@ai-matrx/records 0.11.0 → 0.17.0

package/dist/core/index.d.cts

@@ -1,5 +1,5 @@
-import { Timestamp, Uuid, RelationCoordinate, RecordsConfig, RecordDocument, RecordsResult, RecordRead, ReadRow, Table, Field, StoredRecord, TableCapacity, NewFieldDeclaration, FieldPatch, EntityTableFacts, NewEntityFieldDeclaration, EntityFieldRights, EntityRecordRead, EntityRecordsFound, FormSummary, AggregateMeasure, AggregateBucket, AggregateRow, Subscription, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordRevision, ReadValue, AnonTokenBinding, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, WorkInboxItem, WorkListFlavour, WorkListItem, WorkAssignment, WorkRecordState, WorkApprover, WorkChange, WorkApprovalFiled, WorkApprovalDecision, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, FieldProposal, TableProposal, MyLevel, RecordsError, WriteConflict, PgError, RecordsDataSource, StaleWriteDetail, PredictedRefusal } from '../index.cjs';
-export { ABSENCE_REASONS, ACTOR_VOCABULARY, AbsenceReason, Actor, AggregateOperation, COMPUTE_ON, CONTEXT_POLICIES, ComputeOn, ContextPolicy, CustomFieldTableType, DELIVERIES, Delivery, DocSignatureCheck, ENTITY_TOKENS, EntityFieldValue, EntityRecordMatch, EntityToken, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, FieldBehavior, FieldRule, FieldSensitivity, FieldSource, ForbiddenEnvelopeWord, Freshness, HiddenFieldNotice, Home, KERNEL_TABLES, KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, MergeField, MergeFieldModifier, MergeFieldProvenance, MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, MergeFieldTransform, MissingBehavior, ON_DELETE, OVERRIDE_POLICIES, OnDelete, OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, ParityFieldType, ParityFieldTypeDescriptor, PerValueAccessWord, PermissionLevel, ProvenancePointer, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, RecordsActor, RecordsErrorCode, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationBinding, RelationCardinality, RelationCarries, RelationFlavor, RelationProperties, RelationTarget, ResolutionTriple, RetiredActorWord, Rule, RuleAnswer, RuleExpression, RuleNodeKind, RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, StorageMode, StoreDoorName, StoreRefusalCode, SubscriptionBlock, SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, TableDisplay, TableOrigin, TableType, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, ValueAlternate, ValueAlternateKey, ValueEnvelope, ValueEnvelopeKey, ValueSource, WorkDueState, WorkInboxKind, WorkOrigin, WorkTemplateNode, WorkTemplateRelation, asPermissionLevel, atLeast, err, highestLevel, isRecordsErr, measureKey, ok, publicFormPath } from '../index.cjs';
+import { Timestamp, Uuid, RelationCoordinate, RecordsConfig, RecordDocument, RecordsResult, RecordRead, ReadRow, Table, Field, StoredRecord, TableCapacity, NewFieldDeclaration, FieldPatch, EntityTableFacts, NewEntityFieldDeclaration, EntityFieldRights, EntityRecordRead, EntityRecordsFound, FormSummary, PortalSummary, PortalCard, PortalInvitation, PortalRevocation, PortalPreviewRow, DashboardSummary, DashboardBlock, AggregateFilter, DashboardRunResult, StuckRow, AggregateMeasure, AggregateBucket, AggregateRow, Subscription, MySubscription, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordRevision, ReadValue, AnonTokenBinding, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, WorkInboxItem, WorkListFlavour, WorkListItem, WorkAssignment, WorkRecordState, WorkApprover, WorkChange, WorkApprovalFiled, WorkApprovalDecision, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, FieldProposal, TableProposal, MyLevel, RecordsError, WriteConflict, PgError, RecordsDataSource, StaleWriteDetail, PredictedRefusal } from '../index.cjs';
+export { ABSENCE_REASONS, ACTOR_VOCABULARY, AbsenceReason, Actor, AggregateOperation, AggregateWindow, COMPUTE_ON, CONTEXT_POLICIES, ChoiceOption, ComputeOn, ContextPolicy, CustomFieldTableType, DELIVERIES, DashboardBlockKind, DashboardBlockResult, Delivery, DocSignatureCheck, ENTITY_TOKENS, EntityFieldValue, EntityRecordMatch, EntityToken, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, FieldBehavior, FieldRule, FieldSensitivity, FieldSource, FieldTypeWord, ForbiddenEnvelopeWord, Freshness, HiddenFieldNotice, Home, KERNEL_TABLES, KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, MergeField, MergeFieldModifier, MergeFieldProvenance, MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, MergeFieldTransform, MissingBehavior, ON_DELETE, OVERRIDE_POLICIES, OnDelete, OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, ParityFieldType, ParityFieldTypeDescriptor, PerValueAccessWord, PermissionLevel, PortalPrincipal, PortalTableExposure, ProvenancePointer, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, RecordsActor, RecordsErrorCode, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationBinding, RelationCardinality, RelationCarries, RelationFlavor, RelationProperties, RelationTarget, ResolutionTriple, RetiredActorWord, Rule, RuleAnswer, RuleExpression, RuleNodeKind, RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, StorageMode, StoreDoorName, StoreRefusalCode, SubscriptionBlock, SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, TableDisplay, TableOrigin, TableType, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, ValueAlternate, ValueAlternateKey, ValueEnvelope, ValueEnvelopeKey, ValueSource, WorkDueState, WorkInboxKind, WorkOrigin, WorkTemplateNode, WorkTemplateRelation, asPermissionLevel, atLeast, choiceSlug, choiceValuesOf, choicesOf, err, highestLevel, holdsARetiredChoice, isRecordsErr, isTheChosen, looksLikeAnId, measureKey, ok, optionKey, optionLabel, portalPath, publicFormPath } from '../index.cjs';
 
 /**
  * DOOR-8. As-of on EITHER clock, and they are different questions:
@@ -272,6 +272,99 @@ interface RecordsClient {
         form_id?: Uuid | null;
         slug?: string | null;
     }): Promise<RecordsResult<Uuid>>;
+    /** Every portal over this organization the caller may know about, with its numbers. */
+    portals(): Promise<RecordsResult<PortalSummary[]>>;
+    /** ONE portal in full: what it shows, and who it was opened to. */
+    portalCard(args: {
+        portal_id: Uuid;
+    }): Promise<RecordsResult<PortalCard>>;
+    /**
+     * Create or RE-STATE one portal. Re-stating REPLACES what it exposes — a
+     * Table left out of `tables` stops being exposed in the same act — and leaves
+     * the people alone: who is invited is not part of what the portal shows.
+     */
+    portalDeclare(args: {
+        title: string;
+        client_table_id: Uuid;
+        tables: Array<{
+            table_id: Uuid;
+            names_via: string;
+            visible_fields?: string[];
+            editable_fields?: string[];
+            comments?: boolean;
+        }>;
+        portal_id?: Uuid | null;
+        slug?: string | null;
+        sign_in_method?: string | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /**
+     * Invite one person, as one record of the portal's client Table.
+     *
+     * `user_id` is deliberately NOT a parameter here. From a screen it is always
+     * null: an invitation confers NOTHING until the person follows their sign-in
+     * link and the platform gives them an identity, and the door's own `say`
+     * sentence states exactly that. A screen that passed an id would be granting
+     * access on somebody else's behalf.
+     */
+    portalInvite(args: {
+        portal_id: Uuid;
+        client_record_id: Uuid;
+        email: string;
+    }): Promise<RecordsResult<PortalInvitation>>;
+    /** Take one person's way in away. The answer's `say` names the consequence. */
+    portalRevoke(args: {
+        portal_id: Uuid;
+        principal_id: Uuid;
+    }): Promise<RecordsResult<PortalRevocation>>;
+    /**
+     * VIEW AS THIS CLIENT. The door asks `custom.visible_set` for HER user id —
+     * the same call `custom.read_records` makes when she opens the page — so this
+     * cannot disagree with what she sees. It REFUSES with `02000` and a sentence
+     * when she has not signed in yet; show the sentence, never an empty list.
+     */
+    portalPreview(args: {
+        portal_id: Uuid;
+        principal_id: Uuid;
+        table_id: Uuid;
+    }): Promise<RecordsResult<PortalPreviewRow[]>>;
+    /** This organization's dashboards, optionally only those whose subject is one Table. */
+    dashboards(args?: {
+        table_id?: Uuid | null;
+    }): Promise<RecordsResult<DashboardSummary[]>>;
+    /**
+     * Create or re-state one dashboard. Every block is judged on the way IN —
+     * a block naming a field this Table does not have is refused BY NAME, with
+     * the table's own field list in the hint — so a canvas cannot be saved broken.
+     */
+    dashboardDeclare(args: {
+        table_id: Uuid;
+        name: string;
+        blocks?: DashboardBlock[];
+        presentation?: Record<string, unknown> | null;
+        dashboard_id?: Uuid | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /**
+     * Run every block and answer the numbers. `filter` is the ONE filter bar
+     * across the canvas: it is merged UNDER each block's own filter, so a block
+     * deliberately scoped to one stage stays scoped while the bar moves the rest.
+     * A block that refuses carries the store's sentence and the others still answer.
+     */
+    dashboardRun(args: {
+        dashboard_id: Uuid;
+        filter?: Record<string, AggregateFilter>;
+    }): Promise<RecordsResult<DashboardRunResult>>;
+    /** The seventh block kind on its own: records that have sat on the same value too long. */
+    dashboardStuck(args: {
+        table_id: Uuid;
+        state_key: string;
+        days?: number;
+        filter?: Record<string, AggregateFilter>;
+        limit?: number;
+    }): Promise<RecordsResult<StuckRow[]>>;
+    /** Take a dashboard away. The records it counted are untouched — a canvas owns nothing. */
+    dashboardDelete(args: {
+        dashboard_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
     /**
      * Group, bucket, filter and measure INSIDE `custom.record_aggregate`. The
      * aggregate node sits above the visibility join, so what a chart draws is
@@ -289,8 +382,11 @@ interface RecordsClient {
             key: string;
             by: AggregateBucket;
         } | null;
-        /** Equality only, and it lands in the SAME WHERE as visibility. */
-        filter?: Record<string, string>;
+        /**
+         * A scalar is an equality and an object is a half-open moment window, and
+         * either way it lands in the SAME WHERE as visibility.
+         */
+        filter?: Record<string, AggregateFilter>;
         limit?: number;
     }): Promise<RecordsResult<AggregateRow[]>>;
     /** The measures the store itself offers. Asked, never hardcoded in a picker. */
@@ -309,6 +405,33 @@ interface RecordsClient {
     }): Promise<RecordsResult<Subscription[]>>;
     /** The cadences the store itself offers. Asked, never hardcoded in a picker. */
     aggSubscriptionCadences(): Promise<RecordsResult<string[]>>;
+    /**
+     * The same cadences, through the door a PERSON may call.
+     * `aggSubscriptionCadences` is the notifier's own and holds no client grant,
+     * so a screen that asked for it was refused and fell back to a list typed
+     * into the picker — which drifts from what the digest runner honours. This
+     * one delegates to the same array, so there is exactly one list.
+     */
+    subscriptionCadences(): Promise<RecordsResult<string[]>>;
+    /**
+     * WHAT THIS PERSON IS BEING TOLD ABOUT, and what they may switch off.
+     *
+     * Mine, plus anyone's over a Table I hold admin on — narrowed to Tables I can
+     * already open, so the list never reveals one. `aggSubscriptions` above is the
+     * NOTIFIER's reader and no client can call it; this is the owner's.
+     */
+    subscriptions(args?: {
+        table_id?: Uuid | null;
+    }): Promise<RecordsResult<MySubscription[]>>;
+    /**
+     * Switch one on or off. Muting is honoured in ONE place — the reader every
+     * consumer goes through — so a screen can never say a subscription is off
+     * while it keeps firing.
+     */
+    subscriptionMute(args: {
+        rule_id: Uuid;
+        muted: boolean;
+    }): Promise<RecordsResult<boolean>>;
     docTemplateSave(args: {
         table_id: Uuid;
         name: string;
@@ -344,15 +467,23 @@ interface RecordsClient {
     docSignatureIntact(args: {
         signature_id: Uuid;
     }): Promise<RecordsResult<unknown>>;
-    /** Every template that renders one Table. */
+    /** Every template that renders one Table. Viewer on the Table. */
     docTemplates(args: {
         table_id: Uuid;
     }): Promise<RecordsResult<DocTemplateRow[]>>;
-    /** Every frozen render of one record, newest first. */
+    /**
+     * Retire one template. EDITOR on the Table it renders, because a template is
+     * that Table's wording. Documents already rendered keep their frozen bytes
+     * and their seals, so this can never invalidate a signature.
+     */
+    docTemplateDelete(args: {
+        template_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
+    /** Every frozen render of one record, newest first. Viewer on the record. */
     docRenders(args: {
         record_id: Uuid;
     }): Promise<RecordsResult<DocRenderRow[]>>;
-    /** Every signature on one record. */
+    /** Every signature on one record. Viewer on the record. */
     docSignatures(args: {
         record_id: Uuid;
     }): Promise<RecordsResult<DocSignatureRow[]>>;
@@ -728,11 +859,25 @@ declare const DOORS: {
     readonly ruleEval: "rule_eval";
     readonly forms: "forms";
     readonly formDeclare: "form_declare";
+    readonly portals: "portals";
+    readonly portalCard: "portal_card";
+    readonly portalDeclare: "portal_declare";
+    readonly portalInvite: "portal_invite";
+    readonly portalRevoke: "portal_revoke";
+    readonly portalPreview: "portal_preview";
+    readonly dashboards: "dashboards";
+    readonly dashboardDeclare: "dashboard_declare";
+    readonly dashboardRun: "dashboard_run";
+    readonly dashboardStuck: "dashboard_stuck";
+    readonly dashboardDelete: "dashboard_delete";
     readonly recordAggregate: "record_aggregate";
     readonly aggOperations: "agg_operations";
     readonly aggBuckets: "agg_buckets";
     readonly aggSubscriptions: "agg_subscriptions";
     readonly aggSubscriptionCadences: "agg_subscription_cadences";
+    readonly subscriptions: "subscriptions";
+    readonly subscriptionMute: "subscription_mute";
+    readonly subscriptionCadences: "subscription_cadences";
     readonly docTemplateSave: "doc_template_save";
     readonly docRenderBody: "doc_render_body";
     readonly docRenderDocument: "doc_render_document";
@@ -740,6 +885,10 @@ declare const DOORS: {
     readonly docUnresolvedTokens: "doc_unresolved_tokens";
     readonly docSign: "doc_sign";
     readonly docSignatureIntact: "doc_signature_intact";
+    readonly docTemplates: "doc_templates";
+    readonly docTemplateDelete: "doc_template_delete";
+    readonly docRenders: "doc_renders";
+    readonly docSignatures: "doc_signatures";
     readonly anonTokenIssue: "anon_token_issue";
     readonly anonTokenVerify: "anon_token_verify";
     readonly anonTokenRevoke: "anon_token_revoke";
@@ -898,4 +1047,4 @@ declare function parseCsv(text: string): string[][];
 declare function importCsv(fields: Field[], text: string): ParsedImport;
 declare function importXlsx(fields: Field[], bytes: ArrayBuffer | Uint8Array): Promise<ParsedImport>;
 
-export { AggregateBucket, AggregateMeasure, AggregateRow, AnonTokenBinding, type AsOf, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, EntityFieldRights, EntityRecordRead, EntityRecordsFound, EntityTableFacts, type ExportRow, ExternalPrincipalCard, Field, FieldPatch, FieldProposal, FormSummary, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, NewEntityFieldDeclaration, NewFieldDeclaration, type ParsedImport, PgError, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, type RecordQuery, RecordRead, RecordRevision, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsResult, RelationCoordinate, ResolvedPublishBinding, StaleWriteDetail, StoredRecord, Subscription, type SupabaseLike, Table, TableCapacity, TableProposal, Timestamp, Uuid, WorkApprovalDecision, WorkApprovalFiled, WorkApprover, WorkAssignment, WorkAssignmentField, WorkChange, WorkGraph, WorkInboxItem, WorkInstantiation, WorkListFlavour, WorkListItem, WorkRecordState, WorkSlotHold, WorkState, WorkTurn, WriteConflict, asWriteConflict, cellText, createRecordsClient, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, importCsv, importXlsx, intersectIds, mapPgError, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa };
+export { AggregateBucket, AggregateFilter, AggregateMeasure, AggregateRow, AnonTokenBinding, type AsOf, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DashboardBlock, DashboardRunResult, DashboardSummary, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, EntityFieldRights, EntityRecordRead, EntityRecordsFound, EntityTableFacts, type ExportRow, ExternalPrincipalCard, Field, FieldPatch, FieldProposal, FormSummary, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, MySubscription, NewEntityFieldDeclaration, NewFieldDeclaration, type ParsedImport, PgError, PortalCard, PortalInvitation, PortalPreviewRow, PortalRevocation, PortalSummary, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, type RecordQuery, RecordRead, RecordRevision, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsResult, RelationCoordinate, ResolvedPublishBinding, StaleWriteDetail, StoredRecord, StuckRow, Subscription, type SupabaseLike, Table, TableCapacity, TableProposal, Timestamp, Uuid, WorkApprovalDecision, WorkApprovalFiled, WorkApprover, WorkAssignment, WorkAssignmentField, WorkChange, WorkGraph, WorkInboxItem, WorkInstantiation, WorkListFlavour, WorkListItem, WorkRecordState, WorkSlotHold, WorkState, WorkTurn, WriteConflict, asWriteConflict, cellText, createRecordsClient, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, importCsv, importXlsx, intersectIds, mapPgError, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa };

package/dist/core/index.d.ts

@@ -1,5 +1,5 @@
-import { Timestamp, Uuid, RelationCoordinate, RecordsConfig, RecordDocument, RecordsResult, RecordRead, ReadRow, Table, Field, StoredRecord, TableCapacity, NewFieldDeclaration, FieldPatch, EntityTableFacts, NewEntityFieldDeclaration, EntityFieldRights, EntityRecordRead, EntityRecordsFound, FormSummary, AggregateMeasure, AggregateBucket, AggregateRow, Subscription, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordRevision, ReadValue, AnonTokenBinding, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, WorkInboxItem, WorkListFlavour, WorkListItem, WorkAssignment, WorkRecordState, WorkApprover, WorkChange, WorkApprovalFiled, WorkApprovalDecision, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, FieldProposal, TableProposal, MyLevel, RecordsError, WriteConflict, PgError, RecordsDataSource, StaleWriteDetail, PredictedRefusal } from '../index.js';
-export { ABSENCE_REASONS, ACTOR_VOCABULARY, AbsenceReason, Actor, AggregateOperation, COMPUTE_ON, CONTEXT_POLICIES, ComputeOn, ContextPolicy, CustomFieldTableType, DELIVERIES, Delivery, DocSignatureCheck, ENTITY_TOKENS, EntityFieldValue, EntityRecordMatch, EntityToken, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, FieldBehavior, FieldRule, FieldSensitivity, FieldSource, ForbiddenEnvelopeWord, Freshness, HiddenFieldNotice, Home, KERNEL_TABLES, KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, MergeField, MergeFieldModifier, MergeFieldProvenance, MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, MergeFieldTransform, MissingBehavior, ON_DELETE, OVERRIDE_POLICIES, OnDelete, OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, ParityFieldType, ParityFieldTypeDescriptor, PerValueAccessWord, PermissionLevel, ProvenancePointer, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, RecordsActor, RecordsErrorCode, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationBinding, RelationCardinality, RelationCarries, RelationFlavor, RelationProperties, RelationTarget, ResolutionTriple, RetiredActorWord, Rule, RuleAnswer, RuleExpression, RuleNodeKind, RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, StorageMode, StoreDoorName, StoreRefusalCode, SubscriptionBlock, SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, TableDisplay, TableOrigin, TableType, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, ValueAlternate, ValueAlternateKey, ValueEnvelope, ValueEnvelopeKey, ValueSource, WorkDueState, WorkInboxKind, WorkOrigin, WorkTemplateNode, WorkTemplateRelation, asPermissionLevel, atLeast, err, highestLevel, isRecordsErr, measureKey, ok, publicFormPath } from '../index.js';
+import { Timestamp, Uuid, RelationCoordinate, RecordsConfig, RecordDocument, RecordsResult, RecordRead, ReadRow, Table, Field, StoredRecord, TableCapacity, NewFieldDeclaration, FieldPatch, EntityTableFacts, NewEntityFieldDeclaration, EntityFieldRights, EntityRecordRead, EntityRecordsFound, FormSummary, PortalSummary, PortalCard, PortalInvitation, PortalRevocation, PortalPreviewRow, DashboardSummary, DashboardBlock, AggregateFilter, DashboardRunResult, StuckRow, AggregateMeasure, AggregateBucket, AggregateRow, Subscription, MySubscription, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordRevision, ReadValue, AnonTokenBinding, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, WorkInboxItem, WorkListFlavour, WorkListItem, WorkAssignment, WorkRecordState, WorkApprover, WorkChange, WorkApprovalFiled, WorkApprovalDecision, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, FieldProposal, TableProposal, MyLevel, RecordsError, WriteConflict, PgError, RecordsDataSource, StaleWriteDetail, PredictedRefusal } from '../index.js';
+export { ABSENCE_REASONS, ACTOR_VOCABULARY, AbsenceReason, Actor, AggregateOperation, AggregateWindow, COMPUTE_ON, CONTEXT_POLICIES, ChoiceOption, ComputeOn, ContextPolicy, CustomFieldTableType, DELIVERIES, DashboardBlockKind, DashboardBlockResult, Delivery, DocSignatureCheck, ENTITY_TOKENS, EntityFieldValue, EntityRecordMatch, EntityToken, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, FieldBehavior, FieldRule, FieldSensitivity, FieldSource, FieldTypeWord, ForbiddenEnvelopeWord, Freshness, HiddenFieldNotice, Home, KERNEL_TABLES, KernelTableName, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, MergeField, MergeFieldModifier, MergeFieldProvenance, MergeFieldResolution, MergeFieldSemanticType, MergeFieldSource, MergeFieldTransform, MissingBehavior, ON_DELETE, OVERRIDE_POLICIES, OnDelete, OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, ParityFieldType, ParityFieldTypeDescriptor, PerValueAccessWord, PermissionLevel, PortalPrincipal, PortalTableExposure, ProvenancePointer, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, RecordsActor, RecordsErrorCode, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationBinding, RelationCardinality, RelationCarries, RelationFlavor, RelationProperties, RelationTarget, ResolutionTriple, RetiredActorWord, Rule, RuleAnswer, RuleExpression, RuleNodeKind, RuleUse, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, StorageMode, StoreDoorName, StoreRefusalCode, SubscriptionBlock, SubscriptionCadence, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, TableDisplay, TableOrigin, TableType, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, ValueAlternate, ValueAlternateKey, ValueEnvelope, ValueEnvelopeKey, ValueSource, WorkDueState, WorkInboxKind, WorkOrigin, WorkTemplateNode, WorkTemplateRelation, asPermissionLevel, atLeast, choiceSlug, choiceValuesOf, choicesOf, err, highestLevel, holdsARetiredChoice, isRecordsErr, isTheChosen, looksLikeAnId, measureKey, ok, optionKey, optionLabel, portalPath, publicFormPath } from '../index.js';
 
 /**
  * DOOR-8. As-of on EITHER clock, and they are different questions:
@@ -272,6 +272,99 @@ interface RecordsClient {
         form_id?: Uuid | null;
         slug?: string | null;
     }): Promise<RecordsResult<Uuid>>;
+    /** Every portal over this organization the caller may know about, with its numbers. */
+    portals(): Promise<RecordsResult<PortalSummary[]>>;
+    /** ONE portal in full: what it shows, and who it was opened to. */
+    portalCard(args: {
+        portal_id: Uuid;
+    }): Promise<RecordsResult<PortalCard>>;
+    /**
+     * Create or RE-STATE one portal. Re-stating REPLACES what it exposes — a
+     * Table left out of `tables` stops being exposed in the same act — and leaves
+     * the people alone: who is invited is not part of what the portal shows.
+     */
+    portalDeclare(args: {
+        title: string;
+        client_table_id: Uuid;
+        tables: Array<{
+            table_id: Uuid;
+            names_via: string;
+            visible_fields?: string[];
+            editable_fields?: string[];
+            comments?: boolean;
+        }>;
+        portal_id?: Uuid | null;
+        slug?: string | null;
+        sign_in_method?: string | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /**
+     * Invite one person, as one record of the portal's client Table.
+     *
+     * `user_id` is deliberately NOT a parameter here. From a screen it is always
+     * null: an invitation confers NOTHING until the person follows their sign-in
+     * link and the platform gives them an identity, and the door's own `say`
+     * sentence states exactly that. A screen that passed an id would be granting
+     * access on somebody else's behalf.
+     */
+    portalInvite(args: {
+        portal_id: Uuid;
+        client_record_id: Uuid;
+        email: string;
+    }): Promise<RecordsResult<PortalInvitation>>;
+    /** Take one person's way in away. The answer's `say` names the consequence. */
+    portalRevoke(args: {
+        portal_id: Uuid;
+        principal_id: Uuid;
+    }): Promise<RecordsResult<PortalRevocation>>;
+    /**
+     * VIEW AS THIS CLIENT. The door asks `custom.visible_set` for HER user id —
+     * the same call `custom.read_records` makes when she opens the page — so this
+     * cannot disagree with what she sees. It REFUSES with `02000` and a sentence
+     * when she has not signed in yet; show the sentence, never an empty list.
+     */
+    portalPreview(args: {
+        portal_id: Uuid;
+        principal_id: Uuid;
+        table_id: Uuid;
+    }): Promise<RecordsResult<PortalPreviewRow[]>>;
+    /** This organization's dashboards, optionally only those whose subject is one Table. */
+    dashboards(args?: {
+        table_id?: Uuid | null;
+    }): Promise<RecordsResult<DashboardSummary[]>>;
+    /**
+     * Create or re-state one dashboard. Every block is judged on the way IN —
+     * a block naming a field this Table does not have is refused BY NAME, with
+     * the table's own field list in the hint — so a canvas cannot be saved broken.
+     */
+    dashboardDeclare(args: {
+        table_id: Uuid;
+        name: string;
+        blocks?: DashboardBlock[];
+        presentation?: Record<string, unknown> | null;
+        dashboard_id?: Uuid | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /**
+     * Run every block and answer the numbers. `filter` is the ONE filter bar
+     * across the canvas: it is merged UNDER each block's own filter, so a block
+     * deliberately scoped to one stage stays scoped while the bar moves the rest.
+     * A block that refuses carries the store's sentence and the others still answer.
+     */
+    dashboardRun(args: {
+        dashboard_id: Uuid;
+        filter?: Record<string, AggregateFilter>;
+    }): Promise<RecordsResult<DashboardRunResult>>;
+    /** The seventh block kind on its own: records that have sat on the same value too long. */
+    dashboardStuck(args: {
+        table_id: Uuid;
+        state_key: string;
+        days?: number;
+        filter?: Record<string, AggregateFilter>;
+        limit?: number;
+    }): Promise<RecordsResult<StuckRow[]>>;
+    /** Take a dashboard away. The records it counted are untouched — a canvas owns nothing. */
+    dashboardDelete(args: {
+        dashboard_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
     /**
      * Group, bucket, filter and measure INSIDE `custom.record_aggregate`. The
      * aggregate node sits above the visibility join, so what a chart draws is
@@ -289,8 +382,11 @@ interface RecordsClient {
             key: string;
             by: AggregateBucket;
         } | null;
-        /** Equality only, and it lands in the SAME WHERE as visibility. */
-        filter?: Record<string, string>;
+        /**
+         * A scalar is an equality and an object is a half-open moment window, and
+         * either way it lands in the SAME WHERE as visibility.
+         */
+        filter?: Record<string, AggregateFilter>;
         limit?: number;
     }): Promise<RecordsResult<AggregateRow[]>>;
     /** The measures the store itself offers. Asked, never hardcoded in a picker. */
@@ -309,6 +405,33 @@ interface RecordsClient {
     }): Promise<RecordsResult<Subscription[]>>;
     /** The cadences the store itself offers. Asked, never hardcoded in a picker. */
     aggSubscriptionCadences(): Promise<RecordsResult<string[]>>;
+    /**
+     * The same cadences, through the door a PERSON may call.
+     * `aggSubscriptionCadences` is the notifier's own and holds no client grant,
+     * so a screen that asked for it was refused and fell back to a list typed
+     * into the picker — which drifts from what the digest runner honours. This
+     * one delegates to the same array, so there is exactly one list.
+     */
+    subscriptionCadences(): Promise<RecordsResult<string[]>>;
+    /**
+     * WHAT THIS PERSON IS BEING TOLD ABOUT, and what they may switch off.
+     *
+     * Mine, plus anyone's over a Table I hold admin on — narrowed to Tables I can
+     * already open, so the list never reveals one. `aggSubscriptions` above is the
+     * NOTIFIER's reader and no client can call it; this is the owner's.
+     */
+    subscriptions(args?: {
+        table_id?: Uuid | null;
+    }): Promise<RecordsResult<MySubscription[]>>;
+    /**
+     * Switch one on or off. Muting is honoured in ONE place — the reader every
+     * consumer goes through — so a screen can never say a subscription is off
+     * while it keeps firing.
+     */
+    subscriptionMute(args: {
+        rule_id: Uuid;
+        muted: boolean;
+    }): Promise<RecordsResult<boolean>>;
     docTemplateSave(args: {
         table_id: Uuid;
         name: string;
@@ -344,15 +467,23 @@ interface RecordsClient {
     docSignatureIntact(args: {
         signature_id: Uuid;
     }): Promise<RecordsResult<unknown>>;
-    /** Every template that renders one Table. */
+    /** Every template that renders one Table. Viewer on the Table. */
     docTemplates(args: {
         table_id: Uuid;
     }): Promise<RecordsResult<DocTemplateRow[]>>;
-    /** Every frozen render of one record, newest first. */
+    /**
+     * Retire one template. EDITOR on the Table it renders, because a template is
+     * that Table's wording. Documents already rendered keep their frozen bytes
+     * and their seals, so this can never invalidate a signature.
+     */
+    docTemplateDelete(args: {
+        template_id: Uuid;
+    }): Promise<RecordsResult<boolean>>;
+    /** Every frozen render of one record, newest first. Viewer on the record. */
     docRenders(args: {
         record_id: Uuid;
     }): Promise<RecordsResult<DocRenderRow[]>>;
-    /** Every signature on one record. */
+    /** Every signature on one record. Viewer on the record. */
     docSignatures(args: {
         record_id: Uuid;
     }): Promise<RecordsResult<DocSignatureRow[]>>;
@@ -728,11 +859,25 @@ declare const DOORS: {
     readonly ruleEval: "rule_eval";
     readonly forms: "forms";
     readonly formDeclare: "form_declare";
+    readonly portals: "portals";
+    readonly portalCard: "portal_card";
+    readonly portalDeclare: "portal_declare";
+    readonly portalInvite: "portal_invite";
+    readonly portalRevoke: "portal_revoke";
+    readonly portalPreview: "portal_preview";
+    readonly dashboards: "dashboards";
+    readonly dashboardDeclare: "dashboard_declare";
+    readonly dashboardRun: "dashboard_run";
+    readonly dashboardStuck: "dashboard_stuck";
+    readonly dashboardDelete: "dashboard_delete";
     readonly recordAggregate: "record_aggregate";
     readonly aggOperations: "agg_operations";
     readonly aggBuckets: "agg_buckets";
     readonly aggSubscriptions: "agg_subscriptions";
     readonly aggSubscriptionCadences: "agg_subscription_cadences";
+    readonly subscriptions: "subscriptions";
+    readonly subscriptionMute: "subscription_mute";
+    readonly subscriptionCadences: "subscription_cadences";
     readonly docTemplateSave: "doc_template_save";
     readonly docRenderBody: "doc_render_body";
     readonly docRenderDocument: "doc_render_document";
@@ -740,6 +885,10 @@ declare const DOORS: {
     readonly docUnresolvedTokens: "doc_unresolved_tokens";
     readonly docSign: "doc_sign";
     readonly docSignatureIntact: "doc_signature_intact";
+    readonly docTemplates: "doc_templates";
+    readonly docTemplateDelete: "doc_template_delete";
+    readonly docRenders: "doc_renders";
+    readonly docSignatures: "doc_signatures";
     readonly anonTokenIssue: "anon_token_issue";
     readonly anonTokenVerify: "anon_token_verify";
     readonly anonTokenRevoke: "anon_token_revoke";
@@ -898,4 +1047,4 @@ declare function parseCsv(text: string): string[][];
 declare function importCsv(fields: Field[], text: string): ParsedImport;
 declare function importXlsx(fields: Field[], bytes: ArrayBuffer | Uint8Array): Promise<ParsedImport>;
 
-export { AggregateBucket, AggregateMeasure, AggregateRow, AnonTokenBinding, type AsOf, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, EntityFieldRights, EntityRecordRead, EntityRecordsFound, EntityTableFacts, type ExportRow, ExternalPrincipalCard, Field, FieldPatch, FieldProposal, FormSummary, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, NewEntityFieldDeclaration, NewFieldDeclaration, type ParsedImport, PgError, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, type RecordQuery, RecordRead, RecordRevision, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsResult, RelationCoordinate, ResolvedPublishBinding, StaleWriteDetail, StoredRecord, Subscription, type SupabaseLike, Table, TableCapacity, TableProposal, Timestamp, Uuid, WorkApprovalDecision, WorkApprovalFiled, WorkApprover, WorkAssignment, WorkAssignmentField, WorkChange, WorkGraph, WorkInboxItem, WorkInstantiation, WorkListFlavour, WorkListItem, WorkRecordState, WorkSlotHold, WorkState, WorkTurn, WriteConflict, asWriteConflict, cellText, createRecordsClient, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, importCsv, importXlsx, intersectIds, mapPgError, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa };
+export { AggregateBucket, AggregateFilter, AggregateMeasure, AggregateRow, AnonTokenBinding, type AsOf, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DashboardBlock, DashboardRunResult, DashboardSummary, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, EntityFieldRights, EntityRecordRead, EntityRecordsFound, EntityTableFacts, type ExportRow, ExternalPrincipalCard, Field, FieldPatch, FieldProposal, FormSummary, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, MySubscription, NewEntityFieldDeclaration, NewFieldDeclaration, type ParsedImport, PgError, PortalCard, PortalInvitation, PortalPreviewRow, PortalRevocation, PortalSummary, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, type RecordQuery, RecordRead, RecordRevision, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsResult, RelationCoordinate, ResolvedPublishBinding, StaleWriteDetail, StoredRecord, StuckRow, Subscription, type SupabaseLike, Table, TableCapacity, TableProposal, Timestamp, Uuid, WorkApprovalDecision, WorkApprovalFiled, WorkApprover, WorkAssignment, WorkAssignmentField, WorkChange, WorkGraph, WorkInboxItem, WorkInstantiation, WorkListFlavour, WorkListItem, WorkRecordState, WorkSlotHold, WorkState, WorkTurn, WriteConflict, asWriteConflict, cellText, createRecordsClient, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, importCsv, importXlsx, intersectIds, mapPgError, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa };