@fuzdev/fuz_app 0.104.0 → 0.106.0

package/dist/auth/cell_grant_action_specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_grant_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAQtB,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,EAAG,+BAAwC,CAAC;AAE5F;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAIhF,iDAAiD;AACjD,eAAO,MAAM,cAAc;;;EAA+B,CAAC;AAC3D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;4BAYlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;kBASpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAIlD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;kBAO/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;kBAAqC,CAAC;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,oBAAoB;;;kBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;kBAGhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,kBAAkB;;;kBAG7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;kBAE9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAItE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWL,CAAC;AAEtC,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;CAWL,CAAC;AAEtC,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWH,CAAC;AAEtC,2EAA2E;AAC3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI9B,CAAC"}
+{"version":3,"file":"cell_grant_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,EAAG,+BAAwC,CAAC;AAE5F;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAIhF,iDAAiD;AACjD,eAAO,MAAM,cAAc;;;EAA+B,CAAC;AAC3D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;4BAYlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;kBASpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAIlD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;kBAO/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;kBAAuC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,oBAAoB;;;kBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;kBAGhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,kBAAkB;;;kBAG7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;kBAE9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAItE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWL,CAAC;AAEtC,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;CAWL,CAAC;AAEtC,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWH,CAAC;AAEtC,2EAA2E;AAC3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI9B,CAAC"}

package/dist/auth/cell_grant_action_specs.js

@@ -43,15 +43,15 @@ export const CellGrantLevel = z.enum(['viewer', 'editor']);
 export const CellGrantPrincipalInput = z.discriminatedUnion('kind', [
     z.strictObject({
         kind: z.literal('actor'),
-        actor_id: Uuid,
+        actor_id: Uuid
     }),
     z.strictObject({
         kind: z.literal('role'),
         role: z.string().min(1),
         scope_id: Uuid.nullish().meta({
-            description: '`null` / omitted = any-scope grant (admits any matching-role role_grant).',
-        }),
-    }),
+            description: '`null` / omitted = any-scope grant (admits any matching-role role_grant).'
+        })
+    })
 ]);
 /**
  * Wire-format for a cell_grant row. Mirrors `CellJson`'s shape — ISO-string
@@ -66,7 +66,7 @@ export const GrantJson = z.strictObject({
     role: z.string().nullable(),
     scope_id: Uuid.nullable(),
     granted_by: Uuid.nullable(),
-    created_at: z.string(),
+    created_at: z.string()
 });
 // -- cell_grant_create ------------------------------------------------------
 /**
@@ -78,15 +78,15 @@ export const CellGrantCreateInput = z.strictObject({
     cell_id: Uuid.meta({ description: 'Cell to grant access on.' }),
     level: CellGrantLevel.meta({ description: 'Grant level: `viewer` or `editor`.' }),
     principal: CellGrantPrincipalInput.meta({
-        description: 'Subject of the grant. Discriminated by `kind`.',
+        description: 'Subject of the grant. Discriminated by `kind`.'
     }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellGrantCreateOutput = z.strictObject({ grant: GrantJson });
 // -- cell_grant_revoke ------------------------------------------------------
 export const CellGrantRevokeInput = z.strictObject({
     grant_id: Uuid.meta({ description: 'Grant to revoke.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 /**
  * Output for `cell_grant_revoke`. `still_admitted` is `true` when the
@@ -96,15 +96,15 @@ export const CellGrantRevokeInput = z.strictObject({
  */
 export const CellGrantRevokeOutput = z.strictObject({
     ok: z.literal(true),
-    still_admitted: z.boolean(),
+    still_admitted: z.boolean()
 });
 // -- cell_grant_list --------------------------------------------------------
 export const CellGrantListInput = z.strictObject({
     cell_id: Uuid.meta({ description: 'Cell whose grants to list.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellGrantListOutput = z.strictObject({
-    grants: z.array(GrantJson),
+    grants: z.array(GrantJson)
 });
 // -- Action specs -----------------------------------------------------------
 export const cell_grant_create_action_spec = {
@@ -116,7 +116,7 @@ export const cell_grant_create_action_spec = {
     input: CellGrantCreateInput,
     output: CellGrantCreateOutput,
     async: true,
-    description: 'Grant view or edit access on a cell. Manage-tier only (admin / owner) — editor-grant holders cannot manage grants. Idempotent on `(cell_id, principal)`. Owner-as-principal rejected. Actor-shaped principals carry a pre-resolved `actor_id` (callers pick via `actor_search`); no name resolver on this verb.',
+    description: 'Grant view or edit access on a cell. Manage-tier only (admin / owner) — editor-grant holders cannot manage grants. Idempotent on `(cell_id, principal)`. Owner-as-principal rejected. Actor-shaped principals carry a pre-resolved `actor_id` (callers pick via `actor_search`); no name resolver on this verb.'
 };
 export const cell_grant_revoke_action_spec = {
     method: 'cell_grant_revoke',
@@ -127,7 +127,7 @@ export const cell_grant_revoke_action_spec = {
     input: CellGrantRevokeInput,
     output: CellGrantRevokeOutput,
     async: true,
-    description: 'Revoke a grant. Manage-tier only (admin / owner), plus self for actor-shaped grants ("leave shared cell"). Returns `still_admitted` so the UI can tell the recipient whether other admit paths remain.',
+    description: 'Revoke a grant. Manage-tier only (admin / owner), plus self for actor-shaped grants ("leave shared cell"). Returns `still_admitted` so the UI can tell the recipient whether other admit paths remain.'
 };
 export const cell_grant_list_action_spec = {
     method: 'cell_grant_list',
@@ -138,11 +138,11 @@ export const cell_grant_list_action_spec = {
     input: CellGrantListInput,
     output: CellGrantListOutput,
     async: true,
-    description: "List grants on a cell. Manage-tier only (admin / owner); viewers and editors get IDOR-mask 404 (the share list is the manager's to curate).",
+    description: "List grants on a cell. Manage-tier only (admin / owner); viewers and editors get IDOR-mask 404 (the share list is the manager's to curate)."
 };
 /** All cell_grant action specs — composed into `all_cell_action_specs`. */
 export const all_cell_grant_action_specs = [
     cell_grant_create_action_spec,
     cell_grant_revoke_action_spec,
-    cell_grant_list_action_spec,
+    cell_grant_list_action_spec
 ];

package/dist/auth/cell_grant_actions.d.ts

@@ -31,7 +31,7 @@
  */
 import { type RpcAction } from '../actions/action_rpc.js';
 import type { RoleSchemaResult } from './role_schema.js';
-import type { RouteFactoryDeps } from './deps.js';
+import type { ActionFactoryDeps } from './deps.js';
 import { type GrantJson } from './cell_grant_action_specs.js';
 import { type CellGrantRow } from '../db/cell_grant_queries.js';
 /**
@@ -41,7 +41,7 @@ import { type CellGrantRow } from '../db/cell_grant_queries.js';
  * `cell_grant_create`. The other slots match `CellActionDeps` so
  * audit-log emit goes through the same fire-and-forget plumbing.
  */
-export type CellGrantActionDeps = Pick<RouteFactoryDeps, 'log' | 'audit'> & {
+export type CellGrantActionDeps = ActionFactoryDeps & {
     roles: RoleSchemaResult;
 };
 export declare const to_grant_json: (row: CellGrantRow) => GrantJson;

package/dist/auth/cell_grant_actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_grant_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAsC,KAAK,SAAS,EAAC,MAAM,0BAA0B,CAAC;AAE7F,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAEhD,OAAO,EAaN,KAAK,SAAS,EACd,MAAM,8BAA8B,CAAC;AAItC,OAAO,EAKN,KAAK,YAAY,EAEjB,MAAM,6BAA6B,CAAC;AAOrC;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG;IAC3E,KAAK,EAAE,gBAAgB,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,KAAK,YAAY,KAAG,SAShD,CAAC;AAgDH,mDAAmD;AACnD,eAAO,MAAM,yBAAyB,GAAI,MAAM,mBAAmB,KAAG,KAAK,CAAC,SAAS,CAoIpF,CAAC"}
+{"version":3,"file":"cell_grant_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE/F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAaN,KAAK,SAAS,EACd,MAAM,8BAA8B,CAAC;AAItC,OAAO,EAKN,KAAK,YAAY,EAEjB,MAAM,6BAA6B,CAAC;AAOrC;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG;IACrD,KAAK,EAAE,gBAAgB,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,KAAK,YAAY,KAAG,SAShD,CAAC;AAgDH,mDAAmD;AACnD,eAAO,MAAM,yBAAyB,GAAI,MAAM,mBAAmB,KAAG,KAAK,CAAC,SAAS,CAoIpF,CAAC"}

package/dist/auth/cell_grant_actions.js

@@ -31,11 +31,11 @@
  */
 import { rpc_action } from '../actions/action_rpc.js';
 import { jsonrpc_errors } from '../http/jsonrpc_errors.js';
-import { cell_grant_create_action_spec, cell_grant_revoke_action_spec, cell_grant_list_action_spec, ERROR_CELL_GRANT_NOT_FOUND, ERROR_CELL_GRANT_PRINCIPAL_IS_OWNER, ERROR_CELL_GRANT_UNKNOWN_ROLE, } from './cell_grant_action_specs.js';
+import { cell_grant_create_action_spec, cell_grant_revoke_action_spec, cell_grant_list_action_spec, ERROR_CELL_GRANT_NOT_FOUND, ERROR_CELL_GRANT_PRINCIPAL_IS_OWNER, ERROR_CELL_GRANT_UNKNOWN_ROLE } from './cell_grant_action_specs.js';
 import { ERROR_CELL_NOT_FOUND } from './cell_action_specs.js';
 import { can_view_cell, can_manage_cell } from './cell_authorize.js';
 import { query_cell_get } from '../db/cell_queries.js';
-import { query_cell_grant_create, query_cell_grant_get, query_cell_grant_delete, query_cell_grant_list_for_cell, } from '../db/cell_grant_queries.js';
+import { query_cell_grant_create, query_cell_grant_get, query_cell_grant_delete, query_cell_grant_list_for_cell } from '../db/cell_grant_queries.js';
 export const to_grant_json = (row) => ({
     id: row.id,
     cell_id: row.cell_id,
@@ -44,7 +44,7 @@ export const to_grant_json = (row) => ({
     role: row.role,
     scope_id: row.scope_id,
     granted_by: row.granted_by,
-    created_at: typeof row.created_at === 'string' ? row.created_at : row.created_at.toISOString(),
+    created_at: typeof row.created_at === 'string' ? row.created_at : row.created_at.toISOString()
 });
 /**
  * Build the audit-metadata principal envelope from a `cell_grant` row.
@@ -65,7 +65,7 @@ const to_query_principal = (principal) => {
     return {
         kind: 'role',
         role: principal.role,
-        scope_id: principal.scope_id ?? null,
+        scope_id: principal.scope_id ?? null
     };
 };
 /**
@@ -81,7 +81,7 @@ const assert_principal_is_not_owner = (cell, principal) => {
         return;
     if (cell.created_by === principal.actor_id) {
         throw jsonrpc_errors.invalid_params('grant principal is the cell owner', {
-            reason: ERROR_CELL_GRANT_PRINCIPAL_IS_OWNER,
+            reason: ERROR_CELL_GRANT_PRINCIPAL_IS_OWNER
         });
     }
 };
@@ -110,7 +110,7 @@ export const create_cell_grant_actions = (deps) => {
         // before insert so dead grant rows nothing can match are foreclosed.
         if (principal.kind === 'role' && !roles.role_specs.has(principal.role)) {
             throw jsonrpc_errors.invalid_params(`unknown role "${principal.role}"`, {
-                reason: ERROR_CELL_GRANT_UNKNOWN_ROLE,
+                reason: ERROR_CELL_GRANT_UNKNOWN_ROLE
             });
         }
         assert_principal_is_not_owner(cell, principal);
@@ -118,7 +118,7 @@ export const create_cell_grant_actions = (deps) => {
             cell_id: cell.id,
             level: input.level,
             principal,
-            granted_by: auth.actor.id,
+            granted_by: auth.actor.id
         });
         deps.audit.emit(ctx, {
             event_type: 'cell_grant_create',
@@ -129,8 +129,8 @@ export const create_cell_grant_actions = (deps) => {
                 cell_id: row.cell_id,
                 grant_id: row.id,
                 level: row.level,
-                principal: principal_from_row(row),
-            },
+                principal: principal_from_row(row)
+            }
         });
         return { grant: to_grant_json(row) };
     };
@@ -174,14 +174,14 @@ export const create_cell_grant_actions = (deps) => {
             grant_id: deleted.id,
             level: deleted.level,
             principal: principal_from_row(deleted),
-            ...(is_self_actor_grant ? { self: true } : {}),
+            ...(is_self_actor_grant ? { self: true } : {})
         };
         deps.audit.emit(ctx, {
             event_type: 'cell_grant_revoke',
             actor_id: auth.actor.id,
             account_id: auth.account.id,
             ip: ctx.client_ip,
-            metadata: audit_metadata,
+            metadata: audit_metadata
         });
         return { ok: true, still_admitted };
     };
@@ -203,6 +203,6 @@ export const create_cell_grant_actions = (deps) => {
     return [
         rpc_action(cell_grant_create_action_spec, create_handler),
         rpc_action(cell_grant_revoke_action_spec, revoke_handler),
-        rpc_action(cell_grant_list_action_spec, list_handler),
+        rpc_action(cell_grant_list_action_spec, list_handler)
     ];
 };

package/dist/auth/cell_grant_audit_metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_grant_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;;;;mBAG1C,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE9F;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;iBAKvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAExF;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;iBAMvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"cell_grant_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_grant_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;;;;mBAG1C,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE9F;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;iBAKvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAExF;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;iBAMvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/auth/cell_grant_audit_metadata.js

@@ -20,7 +20,7 @@ import { Uuid } from '@fuzdev/fuz_util/id.ts';
  */
 export const CellGrantPrincipalAuditMetadata = z.union([
     z.looseObject({ actor_id: Uuid }),
-    z.looseObject({ role: z.string(), scope_id: Uuid.nullable() }),
+    z.looseObject({ role: z.string(), scope_id: Uuid.nullable() })
 ]);
 /**
  * Metadata envelope for `cell_grant_create`.
@@ -34,7 +34,7 @@ export const CellGrantCreateAuditMetadata = z.looseObject({
     cell_id: Uuid,
     grant_id: Uuid,
     level: z.enum(['viewer', 'editor']),
-    principal: CellGrantPrincipalAuditMetadata,
+    principal: CellGrantPrincipalAuditMetadata
 });
 /**
  * Metadata envelope for `cell_grant_revoke`.
@@ -50,5 +50,5 @@ export const CellGrantRevokeAuditMetadata = z.looseObject({
     grant_id: Uuid,
     level: z.enum(['viewer', 'editor']),
     principal: CellGrantPrincipalAuditMetadata,
-    self: z.literal(true).optional(),
+    self: z.literal(true).optional()
 });

package/dist/auth/cell_item_action_specs.d.ts

@@ -15,8 +15,12 @@ export declare const ERROR_CELL_ITEM_LIST_REQUIRES_PARENT_OR_CHILD: "cell_item_l
 /**
  * Error reason — `(parent_id, position)` collision on `cell_item_insert`
  * or `cell_item_move`. Surfaces when two clients computed the same
- * fractional-indexing key (rare given helper-side jitter; the safety
- * net for the residual race). Client refreshes its bracket and retries.
+ * fractional-indexing key (rare given helper-side jitter, which is on by
+ * default; the safety net for the residual race). A client that opts out
+ * with `{jitter: false}` gets bare deterministic mids, so two of them
+ * racing the same bracket collide every time and this stops being rare —
+ * that mode is for reproducible callers (seeders, fixtures), not concurrent
+ * ones. Client refreshes its bracket and retries.
  */
 export declare const ERROR_CELL_ITEM_POSITION_TAKEN: "cell_item_position_taken";
 /**

package/dist/auth/cell_item_action_specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_item_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_item_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAYtB,8EAA8E;AAC9E,eAAO,MAAM,6CAA6C,EACzD,yCAAkD,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,EAAG,0BAAmC,CAAC;AAIlF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,4DAKF,CAAC;AAC5B,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;;;GASG;AACH,eAAO,MAAM,QAAQ;;;;;kBAKnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAIhD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;kBAO9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;;;;;kBAAmC,CAAC;AACrE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIxE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;kBAK5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;kBAAmC,CAAC;AACnE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,gEAAgE;AAChE,eAAO,MAAM,mBAAmB;;;;kBAI9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;kBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIxE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB;;;;;;kBAmB3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;kBAE7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;CAWJ,CAAC;AAEtC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;CAWF,CAAC;AAEtC,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;CAWJ,CAAC;AAEtC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYF,CAAC;AAEtC,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK7B,CAAC"}
+{"version":3,"file":"cell_item_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_item_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,8EAA8E;AAC9E,eAAO,MAAM,6CAA6C,EACzD,yCAAkD,CAAC;AAEpD;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,EAAG,0BAAmC,CAAC;AAIlF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,4DAKF,CAAC;AAC5B,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;;;GASG;AACH,eAAO,MAAM,QAAQ;;;;;kBAKnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAIhD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;kBAO9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;;;;;kBAAqC,CAAC;AACvE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIxE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;kBAK5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;kBAAqC,CAAC;AACrE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,gEAAgE;AAChE,eAAO,MAAM,mBAAmB;;;;kBAI9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;kBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIxE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB;;;;;;kBAmB3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;kBAE7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;CAWJ,CAAC;AAEtC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;CAWF,CAAC;AAEtC,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;CAWJ,CAAC;AAEtC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYF,CAAC;AAEtC,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK7B,CAAC"}

package/dist/auth/cell_item_action_specs.js

@@ -11,7 +11,7 @@
  */
 import { z } from 'zod';
 import { Uuid } from '@fuzdev/fuz_util/id.ts';
-import { FRACTIONAL_INDEX_LENGTH_MAX, FRACTIONAL_INDEX_REGEX, } from '@fuzdev/fuz_util/fractional_index.ts';
+import { FRACTIONAL_INDEX_LENGTH_MAX, FRACTIONAL_INDEX_REGEX } from '@fuzdev/fuz_util/fractional_index.ts';
 import { ActingActor } from '../http/auth_shape.js';
 // -- Error reasons ----------------------------------------------------------
 /** Error reason — `cell_item_list` got neither `parent_id` nor `child_id`. */
@@ -19,8 +19,12 @@ export const ERROR_CELL_ITEM_LIST_REQUIRES_PARENT_OR_CHILD = 'cell_item_list_req
 /**
  * Error reason — `(parent_id, position)` collision on `cell_item_insert`
  * or `cell_item_move`. Surfaces when two clients computed the same
- * fractional-indexing key (rare given helper-side jitter; the safety
- * net for the residual race). Client refreshes its bracket and retries.
+ * fractional-indexing key (rare given helper-side jitter, which is on by
+ * default; the safety net for the residual race). A client that opts out
+ * with `{jitter: false}` gets bare deterministic mids, so two of them
+ * racing the same bracket collide every time and this stops being rare —
+ * that mode is for reproducible callers (seeders, fixtures), not concurrent
+ * ones. Client refreshes its bracket and retries.
  */
 export const ERROR_CELL_ITEM_POSITION_TAKEN = 'cell_item_position_taken';
 // -- Shared schemas ---------------------------------------------------------
@@ -52,7 +56,7 @@ export const ItemJson = z.strictObject({
     parent_id: Uuid,
     position: CellItemPosition,
     child_id: Uuid,
-    created_at: z.string(),
+    created_at: z.string()
 });
 // -- cell_item_insert -------------------------------------------------------
 /**
@@ -65,9 +69,9 @@ export const CellItemInsertInput = z.strictObject({
     parent_id: Uuid.meta({ description: 'Cell to insert into.' }),
     child_id: Uuid.meta({ description: 'Cell to insert as a child.' }),
     position: CellItemPosition.meta({
-        description: 'Fractional-indexing key. Client-computed via `fractional_index_between`.',
+        description: 'Fractional-indexing key. Client-computed via `fractional_index_between`.'
     }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellItemInsertOutput = z.strictObject({ item: ItemJson });
 // -- cell_item_move ---------------------------------------------------------
@@ -79,7 +83,7 @@ export const CellItemMoveInput = z.strictObject({
     parent_id: Uuid.meta({ description: 'Parent cell.' }),
     position: CellItemPosition.meta({ description: 'Current position of the row to move.' }),
     new_position: CellItemPosition.meta({ description: 'New fractional-indexing key.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellItemMoveOutput = z.strictObject({ item: ItemJson });
 // -- cell_item_delete -------------------------------------------------------
@@ -87,11 +91,11 @@ export const CellItemMoveOutput = z.strictObject({ item: ItemJson });
 export const CellItemDeleteInput = z.strictObject({
     parent_id: Uuid.meta({ description: 'Parent cell.' }),
     position: CellItemPosition.meta({ description: 'Slot to delete.' }),
-    acting: ActingActor,
+    acting: ActingActor
 });
 export const CellItemDeleteOutput = z.strictObject({
     ok: z.literal(true),
-    deleted: z.boolean(),
+    deleted: z.boolean()
 });
 // -- cell_item_list ---------------------------------------------------------
 /**
@@ -108,24 +112,24 @@ export const CellItemDeleteOutput = z.strictObject({
 export const CellItemListInput = z
     .strictObject({
     parent_id: Uuid.optional().meta({
-        description: 'List forward items whose parent is this cell.',
+        description: 'List forward items whose parent is this cell.'
     }),
     child_id: Uuid.optional().meta({
-        description: 'List reverse parents whose child is this cell.',
+        description: 'List reverse parents whose child is this cell.'
     }),
     position_after: CellItemPosition.optional().meta({
-        description: 'Cursor for forward pagination — return rows whose position > this.',
+        description: 'Cursor for forward pagination — return rows whose position > this.'
     }),
     limit: z.number().int().positive().max(500).optional().meta({
-        description: 'Page size cap (max 500). Omit for unbounded — explicit list calls escape the bundled `cell_get` cap.',
+        description: 'Page size cap (max 500). Omit for unbounded — explicit list calls escape the bundled `cell_get` cap.'
     }),
-    acting: ActingActor,
+    acting: ActingActor
 })
     .refine((v) => Boolean(v.parent_id) !== Boolean(v.child_id), {
-    message: ERROR_CELL_ITEM_LIST_REQUIRES_PARENT_OR_CHILD,
+    message: ERROR_CELL_ITEM_LIST_REQUIRES_PARENT_OR_CHILD
 });
 export const CellItemListOutput = z.strictObject({
-    items: z.array(ItemJson),
+    items: z.array(ItemJson)
 });
 // -- Action specs -----------------------------------------------------------
 export const cell_item_insert_action_spec = {
@@ -137,7 +141,7 @@ export const cell_item_insert_action_spec = {
     input: CellItemInsertInput,
     output: CellItemInsertOutput,
     async: true,
-    description: 'Insert a cell as an ordered child at `position` under `parent`. Caller must be able to edit `parent` and view `child`. Returns `cell_item_position_taken` on `(parent_id, position)` unique violation; client refreshes bracket and retries.',
+    description: 'Insert a cell as an ordered child at `position` under `parent`. Caller must be able to edit `parent` and view `child`. Returns `cell_item_position_taken` on `(parent_id, position)` unique violation; client refreshes bracket and retries.'
 };
 export const cell_item_move_action_spec = {
     method: 'cell_item_move',
@@ -148,7 +152,7 @@ export const cell_item_move_action_spec = {
     input: CellItemMoveInput,
     output: CellItemMoveOutput,
     async: true,
-    description: 'Move an item within its parent to a new position. Caller must be able to edit `parent`. Returns `cell_item_position_taken` on the new-position unique violation.',
+    description: 'Move an item within its parent to a new position. Caller must be able to edit `parent`. Returns `cell_item_position_taken` on the new-position unique violation.'
 };
 export const cell_item_delete_action_spec = {
     method: 'cell_item_delete',
@@ -159,7 +163,7 @@ export const cell_item_delete_action_spec = {
     input: CellItemDeleteInput,
     output: CellItemDeleteOutput,
     async: true,
-    description: 'Delete the item at `(parent, position)`. Idempotent — `deleted: false` when no row matched. Caller must be able to edit `parent`.',
+    description: 'Delete the item at `(parent, position)`. Idempotent — `deleted: false` when no row matched. Caller must be able to edit `parent`.'
 };
 export const cell_item_list_action_spec = {
     method: 'cell_item_list',
@@ -171,12 +175,12 @@ export const cell_item_list_action_spec = {
     output: CellItemListOutput,
     async: true,
     rate_limit: 'ip',
-    description: 'List forward items (pass `parent_id`) or reverse parents (pass `child_id`). Forward listing filters children to those the caller may view (strict target-visibility). Reverse listing has 2-layer authz: gate on `can_view_cell(child)` first (404 otherwise), then filter rows by per-parent `can_view_cell`. Per-IP rate-limited — symmetric with `cell_get` to bound public-surface id-walking.',
+    description: 'List forward items (pass `parent_id`) or reverse parents (pass `child_id`). Forward listing filters children to those the caller may view (strict target-visibility). Reverse listing has 2-layer authz: gate on `can_view_cell(child)` first (404 otherwise), then filter rows by per-parent `can_view_cell`. Per-IP rate-limited — symmetric with `cell_get` to bound public-surface id-walking.'
 };
 /** All cell_item action specs — composed into `all_cell_action_specs`. */
 export const all_cell_item_action_specs = [
     cell_item_insert_action_spec,
     cell_item_move_action_spec,
     cell_item_delete_action_spec,
-    cell_item_list_action_spec,
+    cell_item_list_action_spec
 ];

package/dist/auth/cell_item_actions.d.ts

@@ -27,10 +27,10 @@
  * @module
  */
 import { type RpcAction } from '../actions/action_rpc.js';
-import type { RouteFactoryDeps } from './deps.js';
+import type { ActionFactoryDeps } from './deps.js';
 import { type ItemJson } from './cell_item_action_specs.js';
 import { type CellItemRow } from '../db/cell_item_queries.js';
-export type CellItemActionDeps = Pick<RouteFactoryDeps, 'log' | 'audit'>;
+export type CellItemActionDeps = ActionFactoryDeps;
 export declare const to_item_json: (row: CellItemRow) => ItemJson;
 /** Create the four `cell_item_*` RPC actions. */
 export declare const create_cell_item_actions: (deps: CellItemActionDeps) => Array<RpcAction>;

package/dist/auth/cell_item_actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_item_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_item_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAIN,KAAK,SAAS,EACd,MAAM,0BAA0B,CAAC;AAGlC,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAEhD,OAAO,EAeN,KAAK,QAAQ,EACb,MAAM,6BAA6B,CAAC;AAMrC,OAAO,EAMN,KAAK,WAAW,EAChB,MAAM,4BAA4B,CAAC;AAOpC,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,OAAO,CAAC,CAAC;AAEzE,eAAO,MAAM,YAAY,GAAI,KAAK,WAAW,KAAG,QAS9C,CAAC;AAOH,iDAAiD;AACjD,eAAO,MAAM,wBAAwB,GAAI,MAAM,kBAAkB,KAAG,KAAK,CAAC,SAAS,CA2KlF,CAAC"}
+{"version":3,"file":"cell_item_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_item_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAIN,KAAK,SAAS,EACd,MAAM,0BAA0B,CAAC;AAGlC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAeN,KAAK,QAAQ,EACb,MAAM,6BAA6B,CAAC;AAMrC,OAAO,EAMN,KAAK,WAAW,EAChB,MAAM,4BAA4B,CAAC;AAOpC,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD,eAAO,MAAM,YAAY,GAAI,KAAK,WAAW,KAAG,QAS9C,CAAC;AAOH,iDAAiD;AACjD,eAAO,MAAM,wBAAwB,GAAI,MAAM,kBAAkB,KAAG,KAAK,CAAC,SAAS,CA2KlF,CAAC"}

package/dist/auth/cell_item_actions.js

@@ -26,16 +26,16 @@
  *
  * @module
  */
-import { rpc_action, } from '../actions/action_rpc.js';
+import { rpc_action } from '../actions/action_rpc.js';
 import { jsonrpc_errors } from '../http/jsonrpc_errors.js';
 import { is_pg_unique_violation } from '../db/pg_error.js';
-import { cell_item_insert_action_spec, cell_item_move_action_spec, cell_item_delete_action_spec, cell_item_list_action_spec, ERROR_CELL_ITEM_POSITION_TAKEN, } from './cell_item_action_specs.js';
+import { cell_item_insert_action_spec, cell_item_move_action_spec, cell_item_delete_action_spec, cell_item_list_action_spec, ERROR_CELL_ITEM_POSITION_TAKEN } from './cell_item_action_specs.js';
 import { ERROR_CELL_NOT_FOUND } from './cell_action_specs.js';
 import { can_view_cell, can_edit_cell } from './cell_authorize.js';
 import { filter_visible_target_ids } from './cell_relation_visibility.js';
 import { query_cell_get } from '../db/cell_queries.js';
 import { query_cell_grant_list_for_cell } from '../db/cell_grant_queries.js';
-import { query_cell_item_insert, query_cell_item_move, query_cell_item_delete, query_cell_item_list_for_parent, query_cell_item_list_for_child, } from '../db/cell_item_queries.js';
+import { query_cell_item_insert, query_cell_item_move, query_cell_item_delete, query_cell_item_list_for_parent, query_cell_item_list_for_child } from '../db/cell_item_queries.js';
 export const to_item_json = (row) => ({
     parent_id: row.parent_id,
     // `cell.position` is a DB-shape string; brand at the wire boundary so
@@ -44,10 +44,10 @@ export const to_item_json = (row) => ({
     // on ingress).
     position: row.position,
     child_id: row.child_id,
-    created_at: typeof row.created_at === 'string' ? row.created_at : row.created_at.toISOString(),
+    created_at: typeof row.created_at === 'string' ? row.created_at : row.created_at.toISOString()
 });
 const position_taken_error = () => jsonrpc_errors.invalid_params('cell_item position taken', {
-    reason: ERROR_CELL_ITEM_POSITION_TAKEN,
+    reason: ERROR_CELL_ITEM_POSITION_TAKEN
 });
 /** Create the four `cell_item_*` RPC actions. */
 export const create_cell_item_actions = (deps) => {
@@ -75,7 +75,7 @@ export const create_cell_item_actions = (deps) => {
             row = await query_cell_item_insert(ctx, {
                 parent_id: input.parent_id,
                 position: input.position,
-                child_id: input.child_id,
+                child_id: input.child_id
             });
         }
         catch (err) {
@@ -91,8 +91,8 @@ export const create_cell_item_actions = (deps) => {
             metadata: {
                 parent_id: row.parent_id,
                 position: row.position,
-                child_id: row.child_id,
-            },
+                child_id: row.child_id
+            }
         });
         return { item: to_item_json(row) };
     };
@@ -127,8 +127,8 @@ export const create_cell_item_actions = (deps) => {
             metadata: {
                 parent_id: row.parent_id,
                 position_old: input.position,
-                position_new: row.position,
-            },
+                position_new: row.position
+            }
         });
         return { item: to_item_json(row) };
     };
@@ -152,8 +152,8 @@ export const create_cell_item_actions = (deps) => {
                 metadata: {
                     parent_id: deleted.parent_id,
                     position: deleted.position,
-                    child_id: deleted.child_id,
-                },
+                    child_id: deleted.child_id
+                }
             });
         }
         return { ok: true, deleted: deleted !== null };
@@ -173,7 +173,7 @@ export const create_cell_item_actions = (deps) => {
             }
             const rows = await query_cell_item_list_for_parent(ctx, parent.id, {
                 limit: input.limit,
-                position_after: input.position_after,
+                position_after: input.position_after
             });
             const visible_children = await filter_visible_target_ids(ctx, auth, rows.map((r) => r.child_id));
             return { items: rows.filter((r) => visible_children.has(r.child_id)).map(to_item_json) };
@@ -199,6 +199,6 @@ export const create_cell_item_actions = (deps) => {
         rpc_action(cell_item_insert_action_spec, insert_handler),
         rpc_action(cell_item_move_action_spec, move_handler),
         rpc_action(cell_item_delete_action_spec, delete_handler),
-        rpc_action(cell_item_list_action_spec, list_handler),
+        rpc_action(cell_item_list_action_spec, list_handler)
     ];
 };

package/dist/auth/cell_item_audit_metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_item_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_item_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,gDAAgD;AAChD,eAAO,MAAM,2BAA2B;;;;iBAItC,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEtF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,gDAAgD;AAChD,eAAO,MAAM,2BAA2B;;;;iBAItC,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}
+{"version":3,"file":"cell_item_audit_metadata.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_item_audit_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,gDAAgD;AAChD,eAAO,MAAM,2BAA2B;;;;iBAItC,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEtF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,gDAAgD;AAChD,eAAO,MAAM,2BAA2B;;;;iBAItC,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/auth/cell_item_audit_metadata.js

@@ -12,7 +12,7 @@ import { Uuid } from '@fuzdev/fuz_util/id.ts';
 export const CellItemInsertAuditMetadata = z.looseObject({
     parent_id: Uuid,
     position: z.string(),
-    child_id: Uuid,
+    child_id: Uuid
 });
 /**
  * Metadata envelope for `cell_item_move`. Carries both old and new
@@ -22,11 +22,11 @@ export const CellItemInsertAuditMetadata = z.looseObject({
 export const CellItemMoveAuditMetadata = z.looseObject({
     parent_id: Uuid,
     position_old: z.string(),
-    position_new: z.string(),
+    position_new: z.string()
 });
 /** Metadata envelope for `cell_item_delete`. */
 export const CellItemDeleteAuditMetadata = z.looseObject({
     parent_id: Uuid,
     position: z.string(),
-    child_id: Uuid,
+    child_id: Uuid
 });

package/dist/auth/cell_relation_visibility.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_relation_visibility.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_relation_visibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAEjD,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,sBAAsB,CAAC;AAKzD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,SAAS,EACf,MAAM,cAAc,GAAG,IAAI,EAC3B,YAAY,aAAa,CAAC,IAAI,CAAC,KAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAwBnB,CAAC"}
+{"version":3,"file":"cell_relation_visibility.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_relation_visibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK3D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,SAAS,EACf,MAAM,cAAc,GAAG,IAAI,EAC3B,YAAY,aAAa,CAAC,IAAI,CAAC,KAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAwBnB,CAAC"}

package/dist/auth/cleanup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cleanup.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,qBAAqB,CAAC;AAGnD,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAErD,4CAA4C;AAC5C,MAAM,WAAW,eAAgB,SAAQ,SAAS;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,KAAK,EAAE,YAAY,CAAC;CACpB;AAED,oCAAoC;AACpC,MAAM,WAAW,iBAAiB;IACjC,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,cAAc,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iCAAiC,GAAU,MAAM,eAAe,KAAG,OAAO,CAAC,MAAM,CAuB7F,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,GAAU,MAAM,eAAe,KAAG,OAAO,CAAC,iBAAiB,CAIvF,CAAC"}
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,4CAA4C;AAC5C,MAAM,WAAW,eAAgB,SAAQ,SAAS;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,KAAK,EAAE,YAAY,CAAC;CACpB;AAED,oCAAoC;AACpC,MAAM,WAAW,iBAAiB;IACjC,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,cAAc,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iCAAiC,GAAU,MAAM,eAAe,KAAG,OAAO,CAAC,MAAM,CAuB7F,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,GAAU,MAAM,eAAe,KAAG,OAAO,CAAC,iBAAiB,CAIvF,CAAC"}

package/dist/auth/cleanup.js

@@ -50,8 +50,8 @@ export const cleanup_expired_role_grant_offers = async (deps) => {
             metadata: {
                 offer_id: offer.id,
                 role: offer.role,
-                scope_id: offer.scope_id,
-            },
+                scope_id: offer.scope_id
+            }
         });
     }
     return expired.length;

package/dist/auth/credential_type_schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential_type_schema.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/credential_type_schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAAgC,CAAC;AAExE,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,aAK7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,uCAAuC;AACvC,eAAO,MAAM,uBAAuB,YAAY,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,cAAc,CAAC;AAErD,yEAAyE;AACzE,eAAO,MAAM,4BAA4B,iBAAiB,CAAC;AAE3D,0DAA0D;AAC1D,eAAO,MAAM,wBAAwB,mDAI3B,CAAC;AAEX,kDAAkD;AAClD,eAAO,MAAM,qBAAqB;;;;EAAmC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAa/E,CAAC;AAEH,qFAAqF;AACrF,MAAM,WAAW,0BAA0B;IAC1C;;;;;;OAMG;IACH,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC;;;OAGG;IACH,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC1D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,6BAA6B,GACzC,iBAAgB,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAM,KACrD,0BA2BF,CAAC"}
+{"version":3,"file":"credential_type_schema.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/credential_type_schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAAgC,CAAC;AAExE,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,aAK7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,uCAAuC;AACvC,eAAO,MAAM,uBAAuB,YAAY,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,cAAc,CAAC;AAErD,yEAAyE;AACzE,eAAO,MAAM,4BAA4B,iBAAiB,CAAC;AAE3D,0DAA0D;AAC1D,eAAO,MAAM,wBAAwB,mDAI3B,CAAC;AAEX,kDAAkD;AAClD,eAAO,MAAM,qBAAqB;;;;EAAmC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAa/E,CAAC;AAEH,qFAAqF;AACrF,MAAM,WAAW,0BAA0B;IAC1C;;;;;;OAMG;IACH,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC;;;OAGG;IACH,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC1D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,6BAA6B,GACzC,iBAAgB,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAM,KACrD,0BA2BF,CAAC"}

package/dist/auth/credential_type_schema.js

@@ -47,7 +47,7 @@ export const CREDENTIAL_TYPE_DAEMON_TOKEN = 'daemon_token';
 export const BUILTIN_CREDENTIAL_TYPES = [
     CREDENTIAL_TYPE_SESSION,
     CREDENTIAL_TYPE_API_TOKEN,
-    CREDENTIAL_TYPE_DAEMON_TOKEN,
+    CREDENTIAL_TYPE_DAEMON_TOKEN
 ];
 /** Zod enum for builtin credential types only. */
 export const BuiltinCredentialType = z.enum(BUILTIN_CREDENTIAL_TYPES);
@@ -63,16 +63,16 @@ export const BuiltinCredentialType = z.enum(BUILTIN_CREDENTIAL_TYPES);
 export const builtin_credential_type_meta = new Map([
     [
         CREDENTIAL_TYPE_SESSION,
-        { description: 'Cookie-based session credential, signed and validated server-side.' },
+        { description: 'Cookie-based session credential, signed and validated server-side.' }
     ],
     [
         CREDENTIAL_TYPE_API_TOKEN,
-        { description: 'HTTP Authorization: Bearer API token credential, hashed at rest.' },
+        { description: 'HTTP Authorization: Bearer API token credential, hashed at rest.' }
     ],
     [
         CREDENTIAL_TYPE_DAEMON_TOKEN,
-        { description: 'Filesystem-proof daemon-token credential, scoped to the keeper account.' },
-    ],
+        { description: 'Filesystem-proof daemon-token credential, scoped to the keeper account.' }
+    ]
 ]);
 /**
  * Create a credential-type schema from the builtin set plus optional