@ai-matrx/records 0.57.2 → 0.58.0

package/dist/core/index.cjs

@@ -2205,6 +2205,7 @@ __export(core_exports, {
   DECLARABLE_FIELD_KINDS: () => DECLARABLE_FIELD_KINDS,
   DEFAULT_ARCHIVE_LANE: () => DEFAULT_ARCHIVE_LANE,
   DEFAULT_DOCUMENT_MAX_BYTES: () => DEFAULT_DOCUMENT_MAX_BYTES,
+  DEFAULT_FIELDS: () => DEFAULT_FIELDS,
   DEFAULT_PAGE_SIZE: () => DEFAULT_PAGE_SIZE,
   DEFAULT_PORTAL_ARCHIVE_FILTER: () => DEFAULT_PORTAL_ARCHIVE_FILTER,
   DEFAULT_VALUE_MAX_BYTES: () => DEFAULT_VALUE_MAX_BYTES,
@@ -2226,6 +2227,7 @@ __export(core_exports, {
   PERMISSION_LEVELS: () => PERMISSION_LEVELS,
   PER_VALUE_ACCESS_WORDS: () => PER_VALUE_ACCESS_WORDS,
   PIPELINE_RULE_KINDS: () => PIPELINE_RULE_KINDS,
+  PORTAL_ACCENTS: () => PORTAL_ACCENTS,
   PORTAL_ARCHIVE_FILTERS: () => PORTAL_ARCHIVE_FILTERS,
   REFUSALS_WORTH_REPEATING: () => REFUSALS_WORTH_REPEATING,
   RELATION_BINDINGS: () => RELATION_BINDINGS,
@@ -2246,6 +2248,7 @@ __export(core_exports, {
   VALUE_ALTERNATE_KEYS: () => VALUE_ALTERNATE_KEYS,
   VALUE_ENVELOPE_KEYS: () => VALUE_ENVELOPE_KEYS,
   actionRefusals: () => actionRefusals,
+  addFields: () => addFields,
   allowsOtherValues: () => allowsOtherValues,
   announceRecordChanged: () => announceRecordChanged,
   archivedByLine: () => archivedByLine,
@@ -2262,16 +2265,23 @@ __export(core_exports, {
   coerceTypedAnswers: () => coerceTypedAnswers,
   coercionLabel: () => coercionLabel,
   createRecordsClient: () => createRecordsClient,
+  declareTable: () => declareTable,
   doorAbsent: () => doorAbsent,
   doorCensus: () => doorCensus,
   doorExists: () => doorExists,
   emptyArchiveLine: () => emptyArchiveLine,
   emptyPortalArchiveLine: () => emptyPortalArchiveLine,
+  entityReferenceKinds: () => entityReferenceKinds,
+  entityReferenceKindsOf: () => entityReferenceKindsOf,
+  entityReferenceWords: () => entityReferenceWords,
+  entityRefsOf: () => entityRefsOf,
+  entityRefsToWrite: () => entityRefsToWrite,
   err: () => err,
   exampleSpec: () => exampleSpec,
   exportCsv: () => exportCsv,
   exportPageXlsx: () => exportPageXlsx,
   exportXlsx: () => exportXlsx,
+  fieldDeclarationFor: () => fieldDeclarationFor,
   fieldKindFor: () => fieldKindFor,
   forgetAllOps: () => forgetAllOps,
   highestLevel: () => highestLevel,
@@ -2283,10 +2293,16 @@ __export(core_exports, {
   isAPersonsRefusal: () => isAPersonsRefusal,
   isArchiveLane: () => isArchiveLane,
   isDecided: () => isDecided,
+  isEntityReferenceConfig: () => isEntityReferenceConfig,
   isOwnOp: () => isOwnOp,
+  isPortalAccent: () => isPortalAccent,
   isPortalArchiveFilter: () => isPortalArchiveFilter,
   isRecordsErr: () => isRecordsErr,
+  isRuleFilter: () => isRuleFilter,
   isTheChosen: () => isTheChosen,
+  keptGroups: () => keptGroups,
+  keptOutOfSight: () => keptOutOfSight,
+  keptTableHref: () => keptTableHref,
   looksLikeAnId: () => looksLikeAnId,
   mapPgError: () => mapPgError,
   mayDrag: () => mayDrag,
@@ -2294,6 +2310,8 @@ __export(core_exports, {
   memoryStore: () => memoryStore,
   mintClientKey: () => mintClientKey,
   mintOpId: () => mintOpId,
+  moveInOrder: () => moveInOrder,
+  offeredAsContext: () => offeredAsContext,
   ok: () => ok,
   onRecordChanged: () => onRecordChanged,
   openCaptureQueue: () => openCaptureQueue,
@@ -2314,10 +2332,15 @@ __export(core_exports, {
   rememberedOpCount: () => rememberedOpCount,
   sameDocument: () => sameDocument,
   scopeChip: () => scopeChip,
+  sheetSyncSpec: () => sheetSyncSpec,
   stableFilterKey: () => stableFilterKey,
   staleWriteDetail: () => staleWriteDetail,
   supabaseDataSource: () => supabaseDataSource,
-  toAoa: () => toAoa
+  toAoa: () => toAoa,
+  tokenFor: () => tokenFor,
+  withRowCounts: () => withRowCounts,
+  withTableFacts: () => withTableFacts,
+  withTablePlacement: () => withTablePlacement
 });
 module.exports = __toCommonJS(core_exports);
 
@@ -2499,6 +2522,7 @@ var FIELD_KINDS = [
   "currency",
   "datetime",
   "email",
+  "entity_reference",
   "formula",
   "json",
   "long_text",
@@ -2537,6 +2561,7 @@ function fieldKindFor(field, kernel) {
     case "list":
       return field.multi ? "multi_select" : "select";
     case "relation": {
+      if (isEntityReferenceConfig(config)) return "entity_reference";
       const parity = String(config["parity"] ?? "");
       if (parity === "attachment" || parity === "member") return parity;
       if (kernel?.file && field.relation_target === kernel.file) return "attachment";
@@ -2554,6 +2579,14 @@ function fieldKindFor(field, kernel) {
   }
 }
 var UUID_TEXT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isEntityReferenceConfig(config) {
+  const allowed = config?.["allowed_types"];
+  return Array.isArray(allowed) && allowed.length > 0;
+}
+function entityReferenceKindsOf(field) {
+  const allowed = field.config?.["allowed_types"];
+  return Array.isArray(allowed) ? allowed.map((k) => String(k).trim().toLowerCase()).filter(Boolean) : [];
+}
 var TRUE_WORDS = /* @__PURE__ */ new Set(["true", "yes", "y", "1", "\u2713", "x", "checked", "on"]);
 var FALSE_WORDS = /* @__PURE__ */ new Set(["false", "no", "n", "0", "", "unchecked", "off"]);
 function coercionLabel(field) {
@@ -2669,6 +2702,23 @@ function coerceTypedAnswer(field, raw, opts = {}) {
       return {
         refusal: `${label} points at another record, so it is chosen rather than typed. Open it and pick the record.`
       };
+    // SC-R / P12. An entity reference names a platform thing by kind and id.
+    // An import or an agent may hand over `note:<id>` — or a bare id when the
+    // column allows exactly one kind; the store then decides whether the thing
+    // is there and whether the writer may open it. Words are chosen, not typed.
+    case "entity_reference": {
+      const allowed = entityReferenceKindsOf(field);
+      const [maybeToken, maybeId] = text.includes(":") ? text.split(/:(.*)/s, 2) : ["", text];
+      const token = (maybeToken ?? "").trim().toLowerCase() || (allowed.length === 1 ? allowed[0] : "");
+      const id = (maybeId ?? "").trim();
+      if (token && UUID_TEXT.test(id)) {
+        const ref = { token, id: id.toLowerCase() };
+        return { value: field.multi ? [ref] : ref };
+      }
+      return {
+        refusal: `${label} points at something on the platform, so it is chosen rather than typed. Open it and pick it.`
+      };
+    }
     case "formula":
     case "lookup":
     case "rollup":
@@ -2725,6 +2775,10 @@ function publicFormPath(formId) {
 }
 
 // src/portal.ts
+var PORTAL_ACCENTS = ["slate", "green", "amber", "red", "blue", "violet", "teal"];
+function isPortalAccent(word) {
+  return typeof word === "string" && PORTAL_ACCENTS.includes(word);
+}
 function portalPath(slug) {
   return `/portal/c/${slug}`;
 }
@@ -2748,11 +2802,17 @@ function emptyPortalArchiveLine() {
 }
 
 // src/aggregate.ts
+function isRuleFilter(filter) {
+  if (!filter || typeof filter !== "object" || Array.isArray(filter)) return false;
+  const node = filter;
+  return typeof node.op === "string" && Array.isArray(node.args);
+}
 function measureKey(measure) {
   return measure.op === "count" ? "count" : `${measure.op}_${measure.key ?? ""}`;
 }
 function stableFilterKey(filter) {
   if (!filter) return "{}";
+  if (isRuleFilter(filter)) return JSON.stringify(filter);
   const keys = Object.keys(filter).sort();
   if (keys.length === 0) return "{}";
   const parts = keys.map((key) => {
@@ -2848,6 +2908,101 @@ function recordChangeTrigger(tableId, options = {}) {
     ...options.changedFields && options.changedFields.length > 0 ? { changed_fields: options.changedFields } : {}
   };
 }
+function sheetSyncSpec(args) {
+  const [header = [], ...body] = args.cells;
+  const columns = header.map((c, i) => {
+    const name = c == null ? "" : String(c).trim();
+    return name === "" ? `Column ${i + 1}` : name;
+  });
+  if (columns.length === 0) {
+    throw new Error("The sheet has no header row, so there are no columns to sync. Nothing was sent.");
+  }
+  const seenCol = /* @__PURE__ */ new Set();
+  for (const c of columns) {
+    if (seenCol.has(c)) throw new Error(`The sheet has two columns named "${c}". Rename one and sync again.`);
+    seenCol.add(c);
+  }
+  const refIdx = args.refColumn == null ? -1 : columns.indexOf(args.refColumn);
+  if (args.refColumn != null && refIdx < 0) {
+    throw new Error(`The id column "${args.refColumn}" is not in the sheet's header. Nothing was sent.`);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const rows = [];
+  body.forEach((cells, i) => {
+    if (cells.every((v) => v == null || String(v).trim() === "")) return;
+    const ref = refIdx >= 0 ? String(cells[refIdx] ?? "").trim() : `row-${i + 2}`;
+    if (ref === "") throw new Error(`Sheet row ${i + 2} has no value in the id column "${args.refColumn}".`);
+    if (seen.has(ref)) throw new Error(`Two sheet rows share the id "${ref}"; each row needs its own.`);
+    seen.add(ref);
+    const values = {};
+    columns.forEach((c, j) => {
+      const v = cells[j];
+      values[c] = v === void 0 || v === "" ? null : v;
+    });
+    rows.push({ ref, values });
+  });
+  return { source: args.source, table_name: args.tableName, columns, rows };
+}
+function withRowCounts(tables, counts) {
+  if (!counts) return [...tables];
+  const byId = new Map(counts.map((c) => [c.table_id, Number(c.visible_rows)]));
+  return tables.map((t) => byId.has(t.id) ? { ...t, row_count: byId.get(t.id) } : t);
+}
+function moveInOrder(order, moved, toIndex) {
+  const rest = order.filter((id) => id !== moved);
+  const at = Math.max(0, Math.min(Math.trunc(toIndex), rest.length));
+  return [...rest.slice(0, at), moved, ...rest.slice(at)];
+}
+
+// src/placement.ts
+function keptOutOfSight(placement) {
+  return placement?.kept_by_the_app === true;
+}
+function offeredAsContext(placement) {
+  return placement?.offered_as_context === true;
+}
+function withTablePlacement(tables, facts) {
+  if (!facts) return [...tables];
+  const byId = new Map(facts.map((f) => [f.table_id, f]));
+  return tables.map((table) => {
+    const fact = byId.get(table.id);
+    if (!fact || fact.kept_by_the_app === void 0) return table;
+    return {
+      ...table,
+      kept_by_the_app: fact.kept_by_the_app,
+      kept_for: fact.kept_for ?? null,
+      offered_as_context: fact.offered_as_context ?? false,
+      keeper_group: fact.keeper_group ?? null,
+      keeper_says: fact.keeper_says ?? null,
+      used_in_kind: fact.used_in_kind ?? null,
+      used_in_id: fact.used_in_id ?? null,
+      used_in_table_id: fact.used_in_table_id ?? null
+    };
+  });
+}
+function keptGroups(tables) {
+  const out = [];
+  const at = /* @__PURE__ */ new Map();
+  for (const table of tables) {
+    if (!keptOutOfSight(table)) continue;
+    const group = table.keeper_group?.trim() || "Kept by the app";
+    let i = at.get(group);
+    if (i === void 0) {
+      i = out.length;
+      at.set(group, i);
+      out.push({ group, tables: [] });
+    }
+    out[i].tables.push(table);
+  }
+  return out;
+}
+function keptTableHref(fact, hrefs) {
+  if (fact.used_in_kind === "scope" && fact.used_in_id) return hrefs.scope(fact.used_in_id);
+  if (fact.used_in_kind === "table" && (fact.used_in_table_id || fact.used_in_id)) {
+    return hrefs.table(fact.used_in_table_id || fact.used_in_id);
+  }
+  return hrefs.table(fact.table_id);
+}
 
 // src/capture-queue.ts
 var DB_NAME = "matrx-capture";
@@ -3135,6 +3290,194 @@ function isRecordsErr(result) {
 var ok = (data) => ({ ok: true, data });
 var err = (error) => ({ ok: false, error });
 
+// src/core/pgError.ts
+var BY_SQLSTATE = {
+  PT409: "stale_write",
+  "42501": "door",
+  "23514": "refused_by_rule",
+  "22004": "invalid_argument",
+  "22023": "invalid_argument",
+  // 22P02 — a value does not fit the type the store holds for it. The class is
+  // real and was hit live: an organization whose copy of a package table grew
+  // `status` as a uuid-valued Field was sent the text "open", and the store
+  // answered `invalid input syntax for type uuid: "open"`. It is the CALL that
+  // is wrong for the shape the store holds, which is what `invalid_argument`
+  // already means — the store's own sentence names the value and the type.
+  "22P02": "invalid_argument",
+  // 42703 — a column that is not there. The store raises it from
+  // `custom.entity_table`, which is asked for a column by NAME, so the class is
+  // exactly "the call named something the shape does not have": the same thing
+  // `invalid_argument` already means, and the store's own sentence names the
+  // column. Added 2026-09-20 (lane FORMS) because the package's live-door suite
+  // caught it raised by a door this package did not know about — which is the
+  // suite working, and is why the map is a census rather than a guess.
+  "42703": "invalid_argument",
+  // 22007 — a date or a time the store could not read as one. It is raised by
+  // `custom.dashboard_window_sql`, which is handed a window a caller wrote
+  // ("last 30 days", a literal date), so the class is again "the call named
+  // something the shape does not accept" and the store's own sentence names the
+  // text it could not read. Added 2026-09-20 (lane SCREEN-BREAK) after the
+  // live-door census caught it — the same way 42703 arrived, which is the
+  // census working rather than a guess.
+  "22007": "invalid_argument",
+  // 22003 — a number the store could not hold at the size it was handed. It is
+  // raised by `custom.context_resolve`, which is given a window or a depth a
+  // caller wrote, so the class is the same one 22P02, 42703 and 22007 already
+  // are: the CALL named a value the shape does not accept, and the store's own
+  // sentence names the number and the range. Added 2026-09-20 (lane GRID-TWO)
+  // when the live-door census caught the release gate red on it — which is the
+  // census working, and the fourth time it has been the thing that found a new
+  // refusal class rather than a person guessing one.
+  "22003": "invalid_argument",
+  "02000": "not_found",
+  "23503": "missing_reference",
+  "23505": "already_exists",
+  "0A000": "not_supported",
+  "53400": "store_limit",
+  "22012": "store_limit",
+  // 54001 — `custom.record_delete` stops a cascade that nests past sixty-four
+  // levels of containment, because that is a loop somebody built rather than a
+  // hierarchy, and saying so beats recursing until the server runs out of
+  // stack. It is a LIMIT of the store, and the store's own sentence names what
+  // to do about it, so it reads as one.
+  "54001": "store_limit",
+  // 54000 — the grid primitives' organization ceilings (GRID-PRIMITIVES, 2026-09-23):
+  // `custom.action_run` on a selection past its knob, `custom.table_decorate` past the
+  // rule count, `custom.table_from_example` past `custom/example_rows_max`,
+  // `custom.table_webhook_declare` past `custom/table_webhooks_max`, and
+  // `custom.hub_changed_by`. Each names its knob in the hint and writes nothing, so it
+  // reads exactly like 54001: a limit of the store, in the store's own sentence.
+  "54000": "store_limit",
+  // VIS: `custom.has_visibility_at` refuses to answer from a snapshot older
+  // than a write this reader has already seen, rather than returning something
+  // they just lost access to. It is retryable on a fresher connection, which is
+  // a different instruction from every other refusal here.
+  "40001": "stale_read",
+  // 57014 — the store cancelled the statement at its own timeout. Like
+  // `stale_read` and unlike every other refusal here, the call was never
+  // refused on its merits: the same call on a smaller page, or once the
+  // organization's kernel is not being rewritten, can succeed. It gets its own
+  // code so a screen can offer "try again" honestly instead of showing a
+  // failure sentence the caller cannot act on.
+  "57014": "timed_out",
+  // PostgREST's own two: the store is not being SERVED, which is a different
+  // thing from the store refusing. `custom` absent from `pgrst.db_schemas`, or
+  // the grants not copied, land here.
+  PGRST202: "store_not_served",
+  PGRST205: "store_not_served",
+  PGRST301: "door",
+  // PT428 — NOT A FAILURE, and the release gate's live census is what found it
+  // missing: the store raises it and this package answered `internal`, which is
+  // the one classification that tells a screen nothing. A stage gate whose
+  // `on_fail` is `require_approval` files the request and leaves the record
+  // where it was; the transaction is rolled back to the pipeline's own block, so
+  // "nothing was written" is a fact rather than a promise. Landed by lane
+  // STAGE-RULES; mapped here by STAGE-RULES-2 the day after, when the census
+  // caught it — the sixth time that census has been the thing that found a
+  // refusal class rather than a person guessing one.
+  PT428: "needs_approval"
+};
+var MAPPED_SQLSTATES = Object.keys(BY_SQLSTATE);
+function parseDetail(details) {
+  if (!details) return void 0;
+  const trimmed = details.trim();
+  if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) return details;
+  try {
+    return JSON.parse(trimmed);
+  } catch {
+    return details;
+  }
+}
+function isNotASqlstate(code) {
+  if (!code) return true;
+  return /^[0-9]{3}$/.test(code);
+}
+function mapPgError(error, where) {
+  const raw = error.code ?? void 0;
+  const sqlstate = raw && raw !== "" ? raw : void 0;
+  const mapped = {
+    code: "internal",
+    message: error.message,
+    ...error.hint ? { hint: error.hint } : {},
+    ...sqlstate ? { sqlstate } : {}
+  };
+  if (isNotASqlstate(sqlstate)) {
+    mapped.code = "unreachable";
+  } else {
+    mapped.code = BY_SQLSTATE[sqlstate] ?? "internal";
+  }
+  const detail = parseDetail(error.details);
+  if (detail !== void 0) mapped.detail = detail;
+  if (mapped.code === "internal") {
+    mapped.unmapped = true;
+    mapped.diagnostic = `@ai-matrx/records did not recognise SQLSTATE ${sqlstate ?? "(none)"} from ${where}; the store's own message is the thing to act on.`;
+  } else if (mapped.code === "unreachable") {
+    mapped.unmapped = true;
+    mapped.diagnostic = `@ai-matrx/records never reached the store from ${where}: ${raw ? `the transport answered ${raw}` : "no response"} \u2014 ${error.message}`;
+    mapped.message = "We could not reach your data.";
+    delete mapped.hint;
+  }
+  return mapped;
+}
+function staleWriteDetail(error) {
+  if (error.code !== "stale_write") return null;
+  const detail = error.detail;
+  if (!detail || typeof detail.expected_version !== "number" || typeof detail.current_version !== "number") {
+    return null;
+  }
+  return {
+    expected_version: detail.expected_version,
+    current_version: detail.current_version,
+    contested_fields: detail.contested_fields ?? {}
+  };
+}
+
+// src/relation.ts
+var ENTITY_REF_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isRefLike(value) {
+  return typeof value === "object" && value !== null && "token" in value && "id" in value;
+}
+function entityRefsOf(value) {
+  const items = Array.isArray(value) ? value : value == null ? [] : [value];
+  const out = [];
+  for (const item of items) {
+    if (!isRefLike(item)) continue;
+    const token = String(item.token ?? "").trim().toLowerCase();
+    const id = String(item.id ?? "").trim();
+    if (!token || !ENTITY_REF_ID.test(id)) continue;
+    const label = item.label;
+    out.push({ token, id: id.toLowerCase(), label: typeof label === "string" ? label : null });
+  }
+  return out;
+}
+function entityRefsToWrite(value, multi) {
+  const seen = /* @__PURE__ */ new Set();
+  const refs = [];
+  for (const ref of entityRefsOf(value)) {
+    const k = `${ref.token}:${ref.id}`;
+    if (seen.has(k)) continue;
+    seen.add(k);
+    refs.push({ token: ref.token, id: ref.id });
+  }
+  if (multi) return refs;
+  return refs[0] ?? null;
+}
+async function entityReferenceKinds(source) {
+  const { data, error } = await source.rpc("entity_reference_kinds", {}, { schema: "custom" });
+  if (error) return err(mapPgError(error, "entityReferenceKinds"));
+  return ok(Array.isArray(data) ? data : []);
+}
+async function entityReferenceWords(source, organizationId, refs) {
+  if (refs.length === 0) return ok([]);
+  const { data, error } = await source.rpc(
+    "entity_reference_words",
+    { p_organization_id: organizationId, p_refs: refs.map((r) => ({ token: r.token, id: r.id })) },
+    { schema: "custom" }
+  );
+  if (error) return err(mapPgError(error, "entityReferenceWords"));
+  return ok(entityRefsOf(data));
+}
+
 // src/ops.ts
 var REMEMBER_MS = 3e4;
 var REMEMBER_MAX = 500;
@@ -3848,6 +4191,7 @@ var STORE_DOORS = [
   { name: "table_work_kind", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
   { name: "tables_at_home", args: "p_organization_id uuid, p_home_ids uuid[]", returns: "TABLE(table_id uuid, home_record_id uuid, kind text)", security: "definer" },
   { name: "tables_described_without_asking", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
+  { name: "tables_i_can_open", args: "", returns: "TABLE(table_id uuid, table_name text, organization_id uuid, organization_name text, member boolean, visibility text, updated_at timestamp with time zone)", security: "definer" },
   { name: "tables_shared_with_me", args: "", returns: "TABLE(table_id uuid, organization_id uuid, organization text, table_name text, level text, level_label text, shared_at timestamp with time zone, opens boolean, say text)", security: "definer" },
   { name: "trg_associations_bump_visibility", args: "", returns: "trigger", security: "definer" },
   { name: "undeclared_keys", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "text[]", security: "invoker" },
@@ -3872,6 +4216,7 @@ var STORE_DOORS = [
   { name: "visible_predicate_sql", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, p_alias text DEFAULT 'r'::text", returns: "text", security: "definer" },
   { name: "visible_record_ids", args: "p_user_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "TABLE(id uuid)", security: "definer" },
   { name: "visible_set", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, OUT o_all_visible boolean, OUT o_true_visibility platform.visibility[], OUT o_granted_all uuid[], OUT o_granted_visible uuid[], OUT o_carried_visible uuid[], OUT o_ladder_calls integer, OUT o_fallback boolean, OUT o_note text", returns: "record", security: "definer" },
+  { name: "where_id_opens", args: "p_id uuid", returns: "jsonb", security: "definer" },
   { name: "widget_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "withheld_marker", args: "p_mask jsonb, p_key text", returns: "jsonb", security: "invoker" },
   { name: "withheld_sentence", args: "p_mask jsonb, p_key text", returns: "text", security: "invoker" },
@@ -3978,7 +4323,7 @@ var STORE_REFUSAL_CODES = [
   { code: "23505", raised_by: "_share_write_person,_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,sign_request_cancel,sign_request_create,table_share_outside_resend,work_approval_decide,work_slot_hold" },
   { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_display_format_check,_display_spec_for,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_relation_halves_agree,_relation_kernel_targets,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_with_display,_work_shape_guard,_workdoors_approval_guard,action_run,assert_columns_are_defined,assert_entity_is_organization_scoped,booking_declare,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_comment_write,io_import_rows,migrate_merge,migrate_purge_hard,portal_archive,portal_restore,record_write_graph,relation_carry,relation_halves_repair,relation_own,sign_request_create,sign_request_sign,table_declare,table_from_example,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
-  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,agent_table_claim,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,doc_sign,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_purge_hard,migrate_purge_hard_request,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_invite_accept,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,read_records_archived,read_records_by_ids,read_records_matching,record_table,record_write_graph,relation_halves_disagreements,relation_halves_repair,share_grant,subscription_mute,subscription_preview,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_webhook_declare,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
+  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,agent_table_claim,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,doc_sign,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_purge_hard,migrate_purge_hard_request,migrate_reclass,my_levels,organization_clear,organization_contents,portal_declare,portal_invitation,portal_invite,portal_invite_accept,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,read_records_archived,read_records_by_ids,read_records_matching,record_table,record_write_graph,relation_halves_disagreements,relation_halves_repair,share_grant,subscription_mute,subscription_preview,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_webhook_declare,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
   { code: "42703", raised_by: "entity_table,portal_declare" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,enrich_due,enrich_land,promote_field" },
   { code: "54000", raised_by: "action_run,hub_changed_by,table_decorate,table_from_example,table_webhook_declare" },
@@ -5044,6 +5389,20 @@ var OWED_BY = {
   table_webhook_archive: "GRID-PRIMITIVES G4 \u2014 gridprim_every_row_change_reaches_the_webhook.sql (chair's production apply)",
   table_from_example: "GRID-PRIMITIVES G5 \u2014 gridprim_a_table_can_start_from_a_real_example.sql (chair's production apply)",
   autonumber_backfill: "GRID-PRIMITIVES G5 \u2014 gridprim_a_table_can_start_from_a_real_example.sql (chair's production apply)",
+  table_list_everywhere: "GRID-PRIMITIVES G9 \u2014 gridprim_every_picker_lists_both_stores.sql (chair's production apply)",
+  table_sync: "GRID-PRIMITIVES G10 \u2014 gridprim_a_synced_sheet_is_one_table_that_refreshes.sql (chair's production apply)",
+  scope_table_provision: "GRID-PRIMITIVES G11 \u2014 gridprim_a_scope_provisions_its_table_in_the_store.sql (chair's production apply)",
+  table_row_counts: "GRID-PRIMITIVES G12 \u2014 gridprim_every_table_counts_its_rows_and_every_row_shows_its_header.sql + its grant file (chair's production apply)",
+  view_record_order_set: "GRID-PRIMITIVES G13 \u2014 gridprim_a_view_keeps_the_order_a_person_dragged.sql + its grant file (chair's production apply)",
+  table_share_outside_grant: "GRID-PRIMITIVES G14 \u2014 gridprim_a_known_outsider_is_granted_at_once.sql + gridprim_a_signed_in_person_may_share_with_a_known_outsider.sql (chair's production apply)",
+  read_records_in_view_order: "GRID-PRIMITIVES G13 \u2014 gridprim_a_view_keeps_the_order_a_person_dragged.sql + its grant file (chair's production apply)",
+  rule_members_visible: "S2-PRIME FILTER-GROUPS \u2014 filtergroups_a_views_nested_question_is_one_where_clause.sql + its grant file (chair's production apply)",
+  record_headers: "GRID-PRIMITIVES G12 \u2014 gridprim_every_table_counts_its_rows_and_every_row_shows_its_header.sql + its grant file (chair's production apply)",
+  pipeline_move_many: "UI-CHAMPIONS S4 \u2014 uichamp_s4_a_selection_moves_and_decides_in_one_call.sql + its grant file (chair's production apply)",
+  work_decide_many: "UI-CHAMPIONS S4 \u2014 uichamp_s4_a_selection_moves_and_decides_in_one_call.sql + its grant file (chair's production apply)",
+  portal_form: "UI-CHAMPIONS S6 \u2014 uichamp_s6_a_portal_carries_its_look_and_its_forms.sql + uichamp_s6_a_signed_in_person_may_open_a_portals_look_and_forms.sql (chair's production apply)",
+  portal_form_submit: "UI-CHAMPIONS S6 \u2014 uichamp_s6_a_portal_carries_its_look_and_its_forms.sql + uichamp_s6_a_signed_in_person_may_open_a_portals_look_and_forms.sql (chair's production apply)",
+  form_preview_asks: "FORMS-FIX-1 \u2014 formsfix1_the_owners_preview_asks_the_store_the_same_question.sql + its grant file (chair's production apply)",
   rule_declare: "W1-RULE \u2014 `custom.record_write` writes `data_class = 'record'`, so the ONE write door cannot make a Rule record; declaring a Rule (and therefore a DOOR-18 subscription) needs a door of its own"
 };
 var TRUST_SCHEMA = "iam";
@@ -5247,6 +5606,8 @@ var DOORS = {
   pipelineBoard: "pipeline_board",
   pipelineTransitionRefusal: "pipeline_transition_refusal",
   pipelineMove: "pipeline_move",
+  /** Lane S4: many cards, one call, a verdict and a version per card. */
+  pipelineMoveMany: "pipeline_move_many",
   tableStageField: "table_stage_field",
   // STAGE-RULES. A gate can refuse or it can hand the change to the approvals queue; the
   // closed list is the store's, the knob is the organization's, and what is WAITING on a
@@ -5257,6 +5618,7 @@ var DOORS = {
   pipelinePending: "pipeline_pending",
   pipelineGatePreview: "pipeline_gate_preview",
   ruleMembers: "rule_members",
+  ruleMembersVisible: "rule_members_visible",
   ruleMembership: "rule_membership",
   ruleRun: "rule_run",
   ruleEval: "rule_eval",
@@ -5271,6 +5633,12 @@ var DOORS = {
   // are server-lane doors and a browser never calls them.
   forms: "forms",
   formDeclare: "form_declare",
+  /**
+   * WHICH QUESTIONS THE OWNER'S PREVIEW ASKS NEXT (lane FORMS-FIX-1). The same store answer a
+   * stranger's form gets (`custom._form_questions_asked` → `custom.rule_eval`), behind the
+   * organization wall and the caller's own rung on the Table — never `rule_eval` from a browser.
+   */
+  formPreviewAsks: "form_preview_asks",
   // PRODUCTS row 14 — "let clients book a 30-minute consult". A booking page IS an
   // `anon_form`, so it is opened and closed by `anonPublish` like any other; this is
   // the owner's list of them with the numbers that make it worth opening. The
@@ -5330,6 +5698,11 @@ var DOORS = {
   portalInvite: "portal_invite",
   portalRevoke: "portal_revoke",
   portalPreview: "portal_preview",
+  // S6 — the CLIENT's two form doors. They are store doors (schema `custom`), called by a
+  // signed-in portal principal, and each refuses anybody who is not a live principal of that
+  // live portal — so, unlike the sign-in pair above, they belong in this table.
+  portalForm: "portal_form",
+  portalFormSubmit: "portal_form_submit",
   // ORG-CLEANUP, 2026-09-22 — A PORTAL IS ARCHIVED, NEVER DELETED.
   // `portals` keeps its signature and HIDES archived portals (the law's default
   // is to hide); `list_portals(org, 'active'|'archived'|'all')` is the
@@ -5525,6 +5898,8 @@ var DOORS = {
   workApprovalRequest: "work_approval_request",
   workApprovalMayDecide: "work_approval_may_decide",
   workApprovalDecide: "work_approval_decide",
+  /** Lane S4: many inbox decisions, one call, a verdict per item. */
+  workDecideMany: "work_decide_many",
   workApprovalRead: "work_approval_read",
   // PRODUCTS row 13 — checklists and SOP runs.
   checklistRefusal: "checklist_refusal",
@@ -5550,6 +5925,14 @@ var DOORS = {
   tableFromExample: "table_from_example",
   autonumberBackfill: "autonumber_backfill",
   ioExport: "io_export",
+  tableListEverywhere: "table_list_everywhere",
+  tableSync: "table_sync",
+  scopeTableProvision: "scope_table_provision",
+  tableRowCounts: "table_row_counts",
+  recordHeaders: "record_headers",
+  viewRecordOrderSet: "view_record_order_set",
+  readRecordsInViewOrder: "read_records_in_view_order",
+  tableShareOutsideGrant: "table_share_outside_grant",
   // Declared here BECAUSE they do not exist yet: naming them is what makes the
   // absence visible to `pnpm check:store-registry` and to the suite.
   metadataSearch: "metadata_search",
@@ -5567,148 +5950,6 @@ function doorCensus() {
   return { present: present.sort(), absent: absent.sort() };
 }
 
-// src/core/pgError.ts
-var BY_SQLSTATE = {
-  PT409: "stale_write",
-  "42501": "door",
-  "23514": "refused_by_rule",
-  "22004": "invalid_argument",
-  "22023": "invalid_argument",
-  // 22P02 — a value does not fit the type the store holds for it. The class is
-  // real and was hit live: an organization whose copy of a package table grew
-  // `status` as a uuid-valued Field was sent the text "open", and the store
-  // answered `invalid input syntax for type uuid: "open"`. It is the CALL that
-  // is wrong for the shape the store holds, which is what `invalid_argument`
-  // already means — the store's own sentence names the value and the type.
-  "22P02": "invalid_argument",
-  // 42703 — a column that is not there. The store raises it from
-  // `custom.entity_table`, which is asked for a column by NAME, so the class is
-  // exactly "the call named something the shape does not have": the same thing
-  // `invalid_argument` already means, and the store's own sentence names the
-  // column. Added 2026-09-20 (lane FORMS) because the package's live-door suite
-  // caught it raised by a door this package did not know about — which is the
-  // suite working, and is why the map is a census rather than a guess.
-  "42703": "invalid_argument",
-  // 22007 — a date or a time the store could not read as one. It is raised by
-  // `custom.dashboard_window_sql`, which is handed a window a caller wrote
-  // ("last 30 days", a literal date), so the class is again "the call named
-  // something the shape does not accept" and the store's own sentence names the
-  // text it could not read. Added 2026-09-20 (lane SCREEN-BREAK) after the
-  // live-door census caught it — the same way 42703 arrived, which is the
-  // census working rather than a guess.
-  "22007": "invalid_argument",
-  // 22003 — a number the store could not hold at the size it was handed. It is
-  // raised by `custom.context_resolve`, which is given a window or a depth a
-  // caller wrote, so the class is the same one 22P02, 42703 and 22007 already
-  // are: the CALL named a value the shape does not accept, and the store's own
-  // sentence names the number and the range. Added 2026-09-20 (lane GRID-TWO)
-  // when the live-door census caught the release gate red on it — which is the
-  // census working, and the fourth time it has been the thing that found a new
-  // refusal class rather than a person guessing one.
-  "22003": "invalid_argument",
-  "02000": "not_found",
-  "23503": "missing_reference",
-  "23505": "already_exists",
-  "0A000": "not_supported",
-  "53400": "store_limit",
-  "22012": "store_limit",
-  // 54001 — `custom.record_delete` stops a cascade that nests past sixty-four
-  // levels of containment, because that is a loop somebody built rather than a
-  // hierarchy, and saying so beats recursing until the server runs out of
-  // stack. It is a LIMIT of the store, and the store's own sentence names what
-  // to do about it, so it reads as one.
-  "54001": "store_limit",
-  // 54000 — the grid primitives' organization ceilings (GRID-PRIMITIVES, 2026-09-23):
-  // `custom.action_run` on a selection past its knob, `custom.table_decorate` past the
-  // rule count, `custom.table_from_example` past `custom/example_rows_max`,
-  // `custom.table_webhook_declare` past `custom/table_webhooks_max`, and
-  // `custom.hub_changed_by`. Each names its knob in the hint and writes nothing, so it
-  // reads exactly like 54001: a limit of the store, in the store's own sentence.
-  "54000": "store_limit",
-  // VIS: `custom.has_visibility_at` refuses to answer from a snapshot older
-  // than a write this reader has already seen, rather than returning something
-  // they just lost access to. It is retryable on a fresher connection, which is
-  // a different instruction from every other refusal here.
-  "40001": "stale_read",
-  // 57014 — the store cancelled the statement at its own timeout. Like
-  // `stale_read` and unlike every other refusal here, the call was never
-  // refused on its merits: the same call on a smaller page, or once the
-  // organization's kernel is not being rewritten, can succeed. It gets its own
-  // code so a screen can offer "try again" honestly instead of showing a
-  // failure sentence the caller cannot act on.
-  "57014": "timed_out",
-  // PostgREST's own two: the store is not being SERVED, which is a different
-  // thing from the store refusing. `custom` absent from `pgrst.db_schemas`, or
-  // the grants not copied, land here.
-  PGRST202: "store_not_served",
-  PGRST205: "store_not_served",
-  PGRST301: "door",
-  // PT428 — NOT A FAILURE, and the release gate's live census is what found it
-  // missing: the store raises it and this package answered `internal`, which is
-  // the one classification that tells a screen nothing. A stage gate whose
-  // `on_fail` is `require_approval` files the request and leaves the record
-  // where it was; the transaction is rolled back to the pipeline's own block, so
-  // "nothing was written" is a fact rather than a promise. Landed by lane
-  // STAGE-RULES; mapped here by STAGE-RULES-2 the day after, when the census
-  // caught it — the sixth time that census has been the thing that found a
-  // refusal class rather than a person guessing one.
-  PT428: "needs_approval"
-};
-var MAPPED_SQLSTATES = Object.keys(BY_SQLSTATE);
-function parseDetail(details) {
-  if (!details) return void 0;
-  const trimmed = details.trim();
-  if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) return details;
-  try {
-    return JSON.parse(trimmed);
-  } catch {
-    return details;
-  }
-}
-function isNotASqlstate(code) {
-  if (!code) return true;
-  return /^[0-9]{3}$/.test(code);
-}
-function mapPgError(error, where) {
-  const raw = error.code ?? void 0;
-  const sqlstate = raw && raw !== "" ? raw : void 0;
-  const mapped = {
-    code: "internal",
-    message: error.message,
-    ...error.hint ? { hint: error.hint } : {},
-    ...sqlstate ? { sqlstate } : {}
-  };
-  if (isNotASqlstate(sqlstate)) {
-    mapped.code = "unreachable";
-  } else {
-    mapped.code = BY_SQLSTATE[sqlstate] ?? "internal";
-  }
-  const detail = parseDetail(error.details);
-  if (detail !== void 0) mapped.detail = detail;
-  if (mapped.code === "internal") {
-    mapped.unmapped = true;
-    mapped.diagnostic = `@ai-matrx/records did not recognise SQLSTATE ${sqlstate ?? "(none)"} from ${where}; the store's own message is the thing to act on.`;
-  } else if (mapped.code === "unreachable") {
-    mapped.unmapped = true;
-    mapped.diagnostic = `@ai-matrx/records never reached the store from ${where}: ${raw ? `the transport answered ${raw}` : "no response"} \u2014 ${error.message}`;
-    mapped.message = "We could not reach your data.";
-    delete mapped.hint;
-  }
-  return mapped;
-}
-function staleWriteDetail(error) {
-  if (error.code !== "stale_write") return null;
-  const detail = error.detail;
-  if (!detail || typeof detail.expected_version !== "number" || typeof detail.current_version !== "number") {
-    return null;
-  }
-  return {
-    expected_version: detail.expected_version,
-    current_version: detail.current_version,
-    contested_fields: detail.contested_fields ?? {}
-  };
-}
-
 // src/core/recordChanges.ts
 var listeners = /* @__PURE__ */ new Set();
 function announceRecordChanged(recordId) {
@@ -5783,6 +6024,19 @@ function sink(config) {
     else console.error(line);
   });
 }
+function withTableFacts(tables, facts, me) {
+  if (!facts) return [...tables];
+  const byId = new Map(facts.map((f) => [f.table_id, f]));
+  return tables.map((table) => {
+    const fact = byId.get(table.id);
+    if (!fact) return table;
+    return {
+      ...table,
+      visibility: fact.visibility,
+      ...fact.mine && me ? { created_by: me } : {}
+    };
+  });
+}
 function createRecordsClient(config) {
   const schema = config.schema ?? DEFAULT_SCHEMA;
   const org = config.organizationId;
@@ -5957,6 +6211,10 @@ function createRecordsClient(config) {
         })
       );
     },
+    async tableFacts() {
+      if (!doorExists(DOORS.tableFacts)) return ok(null);
+      return callDoor(DOORS.tableFacts, { p_organization_id: org }, "tableFacts");
+    },
     async tableArchived({ table_id }) {
       const kernel = await callDoor(DOORS.tableKernelId, {}, "tableArchived.kernel");
       if (!kernel.ok) return err(kernel.error);
@@ -6140,23 +6398,6 @@ function createRecordsClient(config) {
         const { document } = unfold(row.document);
         return { ...document, id: row.id, organization_id: org };
       });
-      if (doorExists(DOORS.tableFacts)) {
-        const facts = await callDoor(
-          DOORS.tableFacts,
-          { p_organization_id: org },
-          "tableList.facts"
-        );
-        if (facts.ok) {
-          const byId = new Map((facts.data ?? []).map((f) => [f.table_id, f]));
-          const me = config.actor.user_id ?? null;
-          for (const table of tables) {
-            const fact = byId.get(table.id);
-            if (!fact) continue;
-            table.visibility = fact.visibility;
-            if (fact.mine && me) table.created_by = me;
-          }
-        }
-      }
       tables.sort((a, b) => (a.name ?? "").localeCompare(b.name ?? ""));
       return ok(tables);
     },
@@ -6350,10 +6591,11 @@ function createRecordsClient(config) {
         "pipelineRead"
       );
     },
-    async pipelineBoard({ table_id, measure }) {
+    async pipelineBoard({ table_id, measure, filter }) {
+      const asked = filter && stableFilterKey(filter) !== "{}";
       return callDoor(
         DOORS.pipelineBoard,
-        { p_organization_id: org, p_table_id: table_id, p_measure: measure ?? null },
+        asked ? { p_organization_id: org, p_table_id: table_id, p_measure: measure ?? null, p_filter: filter } : { p_organization_id: org, p_table_id: table_id, p_measure: measure ?? null },
         "pipelineBoard"
       );
     },
@@ -6377,6 +6619,13 @@ function createRecordsClient(config) {
         "pipelineMove"
       );
     },
+    async pipelineMoveMany({ moves }) {
+      return callDoor(
+        DOORS.pipelineMoveMany,
+        { p_organization_id: org, p_moves: moves },
+        "pipelineMoveMany"
+      );
+    },
     async pipelineDeclare({ table_id, spec }) {
       return callDoor(
         DOORS.pipelineDeclare,
@@ -6426,6 +6675,18 @@ function createRecordsClient(config) {
         "pipelineGatePreview"
       );
     },
+    async ruleMembersVisible({ rule_id, limit = 200, offset = 0 }) {
+      const door = await callDoor(
+        DOORS.ruleMembersVisible,
+        { p_organization_id: org, p_rule_id: rule_id, p_limit: limit, p_offset: offset },
+        "ruleMembersVisible"
+      );
+      if (!door.ok) return err(door.error);
+      return ok((door.data ?? []).map((row) => {
+        const { document, hidden } = unfold(row.document);
+        return { id: row.id, document, level: row.level, hidden };
+      }));
+    },
     async ruleMembers({ rule_id }) {
       return callDoor(
         DOORS.ruleMembers,
@@ -6478,6 +6739,13 @@ function createRecordsClient(config) {
         "bookingDeclare"
       );
     },
+    async formPreviewAsks({ table_id, questions, values }) {
+      return callDoor(
+        DOORS.formPreviewAsks,
+        { p_organization_id: org, p_table_id: table_id, p_questions: questions, p_values: values },
+        "formPreviewAsks"
+      );
+    },
     async formDeclare(args) {
       return callDoor(
         DOORS.formDeclare,
@@ -6653,11 +6921,33 @@ function createRecordsClient(config) {
           p_tables: args.tables,
           p_portal_id: args.portal_id ?? null,
           p_slug: args.slug ?? null,
-          p_sign_in_method: args.sign_in_method ?? "magic_link"
+          p_sign_in_method: args.sign_in_method ?? "magic_link",
+          // S6: sent only when given, so a caller that says nothing about the look keeps it.
+          ...args.config !== void 0 ? { p_config: args.config } : {}
         },
         "portalDeclare"
       );
     },
+    async portalForm({ portal_id, form_id }) {
+      return callDoor(
+        DOORS.portalForm,
+        { p_organization_id: org, p_portal_id: portal_id, p_form_id: form_id },
+        "portalForm"
+      );
+    },
+    async portalFormSubmit({ portal_id, form_id, answers, client_key }) {
+      return callDoor(
+        DOORS.portalFormSubmit,
+        {
+          p_organization_id: org,
+          p_portal_id: portal_id,
+          p_form_id: form_id,
+          p_payload: answers,
+          p_client_key: client_key ?? null
+        },
+        "portalFormSubmit"
+      );
+    },
     async portalInvite(args) {
       return callDoor(
         DOORS.portalInvite,
@@ -6856,10 +7146,17 @@ function createRecordsClient(config) {
         "dashboardDeclare"
       );
     },
-    async dashboardRun({ dashboard_id, filter }) {
+    async dashboardRun({ dashboard_id, filter, compare, grain }) {
       return callDoor(
         DOORS.dashboardRun,
-        { p_organization_id: org, p_dashboard_id: dashboard_id, p_filter: filter ?? {} },
+        {
+          p_organization_id: org,
+          p_dashboard_id: dashboard_id,
+          p_filter: filter ?? {},
+          // Sent only when asked, so a caller that never compares calls exactly what it did.
+          ...compare ? { p_compare: compare } : {},
+          ...grain ? { p_grain: grain } : {}
+        },
         "dashboardRun"
       );
     },
@@ -6884,7 +7181,7 @@ function createRecordsClient(config) {
         "dashboardDelete"
       );
     },
-    async recordAggregate({ table_id, groupBy, measures, bucket, filter, limit }) {
+    async recordAggregate({ table_id, groupBy, measures, bucket, filter, limit, compare }) {
       return callDoor(
         DOORS.recordAggregate,
         {
@@ -6894,7 +7191,8 @@ function createRecordsClient(config) {
           p_measures: measures ?? [],
           p_bucket: bucket ?? null,
           p_filter: filter ?? {},
-          p_limit: limit ?? 200
+          p_limit: limit ?? 200,
+          ...compare ? { p_compare: compare } : {}
         },
         "recordAggregate"
       );
@@ -7622,6 +7920,13 @@ function createRecordsClient(config) {
         "workApprovalDecide"
       );
     },
+    async workDecideMany({ decisions }) {
+      return callDoor(
+        DOORS.workDecideMany,
+        { p_organization_id: org, p_decisions: decisions },
+        "workDecideMany"
+      );
+    },
     async workApprovalRead({ approval_id }) {
       return callDoor(
         DOORS.workApprovalRead,
@@ -7825,6 +8130,69 @@ function createRecordsClient(config) {
         "tableFromExample"
       );
     },
+    async tableListEverywhere() {
+      return callDoor(
+        DOORS.tableListEverywhere,
+        { p_organization_id: org },
+        "tableListEverywhere"
+      );
+    },
+    async tableSync({ home_id, spec }) {
+      return callDoor(
+        DOORS.tableSync,
+        { p_organization_id: org, p_home_id: home_id, p_spec: spec },
+        "tableSync"
+      );
+    },
+    async scopeTableProvision({ home_id, item_id, scope_id }) {
+      return callDoor(
+        DOORS.scopeTableProvision,
+        { p_organization_id: org, p_item_id: item_id, p_scope_id: scope_id, p_home_id: home_id ?? null },
+        "scopeTableProvision"
+      );
+    },
+    async tableRowCounts({ table_ids }) {
+      return callDoor(
+        DOORS.tableRowCounts,
+        { p_organization_id: org, p_table_ids: table_ids },
+        "tableRowCounts"
+      );
+    },
+    async recordHeaders({ ids }) {
+      return callDoor(
+        DOORS.recordHeaders,
+        { p_organization_id: org, p_ids: ids },
+        "recordHeaders"
+      );
+    },
+    async tableShareOutsideGrant({ table_id, person, level }) {
+      return callDoor(
+        DOORS.tableShareOutsideGrant,
+        { p_organization_id: org, p_table_id: table_id, p_person: person, p_level: level ?? "viewer" },
+        "tableShareOutsideGrant"
+      );
+    },
+    async viewRecordOrderSet({ view_id, record_ids }) {
+      return callDoor(
+        DOORS.viewRecordOrderSet,
+        { p_organization_id: org, p_view_id: view_id, p_record_ids: record_ids },
+        "viewRecordOrderSet"
+      );
+    },
+    async readInViewOrder({ view_id, limit, offset }) {
+      const door = await callDoor(
+        DOORS.readRecordsInViewOrder,
+        { p_organization_id: org, p_view_id: view_id, p_by_id: false, p_limit: limit ?? 200, p_offset: offset ?? 0 },
+        "readInViewOrder"
+      );
+      if (!door.ok) return err(door.error);
+      return ok(
+        (door.data ?? []).map((row) => {
+          const { document, hidden } = unfold(row.document);
+          return { id: row.id, document, level: row.level, hidden, position: row.position ?? null };
+        })
+      );
+    },
     async autonumberBackfill({ field_id }) {
       return callDoor(
         DOORS.autonumberBackfill,
@@ -7880,6 +8248,113 @@ function asWriteConflict(error, recordId) {
   };
 }
 
+// src/core/declareTable.ts
+function tokenFor(name) {
+  return name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "").slice(0, 48) || "table";
+}
+var DEFAULT_FIELDS = [
+  { key: "title", label: "Title", type: "text", sort: 10, required: false }
+];
+function fieldDeclarationFor(field) {
+  return {
+    key: field.key,
+    label: field.label,
+    sort: field.sort ?? 100,
+    required: field.required ?? false,
+    multi: field.multi ?? false,
+    ...declaredType(field),
+    ...field.config ? { config: field.config } : {},
+    ...field.options ? { options: field.options } : {},
+    ...field.relationTarget ? { relation_target: field.relationTarget } : {},
+    ...field.unit ? { unit: field.unit } : {},
+    ...field.kind ? { kind: field.kind } : {}
+  };
+}
+async function declareTable(client, spec) {
+  const fields = spec.fields && spec.fields.length > 0 ? spec.fields : DEFAULT_FIELDS;
+  const slug = spec.slug ?? tokenFor(spec.name);
+  const titleField = spec.titleField ?? fields[0].key;
+  const personKernel = await client.personKernelId();
+  if (!personKernel.ok) return personKernel;
+  const home = await client.recordWrite({
+    table_id: personKernel.data,
+    data: { name: `${spec.name} Home` }
+  });
+  if (!home.ok) return home;
+  const table = await client.tableDeclare({
+    homeId: home.data,
+    spec: {
+      name: spec.name,
+      slug,
+      type: "entity",
+      label_singular: spec.labelSingular ?? spec.name,
+      label_plural: spec.labelPlural ?? spec.name,
+      display: "list",
+      weight: "light",
+      ordered: false,
+      row_order: "manual",
+      title_field: titleField,
+      retention_days: 365,
+      // AGT-1: a table a person made is agent-writable by declaration; the
+      // organization turns it off, never this package.
+      agent_writable: true,
+      default_sort: [{ field: titleField, direction: "asc" }],
+      fields: fields.map((f) => ({ name: f.key }))
+    }
+  });
+  if (!table.ok) {
+    await client.recordDelete({ record_id: home.data });
+    return table;
+  }
+  const written = await addFields(client, table.data, fields);
+  if (!written.ok) return undo(client, table.data, home.data, spec.name, written.error);
+  return { ok: true, data: table.data, homeId: home.data };
+}
+async function undo(client, tableId, homeId, name, refusal) {
+  const removed = await client.recordDelete({ record_id: tableId });
+  if (removed.ok) {
+    await client.recordDelete({ record_id: homeId });
+    return { ok: false, error: refusal };
+  }
+  return {
+    ok: false,
+    error: {
+      ...refusal,
+      hint: `${refusal.hint ? `${refusal.hint} ` : ""}"${name}" was created before this happened and could not be removed again, so it is in your tables with no columns \u2014 open it and add the first column, or delete it from its own Settings.`
+    }
+  };
+}
+async function addFields(client, tableId, fields) {
+  for (const field of fields) {
+    const result = await client.fieldDeclare({
+      table_id: tableId,
+      spec: fieldDeclarationFor(field)
+    });
+    if (!result.ok) return result;
+  }
+  return { ok: true, data: tableId };
+}
+var PLAIN_WORDS = {
+  text: "text",
+  string: "text",
+  long_text: "long_text",
+  longtext: "long_text",
+  paragraph: "long_text",
+  number: "number",
+  range: "number",
+  integer: "number",
+  decimal: "number",
+  float: "number"
+};
+function declaredType(field) {
+  const word = (field.type ?? "text").toLowerCase();
+  const plain = PLAIN_WORDS[word];
+  if (plain) {
+    return { plain: plain === "text" && field.config?.["multiline"] === true ? "long_text" : plain };
+  }
+  return { parity_type: word };
+}
+
 // src/core/supabase.ts
 function refuse(code, message, hint) {
   return { data: null, error: { code, message, hint, details: "" } };