@fuzdev/fuz_app 0.103.0 → 0.104.0

package/dist/auth/cell_actions.d.ts

@@ -47,26 +47,49 @@ import { type CellRow } from '../db/cell_queries.js';
 import type { CellData } from './cell_data_schema.js';
 /**
  * Input to a `CellCreateAuthorize` callback — the TS twin of the Rust
- * `CellCreateAuthorizeInput`.
+ * `CellCreateAuthorizeInput`. **Parent-aware**: it carries the directory
+ * context (`parent_id` / the handler-resolved `root_id`) so the authorizer can
+ * resolve the governing root's policy.
  */
 export interface CellCreateAuthorizeInput {
     /** The cell's `kind` (the top-level `cell.kind` value); `null` for a typeless cell. */
     kind: string | null;
     /** The cell `data` (kind-free — a `kind` key is rejected upstream). For richer M3-era policies (e.g. content pre-screen). */
     data: CellData;
+    /** The immediate container the create targets. `null` = a root creation; otherwise a contribution under that parent. */
+    parent_id: Uuid | null;
+    /** The governing root of the directory subtree, resolved by the handler from the parent (`parent.root_id ?? parent.id`). `null` for a root creation. */
+    root_id: Uuid | null;
+    /** The governing root's `data` — the handler reads it in-tx (when an authorizer is mounted) and hands it over, so a directory-aware authorizer resolves `root.data.policy[kind]` **without a DB read of its own** (pure predicate; reading in-tx avoids the single-connection PGlite deadlock a separate handle would hit). `null` for a root creation, or when no authorizer is mounted. */
+    root_data: CellData | null;
     /** Target scope — designed-in for M2 space-scoping; **always `null` in v1** (cells carry no scope column). */
     scope_id: Uuid | null;
 }
 /**
- * Opt-in creation authorizer — the TS twin of the Rust `CellCreateAuthorize`
- * trait. Answers "may *this actor* create *this kind* of cell?". Runs in
- * `cell_create` after `validate_data`, before the insert; returning `false`
- * surfaces as the existing `cell_not_found` 404 (IDOR mask), so a denied
- * caller can't distinguish a gated kind from a missing resource. Omitted =
- * today's open create (all consumers untouched). Async-capable (DB / policy
- * calls) — the create handler is already async with `auth` in hand.
+ * An authorizer's decision for a `cell_create` — the TS twin of the Rust
+ * `Verdict`. Folds the moderation outcome into the authority decision (one
+ * policy resolution, not two): `{allow: false}` denies (the handler surfaces a
+ * 403 `forbidden` for a viewable parent / a root creation), `{allow: true,
+ * moderation_required}` admits — `true` → born `pending` + private, `false` →
+ * born `approved` at the author's visibility.
  */
-export type CellCreateAuthorize = (auth: RequestActorContext, input: CellCreateAuthorizeInput) => boolean | Promise<boolean>;
+export type CellCreateVerdict = {
+    allow: false;
+} | {
+    allow: true;
+    moderation_required: boolean;
+};
+/**
+ * Opt-in, parent-aware creation authorizer — the TS twin of the Rust
+ * `CellCreateAuthorize` trait. Gates both roots (`parent_id = null`) and
+ * contributions; answers "may *this actor* create *this kind* here?" and
+ * returns a `CellCreateVerdict`. Runs in `cell_create` after `validate_data`
+ * and after the handler resolves `root_id` from the parent (an unviewable
+ * parent already 404-masks before this runs). Omitted = today's open create
+ * (all consumers untouched). Async-capable (DB / policy calls) — a DB-backed
+ * impl closes over its own `db` (the create handler stays unaware).
+ */
+export type CellCreateAuthorize = (auth: RequestActorContext, input: CellCreateAuthorizeInput) => CellCreateVerdict | Promise<CellCreateVerdict>;
 /**
  * Dependencies for `create_cell_actions`.
  *

package/dist/auth/cell_actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,OAAO,EAIN,KAAK,SAAS,EACd,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAW,KAAK,mBAAmB,EAAC,MAAM,sBAAsB,CAAC;AAExE,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAEhD,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAEjD,OAAO,EA8BN,KAAK,QAAQ,EAEb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAQN,KAAK,OAAO,EACZ,MAAM,uBAAuB,CAAC;AAkB/B,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,uBAAuB,CAAC;AAEpD;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACxC,uFAAuF;IACvF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,6HAA6H;IAC7H,IAAI,EAAE,QAAQ,CAAC;IACf,8GAA8G;IAC9G,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,CACjC,IAAI,EAAE,mBAAmB,EACzB,KAAK,EAAE,wBAAwB,KAC3B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEhC;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG;IACtE,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC;IAC7C,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;CACvC,CAAC;AAkCF,eAAO,MAAM,YAAY,GAAI,KAAK,OAAO,KAAG,QAa1C,CAAC;AA2BH,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB,GAAI,MAAM,cAAc,KAAG,KAAK,CAAC,SAAS,CA+fzE,CAAC"}
+{"version":3,"file":"cell_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,OAAO,EAIN,KAAK,SAAS,EACd,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAW,KAAK,mBAAmB,EAAC,MAAM,sBAAsB,CAAC;AAExE,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAEhD,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAEjD,OAAO,EAoCN,KAAK,QAAQ,EAEb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EASN,KAAK,OAAO,EACZ,MAAM,uBAAuB,CAAC;AAsB/B,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,uBAAuB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACxC,uFAAuF;IACvF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,6HAA6H;IAC7H,IAAI,EAAE,QAAQ,CAAC;IACf,wHAAwH;IACxH,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,wJAAwJ;IACxJ,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,6XAA6X;IAC7X,SAAS,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC3B,8GAA8G;IAC9G,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAAC,KAAK,EAAE,KAAK,CAAA;CAAC,GAAG;IAAC,KAAK,EAAE,IAAI,CAAC;IAAC,mBAAmB,EAAE,OAAO,CAAA;CAAC,CAAC;AAE7F;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG,CACjC,IAAI,EAAE,mBAAmB,EACzB,KAAK,EAAE,wBAAwB,KAC3B,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG;IACtE,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC;IAC7C,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;CACvC,CAAC;AAkCF,eAAO,MAAM,YAAY,GAAI,KAAK,OAAO,KAAG,QAgB1C,CAAC;AA2BH,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB,GAAI,MAAM,cAAc,KAAG,KAAK,CAAC,SAAS,CAinBzE,CAAC"}

package/dist/auth/cell_actions.js

@@ -44,8 +44,8 @@ import { jsonrpc_errors, dev_only } from '../http/jsonrpc_errors.js';
 import { is_pg_unique_violation } from '../db/pg_error.js';
 import { has_role } from './request_context.js';
 import { ROLE_ADMIN } from './role_schema.js';
-import { cell_create_action_spec, cell_get_action_spec, cell_update_action_spec, cell_delete_action_spec, cell_list_action_spec, cell_clone_action_spec, ERROR_CELL_NOT_FOUND, ERROR_CELL_PATH_ADMIN_ONLY, ERROR_CELL_PATH_TAKEN, ERROR_CELL_VISIBILITY_MANAGE_ONLY, ERROR_CELL_GET_REQUIRES_ID_OR_PATH, ERROR_CELL_KIND_IN_DATA, ERROR_CELL_KIND_EMPTY, ERROR_CELL_LIST_CREATED_BY_REQUIRES_AUTH, ERROR_CELL_LIST_SHARED_WITH_REQUIRES_AUTH, CELL_LIST_LIMIT_DEFAULT, CELL_RELATIONS_BUNDLE_LIMIT, } from './cell_action_specs.js';
-import { query_cell_create, query_cell_get, query_cell_get_by_path, query_cell_update, query_cell_delete, query_cell_list, query_cell_load_many, } from '../db/cell_queries.js';
+import { cell_create_action_spec, cell_get_action_spec, cell_update_action_spec, cell_delete_action_spec, cell_list_action_spec, cell_clone_action_spec, cell_moderate_action_spec, ERROR_CELL_NOT_FOUND, ERROR_CELL_PATH_ADMIN_ONLY, ERROR_CELL_PATH_TAKEN, ERROR_CELL_VISIBILITY_MANAGE_ONLY, ERROR_CELL_GET_REQUIRES_ID_OR_PATH, ERROR_CELL_KIND_IN_DATA, ERROR_CELL_KIND_EMPTY, ERROR_CELL_CREATE_FORBIDDEN, ERROR_CELL_MODERATE_FORBIDDEN, ERROR_CELL_NOT_A_CONTRIBUTION, ERROR_CELL_LIST_CREATED_BY_REQUIRES_AUTH, ERROR_CELL_LIST_SHARED_WITH_REQUIRES_AUTH, CELL_LIST_LIMIT_DEFAULT, CELL_RELATIONS_BUNDLE_LIMIT, } from './cell_action_specs.js';
+import { query_cell_create, query_cell_get, query_cell_get_by_path, query_cell_update, query_cell_delete, query_cell_set_moderation, query_cell_list, query_cell_load_many, } from '../db/cell_queries.js';
 import { query_cell_grant_list_for_cell, query_cell_grants_for_caller_in_cells, } from '../db/cell_grant_queries.js';
 import { query_cell_field_list_for_source, query_cell_field_set } from '../db/cell_field_queries.js';
 import { query_cell_item_insert, query_cell_item_list_for_parent, } from '../db/cell_item_queries.js';
@@ -87,6 +87,9 @@ export const to_cell_json = (row) => ({
     kind: row.kind,
     visibility: row.visibility,
     refs: row.refs,
+    parent_id: row.parent_id,
+    root_id: row.root_id,
+    moderation: row.moderation,
     created_by: row.created_by,
     updated_by: row.updated_by,
     created_at: typeof row.created_at === 'string' ? row.created_at : row.created_at.toISOString(),
@@ -156,15 +159,75 @@ export const create_cell_actions = (deps) => {
         // known kinds with malformed payloads surface as invalid_params.
         const validated_data = validate_data_or_throw(input.data);
         const kind = input.kind ?? null;
-        // Creation authorizer (opt-in): may this actor create this kind? Runs
-        // after shape validation, before the insert. Deny → 404 IDOR mask (the
-        // established cell-layer deny shape — a gated kind is indistinguishable
-        // from a missing resource). Receives the **raw** `input.data` (not the
-        // `validate_data`-normalized value) to match the Rust twin, so a
-        // consumer with a transforming validator can't diverge TS↔Rust.
-        if (authorize_create &&
-            !(await authorize_create(auth, { kind, data: input.data, scope_id: null }))) {
-            throw jsonrpc_errors.not_found('cell', { reason: ERROR_CELL_NOT_FOUND });
+        // Directory tree: resolve the governing `root_id` from the parent (and
+        // the root's `data` for the authorizer's policy read). Runs whether or
+        // not an authorizer is mounted — `root_id` is written regardless, and an
+        // unviewable parent 404-masks the attempt (the same IDOR mask the read
+        // path uses; never reveals a hidden container). A root creation
+        // (`parent_id` null/absent) has `root_id = null`. `root_data` is read
+        // **in-tx** (only when an authorizer is mounted), reusing the parent row
+        // when the parent *is* the root, else one read by `root_id` — so the
+        // authorizer stays pure + the read rides the handler's connection (no
+        // separate-handle deadlock on the single-connection PGlite).
+        const parent_id = input.parent_id ?? null;
+        let root_id = null;
+        let root_data = null;
+        if (parent_id !== null) {
+            const parent = await query_cell_get(ctx, parent_id);
+            if (!parent)
+                throw jsonrpc_errors.not_found('cell', { reason: ERROR_CELL_NOT_FOUND });
+            const parent_grants = await query_cell_grant_list_for_cell(ctx, parent.id);
+            if (!can_view_cell(auth, parent, parent_grants)) {
+                throw jsonrpc_errors.not_found('cell', { reason: ERROR_CELL_NOT_FOUND });
+            }
+            root_id = parent.root_id ?? parent.id;
+            if (authorize_create) {
+                root_data =
+                    root_id === parent.id
+                        ? parent.data
+                        : ((await query_cell_get(ctx, root_id))?.data ?? null);
+            }
+        }
+        // Parent-aware creation authorizer (opt-in). Runs after shape validation
+        // and after the parent-resolve (a hidden parent already 404-masked).
+        // `{allow: false}` for a *viewable* parent / a root creation is a 403
+        // `forbidden` (not the 404 mask); an `{allow: true}` verdict folds the
+        // moderation outcome. Receives the **raw** `input.data` (not the
+        // `validate_data`-normalized value) to match the Rust twin, so a consumer
+        // with a transforming validator can't diverge TS↔Rust. `scope_id` is
+        // `null` in v1. Without an authorizer, create is open: `moderation` stays
+        // null and the author's visibility holds.
+        let moderation = null;
+        let visibility = input.visibility;
+        if (authorize_create) {
+            const verdict = await authorize_create(auth, {
+                kind,
+                data: input.data,
+                parent_id,
+                root_id,
+                root_data,
+                scope_id: null,
+            });
+            if (!verdict.allow) {
+                throw jsonrpc_errors.forbidden('cell creation is not permitted here', {
+                    reason: ERROR_CELL_CREATE_FORBIDDEN,
+                });
+            }
+            // Moderation is a *contribution* concept — only stamp it for a create
+            // with a parent. A root / unparented create stays `moderation = null`
+            // at the author's visibility even under a mounted authorizer (there is
+            // no container to be moderated under).
+            if (parent_id !== null) {
+                if (verdict.moderation_required) {
+                    // Born pending: stays private until `cell_moderate` approves it.
+                    moderation = 'pending';
+                    visibility = 'private';
+                }
+                else {
+                    // Born approved + live immediately at the author's visibility.
+                    moderation = 'approved';
+                }
+            }
         }
         let row;
         try {
@@ -176,8 +239,11 @@ export const create_cell_actions = (deps) => {
                 // schema-validated runtime shape.
                 data: validated_data,
                 kind,
-                visibility: input.visibility,
+                visibility,
                 path: input.path ?? null,
+                parent_id,
+                root_id,
+                moderation,
                 created_by: auth.actor.id,
             });
         }
@@ -338,6 +404,51 @@ export const create_cell_actions = (deps) => {
         emit_cell_audit(ctx, 'cell_delete', existing, deps, auth);
         return { ok: true, deleted: true };
     };
+    const moderate_handler = async (input, ctx) => {
+        const auth = ctx.auth;
+        const existing = await query_cell_get(ctx, input.cell_id);
+        // 404 covers miss + unviewable so a pending (private) contribution
+        // doesn't leak existence to a non-viewer.
+        if (!existing)
+            throw jsonrpc_errors.not_found('cell', { reason: ERROR_CELL_NOT_FOUND });
+        const grants = await query_cell_grant_list_for_cell(ctx, existing.id);
+        if (!can_view_cell(auth, existing, grants)) {
+            throw jsonrpc_errors.not_found('cell', { reason: ERROR_CELL_NOT_FOUND });
+        }
+        // Only a contribution (with a governing root) is moderatable.
+        if (existing.root_id === null) {
+            throw jsonrpc_errors.invalid_params('cell is not a contribution (no governing root to moderate under)', { reason: ERROR_CELL_NOT_A_CONTRIBUTION });
+        }
+        // Authority is over the governing ROOT (admin / root owner), not the
+        // contribution — the author manages the contribution and could otherwise
+        // self-approve. A viewable-but-unauthorized caller (incl. the author) → 403.
+        const root = await query_cell_get(ctx, existing.root_id);
+        if (!root)
+            throw jsonrpc_errors.not_found('cell', { reason: ERROR_CELL_NOT_FOUND });
+        if (!can_manage_cell(auth, root)) {
+            throw jsonrpc_errors.forbidden('cell_moderate requires moderation authority over the governing root', { reason: ERROR_CELL_MODERATE_FORBIDDEN });
+        }
+        const approved = input.moderation === 'approved';
+        const updated = await query_cell_set_moderation(ctx, input.cell_id, input.moderation, {
+            set_visibility_public: approved,
+            updated_by: auth.actor.id,
+        });
+        // Raced with a deleter between the authz check and the UPDATE.
+        if (!updated)
+            throw jsonrpc_errors.not_found('cell', { reason: ERROR_CELL_NOT_FOUND });
+        deps.audit.emit(ctx, {
+            event_type: 'cell_moderate',
+            actor_id: auth.actor.id,
+            account_id: auth.account.id,
+            ip: ctx.client_ip,
+            metadata: {
+                cell_id: updated.id,
+                root_id: existing.root_id,
+                moderation: input.moderation,
+            },
+        });
+        return { cell: to_cell_json(updated) };
+    };
     /**
      * Insert one cloned cell row owned by the caller.
      *
@@ -542,6 +653,8 @@ export const create_cell_actions = (deps) => {
             ref: input.ref,
             created_by: input.created_by,
             path_prefix: input.path_prefix,
+            root_id: input.root_id,
+            moderation: input.moderation,
             viewer_actor_id: caller_actor_id,
             viewer_is_admin: auth ? has_role(auth, ROLE_ADMIN) : false,
             caller_actor_id,
@@ -572,5 +685,6 @@ export const create_cell_actions = (deps) => {
         rpc_action(cell_delete_action_spec, delete_handler),
         rpc_action(cell_list_action_spec, list_handler),
         rpc_action(cell_clone_action_spec, clone_handler),
+        rpc_action(cell_moderate_action_spec, moderate_handler),
     ];
 };

package/dist/auth/cell_audit_events.d.ts

@@ -20,7 +20,7 @@ import type { z } from 'zod';
 /**
  * Cell-layer `event_type → metadata schema` map for `extra_events`.
  *
- * Covers the six generic cell verbs' mutation events plus the grant /
+ * Covers the seven generic cell verbs' mutation events plus the grant /
  * field / item relation events. Read-only verbs (`cell_get`, `cell_list`,
  * `cell_*_list`, `cell_audit_list`) emit nothing and are absent here.
  */

package/dist/auth/cell_audit_events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_audit_events.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_audit_events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAiB3B;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAYjE,CAAC"}
+{"version":3,"file":"cell_audit_events.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_audit_events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAqB3B;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAajE,CAAC"}

package/dist/auth/cell_audit_events.js

@@ -16,14 +16,14 @@
  *
  * @module
  */
-import { CellAuditMetadata, CellCloneAuditMetadata } from './cell_audit_metadata.js';
+import { CellAuditMetadata, CellCloneAuditMetadata, CellModerateAuditMetadata, } from './cell_audit_metadata.js';
 import { CellGrantCreateAuditMetadata, CellGrantRevokeAuditMetadata, } from './cell_grant_audit_metadata.js';
 import { CellFieldSetAuditMetadata, CellFieldDeleteAuditMetadata, } from './cell_field_audit_metadata.js';
 import { CellItemInsertAuditMetadata, CellItemMoveAuditMetadata, CellItemDeleteAuditMetadata, } from './cell_item_audit_metadata.js';
 /**
  * Cell-layer `event_type → metadata schema` map for `extra_events`.
  *
- * Covers the six generic cell verbs' mutation events plus the grant /
+ * Covers the seven generic cell verbs' mutation events plus the grant /
  * field / item relation events. Read-only verbs (`cell_get`, `cell_list`,
  * `cell_*_list`, `cell_audit_list`) emit nothing and are absent here.
  */
@@ -32,6 +32,7 @@ export const cell_audit_events = {
     cell_update: CellAuditMetadata,
     cell_delete: CellAuditMetadata,
     cell_clone: CellCloneAuditMetadata,
+    cell_moderate: CellModerateAuditMetadata,
     cell_grant_create: CellGrantCreateAuditMetadata,
     cell_grant_revoke: CellGrantRevokeAuditMetadata,
     cell_field_set: CellFieldSetAuditMetadata,

package/dist/auth/cell_audit_metadata.d.ts

@@ -45,4 +45,19 @@ export declare const CellCloneAuditMetadata: z.ZodObject<{
     kind: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
 export type CellCloneAuditMetadata = z.infer<typeof CellCloneAuditMetadata>;
+/**
+ * Metadata envelope for `cell_moderate`. `cell_id` is the moderated
+ * contribution; `root_id` is its governing root (the container whose
+ * moderation authority gated the call); `moderation` is the terminal decision
+ * applied (`'approved'` | `'rejected'`).
+ */
+export declare const CellModerateAuditMetadata: z.ZodObject<{
+    cell_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+    root_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+    moderation: z.ZodEnum<{
+        rejected: "rejected";
+        approved: "approved";
+    }>;
+}, z.core.$loose>;
+export type CellModerateAuditMetadata = z.infer<typeof CellModerateAuditMetadata>;
 //# sourceMappingURL=cell_audit_metadata.d.ts.map

package/dist/auth/cell_audit_metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB;;;;;;iBAMjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"cell_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB;;;;;;iBAMjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/auth/cell_audit_metadata.js

@@ -44,3 +44,14 @@ export const CellCloneAuditMetadata = z.looseObject({
     item_count: z.number().int().nonnegative(),
     kind: z.string().optional(),
 });
+/**
+ * Metadata envelope for `cell_moderate`. `cell_id` is the moderated
+ * contribution; `root_id` is its governing root (the container whose
+ * moderation authority gated the call); `moderation` is the terminal decision
+ * applied (`'approved'` | `'rejected'`).
+ */
+export const CellModerateAuditMetadata = z.looseObject({
+    cell_id: Uuid,
+    root_id: Uuid,
+    moderation: z.enum(['approved', 'rejected']),
+});

package/dist/db/CLAUDE.md

@@ -53,19 +53,29 @@ The wire schemas + RPC handlers + authz predicates for this layer live in
   `('private', 'public')`) — a top-level access-control column, peer to
   `cell_grant`, not a `data` field. `cell.kind text` (nullable) is the
   write-once capability/identity axis — likewise a top-level column, not a
-  `data` field (`idx_cell_kind` partial-active). Nullable `created_by` /
-  `updated_by` FKs to `actor` (NULL = system origin). GIN on `data` / `refs`;
-  global partial-unique on `path`.
+  `data` field (`idx_cell_kind` partial-active). `cell.parent_id` / `root_id`
+  (nullable self-FKs to `cell.id`) are the **directory tree** — immediate
+  container + governing root (`root_id = parent.root_id ?? parent.id`, null for a
+  root), immutable in v1 (`idx_cell_root` partial-active for subtree feeds).
+  `cell.moderation text` (nullable — `pending` / `approved` / `rejected`) is the
+  approval-lifecycle marker, peer to `visibility` (partial `idx_cell_moderation_pending`
+  on `root_id WHERE moderation = 'pending'` for the mod queue), set by the create
+  authorizer's verdict + the `cell_moderate` verb, never in `data`. Nullable
+  `created_by` / `updated_by` FKs to `actor` (NULL = system origin). GIN on `data`
+  / `refs`; global partial-unique on `path`.
 - **`cell_history_ddl.ts`** — dormant `cell_history` table
   (`CELL_HISTORY_MIGRATION_NS`, namespace `fuz_cell_history`), FK → `cell.id`.
   Ships present-but-unwritten; no snapshot lifecycle yet.
 - **`cell_queries.ts`** — `query_cell_create / get / get_by_path / update /
-delete`, `_list_by_kind / _list_by_creator`, the
+delete / set_moderation`, `_list_by_kind / _list_by_creator`, the
   generic `query_cell_list` (filter + SQL-side visibility predicate mirroring
   `can_view_cell`; the `kind` filter narrows by the `cell.kind` column, the
-  `ref` filter by `cell.refs`), and
+  `ref` filter by `cell.refs`, plus `root_id` / `moderation` filters for the
+  per-root feed + mod queue), and
   `query_cell_load_many` (bulk id load, no visibility filter — feeds the
-  strict relation-read filter). `cell.refs` derived from
+  strict relation-read filter). `query_cell_set_moderation` is the dedicated
+  `cell_moderate` write (`moderation` is absent from `CellUpdatePatch`, so an
+  author can't self-approve via `cell_update`). `cell.refs` derived from
   `data` via `extract_refs` on create/update. `CellRow.grant_count` is a
   derived projection (correlated subquery on `idx_cell_grant_cell`).
 - **`cell_grant_queries.ts`** — resource-side ACL: `query_cell_grant_create`

package/dist/db/cell_ddl.d.ts

@@ -69,8 +69,17 @@ export declare const CELL_VISIBILITY_TYPE = "\nDO $$ BEGIN\n\tCREATE TYPE cell_v
  * `CellCreateAuthorize`) and is **write-once**: set at INSERT and carried on
  * no update path, so a cell's kind is fixed at birth. Content stays
  * duck-typed in `data`; `kind` is a capability tag, not a content-type.
+ *
+ * `parent_id` / `root_id` are the **directory tree** (containment): `parent_id`
+ * is the immediate container (nullable self-FK; `NULL` = a root), `root_id` is
+ * the governing root denormalized for flat-subtree queries (`root_id =
+ * parent.root_id ?? parent.id`, so a root has `NULL`). Both are set once at
+ * create and immutable in v1 (carried on no update path). `moderation`
+ * (nullable text — `pending` / `approved` / `rejected`; `NULL` = unmoderated)
+ * is the approval-lifecycle marker, peer to `visibility` (a control field with
+ * a non-author writer — see `auth/cell_actions.ts`), never inside `data`.
  */
-export declare const CELL_SCHEMA = "\nCREATE TABLE IF NOT EXISTS cell (\n\tid UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n\tdata JSONB NOT NULL,\n\tkind TEXT,\n\tvisibility cell_visibility NOT NULL DEFAULT 'private',\n\tpath TEXT,\n\trefs TEXT[],\n\tcreated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),\n\tupdated_at TIMESTAMPTZ,\n\tdeleted_at TIMESTAMPTZ,\n\tcreated_by UUID REFERENCES actor(id) ON DELETE SET NULL,\n\tupdated_by UUID REFERENCES actor(id) ON DELETE SET NULL\n)";
+export declare const CELL_SCHEMA = "\nCREATE TABLE IF NOT EXISTS cell (\n\tid UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n\tdata JSONB NOT NULL,\n\tkind TEXT,\n\tvisibility cell_visibility NOT NULL DEFAULT 'private',\n\tpath TEXT,\n\trefs TEXT[],\n\tparent_id UUID REFERENCES cell(id) ON DELETE SET NULL,\n\troot_id UUID REFERENCES cell(id) ON DELETE SET NULL,\n\tmoderation TEXT,\n\tcreated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),\n\tupdated_at TIMESTAMPTZ,\n\tdeleted_at TIMESTAMPTZ,\n\tcreated_by UUID REFERENCES actor(id) ON DELETE SET NULL,\n\tupdated_by UUID REFERENCES actor(id) ON DELETE SET NULL\n)";
 /**
  * Cell indexes — all active-only, partial on `deleted_at IS NULL`.
  *
@@ -83,6 +92,10 @@ export declare const CELL_SCHEMA = "\nCREATE TABLE IF NOT EXISTS cell (\n\tid UU
  * - `idx_cell_data`: shape-driven queries (`data @> ...`).
  * - `idx_cell_refs`: cells-by-fact discovery (cross-cell reference graph).
  * - `idx_cell_created_by`: "cells this actor created" queries.
+ * - `idx_cell_root`: flat-subtree feed/scope queries by governing root
+ *   (`cell.root_id = ?`). Active-only.
+ * - `idx_cell_moderation_pending`: the moderation queue — pending
+ *   contributions per governing root. Partial on `moderation = 'pending'`.
  *
  * Parent↔child membership and named relations live in sibling tables;
  * see `CELL_ITEM_INDEXES` / `CELL_FIELD_INDEXES` below.

package/dist/db/cell_ddl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_ddl.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_ddl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,OAAO,KAAK,EAAC,SAAS,EAAE,kBAAkB,EAAC,MAAM,cAAc,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,oIAI1B,CAAC;AAER;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,WAAW,0bAatB,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,MAAM,CActC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,0iBAc5B,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAW5C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,+RAO5B,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAE5C,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,qSAO3B,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAG3C,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,4DAA6D,CAAC;AAE3F,uBAAuB;AACvB,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,SAAS,CAuB5C,CAAC;AAEF,gDAAgD;AAChD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAEnD,wDAAwD;AACxD,eAAO,MAAM,iBAAiB,EAAE,kBAG/B,CAAC"}
+{"version":3,"file":"cell_ddl.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_ddl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,OAAO,KAAK,EAAC,SAAS,EAAE,kBAAkB,EAAC,MAAM,cAAc,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,oIAI1B,CAAC;AAER;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,WAAW,gkBAgBtB,CAAC;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,MAAM,CAkBtC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,0iBAc5B,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAW5C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,+RAO5B,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAE5C,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,qSAO3B,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAG3C,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,4DAA6D,CAAC;AAE3F,uBAAuB;AACvB,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,SAAS,CAuB5C,CAAC;AAEF,gDAAgD;AAChD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAEnD,wDAAwD;AACxD,eAAO,MAAM,iBAAiB,EAAE,kBAG/B,CAAC"}

package/dist/db/cell_ddl.js

@@ -72,6 +72,15 @@ END $$`;
  * `CellCreateAuthorize`) and is **write-once**: set at INSERT and carried on
  * no update path, so a cell's kind is fixed at birth. Content stays
  * duck-typed in `data`; `kind` is a capability tag, not a content-type.
+ *
+ * `parent_id` / `root_id` are the **directory tree** (containment): `parent_id`
+ * is the immediate container (nullable self-FK; `NULL` = a root), `root_id` is
+ * the governing root denormalized for flat-subtree queries (`root_id =
+ * parent.root_id ?? parent.id`, so a root has `NULL`). Both are set once at
+ * create and immutable in v1 (carried on no update path). `moderation`
+ * (nullable text — `pending` / `approved` / `rejected`; `NULL` = unmoderated)
+ * is the approval-lifecycle marker, peer to `visibility` (a control field with
+ * a non-author writer — see `auth/cell_actions.ts`), never inside `data`.
  */
 export const CELL_SCHEMA = `
 CREATE TABLE IF NOT EXISTS cell (
@@ -81,6 +90,9 @@ CREATE TABLE IF NOT EXISTS cell (
 	visibility cell_visibility NOT NULL DEFAULT 'private',
 	path TEXT,
 	refs TEXT[],
+	parent_id UUID REFERENCES cell(id) ON DELETE SET NULL,
+	root_id UUID REFERENCES cell(id) ON DELETE SET NULL,
+	moderation TEXT,
 	created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
 	updated_at TIMESTAMPTZ,
 	deleted_at TIMESTAMPTZ,
@@ -99,6 +111,10 @@ CREATE TABLE IF NOT EXISTS cell (
  * - `idx_cell_data`: shape-driven queries (`data @> ...`).
  * - `idx_cell_refs`: cells-by-fact discovery (cross-cell reference graph).
  * - `idx_cell_created_by`: "cells this actor created" queries.
+ * - `idx_cell_root`: flat-subtree feed/scope queries by governing root
+ *   (`cell.root_id = ?`). Active-only.
+ * - `idx_cell_moderation_pending`: the moderation queue — pending
+ *   contributions per governing root. Partial on `moderation = 'pending'`.
  *
  * Parent↔child membership and named relations live in sibling tables;
  * see `CELL_ITEM_INDEXES` / `CELL_FIELD_INDEXES` below.
@@ -117,6 +133,10 @@ export const CELL_INDEXES = [
 		WHERE refs IS NOT NULL AND deleted_at IS NULL`,
     `CREATE INDEX IF NOT EXISTS idx_cell_created_by ON cell(created_by)
 		WHERE deleted_at IS NULL`,
+    `CREATE INDEX IF NOT EXISTS idx_cell_root ON cell(root_id)
+		WHERE deleted_at IS NULL`,
+    `CREATE INDEX IF NOT EXISTS idx_cell_moderation_pending ON cell(root_id)
+		WHERE moderation = 'pending'`,
 ];
 /**
  * `cell_grant` table — resource-side ACL for cells. Each row admits a

package/dist/db/cell_queries.d.ts

@@ -46,6 +46,9 @@ export interface CellRow {
     visibility: CellVisibility;
     path: string | null;
     refs: Array<FactHash> | null;
+    parent_id: Uuid | null;
+    root_id: Uuid | null;
+    moderation: string | null;
     created_at: Date;
     updated_at: Date | null;
     deleted_at: Date | null;
@@ -57,12 +60,19 @@ export interface CellRow {
  * Input for `query_cell_create`. `refs` is derived from `data`. `kind` is
  * the write-once capability axis (`cell.kind` column) — set here at INSERT
  * and absent from `CellUpdatePatch`, so it can never change post-create.
+ * `parent_id` / `root_id` / `moderation` are the directory-tree + lifecycle
+ * columns the handler derives (parent containment, governing root, the
+ * create-authorizer verdict) — likewise write-once / control-gated, never on
+ * `CellUpdatePatch`.
  */
 export interface CellCreateQueryInput {
     data: Json;
     kind?: string | null;
     visibility?: CellVisibility;
     path?: string | null;
+    parent_id?: Uuid | null;
+    root_id?: Uuid | null;
+    moderation?: string | null;
     created_by?: Uuid | null;
 }
 /**
@@ -158,6 +168,28 @@ export declare const query_cell_update: (deps: QueryDeps, id: Uuid, patch: CellU
 export declare const query_cell_delete: (deps: QueryDeps, id: Uuid, options?: {
     deleted_by?: Uuid | null;
 }) => Promise<boolean>;
+/**
+ * Transition a contribution's `moderation` marker (the `cell_moderate` verb's
+ * write). On `set_visibility_public` (an approval) it also flips `visibility`
+ * to `'public'` so the approved contribution goes live; a rejection leaves
+ * visibility untouched (stays private). `updated_at` / `updated_by` are stamped.
+ *
+ * `moderation` is deliberately **not** writable through `query_cell_update`
+ * (it's absent from `CellUpdatePatch`) — gating the transition on a dedicated
+ * query (with the manage-tier authority check in the handler) is what stops an
+ * author self-approving their own pending cell.
+ *
+ * @param deps - query deps
+ * @param id - cell id
+ * @param moderation - the terminal marker to write (`'approved'` | `'rejected'`)
+ * @param options - `set_visibility_public` flips visibility on approval; `updated_by` records the moderator
+ * @returns the updated row, or `null` when no active row matched (raced delete)
+ * @mutates `cell` - sets `moderation` (+ maybe `visibility`) on one row
+ */
+export declare const query_cell_set_moderation: (deps: QueryDeps, id: Uuid, moderation: string, options: {
+    set_visibility_public: boolean;
+    updated_by?: Uuid | null;
+}) => Promise<CellRow | null>;
 /**
  * List active cells with the given `kind`, newest first. Uses the
  * `idx_cell_kind` index (`cell.kind = ?`).
@@ -246,6 +278,19 @@ export interface CellListParams {
      * literal matching.
      */
     path_prefix?: string;
+    /** Scope to a directory subtree by governing root (`cell.root_id = ?`, uses `idx_cell_root`). */
+    root_id?: Uuid;
+    /**
+     * Filter by moderation lifecycle marker (`'pending'` drives the mod queue via
+     * `idx_cell_moderation_pending`).
+     *
+     * Note: the visibility predicate still applies, so a `'pending'` (private)
+     * queue surfaces only to viewers it admits — admin / owner / grant. A
+     * non-admin container manager won't see pending children here until a
+     * manager-scoped visibility branch is added, so for now the queue is an admin
+     * surface (`cell_moderate` of a known id still works regardless).
+     */
+    moderation?: string;
     /**
      * Batch-fetch by id. The visibility predicate still runs, so callers
      * passing ids they can't view simply get fewer rows back. Order of

package/dist/db/cell_queries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,0BAA0B,CAAC;AACnD,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAyB,KAAK,QAAQ,EAAC,MAAM,+BAA+B,CAAC;AAGpF,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,6BAA6B,CAAC;AAC1D,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,OAAO;IACvB,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACpB;AAgBD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,OAAO,oBAAoB,KACzB,OAAO,CAAC,OAAO,CAiBjB,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,GAC1B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,UAAU;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAC,KACnC,OAAO,CAAC,OAAO,GAAG,IAAI,CAUxB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,SAAS,EACf,MAAM,MAAM,KACV,OAAO,CAAC,OAAO,GAAG,IAAI,CAQxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,KAAK,aAAa,CAAC,IAAI,CAAC,KACtB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAQxB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,OAAO,eAAe,KACpB,OAAO,CAAC,OAAO,GAAG,IAAI,CA4BxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,UAAU;IAAC,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAC,KAClC,OAAO,CAAC,OAAO,CAWjB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,GACnC,MAAM,SAAS,EACf,MAAM,MAAM,EACZ,UAAU,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC,KACjD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CASvB,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,GACtC,MAAM,SAAS,EACf,UAAU,IAAI,EACd,UAAU,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC,KACjD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAQvB,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,eAAO,MAAM,eAAe,GAC3B,MAAM,SAAS,EACf,QAAQ,cAAc,KACpB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CA0DxB,CAAC;AAiGF,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC9B,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,4EAA4E;IAC5E,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,0EAA0E;IAC1E,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB;;;;OAIG;IACH,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC9B;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,aAAa,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACzD;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,yCAAyC;IACzC,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;IACvC,sCAAsC;IACtC,eAAe,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACjC,iBAAiB;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B"}
+{"version":3,"file":"cell_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,0BAA0B,CAAC;AACnD,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAyB,KAAK,QAAQ,EAAC,MAAM,+BAA+B,CAAC;AAGpF,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,6BAA6B,CAAC;AAC1D,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,OAAO;IACvB,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACpB;AAgBD;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,OAAO,oBAAoB,KACzB,OAAO,CAAC,OAAO,CAoBjB,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,GAC1B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,UAAU;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAC,KACnC,OAAO,CAAC,OAAO,GAAG,IAAI,CAUxB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,SAAS,EACf,MAAM,MAAM,KACV,OAAO,CAAC,OAAO,GAAG,IAAI,CAQxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,KAAK,aAAa,CAAC,IAAI,CAAC,KACtB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAQxB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,OAAO,eAAe,KACpB,OAAO,CAAC,OAAO,GAAG,IAAI,CA4BxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,UAAU;IAAC,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAC,KAClC,OAAO,CAAC,OAAO,CAWjB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,SAAS,EACf,IAAI,IAAI,EACR,YAAY,MAAM,EAClB,SAAS;IAAC,qBAAqB,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAC,KACjE,OAAO,CAAC,OAAO,GAAG,IAAI,CAYxB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,GACnC,MAAM,SAAS,EACf,MAAM,MAAM,EACZ,UAAU,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC,KACjD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CASvB,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,GACtC,MAAM,SAAS,EACf,UAAU,IAAI,EACd,UAAU,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC,KACjD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAQvB,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,eAAO,MAAM,eAAe,GAC3B,MAAM,SAAS,EACf,QAAQ,cAAc,KACpB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CA4DxB,CAAC;AAqGF,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC9B,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,4EAA4E;IAC5E,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,0EAA0E;IAC1E,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,OAAO,CAAC,EAAE,IAAI,CAAC;IACf;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB;;;;OAIG;IACH,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC9B;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,aAAa,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACzD;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,yCAAyC;IACzC,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;IACvC,sCAAsC;IACtC,eAAe,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACjC,iBAAiB;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B"}