@ai-matrx/records 0.57.3 → 0.58.1

package/dist/core/index.d.cts

@@ -1,7 +1,7 @@
-import { T as Timestamp, p as Uuid, R as RecordsErrorCode, q as RecordDocument, r as RecordsResult, s as RecordGraphWritten, t as RecordRead, u as ReadRow, v as Field, S as StoredRecord, w as NewFieldDeclaration, x as FieldPatch, y as RecordRevision, z as ReadValue, A as FieldProposal, C as TableProposal, D as RecordsError, W as WriteConflict, E as PgError, G as StaleWriteDetail, H as PredictedRefusal } from '../types-BpBSMhYq.cjs';
-export { I as ABSENCE_REASONS, J as ACTOR_VOCABULARY, K as AbsenceReason, L as Actor, M as COMPUTE_ON, O as CONTEXT_POLICIES, Q as ComputeOn, V as ContextPolicy, X as DECLARABLE_FIELD_KINDS, Y as DELIVERIES, Z as DeclarableFieldKind, _ as Delivery, $ as ENTITY_TOKENS, a0 as EntityToken, a1 as FIELD_SENSITIVITIES, a2 as FIELD_SOURCES, a3 as FRESHNESS, a4 as FieldBehavior, a5 as FieldRule, a6 as FieldSensitivity, a7 as FieldSource, a8 as FieldTypeWord, a9 as ForbiddenEnvelopeWord, aa as Freshness, ab as HiddenFieldNotice, ac as KERNEL_TABLES, ad as KernelTableName, ae as MERGE_FIELD_MODIFIERS, af as MERGE_FIELD_SEMANTIC_TYPES, ag as MERGE_FIELD_SOURCES, ah as MergeFieldModifier, ai as MergeFieldSemanticType, aj as MergeFieldSource, ak as ON_DELETE, al as OVERRIDE_POLICIES, am as OnDelete, an as OverridePolicy, ao as PARITY_FIELD_TYPES, ap as PER_VALUE_ACCESS_WORDS, aq as ParityFieldType, ar as ParityFieldTypeDescriptor, as as PerValueAccessWord, at as ProvenancePointer, au as RELATION_BINDINGS, av as RELATION_CARDINALITIES, aw as RELATION_FLAVORS, ax as RETIRED_ACTOR_WORDS, ay as RULE_NODE_KINDS, az as RULE_USES, aA as RelationBinding, aB as RelationCardinality, aC as RelationDisplay, aD as RelationFlavor, aE as RetiredActorWord, aF as RuleNodeKind, aG as RuleUse, aH as STORAGE_MODES, aI as STORE_DOORS, aJ as STORE_KNOBS, aK as STORE_REFUSAL_CODES, aL as StorageMode, aM as StoreDoorName, aN as StoreRefusalCode, aO as TABLE_DISPLAYS, aP as TABLE_ORIGINS, aQ as TABLE_TYPES, aR as TableDisplay, aS as TableOrigin, aT as TableType, aU as VALUE_ALTERNATE_KEYS, aV as VALUE_ENVELOPE_KEYS, aW as ValueAlternate, aX as ValueAlternateKey, aY as ValueEnvelope, aZ as ValueEnvelopeKey, a_ as ValueSource, a$ as allowsOtherValues, b0 as err, b1 as isRecordsErr, b2 as ok } from '../types-BpBSMhYq.cjs';
-import { RelationCoordinate, RecordsConfig, TableArchiveProgress, RecordFilter, ArchiveLane, ArchivedRow, Table, TableCapacity, RelationWordsManyArgs, EntityTableFacts, NewEntityFieldDeclaration, EntityFieldRights, EntityRecordRead, EntityRecordsFound, Pipeline, PipelineColumn, PipelineVerdict, PipelineMoveResult, PipelineSpec, PipelineDeclared, StageRuleOnFail, StageRuleEnforcement, StagePending, StagePendingOnBoard, PipelineGate, PipelineGatePreview, FormSummary, BookingSummary, BookingAvailability, BookingDeclared, ImportPlan, ImportPolicy, ImportOpened, ImportColumnsDeclared, ImportBatchResult, ImportFinished, ImportReport, ImportRun, InboundDeclared, InboundAddress, PortalSummary, PortalArchiveFilter, PortalArchiveAnswer, PortalTableRef, PortalCard, PortalInvitation, PortalRevocation, PortalPreviewRow, DashboardSummary, DashboardBlock, DashboardRunResult, StuckRow, CaptureSheetSummary, CaptureSheetFace, CaptureFileRef, CaptureOutcome, EnrichmentSummary, EnrichDeclared, EnrichDueRow, EnrichCell, EnrichRun, AggregateMeasure, AggregateBucket, AggregateRow, Subscription, MySubscription, SubscriptionSpec, DigestPreview, SavedViewRow, SavedViewSpecIn, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordHistoryEntry, RecordScopeContext, ConversationScope, ConversationScopeContext, FieldHistoryEntry, RestorePreview, RestoreResult, CommentThreadRead, CommentWritten, AnonTokenBinding, ChecklistSpec, ChecklistDeclared, ChecklistTemplateSummary, ChecklistTemplateShape, ChecklistRunStarted, ChecklistRunStep, ChecklistRunSummary, ChecklistStepCompleted, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, WorkInboxItem, WorkListFlavour, WorkListItem, WorkAssignment, WorkRecordState, WorkApprover, WorkChange, WorkApprovalFiled, WorkApprovalDecision, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, MyLevel, DecorationPath, TableDecorations, GridLayout, FormulaParse, RowAction, ActionRunResult, RecordEvent, TableWebhookDeclared, TableWebhook, ExampleBuilt, IoExportPage, RecordsDataSource } from '../index.cjs';
-export { ARCHIVE_LANES, ARCHIVE_LANE_LABEL, ARCHIVE_LANE_MEANS, ActionRefusal, AggregateFilter, AggregateOperation, AggregateWindow, ArchivedDoorRow, BookingWindow, CaptureField, CaptureQuestion, CaptureQueue, CaptureQueueCounts, CaptureQueueOptions, CaptureQueuePorts, CaptureQueueStore, CaptureSyncReport, ChecklistRequirement, ChecklistRequirementKind, ChecklistRoleSpec, ChecklistStepSpec, ChecklistTrigger, ChecklistTriggerKind, ChoiceOption, ChoiceOptions, CoerceOptions, Coerced, CoercedAnswers, CoercibleField, CustomFieldTableType, DEFAULT_ARCHIVE_LANE, DEFAULT_PORTAL_ARCHIVE_FILTER, DashboardBlockKind, DashboardBlockResult, DecorationColor, DecorationRule, DecorationRuleOp, DecorationTarget, DocSignatureCheck, EnrichAlternate, EnrichSource, Enrichment, EntityFieldValue, EntityRecordMatch, ExampleSpec, FIELD_KINDS, FieldKind, GridLayoutMode, GridRowHeight, HistoryActor, HistoryActorKind, HistoryChange, Home, ImportColumnPlan, ImportOutcome, ImportProposal, KernelTargets, MergeField, MergeFieldProvenance, MergeFieldResolution, MergeFieldTransform, MissingBehavior, PERMISSION_LEVELS, PIPELINE_RULE_KINDS, PORTAL_ARCHIVE_FILTERS, PermissionLevel, PipelineMissingField, PipelineRule, PipelineRuleKind, PipelineStage, PortalPrincipal, PortalTableExposure, QueuedCapture, QueuedCaptureFile, QueuedCaptureState, QuietHours, REFUSALS_WORTH_REPEATING, RecordChangeAction, RecordComment, RecordScopeComment, RecordScopeField, RecordScopeHistoryEntry, RecordScopeRelation, RecordScopeWithheld, RecordsActor, RecordsChangeSink, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationCarries, RelationDisplaySpec, RelationProperties, RelationStore, RelationTarget, ResolutionTriple, RowActionStep, Rule, RuleAnswer, RuleExpression, STAGE_RULE_ENFORCEMENT, STAGE_RULE_ON_FAIL, StageRuleWarning, SubscriptionBlock, SubscriptionCadence, ViewLayout, WorkDueState, WorkInboxKind, WorkOrigin, WorkTemplateNode, WorkTemplateRelation, actionRefusals, archivedByLine, archivedWhen, asPermissionLevel, atLeast, bookingPath, choiceSlug, choiceValuesOf, choicesOf, coerceTypedAnswer, coerceTypedAnswers, coercionLabel, emptyArchiveLine, emptyPortalArchiveLine, exampleSpec, exportPageXlsx, fieldKindFor, forgetAllOps, highestLevel, holdsARetiredChoice, indexedDbStore, isArchiveLane, isDecided, isOwnOp, isPortalArchiveFilter, isTheChosen, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, mintOpId, openCaptureQueue, optionKey, optionLabel, portalArchiveConsequence, portalConfirmLine, portalPath, portalTitleTypedBack, publicFormPath, recordChangeTrigger, rememberedOpCount, sameDocument, scopeChip, stableFilterKey } from '../index.cjs';
+import { T as Timestamp, p as Uuid, R as RecordsErrorCode, q as RecordDocument, r as RecordsResult, s as RecordGraphWritten, t as RecordRead, u as ReadRow, v as Field, S as StoredRecord, w as NewFieldDeclaration, x as FieldPatch, y as RecordRevision, z as ReadValue, A as FieldProposal, C as TableProposal, D as RecordsError, W as WriteConflict, E as FieldTypeWord, G as PgError, H as StaleWriteDetail, I as PredictedRefusal } from '../types-NKSc_jZq.cjs';
+export { J as ABSENCE_REASONS, K as ACTOR_VOCABULARY, L as AbsenceReason, M as Actor, O as COMPUTE_ON, Q as CONTEXT_POLICIES, V as ComputeOn, X as ContextPolicy, Y as DECLARABLE_FIELD_KINDS, Z as DELIVERIES, _ as DeclarableFieldKind, $ as Delivery, a0 as ENTITY_TOKENS, a1 as EntityToken, a2 as FIELD_SENSITIVITIES, a3 as FIELD_SOURCES, a4 as FRESHNESS, a5 as FieldBehavior, a6 as FieldRule, a7 as FieldSensitivity, a8 as FieldSource, a9 as ForbiddenEnvelopeWord, aa as Freshness, ab as HiddenFieldNotice, ac as KERNEL_TABLES, ad as KernelTableName, ae as MERGE_FIELD_MODIFIERS, af as MERGE_FIELD_SEMANTIC_TYPES, ag as MERGE_FIELD_SOURCES, ah as MergeFieldModifier, ai as MergeFieldSemanticType, aj as MergeFieldSource, ak as ON_DELETE, al as OVERRIDE_POLICIES, am as OnDelete, an as OverridePolicy, ao as PARITY_FIELD_TYPES, ap as PER_VALUE_ACCESS_WORDS, aq as ParityFieldType, ar as ParityFieldTypeDescriptor, as as PerValueAccessWord, at as ProvenancePointer, au as RELATION_BINDINGS, av as RELATION_CARDINALITIES, aw as RELATION_FLAVORS, ax as RETIRED_ACTOR_WORDS, ay as RULE_NODE_KINDS, az as RULE_USES, aA as RelationBinding, aB as RelationCardinality, aC as RelationDisplay, aD as RelationFlavor, aE as RetiredActorWord, aF as RuleNodeKind, aG as RuleUse, aH as STORAGE_MODES, aI as STORE_DOORS, aJ as STORE_KNOBS, aK as STORE_REFUSAL_CODES, aL as StorageMode, aM as StoreDoorName, aN as StoreRefusalCode, aO as TABLE_DISPLAYS, aP as TABLE_ORIGINS, aQ as TABLE_TYPES, aR as TableDisplay, aS as TableOrigin, aT as TableType, aU as VALUE_ALTERNATE_KEYS, aV as VALUE_ENVELOPE_KEYS, aW as ValueAlternate, aX as ValueAlternateKey, aY as ValueEnvelope, aZ as ValueEnvelopeKey, a_ as ValueSource, a$ as allowsOtherValues, b0 as err, b1 as isRecordsErr, b2 as ok } from '../types-NKSc_jZq.cjs';
+import { RelationCoordinate, RecordsConfig, TableArchiveProgress, StoreFilter, ArchiveLane, ArchivedRow, Table, TableHome, TableMoved, TableCapacity, RelationWordsManyArgs, EntityTableFacts, NewEntityFieldDeclaration, EntityFieldRights, EntityRecordRead, EntityRecordsFound, Pipeline, PipelineColumn, PipelineVerdict, PipelineMoveResult, PipelineMoveManyItem, PipelineMoveMany, PipelineSpec, PipelineDeclared, StageRuleOnFail, StageRuleEnforcement, StagePending, StagePendingOnBoard, PipelineGate, PipelineGatePreview, FormSummary, BookingSummary, BookingAvailability, BookingDeclared, ImportPlan, ImportPolicy, ImportOpened, ImportColumnsDeclared, ImportBatchResult, ImportFinished, ImportReport, ImportRun, InboundDeclared, InboundAddress, PortalSummary, PortalArchiveFilter, PortalArchiveAnswer, PortalTableRef, PortalCard, PortalConfigInput, PortalFormSpec, PortalFormAnswer, PortalInvitation, PortalRevocation, PortalPreviewRow, DashboardSummary, DashboardBlock, RecordFilter, AggregateCompare, AggregateBucket, DashboardRunResult, StuckRow, CaptureSheetSummary, CaptureSheetFace, CaptureFileRef, CaptureOutcome, EnrichmentSummary, EnrichDeclared, EnrichDueRow, EnrichCell, EnrichRun, AggregateMeasure, AggregateRow, Subscription, MySubscription, SubscriptionSpec, DigestPreview, SavedViewRow, SavedViewSpecIn, DocToken, DocUnresolvedToken, DocTemplateRow, DocRenderRow, DocSignatureRow, RecordHistoryEntry, RecordScopeContext, ConversationScope, ConversationScopeContext, FieldHistoryEntry, RestorePreview, RestoreResult, CommentThreadRead, CommentWritten, AnonTokenBinding, ChecklistSpec, ChecklistDeclared, ChecklistTemplateSummary, ChecklistTemplateShape, ChecklistRunStarted, ChecklistRunStep, ChecklistRunSummary, ChecklistStepCompleted, WorkState, WorkGraph, WorkInstantiation, WorkTurn, WorkAssignmentField, WorkSlotHold, WorkInboxItem, WorkListFlavour, WorkListItem, WorkAssignment, WorkRecordState, WorkApprover, WorkChange, WorkApprovalFiled, WorkApprovalDecision, WorkDecideManyItem, WorkDecideMany, ExternalPrincipalCard, PublishBinding, ResolvedPublishBinding, MyLevel, DecorationPath, TableDecorations, GridLayout, FormulaParse, RowAction, ActionRunResult, RecordEvent, TableWebhookDeclared, TableWebhook, ExampleBuilt, IoExportPage, TableListEntry, TableSyncSpec, TableSyncResult, TableRowCount, RecordHeader, OutsideShareAnswer, ViewOrderSet, RecordsDataSource } from '../index.cjs';
+export { ARCHIVE_LANES, ARCHIVE_LANE_LABEL, ARCHIVE_LANE_MEANS, ActionRefusal, AggregateCompareKind, AggregateCompareWindows, AggregateDelta, AggregateFilter, AggregateOperation, AggregateWindow, ArchivedDoorRow, BookingWindow, CaptureField, CaptureQuestion, CaptureQueue, CaptureQueueCounts, CaptureQueueOptions, CaptureQueuePorts, CaptureQueueStore, CaptureSyncReport, ChecklistRequirement, ChecklistRequirementKind, ChecklistRoleSpec, ChecklistStepSpec, ChecklistTrigger, ChecklistTriggerKind, ChoiceOption, ChoiceOptions, CoerceOptions, Coerced, CoercedAnswers, CoercibleField, CustomFieldTableType, DEFAULT_ARCHIVE_LANE, DEFAULT_PORTAL_ARCHIVE_FILTER, DashboardBlockKind, DashboardBlockResult, DashboardTarget, DashboardTargetBase, DashboardTargetOp, DashboardTargetResult, DashboardTotals, DecorationColor, DecorationRule, DecorationRuleOp, DecorationTarget, DocSignatureCheck, EnrichAlternate, EnrichSource, Enrichment, EntityFieldValue, EntityRecordMatch, EntityRef, EntityRefWithWords, EntityReferenceKind, ExampleSpec, FIELD_KINDS, FieldKind, GridLayoutMode, GridRowHeight, HistoryActor, HistoryActorKind, HistoryChange, Home, ImportColumnPlan, ImportOutcome, ImportProposal, KernelTargets, MergeField, MergeFieldProvenance, MergeFieldResolution, MergeFieldTransform, MissingBehavior, PERMISSION_LEVELS, PIPELINE_RULE_KINDS, PORTAL_ACCENTS, PORTAL_ARCHIVE_FILTERS, PermissionLevel, PipelineMissingField, PipelineMoveManyResult, PipelineMoveVerdict, PipelineRule, PipelineRuleKind, PipelineStage, PortalAccent, PortalConfig, PortalFooterLink, PortalFormInput, PortalFormRef, PortalPrincipal, PortalStage, PortalStyle, PortalStyleInput, PortalTableExposure, QueuedCapture, QueuedCaptureFile, QueuedCaptureState, QuietHours, REFUSALS_WORTH_REPEATING, RecordChangeAction, RecordComment, RecordScopeComment, RecordScopeField, RecordScopeHistoryEntry, RecordScopeRelation, RecordScopeWithheld, RecordsActor, RecordsChangeSink, RecordsErrorSink, RecordsFilter, RecordsRealtimePort, RecordsResolverPort, RecordsResponse, RecordsTableQuery, RegisteredTable, Relation, RelationCarries, RelationDisplaySpec, RelationProperties, RelationStore, RelationTarget, ResolutionTriple, RowActionStep, Rule, RuleAnswer, RuleExpression, STAGE_RULE_ENFORCEMENT, STAGE_RULE_ON_FAIL, StageRuleWarning, SubscriptionBlock, SubscriptionCadence, TableHomeDestination, TablePlacement, TablePlacementFact, TableSyncSource, ViewLayout, WorkDecideManyResult, WorkDecideVerdict, WorkDueState, WorkInboxKind, WorkOrigin, WorkTemplateNode, WorkTemplateRelation, actionRefusals, archivedByLine, archivedWhen, asPermissionLevel, atLeast, bookingPath, choiceSlug, choiceValuesOf, choicesOf, coerceTypedAnswer, coerceTypedAnswers, coercionLabel, emptyArchiveLine, emptyPortalArchiveLine, entityReferenceKinds, entityReferenceKindsOf, entityReferenceWords, entityRefsOf, entityRefsToWrite, exampleSpec, exportPageXlsx, fieldKindFor, forgetAllOps, highestLevel, holdsARetiredChoice, indexedDbStore, isArchiveLane, isDecided, isEntityReferenceConfig, isOwnOp, isPortalAccent, isPortalArchiveFilter, isRuleFilter, isTheChosen, keptGroups, keptOutOfSight, keptTableHref, looksLikeAnId, mayDrag, measureKey, memoryStore, mintClientKey, mintOpId, moveConsequence, moveInOrder, offeredAsContext, openCaptureQueue, optionKey, optionLabel, parseTableHome, parseTableMoved, portalArchiveConsequence, portalConfirmLine, portalPath, portalTitleTypedBack, publicFormPath, recordChangeTrigger, rememberedOpCount, sameDocument, scopeChip, sheetSyncSpec, stableFilterKey, withRowCounts, withTablePlacement } from '../index.cjs';
 
 /**
  * DOOR-8. As-of on EITHER clock, and they are different questions:
@@ -252,7 +252,7 @@ interface RecordsClient {
          * `recordAggregate` counts with, so the rows a drill-through opens are the
          * rows the number on the dashboard counted.
          */
-        filter?: RecordFilter;
+        filter?: StoreFilter;
         limit?: number;
         offset?: number;
     }): Promise<RecordsResult<{
@@ -330,6 +330,27 @@ interface RecordsClient {
      * answer is `null` — nothing asked, nothing invented.
      */
     tableFacts(): Promise<RecordsResult<TableFact[] | null>>;
+    /**
+     * WHICH ORGANIZATION A TABLE LIVES IN, BY NAME, AND WHERE IT MAY GO — `custom.table_home`
+     * (SC-1' / SC-1-TAILS). Read FROM THE TABLE, never from the organization the client is bound
+     * to, so it answers for a table shared from outside too. `null` = not given to this person,
+     * or not there (the store says the same for both, on purpose). A store without the door
+     * refuses `door_absent` — never a guessed organization.
+     */
+    tableHome(args: {
+        table_id: Uuid;
+    }): Promise<RecordsResult<TableHome | null>>;
+    /**
+     * MOVE A TABLE into another organization the caller belongs to — `custom.table_move`. It
+     * carries every Table inside it or its rows and writes the change events; refused, NOTHING
+     * moved and the refusal carries the store's one sentence. `expected_version` is the Table's
+     * version the caller decided on (a concurrent change refuses with "look again").
+     */
+    tableMove(args: {
+        table_id: Uuid;
+        to_organization_id: Uuid;
+        expected_version?: number | null;
+    }): Promise<RecordsResult<TableMoved>>;
     fields(args: {
         table_id: Uuid;
         recordType?: string;
@@ -460,6 +481,12 @@ interface RecordsClient {
     pipelineBoard(args: {
         table_id: Uuid;
         measure?: string | null;
+        /**
+         * S2-PRIME — the view's question, either shape (`StoreFilter`). Given, the headings count and
+         * total exactly the cards the same filter puts on the board (`custom.pipeline_board`'s
+         * four-argument door); left out, the whole table this person may see, as before.
+         */
+        filter?: StoreFilter | null;
     }): Promise<RecordsResult<PipelineColumn[]>>;
     /** Whether this card may go to that column — asked BEFORE the finger lets go. */
     pipelineTransitionRefusal(args: {
@@ -480,6 +507,16 @@ interface RecordsClient {
         also?: Record<string, unknown>;
         expected_version?: number | null;
     }): Promise<RecordsResult<PipelineMoveResult>>;
+    /**
+     * MOVE MANY CARDS IN ONE CALL (lane S4, `custom.pipeline_move_many`). Each card is judged by
+     * `pipeline_move` exactly as one is, in its own savepoint: a refused card writes nothing and the
+     * others still land. `expected_version` is required per card — a card that changed since the
+     * board loaded answers `changed_since_loaded` and is never overwritten. A refusal of the WHOLE
+     * call (a stranger, an empty batch, more than the `custom/batch_items_max` knob) is the error.
+     */
+    pipelineMoveMany(args: {
+        moves: PipelineMoveManyItem[];
+    }): Promise<RecordsResult<PipelineMoveMany>>;
     /** Declare (or re-state) a pipeline: the stage column and its transition Rules. */
     pipelineDeclare(args: {
         table_id: Uuid;
@@ -522,9 +559,25 @@ interface RecordsClient {
         stage: string;
         gate: PipelineGate | Record<string, unknown>;
     }): Promise<RecordsResult<PipelineGatePreview>>;
+    /**
+     * SERVER LANE ONLY. `custom.rule_members` walks the whole scope table through the evaluator and
+     * returns STORED rows — no visibility ladder, no masking — so no browser role holds EXECUTE on it
+     * and it answers 42501 from a signed-in seat. A screen reads a Rule's members through
+     * `ruleMembersVisible`.
+     */
     ruleMembers(args: {
         rule_id: Uuid;
     }): Promise<RecordsResult<StoredRecord[]>>;
+    /**
+     * S2-PRIME — THE MEMBERS OF A MEMBERSHIP RULE THIS PERSON MAY SEE, a page at a time
+     * (`custom.rule_members_visible`): the list door asked the Rule's own test, so the rows are the
+     * read door's — the same ladder, masked documents, the same page ceiling.
+     */
+    ruleMembersVisible(args: {
+        rule_id: Uuid;
+        limit?: number;
+        offset?: number;
+    }): Promise<RecordsResult<ReadRow[]>>;
     /** Is this one record a member, and WHY — the store's own answer. */
     ruleMembership(args: {
         rule_id: Uuid;
@@ -602,6 +655,22 @@ interface RecordsClient {
         form_id?: Uuid | null;
         slug?: string | null;
     }): Promise<RecordsResult<Uuid>>;
+    /**
+     * WHICH OF A FORM'S QUESTIONS ARE ASKED, given the answers so far — for the OWNER's preview of
+     * a draft (`custom.form_preview_asks`). One row per question in order; `asked` is false only
+     * when the store's own Rule said so. Undecided and unworkable conditions are asked, the second
+     * with the store's sentence in `said`.
+     */
+    formPreviewAsks(args: {
+        table_id: Uuid;
+        questions: unknown[];
+        values: Record<string, unknown>;
+    }): Promise<RecordsResult<Array<{
+        field_key: string;
+        asked: boolean;
+        decided: boolean;
+        said: string | null;
+    }>>>;
     /**
      * What the store makes of a file's columns, before anything is written.
      * `columns` is `[{header, samples}]` — the first page of the file is plenty.
@@ -765,7 +834,35 @@ interface RecordsClient {
         portal_id?: Uuid | null;
         slug?: string | null;
         sign_in_method?: string | null;
+        /**
+         * S6 — the portal's own look and its forms. A key given REPLACES that key; a key not given
+         * is KEPT (leave `config` out and both stay exactly as they are). The store judges it and
+         * refuses by name: a logo that is not a public picture of this organization's Files, an
+         * accent that is not a design-system colour name, a form whose Table the portal does not show.
+         */
+        config?: PortalConfigInput | null;
     }): Promise<RecordsResult<Uuid>>;
+    /**
+     * S6 — THE CLIENT'S SIDE: one form of HER portal (`custom.portal_form`). Refused unless the
+     * caller is a live principal of that live portal and the form is on its list; the Field that
+     * names the client is never one of the questions — the portal fills it.
+     */
+    portalForm(args: {
+        portal_id: Uuid;
+        form_id: Uuid;
+    }): Promise<RecordsResult<PortalFormSpec>>;
+    /**
+     * S6 — send one form of her portal (`custom.portal_form_submit`). The store fills the Field
+     * that names the client with her own record, and the answer reaches her own list at once
+     * (`accepted`) or waits for the office (`held`, with the store's sentence). `client_key`
+     * makes a retry the same submission.
+     */
+    portalFormSubmit(args: {
+        portal_id: Uuid;
+        form_id: Uuid;
+        answers: Record<string, unknown>;
+        client_key?: string | null;
+    }): Promise<RecordsResult<PortalFormAnswer>>;
     /**
      * Invite one person, as one record of the portal's client Table.
      *
@@ -821,6 +918,14 @@ interface RecordsClient {
     dashboardRun(args: {
         dashboard_id: Uuid;
         filter?: RecordFilter;
+        /**
+         * S3 — compare every block that does not carry its own comparison (the
+         * block's own wins, as its own filter does). A block with no date to
+         * compare along answers alone and says so in `compare_refused`.
+         */
+        compare?: AggregateCompare | null;
+        /** S3 — re-cut every bucketed block to one date grain (the canvas's picker). */
+        grain?: AggregateBucket | null;
     }): Promise<RecordsResult<DashboardRunResult>>;
     /** The seventh block kind on its own: records that have sat on the same value too long. */
     dashboardStuck(args: {
@@ -946,8 +1051,15 @@ interface RecordsClient {
          * A scalar is an equality and an object is a half-open moment window, and
          * either way it lands in the SAME WHERE as visibility.
          */
-        filter?: RecordFilter;
+        filter?: StoreFilter;
         limit?: number;
+        /**
+         * S3 — answer the same question over a prior window too (previous period,
+         * same period last year, or a fixed baseline). Each row then carries
+         * `prior_measures`, `delta` and the two `compare` windows. Buckets are cut
+         * in the organization's calendar (knobs `custom/time_zone`, `custom/week_start`).
+         */
+        compare?: AggregateCompare | null;
     }): Promise<RecordsResult<AggregateRow[]>>;
     /** The measures the store itself offers. Asked, never hardcoded in a picker. */
     aggOperations(): Promise<RecordsResult<string[]>>;
@@ -1483,6 +1595,15 @@ interface RecordsClient {
         approve: boolean;
         note?: string | null;
     }): Promise<RecordsResult<WorkApprovalDecision>>;
+    /**
+     * DECIDE MANY INBOX ITEMS IN ONE CALL (lane S4, `custom.work_decide_many`). Each is judged by
+     * `work_approval_decide` exactly as one is, in its own savepoint: a refused decision leaves that
+     * item waiting and the others still stand. Verdicts: approved, declined, already_decided,
+     * no_right, refused — each with the store's own sentence.
+     */
+    workDecideMany(args: {
+        decisions: WorkDecideManyItem[];
+    }): Promise<RecordsResult<WorkDecideMany>>;
     /** One waiting change in full, for the person deciding it or the one who asked. */
     workApprovalRead(args: {
         approval_id: Uuid;
@@ -1638,6 +1759,61 @@ interface RecordsClient {
         limit?: number;
     }): Promise<RecordsResult<IoExportPage>>;
     /** G5. That page as an .xlsx; a withheld column is named on its own sheet. */
+    /** G9. Every table a picker may offer here, from BOTH stores, each saying which store opens it. */
+    tableListEverywhere(): Promise<RecordsResult<{
+        success: boolean;
+        tables: TableListEntry[];
+    }>>;
+    /**
+     * G10. Refresh a synced source (a sheet tab) into ONE Table under `home_id`: new rows added,
+     * changed rows updated, rows the source dropped archived — never destroyed; columns the
+     * person added in Matrx survive. Build the spec with `sheetSyncSpec`.
+     */
+    tableSync(args: {
+        home_id: Uuid;
+        spec: TableSyncSpec;
+    }): Promise<RecordsResult<TableSyncResult>>;
+    /**
+     * G11. The record-store Table a context scope's template-bound item provisions — one per item
+     * and scope. A scope provisioned before the move answers with its moved Table (same id); the
+     * Home defaults to the organization's own.
+     */
+    scopeTableProvision(args: {
+        item_id: Uuid;
+        scope_id: Uuid;
+        home_id?: Uuid | null;
+    }): Promise<RecordsResult<Uuid>>;
+    /** G12. The rows of each Table this reader may see, in one call (fold with `withRowCounts`). A Table she may not know gets no row. */
+    tableRowCounts(args: {
+        table_ids: Uuid[];
+    }): Promise<RecordsResult<TableRowCount[]>>;
+    /** G12. Each live record's own header (created, updated, version) that the read door does not answer. */
+    recordHeaders(args: {
+        ids: Uuid[];
+    }): Promise<RecordsResult<RecordHeader[]>>;
+    /**
+     * G14. Share a Table with a person by email or account id: an existing account outside the
+     * organization is granted at once and notified (never made a member); an address with no
+     * account is invited. The organization's outside-sharing setting decides first.
+     */
+    tableShareOutsideGrant(args: {
+        table_id: Uuid;
+        person: string;
+        level?: "viewer" | "commenter" | "editor" | "admin";
+    }): Promise<RecordsResult<OutsideShareAnswer>>;
+    /** G13. Keep a hand-set order on a saved view: the named rows first, in this order (build it with `moveInOrder`). */
+    viewRecordOrderSet(args: {
+        view_id: Uuid;
+        record_ids: Uuid[];
+    }): Promise<RecordsResult<ViewOrderSet>>;
+    /** G13. A page of a hand-ordered view: placed rows by position, then the rest by created time. */
+    readInViewOrder(args: {
+        view_id: Uuid;
+        limit?: number;
+        offset?: number;
+    }): Promise<RecordsResult<Array<ReadRow & {
+        position: number | null;
+    }>>>;
     exportXlsx(args: {
         table_id: Uuid;
         columns?: string[] | null;
@@ -1736,6 +1912,8 @@ declare const DOORS: {
     readonly pipelineBoard: "pipeline_board";
     readonly pipelineTransitionRefusal: "pipeline_transition_refusal";
     readonly pipelineMove: "pipeline_move";
+    /** Lane S4: many cards, one call, a verdict and a version per card. */
+    readonly pipelineMoveMany: "pipeline_move_many";
     readonly tableStageField: "table_stage_field";
     readonly stageRuleOnFailKinds: "stage_rule_on_fail_kinds";
     readonly stageRuleEnforcement: "stage_rule_enforcement";
@@ -1743,11 +1921,18 @@ declare const DOORS: {
     readonly pipelinePending: "pipeline_pending";
     readonly pipelineGatePreview: "pipeline_gate_preview";
     readonly ruleMembers: "rule_members";
+    readonly ruleMembersVisible: "rule_members_visible";
     readonly ruleMembership: "rule_membership";
     readonly ruleRun: "rule_run";
     readonly ruleEval: "rule_eval";
     readonly forms: "forms";
     readonly formDeclare: "form_declare";
+    /**
+     * WHICH QUESTIONS THE OWNER'S PREVIEW ASKS NEXT (lane FORMS-FIX-1). The same store answer a
+     * stranger's form gets (`custom._form_questions_asked` → `custom.rule_eval`), behind the
+     * organization wall and the caller's own rung on the Table — never `rule_eval` from a browser.
+     */
+    readonly formPreviewAsks: "form_preview_asks";
     readonly bookings: "bookings";
     readonly bookingDeclare: "booking_declare";
     readonly importPlan: "io_import_plan";
@@ -1765,11 +1950,15 @@ declare const DOORS: {
     readonly portals: "portals";
     readonly portalTables: "portal_tables";
     readonly tableFacts: "table_facts";
+    readonly tableHome: "table_home";
+    readonly tableMove: "table_move";
     readonly portalCard: "portal_card";
     readonly portalDeclare: "portal_declare";
     readonly portalInvite: "portal_invite";
     readonly portalRevoke: "portal_revoke";
     readonly portalPreview: "portal_preview";
+    readonly portalForm: "portal_form";
+    readonly portalFormSubmit: "portal_form_submit";
     readonly listPortals: "list_portals";
     readonly portalArchive: "portal_archive";
     readonly portalRestore: "portal_restore";
@@ -1863,6 +2052,8 @@ declare const DOORS: {
     readonly workApprovalRequest: "work_approval_request";
     readonly workApprovalMayDecide: "work_approval_may_decide";
     readonly workApprovalDecide: "work_approval_decide";
+    /** Lane S4: many inbox decisions, one call, a verdict per item. */
+    readonly workDecideMany: "work_decide_many";
     readonly workApprovalRead: "work_approval_read";
     readonly checklistRefusal: "checklist_refusal";
     readonly checklistDeclare: "checklist_declare";
@@ -1886,6 +2077,14 @@ declare const DOORS: {
     readonly tableFromExample: "table_from_example";
     readonly autonumberBackfill: "autonumber_backfill";
     readonly ioExport: "io_export";
+    readonly tableListEverywhere: "table_list_everywhere";
+    readonly tableSync: "table_sync";
+    readonly scopeTableProvision: "scope_table_provision";
+    readonly tableRowCounts: "table_row_counts";
+    readonly recordHeaders: "record_headers";
+    readonly viewRecordOrderSet: "view_record_order_set";
+    readonly readRecordsInViewOrder: "read_records_in_view_order";
+    readonly tableShareOutsideGrant: "table_share_outside_grant";
     readonly metadataSearch: "metadata_search";
     readonly ruleDeclare: "rule_declare";
     readonly fieldPropose: "field_propose";
@@ -1899,6 +2098,95 @@ declare function doorCensus(): {
     absent: string[];
 };
 
+/** One Field a person asked for, in the words a person uses (FLD-1 / FLD-11). */
+interface NewFieldSpec {
+    key: string;
+    label: string;
+    /**
+     * The word for what this column holds. One of the thirteen parity types, one
+     * of the five behaviours, or a plain synonym (`text`, `long_text`, `number`)
+     * — `custom._field_document_for` resolves all three and refuses a word that
+     * means nothing, by name, with the list.
+     */
+    type: FieldTypeWord;
+    sort?: number;
+    required?: boolean;
+    multi?: boolean;
+    config?: Record<string, unknown>;
+    /** A choice list's choices, as words. The store keeps them as a Table (FLD-5). */
+    options?: string[];
+    /** A column that points at another Table of this organization (FLD-11 / REL-8). */
+    relationTarget?: Uuid;
+    /** A currency column's symbol; a date column's day-or-day-and-time. */
+    unit?: string;
+    kind?: "date" | "datetime";
+}
+interface NewTableSpec {
+    name: string;
+    /** The token the Table is addressed by. Derived from the name when absent. */
+    slug?: string;
+    labelSingular?: string;
+    labelPlural?: string;
+    /** The Field whose value is the record's title (REC-2). Defaults to the first Field. */
+    titleField?: string;
+    fields?: NewFieldSpec[];
+}
+type DeclareResult = 
+/**
+ * The Table's id — and its HOME's, because REC-14 gives the Table exactly one
+ * and the caller that made it is the only one that can tidy it up again. A
+ * caller reading `data` alone is unaffected.
+ */
+{
+    ok: true;
+    data: Uuid;
+    homeId: Uuid;
+} | {
+    ok: false;
+    error: RecordsError;
+};
+/** `My Sales Pipeline` → `my_sales_pipeline`. A token, never a sentence. */
+declare function tokenFor(name: string): string;
+/** The one Field a Table cannot be declared without: something to call a record. */
+/**
+ * WHY THE FIRST FIELD IS NOT REQUIRED.
+ *
+ * It was, and the cost showed up the moment the grid could add a row: "New
+ * record" writes an empty record and puts you in the first cell, and the store
+ * correctly refused every one of them — `REC-51: Title is required` — so the
+ * one gesture that makes a grid feel like a grid never worked on a table a
+ * person had just made. A title is what makes a record a CHIP (REC-2), which is
+ * a fact about how it is shown, not a promise it can never be written without;
+ * an organization that wants it demanded says so in the field editor, and the
+ * store then enforces it for everyone.
+ */
+declare const DEFAULT_FIELDS: NewFieldSpec[];
+/**
+ * One column, in the shape `custom.field_declare` takes — and EVERYTHING a
+ * person said about it. The keys after the type are not decoration: without
+ * `options` the door refuses a choice list outright ("A list of choices needs
+ * its choices"), without `unit` a money column is dollars whatever the person
+ * picked, and without `relation_target` a column that points at another of this
+ * organization's own tables cannot be declared at all.
+ */
+declare function fieldDeclarationFor(field: NewFieldSpec): NewFieldDeclaration;
+declare function declareTable(client: RecordsClient, spec: NewTableSpec): Promise<DeclareResult>;
+/**
+ * Columns for an existing Table, through the door that declares one. Used by
+ * the create path and by import.
+ *
+ * A column the store refused STOPS the sequence and hands back the store's own
+ * sentence: a Table that quietly lost a column is the silent failure this
+ * package exists to prevent.
+ */
+declare function addFields(client: RecordsClient, tableId: Uuid, fields: NewFieldSpec[]): Promise<{
+    ok: true;
+    data: Uuid;
+} | {
+    ok: false;
+    error: RecordsError;
+}>;
+
 type Listener = (recordId: string) => void;
 /** Called by the client after a write door answered yes. */
 declare function announceRecordChanged(recordId: string): void;
@@ -2022,4 +2310,4 @@ declare function parseCsv(text: string): string[][];
 declare function importCsv(text: string): ParsedImport;
 declare function importXlsx(bytes: ArrayBuffer | Uint8Array): Promise<ParsedImport>;
 
-export { A_PERSONS_REFUSAL, ActionRunResult, AggregateBucket, AggregateMeasure, AggregateRow, AnonTokenBinding, ArchiveLane, ArchivedRow, type AsOf, BookingAvailability, BookingDeclared, BookingSummary, CaptureFileRef, CaptureOutcome, CaptureSheetFace, CaptureSheetSummary, ChecklistDeclared, ChecklistRunStarted, ChecklistRunStep, ChecklistRunSummary, ChecklistSpec, ChecklistStepCompleted, ChecklistTemplateShape, ChecklistTemplateSummary, CommentThreadRead, CommentWritten, ConversationScope, ConversationScopeContext, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DashboardBlock, DashboardRunResult, DashboardSummary, DecorationPath, DigestPreview, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, EnrichCell, EnrichDeclared, EnrichDueRow, EnrichRun, EnrichmentSummary, EntityFieldRights, EntityRecordRead, EntityRecordsFound, EntityTableFacts, ExampleBuilt, type ExportRow, ExternalPrincipalCard, Field, FieldHistoryEntry, FieldPatch, FieldProposal, FormSummary, FormulaParse, GridLayout, ImportBatchResult, ImportColumnsDeclared, ImportFinished, ImportOpened, ImportPlan, ImportPolicy, ImportReport, ImportRun, InboundAddress, InboundDeclared, IoExportPage, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, MySubscription, NewEntityFieldDeclaration, NewFieldDeclaration, type ParsedImport, PgError, Pipeline, PipelineColumn, PipelineDeclared, PipelineGate, PipelineGatePreview, PipelineMoveResult, PipelineSpec, PipelineVerdict, PortalArchiveAnswer, PortalArchiveFilter, PortalCard, PortalInvitation, PortalPreviewRow, PortalRevocation, PortalSummary, PortalTableRef, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, RecordEvent, RecordFilter, RecordGraphWritten, RecordHistoryEntry, type RecordQuery, RecordRead, RecordRevision, RecordScopeContext, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsErrorCode, RecordsResult, RelationCoordinate, RelationWordsManyArgs, ResolvedPublishBinding, RestorePreview, RestoreResult, RowAction, SavedViewRow, SavedViewSpecIn, StagePending, StagePendingOnBoard, StageRuleEnforcement, StageRuleOnFail, StaleWriteDetail, StoredRecord, StuckRow, Subscription, SubscriptionSpec, type SupabaseLike, Table, TableArchiveProgress, TableCapacity, TableDecorations, type TableFact, TableProposal, TableWebhook, TableWebhookDeclared, Timestamp, Uuid, WorkApprovalDecision, WorkApprovalFiled, WorkApprover, WorkAssignment, WorkAssignmentField, WorkChange, WorkGraph, WorkInboxItem, WorkInstantiation, WorkListFlavour, WorkListItem, WorkRecordState, WorkSlotHold, WorkState, WorkTurn, WriteConflict, announceRecordChanged, asWriteConflict, cellText, createRecordsClient, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, importCsv, importXlsx, intersectIds, isAPersonsRefusal, mapPgError, onRecordChanged, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa, withTableFacts };
+export { A_PERSONS_REFUSAL, ActionRunResult, AggregateBucket, AggregateCompare, AggregateMeasure, AggregateRow, AnonTokenBinding, ArchiveLane, ArchivedRow, type AsOf, BookingAvailability, BookingDeclared, BookingSummary, CaptureFileRef, CaptureOutcome, CaptureSheetFace, CaptureSheetSummary, ChecklistDeclared, ChecklistRunStarted, ChecklistRunStep, ChecklistRunSummary, ChecklistSpec, ChecklistStepCompleted, ChecklistTemplateShape, ChecklistTemplateSummary, CommentThreadRead, CommentWritten, ConversationScope, ConversationScopeContext, DEFAULT_DOCUMENT_MAX_BYTES, DEFAULT_FIELDS, DEFAULT_PAGE_SIZE, DEFAULT_VALUE_MAX_BYTES, DOORS, DashboardBlock, DashboardRunResult, DashboardSummary, type DeclareResult, DecorationPath, DigestPreview, DocRenderRow, DocSignatureRow, DocTemplateRow, DocToken, DocUnresolvedToken, type DoorKey, EnrichCell, EnrichDeclared, EnrichDueRow, EnrichRun, EnrichmentSummary, EntityFieldRights, EntityRecordRead, EntityRecordsFound, EntityTableFacts, ExampleBuilt, type ExportRow, ExternalPrincipalCard, Field, FieldHistoryEntry, FieldPatch, FieldProposal, FieldTypeWord, FormSummary, FormulaParse, GridLayout, ImportBatchResult, ImportColumnsDeclared, ImportFinished, ImportOpened, ImportPlan, ImportPolicy, ImportReport, ImportRun, InboundAddress, InboundDeclared, IoExportPage, MAPPED_SQLSTATES, type MirrorLimits, MyLevel, MySubscription, NewEntityFieldDeclaration, NewFieldDeclaration, type NewFieldSpec, type NewTableSpec, OutsideShareAnswer, type ParsedImport, PgError, Pipeline, PipelineColumn, PipelineDeclared, PipelineGate, PipelineGatePreview, PipelineMoveMany, PipelineMoveManyItem, PipelineMoveResult, PipelineSpec, PipelineVerdict, PortalArchiveAnswer, PortalArchiveFilter, PortalCard, PortalConfigInput, PortalFormAnswer, PortalFormSpec, PortalInvitation, PortalPreviewRow, PortalRevocation, PortalSummary, PortalTableRef, PredictedRefusal, type PromotedPredicate, PublishBinding, type QueryPlan, ReadRow, ReadValue, RecordDocument, RecordEvent, RecordFilter, RecordGraphWritten, RecordHeader, RecordHistoryEntry, type RecordQuery, RecordRead, RecordRevision, RecordScopeContext, type RecordsClient, RecordsConfig, RecordsDataSource, RecordsError, RecordsErrorCode, RecordsResult, RelationCoordinate, RelationWordsManyArgs, ResolvedPublishBinding, RestorePreview, RestoreResult, RowAction, SavedViewRow, SavedViewSpecIn, StagePending, StagePendingOnBoard, StageRuleEnforcement, StageRuleOnFail, StaleWriteDetail, StoreFilter, StoredRecord, StuckRow, Subscription, SubscriptionSpec, type SupabaseLike, Table, TableArchiveProgress, TableCapacity, TableDecorations, type TableFact, TableHome, TableListEntry, TableMoved, TableProposal, TableRowCount, TableSyncResult, TableSyncSpec, TableWebhook, TableWebhookDeclared, Timestamp, Uuid, ViewOrderSet, WorkApprovalDecision, WorkApprovalFiled, WorkApprover, WorkAssignment, WorkAssignmentField, WorkChange, WorkDecideMany, WorkDecideManyItem, WorkGraph, WorkInboxItem, WorkInstantiation, WorkListFlavour, WorkListItem, WorkRecordState, WorkSlotHold, WorkState, WorkTurn, WriteConflict, addFields, announceRecordChanged, asWriteConflict, cellText, createRecordsClient, declareTable, doorAbsent, doorCensus, doorExists, exportCsv, exportXlsx, fieldDeclarationFor, importCsv, importXlsx, intersectIds, isAPersonsRefusal, mapPgError, onRecordChanged, parseCsv, planQuery, predictEnvelopeRefusal, predictSizeRefusal, predictValueRefusals, predictWriteRefusals, staleWriteDetail, supabaseDataSource, toAoa, tokenFor, withTableFacts };