The Record view: real columns, readability status & privilege-off-Record

What changed

Contract status (verified against merged main)

• Completeness — WIRED. functions Story-1855 (#496) shipped GET /app/matters/{id}/documents/imports/completeness → MatterImportCompletenessResponse. The OpenAPI mirror is synced and pnpm codegen generated the hook + Zod schema; the gateway parses it through assertContract at the trust boundary (HR-21).
• unreadable — FORWARD-READY, backend does not emit it yet. The merged DocumentListItem.processingStatus enum is still pending→…→indexed, failed / needs_review — #496 did not add unreadable. Because processingStatus is a free string and the pill keeps a raw-token fallback, the unreadable tone + i18n light up the moment the backend starts emitting it (no further app change). No live data drives it today; this is honest UI support, not a claim that the status ships.
• First-run honesty. The container renders nothing while the query is pending/errored or expectedCount === 0 — a brand-new matter shows no banner until there is an actual import to reconcile (AGENTS.md “done = system boundary”: verified against the real, possibly empty ledger, not a fixture).

Where it lives

• openapi/app-api.json + openapi/permission-map.json + src/gen/** — mirror synced from functions main (#496) + pnpm codegen: the completeness hook, client, types, Zod.
• src/lib/documents/gateway.ts — getImportCompleteness(): one read, assertContract on MatterImportCompletenessResponse (HR-21).
• src/app/api/internal/matters/[matterId]/documents/imports/completeness/route.ts — the browser→server BFF proxy the hook resolves onto.
• src/lib/kubb-client.ts — toBrowserRoute mapping for the completeness path.
• src/components/documents/register/import-completeness-summary.tsx — presentational line over the wire DTO (privileged reason via the lexicon).
• src/components/documents/register/import-completeness-container.tsx — reads the hook, renders nothing on empty/pending/no-imports.
• src/components/documents/register/presentation.ts — unreadable status tone; completenessResidual / completenessTone; banner + drop-chip token classes.
• src/components/matters/live-matter-documents-page.tsx — mounts the container above the register.
• src/app/[locale]/(workspace)/matters/[matterId]/record/page.tsx — best-effort prefetch + cache seed; agentSurface refresh.
• messages/en.json + messages/hi.json — status.unreadable + the completeness.* namespace (reasons + item states).
• src/lib/documents/register/fixtures.ts — UNREADABLE_DOCUMENT / SAMPLE_DOCUMENTS_WITH_UNREADABLE + wire-shaped sample ledgers (kept out of the shared engine corpus so test counts stay stable).
• tests/unit/import-completeness-contract.test.ts — full-shape parse + gateway no-store + drift-rejection (HR-21).

Observability

No new instrumentation (pramaan-docs ADR-104 / ADR-065). The summary is presentational and the bootstrap read already traverses src/lib/gateway.ts, which mints/forwards traceparent + x-pramaan-correlation-id — the trace propagates for free. No OTel SDK, spans, or ad-hoc headers added on this surface.

Verify

pnpm lint
pnpm test
pnpm build

• Storybook DocumentStatusPill → Unreadable + AllStatuses; RegisterView → WithUnreadableAndFailedRows (both terminal rows visible); ImportCompletenessSummary → WithGap (red) / AllAccounted (green) / InFlight (amber) / FullyExplained.
• Empty first-run RegisterView → EmptyRegister renders the real zero state; with no ledger the completeness line does not mount.
• i18n status.unreadable + completeness.* present in both en and hi.
• Tokens no color literals; amber/red/green from semantic tokens only.
• Surface registry pnpm gen:routes regenerated; the record surface description names columns + readability + completeness + privilege-off-Record.

Files changed

16 file(s), +523 / -5 lines