@fuzdev/fuz_app 0.103.0 → 0.104.0

package/dist/auth/CLAUDE.md

@@ -176,10 +176,14 @@ consumer's `validate_data` pass-through callback on `CellActionDeps`.
   `visibility` / `path`), the write-once capability/identity axis; a stray
   `kind` inside `data` is rejected fail-loud (`ERROR_CELL_KIND_IN_DATA`).
 - `auth/cell_action_specs.ts` — `CellVisibility` enum, `CellPath` brand,
-  `CellJson`, the six generic verb specs (`cell_create / get / update /
-delete / list / clone`), error reasons, and `all_cell_action_specs`
+  `CellJson`, the generic verb specs (`cell_create / get / update /
+delete / list / clone / moderate`), error reasons, and `all_cell_action_specs`
   (spreads in the grant / field / item / audit registries so codegen + UI
-  see one cell namespace). `CellJson` has no hub axis; `path` is global.
+  see one cell namespace). `CellJson` has no hub axis; `path` is global. The
+  directory-tree columns `parent_id` / `root_id` (containment, immutable in v1)
+  - the `moderation` lifecycle marker (`pending` / `approved` / `rejected`) are
+    top-level `CellJson` keys, peer to `visibility` (set by the create authorizer's
+    verdict + the `cell_moderate` verb, never in `data`).
 - `auth/cell_grant_action_specs.ts` / `cell_field_action_specs.ts` /
   `cell_item_action_specs.ts` / `cell_audit_action_specs.ts` — the
   `cell_grant_*` (3) / `cell_field_*` (3) / `cell_item_*` (4) /
@@ -204,18 +208,32 @@ auth, ids)`: batched strict relation-read filter. Every relation read —
   Two queries for the whole id-set (avoids the N+1 of a per-row check). The
   reverse list verbs additionally cap the fetch by the wire `limit` so a
   heavily inbound-linked target can't force an unbounded scan.
-- `auth/cell_actions.ts` — `create_cell_actions(deps)`, the six generic
+- `auth/cell_actions.ts` — `create_cell_actions(deps)`, the generic
   handlers. `cell_create` stamps `created_by` + writes the top-level `kind`
-  column; `path` writes are admin-only. `cell_update` gates `visibility`
+  column; `path` writes are admin-only. It also resolves the directory tree:
+  `parent_id` (wire) → the governing `root_id` (`parent.root_id ?? parent.id`),
+  **404**-masking a hidden parent. `cell_update` gates `visibility`
   writes on `can_manage_cell` (`ERROR_CELL_VISIBILITY_MANAGE_ONLY`) and
-  **never touches `kind`** (write-once at birth — not an update field).
+  **never touches `kind`** / `parent_id` / `root_id` / `moderation` (all
+  write-once-at-birth or control-gated, never on the update patch).
   `cell_get` bundles visibility-filtered `fields` + `items` (one over the cap
   for truncation detection). `cell_clone` deep-walks viewable children only
-  (each clone inherits its source's `kind`). The optional `authorize_create`
-  dep (`CellCreateAuthorize` — wider `auth` + `{kind, data, scope_id}` input
-  than `validate_data`) gates create by capability; it runs after the
-  validator, before the insert, deny → `cell_not_found` 404 IDOR mask.
-  `None`/omitted = open create (the default; mirrors `validate_data`).
+  (each clone inherits its source's `kind`; clones are unparented). The optional
+  parent-aware `authorize_create` dep (`CellCreateAuthorize` — wider input
+  `{kind, data, parent_id, root_id, root_data, scope_id}` than `validate_data`,
+  returning a `CellCreateVerdict` `{allow:false} | {allow:true, moderation_required}`)
+  gates create by capability; it runs after the validator + the parent-resolve.
+  A **viewable**-parent / root-creation deny is **403** `cell_create_forbidden`
+  (the create-path **404** mask is reserved for a hidden parent); `Allow` folds
+  the moderation outcome (born `pending`+private vs `approved`+author-visibility).
+  The authorizer is **pure** — the handler reads the governing root's `data`
+  in-tx and hands it over as `root_data`, so a directory policy resolves
+  `root.data.policy[kind]` without its own DB read (which also dodges the
+  single-connection PGlite deadlock). `None`/omitted = open create (the default;
+  mirrors `validate_data`). `cell_moderate` is the `pending → approved | rejected`
+  transition, gated on `can_manage_cell` of the **governing root** (admin / root
+  owner — the author lands a 403, the anti-self-approval guard); approve flips
+  `moderation → approved` + `visibility → public`, reject sets `rejected`.
 - `auth/cell_grant_actions.ts` / `cell_field_actions.ts` /
   `cell_item_actions.ts` / `cell_audit_actions.ts` — the relation + ACL +
   audit handlers, exporting `to_grant_json` / `to_field_json` /

package/dist/auth/cell_action_specs.d.ts

@@ -71,6 +71,29 @@ export declare const ERROR_CELL_KIND_IN_DATA: "cell_kind_in_data";
  * `null | non-empty-string` (twin of the Rust `ERROR_CELL_KIND_EMPTY`).
  */
 export declare const ERROR_CELL_KIND_EMPTY: "cell_kind_empty";
+/**
+ * Error reason — the parent-aware `CellCreateAuthorize` denied the create for a
+ * **viewable** parent (or a root creation): "you see it, you can't contribute
+ * here." A **403** `forbidden`, distinct from the create-path **404** mask used
+ * when the parent itself isn't viewable (twin of the Rust
+ * `ERROR_CELL_CREATE_FORBIDDEN`).
+ */
+export declare const ERROR_CELL_CREATE_FORBIDDEN: "cell_create_forbidden";
+/**
+ * Error reason — `cell_moderate` caller can view the contribution but lacks
+ * moderation authority over its governing root (not admin / not the root's
+ * manager). A **403** `forbidden`. The author can view their own pending
+ * contribution, so they reach this gate — and are denied here, which is the
+ * anti-self-approval guard (twin of the Rust `ERROR_CELL_MODERATE_FORBIDDEN`).
+ */
+export declare const ERROR_CELL_MODERATE_FORBIDDEN: "cell_moderate_forbidden";
+/**
+ * Error reason — `cell_moderate` target has no governing root (`root_id` is
+ * null): it's a root or an unparented cell, not a gated contribution, so there
+ * is nothing to moderate. A **400** `invalid_params` (twin of the Rust
+ * `ERROR_CELL_NOT_A_CONTRIBUTION`).
+ */
+export declare const ERROR_CELL_NOT_A_CONTRIBUTION: "cell_not_a_contribution";
 /**
  * Error reason — null-auth `cell_list` caller passed a `created_by`
  * filter. The filter is a soft account-id enumeration vector ("does
@@ -146,6 +169,9 @@ export declare const CellJson: z.ZodObject<{
         public: "public";
     }>;
     refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+    parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+    root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+    moderation: z.ZodNullable<z.ZodString>;
     created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     created_at: z.ZodString;
@@ -170,6 +196,7 @@ export declare const CellCreateInput: z.ZodObject<{
         public: "public";
     }>>;
     path: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>>;
+    parent_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
     acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
 export type CellCreateInput = z.infer<typeof CellCreateInput>;
@@ -187,6 +214,9 @@ export declare const CellCreateOutput: z.ZodObject<{
             public: "public";
         }>;
         refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+        parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        moderation: z.ZodNullable<z.ZodString>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -231,6 +261,9 @@ export declare const CellGetOutput: z.ZodObject<{
             public: "public";
         }>;
         refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+        parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        moderation: z.ZodNullable<z.ZodString>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -292,6 +325,9 @@ export declare const CellUpdateOutput: z.ZodObject<{
             public: "public";
         }>;
         refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+        parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        moderation: z.ZodNullable<z.ZodString>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -341,6 +377,8 @@ export declare const CellListInput: z.ZodDefault<z.ZodObject<{
     ref: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>;
     created_by: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     path_prefix: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>;
+    root_id: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+    moderation: z.ZodOptional<z.ZodString>;
     shared_with: z.ZodOptional<z.ZodLiteral<"me">>;
     order_by: z.ZodOptional<z.ZodEnum<{
         created_at: "created_at";
@@ -369,6 +407,9 @@ export declare const CellListOutput: z.ZodObject<{
             public: "public";
         }>;
         refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+        parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        moderation: z.ZodNullable<z.ZodString>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -422,6 +463,9 @@ export declare const CellCloneOutput: z.ZodObject<{
             public: "public";
         }>;
         refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+        parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        moderation: z.ZodNullable<z.ZodString>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -431,6 +475,60 @@ export declare const CellCloneOutput: z.ZodObject<{
     }, z.core.$strict>;
 }, z.core.$strict>;
 export type CellCloneOutput = z.infer<typeof CellCloneOutput>;
+/**
+ * The terminal transition a `cell_moderate` call applies to a gated
+ * contribution's `moderation` lifecycle. The born state (`'pending'`) is set
+ * by the create authorizer, never on the wire; the verb only moves it to a
+ * terminal state. `'approved'` publishes (also flips `visibility → 'public'`);
+ * `'rejected'` leaves it private.
+ */
+export declare const CellModerationDecision: z.ZodEnum<{
+    rejected: "rejected";
+    approved: "approved";
+}>;
+export type CellModerationDecision = z.infer<typeof CellModerationDecision>;
+/**
+ * Input for `cell_moderate` — the `pending → approved | rejected` transition,
+ * gated on moderation authority over the **governing root** (admin / root
+ * owner in v1), not the contribution (which the author manages, and could
+ * otherwise self-approve). 404 when the target isn't viewable; 403 when it is
+ * but the caller isn't a root manager (the author lands here).
+ */
+export declare const CellModerateInput: z.ZodObject<{
+    cell_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+    moderation: z.ZodEnum<{
+        rejected: "rejected";
+        approved: "approved";
+    }>;
+    acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+}, z.core.$strict>;
+export type CellModerateInput = z.infer<typeof CellModerateInput>;
+export declare const CellModerateOutput: z.ZodObject<{
+    cell: z.ZodObject<{
+        id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+        path: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>;
+        data: z.ZodObject<{
+            label: z.ZodOptional<z.ZodString>;
+            summary: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>;
+        kind: z.ZodNullable<z.ZodString>;
+        visibility: z.ZodEnum<{
+            private: "private";
+            public: "public";
+        }>;
+        refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+        parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        moderation: z.ZodNullable<z.ZodString>;
+        created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        created_at: z.ZodString;
+        updated_at: z.ZodNullable<z.ZodString>;
+        deleted_at: z.ZodNullable<z.ZodString>;
+        grant_count: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type CellModerateOutput = z.infer<typeof CellModerateOutput>;
 export declare const cell_create_action_spec: {
     method: string;
     kind: "request_response";
@@ -451,6 +549,7 @@ export declare const cell_create_action_spec: {
             public: "public";
         }>>;
         path: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>>;
+        parent_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
         acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
     output: z.ZodObject<{
@@ -467,6 +566,9 @@ export declare const cell_create_action_spec: {
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -507,6 +609,9 @@ export declare const cell_get_action_spec: {
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -571,6 +676,9 @@ export declare const cell_update_action_spec: {
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -621,6 +729,8 @@ export declare const cell_list_action_spec: {
         ref: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>;
         created_by: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         path_prefix: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>;
+        root_id: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        moderation: z.ZodOptional<z.ZodString>;
         shared_with: z.ZodOptional<z.ZodLiteral<"me">>;
         order_by: z.ZodOptional<z.ZodEnum<{
             created_at: "created_at";
@@ -648,6 +758,9 @@ export declare const cell_list_action_spec: {
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -705,6 +818,55 @@ export declare const cell_clone_action_spec: {
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
+            created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            created_at: z.ZodString;
+            updated_at: z.ZodNullable<z.ZodString>;
+            deleted_at: z.ZodNullable<z.ZodString>;
+            grant_count: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    async: true;
+    rate_limit: "account";
+    description: string;
+};
+export declare const cell_moderate_action_spec: {
+    method: string;
+    kind: "request_response";
+    initiator: "frontend";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
+    side_effects: true;
+    input: z.ZodObject<{
+        cell_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+        moderation: z.ZodEnum<{
+            rejected: "rejected";
+            approved: "approved";
+        }>;
+        acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+    }, z.core.$strict>;
+    output: z.ZodObject<{
+        cell: z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+            path: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>;
+            data: z.ZodObject<{
+                label: z.ZodOptional<z.ZodString>;
+                summary: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>;
+            kind: z.ZodNullable<z.ZodString>;
+            visibility: z.ZodEnum<{
+                private: "private";
+                public: "public";
+            }>;
+            refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -719,7 +881,7 @@ export declare const cell_clone_action_spec: {
 };
 /**
  * All cell-layer action specs — composed by app registries. Bundles the
- * six generic verbs (this module), the three `cell_grant_*` specs, the
+ * seven generic verbs (this module), the three `cell_grant_*` specs, the
  * three `cell_field_*` specs, the four `cell_item_*` specs, and the
  * `cell_audit_list` spec so codegen + UI clients see a single cell
  * namespace.
@@ -744,6 +906,7 @@ export declare const all_cell_action_specs: readonly [{
             public: "public";
         }>>;
         path: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>>;
+        parent_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
         acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
     output: z.ZodObject<{
@@ -760,6 +923,9 @@ export declare const all_cell_action_specs: readonly [{
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -799,6 +965,9 @@ export declare const all_cell_action_specs: readonly [{
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -862,6 +1031,9 @@ export declare const all_cell_action_specs: readonly [{
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -910,6 +1082,8 @@ export declare const all_cell_action_specs: readonly [{
         ref: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>;
         created_by: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         path_prefix: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>;
+        root_id: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        moderation: z.ZodOptional<z.ZodString>;
         shared_with: z.ZodOptional<z.ZodLiteral<"me">>;
         order_by: z.ZodOptional<z.ZodEnum<{
             created_at: "created_at";
@@ -937,6 +1111,9 @@ export declare const all_cell_action_specs: readonly [{
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -993,6 +1170,54 @@ export declare const all_cell_action_specs: readonly [{
                 public: "public";
             }>;
             refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
+            created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            created_at: z.ZodString;
+            updated_at: z.ZodNullable<z.ZodString>;
+            deleted_at: z.ZodNullable<z.ZodString>;
+            grant_count: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    async: true;
+    rate_limit: "account";
+    description: string;
+}, {
+    method: string;
+    kind: "request_response";
+    initiator: "frontend";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
+    side_effects: true;
+    input: z.ZodObject<{
+        cell_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+        moderation: z.ZodEnum<{
+            rejected: "rejected";
+            approved: "approved";
+        }>;
+        acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+    }, z.core.$strict>;
+    output: z.ZodObject<{
+        cell: z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+            path: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>;
+            data: z.ZodObject<{
+                label: z.ZodOptional<z.ZodString>;
+                summary: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>;
+            kind: z.ZodNullable<z.ZodString>;
+            visibility: z.ZodEnum<{
+                private: "private";
+                public: "public";
+            }>;
+            refs: z.ZodNullable<z.ZodArray<z.core.$ZodBranded<z.ZodString, "FactHash", "out">>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;

package/dist/auth/cell_action_specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAMtB,OAAO,EAEN,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEN,0BAA0B,EAC1B,6BAA6B,EAC7B,2BAA2B,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEN,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAE1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEN,2BAA2B,EAC3B,MAAM,8BAA8B,CAAC;AAGtC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc;;;EAAgC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAO5D,OAAO,EAAC,6BAA6B,EAAE,6BAA6B,EAAE,2BAA2B,EAAC,CAAC;AACnG,OAAO,EAAC,0BAA0B,EAAE,6BAA6B,EAAE,2BAA2B,EAAC,CAAC;AAChG,OAAO,EACN,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,GAC1B,CAAC;AACF,OAAO,EAAC,2BAA2B,EAAC,CAAC;AAIrC,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,EAAG,gBAAyB,CAAC;AAE9D,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,EAAG,6BAAsC,CAAC;AAExF,6EAA6E;AAC7E,eAAO,MAAM,kCAAkC,EAAG,8BAAuC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAG,mBAA4B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,wCAAwC,EACpD,oCAA6C,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,yCAAyC,EACrD,qCAA8C,CAAC;AAIhD;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,oDAAgE,CAAC;AACtF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;kBAsBnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAIhD;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAiB1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;kBAAmC,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;kBAQtB,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAI1D;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;kBAAmC,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE,eAAO,MAAM,eAAe;;;kBAG1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;kBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;mBA8Bb,CAAC;AACd,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAI5D;;;;;;GAMG;AACH,eAAO,MAAM,cAAc;;;;;;;;kBAezB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;kBAAmC,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAI9D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYC,CAAC;AAEtC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYI,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWC,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;CAUC,CAAC;AAEtC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYG,CAAC;AAEtC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYE,CAAC;AAEtC;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWxB,CAAC"}
+{"version":3,"file":"cell_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAMtB,OAAO,EAEN,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEN,0BAA0B,EAC1B,6BAA6B,EAC7B,2BAA2B,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEN,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAE1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEN,2BAA2B,EAC3B,MAAM,8BAA8B,CAAC;AAGtC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc;;;EAAgC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAO5D,OAAO,EAAC,6BAA6B,EAAE,6BAA6B,EAAE,2BAA2B,EAAC,CAAC;AACnG,OAAO,EAAC,0BAA0B,EAAE,6BAA6B,EAAE,2BAA2B,EAAC,CAAC;AAChG,OAAO,EACN,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,GAC1B,CAAC;AACF,OAAO,EAAC,2BAA2B,EAAC,CAAC;AAIrC,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,EAAG,gBAAyB,CAAC;AAE9D,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,EAAG,6BAAsC,CAAC;AAExF,6EAA6E;AAC7E,eAAO,MAAM,kCAAkC,EAAG,8BAAuC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAG,mBAA4B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAG,uBAAgC,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,wCAAwC,EACpD,oCAA6C,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,yCAAyC,EACrD,qCAA8C,CAAC;AAIhD;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,oDAAgE,CAAC;AACtF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;kBAkCnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAIhD;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;kBAqB1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;kBAAmC,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;kBAQtB,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAI1D;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;kBAAmC,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE,eAAO,MAAM,eAAe;;;kBAG1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;kBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;mBAsCb,CAAC;AACd,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAI5D;;;;;;GAMG;AACH,eAAO,MAAM,cAAc;;;;;;;;kBAezB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;kBAAmC,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAI9D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;EAAmC,CAAC;AACvE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;kBAM5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;kBAAmC,CAAC;AACnE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYC,CAAC;AAEtC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYI,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWC,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;CAUC,CAAC;AAEtC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYG,CAAC;AAEtC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYE,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYD,CAAC;AAEtC;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYxB,CAAC"}

package/dist/auth/cell_action_specs.js

@@ -77,6 +77,29 @@ export const ERROR_CELL_KIND_IN_DATA = 'cell_kind_in_data';
  * `null | non-empty-string` (twin of the Rust `ERROR_CELL_KIND_EMPTY`).
  */
 export const ERROR_CELL_KIND_EMPTY = 'cell_kind_empty';
+/**
+ * Error reason — the parent-aware `CellCreateAuthorize` denied the create for a
+ * **viewable** parent (or a root creation): "you see it, you can't contribute
+ * here." A **403** `forbidden`, distinct from the create-path **404** mask used
+ * when the parent itself isn't viewable (twin of the Rust
+ * `ERROR_CELL_CREATE_FORBIDDEN`).
+ */
+export const ERROR_CELL_CREATE_FORBIDDEN = 'cell_create_forbidden';
+/**
+ * Error reason — `cell_moderate` caller can view the contribution but lacks
+ * moderation authority over its governing root (not admin / not the root's
+ * manager). A **403** `forbidden`. The author can view their own pending
+ * contribution, so they reach this gate — and are denied here, which is the
+ * anti-self-approval guard (twin of the Rust `ERROR_CELL_MODERATE_FORBIDDEN`).
+ */
+export const ERROR_CELL_MODERATE_FORBIDDEN = 'cell_moderate_forbidden';
+/**
+ * Error reason — `cell_moderate` target has no governing root (`root_id` is
+ * null): it's a root or an unparented cell, not a gated contribution, so there
+ * is nothing to moderate. A **400** `invalid_params` (twin of the Rust
+ * `ERROR_CELL_NOT_A_CONTRIBUTION`).
+ */
+export const ERROR_CELL_NOT_A_CONTRIBUTION = 'cell_not_a_contribution';
 /**
  * Error reason — null-auth `cell_list` caller passed a `created_by`
  * filter. The filter is a soft account-id enumeration vector ("does
@@ -150,6 +173,15 @@ export const CellJson = z.strictObject({
         description: "Access-control tag. `'public'` admits everyone (including unauthenticated visitors); `'private'` (default) admits admin / owner / `cell_grant`-admitted callers. Top-level column, not inside `data`.",
     }),
     refs: z.array(FactHashSchema).nullable(),
+    parent_id: Uuid.nullable().meta({
+        description: 'Immediate container in the directory tree (the directory this cell lives in). `null` = a root (parentless). Set once at create, immutable in v1.',
+    }),
+    root_id: Uuid.nullable().meta({
+        description: 'Governing root of the directory subtree, denormalized for flat-subtree queries (`root_id = parent.root_id ?? parent.id`). `null` for a root. Set once at create, immutable in v1.',
+    }),
+    moderation: z.string().nullable().meta({
+        description: "Approval-lifecycle marker for a gated contribution (`'pending'` / `'approved'` / `'rejected'`); `null` = unmoderated. A control field with a non-author writer — peer to `visibility`, never inside `data` (set by the create authorizer's verdict, transitioned only by `cell_moderate`).",
+    }),
     created_by: Uuid.nullable(),
     updated_by: Uuid.nullable(),
     created_at: z.string(),
@@ -178,6 +210,9 @@ export const CellCreateInput = z.strictObject({
     path: CellPath.nullish().meta({
         description: 'Admin-only named lookup alias. Globally unique on active rows.',
     }),
+    parent_id: Uuid.nullish().meta({
+        description: 'Immediate container — the directory this cell is created in. Omit / null = a root (parentless). The handler resolves `root_id` from it and gates the create through the parent-aware authorizer; `root_id` / `moderation` are handler-derived, never wire input.',
+    }),
     acting: ActingActor,
 });
 export const CellCreateOutput = z.strictObject({ cell: CellJson });
@@ -282,6 +317,12 @@ export const CellListInput = z
     path_prefix: CellPath.optional().meta({
         description: 'Match cells whose path starts with this.',
     }),
+    root_id: Uuid.optional().meta({
+        description: 'Scope to a directory subtree by governing root (`cell.root_id = ?`) — the feed + mod-queue key.',
+    }),
+    moderation: z.string().optional().meta({
+        description: "Filter by moderation lifecycle marker (`'pending'` drives the moderation queue).",
+    }),
     shared_with: z.literal('me').optional().meta({
         description: 'Narrow to cells admitting the caller via `cell_grant`, excluding cells the caller owns. Self-only — a `Uuid` form would need cross-actor role_grant loading.',
     }),
@@ -320,6 +361,30 @@ export const CellCloneInput = z.strictObject({
     acting: ActingActor,
 });
 export const CellCloneOutput = z.strictObject({ cell: CellJson });
+// -- cell_moderate ----------------------------------------------------------
+/**
+ * The terminal transition a `cell_moderate` call applies to a gated
+ * contribution's `moderation` lifecycle. The born state (`'pending'`) is set
+ * by the create authorizer, never on the wire; the verb only moves it to a
+ * terminal state. `'approved'` publishes (also flips `visibility → 'public'`);
+ * `'rejected'` leaves it private.
+ */
+export const CellModerationDecision = z.enum(['approved', 'rejected']);
+/**
+ * Input for `cell_moderate` — the `pending → approved | rejected` transition,
+ * gated on moderation authority over the **governing root** (admin / root
+ * owner in v1), not the contribution (which the author manages, and could
+ * otherwise self-approve). 404 when the target isn't viewable; 403 when it is
+ * but the caller isn't a root manager (the author lands here).
+ */
+export const CellModerateInput = z.strictObject({
+    cell_id: Uuid.meta({ description: 'Contribution to moderate.' }),
+    moderation: CellModerationDecision.meta({
+        description: 'Terminal decision: `approved` (publishes, visibility → public) or `rejected`.',
+    }),
+    acting: ActingActor,
+});
+export const CellModerateOutput = z.strictObject({ cell: CellJson });
 // -- Action specs -----------------------------------------------------------
 export const cell_create_action_spec = {
     method: 'cell_create',
@@ -391,9 +456,21 @@ export const cell_clone_action_spec = {
     rate_limit: 'account',
     description: 'Clone a cell (optionally deep). New owner is the caller; `path` is always nulled. Provenance recorded only in the `cell_clone` audit row. Per-account rate-limited — `deep: true` walks `cell_item` rows and fans out, so unbounded clone is a write-amplification vector.',
 };
+export const cell_moderate_action_spec = {
+    method: 'cell_moderate',
+    kind: 'request_response',
+    initiator: 'frontend',
+    auth: { account: 'required', actor: 'required' },
+    side_effects: true,
+    input: CellModerateInput,
+    output: CellModerateOutput,
+    async: true,
+    rate_limit: 'account',
+    description: 'Moderate a gated contribution (`pending → approved | rejected`). Gated on moderation authority over the governing root (admin / root owner), not the contribution — so the author cannot self-approve. Approval flips `moderation → approved` + `visibility → public`; rejection sets `moderation → rejected`. 404 on an unviewable target, 403 for a viewable target whose caller is not a root manager.',
+};
 /**
  * All cell-layer action specs — composed by app registries. Bundles the
- * six generic verbs (this module), the three `cell_grant_*` specs, the
+ * seven generic verbs (this module), the three `cell_grant_*` specs, the
  * three `cell_field_*` specs, the four `cell_item_*` specs, and the
  * `cell_audit_list` spec so codegen + UI clients see a single cell
  * namespace.
@@ -405,6 +482,7 @@ export const all_cell_action_specs = [
     cell_delete_action_spec,
     cell_list_action_spec,
     cell_clone_action_spec,
+    cell_moderate_action_spec,
     ...all_cell_grant_action_specs,
     ...all_cell_field_action_specs,
     ...all_cell_item_action_specs,