@ai-matrx/records 0.57.3 → 0.58.0

package/dist/react/index.js

@@ -2219,6 +2219,31 @@ function sameDocument(a, b) {
   return JSON.stringify(a) === JSON.stringify(b);
 }
 
+// src/aggregate.ts
+function isRuleFilter(filter) {
+  if (!filter || typeof filter !== "object" || Array.isArray(filter)) return false;
+  const node = filter;
+  return typeof node.op === "string" && Array.isArray(node.args);
+}
+function measureKey(measure) {
+  return measure.op === "count" ? "count" : `${measure.op}_${measure.key ?? ""}`;
+}
+function stableFilterKey(filter) {
+  if (!filter) return "{}";
+  if (isRuleFilter(filter)) return JSON.stringify(filter);
+  const keys = Object.keys(filter).sort();
+  if (keys.length === 0) return "{}";
+  const parts = keys.map((key) => {
+    const value = filter[key];
+    if (value !== null && typeof value === "object") {
+      const window2 = value;
+      return `${JSON.stringify(key)}:{"from":${JSON.stringify(window2.from ?? null)},"to":${JSON.stringify(window2.to ?? null)}}`;
+    }
+    return `${JSON.stringify(key)}:${JSON.stringify(value ?? null)}`;
+  });
+  return `{${parts.join(",")}}`;
+}
+
 // src/ops.ts
 var REMEMBER_MS = 3e4;
 var REMEMBER_MAX = 500;
@@ -2374,6 +2399,51 @@ function recordChangeTrigger(tableId, options = {}) {
     ...options.changedFields && options.changedFields.length > 0 ? { changed_fields: options.changedFields } : {}
   };
 }
+function sheetSyncSpec(args) {
+  const [header = [], ...body] = args.cells;
+  const columns = header.map((c, i) => {
+    const name = c == null ? "" : String(c).trim();
+    return name === "" ? `Column ${i + 1}` : name;
+  });
+  if (columns.length === 0) {
+    throw new Error("The sheet has no header row, so there are no columns to sync. Nothing was sent.");
+  }
+  const seenCol = /* @__PURE__ */ new Set();
+  for (const c of columns) {
+    if (seenCol.has(c)) throw new Error(`The sheet has two columns named "${c}". Rename one and sync again.`);
+    seenCol.add(c);
+  }
+  const refIdx = args.refColumn == null ? -1 : columns.indexOf(args.refColumn);
+  if (args.refColumn != null && refIdx < 0) {
+    throw new Error(`The id column "${args.refColumn}" is not in the sheet's header. Nothing was sent.`);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const rows = [];
+  body.forEach((cells, i) => {
+    if (cells.every((v) => v == null || String(v).trim() === "")) return;
+    const ref = refIdx >= 0 ? String(cells[refIdx] ?? "").trim() : `row-${i + 2}`;
+    if (ref === "") throw new Error(`Sheet row ${i + 2} has no value in the id column "${args.refColumn}".`);
+    if (seen.has(ref)) throw new Error(`Two sheet rows share the id "${ref}"; each row needs its own.`);
+    seen.add(ref);
+    const values = {};
+    columns.forEach((c, j) => {
+      const v = cells[j];
+      values[c] = v === void 0 || v === "" ? null : v;
+    });
+    rows.push({ ref, values });
+  });
+  return { source: args.source, table_name: args.tableName, columns, rows };
+}
+function withRowCounts(tables, counts) {
+  if (!counts) return [...tables];
+  const byId = new Map(counts.map((c) => [c.table_id, Number(c.visible_rows)]));
+  return tables.map((t) => byId.has(t.id) ? { ...t, row_count: byId.get(t.id) } : t);
+}
+function moveInOrder(order, moved, toIndex) {
+  const rest = order.filter((id) => id !== moved);
+  const at = Math.max(0, Math.min(Math.trunc(toIndex), rest.length));
+  return [...rest.slice(0, at), moved, ...rest.slice(at)];
+}
 
 // src/store.generated.ts
 var ACTOR_VOCABULARY = ["user", "agent", "system"];
@@ -3049,6 +3119,7 @@ var STORE_DOORS = [
   { name: "table_work_kind", args: "p_organization_id uuid, p_table_id uuid", returns: "text", security: "invoker" },
   { name: "tables_at_home", args: "p_organization_id uuid, p_home_ids uuid[]", returns: "TABLE(table_id uuid, home_record_id uuid, kind text)", security: "definer" },
   { name: "tables_described_without_asking", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
+  { name: "tables_i_can_open", args: "", returns: "TABLE(table_id uuid, table_name text, organization_id uuid, organization_name text, member boolean, visibility text, updated_at timestamp with time zone)", security: "definer" },
   { name: "tables_shared_with_me", args: "", returns: "TABLE(table_id uuid, organization_id uuid, organization text, table_name text, level text, level_label text, shared_at timestamp with time zone, opens boolean, say text)", security: "definer" },
   { name: "trg_associations_bump_visibility", args: "", returns: "trigger", security: "definer" },
   { name: "undeclared_keys", args: "p_organization_id uuid, p_table_id uuid, p_data jsonb", returns: "text[]", security: "invoker" },
@@ -3073,6 +3144,7 @@ var STORE_DOORS = [
   { name: "visible_predicate_sql", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, p_alias text DEFAULT 'r'::text", returns: "text", security: "definer" },
   { name: "visible_record_ids", args: "p_user_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "TABLE(id uuid)", security: "definer" },
   { name: "visible_set", args: "p_user uuid, p_organization_id uuid, p_table_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level, OUT o_all_visible boolean, OUT o_true_visibility platform.visibility[], OUT o_granted_all uuid[], OUT o_granted_visible uuid[], OUT o_carried_visible uuid[], OUT o_ladder_calls integer, OUT o_fallback boolean, OUT o_note text", returns: "record", security: "definer" },
+  { name: "where_id_opens", args: "p_id uuid", returns: "jsonb", security: "definer" },
   { name: "widget_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "withheld_marker", args: "p_mask jsonb, p_key text", returns: "jsonb", security: "invoker" },
   { name: "withheld_sentence", args: "p_mask jsonb, p_key text", returns: "text", security: "invoker" },
@@ -3179,7 +3251,7 @@ var STORE_REFUSAL_CODES = [
   { code: "23505", raised_by: "_share_write_person,_unique_rule_holds,doc_sign,doc_signature_write,entity_field_declare,field_declare,home_add,inbound_declare,io_proposal_accept,relation_carry,relation_own,sign_request_cancel,sign_request_create,table_share_outside_resend,work_approval_decide,work_slot_hold" },
   { code: "23514", raised_by: "_checklist_instantiate,_checklist_step_guard,_containment_guard,_dated_values_guard,_derived_fields,_display_format_check,_display_spec_for,_entity_custom_fields_guard,_field_class_guard,_field_document_for,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_relation_halves_agree,_relation_kernel_targets,_resolve_choice_words,_rule_shape_guard,_rule_topology_guard,_store_relation_edge_names_its_field,_table_columns_word_guard,_table_shape_guard,_undeclared_key_guard,_value_envelope,_with_display,_work_shape_guard,_workdoors_approval_guard,action_run,assert_columns_are_defined,assert_entity_is_organization_scoped,booking_declare,capture_publish,capture_sheet_declare,checklist_declare,checklist_step_complete,doc_sign,doc_signature_write,doc_template_save,entity_field_declare,entity_field_retire,entity_field_update,entity_records_find,entity_table,field_declare,field_retire,field_update,home_add,io_comment_write,io_import_rows,migrate_merge,migrate_purge_hard,portal_archive,portal_restore,record_write_graph,relation_carry,relation_halves_repair,relation_own,sign_request_create,sign_request_sign,table_declare,table_from_example,validate_value_envelope,validate_values,work_set_state,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
-  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,agent_table_claim,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,doc_sign,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_purge_hard,migrate_purge_hard_request,migrate_reclass,my_levels,organization_clear,portal_declare,portal_invitation,portal_invite,portal_invite_accept,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,read_records_archived,read_records_by_ids,read_records_matching,record_table,record_write_graph,relation_halves_disagreements,relation_halves_repair,share_grant,subscription_mute,subscription_preview,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_webhook_declare,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
+  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,agent_table_claim,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_open,assert_client_may_reach,assert_may_know_table,assert_organization_admin,assert_store_door,booking_confirm,booking_declare,booking_hold,capture_submit,checklist_run,comment_write,conversation_scope_bind,conversation_scope_unbind,doc_sign,enrich_declare,enrich_due,enrich_land,enrich_normalize,entity_field_declare,entity_field_retire,entity_field_update,entity_value_write,external_write_through,form_declare,form_submit,inbound_mail_land,io_comment_resolve,io_comment_write,io_import_begin,io_import_finish,io_restore,migrate_purge,migrate_purge_hard,migrate_purge_hard_request,migrate_reclass,my_levels,organization_clear,organization_contents,portal_declare,portal_invitation,portal_invite,portal_invite_accept,portal_principal_bind,promote_table,query_visibility_parity,read_record,read_records,read_records_archived,read_records_by_ids,read_records_matching,record_table,record_write_graph,relation_halves_disagreements,relation_halves_repair,share_grant,subscription_mute,subscription_preview,table_share_outside_accept,table_share_outside_invite,table_share_outside_resend,table_webhook_declare,visibility_as_of,work_approval_decide,work_approval_read,work_approval_request,work_person" },
   { code: "42703", raised_by: "entity_table,portal_declare" },
   { code: "53400", raised_by: "anon_rate_take,delete_cascade_closure,enrich_due,enrich_land,promote_field" },
   { code: "54000", raised_by: "action_run,hub_changed_by,table_decorate,table_from_example,table_webhook_declare" },
@@ -4240,6 +4312,20 @@ var OWED_BY = {
   table_webhook_archive: "GRID-PRIMITIVES G4 \u2014 gridprim_every_row_change_reaches_the_webhook.sql (chair's production apply)",
   table_from_example: "GRID-PRIMITIVES G5 \u2014 gridprim_a_table_can_start_from_a_real_example.sql (chair's production apply)",
   autonumber_backfill: "GRID-PRIMITIVES G5 \u2014 gridprim_a_table_can_start_from_a_real_example.sql (chair's production apply)",
+  table_list_everywhere: "GRID-PRIMITIVES G9 \u2014 gridprim_every_picker_lists_both_stores.sql (chair's production apply)",
+  table_sync: "GRID-PRIMITIVES G10 \u2014 gridprim_a_synced_sheet_is_one_table_that_refreshes.sql (chair's production apply)",
+  scope_table_provision: "GRID-PRIMITIVES G11 \u2014 gridprim_a_scope_provisions_its_table_in_the_store.sql (chair's production apply)",
+  table_row_counts: "GRID-PRIMITIVES G12 \u2014 gridprim_every_table_counts_its_rows_and_every_row_shows_its_header.sql + its grant file (chair's production apply)",
+  view_record_order_set: "GRID-PRIMITIVES G13 \u2014 gridprim_a_view_keeps_the_order_a_person_dragged.sql + its grant file (chair's production apply)",
+  table_share_outside_grant: "GRID-PRIMITIVES G14 \u2014 gridprim_a_known_outsider_is_granted_at_once.sql + gridprim_a_signed_in_person_may_share_with_a_known_outsider.sql (chair's production apply)",
+  read_records_in_view_order: "GRID-PRIMITIVES G13 \u2014 gridprim_a_view_keeps_the_order_a_person_dragged.sql + its grant file (chair's production apply)",
+  rule_members_visible: "S2-PRIME FILTER-GROUPS \u2014 filtergroups_a_views_nested_question_is_one_where_clause.sql + its grant file (chair's production apply)",
+  record_headers: "GRID-PRIMITIVES G12 \u2014 gridprim_every_table_counts_its_rows_and_every_row_shows_its_header.sql + its grant file (chair's production apply)",
+  pipeline_move_many: "UI-CHAMPIONS S4 \u2014 uichamp_s4_a_selection_moves_and_decides_in_one_call.sql + its grant file (chair's production apply)",
+  work_decide_many: "UI-CHAMPIONS S4 \u2014 uichamp_s4_a_selection_moves_and_decides_in_one_call.sql + its grant file (chair's production apply)",
+  portal_form: "UI-CHAMPIONS S6 \u2014 uichamp_s6_a_portal_carries_its_look_and_its_forms.sql + uichamp_s6_a_signed_in_person_may_open_a_portals_look_and_forms.sql (chair's production apply)",
+  portal_form_submit: "UI-CHAMPIONS S6 \u2014 uichamp_s6_a_portal_carries_its_look_and_its_forms.sql + uichamp_s6_a_signed_in_person_may_open_a_portals_look_and_forms.sql (chair's production apply)",
+  form_preview_asks: "FORMS-FIX-1 \u2014 formsfix1_the_owners_preview_asks_the_store_the_same_question.sql + its grant file (chair's production apply)",
   rule_declare: "W1-RULE \u2014 `custom.record_write` writes `data_class = 'record'`, so the ONE write door cannot make a Rule record; declaring a Rule (and therefore a DOOR-18 subscription) needs a door of its own"
 };
 var TRUST_SCHEMA = "iam";
@@ -4443,6 +4529,8 @@ var DOORS = {
   pipelineBoard: "pipeline_board",
   pipelineTransitionRefusal: "pipeline_transition_refusal",
   pipelineMove: "pipeline_move",
+  /** Lane S4: many cards, one call, a verdict and a version per card. */
+  pipelineMoveMany: "pipeline_move_many",
   tableStageField: "table_stage_field",
   // STAGE-RULES. A gate can refuse or it can hand the change to the approvals queue; the
   // closed list is the store's, the knob is the organization's, and what is WAITING on a
@@ -4453,6 +4541,7 @@ var DOORS = {
   pipelinePending: "pipeline_pending",
   pipelineGatePreview: "pipeline_gate_preview",
   ruleMembers: "rule_members",
+  ruleMembersVisible: "rule_members_visible",
   ruleMembership: "rule_membership",
   ruleRun: "rule_run",
   ruleEval: "rule_eval",
@@ -4467,6 +4556,12 @@ var DOORS = {
   // are server-lane doors and a browser never calls them.
   forms: "forms",
   formDeclare: "form_declare",
+  /**
+   * WHICH QUESTIONS THE OWNER'S PREVIEW ASKS NEXT (lane FORMS-FIX-1). The same store answer a
+   * stranger's form gets (`custom._form_questions_asked` → `custom.rule_eval`), behind the
+   * organization wall and the caller's own rung on the Table — never `rule_eval` from a browser.
+   */
+  formPreviewAsks: "form_preview_asks",
   // PRODUCTS row 14 — "let clients book a 30-minute consult". A booking page IS an
   // `anon_form`, so it is opened and closed by `anonPublish` like any other; this is
   // the owner's list of them with the numbers that make it worth opening. The
@@ -4526,6 +4621,11 @@ var DOORS = {
   portalInvite: "portal_invite",
   portalRevoke: "portal_revoke",
   portalPreview: "portal_preview",
+  // S6 — the CLIENT's two form doors. They are store doors (schema `custom`), called by a
+  // signed-in portal principal, and each refuses anybody who is not a live principal of that
+  // live portal — so, unlike the sign-in pair above, they belong in this table.
+  portalForm: "portal_form",
+  portalFormSubmit: "portal_form_submit",
   // ORG-CLEANUP, 2026-09-22 — A PORTAL IS ARCHIVED, NEVER DELETED.
   // `portals` keeps its signature and HIDES archived portals (the law's default
   // is to hide); `list_portals(org, 'active'|'archived'|'all')` is the
@@ -4721,6 +4821,8 @@ var DOORS = {
   workApprovalRequest: "work_approval_request",
   workApprovalMayDecide: "work_approval_may_decide",
   workApprovalDecide: "work_approval_decide",
+  /** Lane S4: many inbox decisions, one call, a verdict per item. */
+  workDecideMany: "work_decide_many",
   workApprovalRead: "work_approval_read",
   // PRODUCTS row 13 — checklists and SOP runs.
   checklistRefusal: "checklist_refusal",
@@ -4746,6 +4848,14 @@ var DOORS = {
   tableFromExample: "table_from_example",
   autonumberBackfill: "autonumber_backfill",
   ioExport: "io_export",
+  tableListEverywhere: "table_list_everywhere",
+  tableSync: "table_sync",
+  scopeTableProvision: "scope_table_provision",
+  tableRowCounts: "table_row_counts",
+  recordHeaders: "record_headers",
+  viewRecordOrderSet: "view_record_order_set",
+  readRecordsInViewOrder: "read_records_in_view_order",
+  tableShareOutsideGrant: "table_share_outside_grant",
   // Declared here BECAUSE they do not exist yet: naming them is what makes the
   // absence visible to `pnpm check:store-registry` and to the suite.
   metadataSearch: "metadata_search",
@@ -5525,10 +5635,11 @@ function createRecordsClient(config) {
         "pipelineRead"
       );
     },
-    async pipelineBoard({ table_id, measure }) {
+    async pipelineBoard({ table_id, measure, filter }) {
+      const asked = filter && stableFilterKey(filter) !== "{}";
       return callDoor(
         DOORS.pipelineBoard,
-        { p_organization_id: org, p_table_id: table_id, p_measure: measure ?? null },
+        asked ? { p_organization_id: org, p_table_id: table_id, p_measure: measure ?? null, p_filter: filter } : { p_organization_id: org, p_table_id: table_id, p_measure: measure ?? null },
         "pipelineBoard"
       );
     },
@@ -5552,6 +5663,13 @@ function createRecordsClient(config) {
         "pipelineMove"
       );
     },
+    async pipelineMoveMany({ moves }) {
+      return callDoor(
+        DOORS.pipelineMoveMany,
+        { p_organization_id: org, p_moves: moves },
+        "pipelineMoveMany"
+      );
+    },
     async pipelineDeclare({ table_id, spec }) {
       return callDoor(
         DOORS.pipelineDeclare,
@@ -5601,6 +5719,18 @@ function createRecordsClient(config) {
         "pipelineGatePreview"
       );
     },
+    async ruleMembersVisible({ rule_id, limit = 200, offset = 0 }) {
+      const door = await callDoor(
+        DOORS.ruleMembersVisible,
+        { p_organization_id: org, p_rule_id: rule_id, p_limit: limit, p_offset: offset },
+        "ruleMembersVisible"
+      );
+      if (!door.ok) return err(door.error);
+      return ok((door.data ?? []).map((row) => {
+        const { document, hidden } = unfold(row.document);
+        return { id: row.id, document, level: row.level, hidden };
+      }));
+    },
     async ruleMembers({ rule_id }) {
       return callDoor(
         DOORS.ruleMembers,
@@ -5653,6 +5783,13 @@ function createRecordsClient(config) {
         "bookingDeclare"
       );
     },
+    async formPreviewAsks({ table_id, questions, values }) {
+      return callDoor(
+        DOORS.formPreviewAsks,
+        { p_organization_id: org, p_table_id: table_id, p_questions: questions, p_values: values },
+        "formPreviewAsks"
+      );
+    },
     async formDeclare(args) {
       return callDoor(
         DOORS.formDeclare,
@@ -5828,11 +5965,33 @@ function createRecordsClient(config) {
           p_tables: args.tables,
           p_portal_id: args.portal_id ?? null,
           p_slug: args.slug ?? null,
-          p_sign_in_method: args.sign_in_method ?? "magic_link"
+          p_sign_in_method: args.sign_in_method ?? "magic_link",
+          // S6: sent only when given, so a caller that says nothing about the look keeps it.
+          ...args.config !== void 0 ? { p_config: args.config } : {}
         },
         "portalDeclare"
       );
     },
+    async portalForm({ portal_id, form_id }) {
+      return callDoor(
+        DOORS.portalForm,
+        { p_organization_id: org, p_portal_id: portal_id, p_form_id: form_id },
+        "portalForm"
+      );
+    },
+    async portalFormSubmit({ portal_id, form_id, answers, client_key }) {
+      return callDoor(
+        DOORS.portalFormSubmit,
+        {
+          p_organization_id: org,
+          p_portal_id: portal_id,
+          p_form_id: form_id,
+          p_payload: answers,
+          p_client_key: client_key ?? null
+        },
+        "portalFormSubmit"
+      );
+    },
     async portalInvite(args) {
       return callDoor(
         DOORS.portalInvite,
@@ -6031,10 +6190,17 @@ function createRecordsClient(config) {
         "dashboardDeclare"
       );
     },
-    async dashboardRun({ dashboard_id, filter }) {
+    async dashboardRun({ dashboard_id, filter, compare, grain }) {
       return callDoor(
         DOORS.dashboardRun,
-        { p_organization_id: org, p_dashboard_id: dashboard_id, p_filter: filter ?? {} },
+        {
+          p_organization_id: org,
+          p_dashboard_id: dashboard_id,
+          p_filter: filter ?? {},
+          // Sent only when asked, so a caller that never compares calls exactly what it did.
+          ...compare ? { p_compare: compare } : {},
+          ...grain ? { p_grain: grain } : {}
+        },
         "dashboardRun"
       );
     },
@@ -6059,7 +6225,7 @@ function createRecordsClient(config) {
         "dashboardDelete"
       );
     },
-    async recordAggregate({ table_id, groupBy, measures, bucket, filter, limit }) {
+    async recordAggregate({ table_id, groupBy, measures, bucket, filter, limit, compare }) {
       return callDoor(
         DOORS.recordAggregate,
         {
@@ -6069,7 +6235,8 @@ function createRecordsClient(config) {
           p_measures: measures ?? [],
           p_bucket: bucket ?? null,
           p_filter: filter ?? {},
-          p_limit: limit ?? 200
+          p_limit: limit ?? 200,
+          ...compare ? { p_compare: compare } : {}
         },
         "recordAggregate"
       );
@@ -6797,6 +6964,13 @@ function createRecordsClient(config) {
         "workApprovalDecide"
       );
     },
+    async workDecideMany({ decisions }) {
+      return callDoor(
+        DOORS.workDecideMany,
+        { p_organization_id: org, p_decisions: decisions },
+        "workDecideMany"
+      );
+    },
     async workApprovalRead({ approval_id }) {
       return callDoor(
         DOORS.workApprovalRead,
@@ -7000,6 +7174,69 @@ function createRecordsClient(config) {
         "tableFromExample"
       );
     },
+    async tableListEverywhere() {
+      return callDoor(
+        DOORS.tableListEverywhere,
+        { p_organization_id: org },
+        "tableListEverywhere"
+      );
+    },
+    async tableSync({ home_id, spec }) {
+      return callDoor(
+        DOORS.tableSync,
+        { p_organization_id: org, p_home_id: home_id, p_spec: spec },
+        "tableSync"
+      );
+    },
+    async scopeTableProvision({ home_id, item_id, scope_id }) {
+      return callDoor(
+        DOORS.scopeTableProvision,
+        { p_organization_id: org, p_item_id: item_id, p_scope_id: scope_id, p_home_id: home_id ?? null },
+        "scopeTableProvision"
+      );
+    },
+    async tableRowCounts({ table_ids }) {
+      return callDoor(
+        DOORS.tableRowCounts,
+        { p_organization_id: org, p_table_ids: table_ids },
+        "tableRowCounts"
+      );
+    },
+    async recordHeaders({ ids }) {
+      return callDoor(
+        DOORS.recordHeaders,
+        { p_organization_id: org, p_ids: ids },
+        "recordHeaders"
+      );
+    },
+    async tableShareOutsideGrant({ table_id, person, level }) {
+      return callDoor(
+        DOORS.tableShareOutsideGrant,
+        { p_organization_id: org, p_table_id: table_id, p_person: person, p_level: level ?? "viewer" },
+        "tableShareOutsideGrant"
+      );
+    },
+    async viewRecordOrderSet({ view_id, record_ids }) {
+      return callDoor(
+        DOORS.viewRecordOrderSet,
+        { p_organization_id: org, p_view_id: view_id, p_record_ids: record_ids },
+        "viewRecordOrderSet"
+      );
+    },
+    async readInViewOrder({ view_id, limit, offset }) {
+      const door = await callDoor(
+        DOORS.readRecordsInViewOrder,
+        { p_organization_id: org, p_view_id: view_id, p_by_id: false, p_limit: limit ?? 200, p_offset: offset ?? 0 },
+        "readInViewOrder"
+      );
+      if (!door.ok) return err(door.error);
+      return ok(
+        (door.data ?? []).map((row) => {
+          const { document, hidden } = unfold(row.document);
+          return { id: row.id, document, level: row.level, hidden, position: row.position ?? null };
+        })
+      );
+    },
     async autonumberBackfill({ field_id }) {
       return callDoor(
         DOORS.autonumberBackfill,
@@ -7094,27 +7331,6 @@ function useRecordsActor() {
 
 // src/react/hooks.ts
 import { useCallback, useEffect, useMemo as useMemo2, useRef, useState, useSyncExternalStore } from "react";
-
-// src/aggregate.ts
-function measureKey(measure) {
-  return measure.op === "count" ? "count" : `${measure.op}_${measure.key ?? ""}`;
-}
-function stableFilterKey(filter) {
-  if (!filter) return "{}";
-  const keys = Object.keys(filter).sort();
-  if (keys.length === 0) return "{}";
-  const parts = keys.map((key) => {
-    const value = filter[key];
-    if (value !== null && typeof value === "object") {
-      const window2 = value;
-      return `${JSON.stringify(key)}:{"from":${JSON.stringify(window2.from ?? null)},"to":${JSON.stringify(window2.to ?? null)}}`;
-    }
-    return `${JSON.stringify(key)}:${JSON.stringify(value ?? null)}`;
-  });
-  return `{${parts.join(",")}}`;
-}
-
-// src/react/hooks.ts
 function useAsync(run, deps) {
   const client = useRecordsClient();
   const [state, setState] = useState(
@@ -7594,6 +7810,88 @@ function useMergeField(key, state) {
   return resolution;
 }
 
+// src/react/entity-reference.ts
+import { useEffect as useEffect2, useState as useState2 } from "react";
+
+// src/relation.ts
+var ENTITY_REF_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isRefLike(value) {
+  return typeof value === "object" && value !== null && "token" in value && "id" in value;
+}
+function entityRefsOf(value) {
+  const items = Array.isArray(value) ? value : value == null ? [] : [value];
+  const out = [];
+  for (const item of items) {
+    if (!isRefLike(item)) continue;
+    const token = String(item.token ?? "").trim().toLowerCase();
+    const id = String(item.id ?? "").trim();
+    if (!token || !ENTITY_REF_ID.test(id)) continue;
+    const label = item.label;
+    out.push({ token, id: id.toLowerCase(), label: typeof label === "string" ? label : null });
+  }
+  return out;
+}
+function entityRefsToWrite(value, multi) {
+  const seen = /* @__PURE__ */ new Set();
+  const refs = [];
+  for (const ref of entityRefsOf(value)) {
+    const k = `${ref.token}:${ref.id}`;
+    if (seen.has(k)) continue;
+    seen.add(k);
+    refs.push({ token: ref.token, id: ref.id });
+  }
+  if (multi) return refs;
+  return refs[0] ?? null;
+}
+async function entityReferenceKinds(source) {
+  const { data, error } = await source.rpc("entity_reference_kinds", {}, { schema: "custom" });
+  if (error) return err(mapPgError(error, "entityReferenceKinds"));
+  return ok(Array.isArray(data) ? data : []);
+}
+async function entityReferenceWords(source, organizationId, refs) {
+  if (refs.length === 0) return ok([]);
+  const { data, error } = await source.rpc(
+    "entity_reference_words",
+    { p_organization_id: organizationId, p_refs: refs.map((r) => ({ token: r.token, id: r.id })) },
+    { schema: "custom" }
+  );
+  if (error) return err(mapPgError(error, "entityReferenceWords"));
+  return ok(entityRefsOf(data));
+}
+
+// src/react/entity-reference.ts
+function useEntityReferenceKinds() {
+  const client = useRecordsClient();
+  const [state, setState] = useState2({ data: null, loading: true, error: null });
+  useEffect2(() => {
+    let live = true;
+    void entityReferenceKinds(client.config.dataSource).then((res) => {
+      if (!live) return;
+      setState(res.ok ? { data: res.data, loading: false, error: null } : { data: null, loading: false, error: res.error });
+    });
+    return () => {
+      live = false;
+    };
+  }, [client]);
+  return state;
+}
+function useEntityReferenceWords(refs) {
+  const client = useRecordsClient();
+  const key = refs.map((r) => `${r.token}:${r.id}`).join(",");
+  const [state, setState] = useState2({ data: null, loading: refs.length > 0, error: null });
+  useEffect2(() => {
+    let live = true;
+    void entityReferenceWords(client.config.dataSource, client.config.organizationId, refs).then((res) => {
+      if (!live) return;
+      setState(res.ok ? { data: res.data, loading: false, error: null } : { data: null, loading: false, error: res.error });
+    });
+    return () => {
+      live = false;
+    };
+  }, [client, key]);
+  return state;
+}
+
 // src/vocabulary.ts
 var TABLE_TYPES = [
   "entity",
@@ -7705,6 +8003,7 @@ var FIELD_KINDS = [
   "currency",
   "datetime",
   "email",
+  "entity_reference",
   "formula",
   "json",
   "long_text",
@@ -7743,6 +8042,7 @@ function fieldKindFor(field, kernel) {
     case "list":
       return field.multi ? "multi_select" : "select";
     case "relation": {
+      if (isEntityReferenceConfig(config)) return "entity_reference";
       const parity = String(config["parity"] ?? "");
       if (parity === "attachment" || parity === "member") return parity;
       if (kernel?.file && field.relation_target === kernel.file) return "attachment";
@@ -7760,6 +8060,14 @@ function fieldKindFor(field, kernel) {
   }
 }
 var UUID_TEXT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isEntityReferenceConfig(config) {
+  const allowed = config?.["allowed_types"];
+  return Array.isArray(allowed) && allowed.length > 0;
+}
+function entityReferenceKindsOf(field) {
+  const allowed = field.config?.["allowed_types"];
+  return Array.isArray(allowed) ? allowed.map((k) => String(k).trim().toLowerCase()).filter(Boolean) : [];
+}
 var TRUE_WORDS = /* @__PURE__ */ new Set(["true", "yes", "y", "1", "\u2713", "x", "checked", "on"]);
 var FALSE_WORDS = /* @__PURE__ */ new Set(["false", "no", "n", "0", "", "unchecked", "off"]);
 function coercionLabel(field) {
@@ -7875,6 +8183,23 @@ function coerceTypedAnswer(field, raw, opts = {}) {
       return {
         refusal: `${label} points at another record, so it is chosen rather than typed. Open it and pick the record.`
       };
+    // SC-R / P12. An entity reference names a platform thing by kind and id.
+    // An import or an agent may hand over `note:<id>` — or a bare id when the
+    // column allows exactly one kind; the store then decides whether the thing
+    // is there and whether the writer may open it. Words are chosen, not typed.
+    case "entity_reference": {
+      const allowed = entityReferenceKindsOf(field);
+      const [maybeToken, maybeId] = text.includes(":") ? text.split(/:(.*)/s, 2) : ["", text];
+      const token = (maybeToken ?? "").trim().toLowerCase() || (allowed.length === 1 ? allowed[0] : "");
+      const id = (maybeId ?? "").trim();
+      if (token && UUID_TEXT.test(id)) {
+        const ref = { token, id: id.toLowerCase() };
+        return { value: field.multi ? [ref] : ref };
+      }
+      return {
+        refusal: `${label} points at something on the platform, so it is chosen rather than typed. Open it and pick it.`
+      };
+    }
     case "formula":
     case "lookup":
     case "rollup":
@@ -7931,6 +8256,10 @@ function publicFormPath(formId) {
 }
 
 // src/portal.ts
+var PORTAL_ACCENTS = ["slate", "green", "amber", "red", "blue", "violet", "teal"];
+function isPortalAccent(word) {
+  return typeof word === "string" && PORTAL_ACCENTS.includes(word);
+}
 function portalPath(slug) {
   return `/portal/c/${slug}`;
 }
@@ -7953,6 +8282,56 @@ function emptyPortalArchiveLine() {
   return "No portal of this organization has been archived. A portal you put away waits here until somebody restores it, and nothing is ever destroyed.";
 }
 
+// src/placement.ts
+function keptOutOfSight(placement) {
+  return placement?.kept_by_the_app === true;
+}
+function offeredAsContext(placement) {
+  return placement?.offered_as_context === true;
+}
+function withTablePlacement(tables, facts) {
+  if (!facts) return [...tables];
+  const byId = new Map(facts.map((f) => [f.table_id, f]));
+  return tables.map((table) => {
+    const fact = byId.get(table.id);
+    if (!fact || fact.kept_by_the_app === void 0) return table;
+    return {
+      ...table,
+      kept_by_the_app: fact.kept_by_the_app,
+      kept_for: fact.kept_for ?? null,
+      offered_as_context: fact.offered_as_context ?? false,
+      keeper_group: fact.keeper_group ?? null,
+      keeper_says: fact.keeper_says ?? null,
+      used_in_kind: fact.used_in_kind ?? null,
+      used_in_id: fact.used_in_id ?? null,
+      used_in_table_id: fact.used_in_table_id ?? null
+    };
+  });
+}
+function keptGroups(tables) {
+  const out = [];
+  const at = /* @__PURE__ */ new Map();
+  for (const table of tables) {
+    if (!keptOutOfSight(table)) continue;
+    const group = table.keeper_group?.trim() || "Kept by the app";
+    let i = at.get(group);
+    if (i === void 0) {
+      i = out.length;
+      at.set(group, i);
+      out.push({ group, tables: [] });
+    }
+    out[i].tables.push(table);
+  }
+  return out;
+}
+function keptTableHref(fact, hrefs) {
+  if (fact.used_in_kind === "scope" && fact.used_in_id) return hrefs.scope(fact.used_in_id);
+  if (fact.used_in_kind === "table" && (fact.used_in_table_id || fact.used_in_id)) {
+    return hrefs.table(fact.used_in_table_id || fact.used_in_id);
+  }
+  return hrefs.table(fact.table_id);
+}
+
 // src/capture-queue.ts
 var DB_NAME = "matrx-capture";
 var DB_VERSION = 1;
@@ -8263,6 +8642,7 @@ export {
   PERMISSION_LEVELS,
   PER_VALUE_ACCESS_WORDS,
   PIPELINE_RULE_KINDS,
+  PORTAL_ACCENTS,
   PORTAL_ARCHIVE_FILTERS,
   REFUSALS_WORTH_REPEATING,
   RELATION_BINDINGS,
@@ -8298,6 +8678,11 @@ export {
   coercionLabel,
   emptyArchiveLine,
   emptyPortalArchiveLine,
+  entityReferenceKinds,
+  entityReferenceKindsOf,
+  entityReferenceWords,
+  entityRefsOf,
+  entityRefsToWrite,
   err,
   exampleSpec,
   exportPageXlsx,
@@ -8308,16 +8693,24 @@ export {
   indexedDbStore,
   isArchiveLane,
   isDecided,
+  isEntityReferenceConfig,
   isOwnOp,
+  isPortalAccent,
   isPortalArchiveFilter,
   isRecordsErr,
+  isRuleFilter,
   isTheChosen,
+  keptGroups,
+  keptOutOfSight,
+  keptTableHref,
   looksLikeAnId,
   mayDrag,
   measureKey,
   memoryStore,
   mintClientKey,
   mintOpId,
+  moveInOrder,
+  offeredAsContext,
   ok,
   openCaptureQueue,
   optionKey,
@@ -8331,12 +8724,15 @@ export {
   rememberedOpCount,
   sameDocument,
   scopeChip,
+  sheetSyncSpec,
   stableFilterKey,
   tableShapeChanged,
   useEntityFieldMutation,
   useEntityFieldRights,
   useEntityFields,
   useEntityRecord,
+  useEntityReferenceKinds,
+  useEntityReferenceWords,
   useEntityTable,
   useFieldMutation,
   useFields,
@@ -8352,6 +8748,8 @@ export {
   useRecordsClient,
   useTable,
   useTableArchive,
-  useTables
+  useTables,
+  withRowCounts,
+  withTablePlacement
 };
 //# sourceMappingURL=index.js.map