@ai-matrx/records 0.51.0 → 0.53.0

package/dist/react/index.d.cts

@@ -1511,6 +1511,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_table_id uuid, p_format text DEFAULT 'csv'::text, p_source_name text DEFAULT NULL::text, p_source_columns jsonb DEFAULT '[]'::jsonb, p_file_hash text DEFAULT NULL::text, p_policy jsonb DEFAULT '{}'::jsonb, p_dedupe_key text DEFAULT NULL::text, p_file_bytes bigint DEFAULT NULL::bigint, p_force boolean DEFAULT false";
     readonly returns: "jsonb";
     readonly security: "definer";
+}, {
+    readonly name: "io_import_declare_columns";
+    readonly args: "p_organization_id uuid, p_table_id uuid, p_rows jsonb, p_mapping jsonb DEFAULT '{}'::jsonb";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "io_import_finish";
     readonly args: "p_organization_id uuid, p_import_id uuid, p_unmapped text DEFAULT NULL::text";
@@ -1676,6 +1681,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_pretend text, p_only_organization uuid, p_sample integer, p_exhaustive boolean";
     readonly returns: "TABLE(organization_id uuid, organization_name text, member_id uuid, table_id uuid, record_id uuid, door text, why text)";
     readonly security: "invoker";
+}, {
+    readonly name: "list_portals";
+    readonly args: "p_organization_id uuid, p_archived text DEFAULT 'active'::text";
+    readonly returns: "TABLE(portal_id uuid, title text, slug text, client_table_id uuid, client_table text, is_active boolean, tables integer, invited integer, signed_in integer, sign_in_method text, opened_at timestamp with time zone)";
+    readonly security: "definer";
 }, {
     readonly name: "lookup_value";
     readonly args: "p_organization_id uuid, p_record_id uuid, p_field_data jsonb";
@@ -1921,6 +1931,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_user_id uuid DEFAULT NULL::uuid";
     readonly returns: "boolean";
     readonly security: "definer";
+}, {
+    readonly name: "portal_archive";
+    readonly args: "p_organization_id uuid, p_portal_id uuid, p_confirm_title text, p_reason text DEFAULT NULL::text";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "portal_card";
     readonly args: "p_organization_id uuid, p_portal_id uuid";
@@ -1976,6 +1991,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid, p_record_id uuid";
     readonly returns: "text";
     readonly security: "definer";
+}, {
+    readonly name: "portal_restore";
+    readonly args: "p_organization_id uuid, p_portal_id uuid, p_confirm_title text";
+    readonly returns: "jsonb";
+    readonly security: "definer";
 }, {
     readonly name: "portal_revoke";
     readonly args: "p_organization_id uuid, p_portal_id uuid, p_principal_id uuid";
@@ -2686,6 +2706,11 @@ declare const STORE_DOORS: readonly [{
     readonly args: "p_organization_id uuid DEFAULT NULL::uuid";
     readonly returns: "boolean";
     readonly security: "invoker";
+}, {
+    readonly name: "store_off_sentence";
+    readonly args: "p_organization_id uuid";
+    readonly returns: "text";
+    readonly security: "invoker";
 }, {
     readonly name: "subscription_cadences";
     readonly args: "p_organization_id uuid";
@@ -3319,7 +3344,7 @@ declare const STORE_KNOBS: readonly [{
  */
 declare const STORE_REFUSAL_CODES: readonly [{
     readonly code: "02000";
-    readonly raised_by: "_checklist_instantiate,_portal_invite_payload,_share_write_person,_table_share_invite_payload,checklist_declare,checklist_run,checklist_step_complete,checklist_step_refusal,checklist_template_shape,conversation_scope_bind,dashboard_delete,dashboard_run,doc_letterhead,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,enrich_pin,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_card,portal_declare,portal_invite,portal_invite_accept,portal_preview,portal_principal_bind,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,sign_request_cancel,sign_request_create,sign_request_remind,sign_request_unchanged,table_archive,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_share_outside_revoke,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state";
+    readonly raised_by: "_checklist_instantiate,_portal_invite_payload,_share_write_person,_table_share_invite_payload,checklist_declare,checklist_run,checklist_step_complete,checklist_step_refusal,checklist_template_shape,conversation_scope_bind,dashboard_delete,dashboard_run,doc_letterhead,doc_render_body,doc_render_document,doc_render_read,doc_sign,doc_signature_intact,doc_signature_read,doc_template_delete,doc_template_read,doc_template_save,enrich_pin,entity_field_retire,entity_field_update,entity_record_read,entity_value_write,external_history_event,external_rows,external_stub_upsert,external_writes_set,io_restore,migrate_delete,migrate_extract_parent,migrate_merge,migrate_reclass,migrate_rename,migrate_reparent,migrate_retype,migrate_split,migrate_undo,organization_clear,portal_archive,portal_card,portal_declare,portal_invite,portal_invite_accept,portal_preview,portal_principal_bind,portal_restore,portal_revoke,read_record,record_delete,record_restore,record_restore_preview,record_table,record_update,relation_uncarry,share_access,share_grant,share_lane_set,share_people,share_revoke,sign_request_cancel,sign_request_create,sign_request_remind,sign_request_unchanged,table_archive,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_share_outside_revoke,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_assign,work_record_states,work_set_state";
 }, {
     readonly code: "0A000";
     readonly raised_by: "checklist_step_complete,external_rows,external_source_declare,external_write_through,promote_field,promoted_index_expr,promoted_query_sql,promoted_read,rule_eval,work_assign";
@@ -3337,7 +3362,7 @@ declare const STORE_REFUSAL_CODES: readonly [{
     readonly raised_by: "rule_eval";
 }, {
     readonly code: "22023";
-    readonly raised_by: "_booking_availability,_entity_custom_fields_guard,_take_op_id,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,field_update,io_export,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,read_records_archived,record_update,record_write_many,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold";
+    readonly raised_by: "_booking_availability,_entity_custom_fields_guard,_take_op_id,_value_envelope,_work_shape_guard,actor_word,agg_assert_key,agg_sql,anon_token_issue,booking_declare,containment_parent,dashboard_block_normalize,dashboard_window_sql,doc_render_body,doc_render_write,doc_signature_write,enrich_declare,enrich_land,enrich_normalize,enrich_pin,entity_value_write,external_history_event,external_source_declare,external_stub_upsert,external_write_through,field_history,field_update,io_export,io_import_begin,io_import_finish,io_import_plan,io_import_report,io_proposal_accept,list_portals,migrate_merge,migrate_reclass,my_levels,organization_clear,page_size,pin_agent_cells,pipeline_move,portal_declare,provenance_write,query_by_coordinates,query_rollup,read_records_archived,record_update,record_write_many,relation_carry,rule_eval,rule_members,share_grant,share_lane_set,sign_request_create,sign_request_sign,subscription_declare,table_rules,visibility_as_of,work_approval_request,work_list,work_slot_hold";
 }, {
     readonly code: "23503";
     readonly raised_by: "_booking_availability,_checklist_instantiate,_containment_guard,_display_spec_for,_field_document_for,_field_type_parity_guard,_pipeline_stage_key,_record_rule_uses,agg_digest_assemble,anon_publish,anon_rate_take,anon_token_issue,anon_write,assert_organization_wall,booking_cancel,booking_confirm,booking_declare,booking_hold,booking_reschedule,capture_publish,checklist_declare,checklist_steps_table,comment_write,dashboard_declare,delete_rule,doc_sign,doc_template_save,enrich_declare,enrich_due,enrich_land,form_declare,form_submit,home_add,inbound_declare,inbound_mail_land,inbound_set,io_comment_write,io_import_begin,io_import_finish,io_import_report,io_import_rows,io_proposal_accept,migrate_demote,migrate_promote,pipeline_board,pipeline_declare,pipeline_move,pipeline_read,pipeline_transition_refusal,promote_field,promote_table,record_applicability,record_reparent,relation_carry,relation_own,resolve_first_match,rule_applies,rule_declare,rule_eval,rule_members,rule_run,sign_request_create,subscription_mute,subscription_preview,view_declare,work_set_state,work_take_assignment,work_template_instantiate";
@@ -3346,7 +3371,7 @@ declare const STORE_REFUSAL_CODES: readonly [{
     readonly raised_by: "_share_write_person,_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,sign_request_cancel,sign_request_create,table_share_outside_resend,work_approval_decide,work_slot_hold";
 }, {
     readonly code: "23514";
-    readonly raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_display_spec_for,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_with_display,_work_shape_guard,_workdoors_approval_guard,assert_columns_are_defined,assert_entity_is_organization_scoped,booking_declare,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_comment_write,io_import_rows,migrate_merge,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate";
+    readonly raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_display_spec_for,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_with_display,_work_shape_guard,_workdoors_approval_guard,assert_columns_are_defined,assert_entity_is_organization_scoped,booking_declare,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_comment_write,io_import_rows,migrate_merge,portal_archive,portal_restore,relation_carry,relation_own,sign_request_create,sign_request_sign,table_declare,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate";
 }, {
     readonly code: "40001";
     readonly raised_by: "has_visibility_at";
@@ -4033,6 +4058,51 @@ interface TableCapacity {
     /** The knob that decides the ceiling, named so a person can act on it. */
     knob: string;
 }
+/**
+ * WHAT ONE PASS OF `custom.table_archive` ANSWERS WITH — the numbers a screen
+ * needs to draw a bar and write a sentence, instead of a spinner and an
+ * SQLSTATE (VERIFIER-10 F3, VERIFIER-11 F3).
+ *
+ * Archiving a table is a JOB, NOT A STATEMENT. `custom.record_delete` on a
+ * Table recurses through everything the Table contains inside one transaction,
+ * which is unbounded by construction: at 1,430 records it dies on `57014`,
+ * "canceling statement due to statement timeout", and nothing is changed. The
+ * remedy for a thing that cannot finish in one statement is more statements,
+ * never a longer one — so the caller loops, passing its own `chunk`, until
+ * `done`.
+ *
+ * IT IS RESUMABLE BECAUSE IT IS STATELESS. There is no job row to lose:
+ * `remaining` is read off the records themselves on every call, so a browser
+ * closed halfway, a failed pass or a deploy mid-run all leave a table that is
+ * half archived and a next call that picks up exactly where the last stopped.
+ * Which is why a screen driving this may NEVER say "nothing was changed" after
+ * a pass that moved rows — `archived_total` is what really landed.
+ *
+ * NOTHING IS DELETED. Every row goes through `custom.record_delete`, so every
+ * guard, history capture and outbox row still happens and `recordRestore`
+ * still brings any of them back.
+ */
+interface TableArchiveProgress {
+    table_id: Uuid;
+    /** The table's own name, so a sentence can use it rather than an id. */
+    table_name: string;
+    /** What THIS pass archived. */
+    archived: number;
+    /** Records of this table still live. Zero is the end of the row work. */
+    remaining: number;
+    /** Records this table has ever held: `remaining` + `archived_total`. */
+    total: number;
+    /** Records of this table already archived, across every pass ever made. */
+    archived_total: number;
+    /** Whether the Table record itself has been archived. */
+    table_archived: boolean;
+    /** Nothing live is left to do. The caller's loop ends here. */
+    done: boolean;
+    /** The chunk the door actually took on — it clamps what it is handed. */
+    chunk: number;
+    /** The store's own sentence about this pass, in the product's voice. */
+    message: string;
+}
 
 /** FLD-3. A constraint attached to a Field. A Rule, never a behaviour. */
 interface FieldRule {
@@ -5162,6 +5232,14 @@ interface ImportOpened {
     rows_duplicate: number;
     source_name: string | null;
     opened_at?: Timestamp;
+    /**
+     * IMPORT-2. How many rows to send in the FIRST call. The store owns this
+     * number rather than a screen, because nothing has been measured yet when a
+     * run opens and a batch size written into a wizard is wrong on a busy
+     * afternoon and stale the day the write path gets cheaper. Every call after
+     * the first uses `ImportBatchResult.rows_per_call`, which is measured.
+     */
+    rows_per_call?: number;
     message: string;
 }
 /** One row of the file, and what became of it. */
@@ -5206,6 +5284,36 @@ interface ImportBatchResult {
     rows_refused: number;
     outcomes: ImportOutcome[];
     proposals: ImportProposal[];
+    /**
+     * IMPORT-2. The columns this call had to declare because the run never took
+     * the `importDeclareColumns` step. Normally empty: declaring is its own step.
+     */
+    columns_added?: ImportProposal[];
+    /**
+     * IMPORT-2. FALSE means the batch could not be written as one statement — one
+     * row of it was refused by a guard that refuses the whole statement — so every
+     * row was written on its own instead and the refusals below name the rows that
+     * could not be. The answers are identical either way; this says what it cost.
+     */
+    one_statement?: boolean;
+    /** How long THIS call's writing phase took, and what that was a row. */
+    write_ms?: number;
+    ms_per_row?: number;
+    /**
+     * IMPORT-2. How many rows the NEXT call should carry, measured from this one:
+     * the store aims at two seconds of writing, which leaves a database that gets
+     * 50% busier between two calls still inside the three seconds a person should
+     * wait. Send this many next. Ignoring it costs correctness nothing.
+     */
+    rows_per_call?: number;
+}
+/** IMPORT-2. What `importDeclareColumns` made, as its own step of the wizard. */
+interface ImportColumnsDeclared {
+    table_id: Uuid;
+    columns_added: ImportProposal[];
+    /** Header -> Field key, including the headers that already named a column. */
+    mapping: Record<string, string>;
+    message: string;
 }
 interface ImportFinished {
     import_id: Uuid;
@@ -5430,6 +5538,49 @@ interface PortalPreviewRow {
  * nothing more. That is why it is readable and why copying it is safe.
  */
 declare function portalPath(slug: string): string;
+/**
+ * The platform archive filter's own three values, and no fourth. `custom.list_portals`
+ * refuses anything else with `22023` rather than quietly treating it as one of them.
+ */
+declare const PORTAL_ARCHIVE_FILTERS: readonly ["active", "archived", "all"];
+type PortalArchiveFilter = (typeof PORTAL_ARCHIVE_FILTERS)[number];
+/** THE LAW'S DEFAULT IS TO HIDE. A list nobody narrowed is the live things. */
+declare const DEFAULT_PORTAL_ARCHIVE_FILTER: PortalArchiveFilter;
+declare function isPortalArchiveFilter(word: unknown): word is PortalArchiveFilter;
+/** What `custom.portal_archive` and `custom.portal_restore` answer with. */
+interface PortalArchiveAnswer {
+    /** Where the portal stands NOW — true after an archive, false after a restore. */
+    archived: boolean;
+    /** False when it was already in that state; the sentence says so rather than lying about an act. */
+    changed: boolean;
+    portal_id: Uuid;
+    archived_at?: Timestamp | null;
+    /** The store's own sentence, in plain English. Show it verbatim; never a constraint name. */
+    sentence: string;
+}
+/**
+ * THE CONSEQUENCE, SAID BEFORE THE CLICK — never a generic "are you sure?".
+ *
+ * What actually changes is two things: nobody can sign in to it any more, and it
+ * leaves the organization's portal list. What does NOT change is everything
+ * else, and saying so is the difference between an archive somebody dares to
+ * press and one they avoid.
+ */
+declare function portalArchiveConsequence(title: string, signedIn: number, invited: number): string;
+/**
+ * WHY THE TITLE HAS TO BE TYPED BACK, in the store's own reasoning. Ten portals
+ * can carry one title, so the title is not what PICKS this one — the portal you
+ * opened is. Typing it back is how you say you meant this one.
+ */
+declare function portalConfirmLine(title: string): string;
+/** True when what the person typed is what the door will accept. The door decides; this only spares them a round trip. */
+declare function portalTitleTypedBack(typed: string, title: string): boolean;
+/**
+ * WHAT AN EMPTY ARCHIVE LANE SAYS. An empty list is an answer: it says nothing
+ * has been archived, so "none here" can never be read as "the archive is broken"
+ * or as "this organization has no portals at all".
+ */
+declare function emptyPortalArchiveLine(): string;
 
 /** The measures the store offers. Asked of `custom.agg_operations()` at run time too. */
 type AggregateOperation = "count" | "sum" | "avg" | "min" | "max";
@@ -7326,13 +7477,52 @@ interface RecordsClient {
         /** Leave it out and the last writer wins; supply it and a loser is TOLD. */
         expectedVersion?: number;
     }): Promise<RecordsResult<number>>;
-    /** REC-23. Soft, and reversible within `retention`. */
+    /**
+     * REC-23. Soft, and reversible within `retention`.
+     *
+     * 🚨 NOT FOR A TABLE. A Table is a record, so this door accepts one — and
+     * then recurses through every record the Table contains inside a single
+     * transaction, which is unbounded by construction and dies on `57014` at a
+     * size the product's own import reaches in half a minute. Use
+     * `tableArchive` below, which does the same work in resumable passes.
+     */
     recordDelete(args: {
         record_id: Uuid;
     }): Promise<RecordsResult<Timestamp>>;
     recordRestore(args: {
         record_id: Uuid;
     }): Promise<RecordsResult<void>>;
+    /**
+     * ARCHIVING A WHOLE TABLE — ONE PASS OF IT (VERIFIER-11 F3).
+     *
+     * One call archives at most `chunk` of the table's live records through
+     * `custom.record_delete` (so every guard, history capture and outbox row
+     * still happens; nothing is hard-deleted) and comes back with the numbers a
+     * screen draws progress from. The CALLER LOOPS until `done` — that loop is
+     * the fix, because the one thing a single statement cannot be made to do is
+     * finish.
+     *
+     * `chunk: 0` changes nothing and only reports, so a screen can say "1,430
+     * records will be archived" BEFORE a person commits to it. `includeTable:
+     * false` empties the table and leaves it standing.
+     *
+     * RESUMABLE, WITHOUT A JOB ROW: what remains is read off the records
+     * themselves every call. A pass that fails, a closed tab or a deploy mid-run
+     * leaves a half-archived table and a next call that continues from exactly
+     * there. A caller must therefore never report "nothing happened" after a
+     * failed pass — `archived_total` says what really landed.
+     */
+    tableArchive(args: {
+        table_id: Uuid;
+        /**
+         * How many records this pass takes on. The door clamps it; it answers with what it
+         * took. Default 50 — measured: ~35ms a record against an 8s statement timeout, so
+         * 200 dies on `57014` and is the original defect one level up.
+         */
+        chunk?: number;
+        /** Archive the Table record itself once nothing live is left in it. Default true. */
+        includeTable?: boolean;
+    }): Promise<RecordsResult<TableArchiveProgress>>;
     recordRead(args: {
         record_id: Uuid;
         withComputed?: boolean;
@@ -7711,9 +7901,24 @@ interface RecordsClient {
         force?: boolean;
     }): Promise<RecordsResult<ImportOpened>>;
     /**
-     * One BATCH of rows. Every row is written through the ONE write door inside
-     * its own subtransaction, so a refused row leaves nothing behind and never
-     * costs the rows before it. Send a few hundred at a time.
+     * IMPORT-2. ADD THE COLUMNS THIS FILE HAS AND THIS TABLE HAS NOT — a step of
+     * its own, BEFORE the run is opened, so the screen can show "8 columns added"
+     * and the person can then name one of them as the file's duplicate key
+     * (`importBegin` refuses a key naming a column that does not exist yet).
+     * Answers the mapping the file should be sent with. Admin on the Table.
+     */
+    importDeclareColumns(args: {
+        table_id: Uuid;
+        rows: Array<Record<string, unknown>>;
+        /** Header -> Field key the person already mapped by hand; never declared. */
+        mapping?: Record<string, string>;
+    }): Promise<RecordsResult<ImportColumnsDeclared>>;
+    /**
+     * One BATCH of rows. The batch is PLANNED and then written as ONE statement
+     * through the batched write door, so 250 round trips became one; a batch a
+     * guard refuses falls back to one write a row, and the answer says which it
+     * was. Send `ImportOpened.rows_per_call` the first time and
+     * `ImportBatchResult.rows_per_call` — measured — every time after that.
      */
     importRows(args: {
         import_id: Uuid;
@@ -7773,6 +7978,33 @@ interface RecordsClient {
     }>>;
     /** Every portal over this organization the caller may know about, with its numbers. */
     portals(): Promise<RecordsResult<PortalSummary[]>>;
+    /**
+     * The SAME list, archive-aware. `custom.portals` keeps its signature and hides
+     * archived portals, because the archived-items law's default is to hide;
+     * this is the one door that also answers the other lane, so a rail gets the
+     * law's one-click reveal without inventing a second control or a second door.
+     * A fourth word is refused `22023` — there is no fourth answer on any surface.
+     */
+    listPortals(args?: {
+        archived?: PortalArchiveFilter;
+    }): Promise<RecordsResult<PortalSummary[]>>;
+    /**
+     * PUT ONE PORTAL AWAY. Nothing is deleted and there is no purge: every Table
+     * it exposes and every person invited to it is kept exactly as it is, and
+     * `portalRestore` hands it all back. `confirm_title` is the portal's own title
+     * typed back — ten portals can carry one title, so the title is not what picks
+     * this one and the door refuses `23514` when it does not match.
+     */
+    portalArchive(args: {
+        portal_id: Uuid;
+        confirm_title: string;
+        reason?: string | null;
+    }): Promise<RecordsResult<PortalArchiveAnswer>>;
+    /** The way back. Everyone invited signs in exactly as before, and it shows the same Tables. */
+    portalRestore(args: {
+        portal_id: Uuid;
+        confirm_title: string;
+    }): Promise<RecordsResult<PortalArchiveAnswer>>;
     /**
      * Which Tables each portal of this organization exposes.
      *
@@ -8784,6 +9016,68 @@ interface UseRecordMutation {
 }
 /** Writes, with optimistic concurrency surfaced instead of swallowed. */
 declare function useRecordMutation(): UseRecordMutation;
+/**
+ * GETTING RID OF A WHOLE TABLE — the loop, once, for every screen (VERIFIER-11 F3).
+ *
+ * `useRecordMutation().remove` is right for a record and WRONG for a Table:
+ * `custom.record_delete` aimed at a Table recurses through everything it
+ * contains inside one transaction, so on 1,430 records — a size the product's
+ * own import reaches in half a minute — it died twelve seconds in on `57014`,
+ * "canceling statement due to statement timeout", and the screen told the
+ * person nothing had changed and to "try a smaller page". There is no page.
+ *
+ * So archiving a table is a JOB: this hook makes the passes, holds the numbers
+ * the store answers each one with, and stops on `done`.
+ *
+ * WHAT MAKES IT RESUMABLE is that nothing here is the state of the run — the
+ * store reads what remains off the records themselves every call. A refused
+ * pass, a `stop()`, a closed tab or a reload all leave `interrupted` true and a
+ * `carryOn()` that continues from exactly where the last pass stopped. Which is
+ * also why a screen driving this may never say "nothing was changed" after a
+ * failure: `progress.archived_total` is what actually landed, and it is the
+ * number the person is owed.
+ */
+interface UseTableArchive {
+    /** The numbers from the last pass or preview. Null until something has been asked. */
+    progress: TableArchiveProgress | null;
+    /** A loop is in flight. */
+    running: boolean;
+    /** Passes made since the last `start()`. */
+    passes: number;
+    /**
+     * The pass size in use. It STARTS at `chunk` and HALVES whenever the store
+     * runs out of time, so a screen can say the run slowed down rather than
+     * letting it look stuck. Never below ten: at that point the store is not slow,
+     * it is refusing, and a loop that kept shrinking would hide it.
+     */
+    chunkInUse: number;
+    /**
+     * The loop backed the pass size off because the store ran out of time. An
+     * automatic intervention ANNOUNCES ITSELF: a run that quietly went four times
+     * slower would read as a stuck screen.
+     */
+    slowedDown: boolean;
+    /** The refusal that stopped the loop. The work already done still stands. */
+    error: RecordsError | null;
+    /**
+     * The loop ended with records still live — because a pass was refused or
+     * because `stop()` was called. It is the screen's cue to offer carrying on
+     * rather than to claim a finished or a failed run.
+     */
+    interrupted: boolean;
+    /** Ask what would happen and change NOTHING, so a person sees the number first. */
+    preview: () => Promise<TableArchiveProgress | null>;
+    /** Run passes until done, refused, or stopped. */
+    start: () => Promise<TableArchiveProgress | null>;
+    /** Same loop, said in the word a screen uses after an interruption. */
+    carryOn: () => Promise<TableArchiveProgress | null>;
+    /** Cut cleanly after the pass in flight. Never mid-pass: a pass is one transaction. */
+    stop: () => void;
+}
+declare function useTableArchive(tableId: Uuid, options?: {
+    chunk?: number;
+    includeTable?: boolean;
+}): UseTableArchive;
 interface UseFieldMutation {
     /** Add a column. One call; the store decides what the parity type is made of. */
     declare: (args: {
@@ -8873,4 +9167,4 @@ declare function useFieldMutation(): UseFieldMutation;
  */
 declare function useMergeField(key: string | null, state?: Record<string, unknown>): MergeFieldResolution | null;
 
-export { ABSENCE_REASONS, ACTOR_VOCABULARY, ARCHIVE_LANES, ARCHIVE_LANE_LABEL, ARCHIVE_LANE_MEANS, type AbsenceReason, type Actor, type AggregateBucket, type AggregateFilter, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AggregateWindow, type AnonTokenBinding, type ArchiveLane, type ArchivedDoorRow, type ArchivedRow, type BookingAvailability, type BookingDeclared, type BookingSummary, type BookingWindow, COMPUTE_ON, CONTEXT_POLICIES, type CaptureField, type CaptureFileRef, type CaptureOutcome, type CaptureQuestion, type CaptureQueue, type CaptureQueueCounts, type CaptureQueueOptions, type CaptureQueuePorts, type CaptureQueueStore, type CaptureSheetFace, type CaptureSheetSummary, type CaptureSyncReport, type ChecklistDeclared, type ChecklistRequirement, type ChecklistRequirementKind, type ChecklistRoleSpec, type ChecklistRunStarted, type ChecklistRunStep, type ChecklistRunSummary, type ChecklistSpec, type ChecklistStepCompleted, type ChecklistStepSpec, type ChecklistTemplateShape, type ChecklistTemplateSummary, type ChecklistTrigger, type ChecklistTriggerKind, type ChoiceOption, type ChoiceOptions, type CoerceOptions, type Coerced, type CoercedAnswers, type CoercibleField, type CommentThreadRead, type CommentWritten, type ComputeOn, type ContextPolicy, type ConversationScope, type ConversationScopeContext, type CustomFieldTableType, DECLARABLE_FIELD_KINDS, DEFAULT_ARCHIVE_LANE, DELIVERIES, type DashboardBlock, type DashboardBlockKind, type DashboardBlockResult, type DashboardRunResult, type DashboardSummary, type DeclarableFieldKind, type Delivery, type DigestPreview, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, ENTITY_TOKENS, type EnrichAlternate, type EnrichCell, type EnrichDeclared, type EnrichDueRow, type EnrichRun, type EnrichSource, type Enrichment, type EnrichmentSummary, type EntityFieldRights, type EntityFieldValue, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityTableFacts, type EntityToken, type ExternalPrincipalCard, FIELD_KINDS, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, type Field, type FieldBehavior, type FieldHistoryEntry, type FieldKind, type FieldPatch, type FieldProposal, type FieldRule, type FieldSensitivity, type FieldSource, type FieldTypeWord, type ForbiddenEnvelopeWord, type FormSummary, type Freshness, type HiddenFieldNotice, type HistoryActor, type HistoryActorKind, type HistoryChange, type Home, type ImportBatchResult, type ImportColumnPlan, type ImportFinished, type ImportOpened, type ImportOutcome, type ImportPlan, type ImportPolicy, type ImportProposal, type ImportReport, type ImportRun, type InboundAddress, type InboundDeclared, KERNEL_TABLES, type KernelTableName, type KernelTargets, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, type MergeField, type MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, type MergeFieldSemanticType, type MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type MyLevel, type MySubscription, type NewEntityFieldDeclaration, type NewFieldDeclaration, ON_DELETE, OVERRIDE_POLICIES, type OnDelete, type OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, PIPELINE_RULE_KINDS, type ParityFieldType, type ParityFieldTypeDescriptor, type PerValueAccessWord, type PermissionLevel, type PgError, type Pipeline, type PipelineColumn, type PipelineDeclared, type PipelineGate, type PipelineGatePreview, type PipelineMissingField, type PipelineMoveResult, type PipelineRule, type PipelineRuleKind, type PipelineSpec, type PipelineStage, type PipelineVerdict, type PortalCard, type PortalInvitation, type PortalPreviewRow, type PortalPrincipal, type PortalRevocation, type PortalSummary, type PortalTableExposure, type PortalTableRef, type PredictedRefusal, type ProvenancePointer, type PublishBinding, type QueuedCapture, type QueuedCaptureFile, type QueuedCaptureState, type QuietHours, REFUSALS_WORTH_REPEATING, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, type ReadRow, type ReadValue, type RecordComment, type RecordDocument, type RecordFilter, type RecordHistoryEntry, type RecordRead, type RecordRevision, type RecordScopeComment, type RecordScopeContext, type RecordScopeField, type RecordScopeHistoryEntry, type RecordScopeRelation, type RecordScopeWithheld, type RecordsActor, type RecordsChangeSink, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, RecordsProvider, type RecordsProviderProps, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, type RecordsTableQuery, type RegisteredTable, type Relation, type RelationBinding, type RelationCardinality, type RelationCarries, type RelationCoordinate, type RelationDisplay, type RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RestorePreview, type RestoreResult, type RetiredActorWord, type Rule, type RuleAnswer, type RuleExpression, type RuleNodeKind, type RuleUse, STAGE_RULE_ENFORCEMENT, STAGE_RULE_ON_FAIL, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, type SavedViewRow, type SavedViewSpecIn, type StagePending, type StagePendingOnBoard, type StageRuleEnforcement, type StageRuleOnFail, type StageRuleWarning, type StaleWriteDetail, type StorageMode, type StoreDoorName, type StoreRefusalCode, type StoredRecord, type StuckRow, type Subscription, type SubscriptionBlock, type SubscriptionCadence, type SubscriptionSpec, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, type Table, type TableCapacity, type TableDisplay, type TableOrigin, type TableProposal, type TableType, type Timestamp, type UseEntityFieldMutation, type UseFieldMutation, type UseRecordMutation, type UseRecordsOptions, type UseRecordsState, type Uuid, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, type ValueAlternate, type ValueAlternateKey, type ValueEnvelope, type ValueEnvelopeKey, type ValueSource, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, archivedByLine, archivedWhen, asPermissionLevel, atLeast, bookingPath, choiceSlug, choiceValuesOf, choicesOf, coerceTypedAnswer, coerceTypedAnswers, coercionLabel, emptyArchiveLine, err, fieldKindFor, forgetAllOps, highestLevel, holdsARetiredChoice, indexedDbStore, isArchiveLane, isDecided, isOwnOp, isRecordsErr, isTheChosen, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, mintOpId, ok, openCaptureQueue, optionKey, optionLabel, portalPath, publicFormPath, rememberedOpCount, sameDocument, scopeChip, stableFilterKey, tableShapeChanged, useEntityFieldMutation, useEntityFieldRights, useEntityFields, useEntityRecord, useEntityTable, useFieldMutation, useFields, useMergeField, useMyLevel, useMyLevels, useOptionalRecordsClient, useRecord, useRecordMutation, useRecords, useRecordsActor, useRecordsClient, useTable, useTables };
+export { ABSENCE_REASONS, ACTOR_VOCABULARY, ARCHIVE_LANES, ARCHIVE_LANE_LABEL, ARCHIVE_LANE_MEANS, type AbsenceReason, type Actor, type AggregateBucket, type AggregateFilter, type AggregateMeasure, type AggregateOperation, type AggregateRow, type AggregateWindow, type AnonTokenBinding, type ArchiveLane, type ArchivedDoorRow, type ArchivedRow, type BookingAvailability, type BookingDeclared, type BookingSummary, type BookingWindow, COMPUTE_ON, CONTEXT_POLICIES, type CaptureField, type CaptureFileRef, type CaptureOutcome, type CaptureQuestion, type CaptureQueue, type CaptureQueueCounts, type CaptureQueueOptions, type CaptureQueuePorts, type CaptureQueueStore, type CaptureSheetFace, type CaptureSheetSummary, type CaptureSyncReport, type ChecklistDeclared, type ChecklistRequirement, type ChecklistRequirementKind, type ChecklistRoleSpec, type ChecklistRunStarted, type ChecklistRunStep, type ChecklistRunSummary, type ChecklistSpec, type ChecklistStepCompleted, type ChecklistStepSpec, type ChecklistTemplateShape, type ChecklistTemplateSummary, type ChecklistTrigger, type ChecklistTriggerKind, type ChoiceOption, type ChoiceOptions, type CoerceOptions, type Coerced, type CoercedAnswers, type CoercibleField, type CommentThreadRead, type CommentWritten, type ComputeOn, type ContextPolicy, type ConversationScope, type ConversationScopeContext, type CustomFieldTableType, DECLARABLE_FIELD_KINDS, DEFAULT_ARCHIVE_LANE, DEFAULT_PORTAL_ARCHIVE_FILTER, DELIVERIES, type DashboardBlock, type DashboardBlockKind, type DashboardBlockResult, type DashboardRunResult, type DashboardSummary, type DeclarableFieldKind, type Delivery, type DigestPreview, type DocRenderRow, type DocSignatureCheck, type DocSignatureRow, type DocTemplateRow, type DocToken, type DocUnresolvedToken, ENTITY_TOKENS, type EnrichAlternate, type EnrichCell, type EnrichDeclared, type EnrichDueRow, type EnrichRun, type EnrichSource, type Enrichment, type EnrichmentSummary, type EntityFieldRights, type EntityFieldValue, type EntityRecordMatch, type EntityRecordRead, type EntityRecordsFound, type EntityTableFacts, type EntityToken, type ExternalPrincipalCard, FIELD_KINDS, FIELD_SENSITIVITIES, FIELD_SOURCES, FRESHNESS, type Field, type FieldBehavior, type FieldHistoryEntry, type FieldKind, type FieldPatch, type FieldProposal, type FieldRule, type FieldSensitivity, type FieldSource, type FieldTypeWord, type ForbiddenEnvelopeWord, type FormSummary, type Freshness, type HiddenFieldNotice, type HistoryActor, type HistoryActorKind, type HistoryChange, type Home, type ImportBatchResult, type ImportColumnPlan, type ImportColumnsDeclared, type ImportFinished, type ImportOpened, type ImportOutcome, type ImportPlan, type ImportPolicy, type ImportProposal, type ImportReport, type ImportRun, type InboundAddress, type InboundDeclared, KERNEL_TABLES, type KernelTableName, type KernelTargets, MERGE_FIELD_MODIFIERS, MERGE_FIELD_SEMANTIC_TYPES, MERGE_FIELD_SOURCES, type MergeField, type MergeFieldModifier, type MergeFieldProvenance, type MergeFieldResolution, type MergeFieldSemanticType, type MergeFieldSource, type MergeFieldTransform, type MissingBehavior, type MyLevel, type MySubscription, type NewEntityFieldDeclaration, type NewFieldDeclaration, ON_DELETE, OVERRIDE_POLICIES, type OnDelete, type OverridePolicy, PARITY_FIELD_TYPES, PERMISSION_LEVELS, PER_VALUE_ACCESS_WORDS, PIPELINE_RULE_KINDS, PORTAL_ARCHIVE_FILTERS, type ParityFieldType, type ParityFieldTypeDescriptor, type PerValueAccessWord, type PermissionLevel, type PgError, type Pipeline, type PipelineColumn, type PipelineDeclared, type PipelineGate, type PipelineGatePreview, type PipelineMissingField, type PipelineMoveResult, type PipelineRule, type PipelineRuleKind, type PipelineSpec, type PipelineStage, type PipelineVerdict, type PortalArchiveAnswer, type PortalArchiveFilter, type PortalCard, type PortalInvitation, type PortalPreviewRow, type PortalPrincipal, type PortalRevocation, type PortalSummary, type PortalTableExposure, type PortalTableRef, type PredictedRefusal, type ProvenancePointer, type PublishBinding, type QueuedCapture, type QueuedCaptureFile, type QueuedCaptureState, type QuietHours, REFUSALS_WORTH_REPEATING, RELATION_BINDINGS, RELATION_CARDINALITIES, RELATION_FLAVORS, RETIRED_ACTOR_WORDS, RULE_NODE_KINDS, RULE_USES, type ReadRow, type ReadValue, type RecordComment, type RecordDocument, type RecordFilter, type RecordHistoryEntry, type RecordRead, type RecordRevision, type RecordScopeComment, type RecordScopeContext, type RecordScopeField, type RecordScopeHistoryEntry, type RecordScopeRelation, type RecordScopeWithheld, type RecordsActor, type RecordsChangeSink, type RecordsConfig, type RecordsDataSource, type RecordsError, type RecordsErrorCode, type RecordsErrorSink, type RecordsFilter, RecordsProvider, type RecordsProviderProps, type RecordsRealtimePort, type RecordsResolverPort, type RecordsResponse, type RecordsResult, type RecordsTableQuery, type RegisteredTable, type Relation, type RelationBinding, type RelationCardinality, type RelationCarries, type RelationCoordinate, type RelationDisplay, type RelationFlavor, type RelationProperties, type RelationTarget, type ResolutionTriple, type ResolvedPublishBinding, type RestorePreview, type RestoreResult, type RetiredActorWord, type Rule, type RuleAnswer, type RuleExpression, type RuleNodeKind, type RuleUse, STAGE_RULE_ENFORCEMENT, STAGE_RULE_ON_FAIL, STORAGE_MODES, STORE_DOORS, STORE_KNOBS, STORE_REFUSAL_CODES, type SavedViewRow, type SavedViewSpecIn, type StagePending, type StagePendingOnBoard, type StageRuleEnforcement, type StageRuleOnFail, type StageRuleWarning, type StaleWriteDetail, type StorageMode, type StoreDoorName, type StoreRefusalCode, type StoredRecord, type StuckRow, type Subscription, type SubscriptionBlock, type SubscriptionCadence, type SubscriptionSpec, TABLE_DISPLAYS, TABLE_ORIGINS, TABLE_TYPES, type Table, type TableArchiveProgress, type TableCapacity, type TableDisplay, type TableOrigin, type TableProposal, type TableType, type Timestamp, type UseEntityFieldMutation, type UseFieldMutation, type UseRecordMutation, type UseRecordsOptions, type UseRecordsState, type UseTableArchive, type Uuid, VALUE_ALTERNATE_KEYS, VALUE_ENVELOPE_KEYS, type ValueAlternate, type ValueAlternateKey, type ValueEnvelope, type ValueEnvelopeKey, type ValueSource, type WorkApprovalDecision, type WorkApprovalFiled, type WorkApprover, type WorkAssignment, type WorkAssignmentField, type WorkChange, type WorkDueState, type WorkGraph, type WorkInboxItem, type WorkInboxKind, type WorkInstantiation, type WorkListFlavour, type WorkListItem, type WorkOrigin, type WorkRecordState, type WorkSlotHold, type WorkState, type WorkTemplateNode, type WorkTemplateRelation, type WorkTurn, type WriteConflict, archivedByLine, archivedWhen, asPermissionLevel, atLeast, bookingPath, choiceSlug, choiceValuesOf, choicesOf, coerceTypedAnswer, coerceTypedAnswers, coercionLabel, emptyArchiveLine, emptyPortalArchiveLine, err, fieldKindFor, forgetAllOps, highestLevel, holdsARetiredChoice, indexedDbStore, isArchiveLane, isDecided, isOwnOp, isPortalArchiveFilter, isRecordsErr, isTheChosen, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, mintOpId, ok, openCaptureQueue, optionKey, optionLabel, portalArchiveConsequence, portalConfirmLine, portalPath, portalTitleTypedBack, publicFormPath, rememberedOpCount, sameDocument, scopeChip, stableFilterKey, tableShapeChanged, useEntityFieldMutation, useEntityFieldRights, useEntityFields, useEntityRecord, useEntityTable, useFieldMutation, useFields, useMergeField, useMyLevel, useMyLevels, useOptionalRecordsClient, useRecord, useRecordMutation, useRecords, useRecordsActor, useRecordsClient, useTable, useTableArchive, useTables };