@fuzdev/fuz_app 0.148.0 → 0.150.0

package/dist/auth/cell_action_specs.d.ts

@@ -1,6 +1,6 @@
 /**
- * Cell RPC action specs — the declarative contract for the six generic
- * cell verbs. App vocabulary (galleries, posts, events) lives in
+ * Cell RPC action specs — the declarative contract for the generic cell
+ * verbs. App vocabulary (galleries, posts, events) lives in
  * client-side helpers; the wire stays generic.
  *
  * @module
@@ -107,6 +107,45 @@ export declare const ERROR_CELL_REF_NOT_HELD: "cell_ref_not_held";
  * `ERROR_CELL_NOT_A_CONTRIBUTION`).
  */
 export declare const ERROR_CELL_NOT_A_CONTRIBUTION: "cell_not_a_contribution";
+/**
+ * Error reason — `cell_moderate` names a transition the target's `moderation`
+ * doesn't allow: an approval of a contribution that is not `'pending'`
+ * (approved or rejected already, or never moderated), or a rejection of one
+ * that is neither `'pending'` nor `'approved'` (rejected already, or never
+ * moderated). A **400** `invalid_params`, answered to a caller holding
+ * moderation authority over the governing root (the 404 mask and the 403 come
+ * first). Without it an approval would force any reachable contribution public
+ * (twin of the Rust `ERROR_CELL_NOT_PENDING`).
+ */
+export declare const ERROR_CELL_NOT_PENDING: "cell_not_pending";
+/**
+ * Error reason — a policy write (a `cell_create` carrying `policy`, or
+ * `cell_policy_set`) targeted a cell with a parent. Only a root carries a
+ * contribution policy. A **400** `invalid_params` (twin of the Rust
+ * `ERROR_CELL_POLICY_ROOT_ONLY`).
+ */
+export declare const ERROR_CELL_POLICY_ROOT_ONLY: "cell_policy_root_only";
+/**
+ * Error reason — a non-null policy write found nothing to interpret it: no
+ * `authorize_create` is mounted, or the mounted one has no `validate_policy`.
+ * The policy is opaque to the spine, so the write is refused rather than
+ * stored inert. A **400** `invalid_params` (twin of the Rust
+ * `ERROR_CELL_POLICY_UNSUPPORTED`).
+ */
+export declare const ERROR_CELL_POLICY_UNSUPPORTED: "cell_policy_unsupported";
+/**
+ * Error reason — a `cell_policy_set` caller can view the root but can't manage
+ * it (not admin, not the owner — an editor grant included). A **403**
+ * `forbidden`; a caller who can't view the root gets the 404 mask first (twin
+ * of the Rust `ERROR_CELL_POLICY_MANAGE_ONLY`).
+ */
+export declare const ERROR_CELL_POLICY_MANAGE_ONLY: "cell_policy_manage_only";
+/**
+ * Error reason — the conventional refusal a `CellCreateAuthorize.validate_policy`
+ * throws for a policy it can't interpret. The spine never answers it itself
+ * (twin of the Rust `ERROR_CELL_POLICY_INVALID`).
+ */
+export declare const ERROR_CELL_POLICY_INVALID: "cell_policy_invalid";
 /**
  * Error reason — null-auth `cell_list` caller passed a `created_by`
  * filter. The filter is a soft account-id enumeration vector ("does
@@ -120,6 +159,14 @@ export declare const ERROR_CELL_LIST_CREATED_BY_REQUIRES_AUTH: "cell_list_create
  * exist for an authenticated session.
  */
 export declare const ERROR_CELL_LIST_SHARED_WITH_REQUIRES_AUTH: "cell_list_shared_with_requires_auth";
+/**
+ * A root's contribution policy — any JSON object. Opaque to the spine: the
+ * consumer's create authorizer validates it (`CellCreateAuthorize.validate_policy`)
+ * and interprets it (`CellCreateAuthorizeInput.root_policy`). Loose for that
+ * reason — the keys are the consumer's. Twin of the Rust `CellPolicy`.
+ */
+export declare const CellPolicy: z.ZodObject<{}, z.core.$loose>;
+export type CellPolicy = z.infer<typeof CellPolicy>;
 /**
  * Wire form for `cell.path`.
  *
@@ -195,6 +242,7 @@ export declare const CellJson: z.ZodObject<{
     parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     moderation: z.ZodNullable<z.ZodString>;
+    policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
     created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     created_at: z.ZodString;
@@ -220,6 +268,7 @@ export declare const CellCreateInput: z.ZodObject<{
     }>>;
     path: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>>;
     parent_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
+    policy: z.ZodOptional<z.ZodNullable<z.ZodObject<{}, z.core.$loose>>>;
     acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
 export type CellCreateInput = z.infer<typeof CellCreateInput>;
@@ -240,6 +289,7 @@ export declare const CellCreateOutput: z.ZodObject<{
         parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         moderation: z.ZodNullable<z.ZodString>;
+        policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -291,6 +341,7 @@ export declare const CellGetOutput: z.ZodObject<{
         parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         moderation: z.ZodNullable<z.ZodString>;
+        policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -355,6 +406,7 @@ export declare const CellUpdateOutput: z.ZodObject<{
         parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         moderation: z.ZodNullable<z.ZodString>;
+        policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -437,6 +489,7 @@ export declare const CellListOutput: z.ZodObject<{
         parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         moderation: z.ZodNullable<z.ZodString>;
+        policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -493,6 +546,7 @@ export declare const CellCloneOutput: z.ZodObject<{
         parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         moderation: z.ZodNullable<z.ZodString>;
+        policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -506,8 +560,9 @@ export type CellCloneOutput = z.infer<typeof CellCloneOutput>;
  * The terminal transition a `cell_moderate` call applies to a gated
  * contribution's `moderation` lifecycle. The born state (`'pending'`) is set
  * by the create authorizer, never on the wire; the verb only moves it to a
- * terminal state. `'approved'` publishes (also flips `visibility → 'public'`);
- * `'rejected'` leaves it private.
+ * terminal state. `'approved'` publishes a pending contribution (also flips
+ * `visibility → 'public'`); `'rejected'` holds a pending one back or takes an
+ * approved one down, leaving visibility as it was.
  */
 export declare const CellModerationDecision: z.ZodEnum<{
     rejected: "rejected";
@@ -515,13 +570,16 @@ export declare const CellModerationDecision: z.ZodEnum<{
 }>;
 export type CellModerationDecision = z.infer<typeof CellModerationDecision>;
 /**
- * Input for `cell_moderate` — the `pending → approved | rejected` transition,
- * gated on moderation authority over the **governing root** (admin / root
- * owner in v1), not the contribution (which the author manages, and could
- * otherwise self-approve). 404 when the caller neither views the target nor
- * stewards it (a root manager reads a pending or rejected contribution through
- * the steward arm); 403 when the caller reaches it but isn't a root manager
- * (the author lands here).
+ * Input for `cell_moderate` — the `pending → approved | rejected` decision, plus
+ * the `approved → rejected` takedown, gated on moderation authority over the
+ * **governing root** (admin / root owner in v1), not the contribution (which
+ * the author manages, and could otherwise self-approve). 404 when the caller
+ * neither views the target nor stewards it (a root manager reads a pending or
+ * rejected contribution through the steward arm); 403 when the caller reaches
+ * it but isn't a root manager (the author lands here); 400 `cell_not_pending`
+ * when a root manager names a transition the contribution's state doesn't
+ * allow — approving one that is not pending, or rejecting one already rejected
+ * or never moderated.
  */
 export declare const CellModerateInput: z.ZodObject<{
     cell_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
@@ -549,6 +607,7 @@ export declare const CellModerateOutput: z.ZodObject<{
         parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         moderation: z.ZodNullable<z.ZodString>;
+        policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
         created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         created_at: z.ZodString;
@@ -558,6 +617,47 @@ export declare const CellModerateOutput: z.ZodObject<{
     }, z.core.$strict>;
 }, z.core.$strict>;
 export type CellModerateOutput = z.infer<typeof CellModerateOutput>;
+/**
+ * Input for `cell_policy_set` — replace a root's contribution policy, or clear
+ * it with `null`. Manage-tier on the root: 404 when the caller can't view it,
+ * 403 `ERROR_CELL_POLICY_MANAGE_ONLY` when they can but don't manage it (an
+ * editor grant included), 400 `ERROR_CELL_POLICY_ROOT_ONLY` on a cell with a
+ * parent, then the mounted authorizer's validation of a non-null policy
+ * (`ERROR_CELL_POLICY_UNSUPPORTED` when none can).
+ */
+export declare const CellPolicySetInput: z.ZodObject<{
+    cell_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+    policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
+    acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+}, z.core.$strict>;
+export type CellPolicySetInput = z.infer<typeof CellPolicySetInput>;
+export declare const CellPolicySetOutput: z.ZodObject<{
+    cell: z.ZodObject<{
+        id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+        path: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>;
+        data: z.ZodObject<{
+            label: z.ZodOptional<z.ZodString>;
+            summary: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>;
+        kind: z.ZodNullable<z.ZodString>;
+        visibility: z.ZodEnum<{
+            private: "private";
+            public: "public";
+        }>;
+        refs: z.ZodNullable<z.ZodArray<z.ZodString & z.ZodType<import("@fuzdev/fuz_util/hash_schemas.js").FactHash, string, z.core.$ZodTypeInternals<import("@fuzdev/fuz_util/hash_schemas.js").FactHash, string>>>>;
+        parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        moderation: z.ZodNullable<z.ZodString>;
+        policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
+        created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        created_at: z.ZodString;
+        updated_at: z.ZodNullable<z.ZodString>;
+        deleted_at: z.ZodNullable<z.ZodString>;
+        grant_count: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type CellPolicySetOutput = z.infer<typeof CellPolicySetOutput>;
 export declare const cell_create_action_spec: {
     method: string;
     kind: "request_response";
@@ -579,6 +679,7 @@ export declare const cell_create_action_spec: {
         }>>;
         path: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>>;
         parent_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
+        policy: z.ZodOptional<z.ZodNullable<z.ZodObject<{}, z.core.$loose>>>;
         acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
     output: z.ZodObject<{
@@ -598,6 +699,7 @@ export declare const cell_create_action_spec: {
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -641,6 +743,7 @@ export declare const cell_get_action_spec: {
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -708,6 +811,7 @@ export declare const cell_update_action_spec: {
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -790,6 +894,7 @@ export declare const cell_list_action_spec: {
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -850,6 +955,7 @@ export declare const cell_clone_action_spec: {
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -896,6 +1002,51 @@ export declare const cell_moderate_action_spec: {
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
+            created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            created_at: z.ZodString;
+            updated_at: z.ZodNullable<z.ZodString>;
+            deleted_at: z.ZodNullable<z.ZodString>;
+            grant_count: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    async: true;
+    rate_limit: "account";
+    description: string;
+};
+export declare const cell_policy_set_action_spec: {
+    method: string;
+    kind: "request_response";
+    initiator: "frontend";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
+    side_effects: true;
+    input: z.ZodObject<{
+        cell_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+        policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
+        acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+    }, z.core.$strict>;
+    output: z.ZodObject<{
+        cell: z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+            path: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>;
+            data: z.ZodObject<{
+                label: z.ZodOptional<z.ZodString>;
+                summary: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>;
+            kind: z.ZodNullable<z.ZodString>;
+            visibility: z.ZodEnum<{
+                private: "private";
+                public: "public";
+            }>;
+            refs: z.ZodNullable<z.ZodArray<z.ZodString & z.ZodType<import("@fuzdev/fuz_util/hash_schemas.js").FactHash, string, z.core.$ZodTypeInternals<import("@fuzdev/fuz_util/hash_schemas.js").FactHash, string>>>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -910,10 +1061,9 @@ export declare const cell_moderate_action_spec: {
 };
 /**
  * All cell-layer action specs — composed by app registries. Bundles the
- * seven generic verbs (this module), the three `cell_grant_*` specs, the
- * three `cell_field_*` specs, the four `cell_item_*` specs, and the
- * `cell_audit_list` spec so codegen + UI clients see a single cell
- * namespace.
+ * generic verbs (this module) with the `cell_grant_*`, `cell_field_*`,
+ * `cell_item_*`, and `cell_audit_list` specs so codegen + UI clients see a
+ * single cell namespace.
  */
 export declare const all_cell_action_specs: readonly [{
     method: string;
@@ -936,6 +1086,7 @@ export declare const all_cell_action_specs: readonly [{
         }>>;
         path: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>>;
         parent_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
+        policy: z.ZodOptional<z.ZodNullable<z.ZodObject<{}, z.core.$loose>>>;
         acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
     output: z.ZodObject<{
@@ -955,6 +1106,7 @@ export declare const all_cell_action_specs: readonly [{
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -997,6 +1149,7 @@ export declare const all_cell_action_specs: readonly [{
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -1063,6 +1216,7 @@ export declare const all_cell_action_specs: readonly [{
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -1143,6 +1297,7 @@ export declare const all_cell_action_specs: readonly [{
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -1202,6 +1357,7 @@ export declare const all_cell_action_specs: readonly [{
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;
@@ -1247,6 +1403,50 @@ export declare const all_cell_action_specs: readonly [{
             parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
+            created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            created_at: z.ZodString;
+            updated_at: z.ZodNullable<z.ZodString>;
+            deleted_at: z.ZodNullable<z.ZodString>;
+            grant_count: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    async: true;
+    rate_limit: "account";
+    description: string;
+}, {
+    method: string;
+    kind: "request_response";
+    initiator: "frontend";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
+    side_effects: true;
+    input: z.ZodObject<{
+        cell_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+        policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
+        acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+    }, z.core.$strict>;
+    output: z.ZodObject<{
+        cell: z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+            path: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "CellPath", "out">>;
+            data: z.ZodObject<{
+                label: z.ZodOptional<z.ZodString>;
+                summary: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>;
+            kind: z.ZodNullable<z.ZodString>;
+            visibility: z.ZodEnum<{
+                private: "private";
+                public: "public";
+            }>;
+            refs: z.ZodNullable<z.ZodArray<z.ZodString & z.ZodType<import("@fuzdev/fuz_util/hash_schemas.js").FactHash, string, z.core.$ZodTypeInternals<import("@fuzdev/fuz_util/hash_schemas.js").FactHash, string>>>>;
+            parent_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            root_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            moderation: z.ZodNullable<z.ZodString>;
+            policy: z.ZodNullable<z.ZodObject<{}, z.core.$loose>>;
             created_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             updated_by: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             created_at: z.ZodString;

package/dist/auth/cell_action_specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAEN,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEN,0BAA0B,EAC1B,6BAA6B,EAC7B,2BAA2B,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEN,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAE1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEN,2BAA2B,EAC3B,MAAM,8BAA8B,CAAC;AAGtC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc;;;EAAgC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAO5D,OAAO,EACN,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,CAAC;AACF,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,CAAC;AAClG,OAAO,EACN,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,CAAC;AACF,OAAO,EAAE,2BAA2B,EAAE,CAAC;AAIvC,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,EAAG,gBAAyB,CAAC;AAE9D,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,EAAG,6BAAsC,CAAC;AAExF,6EAA6E;AAC7E,eAAO,MAAM,kCAAkC,EAAG,8BAAuC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAG,mBAA4B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAG,uBAAgC,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAEhF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,EAAG,mBAA4B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,wCAAwC,EACpD,oCAA6C,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,yCAAyC,EACrD,qCAA8C,CAAC;AAIhD;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,oDAA0E,CAAC;AAChG,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;kBAkCnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAIhD;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;kBAsB1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AACnE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;;;;kBAM8C,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAI1D;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AACnE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE,eAAO,MAAM,eAAe;;;kBAG1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;kBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;mBAsCb,CAAC;AACd,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAI5D;;;;;;GAMG;AACH,eAAO,MAAM,cAAc;;;;;;;;kBAezB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAI9D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;EAAmC,CAAC;AACvE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB;;;;;;;kBAM5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AACrE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYC,CAAC;AAEtC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYI,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWC,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;CAUC,CAAC;AAEtC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYG,CAAC;AAEtC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYE,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYD,CAAC;AAEtC;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYxB,CAAC"}
+{"version":3,"file":"cell_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/cell_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAEN,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEN,0BAA0B,EAC1B,6BAA6B,EAC7B,2BAA2B,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEN,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAE1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEN,2BAA2B,EAC3B,MAAM,8BAA8B,CAAC;AAGtC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc;;;EAAgC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAO5D,OAAO,EACN,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,CAAC;AACF,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,CAAC;AAClG,OAAO,EACN,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,CAAC;AACF,OAAO,EAAE,2BAA2B,EAAE,CAAC;AAIvC,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,EAAG,gBAAyB,CAAC;AAE9D,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,EAAG,6BAAsC,CAAC;AAExF,6EAA6E;AAC7E,eAAO,MAAM,kCAAkC,EAAG,8BAAuC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAG,mBAA4B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAG,uBAAgC,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAEhF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,EAAG,mBAA4B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAEhF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAG,kBAA2B,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,EAAG,uBAAgC,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAG,qBAA8B,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,wCAAwC,EACpD,oCAA6C,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,yCAAyC,EACrD,qCAA8C,CAAC;AAIhD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,gCAGrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,oDAA0E,CAAC;AAChG,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;kBAsCnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAIhD;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;kBA0B1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AACnE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;;;;kBAM8C,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAI1D;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AACnE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE,eAAO,MAAM,eAAe;;;kBAG1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;kBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIhE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;mBAsCb,CAAC;AACd,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAI5D;;;;;;GAMG;AACH,eAAO,MAAM,cAAc;;;;;;;;kBAezB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAI9D;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;EAAmC,CAAC;AACvE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB;;;;;;;kBAM5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AACrE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;;;;kBAM7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAItE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYC,CAAC;AAEtC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYI,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWC,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;CAUC,CAAC;AAEtC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYG,CAAC;AAEtC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYE,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYD,CAAC;AAEtC,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYH,CAAC;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAaxB,CAAC"}

package/dist/auth/cell_action_specs.js

@@ -1,6 +1,6 @@
 /**
- * Cell RPC action specs — the declarative contract for the six generic
- * cell verbs. App vocabulary (galleries, posts, events) lives in
+ * Cell RPC action specs — the declarative contract for the generic cell
+ * verbs. App vocabulary (galleries, posts, events) lives in
  * client-side helpers; the wire stays generic.
  *
  * @module
@@ -112,6 +112,45 @@ export const ERROR_CELL_REF_NOT_HELD = 'cell_ref_not_held';
  * `ERROR_CELL_NOT_A_CONTRIBUTION`).
  */
 export const ERROR_CELL_NOT_A_CONTRIBUTION = 'cell_not_a_contribution';
+/**
+ * Error reason — `cell_moderate` names a transition the target's `moderation`
+ * doesn't allow: an approval of a contribution that is not `'pending'`
+ * (approved or rejected already, or never moderated), or a rejection of one
+ * that is neither `'pending'` nor `'approved'` (rejected already, or never
+ * moderated). A **400** `invalid_params`, answered to a caller holding
+ * moderation authority over the governing root (the 404 mask and the 403 come
+ * first). Without it an approval would force any reachable contribution public
+ * (twin of the Rust `ERROR_CELL_NOT_PENDING`).
+ */
+export const ERROR_CELL_NOT_PENDING = 'cell_not_pending';
+/**
+ * Error reason — a policy write (a `cell_create` carrying `policy`, or
+ * `cell_policy_set`) targeted a cell with a parent. Only a root carries a
+ * contribution policy. A **400** `invalid_params` (twin of the Rust
+ * `ERROR_CELL_POLICY_ROOT_ONLY`).
+ */
+export const ERROR_CELL_POLICY_ROOT_ONLY = 'cell_policy_root_only';
+/**
+ * Error reason — a non-null policy write found nothing to interpret it: no
+ * `authorize_create` is mounted, or the mounted one has no `validate_policy`.
+ * The policy is opaque to the spine, so the write is refused rather than
+ * stored inert. A **400** `invalid_params` (twin of the Rust
+ * `ERROR_CELL_POLICY_UNSUPPORTED`).
+ */
+export const ERROR_CELL_POLICY_UNSUPPORTED = 'cell_policy_unsupported';
+/**
+ * Error reason — a `cell_policy_set` caller can view the root but can't manage
+ * it (not admin, not the owner — an editor grant included). A **403**
+ * `forbidden`; a caller who can't view the root gets the 404 mask first (twin
+ * of the Rust `ERROR_CELL_POLICY_MANAGE_ONLY`).
+ */
+export const ERROR_CELL_POLICY_MANAGE_ONLY = 'cell_policy_manage_only';
+/**
+ * Error reason — the conventional refusal a `CellCreateAuthorize.validate_policy`
+ * throws for a policy it can't interpret. The spine never answers it itself
+ * (twin of the Rust `ERROR_CELL_POLICY_INVALID`).
+ */
+export const ERROR_CELL_POLICY_INVALID = 'cell_policy_invalid';
 /**
  * Error reason — null-auth `cell_list` caller passed a `created_by`
  * filter. The filter is a soft account-id enumeration vector ("does
@@ -126,6 +165,15 @@ export const ERROR_CELL_LIST_CREATED_BY_REQUIRES_AUTH = 'cell_list_created_by_re
  */
 export const ERROR_CELL_LIST_SHARED_WITH_REQUIRES_AUTH = 'cell_list_shared_with_requires_auth';
 // -- Shared schemas ---------------------------------------------------------
+/**
+ * A root's contribution policy — any JSON object. Opaque to the spine: the
+ * consumer's create authorizer validates it (`CellCreateAuthorize.validate_policy`)
+ * and interprets it (`CellCreateAuthorizeInput.root_policy`). Loose for that
+ * reason — the keys are the consumer's. Twin of the Rust `CellPolicy`.
+ */
+export const CellPolicy = z.looseObject({}).meta({
+    description: "A root's contribution policy — a JSON object the mounted create authorizer validates and interprets; the spine stores it without reading it."
+});
 /**
  * Wire form for `cell.path`.
  *
@@ -204,6 +252,9 @@ export const CellJson = z.strictObject({
     moderation: z.string().nullable().meta({
         description: "Approval-lifecycle marker for a gated contribution (`'pending'` / `'approved'` / `'rejected'`); `null` = unmoderated. A control field with a non-author writer — peer to `visibility`, never inside `data` (set by the create authorizer's verdict, transitioned only by `cell_moderate`)."
     }),
+    policy: CellPolicy.nullable().meta({
+        description: "A root's contribution policy, read by the create authorizer for every contribution under it; `null` = the authorizer's floor governs, and always `null` on a cell with a parent. A manage-tier control field — set at the root's `cell_create`, changed only by `cell_policy_set`, never inside `data`."
+    }),
     created_by: Uuid.nullable(),
     updated_by: Uuid.nullable(),
     created_at: z.string(),
@@ -237,6 +288,9 @@ export const CellCreateInput = z.strictObject({
     parent_id: Uuid.nullish().meta({
         description: 'Immediate container — the directory this cell is created in. Omit / null = a root (parentless). The handler resolves `root_id` from it and gates the create through the parent-aware authorizer; `root_id` / `moderation` are handler-derived, never wire input.'
     }),
+    policy: CellPolicy.nullish().meta({
+        description: "The new root's contribution policy. Root-only (beside a `parent_id` it is refused `ERROR_CELL_POLICY_ROOT_ONLY`), and the mounted create authorizer must accept it (`ERROR_CELL_POLICY_UNSUPPORTED` when none can). Omit / null = no policy."
+    }),
     acting: ActingActor
 });
 export const CellCreateOutput = z.strictObject({ cell: CellJson });
@@ -392,18 +446,22 @@ export const CellCloneOutput = z.strictObject({ cell: CellJson });
  * The terminal transition a `cell_moderate` call applies to a gated
  * contribution's `moderation` lifecycle. The born state (`'pending'`) is set
  * by the create authorizer, never on the wire; the verb only moves it to a
- * terminal state. `'approved'` publishes (also flips `visibility → 'public'`);
- * `'rejected'` leaves it private.
+ * terminal state. `'approved'` publishes a pending contribution (also flips
+ * `visibility → 'public'`); `'rejected'` holds a pending one back or takes an
+ * approved one down, leaving visibility as it was.
  */
 export const CellModerationDecision = z.enum(['approved', 'rejected']);
 /**
- * Input for `cell_moderate` — the `pending → approved | rejected` transition,
- * gated on moderation authority over the **governing root** (admin / root
- * owner in v1), not the contribution (which the author manages, and could
- * otherwise self-approve). 404 when the caller neither views the target nor
- * stewards it (a root manager reads a pending or rejected contribution through
- * the steward arm); 403 when the caller reaches it but isn't a root manager
- * (the author lands here).
+ * Input for `cell_moderate` — the `pending → approved | rejected` decision, plus
+ * the `approved → rejected` takedown, gated on moderation authority over the
+ * **governing root** (admin / root owner in v1), not the contribution (which
+ * the author manages, and could otherwise self-approve). 404 when the caller
+ * neither views the target nor stewards it (a root manager reads a pending or
+ * rejected contribution through the steward arm); 403 when the caller reaches
+ * it but isn't a root manager (the author lands here); 400 `cell_not_pending`
+ * when a root manager names a transition the contribution's state doesn't
+ * allow — approving one that is not pending, or rejecting one already rejected
+ * or never moderated.
  */
 export const CellModerateInput = z.strictObject({
     cell_id: Uuid.meta({ description: 'Contribution to moderate.' }),
@@ -413,6 +471,23 @@ export const CellModerateInput = z.strictObject({
     acting: ActingActor
 });
 export const CellModerateOutput = z.strictObject({ cell: CellJson });
+// -- cell_policy_set --------------------------------------------------------
+/**
+ * Input for `cell_policy_set` — replace a root's contribution policy, or clear
+ * it with `null`. Manage-tier on the root: 404 when the caller can't view it,
+ * 403 `ERROR_CELL_POLICY_MANAGE_ONLY` when they can but don't manage it (an
+ * editor grant included), 400 `ERROR_CELL_POLICY_ROOT_ONLY` on a cell with a
+ * parent, then the mounted authorizer's validation of a non-null policy
+ * (`ERROR_CELL_POLICY_UNSUPPORTED` when none can).
+ */
+export const CellPolicySetInput = z.strictObject({
+    cell_id: Uuid.meta({ description: 'Root whose policy to set.' }),
+    policy: CellPolicy.nullable().meta({
+        description: 'The new policy (a JSON object), or `null` to clear it.'
+    }),
+    acting: ActingActor
+});
+export const CellPolicySetOutput = z.strictObject({ cell: CellJson });
 // -- Action specs -----------------------------------------------------------
 export const cell_create_action_spec = {
     method: 'cell_create',
@@ -494,14 +569,25 @@ export const cell_moderate_action_spec = {
     output: CellModerateOutput,
     async: true,
     rate_limit: 'account',
-    description: 'Moderate a gated contribution (`pending → approved | rejected`). Gated on moderation authority over the governing root (admin / root owner), not the contribution — so the author cannot self-approve. Approval flips `moderation → approved` + `visibility → public`; rejection sets `moderation → rejected`. 404 on a target the caller neither views nor stewards (a root manager reads a pending or rejected contribution), 403 for a viewable target whose caller is not a root manager.'
+    description: 'Moderate a gated contribution (`pending → approved | rejected`, and the `approved → rejected` takedown). Gated on moderation authority over the governing root (admin / root owner), not the contribution — so the author cannot self-approve. Approval flips `moderation → approved` + `visibility → public`; rejection sets `moderation → rejected` and leaves visibility alone. 404 on a target the caller neither views nor stewards (a root manager reads a pending or rejected contribution), 403 for a viewable target whose caller is not a root manager, 400 `cell_not_pending` for a transition the target does not allow (approving a contribution that is not pending; rejecting one already rejected or never moderated).'
+};
+export const cell_policy_set_action_spec = {
+    method: 'cell_policy_set',
+    kind: 'request_response',
+    initiator: 'frontend',
+    auth: { account: 'required', actor: 'required' },
+    side_effects: true,
+    input: CellPolicySetInput,
+    output: CellPolicySetOutput,
+    async: true,
+    rate_limit: 'account',
+    description: "Set or clear a root's contribution policy. Manage-tier on the root (admin / owner) — an editor grant edits `data` but never the policy that decides who may contribute. 404 on a root the caller can't view, 403 `cell_policy_manage_only` for a viewer who doesn't manage it, 400 `cell_policy_root_only` on a cell with a parent; a non-null policy must pass the mounted create authorizer's validation (400 `cell_policy_unsupported` when none can). Audited as `cell_policy_set` with the new and the previous policy."
 };
 /**
  * All cell-layer action specs — composed by app registries. Bundles the
- * seven generic verbs (this module), the three `cell_grant_*` specs, the
- * three `cell_field_*` specs, the four `cell_item_*` specs, and the
- * `cell_audit_list` spec so codegen + UI clients see a single cell
- * namespace.
+ * generic verbs (this module) with the `cell_grant_*`, `cell_field_*`,
+ * `cell_item_*`, and `cell_audit_list` specs so codegen + UI clients see a
+ * single cell namespace.
  */
 export const all_cell_action_specs = [
     cell_create_action_spec,
@@ -511,6 +597,7 @@ export const all_cell_action_specs = [
     cell_list_action_spec,
     cell_clone_action_spec,
     cell_moderate_action_spec,
+    cell_policy_set_action_spec,
     ...all_cell_grant_action_specs,
     ...all_cell_field_action_specs,
     ...all_cell_item_action_specs,