@fuzdev/fuz_app 0.141.0 → 0.142.0

package/dist/db/cell_field_queries.d.ts

@@ -8,7 +8,10 @@
  * not by allowing duplicate field rows.
  *
  * Reads filter both endpoints by `cell.deleted_at IS NULL` so relations
- * dangling off a soft-deleted cell don't surface to the live graph.
+ * dangling off a soft-deleted cell don't surface to the live graph, and the
+ * list reads apply the view predicate (`db/cell_view_sql.ts`) to the far end
+ * before `LIMIT` — a page is up to `limit` edges whose far end the caller can
+ * view.
  *
  * `query_cell_field_set` upserts on the `(source_id, name)` PK so
  * re-pointing a name updates `target_id` in place — JSON-object semantics
@@ -18,6 +21,7 @@
  */
 import type { QueryDeps } from './query_deps.js';
 import type { Uuid } from '../primitive_schemas.js';
+import { type CellViewer } from './cell_view_sql.js';
 /** Row shape returned by `cell_field` SELECTs. */
 export interface CellFieldRow {
     source_id: Uuid;
@@ -77,38 +81,36 @@ export declare const query_cell_field_delete: (deps: QueryDeps, source_id: Uuid,
 /**
  * Forward fields list (`source.fields[]`).
  *
- * Filters target by `deleted_at IS NULL` so relations to tombstoned cells
- * don't surface; the source filter is the caller's responsibility (gated
- * upstream by `can_view_cell(source)`).
+ * Up to `limit` fields whose target is live and one `viewer` may view
+ * (`can_view_cell_sql`, applied before the limit); `name_after` pages on.
+ * The source-view gate is the caller's responsibility.
  *
  * @param deps - query deps
+ * @param viewer - who is reading; `CELL_VIEWER_UNRESTRICTED` filters nothing
  * @param source_id - source cell id
- * @param options - `limit` caps the row count; `name_after` resumes after a
- *   name (keyset pagination)
+ * @param options - `limit` caps the row count (omitted = unbounded); `name_after`
+ *   resumes after a name (keyset pagination)
  * @returns matching rows in lex `name` order
  */
-export declare const query_cell_field_list_for_source: (deps: QueryDeps, source_id: Uuid, options?: {
+export declare const query_cell_field_list_for_source: (deps: QueryDeps, viewer: CellViewer, source_id: Uuid, options?: {
     limit?: number;
     name_after?: string;
 }) => Promise<Array<CellFieldRow>>;
 /**
  * Reverse fields list (`target.upfields[]`).
  *
- * Returns rows whose `target_id = $1`, joined to `cell` on `source_id` so
- * relations from tombstoned sources don't surface. The caller-side
- * authz filter (per-source `can_view_cell`) runs after the SQL fetch
- * — see the 2-layer authz contract on `cell_field_list({target_id})`.
- *
- * Bounded by `limit` (the wire `cell_field_list` cap) so a heavily
- * inbound-linked target can't force an unbounded fetch + per-source authz
- * pass on the public, IP-rate-limited reverse endpoint.
+ * Up to `limit` fields whose source is live and one `viewer` may view —
+ * filtered before the limit (`can_view_cell_sql`), so sources the caller
+ * can't see never crowd out ones it can. The target-view gate is the
+ * caller's responsibility.
  *
  * @param deps - query deps
+ * @param viewer - who is reading; `CELL_VIEWER_UNRESTRICTED` filters nothing
  * @param target_id - target cell id
- * @param options - `limit` caps the row count
- * @returns matching rows, oldest field first (by the field row's `created_at`)
+ * @param options - `limit` caps the row count (omitted = unbounded)
+ * @returns matching rows, oldest field first (by the field row's `created_at`, then its key)
  */
-export declare const query_cell_field_list_for_target: (deps: QueryDeps, target_id: Uuid, options?: {
+export declare const query_cell_field_list_for_target: (deps: QueryDeps, viewer: CellViewer, target_id: Uuid, options?: {
     limit?: number;
 }) => Promise<Array<CellFieldRow>>;
 //# sourceMappingURL=cell_field_queries.d.ts.map

package/dist/db/cell_field_queries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_field_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_field_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAIpD,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC5B,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,2DAKuB,CAAC;AAKvD,wCAAwC;AACxC,MAAM,WAAW,sBAAsB;IACtC,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,OAAO,sBAAsB,KAC3B,OAAO,CAAC,YAAY,CAUtB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,WAAW,IAAI,EACf,MAAM,MAAM,KACV,OAAO,CAAC,YAAY,GAAG,IAAI,CAM7B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,GACnC,MAAM,SAAS,EACf,WAAW,IAAI,EACf,MAAM,MAAM,KACV,OAAO,CAAC,YAAY,GAAG,IAAI,CAO7B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gCAAgC,GAC5C,MAAM,SAAS,EACf,WAAW,IAAI,EACf,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,KAC/C,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAa7B,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gCAAgC,GAC5C,MAAM,SAAS,EACf,WAAW,IAAI,EACf,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1B,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAS5B,CAAC"}
+{"version":3,"file":"cell_field_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_field_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAGpD,OAAO,EAIN,KAAK,UAAU,EACf,MAAM,oBAAoB,CAAC;AAE5B,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC5B,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,2DAKuB,CAAC;AAKvD,wCAAwC;AACxC,MAAM,WAAW,sBAAsB;IACtC,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,OAAO,sBAAsB,KAC3B,OAAO,CAAC,YAAY,CAUtB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,WAAW,IAAI,EACf,MAAM,MAAM,KACV,OAAO,CAAC,YAAY,GAAG,IAAI,CAM7B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,GACnC,MAAM,SAAS,EACf,WAAW,IAAI,EACf,MAAM,MAAM,KACV,OAAO,CAAC,YAAY,GAAG,IAAI,CAO7B,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gCAAgC,GAC5C,MAAM,SAAS,EACf,QAAQ,UAAU,EAClB,WAAW,IAAI,EACf,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,KAC/C,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAe7B,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gCAAgC,GAC5C,MAAM,SAAS,EACf,QAAQ,UAAU,EAClB,WAAW,IAAI,EACf,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1B,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAW5B,CAAC"}

package/dist/db/cell_field_queries.js

@@ -8,7 +8,10 @@
  * not by allowing duplicate field rows.
  *
  * Reads filter both endpoints by `cell.deleted_at IS NULL` so relations
- * dangling off a soft-deleted cell don't surface to the live graph.
+ * dangling off a soft-deleted cell don't surface to the live graph, and the
+ * list reads apply the view predicate (`db/cell_view_sql.ts`) to the far end
+ * before `LIMIT` — a page is up to `limit` edges whose far end the caller can
+ * view.
  *
  * `query_cell_field_set` upserts on the `(source_id, name)` PK so
  * re-pointing a name updates `target_id` in place — JSON-object semantics
@@ -18,6 +21,7 @@
  */
 import { assert_row } from './assert_row.js';
 import { columns_sql, iso8601_timestamp_expr, qualify_columns } from './sql_columns.js';
+import { can_view_cell_sql, caller_role_grants_cte, cell_viewer_params } from './cell_view_sql.js';
 /**
  * The full `cell_field` column set, named explicitly so a row read fails
  * loud on schema drift (see `CELL_COLUMNS` in `db/cell_queries.ts`). Column
@@ -85,47 +89,49 @@ export const query_cell_field_delete = async (deps, source_id, name) => {
 /**
  * Forward fields list (`source.fields[]`).
  *
- * Filters target by `deleted_at IS NULL` so relations to tombstoned cells
- * don't surface; the source filter is the caller's responsibility (gated
- * upstream by `can_view_cell(source)`).
+ * Up to `limit` fields whose target is live and one `viewer` may view
+ * (`can_view_cell_sql`, applied before the limit); `name_after` pages on.
+ * The source-view gate is the caller's responsibility.
  *
  * @param deps - query deps
+ * @param viewer - who is reading; `CELL_VIEWER_UNRESTRICTED` filters nothing
  * @param source_id - source cell id
- * @param options - `limit` caps the row count; `name_after` resumes after a
- *   name (keyset pagination)
+ * @param options - `limit` caps the row count (omitted = unbounded); `name_after`
+ *   resumes after a name (keyset pagination)
  * @returns matching rows in lex `name` order
  */
-export const query_cell_field_list_for_source = async (deps, source_id, options) => {
+export const query_cell_field_list_for_source = async (deps, viewer, source_id, options) => {
     const limit = options?.limit ?? null;
     const name_after = options?.name_after ?? null;
-    return deps.db.query(`SELECT ${qualify_columns(CELL_FIELD_COLUMNS, 'f', cell_field_expr('f'))} FROM cell_field f
+    return deps.db.query(`WITH ${caller_role_grants_cte('$6', '$7')}
+		 SELECT ${qualify_columns(CELL_FIELD_COLUMNS, 'f', cell_field_expr('f'))} FROM cell_field f
 		 JOIN cell t ON t.id = f.target_id
 		 WHERE f.source_id = $1
 		   AND t.deleted_at IS NULL
+		   AND ${can_view_cell_sql('t', { is_admin: '$4', actor_id: '$5' })}
 		   AND ($3::text IS NULL OR f.name > $3)
 		 ORDER BY f.name ASC
-		 LIMIT $2`, [source_id, limit, name_after]);
+		 LIMIT $2`, [source_id, limit, name_after, ...cell_viewer_params(viewer)]);
 };
 /**
  * Reverse fields list (`target.upfields[]`).
  *
- * Returns rows whose `target_id = $1`, joined to `cell` on `source_id` so
- * relations from tombstoned sources don't surface. The caller-side
- * authz filter (per-source `can_view_cell`) runs after the SQL fetch
- * — see the 2-layer authz contract on `cell_field_list({target_id})`.
- *
- * Bounded by `limit` (the wire `cell_field_list` cap) so a heavily
- * inbound-linked target can't force an unbounded fetch + per-source authz
- * pass on the public, IP-rate-limited reverse endpoint.
+ * Up to `limit` fields whose source is live and one `viewer` may view —
+ * filtered before the limit (`can_view_cell_sql`), so sources the caller
+ * can't see never crowd out ones it can. The target-view gate is the
+ * caller's responsibility.
  *
  * @param deps - query deps
+ * @param viewer - who is reading; `CELL_VIEWER_UNRESTRICTED` filters nothing
  * @param target_id - target cell id
- * @param options - `limit` caps the row count
- * @returns matching rows, oldest field first (by the field row's `created_at`)
+ * @param options - `limit` caps the row count (omitted = unbounded)
+ * @returns matching rows, oldest field first (by the field row's `created_at`, then its key)
  */
-export const query_cell_field_list_for_target = async (deps, target_id, options) => deps.db.query(`SELECT ${qualify_columns(CELL_FIELD_COLUMNS, 'f', cell_field_expr('f'))} FROM cell_field f
+export const query_cell_field_list_for_target = async (deps, viewer, target_id, options) => deps.db.query(`WITH ${caller_role_grants_cte('$5', '$6')}
+		 SELECT ${qualify_columns(CELL_FIELD_COLUMNS, 'f', cell_field_expr('f'))} FROM cell_field f
 		 JOIN cell s ON s.id = f.source_id
 		 WHERE f.target_id = $1
 		   AND s.deleted_at IS NULL
-		 ORDER BY f.created_at ASC
-		 LIMIT $2`, [target_id, options?.limit ?? null]);
+		   AND ${can_view_cell_sql('s', { is_admin: '$3', actor_id: '$4' })}
+		 ORDER BY f.created_at ASC, f.source_id ASC, f.name ASC
+		 LIMIT $2`, [target_id, options?.limit ?? null, ...cell_viewer_params(viewer)]);

package/dist/db/cell_item_queries.d.ts

@@ -9,7 +9,9 @@
  * domain dedup rules ride on top).
  *
  * Reads filter both endpoints by `cell.deleted_at IS NULL` so items
- * dangling off a soft-deleted cell don't surface.
+ * dangling off a soft-deleted cell don't surface, and the list reads apply
+ * the view predicate (`db/cell_view_sql.ts`) to the far end before `LIMIT` —
+ * a page is up to `limit` edges whose far end the caller can view.
  *
  * `query_cell_item_insert` returns the inserted row OR throws the
  * underlying `23505` (Postgres unique violation) on a `(parent_id,
@@ -21,6 +23,7 @@
  */
 import type { QueryDeps } from './query_deps.js';
 import type { Uuid } from '../primitive_schemas.js';
+import { type CellViewer } from './cell_view_sql.js';
 /** Row shape returned by `cell_item` SELECTs. */
 export interface CellItemRow {
     parent_id: Uuid;
@@ -86,33 +89,36 @@ export declare const query_cell_item_delete: (deps: QueryDeps, parent_id: Uuid,
 /**
  * Forward items list (`parent.items[]`), ordered by lex `position`.
  *
- * Filters child by `deleted_at IS NULL` so items pointing at tombstoned
- * cells don't surface; the parent filter is the caller's responsibility
- * (gated upstream by `can_view_cell(parent)`).
+ * Up to `limit` items whose child is live and one `viewer` may view
+ * (`can_view_cell_sql`, applied before the limit); `position_after` pages on.
+ * The parent-view gate is the caller's responsibility.
  *
  * @param deps - query deps
+ * @param viewer - who is reading; `CELL_VIEWER_UNRESTRICTED` filters nothing
  * @param parent_id - parent cell id
- * @param options - `limit` caps the row count (passes through to SQL `LIMIT`);
+ * @param options - `limit` caps the row count (omitted = unbounded);
  *   `position_after` resumes after a position (keyset pagination)
  * @returns matching rows in lex `position` order
  */
-export declare const query_cell_item_list_for_parent: (deps: QueryDeps, parent_id: Uuid, options?: {
+export declare const query_cell_item_list_for_parent: (deps: QueryDeps, viewer: CellViewer, parent_id: Uuid, options?: {
     limit?: number;
     position_after?: string;
 }) => Promise<Array<CellItemRow>>;
 /**
  * Reverse items list (`child.lists[]`).
  *
- * Returns rows whose `child_id = $1`, joined to `cell` on `parent_id` so
- * items from tombstoned parents don't surface. The caller-side authz
- * filter (per-parent `can_view_cell`) runs after the SQL fetch — see
- * the 2-layer authz contract on `cell_item_list({child_id})`.
+ * Up to `limit` items whose parent is live and one `viewer` may view —
+ * filtered before the limit (`can_view_cell_sql`), so parents the caller
+ * can't see never crowd out ones it can. The child-view gate is the
+ * caller's responsibility.
  *
- * Bounded by `limit` (the wire `cell_item_list` cap) so a heavily
- * inbound-linked child can't force an unbounded fetch + per-parent authz
- * pass on the public, IP-rate-limited reverse endpoint.
+ * @param deps - query deps
+ * @param viewer - who is reading; `CELL_VIEWER_UNRESTRICTED` filters nothing
+ * @param child_id - child cell id
+ * @param options - `limit` caps the row count (omitted = unbounded)
+ * @returns matching rows, oldest item first (by the item row's `created_at`, then its key)
  */
-export declare const query_cell_item_list_for_child: (deps: QueryDeps, child_id: Uuid, options?: {
+export declare const query_cell_item_list_for_child: (deps: QueryDeps, viewer: CellViewer, child_id: Uuid, options?: {
     limit?: number;
 }) => Promise<Array<CellItemRow>>;
 //# sourceMappingURL=cell_item_queries.d.ts.map

package/dist/db/cell_item_queries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_item_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_item_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAIpD,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC3B,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,8DAKuB,CAAC;AAKtD,0CAA0C;AAC1C,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,IAAI,CAAC;CACf;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,SAAS,EACf,OAAO,wBAAwB,KAC7B,OAAO,CAAC,WAAW,CAQrB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM,SAAS,EACf,WAAW,IAAI,EACf,UAAU,MAAM,KACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAM5B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,WAAW,IAAI,EACf,cAAc,MAAM,EACpB,cAAc,MAAM,KAClB,OAAO,CAAC,WAAW,GAAG,IAAI,CAS5B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,SAAS,EACf,WAAW,IAAI,EACf,UAAU,MAAM,KACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAO5B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,+BAA+B,GAC3C,MAAM,SAAS,EACf,WAAW,IAAI,EACf,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,KACnD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAa5B,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B,GAC1C,MAAM,SAAS,EACf,UAAU,IAAI,EACd,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1B,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAS3B,CAAC"}
+{"version":3,"file":"cell_item_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_item_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAGpD,OAAO,EAIN,KAAK,UAAU,EACf,MAAM,oBAAoB,CAAC;AAE5B,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC3B,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,8DAKuB,CAAC;AAKtD,0CAA0C;AAC1C,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,IAAI,CAAC;CACf;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,SAAS,EACf,OAAO,wBAAwB,KAC7B,OAAO,CAAC,WAAW,CAQrB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM,SAAS,EACf,WAAW,IAAI,EACf,UAAU,MAAM,KACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAM5B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,WAAW,IAAI,EACf,cAAc,MAAM,EACpB,cAAc,MAAM,KAClB,OAAO,CAAC,WAAW,GAAG,IAAI,CAS5B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,SAAS,EACf,WAAW,IAAI,EACf,UAAU,MAAM,KACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAO5B,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,+BAA+B,GAC3C,MAAM,SAAS,EACf,QAAQ,UAAU,EAClB,WAAW,IAAI,EACf,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,KACnD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAe5B,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,8BAA8B,GAC1C,MAAM,SAAS,EACf,QAAQ,UAAU,EAClB,UAAU,IAAI,EACd,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1B,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAW3B,CAAC"}

package/dist/db/cell_item_queries.js

@@ -9,7 +9,9 @@
  * domain dedup rules ride on top).
  *
  * Reads filter both endpoints by `cell.deleted_at IS NULL` so items
- * dangling off a soft-deleted cell don't surface.
+ * dangling off a soft-deleted cell don't surface, and the list reads apply
+ * the view predicate (`db/cell_view_sql.ts`) to the far end before `LIMIT` —
+ * a page is up to `limit` edges whose far end the caller can view.
  *
  * `query_cell_item_insert` returns the inserted row OR throws the
  * underlying `23505` (Postgres unique violation) on a `(parent_id,
@@ -21,6 +23,7 @@
  */
 import { assert_row } from './assert_row.js';
 import { columns_sql, iso8601_timestamp_expr, qualify_columns } from './sql_columns.js';
+import { can_view_cell_sql, caller_role_grants_cte, cell_viewer_params } from './cell_view_sql.js';
 /**
  * The full `cell_item` column set, named explicitly so a row read fails
  * loud on schema drift (see `CELL_COLUMNS` in `db/cell_queries.ts`). Column
@@ -98,42 +101,49 @@ export const query_cell_item_delete = async (deps, parent_id, position) => {
 /**
  * Forward items list (`parent.items[]`), ordered by lex `position`.
  *
- * Filters child by `deleted_at IS NULL` so items pointing at tombstoned
- * cells don't surface; the parent filter is the caller's responsibility
- * (gated upstream by `can_view_cell(parent)`).
+ * Up to `limit` items whose child is live and one `viewer` may view
+ * (`can_view_cell_sql`, applied before the limit); `position_after` pages on.
+ * The parent-view gate is the caller's responsibility.
  *
  * @param deps - query deps
+ * @param viewer - who is reading; `CELL_VIEWER_UNRESTRICTED` filters nothing
  * @param parent_id - parent cell id
- * @param options - `limit` caps the row count (passes through to SQL `LIMIT`);
+ * @param options - `limit` caps the row count (omitted = unbounded);
  *   `position_after` resumes after a position (keyset pagination)
  * @returns matching rows in lex `position` order
  */
-export const query_cell_item_list_for_parent = async (deps, parent_id, options) => {
+export const query_cell_item_list_for_parent = async (deps, viewer, parent_id, options) => {
     const limit = options?.limit ?? null;
     const position_after = options?.position_after ?? null;
-    return deps.db.query(`SELECT ${qualify_columns(CELL_ITEM_COLUMNS, 'i', cell_item_expr('i'))} FROM cell_item i
+    return deps.db.query(`WITH ${caller_role_grants_cte('$6', '$7')}
+		 SELECT ${qualify_columns(CELL_ITEM_COLUMNS, 'i', cell_item_expr('i'))} FROM cell_item i
 		 JOIN cell c ON c.id = i.child_id
 		 WHERE i.parent_id = $1
 		   AND c.deleted_at IS NULL
+		   AND ${can_view_cell_sql('c', { is_admin: '$4', actor_id: '$5' })}
 		   AND ($3::text IS NULL OR i.position > $3)
 		 ORDER BY i.position ASC
-		 LIMIT $2`, [parent_id, limit, position_after]);
+		 LIMIT $2`, [parent_id, limit, position_after, ...cell_viewer_params(viewer)]);
 };
 /**
  * Reverse items list (`child.lists[]`).
  *
- * Returns rows whose `child_id = $1`, joined to `cell` on `parent_id` so
- * items from tombstoned parents don't surface. The caller-side authz
- * filter (per-parent `can_view_cell`) runs after the SQL fetch — see
- * the 2-layer authz contract on `cell_item_list({child_id})`.
+ * Up to `limit` items whose parent is live and one `viewer` may view —
+ * filtered before the limit (`can_view_cell_sql`), so parents the caller
+ * can't see never crowd out ones it can. The child-view gate is the
+ * caller's responsibility.
  *
- * Bounded by `limit` (the wire `cell_item_list` cap) so a heavily
- * inbound-linked child can't force an unbounded fetch + per-parent authz
- * pass on the public, IP-rate-limited reverse endpoint.
+ * @param deps - query deps
+ * @param viewer - who is reading; `CELL_VIEWER_UNRESTRICTED` filters nothing
+ * @param child_id - child cell id
+ * @param options - `limit` caps the row count (omitted = unbounded)
+ * @returns matching rows, oldest item first (by the item row's `created_at`, then its key)
  */
-export const query_cell_item_list_for_child = async (deps, child_id, options) => deps.db.query(`SELECT ${qualify_columns(CELL_ITEM_COLUMNS, 'i', cell_item_expr('i'))} FROM cell_item i
+export const query_cell_item_list_for_child = async (deps, viewer, child_id, options) => deps.db.query(`WITH ${caller_role_grants_cte('$5', '$6')}
+		 SELECT ${qualify_columns(CELL_ITEM_COLUMNS, 'i', cell_item_expr('i'))} FROM cell_item i
 		 JOIN cell p ON p.id = i.parent_id
 		 WHERE i.child_id = $1
 		   AND p.deleted_at IS NULL
-		 ORDER BY i.created_at ASC
-		 LIMIT $2`, [child_id, options?.limit ?? null]);
+		   AND ${can_view_cell_sql('p', { is_admin: '$3', actor_id: '$4' })}
+		 ORDER BY i.created_at ASC, i.parent_id ASC, i.position ASC
+		 LIMIT $2`, [child_id, options?.limit ?? null, ...cell_viewer_params(viewer)]);

package/dist/db/cell_moderation.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The `cell.moderation` read rules, in pure and SQL form side by side.
+ *
+ * `moderation` is free `TEXT` with no CHECK, so each rule is an allowlist over
+ * the literals: a marker this module doesn't name (a typo, a future state)
+ * admits nothing.
+ *
+ * **Audience admission** — `cell_moderation_admits_audience` and
+ * `cell_moderation_admits_audience_sql`: unmoderated (`null`) or `'approved'`.
+ * A cell's effective audience is its visibility (or grants) **and** its
+ * admission, so the public and grant read arms of `can_view_cell` require it,
+ * as do the `editor` grant arm of `can_edit_cell` and the matching arms of
+ * `query_cell_list` (general and `shared_with` shapes). The owner and
+ * global-admin arms don't: an author keeps reading and editing their own
+ * pending or rejected contribution, and an admin reads everything.
+ *
+ * **Stewardship** — `cell_moderation_is_stewardable` and
+ * `cell_moderation_is_stewardable_sql`: exactly `'pending'` or `'rejected'`, the
+ * states in which the governing root's manager reads a contribution its
+ * audience can't (`can_steward_cell`). An unknown marker is neither admitted
+ * nor stewardable, so only its owner and admins read it.
+ *
+ * The pure and SQL forms are written once each here, next to each other, over
+ * the same literal constants; every predicate and query composes them rather
+ * than restating the rule. Twin of the Rust `fuz_cell::cell_moderation`.
+ *
+ * @module
+ */
+/** `cell.moderation` for a gated contribution awaiting a decision. */
+export declare const CELL_MODERATION_PENDING = "pending";
+/** `cell.moderation` for an approved contribution. */
+export declare const CELL_MODERATION_APPROVED = "approved";
+/** `cell.moderation` for a rejected contribution. */
+export declare const CELL_MODERATION_REJECTED = "rejected";
+/**
+ * Whether a cell's `moderation` marker admits it to an audience beyond its
+ * owner — unmoderated (`null`) or `'approved'`; `'pending'`, `'rejected'`, and
+ * any unknown marker do not.
+ *
+ * @param moderation - the cell's `moderation` column
+ * @returns whether the public and grant read arms may admit the cell
+ */
+export declare const cell_moderation_admits_audience: (moderation: string | null) => boolean;
+/**
+ * SQL form of `cell_moderation_admits_audience` over the cell alias `alias`
+ * (a parenthesized boolean expression).
+ *
+ * @param alias - the `cell` table alias in the enclosing query
+ * @returns the SQL predicate
+ */
+export declare const cell_moderation_admits_audience_sql: (alias: string) => string;
+/**
+ * Whether a cell's `moderation` marker is one its governing root's manager
+ * stewards — exactly `'pending'` or `'rejected'`.
+ *
+ * @param moderation - the cell's `moderation` column
+ * @returns whether the steward read arm may admit the cell
+ */
+export declare const cell_moderation_is_stewardable: (moderation: string | null) => boolean;
+/**
+ * SQL form of `cell_moderation_is_stewardable` over the cell alias `alias`.
+ *
+ * @param alias - the `cell` table alias in the enclosing query
+ * @returns the SQL predicate
+ */
+export declare const cell_moderation_is_stewardable_sql: (alias: string) => string;
+//# sourceMappingURL=cell_moderation.d.ts.map

package/dist/db/cell_moderation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cell_moderation.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_moderation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,YAAY,CAAC;AAEjD,sDAAsD;AACtD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAEnD,qDAAqD;AACrD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAEnD;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,GAAI,YAAY,MAAM,GAAG,IAAI,KAAG,OACb,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,GAAI,OAAO,MAAM,KAAG,MACmB,CAAC;AAExF;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,GAAI,YAAY,MAAM,GAAG,IAAI,KAAG,OACO,CAAC;AAEnF;;;;;GAKG;AACH,eAAO,MAAM,kCAAkC,GAAI,OAAO,MAAM,KAAG,MACoB,CAAC"}

package/dist/db/cell_moderation.js

@@ -0,0 +1,66 @@
+/**
+ * The `cell.moderation` read rules, in pure and SQL form side by side.
+ *
+ * `moderation` is free `TEXT` with no CHECK, so each rule is an allowlist over
+ * the literals: a marker this module doesn't name (a typo, a future state)
+ * admits nothing.
+ *
+ * **Audience admission** — `cell_moderation_admits_audience` and
+ * `cell_moderation_admits_audience_sql`: unmoderated (`null`) or `'approved'`.
+ * A cell's effective audience is its visibility (or grants) **and** its
+ * admission, so the public and grant read arms of `can_view_cell` require it,
+ * as do the `editor` grant arm of `can_edit_cell` and the matching arms of
+ * `query_cell_list` (general and `shared_with` shapes). The owner and
+ * global-admin arms don't: an author keeps reading and editing their own
+ * pending or rejected contribution, and an admin reads everything.
+ *
+ * **Stewardship** — `cell_moderation_is_stewardable` and
+ * `cell_moderation_is_stewardable_sql`: exactly `'pending'` or `'rejected'`, the
+ * states in which the governing root's manager reads a contribution its
+ * audience can't (`can_steward_cell`). An unknown marker is neither admitted
+ * nor stewardable, so only its owner and admins read it.
+ *
+ * The pure and SQL forms are written once each here, next to each other, over
+ * the same literal constants; every predicate and query composes them rather
+ * than restating the rule. Twin of the Rust `fuz_cell::cell_moderation`.
+ *
+ * @module
+ */
+/** `cell.moderation` for a gated contribution awaiting a decision. */
+export const CELL_MODERATION_PENDING = 'pending';
+/** `cell.moderation` for an approved contribution. */
+export const CELL_MODERATION_APPROVED = 'approved';
+/** `cell.moderation` for a rejected contribution. */
+export const CELL_MODERATION_REJECTED = 'rejected';
+/**
+ * Whether a cell's `moderation` marker admits it to an audience beyond its
+ * owner — unmoderated (`null`) or `'approved'`; `'pending'`, `'rejected'`, and
+ * any unknown marker do not.
+ *
+ * @param moderation - the cell's `moderation` column
+ * @returns whether the public and grant read arms may admit the cell
+ */
+export const cell_moderation_admits_audience = (moderation) => moderation === null || moderation === CELL_MODERATION_APPROVED;
+/**
+ * SQL form of `cell_moderation_admits_audience` over the cell alias `alias`
+ * (a parenthesized boolean expression).
+ *
+ * @param alias - the `cell` table alias in the enclosing query
+ * @returns the SQL predicate
+ */
+export const cell_moderation_admits_audience_sql = (alias) => `(${alias}.moderation IS NULL OR ${alias}.moderation = '${CELL_MODERATION_APPROVED}')`;
+/**
+ * Whether a cell's `moderation` marker is one its governing root's manager
+ * stewards — exactly `'pending'` or `'rejected'`.
+ *
+ * @param moderation - the cell's `moderation` column
+ * @returns whether the steward read arm may admit the cell
+ */
+export const cell_moderation_is_stewardable = (moderation) => moderation === CELL_MODERATION_PENDING || moderation === CELL_MODERATION_REJECTED;
+/**
+ * SQL form of `cell_moderation_is_stewardable` over the cell alias `alias`.
+ *
+ * @param alias - the `cell` table alias in the enclosing query
+ * @returns the SQL predicate
+ */
+export const cell_moderation_is_stewardable_sql = (alias) => `${alias}.moderation IN ('${CELL_MODERATION_PENDING}', '${CELL_MODERATION_REJECTED}')`;

package/dist/db/cell_queries.d.ts

@@ -85,6 +85,15 @@ export declare const CELL_COLUMNS: readonly ["id", "data", "kind", "visibility",
  * actually produces one.
  */
 export declare const cell_row_projection: (alias: string) => string;
+/**
+ * The columns a view check reads (`can_view_cell`) — the `CELL_COLUMNS`
+ * subset `query_cell_view_load_many` projects, typed against `CELL_COLUMNS`
+ * so the base const's drift guard covers it. Twin of `fuz_cell`'s
+ * `CELL_VIEW_COLUMNS`.
+ */
+export declare const CELL_VIEW_COLUMNS: readonly ["id", "visibility", "moderation", "created_by"];
+/** A cell read for its view check alone — the `CELL_VIEW_COLUMNS` projection. */
+export type CellViewRow = Pick<CellRow, (typeof CELL_VIEW_COLUMNS)[number]>;
 /**
  * Input for `query_cell_create`. `refs` is derived from `data`. `kind` is
  * the write-once capability axis (`cell.kind` column) — set here at INSERT
@@ -158,17 +167,28 @@ export declare const query_cell_get: (deps: QueryDeps, id: Uuid, options?: {
  */
 export declare const query_cell_get_by_path: (deps: QueryDeps, path: string) => Promise<CellRow | null>;
 /**
- * Bulk-load active cell rows by id, **no visibility filter applied**. Used
- * by the strict relation-read filter (`auth/cell_relation_visibility.ts`'s
- * `filter_visible_target_ids`), which runs `can_view_cell` per row in
- * memory rather than in SQL. Soft-deleted rows are excluded so relations
- * to tombstones never surface.
+ * Bulk-load active cell rows by id, **no visibility filter applied** — the
+ * full rows, for a caller that copies or returns them (the deep-clone walk).
+ * A caller that needs only the view check reads `query_cell_view_load_many`.
+ * Soft-deleted rows are excluded so relations to tombstones never surface.
  *
  * @param deps - query deps
  * @param ids - cell ids to load (duplicates are harmless)
  * @returns active rows in arbitrary order (caller indexes by `id`)
  */
 export declare const query_cell_load_many: (deps: QueryDeps, ids: ReadonlyArray<Uuid>) => Promise<Array<CellRow>>;
+/**
+ * Bulk-load the active cells among `ids` for a view check — the
+ * `CELL_VIEW_COLUMNS` alone, never the payload. Backs the strict
+ * relation-read filter (`auth/cell_relation_visibility.ts`'s
+ * `filter_visible_target_ids`), which runs `can_view_cell` per row in memory
+ * rather than in SQL. Soft-deleted rows and ids with no row are absent.
+ *
+ * @param deps - query deps
+ * @param ids - cell ids to load (duplicates are harmless)
+ * @returns active rows in arbitrary order (caller indexes by `id`)
+ */
+export declare const query_cell_view_load_many: (deps: QueryDeps, ids: ReadonlyArray<Uuid>) => Promise<Array<CellViewRow>>;
 /**
  * Update a cell. Fields left `undefined` in the patch keep their existing
  * value; explicit `null` writes `NULL`. `refs` is re-derived from `data`
@@ -247,15 +267,24 @@ export declare const query_cell_list_by_creator: (deps: QueryDeps, actor_id: Uui
  * dimension — keep it simple) plus an optional viewer-aware visibility
  * predicate.
  *
- * The visibility predicate mirrors `can_view_cell` in SQL form:
+ * The visibility predicate mirrors `can_view_cell || can_steward_cell` in SQL
+ * form:
  *
  * ```
  * (viewer_is_admin
- *  OR cell.visibility = 'public'
  *  OR (viewer_actor_id IS NOT NULL AND created_by = viewer_actor_id)
- *  OR (viewer_actor_id IS NOT NULL AND <grant admits caller>))
+ *  OR (<moderation admits an audience> AND (
+ *       cell.visibility = 'public'
+ *       OR (viewer_actor_id IS NOT NULL AND <grant admits caller>)))
+ *  OR (viewer_actor_id IS NOT NULL AND <pending or rejected contribution>
+ *      AND <viewer owns its live governing root>))
  * ```
  *
+ * The moderation rules are `cell_moderation_admits_audience_sql` and
+ * `cell_moderation_is_stewardable_sql` (`db/cell_moderation.ts`). The last arm
+ * is the steward arm (`auth/cell_steward.ts`) — a root owner reads the
+ * moderation queue under their root; a global admin is already admitted.
+ *
  * The grants branch closes parity with `can_view_cell`: a SQL `EXISTS`
  * over `cell_grant`, parameterized by the caller's `actor_id` and the
  * parallel `(role[], scope_id[])` projection of `auth.role_grants`. The
@@ -277,7 +306,9 @@ export declare const query_cell_list_by_creator: (deps: QueryDeps, actor_id: Uui
  * owner-excluding, but the explicit `created_by IS DISTINCT FROM caller`
  * guards against any future deviation. The shared_with branch does NOT
  * bypass for admin: an admin asking "what's shared with me" wants their
- * own grant footprint, not every cell.
+ * own grant footprint, not every cell. A grant admits there only while the
+ * cell's moderation admits an audience, as in `can_view_cell`, and the steward
+ * arm doesn't apply — a grant footprint is not a moderation queue.
  *
  * Soft-deleted rows are excluded by default; opt-in via `include_deleted`.
  *
@@ -313,11 +344,10 @@ export interface CellListParams {
      * Filter by moderation lifecycle marker (`'pending'` drives the mod queue via
      * `idx_cell_moderation_pending`).
      *
-     * Note: the visibility predicate still applies, so a `'pending'` (private)
-     * queue surfaces only to viewers it admits — admin / owner / grant. A
-     * non-admin container manager won't see pending children here until a
-     * manager-scoped visibility branch is added, so for now the queue is an admin
-     * surface (`cell_moderate` of a known id still works regardless).
+     * The visibility predicate still applies, so `{root_id, moderation:
+     * 'pending'}` is the queue for the callers who moderate it — a global admin,
+     * and the governing root's owner through the steward arm — while each author
+     * sees only their own entries.
      */
     moderation?: string;
     /**

package/dist/db/cell_queries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAIjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,OAAO;IACvB,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,2KAegD,CAAC;AAK1E;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,MAC2F,CAAC;AAEhJ;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,OAAO,oBAAoB,KACzB,OAAO,CAAC,OAAO,CAoBjB,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,GAC1B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,UAAU;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,KACrC,OAAO,CAAC,OAAO,GAAG,IAAI,CAUxB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,SAAS,EACf,MAAM,MAAM,KACV,OAAO,CAAC,OAAO,GAAG,IAAI,CAQxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,KAAK,aAAa,CAAC,IAAI,CAAC,KACtB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAQxB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,OAAO,eAAe,KACpB,OAAO,CAAC,OAAO,GAAG,IAAI,CA4BxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,UAAU;IAAE,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE,KACpC,OAAO,CAAC,OAAO,CAWjB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,SAAS,EACf,IAAI,IAAI,EACR,YAAY,MAAM,EAClB,SAAS;IAAE,qBAAqB,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE,KACnE,OAAO,CAAC,OAAO,GAAG,IAAI,CAYxB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,GACnC,MAAM,SAAS,EACf,MAAM,MAAM,EACZ,UAAU,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC,KACjD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CASvB,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,GACtC,MAAM,SAAS,EACf,UAAU,IAAI,EACd,UAAU,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC,KACjD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAQvB,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,eAAO,MAAM,eAAe,GAC3B,MAAM,SAAS,EACf,QAAQ,cAAc,KACpB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CA4DxB,CAAC;AAqGF,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC9B,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,4EAA4E;IAC5E,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,0EAA0E;IAC1E,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,OAAO,CAAC,EAAE,IAAI,CAAC;IACf;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB;;;;OAIG;IACH,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC9B;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,aAAa,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACzD;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,yCAAyC;IACzC,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;IACvC,sCAAsC;IACtC,eAAe,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACjC,iBAAiB;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B"}
+{"version":3,"file":"cell_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAajE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,OAAO;IACvB,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,2KAegD,CAAC;AAK1E;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,MAC2F,CAAC;AAEhJ;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,2DAKmC,CAAC;AAElE,iFAAiF;AACjF,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,OAAO,oBAAoB,KACzB,OAAO,CAAC,OAAO,CAoBjB,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,GAC1B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,UAAU;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,KACrC,OAAO,CAAC,OAAO,GAAG,IAAI,CAUxB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,SAAS,EACf,MAAM,MAAM,KACV,OAAO,CAAC,OAAO,GAAG,IAAI,CAQxB,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,SAAS,EACf,KAAK,aAAa,CAAC,IAAI,CAAC,KACtB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAQxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,SAAS,EACf,KAAK,aAAa,CAAC,IAAI,CAAC,KACtB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAQ5B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,OAAO,eAAe,KACpB,OAAO,CAAC,OAAO,GAAG,IAAI,CA4BxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,SAAS,EACf,IAAI,IAAI,EACR,UAAU;IAAE,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE,KACpC,OAAO,CAAC,OAAO,CAWjB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,SAAS,EACf,IAAI,IAAI,EACR,YAAY,MAAM,EAClB,SAAS;IAAE,qBAAqB,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE,KACnE,OAAO,CAAC,OAAO,GAAG,IAAI,CAYxB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,GACnC,MAAM,SAAS,EACf,MAAM,MAAM,EACZ,UAAU,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC,KACjD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CASvB,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,GACtC,MAAM,SAAS,EACf,UAAU,IAAI,EACd,UAAU,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC,KACjD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAQvB,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,eAAO,MAAM,eAAe,GAC3B,MAAM,SAAS,EACf,QAAQ,cAAc,KACpB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CA4DxB,CAAC;AAiFF,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC9B,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,4EAA4E;IAC5E,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,0EAA0E;IAC1E,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,OAAO,CAAC,EAAE,IAAI,CAAC;IACf;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB;;;;OAIG;IACH,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC9B;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,aAAa,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACzD;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,yCAAyC;IACzC,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;IACvC,sCAAsC;IACtC,eAAe,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACjC,iBAAiB;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B"}