@fuzdev/fuz_app 0.103.0 → 0.105.0

package/dist/auth/cell_field_action_specs.js

@@ -29,7 +29,7 @@ export const FieldJson = z.strictObject({
     source_id: Uuid,
     name: z.string(),
     target_id: Uuid,
-    created_at: z.string(),
+    created_at: z.string()
 });
 // -- cell_field_set ---------------------------------------------------------
 /**
@@ -39,10 +39,10 @@ export const FieldJson = z.strictObject({
 export const CellFieldSetInput = z.strictObject({
     source_id: Uuid.meta({ description: 'Cell whose field to set.' }),
     name: CellFieldName.meta({
-        description: 'Field name. snake_case identifier; max 64 chars.',
+        description: 'Field name. snake_case identifier; max 64 chars.'
     }),
     target_id: Uuid.meta({ description: 'Cell the field points at.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellFieldSetOutput = z.strictObject({ field: FieldJson });
 // -- cell_field_delete ------------------------------------------------------
@@ -53,11 +53,11 @@ export const CellFieldSetOutput = z.strictObject({ field: FieldJson });
 export const CellFieldDeleteInput = z.strictObject({
     source_id: Uuid.meta({ description: 'Cell whose field to delete.' }),
     name: CellFieldName.meta({ description: 'Field name to delete.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellFieldDeleteOutput = z.strictObject({
     ok: z.literal(true),
-    deleted: z.boolean(),
+    deleted: z.boolean()
 });
 // -- cell_field_list --------------------------------------------------------
 /**
@@ -74,24 +74,24 @@ export const CellFieldDeleteOutput = z.strictObject({
 export const CellFieldListInput = z
     .strictObject({
     source_id: Uuid.optional().meta({
-        description: 'List forward fields whose source is this cell.',
+        description: 'List forward fields whose source is this cell.'
     }),
     target_id: Uuid.optional().meta({
-        description: 'List reverse upfields whose target is this cell.',
+        description: 'List reverse upfields whose target is this cell.'
     }),
     name_after: CellFieldName.optional().meta({
-        description: 'Cursor for forward pagination — return rows whose name > this lex. Forward only.',
+        description: 'Cursor for forward pagination — return rows whose name > this lex. Forward only.'
     }),
     limit: z.number().int().positive().max(500).optional().meta({
-        description: 'Page size cap (max 500). Forward only. Omit for unbounded — explicit list calls escape the bundled `cell_get` cap.',
+        description: 'Page size cap (max 500). Forward only. Omit for unbounded — explicit list calls escape the bundled `cell_get` cap.'
     }),
-    acting: ActingActor,
+    acting: ActingActor
 })
     .refine((v) => Boolean(v.source_id) !== Boolean(v.target_id), {
-    message: ERROR_CELL_FIELD_LIST_REQUIRES_SOURCE_OR_TARGET,
+    message: ERROR_CELL_FIELD_LIST_REQUIRES_SOURCE_OR_TARGET
 });
 export const CellFieldListOutput = z.strictObject({
-    fields: z.array(FieldJson),
+    fields: z.array(FieldJson)
 });
 // -- Action specs -----------------------------------------------------------
 export const cell_field_set_action_spec = {
@@ -103,7 +103,7 @@ export const cell_field_set_action_spec = {
     input: CellFieldSetInput,
     output: CellFieldSetOutput,
     async: true,
-    description: 'Set a named relation `(source.name) → target`. UPSERT on `(source_id, name)`: re-pointing replaces in place. Caller must be able to edit `source` and view `target`; both gate via `can_edit_cell` / `can_view_cell`.',
+    description: 'Set a named relation `(source.name) → target`. UPSERT on `(source_id, name)`: re-pointing replaces in place. Caller must be able to edit `source` and view `target`; both gate via `can_edit_cell` / `can_view_cell`.'
 };
 export const cell_field_delete_action_spec = {
     method: 'cell_field_delete',
@@ -114,7 +114,7 @@ export const cell_field_delete_action_spec = {
     input: CellFieldDeleteInput,
     output: CellFieldDeleteOutput,
     async: true,
-    description: 'Delete a named relation. Idempotent — `deleted: false` when no row matched. Caller must be able to edit `source`.',
+    description: 'Delete a named relation. Idempotent — `deleted: false` when no row matched. Caller must be able to edit `source`.'
 };
 export const cell_field_list_action_spec = {
     method: 'cell_field_list',
@@ -126,11 +126,11 @@ export const cell_field_list_action_spec = {
     output: CellFieldListOutput,
     async: true,
     rate_limit: 'ip',
-    description: 'List forward fields (pass `source_id`) or reverse upfields (pass `target_id`). Forward listing filters targets to those the caller may view (strict target-visibility). Reverse listing has 2-layer authz: gate on `can_view_cell(target)` first (404 otherwise), then filter rows by per-source `can_view_cell`. Per-IP rate-limited — symmetric with `cell_get` to bound public-surface id-walking.',
+    description: 'List forward fields (pass `source_id`) or reverse upfields (pass `target_id`). Forward listing filters targets to those the caller may view (strict target-visibility). Reverse listing has 2-layer authz: gate on `can_view_cell(target)` first (404 otherwise), then filter rows by per-source `can_view_cell`. Per-IP rate-limited — symmetric with `cell_get` to bound public-surface id-walking.'
 };
 /** All cell_field action specs — composed into `all_cell_action_specs`. */
 export const all_cell_field_action_specs = [
     cell_field_set_action_spec,
     cell_field_delete_action_spec,
-    cell_field_list_action_spec,
+    cell_field_list_action_spec
 ];

package/dist/auth/cell_field_actions.d.ts

@@ -24,10 +24,10 @@
  * @module
  */
 import { type RpcAction } from '../actions/action_rpc.js';
-import type { RouteFactoryDeps } from './deps.js';
+import type { ActionFactoryDeps } from './deps.js';
 import { type FieldJson } from './cell_field_action_specs.js';
 import { type CellFieldRow } from '../db/cell_field_queries.js';
-export type CellFieldActionDeps = Pick<RouteFactoryDeps, 'log' | 'audit'>;
+export type CellFieldActionDeps = ActionFactoryDeps;
 export declare const to_field_json: (row: CellFieldRow) => FieldJson;
 /** Create the three `cell_field_*` RPC actions. */
 export declare const create_cell_field_actions: (deps: CellFieldActionDeps) => Array<RpcAction>;

package/dist/auth/cell_field_actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_field_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_field_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAIN,KAAK,SAAS,EACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAEhD,OAAO,EAUN,KAAK,SAAS,EACd,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EAKN,KAAK,YAAY,EACjB,MAAM,6BAA6B,CAAC;AAMrC,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,OAAO,CAAC,CAAC;AAE1E,eAAO,MAAM,aAAa,GAAI,KAAK,YAAY,KAAG,SAKhD,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,yBAAyB,GAAI,MAAM,mBAAmB,KAAG,KAAK,CAAC,SAAS,CAmIpF,CAAC"}
+{"version":3,"file":"cell_field_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_field_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAIN,KAAK,SAAS,EACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAUN,KAAK,SAAS,EACd,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EAKN,KAAK,YAAY,EACjB,MAAM,6BAA6B,CAAC;AAMrC,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAEpD,eAAO,MAAM,aAAa,GAAI,KAAK,YAAY,KAAG,SAKhD,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,yBAAyB,GAAI,MAAM,mBAAmB,KAAG,KAAK,CAAC,SAAS,CAmIpF,CAAC"}

package/dist/auth/cell_field_actions.js

@@ -23,20 +23,20 @@
  *
  * @module
  */
-import { rpc_action, } from '../actions/action_rpc.js';
+import { rpc_action } from '../actions/action_rpc.js';
 import { jsonrpc_errors } from '../http/jsonrpc_errors.js';
-import { cell_field_set_action_spec, cell_field_delete_action_spec, cell_field_list_action_spec, } from './cell_field_action_specs.js';
+import { cell_field_set_action_spec, cell_field_delete_action_spec, cell_field_list_action_spec } from './cell_field_action_specs.js';
 import { ERROR_CELL_NOT_FOUND } from './cell_action_specs.js';
 import { can_view_cell, can_edit_cell } from './cell_authorize.js';
 import { filter_visible_target_ids } from './cell_relation_visibility.js';
 import { query_cell_get } from '../db/cell_queries.js';
 import { query_cell_grant_list_for_cell } from '../db/cell_grant_queries.js';
-import { query_cell_field_set, query_cell_field_delete, query_cell_field_list_for_source, query_cell_field_list_for_target, } from '../db/cell_field_queries.js';
+import { query_cell_field_set, query_cell_field_delete, query_cell_field_list_for_source, query_cell_field_list_for_target } from '../db/cell_field_queries.js';
 export const to_field_json = (row) => ({
     source_id: row.source_id,
     name: row.name,
     target_id: row.target_id,
-    created_at: typeof row.created_at === 'string' ? row.created_at : row.created_at.toISOString(),
+    created_at: typeof row.created_at === 'string' ? row.created_at : row.created_at.toISOString()
 });
 /** Create the three `cell_field_*` RPC actions. */
 export const create_cell_field_actions = (deps) => {
@@ -65,7 +65,7 @@ export const create_cell_field_actions = (deps) => {
         const row = await query_cell_field_set(ctx, {
             source_id: input.source_id,
             name: input.name,
-            target_id: input.target_id,
+            target_id: input.target_id
         });
         deps.audit.emit(ctx, {
             event_type: 'cell_field_set',
@@ -75,8 +75,8 @@ export const create_cell_field_actions = (deps) => {
             metadata: {
                 source_id: row.source_id,
                 name: row.name,
-                target_id: row.target_id,
-            },
+                target_id: row.target_id
+            }
         });
         return { field: to_field_json(row) };
     };
@@ -100,8 +100,8 @@ export const create_cell_field_actions = (deps) => {
                 metadata: {
                     source_id: deleted.source_id,
                     name: deleted.name,
-                    target_id: deleted.target_id,
-                },
+                    target_id: deleted.target_id
+                }
             });
         }
         return { ok: true, deleted: deleted !== null };
@@ -121,7 +121,7 @@ export const create_cell_field_actions = (deps) => {
             }
             const rows = await query_cell_field_list_for_source(ctx, source.id, {
                 limit: input.limit,
-                name_after: input.name_after,
+                name_after: input.name_after
             });
             const visible_targets = await filter_visible_target_ids(ctx, auth, rows.map((r) => r.target_id));
             return { fields: rows.filter((r) => visible_targets.has(r.target_id)).map(to_field_json) };
@@ -148,6 +148,6 @@ export const create_cell_field_actions = (deps) => {
     return [
         rpc_action(cell_field_set_action_spec, set_handler),
         rpc_action(cell_field_delete_action_spec, delete_handler),
-        rpc_action(cell_field_list_action_spec, list_handler),
+        rpc_action(cell_field_list_action_spec, list_handler)
     ];
 };

package/dist/auth/cell_field_audit_metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_field_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_field_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,iDAAiD;AACjD,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"cell_field_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_field_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,iDAAiD;AACjD,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/auth/cell_field_audit_metadata.js

@@ -18,11 +18,11 @@ import { Uuid } from '@fuzdev/fuz_util/id.ts';
 export const CellFieldSetAuditMetadata = z.looseObject({
     source_id: Uuid,
     name: z.string(),
-    target_id: Uuid,
+    target_id: Uuid
 });
 /** Metadata envelope for `cell_field_delete`. */
 export const CellFieldDeleteAuditMetadata = z.looseObject({
     source_id: Uuid,
     name: z.string(),
-    target_id: Uuid,
+    target_id: Uuid
 });

package/dist/auth/cell_grant_action_specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_grant_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAQtB,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,EAAG,+BAAwC,CAAC;AAE5F;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAIhF,iDAAiD;AACjD,eAAO,MAAM,cAAc;;;EAA+B,CAAC;AAC3D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;4BAYlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;kBASpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAIlD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;kBAO/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;kBAAqC,CAAC;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,oBAAoB;;;kBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;kBAGhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,kBAAkB;;;kBAG7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;kBAE9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAItE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWL,CAAC;AAEtC,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;CAWL,CAAC;AAEtC,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWH,CAAC;AAEtC,2EAA2E;AAC3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI9B,CAAC"}
+{"version":3,"file":"cell_grant_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,EAAG,+BAAwC,CAAC;AAE5F;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAIhF,iDAAiD;AACjD,eAAO,MAAM,cAAc;;;EAA+B,CAAC;AAC3D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;4BAYlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;kBASpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAIlD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;kBAO/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;kBAAuC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,oBAAoB;;;kBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;kBAGhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,kBAAkB;;;kBAG7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;kBAE9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAItE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWL,CAAC;AAEtC,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;CAWL,CAAC;AAEtC,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWH,CAAC;AAEtC,2EAA2E;AAC3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI9B,CAAC"}

package/dist/auth/cell_grant_action_specs.js

@@ -43,15 +43,15 @@ export const CellGrantLevel = z.enum(['viewer', 'editor']);
 export const CellGrantPrincipalInput = z.discriminatedUnion('kind', [
     z.strictObject({
         kind: z.literal('actor'),
-        actor_id: Uuid,
+        actor_id: Uuid
     }),
     z.strictObject({
         kind: z.literal('role'),
         role: z.string().min(1),
         scope_id: Uuid.nullish().meta({
-            description: '`null` / omitted = any-scope grant (admits any matching-role role_grant).',
-        }),
-    }),
+            description: '`null` / omitted = any-scope grant (admits any matching-role role_grant).'
+        })
+    })
 ]);
 /**
  * Wire-format for a cell_grant row. Mirrors `CellJson`'s shape — ISO-string
@@ -66,7 +66,7 @@ export const GrantJson = z.strictObject({
     role: z.string().nullable(),
     scope_id: Uuid.nullable(),
     granted_by: Uuid.nullable(),
-    created_at: z.string(),
+    created_at: z.string()
 });
 // -- cell_grant_create ------------------------------------------------------
 /**
@@ -78,15 +78,15 @@ export const CellGrantCreateInput = z.strictObject({
     cell_id: Uuid.meta({ description: 'Cell to grant access on.' }),
     level: CellGrantLevel.meta({ description: 'Grant level: `viewer` or `editor`.' }),
     principal: CellGrantPrincipalInput.meta({
-        description: 'Subject of the grant. Discriminated by `kind`.',
+        description: 'Subject of the grant. Discriminated by `kind`.'
     }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellGrantCreateOutput = z.strictObject({ grant: GrantJson });
 // -- cell_grant_revoke ------------------------------------------------------
 export const CellGrantRevokeInput = z.strictObject({
     grant_id: Uuid.meta({ description: 'Grant to revoke.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 /**
  * Output for `cell_grant_revoke`. `still_admitted` is `true` when the
@@ -96,15 +96,15 @@ export const CellGrantRevokeInput = z.strictObject({
  */
 export const CellGrantRevokeOutput = z.strictObject({
     ok: z.literal(true),
-    still_admitted: z.boolean(),
+    still_admitted: z.boolean()
 });
 // -- cell_grant_list --------------------------------------------------------
 export const CellGrantListInput = z.strictObject({
     cell_id: Uuid.meta({ description: 'Cell whose grants to list.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellGrantListOutput = z.strictObject({
-    grants: z.array(GrantJson),
+    grants: z.array(GrantJson)
 });
 // -- Action specs -----------------------------------------------------------
 export const cell_grant_create_action_spec = {
@@ -116,7 +116,7 @@ export const cell_grant_create_action_spec = {
     input: CellGrantCreateInput,
     output: CellGrantCreateOutput,
     async: true,
-    description: 'Grant view or edit access on a cell. Manage-tier only (admin / owner) — editor-grant holders cannot manage grants. Idempotent on `(cell_id, principal)`. Owner-as-principal rejected. Actor-shaped principals carry a pre-resolved `actor_id` (callers pick via `actor_search`); no name resolver on this verb.',
+    description: 'Grant view or edit access on a cell. Manage-tier only (admin / owner) — editor-grant holders cannot manage grants. Idempotent on `(cell_id, principal)`. Owner-as-principal rejected. Actor-shaped principals carry a pre-resolved `actor_id` (callers pick via `actor_search`); no name resolver on this verb.'
 };
 export const cell_grant_revoke_action_spec = {
     method: 'cell_grant_revoke',
@@ -127,7 +127,7 @@ export const cell_grant_revoke_action_spec = {
     input: CellGrantRevokeInput,
     output: CellGrantRevokeOutput,
     async: true,
-    description: 'Revoke a grant. Manage-tier only (admin / owner), plus self for actor-shaped grants ("leave shared cell"). Returns `still_admitted` so the UI can tell the recipient whether other admit paths remain.',
+    description: 'Revoke a grant. Manage-tier only (admin / owner), plus self for actor-shaped grants ("leave shared cell"). Returns `still_admitted` so the UI can tell the recipient whether other admit paths remain.'
 };
 export const cell_grant_list_action_spec = {
     method: 'cell_grant_list',
@@ -138,11 +138,11 @@ export const cell_grant_list_action_spec = {
     input: CellGrantListInput,
     output: CellGrantListOutput,
     async: true,
-    description: "List grants on a cell. Manage-tier only (admin / owner); viewers and editors get IDOR-mask 404 (the share list is the manager's to curate).",
+    description: "List grants on a cell. Manage-tier only (admin / owner); viewers and editors get IDOR-mask 404 (the share list is the manager's to curate)."
 };
 /** All cell_grant action specs — composed into `all_cell_action_specs`. */
 export const all_cell_grant_action_specs = [
     cell_grant_create_action_spec,
     cell_grant_revoke_action_spec,
-    cell_grant_list_action_spec,
+    cell_grant_list_action_spec
 ];

package/dist/auth/cell_grant_actions.d.ts

@@ -31,7 +31,7 @@
  */
 import { type RpcAction } from '../actions/action_rpc.js';
 import type { RoleSchemaResult } from './role_schema.js';
-import type { RouteFactoryDeps } from './deps.js';
+import type { ActionFactoryDeps } from './deps.js';
 import { type GrantJson } from './cell_grant_action_specs.js';
 import { type CellGrantRow } from '../db/cell_grant_queries.js';
 /**
@@ -41,7 +41,7 @@ import { type CellGrantRow } from '../db/cell_grant_queries.js';
  * `cell_grant_create`. The other slots match `CellActionDeps` so
  * audit-log emit goes through the same fire-and-forget plumbing.
  */
-export type CellGrantActionDeps = Pick<RouteFactoryDeps, 'log' | 'audit'> & {
+export type CellGrantActionDeps = ActionFactoryDeps & {
     roles: RoleSchemaResult;
 };
 export declare const to_grant_json: (row: CellGrantRow) => GrantJson;

package/dist/auth/cell_grant_actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_grant_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAsC,KAAK,SAAS,EAAC,MAAM,0BAA0B,CAAC;AAE7F,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAEhD,OAAO,EAaN,KAAK,SAAS,EACd,MAAM,8BAA8B,CAAC;AAItC,OAAO,EAKN,KAAK,YAAY,EAEjB,MAAM,6BAA6B,CAAC;AAOrC;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG;IAC3E,KAAK,EAAE,gBAAgB,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,KAAK,YAAY,KAAG,SAShD,CAAC;AAgDH,mDAAmD;AACnD,eAAO,MAAM,yBAAyB,GAAI,MAAM,mBAAmB,KAAG,KAAK,CAAC,SAAS,CAoIpF,CAAC"}
+{"version":3,"file":"cell_grant_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE/F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAaN,KAAK,SAAS,EACd,MAAM,8BAA8B,CAAC;AAItC,OAAO,EAKN,KAAK,YAAY,EAEjB,MAAM,6BAA6B,CAAC;AAOrC;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG;IACrD,KAAK,EAAE,gBAAgB,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,KAAK,YAAY,KAAG,SAShD,CAAC;AAgDH,mDAAmD;AACnD,eAAO,MAAM,yBAAyB,GAAI,MAAM,mBAAmB,KAAG,KAAK,CAAC,SAAS,CAoIpF,CAAC"}

package/dist/auth/cell_grant_actions.js

@@ -31,11 +31,11 @@
  */
 import { rpc_action } from '../actions/action_rpc.js';
 import { jsonrpc_errors } from '../http/jsonrpc_errors.js';
-import { cell_grant_create_action_spec, cell_grant_revoke_action_spec, cell_grant_list_action_spec, ERROR_CELL_GRANT_NOT_FOUND, ERROR_CELL_GRANT_PRINCIPAL_IS_OWNER, ERROR_CELL_GRANT_UNKNOWN_ROLE, } from './cell_grant_action_specs.js';
+import { cell_grant_create_action_spec, cell_grant_revoke_action_spec, cell_grant_list_action_spec, ERROR_CELL_GRANT_NOT_FOUND, ERROR_CELL_GRANT_PRINCIPAL_IS_OWNER, ERROR_CELL_GRANT_UNKNOWN_ROLE } from './cell_grant_action_specs.js';
 import { ERROR_CELL_NOT_FOUND } from './cell_action_specs.js';
 import { can_view_cell, can_manage_cell } from './cell_authorize.js';
 import { query_cell_get } from '../db/cell_queries.js';
-import { query_cell_grant_create, query_cell_grant_get, query_cell_grant_delete, query_cell_grant_list_for_cell, } from '../db/cell_grant_queries.js';
+import { query_cell_grant_create, query_cell_grant_get, query_cell_grant_delete, query_cell_grant_list_for_cell } from '../db/cell_grant_queries.js';
 export const to_grant_json = (row) => ({
     id: row.id,
     cell_id: row.cell_id,
@@ -44,7 +44,7 @@ export const to_grant_json = (row) => ({
     role: row.role,
     scope_id: row.scope_id,
     granted_by: row.granted_by,
-    created_at: typeof row.created_at === 'string' ? row.created_at : row.created_at.toISOString(),
+    created_at: typeof row.created_at === 'string' ? row.created_at : row.created_at.toISOString()
 });
 /**
  * Build the audit-metadata principal envelope from a `cell_grant` row.
@@ -65,7 +65,7 @@ const to_query_principal = (principal) => {
     return {
         kind: 'role',
         role: principal.role,
-        scope_id: principal.scope_id ?? null,
+        scope_id: principal.scope_id ?? null
     };
 };
 /**
@@ -81,7 +81,7 @@ const assert_principal_is_not_owner = (cell, principal) => {
         return;
     if (cell.created_by === principal.actor_id) {
         throw jsonrpc_errors.invalid_params('grant principal is the cell owner', {
-            reason: ERROR_CELL_GRANT_PRINCIPAL_IS_OWNER,
+            reason: ERROR_CELL_GRANT_PRINCIPAL_IS_OWNER
         });
     }
 };
@@ -110,7 +110,7 @@ export const create_cell_grant_actions = (deps) => {
         // before insert so dead grant rows nothing can match are foreclosed.
         if (principal.kind === 'role' && !roles.role_specs.has(principal.role)) {
             throw jsonrpc_errors.invalid_params(`unknown role "${principal.role}"`, {
-                reason: ERROR_CELL_GRANT_UNKNOWN_ROLE,
+                reason: ERROR_CELL_GRANT_UNKNOWN_ROLE
             });
         }
         assert_principal_is_not_owner(cell, principal);
@@ -118,7 +118,7 @@ export const create_cell_grant_actions = (deps) => {
             cell_id: cell.id,
             level: input.level,
             principal,
-            granted_by: auth.actor.id,
+            granted_by: auth.actor.id
         });
         deps.audit.emit(ctx, {
             event_type: 'cell_grant_create',
@@ -129,8 +129,8 @@ export const create_cell_grant_actions = (deps) => {
                 cell_id: row.cell_id,
                 grant_id: row.id,
                 level: row.level,
-                principal: principal_from_row(row),
-            },
+                principal: principal_from_row(row)
+            }
         });
         return { grant: to_grant_json(row) };
     };
@@ -174,14 +174,14 @@ export const create_cell_grant_actions = (deps) => {
             grant_id: deleted.id,
             level: deleted.level,
             principal: principal_from_row(deleted),
-            ...(is_self_actor_grant ? { self: true } : {}),
+            ...(is_self_actor_grant ? { self: true } : {})
         };
         deps.audit.emit(ctx, {
             event_type: 'cell_grant_revoke',
             actor_id: auth.actor.id,
             account_id: auth.account.id,
             ip: ctx.client_ip,
-            metadata: audit_metadata,
+            metadata: audit_metadata
         });
         return { ok: true, still_admitted };
     };
@@ -203,6 +203,6 @@ export const create_cell_grant_actions = (deps) => {
     return [
         rpc_action(cell_grant_create_action_spec, create_handler),
         rpc_action(cell_grant_revoke_action_spec, revoke_handler),
-        rpc_action(cell_grant_list_action_spec, list_handler),
+        rpc_action(cell_grant_list_action_spec, list_handler)
     ];
 };

package/dist/auth/cell_grant_audit_metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_grant_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;;;;mBAG1C,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE9F;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;iBAKvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAExF;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;iBAMvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"cell_grant_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;;;;mBAG1C,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE9F;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;iBAKvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAExF;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;iBAMvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/auth/cell_grant_audit_metadata.js

@@ -20,7 +20,7 @@ import { Uuid } from '@fuzdev/fuz_util/id.ts';
  */
 export const CellGrantPrincipalAuditMetadata = z.union([
     z.looseObject({ actor_id: Uuid }),
-    z.looseObject({ role: z.string(), scope_id: Uuid.nullable() }),
+    z.looseObject({ role: z.string(), scope_id: Uuid.nullable() })
 ]);
 /**
  * Metadata envelope for `cell_grant_create`.
@@ -34,7 +34,7 @@ export const CellGrantCreateAuditMetadata = z.looseObject({
     cell_id: Uuid,
     grant_id: Uuid,
     level: z.enum(['viewer', 'editor']),
-    principal: CellGrantPrincipalAuditMetadata,
+    principal: CellGrantPrincipalAuditMetadata
 });
 /**
  * Metadata envelope for `cell_grant_revoke`.
@@ -50,5 +50,5 @@ export const CellGrantRevokeAuditMetadata = z.looseObject({
     grant_id: Uuid,
     level: z.enum(['viewer', 'editor']),
     principal: CellGrantPrincipalAuditMetadata,
-    self: z.literal(true).optional(),
+    self: z.literal(true).optional()
 });

package/dist/auth/cell_item_action_specs.d.ts

@@ -15,8 +15,12 @@ export declare const ERROR_CELL_ITEM_LIST_REQUIRES_PARENT_OR_CHILD: "cell_item_l
 /**
  * Error reason — `(parent_id, position)` collision on `cell_item_insert`
  * or `cell_item_move`. Surfaces when two clients computed the same
- * fractional-indexing key (rare given helper-side jitter; the safety
- * net for the residual race). Client refreshes its bracket and retries.
+ * fractional-indexing key (rare given helper-side jitter, which is on by
+ * default; the safety net for the residual race). A client that opts out
+ * with `{jitter: false}` gets bare deterministic mids, so two of them
+ * racing the same bracket collide every time and this stops being rare —
+ * that mode is for reproducible callers (seeders, fixtures), not concurrent
+ * ones. Client refreshes its bracket and retries.
  */
 export declare const ERROR_CELL_ITEM_POSITION_TAKEN: "cell_item_position_taken";
 /**

package/dist/auth/cell_item_action_specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_item_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_item_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAYtB,8EAA8E;AAC9E,eAAO,MAAM,6CAA6C,EACzD,yCAAkD,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,EAAG,0BAAmC,CAAC;AAIlF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,4DAKF,CAAC;AAC5B,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;;;GASG;AACH,eAAO,MAAM,QAAQ;;;;;kBAKnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAIhD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;kBAO9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;;;;;kBAAmC,CAAC;AACrE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIxE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;kBAK5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;kBAAmC,CAAC;AACnE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,gEAAgE;AAChE,eAAO,MAAM,mBAAmB;;;;kBAI9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;kBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIxE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB;;;;;;kBAmB3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;kBAE7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;CAWJ,CAAC;AAEtC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;CAWF,CAAC;AAEtC,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;CAWJ,CAAC;AAEtC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYF,CAAC;AAEtC,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK7B,CAAC"}
+{"version":3,"file":"cell_item_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_item_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,8EAA8E;AAC9E,eAAO,MAAM,6CAA6C,EACzD,yCAAkD,CAAC;AAEpD;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,EAAG,0BAAmC,CAAC;AAIlF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,4DAKF,CAAC;AAC5B,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;;;GASG;AACH,eAAO,MAAM,QAAQ;;;;;kBAKnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAIhD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;kBAO9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;;;;;kBAAqC,CAAC;AACvE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIxE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;kBAK5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;kBAAqC,CAAC;AACrE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,gEAAgE;AAChE,eAAO,MAAM,mBAAmB;;;;kBAI9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;kBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIxE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB;;;;;;kBAmB3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;kBAE7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;CAWJ,CAAC;AAEtC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;CAWF,CAAC;AAEtC,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;CAWJ,CAAC;AAEtC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYF,CAAC;AAEtC,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK7B,CAAC"}

package/dist/auth/cell_item_action_specs.js

@@ -11,7 +11,7 @@
  */
 import { z } from 'zod';
 import { Uuid } from '@fuzdev/fuz_util/id.ts';
-import { FRACTIONAL_INDEX_LENGTH_MAX, FRACTIONAL_INDEX_REGEX, } from '@fuzdev/fuz_util/fractional_index.ts';
+import { FRACTIONAL_INDEX_LENGTH_MAX, FRACTIONAL_INDEX_REGEX } from '@fuzdev/fuz_util/fractional_index.ts';
 import { ActingActor } from '../http/auth_shape.js';
 // -- Error reasons ----------------------------------------------------------
 /** Error reason — `cell_item_list` got neither `parent_id` nor `child_id`. */
@@ -19,8 +19,12 @@ export const ERROR_CELL_ITEM_LIST_REQUIRES_PARENT_OR_CHILD = 'cell_item_list_req
 /**
  * Error reason — `(parent_id, position)` collision on `cell_item_insert`
  * or `cell_item_move`. Surfaces when two clients computed the same
- * fractional-indexing key (rare given helper-side jitter; the safety
- * net for the residual race). Client refreshes its bracket and retries.
+ * fractional-indexing key (rare given helper-side jitter, which is on by
+ * default; the safety net for the residual race). A client that opts out
+ * with `{jitter: false}` gets bare deterministic mids, so two of them
+ * racing the same bracket collide every time and this stops being rare —
+ * that mode is for reproducible callers (seeders, fixtures), not concurrent
+ * ones. Client refreshes its bracket and retries.
  */
 export const ERROR_CELL_ITEM_POSITION_TAKEN = 'cell_item_position_taken';
 // -- Shared schemas ---------------------------------------------------------
@@ -52,7 +56,7 @@ export const ItemJson = z.strictObject({
     parent_id: Uuid,
     position: CellItemPosition,
     child_id: Uuid,
-    created_at: z.string(),
+    created_at: z.string()
 });
 // -- cell_item_insert -------------------------------------------------------
 /**
@@ -65,9 +69,9 @@ export const CellItemInsertInput = z.strictObject({
     parent_id: Uuid.meta({ description: 'Cell to insert into.' }),
     child_id: Uuid.meta({ description: 'Cell to insert as a child.' }),
     position: CellItemPosition.meta({
-        description: 'Fractional-indexing key. Client-computed via `fractional_index_between`.',
+        description: 'Fractional-indexing key. Client-computed via `fractional_index_between`.'
     }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellItemInsertOutput = z.strictObject({ item: ItemJson });
 // -- cell_item_move ---------------------------------------------------------
@@ -79,7 +83,7 @@ export const CellItemMoveInput = z.strictObject({
     parent_id: Uuid.meta({ description: 'Parent cell.' }),
     position: CellItemPosition.meta({ description: 'Current position of the row to move.' }),
     new_position: CellItemPosition.meta({ description: 'New fractional-indexing key.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellItemMoveOutput = z.strictObject({ item: ItemJson });
 // -- cell_item_delete -------------------------------------------------------
@@ -87,11 +91,11 @@ export const CellItemMoveOutput = z.strictObject({ item: ItemJson });
 export const CellItemDeleteInput = z.strictObject({
     parent_id: Uuid.meta({ description: 'Parent cell.' }),
     position: CellItemPosition.meta({ description: 'Slot to delete.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellItemDeleteOutput = z.strictObject({
     ok: z.literal(true),
-    deleted: z.boolean(),
+    deleted: z.boolean()
 });
 // -- cell_item_list ---------------------------------------------------------
 /**
@@ -108,24 +112,24 @@ export const CellItemDeleteOutput = z.strictObject({
 export const CellItemListInput = z
     .strictObject({
     parent_id: Uuid.optional().meta({
-        description: 'List forward items whose parent is this cell.',
+        description: 'List forward items whose parent is this cell.'
     }),
     child_id: Uuid.optional().meta({
-        description: 'List reverse parents whose child is this cell.',
+        description: 'List reverse parents whose child is this cell.'
     }),
     position_after: CellItemPosition.optional().meta({
-        description: 'Cursor for forward pagination — return rows whose position > this.',
+        description: 'Cursor for forward pagination — return rows whose position > this.'
     }),
     limit: z.number().int().positive().max(500).optional().meta({
-        description: 'Page size cap (max 500). Omit for unbounded — explicit list calls escape the bundled `cell_get` cap.',
+        description: 'Page size cap (max 500). Omit for unbounded — explicit list calls escape the bundled `cell_get` cap.'
     }),
-    acting: ActingActor,
+    acting: ActingActor
 })
     .refine((v) => Boolean(v.parent_id) !== Boolean(v.child_id), {
-    message: ERROR_CELL_ITEM_LIST_REQUIRES_PARENT_OR_CHILD,
+    message: ERROR_CELL_ITEM_LIST_REQUIRES_PARENT_OR_CHILD
 });
 export const CellItemListOutput = z.strictObject({
-    items: z.array(ItemJson),
+    items: z.array(ItemJson)
 });
 // -- Action specs -----------------------------------------------------------
 export const cell_item_insert_action_spec = {
@@ -137,7 +141,7 @@ export const cell_item_insert_action_spec = {
     input: CellItemInsertInput,
     output: CellItemInsertOutput,
     async: true,
-    description: 'Insert a cell as an ordered child at `position` under `parent`. Caller must be able to edit `parent` and view `child`. Returns `cell_item_position_taken` on `(parent_id, position)` unique violation; client refreshes bracket and retries.',
+    description: 'Insert a cell as an ordered child at `position` under `parent`. Caller must be able to edit `parent` and view `child`. Returns `cell_item_position_taken` on `(parent_id, position)` unique violation; client refreshes bracket and retries.'
 };
 export const cell_item_move_action_spec = {
     method: 'cell_item_move',
@@ -148,7 +152,7 @@ export const cell_item_move_action_spec = {
     input: CellItemMoveInput,
     output: CellItemMoveOutput,
     async: true,
-    description: 'Move an item within its parent to a new position. Caller must be able to edit `parent`. Returns `cell_item_position_taken` on the new-position unique violation.',
+    description: 'Move an item within its parent to a new position. Caller must be able to edit `parent`. Returns `cell_item_position_taken` on the new-position unique violation.'
 };
 export const cell_item_delete_action_spec = {
     method: 'cell_item_delete',
@@ -159,7 +163,7 @@ export const cell_item_delete_action_spec = {
     input: CellItemDeleteInput,
     output: CellItemDeleteOutput,
     async: true,
-    description: 'Delete the item at `(parent, position)`. Idempotent — `deleted: false` when no row matched. Caller must be able to edit `parent`.',
+    description: 'Delete the item at `(parent, position)`. Idempotent — `deleted: false` when no row matched. Caller must be able to edit `parent`.'
 };
 export const cell_item_list_action_spec = {
     method: 'cell_item_list',
@@ -171,12 +175,12 @@ export const cell_item_list_action_spec = {
     output: CellItemListOutput,
     async: true,
     rate_limit: 'ip',
-    description: 'List forward items (pass `parent_id`) or reverse parents (pass `child_id`). Forward listing filters children to those the caller may view (strict target-visibility). Reverse listing has 2-layer authz: gate on `can_view_cell(child)` first (404 otherwise), then filter rows by per-parent `can_view_cell`. Per-IP rate-limited — symmetric with `cell_get` to bound public-surface id-walking.',
+    description: 'List forward items (pass `parent_id`) or reverse parents (pass `child_id`). Forward listing filters children to those the caller may view (strict target-visibility). Reverse listing has 2-layer authz: gate on `can_view_cell(child)` first (404 otherwise), then filter rows by per-parent `can_view_cell`. Per-IP rate-limited — symmetric with `cell_get` to bound public-surface id-walking.'
 };
 /** All cell_item action specs — composed into `all_cell_action_specs`. */
 export const all_cell_item_action_specs = [
     cell_item_insert_action_spec,
     cell_item_move_action_spec,
     cell_item_delete_action_spec,
-    cell_item_list_action_spec,
+    cell_item_list_action_spec
 ];