@ai-matrx/records 0.49.0 → 0.52.0

package/CHANGELOG.md

@@ -1,5 +1,52 @@
 # Changelog — @ai-matrx/records
 
+## 0.51.0
+
+**The seal is asked through its own door.** (lane FIX-10B, from VERIFIER-10 finding F6.)
+
+* This package published `docSignatureIntact` and did NOT publish `docSignatureRead`, so the
+  one screen that shows a signature asked the half that cannot answer. `custom.doc_signature_intact`
+  is the INTERNAL half of that pair: SECURITY INVOKER over a doors-only table, so from a browser
+  every seal check answered **`42501 permission denied for table doc_signature`** — measured live
+  from the admin seat on 2026-09-22, on a signature this lane had just written successfully.
+* `custom.doc_signature_read` is the door built for a client: SECURITY DEFINER, asking
+  `assert_client_may_reach` and `assert_client_may_open` on the RECORD by name, and it returns the
+  seal AND the verdict in one answer — it calls `doc_signature_intact` itself and merges the
+  result, because a seal a person can read and a verdict they cannot is how a changed agreement
+  keeps wearing somebody's signature.
+* **`docSignatureIntact` is gone and `docSignatureRead` replaces it.** No deprecated twin: a door
+  that cannot answer is not a fallback. One call per signature instead of two.
+* **Consumer action:** replace `client.docSignatureIntact({ signature_id })` with
+  `client.docSignatureRead({ signature_id })`. The answer is a superset — the same
+  `intact` / `verdict` / `document_unchanged` / `value_unchanged` keys, plus the seal itself
+  (`signer_name`, `signed_at`, `document_hash`, `document_version`, `record_id`, `field_key`).
+
+## 0.50.0
+
+**The store publishes every kind a column can be, and `signature` is one of them.** (lane FIX-10B-F6, from VERIFIER-10 finding F6.)
+
+* Under a rendered document on a plumbing company's Crews table the screen said, in its own
+  words: *"To ask somebody to sign one of these, Crews needs a signature column — a text
+  column whose format is signature. Declare one in section 1 and the button appears here."*
+  There is no such control in section 1, and there never was: the only list of column kinds
+  any screen could read was `custom.parity_field_types()`, FLD-11's fourteen-row parity
+  FLOOR. Every kind that is not on that floor — plain text, long text, number, a
+  person-aimed relation and a signature — lived as an inline literal inside
+  `custom._field_document_for`. So `custom.doc_sign`, granted to `authenticated` and
+  accepting exactly one field shape, could not be reached from the product at all.
+* **`DECLARABLE_FIELD_KINDS` and `DeclarableFieldKind` — the ONE registry**, generated from
+  the store's new `custom.field_kinds()` by `pnpm records:generate`. It SELECTS from the
+  parity floor rather than restating it, so a fifteenth parity type appears in both the day
+  it appears in one. `ParityFieldType` is unchanged and still means what it always meant:
+  which of the fourteen a field IS, which is a different question from what a person may
+  pick.
+* **`FieldTypeWord` now spans that registry**, so `{ type: "signature" }` is a declaration a
+  typed caller can send. `custom._field_document_for` answers to the word (and to `sign`,
+  `e_signature`, `esignature`), and its "there is no kind of column called X" refusal now
+  names every kind instead of the parity floor alone.
+* Consumer action: none required. `@ai-matrx/records-ui` 0.73.0 puts the kind on the
+  Add-field menu.
+
 ## 0.49.0
 
 **A number on a dashboard can be walked into.** (lane DRILL.)

package/dist/core/index.cjs

@@ -32,10 +32,16 @@ var core_exports = {};
 __export(core_exports, {
   ABSENCE_REASONS: () => ABSENCE_REASONS,
   ACTOR_VOCABULARY: () => ACTOR_VOCABULARY,
+  ARCHIVE_LANES: () => ARCHIVE_LANES,
+  ARCHIVE_LANE_LABEL: () => ARCHIVE_LANE_LABEL,
+  ARCHIVE_LANE_MEANS: () => ARCHIVE_LANE_MEANS,
   COMPUTE_ON: () => COMPUTE_ON,
   CONTEXT_POLICIES: () => CONTEXT_POLICIES,
+  DECLARABLE_FIELD_KINDS: () => DECLARABLE_FIELD_KINDS,
+  DEFAULT_ARCHIVE_LANE: () => DEFAULT_ARCHIVE_LANE,
   DEFAULT_DOCUMENT_MAX_BYTES: () => DEFAULT_DOCUMENT_MAX_BYTES,
   DEFAULT_PAGE_SIZE: () => DEFAULT_PAGE_SIZE,
+  DEFAULT_PORTAL_ARCHIVE_FILTER: () => DEFAULT_PORTAL_ARCHIVE_FILTER,
   DEFAULT_VALUE_MAX_BYTES: () => DEFAULT_VALUE_MAX_BYTES,
   DELIVERIES: () => DELIVERIES,
   DOORS: () => DOORS,
@@ -55,6 +61,7 @@ __export(core_exports, {
   PERMISSION_LEVELS: () => PERMISSION_LEVELS,
   PER_VALUE_ACCESS_WORDS: () => PER_VALUE_ACCESS_WORDS,
   PIPELINE_RULE_KINDS: () => PIPELINE_RULE_KINDS,
+  PORTAL_ARCHIVE_FILTERS: () => PORTAL_ARCHIVE_FILTERS,
   REFUSALS_WORTH_REPEATING: () => REFUSALS_WORTH_REPEATING,
   RELATION_BINDINGS: () => RELATION_BINDINGS,
   RELATION_CARDINALITIES: () => RELATION_CARDINALITIES,
@@ -73,6 +80,8 @@ __export(core_exports, {
   TABLE_TYPES: () => TABLE_TYPES,
   VALUE_ALTERNATE_KEYS: () => VALUE_ALTERNATE_KEYS,
   VALUE_ENVELOPE_KEYS: () => VALUE_ENVELOPE_KEYS,
+  archivedByLine: () => archivedByLine,
+  archivedWhen: () => archivedWhen,
   asPermissionLevel: () => asPermissionLevel,
   asWriteConflict: () => asWriteConflict,
   atLeast: () => atLeast,
@@ -88,6 +97,8 @@ __export(core_exports, {
   doorAbsent: () => doorAbsent,
   doorCensus: () => doorCensus,
   doorExists: () => doorExists,
+  emptyArchiveLine: () => emptyArchiveLine,
+  emptyPortalArchiveLine: () => emptyPortalArchiveLine,
   err: () => err,
   exportCsv: () => exportCsv,
   exportXlsx: () => exportXlsx,
@@ -99,8 +110,10 @@ __export(core_exports, {
   importXlsx: () => importXlsx,
   indexedDbStore: () => indexedDbStore,
   intersectIds: () => intersectIds,
+  isArchiveLane: () => isArchiveLane,
   isDecided: () => isDecided,
   isOwnOp: () => isOwnOp,
+  isPortalArchiveFilter: () => isPortalArchiveFilter,
   isRecordsErr: () => isRecordsErr,
   isTheChosen: () => isTheChosen,
   looksLikeAnId: () => looksLikeAnId,
@@ -116,13 +129,17 @@ __export(core_exports, {
   optionLabel: () => optionLabel,
   parseCsv: () => parseCsv,
   planQuery: () => planQuery,
+  portalArchiveConsequence: () => portalArchiveConsequence,
+  portalConfirmLine: () => portalConfirmLine,
   portalPath: () => portalPath,
+  portalTitleTypedBack: () => portalTitleTypedBack,
   predictEnvelopeRefusal: () => predictEnvelopeRefusal,
   predictSizeRefusal: () => predictSizeRefusal,
   predictValueRefusals: () => predictValueRefusals,
   predictWriteRefusals: () => predictWriteRefusals,
   publicFormPath: () => publicFormPath,
   rememberedOpCount: () => rememberedOpCount,
+  sameDocument: () => sameDocument,
   scopeChip: () => scopeChip,
   stableFilterKey: () => stableFilterKey,
   staleWriteDetail: () => staleWriteDetail,
@@ -187,6 +204,46 @@ var OVERRIDE_POLICIES = [
 var FRESHNESS = ["live", "cached", "snapshot"];
 var TABLE_DISPLAYS = ["list", "grid", "board", "calendar", "timeline"];
 
+// src/archive.ts
+var ARCHIVE_LANES = ["mine", "org"];
+var DEFAULT_ARCHIVE_LANE = "org";
+var ARCHIVE_LANE_LABEL = {
+  mine: "Archived by me",
+  org: "Archived by anyone"
+};
+var ARCHIVE_LANE_MEANS = {
+  mine: "The records you archived yourself.",
+  org: "Everything anybody in this organization archived, including you."
+};
+function isArchiveLane(word) {
+  return typeof word === "string" && ARCHIVE_LANES.includes(word);
+}
+function archivedWhen(at, locale = "en-GB") {
+  const when = new Date(at);
+  if (Number.isNaN(when.getTime())) return "a moment nobody recorded";
+  return new Intl.DateTimeFormat(locale, {
+    day: "numeric",
+    month: "long",
+    year: "numeric",
+    hour: "2-digit",
+    minute: "2-digit"
+  }).format(when);
+}
+function archivedByLine(row, locale = "en-GB") {
+  const when = archivedWhen(row.archivedAt, locale);
+  const who = (row.archivedByName ?? "").trim();
+  if (who === "") {
+    return `Archived on ${when}. The store does not know who archived it \u2014 whoever did is no longer in this organization, or it happened before this table kept that.`;
+  }
+  return `Archived by ${who} on ${when}.`;
+}
+function emptyArchiveLine(lane) {
+  return lane === "mine" ? "You have not archived anything in this table. Switch to \u201CArchived by anyone\u201D to see what the rest of the organization has." : "Nothing in this table has been archived. Records you remove from the grid arrive here, and nothing is ever destroyed.";
+}
+function sameDocument(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+
 // src/level.ts
 var PERMISSION_LEVELS = [
   "viewer",
@@ -480,6 +537,24 @@ function publicFormPath(formId) {
 function portalPath(slug) {
   return `/portal/c/${slug}`;
 }
+var PORTAL_ARCHIVE_FILTERS = ["active", "archived", "all"];
+var DEFAULT_PORTAL_ARCHIVE_FILTER = "active";
+function isPortalArchiveFilter(word) {
+  return typeof word === "string" && PORTAL_ARCHIVE_FILTERS.includes(word);
+}
+function portalArchiveConsequence(title, signedIn, invited) {
+  const people = invited === 0 ? "Nobody is invited to it" : signedIn === 0 ? `The ${invited} ${invited === 1 ? "person" : "people"} invited to it will not be able to sign in` : `The ${signedIn} ${signedIn === 1 ? "person" : "people"} signed in to it, and the ${invited - signedIn} still invited, will not be able to sign in`;
+  return `\u201C${title}\u201D will leave your portal list. ${people}, and their invitation links will say this portal was archived and can be restored. Nothing is deleted \u2014 every Table it shows and everyone invited to it is kept exactly as it is, and you can restore it at any time.`;
+}
+function portalConfirmLine(title) {
+  return `Type the portal\u2019s title \u2014 ${title} \u2014 to confirm you mean this one.`;
+}
+function portalTitleTypedBack(typed, title) {
+  return typed.trim() === (title ?? "").trim();
+}
+function emptyPortalArchiveLine() {
+  return "No portal of this organization has been archived. A portal you put away waits here until somebody restores it, and nothing is ever destroyed.";
+}
 
 // src/aggregate.ts
 function measureKey(measure) {
@@ -850,6 +925,27 @@ var PARITY_FIELD_TYPES = [
   { parity_type: "select", behavior: "list", made_of: "one choice from a Table shown as a list (FLD-5/FLD-6)" },
   { parity_type: "url", behavior: "text", made_of: "text whose format is url, with the pattern Rule that makes the format enforceable" }
 ];
+var DECLARABLE_FIELD_KINDS = [
+  { kind: "attachment", behavior: "relation", parity: true, made_of: "REC-31: a File record reached through a relation, target the kernel `File` Table" },
+  { kind: "checkbox", behavior: "boolean", parity: true, made_of: "a ticked or unticked answer, stored as a REAL boolean \u2014 and a record that never answered holds neither, so filters and group-by see three states, not two" },
+  { kind: "currency", behavior: "range", parity: true, made_of: "FLD-N-1: a number whose UNIT is the currency and whose format is currency \u2014 on the Field, never in presentation" },
+  { kind: "datetime", behavior: "range", parity: true, made_of: "a range of kind date or datetime \u2014 the dated modifier says the VALUES are dated, which is a different question" },
+  { kind: "email", behavior: "text", parity: true, made_of: "text whose format is email" },
+  { kind: "formula", behavior: "formula", parity: true, made_of: "FLD-9: a declared computation, on read or on write, evaluated by custom.rule_eval" },
+  { kind: "long_text", behavior: "text", parity: false, made_of: "behaviour text with format long and config.multiline, for several lines rather than one" },
+  { kind: "lookup", behavior: "formula", parity: true, made_of: "a Value read THROUGH a relation \u2014 config.via names the relation field, config.pick the Value on the far side" },
+  { kind: "member", behavior: "relation", parity: true, made_of: "a person: a relation whose target is the kernel `Person` Table" },
+  { kind: "multi_select", behavior: "list", parity: true, made_of: "many choices from the same Table \u2014 the multi modifier, never a second behaviour" },
+  { kind: "number", behavior: "range", parity: false, made_of: "a plain number: behaviour range with no date kind and neither the currency nor the percent format" },
+  { kind: "percent", behavior: "range", parity: true, made_of: "a number whose unit is % and whose format is percent" },
+  { kind: "phone", behavior: "text", parity: true, made_of: "text whose format is phone" },
+  { kind: "relation", behavior: "relation", parity: false, made_of: "REL / FLD-11: a relation a person aims themselves \u2014 relation_target names a Table of this organization, and it is a BEHAVIOUR, never a parity type of its own" },
+  { kind: "rollup", behavior: "formula", parity: true, made_of: "an aggregate ALONG a relation \u2014 config.via, config.of, config.agg; far-side ids are taken DISTINCT, so nothing is counted twice" },
+  { kind: "select", behavior: "list", parity: true, made_of: "one choice from a Table shown as a list (FLD-5/FLD-6)" },
+  { kind: "signature", behavior: "text", parity: false, made_of: "VAL-10: behaviour text whose format is signature \u2014 the one shape custom.doc_sign accepts, sealed by custom.doc_signature_write and checked by custom.doc_signature_intact" },
+  { kind: "text", behavior: "text", parity: false, made_of: "plain text: behaviour text with no format \u2014 it carries no parity type, which is exactly what custom.parity_type answers for it" },
+  { kind: "url", behavior: "text", parity: true, made_of: "text whose format is url, with the pattern Rule that makes the format enforceable" }
+];
 var RULE_NODE_KINDS = [
   { node: "actor_at_least", evaluated_by: "PIPELINES" },
   { node: "add", evaluated_by: "W1-RULE" },
@@ -1085,6 +1181,7 @@ var STORE_DOORS = [
   { name: "field_dependants", args: "p_organization_id uuid, p_field_id uuid", returns: "TABLE(kind text, dependant_id uuid, label text, how text)", security: "definer" },
   { name: "field_history", args: "p_organization_id uuid, p_table_id uuid, p_field_key text, p_limit integer DEFAULT 100, p_offset integer DEFAULT 0, p_record_id uuid DEFAULT NULL::uuid", returns: "TABLE(record_id uuid, record_title text, version integer, occurred_at timestamp with time zone, operation_label text, actor jsonb, before jsonb, after jsonb)", security: "definer" },
   { name: "field_kernel_id", args: "", returns: "uuid", security: "invoker" },
+  { name: "field_kinds", args: "", returns: "TABLE(kind text, behavior text, parity boolean, made_of text)", security: "invoker" },
   { name: "field_options", args: "p_organization_id uuid, p_field_id uuid", returns: "SETOF custom.record", security: "definer" },
   { name: "field_retire", args: "p_organization_id uuid, p_field_id uuid", returns: "boolean", security: "definer" },
   { name: "field_rules", args: "p_field_data jsonb", returns: "TABLE(kind text, spec jsonb)", security: "invoker" },
@@ -1133,6 +1230,7 @@ var STORE_DOORS = [
   { name: "io_export", args: "p_organization_id uuid, p_table_id uuid, p_columns text[] DEFAULT NULL::text[], p_limit integer DEFAULT 10000, p_required text DEFAULT 'viewer'::text", returns: "jsonb", security: "definer" },
   { name: "io_export_csv", args: "p_organization_id uuid, p_table_id uuid, p_columns text[] DEFAULT NULL::text[], p_limit integer DEFAULT 10000, p_delimiter text DEFAULT chr(44), p_required text DEFAULT 'viewer'::text", returns: "text", security: "definer" },
   { name: "io_import_begin", args: "p_organization_id uuid, p_table_id uuid, p_format text DEFAULT 'csv'::text, p_source_name text DEFAULT NULL::text, p_source_columns jsonb DEFAULT '[]'::jsonb, p_file_hash text DEFAULT NULL::text, p_policy jsonb DEFAULT '{}'::jsonb, p_dedupe_key text DEFAULT NULL::text, p_file_bytes bigint DEFAULT NULL::bigint, p_force boolean DEFAULT false", returns: "jsonb", security: "definer" },
+  { name: "io_import_declare_columns", args: "p_organization_id uuid, p_table_id uuid, p_rows jsonb, p_mapping jsonb DEFAULT '{}'::jsonb", returns: "jsonb", security: "definer" },
   { name: "io_import_finish", args: "p_organization_id uuid, p_import_id uuid, p_unmapped text DEFAULT NULL::text", returns: "jsonb", security: "definer" },
   { name: "io_import_forget", args: "p_organization_id uuid, p_import_id uuid", returns: "boolean", security: "definer" },
   { name: "io_import_open", args: "p_organization_id uuid, p_table_id uuid, p_format text DEFAULT 'csv'::text, p_source_name text DEFAULT NULL::text, p_source_columns jsonb DEFAULT '[]'::jsonb", returns: "uuid", security: "definer" },
@@ -1166,6 +1264,7 @@ var STORE_DOORS = [
   { name: "levels_raised_by_a_less_specific_rung", args: "", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, member_email text, record_id uuid, addressed_level permission_level, answered_level permission_level)", security: "definer" },
   { name: "list_door_disagreements", args: "p_pretend text DEFAULT NULL::text, p_only_organization uuid DEFAULT NULL::uuid, p_sample integer DEFAULT 200", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, table_id uuid, record_id uuid, door text, why text)", security: "invoker" },
   { name: "list_door_disagreements", args: "p_pretend text, p_only_organization uuid, p_sample integer, p_exhaustive boolean", returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, table_id uuid, record_id uuid, door text, why text)", security: "invoker" },
+  { name: "list_portals", args: "p_organization_id uuid, p_archived text DEFAULT 'active'::text", returns: "TABLE(portal_id uuid, title text, slug text, client_table_id uuid, client_table text, is_active boolean, tables integer, invited integer, signed_in integer, sign_in_method text, opened_at timestamp with time zone)", security: "definer" },
   { name: "lookup_value", args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb", returns: "jsonb", security: "invoker" },
   { name: "mask_document", args: "p_document jsonb, p_visible_keys text[], p_notices jsonb, p_by_id boolean DEFAULT false, p_key_ids jsonb DEFAULT '{}'::jsonb", returns: "jsonb", security: "invoker" },
   { name: "mask_document", args: "p_document jsonb, p_visible_keys text[], p_notices jsonb, p_by_id boolean DEFAULT false, p_key_ids jsonb DEFAULT '{}'::jsonb, p_declared_keys text[] DEFAULT NULL::text[]", returns: "jsonb", security: "invoker" },
@@ -1215,16 +1314,19 @@ var STORE_DOORS = [
   { name: "pipeline_read", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "pipeline_transition_refusal", args: "p_organization_id uuid, p_record_id uuid, p_to text", returns: "jsonb", security: "definer" },
   { name: "portal_admits", args: "p_organization_id uuid, p_user_id uuid DEFAULT NULL::uuid", returns: "boolean", security: "definer" },
+  { name: "portal_archive", args: "p_organization_id uuid, p_portal_id uuid, p_confirm_title text, p_reason text DEFAULT NULL::text", returns: "jsonb", security: "definer" },
   { name: "portal_card", args: "p_organization_id uuid, p_portal_id uuid", returns: "jsonb", security: "definer" },
   { name: "portal_declare", args: "p_organization_id uuid, p_title text, p_client_table_id uuid, p_tables jsonb, p_portal_id uuid DEFAULT NULL::uuid, p_slug text DEFAULT NULL::text, p_sign_in_method text DEFAULT 'magic_link'::text", returns: "uuid", security: "definer" },
   { name: "portal_field_map", args: "p_organization_id uuid, p_table_id uuid", returns: "TABLE(field_id uuid, field_key text, field_type text, points_at uuid)", security: "definer" },
   { name: "portal_invitation", args: "p_slug text, p_email text", returns: "jsonb", security: "definer" },
   { name: "portal_invite", args: "p_organization_id uuid, p_portal_id uuid, p_client_record_id uuid, p_email text, p_user_id uuid DEFAULT NULL::uuid", returns: "jsonb", security: "definer" },
+  { name: "portal_invite_accept", args: "p_token text", returns: "jsonb", security: "definer" },
   { name: "portal_me", args: "", returns: "jsonb", security: "definer" },
   { name: "portal_preview", args: "p_organization_id uuid, p_portal_id uuid, p_principal_id uuid, p_table_id uuid", returns: "TABLE(record_id uuid, title text)", security: "definer" },
   { name: "portal_principal_bind", args: "p_organization_id uuid, p_principal_id uuid, p_user_id uuid", returns: "jsonb", security: "definer" },
   { name: "portal_public", args: "p_slug text", returns: "jsonb", security: "definer" },
   { name: "portal_record_title", args: "p_organization_id uuid, p_record_id uuid", returns: "text", security: "definer" },
+  { name: "portal_restore", args: "p_organization_id uuid, p_portal_id uuid, p_confirm_title text", returns: "jsonb", security: "definer" },
   { name: "portal_revoke", args: "p_organization_id uuid, p_portal_id uuid, p_principal_id uuid", returns: "jsonb", security: "definer" },
   { name: "portal_slug", args: "p_organization_id uuid, p_title text, p_portal_id uuid DEFAULT NULL::uuid", returns: "text", security: "definer" },
   { name: "portal_tables", args: "p_organization_id uuid", returns: "TABLE(portal_id uuid, table_id uuid, name text)", security: "definer" },
@@ -1272,15 +1374,18 @@ var STORE_DOORS = [
   { name: "read_paths_outside_the_door", args: "", returns: "TABLE(object_name text, why text)", security: "invoker" },
   { name: "read_record", args: "p_organization_id uuid, p_record_id uuid, p_by_id boolean DEFAULT false", returns: "jsonb", security: "definer" },
   { name: "read_records", args: "p_organization_id uuid, p_table_id uuid, p_by_id boolean DEFAULT false, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0", returns: "TABLE(id uuid, document jsonb, level permission_level)", security: "definer" },
+  { name: "read_records_archived", args: "p_organization_id uuid, p_table_id uuid, p_lane text DEFAULT 'org'::text, p_by_id boolean DEFAULT false, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0", returns: "TABLE(id uuid, document jsonb, level permission_level, archived_at timestamp with time zone, archived_by uuid, archived_by_name text)", security: "definer" },
   { name: "read_records_by_ids", args: "p_organization_id uuid, p_table_id uuid, p_record_ids uuid[], p_by_id boolean DEFAULT false", returns: "TABLE(id uuid, document jsonb, level permission_level)", security: "definer" },
   { name: "read_records_matching", args: "p_organization_id uuid, p_table_id uuid, p_filter jsonb DEFAULT '{}'::jsonb, p_by_id boolean DEFAULT false, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0", returns: "TABLE(id uuid, document jsonb, level permission_level)", security: "definer" },
   { name: "realtime_topic_admits", args: "p_topic text", returns: "boolean", security: "definer" },
   { name: "record_aggregate", args: "p_organization_id uuid, p_table_id uuid, p_group_by jsonb DEFAULT '[]'::jsonb, p_measures jsonb DEFAULT '[]'::jsonb, p_bucket jsonb DEFAULT NULL::jsonb, p_filter jsonb DEFAULT '{}'::jsonb, p_limit integer DEFAULT 200, p_required text DEFAULT 'viewer'::text", returns: "TABLE(groups jsonb, measures jsonb, row_count bigint)", security: "definer" },
   { name: "record_applicability", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(rule_id uuid, rule_name text, rule_version integer, applies boolean, answer jsonb)", security: "invoker" },
+  { name: "record_archiver", args: "p_organization_id uuid, p_record_id uuid", returns: "uuid", security: "definer" },
   { name: "record_as_of", args: "p_organization_id uuid, p_record_id uuid, p_at timestamp with time zone", returns: "TABLE(state jsonb, replayed boolean)", security: "definer" },
   { name: "record_card", args: "p_viewer uuid, p_organization_id uuid, p_record_id uuid", returns: "jsonb", security: "definer" },
   { name: "record_carrying_edges", args: "p_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(container_id uuid, item_id uuid, edge_role text)", security: "invoker" },
   { name: "record_delete", args: "p_organization_id uuid, p_record_id uuid", returns: "timestamp with time zone", security: "definer" },
+  { name: "record_filter_sql", args: "p_filter jsonb", returns: "text", security: "invoker" },
   { name: "record_history", args: "p_organization_id uuid, p_record_id uuid, p_limit integer DEFAULT 200, p_offset integer DEFAULT 0", returns: "TABLE(version integer, occurred_at timestamp with time zone, operation text, operation_label text, actor jsonb, changes jsonb, migration_id uuid, undoable boolean)", security: "definer" },
   { name: "record_platform_keys", args: "", returns: "text[]", security: "invoker" },
   { name: "record_relation_edges", args: "p_organization_id uuid, p_id uuid, p_table_id uuid, p_data_class text, p_data jsonb, p_deleted_at timestamp with time zone", returns: "TABLE(target_id uuid, edge_role text, field_id uuid, ord integer)", security: "invoker" },
@@ -1369,6 +1474,7 @@ var STORE_DOORS = [
   { name: "subscription_mute", args: "p_organization_id uuid, p_rule_id uuid, p_muted boolean DEFAULT true", returns: "boolean", security: "definer" },
   { name: "subscription_preview", args: "p_organization_id uuid, p_rule_id uuid", returns: "jsonb", security: "definer" },
   { name: "subscriptions", args: "p_organization_id uuid, p_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(rule_id uuid, name text, table_id uuid, saved_view_id uuid, cadence text, schedule text, quiet_hours jsonb, channel text, recipient_user_id uuid, event_key text, muted boolean, mine boolean, i_may_mute boolean, last_sent_at timestamp with time zone, next_digest_at timestamp with time zone)", security: "definer" },
+  { name: "table_archive", args: "p_organization_id uuid, p_table_id uuid, p_chunk integer DEFAULT 50, p_include_table boolean DEFAULT true", returns: "jsonb", security: "definer" },
   { name: "table_capacity", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "table_carries_its_rows", args: "p_user_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "boolean", security: "definer" },
   { name: "table_column_source", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
@@ -1501,18 +1607,18 @@ var STORE_KNOBS = [
   { key: "world_publish_enabled", value: "false", type: "boolean" }
 ];
 var STORE_REFUSAL_CODES = [
-  { code: "02000", raised_by: "_checklist_instantiate,_table_share_invite_payload,checklist_declare,checklist_run,checklist_step_complete,checklist_step_refusal,checklist_template_shape,conversation_scope_bind,dashboard_delete,dashboard_run,doc_letterhead,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,enrich_pin,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_card,portal_declare,portal_invite,portal_preview,portal_principal_bind,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,sign_request_cancel,sign_request_create,sign_request_remind,sign_request_unchanged,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_share_outside_revoke,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state" },
+  { code: "02000", raised_by: "_checklist_instantiate,_portal_invite_payload,_share_write_person,_table_share_invite_payload,checklist_declare,checklist_run,checklist_step_complete,checklist_step_refusal,checklist_template_shape,conversation_scope_bind,dashboard_delete,dashboard_run,doc_letterhead,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,enrich_pin,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_archive,portal_card,portal_declare,portal_invite,portal_invite_accept,portal_preview,portal_principal_bind,portal_restore,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,sign_request_cancel,sign_request_create,sign_request_remind,sign_request_unchanged,table_archive,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_share_outside_revoke,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state" },
   { code: "0A000", raised_by: "checklist_step_complete,external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign" },
   { code: "22003", raised_by: "context_resolve" },
-  { code: "22004", raised_by: "_entity_custom_fields_guard,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,pipeline_gate_preview,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,record_write_many,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_declare,table_share_outside_invite,value_restore,view_declare,work_approval_decide,work_approval_request,work_template_declare" },
+  { code: "22004", raised_by: "_entity_custom_fields_guard,_share_write_person,_value_envelope,actor_word,agg_assert_key,agg_sql,anon_capture,anon_token_issue,anon_write,assert_client_may_reach,booking_declare,capture_submit,checklist_declare,context_resolve,dashboard_block_normalize,dashboard_declare,dashboard_window_sql,doc_render_write,doc_sign,doc_signature_write,doc_template_save,enrich_land,enrich_normalize,external_history_event,external_rows,external_source_declare,external_stub_upsert,external_write_through,external_writes_set,field_history,form_declare,form_submit,home_add,io_comment_write,io_import_begin,io_infer_column,io_outbox_drain,io_restore,migrate_choice_keys,migrate_purge,migrate_reclass,migrate_split,migrate_undo,organization_clear,organization_contents,pipeline_declare,pipeline_gate_preview,portal_declare,portal_invite,portal_principal_bind,provenance_retention_days,provenance_write,query_across_homes,query_by_coordinates,query_rollup,record_delete,record_reparent,record_resolve,record_restore,record_update,record_write,record_write_many,relation_carry,relation_own,rule_declare,share_grant,sign_request_create,sign_request_sign,subscription_declare,table_archive,table_declare,table_share_outside_invite,value_restore,view_declare,work_approval_decide,work_approval_request,work_template_declare" },
   { code: "22007", raised_by: "dashboard_window_sql" },
   { code: "22012", raised_by: "rule_eval" },
-  { code: "22023", raised_by: "_booking_availability,_entity_custom_fields_guard,_take_op_id,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,field_update,io_export,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,record_update,record_write_many,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
-  { code: "23503", raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_display_spec_for,_field_document_for,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,view_declare,work_set_state,work_take_assignment,work_template_instantiate" },
-  { code: "23505", raised_by: "_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,share_grant,sign_request_cancel,sign_request_create,table_share_outside_invite,table_share_outside_resend,work_approval_decide,work_slot_hold" },
-  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_display_spec_for,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_with_display,_work_shape_guard,_workdoors_approval_guard,assert_columns_are_defined,assert_entity_is_organization_scoped,booking_declare,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
+  { code: "22023", raised_by: "_booking_availability,_entity_custom_fields_guard,_take_op_id,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,field_update,io_export,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,list_portals,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,read_records_archived,record_update,record_write_many,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold" },
+  { code: "23503", raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_display_spec_for,_field_document_for,_field_type_parity_guard,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,view_declare,work_set_state,work_take_assignment,work_template_instantiate" },
+  { code: "23505", raised_by: "_share_write_person,_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,sign_request_cancel,sign_request_create,table_share_outside_resend,work_approval_decide,work_slot_hold" },
+  { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_display_spec_for,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_with_display,_work_shape_guard,_workdoors_approval_guard,assert_columns_are_defined,assert_entity_is_organization_scoped,booking_declare,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_comment_write,io_import_rows,migrate_merge,portal_archive,portal_restore,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
-  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,read_records_by_ids,record_table,share_grant,subscription_mute,subscription_preview,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
+  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,agent_table_claim,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,doc_sign,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_invite_accept,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,read_records_archived,read_records_by_ids,read_records_matching,record_table,share_grant,subscription_mute,subscription_preview,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
   { code: "42703", raised_by: "entity_table,portal_declare" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,enrich_due,enrich_land,promote_field" },
   { code: "54001", raised_by: "record_delete" },
@@ -2408,6 +2514,7 @@ var ENTITY_TOKENS = [
   "template_scope_types",
   "templates",
   "test_handset_inbox",
+  "test_handset_verification",
   "thread",
   "tool",
   "tool_binding",
@@ -2617,6 +2724,14 @@ var DOORS = {
   // `custom.record_filter_sql`, the one body `custom.agg_sql` also calls, so the
   // rows it opens are the rows the number counted.
   readRecordsMatching: "read_records_matching",
+  // THE SAME READ DOOR, ADDRESSED BY ABSENCE. Every door above answers LIVE rows
+  // only — each of them hard-codes `and r.deleted_at is null` — so until this one
+  // existed no screen could list an archived record however it was written, and
+  // `record_restore` below had nothing that could reach it (VERIFIER-10 F4).
+  // `custom.read_records_archived` is that body with the sign of one comparison
+  // flipped, plus the two facts only an archive needs: who archived it and when.
+  // A separate NAME for the same reason as its two siblings above.
+  readRecordsArchived: "read_records_archived",
   // DOOR-8, the two clocks. `p_recorded_at` is what the store SAID then;
   // `p_world_on` is what was TRUE of the world on that date, read out of dated
   // values. A client that answered either one itself would be guessing.
@@ -2763,6 +2878,7 @@ var DOORS = {
   // ways to start an import from one client is how they drift.
   importPlan: "io_import_plan",
   importBegin: "io_import_begin",
+  importDeclareColumns: "io_import_declare_columns",
   importRows: "io_import_rows",
   importFinish: "io_import_finish",
   importReport: "io_import_report",
@@ -2799,6 +2915,17 @@ var DOORS = {
   portalInvite: "portal_invite",
   portalRevoke: "portal_revoke",
   portalPreview: "portal_preview",
+  // ORG-CLEANUP, 2026-09-22 — A PORTAL IS ARCHIVED, NEVER DELETED.
+  // `portals` keeps its signature and HIDES archived portals (the law's default
+  // is to hide); `list_portals(org, 'active'|'archived'|'all')` is the
+  // archive-aware reader, taking the platform archive filter's own three values
+  // so one door serves both lanes and no screen has to invent a second control.
+  // `portal_archive` / `portal_restore` are the way out and the way back; both
+  // take the portal's own title typed back, because ten portals can carry one
+  // title and the title alone is not what picks this one.
+  listPortals: "list_portals",
+  portalArchive: "portal_archive",
+  portalRestore: "portal_restore",
   // SCR-16 — the canvas. A dashboard is a record in the presentation kernel
   // whose blocks are saved SPECS for the eighth verb; `dashboardRun` walks them
   // under the CALLER'S principal, so nothing here is precomputed and nothing is
@@ -2911,7 +3038,14 @@ var DOORS = {
   docTokens: "doc_tokens",
   docUnresolvedTokens: "doc_unresolved_tokens",
   docSign: "doc_sign",
-  docSignatureIntact: "doc_signature_intact",
+  // THE SEAL IS ASKED THROUGH ITS OWN DOOR. `custom.doc_signature_intact` is the INTERNAL
+  // half of this pair — SECURITY INVOKER over a doors-only table, so a browser that calls it
+  // gets `42501 permission denied for table doc_signature`, which is what every SignBlock
+  // seal check got until 2026-09-22 (FIX-10B). `custom.doc_signature_read` is the definer
+  // door built for a client: it asks may_reach and may_open on the RECORD by name and
+  // returns the seal AND the verdict in one answer, because a seal a person can read and a
+  // verdict they cannot is how a changed agreement keeps wearing somebody's signature.
+  docSignatureRead: "doc_signature_read",
   // THE PLURAL ACTS. Until 2026-09-20 this package read `custom.doc_template`,
   // `custom.doc_render` and `custom.doc_signature` with a direct PostgREST
   // `.from()`, and all three hold NO client SELECT — so every list in product #5
@@ -3316,6 +3450,34 @@ function createRecordsClient(config) {
         })
       );
     },
+    async listArchived({ table_id, lane = DEFAULT_ARCHIVE_LANE, limit = 50, offset = 0 }) {
+      const door = await callDoor(
+        DOORS.readRecordsArchived,
+        {
+          p_organization_id: org,
+          p_table_id: table_id,
+          p_lane: lane,
+          p_limit: limit,
+          p_offset: offset
+        },
+        "listArchived"
+      );
+      if (!door.ok) return err(door.error);
+      const rows = (door.data ?? []).map((row) => {
+        const { document, hidden } = unfold(row.document);
+        return {
+          id: row.id,
+          document,
+          level: row.level,
+          hidden,
+          archivedAt: row.archived_at,
+          archivedBy: row.archived_by ?? null,
+          archivedByName: row.archived_by_name ?? null
+        };
+      });
+      const total = rows.length < limit ? offset + rows.length : null;
+      return ok({ rows, total });
+    },
     async list({ table_id, filter, limit = 50, offset = 0 }) {
       const door = await callDoor(
         DOORS.readRecordsMatching,
@@ -3805,6 +3967,18 @@ function createRecordsClient(config) {
         "importBegin"
       );
     },
+    async importDeclareColumns(args) {
+      return callDoor(
+        DOORS.importDeclareColumns,
+        {
+          p_organization_id: org,
+          p_table_id: args.table_id,
+          p_rows: args.rows,
+          p_mapping: args.mapping ?? {}
+        },
+        "importDeclareColumns"
+      );
+    },
     async importRows(args) {
       return callDoor(
         DOORS.importRows,
@@ -3875,6 +4049,36 @@ function createRecordsClient(config) {
     async portals() {
       return callDoor(DOORS.portals, { p_organization_id: org }, "portals");
     },
+    async listPortals(args) {
+      return callDoor(
+        DOORS.listPortals,
+        { p_organization_id: org, p_archived: args?.archived ?? "active" },
+        "listPortals"
+      );
+    },
+    async portalArchive(args) {
+      return callDoor(
+        DOORS.portalArchive,
+        {
+          p_organization_id: org,
+          p_portal_id: args.portal_id,
+          p_confirm_title: args.confirm_title,
+          p_reason: args.reason ?? null
+        },
+        "portalArchive"
+      );
+    },
+    async portalRestore(args) {
+      return callDoor(
+        DOORS.portalRestore,
+        {
+          p_organization_id: org,
+          p_portal_id: args.portal_id,
+          p_confirm_title: args.confirm_title
+        },
+        "portalRestore"
+      );
+    },
     async portalTables() {
       return callDoor(DOORS.portalTables, { p_organization_id: org }, "portalTables");
     },
@@ -4463,11 +4667,11 @@ function createRecordsClient(config) {
         "commentResolve"
       );
     },
-    async docSignatureIntact({ signature_id }) {
+    async docSignatureRead({ signature_id }) {
       return callDoor(
-        DOORS.docSignatureIntact,
+        DOORS.docSignatureRead,
         { p_organization_id: org, p_signature_id: signature_id },
-        "docSignatureIntact"
+        "docSignatureRead"
       );
     },
     // ── the anonymous lane ───────────────────────────────────────────────