portal/

Package access holds the portal's authorization core: one checker that answers every "may this user see or change this thing" question the portal asks, over assets, collections, prompts, knowledge pages and threads.

Package assetrefapi is the portal surface over the things an asset's content references (#1475): the managed resources it names, and the assets it names (#1488).

Package assetrefs serves and rewrites the things an asset's content references: a managed resource (#1474) or another asset (#1488).

Package assetrefstore is the PostgreSQL store for the things an asset's content references (#1474, #1488).

Package callapi serves the /api/v1/portal/calls surface: the data-access calls the calling user made, and one of them opened in full.

Package feedbackapi holds the portal's feedback surface: threads and their events, the activity feed, the practitioner and SME worklists, asset and collection sign-off, validation responses, and capturing a thread as an insight.

Package portaldomain holds the asset portal's domain vocabulary: the persisted entities (assets, versions, shares, collections), the identity a portal request carries, the store contracts over them, and the validation that guards every write door.

Package portalnoop holds the portal's no-database store implementations.

Package portalstore holds the portal's PostgreSQL stores: assets, shares and collections, together with the ranked-search queries over them.

Package portalversions holds the PostgreSQL store for asset version history.

Package producerapi is the portal surface over what produced a file (#1569): the scripts, sessions and people that created or modified a portal asset or a managed resource.

Package publicviewer holds the embedded assets of the portal's public share pages: the two HTML templates, their Content-Security-Policy, and the default brand mark.

Package sessionapi serves the /api/v1/portal/sessions surface: the sessions the calling user ran, and one of them opened in full.

Package sharecache decides how a response served behind a portal share token may be cached.

Package viewerlimit rate-limits the portal's public share viewer.