@ai-matrx/records 0.11.0 → 0.17.0

package/dist/react/index.d.ts

@@ -382,11 +382,96 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_item_type text, p_item_id uuid";
     readonly returns: "TABLE(container_type text, container_id uuid, conveys_max permission_level)";
     readonly security: "definer";
+}, {
+    readonly name: "choice_census";
+    readonly args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "choice_field_map";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_filter_normalize";
+    readonly args: "p_map jsonb, p_filter jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_key_for";
+    readonly args: "p_organization_id uuid, p_options_table_id uuid, p_title text, p_exclude uuid DEFAULT NULL::uuid";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_key_of";
+    readonly args: "p_field jsonb, p_token text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_options";
+    readonly args: "p_organization_id uuid, p_options_table_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_render";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_doc jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_render_groups";
+    readonly args: "p_map jsonb, p_groups jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_render_note";
+    readonly args: "p_field jsonb, p_value jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_render_value";
+    readonly args: "p_field jsonb, p_value jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_slug";
+    readonly args: "p_word text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_synonyms";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_token text";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_synonyms_in";
+    readonly args: "p_map jsonb, p_token text";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "choice_words";
+    readonly args: "p_field jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
 }, {
     readonly name: "client_write_grants";
     readonly args: "";
     readonly returns: "TABLE(role_name text, object_name text, privilege text)";
     readonly security: "invoker";
+}, {
+    readonly name: "comment_mention_deliver";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_table_id uuid, p_comment_id uuid, p_recipient uuid, p_author_name text, p_record_title text, p_body text";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "comment_thread";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_include_resolved boolean DEFAULT false";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "comment_write";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_body text, p_anchor jsonb DEFAULT '{}'::jsonb, p_parent_comment_id uuid DEFAULT NULL::uuid, p_mentions uuid[] DEFAULT NULL::uuid[]";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "computed_provenance";
     readonly args: "p_organization_id uuid, p_record_id uuid";
@@ -422,6 +507,61 @@ declare const STORE_DOORS: readonly [{
     readonly args: "";
     readonly returns: "TABLE(token text, schema_name text, table_name text)";
     readonly security: "invoker";
+}, {
+    readonly name: "dashboard_block_normalize";
+    readonly args: "p_organization_id uuid, p_subject_table_id uuid, p_block jsonb";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "dashboard_class";
+    readonly args: "";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "dashboard_declare";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_name text, p_blocks jsonb DEFAULT '[]'::jsonb, p_presentation jsonb DEFAULT '{}'::jsonb, p_dashboard_id uuid DEFAULT NULL::uuid";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "dashboard_delete";
+    readonly args: "p_organization_id uuid, p_dashboard_id uuid";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "dashboard_field_keys";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "text[]";
+    readonly security: "definer";
+}, {
+    readonly name: "dashboard_kinds";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
+}, {
+    readonly name: "dashboard_moment_sql";
+    readonly args: "p_key text";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "dashboard_run";
+    readonly args: "p_organization_id uuid, p_dashboard_id uuid, p_filter jsonb DEFAULT '{}'::jsonb";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "dashboard_stuck";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_state_key text, p_days integer DEFAULT 14, p_filter jsonb DEFAULT '{}'::jsonb, p_limit integer DEFAULT 50, p_required text DEFAULT 'viewer'::text";
+    readonly returns: "TABLE(record_id uuid, title text, state text, last_changed_at timestamp with time zone, days_unchanged numeric, measured_from text)";
+    readonly security: "definer";
+}, {
+    readonly name: "dashboard_window_sql";
+    readonly args: "p_key text, p_window jsonb";
+    readonly returns: "text";
+    readonly security: "invoker";
+}, {
+    readonly name: "dashboards";
+    readonly args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid";
+    readonly returns: "TABLE(dashboard_id uuid, table_id uuid, name text, blocks jsonb, presentation jsonb, block_count integer, version integer, created_at timestamp with time zone, updated_at timestamp with time zone)";
+    readonly security: "definer";
 }, {
     readonly name: "delete_cascade_closure";
     readonly args: "p_organization_id uuid, p_record_id uuid";
@@ -492,6 +632,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_template_id uuid, p_record_id uuid, p_table_id uuid, p_template_version integer, p_body text, p_content_hash text";
     readonly returns: "uuid";
     readonly security: "definer";
+}, {
+    readonly name: "doc_renders";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "TABLE(render_id uuid, template_id uuid, record_id uuid, table_id uuid, template_version integer, body text, content_hash text, rendered_at timestamp with time zone)";
+    readonly security: "definer";
 }, {
     readonly name: "doc_sign";
     readonly args: "p_organization_id uuid, p_render_id uuid, p_field_key text, p_signer_name text, p_signer_user_id uuid DEFAULT NULL::uuid";
@@ -517,6 +662,16 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_render_id uuid, p_record_id uuid, p_field_key text, p_signer_name text, p_signer_user_id uuid, p_document_hash text, p_document_version integer";
     readonly returns: "uuid";
     readonly security: "definer";
+}, {
+    readonly name: "doc_signatures";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "TABLE(signature_id uuid, render_id uuid, record_id uuid, field_key text, signer_name text, signer_user_id uuid, signed_at timestamp with time zone, document_hash text, document_version integer)";
+    readonly security: "definer";
+}, {
+    readonly name: "doc_template_delete";
+    readonly args: "p_organization_id uuid, p_template_id uuid";
+    readonly returns: "boolean";
+    readonly security: "definer";
 }, {
     readonly name: "doc_template_read";
     readonly args: "p_organization_id uuid, p_template_id uuid";
@@ -527,6 +682,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_table_id uuid, p_name text, p_body text, p_template_id uuid DEFAULT NULL::uuid";
     readonly returns: "uuid";
     readonly security: "definer";
+}, {
+    readonly name: "doc_templates";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "TABLE(template_id uuid, renders_table_id uuid, name text, body text, template_version integer, token_count bigint, updated_at timestamp with time zone)";
+    readonly security: "definer";
 }, {
     readonly name: "doc_token_pattern";
     readonly args: "";
@@ -667,6 +827,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_field_id uuid";
     readonly returns: "TABLE(kind text, dependant_id uuid, label text, how text)";
     readonly security: "definer";
+}, {
+    readonly name: "field_history";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_field_key text, p_limit integer DEFAULT 100, p_offset integer DEFAULT 0, p_record_id uuid DEFAULT NULL::uuid";
+    readonly returns: "TABLE(record_id uuid, record_title text, version integer, occurred_at timestamp with time zone, operation_label text, actor jsonb, before jsonb, after jsonb)";
+    readonly security: "definer";
 }, {
     readonly name: "field_kernel_id";
     readonly args: "";
@@ -757,11 +922,31 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_field custom.record, p_action text DEFAULT 'read'::text";
     readonly returns: "jsonb";
     readonly security: "invoker";
+}, {
+    readonly name: "history_actor";
+    readonly args: "p_tier text, p_document jsonb, p_actor_id uuid, p_people jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "history_changes";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_old jsonb, p_new jsonb";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
+}, {
+    readonly name: "history_people";
+    readonly args: "p_organization_id uuid, p_ids uuid[]";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "history_prune";
     readonly args: "p_organization_id uuid, p_scope text DEFAULT 'values'::text, p_table_id uuid DEFAULT NULL::uuid, p_dry_run boolean DEFAULT true";
     readonly returns: "jsonb";
     readonly security: "definer";
+}, {
+    readonly name: "history_restore_body";
+    readonly args: "p_current jsonb, p_target jsonb, p_field_key text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "invoker";
 }, {
     readonly name: "history_retention";
     readonly args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid";
@@ -902,6 +1087,16 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_old_deleted timestamp with time zone, p_new_deleted timestamp with time zone, p_old_data jsonb, p_new_data jsonb, p_old_table uuid, p_new_table uuid, p_old_org uuid, p_new_org uuid, p_old_class text, p_new_class text";
     readonly returns: "boolean";
     readonly security: "invoker";
+}, {
+    readonly name: "list_door_disagreements";
+    readonly args: "p_pretend text DEFAULT NULL::text, p_only_organization uuid DEFAULT NULL::uuid, p_sample integer DEFAULT 200";
+    readonly returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, table_id uuid, record_id uuid, door text, why text)";
+    readonly security: "invoker";
+}, {
+    readonly name: "list_door_disagreements";
+    readonly args: "p_pretend text, p_only_organization uuid, p_sample integer, p_exhaustive boolean";
+    readonly returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, table_id uuid, record_id uuid, door text, why text)";
+    readonly security: "invoker";
 }, {
     readonly name: "lookup_value";
     readonly args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb";
@@ -922,6 +1117,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "";
     readonly returns: "uuid";
     readonly security: "invoker";
+}, {
+    readonly name: "migrate_choice_keys";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_dry_run boolean DEFAULT false";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "migrate_delete";
     readonly args: "p_organization_id uuid, p_record_id uuid, p_note text DEFAULT NULL::text";
@@ -952,6 +1152,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid, p_dry_run boolean DEFAULT true";
     readonly returns: "jsonb";
     readonly security: "definer";
+}, {
+    readonly name: "migrate_reclass";
+    readonly args: "p_organization_id uuid, p_id uuid, p_to text DEFAULT 'field'::text, p_note text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "migrate_rename";
     readonly args: "p_organization_id uuid, p_id uuid, p_to text, p_note text DEFAULT NULL::text";
@@ -1047,6 +1252,76 @@ declare const STORE_DOORS: readonly [{
     readonly args: "";
     readonly returns: "uuid";
     readonly security: "invoker";
+}, {
+    readonly name: "portal_admits";
+    readonly args: "p_organization_id uuid, p_user_id uuid DEFAULT NULL::uuid";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_card";
+    readonly args: "p_organization_id uuid, p_portal_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_declare";
+    readonly args: "p_organization_id uuid, p_title text, p_client_table_id uuid, p_tables jsonb, p_portal_id uuid DEFAULT NULL::uuid, p_slug text DEFAULT NULL::text, p_sign_in_method text DEFAULT 'magic_link'::text";
+    readonly returns: "uuid";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_field_map";
+    readonly args: "p_organization_id uuid, p_table_id uuid";
+    readonly returns: "TABLE(field_id uuid, field_key text, field_type text, points_at uuid)";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_invitation";
+    readonly args: "p_slug text, p_email text";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_invite";
+    readonly args: "p_organization_id uuid, p_portal_id uuid, p_client_record_id uuid, p_email text, p_user_id uuid DEFAULT NULL::uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_me";
+    readonly args: "";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_preview";
+    readonly args: "p_organization_id uuid, p_portal_id uuid, p_principal_id uuid, p_table_id uuid";
+    readonly returns: "TABLE(record_id uuid, title text)";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_principal_bind";
+    readonly args: "p_organization_id uuid, p_principal_id uuid, p_user_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_public";
+    readonly args: "p_slug text";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_record_title";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "text";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_revoke";
+    readonly args: "p_organization_id uuid, p_portal_id uuid, p_principal_id uuid";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "portal_slug";
+    readonly args: "p_organization_id uuid, p_title text, p_portal_id uuid DEFAULT NULL::uuid";
+    readonly returns: "text";
+    readonly security: "definer";
+}, {
+    readonly name: "portals";
+    readonly args: "p_organization_id uuid";
+    readonly returns: "TABLE(portal_id uuid, title text, slug text, client_table_id uuid, client_table text, is_active boolean, tables integer, invited integer, signed_in integer, sign_in_method text, opened_at timestamp with time zone)";
+    readonly security: "definer";
 }, {
     readonly name: "presentation_kernel_id";
     readonly args: "";
@@ -1272,6 +1547,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_record_id uuid";
     readonly returns: "timestamp with time zone";
     readonly security: "definer";
+}, {
+    readonly name: "record_history";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0";
+    readonly returns: "TABLE(version integer, occurred_at timestamp with time zone, operation text, operation_label text, actor jsonb, changes jsonb, migration_id uuid, undoable boolean)";
+    readonly security: "definer";
 }, {
     readonly name: "record_relation_edges";
     readonly args: "p_organization_id uuid, p_id uuid, p_table_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone";
@@ -1292,11 +1572,26 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_record_id uuid";
     readonly returns: "void";
     readonly security: "definer";
+}, {
+    readonly name: "record_restore_preview";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_version integer, p_field_key text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "definer";
+}, {
+    readonly name: "record_restore_version";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_version integer";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "record_state_as_of";
     readonly args: "p_record_id uuid, p_at timestamp with time zone";
     readonly returns: "TABLE(state jsonb, replayed boolean)";
     readonly security: "definer";
+}, {
+    readonly name: "record_table";
+    readonly args: "p_organization_id uuid, p_record_id uuid";
+    readonly returns: "uuid";
+    readonly security: "definer";
 }, {
     readonly name: "record_update";
     readonly args: "p_organization_id uuid, p_record_id uuid, p_patch jsonb, p_expected_version integer DEFAULT NULL::integer";
@@ -1317,6 +1612,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_table_id uuid, p_data jsonb";
     readonly returns: "uuid";
     readonly security: "definer";
+}, {
+    readonly name: "refusals_claiming_a_level_never_asked";
+    readonly args: "";
+    readonly returns: "TABLE(function_name text, identity_args text, why text)";
+    readonly security: "invoker";
 }, {
     readonly name: "relation_carry";
     readonly args: "p_organization_id uuid, p_container_id uuid, p_item_id uuid";
@@ -1542,11 +1842,31 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid DEFAULT NULL::uuid";
     readonly returns: "boolean";
     readonly security: "invoker";
+}, {
+    readonly name: "subscription_cadences";
+    readonly args: "p_organization_id uuid";
+    readonly returns: "text[]";
+    readonly security: "definer";
+}, {
+    readonly name: "subscription_mute";
+    readonly args: "p_organization_id uuid, p_rule_id uuid, p_muted boolean DEFAULT true";
+    readonly returns: "boolean";
+    readonly security: "definer";
+}, {
+    readonly name: "subscriptions";
+    readonly args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid";
+    readonly returns: "TABLE(rule_id uuid, name text, table_id uuid, saved_view_id uuid, cadence text, schedule text, channel text, recipient_user_id uuid, event_key text, muted boolean, mine boolean, i_may_mute boolean)";
+    readonly security: "definer";
 }, {
     readonly name: "table_capacity";
     readonly args: "p_organization_id uuid, p_table_id uuid";
     readonly returns: "jsonb";
     readonly security: "definer";
+}, {
+    readonly name: "table_carries_its_rows";
+    readonly args: "p_user_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level";
+    readonly returns: "boolean";
+    readonly security: "definer";
 }, {
     readonly name: "table_contents";
     readonly args: "p_organization_id uuid, p_table_id uuid";
@@ -1652,6 +1972,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_record_id uuid, p_key text";
     readonly returns: "TABLE(field_key text, field_id uuid, value jsonb, value_version integer, source jsonb, absent_reason text, actor text, on_behalf_of text, written_at timestamp with time zone, alternates jsonb)";
     readonly security: "definer";
+}, {
+    readonly name: "value_restore";
+    readonly args: "p_organization_id uuid, p_record_id uuid, p_field_key text, p_version integer";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "value_versions";
     readonly args: "p_old jsonb, p_new jsonb";
@@ -1712,6 +2037,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_approval_id uuid, p_approve boolean, p_note text DEFAULT NULL::text";
     readonly returns: "jsonb";
     readonly security: "definer";
+}, {
+    readonly name: "work_approval_kinds";
+    readonly args: "";
+    readonly returns: "text[]";
+    readonly security: "invoker";
 }, {
     readonly name: "work_approval_may_decide";
     readonly args: "p_organization_id uuid, p_approval_id uuid";
@@ -1807,6 +2137,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_name text, p_slug text, p_home_id uuid DEFAULT NULL::uuid";
     readonly returns: "jsonb";
     readonly security: "definer";
+}, {
+    readonly name: "work_state_id";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_value text";
+    readonly returns: "uuid";
+    readonly security: "invoker";
 }, {
     readonly name: "work_states";
     readonly args: "";
@@ -1878,6 +2213,10 @@ declare const STORE_KNOBS: readonly [{
     readonly key: "consumer_checkout_enabled";
     readonly value: "false";
     readonly type: "boolean";
+}, {
+    readonly key: "consumer_context_enabled";
+    readonly value: "false";
+    readonly type: "boolean";
 }, {
     readonly key: "consumer_education_enabled";
     readonly value: "false";
@@ -2003,37 +2342,40 @@ declare const STORE_KNOBS: readonly [{
  */
 declare const STORE_REFUSAL_CODES: readonly [{
     readonly code: "02000";
-    readonly raised_by: "doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_read,doc_template_save,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,migrate_delete,migrate_extract_parent,migrate_merge,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,read_record,record_delete,record_restore,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state";
+    readonly raised_by: "dashboard_delete,dashboard_run,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_card,portal_declare,portal_invite,portal_preview,portal_principal_bind,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state";
 }, {
     readonly code: "0A000";
-    readonly raised_by: "external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign,work_slots_declare";
+    readonly raised_by: "external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign";
 }, {
     readonly code: "22004";
-    readonly raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,doc_render_write,doc_sign,doc_signature_write,doc_template_save,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,form_declare,form_submit,home_add,io_comment_write,io_import_open,io_outbox_drain,io_restore,migrate_purge,migrate_split,migrate_undo,organization_clear,organization_contents,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,relation_carry,relation_own,rule_declare,share_grant,table_declare,work_approval_decide,work_approval_request,work_template_declare";
+    readonly raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_open,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,portal_declare,portal_invite,portal_principal_bind,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,relation_carry,relation_own,rule_declare,share_grant,table_declare,value_restore,work_approval_decide,work_approval_request,work_template_declare";
+}, {
+    readonly code: "22007";
+    readonly raised_by: "dashboard_window_sql";
 }, {
     readonly code: "22012";
     readonly raised_by: "rule_eval";
 }, {
     readonly code: "22023";
-    readonly raised_by: "_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,doc_render_body,doc_render_write,doc_signature_write,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,io_import_open,io_proposal_accept,migrate_merge,my_levels,organization_clear,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold";
+    readonly raised_by: "_entity_custom_fields_guard,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,io_import_open,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,portal_declare,query_by_coordinates,query_rollup,record_update,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold";
 }, {
     readonly code: "23503";
-    readonly raised_by: "_containment_guard,_field_document_for,_record_rule_uses,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,delete_rule,doc_sign,doc_template_save,form_declare,form_submit,home_add,io_comment_write,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,work_set_state,work_take_assignment,work_template_instantiate";
+    readonly raised_by: "_containment_guard,_field_document_for,_record_rule_uses,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,form_declare,form_submit,home_add,io_comment_write,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,subscription_mute,work_set_state,work_take_assignment,work_template_instantiate";
 }, {
     readonly code: "23505";
     readonly raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,io_proposal_accept,relation_carry,relation_own,share_grant,work_approval_decide,work_slot_hold";
 }, {
     readonly code: "23514";
-    readonly raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,migrate_merge,relation_carry,relation_own,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate";
+    readonly raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_shape_guard,_value_envelope,_work_shape_guard,_workdoors_approval_guard,assert_entity_is_organization_scoped,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,migrate_merge,relation_carry,relation_own,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate";
 }, {
     readonly code: "40001";
     readonly raised_by: "has_visibility_at";
 }, {
     readonly code: "42501";
-    readonly raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,io_comment_resolve,io_comment_write,io_restore,migrate_purge,my_levels,organization_clear,promote_table,query_visibility_parity,read_record,read_records,share_grant,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person";
+    readonly raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,comment_write,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,io_comment_resolve,io_comment_write,io_restore,migrate_purge,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,record_table,share_grant,subscription_mute,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person";
 }, {
     readonly code: "42703";
-    readonly raised_by: "entity_table";
+    readonly raised_by: "entity_table,portal_declare";
 }, {
     readonly code: "53400";
     readonly raised_by: "anon_rate_take,delete_cascade_closure,promote_field";
@@ -2556,6 +2898,14 @@ interface NewFieldDeclaration {
     parity_type?: ParityFieldType;
     /** Plain text, a long text or a plain number — the three that carry no parity type. */
     plain?: "text" | "long_text" | "number";
+    /**
+     * THE ONE WORD EVERY OTHER CALLER REACHES FOR. An agent, a script, an import
+     * and this package's own table-declaring path all say `type`, and until
+     * 2026-09-20 `custom._field_document_for` threw it away — a `number` became a
+     * text column in silence. It now resolves all three vocabularies, so this is
+     * named here rather than left as a shape only the store knows about.
+     */
+    type?: FieldTypeWord;
     /** Derived from the label when absent, which is why the panel never asks for it. */
     key?: string;
     required?: boolean;
@@ -2584,8 +2934,42 @@ interface NewFieldDeclaration {
     expr?: Record<string, unknown>;
     compute_on?: ComputeOn;
     relation_max?: number;
+    /**
+     * REL / FLD-11. The Table this column points at, when it is neither a Person
+     * (`member`) nor a File (`attachment`). The store has taken it since
+     * 2026-09-20 and no client type named it, so a person with an Invoice table
+     * and a Line table could not declare the link through this package at all.
+     */
+    relation_target?: Uuid;
+    /** REL-2. What happens to this record when the thing it points at goes. */
+    on_target_delete?: OnDelete;
+    /**
+     * Presentation and behaviour settings the store carries verbatim — a long
+     * text's `multiline`, a list's existing options table. The door has always
+     * read it (`p_spec -> 'config'`) and this interface never offered it, so a
+     * package-owned table could not declare its own multi-line column.
+     */
+    config?: Record<string, unknown>;
+    /** A text column that holds a signature (`custom.doc_sign` accepts no other). */
+    format?: string;
 }
-/** What `custom.field_update` accepts: a field's settings, never what it holds. */
+/**
+ * Every word `custom._field_document_for` resolves for `type`: one of the
+ * thirteen, one of the five behaviours, or one of the plain synonyms a person
+ * or an agent actually writes.
+ */
+type FieldTypeWord = ParityFieldType | FieldBehavior | "number" | "integer" | "decimal" | "float" | "long_text" | "string";
+/**
+ * What `custom.field_update` accepts.
+ *
+ * THE SETTINGS **AND** THE BEHAVIOUR. The door has had a behaviour arm since
+ * T12 — say `parity_type`, `plain` or `type` and every value of the column is
+ * converted (or kept in `_retired` with its reason) by
+ * `custom._field_type_converts_values`. This interface named only the settings,
+ * so the one client that needed to move a field back onto the behaviour it is
+ * written against had no door and reached for `custom.record_update` instead,
+ * which writes the document under the guards rather than through them.
+ */
 interface FieldPatch {
     label?: string;
     required?: boolean;
@@ -2597,8 +2981,79 @@ interface FieldPatch {
     rules?: FieldRule[];
     /** The choices of a choice list, rewritten. A choice still wanted keeps its id. */
     options?: string[];
+    /** One of the thirteen — a change of what this column HOLDS, not of a setting. */
+    parity_type?: ParityFieldType;
+    /** …or one of the three plain behaviours, …*/
+    plain?: "text" | "long_text" | "number";
+    /** …or the one word every other caller reaches for (see `NewFieldDeclaration`). */
+    type?: FieldTypeWord;
+    /**
+     * FLD-2. The shape of the value. The door reads it ONLY inside its behaviour
+     * arm, so a patch that moves `multi` alone changes nothing — send the
+     * behaviour word with it.
+     */
+    multi?: boolean;
+    /** REL / FLD-11: re-point the column. The old edges are withdrawn by the door. */
+    relation_target?: Uuid;
+    on_target_delete?: OnDelete;
+    /** SEAT-SUITES: whether the store builds an index for this column, and a unique one. */
+    promoted?: boolean;
+    unique?: boolean;
+    /** §D / T7: which fields a worked-out column reads. */
+    depends_on?: Uuid[];
 }
 
+/** One option, as `_choices` names it and as `optionsOf` returns it. */
+interface ChoiceOption {
+    /** The stable key the cell actually holds. */
+    key: string;
+    /** What a person reads. */
+    label: string;
+    /** The option RECORD's id, for a caller that needs the row itself. */
+    id?: string;
+    /** True when the option was retired: still readable, no longer pickable. */
+    retired?: boolean;
+    /** Why it is no longer offered, in a sentence, when it is retired. */
+    reason?: string | null;
+}
+/**
+ * The stable key of an option RECORD as `custom.field_options` returns it.
+ *
+ * It lives in `metadata.option_key`, not in the document: FLD-5 keeps a category to one title
+ * field, and the key is the store's own bookkeeping rather than a column anybody declared.
+ * The fallback is the same slug the store derives, so an option written by something that has
+ * not caught up still answers.
+ */
+declare function optionKey(option: StoredRecord): string;
+/** What a person reads on an option record. */
+declare function optionLabel(option: StoredRecord): string;
+/**
+ * The store's own slug, mirrored so a client can predict a key without a round trip.
+ * `custom.choice_slug` is the original; a title with nothing a-z0-9 in it gets a short hash of
+ * itself there, and this returns the empty-ish fallback rather than guessing a hash — a caller
+ * that needs the real key for such a title reads it off the option.
+ */
+declare function choiceSlug(word: string): string;
+/**
+ * Does this stored (or typed) value name this option? The key, the label and the option's own
+ * id all name the same choice, and a control has to recognise every one of them: what the read
+ * door hands it is the LABEL, what the store holds is the KEY, and what a screen written before
+ * this contract sends is the ID.
+ */
+declare function isTheChosen(option: StoredRecord, value: unknown): boolean;
+/** Every value of one cell, as strings, whether the Field is multi or not. */
+declare function choiceValuesOf(value: unknown): string[];
+/**
+ * What the read door said about one column's choices: the key behind the label, and whether the
+ * option was retired and why. Returns an empty array when the document carries no `_choices`
+ * entry for that column, which is also what a document written before this contract looks like.
+ */
+declare function choicesOf(document: RecordDocument | undefined, fieldKeyOrId: string): ChoiceOption[];
+/** True when this cell's value points at a choice that has since been retired. */
+declare function holdsARetiredChoice(document: RecordDocument | undefined, fieldKeyOrId: string): boolean;
+/** True when a token looks like a uuid — which a choice value is no longer allowed to be. */
+declare function looksLikeAnId(value: unknown): boolean;
+
 /** The seven table types. Only these two carry custom fields (REC-34, DD-011). */
 type CustomFieldTableType = "entity" | "detail";
 /** What `custom.entity_table` answers about a registry token. */
@@ -2808,10 +3263,144 @@ interface FormSummary {
  */
 declare function publicFormPath(formId: string): string;
 
+/** One portal as `custom.portals` reports it to its organization. */
+interface PortalSummary {
+    portal_id: Uuid;
+    title: string;
+    slug: string;
+    /** The Table whose records ARE the clients. A principal is one of its rows. */
+    client_table_id: Uuid;
+    /** That Table's name, so a list never has to read a second door to draw a row. */
+    client_table: string;
+    is_active: boolean;
+    /** How many Tables this portal exposes. */
+    tables: number;
+    /** Everybody invited and not revoked — NOT everybody who can see anything. */
+    invited: number;
+    /** Of those, how many have followed the link and hold an identity. */
+    signed_in: number;
+    /** `magic_link` today, and the door refuses every other word by name. */
+    sign_in_method: string;
+    opened_at: Timestamp | null;
+}
+/** One Table a portal exposes, as `custom.portal_card` reports it. */
+interface PortalTableExposure {
+    table_id: Uuid;
+    /** The Table's own name. */
+    name: string;
+    /**
+     * The key of the relation Field that says WHOSE a record is. This is the
+     * whole of "only theirs": the association that Field writes is what carries
+     * the record to the client, so a portal cannot exist without one.
+     */
+    names_via: string;
+    /** The field keys a client sees. Empty is impossible — the door fills it. */
+    visible_fields: string[];
+    /** The subset a client may change. Always a subset of `visible_fields`. */
+    editable_fields: string[];
+    comments: boolean;
+    /**
+     * The most a client is ever conveyed on this Table — `viewer`, `commenter`
+     * or `editor` — worked out by the door from the two lists above, never by a
+     * screen.
+     */
+    conveys: string;
+}
+/** One person a portal was opened to, as `custom.portal_card` reports them. */
+interface PortalPrincipal {
+    principal_id: Uuid;
+    email: string;
+    /** The record of the client Table this person IS, for the portal's purposes. */
+    client_record_id: Uuid;
+    /** That record's title — what an owner calls this client. */
+    client: string;
+    /** They followed the link and hold an identity. Until then this is false. */
+    signed_in: boolean;
+    /** Not revoked. An invitation that was never followed is still active. */
+    is_active: boolean;
+    invited_at: Timestamp;
+    revoked_at: Timestamp | null;
+}
+/** Everything about ONE portal: what it shows, and who it was opened to. */
+interface PortalCard {
+    portal_id: Uuid;
+    title: string;
+    slug: string;
+    is_active: boolean;
+    sign_in_method: string;
+    client_table_id: Uuid;
+    tables: PortalTableExposure[];
+    principals: PortalPrincipal[];
+    /**
+     * Whether this organization's outside lane is open
+     * (`custom/external_principal_enabled`). Declaring a portal opens it; while
+     * it is false every door refuses an outsider BY NAME, and a screen that drew
+     * the people as reachable anyway would be lying about the one thing that
+     * decides whether they can sign in at all.
+     */
+    external_lane_open: boolean;
+}
+/** What `custom.portal_invite` answers. `say` is the door's own sentence. */
+interface PortalInvitation {
+    invited: boolean;
+    principal_id: Uuid;
+    portal_id: Uuid;
+    slug: string;
+    email: string;
+    client_record_id: Uuid;
+    client: string;
+    /** They already hold an identity. From a screen this is false: the door is passed no user. */
+    bound: boolean;
+    /**
+     * The door's own words, and the ONLY correct summary of what just happened —
+     * it says outright that an invitation confers nothing until the link is
+     * followed. Show it; never paraphrase it.
+     */
+    say: string;
+}
+/** What `custom.portal_revoke` answers. `say` names the consequence, past tense. */
+interface PortalRevocation {
+    revoked: boolean;
+    principal_id: Uuid;
+    email: string;
+    /** The door's own sentence: they can no longer sign in, and their records stop reaching them. */
+    say: string;
+}
+/** One row of "what this client sees", from `custom.portal_preview`. */
+interface PortalPreviewRow {
+    record_id: Uuid;
+    title: string;
+}
+/**
+ * THE PUBLIC ADDRESS OF A PORTAL, and the one place its shape is written down.
+ *
+ * Unlike a form's link, a portal's slug is NOT the capability: the page it
+ * serves asks who you are and emails a one-time link, so the slug is a name and
+ * nothing more. That is why it is readable and why copying it is safe.
+ */
+declare function portalPath(slug: string): string;
+
 /** The measures the store offers. Asked of `custom.agg_operations()` at run time too. */
 type AggregateOperation = "count" | "sum" | "avg" | "min" | "max";
 /** The periods a date Field can be bucketed into (`custom.agg_buckets()`). */
 type AggregateBucket = "day" | "week" | "month" | "quarter" | "year";
+/**
+ * A HALF-OPEN MOMENT WINDOW: `from` is inclusive, `to` is exclusive. Half-open
+ * is the only shape that makes "September" and "October" meet exactly once —
+ * an inclusive `to` either double-counts the boundary moment or drops it,
+ * depending on the reader, and both of those are a chart telling a lie.
+ */
+interface AggregateWindow {
+    from?: string | null;
+    to?: string | null;
+}
+/**
+ * ONE FILTER VALUE, as `custom.record_aggregate` and `custom.dashboard_run`
+ * both read it: a SCALAR is an equality, and an OBJECT is a window. It is not
+ * `unknown` on purpose — a filter value the store cannot read is a refusal a
+ * caller should get from the compiler, not from the database.
+ */
+type AggregateFilter = string | number | boolean | null | AggregateWindow;
 /** One measure. `count` counts rows and needs no Field; the rest read one. */
 interface AggregateMeasure {
     op: AggregateOperation;
@@ -2831,6 +3420,107 @@ interface AggregateRow {
 /** The measure key the store answers with, so a chart can find its own series. */
 declare function measureKey(measure: AggregateMeasure): string;
 
+/** The seven shapes a block can take, exactly as `custom.dashboard_kinds()` answers. */
+type DashboardBlockKind = "number" | "bar" | "column" | "line" | "donut" | "table" | "stuck";
+/**
+ * ONE SAVED BLOCK — the spec, not the answer. `table_id` left out means the
+ * dashboard's own subject Table, and `state_key` / `days` belong to `stuck`
+ * alone (the door refuses a `stuck` block that names no field to watch).
+ */
+interface DashboardBlock {
+    title?: string;
+    kind: DashboardBlockKind;
+    /** Absent = the dashboard's subject Table. */
+    table_id?: Uuid | null;
+    /** Field keys whose values become the groups. */
+    group_by?: string[];
+    /** `count` needs no key; every other operation reads one Field. */
+    measures?: AggregateMeasure[];
+    /** A date Field truncated to a period. */
+    bucket?: {
+        key: string;
+        by: AggregateBucket;
+    } | null;
+    /** A scalar is an equality; an object is a half-open moment window. */
+    filter?: Record<string, AggregateFilter> | null;
+    /** Rows this block reads. The door clamps it to 1…500 and defaults to 50. */
+    limit?: number;
+    /** Columns of the twelve this block occupies. The door clamps it to 2…12 and defaults to 6. */
+    span?: number;
+    /** `stuck` only: the field whose value is watched for a change. */
+    state_key?: string;
+    /** `stuck` only: how long a record may sit on the same value. Defaults to 14. */
+    days?: number;
+}
+/** One dashboard as `custom.dashboards` reports it to its organization. */
+interface DashboardSummary {
+    dashboard_id: Uuid;
+    /** The subject Table: the one a block that names no table of its own reads. */
+    table_id: Uuid | null;
+    name: string;
+    blocks: DashboardBlock[];
+    presentation: Record<string, unknown>;
+    block_count: number;
+    version: number;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+}
+/**
+ * One row of a `stuck` block: a record that has sat on the same value of
+ * `state` for `days_unchanged` days. `measured_from` names WHERE that age was
+ * measured from, because a record whose history does not reach back that far is
+ * aged from what the store actually knows and says so.
+ */
+interface StuckRow {
+    record_id: Uuid;
+    title: string | null;
+    state: string | null;
+    last_changed_at: Timestamp | null;
+    days_unchanged: number;
+    measured_from: string;
+}
+/**
+ * ONE BLOCK'S ANSWER. The door echoes the block back NORMALIZED — the defaults
+ * it applied, the merged filter it actually ran — and adds `rows` and `ms`;
+ * a block it could not run carries `refused` and `sqlstate` INSTEAD of rows,
+ * and a block it could not even normalize carries only its title and kind.
+ */
+interface DashboardBlockResult {
+    title: string;
+    kind: DashboardBlockKind | (string & {});
+    table_id?: Uuid;
+    group_by?: string[];
+    measures?: AggregateMeasure[];
+    bucket?: {
+        key: string;
+        by: AggregateBucket;
+    } | null;
+    /** The block's own filter with the canvas bar merged under it — the block's own key wins. */
+    filter?: Record<string, AggregateFilter>;
+    limit?: number;
+    span?: number;
+    state_key?: string;
+    days?: number;
+    /** An aggregate block's groups and measures, or a `stuck` block's records. Absent when refused. */
+    rows?: AggregateRow[] | StuckRow[];
+    /** How long this one block took, in milliseconds. Absent when refused. */
+    ms?: number;
+    /** The store's own sentence, when this block could not be run. */
+    refused?: string;
+    /** The SQLSTATE that refusal carried. */
+    sqlstate?: string;
+}
+/** What `custom.dashboard_run` answers: the canvas, and every block's own result. */
+interface DashboardRunResult {
+    dashboard_id: Uuid;
+    name: string | null;
+    subject_table_id: Uuid | null;
+    presentation: Record<string, unknown>;
+    /** The one filter bar this run was asked with. */
+    filter: Record<string, AggregateFilter>;
+    blocks: DashboardBlockResult[];
+}
+
 /** One token found in a body, in the order it appears. */
 interface DocToken {
     ordinal: number;
@@ -2855,7 +3545,6 @@ interface DocSignatureCheck {
 /** `custom.doc_template` — a body with tokens, and the Table it renders. */
 interface DocTemplateRow {
     id: Uuid;
-    organization_id: Uuid;
     renders_table_id: Uuid;
     name: string;
     body: string;
@@ -2907,6 +3596,25 @@ interface Subscription {
     event_key: string;
     name: string;
 }
+/**
+ * ONE SUBSCRIPTION AS ITS OWNER SEES IT — `custom.subscriptions`.
+ *
+ * `custom.agg_subscriptions` is the NOTIFIER's reader: it answers the whole
+ * organization's firing subscriptions so the delivery path can run, and it is
+ * not callable by a client. This is the other side of the same rows — narrowed
+ * to Tables the caller can already open, so the list never reveals a Table —
+ * and it carries the two things a screen needs and the notifier does not: is it
+ * switched off, and may I switch it off.
+ */
+interface MySubscription extends Subscription {
+    table_id: Uuid | null;
+    /** Off. `custom.agg_subscriptions` already excludes a muted one, so this is the truth. */
+    muted: boolean;
+    /** It is addressed to me. */
+    mine: boolean;
+    /** I may switch it off: mine, or I hold admin on the Table it watches. */
+    i_may_mute: boolean;
+}
 /** The `subscription` block a Rule record carries. Written through `record_write`. */
 interface SubscriptionBlock {
     saved_view_id: Uuid;
@@ -3871,6 +4579,99 @@ interface RecordsClient {
         form_id?: Uuid | null;
         slug?: string | null;
     }): Promise<RecordsResult<Uuid>>;
+    /** Every portal over this organization the caller may know about, with its numbers. */
+    portals(): Promise<RecordsResult<PortalSummary[]>>;
+    /** ONE portal in full: what it shows, and who it was opened to. */
+    portalCard(args: {
+        portal_id: Uuid;
+    }): Promise<RecordsResult<PortalCard>>;
+    /**
+     * Create or RE-STATE one portal. Re-stating REPLACES what it exposes — a
+     * Table left out of `tables` stops being exposed in the same act — and leaves
+     * the people alone: who is invited is not part of what the portal shows.
+     */
+    portalDeclare(args: {
+        title: string;
+        client_table_id: Uuid;
+        tables: Array<{
+            table_id: Uuid;
+            names_via: string;
+            visible_fields?: string[];
+            editable_fields?: string[];
+            comments?: boolean;
+        }>;
+        portal_id?: Uuid | null;
+        slug?: string | null;
+        sign_in_method?: string | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /**
+     * Invite one person, as one record of the portal's client Table.
+     *
+     * `user_id` is deliberately NOT a parameter here. From a screen it is always
+     * null: an invitation confers NOTHING until the person follows their sign-in
+     * link and the platform gives them an identity, and the door's own `say`
+     * sentence states exactly that. A screen that passed an id would be granting
+     * access on somebody else's behalf.
+     */
+    portalInvite(args: {
+        portal_id: Uuid;
+        client_record_id: Uuid;
+        email: string;
+    }): Promise<RecordsResult<PortalInvitation>>;
+    /** Take one person's way in away. The answer's `say` names the consequence. */
+    portalRevoke(args: {
+        portal_id: Uuid;
+        principal_id: Uuid;
+    }): Promise<RecordsResult<PortalRevocation>>;
+    /**
+     * VIEW AS THIS CLIENT. The door asks `custom.visible_set` for HER user id —
+     * the same call `custom.read_records` makes when she opens the page — so this
+     * cannot disagree with what she sees. It REFUSES with `02000` and a sentence
+     * when she has not signed in yet; show the sentence, never an empty list.
+     */
+    portalPreview(args: {
+        portal_id: Uuid;
+        principal_id: Uuid;
+        table_id: Uuid;
+    }): Promise<RecordsResult<PortalPreviewRow[]>>;
+    /** This organization's dashboards, optionally only those whose subject is one Table. */
+    dashboards(args?: {
+        table_id?: Uuid | null;
+    }): Promise<RecordsResult<DashboardSummary[]>>;
+    /**
+     * Create or re-state one dashboard. Every block is judged on the way IN —
+     * a block naming a field this Table does not have is refused BY NAME, with
+     * the table's own field list in the hint — so a canvas cannot be saved broken.
+     */
+    dashboardDeclare(args: {
+        table_id: Uuid;
+        name: string;
+        blocks?: DashboardBlock[];
+        presentation?: Record<string, unknown> | null;
+        dashboard_id?: Uuid | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /**
+     * Run every block and answer the numbers. `filter` is the ONE filter bar
+     * across the canvas: it is merged UNDER each block's own filter, so a block
+     * deliberately scoped to one stage stays scoped while the bar moves the rest.
+     * A block that refuses carries the store's sentence and the others still answer.
+     */
+    dashboardRun(args: {
+        dashboard_id: Uuid;
+        filter?: Record<string, AggregateFilter>;
+    }): Promise<RecordsResult<DashboardRunResult>>;
+    /** The seventh block kind on its own: records that have sat on the same value too long. */
+    dashboardStuck(args: {
+        table_id: Uuid;
+        state_key: string;
+        days?: number;
+        filter?: Record<string, AggregateFilter>;
+        limit?: number;
+    }): Promise<RecordsResult<StuckRow[]>>;
+    /** Take a dashboard away. The records it counted are untouched — a canvas owns nothing. */
+    dashboardDelete(args: {
+        dashboard_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
     /**
      * Group, bucket, filter and measure INSIDE `custom.record_aggregate`. The
      * aggregate node sits above the visibility join, so what a chart draws is
@@ -3888,8 +4689,11 @@ interface RecordsClient {
             key: string;
             by: AggregateBucket;
         } | null;
-        /** Equality only, and it lands in the SAME WHERE as visibility. */
-        filter?: Record<string, string>;
+        /**
+         * A scalar is an equality and an object is a half-open moment window, and
+         * either way it lands in the SAME WHERE as visibility.
+         */
+        filter?: Record<string, AggregateFilter>;
         limit?: number;
     }): Promise<RecordsResult<AggregateRow[]>>;
     /** The measures the store itself offers. Asked, never hardcoded in a picker. */
@@ -3908,6 +4712,33 @@ interface RecordsClient {
     }): Promise<RecordsResult<Subscription[]>>;
     /** The cadences the store itself offers. Asked, never hardcoded in a picker. */
     aggSubscriptionCadences(): Promise<RecordsResult<string[]>>;
+    /**
+     * The same cadences, through the door a PERSON may call.
+     * `aggSubscriptionCadences` is the notifier's own and holds no client grant,
+     * so a screen that asked for it was refused and fell back to a list typed
+     * into the picker — which drifts from what the digest runner honours. This
+     * one delegates to the same array, so there is exactly one list.
+     */
+    subscriptionCadences(): Promise<RecordsResult<string[]>>;
+    /**
+     * WHAT THIS PERSON IS BEING TOLD ABOUT, and what they may switch off.
+     *
+     * Mine, plus anyone's over a Table I hold admin on — narrowed to Tables I can
+     * already open, so the list never reveals one. `aggSubscriptions` above is the
+     * NOTIFIER's reader and no client can call it; this is the owner's.
+     */
+    subscriptions(args?: {
+        table_id?: Uuid | null;
+    }): Promise<RecordsResult<MySubscription[]>>;
+    /**
+     * Switch one on or off. Muting is honoured in ONE place — the reader every
+     * consumer goes through — so a screen can never say a subscription is off
+     * while it keeps firing.
+     */
+    subscriptionMute(args: {
+        rule_id: Uuid;
+        muted: boolean;
+    }): Promise<RecordsResult<boolean>>;
     docTemplateSave(args: {
         table_id: Uuid;
         name: string;
@@ -3943,15 +4774,23 @@ interface RecordsClient {
     docSignatureIntact(args: {
         signature_id: Uuid;
     }): Promise<RecordsResult<unknown>>;
-    /** Every template that renders one Table. */
+    /** Every template that renders one Table. Viewer on the Table. */
     docTemplates(args: {
         table_id: Uuid;
     }): Promise<RecordsResult<DocTemplateRow[]>>;
-    /** Every frozen render of one record, newest first. */
+    /**
+     * Retire one template. EDITOR on the Table it renders, because a template is
+     * that Table's wording. Documents already rendered keep their frozen bytes
+     * and their seals, so this can never invalidate a signature.
+     */
+    docTemplateDelete(args: {
+        template_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
+    /** Every frozen render of one record, newest first. Viewer on the record. */
     docRenders(args: {
         record_id: Uuid;
     }): Promise<RecordsResult<DocRenderRow[]>>;
-    /** Every signature on one record. */
+    /** Every signature on one record. Viewer on the record. */
     docSignatures(args: {
         record_id: Uuid;
     }): Promise<RecordsResult<DocSignatureRow[]>>;
@@ -4457,4 +5296,4 @@ declare function useFieldMutation(): UseFieldMutation;
  */
 declare function useMergeField(key: string | null, state?: Record<string, unknown>): MergeFieldResolution | null;
 
-export { ABSENCE_REASONS, ACTOR_VOCABULARY, type AbsenceReason, type Actor, type AggregateBucket, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AnonTokenBinding, COMPUTE_ON, CONTEXT_POLICIES, type ComputeOn, type ContextPolicy, type CustomFieldTableType, DELIVERIES, type Delivery, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, ENTITY_TOKENS, type EntityFieldRights, type EntityFieldValue, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityTableFacts, type EntityToken, type ExternalPrincipalCard, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, type Field, type FieldBehavior, type FieldPatch, type FieldProposal, type FieldRule, type FieldSensitivity, type FieldSource, type ForbiddenEnvelopeWord, type FormSummary, type Freshness, type HiddenFieldNotice, type Home, KERNEL_TABLES, type KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, type MergeField, type MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, type MergeFieldSemanticType, type MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type MyLevel, type NewEntityFieldDeclaration, type NewFieldDeclaration, ON_DELETE, OVERRIDE_POLICIES, type OnDelete, type OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, type ParityFieldType, type ParityFieldTypeDescriptor, type PerValueAccessWord, type PermissionLevel, type PgError, type PredictedRefusal, type ProvenancePointer, type PublishBinding, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, type ReadRow, type ReadValue, type RecordDocument, type RecordRead, type RecordRevision, type RecordsActor, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, RecordsProvider, type RecordsProviderProps, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, type RecordsTableQuery, type RegisteredTable, type Relation, type RelationBinding, type RelationCardinality, type RelationCarries, type RelationCoordinate, type RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RetiredActorWord, type Rule, type RuleAnswer, type RuleExpression, type RuleNodeKind, type RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, type StaleWriteDetail, type StorageMode, type StoreDoorName, type StoreRefusalCode, type StoredRecord, type Subscription, type SubscriptionBlock, type SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, type Table, type TableCapacity, type TableDisplay, type TableOrigin, type TableProposal, type TableType, type Timestamp, type UseEntityFieldMutation, type UseFieldMutation, type UseRecordMutation, type UseRecordsOptions, type UseRecordsState, type Uuid, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, type ValueAlternate, type ValueAlternateKey, type ValueEnvelope, type ValueEnvelopeKey, type ValueSource, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, asPermissionLevel, atLeast, err, highestLevel, isRecordsErr, measureKey, ok, publicFormPath, useEntityFieldMutation, useEntityFieldRights, useEntityFields, useEntityRecord, useEntityTable, useFieldMutation, useFields, useMergeField, useMyLevel, useMyLevels, useOptionalRecordsClient, useRecord, useRecordMutation, useRecords, useRecordsActor, useRecordsClient, useTable, useTables };
+export { ABSENCE_REASONS, ACTOR_VOCABULARY, type AbsenceReason, type Actor, type AggregateBucket, type AggregateFilter, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AggregateWindow, type AnonTokenBinding, COMPUTE_ON, CONTEXT_POLICIES, type ChoiceOption, type ComputeOn, type ContextPolicy, type CustomFieldTableType, DELIVERIES, type DashboardBlock, type DashboardBlockKind, type DashboardBlockResult, type DashboardRunResult, type DashboardSummary, type Delivery, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, ENTITY_TOKENS, type EntityFieldRights, type EntityFieldValue, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityTableFacts, type EntityToken, type ExternalPrincipalCard, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, type Field, type FieldBehavior, type FieldPatch, type FieldProposal, type FieldRule, type FieldSensitivity, type FieldSource, type FieldTypeWord, type ForbiddenEnvelopeWord, type FormSummary, type Freshness, type HiddenFieldNotice, type Home, KERNEL_TABLES, type KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, type MergeField, type MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, type MergeFieldSemanticType, type MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type MyLevel, type MySubscription, type NewEntityFieldDeclaration, type NewFieldDeclaration, ON_DELETE, OVERRIDE_POLICIES, type OnDelete, type OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, type ParityFieldType, type ParityFieldTypeDescriptor, type PerValueAccessWord, type PermissionLevel, type PgError, type PortalCard, type PortalInvitation, type PortalPreviewRow, type PortalPrincipal, type PortalRevocation, type PortalSummary, type PortalTableExposure, type PredictedRefusal, type ProvenancePointer, type PublishBinding, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, type ReadRow, type ReadValue, type RecordDocument, type RecordRead, type RecordRevision, type RecordsActor, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, RecordsProvider, type RecordsProviderProps, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, type RecordsTableQuery, type RegisteredTable, type Relation, type RelationBinding, type RelationCardinality, type RelationCarries, type RelationCoordinate, type RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RetiredActorWord, type Rule, type RuleAnswer, type RuleExpression, type RuleNodeKind, type RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, type StaleWriteDetail, type StorageMode, type StoreDoorName, type StoreRefusalCode, type StoredRecord, type StuckRow, type Subscription, type SubscriptionBlock, type SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, type Table, type TableCapacity, type TableDisplay, type TableOrigin, type TableProposal, type TableType, type Timestamp, type UseEntityFieldMutation, type UseFieldMutation, type UseRecordMutation, type UseRecordsOptions, type UseRecordsState, type Uuid, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, type ValueAlternate, type ValueAlternateKey, type ValueEnvelope, type ValueEnvelopeKey, type ValueSource, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, asPermissionLevel, atLeast, choiceSlug, choiceValuesOf, choicesOf, err, highestLevel, holdsARetiredChoice, isRecordsErr, isTheChosen, looksLikeAnId, measureKey, ok, optionKey, optionLabel, portalPath, publicFormPath, useEntityFieldMutation, useEntityFieldRights, useEntityFields, useEntityRecord, useEntityTable, useFieldMutation, useFields, useMergeField, useMyLevel, useMyLevels, useOptionalRecordsClient, useRecord, useRecordMutation, useRecords, useRecordsActor, useRecordsClient, useTable, useTables };