unique` is the text field\'s own\nclause (\xA7 `text`) \u2014 an add says so at the control before the column does. A\nfield the workspace writes (a formula, a rollup, a lookup, an autonumber, a date\nwith `derive_from`) is never asked, written or edited.\n\n## Apps\n\nAn app is ONE register over one entity and the record each row opens \u2014 or a dashboard\nof readings. The author states COMPOSITION \u2014 which fields go where; the runtime owns\nhow each thing looks, one treatment per concept. Nothing is drawn that the app does not\nname, and each fact appears once on a record. What the vocabulary has no word for is an\nact\'s own `workflow`.\n\n```jsonc\n"apps": [{\n  "alias": "gate", "name": "Gate in and out", "entity": "visit",\n  "register": { "columns": ["service"], "filters": ["customer", "service"] },\n  "record": {\n    "sections": [\n      { "title": "In", "fields": ["customer", "service"], "blocks": [{ "rows": "fee", "columns": ["amount"] }] },\n      { "title": "Out", "at": ["in_yard"], "fields": ["release", "seal"], "blocks": [{ "files": ["photos"] }], "acts": ["gate_out"] }\n    ]\n  },\n  "acts": [{ "alias": "gate_out", "label": "Gate out", "when": { "stage": ["in_yard"] },\n             "requires": ["release", "seal"], "set": { "stage": "gone", "left_on": "now" }, "confirm": true }],\n  "checks": [{ "field": "unpaid", "blocks": ["gate_out"] }]\n}]\n```\n\n<!-- generated:start apps -->\n\n#### App\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | The app\'s name within the model \u2014 what `--from model.json#<alias>` picks |\n| `name` | text | yes | The job, in the words of the people who do it |\n| `description` | text | no | What the job is for, in a sentence |\n| `icon` | text | no | A lucide icon name the launcher tile draws |\n| `theme` | [Theme](#theme) | no | The launcher tile\'s colour |\n| `entity` | alias | yes | The entity whose rows this job works \u2014 the register\'s rows |\n| `books` | list of [Book](#book) (at least one) | no | Other entities the register reads as one list with `entity`\'s rows, each opened, edited and acted on in its own table: the same app over each, its fields lined up with `entity`\'s. Only a table or cards |\n| `scope` | alias | no | A required one-row link of the entity: the app works inside one row of the linked entity at a time (a project, a branch), picked from a list of them, and every row it reads, counts and adds is that row\'s |\n| `reads` | `"shared"` | no | Every member reads every row, whatever the entity\'s read scope |\n| `writes` | `"children"` | no | The reader adds and edits the record\'s child rows but not the record\'s own fields; the app\'s acts still move it |\n| `row` | [App row](#app-row) | no | How this job reads the entity\'s rows where it reads them otherwise than `records` (a cashier\'s figure is what is owed): the subtitle, figure and image stated replace the entity\'s wherever this app draws its rows \u2014 the register, a card, the record\'s header, a calendar, lane or roster entry. The title stays the entity\'s |\n| `register` | [Register](#register) | no | The rows: which columns and filters, the order, how a row is added |\n| `record` | [Record page](#record-page) | no | What a row opens: the door, its sections, and beside them its comment thread and its status history where stated |\n| `acts` | list of [Act](#act) | no | What the reader does to a record \u2014 each a press with its conditions and its write |\n| `checks` | list of [Check](#check) | no | Formulas that warn while they stand, or refuse the acts and saves they name |\n\n#### Theme\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `color` | text | yes | The tile\'s colour |\n\n#### App row\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `subtitle` | list of alias (1\u20132) | no | Up to two fields read under the title in this app, in place of the entity\'s |\n| `figure` | alias | no | The one number a row stands for in this app, in place of the entity\'s; a `limits` bound on it reads as its meter |\n| `image` | alias | no | A files field that pictures a row in this app, in place of the entity\'s |\n\n#### Book\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `entity` | alias | yes | Another entity whose rows the register reads beside its own \u2014 the same job over another table (a legacy ledger, a second branch\'s book) |\n| `fields` | map of alias \u2192 alias | no | A field of the app\'s entity \u2192 the field of this entity holding the same fact, where their aliases differ; a field the app reads lines up by its own alias otherwise, and one this entity lacks is blank on its rows and drops from what they open \u2014 an act, check or add needing it is not offered on them. Options line up by alias |\n\n#### Dashboard app\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | The app\'s name within the model \u2014 what `--from model.json#<alias>` picks |\n| `name` | text | yes | The job, in the words of the people who do it |\n| `description` | text | no | What the job is for, in a sentence |\n| `icon` | text | no | A lucide icon name the launcher tile draws |\n| `theme` | [Theme](#theme) | no | The launcher tile\'s colour |\n| `reads` | `"shared"` | no | Every member reads every row, whatever the entity\'s read scope |\n| `dashboard` | list of ([Metric](#metric) \\| [Breakdown](#breakdown) \\| [Trend](#trend) \\| [Pivot](#pivot) \\| [List](#list)) (at least one) | yes | The readings, in order \u2014 each over every row of its entity, windowed by the one period the reader switches |\n\n<!-- generated:end apps -->\n\n<!-- generated:start rules-app -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `app.alias-unique` | An app\'s alias is unique among the model\'s apps, and an act\'s among its app\'s acts. |\n| `app.records-entry` | Every entity an app lists, opens or picks \u2014 its own, a block\'s, a linked row\'s, a document\'s \u2014 has a `records` entry. |\n| `app.reads-shared` | `reads: "shared"` stands only where a table the app reads states a `read_scope`. |\n| `app.writes-children` | An app that writes only the record\'s children (`writes: "children"`) adds no row of its own entity. |\n| `app.scope` | `scope` is a required one-row link of the app\'s entity, the same on every row the app lists \u2014 never a column, filter, search field, group, `where`, `opens`, section field or add question. |\n| `app.when` | A `when` holds single selects to options and yes/nos to `true` or `false`, stored or a formula of one \u2014 a milestone\'s `when` only a stored yes/no, read before any formula over it is computed. |\n| `app.asked-written` | What an add, an act or `starts` fills is a field a person writes \u2014 never a formula, rollup, lookup, autonumber or a date the workspace stamps. |\n| `app.own-rows` | A many-link to rows that each belong to one row of this entity is never a section\'s field, an add\'s question or an act\'s ask: those rows are the record\'s own, read as a `rows` block. |\n| `app.create-asks` | An add asks fields of a table people write \u2014 never the link or the folder it files the row under, which the add sets itself. |\n| `app.create-required` | An add (`create`) asks every field its entity requires that nothing else fills \u2014 a `default`, `starts`, the record or folder it files the row under, or a `default_from` over a link it fills \u2014 or the server refuses every add. |\n| `app.books` | A register app\'s `books` each name another entity once \u2014 never the app\'s own \u2014 whose fields line up with the app\'s by alias, else by `fields` (a field the app reads, or one a report prints \u2192 one of the book\'s): read as one column type (a day apart from a moment), one value or several alike, a link to the same entity. Each book holds the title, the status, the folder (`scope`), what `where` keeps and every check locking the rows; the register is a table or cards. Two books holding a field of their own under one alias hold it as one kind of value. A report\'s `books` each name the app\'s entity or one of its books, once, and one of them holds each field its `where` and `per` narrow by. |\n| `app.book-lacks` | *Noted, never refused:* A book lacking a field the app\'s record, an act or an add reads: what reads it drops from the book\'s rows \u2014 an act, a block, a section, the add. A field only a report prints, held by a book as another kind of value, prints blank on its rows. |\n| `app.row` | An app\'s `row` states only what differs from `records`: a line that is not the title, a number for its figure, a files picture no act makes documents into. |\n| `app.files-shown` | Every files field is drawn by some app over its entity \u2014 a section\'s `fields`, a `files` block, a column, the `image`, or where an act making papers into it stands: the field an act keeps its document in (`into`) is placed where the paper reads. |\n| `app.document-image` | *Noted, never refused:* A linked entity holding one files field and no `image`: `image` lets a link preview its paper. |\n| `app.tasks` | *Noted, never refused:* A task entity an app lists whose rows no write of the app moves to a closed option (its ring stands disabled), or that an act ticks done and none moves back. |\n\n<!-- generated:end rules-app -->\n\n`writes: "children"` is a desk that adds and edits a record\'s child rows and never\nthe record itself. `reads: "shared"` lifts every read scope the app\'s tables state \u2014\nrefused where none of them states one.\n\n`scope` names a required one-row link of the entity: the app works inside ONE row of\nthe linked entity at a time \u2014 a project, a branch, a season. With no folder remembered\nit opens on the list of them, each with how many of the app\'s rows it holds; inside,\nevery read, count and reading narrows to that one, an add files its row under it (the\nlink is never asked), and the record states its folder in the header. A scope narrows\nthe view; who may read what stays the entity\'s `read_scope`. The folder link is never a\ncolumn, a filter, a search field, a fact or an add\'s question.\n\nA dashboard is `{ "alias", "name", "dashboard": [readings] }` with no entity, register\nor record: each reading reads every row of its entity, and one period the reader\nswitches (this month \xB7 30 days \xB7 this quarter \xB7 this year) windows each reading placed\nin time; one placed in no time reads the rows as they stand now, and its head says so.\nA `list` reading lists rows, each opening in its `app`. The readings answer the one\nquestion the dashboard\'s owner asks, in the order they ask it \u2014 rows to act on lead where\nthe answer is rows; no order of kinds is the rule.\n\n```jsonc\n// The depot owner\'s morning question: which boxes are past their free days, whose are they, is it growing?\n{ "alias": "overview", "name": "Depot overview", "dashboard": [\n  { "list": "visit", "where": { "overdue": true }, "columns": ["line"], "app": "gate", "label": "Past free days" },\n  { "breakdown": "visit", "by": "line", "where": { "overdue": true }, "label": "Past free days by line" },\n  { "trend": "visit", "over": "arrived_on", "where": { "overdue": true }, "label": "Past free days, by arrival" }\n] }\n```\n\n### Register\n\n```jsonc\n"register": { "columns": ["service", "release"], "filters": ["customer", "service"], "create": ["container_no", "customer"] }\n```\n\n<!-- generated:start apps-register -->\n\n#### Register\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `columns` | list of alias | no | Fields read as columns after the row\'s title \u2014 on a calendar\'s entry or a lane\'s block, its facts after its title; never what the row draws itself (its subtitle, image, status, figure, or the bound its figure\'s meter reads against), which the runtime places |\n| `filters` | list of (alias \\| [Tiered filter](#tiered-filter)) (at most 3) | no | The fields the reader narrows the rows by every day, in that order \u2014 each earns its place by that daily use, so none to 3 is normal and 3 is a cap, never a quota (a select, a member, a link, a date, a yes/no, a number as a range, or its `tiers` where the business narrows by those bands daily) \u2014 each on a desk\'s line, in one Filters sheet on a phone. Never the status (its chips); each a field the rows show \u2014 a column, or a part of the row. A threshold the business names ("large orders") is a formula yes/no here; a column\'s header sorts by a day or an amount |\n| `search` | list of alias (at least one) | no | The fields the search box matches (a link by its row\'s title); a pasted list searches each line and names the lines no row matched. Absent, every word of the row |\n| `group` | alias | no | The field the rows open grouped by, the reader\'s grouping starting there \u2014 a period\'s rows read under each period, one per person; absent, ungrouped |\n| `sort` | [Sort key](#sort-key) \\| list of [Sort key](#sort-key) (at least one) | no | The order rows open in: one key, or a list of keys most significant first, each breaking the ties of the ones before it (a select orders by its options\' order); absent, the first deadline soonest first, else the newest first |\n| `tabs` | list of [Register tab](#register-tab) (2\u20135) | no | The lists the register reads its rows as, each a tab with its count over one period the reader picks above them \u2014 the stock at its end beside the arrivals and departures during it, a report\'s sheets; each keeps the register\'s filters and search. Absent, one list. Not with a calendar, roster or lanes, which read their own window |\n| `period` | `"today"` \\| `"week"` \\| `"month"` \\| `"quarter"` \\| `"year"` \\| [Period days](#period-days) | no | With `tabs`: the period they open on \u2014 `today`, `week`, `month`, `quarter` or `year` so far, or `{ days }`, the last that many days through now (a night shift running past midnight reads two); absent, this month so far |\n| `layout` | `"table"` \\| `"cards"` \\| `"calendar"` \\| `"roster"` \\| `"lanes"` | no | `cards` for rows read by their picture; `calendar` for rows read by their day \u2014 a month, a week, a day or a list, an entry at its hour where its date holds one and over its span where its line holds a second date; `roster` for what each row did on each day of a week or a month (who worked which shift, which vehicle ran), or with `expect` which of a set each row holds; `lanes` for rows booked on a resource over time (an appointment in its chair, a hire on its machine); absent, a table |\n| `roster` | alias | no | With `layout: "roster"`: the entity whose rows fill the days \u2014 one single link to this entity, and a date on its row line (`records` title or subtitle). A cell reads its row\'s status, else the first single select on its line, several rows a mark each, the cell read by the one latest in that select\'s options; a row whose line holds a second date after the first fills every day to it; a day with none stays empty, never an absence |\n| `expect` | alias | no | With `roster`: a single select of the roster\'s rows whose options are the columns in place of days \u2014 each cell the row holding that option, read by its status, an empty one added there (a checklist of papers per case); the roster then has no period |\n| `of` | alias | no | With `expect`: this entity\'s own multi-select holding the options each row expects \u2014 its other columns stand blank on that row, never added. Its options are among `expect`\'s |\n| `lanes` | alias | no | With `layout: "lanes"`: a one-link of this entity whose target\'s rows are the lanes (a chair, a machine, a room), each drawn even when empty. A row is a block from the first date on its line to the second \u2014 within one day by the hour where the first holds one, else by the day over one day, a week or a month; a free stretch between blocks adds a row there, its lane, its start and the end the stretch reaches filled |\n| `loads` | map of alias \u2192 alias | no | With `lanes`: what a lane carries against what it holds, at most 2 \u2014 a number of this entity each block adds (a weight) to a number of the lane\'s row it is held within (a payload), in one unit or two of one dimension. Each lane reads the most its blocks add up to at one time in the window \u2014 a day\'s rows together \u2014 and names by how much and when a lane runs over |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Only the rows whose select holds one of these options and whose yes/no (stored, or a formula) is this value \u2014 read so on the server and never offered as a chip: the rows this app works of an entity other apps read whole (the purchases, of orders both ways). A row added here holds a select\'s one option and a stored yes/no\'s value |\n| `opens` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | The view the register opens on: each entry a narrowing on a field the rows show that stands as a chip the reader may take away (the rows still owed), `"me"` a member field holding the reader (the rows mine). One on the status replaces the chips\' opening on the open work |\n| `create` | list of alias (at least one) \\| `false` | no | The fields asked when a row is added; absent, the title, the subtitle and figure no default fills, the natural key and every required field \u2014 each a person writes; false, rows are not added here |\n| `export` | `true` \\| list of [Register report](#register-report) (at least one) | no | The rows in view saved as the register\'s report \u2014 its title, a line per thing narrowing the rows, the readings and every row: `true`, one workbook of the register\'s columns; a list, the reports a reader picks from one export menu |\n| `readings` | list of ([Metric](#metric) \\| [Breakdown](#breakdown) \\| [Trend](#trend) \\| [Pivot](#pivot)) (at least one) | no | Readings of the register\'s own entity above its rows, over the rows in view \u2014 the search, the status and the filters narrow them, but a picture\'s own field, read as the register opens on it. A press on a breakdown\'s part, a pivot\'s cell or a figure with `where` narrows the rows by its field, as a filter does |\n\n#### Tiered filter\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | yes | A number \u2014 stored, or a formula or rollup reading one \u2014 in one unit for every row |\n| `tiers` | list of number (at least one) | yes | The breakpoints between its bands, ascending, in the field\'s stored unit: under the first, from each to the next, from the last up \u2014 each band worded by the field\'s own format, several picked at once |\n\n#### Sort key\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | yes | The field rows are ordered by |\n| `desc` | `true` | no | Latest or largest first; absent, soonest or smallest first |\n\n#### Register tab\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `tab` | alias | yes | The tab\'s name: its address, and the key its rows stand under in a report |\n| `label` | text | yes | What the tab holds, in the reader\'s words |\n| `in` | alias | no | A date (stored, or a formula): the tab holds the rows dated within the register\'s period, from its start through its last day, or up to its last minute \u2014 the arrivals of a period |\n| `open` | [Tab open](#tab-open) | no | The tab holds the rows open at the period\'s end: begun before it, and not ended by then \u2014 what is in stock, out on hire or still owed at that moment |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no is this value, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `sort` | [Sort key](#sort-key) \\| list of [Sort key](#sort-key) (at least one) | no | The order this tab\'s rows read in, as the register\'s `sort`; absent, the register\'s |\n\n#### Tab open\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `from` | alias | yes | The date a row begins on (stored, or a formula) |\n| `to` | alias | yes | The date a row ends on (stored, or a formula), empty while it is open |\n\n#### Period days\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `days` | integer | yes | How many days through today, at most 366 |\n\n#### Register report\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `label` | text | yes | The report\'s name, in the reader\'s words \u2014 its entry in the export menu and its file\'s title |\n| `description` | text | no | What the report holds, under its name in the menu |\n| `template` | alias | no | A template filled with the report \u2014 `title`, `lines`, `readings`, `at` (when it was made), `dates` (each date filter\'s `from` and `to`, by field), `period` (the tabs\' `from` and `to`), `per` (the value picked), every row in view (at most 20,000) under the entity\'s alias, and each tab\'s under its name: an html one made a PDF, an excel one a workbook; absent, the workbook of the register\'s columns, a sheet per tab |\n| `filename` | text | no | The file\'s name, in the template grammar over one value each \u2014 `title`, `at`, `dates.<field>.from` or `.to` of a date filter, `period.from` or `.to` with tabs, `per` with a `per`, `lines \\| lookup:<n>` \u2014 `Stock {{per}} {{period.to \\| format:"dd.MM.yyyy"}}`; absent, the template\'s name, or the report\'s title |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | The rows the report is of, set on the register as the chips they are before its file is made \u2014 the screen shows what the file holds |\n| `per` | alias | no | A select, a member or a one-link the reader picks one value of from the menu \u2014 the rows narrowed to it, as its chip, and one file of that value |\n| `books` | list of alias (at least one) | no | The rows of these books only \u2014 each the app\'s `entity` or one of its `books`; absent, every book\'s |\n\n<!-- generated:end apps-register -->\n\n<!-- generated:start rules-register -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `register.export-report` | A register\'s reports each have their own label; `per` picks one option, person or one-link row \u2014 never of the status, the folder or a field its `where` fixes. |\n| `register.export-template` | A template an export fills reads at its root only `title`, `lines`, `readings`, `at`, `dates` and its rows under the register entity\'s alias \u2014 an entity named none of those \u2014 and is the document of no act. |\n| `register.column-drawn` | A column never names what the row draws itself \u2014 its title, subtitle, image, status, figure, or the bound its figure\'s meter reads against \u2014 and names a field once. |\n| `register.filter` | A filter names a select, a member, a link, a date, a yes/no or a number of the register\'s own rows \u2014 a lookup through one-row links as the field it reads \u2014 never the status (its chips), nor one `where` fixes. |\n| `register.filter-split` | *Noted, never refused:* A filter on a field a breakdown or pivot in the band splits the rows by \u2014 a press on its part narrows by it too; a member\'s filter, which narrows to the reader\'s own rows, is never noted. |\n| `register.filter-unshown` | A filter, a narrowing the register `opens` on, and a press in its band (a breakdown\'s part, a pivot\'s cell, a figure\'s `where`) name a field its rows show \u2014 a column; the row\'s title, the line under it, its picture, status or figure, a meter\'s bound, or the unit or currency a drawn figure is read in; a deadline; a warning its line says; the group or lane it stands under. A narrowing to the reader (`"me"`) needs none. |\n| `register.tiers` | `tiers` band a number read in one unit on every row; a figure read in each row\'s own unit or currency is named bare. |\n| `register.search` | `search` names text, a code, or a link \u2014 matched by its row\'s title. |\n| `register.sort` | Each `sort` key names a field of the register\'s rows that holds an order \u2014 never files \u2014 and no field twice. |\n| `register.tabs` | A register\'s `tabs` each name a tab of their own, never a key a report already holds; a tab\'s `in` and `open` dates are dates of its rows, `open`\'s two different; its `where` and `sort` hold as the register\'s do, and never narrow by the status, which its chips split. Only a table or cards reads tabs, and a band reading\'s `tab` names one of them. |\n| `register.group` | `group` names one value per row \u2014 a single select, a one-row link, one member, a date, a yes/no or a text, a lookup through one-row links as the field it reads \u2014 never the status (its chips); only a table groups, and grouping by the title needs a subtitle to lead each row. |\n| `register.readings-own` | A register\'s `readings` read its own entity; another entity\'s stand on a dashboard. |\n| `register.readings-restate` | A register\'s metric never sums the row\'s figure or counts the rows without a `where`: the summary line totals the figure and the status chips count the rows. |\n| `register.where-opens` | `where` and `opens` hold the register\'s own selects and yes/nos, and `opens` a member field holding the reader (`"me"`); a field `where` fixes is never a filter nor opened otherwise, and `opens` stays among the options `where` keeps. |\n| `register.roster` | `layout: "roster"` and `roster` go together: the roster\'s entity has one single link to this one and a date on its line, a roster draws no `columns`, `expect` needs `roster` and `of` needs `expect`. |\n| `register.roster-expect` | A roster\'s `expect` is a single select of its rows, and `of` this entity\'s multi-select whose every option is one of `expect`\'s. |\n| `register.lanes` | `layout: "lanes"` and `lanes` go together: `lanes` is a one-row link to an entity with a `records` entry, the rows name a date on their line, a block\'s two ends are read alike (two days or two moments), and `loads` needs `lanes`. |\n| `register.loads` | `loads` names one to 2 numbers a block adds \u2014 never a percent \u2014 each against a number of the lane\'s row, in one unit or two of one dimension. |\n| `register.band-pivot` | *Noted, never refused:* A pivot in a register\'s band: its grid reads on a dashboard, and the band leads with a `metric`. |\n| `register.band-headline` | *Noted, never refused:* A register over rows that move (a status or a deadline) stating no `readings`: the band leads with the job\'s headline number. |\n\n<!-- generated:end rules-register -->\n\nThe row is the entity\'s `records` entry: its picture, title and the line under it,\nthen the status, the columns, and the figure at the right; the title, the status and a\ncolumn of days or amounts sort the rows by their header. The status is always the chips, with\ncounts, opening on the rows not closed (every row on a calendar or a lanes board, whose\nwindow of time narrows them) \u2014 never one of `filters`. `filters` are the ones a reader\nnarrows by every day \u2014 none to three, never a quota \u2014 in order of use, each a field the\nrows show (a column, a part of the row), each on the line\nwith the search and the chips, the grouping one\nchip at its end; a member filter offers "mine". A date filters by a range of days \u2014 of\nminutes on a `datetime` field, its end not held, so back-to-back shifts read each row\nonce \u2014 and can keep the rows holding no date too (in the yard at a moment: in before it,\nout after it or not yet). A number filters by a range typed in its\nunit or currency \u2014 a figure read in each row\'s own, in the one picked beside it \u2014 with a\nslider over a percent or a figure against a constant `limits`; `{ "field", "tiers" }`\noffers the bands its breakpoints cut in place of a range (`[1000, 5000]` on a weight in\nkg: under 1.000 kg, 1.000\u20135.000 kg, 5.000 kg and over), refused on a figure read in each\nrow\'s own unit. A threshold with a name is a formula yes/no, never a range. A\ncolumn the row already draws is refused. `sort` is one key or a list of keys, most\nsignificant first, each breaking the ties of the ones before it \u2014 a shipping line in its\nselect\'s option order, then the arrival day soonest first:\n`[{ "field": "shipping_line" }, { "field": "arrived_on" }]`; a header\'s press leads them.\nAbsent `sort`, rows open soonest deadline first where the row has a `due`, else newest first. `search` names the fields\nthe search box matches \u2014 a link by its row\'s title \u2014 and a pasted list searches each\nline, naming the lines no row matched; absent, it matches every word of the row.\n`export` saves the register as its report \u2014 the title, a line per chip, the search and\nthe moment it was exported, the readings, and every row in view, at most 20,000 of them.\n`export: true` saves it as a workbook, the readings on a sheet before the rows. A list\nstates the reports the business sends \u2014 one a button, several one menu \u2014 each a `label`,\na `description`, and a `template` filled with `title`, `lines`, `readings`, `at` (the\nmoment it was made), `dates` (each date filter\'s `from` and `to` by field, a day or a\nmoment as the filter bounds the rows) and the rows under the entity\'s alias (an html one\nmade a PDF, an `excel` one a workbook; absent, the workbook). A report\'s `filename` names\nits file in the template grammar over the same keys but the rows \u2014\n`"Stock {{dates.arrived.to | format:\\"dd.MM.yyyy\\"}}"`; absent, the template\'s name, or\nthe label. A report of some rows (`where`), or of one value the reader picks (`per`: one\nline\'s file), first narrows the register as its chips, so the screen shows what the file holds.\n`readings` read the register\'s own rows above them: the rows in view, so the search,\nthe status and the filters narrow each one, but a picture\'s own field, which it reads as\nthe register opens on it. They are optional \u2014 state them where a\npicture answers something the rows cannot \u2014 and stand under the title in one compact\nband: lead with the job\'s headline number (a `metric`), then at most the mix (a\n`breakdown`) and the movement (a `trend`) \u2014 a `pivot` stands under the band as a whole table, every line and its totals. A picture\nstands only where it splits the rows in view into two parts or more, one of them\nholding two rows or more; a split whose rows\nall fall in one part, and a lone figure with no picture beside it, are said on the\nsummary line instead, so a band stands only holding a picture or two figures. The summary line already totals the\nfigure over the rows in view and the status chips count them, so a `metric` summing the\nfigure, or counting the rows of an entity with a status, is refused unless its `where`\nnarrows it.\n\n`where` keeps the rows the app works, read so on the server and never a chip: a\npurchase desk over orders of both directions states `"where": { "direction":\n["purchase"] }`, and a row added there is written holding the one option (a select kept\nat several is asked among them). `opens` is the view the register opens on, each entry a\nchip the reader may take away: a cashier opens on `"opens": { "owes": true }`. Both take\na select\'s options or a yes/no\'s value, stored or a formula; `opens` on the status is\nthe chips\' opening choice. `opens` also takes `"me"` on a member field \u2014 `"opens": {\n"assignee": "me" }` opens on the rows assigned to whoever reads, the server reading the\nreader, never the page; `where` refuses it, since it fixes the rows for every reader\n(who may read a row at all is the entity\'s `read_scope`).\n\n`layout: "calendar"` places each row on its day \u2014 a month, a week, a day or a list (a\nphone reads the list or a day): at its hour where the date holds one, over its span\nwhere the row\'s line holds a second date after it, its line\'s other words and the\nregister\'s `columns` after its title. The calendar reads the window in view, and its\ncount and the status chips count that window, opening on every row.\n\n`layout: "lanes"` with `lanes` naming a one-link draws each row of the linked entity as\na lane (a chair, a machine, a room), empty ones too, and each register row as a block\nfrom the first date on its line to the second: over the hours of one day where the first\nholds its hour, else over the days of one day, a week or a month. A block reads the row\'s\nname and the first of its `columns`; a free stretch between blocks adds a row there, its\nlane and its start set, and its end where the next block bounds it. A phone lists each\nlane\'s blocks and free stretches in clock order. Rows naming no lane stand first, in a lane\nof their own; where the app writes the link, each block moves to another lane from its menu.\nInside a folder (`scope`), the lanes are the ones whose own one-link names that folder \u2014 a\nbranch\'s rooms, never every branch\'s. A span\'s end holds its day unless `records` names it\nthe day the row `frees`.\n\n`loads` names what a lane carries: `{ "weight": "payload", "volume": "box" }` sums each\nblock\'s number and reads it against the lane row\'s own, at most two. A lane holds its\nblocks while they stand, so it reads the most they add up to at one time in the window \u2014\na day\'s rows together \u2014 named, past its bound, by how much and on which day or at which\nhour. The two are in one unit, or two of one dimension (kg against t); a block then reads\nwhat it adds, and the move menu reads each lane as it would stand with the block on it.\nA bound a single row must keep (no parcel heavier than its van) is a `write_rules` `max`\nthrough the link, which refuses the move.\n\n`layout: "roster"` draws the register\'s rows down the side and the days of a week or a\nmonth across; `roster` names the entity whose rows fill the days \u2014 each stands on one\nregister row by its single link to it, and on the first date of its line (a shift on a\nperson\'s day, a run on a vehicle\'s), on every day through the second date where its line\nholds one. A cell reads its row\'s status, else the first single select on its line (a\nshift\'s kind), several rows their count; a week\'s cells say their words and one more\nfact of the line, a month\'s keep their marks. A day holding none stays empty: nothing\nwas due, which is never an absence. A filled cell opens its row; an empty one adds a row\nthere, the register row and the day set, asking what any add of it asks \u2014 unless no\nperson writes those rows (`writes: false`). With `expect` (a single select of those\nrows) the columns are its options in place of days \u2014 a checklist of papers \u2014 and `of`\n(this entity\'s multi-select) names the ones each row expects: a gap among them reads as\none and adds its row, the others stand blank, and each row reads what it holds of them,\n`2/3`. A roster states no `columns` and needs no `readings`: its legend counts each\nstate in view.\n\n```jsonc\n"register": { "layout": "roster", "roster": "run", "filters": ["operator"] }\n```\n\nAn app whose job reads its rows otherwise than the entity\'s `records` restates them in\nits own `row` \u2014 the cashier\'s figure is what is still owed, its line the service and the\nday. The subtitle, figure and image it states replace the entity\'s wherever that app\ndraws a row of it; every other app reads `records`, and the title is the entity\'s.\n\n### Readings\n\nA reading is one number, or one picture of numbers, over rows. Where it stands decides\nwhich rows: a dashboard reads every row, a register\'s `readings` the rows in view, a\nrecord\'s reading block the child rows under the record. The picture is the runtime\'s,\nchosen from what the reading means \u2014 no key picks a chart.\n\n```jsonc\n{ "metric": "visit", "value": "fees", "where": { "paid": false }, "over": "arrived_on", "label": "Unpaid" }\n{ "breakdown": "visit", "by": "line" }\n{ "trend": "visit", "over": "arrived_on", "value": "fees" }\n{ "pivot": "visit", "rows": "size", "columns": "line" }\n{ "list": "visit", "where": { "stage": ["in_yard"] }, "columns": ["line"], "app": "gate", "label": "In the yard" }\n{ "list": "task", "where": { "assignee": "me" }, "label": "My tasks" }\n```\n\nA reading\'s `where` keeps rows by a select\'s options, a yes/no\'s value, or `"me"` on a\nmember field \u2014 the rows that name whoever reads, read so on the server.\n\n<!-- generated:start apps-readings -->\n\n#### Metric\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `metric` | alias | yes | The entity whose rows are counted, or summed, into one number |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `target` | number | no | The number it is read against, where no `limits` bounds its value (a bounded value is read against the sum of its bound) |\n| `better` | `"up"` \\| `"down"` | no | Which way its change over the recent periods `over` reads is good; absent, a sum\'s rise and a count kept by `where` falling |\n| `label` | text | yes | What the reading is, in the reader\'s words |\n\n#### Breakdown\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `breakdown` | alias | yes | The entity whose rows are split into parts |\n| `by` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) each row is counted under |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the `by` field\'s label |\n\n#### Trend\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `trend` | alias | yes | The entity whose rows are counted, or summed, per period |\n| `over` | alias | yes | The date each row falls on \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link |\n| `ahead` | `true` | no | Counts forward: the current period first, then the ones after it, over the rows dated today or later (arrivals by their ETA); absent, the periods up to today |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the value\'s label, else the entity\'s |\n\n#### Pivot\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `pivot` | alias | yes | The entity whose rows are counted, or summed, in a grid |\n| `rows` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) down the side |\n| `columns` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) across the top |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the two fields\' labels |\n\n#### List\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `list` | alias | yes | The entity whose rows are listed, each in its `records` anatomy |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `columns` | list of alias | no | Fields read after each row\'s title |\n| `app` | alias | no | An app of this model over the same entity that a row opens in |\n| `label` | text | yes | What the reading is, in the reader\'s words |\n\n<!-- generated:end apps-readings -->\n\n<!-- generated:start rules-reading -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `reading.value` | A reading sums a number, never a percent \u2014 percents do not add up. |\n| `reading.split` | `by`, `rows` and `columns` split by one value each row holds \u2014 a single select, a one-row link, one member or a yes/no, stored or a formula, a lookup through one-row links as the field it reads \u2014 and a pivot crosses two different fields. |\n| `reading.over` | `over` is a date: the row\'s own, stored or a formula, or its parent\'s through a lookup over a one-row link. |\n| `reading.where` | A reading\'s `where` keeps rows by a select\'s options, a yes/no\'s `true` or `false`, or a member field holding the reader (`"me"`). |\n| `reading.target` | `target` reads a value nothing bounds \u2014 a value `limits` bounds reads against the sum of its bound. |\n| `reading.better` | `better` needs `over`: a change is read over the periods its date places the rows in. |\n| `reading.list-app` | A list\'s `app` is a register app of this model over the list\'s own entity. |\n\n<!-- generated:end rules-reading -->\n\nA reading counts its rows, or sums the number `value` names \u2014 never a percent. `by`,\n`rows` and `columns` split the rows by one value each: a single select, a one-row link,\none member, or a yes/no \u2014 stored or a formula, its parts read as its label and the\nothers. `over` is a date, the row\'s own (stored or a formula) or its parent\'s through a\nlookup over a one-link: a trend\'s periods, a metric\'s recent periods beside its number,\nand what a dashboard\'s period windows. `ahead: true` reads a trend forward from the\ncurrent period over the rows still to come. `where` keeps rows whose select holds one\nof the options, or whose yes/no is the value, every entry ANDed \u2014 a band leads with the\njob\'s exception as a formula\'s yes/no (what is late, what is short), never a stage the\nstatus chips already count. A metric summing a value `limits` bounds reads against the\nsum of its bound (`10 / 14`); `target` reads one against a number nothing bounds. A\nmetric\'s change is green where it moves the good way: a sum\'s rise, a count kept by\n`where` falling; `better` states the other way where that reads wrong \u2014 money going out\n(`"better": "down"`). A register reads only its own entity; a `list` stands only on a\ndashboard.\n\n### Record\n\n```jsonc\n"record": {\n  "door": "page",\n  "sections": [\n    { "title": "Details", "fields": ["size", "line", "built_on"] },\n    { "title": "Gate in", "at": ["arriving", "in_yard"], "fields": ["arrived_on", "truck"],\n      "blocks": [{ "rows": "fee", "where": { "leg": ["in"] }, "expect": "kind", "columns": ["amount", "paid_by"] }],\n      "acts": ["gate_in_paper"] },\n    { "title": "Sell to a buyer", "description": "Moves the container to the buyer\'s stock once it has left.", "acts": ["sell"] }\n  ]\n}\n```\n\n<!-- generated:start apps-record -->\n\n#### Record page\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `door` | `"page"` \\| `"drawer"` | no | A page for work read at length; a drawer for rows worked one after another from the register. Either stacks its sections, and from three sections on navigates them \u2014 a page by a rail, a drawer by tabs; absent, a page where a section has `at` or is a `page` or the record has more than three sections, else a drawer |\n| `sections` | list of [Section](#section) (at least one) | no | The record in the order its work reaches it \u2014 each section its fields, then its blocks, then its acts. Absent, one section of every field a person writes that no other place shows |\n| `comments` | `true` | no | The record\'s comment thread beside the sections \u2014 who wrote what and when, with a composer \u2014 stated only where the job\'s people discuss a record or the owner asks for one. Absent, it is drawn nowhere |\n| `history` | `true` | no | The record\'s status history beside the sections \u2014 each move, when and who \u2014 stated only where the owner asks for an audit trail of the moves: the rail already marks the steps passed, and the entity\'s `status.history` is written either way. Absent, it is drawn nowhere |\n\n#### Section\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `title` | text | yes | What the section is, in the reader\'s words \u2014 its heading, and its name on the record\'s rail or tab |\n| `description` | text | no | One sentence under the title: what the section is for, or what its act does |\n| `at` | list of alias (at least one) | no | Options of the record\'s status (or its milestones) during which this section is the work now \u2014 a step of the path the record moves through: its rail item reads now while the status holds one and this app has work there, done once the record\'s history says it went through one \u2014 or it is a step of the path before where that history opens (with none, where the record stands) that no act moves the work past \u2014 and it stands before the section that is the work now, and waiting otherwise; a section every option of which ends the work, past the path\'s end or entered by its own act, is an exit: no item and nothing drawn until the record stands in it, then set apart after the steps and never one; A page opened from the register opens at it. It never locks what the section holds: its fields are written as the write rules and checks allow at any stage. An act it names is offered during these alone: its `when` holds the status to them, or on milestones it stamps the step after one of them \u2014 a detour and an exit are sections of their own, a detour stated before the step it returns to |\n| `fields` | list of alias (at least one) | no | The record\'s own fields in this section, in the order they are read \u2014 never one the header draws: the row\'s title, subtitle, image, status or figure |\n| `blocks` | list of [block](#blocks) (at least one) | no | What the section holds besides its own fields, under them, in order |\n| `acts` | list of alias (at least one) | no | Acts of this app drawn under the section\'s fields, their asks as more of them and what each lacks said above its button; the header draws no act, so every act of the record itself is named by one section \u2014 an act of a child (`of`) stands on the child\'s row and is never named here. An act moving the status, offered at ONE step (the stage its `when` holds), stands at that step\'s foot when it moves the work forward \u2014 to a later option, an exit too \u2014 or back to a step the work passes anyway; one offered at several steps, or moving back into a detour, stands in the section it enters, which draws it while the work waits \u2014 an exit\'s in the header\'s \u22EF, since an exit stands only once the record is in it. A correction \u2014 `danger` and not one of its step\'s outcomes (no other status move offered at the same moment) \u2014 waits in the section heading\'s \u22EF, and one no section names in the header\'s \u22EF; every other act is named by a section |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n| `page` | `true` | no | A page of its own, off the record\'s scroll: its own heading and a way back, reached from the record\'s rail after the scroll\'s sections, or from a link at its place where the record has no rail \u2014 for what makes the record worse stacked in it: a long list of related rows, a workspace of its own. Only on a page door, never a step (`at`) |\n\n<!-- generated:end apps-record -->\n\n<!-- generated:start rules-record -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `record.placed-once` | A field, a block and an act each stand once on a record: the header draws the title, subtitle, image, status (or milestones), figure and folder, and a field\'s one other place is a section\'s `fields`, a files block or a text block \u2014 save the image, which one files block may draw again, whole. |\n| `record.foot-total` | A rows block\'s foot totals the child\'s figure and each summed column over the rows it lists; the record\'s rollup summing that field over those rows (the same `where`) is that foot, never also one of a section\'s `fields`. |\n| `record.fact-restates` | A section\'s field never looks up what its link already reads where it stands: the linked row\'s title and line beside the link, the figure or bound its meter reads on the header\'s line. |\n| `record.section-holds` | A section holds fields, blocks or acts. |\n| `record.at` | `at` names options of the record\'s stored status, or its milestones; a record with no status has no steps. |\n| `record.page` | A section is a `page` only on a page door and never a step (`at`), its title naming an address no other page shares (a letter or a digit at least), and never every section. |\n| `record.history` | `record.history` draws a status history the entity records (`status.history`); no block reads that history. |\n| `record.section-acts` | A section\'s `acts` name acts of the record itself: an act of a child (`of`) stands on the child\'s row, and one over the register\'s rows (`on`) on the register. |\n| `record.act-in-section` | Every act of the record stands in the `acts` of the section whose work it is; only a correction no section owns \u2014 `danger`, and no other status move offered at the same moment \u2014 waits in the header\'s \u22EF. |\n| `record.move-home` | A status move offered at one step stands at that step\'s foot when it moves the work forward, to an exit, or back to a step it passes anyway; one offered at several steps, or moving back into a detour, stands in the section `at` the status it enters. |\n| `record.act-staged` | An act at a staged section\'s foot is offered only during that section\'s steps: its `when` holds the status to options the section names \u2014 on milestones, it stamps the step after one of them. |\n| `record.act-hidden` | An act is never offered only while its section\'s `when` hides the section. |\n\n<!-- generated:end rules-record -->\n\nThe record is its `sections`, stacked in the order the work reaches them. A section is\nits fields, the acts under them, then its blocks \u2014 the acts at its foot instead where one\nreads what a block holds or none of its fields \u2014 and holds at least one of them. From\nthree sections on, the record is navigated by their titles: a page by a rail that jumps\nto each (a strip of the same names on a phone), a drawer by tabs, the companion the last;\nwith fewer, the sections just stack. `description` is one sentence under the title.\n`at` names the status options (or the milestones) during which the section is the work\nnow \u2014 only on a record that truly moves through those stages: the rail marks it done,\nnow or waiting (an item of no `at` is its title alone), and the section stands even holding\nnothing yet \u2014 it never hides a field, locks it or gates an act, and a record opens at its\nhead. `page: true` makes a section a page of its own under the\nrecord\'s, off its scroll, with a way back \u2014 rarely, for a long related list or a workspace\nof its own that would make the record worse stacked; never on a drawer or a step. The\nheader draws no act: every act on the record is named by the section whose work it is, and one no section names is refused, naming its likely\nsection \u2014 only a correction no section owns waits in the header\'s \u22EF beside Delete. An act\nmoving the status and offered at ONE step (its `when`) stands at that step\'s foot when it\nmoves the work forward \u2014 to the next step, or to an exit later in the status\'s options\n(Reject beside Approve) \u2014 or back to a step the work passes anyway. One offered at SEVERAL\nsteps, or moving back into a detour, is named by the section it enters: a detour draws it and its\ngaps alone while it waits. A `danger` act is a correction \u2014 waiting in the \u22EF of what it acts\non: its section\'s heading, its row, the header\'s where no section names it \u2014 unless it moves\nthe status while another status move is offered at the same moment; then it is one of that\nstep\'s outcomes, a button. Cancel offered at Held and at Confirmed, beside Confirm, is an\noutcome into an exit: state `{ "title": "Cancelled", "at": ["cancelled"], "fields": ["reason"],\n"acts": ["cancel"] }`. An exit stands only once the record is in it, its reason there and its\nrail item apart from the path; until then Cancel waits in the header\'s \u22EF. `comments: true`\nputs the record\'s comment thread beside the sections, and `history: true` its status history \u2014\nthe history never as a section. Both are opt-in: state them only where the job\'s people\ndiscuss a record, or the owner asks for an audit trail of its moves.\n\nA field, a block and an act is each placed ONCE on a record \u2014 the header, one section;\na second place is refused. The header draws the entity\'s `records` title, subtitle,\nimage, status (or milestones) and figure, so none of them is named again in a section\'s\n`fields` or the register\'s `columns` \u2014 save the image, which one `files` block may draw\nagain, whole at reading size (an incident\'s photo, a scan), the header keeping its mark. Refused too: a section holding nothing, an `at`\non a record with no status, and a section\'s act that is a child\'s or runs over the\nregister\'s rows.\nAbsent `sections`, one section holds every field a person writes that the header does\nnot show. An editable field rests as its control and saves as it changes; everything\nelse is plain text. A section or a block with `when` is shown only while each named\nselect of the record holds one of its options. The one layout serves every entity: a\ncustomer or a product is sections without `at`.\n\n### Blocks\n\n```jsonc\n"blocks": [\n  { "rows": "fee", "columns": ["kind", "amount"] },\n  { "rows": "fee", "where": { "leg": ["out"] }, "columns": ["kind", "amount"], "under": "invoice" },\n  { "agenda": "booking", "columns": ["guide"], "start": "arrival" },\n  { "timeline": "note" },\n  { "files": ["photos", "papers"] },\n  { "text": "remarks", "when": { "stage": ["held"] } },\n  { "metric": "fee", "value": "amount", "label": "Fees" },\n  { "breakdown": "fee", "by": "kind" },\n  { "trend": "fee", "over": "charged_on", "value": "amount" },\n  { "pivot": "fee", "rows": "kind", "columns": "method" }\n]\n```\n\n<!-- generated:start apps-blocks -->\n\n#### Rows block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `rows` | alias | yes | A child entity whose rows belong to this record |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `columns` | list of alias | no | The child\'s fields read as columns after its title \u2014 never what its row draws (subtitle, image, status, figure, or the bound its figure\'s meter reads against), though an `expect` block\'s figure is a column, filled in place |\n| `create` | list of alias (at least one) \\| `false` | no | The child\'s fields asked when a row is added here; absent, its title, its picture, the subtitle and figure no default fills, the block\'s columns, its natural key and every required field \u2014 each a person writes; false, rows are not added here |\n| `where` | map of alias \u2192 list of alias (at least one) | no | Only the child rows whose single select holds one of these options \u2014 every entry ANDed, read so on the server; a row added here holds them (one leg\'s fees, of a record holding both legs\'). Each select is one the child requires, so no row stands in no block |\n| `expect` | alias | no | The child\'s title when the record holds one row per value of it \u2014 a single select (one per option, in order) or a one-row link to a catalog (one per row the link may point at): a value not yet filled reads as its own empty line, and no value holds two rows. The block\'s `columns` name at least one field a person fills in place |\n| `of` | alias | no | With `expect` on a select: the record\'s own multi-select holding the options this record expects a line for \u2014 the options it holds, in order, rather than every option. Its options are among the title\'s |\n| `under` | alias | no | The child\'s one-link to a document that covers its rows (an invoice over its fee lines), whose many-link points back and which links to this record: each document stands as a heading over the lines it covers; a filled line no document covers says so on its own row with a make for one document over it, and two or more waiting take a combined make in the block\'s heading. Never also a rows block of the document |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Timeline block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `timeline` | alias | yes | A child entity read as a log of dated entries, newest first, with a composer where the app adds entries, each corrected and removed where it stands as a rows block\'s row (entries planned ahead are an `agenda`) \u2014 never the record\'s status history, which `record.history` draws beside the record |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `create` | list of alias (at least one) \\| `false` | no | The child\'s fields asked when a row is added here; absent, its title, the subtitle and figure no default fills, its natural key and every required field \u2014 each a person writes; false, rows are not added here |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Agenda block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `agenda` | alias | yes | A child entity read as planned entries on a time axis: by day, soonest first, each entry with its picture and the day that is today marked. The day is the first date on the child\'s row line (its `records` title or subtitle); within a day entries follow a datetime there, else the first single select after the date \u2014 its options in the day\'s order |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `columns` | list of alias | no | The child\'s facts read on an entry\'s line after its title \u2014 never what its line already draws (subtitle, image, status, figure) |\n| `create` | list of alias (at least one) \\| `false` | no | The child\'s fields asked when a row is added here; absent, its title, its picture, the subtitle and figure no default fills, the block\'s columns, its natural key and every required field \u2014 each a person writes; false, rows are not added here |\n| `start` | alias | no | The record\'s date that is the first day: each day\'s heading counts from it (Day 1, Day 2); absent, the weekday and the date alone |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Files block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `files` | list of alias (at least one) | yes | Files fields of this record, read as pictures and documents |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Text block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `text` | alias | yes | A long text field read as prose |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Metric block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `metric` | alias | yes | The entity whose rows are counted, or summed, into one number |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `target` | number | no | The number it is read against, where no `limits` bounds its value (a bounded value is read against the sum of its bound) |\n| `better` | `"up"` \\| `"down"` | no | Which way its change over the recent periods `over` reads is good; absent, a sum\'s rise and a count kept by `where` falling |\n| `label` | text | yes | What the reading is, in the reader\'s words |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Breakdown block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `breakdown` | alias | yes | The entity whose rows are split into parts |\n| `by` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) each row is counted under |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the `by` field\'s label |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Trend block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `trend` | alias | yes | The entity whose rows are counted, or summed, per period |\n| `over` | alias | yes | The date each row falls on \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link |\n| `ahead` | `true` | no | Counts forward: the current period first, then the ones after it, over the rows dated today or later (arrivals by their ETA); absent, the periods up to today |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the value\'s label, else the entity\'s |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Pivot block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `pivot` | alias | yes | The entity whose rows are counted, or summed, in a grid |\n| `rows` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) down the side |\n| `columns` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) across the top |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the two fields\' labels |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n<!-- generated:end apps-blocks -->\n\n<!-- generated:start rules-block -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `block.child-link` | A block reads a child linked to the record; `via` names the link where the child links more than once. |\n| `block.column-drawn` | A child block\'s column never names what the child\'s row draws \u2014 its title, subtitle, image, status, figure, or the bound its figure\'s meter reads against \u2014 nor its link back to the record, and names a field once; an `expect` block\'s figure is its filled-in-place column. |\n| `block.title-back` | Where a child\'s title is its link back to the record a block lists it under, its first other subtitle names it there \u2014 a text, a code, a select, a link or a member, never a number or a date. |\n| `block.where` | A rows block\'s `where` names single selects the child requires, by options they hold; one held at a single option is never also a column. |\n| `block.under` | `under` names the child\'s one-row link to a document entity that pairs a many-link back and is read under this record by its one link; the lines\' columns never read the document (its heading does) nor hold long text. |\n| `block.under-once` | Documents drawn over their lines (`under`) are never listed again as a block of their own. |\n| `block.expect` | `expect` names the child\'s title \u2014 a single select or a one-row link a person writes, never the link back \u2014 on a child added in the block; the block\'s `columns` name at least one field a person fills in place, and its `create` takes the file where the child is pictured by one. |\n| `block.expect-fills` | An expected line is made from its key and its first filled column, so every other field the child requires has a default, a start or a `default_from`, or is read first. |\n| `block.expect-of` | A block\'s `of` needs `expect` on a select, and names the record\'s multi-select whose every option is one of the title\'s. |\n| `block.agenda` | An agenda\'s child names a date on its row line (`records` title or subtitle); `start` is a date of the record. |\n| `block.timeline` | A timeline\'s child holds a date to place its entries by. |\n| `block.field-kind` | A files block names files fields of the record, and a text block a text field. |\n| `block.read-scope` | A child read under a record whose rows a `read_scope` narrows states its own \u2014 a row rule is not inherited, save the status history\'s, which takes its record\'s. |\n| `block.agenda-note` | *Noted, never refused:* Rows each on a day and within it (at an hour, in a part of the day) listed as a table: an `agenda` draws them by day. |\n| `block.under-note` | *Noted, never refused:* Rows holding a paper that cover another block\'s lines, listed apart with no add of their own stated: `under` draws them over the lines they cover. |\n\n<!-- generated:end rules-block -->\n\nA `rows`, `agenda` or `timeline` block reads a child entity through its link to the\nrecord \u2014 `via` names it where the child links more than once. A rows block adds rows\n(asking the child\'s title, its picture, the block\'s columns and its required fields)\nand opens each in a drawer. An `agenda` draws planned entries by day, soonest first:\nthe first date on the child\'s row line is the day, a datetime there or the first single\nselect after the date orders a day, and `start` \u2014 the record\'s date \u2014 is day 1. `under`\nnames the child\'s one-link to a document covering its lines (an invoice over its fees,\nits many-link paired back, linking to the record): each document heads the lines it\ncovers, the uncovered lines first \u2014 the record never lists the documents again as a\nblock of their own. A filled line no document covers says so on its own row, where one\npress makes a document over that line alone, its figure starting at the line\'s amount;\nwhere two or more wait, the block\'s heading makes one over those ticked in its dialog.\nA timeline reads its child\'s first date as the moment and its member field as who, with\na composer where the app writes it. An agenda\'s or a timeline\'s entry with no day yet is\na plan, listed first and dated in place. `create` names the child\'s fields an add here asks \u2014\nthe link to this record is filled, never asked \u2014 and `false` adds none. `expect`\nnames the child\'s title where the record holds one row per value of it \u2014 a select\'s\noptions, or the rows a link to a catalog may point at (`options_where`): every value\nis a line, one not yet filled a quiet line whose first column makes its row \u2014 or, where\nthe child is pictured by a file a person brings (its `records` `image`), a placeholder\nnaming the paper whose upload makes the row with its file \u2014 the add\noffers only the values not yet held, and every write path refuses a second row of one\nvalue under one record. A field that starts from the catalog row (`default_from`)\nshows that value as its hint, taken with one press. `where` keeps only the child rows\nwhose single select holds one of its options \u2014 read so on the server, a row added\nthere holding them, its lines expected once per value among them (one leg\'s fees\nbeside the other\'s), and its foot totalled by the record\'s sum narrowed alike. A `metric`, `breakdown`, `trend`\nor `pivot` block is a reading (\xA7 Readings) of a child entity\'s rows under this record,\nread only \u2014 `via` names the link where the child has more than one.\n\n### Tasks\n\nAn entity whose `records` states `"task": true` \u2014 its status a stored select with `closed` \u2014 is\nwork someone finishes. Every table of its rows draws it alike \u2014 a rows block of the record it\nbelongs to, its own register, the rows filed under one of its rows (its steps) \u2014 each row led by a\nring. Ticking the ring moves the row to a closed option by the one write the app already has for\nthat move \u2014 the act of that entity setting a closed option (its first preferred), offered on an\nopen row and asking nothing, else its own save where people write the status \u2014 stamping what\nthat act stamps and appending the status history. Unticking runs the act moving a closed row\nback (its `when` holding a closed option), else the save back to the status\'s default. A move no\nwrite reaches leaves the ring disabled, never hidden, and the check notes it. The status is moved\nin place on the row by the same moves; every other field is edited where the row opens. A\nfiles column reads on a task\'s line as how many files it holds. An act `of` the child with\n`on: "rows"` completes several at once: the list\'s heading offers to select rows, and the act\nruns on those picked. A block with `expect` or `under` draws its own lines, never rings.\n\n```json\n{\n  "entities": [\n    {\n      "alias": "project",\n      "label": "Projects",\n      "singular": "Project",\n      "fields": [\n        { "alias": "name", "label": "Name", "type": "text", "required": true },\n        { "alias": "lead", "label": "Lead", "type": "select_member" }\n      ]\n    },\n    {\n      "alias": "task",\n      "label": "Tasks",\n      "singular": "Task",\n      "fields": [\n        { "alias": "title", "label": "Title", "type": "text", "required": true },\n        {\n          "alias": "project",\n          "label": "Project",\n          "type": "select_record_link",\n          "target_entity": "project",\n          "cardinality": "one",\n          "required": true\n        },\n        { "alias": "assignee", "label": "Assignee", "type": "select_member" },\n        {\n          "alias": "status",\n          "label": "Status",\n          "type": "select",\n          "required": true,\n          "options": [\n            { "alias": "todo", "label": "To do", "color": "slate" },\n            { "alias": "done", "label": "Done", "color": "green" }\n          ],\n          "default": ["todo"]\n        },\n        { "alias": "due", "label": "Due", "type": "date", "format": "date" },\n        { "alias": "done_on", "label": "Done on", "type": "date", "format": "date" }\n      ]\n    }\n  ],\n  "records": {\n    "project": { "title": "name" },\n    "task": {\n      "title": "title",\n      "subtitle": ["assignee"],\n      "status": { "field": "status", "closed": ["done"] },\n      "due": ["due"],\n      "task": true,\n      "starts": { "assignee": "me" }\n    }\n  },\n  "apps": [\n    {\n      "alias": "projects",\n      "name": "Projects",\n      "entity": "project",\n      "record": {\n        "sections": [{ "title": "Work", "fields": ["lead"], "blocks": [{ "rows": "task", "columns": ["due"] }] }]\n      },\n      "acts": [\n        { "alias": "complete", "label": "Complete", "of": "task", "when": { "status": ["todo"] }, "set": { "status": "done", "done_on": "now" } },\n        { "alias": "reopen", "label": "Reopen", "of": "task", "when": { "status": ["done"] }, "set": { "status": "todo", "done_on": null } },\n        { "alias": "complete_all", "label": "Complete", "of": "task", "on": "rows", "when": { "status": ["todo"] }, "set": { "status": "done", "done_on": "now" } }\n      ]\n    },\n    {\n      "alias": "my_tasks",\n      "name": "My tasks",\n      "entity": "task",\n      "register": {\n        "opens": { "assignee": "me" },\n        "readings": [{ "metric": "task", "where": { "status": ["todo"] }, "label": "Open" }]\n      },\n      "record": { "door": "drawer" },\n      "acts": [\n        { "alias": "finish", "label": "Finish", "when": { "status": ["todo"] }, "set": { "status": "done", "done_on": "now" } },\n        { "alias": "undo", "label": "Undo", "when": { "status": ["done"] }, "set": { "status": "todo", "done_on": null } }\n      ]\n    }\n  ]\n}\n```\n\n### Acts\n\n```jsonc\n"acts": [{\n  "alias": "gate_out", "label": "Gate out",\n  "when": { "stage": ["in_yard"] }, "requires": ["release", "seal"],\n  "asks": ["seal", { "input": "note", "label": "Note", "type": "long_text" }],\n  "set": { "stage": "gone", "left_on": "now", "left_by": "me", "remark": "input:note" },\n  "confirm": true\n}]\n```\n\n<!-- generated:start apps-acts -->\n\n#### Act\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | The act\'s name within its app \u2014 its workflow is `act_<alias>` |\n| `label` | text | yes | The verb, as the reader says it |\n| `on` | `"record"` \\| `"rows"` \\| `"view"` | no | `rows` runs on the rows ticked in the register \u2014 with `of`, on the child rows ticked in the record\'s task list; `view` on every row the register shows (offered while the view is narrowed to its `when`; it states no `requires`); absent, on one record (its page and its row\'s menu) |\n| `of` | alias | no | A rows block\'s child entity the act works on: offered on each child row \u2014 or, `on: "rows"`, on the rows ticked together in a task list \u2014 its conditions and its write that row\'s |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | The act works only while each named select holds one of these options, and each named yes/no (stored, or a formula) is this value |\n| `requires` | list of alias (at least one) | no | Fields that must be filled first, each drawn where the act stands (its section\'s fields, a block\'s, or the act\'s asks \u2014 never the header alone); a blocked act names each one missing |\n| `recommends` | list of alias (at least one) | no | Fields the act runs without and reads when filled: while one is empty, the act says what it will leave blank |\n| `asks` | list of (alias \\| [Act input](#act-input)) (at least one) | no | What the reader states when pressing it \u2014 fields of the record (written by the act) or inputs |\n| `set` | map of alias \u2192 (text \\| number \\| boolean \\| `null`) | no | What the act writes: an option alias, a value, `"now"`, `"me"` or `"input:<name>"` |\n| `workflow` | alias | no | An authored workflow (src/workflows/<alias>.ts) the act runs after its checks, for what `set` cannot say |\n| `template` | alias | no | A document template the act makes a file from \u2014 over several rows, one file of them all, the rows listed under the entity\'s alias |\n| `templates` | list of [Act template](#act-template) (at least 2) | no | Several papers the act makes into `into` (a case\'s forms), instead of one `template`: drawn where the act stands as a list of its papers \u2014 each made one as its file, each not yet made as a placeholder naming it \u2014 the reader ticks which to make, and one press makes those, each replacing the paper its template made before |\n| `into` | alias | no | The files field of the one record the made document is kept in |\n| `intake` | alias | no | A child the record lists in a rows block whose rows are its papers: the press takes papers, an agent reads them, and each is filed as a row of this child \u2014 its kind the child\'s title, its file in the child\'s files field |\n| `record` | [Act record](#act-record) | no | The press records a call, visit or meeting through the host \u2014 Stop ends it \u2014 and files it as a new row of a child the record lists: its audio, its screen where captured, its transcript |\n| `fills` | list of text (at least one) | no | With `intake`, what the papers read may fill: a field of the record, `<link>.<field>` on the row a required one-row link of the record names, or a child whose rows the papers add \u2014 shown before and after, and saved where it differs. With `record`, fields of the new row an agent fills from the transcript, saved as they come |\n| `confirm` | `true` | no | The press asks first; the question lists every active warning |\n| `danger` | `true` | no | The act destroys or cannot be undone |\n\n#### Act input\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `input` | alias | yes | A value the act asks for that is not a field of the record |\n| `label` | text | yes | What the reader is asked, in their words |\n| `type` | `"text"` \\| `"long_text"` \\| `"number"` \\| `"date"` \\| `"select"` \\| `"link"` \\| `"member"` | yes | What the reader states |\n| `options` | list of [Select option](#select-option) (at least one) | no | The choices a `select` input offers, one picked \u2014 written into a select holding the same option aliases |\n| `entity` | alias | no | The entity a `link` input picks one row of |\n| `required` | `true` | no | The act is refused without it |\n| `default` | alias | no | A field of the row whose value the input starts from, still changed at will |\n\n#### Act template\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `template` | alias | yes | A document template the act makes a paper of, kept in `into` |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | The paper starts ticked while each named select of the record holds one of these options and each named yes/no (stored, or a formula \u2014 how a multi-select is tested: `includes({needs}, {needs:x})`) is this value \u2014 a suggestion the reader changes, never a refusal; absent, it starts ticked |\n\n#### Act record\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `into` | alias | yes | A child the record lists in a timeline or rows block, linking back to it by a single link: each recording is filed as a new row of it |\n| `audio` | alias | yes | The child\'s files field the recording\'s audio is kept in |\n| `transcript` | alias | yes | The child\'s text field the transcript is kept in, a speaker\'s turn per line |\n| `video` | alias | no | The child\'s files field the screen is kept in, where the recording captured it |\n| `at` | alias | no | The child\'s date field stamped with the moment the recording started |\n| `by` | alias | no | The child\'s member field set to the person who recorded |\n\n<!-- generated:end apps-acts -->\n\n<!-- generated:start rules-act -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `act.set-not-asked` | A field an act `set`s is the act\'s to write: read-only everywhere else and never asked by an add (`create`) \u2014 a required one takes a `default`. |\n| `act.of` | An act\'s `of` names a child the record lists in a rows block; it works on the one child row it is pressed on \u2014 or, `on: "rows"`, on the rows ticked together where the record lists that child as tasks \u2014 never on the rows in view. |\n| `act.writes-line-key` | An act never writes the link or the key naming an expected line under its record \u2014 a line\'s key is stated by filling it. |\n| `act.makes-or-runs` | An act makes a document (`template`, `templates`) or runs an authored `workflow`, never both \u2014 the workflow makes what it needs. |\n| `act.view` | An act over every row in view (`on: "view"`) writes (`set`), makes a document or runs a workflow, and states no `requires`. |\n| `act.requires-drawn` | Every field an act `requires` is drawn where the act stands \u2014 its section\'s fields, a block\'s, its asks, or an unstaged section\'s where its own is unstaged \u2014 never the header alone. |\n| `act.requires-written` | A field an act requires that only an act writes is written by an act offered together with it, or asked by the act itself. |\n| `act.recommends` | A field an act `recommends` is not also in its `requires`. |\n| `act.set` | `set` writes each field a value it holds \u2014 an option alias, a number, a yes/no, a text, `"now"` on a date, `"me"` on a member, `"input:<name>"` of an input the act asks of the same kind \u2014 or clears an optional one with `null`. |\n| `act.set-milestone` | An act stamps a milestone, never clears one \u2014 unticking clears it and every later one. |\n| `act.into` | `into` is a files field of the one record the act is pressed on, beside its `template` or `templates`. |\n| `act.templates` | `templates` names each template once, kept in `into`, on one record pressed alone \u2014 never beside `template`, `asks`, `of` or an `on` over several rows. |\n| `act.history-copy` | What a status move asks is copied onto the history\'s field of the same name, which holds the same kind of value. |\n| `act.intake` | `intake` names a child the record lists in a rows block that expects its title \u2014 a single select, the paper\'s kind \u2014 and is narrowed by no `where`, holding exactly one files field and needing nothing an added line does not fill; the act runs on one record, states `fills`, and states nothing but its `label`, `when` and `requires` beside them. |\n| `act.record` | `record` names a child the record draws in a timeline block or a rows block with no `expect`, `under` or `where`, linking back by one single link, whose row nothing requires beyond what the recording writes: `audio` and `video` its files fields, `transcript` a text field, `at` a date, `by` a member field, each a field of its own; the act runs on one record and states nothing but its `label`, `when`, `requires` and `fills` beside it. |\n| `act.fills` | `fills` names each once, only beside `intake` or `record`. Beside `record`, each is a field of the recording\'s row that the recording itself does not write. Beside `intake`: a field of the record, `<link>.<field>` on the row a required one-row link of the record names, or a child the record adds rows of in a rows block with no `expect`, `under` or `where` \u2014 its rows filled in the fields that block adds them with, among them every field an added row cannot be made without. Each field filled is one a person writes holding text, a number, a date, a yes/no or options, never a status, a milestone or a field an act writes. |\n| `act.fills-drawn` | *Noted, never refused:* A field `fills` writes that the record draws nowhere: the review shows the change, the record does not. |\n| `act.fills-new` | *Noted, never refused:* A child `fills` adds rows of, whose natural key the papers cannot state: every row read is added, so the same papers read twice list them twice. |\n| `act.input` | An input has a name of its own \u2014 never another ask\'s, a field\'s, or the record input its workflow takes \u2014 `options` exactly when it is a select, `entity` exactly when it is a link, and a `default` field holding what it states. |\n\n<!-- generated:end rules-act -->\n\nAn act whose `when` does not hold is not offered \u2014 each select named holding one of its\noptions, each yes/no named (stored, or a formula: a period that has ended) its `true` or\n`false`; every one that holds stands at the\nfoot of the section naming it in `acts` \u2014 a correction in that section heading\'s \u22EF, one\nof a child row on its row (a correction in the row\'s \u22EF). An act\'s `requires` are fields\nits section draws \u2014 its `fields`, a block\'s, the act\'s `asks`, or those of another section\nwith no `at` where its own has none; one shown only in the header or a staged section\nelsewhere is refused. One whose `requires` are\nempty is offered disabled, naming each; one whose `recommends` are empty names what\nit will leave blank and still presses; one a standing check blocks is offered\ndisabled in the check\'s words. An input\'s `default` is the row\'s field it starts from. The generated `act_<alias>` workflow re-checks all three on the\nserver, writes `set` and what was asked, and appends the status history where the\nact moves the status \u2014 each thing it asked copied onto the history row where the\nhistory has a field of the same name. `template` makes a document from the row and\nkeeps it in `into`; over several rows it makes one document of them all, the rows\nlisted under the entity\'s alias, and hands it back. `templates` instead names a set of\npapers kept in `into`, listed where the act stands \u2014 each made one as its file, each\nnot made yet as a placeholder \u2014 those whose `when` holds ticked to start; the press\nmakes the ticked ones (sent in `templates`), each replacing the file its template made\nbefore (the file whose `document_template_id` is that template \u2014 never a file a person\nput there), and the set downloads as one archive (`archive_<alias>`). A field an act writes is read-only everywhere else, never asked by an add \u2014 a required one takes a `default`. A `select` input offers its own options and is written into\na select holding the same option aliases; a `link` input picks one row of its `entity`\nand a `member` input one person, each written into a field of its kind. A field an act\nboth `requires` and `asks` never disables the press \u2014 the act asks it, required.\n\n`on: "view"` runs on every row the register shows \u2014 its search, status and filters \u2014\neach row checked before any is written. `of` names a rows block\'s child entity: the\nact is offered on each child row (its menu and its drawer), its `when`, `requires`,\n`set` and checks are the child\'s, it runs on that row, and a check of the record that\nlocks the child rows locks it too. With `on: "rows"` it runs on the child rows ticked\ntogether in the record\'s task list (\xA7 Tasks) \u2014 every row checked before any is written;\nit is refused where the record lists no tasks of that child.\n\n`intake` reads papers: the press takes files, an agent (`act_<alias>` among the app\'s\nagents) reads them, and each is filed as the record\'s line of its kind in the named\nchild \u2014 that child\'s title \u2014 or a new line, its file in the child\'s one files field.\nWhat they state of each field `fills` names is shown beside what the row holds; the save\nwrites only what differs \u2014 the record\'s fields, `<link>.<field>` on the row a required\none-row link names, a child\'s rows (one found by the child\'s `natural_key` changed, else\nadded) \u2014 each refused as its own save is, and nothing written while one refuses.\n\n```jsonc\n{ "alias": "read_papers", "label": "Read papers", "intake": "customer_paper", "fills": ["phone", "contact.email", "branch"] }\n```\n\n### Checks\n\n```jsonc\n"checks": [{ "field": "release_warning" }, { "field": "unpaid", "blocks": ["gate_out"] }, { "field": "locked", "blocks": ["edit"] }]\n```\n\n<!-- generated:start apps-checks -->\n\n#### Check\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | yes | A yes/no or text formula of the record (or of the child `of` names): true or non-empty means the check stands; its label is its short name on a row\'s line, and a text formula\'s words are the sentence the record and a tooltip say |\n| `of` | alias | no | A rows block\'s child entity this check is a formula of: standing on a child row, it refuses what it blocks of that row |\n| `blocks` | `"all"` \\| list of (alias \\| `"edit"` \\| `"delete"`) (at least one) | no | Acts, "edit" (the saves and the Delete), "delete" (the Delete alone) or "all" that the standing check refuses; absent, it only warns |\n| `resolve` | alias | no | An act of this app, on the rows the check stands on, that clears it: the check\'s line links to the act where it stands, and the act keeps its own conditions |\n\n<!-- generated:end apps-checks -->\n\n<!-- generated:start rules-check -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `check.field` | A check\'s `field` is a yes/no or text formula of the record, or of the child `of` names. |\n| `check.of` | A check\'s `of` names a child the record lists in a rows block. |\n| `check.not-placed` | A check\'s field is never also placed on the record \u2014 the line under the header says it. |\n| `check.blocks` | A check of the record blocks its acts, `"edit"`, `"delete"` or `"all"`; a check of a child blocks that row\'s saves, its Delete, the acts `of` that child, or all \u2014 never the record\'s acts. |\n| `check.resolve` | `resolve` names an act of this app on the rows the check stands on, pressed on one row, not refused by the check, and drawn as a button \u2014 never a correction. |\n| `check.restates-meter` | A warning reading a gated meter\'s figure against its bound or pass mark is refused \u2014 the meter draws it. |\n\n<!-- generated:end rules-check -->\n\nA check is a yes/no or text formula of the record: it stands while true or\nnon-empty, and a text formula\'s words are what the reader sees. Without `blocks`\nit warns; with them it refuses the acts named, `"edit"` the record\'s own saves (and\nits Delete), `"delete"` its Delete alone, or `"all"` \u2014 on the server, in every write it\nnames. A check `of` a rows block\'s child stands on each child row: it refuses that\nrow\'s saves (`edit`), its Delete (`delete`), the acts `of` that child it names, or\n`all` of them \u2014 never the record\'s acts. A warning reading the figure of a meter that\n`gates` marks against its bound or its pass mark is refused: the meter already draws it.\n\nThe check field\'s `label` is its short name \u2014 "Over budget", "Release expired": a row\'s\nline says it in the check\'s tone (the most severe of several, and how many more), while\nits words whole are the row\'s tooltip and stand under the record\'s header. So label it\nas the reader names the problem, in a few words, and let a text formula say the\nsentence. The compiler records the fields a formula reads: a row drawing each of them\nas a control says nothing of the check on its line (the empty control says it), and a\ncheck with no `resolve` links to the first of them the record draws.\n\n## What a run remembers\n\nThe WORKSPACE remembers what each entity, field, select option, role and\ntemplate alias became here, plus which record each first row landed on and the\nfile each document path was uploaded as. The model file itself holds no live id\n\u2014 it is the portable half, and the same file applies to a demo workspace and to\na customer\'s \u2014 so the join lives where the things it names live, and one model\napplied to two workspaces holds two bindings that know nothing of each other.\n\nIt is the workspace\'s and not the file\'s because a model file is never\ncommitted: memory kept beside it is one author\'s disk, absent for a teammate, on\na second machine or after a delete \u2014 and every one of those goes quietly back to\nbinding by label, which is what grows the second table.\n\nEvery later apply binds through it: it takes the remembered id first and falls\nback to a label only for an alias nothing has bound \u2014 a field you have just\nadded, or a workspace nothing has applied this model to. That is what makes a\nrelabel on EITHER side a rename rather than one thing the workspace lacks and\none the model lacks: `apply` binds the thing it has always meant and reports the\nmove \u2014 which side is right is yours to decide, not a reason to refuse the run.\n\nA bound target the workspace no longer holds IS a refusal, by name: re-binding\nto whatever carries that label today is how the model comes to point at\nsomebody else\'s table. `lotics run restore_table` puts a deleted table back.\n\n`lotics model pull` writes a workspace that already works as a model file \u2014 the\nstarting point for another business\'s model, never a source of truth: it carries\none business\'s words and stops describing that workspace the moment either\nchanges.\n\n## A complete model\n\n```json\n{\n  "entities": [\n    {\n      "alias": "customer",\n      "label": "Customers",\n      "singular": "Customer",\n      "fields": [\n        { "alias": "name", "label": "Name", "type": "text", "required": true },\n        { "alias": "logo", "label": "Logo", "type": "files" },\n        {\n          "alias": "tier",\n          "label": "Tier",\n          "type": "select",\n          "options": [\n            { "alias": "standard", "label": "Standard", "color": "slate" },\n            { "alias": "gold", "label": "Gold", "color": "amber" }\n          ],\n          "default": ["standard"]\n        },\n        {\n          "alias": "orders",\n          "label": "Orders",\n          "type": "select_record_link",\n          "target_entity": "order",\n          "cardinality": "many",\n          "sync_both_ways": true,\n          "paired_field_alias": "customer",\n          "display_field_aliases": ["code"]\n        },\n        {\n          "alias": "total_ordered",\n          "label": "Total ordered",\n          "type": "rollup",\n          "source_field_alias": "orders",\n          "aggregate_option": { "operation": "sum", "field_key": "amount" }\n        }\n      ],\n      "views": [\n        {\n          "alias": "gold",\n          "label": "Gold customers",\n          "filters": {\n            "node_type": "condition",\n            "type": "select",\n            "field_key": "tier",\n            "operator": "has_any_of",\n            "value": ["gold"]\n          },\n          "sort": [{ "field_key": "name", "order": "asc" }]\n        }\n      ]\n    },\n    {\n      "alias": "order",\n      "label": "Orders",\n      "singular": "Order",\n      "fields": [\n        { "alias": "code", "label": "Order no.", "type": "text", "unique": true },\n        { "alias": "placed_on", "label": "Placed on", "type": "date", "format": "date" },\n        {\n          "alias": "amount",\n          "label": "Amount",\n          "type": "number",\n          "format": "currency",\n          "currency": "VND"\n        },\n        {\n          "alias": "total",\n          "label": "Total with VAT",\n          "type": "formula",\n          "formula": { "expression": "{amount} * 1.1", "format": "currency", "currency": "VND" }\n        },\n        {\n          "alias": "customer",\n          "label": "Customer",\n          "type": "select_record_link",\n          "target_entity": "customer",\n          "cardinality": "one",\n          "sync_both_ways": true,\n          "paired_field_alias": "orders",\n          "display_field_aliases": ["name"]\n        },\n        { "alias": "note", "label": "Note", "type": "text" }\n      ]\n    }\n  ],\n  "roles": [{ "alias": "sales", "label": "Sales" }],\n  "records": {\n    "customer": { "title": "name", "image": "logo", "party": "organization", "figure": "total_ordered" },\n    "order": { "title": "customer", "subtitle": ["code", "placed_on"], "figure": "amount", "starts": { "placed_on": "today" } }\n  },\n  "apps": [\n    {\n      "alias": "customers",\n      "name": "Customers",\n      "entity": "customer",\n      "register": {\n        "columns": ["tier"],\n        "readings": [{ "breakdown": "customer", "by": "tier", "value": "total_ordered" }]\n      },\n      "record": {\n        "sections": [\n          { "title": "Account", "fields": ["tier"] },\n          { "title": "Orders", "blocks": [{ "rows": "order", "columns": ["total"], "create": ["code", "amount"] }] }\n        ]\n      }\n    },\n    {\n      "alias": "orders",\n      "name": "Orders",\n      "entity": "order",\n      "register": {\n        "filters": ["customer"],\n        "create": ["code", "customer", "placed_on"],\n        "readings": [{ "trend": "order", "over": "placed_on", "value": "amount" }]\n      },\n      "record": { "door": "drawer" }\n    }\n  ],\n  "rows": {\n    "customer": [\n      { "ref": "acme", "fields": { "name": "Acme Trading", "tier": "gold" } },\n      { "ref": "bluebird", "fields": { "name": "Bluebird Foods", "tier": "standard" } }\n    ],\n    "order": [\n      {\n        "ref": "so_1001",\n        "fields": {\n          "code": "SO-1001",\n          "placed_on": "@month-start+2",\n          "amount": 4200000,\n          "customer": "customer:acme"\n        }\n      },\n      {\n        "ref": "so_1002",\n        "fields": {\n          "code": "SO-1002",\n          "placed_on": "@today-3",\n          "amount": 1150000,\n          "customer": "customer:bluebird"\n        }\n      }\n    ]\n  }\n}\n```\n\nEach app of this file, as its reader will see it:\n\n```\nApp customers \u2014 "Customers" over Customers (customer)\n  Register \u2014 table (default), newest first (default)\n    row      [Logo] \xB7 Name \xB7 figure Total ordered\n    columns  Tier\n    filters  \u2014\n    readings "Tier" \u2014 Total ordered summed per Tier, over the rows in view (default)\n    add      Name (default)\n  Record \u2014 a drawer (default)\n    header   image Logo \xB7 title Name \xB7 figure Total ordered\n    checks   \u2014\n    header \u22EF Delete\n    sections 1. "Account"\n                fields Tier\n             2. "Orders"\n                block  Orders (default) \u2014 rows of Orders through Customer; columns Total with VAT; add asks Order no., Amount\n    thread   \u2014\n    history  \u2014\n    acts     \u2014\n  Reads Customers, Orders\n\nApp orders \u2014 "Orders" over Orders (order)\n  Register \u2014 table (default), newest first (default)\n    row      Customer \xB7 under it Order no., Placed on \xB7 figure Amount\n    columns  \u2014\n    filters  Customer\n    readings "Amount" \u2014 Amount summed per period by Placed on, over the rows in view (default)\n    add      Order no., Customer, Placed on \u2014 starting Placed on at today\n  Record \u2014 a drawer\n    header   title Customer \xB7 subtitle Order no., Placed on \xB7 figure Amount\n    checks   \u2014\n    header \u22EF Delete\n    sections 1. the record\'s details (default)\n                fields Note\n    thread   \u2014\n    history  \u2014\n    acts     \u2014\n  Reads Orders, Customers\n\n```\n\nEach `(default)` is a value the model left to the system: the door a record opens\nthrough \u2014 a drawer, since neither record has a stage or more than three sections \u2014 the\norder rows open in, what an add asks, and the order\'s one section \u2014 every field a\nperson writes that the header does not already show. The customer\'s orders\nare a block in its "Orders" section, never its own `Orders` link as a field as well:\none fact, one place. An order is titled by its customer and read by its number under\nit; the block names what its add asks, since a subtitle or a figure is never asked by\ndefault. `Total ordered` is a rollup, so it is read and never asked; the\norders app\'s record opens in a drawer, because its rows are worked one after another.\n';
+var model_reference_default = '# The Lotics workspace model (`model.json`)\n\nOne JSON file describing a workspace: its tables, fields, options, views, roles,\nfirst rows, how a row of each table is recognised, and the apps over them. Each \xA7\nis its own page at `model/<section>` \u2014 `lotics docs`, or the `docs` tool. Complete models of several trades, to read as\nworked examples: `https://lotics.ai/presets/index.json`.\n\n**What a model composes with**\n\n- **Entities and fields** (\xA7 Entity, \xA7 Field) \u2014 the tables, their columns, options and links.\n- **Records** (\xA7 Records) \u2014 how a row of each entity is RECOGNISED: its title, the line\n  under it, its picture, its status, the one number it stands for. Stated once per entity\n  and read by every surface that draws one of its rows.\n- **Write rules** (\xA7 Write rules) \u2014 what a write finds, copies, bounds and picks among.\n- **Apps** (\xA7 Apps) \u2014 one register over one entity and the record each row opens: which\n  fields go where, the acts, and the checks that guard them \u2014 or a dashboard of readings.\n  How each thing LOOKS is the runtime\'s, one treatment per concept; no key here changes it.\n  A screen the job needs and no key states is a `lotics report` \u2014 the job, what the model\n  drew, the word wanted \u2014 never keys bent to approximate it.\n\n**The working order**\n\n1. Name the people and each one\'s JOB \u2014 the work they alone decide or write.\n2. The entities and fields those jobs touch, and a `records` entry for every entity an\n   app lists, opens or picks.\n3. One app per job in `apps[]`, each one register over one entity.\n4. `lotics model apply model.json` \u2014 the file is checked first, every problem in one run;\n   then the tables, then a new version of every app, live\n   (`lotics setup model.json --email you@company.com` where no account exists yet).\n5. Change the file and apply it again; `lotics model pull` writes what the workspace holds.\n   Rolling an app back (`lotics run rollback_app`) restores its earlier version \u2014 table\n   changes and data writes stay.\n\n## The rules\n\n- **At least one entity, at most 50.** More tables than that is a data model\n  being designed, not applied \u2014 apply the rest in a second call.\n- **An existing table is adopted.** `lotics model apply` binds an entity whose `label`\n  already names a table in the workspace, and adds the fields, options and\n  views it is missing. No stored value is ever changed or deleted: a field it\n  adopts takes the model\'s `default`, and the `format` and `unit` it reads in,\n  where that only relabels \u2014 a date\'s format and a unit converting its figures are\n  left. Applying the same model twice changes nothing the second time.\n- **Renaming a field is `lotics run update_table`**, then the same label in this\n  file; deleting is `lotics run delete_table`. Neither goes through the file\n  (\xA7 What a run remembers).\n- **The file\'s own majority is the language.** A model names no locale \u2014 which\n  language it is in is what it mostly says, and `model apply` notes the label\n  written the other way. The generated screens read the kit\'s pack, and a\n  generated WRITE cannot: its refusals run on the server, so they are worded in\n  that same majority. Mix the two and the workspace answers in two languages.\n- **Rows land only where every bound table is empty.** One table already holding\n  records and no rows are written anywhere: sample rows landing among a\n  customer\'s real ones cannot be told apart from them.\n- **`lotics model apply` checks all of it before anything is written**, and\n  reports every problem in one run rather than the first. Each section of this\n  page ends its keys with the rules the check enforces there, one sentence each\n  under an id; a finding names its rule\'s id (`[register.filter]`), and\n  `model/<rule id>` is that one rule\'s page.\n\n<!-- generated:start rules-model -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `model.schema` | Every key is one its table lists, holding the type its row gives, and every required key is stated. |\n| `model.retired` | `field_roles`, `table_workflows` and `connections` are no longer part of a model: `records` states how a row is recognised, and an app\'s own writes do what a table automation did. |\n| `model.names-declared` | Every alias a key names is declared: an entity of this model, a field of the entity the key reads, an option of the select it names, an act of the app, a template or an app of this model. |\n| `model.tables` | A model declares at least one table and at most 50; apply the rest as a second model. |\n| `model.rows-cap` | Rows are a sample: at most 200 per entity, 2000 per model and 2000 documents attached \u2014 a real data set belongs in an import. |\n| `model.language` | *Noted, never refused:* A label or description written in the other language than the model\'s majority \u2014 with or without diacritics. |\n| `model.alias-unique` | An alias is unique where it is named: entities, roles and templates in the model, fields and views in their entity, options in their select. |\n| `model.label-unique` | A label is unique where apply finds it by label: entities, roles and templates in the model, fields and views in their entity, options in their select \u2014 and no view takes its entity\'s own label, which names the whole-table grid apply makes. |\n| `model.template-sha` | A template\'s `content_sha256`, where stated, is the 64-character lowercase hex sha256 of its content. |\n| `model.template-kind` | An act\'s paper and a register\'s `export` are made from an html or an excel template, never an email one. |\n| `model.filter` | A filter \u2014 a view\'s, a rollup\'s \u2014 tests fields of the entity it reads, through links as `entity.field` hops each standing on the entity the last lands on, by options its select declares. |\n\n<!-- generated:end rules-model -->\n\n## Top level\n\nEvery table of keys on this page is generated from the schema `model apply`\nparses the file with, so it is the whole of what a key may hold.\n\n<!-- generated:start top-level -->\n\n#### Model file\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `entities` | list of [Entity](#entity) | yes | The tables this model creates, with their fields, options and views |\n| `roles` | list of [Role](#role) | no | Workspace groups to create; members are added to them afterwards |\n| `templates` | list of [Template](#template) | no | Document templates: html and email inline, excel made from an uploaded workbook |\n| `rows` | map of alias \u2192 list of [Row](#row) | no | First records, keyed by entity alias \u2014 written only where every table they land in is empty |\n| `records` | map of alias \u2192 [Record](#record) | no | How a row of each entity is recognised, keyed by entity alias. Every entity an app lists, opens or picks has one |\n| `write_rules` | map of alias \u2192 [Entity write rules](#entity-write-rules) | no | Entity alias \u2192 what a create of that entity finds, copies and refuses |\n| `apps` | list of ([App](#app) \\| [Dashboard app](#dashboard-app)) | no | The apps this workspace will have \u2014 each one register over an entity, or a dashboard of readings |\n\n<!-- generated:end top-level -->\n\n**A model carries no** `fixtures`, `knowledge` or `knowledge_expects`, and no\n`word` / `pdf-form` template: file content is uploaded to the workspace, never\nstated in a model \u2014 an `excel` template names its uploaded workbook by `file_id`. `apps` here is what an agent states to make an app,\nnever built code. An unknown top-level key is an error, never ignored.\n\n### Aliases\n\nEvery `alias` is a lowercase slug \u2014 a letter, then letters, digits and\nunderscores (`unit_price`, `so_1001`). Aliases are how the file cross-references\nitself; they are never shown to anyone. `label` is what a person sees.\n\nLabels must be unique within their namespace \u2014 two entities, two fields on one\nentity, two options on one field, two views on one entity, two roles or two\ntemplates cannot share a label, because `apply` matches by label.\n\n## Entity\n\n<!-- generated:start entity -->\n\n#### Entity\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | Stable entity alias, unique within the contract |\n| `label` | text | yes | The table\'s name in the workspace, which apply names it |\n| `singular` | text | no | One row of this table, in the business\'s own words \u2014 what a create\'s button and panel name |\n| `description` | text | no | The table\'s description, written onto the table in the workspace |\n| `writes` | `false` | no | false: no person writes this table\'s rows \u2014 only the writes that keep it do, and no app opens or edits one |\n| `fields` | list of [Field](#field) (at least one) | yes | The table\'s columns |\n| `read_scope` | [Read scope](#read-scope) | no | Which rows a member reads. Absent, every member with access to the table reads every row. |\n| `unique` | list of list of alias (at least one) (at least one) | no | Sets of fields whose values no two live rows share \u2014 each a list of field aliases (text, number, date, a single select, or a link of cardinality "one"). A create or update landing a second row with the same values is refused. |\n| `views` | list of [View](#view) | no | Saved views, in the order they are listed; with none, the table still opens on its default grid |\n\n#### Read scope\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `any` | list of ([Read scope by role](#read-scope-by-role) \\| [Read scope by member](#read-scope-by-member) \\| [Read scope by option](#read-scope-by-option)) (at least one) | yes | A row is readable when ANY of these holds |\n\n#### Read scope by role\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `member_of` | alias | yes | A role alias: whoever is in the group it binds to reads the row |\n\n#### Read scope by member\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `through` | list of alias (1\u20133) | no | select_record_link aliases from this entity outward, each of cardinality "one" \u2014 the clause\'s field is on the entity the last hop lands on |\n| `field` | alias | yes | A select_member field alias on this entity, or on the entity `through` lands on |\n| `is` | `"self"` | yes | The members this column names on a row read that row |\n\n#### Read scope by option\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `through` | list of alias (1\u20133) | no | select_record_link aliases from this entity outward, each of cardinality "one" \u2014 the clause\'s field is on the entity the last hop lands on |\n| `field` | alias | yes | A single-select field alias on this entity, or on the entity `through` lands on |\n| `is` | list of alias (at least one) | yes | Its option aliases whose rows are readable \u2014 naming none would hide every row |\n\n<!-- generated:end entity -->\n\n<!-- generated:start rules-entity -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `entity.singular` | An entity a create is mounted over \u2014 a register that adds, a rows block \u2014 states its `singular`: one row of it, in the business\'s words. |\n| `entity.required-cycle` | Required links never wait on each other in a loop: no row of the loop could be created first. |\n| `entity.link-format` | A text field of `format: "link"` holds web addresses; one whose rows hold a phone or a mail address states no format. |\n| `entity.read-scope` | A `read_scope` clause names a declared role (`member_of`) or a field of its entity reached through one-row links: `"self"` a member field, options a single select declares. |\n| `entity.unique` | A `unique` set names two fields or more of its entity once each, each holding one value to compare \u2014 text, a number, a date, a single select, a one-row link \u2014 and is stated once; one field alone is `unique: true` on it. |\n\n<!-- generated:end rules-entity -->\n\n**`unique` is a set of values no two live rows share.** Each entry names fields\nof this entity holding ONE value \u2014 text, number, date, a single select, a link\nof cardinality `"one"` \u2014 and a create or update landing a second row with the\nsame values is refused. A set of one text field is that field\'s own `unique:\ntrue`, so it is refused here. A create carries each set in the names its panel\nsends, so the panel can name the duplicate before the write does.\n\n**`singular` is what a create says** \u2014 `New Order`, `Add Claim line`, `H\u1ED3 s\u01A1\nm\u1EDBi` \u2014 while `label` names the table, so without it the button reads `New\nOrders`. Nothing derives it: English plurals are irregular, and no language is\nexempt. In a language without plural forms it is usually the label itself,\nless any word for the collection. `model apply` REFUSES a model where a table\nsome create opens \u2014 a register\'s own, or a record section\'s add \u2014 states none.\n\n**`writes: false` says only the workspace\'s automations write these rows** \u2014 a\nlog of what the system sent, a copy of what another system holds. No app opens,\nedits or files one: a record listing them keeps the section and opens each row\nat rest, with no Add; a screen over the entity operates at most the rows its\nrecord owns; a party of it is picked, never found or minted; and the generator\nwrites no create and no update for it, and never notes it as created nowhere.\nA `lifecycle` on it is refused \u2014 a row walked\nthrough stages is worked by a person \u2014 and so is a publish desk over it. Absent,\npeople write the rows; `true` is not a value.\n\n**`read_scope` is a ROW rule, enforced by the platform.** It is resolved at\napply into the table\'s own row filters, so an app, a workflow reading for a\nviewer, and the API all answer the same rows \u2014 a per-record visibility field the\napp merely honours is a convention, not a gate. A `"self"` clause reads a column\nof one member or several, and every role alias and option alias a clause names\nmust be one this model declares. `apply` writes the rule onto a table it\nCREATES; a table it adopted that ALREADY CARRIES a rule keeps that one, because\nthe rule is the workspace\'s own statement about its rows \u2014 and a run whose model\nstates a different rule reports the entity rather than leaving the claim silent.\n\n**An app may state that its sharing is its read gate: `"reads": "shared"`.** An\napp reads as its owner, so the rule reaches a viewer only as the predicate every\nquery and editor guard of every app over the entity carries \u2014 right for a desk of\none\'s own rows, wrong for a desk whose audience its sharing already decides, where\nwidening the rule meant a role group nobody remembers to fill. Stated on an APP,\nits queries, pickers and guards carry no entity\'s rule and whoever the app is\nshared with reads and writes every row it draws; every other app and the table\'s\nown filters keep the rule. Share it deliberately. Refused on an app none of whose\ntables states a `read_scope`.\n\n**The rows under a private record INHERIT its rule.** An entity that states no\n`read_scope` and hangs under one that does \u2014 through its `parent` link, over one\nhop or several \u2014 is read by the ancestor\'s rule, answered through that link, on\nits table\'s own filters and in every query and guard alike; nothing is restated,\nso a child needs none of the ancestor\'s columns. Stating a rule on the child\nkeeps that one instead, an ancestor with no rule passes nothing down, and a row\nhanging further under the scoped one than a row filter reaches is refused by\nname \u2014 state a rule on it. So is a hop over a link that names more than one row:\nthe rule would admit a reader any one of them admits while the editor\'s guard\nreads the first, so give the link `"cardinality": "one"` or state a rule on the\nchild.\n\n**ONLY the `parent` role is walked.** A register a scoped record reaches by any\nother link \u2014 the rows that NAME it \u2014 is read by that record\'s id with no rule\ntravelling to it, so it is refused until it states one of its own.\n\n## Field\n\nEvery field carries the keys below, and its `type`\'s section adds the rest; a\ntype whose section names no `default` takes none. `label` may not contain `{` or\n`}` (formulas reference fields by label at the platform level). Every row in `rows` states each\n`required` field it carries (a default is not applied to them), and a required\nLINK is written with its row: the entity it names is created first, and entities\nwhose required links name each other are refused, since none of their rows could\never be created.\n\n<!-- generated:start field -->\n\n#### Field\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `type` | `"text"` \\| `"number"` \\| `"date"` \\| `"boolean"` \\| `"select"` \\| `"select_member"` \\| `"select_record_link"` \\| `"files"` \\| `"formula"` \\| `"rollup"` \\| `"lookup"` \\| `"autonumber"` | yes | What the field holds \u2014 each type takes the further keys its own section lists |\n| `alias` | alias | yes | Stable local alias, unique within the entity |\n| `label` | text | yes | The field\'s name in the workspace, which apply names it |\n| `description` | text | no | The field\'s description, written onto the field in the workspace |\n| `required` | boolean | no | Refuse a record whose cell for this field is empty. Apply writes it onto the field, and every write path \u2014 create, update, an agent\'s tool call, a workflow\'s set \u2014 refuses the row by field name. |\n\n<!-- generated:end field -->\n\n### `text`\n\n<!-- generated:start field-text -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | text | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. |\n| `unique` | boolean | no | Unique values required |\n| `format` | `"text"` \\| `"link"` \\| `"markdown"` | no | How the words are drawn \u2014 plain, as a link that opens, or as markdown |\n\n<!-- generated:end field-text -->\n\n### `number`\n\n<!-- generated:start field-number -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | number | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. |\n| `format` | `"number"` \\| `"currency"` \\| `"percentage"` | no | What the figure is \u2014 a plain number, money in `currency`, or a percent |\n| `currency` | text | no | ISO 4217 code |\n| `unit` | text | no | What a plain figure counts or measures, drawn after it: a measured code (g, kg, t, l, m3, cbm, mm, cm, m, km, m2, min, h, day), which converts and scales within its dimension, or any other noun of at most 12 characters (ki\u1EC7n, pallet, TEU), which never does. Only beside format "number". |\n| `unit_field` | alias | no | A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s unit: every option label is a unit as `unit` takes one. In place of `unit`; only beside format "number". |\n| `currency_field` | alias | no | A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s currency: every option label is an ISO 4217 code. In place of `currency`; only beside format "currency". |\n\n<!-- generated:end field-number -->\n\n`format` is what the number IS, and every surface reads it: `currency` prints as\nmoney in the code the row or the field states, `percentage` as a whole percent\nwith its sign. An ABSENT number is drawn absent \u2014 the one exception is a\n`sum` or count rollup the plan reads as a **`measure`**: that is the thing\naccumulated toward a bound, so nothing accumulated yet is zero and the meter\ndraws it. The same rollup read as an `amount` keeps its blank, and so does every\nother role: nothing added to what a row is WORTH means unpriced, not free. A\nformula reading only such sums and counts, and reading zero where each does\n(`{received} - {refunded}`), is one too. A `min`, an `avg`, a percentage of\nnothing and every other formula stay blank in any role, because none of them has\nan answer to give. This is why the pair on one\nscreen reads two ways \u2014 what has come in against what is owed \u2014 and why a\nmeasure\'s own LIMIT, an amount, leaves an unquoted row out of the count rather\nthan reporting it as nothing collected. **AND WHERE THAT LIMIT IS ABSENT \u2014 OR\nZERO \u2014 THERE IS NO LEVEL AT ALL**: a level is a reading AGAINST a bound, so a row\nthat states no bound, or a bound of nothing, draws nothing \u2014 cell, fact and all \u2014\nrather than a numerator whose whole meaning was the comparison. "Collected 0"\nbeside a blank total reads as money against a job worth nothing, and "0 of 0"\nagainst a count of nothing owed claims a comparison nobody can make. A measure the model gives no limit is a plain figure\nand is unaffected. A share is stored in percent units \u2014 68.1 is 68.1 % \u2014 and the\ncolumn, the fact behind it, the meter it is judged by and the figure over the\nregister all say so.\n\n`unit` is what a plain figure counts or measures, and stands only beside\n`format: "number"`. A **measured** unit is a code of one catalog \u2014 mass `g`\n`kg` `t`, volume `l` `m3` `cbm` (a cubic metre under freight\'s name), length\n`mm` `cm` `m` `km`, area `m2`, duration `min` `h` `day` \u2014 so a figure typed in\nanother unit of its dimension converts (`12,5 t` into a `kg` field is 12 500),\nand a tile or a chart reads it in the largest unit it reaches (12 500 kg as\n12,5 t\u1EA5n; CBM never scales) while a cell, a fact and a column always read in the\nfield\'s own. Any other noun of at most 12 characters (`ki\u1EC7n`, `pallet`, `TEU`) is a\n**counted** unit: a word after the figure that never converts. A measured unit is\nwritten as its code \u2014 `t\u1EA5n`, `KG` or `m\xB3` is refused, naming the code. A formula\nstates its own in `formula.unit`; a rollup that keeps the value (`sum`, `avg`,\n`median`, `min`, `max`, `range`) and a lookup carry the unit of the figure they\nread, exactly as they carry a currency, and a count carries none. A quantity is a\nnumber with its unit, never words (`3 cartons` in a text field): only a number\nsums, converts and reads down a column.\n\nA field\'s cells always hold figures in its own unit, so moving it between two\nunits of one dimension (`kg` to `t`) converts every stored figure \u2014 a change made\nin the workspace, in the field\'s settings (which say how many first) or through\n`lotics run update_table`. `model apply` never makes it: the model states the\nworkspace\'s unit until then. Any other change of unit\nrelabels.\n\nA figure whose unit or currency varies by row names a single select of its own\nrow in `unit_field` or `currency_field` (a formula in `formula.unit_field` /\n`formula.currency_field`) \u2014 or a lookup of one through a one-link, a line\nreading its shipment\'s currency. That select\'s options are the vocabulary:\neach label a unit as `unit` takes one (`chi\u1EBFc`, `kg`), or an ISO 4217 code\n(`USD`). A label outside it is refused when the figure is written and when the\nselect is \u2014 its options, its type or its deletion while a figure names it. A row\nwhose select is empty reads its figure bare. Every app reads each row\'s figure in\nits own row\'s unit, and a sum never mixes units: totals are one per unit, a\nchart draws one at a time. A rollup that keeps the value (`sum`, `avg`, `min`\u2026)\nover such a figure stands only where the child\'s select is a lookup, through\nthe rollup\'s own link, of a select on this entity \u2014 the rollup reads that\nselect\'s unit; otherwise it is refused, as is any lookup of such a figure (its\nunit lives on the other row). A count is unaffected. Moving a field between a\nfixed and a per-row unit relabels.\n\n### `date`\n\n<!-- generated:start field-date -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | text | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. A date string in the field\'s format. |\n| `format` | `"date"` \\| `"datetime"` \\| `"date_range"` \\| `"datetime_range"` | no | Whether the field holds a day or a moment, alone or as a span |\n| `timezone` | text | no | IANA timezone |\n| `derive_from` | `"created_at"` \\| `"updated_at"` | no | Auto-populate from the row\'s system timestamp; the field becomes read-only. |\n\n<!-- generated:end field-date -->\n\nA `default` is refused beside `derive_from`: the platform stamps that date.\n\n### `boolean`\n\n<!-- generated:start field-boolean -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | boolean | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. |\n\n<!-- generated:end field-boolean -->\n\n### `select`\n\n<!-- generated:start field-select -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default` | list of alias | no | Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. Option alias(es) this field declares \u2014 one for single-select. |\n| `options` | list of [Select option](#select-option) (at least one) | yes | The choices, in the order every picker and every ladder lists them |\n| `multi` | boolean | no | Allow multiple selections |\n\n#### Select option\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | Stable local alias, unique within the field |\n| `label` | text | yes | Display label for the option |\n| `color` | [colour](#select) | yes | The colour the option\'s badge is drawn in |\n| `mark` | [mark](#select) | no | The option\'s own mark, drawn in place of its colour dot wherever the option is shown: the brand it is ({kind: "brand", name: one of facebook, instagram, threads, meta, tiktok, google-ads, zalo, linkedin, x, google-meet, youtube, telegram, whatsapp, gmail, google-drive, outlook, kiotviet, misa, lark, payos}) or a kit glyph ({kind: "icon", name: "wrench"}). Every option of a field has one, or none does. A mark a reader does not draw falls back to the dot |\n\n<!-- generated:end field-select -->\n\n`color` is one of: `red`, `orange`, `amber`, `yellow`, `lime`, `green`,\n`emerald`, `teal`, `cyan`, `sky`, `blue`, `indigo`, `violet`, `purple`,\n`fuchsia`, `pink`, `rose`, `slate`, `gray`, `zinc`, `neutral`, `stone`.\nEvery option is drawn in its colour wherever it shows \u2014 a cell, a row\'s line,\na record, a picker, the bar a reading splits the rows by.\n\nAn option may carry its own `mark`, drawn in place of its colour dot wherever\nthe option is shown \u2014 a stage, a chip, a filter, a fact, an entry of a log, a\nreading\'s part, a lookup of the select on another entity. A select a reader scans\ndown a column \u2014 how a payment was made, the channel, the mode \u2014 states one on every\noption, since a glyph reads before its word: the brand it IS\n(`{"kind": "brand", "name": "tiktok"}` \u2014 one of `facebook`, `instagram`,\n`threads`, `meta`, `tiktok`, `google-ads`, `zalo`, `linkedin`, `x`,\n`google-meet`, `youtube`, `telegram`, `whatsapp`, `gmail`, `google-drive`,\n`outlook`, `kiotviet`, `misa`, `lark`, `payos`), or a glyph the kit draws\n(`{"kind": "icon", "name": "wrench"}`; any other name is refused). Every option of a select has one, or none does: a run of chips\nwhere one carries no mark reads as the one missing something. `apply` writes the\nmarks onto the table, sets one an adopted option lacks, and reports one it wears\ndifferently rather than overwrite it. The glyphs:\n\n<!-- generated:start field-select-glyphs -->\n\nactivity, align-center, align-left, align-right, arrow-down, arrow-down-up, arrow-down-wide-narrow, arrow-left, arrow-left-from-line, arrow-right, arrow-right-from-line, arrow-right-left, arrow-up, arrow-up-down, arrow-up-wide-narrow, ban, banknote, bed, bell, bold, bolt, book-marked, book-open, book-text, bot, box, brackets, brain, briefcase, building-2, calculator, calendar, calendar-clock, calendar-off, camera, car, chart-column, check, chevron-down, chevron-left, chevron-right, chevron-up, chevrons-down-up, chevrons-up-down, circle-alert, circle-check, clipboard-list, clock, code, code-xml, columns-3, columns-3-cog, construction, container, copy, credit-card, database, download, ellipsis, eraser, expand, external-link, eye, eye-off, facebook, file, file-csv, file-down, file-question, file-spreadsheet, file-stack, file-text, file-up, folder, folder-closed, folder-open, folder-pen, form, funnel-plus, funnel-x, gauge, globe, gpu, grip-vertical, group, hand-coins, heading, heading-1, heading-2, heading-3, history, house, image, inbox, info, instagram, italic, keyboard, languages, layout-dashboard, layout-grid, library-big, link-2, link-2-off, linkedin, list, list-checks, list-collapse, list-filter, list-filter-plus, list-ordered, loader, lock, lock-keyhole, lock-keyhole-open, lock-open, log-in, log-out, mail, map-pin, maximize-2, megaphone, menu, message-circle, message-circle-question-mark, message-square, messages-square, mic, minimize-2, minus, monitor, mouse, mouse-pointer-click, music, newspaper, notepad-text-dashed, package, paint-bucket, palette, panel-left, panel-left-close, panel-left-open, panel-right, panel-right-close, panel-right-open, paperclip, pause, pencil, phone, pin, pin-off, plane, play, plug, plus, receipt, rectangle-ellipsis, redo, refresh-cw, repeat, rotate-ccw, rotate-cw, scan, search, send, settings, share, share-2, shield, shield-alert, shield-check, shopping-cart, sliders-horizontal, smile, smile-plus, sparkles, split, square, square-check, square-pen, square-sigma, stethoscope, sticky-note, table, table-2, tag, target, text-quote, thumbs-down, thumbs-up, ticket, trash, trending-down, trending-up, triangle-alert, truck, tv-minimal, twitter, underline, undo, upload, user, user-check, user-pen, users, utensils, waypoints, workflow, wrench, x, zap\n\n<!-- generated:end field-select-glyphs -->\n\n```jsonc\n"options": [\n  { "alias": "short_video", "label": "Short video", "color": "zinc", "mark": { "kind": "brand", "name": "tiktok" } },\n  { "alias": "print",       "label": "Print",       "color": "amber", "mark": { "kind": "icon", "name": "newspaper" } }\n]\n```\n\n### `select_member`\n\nA person picker over the workspace\'s members. No default: a model cannot name\nmembers of a workspace that does not exist yet. With no role it is still drawn \u2014\nface and name, ranked as a `party` \u2014 in a screen\'s `columns` and in the register\na record draws of these rows.\n\n<!-- generated:start field-select_member -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `multi` | boolean | no | Allow multiple selections |\n\n<!-- generated:end field-select_member -->\n\n### `select_record_link`\n\n<!-- generated:start field-select_record_link -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `target_entity` | alias | yes | Alias of the entity this field links to |\n| `sync_both_ways` | boolean | no | Create a paired link field on the target entity for bidirectional sync |\n| `paired_field_alias` | alias | no | The pair edge of a bidirectional link: the field alias ON THE TARGET ENTITY that is this link\'s sync partner. Both sides of a pair carry it, each naming the other. Apply creates whichever side it reaches first WITH the pairing (the platform auto-creates the partner) and binds the partner alias to the auto-created field \u2014 without this edge the two contract fields would be created independently and collide with the auto-created partner. |\n| `cardinality` | `"one"` \\| `"many"` | no | How many linked records this field holds. Default \'many\'. \'one\' holds a single row and needs no partner; where the link IS paired, the partner side holds many. |\n| `display_field_aliases` | list of alias | no | Field aliases on the target entity shown as the link\'s display text / picker columns |\n\n<!-- generated:end field-select_record_link -->\n\nA two-way link is declared on BOTH sides, each naming the other as its\n`paired_field_alias`; the pair must be symmetric or the model is refused.\n\n**A single-valued link needs no partner.** `"cardinality": "one"` on its own is a\nlink that holds one row \u2014 one customer on an invoice, one project on a device \u2014\nand nothing is created on the target. The mirror invariant belongs to a PAIRED\nlink: pair a link when the target\'s own record should list what points at it, and\nleave it unpaired when it should not. Either way the record plan draws the\nrelation as a section on the side it points at, so an unpaired link costs the\ntarget nothing.\n\n### `files`\n\nNo keys beyond every field\'s; a row attaches documents to it (\xA7 Rows). Each file\nis drawn by its kind, with no key to choose: a picture (an image, a video) as its\nthumbnail, a document (a PDF, a sheet) as its type\'s badge and its filename.\n\n### `formula`\n\n<!-- generated:start field-formula -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `formula` | [Formula](#formula) | yes | Formula config. The expression references other fields on the SAME entity by alias in braces, e.g. `{quantity} * {unit_price}`. |\n\n#### Formula\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `expression` | text | yes | The expression, over fields of THIS entity by alias in braces \u2014 `{quantity} * {unit_price}` |\n| `format` | `"number"` \\| `"currency"` \\| `"percentage"` \\| `"link"` | no | Display format. \'number\' / \'currency\' / \'percentage\' for numeric results; \'link\' for text-output formulas that return a URL \u2014 renders the result as a clickable link. |\n| `currency` | text | no | ISO 4217 currency code, e.g. USD, VND, EUR |\n| `unit` | text | no | What a plain figure counts or measures, drawn after it: a measured code (g, kg, t, l, m3, cbm, mm, cm, m, km, m2, min, h, day), which converts and scales within its dimension, or any other noun of at most 12 characters (ki\u1EC7n, pallet, TEU), which never does. Only beside format "number". |\n| `unit_field` | alias | no | A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s unit: every option label is a unit as `unit` takes one. In place of `unit`; only beside format "number". |\n| `currency_field` | alias | no | A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s currency: every option label is an ISO 4217 code. In place of `currency`; only beside format "currency". |\n| `options` | list of [Select option](#select-option) (at least one) | no | The categories the formula yields, drawn as a single select\'s options are (read-only). The expression yields one of them as `{this_field:option}`, or null \u2014 `{days_idle} > 30 ? {warmth:cold} : {warmth:hot}`. Omit for a formula yielding a plain value. |\n| `output_type` | `"number"` \\| `"text"` \\| `"date"` \\| `"datetime"` \\| `"boolean"` \\| `"select"` | no | What the expression YIELDS \u2014 the kind the platform infers at write time, declared here so the offline checks can read it. `format` beside it is how that result is drawn, not what it is. Ignored on the wire (the platform re-infers it); `lotics model pull` writes the inferred value. |\n\n<!-- generated:end field-formula -->\n\n`output_type` is what lets a role or a screen clause accept a computed value: a\ncaption over a derived name (`output_type: "text"`), a period over a settled date\n(`"date"`). A formula declaring neither it nor a `format` says nothing about its\nresult, and every rule that needs one refuses it by name. A formula stating\n`options` is a computed category: read-only, and read as a single select\nwherever it is drawn \u2014 a column, a filter, a reading\'s `by` or `where`.\n\n**A select reaches a formula as the KEYS of its chosen options**, a list \u2014\nnever their labels, and never their aliases \u2014 and a model has no keys: the\nworkspace mints them when the table is made. So an option is named in a formula\nas `{field:option}`, both aliases, and the copy writes that option\'s key in its\nplace: `includes({kind}, {kind:crate})` for a select holding one or several,\n`{kind}[0] == {kind:crate}` for a single one. A select compared to its own words\n(`{kind} != "Crate"`) matches no row and computes the other branch everywhere,\nso the check refuses it and names the token. A select looked up from another\nentity is tested there, in a formula of its own, and that result looked up.\n\n**The language.** The offline check and the platform compute a formula with one\nengine, and the check refuses a call or a name it cannot run, naming what to write:\n\n<!-- generated:start field-formula-language -->\n\n- Operators: `+ - * / %`, `== != > < >= <=`, `&& || !`; `+` also joins text\n- Conditionals: a ternary only \u2014 `{amount} > 100 ? "High" : "Low"`\n- Not supported: optional chaining (`?.`), nullish coalescing (`??`), template literals, arrow functions \u2014 use `get(obj, "path", default)`, `coalesce(v1, v2)`\n- Helpers are these names, spelled exactly; a spreadsheet function (`IF`, `SUM`, `LEN`, `DATEDIF`) is none of them, and a formula calling one is refused\n- Math: round(n,decimals?), ceil(n), floor(n), abs(n), min(a,b), max(a,b), sum(arr), mean(arr), clamp(n,min,max), percentage(part,total,decimals?), pow(base,exp), sqrt(n), mod(n,divisor)\n- Strings: upper(s), lower(s), trim(s), capitalize(s), length(s), contains(s,search), join(arr,sep), split(s,sep), replace(s,search,rep), replaceAll(s,search,rep), startsWith(s,prefix), endsWith(s,suffix), substring(s,start,end?), padStart(s,len,char), padEnd(s,len,char), numberToWords(n)\n- Lists: includes(list,value), first(list), last(list), unique(list), compact(list) \u2014 length(list) counts one\n- Dates: now(), formatDate(d,fmt), addDays(d,n), subDays(d,n), addHours(d,n), subHours(d,n), addMinutes(d,n), subMinutes(d,n), startOfDay(d), endOfDay(d), differenceInCalendarDays(later,earlier), differenceInHours(later,earlier), differenceInMinutes(later,earlier), isBefore(d1,d2), isAfter(d1,d2), isSameDay(d1,d2), isToday(d), isWithinRange(d,start,end), parseDate(d)\n- Null/type: isNull(v), isEmpty(v) (also true for "" and []), coalesce(v1,v2,...), isString(v), isNumber(v), isBoolean(v), isArray(v), toNumber(v), toString(v)\n- Other: formatCurrency(amount,locale,currency), formatDecimal(value,decimals,locale) (grouped quantity, no symbol), get(obj,"path",default?)\n- Empty cells: a cell nobody filled is null inside a formula, whatever its type; one holding 0, false or "0" is not empty. Test it with `isEmpty({note})` \u2014 `{note} == ""` and `{done} == false` are false on an unset cell\n- Arithmetic over an empty cell: `+` and `-` read it as 0 beside a value (`{fee} + {surcharge}` is `{fee}` when the surcharge is empty, null when both are); `*`, `/`, `%` and a unary `-` yield null (`{price} * {qty}` is null, not 0, when the quantity is empty)\n- No helper throws on an empty cell: the math helpers and toNumber return null, the string helpers "". A value of the wrong type still errors. When EVERY field a formula reads is empty it is null \u2014 unless it reads each only as the argument of isEmpty, isNull or isNotNull (`!isEmpty({file})` is false there, not null)\n\n<!-- generated:end field-formula-language -->\n\n### `rollup`\n\nAggregates the records reached through a link on this entity.\n\n<!-- generated:start field-rollup -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `source_field_alias` | alias | yes | Alias of a select_record_link field on this entity to roll up from |\n| `aggregate_option` | [aggregation](#rollup) | yes | Aggregation operation. Its `field_key` names a field alias on the linked entity. |\n| `filter` | [filter](#views) group | no | Only linked records matching this filter are aggregated; one condition on its own is a group of one. Every `field_key` in it names a field alias on the linked entity, and a select condition\'s value names an option alias there. A traversal node reaches past that entity, so its `path` hops and inner `field_key` are fully-qualified `entity.field` aliases. |\n\n<!-- generated:end field-rollup -->\n\n`aggregate_option` is `{ "operation": \u2026, "field_key": \u2026 }` \u2014 `field_key` a field\nalias on the linked entity (`count` may omit it), and `operation` one of `count`,\n`sum`, `avg`, `median`, `min`, `max`, `range`, `empty`, `filled`,\n`percent_empty`, `percent_filled`, `unique`, `percent_unique`, `earliest`,\n`latest`, `date_range`, `checked`, `unchecked`, `percent_checked`,\n`percent_unchecked`. The operation must be one the aggregated field\'s type\nallows \u2014 `sum` over a number, `earliest` over a date, `filled` over any stored or\nformula field. A lookup is never rolled up: roll up the child\'s own field, or a formula\nover it.\n\n### `lookup`\n\nDisplays a field from the linked records.\n\n<!-- generated:start field-lookup -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `source_field_alias` | alias | yes | Alias of a select_record_link field on this entity to look up through |\n| `lookup_field_alias` | alias | yes | Alias of the field on the linked entity to display |\n| `order_by` | [Lookup order](#lookup-order) | no | Show ONE linked row\'s value \u2014 the first in this order \u2014 rather than every linked row\'s |\n\n#### Lookup order\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field_key` | text | yes | A field alias on the linked entity the rows are ordered by |\n| `direction` | `"asc"` \\| `"desc"` | yes | Which end of that order the one row is taken from |\n\n<!-- generated:end field-lookup -->\n\nInside a formula, a lookup holding one value is that value (`{due_soon}` is\n`true`, not `[true]`); several values are a list.\n\n### `autonumber`\n\n<!-- generated:start field-autonumber -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `prefix` | text | no | Literal prefix prepended to every display value (e.g. \'KH-\' \u2192 \'KH-001\'). Ignored when `template` is set. |\n| `padding` | integer | no | Zero-pad the integer to this width. Default 1 (no padding). 3 \u2192 \'001\', \'012\', \'123\', \'1234\' (overflow uses the actual width). Ignored when `template` is set. |\n| `template` | text | no | Format template with placeholder tokens evaluated at insert time. Tokens: {N} (raw integer), {N:W} (zero-padded to width W, e.g. {N:3} \u2192 001), {YEAR} (4-digit year), {YEAR:2} (2-digit year), {MONTH} (2-digit month), {DAY} (2-digit day). Date tokens use the workspace timezone. Example: \'HM-{YEAR}-{N:3}\' yields \'HM-2026-001\'. Stored as the composed string; subsequent template edits do NOT re-format existing rows (date tokens would lose the original creation date). |\n\n<!-- generated:end field-autonumber -->\n\n<!-- generated:start rules-field -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `field.default` | A default names options its select declares \u2014 one on a single select \u2014 and a date stamped by `derive_from` states none. |\n| `field.option-mark` | An option\'s `mark` is one the kit draws, and a select\'s options mark every one or none. |\n| `field.unit-select` | A `unit_field` or `currency_field` is a single select of the same row, or a lookup of one through a one-link, whose every option label is a unit, or an ISO 4217 code. |\n| `field.link` | A link targets a declared entity: its `display_field_alias` a field of it, its `paired_field_alias` a link on it naming this one back \u2014 and of two paired links at most one reads one row. |\n| `field.formula` | A formula parses, reads fields of its own entity by alias, names an option as `{field:option}` of one a select declares, and compares a select to its options\' keys, never their words. |\n| `field.rollup` | A rollup aggregates, through a link of its entity, a field of the linked entity by an operation a model declares and that field\'s type takes \u2014 never a figure read in each row\'s own unit or currency \u2014 filtered on fields of the linked entity. |\n| `field.lookup` | A lookup reads, through a link of its entity, a field of the linked entity \u2014 never one read in each row\'s own unit or currency \u2014 ordered by a field of it. |\n| `field.computed-cycle` | Computed fields never wait on each other in a loop: each is computed after what it reads. |\n\n<!-- generated:end rules-field -->\n\n## Views\n\nSaved views live under the entity they belong to. Every field reference is a\nfield ALIAS on that entity.\n\n<!-- generated:start views -->\n\n#### View\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | Stable view alias, unique within the entity |\n| `label` | text | yes | Display name of the view |\n| `description` | text | no | The view\'s description, written onto the view in the workspace |\n| `columns` | list of [View column](#view-column) (at least one) | no | The columns the view shows, in this order and no others; absent, every field |\n| `filters` | [filter](#views) | no | The rows the view keeps |\n| `sort` | [sort](#views) | no | The order the view reads its rows in |\n| `summary` | map of text \u2192 text | no | Field alias \u2192 the operation its footer cell states |\n| `frozen_columns` | integer \\| `null` | no | How many leading columns stay in place while the rest scroll |\n\n#### View column\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field_alias` | alias | yes | A field of this entity |\n| `visibility` | `"visible"` \\| `"hidden"` | yes | Field visibility state: \'visible\' = shown to everyone, \'hidden\' = not shown by default but members can toggle |\n| `width` | number | no | The column\'s width, in pixels |\n\n<!-- generated:end views -->\n\nA filter is a group \u2014 `{ "node_type": "group", "logic": "and" | "or",\n"children": [ \u2026 ] }` \u2014 or one condition on its own, `{ "node_type":\n"condition", "type": "select", "field_key": "tier", "operator": "has_any_of",\n"value": ["gold"] }`. A sort is a list of `{ "field_key": \u2026, "order": "asc" |\n"desc" | null }`. A condition\'s `type` is the field\'s type and its `operator` is\none that type admits \u2014 `has_any_of` / `has_none_of` / `has_all_of` / `is_empty` /\n`is_not_empty` for a select, `equals` / `greater_than` / `less_than` for a\nnumber, `on` / `before` / `after` / `between` for a date, `contains` /\n`is_any_of` for text. A select condition\'s `value` names option ALIASES.\n\n<!-- generated:start rules-view -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `view.fields` | A view\'s columns, summary, sort and filters name fields of its entity. |\n\n<!-- generated:end rules-view -->\n\n## Roles\n\nA role becomes a workspace group.\n\n<!-- generated:start roles -->\n\n#### Role\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | Stable role alias, bound to a workspace group when the model is applied |\n| `label` | text | yes | The group\'s name in the workspace |\n\n<!-- generated:end roles -->\n\n## Templates\n\nAn `html` or `email` template carries its content inline, and `{{name}}` in it is filled\nfrom the workflow\'s data; an `excel` template names an uploaded workbook by its `file_id`,\nfilled with the register\'s report by its `export` alone.\n\n<!-- generated:start templates -->\n\n#### Template\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `type` | `"html"` \\| `"email"` \\| `"excel"` | yes | html is a page a workflow renders to a PDF; email is a message a workflow sends; excel is a workbook a register\'s export fills |\n| `alias` | alias | yes | Stable template alias, unique within the contract |\n| `label` | text | yes | The template\'s name in the workspace |\n\n<!-- generated:end templates -->\n\n### `html` and `email`\n\n<!-- generated:start template-inline -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `content` | text | yes | Inline template content; placeholders reference field aliases |\n| `content_sha256` | text | no | sha256 (64-char lowercase hex) of the utf-8 content; derived where the template is written when absent |\n\n<!-- generated:end template-inline -->\n\n### `excel`\n\n<!-- generated:start template-excel -->\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `file_id` | text | yes | The uploaded .xlsx (`fil_\u2026`) the template is made from; its markers read what the export fills it with |\n\n<!-- generated:end template-excel -->\n\nA paper that has to look like a counterparty produced it \u2014 an official letter,\nan acceptance minute, a supplier\'s bill \u2014 is the same `html` template with a\nshell around the body: a letterhead, a reference line, a seal and a signature\nblock, and paper grain over everything. One shell, many bodies; the data is the\nonly thing that changes, so a workflow can re-issue it over any record.\n\n```jsonc\n{ "alias": "cong_van", "label": "C\xF4ng v\u0103n", "type": "html",\n  "content": "\u2026the page below, as one JSON string\u2026" }\n```\n\n```html\n<style>\n    .sheet{position:relative;width:718px;padding:44px 58px 30px;background:#fbfaf6;color:#111;font:14.2px/1.5 \'Liberation Serif\',serif}\n    .grain{position:absolute;inset:0;opacity:.34;mix-blend-mode:multiply;background:url("data:image/svg+xml;utf8,<svg xmlns=\'http://www.w3.org/2000/svg\' width=\'140\' height=\'140\'><filter id=\'f\'><feTurbulence baseFrequency=\'.9\' numOctaves=\'2\'/><feColorMatrix values=\'0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .35 0\'/></filter><rect width=\'140\' height=\'140\' filter=\'url(%23f)\'/></svg>")}\n    .top{display:flex;text-align:center;font-size:13.4px} .top>div{flex:1} .u{display:inline-block;border-bottom:1px solid #111;font-weight:700}\n    .ref{display:flex;text-align:center;font-size:13.4px;margin-top:6px} .ref>div{flex:1} .ref .r{font-style:italic}\n    h1{text-align:center;font-size:15.6px;margin:26px 0 18px} p{text-align:justify;text-indent:26px;margin:0 0 9px}\n    .sig{display:flex;margin-top:20px} .sig .l{flex:1} .sig .r{width:290px;text-align:center;position:relative}\n    .sig .nm{font-weight:700;margin-top:96px} .seal{position:absolute;left:4px;top:8px;width:166px;height:166px;opacity:.66;mix-blend-mode:multiply;transform:rotate(-17deg)}\n  </style>\n  <div class=\'sheet\'><div class=\'grain\'></div>\n    <div class=\'top\'><div><b>{{issuer_parent}}</b><br><span class=\'u\'>{{issuer}}</span></div>\n      <div><b>C\u1ED8NG H\xD2A X\xC3 H\u1ED8I CH\u1EE6 NGH\u0128A VI\u1EC6T NAM</b><br><span class=\'u\'>\u0110\u1ED9c l\u1EADp - T\u1EF1 do - H\u1EA1nh ph\xFAc</span></div></div>\n    <div class=\'ref\'><div>S\u1ED1: {{number}}</div><div class=\'r\'>{{place}}, ng\xE0y {{day}} th\xE1ng {{month}} n\u0103m {{year}}</div></div>\n    <h1>{{title}}</h1>\n    <p>K\xEDnh g\u1EEDi: {{recipient}}.</p>\n    {{{body}}}\n    <div class=\'sig\'><div class=\'l\'><b>N\u01A1i nh\u1EADn:</b><br>- Nh\u01B0 tr\xEAn;<br>- L\u01B0u VT.</div>\n      <div class=\'r\'><img class=\'seal\' src=\'{{seal_url}}\'><b>{{signer_title}}</b><div class=\'nm\'>{{signer}}</div></div></div>\n  </div>\n```\n\n**What an act\'s template is handed** is its record\'s own fields by alias: a\nselect, a member and a link as their words (a link as the linked row\'s title), a\nnumber, a date and a computed value that declares its kind raw (`2800000`,\n`2026-09-14`) \u2014 never a files field or a computed select. On one record it is\nhanded, too, the rows of each child the record draws as `rows` whose alias the\ntemplate names, listed under that alias for `{{#each <alias>}}` in place of the\nrecord\'s own link to them: every row filed under the record, oldest first, each\nby its own fields as the record\'s are, less its link back to the record. Over\nseveral rows the rows are listed under the entity\'s alias, for\n`{{#each <alias>}}`, without their child rows.\n\n## Rows\n\nFirst records, keyed by entity alias. Up to 200 rows per entity and 2000 across\nthe model, attaching at most 2000 documents between them \u2014 a real data set\nbelongs in an import, not a model.\n\n```jsonc\n"rows": {\n  "customer": [\n    { "ref": "acme", "fields": { "name": "Acme Trading", "tier": "gold" } }\n  ]\n}\n```\n\n<!-- generated:start rows -->\n\n#### Row\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `ref` | text | yes | Local handle for this row, referenced by other rows\' link fields |\n| `fields` | map of text \u2192 any value | yes | Field alias \u2192 the value, read against the field\'s declared type |\n\n<!-- generated:end rows -->\n\n<!-- generated:start rules-rows -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `rows.ref` | A row\'s `ref` is unique within its entity. |\n| `rows.required` | A row states every field its entity requires: it is created with what it states, its fields\' defaults unapplied. |\n| `rows.distinct` | Open rows of an entity a register lists read apart: no two state the same title and the same line under it. |\n| `rows.value` | A row\'s value fits its field: an option alias for a select, `"<entity>:<ref>"` of a row of the linked entity in this file for a link, `"self"` for a member, a relative path beside the file or a `fil_` id for files, a date in the date grammar (an hour only on a datetime), a text, number, yes/no or null otherwise \u2014 and none on a computed field. |\n\n<!-- generated:end rules-rows -->\n\nA `ref` is lowercase letters, digits and underscores, and is never persisted.\n\nA `files` cell attaches documents: paths relative to this file (no `..`, never\nabsolute), which the check proves exist and `apply` uploads into the workspace\nbefore any row is written \u2014 a paperwork business seeds its papers with its\nrows. The server accepts only `fil_` ids of files this workspace owns, which is\nwhat the upload leaves behind. After a run that wrote rows, the WORKSPACE holds\nwhich record each row became, under the row\'s own `<entity>:<ref>`:\n`delete_records` over them is how a seeded set is reset, and applying again\nre-dates it.\n\n`fields` is keyed by field alias, and every value is read against the field\'s\nDECLARED type:\n\n| Field type | Value |\n|---|---|\n| `text` / `number` / `boolean` | the value itself |\n| `date` | `"2026-03-14"`, or a relative expression (below) |\n| `select` | the option ALIAS \u2014 `"gold"`, or `["gold","vip"]` for a multi-select |\n| `select_record_link` | `"<entity-alias>:<ref>"` naming another row in this file \u2014 `"customer:acme"`, or an array for several; a paired link is stated on ONE side (the child\'s link to its parent) and its partner fills itself |\n| `select_member` | `"self"` only \u2014 the person applying the model |\n| `files` | paths beside this file \u2014 `["scans/pccc_letter.png"]` \u2014 uploaded by `model apply`/`setup` before the model is sent; or `fil_` ids of files already in this workspace |\n| `formula`, `rollup`, `lookup`, `autonumber` | not allowed \u2014 the platform writes these |\n\n### Relative dates\n\nA date cell holds a literal `YYYY-MM-DD`, or an expression relative to the day\nthe model is applied, so a screen that opens on "this month" is not empty a month\nlater:\n\n- `@today` \u2014 the day of the run, in the workspace\'s timezone\n- `@month-start` \u2014 the 1st of that month\n- either with a whole-day offset: `@today-14`, `@month-start+9`\n- on a date that holds its hour (`format: "datetime"`), that hour after the day, and always stated:\n  `@today 14:30`, `@today+1 06:00`\n\n`@month-start` exists because `@today-N` cannot promise a month: applied on the\n2nd, `@today-3` lands in the previous one.\n\n## Records\n\n`records` says how a row of each entity is RECOGNISED \u2014 once per entity, keyed by\nentity alias \u2014 and every surface that draws one of its rows reads the same\nstatement: the register\'s row, a picker\'s option, a link\'s chip, a child table\'s\nrow and the record\'s header. Every entity an app lists, opens or picks has one.\n\n```jsonc\n"records": {\n  "visit": {\n    "title": "container_no",\n    "subtitle": ["customer", "arrived_on"],\n    "image": "photos",\n    "status": { "field": "stage", "closed": ["gone"], "history": "visit_history" },\n    "figure": "total_fees",\n    "due": ["free_until"]\n  },\n  // A release order read against what it allows: a meter wherever it shows.\n  "release": { "title": "release_no", "figure": "issued", "limits": { "issued": "units" } },\n  // A dossier\'s stage is the last date it reached \u2014 no stored select.\n  "dossier": { "title": "applicant", "status": { "milestones": ["received_on", { "field": "appraised_on", "when": { "kind": ["loan"] } }, "signed_on"], "closed": ["signed_on"] } }\n}\n```\n\n<!-- generated:start records -->\n\n#### Record\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `title` | alias | yes | The field that names a row \u2014 the first thing every surface shows: who or what it is, a link naming it by the linked row (a job read by its customer). An autonumber is refused; a typed number is the subtitle |\n| `subtitle` | list of alias (1\u20132) | no | Up to two fields read under the title wherever a row is drawn (a code, a date, a party) |\n| `image` | alias | no | A files field that pictures the row \u2014 never one an act keeps the document it makes in |\n| `description` | alias | no | A text field saying what the row is about \u2014 a plan\'s brief, a customer\'s note: read in its record\'s head under the title\'s line, its first lines at rest and whole on a press, and written from the head\'s \u270E. Never on a row\'s line |\n| `party` | `"person"` \\| `"organization"` | no | What each row is where the rows are people (a contact, a patient) or organisations (a customer, a supplier, a carrier); absent, the rows are things (an order, an item, a paper) |\n| `status` | [Status](#status) | no | The stage a row moves through \u2014 a single select or its milestone dates \u2014 drawn as a badge beside its title |\n| `figure` | alias | no | The one number the row stands for, read at its right (a total, a quantity left) |\n| `limits` | map of alias \u2192 (alias \\| number) | no | A number read against a bound \u2014 a field of the same row or a constant \u2014 drawn as a meter wherever it shows |\n| `gates` | map of alias \u2192 (alias \\| number) | no | A pass mark on a meter `limits` bounds \u2014 a field of the same row or a constant; a percent field is its share of the bound, any other number an amount. The meter marks it and fills complete once past it |\n| `tolerance` | map of alias \u2192 number | no | How far past its `limits` bound a meter may stand, in percent of the bound: the bound is an amount expected (received against ordered), not a cap. Without one the bound is a cap, and past it is an overrun |\n| `due` | list of alias (at least one) | no | Dates that are deadlines (stored, or computed as a date): each counts down and turns overdue |\n| `frees` | alias | no | A date ending the row\'s span of days on which what the row holds is free again (a check-out, a hire\'s return): a stay from the 3rd to the 5th holds the 3rd and the 4th, and another may start on the 5th \u2014 on a lanes board, a calendar, a roster and in `no_overlap` alike. Absent, a span of days holds its last day; a span of moments always frees its end |\n| `task` | `true` | no | A row is work someone finishes: wherever rows of it stand in a table \u2014 a register, a record\'s rows, the rows filed under one \u2014 each is led by a ring ticking it done and unticking it by the one write of the app making that move. Its status is a stored select with `closed` |\n| `applies` | map of alias \u2192 map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Fields that apply only while their conditions hold (a length only on a line whose tariff charges by the metre): where one does not apply no add asks it and no surface shows it. Never the title; a required one starts at its `default` |\n| `starts` | map of alias \u2192 `"today"` \\| `"me"` | no | What a field of a row being added starts at, where that start is certain: `today` a date (a moment starts now), `me` a member, the reader adding it; every other field starts empty unless the reader narrowed the register to a value or the field declares a `default` |\n\n#### Status\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | no | The single select that is the row\'s state \u2014 or `milestones` instead |\n| `milestones` | list of (alias \\| [Milestone](#milestone)) (at least 2) | no | Dates in the order the work reaches them, instead of a stored select: the stage is the last one filled, ticking one stamps today, and clearing one clears every later one |\n| `closed` | list of alias (at least one) | no | Options (or milestones) that end the work: a register opens on the rows not at them, and the badge reads muted |\n| `history` | alias | no | A child entity every status change appends one row to (its link to this entity, the new status, the moment and who) \u2014 written by the app\'s own writes, never a table automation; a row the model seeds opens it at its status, the day the rows land, unless the model states its rows; with `field` only |\n\n#### Milestone\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | yes | A date field: the stage is reached on the day it holds |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | yes | The stage applies only while each named select holds one of these options, and each named stored yes/no is this value; otherwise the row skips it |\n\n<!-- generated:end records -->\n\n<!-- generated:start rules-records -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `records.title` | A title names the row by what it is \u2014 never an autonumber; a code is its subtitle. |\n| `records.image` | `image` is a files field, never one an act keeps the documents it makes in (`into`). |\n| `records.description` | `description` is a text field, read in the record\'s head \u2014 never a section\'s too. |\n| `records.status` | A status is one single select, `closed` naming options of it \u2014 or its `milestones`. |\n| `records.history` | A declared status `history` has exactly one link to the row it records, one single select holding every option of the status (or a text), exactly one date and at most one member. |\n| `records.history-derived` | A `history` the model does not declare is derived and keeps one entity\'s moves, labelled by that entity ("L\u1ECBch s\u1EED <entity label>", or "<entity label> history"): no declared table holds that label, and the entity has no other field under the link it adds. |\n| `records.history-scope` | A status history reads by its record\'s `read_scope`, answered through its one-row link to the record within the links a row rule reaches \u2014 or it states its own. |\n| `records.milestones` | Milestones are dates a person ticks, each named once; `closed` names some of them, and a deadline (`due`) is never one. |\n| `records.milestone-add` | An add asks the first milestone at most \u2014 each after it is ticked in order. |\n| `records.figure` | A figure is a number. |\n| `records.applies` | `applies` holds a field of the row other than its title to conditions of the same row \u2014 a yes/no (stored or a formula) by `true` or `false`, a single select by its options, its own or looked up through a one-row link \u2014 never to itself; a required field it holds starts at a `default`. |\n| `records.limits` | `limits` bounds a number by a number field of the row, in its unit or one of the same dimension \u2014 or by a constant, where every row reads the figure in one unit. |\n| `records.gates` | `gates` marks a pass on a meter `limits` bounds: a percent field (its share of the bound), another number in the bound\'s unit, or a constant. |\n| `records.tolerance` | `tolerance` stands on a meter `limits` bounds. |\n| `records.starts` | `starts` starts a field a person writes \u2014 `today` a date or a moment (never a span), `me` a member \u2014 and an add that does not ask a field it starts writes that start. |\n| `records.due` | A deadline (`due`) is a date. |\n| `records.frees` | `frees` names a stored day, never a moment: a span of moments already frees its end. |\n| `records.task` | A task entity (`task`) states a `status` of a stored single select with `closed` options \u2014 its ring ticks a row done by moving it to one. |\n\n<!-- generated:end rules-records -->\n\n- **The title names the row** by who or what it is \u2014 a link by the linked row (a job\n  read by its customer). An autonumber is refused as a title; a typed number is the\n  subtitle.\n- **The status** is one single select. `closed` options end the work: a register opens\n  on the rows not in them. A `history` entity gets one row per move \u2014 its link to this\n  entity, the new status (a select holding the same option aliases, or text), the\n  moment and who \u2014 appended by the app\'s own writes that move the status, never by a\n  table automation. A `history` the model does not declare is derived, and needs no\n  `records` entry of its own.\n- **Milestones** are the alternative to a stored select: dates in the order the work\n  reaches them, the stage being the last one filled (never stored). A milestone with a\n  `when` applies only while its select holds those options and its stored yes/no that\n  value; otherwise the row skips it.\n  The record draws them as one block where ticking stamps today and clearing one clears\n  every later one; every save and act re-checks that a date comes after each earlier one\n  that applies. `closed` names the milestones that end the work. A register\'s add may ask\n  the first milestone, never a later one; an act may stamp one, never clear it.\n- **A limit** reads a number against a bound \u2014 another field of the row, or a constant.\n  A `gates` entry marks a pass on that meter: a percent field is its share of the\n  bound, any other number an amount.\n- **A deadline** (`due`) counts down wherever it is drawn and is overdue once past while\n  the work is open. A register over the entity says how many rows in view are overdue on\n  its summary line, and pressing that count narrows to them \u2014 no reading to state.\n- **A span\'s free day** (`frees`) is the end date on which what the row held is free\n  again \u2014 a check-out, a hire\'s return. A stay from the 3rd to the 5th holds two nights:\n  a lanes board, a calendar and a roster draw it through the 4th, and `no_overlap` lets\n  the next stay start on the 5th. Without it a span of days holds its last day; a span of\n  moments always ends as the next may begin.\n- **`starts`** is where an add\'s field begins, stated only where that is certain \u2014 a\n  log\'s own day at `today`, a request\'s requester at `me`. Nothing else starts a field\n  but its declared `default` and what the reader narrowed the register to.\n\n## Write rules\n\n`write_rules` is what a WRITE meets, keyed by entity alias; each entity\'s is held\nby its table. Every generated write of an\napp (`create_<entity>`, `update_<entity>`, each act) re-checks these on the\nserver; the screen only mirrors them.\n\n```jsonc\n"write_rules": {\n  // A customer is RECOGNISED by their address. An add that names one \u2014 from the\n  // customers register or from a picker\'s "new" \u2014 reuses the row it matches and\n  // opens one only where nothing does, so the book never grows a second Acme.\n  "customer": { "natural_key": ["email"] },\n  "order_line": {\n    "fields": {\n      // A line of nothing is not a line. Refused on create and on update.\n      "quantity": { "min": 1, "max": 9999 },\n      // Shipped inside its order\'s window: a bound read off the row a link names\n      // is held from both sides \u2014 moving the order\'s dates never strands a line.\n      "ships_on": { "min": "order.placed_on", "max": "order.due_on" },\n      // The price is fixed at the moment of ordering \u2014 COPIED off the product,\n      // not looked up for ever after.\n      "unit_price": { "default_from": "product.price" },\n      // Nothing is sold off an empty shelf. The picker reads only the rows that\n      // answer this, and the write refuses the same rows again.\n      "product": {\n        "options_where": {\n          "node_type": "group", "logic": "and",\n          "children": [{ "node_type": "condition", "type": "number",\n                         "field_key": "in_stock", "operator": "greater_than", "value": 0 }]\n        }\n      }\n    }\n  },\n  // One booking per room at a time, while it is held: a create or a save whose\n  // span overlaps another held booking of the same room is refused.\n  "booking": {\n    "fields": { "ends_on": { "min": "starts_on" } },\n    "no_overlap": { "from": "starts_on", "to": "ends_on", "by": ["room"], "while": { "state": ["held"] } }\n  }\n}\n```\n\n<!-- generated:start write-rules -->\n\n#### Entity write rules\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `natural_key` | list of alias (at least one) | no | The field aliases a row of this entity is RECOGNISED by. A write that names a row of this entity by these values reuses the row it finds, minting one only where nothing matches. |\n| `fields` | map of alias \u2192 [Field write rule](#field-write-rule) | no | Field alias \u2192 what that field\'s value is copied from, bounded by or picked among |\n| `no_overlap` | [No overlap](#no-overlap) | no | No two rows hold overlapping spans \u2014 a create or update that would is refused |\n\n#### Field write rule\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `default_from` | text | no | Copy this field\'s value from the linked row at CREATE time \u2014 `<link alias>.<field alias>`, the link being a one-row link on this entity, required or filled by the add (the record a row is added under). The value is copied rather than looked up, so the source changing later leaves the row alone. |\n| `min` | number \\| text | no | Refuse a create or update whose value is below this: a constant for a number, or a field \u2014 `<field alias>` of the same row, or `<link alias>.<field alias>` of the one row a link names \u2014 of the same type (a return date after the departure, a line\'s day inside its trip). On a figure whose unit or currency is per row (`unit_field`, `currency_field`) a constant bound is only 0; bound it by a field of the row |\n| `max` | number \\| text | no | Refuse a create or update whose value is above this: a constant for a number, or a field of the same row or of the one row a link names |\n| `options_where` | [filter](#views) | no | Which rows of the target this link may point at \u2014 an `and` group of plain conditions over the TARGET entity\'s own fields, each `field_key` a field alias. It narrows the picker\'s read and is refused again where the write lands. |\n| `same` | list of alias (at least one) | no | One-row links this row and each row this link points at must name alike \u2014 a fee\'s invoice is one of its own visit\'s, a box\'s seal one of its own shipping line\'s: each a one-row link of both entities to the same entity. It narrows the picker\'s read to the rows naming what this row names, and a write is refused wherever it lands \u2014 on the link, or on what the two rows compare. |\n| `suggest` | text | no | A text field whose control offers, as the reader types, the distinct values a text field of a catalog holds \u2014 `<entity alias>.<field alias>` (a damage position\'s code among the codes on file); any text is still written |\n\n#### No overlap\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `from` | alias | yes | The stored date (or datetime) a row\'s span starts on |\n| `to` | alias | yes | The stored date (or datetime) a row\'s span ends on \u2014 a day it holds, unless `records` names it the day the row `frees`; a moment another row may start at |\n| `by` | list of alias (at least one) | no | Fields two rows share to compete for a span (the same employee, the same room); absent, every row |\n| `while` | map of alias \u2192 list of alias (at least one) | no | Only rows at these options of these selects hold their span (running, not closed); absent, every row |\n\n<!-- generated:end write-rules -->\n\n<!-- generated:start rules-write -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `write.natural-key` | A `natural_key` is text or a number a person types back, or a one-row link; a text key is unique \u2014 `unique: true`, or the key\'s fields as a set in the entity\'s `unique`. |\n| `write.default-from` | `default_from` copies `<link>.<field>` off the row a one-row link names, wherever an add fills that link (asked, or the record it is added under), into a field of the same type: a select into one declaring each of its options by alias, several options only into a multi-select. |\n| `write.bounds` | `min` and `max` bound a number or a date \u2014 by a constant a number, by a field of this row or of the one row a one-row link names either, of the same type and unit, never by itself \u2014 and `min` is never above `max`. |\n| `write.bound-per-row-unit` | On a figure whose unit or currency is the row\'s own (`unit_field`, `currency_field`) a constant bound is only 0 \u2014 bound it by a field of the row. |\n| `write.suggest` | `suggest` stands on a stored text field and names `<entity>.<field>`, a stored text field of a declared entity; the app reads that entity, so it has a `records` entry. |\n| `write.same` | `same` stands on a link and names one-row links this entity and the link\'s target both hold to one entity. |\n| `write.options-where` | `options_where` narrows a link by an `and` group of plain conditions over the target\'s own fields \u2014 a number compared in one unit on every row, a select by options it declares. |\n| `write.no-overlap` | `no_overlap` spans two date fields; `by` names values rows share \u2014 a link, a person, one option, a text or a number; `while` names single selects by their options. |\n\n<!-- generated:end rules-write -->\n\n- A `natural_key` is `text` or `number`, because a person types it back, or a\n  one-row link, because a row is also recognised by the one row it belongs with (a\n  fee by its visit and its kind). A key holding a `text` field is unique: `unique:\n  true` on that field, or the key\'s fields as a set in the entity\'s `unique` (a\n  site by its customer and its name) \u2014 two rows sharing it would make\n  find-or-create pick whichever the read answered first. An add asks the key by\n  default.\n- A `min` or `max` naming a field is read off the row as the save would leave it,\n  and one naming `<link>.<field>` off the row the link names \u2014 the link\'s side\n  re-checks its own rows when that bound moves.\n- A `default_from` copies where the add is sure to hold its link\'s row \u2014 a\n  required link, or the record the row is added under (an appointment added under a\n  plan takes the plan\'s patient) \u2014 and the two field types match. The copied field is\n  not asked there; through an optional link the add leaves empty, it is asked.\n- A `same` link names only rows that name what this row names \u2014 a fee\'s invoice\n  is one of its own visit\'s \u2014 through a one-row link both entities hold to one\n  entity; its picker offers nothing until the row names one. A row added under a\n  record names what it copies off it (`default_from`) from the start, so a block\n  expecting one line per row of the link lists that record\'s rows alone. A save\n  moving what the two compare, on either row, is refused while they would name apart.\n- An `options_where` link may be left empty; a row it names is refused again\n  where the write lands unless it holds the narrowing. A link naming one kind of\n  a book\'s rows (a "Shipping line" among the parties) narrows to that kind, or\n  its picker offers every row.\n\nA field\'s own `required` is not here: the contract carries it, and every write\npath refuses the row by field name from it. `unique` is the text field\'s own\nclause (\xA7 `text`) \u2014 an add says so at the control before the column does. A\nfield the workspace writes (a formula, a rollup, a lookup, an autonumber, a date\nwith `derive_from`) is never asked, written or edited.\n\n## Apps\n\nAn app is ONE register over one entity and the record each row opens \u2014 or a dashboard\nof readings. The author states COMPOSITION \u2014 which fields go where; the runtime owns\nhow each thing looks, one treatment per concept. Nothing is drawn that the app does not\nname, and each fact appears once on a record. What the vocabulary has no word for is an\nact\'s own `workflow`.\n\n```jsonc\n"apps": [{\n  "alias": "gate", "name": "Gate in and out", "entity": "visit",\n  "register": { "columns": ["service"], "filters": ["customer", "service"] },\n  "record": {\n    "sections": [\n      { "title": "In", "fields": ["customer", "service"], "blocks": [{ "rows": "fee", "columns": ["amount"] }] },\n      { "title": "Out", "at": ["in_yard"], "fields": ["release", "seal"], "blocks": [{ "files": ["photos"] }], "acts": ["gate_out"] }\n    ]\n  },\n  "acts": [{ "alias": "gate_out", "label": "Gate out", "when": { "stage": ["in_yard"] },\n             "requires": ["release", "seal"], "set": { "stage": "gone", "left_on": "now" }, "confirm": true }],\n  "checks": [{ "field": "unpaid", "blocks": ["gate_out"] }]\n}]\n```\n\n<!-- generated:start apps -->\n\n#### App\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | The app\'s name within the model \u2014 what `--from model.json#<alias>` picks |\n| `name` | text | yes | The job, in the words of the people who do it |\n| `description` | text | no | What the job is for, in a sentence |\n| `icon` | text | no | A lucide icon name the launcher tile draws |\n| `theme` | [Theme](#theme) | no | The launcher tile\'s colour |\n| `entity` | alias | yes | The entity whose rows this job works \u2014 the register\'s rows |\n| `books` | list of [Book](#book) (at least one) | no | Other entities the register reads as one list with `entity`\'s rows, each opened, edited and acted on in its own table: the same app over each, its fields lined up with `entity`\'s. Only a table or cards |\n| `scope` | alias | no | A required one-row link of the entity: the app works inside one row of the linked entity at a time (a project, a branch), picked from a list of them, and every row it reads, counts and adds is that row\'s |\n| `reads` | `"shared"` | no | Every member reads every row, whatever the entity\'s read scope |\n| `writes` | `"children"` | no | The reader adds and edits the record\'s child rows but not the record\'s own fields; the app\'s acts still move it |\n| `row` | [App row](#app-row) | no | How this job reads the entity\'s rows where it reads them otherwise than `records` (a cashier\'s figure is what is owed): the subtitle, figure and image stated replace the entity\'s wherever this app draws its rows \u2014 the register, a card, the record\'s header, a calendar, lane or roster entry. The title stays the entity\'s |\n| `register` | [Register](#register) | no | The rows: which columns and filters, the order, how a row is added |\n| `record` | [Record page](#record-page) | no | What a row opens: the door, its sections, and beside them its comment thread and its status history where stated |\n| `acts` | list of [Act](#act) | no | What the reader does to a record \u2014 each a press with its conditions and its write |\n| `checks` | list of [Check](#check) | no | Formulas that warn while they stand, or refuse the acts and saves they name |\n\n#### Theme\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `color` | text | yes | The tile\'s colour |\n\n#### App row\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `subtitle` | list of alias (1\u20132) | no | Up to two fields read under the title in this app, in place of the entity\'s |\n| `figure` | alias | no | The one number a row stands for in this app, in place of the entity\'s; a `limits` bound on it reads as its meter |\n| `image` | alias | no | A files field that pictures a row in this app, in place of the entity\'s |\n\n#### Book\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `entity` | alias | yes | Another entity whose rows the register reads beside its own \u2014 the same job over another table (a legacy ledger, a second branch\'s book) |\n| `fields` | map of alias \u2192 alias | no | A field of the app\'s entity \u2192 the field of this entity holding the same fact, where their aliases differ; a field the app reads lines up by its own alias otherwise, and one this entity lacks is blank on its rows and drops from what they open \u2014 an act, check or add needing it is not offered on them. Options line up by alias |\n\n#### Dashboard app\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | The app\'s name within the model \u2014 what `--from model.json#<alias>` picks |\n| `name` | text | yes | The job, in the words of the people who do it |\n| `description` | text | no | What the job is for, in a sentence |\n| `icon` | text | no | A lucide icon name the launcher tile draws |\n| `theme` | [Theme](#theme) | no | The launcher tile\'s colour |\n| `reads` | `"shared"` | no | Every member reads every row, whatever the entity\'s read scope |\n| `dashboard` | list of ([Metric](#metric) \\| [Breakdown](#breakdown) \\| [Trend](#trend) \\| [Pivot](#pivot) \\| [List](#list)) (at least one) | yes | The readings, in order \u2014 each over every row of its entity, windowed by the one period the reader switches |\n\n<!-- generated:end apps -->\n\n<!-- generated:start rules-app -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `app.alias-unique` | An app\'s alias is unique among the model\'s apps, and an act\'s among its app\'s acts. |\n| `app.records-entry` | Every entity an app lists, opens or picks \u2014 its own, a block\'s, a linked row\'s, a document\'s \u2014 has a `records` entry. |\n| `app.reads-shared` | `reads: "shared"` stands only where a table the app reads states a `read_scope`. |\n| `app.writes-children` | An app that writes only the record\'s children (`writes: "children"`) adds no row of its own entity. |\n| `app.scope` | `scope` is a required one-row link of the app\'s entity, the same on every row the app lists \u2014 never a column, filter, search field, group, `where`, `opens`, section field or add question. |\n| `app.when` | A `when` holds single selects to options and yes/nos to `true` or `false`, stored or a formula of one \u2014 a milestone\'s `when` only a stored yes/no, read before any formula over it is computed. |\n| `app.asked-written` | What an add, an act or `starts` fills is a field a person writes \u2014 never a formula, rollup, lookup, autonumber or a date the workspace stamps. |\n| `app.own-rows` | A many-link to rows that each belong to one row of this entity is never a section\'s field, an add\'s question or an act\'s ask: those rows are the record\'s own, read as a `rows` block. |\n| `app.create-asks` | An add asks fields of a table people write \u2014 never the link or the folder it files the row under, which the add sets itself. |\n| `app.create-required` | An add (`create`) asks every field its entity requires that nothing else fills \u2014 a `default`, `starts`, the record or folder it files the row under, or a `default_from` over a link it fills \u2014 or the server refuses every add. |\n| `app.books` | A register app\'s `books` each name another entity once \u2014 never the app\'s own \u2014 whose fields line up with the app\'s by alias, else by `fields` (a field the app reads, or one a report prints \u2192 one of the book\'s): read as one column type (a day apart from a moment), one value or several alike, a link to the same entity. Each book holds the title, the status, the folder (`scope`), what `where` keeps and every check locking the rows; the register is a table or cards. Two books holding a field of their own under one alias hold it as one kind of value. A report\'s `books` each name the app\'s entity or one of its books, once, and one of them holds each field its `where` and `per` narrow by. |\n| `app.book-lacks` | *Noted, never refused:* A book lacking a field the app\'s record, an act or an add reads: what reads it drops from the book\'s rows \u2014 an act, a block, a section, the add. A field only a report prints, held by a book as another kind of value, prints blank on its rows. |\n| `app.row` | An app\'s `row` states only what differs from `records`: a line that is not the title, a number for its figure, a files picture no act makes documents into. |\n| `app.files-shown` | Every files field is drawn by some app over its entity \u2014 a section\'s `fields`, a `files` block, a column, the `image`, or where an act making its papers into it (`into`) stands, a section naming the act: the made paper reads under the act, one per template. |\n| `app.document-image` | *Noted, never refused:* A linked entity holding one files field and no `image`: `image` lets a link preview its paper. |\n| `app.tasks` | *Noted, never refused:* A task entity an app lists whose rows no write of the app moves to a closed option (its ring stands disabled), or that an act ticks done and none moves back. |\n\n<!-- generated:end rules-app -->\n\n`writes: "children"` is a desk that adds and edits a record\'s child rows and never\nthe record itself. `reads: "shared"` lifts every read scope the app\'s tables state \u2014\nrefused where none of them states one.\n\n`scope` names a required one-row link of the entity: the app works inside ONE row of\nthe linked entity at a time \u2014 a project, a branch, a season. With no folder remembered\nit opens on the list of them, each with how many of the app\'s rows it holds; inside,\nevery read, count and reading narrows to that one, an add files its row under it (the\nlink is never asked), and the record states its folder in the header. A scope narrows\nthe view; who may read what stays the entity\'s `read_scope`. The folder link is never a\ncolumn, a filter, a search field, a fact or an add\'s question.\n\nA dashboard is `{ "alias", "name", "dashboard": [readings] }` with no entity, register\nor record: each reading reads every row of its entity, and one period the reader\nswitches (this month \xB7 30 days \xB7 this quarter \xB7 this year) windows each reading placed\nin time; one placed in no time reads the rows as they stand now, and its head says so.\nA `list` reading lists rows, each opening in its `app`. The readings answer the one\nquestion the dashboard\'s owner asks, in the order they ask it \u2014 rows to act on lead where\nthe answer is rows; no order of kinds is the rule.\n\n```jsonc\n// The depot owner\'s morning question: which boxes are past their free days, whose are they, is it growing?\n{ "alias": "overview", "name": "Depot overview", "dashboard": [\n  { "list": "visit", "where": { "overdue": true }, "columns": ["line"], "app": "gate", "label": "Past free days" },\n  { "breakdown": "visit", "by": "line", "where": { "overdue": true }, "label": "Past free days by line" },\n  { "trend": "visit", "over": "arrived_on", "where": { "overdue": true }, "label": "Past free days, by arrival" }\n] }\n```\n\n### Register\n\n```jsonc\n"register": { "columns": ["service", "release"], "filters": ["customer", "service"], "create": ["container_no", "customer"] }\n```\n\n<!-- generated:start apps-register -->\n\n#### Register\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `columns` | list of alias | no | Fields read as columns after the row\'s title \u2014 on a calendar\'s entry or a lane\'s block, its facts after its title; never what the row draws itself (its subtitle, image, status, figure, or the bound its figure\'s meter reads against), which the runtime places |\n| `filters` | list of (alias \\| [Tiered filter](#tiered-filter)) (at most 3) | no | The fields the reader narrows the rows by every day, in that order \u2014 each earns its place by that daily use, so none to 3 is normal and 3 is a cap, never a quota (a select, a member, a link, a date, a yes/no, a number as a range, or its `tiers` where the business narrows by those bands daily) \u2014 each on a desk\'s line, in one Filters sheet on a phone. Never the status (its chips); each a field the rows show \u2014 a column, or a part of the row. A threshold the business names ("large orders") is a formula yes/no here; a column\'s header sorts by a day or an amount |\n| `search` | list of alias (at least one) | no | The fields the search box matches (a link by its row\'s title); a pasted list searches each line and names the lines no row matched. Absent, every word of the row |\n| `group` | alias | no | The field the rows open grouped by, the reader\'s grouping starting there \u2014 a period\'s rows read under each period, one per person; absent, ungrouped |\n| `sort` | [Sort key](#sort-key) \\| list of [Sort key](#sort-key) (at least one) | no | The order rows open in: one key, or a list of keys most significant first, each breaking the ties of the ones before it (a select orders by its options\' order); absent, the first deadline soonest first, else the newest first |\n| `tabs` | list of [Register tab](#register-tab) (2\u20135) | no | The lists the register reads its rows as, each a tab with its count over one period the reader picks above them \u2014 the stock at its end beside the arrivals and departures during it, a report\'s sheets; each keeps the register\'s filters and search. Absent, one list. Not with a calendar, roster or lanes, which read their own window |\n| `period` | `"today"` \\| `"week"` \\| `"month"` \\| `"quarter"` \\| `"year"` \\| [Period days](#period-days) | no | With `tabs`: the period they open on \u2014 `today`, `week`, `month`, `quarter` or `year` so far, or `{ days }`, the last that many days through now (a night shift running past midnight reads two); absent, this month so far |\n| `layout` | `"table"` \\| `"cards"` \\| `"calendar"` \\| `"roster"` \\| `"lanes"` \\| `"gantt"` | no | `cards` for rows read by their picture; `calendar` for rows read by their day \u2014 a month, a week, a day or a list, an entry at its hour where its date holds one and over its span where its line holds a second date; `roster` for what each row did on each day of a week or a month (who worked which shift, which vehicle ran), or with `expect` which of a set each row holds; `lanes` for rows booked on a resource over time (an appointment in its chair, a hire on its machine); `gantt` for rows each planned over a run of days, one bar a row on one axis of time (a shipment from its sailing to its arrival, a hire from its start to its return, a task of a project) \u2014 its dates in `gantt`, its lanes the register\'s `group`; absent, a table |\n| `gantt` | [Register gantt](#register-gantt) | no | With `layout: "gantt"`: the dates and facts each row\'s bar is drawn from |\n| `roster` | alias | no | With `layout: "roster"`: the entity whose rows fill the days \u2014 one single link to this entity, and a date on its row line (`records` title or subtitle). A cell reads its row\'s status, else the first single select on its line, several rows a mark each, the cell read by the one latest in that select\'s options; a row whose line holds a second date after the first fills every day to it; a day with none stays empty, never an absence |\n| `expect` | alias | no | With `roster`: a single select of the roster\'s rows whose options are the columns in place of days \u2014 each cell the row holding that option, read by its status, an empty one added there (a checklist of papers per case); the roster then has no period |\n| `of` | alias | no | With `expect`: this entity\'s own multi-select holding the options each row expects \u2014 its other columns stand blank on that row, never added. Its options are among `expect`\'s |\n| `lanes` | alias | no | With `layout: "lanes"`: a one-link of this entity whose target\'s rows are the lanes (a chair, a machine, a room), each drawn even when empty. A row is a block from the first date on its line to the second \u2014 within one day by the hour where the first holds one, else by the day over one day, a week or a month; a free stretch between blocks adds a row there, its lane, its start and the end the stretch reaches filled |\n| `loads` | map of alias \u2192 alias | no | With `lanes`: what a lane carries against what it holds, at most 2 \u2014 a number of this entity each block adds (a weight) to a number of the lane\'s row it is held within (a payload), in one unit or two of one dimension. Each lane reads the most its blocks add up to at one time in the window \u2014 a day\'s rows together \u2014 and names by how much and when a lane runs over |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Only the rows whose select holds one of these options and whose yes/no (stored, or a formula) is this value \u2014 read so on the server and never offered as a chip: the rows this app works of an entity other apps read whole (the purchases, of orders both ways). A row added here holds a select\'s one option and a stored yes/no\'s value |\n| `opens` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | The view the register opens on: each entry a narrowing on a field the rows show that stands as a chip the reader may take away (the rows still owed), `"me"` a member field holding the reader (the rows mine). One on the status replaces the chips\' opening on the open work |\n| `remove` | `false` | no | The app edits its records and offers no Delete on them (a row\'s \u22EF, its record\'s \u22EF) \u2014 a desk correcting a date of records another app makes and closes; absent, a record the app writes is deleted where it stands |\n| `create` | list of alias (at least one) \\| `false` | no | The fields asked when a row is added; absent, the title, the subtitle and figure no default fills, the natural key and every required field \u2014 each a person writes; false, rows are not added here |\n| `export` | `true` \\| list of [Register report](#register-report) (at least one) | no | The rows in view saved as the register\'s report \u2014 its title, a line per thing narrowing the rows, the readings and every row: `true`, one workbook of the register\'s columns; a list, the reports a reader picks from one export menu |\n| `readings` | list of ([Metric](#metric) \\| [Breakdown](#breakdown) \\| [Trend](#trend) \\| [Pivot](#pivot)) (at least one) | no | Readings of the register\'s own entity above its rows, over the rows in view \u2014 the search, the status and the filters narrow them, but a picture\'s own field, read as the register opens on it. A press on a breakdown\'s part, a pivot\'s cell or a figure with `where` narrows the rows by its field, as a filter does |\n\n#### Tiered filter\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | yes | A number \u2014 stored, or a formula or rollup reading one \u2014 in one unit for every row |\n| `tiers` | list of number (at least one) | yes | The breakpoints between its bands, ascending, in the field\'s stored unit: under the first, from each to the next, from the last up \u2014 each band worded by the field\'s own format, several picked at once |\n\n#### Sort key\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | yes | The field rows are ordered by |\n| `desc` | `true` | no | Latest or largest first; absent, soonest or smallest first |\n\n#### Register gantt\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `start` | alias | yes | A date of this entity each row\'s bar starts at (a sailing, a hire\'s start, a task\'s start) |\n| `end` | alias | no | The date each row\'s bar ends at, read as `start` is \u2014 two days or two moments; absent, the entity\'s first `due` |\n| `milestones` | list of alias (at least one) | no | Dates of the row marked on its bar\'s line as diamonds, each named by its label (a cut-off, a delivery, the end of free time) \u2014 never `start` or `end` |\n| `planned` | [Gantt plan](#gantt-plan) | no | The plan each row is read against, drawn as a thin bar under its own \u2014 each date read as `start` is; a missing one is the bar\'s own |\n| `progress` | alias | no | A percent of this entity (0\u2013100) filling each row\'s bar as far as the work is done; absent, the bar wears its status\'s tone |\n| `after` | alias | no | A link of this entity to its own rows each row waits on \u2014 it starts once they end (finish-to-start), an arrow from each; a row starting before one ends is drawn in the danger tone |\n\n#### Gantt plan\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `start` | alias | no | The date the row was planned to start at |\n| `end` | alias | no | The date the row was planned to end at (a booked arrival) |\n\n#### Register tab\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `tab` | alias | yes | The tab\'s name: its address, and the key its rows stand under in a report |\n| `label` | text | yes | What the tab holds, in the reader\'s words |\n| `in` | alias | no | A date (stored, or a formula): the tab holds the rows dated within the register\'s period, from its start through its last day, or up to its last minute \u2014 the arrivals of a period |\n| `open` | [Tab open](#tab-open) | no | The tab holds the rows open at the period\'s end: begun before it, and not ended by then \u2014 what is in stock, out on hire or still owed at that moment |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no is this value, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `sort` | [Sort key](#sort-key) \\| list of [Sort key](#sort-key) (at least one) | no | The order this tab\'s rows read in, as the register\'s `sort`; absent, the register\'s |\n\n#### Tab open\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `from` | alias | yes | The date a row begins on (stored, or a formula) |\n| `to` | alias | yes | The date a row ends on (stored, or a formula), empty while it is open |\n\n#### Period days\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `days` | integer | yes | How many days through today, at most 366 |\n\n#### Register report\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `label` | text | yes | The report\'s name, in the reader\'s words \u2014 its entry in the export menu and its file\'s title |\n| `description` | text | no | What the report holds, under its name in the menu |\n| `template` | alias | no | A template filled with the report \u2014 `title`, `lines`, `readings`, `at` (when it was made), `dates` (each date filter\'s `from` and `to`, by field), `period` (the tabs\' `from` and `to`), `per` (the value picked), every row in view (at most 20,000) under the entity\'s alias, and each tab\'s under its name: an html one made a PDF, an excel one a workbook; absent, the workbook of the register\'s columns, a sheet per tab |\n| `filename` | text | no | The file\'s name, in the template grammar over one value each \u2014 `title`, `at`, `dates.<field>.from` or `.to` of a date filter, `period.from` or `.to` with tabs, `per` with a `per`, `lines \\| lookup:<n>` \u2014 `Stock {{per}} {{period.to \\| format:"dd.MM.yyyy"}}`; absent, the template\'s name, or the report\'s title |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | The rows the report is of, set on the register as the chips they are before its file is made \u2014 the screen shows what the file holds |\n| `per` | alias | no | A select, a member or a one-link the reader picks one value of from the menu \u2014 the rows narrowed to it, as its chip, and one file of that value |\n| `books` | list of alias (at least one) | no | The rows of these books only \u2014 each the app\'s `entity` or one of its `books`; absent, every book\'s |\n\n<!-- generated:end apps-register -->\n\n<!-- generated:start rules-register -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `register.export-report` | A register\'s reports each have their own label; `per` picks one option, person or one-link row \u2014 never of the status, the folder or a field its `where` fixes. |\n| `register.export-template` | A template an export fills reads at its root only `title`, `lines`, `readings`, `at`, `dates` and its rows under the register entity\'s alias \u2014 an entity named none of those \u2014 and is the document of no act. |\n| `register.column-drawn` | A column never names what the row draws itself \u2014 its title, subtitle, image, status, figure, or the bound its figure\'s meter reads against \u2014 and names a field once. |\n| `register.filter` | A filter names a select, a member, a link, a date, a yes/no or a number of the register\'s own rows \u2014 a lookup through one-row links as the field it reads \u2014 never the status (its chips), nor one `where` fixes. |\n| `register.filter-split` | *Noted, never refused:* A filter on a field a breakdown or pivot in the band splits the rows by \u2014 a press on its part narrows by it too; a member\'s filter, which narrows to the reader\'s own rows, is never noted. |\n| `register.filter-unshown` | A filter, a narrowing the register `opens` on, and a press in its band (a breakdown\'s part, a pivot\'s cell, a figure\'s `where`) name a field its rows show \u2014 a column; the row\'s title, the line under it, its picture, status or figure, a meter\'s bound, or the unit or currency a drawn figure is read in; a deadline; a warning its line says; the group or lane it stands under. A narrowing to the reader (`"me"`) needs none. |\n| `register.tiers` | `tiers` band a number read in one unit on every row; a figure read in each row\'s own unit or currency is named bare. |\n| `register.search` | `search` names text, a code, or a link \u2014 matched by its row\'s title. |\n| `register.sort` | Each `sort` key names a field of the register\'s rows that holds an order \u2014 never files \u2014 and no field twice. |\n| `register.tabs` | A register\'s `tabs` each name a tab of their own, never a key a report already holds; a tab\'s `in` and `open` dates are dates of its rows, `open`\'s two different; its `where` and `sort` hold as the register\'s do, and never narrow by the status, which its chips split. Only a table or cards reads tabs, and a band reading\'s `tab` names one of them. |\n| `register.group` | `group` names one value per row \u2014 a single select, a one-row link, one member, a date, a yes/no or a text, a lookup through one-row links as the field it reads \u2014 never the status (its chips); only a table groups, and a gantt into its lanes; grouping by the title needs a subtitle to lead each row. |\n| `register.readings-own` | A register\'s `readings` read its own entity; another entity\'s stand on a dashboard. |\n| `register.readings-restate` | A register\'s metric never sums the row\'s figure or counts the rows without a `where`: the summary line totals the figure and the status chips count the rows. |\n| `register.where-opens` | `where` and `opens` hold the register\'s own selects and yes/nos, and `opens` a member field holding the reader (`"me"`); a field `where` fixes is never a filter nor opened otherwise, and `opens` stays among the options `where` keeps. |\n| `register.roster` | `layout: "roster"` and `roster` go together: the roster\'s entity has one single link to this one and a date on its line, a roster draws no `columns`, `expect` needs `roster` and `of` needs `expect`. |\n| `register.roster-expect` | A roster\'s `expect` is a single select of its rows, and `of` this entity\'s multi-select whose every option is one of `expect`\'s. |\n| `register.gantt` | `layout: "gantt"` and `gantt` go together: `start` and `end` (absent, the entity\'s first `due`) are two different dates of the row, both days or both moments; each milestone another date of it, each planned date read as `start` is, `progress` a percent and `after` a link to rows of the same entity. |\n| `register.lanes` | `layout: "lanes"` and `lanes` go together: `lanes` is a one-row link to an entity with a `records` entry, the rows name a date on their line, a block\'s two ends are read alike (two days or two moments), and `loads` needs `lanes`. |\n| `register.loads` | `loads` names one to 2 numbers a block adds \u2014 never a percent \u2014 each against a number of the lane\'s row, in one unit or two of one dimension. |\n| `register.band-pivot` | *Noted, never refused:* A pivot in a register\'s band: its grid reads on a dashboard, and the band leads with a `metric`. |\n| `register.band-headline` | *Noted, never refused:* A register over rows that move (a status or a deadline) stating no `readings`: the band leads with the job\'s headline number. |\n| `register.remove` | A register\'s `remove: false` hides the Delete its records would offer, so it stands only where the app writes its records. |\n\n<!-- generated:end rules-register -->\n\nThe row is the entity\'s `records` entry: its picture, title and the line under it,\nthen the status, the columns, and the figure at the right; the title, the status and a\ncolumn of days or amounts sort the rows by their header. The status is always the chips, with\ncounts, opening on the rows not closed (every row on a calendar or a lanes board, whose\nwindow of time narrows them) \u2014 never one of `filters`. `filters` are the ones a reader\nnarrows by every day \u2014 none to three, never a quota \u2014 in order of use, each a field the\nrows show (a column, a part of the row), each on the line\nwith the search and the chips, the grouping one\nchip at its end; a member filter offers "mine". A date filters by a range of days \u2014 of\nminutes on a `datetime` field, its end not held, so back-to-back shifts read each row\nonce \u2014 and can keep the rows holding no date too (in the yard at a moment: in before it,\nout after it or not yet). A number filters by a range typed in its\nunit or currency \u2014 a figure read in each row\'s own, in the one picked beside it \u2014 with a\nslider over a percent or a figure against a constant `limits`; `{ "field", "tiers" }`\noffers the bands its breakpoints cut in place of a range (`[1000, 5000]` on a weight in\nkg: under 1.000 kg, 1.000\u20135.000 kg, 5.000 kg and over), refused on a figure read in each\nrow\'s own unit. A threshold with a name is a formula yes/no, never a range. A\ncolumn the row already draws is refused. `sort` is one key or a list of keys, most\nsignificant first, each breaking the ties of the ones before it \u2014 a shipping line in its\nselect\'s option order, then the arrival day soonest first:\n`[{ "field": "shipping_line" }, { "field": "arrived_on" }]`; a header\'s press leads them.\nAbsent `sort`, rows open soonest deadline first where the row has a `due`, else newest first. `search` names the fields\nthe search box matches \u2014 a link by its row\'s title \u2014 and a pasted list searches each\nline, naming the lines no row matched; absent, it matches every word of the row.\n`export` saves the register as its report \u2014 the title, a line per chip, the search and\nthe moment it was exported, the readings, and every row in view, at most 20,000 of them.\n`export: true` saves it as a workbook, the readings on a sheet before the rows. A list\nstates the reports the business sends \u2014 one a button, several one menu \u2014 each a `label`,\na `description`, and a `template` filled with `title`, `lines`, `readings`, `at` (the\nmoment it was made), `dates` (each date filter\'s `from` and `to` by field, a day or a\nmoment as the filter bounds the rows) and the rows under the entity\'s alias (an html one\nmade a PDF, an `excel` one a workbook; absent, the workbook). A report\'s `filename` names\nits file in the template grammar over the same keys but the rows \u2014\n`"Stock {{dates.arrived.to | format:\\"dd.MM.yyyy\\"}}"`; absent, the template\'s name, or\nthe label. A report of some rows (`where`), or of one value the reader picks (`per`: one\nline\'s file), first narrows the register as its chips, so the screen shows what the file holds.\n`readings` read the register\'s own rows above them: the rows in view, so the search,\nthe status and the filters narrow each one, but a picture\'s own field, which it reads as\nthe register opens on it. They are optional \u2014 state them where a\npicture answers something the rows cannot \u2014 and stand under the title in one compact\nband: lead with the job\'s headline number (a `metric`), then at most the mix (a\n`breakdown`) and the movement (a `trend`) \u2014 a `pivot` stands under the band as a whole table, every line and its totals. A picture\nstands only where it splits the rows in view into two parts or more, one of them\nholding two rows or more; a split whose rows\nall fall in one part, and a lone figure with no picture beside it, are said on the\nsummary line instead, so a band stands only holding a picture or two figures. The summary line already totals the\nfigure over the rows in view and the status chips count them, so a `metric` summing the\nfigure, or counting the rows of an entity with a status, is refused unless its `where`\nnarrows it.\n\n`where` keeps the rows the app works, read so on the server and never a chip: a\npurchase desk over orders of both directions states `"where": { "direction":\n["purchase"] }`, and a row added there is written holding the one option (a select kept\nat several is asked among them). `opens` is the view the register opens on, each entry a\nchip the reader may take away: a cashier opens on `"opens": { "owes": true }`. Both take\na select\'s options or a yes/no\'s value, stored or a formula; `opens` on the status is\nthe chips\' opening choice. `opens` also takes `"me"` on a member field \u2014 `"opens": {\n"assignee": "me" }` opens on the rows assigned to whoever reads, the server reading the\nreader, never the page; `where` refuses it, since it fixes the rows for every reader\n(who may read a row at all is the entity\'s `read_scope`).\n\n`layout: "calendar"` places each row on its day \u2014 a month, a week, a day or a list (a\nphone reads the list or a day): at its hour where the date holds one, over its span\nwhere the row\'s line holds a second date after it, its line\'s other words and the\nregister\'s `columns` after its title. The calendar reads the window in view, and its\ncount and the status chips count that window, opening on every row.\n\n`layout: "lanes"` with `lanes` naming a one-link draws each row of the linked entity as\na lane (a chair, a machine, a room), empty ones too, and each register row as a block\nfrom the first date on its line to the second: over the hours of one day where the first\nholds its hour, else over the days of one day, a week or a month. A block reads the row\'s\nname and the first of its `columns`; a free stretch between blocks adds a row there, its\nlane and its start set, and its end where the next block bounds it. A phone lists each\nlane\'s blocks and free stretches in clock order. Rows naming no lane stand first, in a lane\nof their own; where the app writes the link, each block moves to another lane from its menu.\nInside a folder (`scope`), the lanes are the ones whose own one-link names that folder \u2014 a\nbranch\'s rooms, never every branch\'s. A span\'s end holds its day unless `records` names it\nthe day the row `frees`.\n\n`loads` names what a lane carries: `{ "weight": "payload", "volume": "box" }` sums each\nblock\'s number and reads it against the lane row\'s own, at most two. A lane holds its\nblocks while they stand, so it reads the most they add up to at one time in the window \u2014\na day\'s rows together \u2014 named, past its bound, by how much and on which day or at which\nhour. The two are in one unit, or two of one dimension (kg against t); a block then reads\nwhat it adds, and the move menu reads each lane as it would stand with the block on it.\nA bound a single row must keep (no parcel heavier than its van) is a `write_rules` `max`\nthrough the link, which refuses the move.\n\n`layout: "gantt"` with `gantt` draws each register row as one bar on one axis of time:\n`{ "start": "etd", "end": "eta", "milestones": ["cut_off"], "planned": { "end": "booked_eta" },\n"progress": "done", "after": "waits_on" }`. `end` defaults to the entity\'s first `due`, and an\nentity with neither is refused; `start` and `end` are two dates of the row, both days or both\nmoments, and each planned date is read as `start` is. `progress` is a percent (0\u2013100);\n`after` is a link to rows of the same entity, one or several, each ending before the row\nstarts. The bars stand in the lanes of the register\'s `group`. Where the app writes the\nrow and a person writes a bar\'s date, the bar is dragged through the row\'s save, which then\nwrites those two dates though no section places them; a computed date, one an act sets, or\nan app with `writes: "children"` drags nothing.\n\n`layout: "roster"` draws the register\'s rows down the side and the days of a week or a\nmonth across; `roster` names the entity whose rows fill the days \u2014 each stands on one\nregister row by its single link to it, and on the first date of its line (a shift on a\nperson\'s day, a run on a vehicle\'s), on every day through the second date where its line\nholds one. A cell reads its row\'s status, else the first single select on its line (a\nshift\'s kind), several rows their count; a week\'s cells say their words and one more\nfact of the line, a month\'s keep their marks. A day holding none stays empty: nothing\nwas due, which is never an absence. A filled cell opens its row; an empty one adds a row\nthere, the register row and the day set, asking what any add of it asks \u2014 unless no\nperson writes those rows (`writes: false`). With `expect` (a single select of those\nrows) the columns are its options in place of days \u2014 a checklist of papers \u2014 and `of`\n(this entity\'s multi-select) names the ones each row expects: a gap among them reads as\none and adds its row, the others stand blank, and each row reads what it holds of them,\n`2/3`. A roster states no `columns` and needs no `readings`: its legend counts each\nstate in view.\n\n```jsonc\n"register": { "layout": "roster", "roster": "run", "filters": ["operator"] }\n```\n\nAn app whose job reads its rows otherwise than the entity\'s `records` restates them in\nits own `row` \u2014 the cashier\'s figure is what is still owed, its line the service and the\nday. The subtitle, figure and image it states replace the entity\'s wherever that app\ndraws a row of it; every other app reads `records`, and the title is the entity\'s.\n\n### Readings\n\nA reading is one number, or one picture of numbers, over rows. Where it stands decides\nwhich rows: a dashboard reads every row, a register\'s `readings` the rows in view, a\nrecord\'s reading block the child rows under the record. The picture is the runtime\'s,\nchosen from what the reading means \u2014 no key picks a chart.\n\n```jsonc\n{ "metric": "visit", "value": "fees", "where": { "paid": false }, "over": "arrived_on", "label": "Unpaid" }\n{ "breakdown": "visit", "by": "line" }\n{ "trend": "visit", "over": "arrived_on", "value": "fees" }\n{ "pivot": "visit", "rows": "size", "columns": "line" }\n{ "list": "visit", "where": { "stage": ["in_yard"] }, "columns": ["line"], "app": "gate", "label": "In the yard" }\n{ "list": "task", "where": { "assignee": "me" }, "label": "My tasks" }\n```\n\nA reading\'s `where` keeps rows by a select\'s options, a yes/no\'s value, or `"me"` on a\nmember field \u2014 the rows that name whoever reads, read so on the server.\n\n<!-- generated:start apps-readings -->\n\n#### Metric\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `metric` | alias | yes | The entity whose rows are counted, or summed, into one number |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `target` | number | no | The number it is read against, where no `limits` bounds its value (a bounded value is read against the sum of its bound) |\n| `better` | `"up"` \\| `"down"` | no | Which way its change over the recent periods `over` reads is good; absent, a sum\'s rise and a count kept by `where` falling |\n| `label` | text | yes | What the reading is, in the reader\'s words |\n\n#### Breakdown\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `breakdown` | alias | yes | The entity whose rows are split into parts |\n| `by` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) each row is counted under |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the `by` field\'s label |\n\n#### Trend\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `trend` | alias | yes | The entity whose rows are counted, or summed, per period |\n| `over` | alias | yes | The date each row falls on \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link |\n| `ahead` | `true` | no | Counts forward: the current period first, then the ones after it, over the rows dated today or later (arrivals by their ETA); absent, the periods up to today |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the value\'s label, else the entity\'s |\n\n#### Pivot\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `pivot` | alias | yes | The entity whose rows are counted, or summed, in a grid |\n| `rows` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) down the side |\n| `columns` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) across the top |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the two fields\' labels |\n\n#### List\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `list` | alias | yes | The entity whose rows are listed, each in its `records` anatomy |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `columns` | list of alias | no | Fields read after each row\'s title |\n| `app` | alias | no | An app of this model over the same entity that a row opens in |\n| `label` | text | yes | What the reading is, in the reader\'s words |\n\n<!-- generated:end apps-readings -->\n\n<!-- generated:start rules-reading -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `reading.value` | A reading sums a number, never a percent \u2014 percents do not add up. |\n| `reading.split` | `by`, `rows` and `columns` split by one value each row holds \u2014 a single select, a one-row link, one member or a yes/no, stored or a formula, a lookup through one-row links as the field it reads \u2014 and a pivot crosses two different fields. |\n| `reading.over` | `over` is a date: the row\'s own, stored or a formula, or its parent\'s through a lookup over a one-row link. |\n| `reading.where` | A reading\'s `where` keeps rows by a select\'s options, a yes/no\'s `true` or `false`, or a member field holding the reader (`"me"`). |\n| `reading.target` | `target` reads a value nothing bounds \u2014 a value `limits` bounds reads against the sum of its bound. |\n| `reading.better` | `better` needs `over`: a change is read over the periods its date places the rows in. |\n| `reading.list-app` | A list\'s `app` is a register app of this model over the list\'s own entity. |\n\n<!-- generated:end rules-reading -->\n\nA reading counts its rows, or sums the number `value` names \u2014 never a percent. `by`,\n`rows` and `columns` split the rows by one value each: a single select, a one-row link,\none member, or a yes/no \u2014 stored or a formula, its parts read as its label and the\nothers. `over` is a date, the row\'s own (stored or a formula) or its parent\'s through a\nlookup over a one-link: a trend\'s periods, a metric\'s recent periods beside its number,\nand what a dashboard\'s period windows. `ahead: true` reads a trend forward from the\ncurrent period over the rows still to come. `where` keeps rows whose select holds one\nof the options, or whose yes/no is the value, every entry ANDed \u2014 a band leads with the\njob\'s exception as a formula\'s yes/no (what is late, what is short), never a stage the\nstatus chips already count. A metric summing a value `limits` bounds reads against the\nsum of its bound (`10 / 14`); `target` reads one against a number nothing bounds. A\nmetric\'s change is green where it moves the good way: a sum\'s rise, a count kept by\n`where` falling; `better` states the other way where that reads wrong \u2014 money going out\n(`"better": "down"`). A register reads only its own entity; a `list` stands only on a\ndashboard.\n\n### Record\n\n```jsonc\n"record": {\n  "door": "page",\n  "sections": [\n    { "title": "Details", "fields": ["size", "line", "built_on"] },\n    { "title": "Gate in", "at": ["arriving", "in_yard"], "fields": ["arrived_on", "truck"],\n      "blocks": [{ "rows": "fee", "where": { "leg": ["in"] }, "expect": "kind", "columns": ["amount", "paid_by"] }],\n      "acts": ["gate_in_paper"] },\n    { "title": "Sell to a buyer", "description": "Moves the container to the buyer\'s stock once it has left.", "acts": ["sell"] }\n  ]\n}\n```\n\n<!-- generated:start apps-record -->\n\n#### Record page\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `door` | `"page"` \\| `"drawer"` \\| `"beside"` | no | A page for work read at length; a drawer for rows worked one after another from the register; `beside` for rows worked one after another while the list stays in view \u2014 the register\'s list and the open record side by side, over a table register alone. Each stacks its sections, and from three sections on navigates them \u2014 a page by a rail, a drawer by tabs; absent, a page where a section has `at` or is a `page`, the record has more than three sections or one stands beside the rest (`side`), else a drawer |\n| `sections` | list of [Section](#section) (at least one) | no | The record in the order its work reaches it \u2014 each section its fields, then its blocks, then its acts. Absent, one section of every field a person writes that no other place shows |\n| `comments` | `true` | no | The record\'s comment thread beside the sections \u2014 who wrote what and when, with a composer \u2014 stated only where the job\'s people discuss a record or the owner asks for one. Absent, it is drawn nowhere |\n| `history` | `true` | no | The record\'s status history beside the sections \u2014 each move, when and who \u2014 stated only where the owner asks for an audit trail of the moves: the rail already marks the steps passed, and the entity\'s `status.history` is written either way. Absent, it is drawn nowhere |\n\n#### Section\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `title` | text | yes | What the section is, in the reader\'s words \u2014 its heading, and its name on the record\'s rail or tab |\n| `description` | text | no | One sentence under the title: what the section is for, or what its act does |\n| `at` | list of alias (at least one) | no | Options of the record\'s status (or its milestones) during which this section is the work now \u2014 a step of the path the record moves through: its rail item reads now while the status holds one and this app has work there, done once the record\'s history says it went through one \u2014 or it is a step of the path before where that history opens (with none, where the record stands) that no act moves the work past \u2014 and it stands before the section that is the work now, and waiting otherwise; a section every option of which ends the work, past the path\'s end or entered by its own act, is an exit: no item and nothing drawn until the record stands in it, then set apart after the steps and never one; A page opened from the register opens at it. It never locks what the section holds: its fields are written as the write rules and checks allow at any stage. An act it names is offered during these alone: its `when` holds the status to them, or on milestones it stamps the step after one of them \u2014 a detour and an exit are sections of their own, a detour stated before the step it returns to |\n| `fields` | list of alias (at least one) | no | The record\'s own fields in this section, in the order they are read \u2014 never one the header draws: the row\'s title, subtitle, image, status or figure |\n| `blocks` | list of [block](#blocks) (at least one) | no | What the section holds besides its own fields, under them, in order |\n| `acts` | list of alias (at least one) | no | Acts of this app drawn under the section\'s fields, their asks as more of them and what each lacks said above its button; the header draws no act, so every act of the record itself is named by one section \u2014 an act of a child (`of`) stands on the child\'s row and is never named here. An act moving the status, offered at ONE step (the stage its `when` holds), stands at that step\'s foot when it moves the work forward \u2014 to a later option, an exit too \u2014 or back to a step the work passes anyway; one offered at several steps, or moving back into a detour, stands in the section it enters, which draws it while the work waits \u2014 an exit\'s in the header\'s \u22EF, since an exit stands only once the record is in it. A correction \u2014 `danger` and not one of its step\'s outcomes (no other status move offered at the same moment) \u2014 waits in the section heading\'s \u22EF, and one no section names in the header\'s \u22EF; every other act is named by a section |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n| `side` | `true` | no | The section the rest are worked from, drawn in a pane beside them rather than in their scroll \u2014 the photos looked at, the pool picked from, the paper typed off; at most one on a record, which opens on a page door. It holds what any section holds |\n| `page` | `true` | no | A page of its own, off the record\'s scroll: its own heading and a way back, reached from the record\'s rail after the scroll\'s sections, or from a link at its place where the record has no rail \u2014 for what makes the record worse stacked in it: a long list of related rows, a workspace of its own. Only on a page door, never a step (`at`) |\n\n<!-- generated:end apps-record -->\n\n<!-- generated:start rules-record -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `record.placed-once` | A field, a block and an act each stand once on a record: the header draws the title, subtitle, image, status (or milestones), figure and folder, and a field\'s one other place is a section\'s `fields`, a files block or a text block \u2014 save the image, which one files block may draw again, whole. |\n| `record.foot-total` | A rows block\'s foot totals the child\'s figure and each summed column over the rows it lists; the record\'s rollup summing that field over those rows (the same `where`) is that foot, never also one of a section\'s `fields`. |\n| `record.fact-restates` | A section\'s field never looks up what its link already reads where it stands: the linked row\'s title and line beside the link, the figure or bound its meter reads on the header\'s line. |\n| `record.section-holds` | A section holds fields, blocks or acts. |\n| `record.at` | `at` names options of the record\'s stored status, or its milestones; a record with no status has no steps. |\n| `record.page` | A section is a `page` only on a page door \u2014 never a drawer\'s or one beside the list \u2014 and never a step (`at`), its title naming an address no other page shares (a letter or a digit at least), and never every section. |\n| `record.side` | At most one section stands beside the rest (`side`), on a page door, and never also a page of its own. |\n| `record.beside` | A `door: "beside"` record opens beside a table register \u2014 never a board, cards or a calendar, which draw no list to stand beside. |\n| `record.history` | `record.history` draws a status history the entity records (`status.history`); no block reads that history. |\n| `record.section-acts` | A section\'s `acts` name acts of the record itself: an act of a child (`of`) stands on the child\'s row, and one over the register\'s rows (`on`) on the register. |\n| `record.act-in-section` | Every act of the record stands in the `acts` of the section whose work it is; only a correction no section owns \u2014 `danger`, and no other status move offered at the same moment \u2014 waits in the header\'s \u22EF. |\n| `record.move-home` | A status move offered at one step stands at that step\'s foot when it moves the work forward, to an exit, or back to a step it passes anyway; one offered at several steps, or moving back into a detour, stands in the section `at` the status it enters. |\n| `record.act-staged` | An act at a staged section\'s foot is offered only during that section\'s steps: its `when` holds the status to options the section names \u2014 on milestones, it stamps the step after one of them. |\n| `record.act-hidden` | An act is never offered only while its section\'s `when` hides the section. |\n\n<!-- generated:end rules-record -->\n\nThe record is its `sections`, stacked in the order the work reaches them. A section is\nits fields, the acts under them, then its blocks \u2014 the acts at its foot instead where one\nreads what a block holds or none of its fields \u2014 and holds at least one of them. From\nthree sections on, the record is navigated by their titles: a page by a rail that jumps\nto each (a strip of the same names on a phone), a drawer by tabs, the companion the last;\nwith fewer, the sections just stack. `description` is one sentence under the title.\n`at` names the status options (or the milestones) during which the section is the work\nnow \u2014 only on a record that truly moves through those stages: the rail marks it done,\nnow or waiting (an item of no `at` is its title alone), and the section stands even holding\nnothing yet \u2014 it never hides a field, locks it or gates an act, and a record opens at its\nhead. `page: true` makes a section a page of its own under the\nrecord\'s, off its scroll, with a way back \u2014 rarely, for a long related list or a workspace\nof its own that would make the record worse stacked; never on a drawer or a step. The\nheader draws no act: every act on the record is named by the section whose work it is, and one no section names is refused, naming its likely\nsection \u2014 only a correction no section owns waits in the header\'s \u22EF beside Delete. An act\nmoving the status and offered at ONE step (its `when`) stands at that step\'s foot when it\nmoves the work forward \u2014 to the next step, or to an exit later in the status\'s options\n(Reject beside Approve) \u2014 or back to a step the work passes anyway. One offered at SEVERAL\nsteps, or moving back into a detour, is named by the section it enters: a detour draws it and its\ngaps alone while it waits. A `danger` act is a correction \u2014 waiting in the \u22EF of what it acts\non: its section\'s heading, its row, the header\'s where no section names it \u2014 unless it moves\nthe status while another status move is offered at the same moment; then it is one of that\nstep\'s outcomes, a button. Cancel offered at Held and at Confirmed, beside Confirm, is an\noutcome into an exit: state `{ "title": "Cancelled", "at": ["cancelled"], "fields": ["reason"],\n"acts": ["cancel"] }`. An exit stands only once the record is in it, its reason there and its\nrail item apart from the path; until then Cancel waits in the header\'s \u22EF. `comments: true`\nputs the record\'s comment thread beside the sections, and `history: true` its status history \u2014\nthe history never as a section. Both are opt-in: state them only where the job\'s people\ndiscuss a record, or the owner asks for an audit trail of its moves.\n\nA field, a block and an act is each placed ONCE on a record \u2014 the header, one section;\na second place is refused. The header draws the entity\'s `records` title, subtitle,\nimage, status (or milestones) and figure, so none of them is named again in a section\'s\n`fields` or the register\'s `columns` \u2014 save the image, which one `files` block may draw\nagain, whole at reading size (an incident\'s photo, a scan), the header keeping its mark. Refused too: a section holding nothing, an `at`\non a record with no status, and a section\'s act that is a child\'s or runs over the\nregister\'s rows.\nAbsent `sections`, one section holds every field a person writes that the header does\nnot show. An editable field rests as its control and saves as it changes; everything\nelse is plain text. A section or a block with `when` is shown only while each named\nselect of the record holds one of its options. The one layout serves every entity: a\ncustomer or a product is sections without `at`.\n\n### Blocks\n\n```jsonc\n"blocks": [\n  { "rows": "fee", "columns": ["kind", "amount"] },\n  { "rows": "fee", "where": { "leg": ["out"] }, "columns": ["kind", "amount"], "under": "invoice" },\n  { "agenda": "booking", "columns": ["guide"], "start": "arrival" },\n  { "timeline": "note" },\n  { "files": ["photos", "papers"] },\n  { "text": "remarks", "when": { "stage": ["held"] } },\n  { "metric": "fee", "value": "amount", "label": "Fees" },\n  { "breakdown": "fee", "by": "kind" },\n  { "trend": "fee", "over": "charged_on", "value": "amount" },\n  { "pivot": "fee", "rows": "kind", "columns": "method" }\n]\n```\n\n<!-- generated:start apps-blocks -->\n\n#### Rows block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `rows` | alias | yes | A child entity whose rows belong to this record |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `columns` | list of alias | no | The child\'s fields read as columns after its title \u2014 never what its row draws (subtitle, image, status, figure, or the bound its figure\'s meter reads against), though an `expect` block\'s figure is a column, filled in place. |\n| `create` | list of alias (at least one) \\| `false` | no | The child\'s fields asked when a row is added here; absent, its title, its picture, the subtitle and figure no default fills, the block\'s columns, its natural key and every required field \u2014 each a person writes; false, rows are not added here |\n| `where` | map of alias \u2192 list of alias (at least one) | no | Only the child rows whose single select holds one of these options \u2014 every entry ANDed, read so on the server; a row added here holds them (one leg\'s fees, of a record holding both legs\'). Each select is one the child requires, so no row stands in no block |\n| `expect` | alias | no | The child\'s title when the record holds one row per value of it \u2014 a single select (one per option, in order) or a one-row link to a catalog (one per row the link may point at): a value not yet filled reads as its own empty line, and no value holds two rows. The block\'s `columns` name at least one field a person fills in place |\n| `of` | alias | no | With `expect` on a select: the record\'s own multi-select holding the options this record expects a line for \u2014 the options it holds, in order, rather than every option. Its options are among the title\'s |\n| `under` | alias | no | The child\'s one-link to a document that covers its rows (an invoice over its fee lines), whose many-link points back and which links to this record: each document stands as a heading over the lines it covers; a filled line no document covers says so on its own row with a make for one document over it, and two or more waiting take a combined make in the block\'s heading. Never also a rows block of the document |\n| `filters` | list of (alias \\| [Tiered filter](#tiered-filter)) (at most 3) | no | The child\'s fields the reader narrows the block\'s rows by, as a register\'s `filters` \u2014 none to 3, each a field its rows show (a column, or a part of the row), its status among them where the business narrows by it \u2014 never on a task list, whose status chips narrow it |\n| `search` | list of alias (at least one) | no | The child\'s fields the block\'s search box matches (a link by its row\'s title), a pasted list line by line; absent, the block has no search box |\n| `group` | alias | no | The child\'s field the block\'s rows open grouped by, as a register\'s `group` \u2014 the reader\'s grouping starting there; absent, ungrouped |\n| `sort` | [Sort key](#sort-key) \\| list of [Sort key](#sort-key) (at least one) | no | The order the block\'s rows open in, as a register\'s `sort` \u2014 within each group where the block groups them; absent, the child\'s first deadline soonest first, else the newest first |\n| `edits` | list of alias (1\u20132) | no | The child\'s fields each line holds as its control, written where the line stands (a quote line\'s sell price) \u2014 a number, a date, words or one option the row\'s save writes, each a column or the figure, at most 2; every other value reads, and the row opens to write it |\n| `remove` | `false` | no | This list offers no Delete on its rows (its open row and \u22EF); they are deleted where another list of them or their own record offers it \u2014 e.g. lines that are a selection of rows kept elsewhere |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Timeline block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `timeline` | alias | yes | A child entity read as a log of dated entries, newest first, with a composer where the app adds entries, each corrected and removed where it stands as a rows block\'s row (entries planned ahead are an `agenda`) \u2014 never the record\'s status history, which `record.history` draws beside the record |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `create` | list of alias (at least one) \\| `false` | no | The child\'s fields asked when a row is added here; absent, its title, the subtitle and figure no default fills, its natural key and every required field \u2014 each a person writes; false, rows are not added here |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Agenda block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `agenda` | alias | yes | A child entity read as planned entries on a time axis: by day, soonest first, each entry with its picture and the day that is today marked. The day is the first date on the child\'s row line (its `records` title or subtitle); within a day entries follow a datetime there, else the first single select after the date \u2014 its options in the day\'s order |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `columns` | list of alias | no | The child\'s facts read on an entry\'s line after its title \u2014 never what its line already draws (subtitle, image, status, figure) |\n| `create` | list of alias (at least one) \\| `false` | no | The child\'s fields asked when a row is added here; absent, its title, its picture, the subtitle and figure no default fills, the block\'s columns, its natural key and every required field \u2014 each a person writes; false, rows are not added here |\n| `start` | alias | no | The record\'s date that is the first day: each day\'s heading counts from it (Day 1, Day 2); absent, the weekday and the date alone |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Files block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `files` | list of alias (at least one) | yes | Files fields of this record, read as pictures and documents |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Text block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `text` | alias | yes | A long text field read as prose |\n| `title` | text | no | The block\'s heading; absent, the child entity\'s or the field\'s own label |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Metric block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `metric` | alias | yes | The entity whose rows are counted, or summed, into one number |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `target` | number | no | The number it is read against, where no `limits` bounds its value (a bounded value is read against the sum of its bound) |\n| `better` | `"up"` \\| `"down"` | no | Which way its change over the recent periods `over` reads is good; absent, a sum\'s rise and a count kept by `where` falling |\n| `label` | text | yes | What the reading is, in the reader\'s words |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Breakdown block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `breakdown` | alias | yes | The entity whose rows are split into parts |\n| `by` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) each row is counted under |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the `by` field\'s label |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Trend block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `trend` | alias | yes | The entity whose rows are counted, or summed, per period |\n| `over` | alias | yes | The date each row falls on \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link |\n| `ahead` | `true` | no | Counts forward: the current period first, then the ones after it, over the rows dated today or later (arrivals by their ETA); absent, the periods up to today |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the value\'s label, else the entity\'s |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n#### Pivot block\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `pivot` | alias | yes | The entity whose rows are counted, or summed, in a grid |\n| `rows` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) down the side |\n| `columns` | alias | yes | The single select, one link, member or yes/no (stored, a formula, or a lookup of one through one-row links) across the top |\n| `value` | alias | no | A number field summed over the rows; absent, the rows are counted |\n| `where` | map of alias \u2192 (list of alias (at least one) \\| boolean \\| `"me"`) | no | Only the rows whose select holds one of these options, whose yes/no (stored, or a formula) is this value \u2014 each its own, or looked up through one-row links \u2014, or whose member field holds the reader (`"me"`) \u2014 every entry ANDed |\n| `tab` | alias | no | On a register\'s band, the tab whose rows it reads, whichever tab is open; absent, the open tab\'s |\n| `over` | alias | no | The date that places a row in time \u2014 its own (stored, or a formula), or its parent\'s through a lookup over a one-link: a dashboard\'s period windows the rows by it (a reading without one reads the rows as they stand now), and a metric reads its recent periods beside the number |\n| `label` | text | no | What the reading is, in the reader\'s words; absent, the two fields\' labels |\n| `via` | alias | no | The child\'s link to this record, where it has more than one |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | Shown only while each named select of the record holds one of these options, and each named yes/no (stored, or a formula) is this value |\n\n<!-- generated:end apps-blocks -->\n\n<!-- generated:start rules-block -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `block.child-link` | A block reads a child linked to the record; `via` names the link where the child links more than once. |\n| `block.column-drawn` | A child block\'s column never names what the child\'s row draws \u2014 its title, subtitle, image, status, figure, or the bound its figure\'s meter reads against \u2014 nor its link back to the record, and names a field once; an `expect` block\'s figure is its filled-in-place column. |\n| `block.title-back` | Where a child\'s title is its link back to the record a block lists it under, its first other subtitle names it there \u2014 a text, a code, a select, a link or a member, never a number or a date. |\n| `block.where` | A rows block\'s `where` names single selects the child requires, by options they hold; one held at a single option is never also a column. |\n| `block.under` | `under` names the child\'s one-row link to a document entity that pairs a many-link back and is read under this record by its one link; the lines\' columns never read the document (its heading does) nor hold long text. |\n| `block.under-once` | Documents drawn over their lines (`under`) are never listed again as a block of their own. |\n| `block.edits` | A rows block\'s `edits` name at most two of the child\'s columns or its figure that the row\'s own save writes \u2014 a number, a date, a few words or one option \u2014 never on an `expect` block, whose lines are filled in place already. |\n| `block.remove` | A rows block\'s `remove: false` hides the Delete its rows would offer, so it stands only where the app writes those rows. |\n| `block.narrow` | A rows block\'s `filters`, `search`, `group` and `sort` follow the register\'s rules over the child\'s rows, its status among them but on a task list (its chips); never on the link back to the record or a select its `where` holds at one option, never on an `expect` block, and an `under` block is grouped by its documents. |\n| `block.expect` | `expect` names the child\'s title \u2014 a single select or a one-row link a person writes, never the link back \u2014 on a child added in the block; the block\'s `columns` name at least one field a person fills in place, and its `create` takes the file where the child is pictured by one. |\n| `block.expect-fills` | An expected line is made from its key and its first filled column, so every other field the child requires has a default, a start or a `default_from`, or is read first. |\n| `block.expect-of` | A block\'s `of` needs `expect` on a select, and names the record\'s multi-select whose every option is one of the title\'s. |\n| `block.agenda` | An agenda\'s child names a date on its row line (`records` title or subtitle); `start` is a date of the record. |\n| `block.timeline` | A timeline\'s child holds a date to place its entries by. |\n| `block.field-kind` | A files block names files fields of the record, and a text block a text field. |\n| `block.read-scope` | A child read under a record whose rows a `read_scope` narrows states its own \u2014 a row rule is not inherited, save the status history\'s, which takes its record\'s. |\n| `block.agenda-note` | *Noted, never refused:* Rows each on a day and within it (at an hour, in a part of the day) listed as a table: an `agenda` draws them by day. |\n| `block.under-note` | *Noted, never refused:* Rows holding a paper that cover another block\'s lines, listed apart with no add of their own stated: `under` draws them over the lines they cover. |\n\n<!-- generated:end rules-block -->\n\nA `rows`, `agenda` or `timeline` block reads a child entity through its link to the\nrecord \u2014 `via` names it where the child links more than once. A rows block adds rows\n(asking the child\'s title, its picture, the block\'s columns and its required fields)\nand opens each in a drawer. An `agenda` draws planned entries by day, soonest first:\nthe first date on the child\'s row line is the day, a datetime there or the first single\nselect after the date orders a day, and `start` \u2014 the record\'s date \u2014 is day 1. `under`\nnames the child\'s one-link to a document covering its lines (an invoice over its fees,\nits many-link paired back, linking to the record): each document heads the lines it\ncovers, the uncovered lines first \u2014 the record never lists the documents again as a\nblock of their own. A filled line no document covers says so on its own row, where one\npress makes a document over that line alone, its figure starting at the line\'s amount;\nwhere two or more wait, the block\'s heading makes one over those ticked in its dialog.\nA timeline reads its child\'s first date as the moment and its member field as who, with\na composer where the app writes it. An agenda\'s or a timeline\'s entry with no day yet is\na plan, listed first and dated in place. `create` names the child\'s fields an add here asks \u2014\nthe link to this record is filled, never asked \u2014 and `false` adds none. `expect`\nnames the child\'s title where the record holds one row per value of it \u2014 a select\'s\noptions, or the rows a link to a catalog may point at (`options_where`): every value\nis a line, one not yet filled a quiet line whose first column makes its row \u2014 or, where\nthe child is pictured by a file a person brings (its `records` `image`), a placeholder\nnaming the paper whose upload makes the row with its file \u2014 the add\noffers only the values not yet held, and every write path refuses a second row of one\nvalue under one record. A field that starts from the catalog row (`default_from`)\nshows that value as its hint, taken with one press. `where` keeps only the child rows\nwhose single select holds one of its options \u2014 read so on the server, a row added\nthere holding them, its lines expected once per value among them (one leg\'s fees\nbeside the other\'s), and its foot totalled by the record\'s sum narrowed alike. A `metric`, `breakdown`, `trend`\nor `pivot` block is a reading (\xA7 Readings) of a child entity\'s rows under this record,\nread only \u2014 `via` names the link where the child has more than one.\n\n### Tasks\n\nAn entity whose `records` states `"task": true` \u2014 its status a stored select with `closed` \u2014 is\nwork someone finishes. Every table of its rows draws it alike \u2014 a rows block of the record it\nbelongs to, its own register, the rows filed under one of its rows (its steps) \u2014 each row led by a\nring. Ticking the ring moves the row to a closed option by the one write the app already has for\nthat move \u2014 the act of that entity setting a closed option (its first preferred), offered on an\nopen row and asking nothing, else its own save where people write the status \u2014 stamping what\nthat act stamps and appending the status history. Unticking runs the act moving a closed row\nback (its `when` holding a closed option), else the save back to the status\'s default. A move no\nwrite reaches leaves the ring disabled, never hidden, and the check notes it. The status is moved\nin place on the row by the same moves; every other field is edited where the row opens. A\nfiles column reads on a task\'s line as how many files it holds. An act `of` the child with\n`on: "rows"` completes several at once: the list\'s heading offers to select rows, and the act\nruns on those picked. A block with `expect` or `under` draws its own lines, never rings.\n\n```json\n{\n  "entities": [\n    {\n      "alias": "project",\n      "label": "Projects",\n      "singular": "Project",\n      "fields": [\n        { "alias": "name", "label": "Name", "type": "text", "required": true },\n        { "alias": "lead", "label": "Lead", "type": "select_member" }\n      ]\n    },\n    {\n      "alias": "task",\n      "label": "Tasks",\n      "singular": "Task",\n      "fields": [\n        { "alias": "title", "label": "Title", "type": "text", "required": true },\n        {\n          "alias": "project",\n          "label": "Project",\n          "type": "select_record_link",\n          "target_entity": "project",\n          "cardinality": "one",\n          "required": true\n        },\n        { "alias": "assignee", "label": "Assignee", "type": "select_member" },\n        {\n          "alias": "status",\n          "label": "Status",\n          "type": "select",\n          "required": true,\n          "options": [\n            { "alias": "todo", "label": "To do", "color": "slate" },\n            { "alias": "done", "label": "Done", "color": "green" }\n          ],\n          "default": ["todo"]\n        },\n        { "alias": "due", "label": "Due", "type": "date", "format": "date" },\n        { "alias": "done_on", "label": "Done on", "type": "date", "format": "date" }\n      ]\n    }\n  ],\n  "records": {\n    "project": { "title": "name" },\n    "task": {\n      "title": "title",\n      "subtitle": ["assignee"],\n      "status": { "field": "status", "closed": ["done"] },\n      "due": ["due"],\n      "task": true,\n      "starts": { "assignee": "me" }\n    }\n  },\n  "apps": [\n    {\n      "alias": "projects",\n      "name": "Projects",\n      "entity": "project",\n      "record": {\n        "sections": [{ "title": "Work", "fields": ["lead"], "blocks": [{ "rows": "task", "columns": ["due"] }] }]\n      },\n      "acts": [\n        { "alias": "complete", "label": "Complete", "of": "task", "when": { "status": ["todo"] }, "set": { "status": "done", "done_on": "now" } },\n        { "alias": "reopen", "label": "Reopen", "of": "task", "when": { "status": ["done"] }, "set": { "status": "todo", "done_on": null } },\n        { "alias": "complete_all", "label": "Complete", "of": "task", "on": "rows", "when": { "status": ["todo"] }, "set": { "status": "done", "done_on": "now" } }\n      ]\n    },\n    {\n      "alias": "my_tasks",\n      "name": "My tasks",\n      "entity": "task",\n      "register": {\n        "opens": { "assignee": "me" },\n        "readings": [{ "metric": "task", "where": { "status": ["todo"] }, "label": "Open" }]\n      },\n      "record": { "door": "drawer" },\n      "acts": [\n        { "alias": "finish", "label": "Finish", "when": { "status": ["todo"] }, "set": { "status": "done", "done_on": "now" } },\n        { "alias": "undo", "label": "Undo", "when": { "status": ["done"] }, "set": { "status": "todo", "done_on": null } }\n      ]\n    }\n  ]\n}\n```\n\n### Acts\n\n```jsonc\n"acts": [{\n  "alias": "gate_out", "label": "Gate out",\n  "when": { "stage": ["in_yard"] }, "requires": ["release", "seal"],\n  "asks": ["seal", { "input": "note", "label": "Note", "type": "long_text" }],\n  "set": { "stage": "gone", "left_on": "now", "left_by": "me", "remark": "input:note" },\n  "confirm": true\n}]\n```\n\n<!-- generated:start apps-acts -->\n\n#### Act\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `alias` | alias | yes | The act\'s name within its app \u2014 its workflow is `act_<alias>` |\n| `label` | text | yes | The verb, as the reader says it |\n| `on` | `"record"` \\| `"rows"` \\| `"view"` | no | `rows` runs on the rows ticked in the register \u2014 with `of`, on the child rows ticked together in a rows block of the record; `view` on every row the register shows (offered while the view is narrowed to its `when`; it states no `requires`); absent, on one record (its page and its row\'s menu) |\n| `of` | alias | no | A rows block\'s child entity the act works on: offered on each child row \u2014 or, `on: "rows"`, on the rows ticked together in the block \u2014 its conditions and its write that row\'s |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | The act works only while each named select holds one of these options, and each named yes/no (stored, or a formula) is this value |\n| `requires` | list of alias (at least one) | no | Fields that must be filled first, each drawn where the act stands (its section\'s fields, a block\'s, or the act\'s asks \u2014 never the header alone); a blocked act names each one missing |\n| `recommends` | list of alias (at least one) | no | Fields the act runs without and reads when filled: while one is empty, the act says what it will leave blank |\n| `asks` | list of (alias \\| [Act input](#act-input)) (at least one) | no | What the reader states when pressing it \u2014 fields of the record (written by the act) or inputs |\n| `set` | map of alias \u2192 (text \\| number \\| boolean \\| `null` \\| [Set formula](#set-formula)) | no | What the act writes: an option alias, a value, `"now"`, `"me"` or `"input:<name>"` \u2014 each the act\'s outcome, read-only elsewhere; or `{ "formula": \u2026 }`, computed over each acted row as it stands when the act runs and written then (a sell price at cost and markup): a starting value, which a person may change after and the act never recomputes |\n| `workflow` | alias | no | An authored workflow (src/workflows/<alias>.ts) the act runs after its checks, for what `set` cannot say |\n| `template` | alias | no | A document template the act makes a file from \u2014 an html one made a PDF, an excel one a workbook; over several rows, one file of them all, the rows listed under the entity\'s alias |\n| `templates` | list of [Act template](#act-template) (at least 2) | no | Several papers the act makes into `into` (a case\'s forms), instead of one `template`: drawn where the act stands as a list of its papers \u2014 each made one as its file, each not yet made as a placeholder naming it \u2014 the reader ticks which to make, and one press makes those, each replacing the paper its template made before |\n| `into` | alias | no | The files field of the one record the made document is kept in \u2014 remade, it replaces the paper its template made before, never a file a person put there |\n| `intake` | alias | no | A child the record lists in a rows block whose rows are its papers: the press takes papers, an agent reads them, and each is filed as a row of this child \u2014 its kind the child\'s title, its file in the child\'s files field |\n| `record` | [Act record](#act-record) | no | The press records a call, visit or meeting through the host \u2014 Stop ends it \u2014 and files it as a new row of a child the record lists: its audio, its screen where captured, its transcript |\n| `fills` | list of text (at least one) | no | With `intake`, what the papers read may fill: a field of the record, `<link>.<field>` on the row a required one-row link of the record names, or a child whose rows the papers add \u2014 shown before and after, and saved where it differs. With `record`, fields of the new row an agent fills from the transcript, saved as they come |\n| `confirm` | `true` | no | The press asks first; the question lists every active warning |\n| `danger` | `true` | no | The act destroys or cannot be undone |\n\n#### Act input\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `input` | alias | yes | A value the act asks for that is not a field of the record |\n| `label` | text | yes | What the reader is asked, in their words |\n| `type` | `"text"` \\| `"long_text"` \\| `"number"` \\| `"date"` \\| `"select"` \\| `"link"` \\| `"member"` | yes | What the reader states |\n| `options` | list of [Select option](#select-option) (at least one) | no | The choices a `select` input offers, one picked \u2014 written into a select holding the same option aliases |\n| `entity` | alias | no | The entity a `link` input picks one row of |\n| `required` | `true` | no | The act is refused without it |\n| `default` | alias | no | A field of the row whose value the input starts from, still changed at will |\n\n#### Act template\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `template` | alias | yes | A document template the act makes a paper of, kept in `into` \u2014 an html one made a PDF, an excel one a workbook |\n| `when` | map of alias \u2192 (list of alias (at least one) \\| boolean) | no | The paper starts ticked while each named select of the record holds one of these options and each named yes/no (stored, or a formula \u2014 how a multi-select is tested: `includes({needs}, {needs:x})`) is this value \u2014 a suggestion the reader changes, never a refusal; absent, it starts ticked |\n\n#### Set formula\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `formula` | text | yes | A formula over the acted row\'s fields, `{alias}` each, read as the entity\'s own formulas read them |\n\n#### Act record\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `into` | alias | yes | A child the record lists in a timeline or rows block, linking back to it by a single link: each recording is filed as a new row of it |\n| `audio` | alias | yes | The child\'s files field the recording\'s audio is kept in |\n| `transcript` | alias | yes | The child\'s text field the transcript is kept in, a speaker\'s turn per line |\n| `video` | alias | no | The child\'s files field the screen is kept in, where the recording captured it |\n| `at` | alias | no | The child\'s date field stamped with the moment the recording started |\n| `by` | alias | no | The child\'s member field set to the person who recorded |\n\n<!-- generated:end apps-acts -->\n\n<!-- generated:start rules-act -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `act.set-not-asked` | A field an act `set`s \u2014 an option, a value, `now`, `me`, an input \u2014 is the act\'s outcome: read-only everywhere else and never asked by an add (`create`); a required one takes a `default`. A field an act computes by a `formula` is a starting value, which a person may change after. |\n| `act.set-formula` | `set: { <field>: { formula } }` reads fields of the acted row and computes what the field holds \u2014 a number, a date, text or a yes/no, typed as the entity\'s own formulas are \u2014 never the status or a milestone; a bound a write rule holds the field to is checked on the computed value as the act runs. |\n| `act.of` | An act\'s `of` names a child the record lists in a rows block; it works on the one child row it is pressed on \u2014 or, `on: "rows"`, on the rows ticked together where the record lists that child as tasks \u2014 never on the rows in view. |\n| `act.writes-line-key` | An act never writes the link or the key naming an expected line under its record \u2014 a line\'s key is stated by filling it. |\n| `act.makes-or-runs` | An act makes a document (`template`, `templates`) or runs an authored `workflow`, never both \u2014 the workflow makes what it needs. |\n| `act.view` | An act over every row in view (`on: "view"`) writes (`set`), makes a document or runs a workflow, and states no `requires`. |\n| `act.requires-drawn` | Every field an act `requires` is drawn where the act stands \u2014 its section\'s fields, a block\'s, its asks, or an unstaged section\'s where its own is unstaged \u2014 never the header alone. |\n| `act.requires-written` | A field an act requires that only an act writes is written by an act offered together with it, or asked by the act itself. |\n| `act.recommends` | A field an act `recommends` is not also in its `requires`. |\n| `act.set` | `set` writes each field a value it holds \u2014 an option alias, a number, a yes/no, a text, `"now"` on a date, `"me"` on a member, `"input:<name>"` of an input the act asks of the same kind \u2014 or clears an optional one with `null`. |\n| `act.set-milestone` | An act stamps a milestone, never clears one \u2014 unticking clears it and every later one. |\n| `act.into` | `into` is a files field of the one record the act is pressed on, beside its `template` or `templates`. |\n| `act.templates` | `templates` names each template once, kept in `into`, on one record pressed alone \u2014 never beside `template`, `asks`, `of` or an `on` over several rows. |\n| `act.history-copy` | What a status move asks is copied onto the history\'s field of the same name, which holds the same kind of value. |\n| `act.intake` | `intake` names a child the record lists in a rows block that expects its title \u2014 a single select, the paper\'s kind \u2014 and is narrowed by no `where`, holding exactly one files field and needing nothing an added line does not fill; the act runs on one record, states `fills`, and states nothing but its `label`, `when` and `requires` beside them. |\n| `act.record` | `record` names a child the record draws in a timeline block or a rows block with no `expect`, `under` or `where`, linking back by one single link, whose row nothing requires beyond what the recording writes: `audio` and `video` its files fields, `transcript` a text field, `at` a date, `by` a member field, each a field of its own; the act runs on one record and states nothing but its `label`, `when`, `requires` and `fills` beside it. |\n| `act.fills` | `fills` names each once, only beside `intake` or `record`. Beside `record`, each is a field of the recording\'s row that the recording itself does not write. Beside `intake`: a field of the record, `<link>.<field>` on the row a required one-row link of the record names, or a child the record adds rows of in a rows block with no `expect`, `under` or `where` \u2014 its rows filled in the fields that block adds them with, among them every field an added row cannot be made without. Each field filled is one a person writes holding text, a number, a date, a yes/no or options, never a status, a milestone or a field an act writes. |\n| `act.fills-drawn` | *Noted, never refused:* A field `fills` writes that the record draws nowhere: the review shows the change, the record does not. |\n| `act.fills-new` | *Noted, never refused:* A child `fills` adds rows of, whose natural key the papers cannot state: every row read is added, so the same papers read twice list them twice. |\n| `act.input` | An input has a name of its own \u2014 never another ask\'s, a field\'s, or the record input its workflow takes \u2014 `options` exactly when it is a select, `entity` exactly when it is a link, and a `default` field holding what it states. |\n\n<!-- generated:end rules-act -->\n\nAn act whose `when` does not hold is not offered \u2014 each select named holding one of its\noptions, each yes/no named (stored, or a formula: a period that has ended) its `true` or\n`false`; every one that holds stands at the\nfoot of the section naming it in `acts` \u2014 a correction in that section heading\'s \u22EF, one\nof a child row on its row (a correction in the row\'s \u22EF). An act\'s `requires` are fields\nits section draws \u2014 its `fields`, a block\'s, the act\'s `asks`, or those of another section\nwith no `at` where its own has none; one shown only in the header or a staged section\nelsewhere is refused. One whose `requires` are\nempty is offered disabled, naming each; one whose `recommends` are empty names what\nit will leave blank and still presses; one a standing check blocks is offered\ndisabled in the check\'s words. An input\'s `default` is the row\'s field it starts from. The generated `act_<alias>` workflow re-checks all three on the\nserver, writes `set` and what was asked, and appends the status history where the\nact moves the status \u2014 each thing it asked copied onto the history row where the\nhistory has a field of the same name. `template` makes a document from the row and\nkeeps it in `into`; over several rows it makes one document of them all, the rows\nlisted under the entity\'s alias, and hands it back. `templates` instead names a set of\npapers kept in `into`, listed where the act stands \u2014 each made one as its file, each\nnot made yet as a placeholder \u2014 those whose `when` holds ticked to start; the press\nmakes the ticked ones (sent in `templates`), each replacing the file its template made\nbefore (the file whose `document_template_id` is that template \u2014 never a file a person\nput there), and the set downloads as one archive (`archive_<alias>`). A field an act writes is read-only everywhere else, never asked by an add \u2014 a required one takes a `default`. A `select` input offers its own options and is written into\na select holding the same option aliases; a `link` input picks one row of its `entity`\nand a `member` input one person, each written into a field of its kind. A field an act\nboth `requires` and `asks` never disables the press \u2014 the act asks it, required.\n\n`on: "view"` runs on every row the register shows \u2014 its search, status and filters \u2014\neach row checked before any is written. `of` names a rows block\'s child entity: the\nact is offered on each child row (its menu and its drawer), its `when`, `requires`,\n`set` and checks are the child\'s, it runs on that row, and a check of the record that\nlocks the child rows locks it too. With `on: "rows"` it runs on the child rows ticked\ntogether in the record\'s task list (\xA7 Tasks) \u2014 every row checked before any is written;\nit is refused where the record lists no tasks of that child.\n\n`intake` reads papers: the press takes files, an agent (`act_<alias>` among the app\'s\nagents) reads them, and each is filed as the record\'s line of its kind in the named\nchild \u2014 that child\'s title \u2014 or a new line, its file in the child\'s one files field.\nWhat they state of each field `fills` names is shown beside what the row holds; the save\nwrites only what differs \u2014 the record\'s fields, `<link>.<field>` on the row a required\none-row link names, a child\'s rows (one found by the child\'s `natural_key` changed, else\nadded) \u2014 each refused as its own save is, and nothing written while one refuses.\n\n```jsonc\n{ "alias": "read_papers", "label": "Read papers", "intake": "customer_paper", "fills": ["phone", "contact.email", "branch"] }\n```\n\n### Checks\n\n```jsonc\n"checks": [{ "field": "release_warning" }, { "field": "unpaid", "blocks": ["gate_out"] }, { "field": "locked", "blocks": ["edit"] }]\n```\n\n<!-- generated:start apps-checks -->\n\n#### Check\n\n| Key | Type | Required | Meaning |\n|---|---|---|---|\n| `field` | alias | yes | A yes/no or text formula of the record (or of the child `of` names): true or non-empty means the check stands; its label is its short name on a row\'s line, and a text formula\'s words are the sentence the record and a tooltip say |\n| `of` | alias | no | A rows block\'s child entity this check is a formula of: standing on a child row, it refuses what it blocks of that row |\n| `blocks` | `"all"` \\| list of (alias \\| `"edit"` \\| `"delete"`) (at least one) | no | Acts, "edit" (the saves and the Delete), "delete" (the Delete alone) or "all" that the standing check refuses; absent, it only warns |\n| `resolve` | alias | no | An act of this app, on the rows the check stands on, that clears it: the check\'s line links to the act where it stands, and the act keeps its own conditions |\n\n<!-- generated:end apps-checks -->\n\n<!-- generated:start rules-check -->\n\n#### Rules the check enforces\n\n| Rule | |\n|---|---|\n| `check.field` | A check\'s `field` is a yes/no or text formula of the record, or of the child `of` names. |\n| `check.of` | A check\'s `of` names a child the record lists in a rows block. |\n| `check.not-placed` | A check\'s field is never also placed on the record \u2014 the line under the header says it. |\n| `check.blocks` | A check of the record blocks its acts, `"edit"`, `"delete"` or `"all"`; a check of a child blocks that row\'s saves, its Delete, the acts `of` that child, or all \u2014 never the record\'s acts. |\n| `check.resolve` | `resolve` names an act of this app on the rows the check stands on, pressed on one row, not refused by the check, and drawn as a button \u2014 never a correction. |\n| `check.restates-meter` | A warning reading a gated meter\'s figure against its bound or pass mark is refused \u2014 the meter draws it. |\n\n<!-- generated:end rules-check -->\n\nA check is a yes/no or text formula of the record: it stands while true or\nnon-empty, and a text formula\'s words are what the reader sees. Without `blocks`\nit warns; with them it refuses the acts named, `"edit"` the record\'s own saves (and\nits Delete), `"delete"` its Delete alone, or `"all"` \u2014 on the server, in every write it\nnames. A check `of` a rows block\'s child stands on each child row: it refuses that\nrow\'s saves (`edit`), its Delete (`delete`), the acts `of` that child it names, or\n`all` of them \u2014 never the record\'s acts. A warning reading the figure of a meter that\n`gates` marks against its bound or its pass mark is refused: the meter already draws it.\n\nThe check field\'s `label` is its short name \u2014 "Over budget", "Release expired": a row\'s\nline says it in the check\'s tone (the most severe of several, and how many more), while\nits words whole are the row\'s tooltip and stand under the record\'s header. So label it\nas the reader names the problem, in a few words, and let a text formula say the\nsentence. The compiler records the fields a formula reads: a row drawing each of them\nas a control says nothing of the check on its line (the empty control says it), and a\ncheck with no `resolve` links to the first of them the record draws.\n\n## What a run remembers\n\nThe WORKSPACE remembers what each entity, field, select option, role and\ntemplate alias became here, plus which record each first row landed on and the\nfile each document path was uploaded as. The model file itself holds no live id\n\u2014 it is the portable half, and the same file applies to a demo workspace and to\na customer\'s \u2014 so the join lives where the things it names live, and one model\napplied to two workspaces holds two bindings that know nothing of each other.\n\nIt is the workspace\'s and not the file\'s because a model file is never\ncommitted: memory kept beside it is one author\'s disk, absent for a teammate, on\na second machine or after a delete \u2014 and every one of those goes quietly back to\nbinding by label, which is what grows the second table.\n\nEvery later apply binds through it: it takes the remembered id first and falls\nback to a label only for an alias nothing has bound \u2014 a field you have just\nadded, or a workspace nothing has applied this model to. That is what makes a\nrelabel on EITHER side a rename rather than one thing the workspace lacks and\none the model lacks: `apply` binds the thing it has always meant and reports the\nmove \u2014 which side is right is yours to decide, not a reason to refuse the run.\n\nA bound target the workspace no longer holds IS a refusal, by name: re-binding\nto whatever carries that label today is how the model comes to point at\nsomebody else\'s table. `lotics run restore_table` puts a deleted table back.\n\n`lotics model pull` writes a workspace that already works as a model file \u2014 the\nstarting point for another business\'s model, never a source of truth: it carries\none business\'s words and stops describing that workspace the moment either\nchanges.\n\n## A complete model\n\n```json\n{\n  "entities": [\n    {\n      "alias": "customer",\n      "label": "Customers",\n      "singular": "Customer",\n      "fields": [\n        { "alias": "name", "label": "Name", "type": "text", "required": true },\n        { "alias": "logo", "label": "Logo", "type": "files" },\n        {\n          "alias": "tier",\n          "label": "Tier",\n          "type": "select",\n          "options": [\n            { "alias": "standard", "label": "Standard", "color": "slate" },\n            { "alias": "gold", "label": "Gold", "color": "amber" }\n          ],\n          "default": ["standard"]\n        },\n        {\n          "alias": "orders",\n          "label": "Orders",\n          "type": "select_record_link",\n          "target_entity": "order",\n          "cardinality": "many",\n          "sync_both_ways": true,\n          "paired_field_alias": "customer",\n          "display_field_aliases": ["code"]\n        },\n        {\n          "alias": "total_ordered",\n          "label": "Total ordered",\n          "type": "rollup",\n          "source_field_alias": "orders",\n          "aggregate_option": { "operation": "sum", "field_key": "amount" }\n        }\n      ],\n      "views": [\n        {\n          "alias": "gold",\n          "label": "Gold customers",\n          "filters": {\n            "node_type": "condition",\n            "type": "select",\n            "field_key": "tier",\n            "operator": "has_any_of",\n            "value": ["gold"]\n          },\n          "sort": [{ "field_key": "name", "order": "asc" }]\n        }\n      ]\n    },\n    {\n      "alias": "order",\n      "label": "Orders",\n      "singular": "Order",\n      "fields": [\n        { "alias": "code", "label": "Order no.", "type": "text", "unique": true },\n        { "alias": "placed_on", "label": "Placed on", "type": "date", "format": "date" },\n        {\n          "alias": "amount",\n          "label": "Amount",\n          "type": "number",\n          "format": "currency",\n          "currency": "VND"\n        },\n        {\n          "alias": "total",\n          "label": "Total with VAT",\n          "type": "formula",\n          "formula": { "expression": "{amount} * 1.1", "format": "currency", "currency": "VND" }\n        },\n        {\n          "alias": "customer",\n          "label": "Customer",\n          "type": "select_record_link",\n          "target_entity": "customer",\n          "cardinality": "one",\n          "sync_both_ways": true,\n          "paired_field_alias": "orders",\n          "display_field_aliases": ["name"]\n        },\n        { "alias": "note", "label": "Note", "type": "text" }\n      ]\n    }\n  ],\n  "roles": [{ "alias": "sales", "label": "Sales" }],\n  "records": {\n    "customer": { "title": "name", "image": "logo", "party": "organization", "figure": "total_ordered" },\n    "order": { "title": "customer", "subtitle": ["code", "placed_on"], "figure": "amount", "starts": { "placed_on": "today" } }\n  },\n  "apps": [\n    {\n      "alias": "customers",\n      "name": "Customers",\n      "entity": "customer",\n      "register": {\n        "columns": ["tier"],\n        "readings": [{ "breakdown": "customer", "by": "tier", "value": "total_ordered" }]\n      },\n      "record": {\n        "sections": [\n          { "title": "Account", "fields": ["tier"] },\n          { "title": "Orders", "blocks": [{ "rows": "order", "columns": ["total"], "create": ["code", "amount"] }] }\n        ]\n      }\n    },\n    {\n      "alias": "orders",\n      "name": "Orders",\n      "entity": "order",\n      "register": {\n        "filters": ["customer"],\n        "create": ["code", "customer", "placed_on"],\n        "readings": [{ "trend": "order", "over": "placed_on", "value": "amount" }]\n      },\n      "record": { "door": "drawer" }\n    }\n  ],\n  "rows": {\n    "customer": [\n      { "ref": "acme", "fields": { "name": "Acme Trading", "tier": "gold" } },\n      { "ref": "bluebird", "fields": { "name": "Bluebird Foods", "tier": "standard" } }\n    ],\n    "order": [\n      {\n        "ref": "so_1001",\n        "fields": {\n          "code": "SO-1001",\n          "placed_on": "@month-start+2",\n          "amount": 4200000,\n          "customer": "customer:acme"\n        }\n      },\n      {\n        "ref": "so_1002",\n        "fields": {\n          "code": "SO-1002",\n          "placed_on": "@today-3",\n          "amount": 1150000,\n          "customer": "customer:bluebird"\n        }\n      }\n    ]\n  }\n}\n```\n\nEach app of this file, as its reader will see it:\n\n```\nApp customers \u2014 "Customers" over Customers (customer)\n  Register \u2014 table (default), newest first (default)\n    row      [Logo] \xB7 Name \xB7 figure Total ordered\n    columns  Tier\n    filters  \u2014\n    readings "Tier" \u2014 Total ordered summed per Tier, over the rows in view (default)\n    add      Name (default)\n  Record \u2014 a drawer (default)\n    header   image Logo \xB7 title Name \xB7 figure Total ordered\n    checks   \u2014\n    header \u22EF Delete\n    sections 1. "Account"\n                fields Tier\n             2. "Orders"\n                block  Orders (default) \u2014 rows of Orders through Customer; columns Total with VAT; add asks Order no., Amount\n    thread   \u2014\n    history  \u2014\n    acts     \u2014\n  Reads Customers, Orders\n\nApp orders \u2014 "Orders" over Orders (order)\n  Register \u2014 table (default), newest first (default)\n    row      Customer \xB7 under it Order no., Placed on \xB7 figure Amount\n    columns  \u2014\n    filters  Customer\n    readings "Amount" \u2014 Amount summed per period by Placed on, over the rows in view (default)\n    add      Order no., Customer, Placed on \u2014 starting Placed on at today\n  Record \u2014 a drawer\n    header   title Customer \xB7 subtitle Order no., Placed on \xB7 figure Amount\n    checks   \u2014\n    header \u22EF Delete\n    sections 1. the record\'s details (default)\n                fields Note\n    thread   \u2014\n    history  \u2014\n    acts     \u2014\n  Reads Orders, Customers\n\n```\n\nEach `(default)` is a value the model left to the system: the door a record opens\nthrough \u2014 a drawer, since neither record has a stage or more than three sections \u2014 the\norder rows open in, what an add asks, and the order\'s one section \u2014 every field a\nperson writes that the header does not already show. The customer\'s orders\nare a block in its "Orders" section, never its own `Orders` link as a field as well:\none fact, one place. An order is titled by its customer and read by its number under\nit; the block names what its add asks, since a subtitle or a figure is never asked by\ndefault. `Total ordered` is a rollup, so it is read and never asked; the\norders app\'s record opens in a drawer, because its rows are worked one after another.\n';
 
 // AGENTS.md
 var AGENTS_default = "# @lotics/cli \u2014 agent index\n\nThe model an agent needs before driving this CLI: which surface answers which question, what the\nconventions are, and where the traps are.\n\n| Read | For |\n|---|---|\n| `lotics --help` | The verb inventory (\xA7 COMMANDS) and global flags. The verb LIST is generated and never stale; the prose beside each verb is hand-written, so where it disagrees with `docs/cli_reference.md`, the reference wins. |\n| `lotics tools` \xB7 `lotics tools <name>` | The agent tool registry and one tool's full JSON Schema. |\n| `lotics docs` \xB7 `lotics docs <area>[/<section>]` | This CLI's references, carried inside it so each describes the binary answering. Capped at a page: a doc that does not fit hands back its opening and the addresses into it, so the next call is smaller than the last. A custom-code app's SDK reference is `node_modules/@lotics/app-sdk/AGENTS.md` inside the app. |\n| `lotics docs model` \xB7 `lotics docs model/<section>` | How to write a `model.json` \u2014 the file a workspace is built from: its tables, how a row of each is recognised (`records`), and the apps stated over them. Every top-level key, every field type with the config it needs, the row format, the rules, and a worked example; complete example models of several trades are listed at `https://lotics.ai/presets/index.json`. `lotics model apply` checks the file (every problem in one run), applies its tables and mints a version of each app; the WORKSPACE remembers what each alias became, so every later apply binds by id and a relabel on either side is a rename it reports rather than a second table it adds. `lotics model pull` goes the other way \u2014 the workspace's model, rebuilt from what owns each part. |\n| [docs/building_an_app.md](./docs/building_an_app.md) | The SEQUENCE \u2014 clarify, model, apply or build, prove, look \u2014 for an app stated in a model and for a custom-code app. Read it once before starting an app. Looking is `lotics run screenshot_app`, then `lotics download` for each PNG. |\n| [docs/cli_reference.md](./docs/cli_reference.md) | Per-command contracts, flags, exit codes, and gotchas \u2014 the detail `--help` compresses. |\n| [docs/data_model.md](./docs/data_model.md) | Tables, their fields, and how they relate \u2014 one fact per column, one entity per table and the NAME-OVERLAP probe that says when a split has broken, one vocabulary wherever values are copied, a copy boundary that accounts for every source field, provenance as a link, a declared natural key, history as rows, and why derived DEPTH costs more than row count; then every field type, its properties, computed fields, and what `update_fields` takes. Separate from building_an_app because every workspace starts with tables and many never get an app. |\n| [docs/filters.md](./docs/filters.md) | The one filter grammar every filter-taking tool, view and rollup reads \u2014 conditions, groups, and the operators per field type. |\n| [docs/workflows.md](./docs/workflows.md) | Writing a workflow body \u2014 triggers, steps, what an expression reads, the helpers, approvals and agent steps, and table lifecycle workflows. |\n| [docs/app_bindings.md](./docs/app_bindings.md) | The queries, workflows and agents an app binds \u2014 the query tree, typed inputs and outputs, and an agent's declaration. |\n| [docs/document_templates.md](./docs/document_templates.md) | Generating PDF/Excel/Word/email from reusable templates. |\n| [docs/knowledge_docs.md](./docs/knowledge_docs.md) | Authoring the workspace facts an agent can't guess; who can read a doc; catalog-then-stage retrieval. |\n| [docs/migration.md](./docs/migration.md) | What to DO when something an earlier CLI wrote to disk no longer matches what it does \u2014 local app projects are gone, and each verb that read one has a replacement. |\n| [README.md](./README.md) | Install, auth, and worked examples. |\n\n## Two surfaces, and the trap between them\n\n**`lotics tools` is not the CLI's capability list.** There are two disjoint surfaces:\n\n- **Tools** (`lotics tools`, `lotics run <tool>`) \u2014 the *agent tool registry*: what an agent, workflow,\n  or automation may call. Workspace data, templates, knowledge, admin.\n- **Commands** (`lotics --help` \xA7 COMMANDS) \u2014 the CLI's *own verbs*: auth and org/workspace scoping,\n  file upload and download, and the four that touch a local file for an app \u2014 `model apply`,\n  `model pull`, `app create --custom` and `app deploy`.\n\nSeveral capabilities exist **only** as commands and appear nowhere in `lotics tools` \u2014 downloading a\nfile is the one most often mistaken for missing. Concluding \"the platform can't do X\" from the tool\nlist alone is a mistake; check both.\n\n**`lotics <verb> --help` prints that verb's entries from \xA7 COMMANDS** (`lotics model --help`,\n`lotics file download --help`); `lotics report --help` prints the report frame. To find out whether\nsomething exists, read `lotics --help` \xA7 COMMANDS \u2014 the whole section, not a narrow grep.\n\n## Conventions that hold across every command\n\n- **Scope is resolved per invocation.** `LOTICS_ORG` / `LOTICS_WORKSPACE` (or `LOTICS_API_KEY`) scope a\n  single call without changing the active org or a directory pin \u2014 the safe way to touch one tenant\n  from a shell serving many. Every command that resolves a workspace echoes its target to **stderr**\n  (`lotics \u2192 <org> / <workspace>`); read it back before trusting a write. Resolution precedence is\n  in README \xA7 Organizations.\n- **A machine with no key can still sign in, and the sign-in never blocks you.** `lotics auth\n  login <email>` prints the page a person opens (also mailed) and the code that page must show,\n  records the request, and EXITS. They press Confirm whenever they get to it; the next command that\n  NEEDS a credential collects the key before doing its own work, so \"sign in\" costs you one command\n  and then re-running what you wanted. Never wrap it in a timeout waiting for a human \u2014 `--wait`\n  exists if you really want one blocking command, and killing that one is safe too (the request\n  survives and the next command claims it). A command run before Confirm exits 1 naming the page and\n  code again; once the 15 minutes are up it says to ask again. `lotics setup` falls into the same\n  flow by itself when the email it was given already has an account: it stops having created\n  nothing, and the SAME command run again carries on.\n- **A credential is either a SIGN-IN or an API KEY, and `logout` treats them differently.** A profile\n  from `auth login` / `auth signup` acts as the person who confirmed it and is theirs \u2014 `lotics auth\n  logout` revokes it server-side, and it lapses on its own after 90 idle days (each use pushes that\n  out). A profile from `auth api-key` holds a key an ADMIN issued. A key created in Settings carries\n  its OWN access \u2014 every app and table, or only the ones chosen on the key, so a listing that comes\n  back short is the key's reach, not a bug \u2014 while a key created FOR a person carries that\n  person's access and dies with their membership. Either is routinely also on a server and on\n  other machines, so logout only forgets it locally and says so; only an admin revokes it. A profile that states no kind (saved before the field existed) is resolved against the SERVER\n  and revoked only if the answer is a sign-in; a bare `--api-key` / `LOTICS_API_KEY` names no\n  profile to remove at all. Nothing is ever revoked on a guess \u2014 between two, the destructive one is\n  wrong. `lotics auth whoami` prints the kind, asking the server when the store cannot say.\n- **A key created in Settings never administers the organization, whatever its access.** The verbs\n  `docs/cli_reference.md` marks *admin only* split in two under a key: `workspace doctor`, which only\n  reads inside a workspace the key reaches, runs as before, while applying or pulling a model\n  (`model apply`, `model pull`, `setup`), managing people, sharing or\n  ownership, creating or deleting a workspace, changing workspace settings, setting credit limits,\n  reading the access log and publishing an app's API answer `403` and name the remedy: an admin signed in, so\n  `lotics auth login <email>` and run it again. A sign-in acts as that person and is refused none of\n  them. Do not retry a `403` with the same credential and do not ask for a wider key \u2014 no answer on\n  the key's own screen grants this.\n- **A 401 names its remedy \u2014 act on the hint, do not retry.** \"This credential expired / was\n  revoked / belongs to a member who is no longer active\" carries the one remedy that ends this\n  credential: run `lotics auth login <email>` for a sign-in, or ask the admin who issued it for a\n  new key. A credential minted before that was recorded carries BOTH, because nothing on the row\n  tells them apart \u2014 so on a box with no browser, take the second. Only an UNRECOGNIZED key gets\n  the generic \"Invalid or disabled API key\", and that one is generic on purpose, so re-sending it\n  teaches nothing. A `reason` rides on the body for a script to branch on, since the code stays\n  `unauthorized` for every 401.\n- **Large payloads bypass `ARG_MAX`** \u2014 `lotics run <tool> @args.json`, or piped stdin behind `-`. A leading `@` is\n  unambiguously a file path (JSON args start with `{`).\n- **stdout is the payload, stderr is the narration.** Progress, status lines, and the target echo go to\n  stderr; the result goes to stdout, so piping stays clean. `--json` switches stdout from the\n  agent-readable summary to the full structured object.\n- **Every tool is invoked one way \u2014 `lotics run <tool>`.** Including the ones that RUN something\n  (`run_app_workflow`, `run_app_agent`, `run_app_query`) and every one that changes an app\n  (`set_app_query`, `set_app_workflow`, `set_app_agent`, `update_app`, `rollback_app`). A command\n  exists only for work that touches a local file.\n- **Every change to an app mints a version of it, and rolling back is the undo.** An apply, a\n  deploy, a single `set_app_*` or `remove_app_*`: each is a new version, and `rollback_app` makes an\n  earlier one current again. It restores the app \u2014 never a table change or a row a workflow wrote,\n  so try a write on a throwaway record.\n- **Exit codes are assertable, and they report the WORK rather than the call.** `lotics run` exits\n  non-zero when a `run_app_workflow` or `run_app_agent` result's own envelope carries a failed\n  `status` (`error`/`failed`/`cancelled`) \u2014 any other tool's top-level status is data and exits 0 \u2014\n  so `lotics run \u2026 && next-step` cannot walk past a refused run; `workspace doctor` exits non-zero on\n  findings. An unrecognized status exits 0 \u2014 the list is an allowlist of failure, so a status added\n  later never turns a working script red \u2014 and a parked run (`awaiting_input`) is not a failure.\n- **An app that PUBLISHES an API turns every later binding write into a release.** Publishing\n  snapshots what the app's queries, workflows and agents promise to callers outside it \u2014 a\n  customer's own site or server, which nobody here can redeploy. From then on an additive change\n  re-snapshots silently and a breaking one is REFUSED, naming each change; the tool's\n  `acknowledge_breaking_api_change` carries it out and snapshots the break as a new contract version.\n- **Exposure is per app, all or nothing** \u2014 a public share or a key reaches every alias an app\n  declares, so what outsiders may call is a second app over the same tables\n  ([docs/building_an_app.md](./docs/building_an_app.md) \xA7 7).\n- **`--print-created` / `--cleanup` on any call that reports `side_effects`.** The first prints the\n  records created plus a paste-ready cleanup plan and what cannot be auto-undone; the second runs\n  those deletes (records only \u2014 never files, integrations or notifications). Neither is a rollback.\n- **Text output is the default and is built for reading**; reach for `--json` only when a field is\n  needed programmatically.\n- **`lotics report '<json>'` is the channel for what nothing else records.** Reach for it\n  when the platform is genuinely missing something (a capability that does not exist \u2014 no\n  command ran), when a success was wrong (exited 0, wrong effect), or when an error did\n  not name the remedy \u2014 not for your own mistakes, which the logs already show.\n  **It is a frame, not a paragraph** \u2014 `{goal, actual, expected?, tried?, wanted?}`, because a log\n  reconstructs what you RAN and never what you WANTED, and that gap is the report. `goal` and\n  `actual` are required; there is no severity or category to pick. The\n  session's commands attach themselves \u2014 do not retype them. Run it bare for the full prompt; a\n  long one rides `@file.json` or an explicit `-` for stdin (bare NEVER reads stdin).\n- **`LOTICS_TELEMETRY=1` correlates a whole session** so the authoring loop's rough edges can be\n  found and fixed. Off by default; set it in the shell profile, not per command (each invocation is\n  its own process). It sends no arguments, no file contents, and no record data \u2014 see README\n  \xA7 Diagnostics.\n\n## Where this CLI is not the answer\n\n- **Editing an app in a local directory.** An app stated in a model is changed by applying the\n  model again; its bindings through their `set_app_*` tools; a custom-code app's code by deploying\n  its directory again. Nothing reads a local copy of a live app back.\n- **OAuth connections.** Attaching a connected account is web-only; the CLI can list them.\n";
@@ -40314,11 +41538,11 @@ function parseCreatedRecords(value) {
   const groups = [];
   for (const entry of value) {
     if (!entry || typeof entry !== "object") continue;
-    const tableId = entry.table_id;
+    const tableId2 = entry.table_id;
     const recordIds = entry.record_ids;
-    if (typeof tableId !== "string" || !Array.isArray(recordIds)) continue;
+    if (typeof tableId2 !== "string" || !Array.isArray(recordIds)) continue;
     const ids = recordIds.filter((id) => typeof id === "string");
-    if (ids.length > 0) groups.push({ table_id: tableId, record_ids: ids });
+    if (ids.length > 0) groups.push({ table_id: tableId2, record_ids: ids });
   }
   return groups;
 }