portal/

Package access holds the portal's authorization core: one checker that answers every "may this user see or change this thing" question the portal asks, over assets, collections, prompts, knowledge pages and threads.

Package accessreq is the request for access a signed-in person makes from a link to an asset, collection or prompt they cannot open (#2090), and the owner's answer to it.

Package assetrefapi is the portal surface over the things an asset's content references (#1475): the managed resources it names, and the assets it names (#1488).

Package assetrefs serves and rewrites the things an asset's content references: a managed resource (#1474) or another asset (#1488).

Package assetrefstore is the PostgreSQL store for the things an asset's content references (#1474, #1488).

Package callapi serves the /api/v1/portal/calls surface: the data-access calls the calling user made, and one of them opened in full.

Package collitems writes and reads one collection item at a time (#2260): the append the asset viewer's Add to collection makes, and the summary of a collection's sections the picker shows.

Package contentrefs reads what a document body says about references: the mcp:// URIs and mcp:asset:<id> references it names, which of those its asset does not declare, and which it uses as a link target (#1834, #1875).

Package contenturl mints and checks the expiring, signed URL that reads one version of a portal asset without a portal session (#1848).

Package externalfiles is External files (#2290): the personal folders of the people outside the organization, which a persona's External files level lets its people reach.

Package feedbackapi holds the portal's feedback surface: threads and their events, the activity feed, the practitioner and SME worklists, asset and collection sign-off, validation responses, and capturing a thread as an insight.

Package portaldomain holds the asset portal's domain vocabulary: the persisted entities (assets, versions, shares, collections), the identity a portal request carries, the store contracts over them, and the validation that guards every write door.

Package portalnoop holds the portal's no-database store implementations.

Package portalperm decides which portal area a request belongs to and whether a persona's portal permissions admit it (#2225).

Package portalpurge removes, for good, what the portal soft-deleted once it has been deleted longer than the retention (#1904), with every object it names.

Package portalstore holds the portal's PostgreSQL stores: assets, shares and collections, together with the ranked-search queries over them.

Package portalversions holds the PostgreSQL store for asset version history.

Package producerapi is the portal surface over what produced a file (#1569): the scripts, sessions and people that created or modified a portal asset or a managed resource.

Package publicviewer holds the embedded assets of the portal's public share pages: the two HTML templates, their Content-Security-Policy, and the default brand mark.

Package resourceshare shares managed resources the way assets are shared (#2258): with a person, an address or a persona, as viewer or editor, in portal_shares beside asset, collection and prompt shares.

Package sessionapi serves the /api/v1/portal/sessions surface: the sessions the calling user ran, and one of them opened in full.

Package sharecache decides how a response served behind a portal share token may be cached.

Package sharelink serves the two changes the share dialog makes to what already exists (#2291): an item's one general link, created, changed in place or removed, and a grant's permission changed without revoking it.

Package viewerlimit rate-limits the portal's public share viewer.