From 023c789a3190a92e49c30b3385ade0e983008f41 Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Sun, 19 Jul 2026 09:46:12 +0100
Subject: [PATCH 01/16] wip: delphi trace transform rules

---
 Cargo.lock                                    |  91 ++++-
 Cargo.toml                                    |   2 +
 apps/frontend/src/pages/moderation.vue        |  25 +-
 .../moderation/technical-review/index.vue     |   9 +
 .../moderation/technical-review/rules.vue     | 288 +++++++++++++
 ...1078cb48ccd645f059e257cd204de024955b8.json |  14 +
 ...05f834dbb9b88b834186b1353f116a07c3421.json |  60 +++
 ...a9ff55fc6dda4b154dc3136478d3772e06020.json |  61 +++
 ...6f7de5ddc18e2014470d2b88626a9b37d30fe.json |  42 ++
 ...70a71b32d7fe35bf5f11654e1653c63245078.json |  80 ++++
 ...37aa1023b436d06b4412a559553dd5452029e.json |  22 +
 apps/labrinth/Cargo.toml                      |   1 +
 .../20260715120000_delphi_rules.sql           |  50 +++
 apps/labrinth/src/routes/internal/mod.rs      |   4 +
 .../routes/internal/moderation/tech_review.rs |   2 +
 .../internal/moderation/tech_review/rules.rs  | 379 ++++++++++++++++++
 .../modules/labrinth/tech-review/internal.ts  |  48 +++
 .../api-client/src/modules/labrinth/types.ts  |  20 +
 packages/delphi-cel-experiment/Cargo.toml     |  10 +
 packages/delphi-cel-experiment/src/main.rs    | 173 ++++++++
 20 files changed, 1376 insertions(+), 5 deletions(-)
 create mode 100644 apps/frontend/src/pages/moderation/technical-review/rules.vue
 create mode 100644 apps/labrinth/.sqlx/query-2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8.json
 create mode 100644 apps/labrinth/.sqlx/query-3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421.json
 create mode 100644 apps/labrinth/.sqlx/query-3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020.json
 create mode 100644 apps/labrinth/.sqlx/query-882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe.json
 create mode 100644 apps/labrinth/.sqlx/query-90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078.json
 create mode 100644 apps/labrinth/.sqlx/query-9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e.json
 create mode 100644 apps/labrinth/migrations/20260715120000_delphi_rules.sql
 create mode 100644 apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
 create mode 100644 packages/delphi-cel-experiment/Cargo.toml
 create mode 100644 packages/delphi-cel-experiment/src/main.rs

diff --git a/Cargo.lock b/Cargo.lock
index 1c3493e8e0..c7b1fff036 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -437,6 +437,23 @@ dependencies = [
  "windows-sys 0.60.2",
 ]
 
+[[package]]
+name = "antlr4rust"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "093d520274bfff7278d776f7ea12981a0a0a6f96db90964658e0f38fc6e9a6a6"
+dependencies = [
+ "better_any",
+ "bit-set 0.8.0",
+ "byteorder",
+ "lazy_static",
+ "murmur3",
+ "once_cell",
+ "parking_lot",
+ "typed-arena",
+ "uuid 1.23.3",
+]
+
 [[package]]
 name = "anyhow"
 version = "1.0.100"
@@ -1415,10 +1432,16 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b08e33815c87d8cadcddb1e74ac307368a3751fbe40c961538afa21a1899f21c"
 dependencies = [
  "base64 0.21.7",
- "pastey",
+ "pastey 0.1.1",
  "serde",
 ]
 
+[[package]]
+name = "better_any"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4372b9543397a4b86050cc5e7ee36953edf4bac9518e8a774c2da694977fb6e4"
+
 [[package]]
 name = "bindgen"
 version = "0.72.1"
@@ -1445,7 +1468,16 @@ version = "0.5.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0700ddab506f33b20a03b13996eccd309a48e5ff77d0d95926aa0210fb4e95f1"
 dependencies = [
- "bit-vec",
+ "bit-vec 0.6.3",
+]
+
+[[package]]
+name = "bit-set"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
+dependencies = [
+ "bit-vec 0.8.0",
 ]
 
 [[package]]
@@ -1454,6 +1486,12 @@ version = "0.6.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "349f9b6a179ed607305526ca489b34ad0a41aed5f7980fa90eb03160b69598fb"
 
+[[package]]
+name = "bit-vec"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
+
 [[package]]
 name = "bit_field"
 version = "0.10.3"
@@ -1883,6 +1921,22 @@ dependencies = [
  "shlex",
 ]
 
+[[package]]
+name = "cel"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ed39583e427bf41d93c28c7f27c943a93bcb8697220ff3575fd53a9e13f3814"
+dependencies = [
+ "antlr4rust",
+ "base64 0.22.1",
+ "lazy_static",
+ "nom 7.1.3",
+ "pastey 0.2.3",
+ "serde",
+ "serde_json",
+ "thiserror 1.0.69",
+]
+
 [[package]]
 name = "censor"
 version = "0.3.0"
@@ -2843,6 +2897,15 @@ version = "0.1.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "26bf8fc351c5ed29b5c2f0cbbac1b209b74f60ecd62e675a998df72c49af5204"
 
+[[package]]
+name = "delphi-cel-experiment"
+version = "0.1.0"
+dependencies = [
+ "cel",
+ "serde",
+ "serde_json",
+]
+
 [[package]]
 name = "der"
 version = "0.7.10"
@@ -3508,7 +3571,7 @@ version = "0.13.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "531e46835a22af56d1e3b66f04844bed63158bc094a628bec1d321d9b4c44bf2"
 dependencies = [
- "bit-set",
+ "bit-set 0.5.3",
  "regex-automata",
  "regex-syntax",
 ]
@@ -5433,6 +5496,7 @@ dependencies = [
  "base64 0.22.1",
  "bitflags 2.9.4",
  "bytes",
+ "cel",
  "censor",
  "chrono",
  "clap 4.5.48",
@@ -6170,6 +6234,15 @@ version = "0.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fb585ade2549a017db2e35978b77c319214fa4b37cede841e27954dd6e8f3ca8"
 
+[[package]]
+name = "murmur3"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a198f9589efc03f544388dfc4a19fe8af4323662b62f598b8dcfdac62c14771c"
+dependencies = [
+ "byteorder",
+]
+
 [[package]]
 name = "mutually_exclusive_features"
 version = "0.1.0"
@@ -7178,6 +7251,12 @@ version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "35fb2e5f958ec131621fdd531e9fc186ed768cbe395337403ae56c17a74c68ec"
 
+[[package]]
+name = "pastey"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ee67f1008b1ba2321834326597b8e186293b049a023cdef258527550b9935b4"
+
 [[package]]
 name = "path-util"
 version = "0.0.0"
@@ -11671,6 +11750,12 @@ dependencies = [
  "utf-8",
 ]
 
+[[package]]
+name = "typed-arena"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6af6ae20167a9ece4bcb41af5b80f8a1f1df981f6391189ce00fd257af04126a"
+
 [[package]]
 name = "typed-path"
 version = "0.12.0"
diff --git a/Cargo.toml b/Cargo.toml
index a5aed6cf76..5d1fa375b6 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -8,6 +8,7 @@ members = [
   "packages/app-lib",
   "packages/ariadne",
   "packages/daedalus",
+  "packages/delphi-cel-experiment",
   "packages/labrinth-derive",
   "packages/modrinth-content-management",
   "packages/modrinth-log",
@@ -55,6 +56,7 @@ bon = "3.9.3"
 bytemuck = "1.24.0"
 bytes = "1.10.1"
 censor = "0.3.0"
+cel = { version = "0.14.0", default-features = false, features = ["json"] }
 chardetng = "0.1.17"
 chrono = "0.4.42"
 cidre = { version = "0.15.0", default-features = false, features = [
diff --git a/apps/frontend/src/pages/moderation.vue b/apps/frontend/src/pages/moderation.vue
index 9352acabba..dc4a051390 100644
--- a/apps/frontend/src/pages/moderation.vue
+++ b/apps/frontend/src/pages/moderation.vue
@@ -15,7 +15,14 @@
 </template>
 
 <script setup lang="ts">
-import { FolderIcon, GlobeIcon, HashIcon, ReportIcon, ShieldCheckIcon } from '@modrinth/assets'
+import {
+	FolderIcon,
+	GlobeIcon,
+	HashIcon,
+	ReportIcon,
+	SettingsIcon,
+	ShieldCheckIcon,
+} from '@modrinth/assets'
 import { Chips, defineMessages, NavTabs, useVIntl } from '@modrinth/ui'
 
 definePageMeta({
@@ -51,6 +58,10 @@ const messages = defineMessages({
 		id: 'moderation.page.global-detail-traces',
 		defaultMessage: 'Global traces',
 	},
+	delphiRulesTitle: {
+		id: 'moderation.page.delphi-rules',
+		defaultMessage: 'Delphi rules',
+	},
 })
 
 const moderationLinks = [
@@ -71,6 +82,11 @@ const moderationLinks = [
 		href: '/moderation/global-traces',
 		icon: HashIcon,
 	},
+	{
+		label: formatMessage(messages.delphiRulesTitle),
+		href: '/moderation/technical-review/rules',
+		icon: SettingsIcon,
+	},
 ]
 
 const mobileNavOptions = [
@@ -79,12 +95,15 @@ const mobileNavOptions = [
 	formatMessage(messages.reportsTitle),
 	formatMessage(messages.externalFilesTitle),
 	formatMessage(messages.globalDetailTracesTitle),
+	formatMessage(messages.delphiRulesTitle),
 ]
 
 const selectedChip = computed({
 	get() {
 		const path = route.path
-		if (path.startsWith('/moderation/technical-review')) {
+		if (path.startsWith('/moderation/technical-review/rules')) {
+			return formatMessage(messages.delphiRulesTitle)
+		} else if (path.startsWith('/moderation/technical-review')) {
 			return formatMessage(messages.technicalReviewTitle)
 		} else if (path.startsWith('/moderation/reports')) {
 			return formatMessage(messages.reportsTitle)
@@ -110,6 +129,8 @@ function navigateToPage(selectedOption: string) {
 		router.push('/moderation/external-projects')
 	} else if (selectedOption === formatMessage(messages.globalDetailTracesTitle)) {
 		router.push('/moderation/global-traces')
+	} else if (selectedOption === formatMessage(messages.delphiRulesTitle)) {
+		router.push('/moderation/technical-review/rules')
 	} else {
 		router.push('/moderation')
 	}
diff --git a/apps/frontend/src/pages/moderation/technical-review/index.vue b/apps/frontend/src/pages/moderation/technical-review/index.vue
index 9c9773c2a9..88c252fd58 100644
--- a/apps/frontend/src/pages/moderation/technical-review/index.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/index.vue
@@ -5,10 +5,12 @@ import {
 	ListFilterIcon,
 	LoaderCircleIcon,
 	SearchIcon,
+	SettingsIcon,
 	SortAscIcon,
 	SortDescIcon,
 } from '@modrinth/assets'
 import {
+	ButtonStyled,
 	Combobox,
 	type ComboboxOption,
 	commonMessages,
@@ -607,6 +609,13 @@ watch(totalPages, (pages) => {
 			<div
 				class="flex flex-col items-stretch justify-end gap-2 sm:flex-row sm:items-center lg:flex-shrink-0"
 			>
+				<ButtonStyled>
+					<NuxtLink to="/moderation/technical-review/rules">
+						<SettingsIcon class="size-5" />
+						Rules
+					</NuxtLink>
+				</ButtonStyled>
+
 				<Combobox
 					v-model="currentResponseFilter"
 					class="!w-full flex-grow sm:!w-[120px] sm:flex-grow-0"
diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
new file mode 100644
index 0000000000..1a9ac93c98
--- /dev/null
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -0,0 +1,288 @@
+<template>
+	<NewModal ref="ruleModal" :header="modalTitle">
+		<form class="flex w-[36rem] max-w-full flex-col gap-3" @submit.prevent="saveRule">
+			<label class="font-semibold text-contrast" for="rule-name">Name</label>
+			<StyledInput
+				id="rule-name"
+				v-model="form.name"
+				type="text"
+				maxlength="128"
+				placeholder="Known-safe obfuscated bootstrap"
+			/>
+
+			<label class="font-semibold text-contrast" for="rule-priority">Priority</label>
+			<StyledInput id="rule-priority" v-model="form.priority" type="number" placeholder="0" />
+			<p class="m-0 text-sm text-secondary">Higher-priority rules are evaluated first.</p>
+
+			<label class="font-semibold text-contrast" for="rule-expression">CEL expression</label>
+			<StyledInput
+				id="rule-expression"
+				v-model="form.expression"
+				type="text"
+				multiline
+				resize="vertical"
+				class="font-mono"
+				input-class="min-h-64 font-mono"
+			/>
+			<p class="m-0 text-sm text-secondary">
+				Return <code>null</code> when the rule does not match, or a map containing
+				<code>severity</code> and/or <code>hidden</code> when it does.
+			</p>
+
+			<div class="flex justify-end gap-2">
+				<ButtonStyled>
+					<button type="button" @click="closeRuleModal">Cancel</button>
+				</ButtonStyled>
+				<ButtonStyled color="brand">
+					<button type="submit" :disabled="isSaving">
+						{{ isSaving ? 'Saving...' : 'Save rule' }}
+					</button>
+				</ButtonStyled>
+			</div>
+		</form>
+	</NewModal>
+
+	<ConfirmModal
+		ref="deleteModal"
+		:title="`Delete ${ruleToDelete?.name ?? 'rule'}?`"
+		description="This permanently deletes the rule, its revisions, and its materialized effects."
+		:markdown="false"
+		proceed-label="Delete rule"
+		@proceed="deleteRule"
+	/>
+
+	<div class="flex flex-col gap-4">
+		<div class="flex flex-wrap items-center justify-between gap-3">
+			<div class="flex items-center gap-3">
+				<ButtonStyled circular type="transparent">
+					<NuxtLink to="/moderation/technical-review" aria-label="Back to tech review queue">
+						<ArrowLeftIcon />
+					</NuxtLink>
+				</ButtonStyled>
+				<div>
+					<h1 class="m-0 text-2xl font-bold text-contrast">Delphi rules</h1>
+					<p class="m-0 text-secondary">Transform or hide Delphi issue traces.</p>
+				</div>
+			</div>
+
+			<ButtonStyled color="brand">
+				<button type="button" @click="openCreateModal">
+					<PlusIcon />
+					Create rule
+				</button>
+			</ButtonStyled>
+		</div>
+
+		<details class="universal-card text-sm">
+			<summary class="cursor-pointer font-semibold text-contrast">CEL contract and input</summary>
+			<div class="mt-3 flex flex-col gap-2 text-secondary">
+				<p class="m-0">
+					Effects are maps such as
+					<code>{ "severity": "low", "hidden": false }</code>. Severity can be <code>low</code>,
+					<code>medium</code>, <code>high</code>, or <code>severe</code>.
+				</p>
+				<p class="m-0">
+					The <code>input</code> object contains <code>schema_version</code>,
+					<code>trace</code> (<code>key</code>, <code>issue_type</code>, <code>severity</code>,
+					<code>jar</code>, <code>file_path</code>, <code>data</code>),
+					<code>scan.delphi_version</code>, <code>artifact</code> (<code>size</code>,
+					<code>hashes</code>), and stable IDs under <code>scope</code> (<code>project_id</code>,
+					<code>version_id</code>, <code>file_id</code>).
+				</p>
+			</div>
+		</details>
+
+		<div v-if="isLoading" class="universal-card flex h-32 items-center justify-center">
+			<LoaderCircleIcon class="size-8 animate-spin text-secondary" />
+		</div>
+		<div v-else-if="loadFailed" class="universal-card flex flex-col items-center gap-3 py-8">
+			<p class="m-0 text-secondary">Failed to load Delphi rules.</p>
+			<ButtonStyled>
+				<button type="button" @click="loadRules">Try again</button>
+			</ButtonStyled>
+		</div>
+		<EmptyState
+			v-else-if="rules.length === 0"
+			type="no-search-result"
+			heading="No Delphi rules"
+			description="Create a rule to transform matching issue traces."
+		/>
+		<div v-else class="flex flex-col gap-3">
+			<article v-for="rule in rules" :key="rule.id" class="universal-card flex flex-col gap-3">
+				<div class="flex flex-wrap items-start justify-between gap-3">
+					<div>
+						<h2 class="m-0 text-lg font-bold text-contrast">{{ rule.name }}</h2>
+						<p class="m-0 text-sm text-secondary">
+							Priority {{ rule.priority }} · revision {{ rule.revision_id }}
+						</p>
+					</div>
+					<div class="flex gap-2">
+						<ButtonStyled>
+							<button type="button" @click="openEditModal(rule)">
+								<EditIcon />
+								Edit
+							</button>
+						</ButtonStyled>
+						<ButtonStyled color="red">
+							<button type="button" @click="openDeleteModal(rule)">
+								<TrashIcon />
+								Delete
+							</button>
+						</ButtonStyled>
+					</div>
+				</div>
+				<pre
+					class="m-0 overflow-x-auto rounded-lg bg-bg-raised p-3 text-sm"
+				><code>{{ rule.expression }}</code></pre>
+			</article>
+		</div>
+	</div>
+</template>
+
+<script setup lang="ts">
+import type { Labrinth } from '@modrinth/api-client'
+import { ArrowLeftIcon, EditIcon, LoaderCircleIcon, PlusIcon, TrashIcon } from '@modrinth/assets'
+import {
+	ButtonStyled,
+	ConfirmModal,
+	EmptyState,
+	injectModrinthClient,
+	injectNotificationManager,
+	NewModal,
+	StyledInput,
+} from '@modrinth/ui'
+
+const DEFAULT_EXPRESSION = `input.trace.issue_type == "OBFUSCATED_NAMES"
+	? {"severity": "low", "hidden": false}
+	: null`
+
+useHead({ title: 'Delphi rules - Modrinth' })
+
+const client = injectModrinthClient()
+const { addNotification } = injectNotificationManager()
+const ruleModal = useTemplateRef<InstanceType<typeof NewModal>>('ruleModal')
+const deleteModal = useTemplateRef<InstanceType<typeof ConfirmModal>>('deleteModal')
+
+const rules = ref<Labrinth.TechReview.Internal.DelphiRule[]>([])
+const isLoading = ref(true)
+const isSaving = ref(false)
+const loadFailed = ref(false)
+const editingRuleId = ref<number | null>(null)
+const ruleToDelete = ref<Labrinth.TechReview.Internal.DelphiRule | null>(null)
+const form = reactive({
+	name: '',
+	priority: '0',
+	expression: DEFAULT_EXPRESSION,
+})
+
+const modalTitle = computed(() => (editingRuleId.value === null ? 'Create rule' : 'Edit rule'))
+
+async function loadRules() {
+	isLoading.value = true
+	loadFailed.value = false
+	try {
+		rules.value = await client.labrinth.tech_review_internal.getRules()
+	} catch (error) {
+		console.error('Failed to load Delphi rules', error)
+		loadFailed.value = true
+	} finally {
+		isLoading.value = false
+	}
+}
+
+function openCreateModal() {
+	editingRuleId.value = null
+	form.name = ''
+	form.priority = '0'
+	form.expression = DEFAULT_EXPRESSION
+	ruleModal.value?.show()
+}
+
+function openEditModal(rule: Labrinth.TechReview.Internal.DelphiRule) {
+	editingRuleId.value = rule.id
+	form.name = rule.name
+	form.priority = String(rule.priority)
+	form.expression = rule.expression
+	ruleModal.value?.show()
+}
+
+function closeRuleModal() {
+	ruleModal.value?.hide()
+}
+
+async function saveRule() {
+	if (isSaving.value) return
+
+	const priority = Number(form.priority)
+	if (!form.name.trim() || !form.expression.trim() || !Number.isInteger(priority)) {
+		addNotification({
+			type: 'error',
+			title: 'Invalid rule',
+			text: 'Enter a name, a CEL expression, and an integer priority.',
+		})
+		return
+	}
+
+	isSaving.value = true
+	const payload = {
+		name: form.name,
+		priority,
+		expression: form.expression,
+	}
+
+	try {
+		if (editingRuleId.value === null) {
+			await client.labrinth.tech_review_internal.createRule(payload)
+		} else {
+			await client.labrinth.tech_review_internal.updateRule(editingRuleId.value, payload)
+		}
+		closeRuleModal()
+		addNotification({
+			type: 'success',
+			title: 'Rule saved',
+			text: 'The Delphi rule revision was saved.',
+		})
+		await loadRules()
+	} catch (error) {
+		console.error('Failed to save Delphi rule', error)
+		addNotification({
+			type: 'error',
+			title: 'Failed to save rule',
+			text: 'Check the CEL expression and try again.',
+		})
+	} finally {
+		isSaving.value = false
+	}
+}
+
+function openDeleteModal(rule: Labrinth.TechReview.Internal.DelphiRule) {
+	ruleToDelete.value = rule
+	deleteModal.value?.show()
+}
+
+async function deleteRule() {
+	const rule = ruleToDelete.value
+	if (!rule) return
+
+	try {
+		await client.labrinth.tech_review_internal.deleteRule(rule.id)
+		addNotification({
+			type: 'success',
+			title: 'Rule deleted',
+			text: `${rule.name} was deleted.`,
+		})
+		await loadRules()
+	} catch (error) {
+		console.error('Failed to delete Delphi rule', error)
+		addNotification({
+			type: 'error',
+			title: 'Failed to delete rule',
+			text: 'The Delphi rule could not be deleted.',
+		})
+	} finally {
+		ruleToDelete.value = null
+	}
+}
+
+onMounted(loadRules)
+</script>
diff --git a/apps/labrinth/.sqlx/query-2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8.json b/apps/labrinth/.sqlx/query-2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8.json
new file mode 100644
index 0000000000..5c2a54af63
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n\t\tUPDATE delphi_rule_revisions\n\t\tSET active = FALSE\n\t\tWHERE rule_id = $1 AND active\n\t\t",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8"
+}
diff --git a/apps/labrinth/.sqlx/query-3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421.json b/apps/labrinth/.sqlx/query-3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421.json
new file mode 100644
index 0000000000..e22ef8fa7c
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421.json
@@ -0,0 +1,60 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n\t\tINSERT INTO delphi_rules (\n\t\t\tname,\n\t\t\tpriority,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t)\n\t\tVALUES ($1, $2, $3, $3)\n\t\tRETURNING id, name, priority, created, updated, created_by, updated_by\n\t\t",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "name",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 2,
+        "name": "priority",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 3,
+        "name": "created",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 4,
+        "name": "updated",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 5,
+        "name": "created_by",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 6,
+        "name": "updated_by",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Int4",
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      false,
+      true,
+      true
+    ]
+  },
+  "hash": "3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421"
+}
diff --git a/apps/labrinth/.sqlx/query-3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020.json b/apps/labrinth/.sqlx/query-3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020.json
new file mode 100644
index 0000000000..0caf56d981
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020.json
@@ -0,0 +1,61 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tname = $2,\n\t\t\tpriority = $3,\n\t\t\tupdated = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $4\n\t\tWHERE id = $1\n\t\tRETURNING id, name, priority, created, updated, created_by, updated_by\n\t\t",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "name",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 2,
+        "name": "priority",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 3,
+        "name": "created",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 4,
+        "name": "updated",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 5,
+        "name": "created_by",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 6,
+        "name": "updated_by",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Text",
+        "Int4",
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      false,
+      true,
+      true
+    ]
+  },
+  "hash": "3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020"
+}
diff --git a/apps/labrinth/.sqlx/query-882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe.json b/apps/labrinth/.sqlx/query-882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe.json
new file mode 100644
index 0000000000..de87121fdd
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe.json
@@ -0,0 +1,42 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n\t\tINSERT INTO delphi_rule_revisions (rule_id, expression, created_by)\n\t\tVALUES ($1, $2, $3)\n\t\tRETURNING id, expression, created, created_by\n\t\t",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "expression",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 2,
+        "name": "created",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 3,
+        "name": "created_by",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Text",
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      true
+    ]
+  },
+  "hash": "882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe"
+}
diff --git a/apps/labrinth/.sqlx/query-90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078.json b/apps/labrinth/.sqlx/query-90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078.json
new file mode 100644
index 0000000000..80d5ade693
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078.json
@@ -0,0 +1,80 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n\t\tSELECT\n\t\t\tr.id,\n\t\t\tr.name,\n\t\t\tr.priority,\n\t\t\tr.created,\n\t\t\tr.updated,\n\t\t\tr.created_by,\n\t\t\tr.updated_by,\n\t\t\trr.id AS revision_id,\n\t\t\trr.expression,\n\t\t\trr.created AS revision_created,\n\t\t\trr.created_by AS revision_created_by\n\t\tFROM delphi_rules r\n\t\tINNER JOIN delphi_rule_revisions rr\n\t\t\tON rr.rule_id = r.id\n\t\t\tAND rr.active\n\t\tORDER BY r.priority DESC, r.id\n\t\t",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "name",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 2,
+        "name": "priority",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 3,
+        "name": "created",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 4,
+        "name": "updated",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 5,
+        "name": "created_by",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 6,
+        "name": "updated_by",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 7,
+        "name": "revision_id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 8,
+        "name": "expression",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 9,
+        "name": "revision_created",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 10,
+        "name": "revision_created_by",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      false,
+      true,
+      true,
+      false,
+      false,
+      false,
+      true
+    ]
+  },
+  "hash": "90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078"
+}
diff --git a/apps/labrinth/.sqlx/query-9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e.json b/apps/labrinth/.sqlx/query-9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e.json
new file mode 100644
index 0000000000..97b8370fb4
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM delphi_rules WHERE id = $1 RETURNING id",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e"
+}
diff --git a/apps/labrinth/Cargo.toml b/apps/labrinth/Cargo.toml
index 3da97e6fa8..50ac869f4a 100644
--- a/apps/labrinth/Cargo.toml
+++ b/apps/labrinth/Cargo.toml
@@ -34,6 +34,7 @@ base64 = { workspace = true }
 bitflags = { workspace = true }
 bytes = { workspace = true }
 censor = { workspace = true }
+cel = { workspace = true }
 chrono = { workspace = true, features = ["serde"] }
 clap = { workspace = true, features = ["derive"] }
 clickhouse = { workspace = true, features = ["time", "uuid"] }
diff --git a/apps/labrinth/migrations/20260715120000_delphi_rules.sql b/apps/labrinth/migrations/20260715120000_delphi_rules.sql
new file mode 100644
index 0000000000..527528dcaa
--- /dev/null
+++ b/apps/labrinth/migrations/20260715120000_delphi_rules.sql
@@ -0,0 +1,50 @@
+CREATE TABLE delphi_rules (
+	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
+	name TEXT NOT NULL CHECK (BTRIM(name) <> ''),
+	priority INTEGER NOT NULL DEFAULT 0,
+	created TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	updated TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	created_by BIGINT REFERENCES users (id)
+		ON DELETE SET NULL
+		ON UPDATE CASCADE,
+	updated_by BIGINT REFERENCES users (id)
+		ON DELETE SET NULL
+		ON UPDATE CASCADE
+);
+
+CREATE TABLE delphi_rule_revisions (
+	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
+	rule_id BIGINT NOT NULL REFERENCES delphi_rules (id)
+		ON DELETE CASCADE
+		ON UPDATE CASCADE,
+	expression TEXT NOT NULL CHECK (BTRIM(expression) <> ''),
+	active BOOLEAN NOT NULL DEFAULT TRUE,
+	created TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	created_by BIGINT REFERENCES users (id)
+		ON DELETE SET NULL
+		ON UPDATE CASCADE
+);
+
+CREATE UNIQUE INDEX delphi_rule_revisions_active
+	ON delphi_rule_revisions (rule_id)
+	WHERE active;
+
+CREATE INDEX delphi_rule_revisions_rule_id
+	ON delphi_rule_revisions (rule_id, created DESC);
+
+CREATE TABLE delphi_rule_effects (
+	rule_revision_id BIGINT NOT NULL REFERENCES delphi_rule_revisions (id)
+		ON DELETE CASCADE
+		ON UPDATE CASCADE,
+	issue_detail_id BIGINT NOT NULL REFERENCES delphi_report_issue_details (id)
+		ON DELETE CASCADE
+		ON UPDATE CASCADE,
+	severity delphi_severity,
+	hidden BOOLEAN NOT NULL DEFAULT FALSE,
+	created TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	PRIMARY KEY (rule_revision_id, issue_detail_id),
+	CHECK (severity IS NOT NULL OR hidden)
+);
+
+CREATE INDEX delphi_rule_effects_issue_detail_id
+	ON delphi_rule_effects (issue_detail_id);
diff --git a/apps/labrinth/src/routes/internal/mod.rs b/apps/labrinth/src/routes/internal/mod.rs
index 8ab03e1d12..acb31a4f36 100644
--- a/apps/labrinth/src/routes/internal/mod.rs
+++ b/apps/labrinth/src/routes/internal/mod.rs
@@ -115,6 +115,10 @@ pub fn config(cfg: &mut web::ServiceConfig) {
 		moderation::tech_review::search_projects,
 		moderation::tech_review::global::search_global_issue_details,
 		moderation::tech_review::global::get_global_issue_detail,
+		moderation::tech_review::rules::get_rules,
+		moderation::tech_review::rules::create_rule,
+		moderation::tech_review::rules::update_rule,
+		moderation::tech_review::rules::delete_rule,
 		moderation::tech_review::get_project_report,
 		moderation::tech_review::submit_report,
 		moderation::tech_review::update_issue_details,
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review.rs b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
index 2bd5097c58..fedf2288f2 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
@@ -44,10 +44,12 @@ use crate::{
 use eyre::eyre;
 
 pub mod global;
+pub mod rules;
 
 pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
     cfg.service(search_projects)
         .configure(global::config)
+        .configure(rules::config)
         .service(get_project_report)
         .service(get_report)
         .service(get_issue)
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
new file mode 100644
index 0000000000..f0946c3de6
--- /dev/null
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -0,0 +1,379 @@
+use actix_web::{HttpRequest, delete, get, post, put, web};
+use chrono::{DateTime, Utc};
+use eyre::eyre;
+use serde::{Deserialize, Serialize};
+
+use crate::{
+    auth::check_is_moderator_from_headers,
+    database::{PgPool, ReadOnlyPgPool, redis::RedisPool},
+    models::pats::Scopes,
+    queue::session::AuthQueue,
+    routes::ApiError,
+    util::error::Context,
+};
+
+const MAX_RULE_NAME_LENGTH: usize = 128;
+const MAX_RULE_EXPRESSION_LENGTH: usize = 65_536;
+
+pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
+    cfg.service(get_rules)
+        .service(create_rule)
+        .service(update_rule)
+        .service(delete_rule);
+}
+
+#[derive(Debug, Serialize, utoipa::ToSchema)]
+pub struct DelphiRule {
+    pub id: i64,
+    pub name: String,
+    pub priority: i32,
+    pub expression: String,
+    pub revision_id: i64,
+    pub created: DateTime<Utc>,
+    pub updated: DateTime<Utc>,
+    pub revision_created: DateTime<Utc>,
+    pub created_by: Option<i64>,
+    pub updated_by: Option<i64>,
+    pub revision_created_by: Option<i64>,
+}
+
+#[derive(Debug, Deserialize, utoipa::ToSchema)]
+pub struct WriteDelphiRule {
+    pub name: String,
+    pub priority: i32,
+    pub expression: String,
+}
+
+struct ValidatedRule {
+    name: String,
+    priority: i32,
+    expression: String,
+}
+
+impl WriteDelphiRule {
+    fn validate(self) -> Result<ValidatedRule, ApiError> {
+        let name = self.name.trim().to_string();
+        if name.is_empty() {
+            return Err(ApiError::Request(eyre!("rule name cannot be empty")));
+        }
+        if name.chars().count() > MAX_RULE_NAME_LENGTH {
+            return Err(ApiError::Request(eyre!(
+                "rule name cannot exceed {MAX_RULE_NAME_LENGTH} characters"
+            )));
+        }
+
+        let expression = self.expression.trim().to_string();
+        if expression.is_empty() {
+            return Err(ApiError::Request(eyre!(
+                "rule expression cannot be empty"
+            )));
+        }
+        if expression.len() > MAX_RULE_EXPRESSION_LENGTH {
+            return Err(ApiError::Request(eyre!(
+                "rule expression cannot exceed {MAX_RULE_EXPRESSION_LENGTH} bytes"
+            )));
+        }
+
+        cel::Program::compile(&expression).map_err(|error| {
+            ApiError::Request(eyre!("invalid cel expression: {error}"))
+        })?;
+
+        Ok(ValidatedRule {
+            name,
+            priority: self.priority,
+            expression,
+        })
+    }
+}
+
+/// List the current revision of every Delphi rule.
+#[utoipa::path(
+	context_path = "/moderation/tech-review",
+	tag = "moderation",
+	security(("bearer_auth" = [])),
+	responses((status = OK, body = Vec<DelphiRule>))
+)]
+#[get("/rules")]
+pub async fn get_rules(
+    req: HttpRequest,
+    pool: web::Data<PgPool>,
+    ro_pool: web::Data<ReadOnlyPgPool>,
+    redis: web::Data<RedisPool>,
+    session_queue: web::Data<AuthQueue>,
+) -> Result<web::Json<Vec<DelphiRule>>, ApiError> {
+    check_is_moderator_from_headers(
+        &req,
+        &**pool,
+        &redis,
+        &session_queue,
+        Scopes::PROJECT_READ,
+    )
+    .await?;
+
+    let rows = sqlx::query!(
+        r#"
+		SELECT
+			r.id,
+			r.name,
+			r.priority,
+			r.created,
+			r.updated,
+			r.created_by,
+			r.updated_by,
+			rr.id AS revision_id,
+			rr.expression,
+			rr.created AS revision_created,
+			rr.created_by AS revision_created_by
+		FROM delphi_rules r
+		INNER JOIN delphi_rule_revisions rr
+			ON rr.rule_id = r.id
+			AND rr.active
+		ORDER BY r.priority DESC, r.id
+		"#,
+    )
+    .fetch_all(&***ro_pool)
+    .await
+    .wrap_internal_err("failed to fetch delphi rules")?;
+
+    Ok(web::Json(
+        rows.into_iter()
+            .map(|row| DelphiRule {
+                id: row.id,
+                name: row.name,
+                priority: row.priority,
+                expression: row.expression,
+                revision_id: row.revision_id,
+                created: row.created,
+                updated: row.updated,
+                revision_created: row.revision_created,
+                created_by: row.created_by,
+                updated_by: row.updated_by,
+                revision_created_by: row.revision_created_by,
+            })
+            .collect(),
+    ))
+}
+
+/// Create a Delphi rule and its first revision.
+#[utoipa::path(
+	context_path = "/moderation/tech-review",
+	tag = "moderation",
+	security(("bearer_auth" = [])),
+	request_body = WriteDelphiRule,
+	responses((status = OK, body = DelphiRule))
+)]
+#[post("/rules")]
+pub async fn create_rule(
+    req: HttpRequest,
+    pool: web::Data<PgPool>,
+    redis: web::Data<RedisPool>,
+    session_queue: web::Data<AuthQueue>,
+    body: web::Json<WriteDelphiRule>,
+) -> Result<web::Json<DelphiRule>, ApiError> {
+    let user = check_is_moderator_from_headers(
+        &req,
+        &**pool,
+        &redis,
+        &session_queue,
+        Scopes::PROJECT_WRITE,
+    )
+    .await?;
+    let rule = body.into_inner().validate()?;
+    let user_id = user.id.0 as i64;
+    let mut transaction = pool
+        .begin()
+        .await
+        .wrap_internal_err("failed to begin delphi rule transaction")?;
+
+    let row = sqlx::query!(
+        r#"
+		INSERT INTO delphi_rules (
+			name,
+			priority,
+			created_by,
+			updated_by
+		)
+		VALUES ($1, $2, $3, $3)
+		RETURNING id, name, priority, created, updated, created_by, updated_by
+		"#,
+        rule.name,
+        rule.priority,
+        user_id,
+    )
+    .fetch_one(&mut transaction)
+    .await
+    .wrap_internal_err("failed to create delphi rule")?;
+
+    let revision = sqlx::query!(
+        r#"
+		INSERT INTO delphi_rule_revisions (rule_id, expression, created_by)
+		VALUES ($1, $2, $3)
+		RETURNING id, expression, created, created_by
+		"#,
+        row.id,
+        rule.expression,
+        user_id,
+    )
+    .fetch_one(&mut transaction)
+    .await
+    .wrap_internal_err("failed to create delphi rule revision")?;
+
+    transaction
+        .commit()
+        .await
+        .wrap_internal_err("failed to commit delphi rule transaction")?;
+
+    Ok(web::Json(DelphiRule {
+        id: row.id,
+        name: row.name,
+        priority: row.priority,
+        expression: revision.expression,
+        revision_id: revision.id,
+        created: row.created,
+        updated: row.updated,
+        revision_created: revision.created,
+        created_by: row.created_by,
+        updated_by: row.updated_by,
+        revision_created_by: revision.created_by,
+    }))
+}
+
+/// Replace a Delphi rule and create a new current revision.
+#[utoipa::path(
+	context_path = "/moderation/tech-review",
+	tag = "moderation",
+	security(("bearer_auth" = [])),
+	request_body = WriteDelphiRule,
+	responses((status = OK, body = DelphiRule), (status = NOT_FOUND))
+)]
+#[put("/rules/{id}")]
+pub async fn update_rule(
+    req: HttpRequest,
+    pool: web::Data<PgPool>,
+    redis: web::Data<RedisPool>,
+    session_queue: web::Data<AuthQueue>,
+    path: web::Path<(i64,)>,
+    body: web::Json<WriteDelphiRule>,
+) -> Result<web::Json<DelphiRule>, ApiError> {
+    let user = check_is_moderator_from_headers(
+        &req,
+        &**pool,
+        &redis,
+        &session_queue,
+        Scopes::PROJECT_WRITE,
+    )
+    .await?;
+    let (id,) = path.into_inner();
+    let rule = body.into_inner().validate()?;
+    let user_id = user.id.0 as i64;
+    let mut transaction = pool
+        .begin()
+        .await
+        .wrap_internal_err("failed to begin delphi rule transaction")?;
+
+    let row = sqlx::query!(
+        r#"
+		UPDATE delphi_rules
+		SET
+			name = $2,
+			priority = $3,
+			updated = CURRENT_TIMESTAMP,
+			updated_by = $4
+		WHERE id = $1
+		RETURNING id, name, priority, created, updated, created_by, updated_by
+		"#,
+        id,
+        rule.name,
+        rule.priority,
+        user_id,
+    )
+    .fetch_optional(&mut transaction)
+    .await
+    .wrap_internal_err("failed to update delphi rule")?
+    .ok_or(ApiError::NotFound)?;
+
+    sqlx::query!(
+        r#"
+		UPDATE delphi_rule_revisions
+		SET active = FALSE
+		WHERE rule_id = $1 AND active
+		"#,
+        id,
+    )
+    .execute(&mut transaction)
+    .await
+    .wrap_internal_err("failed to deactivate delphi rule revision")?;
+
+    let revision = sqlx::query!(
+        r#"
+		INSERT INTO delphi_rule_revisions (rule_id, expression, created_by)
+		VALUES ($1, $2, $3)
+		RETURNING id, expression, created, created_by
+		"#,
+        id,
+        rule.expression,
+        user_id,
+    )
+    .fetch_one(&mut transaction)
+    .await
+    .wrap_internal_err("failed to create delphi rule revision")?;
+
+    transaction
+        .commit()
+        .await
+        .wrap_internal_err("failed to commit delphi rule transaction")?;
+
+    Ok(web::Json(DelphiRule {
+        id: row.id,
+        name: row.name,
+        priority: row.priority,
+        expression: revision.expression,
+        revision_id: revision.id,
+        created: row.created,
+        updated: row.updated,
+        revision_created: revision.created,
+        created_by: row.created_by,
+        updated_by: row.updated_by,
+        revision_created_by: revision.created_by,
+    }))
+}
+
+/// Delete a Delphi rule and all its revisions and materialized effects.
+#[utoipa::path(
+	context_path = "/moderation/tech-review",
+	tag = "moderation",
+	security(("bearer_auth" = [])),
+	responses((status = OK), (status = NOT_FOUND))
+)]
+#[delete("/rules/{id}")]
+pub async fn delete_rule(
+    req: HttpRequest,
+    pool: web::Data<PgPool>,
+    redis: web::Data<RedisPool>,
+    session_queue: web::Data<AuthQueue>,
+    path: web::Path<(i64,)>,
+) -> Result<(), ApiError> {
+    check_is_moderator_from_headers(
+        &req,
+        &**pool,
+        &redis,
+        &session_queue,
+        Scopes::PROJECT_WRITE,
+    )
+    .await?;
+    let (id,) = path.into_inner();
+
+    let deleted = sqlx::query!(
+        "DELETE FROM delphi_rules WHERE id = $1 RETURNING id",
+        id,
+    )
+    .fetch_optional(&**pool)
+    .await
+    .wrap_internal_err("failed to delete delphi rule")?;
+
+    if deleted.is_none() {
+        return Err(ApiError::NotFound);
+    }
+
+    Ok(())
+}
diff --git a/packages/api-client/src/modules/labrinth/tech-review/internal.ts b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
index 0012474334..ef2af98c29 100644
--- a/packages/api-client/src/modules/labrinth/tech-review/internal.ts
+++ b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
@@ -6,6 +6,54 @@ export class LabrinthTechReviewInternalModule extends AbstractModule {
 		return 'labrinth_tech_review_internal'
 	}
 
+	public async getRules(): Promise<Labrinth.TechReview.Internal.DelphiRule[]> {
+		return this.client.request<Labrinth.TechReview.Internal.DelphiRule[]>(
+			'/moderation/tech-review/rules',
+			{
+				api: 'labrinth',
+				version: 'internal',
+				method: 'GET',
+			},
+		)
+	}
+
+	public async createRule(
+		rule: Labrinth.TechReview.Internal.WriteDelphiRule,
+	): Promise<Labrinth.TechReview.Internal.DelphiRule> {
+		return this.client.request<Labrinth.TechReview.Internal.DelphiRule>(
+			'/moderation/tech-review/rules',
+			{
+				api: 'labrinth',
+				version: 'internal',
+				method: 'POST',
+				body: rule,
+			},
+		)
+	}
+
+	public async updateRule(
+		id: number,
+		rule: Labrinth.TechReview.Internal.WriteDelphiRule,
+	): Promise<Labrinth.TechReview.Internal.DelphiRule> {
+		return this.client.request<Labrinth.TechReview.Internal.DelphiRule>(
+			`/moderation/tech-review/rules/${id}`,
+			{
+				api: 'labrinth',
+				version: 'internal',
+				method: 'PUT',
+				body: rule,
+			},
+		)
+	}
+
+	public async deleteRule(id: number): Promise<void> {
+		return this.client.request<void>(`/moderation/tech-review/rules/${id}`, {
+			api: 'labrinth',
+			version: 'internal',
+			method: 'DELETE',
+		})
+	}
+
 	/**
 	 * Search for projects awaiting technical review.
 	 *
diff --git a/packages/api-client/src/modules/labrinth/types.ts b/packages/api-client/src/modules/labrinth/types.ts
index cbe00e4f90..4c586cb44f 100644
--- a/packages/api-client/src/modules/labrinth/types.ts
+++ b/packages/api-client/src/modules/labrinth/types.ts
@@ -2226,6 +2226,26 @@ export namespace Labrinth {
 
 	export namespace TechReview {
 		export namespace Internal {
+			export type DelphiRule = {
+				id: number
+				name: string
+				priority: number
+				expression: string
+				revision_id: number
+				created: string
+				updated: string
+				revision_created: string
+				created_by: number | null
+				updated_by: number | null
+				revision_created_by: number | null
+			}
+
+			export type WriteDelphiRule = {
+				name: string
+				priority: number
+				expression: string
+			}
+
 			export type SearchProjectsRequest = {
 				limit?: number
 				page?: number
diff --git a/packages/delphi-cel-experiment/Cargo.toml b/packages/delphi-cel-experiment/Cargo.toml
new file mode 100644
index 0000000000..34ea4460b0
--- /dev/null
+++ b/packages/delphi-cel-experiment/Cargo.toml
@@ -0,0 +1,10 @@
+[package]
+name = "delphi-cel-experiment"
+version = "0.1.0"
+edition.workspace = true
+publish = false
+
+[dependencies]
+cel = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
diff --git a/packages/delphi-cel-experiment/src/main.rs b/packages/delphi-cel-experiment/src/main.rs
new file mode 100644
index 0000000000..92fe06bd33
--- /dev/null
+++ b/packages/delphi-cel-experiment/src/main.rs
@@ -0,0 +1,173 @@
+use std::{collections::BTreeMap, error::Error, io};
+
+use cel::{Context, Program};
+use serde::{Deserialize, Serialize};
+
+const EFFECT_RULE: &str = r#"
+	input.trace.issue_type == "OBFUSCATED_NAMES"
+		&& input.trace.severity == "high"
+		&& "confidence" in input.trace.data
+		&& input.trace.data.confidence >= 0.9
+	? {
+		"severity": "low",
+		"hidden": false
+	}
+	: null
+"#;
+
+#[derive(Debug, Serialize)]
+struct RuleInput {
+    schema_version: u32,
+    trace: TraceInput,
+    scan: ScanInput,
+    artifact: ArtifactInput,
+    scope: ScopeInput,
+}
+
+#[derive(Debug, Serialize)]
+struct TraceInput {
+    key: String,
+    issue_type: String,
+    severity: DelphiSeverity,
+    jar: Option<String>,
+    file_path: String,
+    data: BTreeMap<String, serde_json::Value>,
+}
+
+#[derive(Debug, Serialize)]
+struct ScanInput {
+    delphi_version: i32,
+}
+
+#[derive(Debug, Serialize)]
+struct ArtifactInput {
+    size: u32,
+    hashes: BTreeMap<String, String>,
+}
+
+#[derive(Debug, Serialize)]
+struct ScopeInput {
+    project_id: String,
+    version_id: String,
+    file_id: String,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Deserialize, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum DelphiSeverity {
+    Low,
+    Medium,
+    High,
+    Severe,
+}
+
+#[derive(Debug, PartialEq, Eq, Deserialize)]
+#[serde(deny_unknown_fields)]
+struct RuleEffect {
+    #[serde(default)]
+    severity: Option<DelphiSeverity>,
+    #[serde(default)]
+    hidden: bool,
+}
+
+fn main() -> Result<(), Box<dyn Error>> {
+    let input = example_input();
+    println!(
+        "CEL input context:\n{}",
+        serde_json::to_string_pretty(&input)?
+    );
+
+    let effect = evaluate_rule(EFFECT_RULE, &input)?;
+    println!("\nCEL map decoded as RuleEffect:\n{effect:#?}");
+
+    Ok(())
+}
+
+fn example_input() -> RuleInput {
+    RuleInput {
+        schema_version: 1,
+        trace: TraceInput {
+            key: "known-safe:obfuscated-bootstrap".to_string(),
+            issue_type: "OBFUSCATED_NAMES".to_string(),
+            severity: DelphiSeverity::High,
+            jar: Some("META-INF/jars/embedded.jar".to_string()),
+            file_path: "com/example/Bootstrap.class".to_string(),
+            data: BTreeMap::from([
+                ("confidence".to_string(), serde_json::json!(0.97)),
+                ("symbol_count".to_string(), serde_json::json!(42)),
+            ]),
+        },
+        scan: ScanInput { delphi_version: 17 },
+        artifact: ArtifactInput {
+            size: 412_892,
+            hashes: BTreeMap::from([
+                ("sha1".to_string(), "0123456789abcdef".to_string()),
+                ("sha512".to_string(), "fedcba9876543210".to_string()),
+            ]),
+        },
+        scope: ScopeInput {
+            project_id: "AANobbMI".to_string(),
+            version_id: "IIJJKKLL".to_string(),
+            file_id: "XXYYZZ00".to_string(),
+        },
+    }
+}
+
+fn evaluate_rule(
+    expression: &str,
+    input: &RuleInput,
+) -> Result<Option<RuleEffect>, Box<dyn Error>> {
+    let mut context = Context::default();
+    context.add_variable("input", input)?;
+
+    let value = Program::compile(expression)?.execute(&context)?;
+    let json = value
+        .json()
+        .map_err(|error| invalid_data(error.to_string()))?;
+    match json {
+        serde_json::Value::Null => Ok(None),
+        value => Ok(Some(serde_json::from_value(value)?)),
+    }
+}
+
+fn invalid_data(message: impl Into<String>) -> io::Error {
+    io::Error::new(io::ErrorKind::InvalidData, message.into())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn decodes_a_map_as_an_effect() {
+        let effect = evaluate_rule(EFFECT_RULE, &example_input())
+            .expect("rule should evaluate");
+
+        assert_eq!(
+            effect,
+            Some(RuleEffect {
+                severity: Some(DelphiSeverity::Low),
+                hidden: false,
+            })
+        );
+    }
+
+    #[test]
+    fn returns_none_when_a_rule_does_not_match() {
+        let mut input = example_input();
+        input.trace.issue_type = "NETWORK_ACCESS".to_string();
+
+        let effect =
+            evaluate_rule(EFFECT_RULE, &input).expect("rule should evaluate");
+
+        assert_eq!(effect, None);
+    }
+
+    #[test]
+    fn rejects_unknown_map_fields() {
+        let error = evaluate_rule(r#"{"unknown": true}"#, &example_input())
+            .expect_err("unknown fields should be rejected");
+
+        assert!(error.to_string().contains("unknown field"));
+    }
+}

From b6b19e543c41c47f7411d7557b587330d05c759e Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Wed, 22 Jul 2026 17:43:03 +0100
Subject: [PATCH 02/16] add demo delphi rules ui

---
 .../moderation/technical-review/rules.vue     | 256 +++++++++--
 ...36eb1dd626e77331d8278c406df952691be4c.json |  22 -
 ...67a2296efc16763cdbd5d8c295a1a7ca08021.json |  12 -
 ...f4eeff66ab4165a9f4980032e114db4dc1286.json |  26 --
 ...63ce02ca16781e32232ae0fa7a0af1973d3a4.json |  20 -
 ...1078cb48ccd645f059e257cd204de024955b8.json |  14 -
 ...b8c14fe329deac983bc2f43ba74e066f9cf8d.json |  14 -
 ...8518f1272690ce7766dbdc41ec1e98f7f1fec.json |  12 -
 ...78df08d25844f1019d539712b0cb686e4ae81.json |  16 -
 ...2dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json |  62 +++
 ...66908ea41a06ba858dc5b523aef6aae27b850.json |  15 -
 ...19dc0cdef502935dd5939a2f3ab89b0766ad2.json |  12 -
 ...58541fc78e910111c09ba3d50a12d9ca4a9f8.json |  16 -
 ...71aa078119ed2c60828683f872321fb61bb79.json |  23 +
 ...6f7de5ddc18e2014470d2b88626a9b37d30fe.json |  42 --
 ...1a31da1885cc22bb61be6853950ba52be9aa7.json |  15 -
 ...70a71b32d7fe35bf5f11654e1653c63245078.json |  80 ----
 ...37aa1023b436d06b4412a559553dd5452029e.json |  22 -
 ...d2402f52fea71e27b08e7926fcc2a9e62c0f3.json |  20 -
 ...2c36b9db3770508be4acbb6b441ed8006d9c7.json |  12 -
 ...afedb074492b4ec7f2457c14113f5fd13aa02.json |  18 -
 ...e5c93783c7641b019fdb698a1ec0be1393606.json |  17 -
 ...52f7ef678bd0d6b9cee0be7df36bdc92b80a.json} |  28 +-
 ...6540f5b6d265c87af267be0a5c0044d470a9.json} |  28 +-
 ...0d934b9afc6dccc5fc77454fbe45365bdf429.json |  20 -
 ...86e8917cfab9679d5064074681663ba467e41.json |  22 -
 .../20260715120000_delphi_rules.sql           |  50 ---
 .../20260720105358_delphi_trace_rules.sql     |  34 ++
 apps/labrinth/src/routes/internal/mod.rs      |   1 +
 .../internal/moderation/tech_review/rules.rs  | 413 +++++++++++-------
 .../modules/labrinth/tech-review/internal.ts  |  14 +
 .../api-client/src/modules/labrinth/types.ts  |  37 +-
 32 files changed, 685 insertions(+), 708 deletions(-)
 delete mode 100644 apps/labrinth/.sqlx/query-0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c.json
 delete mode 100644 apps/labrinth/.sqlx/query-0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021.json
 delete mode 100644 apps/labrinth/.sqlx/query-1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286.json
 delete mode 100644 apps/labrinth/.sqlx/query-20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4.json
 delete mode 100644 apps/labrinth/.sqlx/query-2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8.json
 delete mode 100644 apps/labrinth/.sqlx/query-329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d.json
 delete mode 100644 apps/labrinth/.sqlx/query-38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec.json
 delete mode 100644 apps/labrinth/.sqlx/query-5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81.json
 create mode 100644 apps/labrinth/.sqlx/query-64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json
 delete mode 100644 apps/labrinth/.sqlx/query-6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850.json
 delete mode 100644 apps/labrinth/.sqlx/query-66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2.json
 delete mode 100644 apps/labrinth/.sqlx/query-69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8.json
 create mode 100644 apps/labrinth/.sqlx/query-7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79.json
 delete mode 100644 apps/labrinth/.sqlx/query-882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe.json
 delete mode 100644 apps/labrinth/.sqlx/query-8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7.json
 delete mode 100644 apps/labrinth/.sqlx/query-90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078.json
 delete mode 100644 apps/labrinth/.sqlx/query-9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e.json
 delete mode 100644 apps/labrinth/.sqlx/query-b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3.json
 delete mode 100644 apps/labrinth/.sqlx/query-c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7.json
 delete mode 100644 apps/labrinth/.sqlx/query-cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02.json
 delete mode 100644 apps/labrinth/.sqlx/query-cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606.json
 rename apps/labrinth/.sqlx/{query-3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421.json => query-e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a.json} (58%)
 rename apps/labrinth/.sqlx/{query-3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020.json => query-f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9.json} (57%)
 delete mode 100644 apps/labrinth/.sqlx/query-fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429.json
 delete mode 100644 apps/labrinth/.sqlx/query-fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41.json
 delete mode 100644 apps/labrinth/migrations/20260715120000_delphi_rules.sql
 create mode 100644 apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql

diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index 1a9ac93c98..3668b93201 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -1,34 +1,106 @@
 <template>
-	<NewModal ref="ruleModal" :header="modalTitle">
-		<form class="flex w-[36rem] max-w-full flex-col gap-3" @submit.prevent="saveRule">
+	<NewModal ref="ruleModal" :header="modalTitle" @hide="handleRuleModalHide">
+		<form class="flex w-[48rem] max-w-full flex-col gap-3" @submit.prevent="saveRule">
 			<label class="font-semibold text-contrast" for="rule-name">Name</label>
 			<StyledInput
 				id="rule-name"
 				v-model="form.name"
 				type="text"
-				maxlength="128"
+				maxlength="256"
 				placeholder="Known-safe obfuscated bootstrap"
 			/>
 
-			<label class="font-semibold text-contrast" for="rule-priority">Priority</label>
-			<StyledInput id="rule-priority" v-model="form.priority" type="number" placeholder="0" />
-			<p class="m-0 text-sm text-secondary">Higher-priority rules are evaluated first.</p>
-
 			<label class="font-semibold text-contrast" for="rule-expression">CEL expression</label>
 			<StyledInput
 				id="rule-expression"
-				v-model="form.expression"
+				v-model="form.rule"
 				type="text"
 				multiline
 				resize="vertical"
 				class="font-mono"
 				input-class="min-h-64 font-mono"
+				@input="queueRuleTest"
 			/>
 			<p class="m-0 text-sm text-secondary">
 				Return <code>null</code> when the rule does not match, or a map containing
 				<code>severity</code> and/or <code>hidden</code> when it does.
 			</p>
 
+			<section class="mt-2 flex flex-col gap-3">
+				<div class="flex items-center justify-between gap-3">
+					<div>
+						<h3 class="m-0 text-base font-bold text-contrast">Test traces</h3>
+						<p class="m-0 text-sm text-secondary">
+							These results are evaluated from the current expression.
+						</p>
+					</div>
+					<LoaderCircleIcon v-if="isTestingRule" class="size-5 animate-spin text-secondary" />
+				</div>
+
+				<div
+					v-if="ruleTestError"
+					class="border-red/40 rounded-lg border bg-highlight-red p-3 text-sm text-red"
+				>
+					{{ ruleTestError }}
+				</div>
+
+				<div
+					v-for="example in previewExamples"
+					:key="example.original.key"
+					class="grid items-stretch gap-3 md:grid-cols-[minmax(0,1fr)_auto_minmax(0,1fr)]"
+				>
+					<article class="universal-card flex min-w-0 flex-col gap-3">
+						<p class="m-0 text-xs font-semibold uppercase tracking-wide text-secondary">Original</p>
+						<div class="flex flex-wrap items-center gap-2">
+							<span
+								class="rounded-full border px-2 py-0.5 text-xs font-semibold capitalize"
+								:class="getSeverityBadgeColor(example.original.severity)"
+							>
+								{{ example.original.severity }}
+							</span>
+							<strong class="break-all text-contrast">{{ example.original.issue_type }}</strong>
+						</div>
+						<dl class="m-0 grid grid-cols-[auto_minmax(0,1fr)] gap-x-3 gap-y-1 text-sm">
+							<dt class="text-secondary">Key</dt>
+							<dd class="m-0 break-all font-mono text-contrast">{{ example.original.key }}</dd>
+							<dt class="text-secondary">File</dt>
+							<dd class="m-0 break-all font-mono text-contrast">
+								{{ example.original.file_path }}
+							</dd>
+						</dl>
+					</article>
+
+					<div
+						class="flex items-center justify-center text-2xl font-bold text-secondary max-md:rotate-90"
+						aria-hidden="true"
+					>
+						→
+					</div>
+
+					<article class="universal-card flex min-w-0 flex-col gap-3">
+						<p class="m-0 text-xs font-semibold uppercase tracking-wide text-secondary">
+							New state
+						</p>
+						<div v-if="example.effect?.hidden" class="flex items-center gap-2 text-secondary">
+							<EyeOffIcon class="size-5" />
+							<strong class="text-contrast">Hidden from reports</strong>
+						</div>
+						<template v-else>
+							<div class="flex flex-wrap items-center gap-2">
+								<span
+									class="rounded-full border px-2 py-0.5 text-xs font-semibold capitalize"
+									:class="getSeverityBadgeColor(example.effectiveSeverity)"
+								>
+									{{ example.effectiveSeverity }}
+								</span>
+								<strong class="break-all text-contrast">{{ example.original.issue_type }}</strong>
+							</div>
+							<p class="m-0 text-sm text-secondary">{{ example.summary }}</p>
+						</template>
+					</article>
+				</div>
+			</section>
+
 			<div class="flex justify-end gap-2">
 				<ButtonStyled>
 					<button type="button" @click="closeRuleModal">Cancel</button>
@@ -45,13 +117,13 @@
 	<ConfirmModal
 		ref="deleteModal"
 		:title="`Delete ${ruleToDelete?.name ?? 'rule'}?`"
-		description="This permanently deletes the rule, its revisions, and its materialized effects."
+		description="The rule will stop being included the next time the rules are scanned. Existing effects remain active until then."
 		:markdown="false"
 		proceed-label="Delete rule"
 		@proceed="deleteRule"
 	/>
 
-	<div class="flex flex-col gap-4">
+	<div class="flex flex-col gap-6">
 		<div class="flex flex-wrap items-center justify-between gap-3">
 			<div class="flex items-center gap-3">
 				<ButtonStyled circular type="transparent">
@@ -112,9 +184,7 @@
 				<div class="flex flex-wrap items-start justify-between gap-3">
 					<div>
 						<h2 class="m-0 text-lg font-bold text-contrast">{{ rule.name }}</h2>
-						<p class="m-0 text-sm text-secondary">
-							Priority {{ rule.priority }} · revision {{ rule.revision_id }}
-						</p>
+						<p class="m-0 text-sm text-secondary">Last applied in revision {{ rule.revision }}</p>
 					</div>
 					<div class="flex gap-2">
 						<ButtonStyled>
@@ -133,7 +203,7 @@
 				</div>
 				<pre
 					class="m-0 overflow-x-auto rounded-lg bg-bg-raised p-3 text-sm"
-				><code>{{ rule.expression }}</code></pre>
+				><code>{{ rule.rule }}</code></pre>
 			</article>
 		</div>
 	</div>
@@ -141,7 +211,14 @@
 
 <script setup lang="ts">
 import type { Labrinth } from '@modrinth/api-client'
-import { ArrowLeftIcon, EditIcon, LoaderCircleIcon, PlusIcon, TrashIcon } from '@modrinth/assets'
+import {
+	ArrowLeftIcon,
+	EditIcon,
+	EyeOffIcon,
+	LoaderCircleIcon,
+	PlusIcon,
+	TrashIcon,
+} from '@modrinth/assets'
 import {
 	ButtonStyled,
 	ConfirmModal,
@@ -151,11 +228,36 @@ import {
 	NewModal,
 	StyledInput,
 } from '@modrinth/ui'
+import { useDebounceFn } from '@vueuse/core'
 
-const DEFAULT_EXPRESSION = `input.trace.issue_type == "OBFUSCATED_NAMES"
+const DEFAULT_RULE = `input.trace.issue_type == "OBFUSCATED_NAMES"
 	? {"severity": "low", "hidden": false}
 	: null`
 
+const TEST_TRACES: Labrinth.TechReview.Internal.TestDelphiRuleTrace[] = [
+	{
+		key: 'known-safe:obfuscated-bootstrap',
+		issue_type: 'OBFUSCATED_NAMES',
+		severity: 'high',
+		jar: 'META-INF/jars/embedded.jar',
+		file_path: 'com/example/Bootstrap.class',
+		data: {
+			confidence: 0.97,
+			symbol_count: 42,
+		},
+	},
+	{
+		key: 'network/known-telemetry-host',
+		issue_type: 'SUSPICIOUS_NETWORK_ACCESS',
+		severity: 'medium',
+		jar: null,
+		file_path: 'com/example/Telemetry.class',
+		data: {
+			host: 'telemetry.example.com',
+		},
+	},
+]
+
 useHead({ title: 'Delphi rules - Modrinth' })
 
 const client = injectModrinthClient()
@@ -166,16 +268,106 @@ const deleteModal = useTemplateRef<InstanceType<typeof ConfirmModal>>('deleteMod
 const rules = ref<Labrinth.TechReview.Internal.DelphiRule[]>([])
 const isLoading = ref(true)
 const isSaving = ref(false)
+const isTestingRule = ref(false)
+const isRuleModalOpen = ref(false)
 const loadFailed = ref(false)
 const editingRuleId = ref<number | null>(null)
 const ruleToDelete = ref<Labrinth.TechReview.Internal.DelphiRule | null>(null)
+const ruleTestEffects = ref<Array<Labrinth.TechReview.Internal.DelphiRuleEffect | null>>([])
+const ruleTestError = ref<string | null>(null)
 const form = reactive({
 	name: '',
-	priority: '0',
-	expression: DEFAULT_EXPRESSION,
+	rule: DEFAULT_RULE,
 })
+let ruleTestRequestId = 0
 
 const modalTitle = computed(() => (editingRuleId.value === null ? 'Create rule' : 'Edit rule'))
+const previewExamples = computed(() =>
+	TEST_TRACES.map((original, index) => {
+		const effect = ruleTestEffects.value[index] ?? null
+		const effectiveSeverity = effect?.severity ?? original.severity
+		let summary: string
+
+		if (isTestingRule.value) {
+			summary = 'Evaluating the current expression...'
+		} else if (ruleTestError.value) {
+			summary = 'Preview unavailable.'
+		} else if (!effect) {
+			summary = 'Rule does not match; no change.'
+		} else if (effect.severity && effect.severity !== original.severity) {
+			summary = `Severity changed from ${original.severity} to ${effect.severity}.`
+		} else {
+			summary = 'Rule matched; no visible change.'
+		}
+
+		return {
+			original,
+			effect,
+			effectiveSeverity,
+			summary,
+		}
+	}),
+)
+
+function getSeverityBadgeColor(severity: Labrinth.TechReview.Internal.DelphiSeverity): string {
+	switch (severity) {
+		case 'severe':
+			return 'border-red/60 bg-highlight-red text-red'
+		case 'high':
+			return 'border-orange/60 bg-highlight-orange text-orange'
+		case 'medium':
+			return 'border-green/60 bg-highlight-green text-green'
+		case 'low':
+		default:
+			return 'border-blue/60 bg-highlight-blue text-blue'
+	}
+}
+
+async function testRule() {
+	if (!isRuleModalOpen.value) return
+
+	const requestId = ++ruleTestRequestId
+	const rule = form.rule.trim()
+	ruleTestEffects.value = []
+	ruleTestError.value = null
+
+	if (!rule) {
+		isTestingRule.value = false
+		ruleTestError.value = 'Enter a CEL expression to test it.'
+		return
+	}
+
+	isTestingRule.value = true
+	try {
+		const response = await client.labrinth.tech_review_internal.testRule({
+			rule,
+			traces: TEST_TRACES,
+		})
+		if (requestId !== ruleTestRequestId) return
+
+		ruleTestEffects.value = response.effects
+	} catch (error) {
+		if (requestId !== ruleTestRequestId) return
+
+		ruleTestError.value = error instanceof Error ? error.message : 'The rule could not be tested.'
+	} finally {
+		if (requestId === ruleTestRequestId) {
+			isTestingRule.value = false
+		}
+	}
+}
+
+const testRuleDebounced = useDebounceFn(testRule, 350)
+
+function queueRuleTest() {
+	if (!isRuleModalOpen.value) return
+
+	ruleTestRequestId += 1
+	ruleTestEffects.value = []
+	ruleTestError.value = null
+	isTestingRule.value = true
+	void testRuleDebounced()
+}
 
 async function loadRules() {
 	isLoading.value = true
@@ -193,32 +385,39 @@ async function loadRules() {
 function openCreateModal() {
 	editingRuleId.value = null
 	form.name = ''
-	form.priority = '0'
-	form.expression = DEFAULT_EXPRESSION
+	form.rule = DEFAULT_RULE
+	isRuleModalOpen.value = true
 	ruleModal.value?.show()
+	void testRule()
 }
 
 function openEditModal(rule: Labrinth.TechReview.Internal.DelphiRule) {
 	editingRuleId.value = rule.id
 	form.name = rule.name
-	form.priority = String(rule.priority)
-	form.expression = rule.expression
+	form.rule = rule.rule
+	isRuleModalOpen.value = true
 	ruleModal.value?.show()
+	void testRule()
 }
 
 function closeRuleModal() {
 	ruleModal.value?.hide()
 }
 
+function handleRuleModalHide() {
+	isRuleModalOpen.value = false
+	ruleTestRequestId += 1
+	isTestingRule.value = false
+}
+
 async function saveRule() {
 	if (isSaving.value) return
 
-	const priority = Number(form.priority)
-	if (!form.name.trim() || !form.expression.trim() || !Number.isInteger(priority)) {
+	if (!form.name.trim() || !form.rule.trim()) {
 		addNotification({
 			type: 'error',
 			title: 'Invalid rule',
-			text: 'Enter a name, a CEL expression, and an integer priority.',
+			text: 'Enter a name and a CEL expression.',
 		})
 		return
 	}
@@ -226,8 +425,7 @@ async function saveRule() {
 	isSaving.value = true
 	const payload = {
 		name: form.name,
-		priority,
-		expression: form.expression,
+		rule: form.rule,
 	}
 
 	try {
@@ -240,7 +438,7 @@ async function saveRule() {
 		addNotification({
 			type: 'success',
 			title: 'Rule saved',
-			text: 'The Delphi rule revision was saved.',
+			text: 'The rule will take effect after the next manual scan.',
 		})
 		await loadRules()
 	} catch (error) {
@@ -269,7 +467,7 @@ async function deleteRule() {
 		addNotification({
 			type: 'success',
 			title: 'Rule deleted',
-			text: `${rule.name} was deleted.`,
+			text: `${rule.name} will be removed by the next manual scan.`,
 		})
 		await loadRules()
 	} catch (error) {
diff --git a/apps/labrinth/.sqlx/query-0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c.json b/apps/labrinth/.sqlx/query-0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c.json
deleted file mode 100644
index 4bc87e73a5..0000000000
--- a/apps/labrinth/.sqlx/query-0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT COUNT(*) FROM payouts_values_notifications WHERE notified = FALSE AND user_id = $1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "count",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c"
-}
diff --git a/apps/labrinth/.sqlx/query-0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021.json b/apps/labrinth/.sqlx/query-0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021.json
deleted file mode 100644
index c8a82d60ef..0000000000
--- a/apps/labrinth/.sqlx/query-0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021.json
+++ /dev/null
@@ -1,12 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n                INSERT INTO users (id, username, email, role)\n                VALUES\n                    (1000, 'userland', 'userland@modrinth.com', 'developer'),\n                    (1001, 'useful', 'useful@modrinth.com', 'developer'),\n                    (1002, 'Useless', 'useless@modrinth.com', 'developer')\n                ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": []
-  },
-  "hash": "0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021"
-}
diff --git a/apps/labrinth/.sqlx/query-1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286.json b/apps/labrinth/.sqlx/query-1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286.json
deleted file mode 100644
index 921f7f92d9..0000000000
--- a/apps/labrinth/.sqlx/query-1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286.json
+++ /dev/null
@@ -1,26 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n                SELECT\n                    id,\n                    status AS \"status: PayoutStatus\"\n                FROM payouts\n                ORDER BY id\n                ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "status: PayoutStatus",
-        "type_info": "Varchar"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      false,
-      false
-    ]
-  },
-  "hash": "1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286"
-}
diff --git a/apps/labrinth/.sqlx/query-20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4.json b/apps/labrinth/.sqlx/query-20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4.json
deleted file mode 100644
index 3c99ff3fed..0000000000
--- a/apps/labrinth/.sqlx/query-20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4.json
+++ /dev/null
@@ -1,20 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT COUNT(*) FROM payouts_values_notifications WHERE notified = FALSE",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "count",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4"
-}
diff --git a/apps/labrinth/.sqlx/query-2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8.json b/apps/labrinth/.sqlx/query-2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8.json
deleted file mode 100644
index 5c2a54af63..0000000000
--- a/apps/labrinth/.sqlx/query-2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n\t\tUPDATE delphi_rule_revisions\n\t\tSET active = FALSE\n\t\tWHERE rule_id = $1 AND active\n\t\t",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "2dd8132c42c883381fe2782b28e1078cb48ccd645f059e257cd204de024955b8"
-}
diff --git a/apps/labrinth/.sqlx/query-329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d.json b/apps/labrinth/.sqlx/query-329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d.json
deleted file mode 100644
index 2731d395ff..0000000000
--- a/apps/labrinth/.sqlx/query-329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE mods SET status = 'processing' WHERE id = $1",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d"
-}
diff --git a/apps/labrinth/.sqlx/query-38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec.json b/apps/labrinth/.sqlx/query-38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec.json
deleted file mode 100644
index 815e7795ec..0000000000
--- a/apps/labrinth/.sqlx/query-38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec.json
+++ /dev/null
@@ -1,12 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n                INSERT INTO users (id, username, email, role)\n                VALUES (2100, 'prefix_under_score', 'prefix_under_score@modrinth.com', 'developer')\n                ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": []
-  },
-  "hash": "38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec"
-}
diff --git a/apps/labrinth/.sqlx/query-5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81.json b/apps/labrinth/.sqlx/query-5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81.json
deleted file mode 100644
index 55ba902620..0000000000
--- a/apps/labrinth/.sqlx/query-5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n                    INSERT INTO users (id, username, email, role)\n                    VALUES ($1, $2, $3, 'developer')\n                    ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Varchar",
-        "Varchar"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81"
-}
diff --git a/apps/labrinth/.sqlx/query-64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json b/apps/labrinth/.sqlx/query-64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json
new file mode 100644
index 0000000000..38c58dbb1c
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json
@@ -0,0 +1,62 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n\t\tSELECT\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\tFROM delphi_rules\n\t\tWHERE NOT delete_on_next_revision\n\t\tORDER BY name, id\n\t\t",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "name",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 2,
+        "name": "rule",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 3,
+        "name": "revision",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 4,
+        "name": "created_at",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 5,
+        "name": "updated_at",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 6,
+        "name": "created_by",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 7,
+        "name": "updated_by",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      false,
+      false,
+      true,
+      true
+    ]
+  },
+  "hash": "64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c"
+}
diff --git a/apps/labrinth/.sqlx/query-6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850.json b/apps/labrinth/.sqlx/query-6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850.json
deleted file mode 100644
index b4c2e5a56e..0000000000
--- a/apps/labrinth/.sqlx/query-6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850.json
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "INSERT INTO payouts_values_notifications (date_available, user_id, notified)\n                 VALUES ($1, $2, FALSE)\n                 ON CONFLICT (date_available, user_id) DO NOTHING",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Timestamptz",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850"
-}
diff --git a/apps/labrinth/.sqlx/query-66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2.json b/apps/labrinth/.sqlx/query-66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2.json
deleted file mode 100644
index 5d509fdf07..0000000000
--- a/apps/labrinth/.sqlx/query-66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2.json
+++ /dev/null
@@ -1,12 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "CREATE SCHEMA public;",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": []
-  },
-  "hash": "66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2"
-}
diff --git a/apps/labrinth/.sqlx/query-69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8.json b/apps/labrinth/.sqlx/query-69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8.json
deleted file mode 100644
index fc7d2ac98d..0000000000
--- a/apps/labrinth/.sqlx/query-69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "INSERT INTO payouts_values (user_id, mod_id, amount, created, date_available)\n                 VALUES ($1, NULL, $2, NOW(), $3)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Numeric",
-        "Timestamptz"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8"
-}
diff --git a/apps/labrinth/.sqlx/query-7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79.json b/apps/labrinth/.sqlx/query-7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79.json
new file mode 100644
index 0000000000..9262ec39d7
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tdelete_on_next_revision = TRUE,\n\t\t\tupdated_at = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $2\n\t\tWHERE id = $1 AND NOT delete_on_next_revision\n\t\tRETURNING id\n\t\t",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79"
+}
diff --git a/apps/labrinth/.sqlx/query-882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe.json b/apps/labrinth/.sqlx/query-882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe.json
deleted file mode 100644
index de87121fdd..0000000000
--- a/apps/labrinth/.sqlx/query-882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n\t\tINSERT INTO delphi_rule_revisions (rule_id, expression, created_by)\n\t\tVALUES ($1, $2, $3)\n\t\tRETURNING id, expression, created, created_by\n\t\t",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "expression",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 2,
-        "name": "created",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 3,
-        "name": "created_by",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Text",
-        "Int8"
-      ]
-    },
-    "nullable": [
-      false,
-      false,
-      false,
-      true
-    ]
-  },
-  "hash": "882090c323a15f717e9481a84ae6f7de5ddc18e2014470d2b88626a9b37d30fe"
-}
diff --git a/apps/labrinth/.sqlx/query-8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7.json b/apps/labrinth/.sqlx/query-8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7.json
deleted file mode 100644
index 444f57bf3b..0000000000
--- a/apps/labrinth/.sqlx/query-8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7.json
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE moderation_locks SET locked_at = NOW() - ($1::bigint * INTERVAL '1 minute') - INTERVAL '1 second' WHERE project_id = $2",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7"
-}
diff --git a/apps/labrinth/.sqlx/query-90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078.json b/apps/labrinth/.sqlx/query-90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078.json
deleted file mode 100644
index 80d5ade693..0000000000
--- a/apps/labrinth/.sqlx/query-90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078.json
+++ /dev/null
@@ -1,80 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n\t\tSELECT\n\t\t\tr.id,\n\t\t\tr.name,\n\t\t\tr.priority,\n\t\t\tr.created,\n\t\t\tr.updated,\n\t\t\tr.created_by,\n\t\t\tr.updated_by,\n\t\t\trr.id AS revision_id,\n\t\t\trr.expression,\n\t\t\trr.created AS revision_created,\n\t\t\trr.created_by AS revision_created_by\n\t\tFROM delphi_rules r\n\t\tINNER JOIN delphi_rule_revisions rr\n\t\t\tON rr.rule_id = r.id\n\t\t\tAND rr.active\n\t\tORDER BY r.priority DESC, r.id\n\t\t",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "name",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 2,
-        "name": "priority",
-        "type_info": "Int4"
-      },
-      {
-        "ordinal": 3,
-        "name": "created",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 4,
-        "name": "updated",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 5,
-        "name": "created_by",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 6,
-        "name": "updated_by",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 7,
-        "name": "revision_id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 8,
-        "name": "expression",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 9,
-        "name": "revision_created",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 10,
-        "name": "revision_created_by",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      false,
-      false,
-      false,
-      false,
-      false,
-      true,
-      true,
-      false,
-      false,
-      false,
-      true
-    ]
-  },
-  "hash": "90f61453157c8a9cec0a360430170a71b32d7fe35bf5f11654e1653c63245078"
-}
diff --git a/apps/labrinth/.sqlx/query-9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e.json b/apps/labrinth/.sqlx/query-9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e.json
deleted file mode 100644
index 97b8370fb4..0000000000
--- a/apps/labrinth/.sqlx/query-9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "DELETE FROM delphi_rules WHERE id = $1 RETURNING id",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "9476659afe6432102c6c35cf04b37aa1023b436d06b4412a559553dd5452029e"
-}
diff --git a/apps/labrinth/.sqlx/query-b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3.json b/apps/labrinth/.sqlx/query-b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3.json
deleted file mode 100644
index 89bd8147dc..0000000000
--- a/apps/labrinth/.sqlx/query-b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3.json
+++ /dev/null
@@ -1,20 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT status AS \"status: PayoutStatus\" FROM payouts WHERE id = 1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "status: PayoutStatus",
-        "type_info": "Varchar"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3"
-}
diff --git a/apps/labrinth/.sqlx/query-c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7.json b/apps/labrinth/.sqlx/query-c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7.json
deleted file mode 100644
index f245ea1c8a..0000000000
--- a/apps/labrinth/.sqlx/query-c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7.json
+++ /dev/null
@@ -1,12 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "DROP SCHEMA public CASCADE;",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": []
-  },
-  "hash": "c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7"
-}
diff --git a/apps/labrinth/.sqlx/query-cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02.json b/apps/labrinth/.sqlx/query-cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02.json
deleted file mode 100644
index 469c30168a..0000000000
--- a/apps/labrinth/.sqlx/query-cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02.json
+++ /dev/null
@@ -1,18 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n                INSERT INTO payouts (id, method, platform_id, status, user_id, amount, created)\n                VALUES ($1, $2, $3, $4, $5, 10.0, NOW())\n                ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Text",
-        "Text",
-        "Varchar",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02"
-}
diff --git a/apps/labrinth/.sqlx/query-cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606.json b/apps/labrinth/.sqlx/query-cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606.json
deleted file mode 100644
index 52e020ebf2..0000000000
--- a/apps/labrinth/.sqlx/query-cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n                    INSERT INTO payouts (id, method, platform_id, status, user_id, amount, created)\n                    VALUES ($1, $2, NULL, $3, $4, 10.00, NOW())\n                    ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Text",
-        "Varchar",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606"
-}
diff --git a/apps/labrinth/.sqlx/query-3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421.json b/apps/labrinth/.sqlx/query-e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a.json
similarity index 58%
rename from apps/labrinth/.sqlx/query-3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421.json
rename to apps/labrinth/.sqlx/query-e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a.json
index e22ef8fa7c..ea89bf1e61 100644
--- a/apps/labrinth/.sqlx/query-3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421.json
+++ b/apps/labrinth/.sqlx/query-e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tINSERT INTO delphi_rules (\n\t\t\tname,\n\t\t\tpriority,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t)\n\t\tVALUES ($1, $2, $3, $3)\n\t\tRETURNING id, name, priority, created, updated, created_by, updated_by\n\t\t",
+  "query": "\n\t\tINSERT INTO delphi_rules (\n\t\t\tname,\n\t\t\trule,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t)\n\t\tVALUES ($1, $2, $3, $3)\n\t\tRETURNING\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
   "describe": {
     "columns": [
       {
@@ -11,38 +11,43 @@
       {
         "ordinal": 1,
         "name": "name",
-        "type_info": "Text"
+        "type_info": "Varchar"
       },
       {
         "ordinal": 2,
-        "name": "priority",
-        "type_info": "Int4"
+        "name": "rule",
+        "type_info": "Varchar"
       },
       {
         "ordinal": 3,
-        "name": "created",
-        "type_info": "Timestamptz"
+        "name": "revision",
+        "type_info": "Int8"
       },
       {
         "ordinal": 4,
-        "name": "updated",
+        "name": "created_at",
         "type_info": "Timestamptz"
       },
       {
         "ordinal": 5,
+        "name": "updated_at",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 6,
         "name": "created_by",
         "type_info": "Int8"
       },
       {
-        "ordinal": 6,
+        "ordinal": 7,
         "name": "updated_by",
         "type_info": "Int8"
       }
     ],
     "parameters": {
       "Left": [
-        "Text",
-        "Int4",
+        "Varchar",
+        "Varchar",
         "Int8"
       ]
     },
@@ -52,9 +57,10 @@
       false,
       false,
       false,
+      false,
       true,
       true
     ]
   },
-  "hash": "3e6c4e0a778f7f06bace43cbce705f834dbb9b88b834186b1353f116a07c3421"
+  "hash": "e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a"
 }
diff --git a/apps/labrinth/.sqlx/query-3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020.json b/apps/labrinth/.sqlx/query-f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9.json
similarity index 57%
rename from apps/labrinth/.sqlx/query-3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020.json
rename to apps/labrinth/.sqlx/query-f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9.json
index 0caf56d981..75717f39b0 100644
--- a/apps/labrinth/.sqlx/query-3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020.json
+++ b/apps/labrinth/.sqlx/query-f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tname = $2,\n\t\t\tpriority = $3,\n\t\t\tupdated = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $4\n\t\tWHERE id = $1\n\t\tRETURNING id, name, priority, created, updated, created_by, updated_by\n\t\t",
+  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tname = $2,\n\t\t\trule = $3,\n\t\t\tupdated_at = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $4\n\t\tWHERE id = $1 AND NOT delete_on_next_revision\n\t\tRETURNING\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
   "describe": {
     "columns": [
       {
@@ -11,30 +11,35 @@
       {
         "ordinal": 1,
         "name": "name",
-        "type_info": "Text"
+        "type_info": "Varchar"
       },
       {
         "ordinal": 2,
-        "name": "priority",
-        "type_info": "Int4"
+        "name": "rule",
+        "type_info": "Varchar"
       },
       {
         "ordinal": 3,
-        "name": "created",
-        "type_info": "Timestamptz"
+        "name": "revision",
+        "type_info": "Int8"
       },
       {
         "ordinal": 4,
-        "name": "updated",
+        "name": "created_at",
         "type_info": "Timestamptz"
       },
       {
         "ordinal": 5,
+        "name": "updated_at",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 6,
         "name": "created_by",
         "type_info": "Int8"
       },
       {
-        "ordinal": 6,
+        "ordinal": 7,
         "name": "updated_by",
         "type_info": "Int8"
       }
@@ -42,8 +47,8 @@
     "parameters": {
       "Left": [
         "Int8",
-        "Text",
-        "Int4",
+        "Varchar",
+        "Varchar",
         "Int8"
       ]
     },
@@ -53,9 +58,10 @@
       false,
       false,
       false,
+      false,
       true,
       true
     ]
   },
-  "hash": "3fd6d574c4feaec4b5116a43432a9ff55fc6dda4b154dc3136478d3772e06020"
+  "hash": "f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9"
 }
diff --git a/apps/labrinth/.sqlx/query-fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429.json b/apps/labrinth/.sqlx/query-fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429.json
deleted file mode 100644
index 006563f450..0000000000
--- a/apps/labrinth/.sqlx/query-fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429.json
+++ /dev/null
@@ -1,20 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT pg_advisory_unlock(1)",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "pg_advisory_unlock",
-        "type_info": "Bool"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429"
-}
diff --git a/apps/labrinth/.sqlx/query-fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41.json b/apps/labrinth/.sqlx/query-fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41.json
deleted file mode 100644
index d3e3520bcc..0000000000
--- a/apps/labrinth/.sqlx/query-fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT COUNT(*) FROM notifications WHERE user_id = $1 AND body->>'type' = 'payout_available'",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "count",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41"
-}
diff --git a/apps/labrinth/migrations/20260715120000_delphi_rules.sql b/apps/labrinth/migrations/20260715120000_delphi_rules.sql
deleted file mode 100644
index 527528dcaa..0000000000
--- a/apps/labrinth/migrations/20260715120000_delphi_rules.sql
+++ /dev/null
@@ -1,50 +0,0 @@
-CREATE TABLE delphi_rules (
-	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
-	name TEXT NOT NULL CHECK (BTRIM(name) <> ''),
-	priority INTEGER NOT NULL DEFAULT 0,
-	created TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
-	updated TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
-	created_by BIGINT REFERENCES users (id)
-		ON DELETE SET NULL
-		ON UPDATE CASCADE,
-	updated_by BIGINT REFERENCES users (id)
-		ON DELETE SET NULL
-		ON UPDATE CASCADE
-);
-
-CREATE TABLE delphi_rule_revisions (
-	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
-	rule_id BIGINT NOT NULL REFERENCES delphi_rules (id)
-		ON DELETE CASCADE
-		ON UPDATE CASCADE,
-	expression TEXT NOT NULL CHECK (BTRIM(expression) <> ''),
-	active BOOLEAN NOT NULL DEFAULT TRUE,
-	created TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
-	created_by BIGINT REFERENCES users (id)
-		ON DELETE SET NULL
-		ON UPDATE CASCADE
-);
-
-CREATE UNIQUE INDEX delphi_rule_revisions_active
-	ON delphi_rule_revisions (rule_id)
-	WHERE active;
-
-CREATE INDEX delphi_rule_revisions_rule_id
-	ON delphi_rule_revisions (rule_id, created DESC);
-
-CREATE TABLE delphi_rule_effects (
-	rule_revision_id BIGINT NOT NULL REFERENCES delphi_rule_revisions (id)
-		ON DELETE CASCADE
-		ON UPDATE CASCADE,
-	issue_detail_id BIGINT NOT NULL REFERENCES delphi_report_issue_details (id)
-		ON DELETE CASCADE
-		ON UPDATE CASCADE,
-	severity delphi_severity,
-	hidden BOOLEAN NOT NULL DEFAULT FALSE,
-	created TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
-	PRIMARY KEY (rule_revision_id, issue_detail_id),
-	CHECK (severity IS NOT NULL OR hidden)
-);
-
-CREATE INDEX delphi_rule_effects_issue_detail_id
-	ON delphi_rule_effects (issue_detail_id);
diff --git a/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql b/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql
new file mode 100644
index 0000000000..7cbe599623
--- /dev/null
+++ b/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql
@@ -0,0 +1,34 @@
+CREATE TABLE delphi_rules (
+	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
+	created_at TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	created_by BIGINT REFERENCES users(id)
+		ON DELETE SET NULL,
+	updated_at TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	updated_by BIGINT REFERENCES users(id)
+		ON DELETE SET NULL,
+	name VARCHAR(256) NOT NULL,
+	rule VARCHAR(65536) NOT NULL,
+	revision BIGINT NOT NULL DEFAULT 0,
+	delete_on_next_revision BOOL NOT NULL DEFAULT FALSE
+);
+
+CREATE TABLE delphi_rule_revisions (
+	revision BIGINT PRIMARY KEY
+);
+
+INSERT INTO delphi_rule_revisions (revision)
+VALUES (1);
+
+CREATE TABLE delphi_rule_effects (
+	revision BIGINT NOT NULL,
+	detail_id BIGINT NOT NULL REFERENCES delphi_report_issue_details(id)
+		ON DELETE CASCADE
+		ON UPDATE CASCADE,
+	rule_id BIGINT NOT NULL REFERENCES delphi_rules(id)
+		ON UPDATE CASCADE,
+	severity delphi_severity,
+	hidden BOOLEAN NOT NULL DEFAULT FALSE,
+	PRIMARY KEY (revision, detail_id)
+);
+
+CREATE INDEX delphi_rule_effects_rule_id ON delphi_rule_effects(rule_id);
diff --git a/apps/labrinth/src/routes/internal/mod.rs b/apps/labrinth/src/routes/internal/mod.rs
index acb31a4f36..46cd42c713 100644
--- a/apps/labrinth/src/routes/internal/mod.rs
+++ b/apps/labrinth/src/routes/internal/mod.rs
@@ -116,6 +116,7 @@ pub fn config(cfg: &mut web::ServiceConfig) {
 		moderation::tech_review::global::search_global_issue_details,
 		moderation::tech_review::global::get_global_issue_detail,
 		moderation::tech_review::rules::get_rules,
+		moderation::tech_review::rules::test_rule,
 		moderation::tech_review::rules::create_rule,
 		moderation::tech_review::rules::update_rule,
 		moderation::tech_review::rules::delete_rule,
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
index f0946c3de6..415956caa2 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -1,3 +1,5 @@
+use std::collections::{BTreeMap, HashMap};
+
 use actix_web::{HttpRequest, delete, get, post, put, web};
 use chrono::{DateTime, Utc};
 use eyre::eyre;
@@ -5,18 +7,23 @@ use serde::{Deserialize, Serialize};
 
 use crate::{
     auth::check_is_moderator_from_headers,
-    database::{PgPool, ReadOnlyPgPool, redis::RedisPool},
+    database::{
+        PgPool, ReadOnlyPgPool, models::delphi_report_item::DelphiSeverity,
+        redis::RedisPool,
+    },
     models::pats::Scopes,
     queue::session::AuthQueue,
     routes::ApiError,
     util::error::Context,
 };
 
-const MAX_RULE_NAME_LENGTH: usize = 128;
+const MAX_RULE_NAME_LENGTH: usize = 256;
 const MAX_RULE_EXPRESSION_LENGTH: usize = 65_536;
+const MAX_RULE_TEST_TRACES: usize = 10;
 
 pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
     cfg.service(get_rules)
+        .service(test_rule)
         .service(create_rule)
         .service(update_rule)
         .service(delete_rule);
@@ -26,28 +33,80 @@ pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
 pub struct DelphiRule {
     pub id: i64,
     pub name: String,
-    pub priority: i32,
-    pub expression: String,
-    pub revision_id: i64,
-    pub created: DateTime<Utc>,
-    pub updated: DateTime<Utc>,
-    pub revision_created: DateTime<Utc>,
+    pub rule: String,
+    pub revision: i64,
+    pub created_at: DateTime<Utc>,
+    pub updated_at: DateTime<Utc>,
     pub created_by: Option<i64>,
     pub updated_by: Option<i64>,
-    pub revision_created_by: Option<i64>,
 }
 
 #[derive(Debug, Deserialize, utoipa::ToSchema)]
 pub struct WriteDelphiRule {
     pub name: String,
-    pub priority: i32,
-    pub expression: String,
+    pub rule: String,
+}
+
+#[derive(Debug, Deserialize, utoipa::ToSchema)]
+pub struct TestDelphiRule {
+    pub rule: String,
+    pub traces: Vec<TestDelphiRuleTrace>,
+}
+
+#[derive(Debug, Deserialize, Serialize, utoipa::ToSchema)]
+pub struct TestDelphiRuleTrace {
+    pub key: String,
+    pub issue_type: String,
+    pub severity: DelphiSeverity,
+    pub jar: Option<String>,
+    pub file_path: String,
+    pub data: HashMap<String, serde_json::Value>,
+}
+
+#[derive(Debug, Serialize, utoipa::ToSchema)]
+pub struct TestDelphiRuleResponse {
+    pub effects: Vec<Option<DelphiRuleEffect>>,
+}
+
+#[derive(Debug, Deserialize, Serialize, utoipa::ToSchema)]
+#[serde(deny_unknown_fields)]
+pub struct DelphiRuleEffect {
+    #[serde(default)]
+    pub severity: Option<DelphiSeverity>,
+    #[serde(default)]
+    pub hidden: bool,
+}
+
+#[derive(Serialize)]
+struct TestRuleInput<'a> {
+    schema_version: u32,
+    trace: &'a TestDelphiRuleTrace,
+    scan: TestRuleScan,
+    artifact: TestRuleArtifact,
+    scope: TestRuleScope,
+}
+
+#[derive(Serialize)]
+struct TestRuleScan {
+    delphi_version: i32,
+}
+
+#[derive(Serialize)]
+struct TestRuleArtifact {
+    size: u32,
+    hashes: BTreeMap<String, String>,
+}
+
+#[derive(Serialize)]
+struct TestRuleScope {
+    project_id: String,
+    version_id: String,
+    file_id: String,
 }
 
 struct ValidatedRule {
     name: String,
-    priority: i32,
-    expression: String,
+    rule: String,
 }
 
 impl WriteDelphiRule {
@@ -62,31 +121,129 @@ impl WriteDelphiRule {
             )));
         }
 
-        let expression = self.expression.trim().to_string();
-        if expression.is_empty() {
+        let rule = self.rule.trim().to_string();
+        if rule.is_empty() {
             return Err(ApiError::Request(eyre!(
                 "rule expression cannot be empty"
             )));
         }
-        if expression.len() > MAX_RULE_EXPRESSION_LENGTH {
+        if rule.len() > MAX_RULE_EXPRESSION_LENGTH {
             return Err(ApiError::Request(eyre!(
                 "rule expression cannot exceed {MAX_RULE_EXPRESSION_LENGTH} bytes"
             )));
         }
 
-        cel::Program::compile(&expression).map_err(|error| {
+        cel::Program::compile(&rule).map_err(|error| {
             ApiError::Request(eyre!("invalid cel expression: {error}"))
         })?;
 
-        Ok(ValidatedRule {
-            name,
-            priority: self.priority,
-            expression,
-        })
+        Ok(ValidatedRule { name, rule })
     }
 }
 
-/// List the current revision of every Delphi rule.
+/// Evaluate a CEL rule against caller-provided issue traces without saving it.
+#[utoipa::path(
+	context_path = "/moderation/tech-review",
+	tag = "moderation",
+	security(("bearer_auth" = [])),
+	request_body = TestDelphiRule,
+	responses((status = OK, body = TestDelphiRuleResponse))
+)]
+#[post("/rules/test")]
+pub async fn test_rule(
+    req: HttpRequest,
+    pool: web::Data<PgPool>,
+    redis: web::Data<RedisPool>,
+    session_queue: web::Data<AuthQueue>,
+    body: web::Json<TestDelphiRule>,
+) -> Result<web::Json<TestDelphiRuleResponse>, ApiError> {
+    check_is_moderator_from_headers(
+        &req,
+        &**pool,
+        &redis,
+        &session_queue,
+        Scopes::PROJECT_READ,
+    )
+    .await?;
+
+    let request = body.into_inner();
+    let rule = request.rule.trim();
+    if rule.is_empty() {
+        return Err(ApiError::Request(eyre!(
+            "rule expression cannot be empty"
+        )));
+    }
+    if rule.len() > MAX_RULE_EXPRESSION_LENGTH {
+        return Err(ApiError::Request(eyre!(
+            "rule expression cannot exceed {MAX_RULE_EXPRESSION_LENGTH} bytes"
+        )));
+    }
+    if request.traces.len() > MAX_RULE_TEST_TRACES {
+        return Err(ApiError::Request(eyre!(
+            "cannot test more than {MAX_RULE_TEST_TRACES} traces at once"
+        )));
+    }
+
+    let program = cel::Program::compile(rule).map_err(|error| {
+        ApiError::Request(eyre!("invalid cel expression: {error}"))
+    })?;
+    let mut effects = Vec::with_capacity(request.traces.len());
+
+    for (index, trace) in request.traces.iter().enumerate() {
+        let input = test_rule_input(trace);
+        let mut context = cel::Context::default();
+        context.add_variable("input", input).map_err(|error| {
+            ApiError::Request(eyre!(
+                "failed to build input for test trace {index}: {error}"
+            ))
+        })?;
+
+        let value = program.execute(&context).map_err(|error| {
+            ApiError::Request(eyre!(
+                "failed to evaluate test trace {index}: {error}"
+            ))
+        })?;
+        let value = value.json().map_err(|error| {
+            ApiError::Request(eyre!(
+                "failed to decode result for test trace {index}: {error}"
+            ))
+        })?;
+
+        let effect = match value {
+            serde_json::Value::Null => None,
+            value => Some(serde_json::from_value(value).map_err(|error| {
+                ApiError::Request(eyre!(
+                    "invalid effect for test trace {index}: {error}"
+                ))
+            })?),
+        };
+        effects.push(effect);
+    }
+
+    Ok(web::Json(TestDelphiRuleResponse { effects }))
+}
+
+fn test_rule_input(trace: &TestDelphiRuleTrace) -> TestRuleInput<'_> {
+    TestRuleInput {
+        schema_version: 1,
+        trace,
+        scan: TestRuleScan { delphi_version: 17 },
+        artifact: TestRuleArtifact {
+            size: 412_892,
+            hashes: BTreeMap::from([
+                ("sha1".to_string(), "0123456789abcdef".to_string()),
+                ("sha512".to_string(), "fedcba9876543210".to_string()),
+            ]),
+        },
+        scope: TestRuleScope {
+            project_id: "example-project".to_string(),
+            version_id: "example-version".to_string(),
+            file_id: "example-file".to_string(),
+        },
+    }
+}
+
+/// List all Delphi rules that are not pending deletion.
 #[utoipa::path(
 	context_path = "/moderation/tech-review",
 	tag = "moderation",
@@ -110,25 +267,20 @@ pub async fn get_rules(
     )
     .await?;
 
-    let rows = sqlx::query!(
+    let rules = sqlx::query!(
         r#"
 		SELECT
-			r.id,
-			r.name,
-			r.priority,
-			r.created,
-			r.updated,
-			r.created_by,
-			r.updated_by,
-			rr.id AS revision_id,
-			rr.expression,
-			rr.created AS revision_created,
-			rr.created_by AS revision_created_by
-		FROM delphi_rules r
-		INNER JOIN delphi_rule_revisions rr
-			ON rr.rule_id = r.id
-			AND rr.active
-		ORDER BY r.priority DESC, r.id
+			id,
+			name,
+			rule,
+			revision,
+			created_at,
+			updated_at,
+			created_by,
+			updated_by
+		FROM delphi_rules
+		WHERE NOT delete_on_next_revision
+		ORDER BY name, id
 		"#,
     )
     .fetch_all(&***ro_pool)
@@ -136,25 +288,23 @@ pub async fn get_rules(
     .wrap_internal_err("failed to fetch delphi rules")?;
 
     Ok(web::Json(
-        rows.into_iter()
-            .map(|row| DelphiRule {
-                id: row.id,
-                name: row.name,
-                priority: row.priority,
-                expression: row.expression,
-                revision_id: row.revision_id,
-                created: row.created,
-                updated: row.updated,
-                revision_created: row.revision_created,
-                created_by: row.created_by,
-                updated_by: row.updated_by,
-                revision_created_by: row.revision_created_by,
+        rules
+            .into_iter()
+            .map(|rule| DelphiRule {
+                id: rule.id,
+                name: rule.name,
+                rule: rule.rule,
+                revision: rule.revision,
+                created_at: rule.created_at,
+                updated_at: rule.updated_at,
+                created_by: rule.created_by,
+                updated_by: rule.updated_by,
             })
             .collect(),
     ))
 }
 
-/// Create a Delphi rule and its first revision.
+/// Create a Delphi rule. It will be applied by the next manual rule scan.
 #[utoipa::path(
 	context_path = "/moderation/tech-review",
 	tag = "moderation",
@@ -180,65 +330,47 @@ pub async fn create_rule(
     .await?;
     let rule = body.into_inner().validate()?;
     let user_id = user.id.0 as i64;
-    let mut transaction = pool
-        .begin()
-        .await
-        .wrap_internal_err("failed to begin delphi rule transaction")?;
 
-    let row = sqlx::query!(
+    let rule = sqlx::query!(
         r#"
 		INSERT INTO delphi_rules (
 			name,
-			priority,
+			rule,
 			created_by,
 			updated_by
 		)
 		VALUES ($1, $2, $3, $3)
-		RETURNING id, name, priority, created, updated, created_by, updated_by
+		RETURNING
+			id,
+			name,
+			rule,
+			revision,
+			created_at,
+			updated_at,
+			created_by,
+			updated_by
 		"#,
         rule.name,
-        rule.priority,
+        rule.rule,
         user_id,
     )
-    .fetch_one(&mut transaction)
+    .fetch_one(&**pool)
     .await
     .wrap_internal_err("failed to create delphi rule")?;
 
-    let revision = sqlx::query!(
-        r#"
-		INSERT INTO delphi_rule_revisions (rule_id, expression, created_by)
-		VALUES ($1, $2, $3)
-		RETURNING id, expression, created, created_by
-		"#,
-        row.id,
-        rule.expression,
-        user_id,
-    )
-    .fetch_one(&mut transaction)
-    .await
-    .wrap_internal_err("failed to create delphi rule revision")?;
-
-    transaction
-        .commit()
-        .await
-        .wrap_internal_err("failed to commit delphi rule transaction")?;
-
     Ok(web::Json(DelphiRule {
-        id: row.id,
-        name: row.name,
-        priority: row.priority,
-        expression: revision.expression,
-        revision_id: revision.id,
-        created: row.created,
-        updated: row.updated,
-        revision_created: revision.created,
-        created_by: row.created_by,
-        updated_by: row.updated_by,
-        revision_created_by: revision.created_by,
+        id: rule.id,
+        name: rule.name,
+        rule: rule.rule,
+        revision: rule.revision,
+        created_at: rule.created_at,
+        updated_at: rule.updated_at,
+        created_by: rule.created_by,
+        updated_by: rule.updated_by,
     }))
 }
 
-/// Replace a Delphi rule and create a new current revision.
+/// Update a Delphi rule. Its materialized effects remain unchanged until the next scan.
 #[utoipa::path(
 	context_path = "/moderation/tech-review",
 	tag = "moderation",
@@ -266,79 +398,49 @@ pub async fn update_rule(
     let (id,) = path.into_inner();
     let rule = body.into_inner().validate()?;
     let user_id = user.id.0 as i64;
-    let mut transaction = pool
-        .begin()
-        .await
-        .wrap_internal_err("failed to begin delphi rule transaction")?;
 
-    let row = sqlx::query!(
+    let rule = sqlx::query!(
         r#"
 		UPDATE delphi_rules
 		SET
 			name = $2,
-			priority = $3,
-			updated = CURRENT_TIMESTAMP,
+			rule = $3,
+			updated_at = CURRENT_TIMESTAMP,
 			updated_by = $4
-		WHERE id = $1
-		RETURNING id, name, priority, created, updated, created_by, updated_by
+		WHERE id = $1 AND NOT delete_on_next_revision
+		RETURNING
+			id,
+			name,
+			rule,
+			revision,
+			created_at,
+			updated_at,
+			created_by,
+			updated_by
 		"#,
         id,
         rule.name,
-        rule.priority,
+        rule.rule,
         user_id,
     )
-    .fetch_optional(&mut transaction)
+    .fetch_optional(&**pool)
     .await
     .wrap_internal_err("failed to update delphi rule")?
     .ok_or(ApiError::NotFound)?;
 
-    sqlx::query!(
-        r#"
-		UPDATE delphi_rule_revisions
-		SET active = FALSE
-		WHERE rule_id = $1 AND active
-		"#,
-        id,
-    )
-    .execute(&mut transaction)
-    .await
-    .wrap_internal_err("failed to deactivate delphi rule revision")?;
-
-    let revision = sqlx::query!(
-        r#"
-		INSERT INTO delphi_rule_revisions (rule_id, expression, created_by)
-		VALUES ($1, $2, $3)
-		RETURNING id, expression, created, created_by
-		"#,
-        id,
-        rule.expression,
-        user_id,
-    )
-    .fetch_one(&mut transaction)
-    .await
-    .wrap_internal_err("failed to create delphi rule revision")?;
-
-    transaction
-        .commit()
-        .await
-        .wrap_internal_err("failed to commit delphi rule transaction")?;
-
     Ok(web::Json(DelphiRule {
-        id: row.id,
-        name: row.name,
-        priority: row.priority,
-        expression: revision.expression,
-        revision_id: revision.id,
-        created: row.created,
-        updated: row.updated,
-        revision_created: revision.created,
-        created_by: row.created_by,
-        updated_by: row.updated_by,
-        revision_created_by: revision.created_by,
+        id: rule.id,
+        name: rule.name,
+        rule: rule.rule,
+        revision: rule.revision,
+        created_at: rule.created_at,
+        updated_at: rule.updated_at,
+        created_by: rule.created_by,
+        updated_by: rule.updated_by,
     }))
 }
 
-/// Delete a Delphi rule and all its revisions and materialized effects.
+/// Mark a Delphi rule for deletion when the next rule scan is published.
 #[utoipa::path(
 	context_path = "/moderation/tech-review",
 	tag = "moderation",
@@ -353,7 +455,7 @@ pub async fn delete_rule(
     session_queue: web::Data<AuthQueue>,
     path: web::Path<(i64,)>,
 ) -> Result<(), ApiError> {
-    check_is_moderator_from_headers(
+    let user = check_is_moderator_from_headers(
         &req,
         &**pool,
         &redis,
@@ -364,12 +466,21 @@ pub async fn delete_rule(
     let (id,) = path.into_inner();
 
     let deleted = sqlx::query!(
-        "DELETE FROM delphi_rules WHERE id = $1 RETURNING id",
+        r#"
+		UPDATE delphi_rules
+		SET
+			delete_on_next_revision = TRUE,
+			updated_at = CURRENT_TIMESTAMP,
+			updated_by = $2
+		WHERE id = $1 AND NOT delete_on_next_revision
+		RETURNING id
+		"#,
         id,
+        user.id.0 as i64,
     )
     .fetch_optional(&**pool)
     .await
-    .wrap_internal_err("failed to delete delphi rule")?;
+    .wrap_internal_err("failed to mark delphi rule for deletion")?;
 
     if deleted.is_none() {
         return Err(ApiError::NotFound);
diff --git a/packages/api-client/src/modules/labrinth/tech-review/internal.ts b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
index ef2af98c29..c5d86fc713 100644
--- a/packages/api-client/src/modules/labrinth/tech-review/internal.ts
+++ b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
@@ -17,6 +17,20 @@ export class LabrinthTechReviewInternalModule extends AbstractModule {
 		)
 	}
 
+	public async testRule(
+		request: Labrinth.TechReview.Internal.TestDelphiRuleRequest,
+	): Promise<Labrinth.TechReview.Internal.TestDelphiRuleResponse> {
+		return this.client.request<Labrinth.TechReview.Internal.TestDelphiRuleResponse>(
+			'/moderation/tech-review/rules/test',
+			{
+				api: 'labrinth',
+				version: 'internal',
+				method: 'POST',
+				body: request,
+			},
+		)
+	}
+
 	public async createRule(
 		rule: Labrinth.TechReview.Internal.WriteDelphiRule,
 	): Promise<Labrinth.TechReview.Internal.DelphiRule> {
diff --git a/packages/api-client/src/modules/labrinth/types.ts b/packages/api-client/src/modules/labrinth/types.ts
index 4c586cb44f..51f664faa3 100644
--- a/packages/api-client/src/modules/labrinth/types.ts
+++ b/packages/api-client/src/modules/labrinth/types.ts
@@ -2229,21 +2229,40 @@ export namespace Labrinth {
 			export type DelphiRule = {
 				id: number
 				name: string
-				priority: number
-				expression: string
-				revision_id: number
-				created: string
-				updated: string
-				revision_created: string
+				rule: string
+				revision: number
+				created_at: string
+				updated_at: string
 				created_by: number | null
 				updated_by: number | null
-				revision_created_by: number | null
 			}
 
 			export type WriteDelphiRule = {
 				name: string
-				priority: number
-				expression: string
+				rule: string
+			}
+
+			export type TestDelphiRuleTrace = {
+				key: string
+				issue_type: string
+				severity: DelphiSeverity
+				jar: string | null
+				file_path: string
+				data: Record<string, unknown>
+			}
+
+			export type TestDelphiRuleRequest = {
+				rule: string
+				traces: TestDelphiRuleTrace[]
+			}
+
+			export type DelphiRuleEffect = {
+				severity: DelphiSeverity | null
+				hidden: boolean
+			}
+
+			export type TestDelphiRuleResponse = {
+				effects: Array<DelphiRuleEffect | null>
 			}
 
 			export type SearchProjectsRequest = {

From 3c77cc150206b8ba12c01a6ff3abe5c741ac445e Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Wed, 22 Jul 2026 18:21:33 +0100
Subject: [PATCH 03/16] use Ace editor

---
 .../moderation/technical-review/rules.vue     | 63 +++++++++++++++----
 1 file changed, 52 insertions(+), 11 deletions(-)

diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index 3668b93201..2a5b86f2ec 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -1,5 +1,5 @@
 <template>
-	<NewModal ref="ruleModal" :header="modalTitle" @hide="handleRuleModalHide">
+	<NewModal ref="ruleModal" :header="modalTitle" :on-hide="handleRuleModalHide">
 		<form class="flex w-[48rem] max-w-full flex-col gap-3" @submit.prevent="saveRule">
 			<label class="font-semibold text-contrast" for="rule-name">Name</label>
 			<StyledInput
@@ -11,16 +11,27 @@
 			/>
 
 			<label class="font-semibold text-contrast" for="rule-expression">CEL expression</label>
-			<StyledInput
-				id="rule-expression"
-				v-model="form.rule"
-				type="text"
-				multiline
-				resize="vertical"
-				class="font-mono"
-				input-class="min-h-64 font-mono"
-				@input="queueRuleTest"
-			/>
+			<div
+				class="relative overflow-hidden rounded-[20px] border border-solid border-surface-4 shadow-sm"
+			>
+				<component
+					:is="editorComponent"
+					v-if="editorComponent"
+					id="rule-expression"
+					:value="form.rule"
+					lang="javascript"
+					theme="modrinth"
+					:print-margin="false"
+					:options="RULE_EDITOR_OPTIONS"
+					:style="{ height: '16rem', fontSize: '0.875rem' }"
+					class="ace-modrinth rounded-[20px]"
+					@init="onRuleEditorInit"
+					@update:value="handleRuleInput"
+				/>
+				<div v-else class="flex h-64 items-center justify-center bg-bg-raised">
+					<LoaderCircleIcon class="size-8 animate-spin text-secondary" />
+				</div>
+			</div>
 			<p class="m-0 text-sm text-secondary">
 				Return <code>null</code> when the rule does not match, or a map containing
 				<code>severity</code> and/or <code>hidden</code> when it does.
@@ -229,10 +240,17 @@ import {
 	StyledInput,
 } from '@modrinth/ui'
 import { useDebounceFn } from '@vueuse/core'
+import type { Ace } from 'ace-builds'
+import type { Component } from 'vue'
 
 const DEFAULT_RULE = `input.trace.issue_type == "OBFUSCATED_NAMES"
 	? {"severity": "low", "hidden": false}
 	: null`
+const RULE_EDITOR_OPTIONS: Partial<Ace.EditorOptions> = {
+	useWorker: false,
+	tabSize: 2,
+	useSoftTabs: true,
+}
 
 const TEST_TRACES: Labrinth.TechReview.Internal.TestDelphiRuleTrace[] = [
 	{
@@ -264,6 +282,8 @@ const client = injectModrinthClient()
 const { addNotification } = injectNotificationManager()
 const ruleModal = useTemplateRef<InstanceType<typeof NewModal>>('ruleModal')
 const deleteModal = useTemplateRef<InstanceType<typeof ConfirmModal>>('deleteModal')
+const editorComponent = shallowRef<Component | null>(null)
+const ruleEditorInstance = shallowRef<Ace.Editor | null>(null)
 
 const rules = ref<Labrinth.TechReview.Internal.DelphiRule[]>([])
 const isLoading = ref(true)
@@ -281,6 +301,14 @@ const form = reactive({
 })
 let ruleTestRequestId = 0
 
+onMounted(async () => {
+	const [{ VAceEditor }] = await Promise.all([
+		import('vue3-ace-editor'),
+		import('@modrinth/ui/src/utils/ace-theme'),
+	])
+	editorComponent.value = VAceEditor
+})
+
 const modalTitle = computed(() => (editingRuleId.value === null ? 'Create rule' : 'Edit rule'))
 const previewExamples = computed(() =>
 	TEST_TRACES.map((original, index) => {
@@ -323,6 +351,16 @@ function getSeverityBadgeColor(severity: Labrinth.TechReview.Internal.DelphiSeve
 	}
 }
 
+function onRuleEditorInit(editor: Ace.Editor) {
+	ruleEditorInstance.value = editor
+	editor.session.setUseWrapMode(true)
+}
+
+function handleRuleInput(rule: string) {
+	form.rule = rule
+	queueRuleTest()
+}
+
 async function testRule() {
 	if (!isRuleModalOpen.value) return
 
@@ -388,6 +426,7 @@ function openCreateModal() {
 	form.rule = DEFAULT_RULE
 	isRuleModalOpen.value = true
 	ruleModal.value?.show()
+	nextTick(() => ruleEditorInstance.value?.resize(true))
 	void testRule()
 }
 
@@ -397,6 +436,7 @@ function openEditModal(rule: Labrinth.TechReview.Internal.DelphiRule) {
 	form.rule = rule.rule
 	isRuleModalOpen.value = true
 	ruleModal.value?.show()
+	nextTick(() => ruleEditorInstance.value?.resize(true))
 	void testRule()
 }
 
@@ -406,6 +446,7 @@ function closeRuleModal() {
 
 function handleRuleModalHide() {
 	isRuleModalOpen.value = false
+	ruleEditorInstance.value = null
 	ruleTestRequestId += 1
 	isTestingRule.value = false
 }

From 28154689f470c4243b486b10b615e05b768fceec Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Wed, 22 Jul 2026 19:34:18 +0100
Subject: [PATCH 04/16] run rule scans

---
 .../moderation/technical-review/rules.vue     | 142 ++++-
 apps/labrinth/src/routes/internal/mod.rs      |   1 +
 .../routes/internal/moderation/tech_review.rs |   2 +
 .../internal/moderation/tech_review/rules.rs  |  45 +-
 .../moderation/tech_review/rules_scan.rs      | 493 ++++++++++++++++++
 .../modules/labrinth/tech-review/internal.ts  |   9 +
 .../api-client/src/modules/labrinth/types.ts  |  14 +
 7 files changed, 669 insertions(+), 37 deletions(-)
 create mode 100644 apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs

diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index 2a5b86f2ec..d0447852c7 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -133,6 +133,14 @@
 		proceed-label="Delete rule"
 		@proceed="deleteRule"
 	/>
+	<ConfirmModal
+		ref="scanModal"
+		title="Run a full Delphi rule scan?"
+		description="Every stored issue detail will be evaluated against the current rules. Existing effects remain active unless the entire scan succeeds."
+		:markdown="false"
+		proceed-label="Run full scan"
+		@proceed="runFullScan"
+	/>
 
 	<div class="flex flex-col gap-6">
 		<div class="flex flex-wrap items-center justify-between gap-3">
@@ -148,14 +156,45 @@
 				</div>
 			</div>
 
-			<ButtonStyled color="brand">
-				<button type="button" @click="openCreateModal">
-					<PlusIcon />
-					Create rule
-				</button>
-			</ButtonStyled>
+			<div class="flex flex-wrap gap-2">
+				<ButtonStyled>
+					<button type="button" :disabled="isScanning" @click="scanModal?.show()">
+						<PlayIcon />
+						{{ isScanning ? 'Scanning...' : 'Run full scan' }}
+					</button>
+				</ButtonStyled>
+				<ButtonStyled color="brand">
+					<button type="button" :disabled="isScanning" @click="openCreateModal">
+						<PlusIcon />
+						Create rule
+					</button>
+				</ButtonStyled>
+			</div>
 		</div>
 
+		<section v-if="isScanning && scanProgress" class="universal-card flex flex-col gap-3">
+			<div class="flex flex-wrap items-center justify-between gap-2">
+				<div>
+					<h2 class="m-0 text-base font-bold text-contrast">Scanning Delphi rule effects</h2>
+					<p class="m-0 text-sm text-secondary">
+						{{ scanProgress.scanned.toLocaleString() }} of
+						{{ scanProgress.total.toLocaleString() }} details scanned ·
+						{{ scanProgress.effects.toLocaleString() }} effects
+					</p>
+				</div>
+				<span class="text-sm font-semibold capitalize text-secondary">
+					{{ scanProgress.phase }} revision {{ scanProgress.revision }}
+				</span>
+			</div>
+			<ProgressBar
+				:progress="scanProgress.scanned"
+				:max="Math.max(scanProgress.total, 1)"
+				:waiting="scanProgress.total === 0 && scanProgress.phase !== 'complete'"
+				full-width
+				show-progress
+			/>
+		</section>
+
 		<details class="universal-card text-sm">
 			<summary class="cursor-pointer font-semibold text-contrast">CEL contract and input</summary>
 			<div class="mt-3 flex flex-col gap-2 text-secondary">
@@ -164,6 +203,9 @@
 					<code>{ "severity": "low", "hidden": false }</code>. Severity can be <code>low</code>,
 					<code>medium</code>, <code>high</code>, or <code>severe</code>.
 				</p>
+				<p class="m-0">
+					Rules run in the order shown below. The first rule that returns a non-null effect wins.
+				</p>
 				<p class="m-0">
 					The <code>input</code> object contains <code>schema_version</code>,
 					<code>trace</code> (<code>key</code>, <code>issue_type</code>, <code>severity</code>,
@@ -195,17 +237,17 @@
 				<div class="flex flex-wrap items-start justify-between gap-3">
 					<div>
 						<h2 class="m-0 text-lg font-bold text-contrast">{{ rule.name }}</h2>
-						<p class="m-0 text-sm text-secondary">Last applied in revision {{ rule.revision }}</p>
+						<p class="m-0 text-sm text-secondary">Revision {{ rule.revision }}</p>
 					</div>
 					<div class="flex gap-2">
 						<ButtonStyled>
-							<button type="button" @click="openEditModal(rule)">
+							<button type="button" :disabled="isScanning" @click="openEditModal(rule)">
 								<EditIcon />
 								Edit
 							</button>
 						</ButtonStyled>
 						<ButtonStyled color="red">
-							<button type="button" @click="openDeleteModal(rule)">
+							<button type="button" :disabled="isScanning" @click="openDeleteModal(rule)">
 								<TrashIcon />
 								Delete
 							</button>
@@ -221,12 +263,13 @@
 </template>
 
 <script setup lang="ts">
-import type { Labrinth } from '@modrinth/api-client'
+import { type Labrinth, SseParser } from '@modrinth/api-client'
 import {
 	ArrowLeftIcon,
 	EditIcon,
 	EyeOffIcon,
 	LoaderCircleIcon,
+	PlayIcon,
 	PlusIcon,
 	TrashIcon,
 } from '@modrinth/assets'
@@ -237,6 +280,7 @@ import {
 	injectModrinthClient,
 	injectNotificationManager,
 	NewModal,
+	ProgressBar,
 	StyledInput,
 } from '@modrinth/ui'
 import { useDebounceFn } from '@vueuse/core'
@@ -282,12 +326,14 @@ const client = injectModrinthClient()
 const { addNotification } = injectNotificationManager()
 const ruleModal = useTemplateRef<InstanceType<typeof NewModal>>('ruleModal')
 const deleteModal = useTemplateRef<InstanceType<typeof ConfirmModal>>('deleteModal')
+const scanModal = useTemplateRef<InstanceType<typeof ConfirmModal>>('scanModal')
 const editorComponent = shallowRef<Component | null>(null)
 const ruleEditorInstance = shallowRef<Ace.Editor | null>(null)
 
 const rules = ref<Labrinth.TechReview.Internal.DelphiRule[]>([])
 const isLoading = ref(true)
 const isSaving = ref(false)
+const isScanning = ref(false)
 const isTestingRule = ref(false)
 const isRuleModalOpen = ref(false)
 const loadFailed = ref(false)
@@ -295,11 +341,13 @@ const editingRuleId = ref<number | null>(null)
 const ruleToDelete = ref<Labrinth.TechReview.Internal.DelphiRule | null>(null)
 const ruleTestEffects = ref<Array<Labrinth.TechReview.Internal.DelphiRuleEffect | null>>([])
 const ruleTestError = ref<string | null>(null)
+const scanProgress = ref<Labrinth.TechReview.Internal.DelphiRuleScanEvent | null>(null)
 const form = reactive({
 	name: '',
 	rule: DEFAULT_RULE,
 })
 let ruleTestRequestId = 0
+let scanAbortController: AbortController | null = null
 
 onMounted(async () => {
 	const [{ VAceEditor }] = await Promise.all([
@@ -421,6 +469,7 @@ async function loadRules() {
 }
 
 function openCreateModal() {
+	if (isScanning.value) return
 	editingRuleId.value = null
 	form.name = ''
 	form.rule = DEFAULT_RULE
@@ -431,6 +480,7 @@ function openCreateModal() {
 }
 
 function openEditModal(rule: Labrinth.TechReview.Internal.DelphiRule) {
+	if (isScanning.value) return
 	editingRuleId.value = rule.id
 	form.name = rule.name
 	form.rule = rule.rule
@@ -452,7 +502,7 @@ function handleRuleModalHide() {
 }
 
 async function saveRule() {
-	if (isSaving.value) return
+	if (isSaving.value || isScanning.value) return
 
 	if (!form.name.trim() || !form.rule.trim()) {
 		addNotification({
@@ -495,11 +545,13 @@ async function saveRule() {
 }
 
 function openDeleteModal(rule: Labrinth.TechReview.Internal.DelphiRule) {
+	if (isScanning.value) return
 	ruleToDelete.value = rule
 	deleteModal.value?.show()
 }
 
 async function deleteRule() {
+	if (isScanning.value) return
 	const rule = ruleToDelete.value
 	if (!rule) return
 
@@ -523,5 +575,73 @@ async function deleteRule() {
 	}
 }
 
+async function runFullScan() {
+	if (isScanning.value) return
+
+	isScanning.value = true
+	scanProgress.value = null
+	scanAbortController = new AbortController()
+	let completed = false
+
+	try {
+		const stream = await client.labrinth.tech_review_internal.scanRules(scanAbortController.signal)
+		const reader = stream.getReader()
+		const decoder = new TextDecoder()
+		const parser = new SseParser()
+
+		const processItems = (items: ReturnType<SseParser['feed']>) => {
+			for (const item of items) {
+				if (item.kind !== 'event') continue
+
+				if (item.event === 'failed') {
+					const error = JSON.parse(
+						item.data,
+					) as Labrinth.TechReview.Internal.DelphiRuleScanErrorEvent
+					throw new Error(error.message)
+				}
+
+				if (item.event === 'progress' || item.event === 'complete') {
+					scanProgress.value = JSON.parse(
+						item.data,
+					) as Labrinth.TechReview.Internal.DelphiRuleScanEvent
+					completed ||= item.event === 'complete'
+				}
+			}
+		}
+
+		while (true) {
+			const { done, value } = await reader.read()
+			if (done) break
+			processItems(parser.feed(decoder.decode(value, { stream: true })))
+		}
+
+		const finalChunk = decoder.decode()
+		if (finalChunk) processItems(parser.feed(finalChunk))
+		processItems(parser.end())
+
+		if (!completed || !scanProgress.value) {
+			throw new Error('The scan stream ended before the new revision was published.')
+		}
+
+		addNotification({
+			type: 'success',
+			title: 'Rule scan complete',
+			text: `${scanProgress.value.scanned.toLocaleString()} details were scanned for revision ${scanProgress.value.revision}.`,
+		})
+		await loadRules()
+	} catch (error) {
+		console.error('Failed to scan Delphi rules', error)
+		addNotification({
+			type: 'error',
+			title: 'Rule scan failed',
+			text: error instanceof Error ? error.message : 'The previous rule revision remains active.',
+		})
+	} finally {
+		isScanning.value = false
+		scanAbortController = null
+	}
+}
+
 onMounted(loadRules)
+onUnmounted(() => scanAbortController?.abort())
 </script>
diff --git a/apps/labrinth/src/routes/internal/mod.rs b/apps/labrinth/src/routes/internal/mod.rs
index 46cd42c713..d54c86c742 100644
--- a/apps/labrinth/src/routes/internal/mod.rs
+++ b/apps/labrinth/src/routes/internal/mod.rs
@@ -120,6 +120,7 @@ pub fn config(cfg: &mut web::ServiceConfig) {
 		moderation::tech_review::rules::create_rule,
 		moderation::tech_review::rules::update_rule,
 		moderation::tech_review::rules::delete_rule,
+		moderation::tech_review::rules_scan::scan_rules,
 		moderation::tech_review::get_project_report,
 		moderation::tech_review::submit_report,
 		moderation::tech_review::update_issue_details,
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review.rs b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
index fedf2288f2..92b230cd79 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
@@ -45,11 +45,13 @@ use eyre::eyre;
 
 pub mod global;
 pub mod rules;
+pub mod rules_scan;
 
 pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
     cfg.service(search_projects)
         .configure(global::config)
         .configure(rules::config)
+        .configure(rules_scan::config)
         .service(get_project_report)
         .service(get_report)
         .service(get_issue)
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
index 415956caa2..9a0a55d23c 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -191,32 +191,12 @@ pub async fn test_rule(
 
     for (index, trace) in request.traces.iter().enumerate() {
         let input = test_rule_input(trace);
-        let mut context = cel::Context::default();
-        context.add_variable("input", input).map_err(|error| {
-            ApiError::Request(eyre!(
-                "failed to build input for test trace {index}: {error}"
-            ))
-        })?;
-
-        let value = program.execute(&context).map_err(|error| {
-            ApiError::Request(eyre!(
-                "failed to evaluate test trace {index}: {error}"
-            ))
-        })?;
-        let value = value.json().map_err(|error| {
-            ApiError::Request(eyre!(
-                "failed to decode result for test trace {index}: {error}"
-            ))
-        })?;
-
-        let effect = match value {
-            serde_json::Value::Null => None,
-            value => Some(serde_json::from_value(value).map_err(|error| {
+        let effect = super::rules_scan::evaluate_rule(&program, input)
+            .map_err(|error| {
                 ApiError::Request(eyre!(
-                    "invalid effect for test trace {index}: {error}"
+                    "failed to evaluate test trace {index}: {error}"
                 ))
-            })?),
-        };
+            })?;
         effects.push(effect);
     }
 
@@ -280,7 +260,7 @@ pub async fn get_rules(
 			updated_by
 		FROM delphi_rules
 		WHERE NOT delete_on_next_revision
-		ORDER BY name, id
+		ORDER BY id
 		"#,
     )
     .fetch_all(&***ro_pool)
@@ -336,10 +316,17 @@ pub async fn create_rule(
 		INSERT INTO delphi_rules (
 			name,
 			rule,
+			revision,
 			created_by,
 			updated_by
 		)
-		VALUES ($1, $2, $3, $3)
+		VALUES (
+			$1,
+			$2,
+			(SELECT revision + 1 FROM delphi_rule_revisions LIMIT 1),
+			$3,
+			$3
+		)
 		RETURNING
 			id,
 			name,
@@ -405,6 +392,9 @@ pub async fn update_rule(
 		SET
 			name = $2,
 			rule = $3,
+			revision = (
+				SELECT revision + 1 FROM delphi_rule_revisions LIMIT 1
+			),
 			updated_at = CURRENT_TIMESTAMP,
 			updated_by = $4
 		WHERE id = $1 AND NOT delete_on_next_revision
@@ -470,6 +460,9 @@ pub async fn delete_rule(
 		UPDATE delphi_rules
 		SET
 			delete_on_next_revision = TRUE,
+			revision = (
+				SELECT revision + 1 FROM delphi_rule_revisions LIMIT 1
+			),
 			updated_at = CURRENT_TIMESTAMP,
 			updated_by = $2
 		WHERE id = $1 AND NOT delete_on_next_revision
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
new file mode 100644
index 0000000000..4ee7f4c595
--- /dev/null
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -0,0 +1,493 @@
+use std::collections::{BTreeMap, HashMap};
+
+use actix_web::{HttpRequest, HttpResponse, post, web};
+use ariadne::ids::base62_impl::to_base62;
+use bytes::Bytes;
+use eyre::{Context as _, Result, eyre};
+use futures_util::{StreamExt, TryStreamExt};
+use serde::Serialize;
+use sqlx::types::Json;
+use tokio::sync::mpsc;
+use tokio_stream::wrappers::UnboundedReceiverStream;
+
+use super::rules::DelphiRuleEffect;
+use crate::{
+    auth::check_is_moderator_from_headers,
+    database::{
+        PgPool, PgTransaction, models::delphi_report_item::DelphiSeverity,
+        redis::RedisPool,
+    },
+    models::pats::Scopes,
+    queue::session::AuthQueue,
+    routes::ApiError,
+};
+
+const RULE_SCAN_LOCK_ID: i64 = 0x6465_6c70_6869_7275;
+const PROGRESS_INTERVAL: usize = 50;
+
+pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
+    cfg.service(scan_rules);
+}
+
+#[derive(Serialize)]
+struct RuleScanEvent<'a> {
+    phase: &'a str,
+    revision: i64,
+    scanned: usize,
+    total: usize,
+    effects: usize,
+}
+
+#[derive(Serialize)]
+struct RuleScanErrorEvent<'a> {
+    message: &'a str,
+}
+
+#[derive(Serialize)]
+struct RuleInput {
+    schema_version: u32,
+    trace: RuleTrace,
+    scan: RuleScan,
+    artifact: RuleArtifact,
+    scope: RuleScope,
+}
+
+#[derive(Serialize)]
+struct RuleTrace {
+    key: String,
+    issue_type: String,
+    severity: DelphiSeverity,
+    jar: Option<String>,
+    file_path: String,
+    data: HashMap<String, serde_json::Value>,
+}
+
+#[derive(Serialize)]
+struct RuleScan {
+    delphi_version: i32,
+}
+
+#[derive(Serialize)]
+struct RuleArtifact {
+    size: Option<i32>,
+    hashes: BTreeMap<String, String>,
+}
+
+#[derive(Serialize)]
+struct RuleScope {
+    project_id: Option<String>,
+    version_id: Option<String>,
+    file_id: Option<String>,
+}
+
+struct CompiledRule {
+    id: i64,
+    program: cel::Program,
+}
+
+struct MaterializedEffect {
+    detail_id: i64,
+    rule_id: i64,
+    effect: DelphiRuleEffect,
+}
+
+struct ScanSummary {
+    revision: i64,
+    scanned: usize,
+    total: usize,
+    effects: usize,
+}
+
+/// Re-evaluate every Delphi issue detail and atomically publish a new rule revision.
+#[utoipa::path(
+    context_path = "/moderation/tech-review",
+    tag = "moderation",
+    security(("bearer_auth" = [])),
+    responses((status = OK), (status = CONFLICT))
+)]
+#[post("/rules/scan")]
+pub async fn scan_rules(
+    req: HttpRequest,
+    pool: web::Data<PgPool>,
+    redis: web::Data<RedisPool>,
+    session_queue: web::Data<AuthQueue>,
+) -> Result<HttpResponse, ApiError> {
+    check_is_moderator_from_headers(
+        &req,
+        &**pool,
+        &redis,
+        &session_queue,
+        Scopes::PROJECT_WRITE,
+    )
+    .await?;
+
+    let mut transaction = crate::util::error::Context::wrap_internal_err(
+        pool.begin().await,
+        "failed to begin delphi rule scan",
+    )?;
+
+    sqlx::query!("SET TRANSACTION ISOLATION LEVEL REPEATABLE READ")
+        .execute(&mut transaction)
+        .await
+        .map_err(|error| {
+            ApiError::Internal(
+                eyre!(error)
+                    .wrap_err("failed to set delphi rule scan isolation"),
+            )
+        })?;
+
+    let acquired = sqlx::query_scalar!(
+        "SELECT pg_try_advisory_xact_lock($1)",
+        RULE_SCAN_LOCK_ID,
+    )
+    .fetch_one(&mut transaction)
+    .await
+    .map_err(|error| {
+        ApiError::Internal(
+            eyre!(error).wrap_err("failed to acquire delphi rule scan lock"),
+        )
+    })?
+    .unwrap_or(false);
+
+    if !acquired {
+        return Err(ApiError::Conflict(
+            "a delphi rule scan is already running".to_string(),
+        ));
+    }
+
+    let (sender, receiver) = mpsc::unbounded_channel();
+    actix_web::rt::spawn(async move {
+        match run_scan(transaction, &sender).await {
+            Ok(summary) => {
+                send_event(
+                    &sender,
+                    "complete",
+                    &RuleScanEvent {
+                        phase: "complete",
+                        revision: summary.revision,
+                        scanned: summary.scanned,
+                        total: summary.total,
+                        effects: summary.effects,
+                    },
+                );
+            }
+            Err(error) => {
+                tracing::error!(error = ?error, "delphi rule scan failed");
+                send_event(
+                    &sender,
+                    "failed",
+                    &RuleScanErrorEvent {
+                        message: &error.to_string(),
+                    },
+                );
+            }
+        }
+    });
+
+    let stream =
+        UnboundedReceiverStream::new(receiver).map(Ok::<_, std::io::Error>);
+
+    Ok(HttpResponse::Ok()
+        .insert_header(("Content-Type", "text/event-stream"))
+        .insert_header(("Cache-Control", "no-cache"))
+        .insert_header(("X-Accel-Buffering", "no"))
+        .streaming(stream))
+}
+
+async fn run_scan(
+    mut transaction: PgTransaction<'static>,
+    sender: &mpsc::UnboundedSender<Bytes>,
+) -> Result<ScanSummary> {
+    sqlx::query!("LOCK TABLE delphi_rules IN SHARE MODE")
+        .execute(&mut transaction)
+        .await
+        .wrap_err("failed to lock delphi rules")?;
+    sqlx::query!("LOCK TABLE delphi_report_issue_details IN SHARE MODE")
+        .execute(&mut transaction)
+        .await
+        .wrap_err("failed to lock delphi issue details")?;
+
+    let current_revision = sqlx::query_scalar!(
+        "SELECT revision FROM delphi_rule_revisions LIMIT 1 FOR UPDATE",
+    )
+    .fetch_one(&mut transaction)
+    .await
+    .wrap_err("failed to fetch the current delphi rule revision")?;
+    let revision = current_revision
+        .checked_add(1)
+        .ok_or_else(|| eyre!("delphi rule revision overflowed"))?;
+
+    let rules = sqlx::query!(
+        r#"
+        SELECT id, rule
+        FROM delphi_rules
+        WHERE NOT delete_on_next_revision
+        ORDER BY id
+        "#,
+    )
+    .fetch_all(&mut transaction)
+    .await
+    .wrap_err("failed to fetch delphi rules")?
+    .into_iter()
+    .map(|rule| {
+        let program = cel::Program::compile(&rule.rule).map_err(|error| {
+            eyre!("failed to compile delphi rule {}: {error}", rule.id)
+        })?;
+        Ok(CompiledRule {
+            id: rule.id,
+            program,
+        })
+    })
+    .collect::<Result<Vec<_>>>()?;
+
+    let total = sqlx::query_scalar!(
+        "SELECT COUNT(*) AS \"count!\" FROM delphi_report_issue_details",
+    )
+    .fetch_one(&mut transaction)
+    .await
+    .wrap_err("failed to count delphi issue details")? as usize;
+
+    let mut details = sqlx::query!(
+        r#"
+        SELECT
+            detail.id,
+            detail.key,
+            issue.issue_type,
+            detail.severity AS "severity: DelphiSeverity",
+            detail.jar,
+            detail.file_path,
+            detail.data AS "data: Json<HashMap<String, serde_json::Value>>",
+            report.delphi_version,
+            file.size AS "size?",
+            file.id AS "file_id?",
+            version.id AS "version_id?",
+            version.mod_id AS "project_id?",
+            COALESCE(file_hashes.hashes, '{}'::jsonb)
+                AS "hashes!: Json<BTreeMap<String, String>>"
+        FROM delphi_report_issue_details detail
+        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id
+        INNER JOIN delphi_reports report ON report.id = issue.report_id
+        LEFT JOIN files file ON file.id = report.file_id
+        LEFT JOIN versions version ON version.id = file.version_id
+        LEFT JOIN (
+            SELECT
+                file_id,
+                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes
+            FROM hashes
+            GROUP BY file_id
+        ) file_hashes ON file_hashes.file_id = file.id
+        ORDER BY detail.id
+        "#,
+    )
+    .fetch(&mut transaction);
+
+    let mut effects = Vec::new();
+    let mut scanned = 0;
+    send_progress(sender, "scanning", revision, 0, total, 0);
+
+    while let Some(detail) = details
+        .try_next()
+        .await
+        .wrap_err("failed to fetch a delphi issue detail")?
+    {
+        let detail_id = detail.id;
+        let input = RuleInput {
+            schema_version: 1,
+            trace: RuleTrace {
+                key: detail.key,
+                issue_type: detail.issue_type,
+                severity: detail.severity,
+                jar: detail.jar,
+                file_path: detail.file_path,
+                data: detail.data.0,
+            },
+            scan: RuleScan {
+                delphi_version: detail.delphi_version,
+            },
+            artifact: RuleArtifact {
+                size: detail.size,
+                hashes: detail.hashes.0,
+            },
+            scope: RuleScope {
+                project_id: detail.project_id.map(to_public_id),
+                version_id: detail.version_id.map(to_public_id),
+                file_id: detail.file_id.map(to_public_id),
+            },
+        };
+
+        for rule in &rules {
+            let effect = evaluate_rule(&rule.program, &input).wrap_err_with(|| {
+                format!(
+                    "failed to evaluate delphi rule {} for detail {detail_id}",
+                    rule.id
+                )
+            })?;
+            if let Some(effect) = effect {
+                effects.push(MaterializedEffect {
+                    detail_id,
+                    rule_id: rule.id,
+                    effect,
+                });
+                break;
+            }
+        }
+
+        scanned += 1;
+        if scanned % PROGRESS_INTERVAL == 0 || scanned == total {
+            send_progress(
+                sender,
+                "scanning",
+                revision,
+                scanned,
+                total,
+                effects.len(),
+            );
+            tokio::task::yield_now().await;
+        }
+    }
+    drop(details);
+
+    send_progress(sender, "publishing", revision, total, total, effects.len());
+
+    let detail_ids = effects
+        .iter()
+        .map(|effect| effect.detail_id)
+        .collect::<Vec<_>>();
+    let rule_ids = effects
+        .iter()
+        .map(|effect| effect.rule_id)
+        .collect::<Vec<_>>();
+    let severities = effects
+        .iter()
+        .map(|effect| effect.effect.severity)
+        .collect::<Vec<_>>();
+    let hidden = effects
+        .iter()
+        .map(|effect| effect.effect.hidden)
+        .collect::<Vec<_>>();
+
+    if !effects.is_empty() {
+        sqlx::query!(
+            r#"
+            INSERT INTO delphi_rule_effects (
+                revision,
+                detail_id,
+                rule_id,
+                severity,
+                hidden
+            )
+            SELECT $1, effect.*
+            FROM UNNEST(
+                $2::BIGINT[],
+                $3::BIGINT[],
+                $4::delphi_severity[],
+                $5::BOOLEAN[]
+            ) AS effect(detail_id, rule_id, severity, hidden)
+            "#,
+            revision,
+            &detail_ids,
+            &rule_ids,
+            &severities as &[Option<DelphiSeverity>],
+            &hidden,
+        )
+        .execute(&mut transaction)
+        .await
+        .wrap_err("failed to insert delphi rule effects")?;
+    }
+
+    sqlx::query!(
+        "DELETE FROM delphi_rule_effects WHERE revision <> $1",
+        revision,
+    )
+    .execute(&mut transaction)
+    .await
+    .wrap_err("failed to delete old delphi rule effects")?;
+    sqlx::query!("DELETE FROM delphi_rules WHERE delete_on_next_revision")
+        .execute(&mut transaction)
+        .await
+        .wrap_err("failed to delete retired delphi rules")?;
+    sqlx::query!(
+        "UPDATE delphi_rules SET revision = $1 WHERE NOT delete_on_next_revision",
+        revision,
+    )
+    .execute(&mut transaction)
+    .await
+    .wrap_err("failed to update delphi rule revisions")?;
+    sqlx::query!("UPDATE delphi_rule_revisions SET revision = $1", revision)
+        .execute(&mut transaction)
+        .await
+        .wrap_err("failed to publish the delphi rule revision")?;
+
+    transaction
+        .commit()
+        .await
+        .wrap_err("failed to commit the delphi rule scan")?;
+
+    Ok(ScanSummary {
+        revision,
+        scanned: total,
+        total,
+        effects: effects.len(),
+    })
+}
+
+pub(super) fn evaluate_rule(
+    program: &cel::Program,
+    input: impl Serialize,
+) -> Result<Option<DelphiRuleEffect>> {
+    let mut context = cel::Context::default();
+    context
+        .add_variable("input", input)
+        .wrap_err("failed to build cel input")?;
+
+    let value = program
+        .execute(&context)
+        .wrap_err("failed to execute cel expression")?;
+    let value = value.json().map_err(|error| {
+        eyre!("failed to convert cel result to json: {error}")
+    })?;
+
+    match value {
+        serde_json::Value::Null => Ok(None),
+        value => serde_json::from_value(value)
+            .map(Some)
+            .wrap_err("cel expression returned an invalid rule effect"),
+    }
+}
+
+fn to_public_id(id: i64) -> String {
+    to_base62(id as u64)
+}
+
+fn send_progress(
+    sender: &mpsc::UnboundedSender<Bytes>,
+    phase: &'static str,
+    revision: i64,
+    scanned: usize,
+    total: usize,
+    effects: usize,
+) {
+    send_event(
+        sender,
+        "progress",
+        &RuleScanEvent {
+            phase,
+            revision,
+            scanned,
+            total,
+            effects,
+        },
+    );
+}
+
+fn send_event(
+    sender: &mpsc::UnboundedSender<Bytes>,
+    event: &str,
+    data: &impl Serialize,
+) {
+    let Ok(data) = serde_json::to_string(data) else {
+        return;
+    };
+    let _ =
+        sender.send(Bytes::from(format!("event: {event}\ndata: {data}\n\n")));
+}
diff --git a/packages/api-client/src/modules/labrinth/tech-review/internal.ts b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
index c5d86fc713..c66520baa8 100644
--- a/packages/api-client/src/modules/labrinth/tech-review/internal.ts
+++ b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
@@ -68,6 +68,15 @@ export class LabrinthTechReviewInternalModule extends AbstractModule {
 		})
 	}
 
+	public async scanRules(signal?: AbortSignal): Promise<ReadableStream<Uint8Array>> {
+		return this.client.stream('/moderation/tech-review/rules/scan', {
+			api: 'labrinth',
+			version: 'internal',
+			method: 'POST',
+			signal,
+		})
+	}
+
 	/**
 	 * Search for projects awaiting technical review.
 	 *
diff --git a/packages/api-client/src/modules/labrinth/types.ts b/packages/api-client/src/modules/labrinth/types.ts
index 51f664faa3..9d97f1ec5a 100644
--- a/packages/api-client/src/modules/labrinth/types.ts
+++ b/packages/api-client/src/modules/labrinth/types.ts
@@ -2265,6 +2265,20 @@ export namespace Labrinth {
 				effects: Array<DelphiRuleEffect | null>
 			}
 
+			export type DelphiRuleScanPhase = 'scanning' | 'publishing' | 'complete'
+
+			export type DelphiRuleScanEvent = {
+				phase: DelphiRuleScanPhase
+				revision: number
+				scanned: number
+				total: number
+				effects: number
+			}
+
+			export type DelphiRuleScanErrorEvent = {
+				message: string
+			}
+
 			export type SearchProjectsRequest = {
 				limit?: number
 				page?: number

From ea42c644f35d2cec2479403526e13ea04aa14fa9 Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Wed, 22 Jul 2026 20:14:57 +0100
Subject: [PATCH 05/16] show in/out schema

---
 .../moderation/technical-review/rules.vue     | 306 ++++++++++++++++-
 apps/labrinth/src/routes/internal/mod.rs      |   2 +
 .../internal/moderation/tech_review/rules.rs  | 309 +++++++++++++++---
 .../moderation/tech_review/rules_scan.rs      | 128 ++++++--
 .../modules/labrinth/tech-review/internal.ts  |  24 ++
 .../api-client/src/modules/labrinth/types.ts  |  28 ++
 6 files changed, 707 insertions(+), 90 deletions(-)

diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index d0447852c7..6cf23d476a 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -37,6 +37,37 @@
 				<code>severity</code> and/or <code>hidden</code> when it does.
 			</p>
 
+			<details class="rounded-xl border border-divider bg-bg-raised p-3">
+				<summary class="cursor-pointer font-semibold text-contrast">
+					Input and output schema
+				</summary>
+				<div v-if="isLoadingRuleSchema" class="mt-3 flex items-center gap-2 text-secondary">
+					<LoaderCircleIcon class="size-4 animate-spin" />
+					Loading schema…
+				</div>
+				<p v-else-if="ruleSchemaError" class="m-0 mt-3 text-sm text-red">
+					{{ ruleSchemaError }}
+				</p>
+				<div v-else class="mt-3 grid gap-3 md:grid-cols-2">
+					<div class="min-w-0">
+						<p class="m-0 mb-2 text-xs font-semibold uppercase tracking-wide text-secondary">
+							Input (<code>input</code>)
+						</p>
+						<pre
+							class="m-0 overflow-x-auto rounded-lg bg-surface-1 p-3 text-xs leading-relaxed text-contrast"
+						><code>{{ ruleInputSchemaText }}</code></pre>
+					</div>
+					<div class="min-w-0">
+						<p class="m-0 mb-2 text-xs font-semibold uppercase tracking-wide text-secondary">
+							Output
+						</p>
+						<pre
+							class="m-0 overflow-x-auto rounded-lg bg-surface-1 p-3 text-xs leading-relaxed text-contrast"
+						><code>{{ ruleOutputSchemaText }}</code></pre>
+					</div>
+				</div>
+			</details>
+
 			<section class="mt-2 flex flex-col gap-3">
 				<div class="flex items-center justify-between gap-3">
 					<div>
@@ -233,7 +264,11 @@
 			description="Create a rule to transform matching issue traces."
 		/>
 		<div v-else class="flex flex-col gap-3">
-			<article v-for="rule in rules" :key="rule.id" class="universal-card flex flex-col gap-3">
+			<article
+				v-for="rule in rules"
+				:key="rule.id"
+				class="universal-card relative flex flex-col gap-3 overflow-hidden"
+			>
 				<div class="flex flex-wrap items-start justify-between gap-3">
 					<div>
 						<h2 class="m-0 text-lg font-bold text-contrast">{{ rule.name }}</h2>
@@ -257,6 +292,112 @@
 				<pre
 					class="m-0 overflow-x-auto rounded-lg bg-bg-raised p-3 text-sm"
 				><code>{{ rule.rule }}</code></pre>
+
+				<section class="flex flex-col gap-2">
+					<h3 class="m-0 text-sm font-semibold text-contrast">
+						Affected details ({{ rule.affected_details_count.toLocaleString() }})
+					</h3>
+					<p v-if="rule.affected_details_count === 0" class="m-0 text-sm text-secondary">
+						No details are affected in the current revision.
+					</p>
+					<div v-else class="flex flex-col gap-2">
+						<div
+							v-for="detail in getVisibleRuleDetails(rule)"
+							:key="detail.detail_id"
+							class="flex min-w-0 items-center justify-between gap-3 rounded-lg border border-divider bg-bg-raised px-3 py-2"
+						>
+							<div class="min-w-0">
+								<div class="mb-1 flex min-w-0 items-center gap-1.5 text-sm">
+									<NuxtLink
+										v-if="detail.project_id"
+										:to="getProjectLink(detail)"
+										class="flex min-w-0 items-center gap-1.5 font-semibold text-contrast hover:underline"
+									>
+										<Avatar
+											:src="detail.project_icon_url"
+											:alt="detail.project_name ?? ''"
+											size="xs"
+											no-shadow
+										/>
+										<span class="truncate">{{ detail.project_name ?? detail.project_id }}</span>
+									</NuxtLink>
+									<span v-else class="text-secondary">Unattached trace</span>
+									<template v-if="detail.project_id && detail.version_id">
+										<span class="shrink-0 text-secondary" aria-hidden="true">·</span>
+										<NuxtLink
+											:to="getVersionLink(detail)"
+											class="truncate text-secondary hover:underline"
+										>
+											{{ detail.version_name ?? detail.version_number ?? detail.version_id }}
+										</NuxtLink>
+									</template>
+								</div>
+								<div class="flex min-w-0 flex-wrap items-center gap-2">
+									<span
+										v-if="!detail.hidden"
+										class="rounded-full border px-2 py-0.5 text-xs font-semibold capitalize"
+										:class="getSeverityBadgeColor(detail.severity ?? detail.original_severity)"
+									>
+										{{ detail.severity ?? detail.original_severity }}
+									</span>
+									<span v-else class="flex items-center gap-1 text-xs font-semibold text-secondary">
+										<EyeOffIcon class="size-4" />
+										Hidden
+									</span>
+									<strong class="truncate text-sm text-contrast">{{ detail.issue_type }}</strong>
+								</div>
+								<p
+									class="m-0 mt-0.5 flex min-w-0 items-center gap-1 font-mono text-xs text-secondary"
+								>
+									<template v-if="detail.jar">
+										<span class="truncate">{{ detail.jar }}</span>
+										<ChevronRightIcon class="size-3.5 shrink-0" aria-hidden="true" />
+									</template>
+									<span class="truncate">{{ detail.file_path }}</span>
+								</p>
+							</div>
+							<ButtonStyled>
+								<NuxtLink v-if="detail.project_id" :to="getAffectedDetailLink(detail)">
+									<ExternalIcon />
+									View
+								</NuxtLink>
+								<button
+									v-else
+									type="button"
+									disabled
+									title="This trace is not attached to a project"
+								>
+									<ExternalIcon />
+									View
+								</button>
+							</ButtonStyled>
+						</div>
+
+						<div
+							v-if="rule.affected_details_count > 3"
+							class="relative z-20 mt-1 flex justify-center"
+						>
+							<ButtonStyled circular type="transparent">
+								<button
+									type="button"
+									:disabled="loadingAffectedRuleIds.has(rule.id)"
+									@click="toggleAffectedDetails(rule)"
+								>
+									<LoaderCircleIcon
+										v-if="loadingAffectedRuleIds.has(rule.id)"
+										class="animate-spin"
+									/>
+									{{ expandedAffectedDetails.has(rule.id) ? 'Show less' : 'Show more' }}
+								</button>
+							</ButtonStyled>
+						</div>
+					</div>
+				</section>
+				<div
+					v-if="rule.affected_details_count > 3 && !expandedAffectedDetails.has(rule.id)"
+					class="pointer-events-none absolute inset-0 z-10 bg-gradient-to-b from-transparent to-surface-3"
+					aria-hidden="true"
+				/>
 			</article>
 		</div>
 	</div>
@@ -266,8 +407,10 @@
 import { type Labrinth, SseParser } from '@modrinth/api-client'
 import {
 	ArrowLeftIcon,
+	ChevronRightIcon,
 	EditIcon,
 	EyeOffIcon,
+	ExternalIcon,
 	LoaderCircleIcon,
 	PlayIcon,
 	PlusIcon,
@@ -275,6 +418,7 @@ import {
 } from '@modrinth/assets'
 import {
 	ButtonStyled,
+	Avatar,
 	ConfirmModal,
 	EmptyState,
 	injectModrinthClient,
@@ -335,13 +479,20 @@ const isLoading = ref(true)
 const isSaving = ref(false)
 const isScanning = ref(false)
 const isTestingRule = ref(false)
+const isLoadingRuleSchema = ref(false)
 const isRuleModalOpen = ref(false)
 const loadFailed = ref(false)
+const ruleSchemaError = ref<string | null>(null)
+const ruleSchema = ref<Labrinth.TechReview.Internal.DelphiRuleSchemaResponse | null>(null)
 const editingRuleId = ref<number | null>(null)
 const ruleToDelete = ref<Labrinth.TechReview.Internal.DelphiRule | null>(null)
 const ruleTestEffects = ref<Array<Labrinth.TechReview.Internal.DelphiRuleEffect | null>>([])
 const ruleTestError = ref<string | null>(null)
 const scanProgress = ref<Labrinth.TechReview.Internal.DelphiRuleScanEvent | null>(null)
+const expandedAffectedDetails = reactive(
+	new Map<number, Labrinth.TechReview.Internal.DelphiRuleAffectedDetail[]>(),
+)
+const loadingAffectedRuleIds = reactive(new Set<number>())
 const form = reactive({
 	name: '',
 	rule: DEFAULT_RULE,
@@ -358,6 +509,12 @@ onMounted(async () => {
 })
 
 const modalTitle = computed(() => (editingRuleId.value === null ? 'Create rule' : 'Edit rule'))
+const ruleInputSchemaText = computed(() =>
+	ruleSchema.value ? formatRuleSchema(ruleSchema.value.input, ruleSchema.value.components) : '',
+)
+const ruleOutputSchemaText = computed(() =>
+	ruleSchema.value ? formatRuleSchema(ruleSchema.value.output, ruleSchema.value.components) : '',
+)
 const previewExamples = computed(() =>
 	TEST_TRACES.map((original, index) => {
 		const effect = ruleTestEffects.value[index] ?? null
@@ -399,6 +556,92 @@ function getSeverityBadgeColor(severity: Labrinth.TechReview.Internal.DelphiSeve
 	}
 }
 
+function isSchema(value: unknown): value is Labrinth.TechReview.Internal.DelphiRuleSchema {
+	return typeof value === 'object' && value !== null && !Array.isArray(value)
+}
+
+function formatRuleSchema(
+	schema: Labrinth.TechReview.Internal.DelphiRuleSchema,
+	components: Record<string, Labrinth.TechReview.Internal.DelphiRuleSchema>,
+	depth = 0,
+	visitedReferences = new Set<string>(),
+): string {
+	if (typeof schema.$ref === 'string') {
+		const name = decodeURIComponent(schema.$ref.split('/').at(-1) ?? '')
+		if (visitedReferences.has(name)) return name || 'unknown'
+
+		const referencedSchema = components[name]
+		if (!referencedSchema) return name || 'unknown'
+
+		const visited = new Set(visitedReferences)
+		visited.add(name)
+		return formatRuleSchema(referencedSchema, components, depth, visited)
+	}
+
+	const resolved = schema
+	const alternatives = [resolved.oneOf, resolved.anyOf].find(Array.isArray)
+	if (alternatives) {
+		return alternatives
+			.filter(isSchema)
+			.map((alternative) => formatRuleSchema(alternative, components, depth, visitedReferences))
+			.join(' | ')
+	}
+
+	if (Array.isArray(resolved.enum)) {
+		return resolved.enum.map((value) => JSON.stringify(value)).join(' | ')
+	}
+
+	const declaredTypes = Array.isArray(resolved.type)
+		? resolved.type.filter((type): type is string => typeof type === 'string')
+		: typeof resolved.type === 'string'
+			? [resolved.type]
+			: []
+	const nullable = resolved.nullable === true || declaredTypes.includes('null')
+	const type = declaredTypes.find((value) => value !== 'null')
+	let formatted: string
+
+	if (type === 'object' || isSchema(resolved.properties) || resolved.additionalProperties) {
+		const properties = isSchema(resolved.properties) ? resolved.properties : {}
+		const required = new Set(
+			Array.isArray(resolved.required)
+				? resolved.required.filter((name): name is string => typeof name === 'string')
+				: [],
+		)
+		const indentation = '  '.repeat(depth)
+		const childIndentation = '  '.repeat(depth + 1)
+		const lines = Object.entries(properties)
+			.filter((entry): entry is [string, Labrinth.TechReview.Internal.DelphiRuleSchema] =>
+				isSchema(entry[1]),
+			)
+			.map(
+				([name, property]) =>
+					`${childIndentation}${JSON.stringify(name)}${required.has(name) ? '' : '?'}: ${formatRuleSchema(property, components, depth + 1, visitedReferences)}`,
+			)
+
+		if (isSchema(resolved.additionalProperties)) {
+			lines.push(
+				`${childIndentation}[key: string]: ${formatRuleSchema(resolved.additionalProperties, components, depth + 1, visitedReferences)}`,
+			)
+		} else if (resolved.additionalProperties === true) {
+			lines.push(`${childIndentation}[key: string]: unknown`)
+		}
+
+		formatted = lines.length === 0 ? '{}' : `{\n${lines.join(',\n')}\n${indentation}}`
+	} else if (type === 'array') {
+		formatted = isSchema(resolved.items)
+			? `Array<${formatRuleSchema(resolved.items, components, depth, visitedReferences)}>`
+			: 'unknown[]'
+	} else if (type === 'integer' || type === 'number') {
+		formatted = 'number'
+	} else if (type === 'boolean' || type === 'string' || type === 'null') {
+		formatted = type
+	} else {
+		formatted = 'unknown'
+	}
+
+	return nullable && formatted !== 'null' ? `${formatted} | null` : formatted
+}
+
 function onRuleEditorInit(editor: Ace.Editor) {
 	ruleEditorInstance.value = editor
 	editor.session.setUseWrapMode(true)
@@ -460,6 +703,7 @@ async function loadRules() {
 	loadFailed.value = false
 	try {
 		rules.value = await client.labrinth.tech_review_internal.getRules()
+		expandedAffectedDetails.clear()
 	} catch (error) {
 		console.error('Failed to load Delphi rules', error)
 		loadFailed.value = true
@@ -468,6 +712,64 @@ async function loadRules() {
 	}
 }
 
+async function loadRuleSchema() {
+	if (ruleSchema.value || isLoadingRuleSchema.value) return
+
+	isLoadingRuleSchema.value = true
+	ruleSchemaError.value = null
+	try {
+		ruleSchema.value = await client.labrinth.tech_review_internal.getRuleSchema()
+	} catch (error) {
+		console.error('Failed to load Delphi rule schema', error)
+		ruleSchemaError.value = 'The rule input and output schema could not be loaded.'
+	} finally {
+		isLoadingRuleSchema.value = false
+	}
+}
+
+function getVisibleRuleDetails(
+	rule: Labrinth.TechReview.Internal.DelphiRule,
+): Labrinth.TechReview.Internal.DelphiRuleAffectedDetail[] {
+	return expandedAffectedDetails.get(rule.id) ?? rule.affected_details
+}
+
+function getAffectedDetailLink(
+	detail: Labrinth.TechReview.Internal.DelphiRuleAffectedDetail,
+): string {
+	return `/moderation/technical-review/${detail.project_id}?detail=${encodeURIComponent(detail.detail_id)}`
+}
+
+function getProjectLink(detail: Labrinth.TechReview.Internal.DelphiRuleAffectedDetail): string {
+	return `/project/${detail.project_id}`
+}
+
+function getVersionLink(detail: Labrinth.TechReview.Internal.DelphiRuleAffectedDetail): string {
+	return `/project/${detail.project_id}/version/${detail.version_id}`
+}
+
+async function toggleAffectedDetails(rule: Labrinth.TechReview.Internal.DelphiRule) {
+	if (expandedAffectedDetails.has(rule.id)) {
+		expandedAffectedDetails.delete(rule.id)
+		return
+	}
+	if (loadingAffectedRuleIds.has(rule.id)) return
+
+	loadingAffectedRuleIds.add(rule.id)
+	try {
+		const details = await client.labrinth.tech_review_internal.getRuleAffectedDetails(rule.id)
+		expandedAffectedDetails.set(rule.id, details)
+	} catch (error) {
+		console.error('Failed to load details affected by Delphi rule', error)
+		addNotification({
+			type: 'error',
+			title: 'Failed to load affected details',
+			text: 'The complete list of affected details could not be loaded.',
+		})
+	} finally {
+		loadingAffectedRuleIds.delete(rule.id)
+	}
+}
+
 function openCreateModal() {
 	if (isScanning.value) return
 	editingRuleId.value = null
@@ -476,6 +778,7 @@ function openCreateModal() {
 	isRuleModalOpen.value = true
 	ruleModal.value?.show()
 	nextTick(() => ruleEditorInstance.value?.resize(true))
+	void loadRuleSchema()
 	void testRule()
 }
 
@@ -487,6 +790,7 @@ function openEditModal(rule: Labrinth.TechReview.Internal.DelphiRule) {
 	isRuleModalOpen.value = true
 	ruleModal.value?.show()
 	nextTick(() => ruleEditorInstance.value?.resize(true))
+	void loadRuleSchema()
 	void testRule()
 }
 
diff --git a/apps/labrinth/src/routes/internal/mod.rs b/apps/labrinth/src/routes/internal/mod.rs
index d54c86c742..6dc3734377 100644
--- a/apps/labrinth/src/routes/internal/mod.rs
+++ b/apps/labrinth/src/routes/internal/mod.rs
@@ -117,9 +117,11 @@ pub fn config(cfg: &mut web::ServiceConfig) {
 		moderation::tech_review::global::get_global_issue_detail,
 		moderation::tech_review::rules::get_rules,
 		moderation::tech_review::rules::test_rule,
+		moderation::tech_review::rules::get_rule_affected_details,
 		moderation::tech_review::rules::create_rule,
 		moderation::tech_review::rules::update_rule,
 		moderation::tech_review::rules::delete_rule,
+		moderation::tech_review::rules_scan::get_rule_schema,
 		moderation::tech_review::rules_scan::scan_rules,
 		moderation::tech_review::get_project_report,
 		moderation::tech_review::submit_report,
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
index 9a0a55d23c..00c2f4a91a 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -5,13 +5,23 @@ use chrono::{DateTime, Utc};
 use eyre::eyre;
 use serde::{Deserialize, Serialize};
 
+use super::rules_scan::{
+    RuleArtifact, RuleInput, RuleScan, RuleScope, RuleTrace,
+};
 use crate::{
     auth::check_is_moderator_from_headers,
     database::{
-        PgPool, ReadOnlyPgPool, models::delphi_report_item::DelphiSeverity,
+        PgPool, ReadOnlyPgPool,
+        models::{
+            DBProjectId, DBVersionId, DelphiReportIssueDetailsId,
+            DelphiReportIssueId, delphi_report_item::DelphiSeverity,
+        },
         redis::RedisPool,
     },
-    models::pats::Scopes,
+    models::{
+        ids::{ProjectId, VersionId},
+        pats::Scopes,
+    },
     queue::session::AuthQueue,
     routes::ApiError,
     util::error::Context,
@@ -24,6 +34,7 @@ const MAX_RULE_TEST_TRACES: usize = 10;
 pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
     cfg.service(get_rules)
         .service(test_rule)
+        .service(get_rule_affected_details)
         .service(create_rule)
         .service(update_rule)
         .service(delete_rule);
@@ -39,6 +50,27 @@ pub struct DelphiRule {
     pub updated_at: DateTime<Utc>,
     pub created_by: Option<i64>,
     pub updated_by: Option<i64>,
+    pub affected_details_count: i64,
+    pub affected_details: Vec<DelphiRuleAffectedDetail>,
+}
+
+#[derive(Debug, Serialize, utoipa::ToSchema)]
+pub struct DelphiRuleAffectedDetail {
+    pub detail_id: DelphiReportIssueDetailsId,
+    pub issue_id: DelphiReportIssueId,
+    pub project_id: Option<ProjectId>,
+    pub project_name: Option<String>,
+    pub project_icon_url: Option<String>,
+    pub version_id: Option<VersionId>,
+    pub version_name: Option<String>,
+    pub version_number: Option<String>,
+    pub issue_type: String,
+    pub key: String,
+    pub jar: Option<String>,
+    pub file_path: String,
+    pub original_severity: DelphiSeverity,
+    pub severity: Option<DelphiSeverity>,
+    pub hidden: bool,
 }
 
 #[derive(Debug, Deserialize, utoipa::ToSchema)]
@@ -77,33 +109,6 @@ pub struct DelphiRuleEffect {
     pub hidden: bool,
 }
 
-#[derive(Serialize)]
-struct TestRuleInput<'a> {
-    schema_version: u32,
-    trace: &'a TestDelphiRuleTrace,
-    scan: TestRuleScan,
-    artifact: TestRuleArtifact,
-    scope: TestRuleScope,
-}
-
-#[derive(Serialize)]
-struct TestRuleScan {
-    delphi_version: i32,
-}
-
-#[derive(Serialize)]
-struct TestRuleArtifact {
-    size: u32,
-    hashes: BTreeMap<String, String>,
-}
-
-#[derive(Serialize)]
-struct TestRuleScope {
-    project_id: String,
-    version_id: String,
-    file_id: String,
-}
-
 struct ValidatedRule {
     name: String,
     rule: String,
@@ -203,22 +208,29 @@ pub async fn test_rule(
     Ok(web::Json(TestDelphiRuleResponse { effects }))
 }
 
-fn test_rule_input(trace: &TestDelphiRuleTrace) -> TestRuleInput<'_> {
-    TestRuleInput {
+fn test_rule_input(trace: &TestDelphiRuleTrace) -> RuleInput {
+    RuleInput {
         schema_version: 1,
-        trace,
-        scan: TestRuleScan { delphi_version: 17 },
-        artifact: TestRuleArtifact {
-            size: 412_892,
+        trace: RuleTrace {
+            key: trace.key.clone(),
+            issue_type: trace.issue_type.clone(),
+            severity: trace.severity,
+            jar: trace.jar.clone(),
+            file_path: trace.file_path.clone(),
+            data: trace.data.clone(),
+        },
+        scan: RuleScan { delphi_version: 17 },
+        artifact: RuleArtifact {
+            size: Some(412_892),
             hashes: BTreeMap::from([
                 ("sha1".to_string(), "0123456789abcdef".to_string()),
                 ("sha512".to_string(), "fedcba9876543210".to_string()),
             ]),
         },
-        scope: TestRuleScope {
-            project_id: "example-project".to_string(),
-            version_id: "example-version".to_string(),
-            file_id: "example-file".to_string(),
+        scope: RuleScope {
+            project_id: Some("example-project".to_string()),
+            version_id: Some("example-version".to_string()),
+            file_id: Some("example-file".to_string()),
         },
     }
 }
@@ -250,27 +262,81 @@ pub async fn get_rules(
     let rules = sqlx::query!(
         r#"
 		SELECT
-			id,
-			name,
-			rule,
-			revision,
-			created_at,
-			updated_at,
-			created_by,
-			updated_by
-		FROM delphi_rules
-		WHERE NOT delete_on_next_revision
-		ORDER BY id
+			delphi_rule.id,
+			delphi_rule.name,
+			delphi_rule.rule,
+			delphi_rule.revision,
+			delphi_rule.created_at,
+			delphi_rule.updated_at,
+			delphi_rule.created_by,
+			delphi_rule.updated_by,
+			COALESCE(preview.affected_details_count, 0)
+				AS "affected_details_count!",
+			preview.detail_id AS "detail_id?: DelphiReportIssueDetailsId",
+			preview.issue_id AS "issue_id?: DelphiReportIssueId",
+			preview.project_id AS "project_id?: DBProjectId",
+			preview.project_name AS "project_name?",
+			preview.project_icon_url AS "project_icon_url?",
+			preview.version_id AS "version_id?: DBVersionId",
+			preview.version_name AS "version_name?",
+			preview.version_number AS "version_number?",
+			preview.issue_type AS "issue_type?",
+			preview.key AS "key?",
+			preview.jar AS "jar?",
+			preview.file_path AS "file_path?",
+			preview.original_severity AS "original_severity?: DelphiSeverity",
+			preview.severity AS "effect_severity?: DelphiSeverity",
+			preview.hidden AS "hidden?"
+		FROM delphi_rules delphi_rule
+		LEFT JOIN LATERAL (
+			SELECT
+				effect.detail_id,
+				detail.issue_id,
+				version.mod_id AS project_id,
+				project.name AS project_name,
+				project.icon_url AS project_icon_url,
+				version.id AS version_id,
+				version.name AS version_name,
+				version.version_number,
+				issue.issue_type,
+				detail.key,
+				detail.jar,
+				detail.file_path,
+				detail.severity AS original_severity,
+				effect.severity,
+				effect.hidden,
+				COUNT(*) OVER () AS affected_details_count
+			FROM delphi_rule_effects effect
+			INNER JOIN delphi_rule_revisions published
+				ON published.revision = effect.revision
+			INNER JOIN delphi_report_issue_details detail
+				ON detail.id = effect.detail_id
+			INNER JOIN delphi_report_issues issue
+				ON issue.id = detail.issue_id
+			INNER JOIN delphi_reports report
+				ON report.id = issue.report_id
+			LEFT JOIN files file ON file.id = report.file_id
+			LEFT JOIN versions version ON version.id = file.version_id
+			LEFT JOIN mods project ON project.id = version.mod_id
+			WHERE effect.rule_id = delphi_rule.id
+			ORDER BY effect.detail_id DESC
+			LIMIT 3
+		) preview ON TRUE
+		WHERE NOT delphi_rule.delete_on_next_revision
+		ORDER BY delphi_rule.id, preview.detail_id DESC
 		"#,
     )
     .fetch_all(&***ro_pool)
     .await
     .wrap_internal_err("failed to fetch delphi rules")?;
 
-    Ok(web::Json(
-        rules
-            .into_iter()
-            .map(|rule| DelphiRule {
+    let mut response = Vec::<DelphiRule>::new();
+    for rule in rules {
+        if response
+            .last()
+            .is_none_or(|existing| existing.id != rule.id)
+        {
+            response.push(DelphiRule {
                 id: rule.id,
                 name: rule.name,
                 rule: rule.rule,
@@ -279,6 +345,137 @@ pub async fn get_rules(
                 updated_at: rule.updated_at,
                 created_by: rule.created_by,
                 updated_by: rule.updated_by,
+                affected_details_count: rule.affected_details_count,
+                affected_details: Vec::new(),
+            });
+        }
+
+        if let (
+            Some(detail_id),
+            Some(issue_id),
+            Some(issue_type),
+            Some(key),
+            Some(file_path),
+            Some(original_severity),
+            Some(hidden),
+        ) = (
+            rule.detail_id,
+            rule.issue_id,
+            rule.issue_type,
+            rule.key,
+            rule.file_path,
+            rule.original_severity,
+            rule.hidden,
+        ) {
+            response
+                .last_mut()
+                .expect("a delphi rule was inserted above")
+                .affected_details
+                .push(DelphiRuleAffectedDetail {
+                    detail_id,
+                    issue_id,
+                    project_id: rule.project_id.map(ProjectId::from),
+                    project_name: rule.project_name,
+                    project_icon_url: rule.project_icon_url,
+                    version_id: rule.version_id.map(VersionId::from),
+                    version_name: rule.version_name,
+                    version_number: rule.version_number,
+                    issue_type,
+                    key,
+                    jar: rule.jar,
+                    file_path,
+                    original_severity,
+                    severity: rule.effect_severity,
+                    hidden,
+                });
+        }
+    }
+
+    Ok(web::Json(response))
+}
+
+/// List all details affected by a Delphi rule in the published revision.
+#[utoipa::path(
+    context_path = "/moderation/tech-review",
+    tag = "moderation",
+    security(("bearer_auth" = [])),
+    responses((status = OK, body = Vec<DelphiRuleAffectedDetail>))
+)]
+#[get("/rules/{id}/effects")]
+pub async fn get_rule_affected_details(
+    req: HttpRequest,
+    pool: web::Data<PgPool>,
+    ro_pool: web::Data<ReadOnlyPgPool>,
+    redis: web::Data<RedisPool>,
+    session_queue: web::Data<AuthQueue>,
+    path: web::Path<(i64,)>,
+) -> Result<web::Json<Vec<DelphiRuleAffectedDetail>>, ApiError> {
+    check_is_moderator_from_headers(
+        &req,
+        &**pool,
+        &redis,
+        &session_queue,
+        Scopes::PROJECT_READ,
+    )
+    .await?;
+    let (rule_id,) = path.into_inner();
+
+    let details = sqlx::query!(
+        r#"
+		SELECT
+			effect.detail_id AS "detail_id!: DelphiReportIssueDetailsId",
+			detail.issue_id AS "issue_id!: DelphiReportIssueId",
+			version.mod_id AS "project_id?: DBProjectId",
+			project.name AS "project_name?",
+			project.icon_url AS "project_icon_url?",
+			version.id AS "version_id?: DBVersionId",
+			version.name AS "version_name?",
+			version.version_number AS "version_number?",
+			issue.issue_type,
+			detail.key,
+			detail.jar,
+			detail.file_path,
+			detail.severity AS "original_severity!: DelphiSeverity",
+			effect.severity AS "effect_severity: DelphiSeverity",
+			effect.hidden
+		FROM delphi_rule_effects effect
+		INNER JOIN delphi_rule_revisions published
+			ON published.revision = effect.revision
+		INNER JOIN delphi_report_issue_details detail
+			ON detail.id = effect.detail_id
+		INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id
+		INNER JOIN delphi_reports report ON report.id = issue.report_id
+		LEFT JOIN files file ON file.id = report.file_id
+		LEFT JOIN versions version ON version.id = file.version_id
+		LEFT JOIN mods project ON project.id = version.mod_id
+		WHERE effect.rule_id = $1
+		ORDER BY effect.detail_id DESC
+		"#,
+        rule_id,
+    )
+    .fetch_all(&***ro_pool)
+    .await
+    .wrap_internal_err("failed to fetch details affected by delphi rule")?;
+
+    Ok(web::Json(
+        details
+            .into_iter()
+            .map(|detail| DelphiRuleAffectedDetail {
+                detail_id: detail.detail_id,
+                issue_id: detail.issue_id,
+                project_id: detail.project_id.map(ProjectId::from),
+                project_name: detail.project_name,
+                project_icon_url: detail.project_icon_url,
+                version_id: detail.version_id.map(VersionId::from),
+                version_name: detail.version_name,
+                version_number: detail.version_number,
+                issue_type: detail.issue_type,
+                key: detail.key,
+                jar: detail.jar,
+                file_path: detail.file_path,
+                original_severity: detail.original_severity,
+                severity: detail.effect_severity,
+                hidden: detail.hidden,
             })
             .collect(),
     ))
@@ -354,6 +551,8 @@ pub async fn create_rule(
         updated_at: rule.updated_at,
         created_by: rule.created_by,
         updated_by: rule.updated_by,
+        affected_details_count: 0,
+        affected_details: Vec::new(),
     }))
 }
 
@@ -427,6 +626,8 @@ pub async fn update_rule(
         updated_at: rule.updated_at,
         created_by: rule.created_by,
         updated_by: rule.updated_by,
+        affected_details_count: 0,
+        affected_details: Vec::new(),
     }))
 }
 
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
index 4ee7f4c595..e6895558ac 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -1,6 +1,6 @@
 use std::collections::{BTreeMap, HashMap};
 
-use actix_web::{HttpRequest, HttpResponse, post, web};
+use actix_web::{HttpRequest, HttpResponse, get, post, web};
 use ariadne::ids::base62_impl::to_base62;
 use bytes::Bytes;
 use eyre::{Context as _, Result, eyre};
@@ -9,6 +9,7 @@ use serde::Serialize;
 use sqlx::types::Json;
 use tokio::sync::mpsc;
 use tokio_stream::wrappers::UnboundedReceiverStream;
+use utoipa::{PartialSchema, ToSchema};
 
 use super::rules::DelphiRuleEffect;
 use crate::{
@@ -26,7 +27,7 @@ const RULE_SCAN_LOCK_ID: i64 = 0x6465_6c70_6869_7275;
 const PROGRESS_INTERVAL: usize = 50;
 
 pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
-    cfg.service(scan_rules);
+    cfg.service(get_rule_schema).service(scan_rules);
 }
 
 #[derive(Serialize)]
@@ -43,41 +44,41 @@ struct RuleScanErrorEvent<'a> {
     message: &'a str,
 }
 
-#[derive(Serialize)]
-struct RuleInput {
-    schema_version: u32,
-    trace: RuleTrace,
-    scan: RuleScan,
-    artifact: RuleArtifact,
-    scope: RuleScope,
+#[derive(Serialize, utoipa::ToSchema)]
+pub(super) struct RuleInput {
+    pub(super) schema_version: u32,
+    pub(super) trace: RuleTrace,
+    pub(super) scan: RuleScan,
+    pub(super) artifact: RuleArtifact,
+    pub(super) scope: RuleScope,
 }
 
-#[derive(Serialize)]
-struct RuleTrace {
-    key: String,
-    issue_type: String,
-    severity: DelphiSeverity,
-    jar: Option<String>,
-    file_path: String,
-    data: HashMap<String, serde_json::Value>,
+#[derive(Serialize, utoipa::ToSchema)]
+pub(super) struct RuleTrace {
+    pub(super) key: String,
+    pub(super) issue_type: String,
+    pub(super) severity: DelphiSeverity,
+    pub(super) jar: Option<String>,
+    pub(super) file_path: String,
+    pub(super) data: HashMap<String, serde_json::Value>,
 }
 
-#[derive(Serialize)]
-struct RuleScan {
-    delphi_version: i32,
+#[derive(Serialize, utoipa::ToSchema)]
+pub(super) struct RuleScan {
+    pub(super) delphi_version: i32,
 }
 
-#[derive(Serialize)]
-struct RuleArtifact {
-    size: Option<i32>,
-    hashes: BTreeMap<String, String>,
+#[derive(Serialize, utoipa::ToSchema)]
+pub(super) struct RuleArtifact {
+    pub(super) size: Option<i32>,
+    pub(super) hashes: BTreeMap<String, String>,
 }
 
-#[derive(Serialize)]
-struct RuleScope {
-    project_id: Option<String>,
-    version_id: Option<String>,
-    file_id: Option<String>,
+#[derive(Serialize, utoipa::ToSchema)]
+pub(super) struct RuleScope {
+    pub(super) project_id: Option<String>,
+    pub(super) version_id: Option<String>,
+    pub(super) file_id: Option<String>,
 }
 
 struct CompiledRule {
@@ -98,6 +99,62 @@ struct ScanSummary {
     effects: usize,
 }
 
+#[derive(Serialize, utoipa::ToSchema)]
+pub struct DelphiRuleSchemaResponse {
+    pub input: serde_json::Value,
+    pub output: serde_json::Value,
+    pub components: BTreeMap<String, serde_json::Value>,
+}
+
+/// Get the schemas for the CEL input and output values.
+#[utoipa::path(
+    context_path = "/moderation/tech-review",
+    tag = "moderation",
+    security(("bearer_auth" = [])),
+    responses((status = OK, body = DelphiRuleSchemaResponse))
+)]
+#[get("/rules/schema")]
+pub async fn get_rule_schema(
+    req: HttpRequest,
+    pool: web::Data<PgPool>,
+    redis: web::Data<RedisPool>,
+    session_queue: web::Data<AuthQueue>,
+) -> Result<web::Json<DelphiRuleSchemaResponse>, ApiError> {
+    check_is_moderator_from_headers(
+        &req,
+        &**pool,
+        &redis,
+        &session_queue,
+        Scopes::PROJECT_READ,
+    )
+    .await?;
+
+    let mut schemas = Vec::new();
+    <RuleInput as ToSchema>::schemas(&mut schemas);
+    <Option<DelphiRuleEffect> as ToSchema>::schemas(&mut schemas);
+
+    Ok(web::Json(DelphiRuleSchemaResponse {
+        input: schema_to_value(<RuleInput as PartialSchema>::schema())?,
+        output: schema_to_value(
+            <Option<DelphiRuleEffect> as PartialSchema>::schema(),
+        )?,
+        components: schemas
+            .into_iter()
+            .map(|(name, schema)| Ok((name, schema_to_value(schema)?)))
+            .collect::<Result<_, ApiError>>()?,
+    }))
+}
+
+fn schema_to_value<T: Serialize>(
+    schema: T,
+) -> Result<serde_json::Value, ApiError> {
+    serde_json::to_value(schema).map_err(|error| {
+        ApiError::Internal(
+            eyre!(error).wrap_err("failed to serialize Delphi rule schema"),
+        )
+    })
+}
+
 /// Re-evaluate every Delphi issue detail and atomically publish a new rule revision.
 #[utoipa::path(
     context_path = "/moderation/tech-review",
@@ -316,12 +373,13 @@ async fn run_scan(
         };
 
         for rule in &rules {
-            let effect = evaluate_rule(&rule.program, &input).wrap_err_with(|| {
-                format!(
-                    "failed to evaluate delphi rule {} for detail {detail_id}",
-                    rule.id
-                )
-            })?;
+            let effect = evaluate_rule(&rule.program, &input)
+                .wrap_err_with(|| {
+                    format!(
+                        "failed to evaluate delphi rule {} for detail {detail_id}",
+                        rule.id
+                    )
+                })?;
             if let Some(effect) = effect {
                 effects.push(MaterializedEffect {
                     detail_id,
diff --git a/packages/api-client/src/modules/labrinth/tech-review/internal.ts b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
index c66520baa8..5cf7e278fb 100644
--- a/packages/api-client/src/modules/labrinth/tech-review/internal.ts
+++ b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
@@ -17,6 +17,30 @@ export class LabrinthTechReviewInternalModule extends AbstractModule {
 		)
 	}
 
+	public async getRuleSchema(): Promise<Labrinth.TechReview.Internal.DelphiRuleSchemaResponse> {
+		return this.client.request<Labrinth.TechReview.Internal.DelphiRuleSchemaResponse>(
+			'/moderation/tech-review/rules/schema',
+			{
+				api: 'labrinth',
+				version: 'internal',
+				method: 'GET',
+			},
+		)
+	}
+
+	public async getRuleAffectedDetails(
+		id: number,
+	): Promise<Labrinth.TechReview.Internal.DelphiRuleAffectedDetail[]> {
+		return this.client.request<Labrinth.TechReview.Internal.DelphiRuleAffectedDetail[]>(
+			`/moderation/tech-review/rules/${id}/effects`,
+			{
+				api: 'labrinth',
+				version: 'internal',
+				method: 'GET',
+			},
+		)
+	}
+
 	public async testRule(
 		request: Labrinth.TechReview.Internal.TestDelphiRuleRequest,
 	): Promise<Labrinth.TechReview.Internal.TestDelphiRuleResponse> {
diff --git a/packages/api-client/src/modules/labrinth/types.ts b/packages/api-client/src/modules/labrinth/types.ts
index 9d97f1ec5a..8f9e55939d 100644
--- a/packages/api-client/src/modules/labrinth/types.ts
+++ b/packages/api-client/src/modules/labrinth/types.ts
@@ -2235,6 +2235,26 @@ export namespace Labrinth {
 				updated_at: string
 				created_by: number | null
 				updated_by: number | null
+				affected_details_count: number
+				affected_details: DelphiRuleAffectedDetail[]
+			}
+
+			export type DelphiRuleAffectedDetail = {
+				detail_id: string
+				issue_id: string
+				project_id: string | null
+				project_name: string | null
+				project_icon_url: string | null
+				version_id: string | null
+				version_name: string | null
+				version_number: string | null
+				issue_type: string
+				key: string
+				jar: string | null
+				file_path: string
+				original_severity: DelphiSeverity
+				severity: DelphiSeverity | null
+				hidden: boolean
 			}
 
 			export type WriteDelphiRule = {
@@ -2261,6 +2281,14 @@ export namespace Labrinth {
 				hidden: boolean
 			}
 
+			export type DelphiRuleSchema = Record<string, unknown>
+
+			export type DelphiRuleSchemaResponse = {
+				input: DelphiRuleSchema
+				output: DelphiRuleSchema
+				components: Record<string, DelphiRuleSchema>
+			}
+
 			export type TestDelphiRuleResponse = {
 				effects: Array<DelphiRuleEffect | null>
 			}

From 4b07ed720ed92aae253447d75a52546bc97cba34 Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Thu, 23 Jul 2026 09:12:37 +0100
Subject: [PATCH 06/16] remove old ui

---
 .../moderation/technical-review/rules.vue     | 22 -------------------
 1 file changed, 22 deletions(-)

diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index 6cf23d476a..254415f84d 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -226,28 +226,6 @@
 			/>
 		</section>
 
-		<details class="universal-card text-sm">
-			<summary class="cursor-pointer font-semibold text-contrast">CEL contract and input</summary>
-			<div class="mt-3 flex flex-col gap-2 text-secondary">
-				<p class="m-0">
-					Effects are maps such as
-					<code>{ "severity": "low", "hidden": false }</code>. Severity can be <code>low</code>,
-					<code>medium</code>, <code>high</code>, or <code>severe</code>.
-				</p>
-				<p class="m-0">
-					Rules run in the order shown below. The first rule that returns a non-null effect wins.
-				</p>
-				<p class="m-0">
-					The <code>input</code> object contains <code>schema_version</code>,
-					<code>trace</code> (<code>key</code>, <code>issue_type</code>, <code>severity</code>,
-					<code>jar</code>, <code>file_path</code>, <code>data</code>),
-					<code>scan.delphi_version</code>, <code>artifact</code> (<code>size</code>,
-					<code>hashes</code>), and stable IDs under <code>scope</code> (<code>project_id</code>,
-					<code>version_id</code>, <code>file_id</code>).
-				</p>
-			</div>
-		</details>
-
 		<div v-if="isLoading" class="universal-card flex h-32 items-center justify-center">
 			<LoaderCircleIcon class="size-8 animate-spin text-secondary" />
 		</div>

From 8d82c228cf032752a90220b9f6db4a82bcf54fdc Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Fri, 24 Jul 2026 13:49:20 +0100
Subject: [PATCH 07/16] rules affect tech review detail statuses

---
 .../moderation/GlobalDetailLocalTraceCard.vue |  22 +-
 .../ui/moderation/GlobalDetailTracesList.vue  |  11 +-
 .../ui/moderation/IssueDetailPath.vue         |  74 +++
 .../ui/moderation/ModerationTechRevCard.vue   |  82 ++-
 .../pages/moderation/global-traces/[key].vue  |  11 +-
 .../moderation/technical-review/rules.vue     |  13 +-
 ...23120000_delphi_effective_rule_details.sql |  37 ++
 .../src/routes/internal/delphi/mod.rs         |  11 +-
 .../src/routes/internal/delphi/rescan.rs      |   2 +
 .../internal/delphi/tech_review_sync.rs       | 111 ++--
 apps/labrinth/src/routes/internal/mod.rs      |   1 +
 .../src/routes/internal/moderation/mod.rs     |   4 +
 .../routes/internal/moderation/tech_review.rs |  54 +-
 .../internal/moderation/tech_review/global.rs |   4 +
 .../moderation/tech_review/rules_scan.rs      | 484 ++++++++++++++----
 .../modules/labrinth/tech-review/internal.ts  |  13 +
 .../api-client/src/modules/labrinth/types.ts  |  24 +
 17 files changed, 754 insertions(+), 204 deletions(-)
 create mode 100644 apps/frontend/src/components/ui/moderation/IssueDetailPath.vue
 create mode 100644 apps/labrinth/migrations/20260723120000_delphi_effective_rule_details.sql

diff --git a/apps/frontend/src/components/ui/moderation/GlobalDetailLocalTraceCard.vue b/apps/frontend/src/components/ui/moderation/GlobalDetailLocalTraceCard.vue
index a6756ce443..8329b64b33 100644
--- a/apps/frontend/src/components/ui/moderation/GlobalDetailLocalTraceCard.vue
+++ b/apps/frontend/src/components/ui/moderation/GlobalDetailLocalTraceCard.vue
@@ -5,14 +5,8 @@
 				<p class="m-0 break-words font-semibold text-contrast">
 					{{ trace.project_name }}
 				</p>
-				<p class="m-0 mt-1 flex flex-wrap items-center gap-1 text-sm text-secondary">
-					<span class="break-all">{{ trace.version_number }}</span>
-					<ChevronRightIcon class="size-4 shrink-0" aria-hidden="true" />
-					<span class="break-all">{{ decodeTracePath(trace.file_name) }}</span>
-					<template v-if="trace.jar">
-						<ChevronRightIcon class="size-4 shrink-0" aria-hidden="true" />
-						<span class="break-all">{{ decodeTracePath(trace.jar) }}</span>
-					</template>
+				<p class="m-0 mt-1 text-sm text-secondary">
+					<IssueDetailPath :segments="[trace.version_number, trace.file_name, trace.jar]" />
 				</p>
 			</div>
 			<div class="flex flex-wrap items-center gap-2">
@@ -33,9 +27,11 @@
 
 <script setup lang="ts">
 import type { Labrinth } from '@modrinth/api-client'
-import { ChevronRightIcon, ExternalIcon } from '@modrinth/assets'
+import { ExternalIcon } from '@modrinth/assets'
 import { Badge, ButtonStyled } from '@modrinth/ui'
 
+import IssueDetailPath from '~/components/ui/moderation/IssueDetailPath.vue'
+
 const props = defineProps<{
 	trace: Labrinth.TechReview.Internal.GlobalIssueDetailTrace
 }>()
@@ -46,12 +42,4 @@ const localTraceLink = computed(
 			props.trace.detail_id,
 		)}`,
 )
-
-function decodeTracePath(path: string): string {
-	try {
-		return decodeURIComponent(path)
-	} catch {
-		return path
-	}
-}
 </script>
diff --git a/apps/frontend/src/components/ui/moderation/GlobalDetailTracesList.vue b/apps/frontend/src/components/ui/moderation/GlobalDetailTracesList.vue
index 8d42abbc1e..1d4fd8cb8a 100644
--- a/apps/frontend/src/components/ui/moderation/GlobalDetailTracesList.vue
+++ b/apps/frontend/src/components/ui/moderation/GlobalDetailTracesList.vue
@@ -65,7 +65,7 @@
 							</p>
 							<p class="m-0 break-all text-secondary">
 								<span class="font-semibold text-contrast">Path</span>
-								{{ decodeTracePath(getLatestLocalTrace(trace)?.file_path ?? '') }}
+								<IssueDetailPath :segments="[getLatestLocalTrace(trace)?.file_path]" />
 							</p>
 						</div>
 					</div>
@@ -133,6 +133,7 @@ import {
 } from '@modrinth/ui'
 
 import GlobalDetailLocalTraceCard from '~/components/ui/moderation/GlobalDetailLocalTraceCard.vue'
+import IssueDetailPath from '~/components/ui/moderation/IssueDetailPath.vue'
 
 const client = injectModrinthClient()
 const { addNotification } = injectNotificationManager()
@@ -165,14 +166,6 @@ function getLatestLocalTrace(trace: Labrinth.TechReview.Internal.GlobalIssueDeta
 	return trace.local_traces.at(-1)
 }
 
-function decodeTracePath(path: string): string {
-	try {
-		return decodeURIComponent(path)
-	} catch {
-		return path
-	}
-}
-
 function getSeverityBadgeColor(
 	severity: Labrinth.TechReview.Internal.DelphiSeverity | undefined,
 ): string {
diff --git a/apps/frontend/src/components/ui/moderation/IssueDetailPath.vue b/apps/frontend/src/components/ui/moderation/IssueDetailPath.vue
new file mode 100644
index 0000000000..6289a9cd56
--- /dev/null
+++ b/apps/frontend/src/components/ui/moderation/IssueDetailPath.vue
@@ -0,0 +1,74 @@
+<template>
+	<span class="inline-flex min-w-0 flex-wrap items-center gap-1">
+		<template v-for="(segment, index) in decodedSegments" :key="`${segment}-${index}`">
+			<ChevronRightIcon v-if="index > 0" class="size-4 shrink-0" aria-hidden="true" />
+			<span
+				v-tooltip="isTruncated(segment) ? segment : undefined"
+				class="break-all"
+				:class="{
+					'font-semibold text-contrast': emphasizeLast && index === decodedSegments.length - 1,
+					'text-secondary': emphasizeLast && index < decodedSegments.length - 1,
+				}"
+			>
+				{{ formatSegment(segment) }}
+			</span>
+		</template>
+	</span>
+</template>
+
+<script setup lang="ts">
+import { ChevronRightIcon } from '@modrinth/assets'
+
+const props = withDefaults(
+	defineProps<{
+		segments: readonly (string | null | undefined)[]
+		truncate?: boolean
+		maxLength?: number
+		emphasizeLast?: boolean
+		decode?: boolean
+		hideBaseMrpack?: boolean
+	}>(),
+	{
+		truncate: false,
+		maxLength: 120,
+		emphasizeLast: false,
+		decode: true,
+		hideBaseMrpack: false,
+	},
+)
+
+const decodedSegments = computed(() => {
+	const segments = props.segments
+		.flatMap((segment) => segment?.split('#') ?? [])
+		.filter((segment) => segment.length > 0)
+		.map((segment) => (props.decode ? decodePath(segment) : segment))
+
+	if (props.hideBaseMrpack && segments[0]?.toLowerCase().endsWith('.mrpack')) {
+		return segments.slice(1)
+	}
+
+	return segments
+})
+
+function decodePath(path: string): string {
+	try {
+		return decodeURIComponent(path)
+	} catch {
+		return path
+	}
+}
+
+function isTruncated(segment: string): boolean {
+	return props.truncate && segment.length > props.maxLength
+}
+
+function formatSegment(segment: string): string {
+	if (!isTruncated(segment)) return segment
+
+	const separator = '...'
+	const charsToShow = props.maxLength - separator.length
+	const frontChars = Math.ceil(charsToShow / 3)
+	const backChars = Math.floor((charsToShow * 2) / 3)
+	return segment.slice(0, frontChars) + separator + segment.slice(-backChars)
+}
+</script>
diff --git a/apps/frontend/src/components/ui/moderation/ModerationTechRevCard.vue b/apps/frontend/src/components/ui/moderation/ModerationTechRevCard.vue
index f91bd67552..3e595510ca 100644
--- a/apps/frontend/src/components/ui/moderation/ModerationTechRevCard.vue
+++ b/apps/frontend/src/components/ui/moderation/ModerationTechRevCard.vue
@@ -6,7 +6,6 @@ import {
 	CheckCheckIcon,
 	CheckIcon,
 	ChevronDownIcon,
-	ChevronRightIcon,
 	ClipboardCopyIcon,
 	CodeIcon,
 	CopyIcon,
@@ -49,6 +48,7 @@ import {
 import dayjs from 'dayjs'
 import { computed, nextTick, reactive, ref, watch } from 'vue'
 
+import IssueDetailPath from '~/components/ui/moderation/IssueDetailPath.vue'
 import type { UnsafeFile } from '~/components/ui/moderation/MaliciousSummaryModal.vue'
 import ThreadView from '~/components/ui/thread/ThreadView.vue'
 
@@ -601,6 +601,29 @@ async function copyToClipboard(code: string, detailId: string) {
 	}
 }
 
+async function copyDetailCelInput(detailId: string) {
+	if (copyingCelDetails.has(detailId)) return
+
+	copyingCelDetails.add(detailId)
+	try {
+		const input = await client.labrinth.tech_review_internal.getDetailRuleInput(detailId)
+		await navigator.clipboard.writeText(JSON.stringify(input, null, 2))
+		copiedCelDetails.add(detailId)
+		setTimeout(() => {
+			copiedCelDetails.delete(detailId)
+		}, 2000)
+	} catch (error) {
+		console.error('Failed to copy CEL input:', error)
+		addNotification({
+			type: 'error',
+			title: 'Failed to copy CEL input',
+			text: 'An error occurred while loading the trace rule input.',
+		})
+	} finally {
+		copyingCelDetails.delete(detailId)
+	}
+}
+
 function getDetailDecision(
 	detailId: string,
 	backendStatus: Labrinth.TechReview.Internal.DelphiReportIssueStatus,
@@ -999,6 +1022,8 @@ async function updateGlobalDetailStatus(
 const expandedClasses = reactive<Set<string>>(new Set())
 const autoExpandedFileIds = reactive<Set<string>>(new Set())
 const showCopyFeedback = reactive<Map<string, boolean>>(new Map())
+const copyingCelDetails = reactive<Set<string>>(new Set())
+const copiedCelDetails = reactive<Set<string>>(new Set())
 const highlightedSourceCache = reactive<Map<string, { source: string; lines: string[] }>>(new Map())
 const LAZY_LOAD_CLASS_SOURCE_MINIMUM = 2
 
@@ -1025,7 +1050,7 @@ interface JarGroup {
 function splitJarSegments(jar: string | null, currentFileName: string | null): string[] {
 	if (!jar) return []
 	const segments = jar
-		.split(/[/#]/)
+		.split('#')
 		.map((s) => decodeURIComponent(s.trim()))
 		.filter((s) => s.length > 0)
 	// Skip the first segment if it matches the current file tab (it's already shown in the file list)
@@ -1770,27 +1795,12 @@ function copyId() {
 						class="border-b border-solid border-surface-1 px-4 py-3"
 					>
 						<div class="flex flex-wrap items-center justify-between gap-3">
-							<div class="flex flex-wrap items-center gap-1">
-								<template
-									v-for="(segment, index) in jarGroup.segments"
-									:key="`${jarGroup.key}-${index}`"
-								>
-									<span
-										class="font-mono text-sm"
-										:class="
-											index === jarGroup.segments.length - 1
-												? 'font-semibold text-contrast'
-												: 'text-secondary'
-										"
-									>
-										{{ segment }}
-									</span>
-									<ChevronRightIcon
-										v-if="index < jarGroup.segments.length - 1"
-										class="size-4 text-secondary"
-									/>
-								</template>
-							</div>
+							<IssueDetailPath
+								:segments="jarGroup.segments"
+								:decode="false"
+								class="font-mono text-sm"
+								emphasize-last
+							/>
 
 							<div
 								v-if="getJarRemainingUnmarkedCount(jarGroup) > 0"
@@ -1864,9 +1874,12 @@ function copyId() {
 									</button>
 								</ButtonStyled>
 
-								<span v-tooltip="classItem.filePath" class="font-mono font-semibold">{{
-									truncateMiddle(classItem.filePath)
-								}}</span>
+								<IssueDetailPath
+									:segments="[classItem.jar, classItem.filePath]"
+									class="font-mono font-semibold"
+									hide-base-mrpack
+									truncate
+								/>
 
 								<div
 									class="rounded-full border-solid px-2.5 py-1"
@@ -1941,6 +1954,23 @@ function copyId() {
 										</div>
 
 										<div class="detail-verdict-action-groups">
+											<ButtonStyled>
+												<button
+													type="button"
+													:disabled="copyingCelDetails.has(flag.detail.id)"
+													@click="copyDetailCelInput(flag.detail.id)"
+												>
+													<LoaderCircleIcon
+														v-if="copyingCelDetails.has(flag.detail.id)"
+														class="animate-spin"
+														aria-hidden="true"
+													/>
+													<ClipboardCopyIcon v-else aria-hidden="true" />
+													<span aria-live="polite">
+														{{ copiedCelDetails.has(flag.detail.id) ? 'Copied!' : 'Copy CEL' }}
+													</span>
+												</button>
+											</ButtonStyled>
 											<div
 												class="detail-verdict-buttons"
 												role="group"
diff --git a/apps/frontend/src/pages/moderation/global-traces/[key].vue b/apps/frontend/src/pages/moderation/global-traces/[key].vue
index 96121bc2c0..9224068987 100644
--- a/apps/frontend/src/pages/moderation/global-traces/[key].vue
+++ b/apps/frontend/src/pages/moderation/global-traces/[key].vue
@@ -43,7 +43,7 @@
 						</p>
 						<p class="m-0 break-all text-secondary">
 							<span class="font-semibold text-contrast">Path</span>
-							{{ decodeTracePath(latestLocalTrace.file_path) }}
+							<IssueDetailPath :segments="[latestLocalTrace.file_path]" />
 						</p>
 					</div>
 				</div>
@@ -103,6 +103,7 @@ import {
 } from '@modrinth/ui'
 
 import GlobalDetailLocalTraceCard from '~/components/ui/moderation/GlobalDetailLocalTraceCard.vue'
+import IssueDetailPath from '~/components/ui/moderation/IssueDetailPath.vue'
 
 const client = injectModrinthClient()
 const { addNotification } = injectNotificationManager()
@@ -137,14 +138,6 @@ const pageEnd = computed(() =>
 )
 const latestLocalTrace = computed(() => trace.value?.local_traces.at(-1))
 
-function decodeTracePath(path: string): string {
-	try {
-		return decodeURIComponent(path)
-	} catch {
-		return path
-	}
-}
-
 function getSeverityBadgeColor(severity: Labrinth.TechReview.Internal.DelphiSeverity): string {
 	switch (severity) {
 		case 'severe':
diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index 254415f84d..66035cd75e 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -327,11 +327,11 @@
 								<p
 									class="m-0 mt-0.5 flex min-w-0 items-center gap-1 font-mono text-xs text-secondary"
 								>
-									<template v-if="detail.jar">
-										<span class="truncate">{{ detail.jar }}</span>
-										<ChevronRightIcon class="size-3.5 shrink-0" aria-hidden="true" />
-									</template>
-									<span class="truncate">{{ detail.file_path }}</span>
+									<IssueDetailPath
+										:segments="[detail.jar, detail.file_path]"
+										hide-base-mrpack
+										truncate
+									/>
 								</p>
 							</div>
 							<ButtonStyled>
@@ -385,7 +385,6 @@
 import { type Labrinth, SseParser } from '@modrinth/api-client'
 import {
 	ArrowLeftIcon,
-	ChevronRightIcon,
 	EditIcon,
 	EyeOffIcon,
 	ExternalIcon,
@@ -409,6 +408,8 @@ import { useDebounceFn } from '@vueuse/core'
 import type { Ace } from 'ace-builds'
 import type { Component } from 'vue'
 
+import IssueDetailPath from '~/components/ui/moderation/IssueDetailPath.vue'
+
 const DEFAULT_RULE = `input.trace.issue_type == "OBFUSCATED_NAMES"
 	? {"severity": "low", "hidden": false}
 	: null`
diff --git a/apps/labrinth/migrations/20260723120000_delphi_effective_rule_details.sql b/apps/labrinth/migrations/20260723120000_delphi_effective_rule_details.sql
new file mode 100644
index 0000000000..65dc4e2536
--- /dev/null
+++ b/apps/labrinth/migrations/20260723120000_delphi_effective_rule_details.sql
@@ -0,0 +1,37 @@
+DROP VIEW delphi_issue_details_with_statuses;
+
+CREATE VIEW delphi_issue_details_with_statuses AS
+SELECT
+	drid.id,
+	drid.issue_id,
+	drid.key,
+	drid.jar,
+	drid.file_path,
+	drid.decompiled_source,
+	drid.data,
+	drid.severity AS original_severity,
+	COALESCE(dre.severity, drid.severity) AS severity,
+	COALESCE(dre.hidden, FALSE) AS hidden,
+	m.id AS project_id,
+	didv.verdict AS local_status,
+	dgdv.verdict AS global_status,
+	COALESCE(dgdv.verdict, didv.verdict, 'pending') AS status
+FROM delphi_report_issue_details drid
+INNER JOIN delphi_report_issues dri ON dri.id = drid.issue_id
+INNER JOIN delphi_reports dr ON dr.id = dri.report_id
+INNER JOIN files f ON f.id = dr.file_id
+INNER JOIN versions v ON v.id = f.version_id
+INNER JOIN mods m ON m.id = v.mod_id
+LEFT JOIN delphi_global_detail_verdicts dgdv
+	ON drid.key = dgdv.detail_key
+LEFT JOIN delphi_issue_detail_verdicts didv
+	ON m.id = didv.project_id
+	AND drid.key = didv.detail_key
+LEFT JOIN (
+	SELECT revision
+	FROM delphi_rule_revisions
+	LIMIT 1
+) drr ON TRUE
+LEFT JOIN delphi_rule_effects dre
+	ON dre.revision = drr.revision
+	AND dre.detail_id = drid.id;
diff --git a/apps/labrinth/src/routes/internal/delphi/mod.rs b/apps/labrinth/src/routes/internal/delphi/mod.rs
index cf92fc312b..ed275dfb6c 100644
--- a/apps/labrinth/src/routes/internal/delphi/mod.rs
+++ b/apps/labrinth/src/routes/internal/delphi/mod.rs
@@ -210,6 +210,7 @@ async fn ingest_report_deserialized(
         "Delphi found issues in file",
     );
 
+    let mut inserted_detail_ids = Vec::new();
     for (issue_type, issue_details) in report.issues {
         let issue_id = DBDelphiReportIssue {
             id: DelphiReportIssueId(0), // This will be set by the database
@@ -229,7 +230,7 @@ async fn ingest_report_deserialized(
             let decompiled_source =
                 report.decompiled_sources.get(&issue_detail.file);
 
-            ReportIssueDetail {
+            let detail_id = ReportIssueDetail {
                 id: DelphiReportIssueDetailsId(0), // This will be set by the database
                 issue_id,
                 key: issue_detail.key.0,
@@ -245,9 +246,17 @@ async fn ingest_report_deserialized(
             .insert(&mut transaction)
             .await
             .wrap_internal_err("failed to insert Delphi issue detail")?;
+            inserted_detail_ids.push(detail_id);
         }
     }
 
+    crate::routes::internal::moderation::tech_review::rules_scan::materialize_current_rule_effects(
+        &inserted_detail_ids,
+        &mut transaction,
+    )
+    .await
+    .wrap_internal_err("failed to apply delphi rules to new issue details")?;
+
     tech_review_sync::sync_project_tech_review_state(
         &[DBProjectId::from(report.project_id)],
         tech_review_sync::TechReviewExitReason::Resolved,
diff --git a/apps/labrinth/src/routes/internal/delphi/rescan.rs b/apps/labrinth/src/routes/internal/delphi/rescan.rs
index c7d7fa297b..cbaefd58f7 100644
--- a/apps/labrinth/src/routes/internal/delphi/rescan.rs
+++ b/apps/labrinth/src/routes/internal/delphi/rescan.rs
@@ -105,6 +105,7 @@ async fn fetch_unreviewed_tech_review_project_ids(
                 WHERE
                     didws.project_id = m.id
                     AND didws.status = 'pending'
+                    AND NOT didws.hidden
                     -- see delphi.rs todo comment
                     AND dri.issue_type != '__dummy'
             )
@@ -115,6 +116,7 @@ async fn fetch_unreviewed_tech_review_project_ids(
                 WHERE
                     didws.project_id = m.id
                     AND didws.status IN ('safe', 'unsafe')
+                    AND NOT didws.hidden
                     -- see delphi.rs todo comment
                     AND dri.issue_type != '__dummy'
             )
diff --git a/apps/labrinth/src/routes/internal/delphi/tech_review_sync.rs b/apps/labrinth/src/routes/internal/delphi/tech_review_sync.rs
index 23a45d218a..974db515d0 100644
--- a/apps/labrinth/src/routes/internal/delphi/tech_review_sync.rs
+++ b/apps/labrinth/src/routes/internal/delphi/tech_review_sync.rs
@@ -60,9 +60,11 @@ const DUMMY_ISSUE_TYPE: &str = "__dummy";
 pub enum TechReviewExitReason {
     Resolved,
     FileDeleted,
+    RulesChanged,
 }
 
 struct ProjectTechReviewState {
+    project_id: DBProjectId,
     has_pending_detail: bool,
     has_unsafe_detail: bool,
     has_dummy: bool,
@@ -88,36 +90,35 @@ pub async fn sync_project_tech_review_state(
         r#"
         WITH project_ids AS (
             SELECT unnest($1::bigint[]) AS project_id
-        )
-        SELECT
-            p.project_id AS "project_id!: DBProjectId",
-            EXISTS(
-                SELECT 1
-                FROM delphi_issue_details_with_statuses didws
-                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
-                WHERE
-                    didws.project_id = p.project_id
-                    AND didws.status = 'pending'
+        ),
+        project_detail_state AS (
+            SELECT
+                p.project_id,
+                COALESCE(BOOL_OR(
+                    didws.status = 'pending'
+                    AND NOT didws.hidden
                     AND dri.issue_type != $3
-            ) AS "has_pending_detail!",
-            EXISTS(
-                SELECT 1
-                FROM delphi_issue_details_with_statuses didws
-                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
-                WHERE
-                    didws.project_id = p.project_id
-                    AND didws.status = 'unsafe'
+                ), FALSE) AS has_pending_detail,
+                COALESCE(BOOL_OR(
+                    didws.status = 'unsafe'
+                    AND NOT didws.hidden
                     AND dri.issue_type != $3
-            ) AS "has_unsafe_detail!",
-            EXISTS(
-                SELECT 1
-                FROM delphi_issue_details_with_statuses didws
-                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
-                WHERE
-                    didws.project_id = p.project_id
-                    AND didws.status = 'pending'
+                ), FALSE) AS has_unsafe_detail,
+                COALESCE(BOOL_OR(
+                    didws.status = 'pending'
                     AND dri.issue_type = $3
-            ) AS "has_dummy!",
+                ), FALSE) AS has_dummy
+            FROM project_ids p
+            LEFT JOIN delphi_issue_details_with_statuses didws
+                ON didws.project_id = p.project_id
+            LEFT JOIN delphi_report_issues dri ON dri.id = didws.issue_id
+            GROUP BY p.project_id
+        )
+        SELECT
+            p.project_id AS "project_id!: DBProjectId",
+            p.has_pending_detail AS "has_pending_detail!",
+            p.has_unsafe_detail AS "has_unsafe_detail!",
+            p.has_dummy AS "has_dummy!",
             (
                 SELECT t.id
                 FROM threads t
@@ -144,7 +145,7 @@ pub async fn sync_project_tech_review_state(
                 ORDER BY dr.created DESC, dr.id DESC
                 LIMIT 1
             ) AS "report_id: DelphiReportId"
-        FROM project_ids p
+        FROM project_detail_state p
         "#,
         &project_ids_raw,
         &tech_review_message_types,
@@ -156,6 +157,7 @@ pub async fn sync_project_tech_review_state(
 
     for row in rows {
         let state = ProjectTechReviewState {
+            project_id: row.project_id,
             has_pending_detail: row.has_pending_detail,
             has_unsafe_detail: row.has_unsafe_detail,
             has_dummy: row.has_dummy,
@@ -250,8 +252,23 @@ async fn sync_one_project_tech_review_state(
     exit_reason: TechReviewExitReason,
     txn: &mut PgTransaction<'_>,
 ) -> Result<(), ApiError> {
-    let needs_tech_review =
-        state.has_pending_detail || state.has_unsafe_detail || state.has_dummy;
+    let has_review_detail = state.has_pending_detail || state.has_unsafe_detail;
+
+    if matches!(exit_reason, TechReviewExitReason::RulesChanged)
+        && !has_review_detail
+    {
+        remove_dummy_issue_details(state.project_id, txn).await?;
+
+        if let Some(thread_id) = state.thread_id
+            && should_send_exit(state.last_tech_review_message_type.as_deref())
+        {
+            insert_exit_message(thread_id, exit_reason, txn).await?;
+        }
+
+        return Ok(());
+    }
+
+    let needs_tech_review = has_review_detail || state.has_dummy;
 
     if needs_tech_review {
         if (state.has_pending_detail || state.has_unsafe_detail)
@@ -325,7 +342,9 @@ async fn insert_exit_message(
     txn: &mut PgTransaction<'_>,
 ) -> Result<(), ApiError> {
     let body = match exit_reason {
-        TechReviewExitReason::Resolved => MessageBody::TechReviewExited,
+        TechReviewExitReason::Resolved | TechReviewExitReason::RulesChanged => {
+            MessageBody::TechReviewExited
+        }
         TechReviewExitReason::FileDeleted => {
             MessageBody::TechReviewExitFileDeleted
         }
@@ -344,6 +363,36 @@ async fn insert_exit_message(
     Ok(())
 }
 
+async fn remove_dummy_issue_details(
+    project_id: DBProjectId,
+    txn: &mut PgTransaction<'_>,
+) -> Result<(), ApiError> {
+    sqlx::query!(
+        r#"
+        DELETE FROM delphi_report_issue_details detail
+        USING
+            delphi_report_issues issue,
+            delphi_reports report,
+            files file,
+            versions version
+        WHERE
+            detail.issue_id = issue.id
+            AND issue.issue_type = $2
+            AND issue.report_id = report.id
+            AND report.file_id = file.id
+            AND file.version_id = version.id
+            AND version.mod_id = $1
+        "#,
+        project_id as DBProjectId,
+        DUMMY_ISSUE_TYPE,
+    )
+    .execute(&mut *txn)
+    .await
+    .wrap_internal_err("failed to remove dummy Delphi issue details")?;
+
+    Ok(())
+}
+
 async fn ensure_dummy_issue_detail(
     report_id: DelphiReportId,
     txn: &mut PgTransaction<'_>,
diff --git a/apps/labrinth/src/routes/internal/mod.rs b/apps/labrinth/src/routes/internal/mod.rs
index 6dc3734377..c01423a488 100644
--- a/apps/labrinth/src/routes/internal/mod.rs
+++ b/apps/labrinth/src/routes/internal/mod.rs
@@ -122,6 +122,7 @@ pub fn config(cfg: &mut web::ServiceConfig) {
 		moderation::tech_review::rules::update_rule,
 		moderation::tech_review::rules::delete_rule,
 		moderation::tech_review::rules_scan::get_rule_schema,
+		moderation::tech_review::rules_scan::get_detail_rule_input,
 		moderation::tech_review::rules_scan::scan_rules,
 		moderation::tech_review::get_project_report,
 		moderation::tech_review::submit_report,
diff --git a/apps/labrinth/src/routes/internal/moderation/mod.rs b/apps/labrinth/src/routes/internal/moderation/mod.rs
index 7b3dac3ca1..e745939f89 100644
--- a/apps/labrinth/src/routes/internal/moderation/mod.rs
+++ b/apps/labrinth/src/routes/internal/moderation/mod.rs
@@ -295,6 +295,7 @@ pub async fn get_projects_internal(
                             FROM delphi_issue_details_with_statuses didws
                             WHERE didws.project_id = m.id
                                 AND didws.status = 'pending'
+                                AND NOT didws.hidden
                         )
                     )
             ),
@@ -542,6 +543,7 @@ pub async fn get_projects_internal(
                             FROM delphi_issue_details_with_statuses didws
                             WHERE didws.project_id = m.id
                                 AND didws.status = 'pending'
+                                AND NOT didws.hidden
                         )
                     )
             ),
@@ -770,6 +772,7 @@ pub async fn get_project_ids(
                             FROM delphi_issue_details_with_statuses didws
                             WHERE didws.project_id = m.id
                                 AND didws.status = 'pending'
+                                AND NOT didws.hidden
                         )
                     )
             ),
@@ -898,6 +901,7 @@ pub async fn get_project_ids(
                         FROM delphi_issue_details_with_statuses didws
                         WHERE didws.project_id = mods.id
                             AND didws.status = 'pending'
+                            AND NOT didws.hidden
                     )
                 )
             ORDER BY
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review.rs b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
index 92b230cd79..853d0b05fb 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
@@ -254,7 +254,9 @@ pub async fn get_issue(
                         )
                     ), '[]'::jsonb)
                     FROM delphi_issue_details_with_statuses didws
-                    WHERE didws.issue_id = dri.id
+                    WHERE
+                        didws.issue_id = dri.id
+                        AND NOT didws.hidden
                 )
             ) AS "data!: sqlx::types::Json<FileIssue>"
         FROM delphi_report_issues dri
@@ -309,6 +311,16 @@ pub async fn get_report(
                 'file_size', f.size,
                 'flag_reason', 'delphi',
                 'download_url', f.url,
+                'severity', COALESCE((
+                    SELECT MAX(didws.severity)
+                    FROM delphi_report_issues severity_issue
+                    INNER JOIN delphi_issue_details_with_statuses didws
+                        ON didws.issue_id = severity_issue.id
+                    WHERE
+                        severity_issue.report_id = dr.id
+                        AND severity_issue.issue_type != '__dummy'
+                        AND NOT didws.hidden
+                ), 'low'::delphi_severity),
                 -- TODO: replace with `json_array` in Postgres 16
 				'issues', (
 					SELECT coalesce(json_agg(
@@ -331,15 +343,24 @@ pub async fn get_report(
                                     )
                                 ), '[]'::jsonb)
                                 FROM delphi_issue_details_with_statuses didws
-                                WHERE didws.issue_id = dri.id
+                                WHERE
+                                    didws.issue_id = dri.id
+                                    AND NOT didws.hidden
                             )
 						)
 					), '[]'::json)
 					FROM delphi_report_issues dri
 					WHERE
-						dri.report_id = dr.id
+                        dri.report_id = dr.id
                         -- see delphi.rs todo comment
                         AND dri.issue_type != '__dummy'
+                        AND EXISTS (
+                            SELECT 1
+                            FROM delphi_issue_details_with_statuses visible_detail
+                            WHERE
+                                visible_detail.issue_id = dri.id
+                                AND NOT visible_detail.hidden
+                        )
                 )
             ) AS "data!: sqlx::types::Json<FileReport>"
         FROM delphi_reports dr
@@ -534,7 +555,9 @@ async fn fetch_project_reports(
             didws.global_status AS "global_status?: DelphiStatus",
             didws.status AS "status!: DelphiStatus"
         FROM delphi_issue_details_with_statuses didws
-        WHERE didws.issue_id = ANY($1::bigint[])
+        WHERE
+            didws.issue_id = ANY($1::bigint[])
+            AND NOT didws.hidden
         ORDER BY didws.issue_id, didws.id
         "#,
         &issue_ids.iter().map(|i| i.0).collect::<Vec<_>>()
@@ -640,6 +663,10 @@ async fn fetch_project_reports(
                             .get(&issue_row.id)
                             .unwrap_or(&empty_details);
 
+                        if issue_details.is_empty() {
+                            continue;
+                        }
+
                         file_issues.push(FileIssue {
                             id: issue_row.id,
                             report_id: issue_row.report_id,
@@ -648,12 +675,23 @@ async fn fetch_project_reports(
                         });
                     }
 
+                    if file_issues.is_empty() {
+                        continue;
+                    }
+
+                    let severity = file_issues
+                        .iter()
+                        .flat_map(|issue| issue.details.iter())
+                        .map(|detail| detail.severity)
+                        .max()
+                        .unwrap_or(report_row.severity);
+
                     file_reports.push(FileReport {
                         report_id: report_row.report_id,
                         file_id: FileId::from(file_row.file_id),
                         created: report_row.created,
                         flag_reason: FlagReason::Delphi,
-                        severity: report_row.severity,
+                        severity,
                         file_name: file_row.filename.clone(),
                         file_size: file_row.size,
                         download_url: file_row.url.clone(),
@@ -784,6 +822,7 @@ pub async fn search_projects(
             AND (cardinality($6::text[]) = 0 OR m.status = ANY($6::text[]))
             AND (cardinality($7::text[]) = 0 OR dri.issue_type = ANY($7::text[]))
             AND didws.status = 'pending'
+            AND NOT didws.hidden
             AND (
                 $5::text IS NULL
                 OR ($5::text = 'unreplied' AND (tm_last.id IS NULL OR u_last.role IS NULL OR u_last.role NOT IN ('moderator', 'admin')))
@@ -793,8 +832,8 @@ pub async fn search_projects(
         ORDER BY
             CASE WHEN $3 = 'created_asc'   THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END ASC,
             CASE WHEN $3 = 'created_desc'  THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END DESC,
-            CASE WHEN $3 = 'severity_asc'  THEN MAX(dr.severity) ELSE 'low'::delphi_severity END ASC,
-            CASE WHEN $3 = 'severity_desc' THEN MAX(dr.severity) ELSE 'low'::delphi_severity END DESC,
+            CASE WHEN $3 = 'severity_asc'  THEN MAX(didws.severity) ELSE 'low'::delphi_severity END ASC,
+            CASE WHEN $3 = 'severity_desc' THEN MAX(didws.severity) ELSE 'low'::delphi_severity END DESC,
             -- tie-breaker: oldest reports
             MIN(dr.created) ASC
         LIMIT $1 OFFSET $2
@@ -1039,6 +1078,7 @@ pub async fn submit_report(
         WHERE
             m.id = $1
             AND didws.status = 'pending'
+            AND NOT didws.hidden
             -- see delphi.rs todo comment
             AND dri.issue_type != '__dummy'
         "#,
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs
index 82aa8055b1..09f47d3ea3 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs
@@ -188,6 +188,7 @@ pub async fn search_global_issue_details(
         FROM delphi_global_detail_verdicts dgdv
         LEFT JOIN delphi_issue_details_with_statuses didws
             ON didws.key = dgdv.detail_key
+            AND NOT didws.hidden
         LEFT JOIN delphi_report_issues dri
             ON dri.id = didws.issue_id
             AND dri.issue_type != '__dummy'
@@ -248,6 +249,7 @@ pub async fn search_global_issue_details(
                 AND didv.detail_key = didws.key
             WHERE
                 didws.key = ANY($1::text[])
+                AND NOT didws.hidden
                 AND dri.issue_type != '__dummy'
         )
         SELECT
@@ -367,6 +369,7 @@ pub async fn get_global_issue_detail(
         FROM delphi_global_detail_verdicts dgdv
         LEFT JOIN delphi_issue_details_with_statuses didws
             ON didws.key = dgdv.detail_key
+            AND NOT didws.hidden
         LEFT JOIN delphi_report_issues dri
             ON dri.id = didws.issue_id
             AND dri.issue_type != '__dummy'
@@ -412,6 +415,7 @@ pub async fn get_global_issue_detail(
         WHERE
             didws.key = $1
             AND ($2::bigint IS NULL OR didws.id > $2)
+            AND NOT didws.hidden
             AND dri.issue_type != '__dummy'
         ORDER BY didws.id
         LIMIT $3
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
index e6895558ac..c3f9d79d21 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -12,10 +12,17 @@ use tokio_stream::wrappers::UnboundedReceiverStream;
 use utoipa::{PartialSchema, ToSchema};
 
 use super::rules::DelphiRuleEffect;
+use crate::routes::internal::delphi::tech_review_sync::{
+    self, TechReviewExitReason,
+};
 use crate::{
     auth::check_is_moderator_from_headers,
     database::{
-        PgPool, PgTransaction, models::delphi_report_item::DelphiSeverity,
+        PgPool, PgTransaction, ReadOnlyPgPool,
+        models::{
+            DBProjectId, DelphiReportIssueDetailsId,
+            delphi_report_item::DelphiSeverity,
+        },
         redis::RedisPool,
     },
     models::pats::Scopes,
@@ -25,9 +32,12 @@ use crate::{
 
 const RULE_SCAN_LOCK_ID: i64 = 0x6465_6c70_6869_7275;
 const PROGRESS_INTERVAL: usize = 50;
+const DUMMY_ISSUE_TYPE: &str = "__dummy";
 
 pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
-    cfg.service(get_rule_schema).service(scan_rules);
+    cfg.service(get_rule_schema)
+        .service(get_detail_rule_input)
+        .service(scan_rules);
 }
 
 #[derive(Serialize)]
@@ -45,40 +55,40 @@ struct RuleScanErrorEvent<'a> {
 }
 
 #[derive(Serialize, utoipa::ToSchema)]
-pub(super) struct RuleInput {
-    pub(super) schema_version: u32,
-    pub(super) trace: RuleTrace,
-    pub(super) scan: RuleScan,
-    pub(super) artifact: RuleArtifact,
-    pub(super) scope: RuleScope,
+pub struct RuleInput {
+    pub schema_version: u32,
+    pub trace: RuleTrace,
+    pub scan: RuleScan,
+    pub artifact: RuleArtifact,
+    pub scope: RuleScope,
 }
 
 #[derive(Serialize, utoipa::ToSchema)]
-pub(super) struct RuleTrace {
-    pub(super) key: String,
-    pub(super) issue_type: String,
-    pub(super) severity: DelphiSeverity,
-    pub(super) jar: Option<String>,
-    pub(super) file_path: String,
-    pub(super) data: HashMap<String, serde_json::Value>,
+pub struct RuleTrace {
+    pub key: String,
+    pub issue_type: String,
+    pub severity: DelphiSeverity,
+    pub jar: Option<String>,
+    pub file_path: String,
+    pub data: HashMap<String, serde_json::Value>,
 }
 
 #[derive(Serialize, utoipa::ToSchema)]
-pub(super) struct RuleScan {
-    pub(super) delphi_version: i32,
+pub struct RuleScan {
+    pub delphi_version: i32,
 }
 
 #[derive(Serialize, utoipa::ToSchema)]
-pub(super) struct RuleArtifact {
-    pub(super) size: Option<i32>,
-    pub(super) hashes: BTreeMap<String, String>,
+pub struct RuleArtifact {
+    pub size: Option<i32>,
+    pub hashes: BTreeMap<String, String>,
 }
 
 #[derive(Serialize, utoipa::ToSchema)]
-pub(super) struct RuleScope {
-    pub(super) project_id: Option<String>,
-    pub(super) version_id: Option<String>,
-    pub(super) file_id: Option<String>,
+pub struct RuleScope {
+    pub project_id: Option<String>,
+    pub version_id: Option<String>,
+    pub file_id: Option<String>,
 }
 
 struct CompiledRule {
@@ -145,6 +155,101 @@ pub async fn get_rule_schema(
     }))
 }
 
+/// Get the exact CEL input for a Delphi issue detail.
+#[utoipa::path(
+    context_path = "/moderation/tech-review",
+    tag = "moderation",
+    security(("bearer_auth" = [])),
+    responses(
+        (status = OK, body = RuleInput),
+        (status = NOT_FOUND, description = "Detail not found")
+    )
+)]
+#[get("/rules/details/{detail_id}/input")]
+pub async fn get_detail_rule_input(
+    req: HttpRequest,
+    pool: web::Data<PgPool>,
+    ro_pool: web::Data<ReadOnlyPgPool>,
+    redis: web::Data<RedisPool>,
+    session_queue: web::Data<AuthQueue>,
+    path: web::Path<(DelphiReportIssueDetailsId,)>,
+) -> Result<web::Json<RuleInput>, ApiError> {
+    check_is_moderator_from_headers(
+        &req,
+        &**pool,
+        &redis,
+        &session_queue,
+        Scopes::PROJECT_READ,
+    )
+    .await?;
+
+    let (detail_id,) = path.into_inner();
+    let detail = crate::util::error::Context::wrap_internal_err(
+        sqlx::query!(
+            r#"
+        SELECT
+            detail.key,
+            issue.issue_type,
+            detail.severity AS "severity: DelphiSeverity",
+            detail.jar,
+            detail.file_path,
+            detail.data AS "data: Json<HashMap<String, serde_json::Value>>",
+            report.delphi_version,
+            file.size AS "size?",
+            file.id AS "file_id?",
+            version.id AS "version_id?",
+            version.mod_id AS "project_id?",
+            COALESCE(file_hashes.hashes, '{}'::jsonb)
+                AS "hashes!: Json<BTreeMap<String, String>>"
+        FROM delphi_report_issue_details detail
+        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id
+        INNER JOIN delphi_reports report ON report.id = issue.report_id
+        LEFT JOIN files file ON file.id = report.file_id
+        LEFT JOIN versions version ON version.id = file.version_id
+        LEFT JOIN LATERAL (
+            SELECT
+                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes
+            FROM hashes
+            WHERE hashes.file_id = file.id
+        ) file_hashes ON TRUE
+        WHERE
+            detail.id = $1
+            AND issue.issue_type != $2
+        "#,
+            detail_id as DelphiReportIssueDetailsId,
+            DUMMY_ISSUE_TYPE,
+        )
+        .fetch_optional(&***ro_pool)
+        .await,
+        "failed to fetch delphi rule input",
+    )?
+    .ok_or(ApiError::NotFound)?;
+
+    Ok(web::Json(RuleInput {
+        schema_version: 1,
+        trace: RuleTrace {
+            key: detail.key,
+            issue_type: detail.issue_type,
+            severity: detail.severity,
+            jar: detail.jar,
+            file_path: detail.file_path,
+            data: detail.data.0,
+        },
+        scan: RuleScan {
+            delphi_version: detail.delphi_version,
+        },
+        artifact: RuleArtifact {
+            size: detail.size,
+            hashes: detail.hashes.0,
+        },
+        scope: RuleScope {
+            project_id: detail.project_id.map(to_public_id),
+            version_id: detail.version_id.map(to_public_id),
+            file_id: detail.file_id.map(to_public_id),
+        },
+    }))
+}
+
 fn schema_to_value<T: Serialize>(
     schema: T,
 ) -> Result<serde_json::Value, ApiError> {
@@ -274,31 +379,16 @@ async fn run_scan(
         .checked_add(1)
         .ok_or_else(|| eyre!("delphi rule revision overflowed"))?;
 
-    let rules = sqlx::query!(
-        r#"
-        SELECT id, rule
-        FROM delphi_rules
-        WHERE NOT delete_on_next_revision
-        ORDER BY id
-        "#,
-    )
-    .fetch_all(&mut transaction)
-    .await
-    .wrap_err("failed to fetch delphi rules")?
-    .into_iter()
-    .map(|rule| {
-        let program = cel::Program::compile(&rule.rule).map_err(|error| {
-            eyre!("failed to compile delphi rule {}: {error}", rule.id)
-        })?;
-        Ok(CompiledRule {
-            id: rule.id,
-            program,
-        })
-    })
-    .collect::<Result<Vec<_>>>()?;
+    let rules = fetch_compiled_rules(&mut transaction).await?;
 
     let total = sqlx::query_scalar!(
-        "SELECT COUNT(*) AS \"count!\" FROM delphi_report_issue_details",
+        r#"
+        SELECT COUNT(*) AS "count!"
+        FROM delphi_report_issue_details detail
+        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id
+        WHERE issue.issue_type != $1
+        "#,
+        DUMMY_ISSUE_TYPE,
     )
     .fetch_one(&mut transaction)
     .await
@@ -333,8 +423,10 @@ async fn run_scan(
             FROM hashes
             GROUP BY file_id
         ) file_hashes ON file_hashes.file_id = file.id
+        WHERE issue.issue_type != $1
         ORDER BY detail.id
         "#,
+        DUMMY_ISSUE_TYPE,
     )
     .fetch(&mut transaction);
 
@@ -407,74 +499,79 @@ async fn run_scan(
 
     send_progress(sender, "publishing", revision, total, total, effects.len());
 
-    let detail_ids = effects
-        .iter()
-        .map(|effect| effect.detail_id)
-        .collect::<Vec<_>>();
-    let rule_ids = effects
-        .iter()
-        .map(|effect| effect.rule_id)
-        .collect::<Vec<_>>();
-    let severities = effects
-        .iter()
-        .map(|effect| effect.effect.severity)
-        .collect::<Vec<_>>();
-    let hidden = effects
-        .iter()
-        .map(|effect| effect.effect.hidden)
-        .collect::<Vec<_>>();
+    insert_materialized_effects(revision, &effects, &mut transaction).await?;
 
-    if !effects.is_empty() {
-        sqlx::query!(
-            r#"
-            INSERT INTO delphi_rule_effects (
-                revision,
-                detail_id,
-                rule_id,
-                severity,
-                hidden
-            )
-            SELECT $1, effect.*
-            FROM UNNEST(
-                $2::BIGINT[],
-                $3::BIGINT[],
-                $4::delphi_severity[],
-                $5::BOOLEAN[]
-            ) AS effect(detail_id, rule_id, severity, hidden)
-            "#,
-            revision,
-            &detail_ids,
-            &rule_ids,
-            &severities as &[Option<DelphiSeverity>],
-            &hidden,
+    let affected_projects = sqlx::query!(
+        r#"
+        WITH project_membership AS (
+            SELECT
+                detail.project_id,
+                BOOL_OR(
+                    detail.status IN ('pending', 'unsafe')
+                    AND issue.issue_type != $2
+                    AND NOT detail.hidden
+                ) AS old_needs_review,
+                BOOL_OR(
+                    detail.status IN ('pending', 'unsafe')
+                    AND issue.issue_type != $2
+                    AND NOT COALESCE(new_effect.hidden, FALSE)
+                ) AS new_needs_review
+            FROM delphi_issue_details_with_statuses detail
+            INNER JOIN delphi_report_issues issue
+                ON issue.id = detail.issue_id
+            LEFT JOIN delphi_rule_effects new_effect
+                ON new_effect.revision = $1
+                AND new_effect.detail_id = detail.id
+            GROUP BY detail.project_id
         )
-        .execute(&mut transaction)
-        .await
-        .wrap_err("failed to insert delphi rule effects")?;
-    }
+        SELECT project_id AS "project_id!: DBProjectId"
+        FROM project_membership
+        WHERE old_needs_review IS DISTINCT FROM new_needs_review
+        "#,
+        revision,
+        DUMMY_ISSUE_TYPE,
+    )
+    .fetch_all(&mut transaction)
+    .await
+    .wrap_err("failed to fetch projects affected by delphi rule changes")?;
 
     sqlx::query!(
-        "DELETE FROM delphi_rule_effects WHERE revision <> $1",
+        "UPDATE delphi_rules SET revision = $1 WHERE NOT delete_on_next_revision",
         revision,
     )
     .execute(&mut transaction)
     .await
-    .wrap_err("failed to delete old delphi rule effects")?;
-    sqlx::query!("DELETE FROM delphi_rules WHERE delete_on_next_revision")
+    .wrap_err("failed to update delphi rule revisions")?;
+    sqlx::query!("UPDATE delphi_rule_revisions SET revision = $1", revision)
         .execute(&mut transaction)
         .await
-        .wrap_err("failed to delete retired delphi rules")?;
+        .wrap_err("failed to publish the delphi rule revision")?;
+
+    tech_review_sync::sync_project_tech_review_state(
+        &affected_projects
+            .iter()
+            .map(|project| project.project_id)
+            .collect::<Vec<_>>(),
+        TechReviewExitReason::RulesChanged,
+        &mut transaction,
+    )
+    .await
+    .map_err(|error| {
+        eyre!(error)
+            .wrap_err("failed to sync projects affected by delphi rule changes")
+    })?;
+
     sqlx::query!(
-        "UPDATE delphi_rules SET revision = $1 WHERE NOT delete_on_next_revision",
+        "DELETE FROM delphi_rule_effects WHERE revision <> $1",
         revision,
     )
     .execute(&mut transaction)
     .await
-    .wrap_err("failed to update delphi rule revisions")?;
-    sqlx::query!("UPDATE delphi_rule_revisions SET revision = $1", revision)
+    .wrap_err("failed to delete old delphi rule effects")?;
+    sqlx::query!("DELETE FROM delphi_rules WHERE delete_on_next_revision")
         .execute(&mut transaction)
         .await
-        .wrap_err("failed to publish the delphi rule revision")?;
+        .wrap_err("failed to delete retired delphi rules")?;
 
     transaction
         .commit()
@@ -489,6 +586,197 @@ async fn run_scan(
     })
 }
 
+pub(crate) async fn materialize_current_rule_effects(
+    detail_ids: &[DelphiReportIssueDetailsId],
+    transaction: &mut PgTransaction<'_>,
+) -> Result<()> {
+    if detail_ids.is_empty() {
+        return Ok(());
+    }
+
+    let revision = sqlx::query_scalar!(
+        "SELECT revision FROM delphi_rule_revisions LIMIT 1",
+    )
+    .fetch_one(&mut *transaction)
+    .await
+    .wrap_err("failed to fetch the current delphi rule revision")?;
+    let rules = fetch_compiled_rules(transaction).await?;
+
+    if rules.is_empty() {
+        return Ok(());
+    }
+
+    let details = sqlx::query!(
+        r#"
+        SELECT
+            detail.id,
+            detail.key,
+            issue.issue_type,
+            detail.severity AS "severity: DelphiSeverity",
+            detail.jar,
+            detail.file_path,
+            detail.data AS "data: Json<HashMap<String, serde_json::Value>>",
+            report.delphi_version,
+            file.size AS "size?",
+            file.id AS "file_id?",
+            version.id AS "version_id?",
+            version.mod_id AS "project_id?",
+            COALESCE(file_hashes.hashes, '{}'::jsonb)
+                AS "hashes!: Json<BTreeMap<String, String>>"
+        FROM delphi_report_issue_details detail
+        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id
+        INNER JOIN delphi_reports report ON report.id = issue.report_id
+        LEFT JOIN files file ON file.id = report.file_id
+        LEFT JOIN versions version ON version.id = file.version_id
+        LEFT JOIN LATERAL (
+            SELECT
+                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes
+            FROM hashes
+            WHERE hashes.file_id = file.id
+        ) file_hashes ON TRUE
+        WHERE
+            detail.id = ANY($1::bigint[])
+            AND issue.issue_type != $2
+        ORDER BY detail.id
+        "#,
+        &detail_ids.iter().map(|id| id.0).collect::<Vec<_>>(),
+        DUMMY_ISSUE_TYPE,
+    )
+    .fetch_all(&mut *transaction)
+    .await
+    .wrap_err("failed to fetch new delphi issue details")?;
+
+    let mut effects = Vec::new();
+    for detail in details {
+        let input = RuleInput {
+            schema_version: 1,
+            trace: RuleTrace {
+                key: detail.key,
+                issue_type: detail.issue_type,
+                severity: detail.severity,
+                jar: detail.jar,
+                file_path: detail.file_path,
+                data: detail.data.0,
+            },
+            scan: RuleScan {
+                delphi_version: detail.delphi_version,
+            },
+            artifact: RuleArtifact {
+                size: detail.size,
+                hashes: detail.hashes.0,
+            },
+            scope: RuleScope {
+                project_id: detail.project_id.map(to_public_id),
+                version_id: detail.version_id.map(to_public_id),
+                file_id: detail.file_id.map(to_public_id),
+            },
+        };
+
+        for rule in &rules {
+            let effect =
+                evaluate_rule(&rule.program, &input).wrap_err_with(|| {
+                    format!(
+                        "failed to evaluate delphi rule {} for detail {}",
+                        rule.id, detail.id
+                    )
+                })?;
+            if let Some(effect) = effect {
+                effects.push(MaterializedEffect {
+                    detail_id: detail.id,
+                    rule_id: rule.id,
+                    effect,
+                });
+                break;
+            }
+        }
+    }
+
+    insert_materialized_effects(revision, &effects, transaction).await
+}
+
+async fn fetch_compiled_rules(
+    transaction: &mut PgTransaction<'_>,
+) -> Result<Vec<CompiledRule>> {
+    sqlx::query!(
+        r#"
+        SELECT id, rule
+        FROM delphi_rules
+        WHERE NOT delete_on_next_revision
+        ORDER BY id
+        "#,
+    )
+    .fetch_all(&mut *transaction)
+    .await
+    .wrap_err("failed to fetch delphi rules")?
+    .into_iter()
+    .map(|rule| {
+        let program = cel::Program::compile(&rule.rule).map_err(|error| {
+            eyre!("failed to compile delphi rule {}: {error}", rule.id)
+        })?;
+        Ok(CompiledRule {
+            id: rule.id,
+            program,
+        })
+    })
+    .collect()
+}
+
+async fn insert_materialized_effects(
+    revision: i64,
+    effects: &[MaterializedEffect],
+    transaction: &mut PgTransaction<'_>,
+) -> Result<()> {
+    if effects.is_empty() {
+        return Ok(());
+    }
+
+    let detail_ids = effects
+        .iter()
+        .map(|effect| effect.detail_id)
+        .collect::<Vec<_>>();
+    let rule_ids = effects
+        .iter()
+        .map(|effect| effect.rule_id)
+        .collect::<Vec<_>>();
+    let severities = effects
+        .iter()
+        .map(|effect| effect.effect.severity)
+        .collect::<Vec<_>>();
+    let hidden = effects
+        .iter()
+        .map(|effect| effect.effect.hidden)
+        .collect::<Vec<_>>();
+
+    sqlx::query!(
+        r#"
+        INSERT INTO delphi_rule_effects (
+            revision,
+            detail_id,
+            rule_id,
+            severity,
+            hidden
+        )
+        SELECT $1, effect.*
+        FROM UNNEST(
+            $2::BIGINT[],
+            $3::BIGINT[],
+            $4::delphi_severity[],
+            $5::BOOLEAN[]
+        ) AS effect(detail_id, rule_id, severity, hidden)
+        "#,
+        revision,
+        &detail_ids,
+        &rule_ids,
+        &severities as &[Option<DelphiSeverity>],
+        &hidden,
+    )
+    .execute(&mut *transaction)
+    .await
+    .wrap_err("failed to insert delphi rule effects")?;
+
+    Ok(())
+}
+
 pub(super) fn evaluate_rule(
     program: &cel::Program,
     input: impl Serialize,
diff --git a/packages/api-client/src/modules/labrinth/tech-review/internal.ts b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
index 5cf7e278fb..2ad32b78ff 100644
--- a/packages/api-client/src/modules/labrinth/tech-review/internal.ts
+++ b/packages/api-client/src/modules/labrinth/tech-review/internal.ts
@@ -28,6 +28,19 @@ export class LabrinthTechReviewInternalModule extends AbstractModule {
 		)
 	}
 
+	public async getDetailRuleInput(
+		detailId: string,
+	): Promise<Labrinth.TechReview.Internal.RuleInput> {
+		return this.client.request<Labrinth.TechReview.Internal.RuleInput>(
+			`/moderation/tech-review/rules/details/${detailId}/input`,
+			{
+				api: 'labrinth',
+				version: 'internal',
+				method: 'GET',
+			},
+		)
+	}
+
 	public async getRuleAffectedDetails(
 		id: number,
 	): Promise<Labrinth.TechReview.Internal.DelphiRuleAffectedDetail[]> {
diff --git a/packages/api-client/src/modules/labrinth/types.ts b/packages/api-client/src/modules/labrinth/types.ts
index 8f9e55939d..3089099050 100644
--- a/packages/api-client/src/modules/labrinth/types.ts
+++ b/packages/api-client/src/modules/labrinth/types.ts
@@ -2289,6 +2289,30 @@ export namespace Labrinth {
 				components: Record<string, DelphiRuleSchema>
 			}
 
+			export type RuleInput = {
+				schema_version: number
+				trace: {
+					key: string
+					issue_type: string
+					severity: DelphiSeverity
+					jar: string | null
+					file_path: string
+					data: Record<string, unknown>
+				}
+				scan: {
+					delphi_version: number
+				}
+				artifact: {
+					size: number | null
+					hashes: Record<string, string>
+				}
+				scope: {
+					project_id: string | null
+					version_id: string | null
+					file_id: string | null
+				}
+			}
+
 			export type TestDelphiRuleResponse = {
 				effects: Array<DelphiRuleEffect | null>
 			}

From f0dff8ebd56e58caa46a533cf89c0d41423c4e29 Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Sun, 26 Jul 2026 15:17:50 +0100
Subject: [PATCH 08/16] clean up __dummy stuff

---
 .../moderation/technical-review/rules.vue     |  33 +-
 .../20260724120000_delphi_rule_priority.sql   |   2 +
 ...0260726120000_delphi_tech_review_queue.sql |  28 ++
 .../src/routes/internal/delphi/mod.rs         |   5 +-
 .../src/routes/internal/delphi/rescan.rs      |   7 +-
 .../internal/delphi/tech_review_queue.rs      | 203 ++++++++
 .../internal/delphi/tech_review_sync.rs       | 460 ------------------
 .../routes/internal/moderation/tech_review.rs | 110 +++--
 .../internal/moderation/tech_review/global.rs |   4 -
 .../internal/moderation/tech_review/rules.rs  |  32 +-
 .../moderation/tech_review/rules_scan.rs      |  54 +-
 apps/labrinth/src/routes/v3/projects.rs       |   5 +-
 apps/labrinth/src/routes/v3/version_file.rs   |   4 +-
 apps/labrinth/src/routes/v3/versions.rs       |   4 +-
 .../api-client/src/modules/labrinth/types.ts  |   2 +
 15 files changed, 383 insertions(+), 570 deletions(-)
 create mode 100644 apps/labrinth/migrations/20260724120000_delphi_rule_priority.sql
 create mode 100644 apps/labrinth/migrations/20260726120000_delphi_tech_review_queue.sql
 create mode 100644 apps/labrinth/src/routes/internal/delphi/tech_review_queue.rs
 delete mode 100644 apps/labrinth/src/routes/internal/delphi/tech_review_sync.rs

diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index 66035cd75e..ec444cfc23 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -10,6 +10,19 @@
 				placeholder="Known-safe obfuscated bootstrap"
 			/>
 
+			<label class="font-semibold text-contrast" for="rule-priority">Priority</label>
+			<StyledInput
+				id="rule-priority"
+				v-model="form.priority"
+				type="number"
+				:min="-2147483648"
+				:max="2147483647"
+				:step="1"
+			/>
+			<p class="m-0 text-sm text-secondary">
+				Higher-priority rules run first. Rules with the same priority run in creation order.
+			</p>
+
 			<label class="font-semibold text-contrast" for="rule-expression">CEL expression</label>
 			<div
 				class="relative overflow-hidden rounded-[20px] border border-solid border-surface-4 shadow-sm"
@@ -250,7 +263,9 @@
 				<div class="flex flex-wrap items-start justify-between gap-3">
 					<div>
 						<h2 class="m-0 text-lg font-bold text-contrast">{{ rule.name }}</h2>
-						<p class="m-0 text-sm text-secondary">Revision {{ rule.revision }}</p>
+						<p class="m-0 text-sm text-secondary">
+							Priority {{ rule.priority }} · Revision {{ rule.revision }}
+						</p>
 					</div>
 					<div class="flex gap-2">
 						<ButtonStyled>
@@ -474,6 +489,7 @@ const expandedAffectedDetails = reactive(
 const loadingAffectedRuleIds = reactive(new Set<number>())
 const form = reactive({
 	name: '',
+	priority: 0 as number | undefined,
 	rule: DEFAULT_RULE,
 })
 let ruleTestRequestId = 0
@@ -753,6 +769,7 @@ function openCreateModal() {
 	if (isScanning.value) return
 	editingRuleId.value = null
 	form.name = ''
+	form.priority = 0
 	form.rule = DEFAULT_RULE
 	isRuleModalOpen.value = true
 	ruleModal.value?.show()
@@ -765,6 +782,7 @@ function openEditModal(rule: Labrinth.TechReview.Internal.DelphiRule) {
 	if (isScanning.value) return
 	editingRuleId.value = rule.id
 	form.name = rule.name
+	form.priority = rule.priority
 	form.rule = rule.rule
 	isRuleModalOpen.value = true
 	ruleModal.value?.show()
@@ -787,11 +805,19 @@ function handleRuleModalHide() {
 async function saveRule() {
 	if (isSaving.value || isScanning.value) return
 
-	if (!form.name.trim() || !form.rule.trim()) {
+	const priority = form.priority
+	if (
+		!form.name.trim() ||
+		!form.rule.trim() ||
+		typeof priority !== 'number' ||
+		!Number.isInteger(priority) ||
+		priority < -2147483648 ||
+		priority > 2147483647
+	) {
 		addNotification({
 			type: 'error',
 			title: 'Invalid rule',
-			text: 'Enter a name and a CEL expression.',
+			text: 'Enter a name, an integer priority, and a CEL expression.',
 		})
 		return
 	}
@@ -799,6 +825,7 @@ async function saveRule() {
 	isSaving.value = true
 	const payload = {
 		name: form.name,
+		priority,
 		rule: form.rule,
 	}
 
diff --git a/apps/labrinth/migrations/20260724120000_delphi_rule_priority.sql b/apps/labrinth/migrations/20260724120000_delphi_rule_priority.sql
new file mode 100644
index 0000000000..344cac1832
--- /dev/null
+++ b/apps/labrinth/migrations/20260724120000_delphi_rule_priority.sql
@@ -0,0 +1,2 @@
+ALTER TABLE delphi_rules
+ADD COLUMN priority INTEGER NOT NULL DEFAULT 0;
diff --git a/apps/labrinth/migrations/20260726120000_delphi_tech_review_queue.sql b/apps/labrinth/migrations/20260726120000_delphi_tech_review_queue.sql
new file mode 100644
index 0000000000..f4f5030fa2
--- /dev/null
+++ b/apps/labrinth/migrations/20260726120000_delphi_tech_review_queue.sql
@@ -0,0 +1,28 @@
+CREATE TABLE delphi_tech_review_queue (
+	project_id BIGINT PRIMARY KEY REFERENCES mods(id)
+		ON DELETE CASCADE
+);
+
+INSERT INTO delphi_tech_review_queue (project_id)
+SELECT DISTINCT didws.project_id
+FROM delphi_issue_details_with_statuses didws
+INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
+WHERE
+	(
+		dri.issue_type = '__dummy'
+		AND didws.status = 'pending'
+	)
+	OR (
+		dri.issue_type != '__dummy'
+		AND didws.status IN ('pending', 'unsafe')
+		AND NOT didws.hidden
+	);
+
+DELETE FROM delphi_report_issue_details detail
+USING delphi_report_issues issue
+WHERE
+	detail.issue_id = issue.id
+	AND issue.issue_type = '__dummy';
+
+DELETE FROM delphi_report_issues
+WHERE issue_type = '__dummy';
diff --git a/apps/labrinth/src/routes/internal/delphi/mod.rs b/apps/labrinth/src/routes/internal/delphi/mod.rs
index ed275dfb6c..f414a68d79 100644
--- a/apps/labrinth/src/routes/internal/delphi/mod.rs
+++ b/apps/labrinth/src/routes/internal/delphi/mod.rs
@@ -32,7 +32,7 @@ use crate::{
 };
 
 pub mod rescan;
-pub mod tech_review_sync;
+pub mod tech_review_queue;
 
 pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
     cfg.service(
@@ -257,9 +257,8 @@ async fn ingest_report_deserialized(
     .await
     .wrap_internal_err("failed to apply delphi rules to new issue details")?;
 
-    tech_review_sync::sync_project_tech_review_state(
+    tech_review_queue::add_projects_with_review_details(
         &[DBProjectId::from(report.project_id)],
-        tech_review_sync::TechReviewExitReason::Resolved,
         &mut transaction,
     )
     .await?;
diff --git a/apps/labrinth/src/routes/internal/delphi/rescan.rs b/apps/labrinth/src/routes/internal/delphi/rescan.rs
index cbaefd58f7..bfe40edfc6 100644
--- a/apps/labrinth/src/routes/internal/delphi/rescan.rs
+++ b/apps/labrinth/src/routes/internal/delphi/rescan.rs
@@ -97,28 +97,23 @@ async fn fetch_unreviewed_tech_review_project_ids(
         r#"
         SELECT DISTINCT m.id
         FROM mods m
+        INNER JOIN delphi_tech_review_queue queue ON queue.project_id = m.id
         WHERE
             EXISTS(
                 SELECT 1
                 FROM delphi_issue_details_with_statuses didws
-                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
                 WHERE
                     didws.project_id = m.id
                     AND didws.status = 'pending'
                     AND NOT didws.hidden
-                    -- see delphi.rs todo comment
-                    AND dri.issue_type != '__dummy'
             )
             AND NOT EXISTS(
                 SELECT 1
                 FROM delphi_issue_details_with_statuses didws
-                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
                 WHERE
                     didws.project_id = m.id
                     AND didws.status IN ('safe', 'unsafe')
                     AND NOT didws.hidden
-                    -- see delphi.rs todo comment
-                    AND dri.issue_type != '__dummy'
             )
         "#,
     )
diff --git a/apps/labrinth/src/routes/internal/delphi/tech_review_queue.rs b/apps/labrinth/src/routes/internal/delphi/tech_review_queue.rs
new file mode 100644
index 0000000000..cde08d1581
--- /dev/null
+++ b/apps/labrinth/src/routes/internal/delphi/tech_review_queue.rs
@@ -0,0 +1,203 @@
+//! Maintains explicit project membership in the technical review queue.
+//!
+//! Queue membership is represented by a row in `delphi_tech_review_queue`.
+//! Enter and exit thread messages are emitted only when an insert or delete
+//! actually changes that membership, in the same transaction.
+
+use itertools::Itertools;
+
+use crate::{
+    database::{
+        PgTransaction,
+        models::{DBProjectId, DBThreadId, thread_item::ThreadMessageBuilder},
+    },
+    models::threads::MessageBody,
+    routes::ApiError,
+    util::error::Context,
+};
+
+#[derive(Debug, Clone, Copy)]
+pub enum TechReviewRemovalReason {
+    RulesChanged,
+    FileDeleted,
+}
+
+pub async fn add_projects(
+    project_ids: &[DBProjectId],
+    txn: &mut PgTransaction<'_>,
+) -> Result<(), ApiError> {
+    let project_ids = project_ids.iter().copied().unique().collect::<Vec<_>>();
+    if project_ids.is_empty() {
+        return Ok(());
+    }
+
+    let rows = sqlx::query!(
+        r#"
+        WITH inserted AS (
+            INSERT INTO delphi_tech_review_queue (project_id)
+            SELECT unnest($1::bigint[])
+            ON CONFLICT (project_id) DO NOTHING
+            RETURNING project_id
+        )
+        SELECT
+            inserted.project_id AS "project_id!: DBProjectId",
+            (
+                SELECT thread.id
+                FROM threads thread
+                WHERE thread.mod_id = inserted.project_id
+                ORDER BY thread.id
+                LIMIT 1
+            ) AS "thread_id!: DBThreadId"
+        FROM inserted
+        "#,
+        &project_ids.iter().map(|id| id.0).collect::<Vec<_>>(),
+    )
+    .fetch_all(&mut *txn)
+    .await
+    .wrap_internal_err("failed to add projects to technical review queue")?;
+
+    for row in rows {
+        ThreadMessageBuilder {
+            author_id: None,
+            body: MessageBody::TechReviewEntered,
+            thread_id: row.thread_id,
+            hide_identity: false,
+        }
+        .insert(txn)
+        .await
+        .wrap_internal_err("failed to add entering technical review message")?;
+    }
+
+    Ok(())
+}
+
+pub async fn remove_projects(
+    project_ids: &[DBProjectId],
+    reason: TechReviewRemovalReason,
+    txn: &mut PgTransaction<'_>,
+) -> Result<(), ApiError> {
+    let project_ids = project_ids.iter().copied().unique().collect::<Vec<_>>();
+    if project_ids.is_empty() {
+        return Ok(());
+    }
+
+    let rows = sqlx::query!(
+        r#"
+        WITH removed AS (
+            DELETE FROM delphi_tech_review_queue
+            WHERE project_id = ANY($1::bigint[])
+            RETURNING project_id
+        )
+        SELECT
+            removed.project_id AS "project_id!: DBProjectId",
+            (
+                SELECT thread.id
+                FROM threads thread
+                WHERE thread.mod_id = removed.project_id
+                ORDER BY thread.id
+                LIMIT 1
+            ) AS "thread_id!: DBThreadId"
+        FROM removed
+        "#,
+        &project_ids.iter().map(|id| id.0).collect::<Vec<_>>(),
+    )
+    .fetch_all(&mut *txn)
+    .await
+    .wrap_internal_err(
+        "failed to remove projects from technical review queue",
+    )?;
+
+    let body = match reason {
+        TechReviewRemovalReason::RulesChanged => MessageBody::TechReviewExited,
+        TechReviewRemovalReason::FileDeleted => {
+            MessageBody::TechReviewExitFileDeleted
+        }
+    };
+
+    for row in rows {
+        ThreadMessageBuilder {
+            author_id: None,
+            body: body.clone(),
+            thread_id: row.thread_id,
+            hide_identity: false,
+        }
+        .insert(txn)
+        .await
+        .wrap_internal_err("failed to add exiting technical review message")?;
+    }
+
+    Ok(())
+}
+
+pub async fn add_projects_with_review_details(
+    project_ids: &[DBProjectId],
+    txn: &mut PgTransaction<'_>,
+) -> Result<(), ApiError> {
+    let project_ids = project_ids.iter().copied().unique().collect::<Vec<_>>();
+    if project_ids.is_empty() {
+        return Ok(());
+    }
+
+    let rows = sqlx::query!(
+        r#"
+        SELECT DISTINCT detail.project_id AS "project_id!: DBProjectId"
+        FROM delphi_issue_details_with_statuses detail
+        WHERE
+            detail.project_id = ANY($1::bigint[])
+            AND detail.status IN ('pending', 'unsafe')
+            AND NOT detail.hidden
+        "#,
+        &project_ids.iter().map(|id| id.0).collect::<Vec<_>>(),
+    )
+    .fetch_all(&mut *txn)
+    .await
+    .wrap_internal_err("failed to find projects requiring technical review")?;
+
+    add_projects(
+        &rows
+            .into_iter()
+            .map(|row| row.project_id)
+            .collect::<Vec<_>>(),
+        txn,
+    )
+    .await
+}
+
+pub async fn remove_projects_without_details(
+    project_ids: &[DBProjectId],
+    reason: TechReviewRemovalReason,
+    txn: &mut PgTransaction<'_>,
+) -> Result<(), ApiError> {
+    let project_ids = project_ids.iter().copied().unique().collect::<Vec<_>>();
+    if project_ids.is_empty() {
+        return Ok(());
+    }
+
+    let rows = sqlx::query!(
+        r#"
+        SELECT requested.project_id AS "project_id!: DBProjectId"
+        FROM unnest($1::bigint[]) AS requested(project_id)
+        WHERE NOT EXISTS (
+            SELECT 1
+            FROM delphi_issue_details_with_statuses detail
+            WHERE detail.project_id = requested.project_id
+        )
+        "#,
+        &project_ids.iter().map(|id| id.0).collect::<Vec<_>>(),
+    )
+    .fetch_all(&mut *txn)
+    .await
+    .wrap_internal_err(
+        "failed to find projects without technical review details",
+    )?;
+
+    remove_projects(
+        &rows
+            .into_iter()
+            .map(|row| row.project_id)
+            .collect::<Vec<_>>(),
+        reason,
+        txn,
+    )
+    .await
+}
diff --git a/apps/labrinth/src/routes/internal/delphi/tech_review_sync.rs b/apps/labrinth/src/routes/internal/delphi/tech_review_sync.rs
deleted file mode 100644
index 974db515d0..0000000000
--- a/apps/labrinth/src/routes/internal/delphi/tech_review_sync.rs
+++ /dev/null
@@ -1,460 +0,0 @@
-//! Synchronizes moderation thread messages and dummy queue blockers with the
-//! current computed tech review state of affected projects.
-//!
-//! When a project has a Delphi report submitted for it, or when a moderator
-//! updates one of its issue details' rows (like flagging a detail as *globally*
-//! safe or unsafe), we will need to recheck if the project still belongs in the
-//! tech review queue or if it needs to exit now.
-//!
-//! Side-note: "entering the queue" or "exiting the queue" right now just means
-//! adding a new message to the project's moderation thread which indicates if
-//! it entered/exited. In the future this should be replaced with a more proper
-//! audit log table, or "is project currently in tech review" table.
-//!
-//! A project is considered to need tech review when it has at least one
-//! non-dummy issue detail whose effective status is pending or unsafe, or when
-//! it already has a dummy pending detail blocking the final review submission.
-//! Effective status is just the local detail's verdict (from
-//! `delphi_issue_detail_verdicts`), or if it's null then the global verdict for
-//! the same `drid.key` (from `delphi_global_detail_verdicts`).
-//!
-//! Some examples of how this behavior manifests: let's assume you have projects
-//! _A_ and _B_ currently in tech review. They each have one (unresolved) issue
-//! detail with key _K_.
-//! - If you mark _K_ on _A_ as locally safe/unsafe, then _A_ is fully resolved,
-//!   but we still have the `__dummy` detail, which means it's still in the
-//!   queue until the moderator submits the actual report. _B_ is entirely
-//!   unaffected.
-//! - If you mark _K_ on _A_ as globally safe, then _A_ and _B_ both get fully
-//!   resolved, but both still have the `__dummy` detail, so they also still
-//!   need the final report to be submitted by the moderator.
-//!
-//!   In practice, this means that some projects may have e.g. "100/100 traces
-//!   are safe" reported, but they will just be waiting for final moderator
-//!   approval.
-//!
-//! The logic for checking whether a project is now in tech review or not, and
-//! sending the appropriate message, is complex! That's why this module exists:
-//! to act as a single chokepoint which (correctly) syncs all the state, instead
-//! of having each mutation run its own ad-hoc update logic.
-
-use itertools::Itertools;
-
-use crate::{
-    database::{
-        PgTransaction,
-        models::{
-            DBProjectId, DBThreadId, DelphiReportId,
-            delphi_report_item::DelphiVerdict,
-            thread_item::ThreadMessageBuilder,
-        },
-    },
-    models::threads::MessageBody,
-    routes::ApiError,
-    util::error::Context,
-};
-
-const DUMMY_ISSUE_TYPE: &str = "__dummy";
-
-#[derive(Debug, Clone, Copy)]
-pub enum TechReviewExitReason {
-    Resolved,
-    FileDeleted,
-    RulesChanged,
-}
-
-struct ProjectTechReviewState {
-    project_id: DBProjectId,
-    has_pending_detail: bool,
-    has_unsafe_detail: bool,
-    has_dummy: bool,
-    thread_id: Option<DBThreadId>,
-    report_id: Option<DelphiReportId>,
-    last_tech_review_message_type: Option<String>,
-}
-
-pub async fn sync_project_tech_review_state(
-    project_ids: &[DBProjectId],
-    exit_reason: TechReviewExitReason,
-    txn: &mut PgTransaction<'_>,
-) -> Result<(), ApiError> {
-    let project_ids = project_ids.iter().copied().unique().collect::<Vec<_>>();
-    if project_ids.is_empty() {
-        return Ok(());
-    }
-
-    let project_ids_raw = project_ids.iter().map(|id| id.0).collect::<Vec<_>>();
-    let tech_review_message_types = tech_review_message_types();
-
-    let rows = sqlx::query!(
-        r#"
-        WITH project_ids AS (
-            SELECT unnest($1::bigint[]) AS project_id
-        ),
-        project_detail_state AS (
-            SELECT
-                p.project_id,
-                COALESCE(BOOL_OR(
-                    didws.status = 'pending'
-                    AND NOT didws.hidden
-                    AND dri.issue_type != $3
-                ), FALSE) AS has_pending_detail,
-                COALESCE(BOOL_OR(
-                    didws.status = 'unsafe'
-                    AND NOT didws.hidden
-                    AND dri.issue_type != $3
-                ), FALSE) AS has_unsafe_detail,
-                COALESCE(BOOL_OR(
-                    didws.status = 'pending'
-                    AND dri.issue_type = $3
-                ), FALSE) AS has_dummy
-            FROM project_ids p
-            LEFT JOIN delphi_issue_details_with_statuses didws
-                ON didws.project_id = p.project_id
-            LEFT JOIN delphi_report_issues dri ON dri.id = didws.issue_id
-            GROUP BY p.project_id
-        )
-        SELECT
-            p.project_id AS "project_id!: DBProjectId",
-            p.has_pending_detail AS "has_pending_detail!",
-            p.has_unsafe_detail AS "has_unsafe_detail!",
-            p.has_dummy AS "has_dummy!",
-            (
-                SELECT t.id
-                FROM threads t
-                WHERE t.mod_id = p.project_id
-                ORDER BY t.id
-                LIMIT 1
-            ) AS "thread_id: DBThreadId",
-            (
-                SELECT tm.body->>'type'
-                FROM threads t
-                INNER JOIN threads_messages tm ON tm.thread_id = t.id
-                WHERE
-                    t.mod_id = p.project_id
-                    AND tm.body->>'type' = ANY($2::text[])
-                ORDER BY tm.created DESC, tm.id DESC
-                LIMIT 1
-            ) AS "last_tech_review_message_type",
-            (
-                SELECT dr.id
-                FROM versions v
-                INNER JOIN files f ON f.version_id = v.id
-                INNER JOIN delphi_reports dr ON dr.file_id = f.id
-                WHERE v.mod_id = p.project_id
-                ORDER BY dr.created DESC, dr.id DESC
-                LIMIT 1
-            ) AS "report_id: DelphiReportId"
-        FROM project_detail_state p
-        "#,
-        &project_ids_raw,
-        &tech_review_message_types,
-        DUMMY_ISSUE_TYPE,
-    )
-    .fetch_all(&mut *txn)
-    .await
-    .wrap_internal_err("failed to fetch project tech review state")?;
-
-    for row in rows {
-        let state = ProjectTechReviewState {
-            project_id: row.project_id,
-            has_pending_detail: row.has_pending_detail,
-            has_unsafe_detail: row.has_unsafe_detail,
-            has_dummy: row.has_dummy,
-            thread_id: row.thread_id,
-            report_id: row.report_id,
-            last_tech_review_message_type: row.last_tech_review_message_type,
-        };
-
-        sync_one_project_tech_review_state(state, exit_reason, txn).await?;
-    }
-
-    Ok(())
-}
-
-pub async fn sync_detail_key_tech_review_state(
-    detail_keys: &[String],
-    exit_reason: TechReviewExitReason,
-    txn: &mut PgTransaction<'_>,
-) -> Result<(), ApiError> {
-    let detail_keys = detail_keys.iter().cloned().unique().collect::<Vec<_>>();
-
-    if detail_keys.is_empty() {
-        return Ok(());
-    }
-
-    let rows = sqlx::query!(
-        r#"
-        SELECT DISTINCT didws.project_id AS "project_id!: DBProjectId"
-        FROM delphi_issue_details_with_statuses didws
-        WHERE didws.key = ANY($1::text[])
-        "#,
-        &detail_keys,
-    )
-    .fetch_all(&mut *txn)
-    .await
-    .wrap_internal_err("failed to fetch projects affected by detail keys")?;
-
-    let project_ids = rows
-        .into_iter()
-        .map(|row| row.project_id)
-        .collect::<Vec<_>>();
-
-    sync_project_tech_review_state(&project_ids, exit_reason, txn).await
-}
-
-pub async fn sync_deleted_project_tech_review_exit(
-    project_id: DBProjectId,
-    txn: &mut PgTransaction<'_>,
-) -> Result<(), ApiError> {
-    let tech_review_message_types = tech_review_message_types();
-
-    let row = sqlx::query!(
-        r#"
-        SELECT
-            (
-                SELECT t.id
-                FROM threads t
-                WHERE t.mod_id = $1
-                ORDER BY t.id
-                LIMIT 1
-            ) AS "thread_id: DBThreadId",
-            (
-                SELECT tm.body->>'type'
-                FROM threads t
-                INNER JOIN threads_messages tm ON tm.thread_id = t.id
-                WHERE
-                    t.mod_id = $1
-                    AND tm.body->>'type' = ANY($2::text[])
-                ORDER BY tm.created DESC, tm.id DESC
-                LIMIT 1
-            ) AS "last_tech_review_message_type"
-        "#,
-        project_id as DBProjectId,
-        &tech_review_message_types,
-    )
-    .fetch_one(&mut *txn)
-    .await
-    .wrap_internal_err("failed to fetch deleted project tech review state")?;
-
-    if let Some(thread_id) = row.thread_id
-        && should_send_exit(row.last_tech_review_message_type.as_deref())
-    {
-        insert_exit_message(thread_id, TechReviewExitReason::FileDeleted, txn)
-            .await?;
-    }
-
-    Ok(())
-}
-
-async fn sync_one_project_tech_review_state(
-    state: ProjectTechReviewState,
-    exit_reason: TechReviewExitReason,
-    txn: &mut PgTransaction<'_>,
-) -> Result<(), ApiError> {
-    let has_review_detail = state.has_pending_detail || state.has_unsafe_detail;
-
-    if matches!(exit_reason, TechReviewExitReason::RulesChanged)
-        && !has_review_detail
-    {
-        remove_dummy_issue_details(state.project_id, txn).await?;
-
-        if let Some(thread_id) = state.thread_id
-            && should_send_exit(state.last_tech_review_message_type.as_deref())
-        {
-            insert_exit_message(thread_id, exit_reason, txn).await?;
-        }
-
-        return Ok(());
-    }
-
-    let needs_tech_review = has_review_detail || state.has_dummy;
-
-    if needs_tech_review {
-        if (state.has_pending_detail || state.has_unsafe_detail)
-            && !state.has_dummy
-            && let Some(report_id) = state.report_id
-        {
-            // TODO: Currently, the queue query determines whether a project is
-            // in tech review by checking whether it has any pending issue
-            // details. If all visible issue details are marked safe or unsafe
-            // before the final report is submitted, the project would otherwise
-            // leave the tech review queue without a final tech review verdict
-            // message.
-            //
-            // This should be replaced with explicit tech review state, such as
-            // an append-only project tech review event table where the latest
-            // enter/exit event is the current state. Until then, this dummy
-            // issue detail acts as the pending queue blocker.
-            ensure_dummy_issue_detail(report_id, txn).await?;
-        }
-
-        if let Some(thread_id) = state.thread_id
-            && state.last_tech_review_message_type.as_deref()
-                != Some(MessageBody::TechReviewEntered.as_ref())
-        {
-            ThreadMessageBuilder {
-                author_id: None,
-                body: MessageBody::TechReviewEntered,
-                thread_id,
-                hide_identity: false,
-            }
-            .insert(txn)
-            .await
-            .wrap_internal_err("failed to add entering tech review message")?;
-        }
-
-        return Ok(());
-    }
-
-    if matches!(exit_reason, TechReviewExitReason::Resolved)
-        && state.last_tech_review_message_type.as_deref()
-            == Some(MessageBody::TechReviewEntered.as_ref())
-    {
-        if let Some(report_id) = state.report_id {
-            ensure_dummy_issue_detail(report_id, txn).await?;
-        }
-
-        return Ok(());
-    }
-
-    if let Some(thread_id) = state.thread_id
-        && should_send_exit(state.last_tech_review_message_type.as_deref())
-    {
-        insert_exit_message(thread_id, exit_reason, txn).await?;
-    }
-
-    Ok(())
-}
-
-fn should_send_exit(last_tech_review_message_type: Option<&str>) -> bool {
-    matches!(last_tech_review_message_type, Some(message_type) if !matches!(
-        message_type,
-        message_type if message_type == MessageBody::TechReviewExited.as_ref()
-            || message_type == MessageBody::TechReviewExitFileDeleted.as_ref()
-            || message_type == tech_review_completed_message_type()
-    ))
-}
-
-async fn insert_exit_message(
-    thread_id: DBThreadId,
-    exit_reason: TechReviewExitReason,
-    txn: &mut PgTransaction<'_>,
-) -> Result<(), ApiError> {
-    let body = match exit_reason {
-        TechReviewExitReason::Resolved | TechReviewExitReason::RulesChanged => {
-            MessageBody::TechReviewExited
-        }
-        TechReviewExitReason::FileDeleted => {
-            MessageBody::TechReviewExitFileDeleted
-        }
-    };
-
-    ThreadMessageBuilder {
-        author_id: None,
-        body,
-        thread_id,
-        hide_identity: false,
-    }
-    .insert(txn)
-    .await
-    .wrap_internal_err("failed to add exiting tech review message")?;
-
-    Ok(())
-}
-
-async fn remove_dummy_issue_details(
-    project_id: DBProjectId,
-    txn: &mut PgTransaction<'_>,
-) -> Result<(), ApiError> {
-    sqlx::query!(
-        r#"
-        DELETE FROM delphi_report_issue_details detail
-        USING
-            delphi_report_issues issue,
-            delphi_reports report,
-            files file,
-            versions version
-        WHERE
-            detail.issue_id = issue.id
-            AND issue.issue_type = $2
-            AND issue.report_id = report.id
-            AND report.file_id = file.id
-            AND file.version_id = version.id
-            AND version.mod_id = $1
-        "#,
-        project_id as DBProjectId,
-        DUMMY_ISSUE_TYPE,
-    )
-    .execute(&mut *txn)
-    .await
-    .wrap_internal_err("failed to remove dummy Delphi issue details")?;
-
-    Ok(())
-}
-
-async fn ensure_dummy_issue_detail(
-    report_id: DelphiReportId,
-    txn: &mut PgTransaction<'_>,
-) -> Result<(), ApiError> {
-    sqlx::query!(
-        r#"
-        WITH dummy_issue AS (
-            INSERT INTO delphi_report_issues (report_id, issue_type)
-            VALUES ($1, $2)
-            ON CONFLICT (report_id, issue_type)
-            DO UPDATE SET issue_type = EXCLUDED.issue_type
-            RETURNING id
-        )
-        INSERT INTO delphi_report_issue_details (
-            issue_id,
-            key,
-            jar,
-            file_path,
-            decompiled_source,
-            data,
-            severity
-        )
-        SELECT
-            id,
-            '',
-            NULL,
-            '',
-            NULL,
-            '{}'::jsonb,
-            'low'::delphi_severity
-        FROM dummy_issue
-        WHERE NOT EXISTS (
-            SELECT 1
-            FROM delphi_report_issue_details drid
-            WHERE drid.issue_id = dummy_issue.id
-        )
-        "#,
-        report_id as DelphiReportId,
-        DUMMY_ISSUE_TYPE,
-    )
-    .execute(&mut *txn)
-    .await
-    .wrap_internal_err("failed to ensure dummy Delphi report issue detail")?;
-
-    Ok(())
-}
-
-fn tech_review_message_types() -> Vec<String> {
-    [
-        MessageBody::TechReviewEntered.as_ref(),
-        MessageBody::TechReviewExited.as_ref(),
-        MessageBody::TechReviewExitFileDeleted.as_ref(),
-        tech_review_completed_message_type(),
-    ]
-    .into_iter()
-    .map(|message_type| message_type.to_string())
-    .collect()
-}
-
-fn tech_review_completed_message_type() -> &'static str {
-    MessageBody::TechReview {
-        verdict: DelphiVerdict::Safe,
-    }
-    .as_ref()
-}
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review.rs b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
index 853d0b05fb..a43c40eb73 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
@@ -33,10 +33,7 @@ use crate::{
     queue::session::AuthQueue,
     routes::{
         ApiError,
-        internal::{
-            delphi::tech_review_sync::{self, TechReviewExitReason},
-            moderation::Ownership,
-        },
+        internal::{delphi::tech_review_queue, moderation::Ownership},
     },
     search::SearchState,
     util::error::Context,
@@ -318,7 +315,6 @@ pub async fn get_report(
                         ON didws.issue_id = severity_issue.id
                     WHERE
                         severity_issue.report_id = dr.id
-                        AND severity_issue.issue_type != '__dummy'
                         AND NOT didws.hidden
                 ), 'low'::delphi_severity),
                 -- TODO: replace with `json_array` in Postgres 16
@@ -352,8 +348,6 @@ pub async fn get_report(
 					FROM delphi_report_issues dri
 					WHERE
                         dri.report_id = dr.id
-                        -- see delphi.rs todo comment
-                        AND dri.issue_type != '__dummy'
                         AND EXISTS (
                             SELECT 1
                             FROM delphi_issue_details_with_statuses visible_detail
@@ -655,10 +649,6 @@ async fn fetch_project_reports(
                     let mut file_issues = Vec::new();
 
                     for issue_row in report_issues {
-                        if issue_row.issue_type == "__dummy" {
-                            continue;
-                        }
-
                         let issue_details = details_by_issue
                             .get(&issue_row.id)
                             .unwrap_or(&empty_details);
@@ -770,13 +760,15 @@ pub async fn search_projects(
             m.id AS "project_id: DBProjectId",
             MIN(t.id) AS "thread_id!: DBThreadId"
         FROM mods m
+        INNER JOIN delphi_tech_review_queue trq ON trq.project_id = m.id
         INNER JOIN threads t ON t.mod_id = m.id
-        INNER JOIN versions v ON v.mod_id = m.id
-        INNER JOIN files f ON f.version_id = v.id
-        INNER JOIN delphi_reports dr ON dr.file_id = f.id
-        INNER JOIN delphi_report_issues dri ON dri.report_id = dr.id
-        INNER JOIN delphi_issue_details_with_statuses didws
+        LEFT JOIN versions v ON v.mod_id = m.id
+        LEFT JOIN files f ON f.version_id = v.id
+        LEFT JOIN delphi_reports dr ON dr.file_id = f.id
+        LEFT JOIN delphi_report_issues dri ON dri.report_id = dr.id
+        LEFT JOIN delphi_issue_details_with_statuses didws
             ON didws.issue_id = dri.id
+            AND NOT didws.hidden
         LEFT JOIN threads_messages tm_last
             ON tm_last.thread_id = t.id
             AND tm_last.id = (
@@ -820,9 +812,25 @@ pub async fn search_projects(
             )
             AND m.status NOT IN ('draft', 'rejected', 'withheld')
             AND (cardinality($6::text[]) = 0 OR m.status = ANY($6::text[]))
-            AND (cardinality($7::text[]) = 0 OR dri.issue_type = ANY($7::text[]))
-            AND didws.status = 'pending'
-            AND NOT didws.hidden
+            AND (
+                cardinality($7::text[]) = 0
+                OR EXISTS (
+                    SELECT 1
+                    FROM versions issue_version
+                    INNER JOIN files issue_file
+                        ON issue_file.version_id = issue_version.id
+                    INNER JOIN delphi_reports issue_report
+                        ON issue_report.file_id = issue_file.id
+                    INNER JOIN delphi_report_issues issue
+                        ON issue.report_id = issue_report.id
+                    INNER JOIN delphi_issue_details_with_statuses detail
+                        ON detail.issue_id = issue.id
+                    WHERE
+                        issue_version.mod_id = m.id
+                        AND issue.issue_type = ANY($7::text[])
+                        AND NOT detail.hidden
+                )
+            )
             AND (
                 $5::text IS NULL
                 OR ($5::text = 'unreplied' AND (tm_last.id IS NULL OR u_last.role IS NULL OR u_last.role NOT IN ('moderator', 'admin')))
@@ -832,8 +840,8 @@ pub async fn search_projects(
         ORDER BY
             CASE WHEN $3 = 'created_asc'   THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END ASC,
             CASE WHEN $3 = 'created_desc'  THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END DESC,
-            CASE WHEN $3 = 'severity_asc'  THEN MAX(didws.severity) ELSE 'low'::delphi_severity END ASC,
-            CASE WHEN $3 = 'severity_desc' THEN MAX(didws.severity) ELSE 'low'::delphi_severity END DESC,
+            CASE WHEN $3 = 'severity_asc'  THEN COALESCE(MAX(didws.severity), 'low'::delphi_severity) ELSE 'low'::delphi_severity END ASC,
+            CASE WHEN $3 = 'severity_desc' THEN COALESCE(MAX(didws.severity), 'low'::delphi_severity) ELSE 'low'::delphi_severity END DESC,
             -- tie-breaker: oldest reports
             MIN(dr.created) ASC
         LIMIT $1 OFFSET $2
@@ -1079,8 +1087,6 @@ pub async fn submit_report(
             m.id = $1
             AND didws.status = 'pending'
             AND NOT didws.hidden
-            -- see delphi.rs todo comment
-            AND dri.issue_type != '__dummy'
         "#,
         project_id as _,
     )
@@ -1099,24 +1105,18 @@ pub async fn submit_report(
         });
     }
 
-    sqlx::query!(
-        "
-        DELETE FROM delphi_report_issue_details drid
-        WHERE issue_id IN (
-            SELECT dri.id
-            FROM mods m
-            INNER JOIN versions v ON v.mod_id = m.id
-            INNER JOIN files f ON f.version_id = v.id
-            INNER JOIN delphi_reports dr ON dr.file_id = f.id
-            INNER JOIN delphi_report_issues dri ON dri.report_id = dr.id
-            WHERE m.id = $1 AND dri.issue_type = '__dummy'
-        )
-        ",
-        project_id as _,
+    sqlx::query_scalar!(
+        r#"
+        DELETE FROM delphi_tech_review_queue
+        WHERE project_id = $1
+        RETURNING project_id AS "project_id: DBProjectId"
+        "#,
+        project_id as DBProjectId,
     )
-    .execute(&mut txn)
+    .fetch_optional(&mut txn)
     .await
-    .wrap_internal_err("failed to delete dummy issue")?;
+    .wrap_internal_err("failed to remove project from technical review queue")?
+    .ok_or(ApiError::NotFound)?;
 
     let record = sqlx::query!(
         r#"
@@ -1301,10 +1301,6 @@ pub async fn update_issue_details(
                 i.verdict
             FROM incoming i
             INNER JOIN delphi_issue_details_with_statuses didws ON didws.id = i.detail_id
-            INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
-            WHERE
-                -- see delphi.rs todo comment
-                dri.issue_type != '__dummy'
         ),
         validated AS (
             SELECT
@@ -1364,10 +1360,7 @@ pub async fn update_issue_details(
         r#"
         SELECT DISTINCT didws.project_id AS "project_id!: DBProjectId"
         FROM delphi_issue_details_with_statuses didws
-        INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
-        WHERE
-            didws.id = ANY($1::bigint[])
-            AND dri.issue_type != '__dummy'
+        WHERE didws.id = ANY($1::bigint[])
         "#,
         &detail_ids,
     )
@@ -1382,9 +1375,8 @@ pub async fn update_issue_details(
         .map(|row| row.project_id)
         .collect::<Vec<_>>();
 
-    tech_review_sync::sync_project_tech_review_state(
+    tech_review_queue::add_projects_with_review_details(
         &affected_project_ids,
-        TechReviewExitReason::Resolved,
         &mut txn,
     )
     .await?;
@@ -1492,9 +1484,25 @@ pub async fn update_global_issue_details(
     .await
     .wrap_internal_err("failed to update global issue details")?;
 
-    tech_review_sync::sync_detail_key_tech_review_state(
+    let affected_projects = sqlx::query!(
+        r#"
+        SELECT DISTINCT detail.project_id AS "project_id!: DBProjectId"
+        FROM delphi_issue_details_with_statuses detail
+        WHERE detail.key = ANY($1::text[])
+        "#,
         &detail_keys,
-        TechReviewExitReason::Resolved,
+    )
+    .fetch_all(&mut txn)
+    .await
+    .wrap_internal_err(
+        "failed to fetch projects affected by global detail updates",
+    )?;
+
+    tech_review_queue::add_projects_with_review_details(
+        &affected_projects
+            .into_iter()
+            .map(|row| row.project_id)
+            .collect::<Vec<_>>(),
         &mut txn,
     )
     .await?;
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs
index 09f47d3ea3..34ab60f7fc 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs
@@ -191,7 +191,6 @@ pub async fn search_global_issue_details(
             AND NOT didws.hidden
         LEFT JOIN delphi_report_issues dri
             ON dri.id = didws.issue_id
-            AND dri.issue_type != '__dummy'
         WHERE (
             $1::text IS NULL
             OR dgdv.detail_key ILIKE '%' || $1 || '%'
@@ -250,7 +249,6 @@ pub async fn search_global_issue_details(
             WHERE
                 didws.key = ANY($1::text[])
                 AND NOT didws.hidden
-                AND dri.issue_type != '__dummy'
         )
         SELECT
             detail_key AS "detail_key!",
@@ -372,7 +370,6 @@ pub async fn get_global_issue_detail(
             AND NOT didws.hidden
         LEFT JOIN delphi_report_issues dri
             ON dri.id = didws.issue_id
-            AND dri.issue_type != '__dummy'
         WHERE dgdv.detail_key = $1
         GROUP BY dgdv.detail_key, dgdv.verdict
         "#,
@@ -416,7 +413,6 @@ pub async fn get_global_issue_detail(
             didws.key = $1
             AND ($2::bigint IS NULL OR didws.id > $2)
             AND NOT didws.hidden
-            AND dri.issue_type != '__dummy'
         ORDER BY didws.id
         LIMIT $3
         "#,
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
index 00c2f4a91a..5c71eaa080 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -45,6 +45,7 @@ pub struct DelphiRule {
     pub id: i64,
     pub name: String,
     pub rule: String,
+    pub priority: i32,
     pub revision: i64,
     pub created_at: DateTime<Utc>,
     pub updated_at: DateTime<Utc>,
@@ -77,6 +78,8 @@ pub struct DelphiRuleAffectedDetail {
 pub struct WriteDelphiRule {
     pub name: String,
     pub rule: String,
+    #[serde(default)]
+    pub priority: i32,
 }
 
 #[derive(Debug, Deserialize, utoipa::ToSchema)]
@@ -112,6 +115,7 @@ pub struct DelphiRuleEffect {
 struct ValidatedRule {
     name: String,
     rule: String,
+    priority: i32,
 }
 
 impl WriteDelphiRule {
@@ -142,7 +146,11 @@ impl WriteDelphiRule {
             ApiError::Request(eyre!("invalid cel expression: {error}"))
         })?;
 
-        Ok(ValidatedRule { name, rule })
+        Ok(ValidatedRule {
+            name,
+            rule,
+            priority: self.priority,
+        })
     }
 }
 
@@ -265,6 +273,7 @@ pub async fn get_rules(
 			delphi_rule.id,
 			delphi_rule.name,
 			delphi_rule.rule,
+			delphi_rule.priority,
 			delphi_rule.revision,
 			delphi_rule.created_at,
 			delphi_rule.updated_at,
@@ -323,7 +332,10 @@ pub async fn get_rules(
 			LIMIT 3
 		) preview ON TRUE
 		WHERE NOT delphi_rule.delete_on_next_revision
-		ORDER BY delphi_rule.id, preview.detail_id DESC
+		ORDER BY
+			delphi_rule.priority DESC,
+			delphi_rule.id,
+			preview.detail_id DESC
 		"#,
     )
     .fetch_all(&***ro_pool)
@@ -340,6 +352,7 @@ pub async fn get_rules(
                 id: rule.id,
                 name: rule.name,
                 rule: rule.rule,
+                priority: rule.priority,
                 revision: rule.revision,
                 created_at: rule.created_at,
                 updated_at: rule.updated_at,
@@ -513,6 +526,7 @@ pub async fn create_rule(
 		INSERT INTO delphi_rules (
 			name,
 			rule,
+			priority,
 			revision,
 			created_by,
 			updated_by
@@ -520,14 +534,16 @@ pub async fn create_rule(
 		VALUES (
 			$1,
 			$2,
-			(SELECT revision + 1 FROM delphi_rule_revisions LIMIT 1),
 			$3,
-			$3
+			(SELECT revision + 1 FROM delphi_rule_revisions LIMIT 1),
+			$4,
+			$4
 		)
 		RETURNING
 			id,
 			name,
 			rule,
+			priority,
 			revision,
 			created_at,
 			updated_at,
@@ -536,6 +552,7 @@ pub async fn create_rule(
 		"#,
         rule.name,
         rule.rule,
+        rule.priority,
         user_id,
     )
     .fetch_one(&**pool)
@@ -546,6 +563,7 @@ pub async fn create_rule(
         id: rule.id,
         name: rule.name,
         rule: rule.rule,
+        priority: rule.priority,
         revision: rule.revision,
         created_at: rule.created_at,
         updated_at: rule.updated_at,
@@ -591,16 +609,18 @@ pub async fn update_rule(
 		SET
 			name = $2,
 			rule = $3,
+			priority = $4,
 			revision = (
 				SELECT revision + 1 FROM delphi_rule_revisions LIMIT 1
 			),
 			updated_at = CURRENT_TIMESTAMP,
-			updated_by = $4
+			updated_by = $5
 		WHERE id = $1 AND NOT delete_on_next_revision
 		RETURNING
 			id,
 			name,
 			rule,
+			priority,
 			revision,
 			created_at,
 			updated_at,
@@ -610,6 +630,7 @@ pub async fn update_rule(
         id,
         rule.name,
         rule.rule,
+        rule.priority,
         user_id,
     )
     .fetch_optional(&**pool)
@@ -621,6 +642,7 @@ pub async fn update_rule(
         id: rule.id,
         name: rule.name,
         rule: rule.rule,
+        priority: rule.priority,
         revision: rule.revision,
         created_at: rule.created_at,
         updated_at: rule.updated_at,
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
index c3f9d79d21..0594027df3 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -12,8 +12,8 @@ use tokio_stream::wrappers::UnboundedReceiverStream;
 use utoipa::{PartialSchema, ToSchema};
 
 use super::rules::DelphiRuleEffect;
-use crate::routes::internal::delphi::tech_review_sync::{
-    self, TechReviewExitReason,
+use crate::routes::internal::delphi::tech_review_queue::{
+    self, TechReviewRemovalReason,
 };
 use crate::{
     auth::check_is_moderator_from_headers,
@@ -32,8 +32,6 @@ use crate::{
 
 const RULE_SCAN_LOCK_ID: i64 = 0x6465_6c70_6869_7275;
 const PROGRESS_INTERVAL: usize = 50;
-const DUMMY_ISSUE_TYPE: &str = "__dummy";
-
 pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
     cfg.service(get_rule_schema)
         .service(get_detail_rule_input)
@@ -212,12 +210,9 @@ pub async fn get_detail_rule_input(
             FROM hashes
             WHERE hashes.file_id = file.id
         ) file_hashes ON TRUE
-        WHERE
-            detail.id = $1
-            AND issue.issue_type != $2
+        WHERE detail.id = $1
         "#,
             detail_id as DelphiReportIssueDetailsId,
-            DUMMY_ISSUE_TYPE,
         )
         .fetch_optional(&***ro_pool)
         .await,
@@ -384,11 +379,8 @@ async fn run_scan(
     let total = sqlx::query_scalar!(
         r#"
         SELECT COUNT(*) AS "count!"
-        FROM delphi_report_issue_details detail
-        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id
-        WHERE issue.issue_type != $1
+        FROM delphi_report_issue_details
         "#,
-        DUMMY_ISSUE_TYPE,
     )
     .fetch_one(&mut transaction)
     .await
@@ -423,10 +415,8 @@ async fn run_scan(
             FROM hashes
             GROUP BY file_id
         ) file_hashes ON file_hashes.file_id = file.id
-        WHERE issue.issue_type != $1
         ORDER BY detail.id
         "#,
-        DUMMY_ISSUE_TYPE,
     )
     .fetch(&mut transaction);
 
@@ -508,28 +498,25 @@ async fn run_scan(
                 detail.project_id,
                 BOOL_OR(
                     detail.status IN ('pending', 'unsafe')
-                    AND issue.issue_type != $2
                     AND NOT detail.hidden
                 ) AS old_needs_review,
                 BOOL_OR(
                     detail.status IN ('pending', 'unsafe')
-                    AND issue.issue_type != $2
                     AND NOT COALESCE(new_effect.hidden, FALSE)
                 ) AS new_needs_review
             FROM delphi_issue_details_with_statuses detail
-            INNER JOIN delphi_report_issues issue
-                ON issue.id = detail.issue_id
             LEFT JOIN delphi_rule_effects new_effect
                 ON new_effect.revision = $1
                 AND new_effect.detail_id = detail.id
             GROUP BY detail.project_id
         )
-        SELECT project_id AS "project_id!: DBProjectId"
+        SELECT
+            project_id AS "project_id!: DBProjectId",
+            new_needs_review AS "new_needs_review!"
         FROM project_membership
         WHERE old_needs_review IS DISTINCT FROM new_needs_review
         "#,
         revision,
-        DUMMY_ISSUE_TYPE,
     )
     .fetch_all(&mut transaction)
     .await
@@ -547,19 +534,25 @@ async fn run_scan(
         .await
         .wrap_err("failed to publish the delphi rule revision")?;
 
-    tech_review_sync::sync_project_tech_review_state(
+    tech_review_queue::add_projects(
         &affected_projects
             .iter()
+            .filter(|project| project.new_needs_review)
             .map(|project| project.project_id)
             .collect::<Vec<_>>(),
-        TechReviewExitReason::RulesChanged,
         &mut transaction,
     )
-    .await
-    .map_err(|error| {
-        eyre!(error)
-            .wrap_err("failed to sync projects affected by delphi rule changes")
-    })?;
+    .await?;
+    tech_review_queue::remove_projects(
+        &affected_projects
+            .iter()
+            .filter(|project| !project.new_needs_review)
+            .map(|project| project.project_id)
+            .collect::<Vec<_>>(),
+        TechReviewRemovalReason::RulesChanged,
+        &mut transaction,
+    )
+    .await?;
 
     sqlx::query!(
         "DELETE FROM delphi_rule_effects WHERE revision <> $1",
@@ -634,13 +627,10 @@ pub(crate) async fn materialize_current_rule_effects(
             FROM hashes
             WHERE hashes.file_id = file.id
         ) file_hashes ON TRUE
-        WHERE
-            detail.id = ANY($1::bigint[])
-            AND issue.issue_type != $2
+        WHERE detail.id = ANY($1::bigint[])
         ORDER BY detail.id
         "#,
         &detail_ids.iter().map(|id| id.0).collect::<Vec<_>>(),
-        DUMMY_ISSUE_TYPE,
     )
     .fetch_all(&mut *transaction)
     .await
@@ -702,7 +692,7 @@ async fn fetch_compiled_rules(
         SELECT id, rule
         FROM delphi_rules
         WHERE NOT delete_on_next_revision
-        ORDER BY id
+        ORDER BY priority DESC, id
         "#,
     )
     .fetch_all(&mut *transaction)
diff --git a/apps/labrinth/src/routes/v3/projects.rs b/apps/labrinth/src/routes/v3/projects.rs
index 578cd74e3f..7fe539fc98 100644
--- a/apps/labrinth/src/routes/v3/projects.rs
+++ b/apps/labrinth/src/routes/v3/projects.rs
@@ -2746,8 +2746,9 @@ pub async fn project_delete_internal(
         .begin()
         .await
         .wrap_internal_err("failed to start transaction")?;
-    delphi::tech_review_sync::sync_deleted_project_tech_review_exit(
-        project.inner.id,
+    delphi::tech_review_queue::remove_projects(
+        &[project.inner.id],
+        delphi::tech_review_queue::TechReviewRemovalReason::FileDeleted,
         &mut transaction,
     )
     .await?;
diff --git a/apps/labrinth/src/routes/v3/version_file.rs b/apps/labrinth/src/routes/v3/version_file.rs
index ad206ab352..045c924136 100644
--- a/apps/labrinth/src/routes/v3/version_file.rs
+++ b/apps/labrinth/src/routes/v3/version_file.rs
@@ -934,9 +934,9 @@ pub async fn delete_file(
         database::models::version_item::cleanup_unused_attribution_files_and_groups(&mut transaction)
             .await?;
 
-        delphi::tech_review_sync::sync_project_tech_review_state(
+        delphi::tech_review_queue::remove_projects_without_details(
             &[row.project_id],
-            delphi::tech_review_sync::TechReviewExitReason::FileDeleted,
+            delphi::tech_review_queue::TechReviewRemovalReason::FileDeleted,
             &mut transaction,
         )
         .await?;
diff --git a/apps/labrinth/src/routes/v3/versions.rs b/apps/labrinth/src/routes/v3/versions.rs
index 9d4f33e602..5dd7b51299 100644
--- a/apps/labrinth/src/routes/v3/versions.rs
+++ b/apps/labrinth/src/routes/v3/versions.rs
@@ -1237,9 +1237,9 @@ pub async fn version_delete(
     )
     .await?;
 
-    delphi::tech_review_sync::sync_project_tech_review_state(
+    delphi::tech_review_queue::remove_projects_without_details(
         &[version.inner.project_id],
-        delphi::tech_review_sync::TechReviewExitReason::FileDeleted,
+        delphi::tech_review_queue::TechReviewRemovalReason::FileDeleted,
         &mut transaction,
     )
     .await?;
diff --git a/packages/api-client/src/modules/labrinth/types.ts b/packages/api-client/src/modules/labrinth/types.ts
index 3089099050..ddb1743be5 100644
--- a/packages/api-client/src/modules/labrinth/types.ts
+++ b/packages/api-client/src/modules/labrinth/types.ts
@@ -2230,6 +2230,7 @@ export namespace Labrinth {
 				id: number
 				name: string
 				rule: string
+				priority: number
 				revision: number
 				created_at: string
 				updated_at: string
@@ -2260,6 +2261,7 @@ export namespace Labrinth {
 			export type WriteDelphiRule = {
 				name: string
 				rule: string
+				priority: number
 			}
 
 			export type TestDelphiRuleTrace = {

From 36d3aab0de2e23c97db47e4130cc6eebcbc7e8e9 Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Sun, 26 Jul 2026 15:26:02 +0100
Subject: [PATCH 09/16] fmt

---
 .cargo/config.toml          | 2 +-
 Cargo.toml                  | 2 +-
 apps/app/Cargo.toml         | 4 ++--
 apps/labrinth/Cargo.toml    | 2 +-
 packages/app-lib/Cargo.toml | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.cargo/config.toml b/.cargo/config.toml
index bdeac036f2..d4ed40327b 100644
--- a/.cargo/config.toml
+++ b/.cargo/config.toml
@@ -1,5 +1,5 @@
 # Windows has stack overflows when calling from Tauri, so we increase the default stack size used by the compiler
-[target.'cfg(windows)']
+[target."cfg(windows)"]
 rustflags = ["-C", "link-args=/STACK:16777220"]
 
 [target.x86_64-pc-windows-msvc]
diff --git a/Cargo.toml b/Cargo.toml
index 36c7739257..ddde71df9f 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -57,8 +57,8 @@ bitflags = "2.9.4"
 bon = "3.9.3"
 bytemuck = "1.24.0"
 bytes = "1.10.1"
-censor = "0.3.0"
 cel = { version = "0.14.0", default-features = false, features = ["json"] }
+censor = "0.3.0"
 chardetng = "0.1.17"
 chrono = "0.4.42"
 cidre = { version = "0.15.0", default-features = false, features = [
diff --git a/apps/app/Cargo.toml b/apps/app/Cargo.toml
index 77a2b5368d..a5209f5c50 100644
--- a/apps/app/Cargo.toml
+++ b/apps/app/Cargo.toml
@@ -55,11 +55,11 @@ core-foundation.workspace = true
 core-graphics.workspace = true
 objc2-app-kit = { workspace = true, features = ["NSWindow"] }
 
-[target.'cfg(windows)'.dependencies]
+[target."cfg(windows)".dependencies]
 webview2-com.workspace = true
 windows-core.workspace = true
 
-[target.'cfg(windows)'.dependencies.windows]
+[target."cfg(windows)".dependencies.windows]
 workspace = true
 features = [
   "Win32_Foundation",
diff --git a/apps/labrinth/Cargo.toml b/apps/labrinth/Cargo.toml
index 1f431c4a1c..84985ffcdc 100644
--- a/apps/labrinth/Cargo.toml
+++ b/apps/labrinth/Cargo.toml
@@ -33,8 +33,8 @@ aws-sdk-s3 = { workspace = true }
 base64 = { workspace = true }
 bitflags = { workspace = true }
 bytes = { workspace = true }
-censor = { workspace = true }
 cel = { workspace = true }
+censor = { workspace = true }
 chrono = { workspace = true, features = ["serde"] }
 clap = { workspace = true, features = ["derive"] }
 clickhouse = { workspace = true, features = ["time", "uuid"] }
diff --git a/packages/app-lib/Cargo.toml b/packages/app-lib/Cargo.toml
index 71eaa5de1e..2ddccf999d 100644
--- a/packages/app-lib/Cargo.toml
+++ b/packages/app-lib/Cargo.toml
@@ -121,7 +121,7 @@ dunce = { workspace = true }
 [target.'cfg(target_os = "macos")'.dependencies]
 cidre = { workspace = true, features = ["blocks", "nw"] }
 
-[target.'cfg(windows)'.dependencies]
+[target."cfg(windows)".dependencies]
 windows = { workspace = true, features = ["Networking_Connectivity"] }
 windows-core = { workspace = true }
 winreg = { workspace = true }

From 4c5e1074fdf2db243b9ae5beede176782a1ce849 Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Sun, 26 Jul 2026 15:36:41 +0100
Subject: [PATCH 10/16] fix

---
 ...98aefed70d9a61610fc7f4f1c8f291706fa4a.json |  29 ---
 ...ae110b88a9cc05985c6cddc325ab913c9731a.json |  20 ++
 ...82bfe8c43582acd17e726616da863e35742c5.json |  28 +++
 ...64f884d1941120499ba076c7393c942131848.json |  14 ++
 ...dc2392729f99ba1f8c7892831235f341fb276.json |  34 ----
 ...acfcd223bd67f6d5ba95868ace4373a98c67d.json | 100 ++++++++++
 ...6e41587c64e2e1c48afe9e68ef42ce7f9358.json} |  19 +-
 ...48f97f334779cd871caa93a6de25c6c871e61.json |  12 ++
 ...fd08431fc3f984263faed7aaeb311fa6ac2a9.json |  28 ---
 ...e6eccc43bf85a44c5ba72020887af8ed98f78.json |  28 +++
 ...4b8f63dcf79a2d02dcfeac9655d89bdb2750e.json |  22 ++
 ...691117412407c4225f966c013fdfef21a82fb.json | 104 ++++++++++
 ...15af8dbb2a85db0affc67eac74cfb48fbaa3e.json |  20 ++
 ...7fb02b2a67253c543ce146cf2cf190010a06.json} |   4 +-
 ...167f1525cdea2ace9e6165e5c5f596cbd9fb3.json |  22 --
 ...8771f211fc82c2e8dc67fdd36a38d45b9f16.json} |   4 +-
 ...fdc2ba5455d2213e06bc3e273f250ef97a525.json |  22 ++
 ...f73135491f170e3d619a93144b36ef429705.json} |   4 +-
 ...b7d3faa88dad9575cdf30ae8aa9e7721879f.json} |  19 +-
 ...7137bc64408856543ca32091bab0ecc91d819.json |  34 ++++
 ...c28f86cdd77cd06bbb10c9a8e5199509f9c4b.json | 135 -------------
 ...3f472fceb6ee0e120b511c1ed64cb200e0e9c.json |  12 ++
 ...c0eef45ebaa301f2ae14de4d5f3dcbd65cbb.json} |   4 +-
 ...2dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json |  62 ------
 ...0304333536768527525a43bdd45aedffa3c4f.json |  22 ++
 ...eb68f2617f6f57a31edda36c2f861e7da7f7.json} |   6 +-
 ...2beda18c30564fc90e5213e5237f505504558.json |  29 +++
 ...64e270b7b9f3f8041c5feffa43449f4d5251a.json |  20 ++
 ...fc3223f66e83a2b5f6efbf10eec3a927f31b2.json |  12 ++
 ...e989332725543e1d3b11415502dc8521b724d.json |  22 ++
 ...5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json | 106 ++++++++++
 ...f03642603c79db754d0530a9c6f2f7d9c32b7.json |  28 +++
 ...ea9eb742e7365dd3c93479a9d7a5b6283c9b1.json | 188 ++++++++++++++++++
 ...e2326fde91ed9762ad05ee0acda7fdf0245b5.json |  26 +++
 ...45c1fa3af3a899b232482aab9cc44b9336063.json |  14 --
 ...39476ecf08549b914f96f0c23fbfbe3f17f2e.json |  20 --
 ...3e70c2fc4456864b9f375debcc266bd658d1d.json | 138 +++++++++++++
 ...60ebdae8d60a6d555a625ee2ec5780ab78fc3.json |  22 ++
 ...d3c779b1a052c82797b771e8fc9e38169475.json} |   4 +-
 ...afa32576d95e5861cc857276e099b18a5e1f4.json |  14 ++
 ...33f2bacc2555433277ee195ed6fbedb7be537.json |  20 ++
 ...1991b5b114e1b793210f1d31e0144c2138b9.json} |   4 +-
 ...e6c96fe5a33015ba94bc2c606c31f87af9c9.json} |   4 +-
 ...8501addc8f203a0a152346aaebd32db52be30.json |  60 ------
 ...0090ceb2292526e7e9ad5d54c51e8d732638.json} |   4 +-
 ...51d55a61c2b6466db69a81be975e150b3ef41.json | 138 -------------
 ...9a1fcf8991fe53044d79e37f357dd530e3530.json | 135 +++++++++++++
 ...16df646df14ec647f7f2017d59fe786b9ad5b.json |  28 +++
 ...88c8f1ad2f0fca12655a3cc257a8cb5a784d.json} |   4 +-
 ...c0349636abea5b21faf5fc18d9f69fd21db1d.json |  22 --
 ...32ad27e5a0dd128af9273d1d6179e60f9ea0b.json |  12 ++
 ...7a3ef1f18f4814df8924926c47d4b0c7145c7.json |  29 ---
 ...ece6727b6633053e1fc8b00e48cd539073f7.json} |   4 +-
 ...07c8befb4cdaa728a167bd2586898875836c1.json |  22 ++
 ...667f7e638d7e487c09c86857d316fca40813b.json | 130 ++++++++++++
 ...2fb5a46f2ab5121a42b00ee8c0498b2871d58.json |  37 ++++
 ...2ecd1856bde7aa4be6e366c98cef1321a7279.json |  15 --
 .../internal/moderation/tech_review/rules.rs  |   2 +-
 .../moderation/tech_review/rules_scan.rs      |   2 +-
 59 files changed, 1478 insertions(+), 645 deletions(-)
 delete mode 100644 apps/labrinth/.sqlx/query-080e2f0068c0c1c248dcfacf39798aefed70d9a61610fc7f4f1c8f291706fa4a.json
 create mode 100644 apps/labrinth/.sqlx/query-0a541871989f0139a7f6f52e8cbae110b88a9cc05985c6cddc325ab913c9731a.json
 create mode 100644 apps/labrinth/.sqlx/query-0b94bdb7bf42fdfd0fb1b015fe582bfe8c43582acd17e726616da863e35742c5.json
 create mode 100644 apps/labrinth/.sqlx/query-1697315d3414e911c9be30fa16164f884d1941120499ba076c7393c942131848.json
 delete mode 100644 apps/labrinth/.sqlx/query-1a6d4ac11af078439cff5c772f4dc2392729f99ba1f8c7892831235f341fb276.json
 create mode 100644 apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json
 rename apps/labrinth/.sqlx/{query-e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a.json => query-2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358.json} (65%)
 create mode 100644 apps/labrinth/.sqlx/query-20a88febcaf673264ff7f00a11848f97f334779cd871caa93a6de25c6c871e61.json
 delete mode 100644 apps/labrinth/.sqlx/query-22fbd4bf1c2088903842b2c0070fd08431fc3f984263faed7aaeb311fa6ac2a9.json
 create mode 100644 apps/labrinth/.sqlx/query-262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78.json
 create mode 100644 apps/labrinth/.sqlx/query-285c66152a506e79c3c8996b4f44b8f63dcf79a2d02dcfeac9655d89bdb2750e.json
 create mode 100644 apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json
 create mode 100644 apps/labrinth/.sqlx/query-42579ab8ccb58b9b2553787327115af8dbb2a85db0affc67eac74cfb48fbaa3e.json
 rename apps/labrinth/.sqlx/{query-c3598ed9f64f7151b83d47a15fabfdcf015bda1b3c0a7f2358c7f284feb532c3.json => query-436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06.json} (76%)
 delete mode 100644 apps/labrinth/.sqlx/query-48dfc2f2bcf8917f110b7b2b142167f1525cdea2ace9e6165e5c5f596cbd9fb3.json
 rename apps/labrinth/.sqlx/{query-1bff1c5714dd039814d7a9d9f25f4ceca0e84a42b3a4c414210739fec6308e2d.json => query-4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16.json} (65%)
 create mode 100644 apps/labrinth/.sqlx/query-4e30093d30c2ee3c39e6e3f2d9ffdc2ba5455d2213e06bc3e273f250ef97a525.json
 rename apps/labrinth/.sqlx/{query-cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9.json => query-50a5f3a116ebe5cf88452a9aac89f73135491f170e3d619a93144b36ef429705.json} (53%)
 rename apps/labrinth/.sqlx/{query-f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9.json => query-5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f.json} (65%)
 create mode 100644 apps/labrinth/.sqlx/query-54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819.json
 delete mode 100644 apps/labrinth/.sqlx/query-5a68c53bd00c08edf9dfb9ffdabc28f86cdd77cd06bbb10c9a8e5199509f9c4b.json
 create mode 100644 apps/labrinth/.sqlx/query-62d548639ed397f3619a8c3a4503f472fceb6ee0e120b511c1ed64cb200e0e9c.json
 rename apps/labrinth/.sqlx/{query-63a9a89443566baa880ddbe05f741e2a83b50d89f5954ab8d951a090e702de73.json => query-63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb.json} (93%)
 delete mode 100644 apps/labrinth/.sqlx/query-64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json
 create mode 100644 apps/labrinth/.sqlx/query-6776dc50f184188756ad7fe263b0304333536768527525a43bdd45aedffa3c4f.json
 rename apps/labrinth/.sqlx/{query-ba7585f55df2a4596caae265ac956eb23268f26aef664234b898b17d13c09f91.json => query-6fa83172261e64445f2fa18d2c98eb68f2617f6f57a31edda36c2f861e7da7f7.json} (70%)
 create mode 100644 apps/labrinth/.sqlx/query-73e3646a21e4acb1299f0b183b92beda18c30564fc90e5213e5237f505504558.json
 create mode 100644 apps/labrinth/.sqlx/query-8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a.json
 create mode 100644 apps/labrinth/.sqlx/query-820810b83ce47f32bf5b0dc20e5fc3223f66e83a2b5f6efbf10eec3a927f31b2.json
 create mode 100644 apps/labrinth/.sqlx/query-86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d.json
 create mode 100644 apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json
 create mode 100644 apps/labrinth/.sqlx/query-89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7.json
 create mode 100644 apps/labrinth/.sqlx/query-8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1.json
 create mode 100644 apps/labrinth/.sqlx/query-9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5.json
 delete mode 100644 apps/labrinth/.sqlx/query-9ab1f07c2968b5d445752c1480345c1fa3af3a899b232482aab9cc44b9336063.json
 delete mode 100644 apps/labrinth/.sqlx/query-9b0edb6399bc5f38ee96677cb2539476ecf08549b914f96f0c23fbfbe3f17f2e.json
 create mode 100644 apps/labrinth/.sqlx/query-9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d.json
 create mode 100644 apps/labrinth/.sqlx/query-a1f38a33cc3159108dd7deda48a60ebdae8d60a6d555a625ee2ec5780ab78fc3.json
 rename apps/labrinth/.sqlx/{query-055f71ec6d193c5f5259cafc989a04f3f791205e6c2df15c5bf9d5afcf71a76a.json => query-a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475.json} (96%)
 create mode 100644 apps/labrinth/.sqlx/query-ab87c1771628979a051e4b30cd6afa32576d95e5861cc857276e099b18a5e1f4.json
 create mode 100644 apps/labrinth/.sqlx/query-abef4603febf18dae62ca424b0433f2bacc2555433277ee195ed6fbedb7be537.json
 rename apps/labrinth/.sqlx/{query-5e5fcfa6ac68f296ba5238e8211f8e206473f11fe1796fc2feda15f8d0ee7f41.json => query-b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9.json} (77%)
 rename apps/labrinth/.sqlx/{query-7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79.json => query-b5233d5b729fae87fdf24e7d5f9ee6c96fe5a33015ba94bc2c606c31f87af9c9.json} (51%)
 delete mode 100644 apps/labrinth/.sqlx/query-bb94018c84f3809b9ad89f35ff08501addc8f203a0a152346aaebd32db52be30.json
 rename apps/labrinth/.sqlx/{query-52ef6d02f8d533fc4e4ceb141d07a2eb115dc88da24735fffeca3eb1c269ad53.json => query-c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638.json} (76%)
 delete mode 100644 apps/labrinth/.sqlx/query-ca8493b59004511e8d26200638951d55a61c2b6466db69a81be975e150b3ef41.json
 create mode 100644 apps/labrinth/.sqlx/query-cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530.json
 create mode 100644 apps/labrinth/.sqlx/query-d4d04f7cfd6efa582970ec0636f16df646df14ec647f7f2017d59fe786b9ad5b.json
 rename apps/labrinth/.sqlx/{query-4680c4a59c6679f90e3b9e1a33ed1cb1fb60b93ffb79ba5b99e01ee0c14c991a.json => query-e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d.json} (71%)
 delete mode 100644 apps/labrinth/.sqlx/query-e3c356bd41074ba4b3474dfab5cc0349636abea5b21faf5fc18d9f69fd21db1d.json
 create mode 100644 apps/labrinth/.sqlx/query-e67fda05dacea7a0b6290e8b69932ad27e5a0dd128af9273d1d6179e60f9ea0b.json
 delete mode 100644 apps/labrinth/.sqlx/query-e8b6e423aaf62046afd19fb1e177a3ef1f18f4814df8924926c47d4b0c7145c7.json
 rename apps/labrinth/.sqlx/{query-87d30e8802ebe69858141d0d918cafb5286f984cfe55ad1a7ac2219ec50539a4.json => query-ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7.json} (79%)
 create mode 100644 apps/labrinth/.sqlx/query-f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1.json
 create mode 100644 apps/labrinth/.sqlx/query-f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b.json
 create mode 100644 apps/labrinth/.sqlx/query-f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58.json
 delete mode 100644 apps/labrinth/.sqlx/query-fc6c20348de487e4039ee7d53212ecd1856bde7aa4be6e366c98cef1321a7279.json

diff --git a/apps/labrinth/.sqlx/query-080e2f0068c0c1c248dcfacf39798aefed70d9a61610fc7f4f1c8f291706fa4a.json b/apps/labrinth/.sqlx/query-080e2f0068c0c1c248dcfacf39798aefed70d9a61610fc7f4f1c8f291706fa4a.json
deleted file mode 100644
index a80d2649ca..0000000000
--- a/apps/labrinth/.sqlx/query-080e2f0068c0c1c248dcfacf39798aefed70d9a61610fc7f4f1c8f291706fa4a.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            (\n                SELECT t.id\n                FROM threads t\n                WHERE t.mod_id = $1\n                ORDER BY t.id\n                LIMIT 1\n            ) AS \"thread_id: DBThreadId\",\n            (\n                SELECT tm.body->>'type'\n                FROM threads t\n                INNER JOIN threads_messages tm ON tm.thread_id = t.id\n                WHERE\n                    t.mod_id = $1\n                    AND tm.body->>'type' = ANY($2::text[])\n                ORDER BY tm.created DESC, tm.id DESC\n                LIMIT 1\n            ) AS \"last_tech_review_message_type\"\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "thread_id: DBThreadId",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "last_tech_review_message_type",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "TextArray"
-      ]
-    },
-    "nullable": [
-      null,
-      null
-    ]
-  },
-  "hash": "080e2f0068c0c1c248dcfacf39798aefed70d9a61610fc7f4f1c8f291706fa4a"
-}
diff --git a/apps/labrinth/.sqlx/query-0a541871989f0139a7f6f52e8cbae110b88a9cc05985c6cddc325ab913c9731a.json b/apps/labrinth/.sqlx/query-0a541871989f0139a7f6f52e8cbae110b88a9cc05985c6cddc325ab913c9731a.json
new file mode 100644
index 0000000000..20e84c3874
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-0a541871989f0139a7f6f52e8cbae110b88a9cc05985c6cddc325ab913c9731a.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT revision FROM delphi_rule_revisions LIMIT 1 FOR UPDATE",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "revision",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "0a541871989f0139a7f6f52e8cbae110b88a9cc05985c6cddc325ab913c9731a"
+}
diff --git a/apps/labrinth/.sqlx/query-0b94bdb7bf42fdfd0fb1b015fe582bfe8c43582acd17e726616da863e35742c5.json b/apps/labrinth/.sqlx/query-0b94bdb7bf42fdfd0fb1b015fe582bfe8c43582acd17e726616da863e35742c5.json
new file mode 100644
index 0000000000..3263182843
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-0b94bdb7bf42fdfd0fb1b015fe582bfe8c43582acd17e726616da863e35742c5.json
@@ -0,0 +1,28 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        WITH inserted AS (\n            INSERT INTO delphi_tech_review_queue (project_id)\n            SELECT unnest($1::bigint[])\n            ON CONFLICT (project_id) DO NOTHING\n            RETURNING project_id\n        )\n        SELECT\n            inserted.project_id AS \"project_id!: DBProjectId\",\n            (\n                SELECT thread.id\n                FROM threads thread\n                WHERE thread.mod_id = inserted.project_id\n                ORDER BY thread.id\n                LIMIT 1\n            ) AS \"thread_id!: DBThreadId\"\n        FROM inserted\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id!: DBProjectId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "thread_id!: DBThreadId",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8Array"
+      ]
+    },
+    "nullable": [
+      false,
+      null
+    ]
+  },
+  "hash": "0b94bdb7bf42fdfd0fb1b015fe582bfe8c43582acd17e726616da863e35742c5"
+}
diff --git a/apps/labrinth/.sqlx/query-1697315d3414e911c9be30fa16164f884d1941120499ba076c7393c942131848.json b/apps/labrinth/.sqlx/query-1697315d3414e911c9be30fa16164f884d1941120499ba076c7393c942131848.json
new file mode 100644
index 0000000000..f643ed3d22
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-1697315d3414e911c9be30fa16164f884d1941120499ba076c7393c942131848.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE delphi_rules SET revision = $1 WHERE NOT delete_on_next_revision",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "1697315d3414e911c9be30fa16164f884d1941120499ba076c7393c942131848"
+}
diff --git a/apps/labrinth/.sqlx/query-1a6d4ac11af078439cff5c772f4dc2392729f99ba1f8c7892831235f341fb276.json b/apps/labrinth/.sqlx/query-1a6d4ac11af078439cff5c772f4dc2392729f99ba1f8c7892831235f341fb276.json
deleted file mode 100644
index 4db30b1153..0000000000
--- a/apps/labrinth/.sqlx/query-1a6d4ac11af078439cff5c772f4dc2392729f99ba1f8c7892831235f341fb276.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            m.id AS \"project_id: DBProjectId\",\n            MIN(t.id) AS \"thread_id!: DBThreadId\"\n        FROM mods m\n        INNER JOIN threads t ON t.mod_id = m.id\n        INNER JOIN versions v ON v.mod_id = m.id\n        INNER JOIN files f ON f.version_id = v.id\n        INNER JOIN delphi_reports dr ON dr.file_id = f.id\n        INNER JOIN delphi_report_issues dri ON dri.report_id = dr.id\n        INNER JOIN delphi_issue_details_with_statuses didws\n            ON didws.issue_id = dri.id\n        LEFT JOIN threads_messages tm_last\n            ON tm_last.thread_id = t.id\n            AND tm_last.id = (\n                SELECT id FROM threads_messages\n                WHERE thread_id = t.id\n                ORDER BY created DESC\n                LIMIT 1\n            )\n        LEFT JOIN users u_last\n            ON u_last.id = tm_last.author_id\n        WHERE\n            (\n                cardinality($4::text[]) = 0\n                OR (\n                    'minecraft_java_server' = ANY($4::text[])\n                    AND (\n                        m.components ? 'minecraft_server'\n                        OR m.components ? 'minecraft_java_server'\n                    )\n                )\n                OR EXISTS (\n                    SELECT 1\n                    FROM versions type_v\n                    INNER JOIN loaders_versions type_lv\n                        ON type_lv.version_id = type_v.id\n                    INNER JOIN loaders_project_types type_lpt\n                        ON type_lpt.joining_loader_id = type_lv.loader_id\n                    INNER JOIN project_types type_pt\n                        ON type_pt.id = type_lpt.joining_project_type_id\n                    WHERE\n                        type_v.mod_id = m.id\n                        AND type_pt.name = ANY($4::text[])\n                        AND (\n                            type_pt.name != 'modpack'\n                            OR NOT (\n                                m.components ? 'minecraft_server'\n                                OR m.components ? 'minecraft_java_server'\n                            )\n                        )\n                )\n            )\n            AND m.status NOT IN ('draft', 'rejected', 'withheld')\n            AND (cardinality($6::text[]) = 0 OR m.status = ANY($6::text[]))\n            AND (cardinality($7::text[]) = 0 OR dri.issue_type = ANY($7::text[]))\n            AND didws.status = 'pending'\n            AND (\n                $5::text IS NULL\n                OR ($5::text = 'unreplied' AND (tm_last.id IS NULL OR u_last.role IS NULL OR u_last.role NOT IN ('moderator', 'admin')))\n                OR ($5::text = 'replied' AND tm_last.id IS NOT NULL AND u_last.role IS NOT NULL AND u_last.role IN ('moderator', 'admin'))\n            )\n        GROUP BY m.id\n        ORDER BY\n            CASE WHEN $3 = 'created_asc'   THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END ASC,\n            CASE WHEN $3 = 'created_desc'  THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END DESC,\n            CASE WHEN $3 = 'severity_asc'  THEN MAX(dr.severity) ELSE 'low'::delphi_severity END ASC,\n            CASE WHEN $3 = 'severity_desc' THEN MAX(dr.severity) ELSE 'low'::delphi_severity END DESC,\n            -- tie-breaker: oldest reports\n            MIN(dr.created) ASC\n        LIMIT $1 OFFSET $2\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "project_id: DBProjectId",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "thread_id!: DBThreadId",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Int8",
-        "Text",
-        "TextArray",
-        "Text",
-        "TextArray",
-        "TextArray"
-      ]
-    },
-    "nullable": [
-      false,
-      null
-    ]
-  },
-  "hash": "1a6d4ac11af078439cff5c772f4dc2392729f99ba1f8c7892831235f341fb276"
-}
diff --git a/apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json b/apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json
new file mode 100644
index 0000000000..099bf29e82
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json
@@ -0,0 +1,100 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT\n            detail.key,\n            issue.issue_type,\n            detail.severity AS \"severity: DelphiSeverity\",\n            detail.jar,\n            detail.file_path,\n            detail.data AS \"data: Json<HashMap<String, serde_json::Value>>\",\n            report.delphi_version,\n            file.size AS \"size?\",\n            file.id AS \"file_id?\",\n            version.id AS \"version_id?\",\n            version.mod_id AS \"project_id?\",\n            COALESCE(file_hashes.hashes, '{}'::jsonb)\n                AS \"hashes!: Json<BTreeMap<String, String>>\"\n        FROM delphi_report_issue_details detail\n        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n        INNER JOIN delphi_reports report ON report.id = issue.report_id\n        LEFT JOIN files file ON file.id = report.file_id\n        LEFT JOIN versions version ON version.id = file.version_id\n        LEFT JOIN LATERAL (\n            SELECT\n                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes\n            FROM hashes\n            WHERE hashes.file_id = file.id\n        ) file_hashes ON TRUE\n        WHERE detail.id = $1\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "key",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 1,
+        "name": "issue_type",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 2,
+        "name": "severity: DelphiSeverity",
+        "type_info": {
+          "Custom": {
+            "name": "delphi_severity",
+            "kind": {
+              "Enum": [
+                "low",
+                "medium",
+                "high",
+                "severe"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 3,
+        "name": "jar",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 4,
+        "name": "file_path",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 5,
+        "name": "data: Json<HashMap<String, serde_json::Value>>",
+        "type_info": "Jsonb"
+      },
+      {
+        "ordinal": 6,
+        "name": "delphi_version",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 7,
+        "name": "size?",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 8,
+        "name": "file_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 9,
+        "name": "version_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 10,
+        "name": "project_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 11,
+        "name": "hashes!: Json<BTreeMap<String, String>>",
+        "type_info": "Jsonb"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      true,
+      false,
+      false,
+      false,
+      false,
+      false,
+      false,
+      false,
+      null
+    ]
+  },
+  "hash": "1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d"
+}
diff --git a/apps/labrinth/.sqlx/query-e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a.json b/apps/labrinth/.sqlx/query-2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358.json
similarity index 65%
rename from apps/labrinth/.sqlx/query-e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a.json
rename to apps/labrinth/.sqlx/query-2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358.json
index ea89bf1e61..651e4e7e63 100644
--- a/apps/labrinth/.sqlx/query-e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a.json
+++ b/apps/labrinth/.sqlx/query-2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tINSERT INTO delphi_rules (\n\t\t\tname,\n\t\t\trule,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t)\n\t\tVALUES ($1, $2, $3, $3)\n\t\tRETURNING\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
+  "query": "\n\t\tINSERT INTO delphi_rules (\n\t\t\tname,\n\t\t\trule,\n\t\t\tpriority,\n\t\t\trevision,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t)\n\t\tVALUES (\n\t\t\t$1,\n\t\t\t$2,\n\t\t\t$3,\n\t\t\t(SELECT revision + 1 FROM delphi_rule_revisions LIMIT 1),\n\t\t\t$4,\n\t\t\t$4\n\t\t)\n\t\tRETURNING\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\tpriority,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
   "describe": {
     "columns": [
       {
@@ -20,26 +20,31 @@
       },
       {
         "ordinal": 3,
+        "name": "priority",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 4,
         "name": "revision",
         "type_info": "Int8"
       },
       {
-        "ordinal": 4,
+        "ordinal": 5,
         "name": "created_at",
         "type_info": "Timestamptz"
       },
       {
-        "ordinal": 5,
+        "ordinal": 6,
         "name": "updated_at",
         "type_info": "Timestamptz"
       },
       {
-        "ordinal": 6,
+        "ordinal": 7,
         "name": "created_by",
         "type_info": "Int8"
       },
       {
-        "ordinal": 7,
+        "ordinal": 8,
         "name": "updated_by",
         "type_info": "Int8"
       }
@@ -48,6 +53,7 @@
       "Left": [
         "Varchar",
         "Varchar",
+        "Int4",
         "Int8"
       ]
     },
@@ -58,9 +64,10 @@
       false,
       false,
       false,
+      false,
       true,
       true
     ]
   },
-  "hash": "e522b3da5f03cafd265929a8489252f7ef678bd0d6b9cee0be7df36bdc92b80a"
+  "hash": "2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358"
 }
diff --git a/apps/labrinth/.sqlx/query-20a88febcaf673264ff7f00a11848f97f334779cd871caa93a6de25c6c871e61.json b/apps/labrinth/.sqlx/query-20a88febcaf673264ff7f00a11848f97f334779cd871caa93a6de25c6c871e61.json
new file mode 100644
index 0000000000..f918bf11f0
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-20a88febcaf673264ff7f00a11848f97f334779cd871caa93a6de25c6c871e61.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM delphi_rules WHERE delete_on_next_revision",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "20a88febcaf673264ff7f00a11848f97f334779cd871caa93a6de25c6c871e61"
+}
diff --git a/apps/labrinth/.sqlx/query-22fbd4bf1c2088903842b2c0070fd08431fc3f984263faed7aaeb311fa6ac2a9.json b/apps/labrinth/.sqlx/query-22fbd4bf1c2088903842b2c0070fd08431fc3f984263faed7aaeb311fa6ac2a9.json
deleted file mode 100644
index 38d43c6043..0000000000
--- a/apps/labrinth/.sqlx/query-22fbd4bf1c2088903842b2c0070fd08431fc3f984263faed7aaeb311fa6ac2a9.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            WITH moderation_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.description,\n                    m.queued,\n                    m.published,\n                    m.organization_id,\n                    m.team_id,\n                    m.components\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $7::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                        )\n                    )\n            ),\n            external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            version_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            queue_projects AS (\n                SELECT\n                    mp.id,\n                    mp.slug,\n                    mp.name,\n                    mp.summary,\n                    mp.description,\n                    mp.queued,\n                    mp.published,\n                    search_organization.name AS organization_name,\n                    search_owner.username AS owner_name,\n                    CASE\n                        WHEN mp.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(vpt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(vpt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ed.external_dependencies_count, 0) AS external_dependencies_count\n                FROM moderation_projects mp\n                LEFT JOIN organizations search_organization\n                    ON search_organization.id = mp.organization_id\n                    AND $3::text IS NOT NULL\n                LEFT JOIN LATERAL (\n                    SELECT\n                        u.username\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = mp.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) search_owner ON $3::text IS NOT NULL\n                    AND mp.organization_id IS NULL\n                LEFT JOIN external_dependencies ed ON ed.mod_id = mp.id\n                LEFT JOIN version_project_types vpt ON vpt.mod_id = mp.id\n            )\n            SELECT id\n            FROM queue_projects\n            WHERE\n                (\n                    $3::text IS NULL\n                    OR name ILIKE '%' || $3 || '%'\n                    OR slug ILIKE '%' || $3 || '%'\n                    OR summary ILIKE '%' || $3 || '%'\n                    OR description ILIKE '%' || $3 || '%'\n                    OR owner_name ILIKE '%' || $3 || '%'\n                    OR organization_name ILIKE '%' || $3 || '%'\n                    OR EXISTS (\n                        SELECT 1\n                        FROM UNNEST(project_types) AS searched_project_type(project_type)\n                        WHERE searched_project_type.project_type ILIKE '%' || $3 || '%'\n                    )\n                )\n                AND (\n                    $4::text IS NULL\n                    OR ($4 = 'none' AND CARDINALITY(project_types) = 0)\n                    OR ($4 = 'minecraft_java_server' AND project_types @> ARRAY['minecraft_java_server']::text[])\n                    OR ($4 <> 'none' AND $4 <> 'minecraft_java_server' AND project_types[1] = $4)\n                )\n                AND ($5::boolean IS NULL OR (external_dependencies_count > 0) = $5)\n            ORDER BY\n                CASE WHEN $6 = 'most_external_deps' THEN external_dependencies_count END DESC,\n                CASE WHEN $6 = 'least_external_deps' THEN external_dependencies_count END ASC,\n                CASE WHEN $6 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                CASE WHEN $6 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(queued, published) END ASC NULLS LAST,\n                id ASC\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "TextArray",
-        "Text",
-        "Text",
-        "Bool",
-        "Text",
-        "Bool"
-      ]
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "22fbd4bf1c2088903842b2c0070fd08431fc3f984263faed7aaeb311fa6ac2a9"
-}
diff --git a/apps/labrinth/.sqlx/query-262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78.json b/apps/labrinth/.sqlx/query-262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78.json
new file mode 100644
index 0000000000..d1516e0e95
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78.json
@@ -0,0 +1,28 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH moderation_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.description,\n                    m.queued,\n                    m.published,\n                    m.organization_id,\n                    m.team_id,\n                    m.components\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $7::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                                AND NOT didws.hidden\n                        )\n                    )\n            ),\n            external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            version_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            queue_projects AS (\n                SELECT\n                    mp.id,\n                    mp.slug,\n                    mp.name,\n                    mp.summary,\n                    mp.description,\n                    mp.queued,\n                    mp.published,\n                    search_organization.name AS organization_name,\n                    search_owner.username AS owner_name,\n                    CASE\n                        WHEN mp.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(vpt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(vpt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ed.external_dependencies_count, 0) AS external_dependencies_count\n                FROM moderation_projects mp\n                LEFT JOIN organizations search_organization\n                    ON search_organization.id = mp.organization_id\n                    AND $3::text IS NOT NULL\n                LEFT JOIN LATERAL (\n                    SELECT\n                        u.username\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = mp.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) search_owner ON $3::text IS NOT NULL\n                    AND mp.organization_id IS NULL\n                LEFT JOIN external_dependencies ed ON ed.mod_id = mp.id\n                LEFT JOIN version_project_types vpt ON vpt.mod_id = mp.id\n            )\n            SELECT id\n            FROM queue_projects\n            WHERE\n                (\n                    $3::text IS NULL\n                    OR name ILIKE '%' || $3 || '%'\n                    OR slug ILIKE '%' || $3 || '%'\n                    OR summary ILIKE '%' || $3 || '%'\n                    OR description ILIKE '%' || $3 || '%'\n                    OR owner_name ILIKE '%' || $3 || '%'\n                    OR organization_name ILIKE '%' || $3 || '%'\n                    OR EXISTS (\n                        SELECT 1\n                        FROM UNNEST(project_types) AS searched_project_type(project_type)\n                        WHERE searched_project_type.project_type ILIKE '%' || $3 || '%'\n                    )\n                )\n                AND (\n                    $4::text IS NULL\n                    OR ($4 = 'none' AND CARDINALITY(project_types) = 0)\n                    OR ($4 = 'minecraft_java_server' AND project_types @> ARRAY['minecraft_java_server']::text[])\n                    OR ($4 <> 'none' AND $4 <> 'minecraft_java_server' AND project_types[1] = $4)\n                )\n                AND ($5::boolean IS NULL OR (external_dependencies_count > 0) = $5)\n            ORDER BY\n                CASE WHEN $6 = 'most_external_deps' THEN external_dependencies_count END DESC,\n                CASE WHEN $6 = 'least_external_deps' THEN external_dependencies_count END ASC,\n                CASE WHEN $6 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                CASE WHEN $6 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(queued, published) END ASC NULLS LAST,\n                id ASC\n            ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray",
+        "Text",
+        "Text",
+        "Bool",
+        "Text",
+        "Bool"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78"
+}
diff --git a/apps/labrinth/.sqlx/query-285c66152a506e79c3c8996b4f44b8f63dcf79a2d02dcfeac9655d89bdb2750e.json b/apps/labrinth/.sqlx/query-285c66152a506e79c3c8996b4f44b8f63dcf79a2d02dcfeac9655d89bdb2750e.json
new file mode 100644
index 0000000000..5d0c482906
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-285c66152a506e79c3c8996b4f44b8f63dcf79a2d02dcfeac9655d89bdb2750e.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        DELETE FROM delphi_tech_review_queue\n        WHERE project_id = $1\n        RETURNING project_id AS \"project_id: DBProjectId\"\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id: DBProjectId",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "285c66152a506e79c3c8996b4f44b8f63dcf79a2d02dcfeac9655d89bdb2750e"
+}
diff --git a/apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json b/apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json
new file mode 100644
index 0000000000..c1aa96d89b
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json
@@ -0,0 +1,104 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT\n            detail.id,\n            detail.key,\n            issue.issue_type,\n            detail.severity AS \"severity: DelphiSeverity\",\n            detail.jar,\n            detail.file_path,\n            detail.data AS \"data: Json<HashMap<String, serde_json::Value>>\",\n            report.delphi_version,\n            file.size AS \"size?\",\n            file.id AS \"file_id?\",\n            version.id AS \"version_id?\",\n            version.mod_id AS \"project_id?\",\n            COALESCE(file_hashes.hashes, '{}'::jsonb)\n                AS \"hashes!: Json<BTreeMap<String, String>>\"\n        FROM delphi_report_issue_details detail\n        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n        INNER JOIN delphi_reports report ON report.id = issue.report_id\n        LEFT JOIN files file ON file.id = report.file_id\n        LEFT JOIN versions version ON version.id = file.version_id\n        LEFT JOIN (\n            SELECT\n                file_id,\n                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes\n            FROM hashes\n            GROUP BY file_id\n        ) file_hashes ON file_hashes.file_id = file.id\n        ORDER BY detail.id\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "key",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 2,
+        "name": "issue_type",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 3,
+        "name": "severity: DelphiSeverity",
+        "type_info": {
+          "Custom": {
+            "name": "delphi_severity",
+            "kind": {
+              "Enum": [
+                "low",
+                "medium",
+                "high",
+                "severe"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 4,
+        "name": "jar",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 5,
+        "name": "file_path",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 6,
+        "name": "data: Json<HashMap<String, serde_json::Value>>",
+        "type_info": "Jsonb"
+      },
+      {
+        "ordinal": 7,
+        "name": "delphi_version",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 8,
+        "name": "size?",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 9,
+        "name": "file_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 10,
+        "name": "version_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 11,
+        "name": "project_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 12,
+        "name": "hashes!: Json<BTreeMap<String, String>>",
+        "type_info": "Jsonb"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      true,
+      false,
+      false,
+      false,
+      false,
+      false,
+      false,
+      false,
+      null
+    ]
+  },
+  "hash": "2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb"
+}
diff --git a/apps/labrinth/.sqlx/query-42579ab8ccb58b9b2553787327115af8dbb2a85db0affc67eac74cfb48fbaa3e.json b/apps/labrinth/.sqlx/query-42579ab8ccb58b9b2553787327115af8dbb2a85db0affc67eac74cfb48fbaa3e.json
new file mode 100644
index 0000000000..c04d8b8fea
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-42579ab8ccb58b9b2553787327115af8dbb2a85db0affc67eac74cfb48fbaa3e.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT COUNT(*) AS \"count!\"\n        FROM delphi_report_issue_details\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "count!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "42579ab8ccb58b9b2553787327115af8dbb2a85db0affc67eac74cfb48fbaa3e"
+}
diff --git a/apps/labrinth/.sqlx/query-c3598ed9f64f7151b83d47a15fabfdcf015bda1b3c0a7f2358c7f284feb532c3.json b/apps/labrinth/.sqlx/query-436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06.json
similarity index 76%
rename from apps/labrinth/.sqlx/query-c3598ed9f64f7151b83d47a15fabfdcf015bda1b3c0a7f2358c7f284feb532c3.json
rename to apps/labrinth/.sqlx/query-436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06.json
index c27569000b..88a5139d85 100644
--- a/apps/labrinth/.sqlx/query-c3598ed9f64f7151b83d47a15fabfdcf015bda1b3c0a7f2358c7f284feb532c3.json
+++ b/apps/labrinth/.sqlx/query-436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            to_jsonb(dri)\n            || jsonb_build_object(\n                -- TODO: replace with `json_array` in Postgres 16\n                'details', (\n                    SELECT coalesce(jsonb_agg(\n                        jsonb_build_object(\n                            'id', didws.id,\n                            'issue_id', didws.issue_id,\n                            'key', didws.key,\n                            'file_path', didws.file_path,\n                            'decompiled_source', didws.decompiled_source,\n                            'data', didws.data,\n                            'severity', didws.severity,\n                            'local_status', didws.local_status,\n                            'global_status', didws.global_status,\n                            'status', didws.status\n                        )\n                    ), '[]'::jsonb)\n                    FROM delphi_issue_details_with_statuses didws\n                    WHERE didws.issue_id = dri.id\n                )\n            ) AS \"data!: sqlx::types::Json<FileIssue>\"\n        FROM delphi_report_issues dri\n        WHERE dri.id = $1\n        ",
+  "query": "\n        SELECT\n            to_jsonb(dri)\n            || jsonb_build_object(\n                -- TODO: replace with `json_array` in Postgres 16\n                'details', (\n                    SELECT coalesce(jsonb_agg(\n                        jsonb_build_object(\n                            'id', didws.id,\n                            'issue_id', didws.issue_id,\n                            'key', didws.key,\n                            'file_path', didws.file_path,\n                            'decompiled_source', didws.decompiled_source,\n                            'data', didws.data,\n                            'severity', didws.severity,\n                            'local_status', didws.local_status,\n                            'global_status', didws.global_status,\n                            'status', didws.status\n                        )\n                    ), '[]'::jsonb)\n                    FROM delphi_issue_details_with_statuses didws\n                    WHERE\n                        didws.issue_id = dri.id\n                        AND NOT didws.hidden\n                )\n            ) AS \"data!: sqlx::types::Json<FileIssue>\"\n        FROM delphi_report_issues dri\n        WHERE dri.id = $1\n        ",
   "describe": {
     "columns": [
       {
@@ -18,5 +18,5 @@
       null
     ]
   },
-  "hash": "c3598ed9f64f7151b83d47a15fabfdcf015bda1b3c0a7f2358c7f284feb532c3"
+  "hash": "436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06"
 }
diff --git a/apps/labrinth/.sqlx/query-48dfc2f2bcf8917f110b7b2b142167f1525cdea2ace9e6165e5c5f596cbd9fb3.json b/apps/labrinth/.sqlx/query-48dfc2f2bcf8917f110b7b2b142167f1525cdea2ace9e6165e5c5f596cbd9fb3.json
deleted file mode 100644
index fa0165cc60..0000000000
--- a/apps/labrinth/.sqlx/query-48dfc2f2bcf8917f110b7b2b142167f1525cdea2ace9e6165e5c5f596cbd9fb3.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        SELECT DISTINCT ON (dr.id)\n            to_jsonb(dr)\n            || jsonb_build_object(\n                'report_id', dr.id,\n                'file_id', to_base62(f.id),\n                'version_id', to_base62(v.id),\n                'project_id', to_base62(v.mod_id),\n                'file_name', f.filename,\n                'file_size', f.size,\n                'flag_reason', 'delphi',\n                'download_url', f.url,\n                -- TODO: replace with `json_array` in Postgres 16\n\t\t\t\t'issues', (\n\t\t\t\t\tSELECT coalesce(json_agg(\n\t\t\t\t\t\tto_jsonb(dri)\n\t\t\t\t\t\t|| jsonb_build_object(\n\t\t\t\t\t\t\t-- TODO: replace with `json_array` in Postgres 16\n\t\t\t\t\t\t\t'details', (\n\t\t\t\t\t\t\t\tSELECT coalesce(jsonb_agg(\n                                    jsonb_build_object(\n                                        'id', didws.id,\n                                        'issue_id', didws.issue_id,\n                                        'key', didws.key,\n                                        'file_path', didws.file_path,\n                                        'decompiled_source', didws.decompiled_source,\n                                        'data', didws.data,\n                                        'severity', didws.severity,\n                                        'local_status', didws.local_status,\n                                        'global_status', didws.global_status,\n                                        'status', didws.status\n                                    )\n                                ), '[]'::jsonb)\n                                FROM delphi_issue_details_with_statuses didws\n                                WHERE didws.issue_id = dri.id\n                            )\n\t\t\t\t\t\t)\n\t\t\t\t\t), '[]'::json)\n\t\t\t\t\tFROM delphi_report_issues dri\n\t\t\t\t\tWHERE\n\t\t\t\t\t\tdri.report_id = dr.id\n                        -- see delphi.rs todo comment\n                        AND dri.issue_type != '__dummy'\n                )\n            ) AS \"data!: sqlx::types::Json<FileReport>\"\n        FROM delphi_reports dr\n        INNER JOIN files f ON f.id = dr.file_id\n        INNER JOIN versions v ON v.id = f.version_id\n        WHERE dr.id = $1\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "data!: sqlx::types::Json<FileReport>",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "48dfc2f2bcf8917f110b7b2b142167f1525cdea2ace9e6165e5c5f596cbd9fb3"
-}
diff --git a/apps/labrinth/.sqlx/query-1bff1c5714dd039814d7a9d9f25f4ceca0e84a42b3a4c414210739fec6308e2d.json b/apps/labrinth/.sqlx/query-4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16.json
similarity index 65%
rename from apps/labrinth/.sqlx/query-1bff1c5714dd039814d7a9d9f25f4ceca0e84a42b3a4c414210739fec6308e2d.json
rename to apps/labrinth/.sqlx/query-4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16.json
index c55b8c6c7c..39d8ee3347 100644
--- a/apps/labrinth/.sqlx/query-1bff1c5714dd039814d7a9d9f25f4ceca0e84a42b3a4c414210739fec6308e2d.json
+++ b/apps/labrinth/.sqlx/query-4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n            SELECT id\n            FROM mods\n            WHERE\n                status = $1\n                AND (\n                    $3::boolean = false\n                    OR NOT EXISTS (\n                        SELECT 1\n                        FROM delphi_issue_details_with_statuses didws\n                        WHERE didws.project_id = mods.id\n                            AND didws.status = 'pending'\n                    )\n                )\n            ORDER BY\n                CASE WHEN $2 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                CASE WHEN $2 = 'oldest' THEN COALESCE(queued, published) END ASC NULLS LAST,\n                id ASC\n            ",
+  "query": "\n            SELECT id\n            FROM mods\n            WHERE\n                status = $1\n                AND (\n                    $3::boolean = false\n                    OR NOT EXISTS (\n                        SELECT 1\n                        FROM delphi_issue_details_with_statuses didws\n                        WHERE didws.project_id = mods.id\n                            AND didws.status = 'pending'\n                            AND NOT didws.hidden\n                    )\n                )\n            ORDER BY\n                CASE WHEN $2 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                CASE WHEN $2 = 'oldest' THEN COALESCE(queued, published) END ASC NULLS LAST,\n                id ASC\n            ",
   "describe": {
     "columns": [
       {
@@ -20,5 +20,5 @@
       false
     ]
   },
-  "hash": "1bff1c5714dd039814d7a9d9f25f4ceca0e84a42b3a4c414210739fec6308e2d"
+  "hash": "4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16"
 }
diff --git a/apps/labrinth/.sqlx/query-4e30093d30c2ee3c39e6e3f2d9ffdc2ba5455d2213e06bc3e273f250ef97a525.json b/apps/labrinth/.sqlx/query-4e30093d30c2ee3c39e6e3f2d9ffdc2ba5455d2213e06bc3e273f250ef97a525.json
new file mode 100644
index 0000000000..fcafa64eb2
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-4e30093d30c2ee3c39e6e3f2d9ffdc2ba5455d2213e06bc3e273f250ef97a525.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT requested.project_id AS \"project_id!: DBProjectId\"\n        FROM unnest($1::bigint[]) AS requested(project_id)\n        WHERE NOT EXISTS (\n            SELECT 1\n            FROM delphi_issue_details_with_statuses detail\n            WHERE detail.project_id = requested.project_id\n        )\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id!: DBProjectId",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8Array"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "4e30093d30c2ee3c39e6e3f2d9ffdc2ba5455d2213e06bc3e273f250ef97a525"
+}
diff --git a/apps/labrinth/.sqlx/query-cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9.json b/apps/labrinth/.sqlx/query-50a5f3a116ebe5cf88452a9aac89f73135491f170e3d619a93144b36ef429705.json
similarity index 53%
rename from apps/labrinth/.sqlx/query-cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9.json
rename to apps/labrinth/.sqlx/query-50a5f3a116ebe5cf88452a9aac89f73135491f170e3d619a93144b36ef429705.json
index 39215aaedc..ec24566ebe 100644
--- a/apps/labrinth/.sqlx/query-cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9.json
+++ b/apps/labrinth/.sqlx/query-50a5f3a116ebe5cf88452a9aac89f73135491f170e3d619a93144b36ef429705.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "UPDATE users SET email_verified = TRUE WHERE id = $1",
+  "query": "DELETE FROM delphi_rule_effects WHERE revision <> $1",
   "describe": {
     "columns": [],
     "parameters": {
@@ -10,5 +10,5 @@
     },
     "nullable": []
   },
-  "hash": "cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9"
+  "hash": "50a5f3a116ebe5cf88452a9aac89f73135491f170e3d619a93144b36ef429705"
 }
diff --git a/apps/labrinth/.sqlx/query-f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9.json b/apps/labrinth/.sqlx/query-5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f.json
similarity index 65%
rename from apps/labrinth/.sqlx/query-f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9.json
rename to apps/labrinth/.sqlx/query-5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f.json
index 75717f39b0..fd87299dfd 100644
--- a/apps/labrinth/.sqlx/query-f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9.json
+++ b/apps/labrinth/.sqlx/query-5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tname = $2,\n\t\t\trule = $3,\n\t\t\tupdated_at = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $4\n\t\tWHERE id = $1 AND NOT delete_on_next_revision\n\t\tRETURNING\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
+  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tname = $2,\n\t\t\trule = $3,\n\t\t\tpriority = $4,\n\t\t\trevision = (\n\t\t\t\tSELECT revision + 1 FROM delphi_rule_revisions LIMIT 1\n\t\t\t),\n\t\t\tupdated_at = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $5\n\t\tWHERE id = $1 AND NOT delete_on_next_revision\n\t\tRETURNING\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\tpriority,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
   "describe": {
     "columns": [
       {
@@ -20,26 +20,31 @@
       },
       {
         "ordinal": 3,
+        "name": "priority",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 4,
         "name": "revision",
         "type_info": "Int8"
       },
       {
-        "ordinal": 4,
+        "ordinal": 5,
         "name": "created_at",
         "type_info": "Timestamptz"
       },
       {
-        "ordinal": 5,
+        "ordinal": 6,
         "name": "updated_at",
         "type_info": "Timestamptz"
       },
       {
-        "ordinal": 6,
+        "ordinal": 7,
         "name": "created_by",
         "type_info": "Int8"
       },
       {
-        "ordinal": 7,
+        "ordinal": 8,
         "name": "updated_by",
         "type_info": "Int8"
       }
@@ -49,6 +54,7 @@
         "Int8",
         "Varchar",
         "Varchar",
+        "Int4",
         "Int8"
       ]
     },
@@ -59,9 +65,10 @@
       false,
       false,
       false,
+      false,
       true,
       true
     ]
   },
-  "hash": "f5b43baf6838a16554aab7282a396540f5b6d265c87af267be0a5c0044d470a9"
+  "hash": "5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f"
 }
diff --git a/apps/labrinth/.sqlx/query-54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819.json b/apps/labrinth/.sqlx/query-54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819.json
new file mode 100644
index 0000000000..856b5a1e73
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819.json
@@ -0,0 +1,34 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT\n            m.id AS \"project_id: DBProjectId\",\n            MIN(t.id) AS \"thread_id!: DBThreadId\"\n        FROM mods m\n        INNER JOIN delphi_tech_review_queue trq ON trq.project_id = m.id\n        INNER JOIN threads t ON t.mod_id = m.id\n        LEFT JOIN versions v ON v.mod_id = m.id\n        LEFT JOIN files f ON f.version_id = v.id\n        LEFT JOIN delphi_reports dr ON dr.file_id = f.id\n        LEFT JOIN delphi_report_issues dri ON dri.report_id = dr.id\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.issue_id = dri.id\n            AND NOT didws.hidden\n        LEFT JOIN threads_messages tm_last\n            ON tm_last.thread_id = t.id\n            AND tm_last.id = (\n                SELECT id FROM threads_messages\n                WHERE thread_id = t.id\n                ORDER BY created DESC\n                LIMIT 1\n            )\n        LEFT JOIN users u_last\n            ON u_last.id = tm_last.author_id\n        WHERE\n            (\n                cardinality($4::text[]) = 0\n                OR (\n                    'minecraft_java_server' = ANY($4::text[])\n                    AND (\n                        m.components ? 'minecraft_server'\n                        OR m.components ? 'minecraft_java_server'\n                    )\n                )\n                OR EXISTS (\n                    SELECT 1\n                    FROM versions type_v\n                    INNER JOIN loaders_versions type_lv\n                        ON type_lv.version_id = type_v.id\n                    INNER JOIN loaders_project_types type_lpt\n                        ON type_lpt.joining_loader_id = type_lv.loader_id\n                    INNER JOIN project_types type_pt\n                        ON type_pt.id = type_lpt.joining_project_type_id\n                    WHERE\n                        type_v.mod_id = m.id\n                        AND type_pt.name = ANY($4::text[])\n                        AND (\n                            type_pt.name != 'modpack'\n                            OR NOT (\n                                m.components ? 'minecraft_server'\n                                OR m.components ? 'minecraft_java_server'\n                            )\n                        )\n                )\n            )\n            AND m.status NOT IN ('draft', 'rejected', 'withheld')\n            AND (cardinality($6::text[]) = 0 OR m.status = ANY($6::text[]))\n            AND (\n                cardinality($7::text[]) = 0\n                OR EXISTS (\n                    SELECT 1\n                    FROM versions issue_version\n                    INNER JOIN files issue_file\n                        ON issue_file.version_id = issue_version.id\n                    INNER JOIN delphi_reports issue_report\n                        ON issue_report.file_id = issue_file.id\n                    INNER JOIN delphi_report_issues issue\n                        ON issue.report_id = issue_report.id\n                    INNER JOIN delphi_issue_details_with_statuses detail\n                        ON detail.issue_id = issue.id\n                    WHERE\n                        issue_version.mod_id = m.id\n                        AND issue.issue_type = ANY($7::text[])\n                        AND NOT detail.hidden\n                )\n            )\n            AND (\n                $5::text IS NULL\n                OR ($5::text = 'unreplied' AND (tm_last.id IS NULL OR u_last.role IS NULL OR u_last.role NOT IN ('moderator', 'admin')))\n                OR ($5::text = 'replied' AND tm_last.id IS NOT NULL AND u_last.role IS NOT NULL AND u_last.role IN ('moderator', 'admin'))\n            )\n        GROUP BY m.id\n        ORDER BY\n            CASE WHEN $3 = 'created_asc'   THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END ASC,\n            CASE WHEN $3 = 'created_desc'  THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END DESC,\n            CASE WHEN $3 = 'severity_asc'  THEN COALESCE(MAX(didws.severity), 'low'::delphi_severity) ELSE 'low'::delphi_severity END ASC,\n            CASE WHEN $3 = 'severity_desc' THEN COALESCE(MAX(didws.severity), 'low'::delphi_severity) ELSE 'low'::delphi_severity END DESC,\n            -- tie-breaker: oldest reports\n            MIN(dr.created) ASC\n        LIMIT $1 OFFSET $2\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id: DBProjectId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "thread_id!: DBThreadId",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Int8",
+        "Text",
+        "TextArray",
+        "Text",
+        "TextArray",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      false,
+      null
+    ]
+  },
+  "hash": "54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819"
+}
diff --git a/apps/labrinth/.sqlx/query-5a68c53bd00c08edf9dfb9ffdabc28f86cdd77cd06bbb10c9a8e5199509f9c4b.json b/apps/labrinth/.sqlx/query-5a68c53bd00c08edf9dfb9ffdabc28f86cdd77cd06bbb10c9a8e5199509f9c4b.json
deleted file mode 100644
index 450ec6ad79..0000000000
--- a/apps/labrinth/.sqlx/query-5a68c53bd00c08edf9dfb9ffdabc28f86cdd77cd06bbb10c9a8e5199509f9c4b.json
+++ /dev/null
@@ -1,135 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            WITH filtered_projects AS (\n                SELECT\n                    m.id,\n                    m.queued,\n                    m.published\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $6::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                        )\n                    )\n            ),\n            total AS (\n                SELECT COUNT(*) AS total_count FROM filtered_projects\n            ),\n            page_ids AS (\n                SELECT\n                    id,\n                    queued,\n                    published\n                FROM filtered_projects\n                ORDER BY\n                    CASE WHEN $5 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                    CASE WHEN $5 = 'oldest' THEN COALESCE(queued, published) END ASC NULLS LAST,\n                    id ASC\n                OFFSET $4\n                LIMIT $3\n            ),\n            page_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN page_ids page ON page.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            page_external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN page_ids page ON page.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            page_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.icon_url,\n                    m.status,\n                    m.requested_status,\n                    m.queued,\n                    m.published,\n                    m.updated,\n                    m.organization_id,\n                    o.name AS organization_name,\n                    o.icon_url AS organization_icon_url,\n                    owner.user_id AS owner_id,\n                    owner.username AS owner_name,\n                    owner.avatar_url AS owner_icon_url,\n                    CASE\n                        WHEN m.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(ppt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(ppt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ped.external_dependencies_count, 0) AS external_dependencies_count\n                FROM page_ids page\n                INNER JOIN mods m ON m.id = page.id\n                LEFT JOIN organizations o ON o.id = m.organization_id\n                LEFT JOIN LATERAL (\n                    SELECT\n                        tm.user_id,\n                        u.username,\n                        u.avatar_url\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = m.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) owner ON m.organization_id IS NULL\n                LEFT JOIN page_project_types ppt ON ppt.mod_id = m.id\n                LEFT JOIN page_external_dependencies ped ON ped.mod_id = m.id\n            )\n            SELECT\n                total.total_count AS \"total_count!\",\n                page_projects.id AS \"id?\",\n                page_projects.slug AS \"slug?\",\n                page_projects.name AS \"name?\",\n                page_projects.summary AS \"summary?\",\n                page_projects.icon_url AS \"icon_url?\",\n                page_projects.status AS \"status?\",\n                page_projects.requested_status AS \"requested_status?\",\n                page_projects.queued AS \"queued?\",\n                page_projects.published AS \"published?\",\n                page_projects.updated AS \"updated?\",\n                page_projects.organization_id AS \"organization_id?\",\n                page_projects.organization_name AS \"organization_name?\",\n                page_projects.organization_icon_url AS \"organization_icon_url?\",\n                page_projects.owner_id AS \"owner_id?\",\n                page_projects.owner_name AS \"owner_name?\",\n                page_projects.owner_icon_url AS \"owner_icon_url?\",\n                page_projects.project_types AS \"project_types?: Vec<String>\",\n                page_projects.external_dependencies_count AS \"external_dependencies_count?\"\n            FROM total\n            LEFT JOIN page_projects ON true\n            ORDER BY\n                CASE WHEN $5 = 'newest' THEN COALESCE(page_projects.queued, page_projects.published) END DESC NULLS LAST,\n                CASE WHEN $5 = 'oldest' THEN COALESCE(page_projects.queued, page_projects.published) END ASC NULLS LAST,\n                page_projects.id ASC\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "total_count!",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 2,
-        "name": "slug?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 3,
-        "name": "name?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 4,
-        "name": "summary?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 5,
-        "name": "icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 6,
-        "name": "status?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 7,
-        "name": "requested_status?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 8,
-        "name": "queued?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 9,
-        "name": "published?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 10,
-        "name": "updated?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 11,
-        "name": "organization_id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 12,
-        "name": "organization_name?",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 13,
-        "name": "organization_icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 14,
-        "name": "owner_id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 15,
-        "name": "owner_name?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 16,
-        "name": "owner_icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 17,
-        "name": "project_types?: Vec<String>",
-        "type_info": "TextArray"
-      },
-      {
-        "ordinal": 18,
-        "name": "external_dependencies_count?",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "TextArray",
-        "Int8",
-        "Int8",
-        "Text",
-        "Bool"
-      ]
-    },
-    "nullable": [
-      null,
-      false,
-      true,
-      false,
-      false,
-      true,
-      false,
-      true,
-      true,
-      false,
-      false,
-      true,
-      false,
-      true,
-      false,
-      false,
-      true,
-      null,
-      null
-    ]
-  },
-  "hash": "5a68c53bd00c08edf9dfb9ffdabc28f86cdd77cd06bbb10c9a8e5199509f9c4b"
-}
diff --git a/apps/labrinth/.sqlx/query-62d548639ed397f3619a8c3a4503f472fceb6ee0e120b511c1ed64cb200e0e9c.json b/apps/labrinth/.sqlx/query-62d548639ed397f3619a8c3a4503f472fceb6ee0e120b511c1ed64cb200e0e9c.json
new file mode 100644
index 0000000000..e2a4cfb50f
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-62d548639ed397f3619a8c3a4503f472fceb6ee0e120b511c1ed64cb200e0e9c.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "LOCK TABLE delphi_report_issue_details IN SHARE MODE",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "62d548639ed397f3619a8c3a4503f472fceb6ee0e120b511c1ed64cb200e0e9c"
+}
diff --git a/apps/labrinth/.sqlx/query-63a9a89443566baa880ddbe05f741e2a83b50d89f5954ab8d951a090e702de73.json b/apps/labrinth/.sqlx/query-63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb.json
similarity index 93%
rename from apps/labrinth/.sqlx/query-63a9a89443566baa880ddbe05f741e2a83b50d89f5954ab8d951a090e702de73.json
rename to apps/labrinth/.sqlx/query-63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb.json
index b9c6d3543c..f715919c0e 100644
--- a/apps/labrinth/.sqlx/query-63a9a89443566baa880ddbe05f741e2a83b50d89f5954ab8d951a090e702de73.json
+++ b/apps/labrinth/.sqlx/query-63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            didws.id AS \"id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            didws.key AS \"key!: String\",\n            didws.jar AS \"jar?: String\",\n            didws.file_path AS \"file_path!: String\",\n            didws.data AS \"data!: sqlx::types::Json<HashMap<String, serde_json::Value>>\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            didws.local_status AS \"local_status?: DelphiStatus\",\n            didws.global_status AS \"global_status?: DelphiStatus\",\n            didws.status AS \"status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        WHERE didws.issue_id = ANY($1::bigint[])\n        ORDER BY didws.issue_id, didws.id\n        ",
+  "query": "\n        SELECT\n            didws.id AS \"id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            didws.key AS \"key!: String\",\n            didws.jar AS \"jar?: String\",\n            didws.file_path AS \"file_path!: String\",\n            didws.data AS \"data!: sqlx::types::Json<HashMap<String, serde_json::Value>>\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            didws.local_status AS \"local_status?: DelphiStatus\",\n            didws.global_status AS \"global_status?: DelphiStatus\",\n            didws.status AS \"status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        WHERE\n            didws.issue_id = ANY($1::bigint[])\n            AND NOT didws.hidden\n        ORDER BY didws.issue_id, didws.id\n        ",
   "describe": {
     "columns": [
       {
@@ -117,5 +117,5 @@
       true
     ]
   },
-  "hash": "63a9a89443566baa880ddbe05f741e2a83b50d89f5954ab8d951a090e702de73"
+  "hash": "63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb"
 }
diff --git a/apps/labrinth/.sqlx/query-64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json b/apps/labrinth/.sqlx/query-64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json
deleted file mode 100644
index 38c58dbb1c..0000000000
--- a/apps/labrinth/.sqlx/query-64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c.json
+++ /dev/null
@@ -1,62 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n\t\tSELECT\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\tFROM delphi_rules\n\t\tWHERE NOT delete_on_next_revision\n\t\tORDER BY name, id\n\t\t",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "name",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 2,
-        "name": "rule",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 3,
-        "name": "revision",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 4,
-        "name": "created_at",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 5,
-        "name": "updated_at",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 6,
-        "name": "created_by",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 7,
-        "name": "updated_by",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      false,
-      false,
-      false,
-      false,
-      false,
-      false,
-      true,
-      true
-    ]
-  },
-  "hash": "64d02e0fa69fe1cad91d851e4d32dea4a6c830ec1b74ea1e2b71d5f18751ac6c"
-}
diff --git a/apps/labrinth/.sqlx/query-6776dc50f184188756ad7fe263b0304333536768527525a43bdd45aedffa3c4f.json b/apps/labrinth/.sqlx/query-6776dc50f184188756ad7fe263b0304333536768527525a43bdd45aedffa3c4f.json
new file mode 100644
index 0000000000..4187b628b7
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-6776dc50f184188756ad7fe263b0304333536768527525a43bdd45aedffa3c4f.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT pg_try_advisory_xact_lock($1)",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "pg_try_advisory_xact_lock",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "6776dc50f184188756ad7fe263b0304333536768527525a43bdd45aedffa3c4f"
+}
diff --git a/apps/labrinth/.sqlx/query-ba7585f55df2a4596caae265ac956eb23268f26aef664234b898b17d13c09f91.json b/apps/labrinth/.sqlx/query-6fa83172261e64445f2fa18d2c98eb68f2617f6f57a31edda36c2f861e7da7f7.json
similarity index 70%
rename from apps/labrinth/.sqlx/query-ba7585f55df2a4596caae265ac956eb23268f26aef664234b898b17d13c09f91.json
rename to apps/labrinth/.sqlx/query-6fa83172261e64445f2fa18d2c98eb68f2617f6f57a31edda36c2f861e7da7f7.json
index 20a2667bb3..34f1afab32 100644
--- a/apps/labrinth/.sqlx/query-ba7585f55df2a4596caae265ac956eb23268f26aef664234b898b17d13c09f91.json
+++ b/apps/labrinth/.sqlx/query-6fa83172261e64445f2fa18d2c98eb68f2617f6f57a31edda36c2f861e7da7f7.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT DISTINCT didws.project_id AS \"project_id!: DBProjectId\"\n        FROM delphi_issue_details_with_statuses didws\n        WHERE didws.key = ANY($1::text[])\n        ",
+  "query": "\n        SELECT DISTINCT didws.project_id AS \"project_id!: DBProjectId\"\n        FROM delphi_issue_details_with_statuses didws\n        WHERE didws.id = ANY($1::bigint[])\n        ",
   "describe": {
     "columns": [
       {
@@ -11,12 +11,12 @@
     ],
     "parameters": {
       "Left": [
-        "TextArray"
+        "Int8Array"
       ]
     },
     "nullable": [
       true
     ]
   },
-  "hash": "ba7585f55df2a4596caae265ac956eb23268f26aef664234b898b17d13c09f91"
+  "hash": "6fa83172261e64445f2fa18d2c98eb68f2617f6f57a31edda36c2f861e7da7f7"
 }
diff --git a/apps/labrinth/.sqlx/query-73e3646a21e4acb1299f0b183b92beda18c30564fc90e5213e5237f505504558.json b/apps/labrinth/.sqlx/query-73e3646a21e4acb1299f0b183b92beda18c30564fc90e5213e5237f505504558.json
new file mode 100644
index 0000000000..f0a4d22896
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-73e3646a21e4acb1299f0b183b92beda18c30564fc90e5213e5237f505504558.json
@@ -0,0 +1,29 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        WITH incoming AS (\n            SELECT *\n            FROM unnest($1::bigint[], $2::text[]) WITH ORDINALITY\n                AS u(detail_id, verdict, ord)\n        ),\n        resolved AS (\n            SELECT\n                i.ord,\n                didws.project_id,\n                didws.key AS detail_key,\n                i.verdict\n            FROM incoming i\n            INNER JOIN delphi_issue_details_with_statuses didws ON didws.id = i.detail_id\n        ),\n        validated AS (\n            SELECT\n                (SELECT COUNT(*) FROM incoming) AS incoming_count,\n                (SELECT COUNT(*) FROM resolved) AS resolved_count\n        ),\n        latest AS (\n            SELECT DISTINCT ON (project_id, detail_key)\n                project_id,\n                detail_key,\n                verdict\n            FROM resolved\n            ORDER BY project_id, detail_key, ord DESC\n        ),\n        deleted AS (\n            DELETE FROM delphi_issue_detail_verdicts didv\n            USING latest\n            WHERE\n                didv.project_id = latest.project_id\n                AND didv.detail_key = latest.detail_key\n                AND latest.verdict = 'pending'\n            RETURNING 1\n        ),\n        upserted AS (\n            INSERT INTO delphi_issue_detail_verdicts (\n                project_id,\n                detail_key,\n                verdict\n            )\n            SELECT\n                project_id,\n                detail_key,\n                verdict::delphi_report_issue_status\n            FROM latest\n            WHERE verdict != 'pending'\n            ON CONFLICT (project_id, detail_key)\n            DO UPDATE SET verdict = EXCLUDED.verdict\n            RETURNING 1\n        )\n        SELECT\n            (v.incoming_count = v.resolved_count) AS \"all_found!\",\n            (SELECT COUNT(*) FROM upserted) AS \"upserted_count!\"\n        FROM validated v\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "all_found!",
+        "type_info": "Bool"
+      },
+      {
+        "ordinal": 1,
+        "name": "upserted_count!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8Array",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      null,
+      null
+    ]
+  },
+  "hash": "73e3646a21e4acb1299f0b183b92beda18c30564fc90e5213e5237f505504558"
+}
diff --git a/apps/labrinth/.sqlx/query-8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a.json b/apps/labrinth/.sqlx/query-8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a.json
new file mode 100644
index 0000000000..31a3becc83
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT DISTINCT m.id\n        FROM mods m\n        INNER JOIN delphi_tech_review_queue queue ON queue.project_id = m.id\n        WHERE\n            EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                WHERE\n                    didws.project_id = m.id\n                    AND didws.status = 'pending'\n                    AND NOT didws.hidden\n            )\n            AND NOT EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                WHERE\n                    didws.project_id = m.id\n                    AND didws.status IN ('safe', 'unsafe')\n                    AND NOT didws.hidden\n            )\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a"
+}
diff --git a/apps/labrinth/.sqlx/query-820810b83ce47f32bf5b0dc20e5fc3223f66e83a2b5f6efbf10eec3a927f31b2.json b/apps/labrinth/.sqlx/query-820810b83ce47f32bf5b0dc20e5fc3223f66e83a2b5f6efbf10eec3a927f31b2.json
new file mode 100644
index 0000000000..24b8b0d507
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-820810b83ce47f32bf5b0dc20e5fc3223f66e83a2b5f6efbf10eec3a927f31b2.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "LOCK TABLE delphi_rules IN SHARE MODE",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "820810b83ce47f32bf5b0dc20e5fc3223f66e83a2b5f6efbf10eec3a927f31b2"
+}
diff --git a/apps/labrinth/.sqlx/query-86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d.json b/apps/labrinth/.sqlx/query-86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d.json
new file mode 100644
index 0000000000..3d337eed1e
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT DISTINCT detail.project_id AS \"project_id!: DBProjectId\"\n        FROM delphi_issue_details_with_statuses detail\n        WHERE\n            detail.project_id = ANY($1::bigint[])\n            AND detail.status IN ('pending', 'unsafe')\n            AND NOT detail.hidden\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id!: DBProjectId",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8Array"
+      ]
+    },
+    "nullable": [
+      true
+    ]
+  },
+  "hash": "86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d"
+}
diff --git a/apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json b/apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json
new file mode 100644
index 0000000000..13ac058e9e
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json
@@ -0,0 +1,106 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT\n            detail.id,\n            detail.key,\n            issue.issue_type,\n            detail.severity AS \"severity: DelphiSeverity\",\n            detail.jar,\n            detail.file_path,\n            detail.data AS \"data: Json<HashMap<String, serde_json::Value>>\",\n            report.delphi_version,\n            file.size AS \"size?\",\n            file.id AS \"file_id?\",\n            version.id AS \"version_id?\",\n            version.mod_id AS \"project_id?\",\n            COALESCE(file_hashes.hashes, '{}'::jsonb)\n                AS \"hashes!: Json<BTreeMap<String, String>>\"\n        FROM delphi_report_issue_details detail\n        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n        INNER JOIN delphi_reports report ON report.id = issue.report_id\n        LEFT JOIN files file ON file.id = report.file_id\n        LEFT JOIN versions version ON version.id = file.version_id\n        LEFT JOIN LATERAL (\n            SELECT\n                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes\n            FROM hashes\n            WHERE hashes.file_id = file.id\n        ) file_hashes ON TRUE\n        WHERE detail.id = ANY($1::bigint[])\n        ORDER BY detail.id\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "key",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 2,
+        "name": "issue_type",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 3,
+        "name": "severity: DelphiSeverity",
+        "type_info": {
+          "Custom": {
+            "name": "delphi_severity",
+            "kind": {
+              "Enum": [
+                "low",
+                "medium",
+                "high",
+                "severe"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 4,
+        "name": "jar",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 5,
+        "name": "file_path",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 6,
+        "name": "data: Json<HashMap<String, serde_json::Value>>",
+        "type_info": "Jsonb"
+      },
+      {
+        "ordinal": 7,
+        "name": "delphi_version",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 8,
+        "name": "size?",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 9,
+        "name": "file_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 10,
+        "name": "version_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 11,
+        "name": "project_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 12,
+        "name": "hashes!: Json<BTreeMap<String, String>>",
+        "type_info": "Jsonb"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8Array"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      true,
+      false,
+      false,
+      false,
+      true,
+      true,
+      true,
+      true,
+      null
+    ]
+  },
+  "hash": "868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9"
+}
diff --git a/apps/labrinth/.sqlx/query-89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7.json b/apps/labrinth/.sqlx/query-89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7.json
new file mode 100644
index 0000000000..5b26565b43
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7.json
@@ -0,0 +1,28 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        WITH project_membership AS (\n            SELECT\n                detail.project_id,\n                BOOL_OR(\n                    detail.status IN ('pending', 'unsafe')\n                    AND NOT detail.hidden\n                ) AS old_needs_review,\n                BOOL_OR(\n                    detail.status IN ('pending', 'unsafe')\n                    AND NOT COALESCE(new_effect.hidden, FALSE)\n                ) AS new_needs_review\n            FROM delphi_issue_details_with_statuses detail\n            LEFT JOIN delphi_rule_effects new_effect\n                ON new_effect.revision = $1\n                AND new_effect.detail_id = detail.id\n            GROUP BY detail.project_id\n        )\n        SELECT\n            project_id AS \"project_id!: DBProjectId\",\n            new_needs_review AS \"new_needs_review!\"\n        FROM project_membership\n        WHERE old_needs_review IS DISTINCT FROM new_needs_review\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id!: DBProjectId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "new_needs_review!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      true,
+      null
+    ]
+  },
+  "hash": "89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7"
+}
diff --git a/apps/labrinth/.sqlx/query-8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1.json b/apps/labrinth/.sqlx/query-8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1.json
new file mode 100644
index 0000000000..d44cf6d6d1
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1.json
@@ -0,0 +1,188 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n\t\tSELECT\n\t\t\tdelphi_rule.id,\n\t\t\tdelphi_rule.name,\n\t\t\tdelphi_rule.rule,\n\t\t\tdelphi_rule.priority,\n\t\t\tdelphi_rule.revision,\n\t\t\tdelphi_rule.created_at,\n\t\t\tdelphi_rule.updated_at,\n\t\t\tdelphi_rule.created_by,\n\t\t\tdelphi_rule.updated_by,\n\t\t\tCOALESCE(preview.affected_details_count, 0)\n\t\t\t\tAS \"affected_details_count!\",\n\t\t\tpreview.detail_id AS \"detail_id?: DelphiReportIssueDetailsId\",\n\t\t\tpreview.issue_id AS \"issue_id?: DelphiReportIssueId\",\n\t\t\tpreview.project_id AS \"project_id?: DBProjectId\",\n\t\t\tpreview.project_name AS \"project_name?\",\n\t\t\tpreview.project_icon_url AS \"project_icon_url?\",\n\t\t\tpreview.version_id AS \"version_id?: DBVersionId\",\n\t\t\tpreview.version_name AS \"version_name?\",\n\t\t\tpreview.version_number AS \"version_number?\",\n\t\t\tpreview.issue_type AS \"issue_type?\",\n\t\t\tpreview.key AS \"key?\",\n\t\t\tpreview.jar AS \"jar?\",\n\t\t\tpreview.file_path AS \"file_path?\",\n\t\t\tpreview.original_severity AS \"original_severity?: DelphiSeverity\",\n\t\t\tpreview.severity AS \"effect_severity?: DelphiSeverity\",\n\t\t\tpreview.hidden AS \"hidden?\"\n\t\tFROM delphi_rules delphi_rule\n\t\tLEFT JOIN LATERAL (\n\t\t\tSELECT\n\t\t\t\teffect.detail_id,\n\t\t\t\tdetail.issue_id,\n\t\t\t\tversion.mod_id AS project_id,\n\t\t\t\tproject.name AS project_name,\n\t\t\t\tproject.icon_url AS project_icon_url,\n\t\t\t\tversion.id AS version_id,\n\t\t\t\tversion.name AS version_name,\n\t\t\t\tversion.version_number,\n\t\t\t\tissue.issue_type,\n\t\t\t\tdetail.key,\n\t\t\t\tdetail.jar,\n\t\t\t\tdetail.file_path,\n\t\t\t\tdetail.severity AS original_severity,\n\t\t\t\teffect.severity,\n\t\t\t\teffect.hidden,\n\t\t\t\tCOUNT(*) OVER () AS affected_details_count\n\t\t\tFROM delphi_rule_effects effect\n\t\t\tINNER JOIN delphi_rule_revisions published\n\t\t\t\tON published.revision = effect.revision\n\t\t\tINNER JOIN delphi_report_issue_details detail\n\t\t\t\tON detail.id = effect.detail_id\n\t\t\tINNER JOIN delphi_report_issues issue\n\t\t\t\tON issue.id = detail.issue_id\n\t\t\tINNER JOIN delphi_reports report\n\t\t\t\tON report.id = issue.report_id\n\t\t\tLEFT JOIN files file ON file.id = report.file_id\n\t\t\tLEFT JOIN versions version ON version.id = file.version_id\n\t\t\tLEFT JOIN mods project ON project.id = version.mod_id\n\t\t\tWHERE effect.rule_id = delphi_rule.id\n\t\t\tORDER BY effect.detail_id DESC\n\t\t\tLIMIT 3\n\t\t) preview ON TRUE\n\t\tWHERE NOT delphi_rule.delete_on_next_revision\n\t\tORDER BY\n\t\t\tdelphi_rule.priority DESC,\n\t\t\tdelphi_rule.id,\n\t\t\tpreview.detail_id DESC\n\t\t",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "name",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 2,
+        "name": "rule",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 3,
+        "name": "priority",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 4,
+        "name": "revision",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 5,
+        "name": "created_at",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 6,
+        "name": "updated_at",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 7,
+        "name": "created_by",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 8,
+        "name": "updated_by",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 9,
+        "name": "affected_details_count!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 10,
+        "name": "detail_id?: DelphiReportIssueDetailsId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 11,
+        "name": "issue_id?: DelphiReportIssueId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 12,
+        "name": "project_id?: DBProjectId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 13,
+        "name": "project_name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 14,
+        "name": "project_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 15,
+        "name": "version_id?: DBVersionId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 16,
+        "name": "version_name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 17,
+        "name": "version_number?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 18,
+        "name": "issue_type?",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 19,
+        "name": "key?",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 20,
+        "name": "jar?",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 21,
+        "name": "file_path?",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 22,
+        "name": "original_severity?: DelphiSeverity",
+        "type_info": {
+          "Custom": {
+            "name": "delphi_severity",
+            "kind": {
+              "Enum": [
+                "low",
+                "medium",
+                "high",
+                "severe"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 23,
+        "name": "effect_severity?: DelphiSeverity",
+        "type_info": {
+          "Custom": {
+            "name": "delphi_severity",
+            "kind": {
+              "Enum": [
+                "low",
+                "medium",
+                "high",
+                "severe"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 24,
+        "name": "hidden?",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      false,
+      false,
+      false,
+      true,
+      true,
+      null,
+      false,
+      false,
+      false,
+      false,
+      true,
+      false,
+      false,
+      false,
+      false,
+      false,
+      true,
+      false,
+      false,
+      true,
+      false
+    ]
+  },
+  "hash": "8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1"
+}
diff --git a/apps/labrinth/.sqlx/query-9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5.json b/apps/labrinth/.sqlx/query-9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5.json
new file mode 100644
index 0000000000..82a88eab0e
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5.json
@@ -0,0 +1,26 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT id, rule\n        FROM delphi_rules\n        WHERE NOT delete_on_next_revision\n        ORDER BY priority DESC, id\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "rule",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5"
+}
diff --git a/apps/labrinth/.sqlx/query-9ab1f07c2968b5d445752c1480345c1fa3af3a899b232482aab9cc44b9336063.json b/apps/labrinth/.sqlx/query-9ab1f07c2968b5d445752c1480345c1fa3af3a899b232482aab9cc44b9336063.json
deleted file mode 100644
index 83806baae2..0000000000
--- a/apps/labrinth/.sqlx/query-9ab1f07c2968b5d445752c1480345c1fa3af3a899b232482aab9cc44b9336063.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        DELETE FROM delphi_report_issue_details drid\n        WHERE issue_id IN (\n            SELECT dri.id\n            FROM mods m\n            INNER JOIN versions v ON v.mod_id = m.id\n            INNER JOIN files f ON f.version_id = v.id\n            INNER JOIN delphi_reports dr ON dr.file_id = f.id\n            INNER JOIN delphi_report_issues dri ON dri.report_id = dr.id\n            WHERE m.id = $1 AND dri.issue_type = '__dummy'\n        )\n        ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "9ab1f07c2968b5d445752c1480345c1fa3af3a899b232482aab9cc44b9336063"
-}
diff --git a/apps/labrinth/.sqlx/query-9b0edb6399bc5f38ee96677cb2539476ecf08549b914f96f0c23fbfbe3f17f2e.json b/apps/labrinth/.sqlx/query-9b0edb6399bc5f38ee96677cb2539476ecf08549b914f96f0c23fbfbe3f17f2e.json
deleted file mode 100644
index c8aad7deda..0000000000
--- a/apps/labrinth/.sqlx/query-9b0edb6399bc5f38ee96677cb2539476ecf08549b914f96f0c23fbfbe3f17f2e.json
+++ /dev/null
@@ -1,20 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        SELECT DISTINCT m.id\n        FROM mods m\n        WHERE\n            EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n                WHERE\n                    didws.project_id = m.id\n                    AND didws.status = 'pending'\n                    -- see delphi.rs todo comment\n                    AND dri.issue_type != '__dummy'\n            )\n            AND NOT EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n                WHERE\n                    didws.project_id = m.id\n                    AND didws.status IN ('safe', 'unsafe')\n                    -- see delphi.rs todo comment\n                    AND dri.issue_type != '__dummy'\n            )\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "9b0edb6399bc5f38ee96677cb2539476ecf08549b914f96f0c23fbfbe3f17f2e"
-}
diff --git a/apps/labrinth/.sqlx/query-9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d.json b/apps/labrinth/.sqlx/query-9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d.json
new file mode 100644
index 0000000000..fb177cc69f
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d.json
@@ -0,0 +1,138 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH moderation_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.description,\n                    m.queued,\n                    m.published,\n                    m.organization_id,\n                    m.team_id,\n                    m.components\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $9::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                                AND NOT didws.hidden\n                        )\n                    )\n            ),\n            external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            version_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            queue_projects AS (\n                SELECT\n                    mp.id,\n                    mp.slug,\n                    mp.name,\n                    mp.summary,\n                    mp.description,\n                    mp.queued,\n                    mp.published,\n                    search_organization.name AS organization_name,\n                    search_owner.username AS owner_name,\n                    CASE\n                        WHEN mp.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(vpt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(vpt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ed.external_dependencies_count, 0) AS external_dependencies_count\n                FROM moderation_projects mp\n                LEFT JOIN organizations search_organization\n                    ON search_organization.id = mp.organization_id\n                    AND $3::text IS NOT NULL\n                LEFT JOIN LATERAL (\n                    SELECT\n                        u.username\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = mp.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) search_owner ON $3::text IS NOT NULL\n                    AND mp.organization_id IS NULL\n                LEFT JOIN external_dependencies ed ON ed.mod_id = mp.id\n                LEFT JOIN version_project_types vpt ON vpt.mod_id = mp.id\n            ),\n            filtered_projects AS (\n                SELECT\n                    id,\n                    queued,\n                    published,\n                    project_types,\n                    external_dependencies_count\n                FROM queue_projects\n                WHERE\n                    (\n                        $3::text IS NULL\n                        OR name ILIKE '%' || $3 || '%'\n                        OR slug ILIKE '%' || $3 || '%'\n                        OR summary ILIKE '%' || $3 || '%'\n                        OR description ILIKE '%' || $3 || '%'\n                        OR owner_name ILIKE '%' || $3 || '%'\n                        OR organization_name ILIKE '%' || $3 || '%'\n                        OR EXISTS (\n                            SELECT 1\n                            FROM UNNEST(project_types) AS searched_project_type(project_type)\n                            WHERE searched_project_type.project_type ILIKE '%' || $3 || '%'\n                        )\n                    )\n                    AND (\n                        $4::text IS NULL\n                        OR ($4 = 'none' AND CARDINALITY(project_types) = 0)\n                        OR ($4 = 'minecraft_java_server' AND project_types @> ARRAY['minecraft_java_server']::text[])\n                        OR ($4 <> 'none' AND $4 <> 'minecraft_java_server' AND\n                            project_types[1] = $4\n                        )\n                    )\n                    AND ($5::boolean IS NULL OR (external_dependencies_count > 0) = $5)\n            ),\n            total AS (\n                SELECT COUNT(*) AS total_count FROM filtered_projects\n            ),\n            page_ids AS (\n                SELECT\n                    id,\n                    queued,\n                    published,\n                    project_types,\n                    external_dependencies_count\n                FROM filtered_projects\n                ORDER BY\n                    CASE WHEN $8 = 'most_external_deps' THEN external_dependencies_count END DESC,\n                    CASE WHEN $8 = 'least_external_deps' THEN external_dependencies_count END ASC,\n                    CASE WHEN $8 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                    CASE WHEN $8 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(queued, published) END ASC NULLS LAST,\n                    id ASC\n                OFFSET $7\n                LIMIT $6\n            ),\n            page_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.icon_url,\n                    m.status,\n                    m.requested_status,\n                    m.queued,\n                    m.published,\n                    m.updated,\n                    m.organization_id,\n                    m.team_id,\n                    o.name AS organization_name,\n                    o.icon_url AS organization_icon_url,\n                    owner.user_id AS owner_id,\n                    owner.username AS owner_name,\n                    owner.avatar_url AS owner_icon_url,\n                    page_ids.project_types,\n                    page_ids.external_dependencies_count\n                FROM page_ids\n                INNER JOIN mods m ON m.id = page_ids.id\n                LEFT JOIN organizations o ON o.id = m.organization_id\n                LEFT JOIN LATERAL (\n                    SELECT\n                        tm.user_id,\n                        u.username,\n                        u.avatar_url\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = m.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) owner ON m.organization_id IS NULL\n            )\n            SELECT\n                total.total_count AS \"total_count!\",\n                page_projects.id AS \"id?\",\n                page_projects.slug AS \"slug?\",\n                page_projects.name AS \"name?\",\n                page_projects.summary AS \"summary?\",\n                page_projects.icon_url AS \"icon_url?\",\n                page_projects.status AS \"status?\",\n                page_projects.requested_status AS \"requested_status?\",\n                page_projects.queued AS \"queued?\",\n                page_projects.published AS \"published?\",\n                page_projects.updated AS \"updated?\",\n                page_projects.organization_id AS \"organization_id?\",\n                page_projects.organization_name AS \"organization_name?\",\n                page_projects.organization_icon_url AS \"organization_icon_url?\",\n                page_projects.owner_id AS \"owner_id?\",\n                page_projects.owner_name AS \"owner_name?\",\n                page_projects.owner_icon_url AS \"owner_icon_url?\",\n                page_projects.project_types AS \"project_types?: Vec<String>\",\n                page_projects.external_dependencies_count AS \"external_dependencies_count?\"\n            FROM total\n            LEFT JOIN page_projects ON true\n            ORDER BY\n                CASE WHEN $8 = 'most_external_deps' THEN page_projects.external_dependencies_count END DESC,\n                CASE WHEN $8 = 'least_external_deps' THEN page_projects.external_dependencies_count END ASC,\n                CASE WHEN $8 = 'newest' THEN COALESCE(page_projects.queued, page_projects.published) END DESC NULLS LAST,\n                CASE WHEN $8 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(page_projects.queued, page_projects.published) END ASC NULLS LAST,\n                page_projects.id ASC\n            ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "total_count!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "slug?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 3,
+        "name": "name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 4,
+        "name": "summary?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 5,
+        "name": "icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 6,
+        "name": "status?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 7,
+        "name": "requested_status?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 8,
+        "name": "queued?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 9,
+        "name": "published?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 10,
+        "name": "updated?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 11,
+        "name": "organization_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 12,
+        "name": "organization_name?",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 13,
+        "name": "organization_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 14,
+        "name": "owner_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 15,
+        "name": "owner_name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 16,
+        "name": "owner_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 17,
+        "name": "project_types?: Vec<String>",
+        "type_info": "TextArray"
+      },
+      {
+        "ordinal": 18,
+        "name": "external_dependencies_count?",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray",
+        "Text",
+        "Text",
+        "Bool",
+        "Int8",
+        "Int8",
+        "Text",
+        "Bool"
+      ]
+    },
+    "nullable": [
+      null,
+      false,
+      true,
+      false,
+      false,
+      true,
+      false,
+      true,
+      true,
+      false,
+      false,
+      true,
+      false,
+      true,
+      false,
+      false,
+      true,
+      null,
+      null
+    ]
+  },
+  "hash": "9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d"
+}
diff --git a/apps/labrinth/.sqlx/query-a1f38a33cc3159108dd7deda48a60ebdae8d60a6d555a625ee2ec5780ab78fc3.json b/apps/labrinth/.sqlx/query-a1f38a33cc3159108dd7deda48a60ebdae8d60a6d555a625ee2ec5780ab78fc3.json
new file mode 100644
index 0000000000..d43d795d65
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-a1f38a33cc3159108dd7deda48a60ebdae8d60a6d555a625ee2ec5780ab78fc3.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT DISTINCT detail.project_id AS \"project_id!: DBProjectId\"\n        FROM delphi_issue_details_with_statuses detail\n        WHERE detail.key = ANY($1::text[])\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id!: DBProjectId",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      true
+    ]
+  },
+  "hash": "a1f38a33cc3159108dd7deda48a60ebdae8d60a6d555a625ee2ec5780ab78fc3"
+}
diff --git a/apps/labrinth/.sqlx/query-055f71ec6d193c5f5259cafc989a04f3f791205e6c2df15c5bf9d5afcf71a76a.json b/apps/labrinth/.sqlx/query-a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475.json
similarity index 96%
rename from apps/labrinth/.sqlx/query-055f71ec6d193c5f5259cafc989a04f3f791205e6c2df15c5bf9d5afcf71a76a.json
rename to apps/labrinth/.sqlx/query-a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475.json
index cf686ee65a..51aed00156 100644
--- a/apps/labrinth/.sqlx/query-055f71ec6d193c5f5259cafc989a04f3f791205e6c2df15c5bf9d5afcf71a76a.json
+++ b/apps/labrinth/.sqlx/query-a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            didws.key AS \"detail_key!\",\n            didws.id AS \"detail_id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            dri.issue_type,\n            m.id AS \"project_id!: DBProjectId\",\n            m.slug AS \"project_slug?\",\n            m.name AS \"project_name!\",\n            v.id AS \"version_id!: DBVersionId\",\n            v.version_number,\n            f.id AS \"file_id!: DBFileId\",\n            f.filename AS \"file_name!\",\n            didws.jar AS \"jar?\",\n            didws.file_path AS \"file_path!\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            COALESCE(didv.verdict, 'pending'::delphi_report_issue_status)\n                AS \"local_status!: DelphiStatus\",\n            didws.status AS \"effective_status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n        INNER JOIN delphi_reports dr ON dr.id = dri.report_id\n        INNER JOIN files f ON f.id = dr.file_id\n        INNER JOIN versions v ON v.id = f.version_id\n        INNER JOIN mods m ON m.id = v.mod_id\n        LEFT JOIN delphi_issue_detail_verdicts didv\n            ON didv.project_id = didws.project_id\n            AND didv.detail_key = didws.key\n        WHERE\n            didws.key = $1\n            AND ($2::bigint IS NULL OR didws.id > $2)\n            AND dri.issue_type != '__dummy'\n        ORDER BY didws.id\n        LIMIT $3\n        ",
+  "query": "\n        SELECT\n            didws.key AS \"detail_key!\",\n            didws.id AS \"detail_id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            dri.issue_type,\n            m.id AS \"project_id!: DBProjectId\",\n            m.slug AS \"project_slug?\",\n            m.name AS \"project_name!\",\n            v.id AS \"version_id!: DBVersionId\",\n            v.version_number,\n            f.id AS \"file_id!: DBFileId\",\n            f.filename AS \"file_name!\",\n            didws.jar AS \"jar?\",\n            didws.file_path AS \"file_path!\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            COALESCE(didv.verdict, 'pending'::delphi_report_issue_status)\n                AS \"local_status!: DelphiStatus\",\n            didws.status AS \"effective_status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n        INNER JOIN delphi_reports dr ON dr.id = dri.report_id\n        INNER JOIN files f ON f.id = dr.file_id\n        INNER JOIN versions v ON v.id = f.version_id\n        INNER JOIN mods m ON m.id = v.mod_id\n        LEFT JOIN delphi_issue_detail_verdicts didv\n            ON didv.project_id = didws.project_id\n            AND didv.detail_key = didws.key\n        WHERE\n            didws.key = $1\n            AND ($2::bigint IS NULL OR didws.id > $2)\n            AND NOT didws.hidden\n        ORDER BY didws.id\n        LIMIT $3\n        ",
   "describe": {
     "columns": [
       {
@@ -144,5 +144,5 @@
       true
     ]
   },
-  "hash": "055f71ec6d193c5f5259cafc989a04f3f791205e6c2df15c5bf9d5afcf71a76a"
+  "hash": "a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475"
 }
diff --git a/apps/labrinth/.sqlx/query-ab87c1771628979a051e4b30cd6afa32576d95e5861cc857276e099b18a5e1f4.json b/apps/labrinth/.sqlx/query-ab87c1771628979a051e4b30cd6afa32576d95e5861cc857276e099b18a5e1f4.json
new file mode 100644
index 0000000000..b8322723a3
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-ab87c1771628979a051e4b30cd6afa32576d95e5861cc857276e099b18a5e1f4.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE delphi_rule_revisions SET revision = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "ab87c1771628979a051e4b30cd6afa32576d95e5861cc857276e099b18a5e1f4"
+}
diff --git a/apps/labrinth/.sqlx/query-abef4603febf18dae62ca424b0433f2bacc2555433277ee195ed6fbedb7be537.json b/apps/labrinth/.sqlx/query-abef4603febf18dae62ca424b0433f2bacc2555433277ee195ed6fbedb7be537.json
new file mode 100644
index 0000000000..155fd19fbd
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-abef4603febf18dae62ca424b0433f2bacc2555433277ee195ed6fbedb7be537.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT revision FROM delphi_rule_revisions LIMIT 1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "revision",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "abef4603febf18dae62ca424b0433f2bacc2555433277ee195ed6fbedb7be537"
+}
diff --git a/apps/labrinth/.sqlx/query-5e5fcfa6ac68f296ba5238e8211f8e206473f11fe1796fc2feda15f8d0ee7f41.json b/apps/labrinth/.sqlx/query-b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9.json
similarity index 77%
rename from apps/labrinth/.sqlx/query-5e5fcfa6ac68f296ba5238e8211f8e206473f11fe1796fc2feda15f8d0ee7f41.json
rename to apps/labrinth/.sqlx/query-b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9.json
index 99e2d4391d..e77b9af062 100644
--- a/apps/labrinth/.sqlx/query-5e5fcfa6ac68f296ba5238e8211f8e206473f11fe1796fc2feda15f8d0ee7f41.json
+++ b/apps/labrinth/.sqlx/query-b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            dgdv.detail_key,\n            dgdv.verdict AS \"verdict!: DelphiStatus\",\n            COUNT(dri.id) AS \"local_trace_count!\"\n        FROM delphi_global_detail_verdicts dgdv\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.key = dgdv.detail_key\n        LEFT JOIN delphi_report_issues dri\n            ON dri.id = didws.issue_id\n            AND dri.issue_type != '__dummy'\n        WHERE dgdv.detail_key = $1\n        GROUP BY dgdv.detail_key, dgdv.verdict\n        ",
+  "query": "\n        SELECT\n            dgdv.detail_key,\n            dgdv.verdict AS \"verdict!: DelphiStatus\",\n            COUNT(dri.id) AS \"local_trace_count!\"\n        FROM delphi_global_detail_verdicts dgdv\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.key = dgdv.detail_key\n            AND NOT didws.hidden\n        LEFT JOIN delphi_report_issues dri\n            ON dri.id = didws.issue_id\n        WHERE dgdv.detail_key = $1\n        GROUP BY dgdv.detail_key, dgdv.verdict\n        ",
   "describe": {
     "columns": [
       {
@@ -41,5 +41,5 @@
       null
     ]
   },
-  "hash": "5e5fcfa6ac68f296ba5238e8211f8e206473f11fe1796fc2feda15f8d0ee7f41"
+  "hash": "b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9"
 }
diff --git a/apps/labrinth/.sqlx/query-7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79.json b/apps/labrinth/.sqlx/query-b5233d5b729fae87fdf24e7d5f9ee6c96fe5a33015ba94bc2c606c31f87af9c9.json
similarity index 51%
rename from apps/labrinth/.sqlx/query-7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79.json
rename to apps/labrinth/.sqlx/query-b5233d5b729fae87fdf24e7d5f9ee6c96fe5a33015ba94bc2c606c31f87af9c9.json
index 9262ec39d7..c26c415abd 100644
--- a/apps/labrinth/.sqlx/query-7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79.json
+++ b/apps/labrinth/.sqlx/query-b5233d5b729fae87fdf24e7d5f9ee6c96fe5a33015ba94bc2c606c31f87af9c9.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tdelete_on_next_revision = TRUE,\n\t\t\tupdated_at = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $2\n\t\tWHERE id = $1 AND NOT delete_on_next_revision\n\t\tRETURNING id\n\t\t",
+  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tdelete_on_next_revision = TRUE,\n\t\t\trevision = (\n\t\t\t\tSELECT revision + 1 FROM delphi_rule_revisions LIMIT 1\n\t\t\t),\n\t\t\tupdated_at = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $2\n\t\tWHERE id = $1 AND NOT delete_on_next_revision\n\t\tRETURNING id\n\t\t",
   "describe": {
     "columns": [
       {
@@ -19,5 +19,5 @@
       false
     ]
   },
-  "hash": "7b4ee9c2fb7ef8da9bce4d86d4271aa078119ed2c60828683f872321fb61bb79"
+  "hash": "b5233d5b729fae87fdf24e7d5f9ee6c96fe5a33015ba94bc2c606c31f87af9c9"
 }
diff --git a/apps/labrinth/.sqlx/query-bb94018c84f3809b9ad89f35ff08501addc8f203a0a152346aaebd32db52be30.json b/apps/labrinth/.sqlx/query-bb94018c84f3809b9ad89f35ff08501addc8f203a0a152346aaebd32db52be30.json
deleted file mode 100644
index 247c99cd89..0000000000
--- a/apps/labrinth/.sqlx/query-bb94018c84f3809b9ad89f35ff08501addc8f203a0a152346aaebd32db52be30.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        WITH project_ids AS (\n            SELECT unnest($1::bigint[]) AS project_id\n        )\n        SELECT\n            p.project_id AS \"project_id!: DBProjectId\",\n            EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n                WHERE\n                    didws.project_id = p.project_id\n                    AND didws.status = 'pending'\n                    AND dri.issue_type != $3\n            ) AS \"has_pending_detail!\",\n            EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n                WHERE\n                    didws.project_id = p.project_id\n                    AND didws.status = 'unsafe'\n                    AND dri.issue_type != $3\n            ) AS \"has_unsafe_detail!\",\n            EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n                WHERE\n                    didws.project_id = p.project_id\n                    AND didws.status = 'pending'\n                    AND dri.issue_type = $3\n            ) AS \"has_dummy!\",\n            (\n                SELECT t.id\n                FROM threads t\n                WHERE t.mod_id = p.project_id\n                ORDER BY t.id\n                LIMIT 1\n            ) AS \"thread_id: DBThreadId\",\n            (\n                SELECT tm.body->>'type'\n                FROM threads t\n                INNER JOIN threads_messages tm ON tm.thread_id = t.id\n                WHERE\n                    t.mod_id = p.project_id\n                    AND tm.body->>'type' = ANY($2::text[])\n                ORDER BY tm.created DESC, tm.id DESC\n                LIMIT 1\n            ) AS \"last_tech_review_message_type\",\n            (\n                SELECT dr.id\n                FROM versions v\n                INNER JOIN files f ON f.version_id = v.id\n                INNER JOIN delphi_reports dr ON dr.file_id = f.id\n                WHERE v.mod_id = p.project_id\n                ORDER BY dr.created DESC, dr.id DESC\n                LIMIT 1\n            ) AS \"report_id: DelphiReportId\"\n        FROM project_ids p\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "project_id!: DBProjectId",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "has_pending_detail!",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 2,
-        "name": "has_unsafe_detail!",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 3,
-        "name": "has_dummy!",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 4,
-        "name": "thread_id: DBThreadId",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 5,
-        "name": "last_tech_review_message_type",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 6,
-        "name": "report_id: DelphiReportId",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8Array",
-        "TextArray",
-        "Text"
-      ]
-    },
-    "nullable": [
-      null,
-      null,
-      null,
-      null,
-      null,
-      null,
-      null
-    ]
-  },
-  "hash": "bb94018c84f3809b9ad89f35ff08501addc8f203a0a152346aaebd32db52be30"
-}
diff --git a/apps/labrinth/.sqlx/query-52ef6d02f8d533fc4e4ceb141d07a2eb115dc88da24735fffeca3eb1c269ad53.json b/apps/labrinth/.sqlx/query-c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638.json
similarity index 76%
rename from apps/labrinth/.sqlx/query-52ef6d02f8d533fc4e4ceb141d07a2eb115dc88da24735fffeca3eb1c269ad53.json
rename to apps/labrinth/.sqlx/query-c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638.json
index a0657d3e6d..58b6b2db78 100644
--- a/apps/labrinth/.sqlx/query-52ef6d02f8d533fc4e4ceb141d07a2eb115dc88da24735fffeca3eb1c269ad53.json
+++ b/apps/labrinth/.sqlx/query-c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            didws.id AS \"issue_detail_id!\"\n        FROM mods m\n        INNER JOIN versions v ON v.mod_id = m.id\n        INNER JOIN files f ON f.version_id = v.id\n        INNER JOIN delphi_reports dr ON dr.file_id = f.id\n        INNER JOIN delphi_report_issues dri ON dri.report_id = dr.id\n        INNER JOIN delphi_issue_details_with_statuses didws ON didws.issue_id = dri.id\n        WHERE\n            m.id = $1\n            AND didws.status = 'pending'\n            -- see delphi.rs todo comment\n            AND dri.issue_type != '__dummy'\n        ",
+  "query": "\n        SELECT\n            didws.id AS \"issue_detail_id!\"\n        FROM mods m\n        INNER JOIN versions v ON v.mod_id = m.id\n        INNER JOIN files f ON f.version_id = v.id\n        INNER JOIN delphi_reports dr ON dr.file_id = f.id\n        INNER JOIN delphi_report_issues dri ON dri.report_id = dr.id\n        INNER JOIN delphi_issue_details_with_statuses didws ON didws.issue_id = dri.id\n        WHERE\n            m.id = $1\n            AND didws.status = 'pending'\n            AND NOT didws.hidden\n        ",
   "describe": {
     "columns": [
       {
@@ -18,5 +18,5 @@
       true
     ]
   },
-  "hash": "52ef6d02f8d533fc4e4ceb141d07a2eb115dc88da24735fffeca3eb1c269ad53"
+  "hash": "c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638"
 }
diff --git a/apps/labrinth/.sqlx/query-ca8493b59004511e8d26200638951d55a61c2b6466db69a81be975e150b3ef41.json b/apps/labrinth/.sqlx/query-ca8493b59004511e8d26200638951d55a61c2b6466db69a81be975e150b3ef41.json
deleted file mode 100644
index 91c2728ad9..0000000000
--- a/apps/labrinth/.sqlx/query-ca8493b59004511e8d26200638951d55a61c2b6466db69a81be975e150b3ef41.json
+++ /dev/null
@@ -1,138 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            WITH moderation_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.description,\n                    m.queued,\n                    m.published,\n                    m.organization_id,\n                    m.team_id,\n                    m.components\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $9::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                        )\n                    )\n            ),\n            external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            version_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            queue_projects AS (\n                SELECT\n                    mp.id,\n                    mp.slug,\n                    mp.name,\n                    mp.summary,\n                    mp.description,\n                    mp.queued,\n                    mp.published,\n                    search_organization.name AS organization_name,\n                    search_owner.username AS owner_name,\n                    CASE\n                        WHEN mp.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(vpt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(vpt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ed.external_dependencies_count, 0) AS external_dependencies_count\n                FROM moderation_projects mp\n                LEFT JOIN organizations search_organization\n                    ON search_organization.id = mp.organization_id\n                    AND $3::text IS NOT NULL\n                LEFT JOIN LATERAL (\n                    SELECT\n                        u.username\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = mp.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) search_owner ON $3::text IS NOT NULL\n                    AND mp.organization_id IS NULL\n                LEFT JOIN external_dependencies ed ON ed.mod_id = mp.id\n                LEFT JOIN version_project_types vpt ON vpt.mod_id = mp.id\n            ),\n            filtered_projects AS (\n                SELECT\n                    id,\n                    queued,\n                    published,\n                    project_types,\n                    external_dependencies_count\n                FROM queue_projects\n                WHERE\n                    (\n                        $3::text IS NULL\n                        OR name ILIKE '%' || $3 || '%'\n                        OR slug ILIKE '%' || $3 || '%'\n                        OR summary ILIKE '%' || $3 || '%'\n                        OR description ILIKE '%' || $3 || '%'\n                        OR owner_name ILIKE '%' || $3 || '%'\n                        OR organization_name ILIKE '%' || $3 || '%'\n                        OR EXISTS (\n                            SELECT 1\n                            FROM UNNEST(project_types) AS searched_project_type(project_type)\n                            WHERE searched_project_type.project_type ILIKE '%' || $3 || '%'\n                        )\n                    )\n                    AND (\n                        $4::text IS NULL\n                        OR ($4 = 'none' AND CARDINALITY(project_types) = 0)\n                        OR ($4 = 'minecraft_java_server' AND project_types @> ARRAY['minecraft_java_server']::text[])\n                        OR ($4 <> 'none' AND $4 <> 'minecraft_java_server' AND\n                            project_types[1] = $4\n                        )\n                    )\n                    AND ($5::boolean IS NULL OR (external_dependencies_count > 0) = $5)\n            ),\n            total AS (\n                SELECT COUNT(*) AS total_count FROM filtered_projects\n            ),\n            page_ids AS (\n                SELECT\n                    id,\n                    queued,\n                    published,\n                    project_types,\n                    external_dependencies_count\n                FROM filtered_projects\n                ORDER BY\n                    CASE WHEN $8 = 'most_external_deps' THEN external_dependencies_count END DESC,\n                    CASE WHEN $8 = 'least_external_deps' THEN external_dependencies_count END ASC,\n                    CASE WHEN $8 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                    CASE WHEN $8 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(queued, published) END ASC NULLS LAST,\n                    id ASC\n                OFFSET $7\n                LIMIT $6\n            ),\n            page_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.icon_url,\n                    m.status,\n                    m.requested_status,\n                    m.queued,\n                    m.published,\n                    m.updated,\n                    m.organization_id,\n                    m.team_id,\n                    o.name AS organization_name,\n                    o.icon_url AS organization_icon_url,\n                    owner.user_id AS owner_id,\n                    owner.username AS owner_name,\n                    owner.avatar_url AS owner_icon_url,\n                    page_ids.project_types,\n                    page_ids.external_dependencies_count\n                FROM page_ids\n                INNER JOIN mods m ON m.id = page_ids.id\n                LEFT JOIN organizations o ON o.id = m.organization_id\n                LEFT JOIN LATERAL (\n                    SELECT\n                        tm.user_id,\n                        u.username,\n                        u.avatar_url\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = m.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) owner ON m.organization_id IS NULL\n            )\n            SELECT\n                total.total_count AS \"total_count!\",\n                page_projects.id AS \"id?\",\n                page_projects.slug AS \"slug?\",\n                page_projects.name AS \"name?\",\n                page_projects.summary AS \"summary?\",\n                page_projects.icon_url AS \"icon_url?\",\n                page_projects.status AS \"status?\",\n                page_projects.requested_status AS \"requested_status?\",\n                page_projects.queued AS \"queued?\",\n                page_projects.published AS \"published?\",\n                page_projects.updated AS \"updated?\",\n                page_projects.organization_id AS \"organization_id?\",\n                page_projects.organization_name AS \"organization_name?\",\n                page_projects.organization_icon_url AS \"organization_icon_url?\",\n                page_projects.owner_id AS \"owner_id?\",\n                page_projects.owner_name AS \"owner_name?\",\n                page_projects.owner_icon_url AS \"owner_icon_url?\",\n                page_projects.project_types AS \"project_types?: Vec<String>\",\n                page_projects.external_dependencies_count AS \"external_dependencies_count?\"\n            FROM total\n            LEFT JOIN page_projects ON true\n            ORDER BY\n                CASE WHEN $8 = 'most_external_deps' THEN page_projects.external_dependencies_count END DESC,\n                CASE WHEN $8 = 'least_external_deps' THEN page_projects.external_dependencies_count END ASC,\n                CASE WHEN $8 = 'newest' THEN COALESCE(page_projects.queued, page_projects.published) END DESC NULLS LAST,\n                CASE WHEN $8 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(page_projects.queued, page_projects.published) END ASC NULLS LAST,\n                page_projects.id ASC\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "total_count!",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 2,
-        "name": "slug?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 3,
-        "name": "name?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 4,
-        "name": "summary?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 5,
-        "name": "icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 6,
-        "name": "status?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 7,
-        "name": "requested_status?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 8,
-        "name": "queued?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 9,
-        "name": "published?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 10,
-        "name": "updated?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 11,
-        "name": "organization_id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 12,
-        "name": "organization_name?",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 13,
-        "name": "organization_icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 14,
-        "name": "owner_id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 15,
-        "name": "owner_name?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 16,
-        "name": "owner_icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 17,
-        "name": "project_types?: Vec<String>",
-        "type_info": "TextArray"
-      },
-      {
-        "ordinal": 18,
-        "name": "external_dependencies_count?",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "TextArray",
-        "Text",
-        "Text",
-        "Bool",
-        "Int8",
-        "Int8",
-        "Text",
-        "Bool"
-      ]
-    },
-    "nullable": [
-      null,
-      false,
-      true,
-      false,
-      false,
-      true,
-      false,
-      true,
-      true,
-      false,
-      false,
-      true,
-      false,
-      true,
-      false,
-      false,
-      true,
-      null,
-      null
-    ]
-  },
-  "hash": "ca8493b59004511e8d26200638951d55a61c2b6466db69a81be975e150b3ef41"
-}
diff --git a/apps/labrinth/.sqlx/query-cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530.json b/apps/labrinth/.sqlx/query-cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530.json
new file mode 100644
index 0000000000..a17f724a63
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530.json
@@ -0,0 +1,135 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH filtered_projects AS (\n                SELECT\n                    m.id,\n                    m.queued,\n                    m.published\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $6::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                                AND NOT didws.hidden\n                        )\n                    )\n            ),\n            total AS (\n                SELECT COUNT(*) AS total_count FROM filtered_projects\n            ),\n            page_ids AS (\n                SELECT\n                    id,\n                    queued,\n                    published\n                FROM filtered_projects\n                ORDER BY\n                    CASE WHEN $5 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                    CASE WHEN $5 = 'oldest' THEN COALESCE(queued, published) END ASC NULLS LAST,\n                    id ASC\n                OFFSET $4\n                LIMIT $3\n            ),\n            page_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN page_ids page ON page.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            page_external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN page_ids page ON page.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            page_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.icon_url,\n                    m.status,\n                    m.requested_status,\n                    m.queued,\n                    m.published,\n                    m.updated,\n                    m.organization_id,\n                    o.name AS organization_name,\n                    o.icon_url AS organization_icon_url,\n                    owner.user_id AS owner_id,\n                    owner.username AS owner_name,\n                    owner.avatar_url AS owner_icon_url,\n                    CASE\n                        WHEN m.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(ppt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(ppt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ped.external_dependencies_count, 0) AS external_dependencies_count\n                FROM page_ids page\n                INNER JOIN mods m ON m.id = page.id\n                LEFT JOIN organizations o ON o.id = m.organization_id\n                LEFT JOIN LATERAL (\n                    SELECT\n                        tm.user_id,\n                        u.username,\n                        u.avatar_url\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = m.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) owner ON m.organization_id IS NULL\n                LEFT JOIN page_project_types ppt ON ppt.mod_id = m.id\n                LEFT JOIN page_external_dependencies ped ON ped.mod_id = m.id\n            )\n            SELECT\n                total.total_count AS \"total_count!\",\n                page_projects.id AS \"id?\",\n                page_projects.slug AS \"slug?\",\n                page_projects.name AS \"name?\",\n                page_projects.summary AS \"summary?\",\n                page_projects.icon_url AS \"icon_url?\",\n                page_projects.status AS \"status?\",\n                page_projects.requested_status AS \"requested_status?\",\n                page_projects.queued AS \"queued?\",\n                page_projects.published AS \"published?\",\n                page_projects.updated AS \"updated?\",\n                page_projects.organization_id AS \"organization_id?\",\n                page_projects.organization_name AS \"organization_name?\",\n                page_projects.organization_icon_url AS \"organization_icon_url?\",\n                page_projects.owner_id AS \"owner_id?\",\n                page_projects.owner_name AS \"owner_name?\",\n                page_projects.owner_icon_url AS \"owner_icon_url?\",\n                page_projects.project_types AS \"project_types?: Vec<String>\",\n                page_projects.external_dependencies_count AS \"external_dependencies_count?\"\n            FROM total\n            LEFT JOIN page_projects ON true\n            ORDER BY\n                CASE WHEN $5 = 'newest' THEN COALESCE(page_projects.queued, page_projects.published) END DESC NULLS LAST,\n                CASE WHEN $5 = 'oldest' THEN COALESCE(page_projects.queued, page_projects.published) END ASC NULLS LAST,\n                page_projects.id ASC\n            ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "total_count!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "slug?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 3,
+        "name": "name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 4,
+        "name": "summary?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 5,
+        "name": "icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 6,
+        "name": "status?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 7,
+        "name": "requested_status?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 8,
+        "name": "queued?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 9,
+        "name": "published?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 10,
+        "name": "updated?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 11,
+        "name": "organization_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 12,
+        "name": "organization_name?",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 13,
+        "name": "organization_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 14,
+        "name": "owner_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 15,
+        "name": "owner_name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 16,
+        "name": "owner_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 17,
+        "name": "project_types?: Vec<String>",
+        "type_info": "TextArray"
+      },
+      {
+        "ordinal": 18,
+        "name": "external_dependencies_count?",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray",
+        "Int8",
+        "Int8",
+        "Text",
+        "Bool"
+      ]
+    },
+    "nullable": [
+      null,
+      false,
+      true,
+      false,
+      false,
+      true,
+      false,
+      true,
+      true,
+      false,
+      false,
+      true,
+      false,
+      true,
+      false,
+      false,
+      true,
+      null,
+      null
+    ]
+  },
+  "hash": "cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530"
+}
diff --git a/apps/labrinth/.sqlx/query-d4d04f7cfd6efa582970ec0636f16df646df14ec647f7f2017d59fe786b9ad5b.json b/apps/labrinth/.sqlx/query-d4d04f7cfd6efa582970ec0636f16df646df14ec647f7f2017d59fe786b9ad5b.json
new file mode 100644
index 0000000000..1760686240
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-d4d04f7cfd6efa582970ec0636f16df646df14ec647f7f2017d59fe786b9ad5b.json
@@ -0,0 +1,28 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        WITH removed AS (\n            DELETE FROM delphi_tech_review_queue\n            WHERE project_id = ANY($1::bigint[])\n            RETURNING project_id\n        )\n        SELECT\n            removed.project_id AS \"project_id!: DBProjectId\",\n            (\n                SELECT thread.id\n                FROM threads thread\n                WHERE thread.mod_id = removed.project_id\n                ORDER BY thread.id\n                LIMIT 1\n            ) AS \"thread_id!: DBThreadId\"\n        FROM removed\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id!: DBProjectId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "thread_id!: DBThreadId",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8Array"
+      ]
+    },
+    "nullable": [
+      false,
+      null
+    ]
+  },
+  "hash": "d4d04f7cfd6efa582970ec0636f16df646df14ec647f7f2017d59fe786b9ad5b"
+}
diff --git a/apps/labrinth/.sqlx/query-4680c4a59c6679f90e3b9e1a33ed1cb1fb60b93ffb79ba5b99e01ee0c14c991a.json b/apps/labrinth/.sqlx/query-e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d.json
similarity index 71%
rename from apps/labrinth/.sqlx/query-4680c4a59c6679f90e3b9e1a33ed1cb1fb60b93ffb79ba5b99e01ee0c14c991a.json
rename to apps/labrinth/.sqlx/query-e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d.json
index 21c5f042e6..95d91ae7e1 100644
--- a/apps/labrinth/.sqlx/query-4680c4a59c6679f90e3b9e1a33ed1cb1fb60b93ffb79ba5b99e01ee0c14c991a.json
+++ b/apps/labrinth/.sqlx/query-e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            dgdv.detail_key,\n            dgdv.verdict AS \"verdict!: DelphiStatus\",\n            COUNT(dri.id) AS \"local_trace_count!\"\n        FROM delphi_global_detail_verdicts dgdv\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.key = dgdv.detail_key\n        LEFT JOIN delphi_report_issues dri\n            ON dri.id = didws.issue_id\n            AND dri.issue_type != '__dummy'\n        WHERE (\n            $1::text IS NULL\n            OR dgdv.detail_key ILIKE '%' || $1 || '%'\n        )\n        GROUP BY dgdv.detail_key, dgdv.verdict\n        ORDER BY dgdv.detail_key\n        LIMIT $2 OFFSET $3\n        ",
+  "query": "\n        SELECT\n            dgdv.detail_key,\n            dgdv.verdict AS \"verdict!: DelphiStatus\",\n            COUNT(dri.id) AS \"local_trace_count!\"\n        FROM delphi_global_detail_verdicts dgdv\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.key = dgdv.detail_key\n            AND NOT didws.hidden\n        LEFT JOIN delphi_report_issues dri\n            ON dri.id = didws.issue_id\n        WHERE (\n            $1::text IS NULL\n            OR dgdv.detail_key ILIKE '%' || $1 || '%'\n        )\n        GROUP BY dgdv.detail_key, dgdv.verdict\n        ORDER BY dgdv.detail_key\n        LIMIT $2 OFFSET $3\n        ",
   "describe": {
     "columns": [
       {
@@ -43,5 +43,5 @@
       null
     ]
   },
-  "hash": "4680c4a59c6679f90e3b9e1a33ed1cb1fb60b93ffb79ba5b99e01ee0c14c991a"
+  "hash": "e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d"
 }
diff --git a/apps/labrinth/.sqlx/query-e3c356bd41074ba4b3474dfab5cc0349636abea5b21faf5fc18d9f69fd21db1d.json b/apps/labrinth/.sqlx/query-e3c356bd41074ba4b3474dfab5cc0349636abea5b21faf5fc18d9f69fd21db1d.json
deleted file mode 100644
index cfb283ab10..0000000000
--- a/apps/labrinth/.sqlx/query-e3c356bd41074ba4b3474dfab5cc0349636abea5b21faf5fc18d9f69fd21db1d.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        SELECT DISTINCT didws.project_id AS \"project_id!: DBProjectId\"\n        FROM delphi_issue_details_with_statuses didws\n        INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n        WHERE\n            didws.id = ANY($1::bigint[])\n            AND dri.issue_type != '__dummy'\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "project_id!: DBProjectId",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8Array"
-      ]
-    },
-    "nullable": [
-      true
-    ]
-  },
-  "hash": "e3c356bd41074ba4b3474dfab5cc0349636abea5b21faf5fc18d9f69fd21db1d"
-}
diff --git a/apps/labrinth/.sqlx/query-e67fda05dacea7a0b6290e8b69932ad27e5a0dd128af9273d1d6179e60f9ea0b.json b/apps/labrinth/.sqlx/query-e67fda05dacea7a0b6290e8b69932ad27e5a0dd128af9273d1d6179e60f9ea0b.json
new file mode 100644
index 0000000000..82f38da2f6
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-e67fda05dacea7a0b6290e8b69932ad27e5a0dd128af9273d1d6179e60f9ea0b.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SET TRANSACTION ISOLATION LEVEL REPEATABLE READ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "e67fda05dacea7a0b6290e8b69932ad27e5a0dd128af9273d1d6179e60f9ea0b"
+}
diff --git a/apps/labrinth/.sqlx/query-e8b6e423aaf62046afd19fb1e177a3ef1f18f4814df8924926c47d4b0c7145c7.json b/apps/labrinth/.sqlx/query-e8b6e423aaf62046afd19fb1e177a3ef1f18f4814df8924926c47d4b0c7145c7.json
deleted file mode 100644
index 1e3e8c4d7f..0000000000
--- a/apps/labrinth/.sqlx/query-e8b6e423aaf62046afd19fb1e177a3ef1f18f4814df8924926c47d4b0c7145c7.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        WITH incoming AS (\n            SELECT *\n            FROM unnest($1::bigint[], $2::text[]) WITH ORDINALITY\n                AS u(detail_id, verdict, ord)\n        ),\n        resolved AS (\n            SELECT\n                i.ord,\n                didws.project_id,\n                didws.key AS detail_key,\n                i.verdict\n            FROM incoming i\n            INNER JOIN delphi_issue_details_with_statuses didws ON didws.id = i.detail_id\n            INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n            WHERE\n                -- see delphi.rs todo comment\n                dri.issue_type != '__dummy'\n        ),\n        validated AS (\n            SELECT\n                (SELECT COUNT(*) FROM incoming) AS incoming_count,\n                (SELECT COUNT(*) FROM resolved) AS resolved_count\n        ),\n        latest AS (\n            SELECT DISTINCT ON (project_id, detail_key)\n                project_id,\n                detail_key,\n                verdict\n            FROM resolved\n            ORDER BY project_id, detail_key, ord DESC\n        ),\n        deleted AS (\n            DELETE FROM delphi_issue_detail_verdicts didv\n            USING latest\n            WHERE\n                didv.project_id = latest.project_id\n                AND didv.detail_key = latest.detail_key\n                AND latest.verdict = 'pending'\n            RETURNING 1\n        ),\n        upserted AS (\n            INSERT INTO delphi_issue_detail_verdicts (\n                project_id,\n                detail_key,\n                verdict\n            )\n            SELECT\n                project_id,\n                detail_key,\n                verdict::delphi_report_issue_status\n            FROM latest\n            WHERE verdict != 'pending'\n            ON CONFLICT (project_id, detail_key)\n            DO UPDATE SET verdict = EXCLUDED.verdict\n            RETURNING 1\n        )\n        SELECT\n            (v.incoming_count = v.resolved_count) AS \"all_found!\",\n            (SELECT COUNT(*) FROM upserted) AS \"upserted_count!\"\n        FROM validated v\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "all_found!",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 1,
-        "name": "upserted_count!",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8Array",
-        "TextArray"
-      ]
-    },
-    "nullable": [
-      null,
-      null
-    ]
-  },
-  "hash": "e8b6e423aaf62046afd19fb1e177a3ef1f18f4814df8924926c47d4b0c7145c7"
-}
diff --git a/apps/labrinth/.sqlx/query-87d30e8802ebe69858141d0d918cafb5286f984cfe55ad1a7ac2219ec50539a4.json b/apps/labrinth/.sqlx/query-ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7.json
similarity index 79%
rename from apps/labrinth/.sqlx/query-87d30e8802ebe69858141d0d918cafb5286f984cfe55ad1a7ac2219ec50539a4.json
rename to apps/labrinth/.sqlx/query-ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7.json
index eabfd4299d..4e5742b00a 100644
--- a/apps/labrinth/.sqlx/query-87d30e8802ebe69858141d0d918cafb5286f984cfe55ad1a7ac2219ec50539a4.json
+++ b/apps/labrinth/.sqlx/query-ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        WITH ranked_local_traces AS (\n            SELECT\n                didws.key AS detail_key,\n                didws.id AS detail_id,\n                didws.issue_id,\n                dri.issue_type,\n                m.id AS project_id,\n                m.slug AS project_slug,\n                m.name AS project_name,\n                v.id AS version_id,\n                v.version_number,\n                f.id AS file_id,\n                f.filename AS file_name,\n                didws.jar,\n                didws.file_path,\n                didws.severity,\n                COALESCE(didv.verdict, 'pending'::delphi_report_issue_status)\n                    AS local_status,\n                didws.status AS effective_status,\n                ROW_NUMBER() OVER (\n                    PARTITION BY didws.key\n                    ORDER BY didws.id\n                ) AS row_num\n            FROM delphi_issue_details_with_statuses didws\n            INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n            INNER JOIN delphi_reports dr ON dr.id = dri.report_id\n            INNER JOIN files f ON f.id = dr.file_id\n            INNER JOIN versions v ON v.id = f.version_id\n            INNER JOIN mods m ON m.id = v.mod_id\n            LEFT JOIN delphi_issue_detail_verdicts didv\n                ON didv.project_id = didws.project_id\n                AND didv.detail_key = didws.key\n            WHERE\n                didws.key = ANY($1::text[])\n                AND dri.issue_type != '__dummy'\n        )\n        SELECT\n            detail_key AS \"detail_key!\",\n            detail_id AS \"detail_id!: DelphiReportIssueDetailsId\",\n            issue_id AS \"issue_id!: DelphiReportIssueId\",\n            issue_type,\n            project_id AS \"project_id!: DBProjectId\",\n            project_slug AS \"project_slug?\",\n            project_name AS \"project_name!\",\n            version_id AS \"version_id!: DBVersionId\",\n            v.version_number,\n            file_id AS \"file_id!: DBFileId\",\n            file_name AS \"file_name!\",\n            jar AS \"jar?\",\n            file_path AS \"file_path!\",\n            severity AS \"severity!: DelphiSeverity\",\n            local_status AS \"local_status!: DelphiStatus\",\n            effective_status AS \"effective_status!: DelphiStatus\"\n        FROM ranked_local_traces v\n        WHERE row_num <= $2\n        ORDER BY detail_key, detail_id\n        ",
+  "query": "\n        WITH ranked_local_traces AS (\n            SELECT\n                didws.key AS detail_key,\n                didws.id AS detail_id,\n                didws.issue_id,\n                dri.issue_type,\n                m.id AS project_id,\n                m.slug AS project_slug,\n                m.name AS project_name,\n                v.id AS version_id,\n                v.version_number,\n                f.id AS file_id,\n                f.filename AS file_name,\n                didws.jar,\n                didws.file_path,\n                didws.severity,\n                COALESCE(didv.verdict, 'pending'::delphi_report_issue_status)\n                    AS local_status,\n                didws.status AS effective_status,\n                ROW_NUMBER() OVER (\n                    PARTITION BY didws.key\n                    ORDER BY didws.id\n                ) AS row_num\n            FROM delphi_issue_details_with_statuses didws\n            INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n            INNER JOIN delphi_reports dr ON dr.id = dri.report_id\n            INNER JOIN files f ON f.id = dr.file_id\n            INNER JOIN versions v ON v.id = f.version_id\n            INNER JOIN mods m ON m.id = v.mod_id\n            LEFT JOIN delphi_issue_detail_verdicts didv\n                ON didv.project_id = didws.project_id\n                AND didv.detail_key = didws.key\n            WHERE\n                didws.key = ANY($1::text[])\n                AND NOT didws.hidden\n        )\n        SELECT\n            detail_key AS \"detail_key!\",\n            detail_id AS \"detail_id!: DelphiReportIssueDetailsId\",\n            issue_id AS \"issue_id!: DelphiReportIssueId\",\n            issue_type,\n            project_id AS \"project_id!: DBProjectId\",\n            project_slug AS \"project_slug?\",\n            project_name AS \"project_name!\",\n            version_id AS \"version_id!: DBVersionId\",\n            v.version_number,\n            file_id AS \"file_id!: DBFileId\",\n            file_name AS \"file_name!\",\n            jar AS \"jar?\",\n            file_path AS \"file_path!\",\n            severity AS \"severity!: DelphiSeverity\",\n            local_status AS \"local_status!: DelphiStatus\",\n            effective_status AS \"effective_status!: DelphiStatus\"\n        FROM ranked_local_traces v\n        WHERE row_num <= $2\n        ORDER BY detail_key, detail_id\n        ",
   "describe": {
     "columns": [
       {
@@ -143,5 +143,5 @@
       true
     ]
   },
-  "hash": "87d30e8802ebe69858141d0d918cafb5286f984cfe55ad1a7ac2219ec50539a4"
+  "hash": "ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7"
 }
diff --git a/apps/labrinth/.sqlx/query-f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1.json b/apps/labrinth/.sqlx/query-f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1.json
new file mode 100644
index 0000000000..129d31765b
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT DISTINCT ON (dr.id)\n            to_jsonb(dr)\n            || jsonb_build_object(\n                'report_id', dr.id,\n                'file_id', to_base62(f.id),\n                'version_id', to_base62(v.id),\n                'project_id', to_base62(v.mod_id),\n                'file_name', f.filename,\n                'file_size', f.size,\n                'flag_reason', 'delphi',\n                'download_url', f.url,\n                'severity', COALESCE((\n                    SELECT MAX(didws.severity)\n                    FROM delphi_report_issues severity_issue\n                    INNER JOIN delphi_issue_details_with_statuses didws\n                        ON didws.issue_id = severity_issue.id\n                    WHERE\n                        severity_issue.report_id = dr.id\n                        AND NOT didws.hidden\n                ), 'low'::delphi_severity),\n                -- TODO: replace with `json_array` in Postgres 16\n\t\t\t\t'issues', (\n\t\t\t\t\tSELECT coalesce(json_agg(\n\t\t\t\t\t\tto_jsonb(dri)\n\t\t\t\t\t\t|| jsonb_build_object(\n\t\t\t\t\t\t\t-- TODO: replace with `json_array` in Postgres 16\n\t\t\t\t\t\t\t'details', (\n\t\t\t\t\t\t\t\tSELECT coalesce(jsonb_agg(\n                                    jsonb_build_object(\n                                        'id', didws.id,\n                                        'issue_id', didws.issue_id,\n                                        'key', didws.key,\n                                        'file_path', didws.file_path,\n                                        'decompiled_source', didws.decompiled_source,\n                                        'data', didws.data,\n                                        'severity', didws.severity,\n                                        'local_status', didws.local_status,\n                                        'global_status', didws.global_status,\n                                        'status', didws.status\n                                    )\n                                ), '[]'::jsonb)\n                                FROM delphi_issue_details_with_statuses didws\n                                WHERE\n                                    didws.issue_id = dri.id\n                                    AND NOT didws.hidden\n                            )\n\t\t\t\t\t\t)\n\t\t\t\t\t), '[]'::json)\n\t\t\t\t\tFROM delphi_report_issues dri\n\t\t\t\t\tWHERE\n                        dri.report_id = dr.id\n                        AND EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses visible_detail\n                            WHERE\n                                visible_detail.issue_id = dri.id\n                                AND NOT visible_detail.hidden\n                        )\n                )\n            ) AS \"data!: sqlx::types::Json<FileReport>\"\n        FROM delphi_reports dr\n        INNER JOIN files f ON f.id = dr.file_id\n        INNER JOIN versions v ON v.id = f.version_id\n        WHERE dr.id = $1\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "data!: sqlx::types::Json<FileReport>",
+        "type_info": "Jsonb"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1"
+}
diff --git a/apps/labrinth/.sqlx/query-f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b.json b/apps/labrinth/.sqlx/query-f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b.json
new file mode 100644
index 0000000000..94fb46b58b
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b.json
@@ -0,0 +1,130 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n\t\tSELECT\n\t\t\teffect.detail_id AS \"detail_id!: DelphiReportIssueDetailsId\",\n\t\t\tdetail.issue_id AS \"issue_id!: DelphiReportIssueId\",\n\t\t\tversion.mod_id AS \"project_id?: DBProjectId\",\n\t\t\tproject.name AS \"project_name?\",\n\t\t\tproject.icon_url AS \"project_icon_url?\",\n\t\t\tversion.id AS \"version_id?: DBVersionId\",\n\t\t\tversion.name AS \"version_name?\",\n\t\t\tversion.version_number AS \"version_number?\",\n\t\t\tissue.issue_type,\n\t\t\tdetail.key,\n\t\t\tdetail.jar,\n\t\t\tdetail.file_path,\n\t\t\tdetail.severity AS \"original_severity!: DelphiSeverity\",\n\t\t\teffect.severity AS \"effect_severity: DelphiSeverity\",\n\t\t\teffect.hidden\n\t\tFROM delphi_rule_effects effect\n\t\tINNER JOIN delphi_rule_revisions published\n\t\t\tON published.revision = effect.revision\n\t\tINNER JOIN delphi_report_issue_details detail\n\t\t\tON detail.id = effect.detail_id\n\t\tINNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n\t\tINNER JOIN delphi_reports report ON report.id = issue.report_id\n\t\tLEFT JOIN files file ON file.id = report.file_id\n\t\tLEFT JOIN versions version ON version.id = file.version_id\n\t\tLEFT JOIN mods project ON project.id = version.mod_id\n\t\tWHERE effect.rule_id = $1\n\t\tORDER BY effect.detail_id DESC\n\t\t",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "detail_id!: DelphiReportIssueDetailsId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "issue_id!: DelphiReportIssueId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "project_id?: DBProjectId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 3,
+        "name": "project_name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 4,
+        "name": "project_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 5,
+        "name": "version_id?: DBVersionId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 6,
+        "name": "version_name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 7,
+        "name": "version_number?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 8,
+        "name": "issue_type",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 9,
+        "name": "key",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 10,
+        "name": "jar",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 11,
+        "name": "file_path",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 12,
+        "name": "original_severity!: DelphiSeverity",
+        "type_info": {
+          "Custom": {
+            "name": "delphi_severity",
+            "kind": {
+              "Enum": [
+                "low",
+                "medium",
+                "high",
+                "severe"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 13,
+        "name": "effect_severity: DelphiSeverity",
+        "type_info": {
+          "Custom": {
+            "name": "delphi_severity",
+            "kind": {
+              "Enum": [
+                "low",
+                "medium",
+                "high",
+                "severe"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 14,
+        "name": "hidden",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      true,
+      false,
+      false,
+      false,
+      false,
+      false,
+      true,
+      false,
+      false,
+      true,
+      false
+    ]
+  },
+  "hash": "f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b"
+}
diff --git a/apps/labrinth/.sqlx/query-f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58.json b/apps/labrinth/.sqlx/query-f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58.json
new file mode 100644
index 0000000000..f8cf749c75
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58.json
@@ -0,0 +1,37 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        INSERT INTO delphi_rule_effects (\n            revision,\n            detail_id,\n            rule_id,\n            severity,\n            hidden\n        )\n        SELECT $1, effect.*\n        FROM UNNEST(\n            $2::BIGINT[],\n            $3::BIGINT[],\n            $4::delphi_severity[],\n            $5::BOOLEAN[]\n        ) AS effect(detail_id, rule_id, severity, hidden)\n        ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Int8Array",
+        "Int8Array",
+        {
+          "Custom": {
+            "name": "delphi_severity[]",
+            "kind": {
+              "Array": {
+                "Custom": {
+                  "name": "delphi_severity",
+                  "kind": {
+                    "Enum": [
+                      "low",
+                      "medium",
+                      "high",
+                      "severe"
+                    ]
+                  }
+                }
+              }
+            }
+          }
+        },
+        "BoolArray"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58"
+}
diff --git a/apps/labrinth/.sqlx/query-fc6c20348de487e4039ee7d53212ecd1856bde7aa4be6e366c98cef1321a7279.json b/apps/labrinth/.sqlx/query-fc6c20348de487e4039ee7d53212ecd1856bde7aa4be6e366c98cef1321a7279.json
deleted file mode 100644
index 16a500d5ac..0000000000
--- a/apps/labrinth/.sqlx/query-fc6c20348de487e4039ee7d53212ecd1856bde7aa4be6e366c98cef1321a7279.json
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        WITH dummy_issue AS (\n            INSERT INTO delphi_report_issues (report_id, issue_type)\n            VALUES ($1, $2)\n            ON CONFLICT (report_id, issue_type)\n            DO UPDATE SET issue_type = EXCLUDED.issue_type\n            RETURNING id\n        )\n        INSERT INTO delphi_report_issue_details (\n            issue_id,\n            key,\n            jar,\n            file_path,\n            decompiled_source,\n            data,\n            severity\n        )\n        SELECT\n            id,\n            '',\n            NULL,\n            '',\n            NULL,\n            '{}'::jsonb,\n            'low'::delphi_severity\n        FROM dummy_issue\n        WHERE NOT EXISTS (\n            SELECT 1\n            FROM delphi_report_issue_details drid\n            WHERE drid.issue_id = dummy_issue.id\n        )\n        ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "fc6c20348de487e4039ee7d53212ecd1856bde7aa4be6e366c98cef1321a7279"
-}
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
index 5c71eaa080..9b53233da7 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -4,6 +4,7 @@ use actix_web::{HttpRequest, delete, get, post, put, web};
 use chrono::{DateTime, Utc};
 use eyre::eyre;
 use serde::{Deserialize, Serialize};
+use xredis::RedisPool;
 
 use super::rules_scan::{
     RuleArtifact, RuleInput, RuleScan, RuleScope, RuleTrace,
@@ -16,7 +17,6 @@ use crate::{
             DBProjectId, DBVersionId, DelphiReportIssueDetailsId,
             DelphiReportIssueId, delphi_report_item::DelphiSeverity,
         },
-        redis::RedisPool,
     },
     models::{
         ids::{ProjectId, VersionId},
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
index 0594027df3..ac5019fb96 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -10,6 +10,7 @@ use sqlx::types::Json;
 use tokio::sync::mpsc;
 use tokio_stream::wrappers::UnboundedReceiverStream;
 use utoipa::{PartialSchema, ToSchema};
+use xredis::RedisPool;
 
 use super::rules::DelphiRuleEffect;
 use crate::routes::internal::delphi::tech_review_queue::{
@@ -23,7 +24,6 @@ use crate::{
             DBProjectId, DelphiReportIssueDetailsId,
             delphi_report_item::DelphiSeverity,
         },
-        redis::RedisPool,
     },
     models::pats::Scopes,
     queue::session::AuthQueue,

From 18c95e2f6192d675880c39464737b84fe6c9e22d Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Mon, 27 Jul 2026 10:19:54 +0100
Subject: [PATCH 11/16] prepr

---
 apps/frontend/src/locales/en-US/index.json                    | 3 +++
 apps/frontend/src/pages/moderation/technical-review/rules.vue | 4 ++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/apps/frontend/src/locales/en-US/index.json b/apps/frontend/src/locales/en-US/index.json
index 9f6ce185b1..650ae0b4b7 100644
--- a/apps/frontend/src/locales/en-US/index.json
+++ b/apps/frontend/src/locales/en-US/index.json
@@ -2957,6 +2957,9 @@
   "moderation.moderate": {
     "message": "Moderate"
   },
+  "moderation.page.delphi-rules": {
+    "message": "Delphi rules"
+  },
   "moderation.page.external-projects": {
     "message": "External projects"
   },
diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index ec444cfc23..dc13669e94 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -401,16 +401,16 @@ import { type Labrinth, SseParser } from '@modrinth/api-client'
 import {
 	ArrowLeftIcon,
 	EditIcon,
-	EyeOffIcon,
 	ExternalIcon,
+	EyeOffIcon,
 	LoaderCircleIcon,
 	PlayIcon,
 	PlusIcon,
 	TrashIcon,
 } from '@modrinth/assets'
 import {
-	ButtonStyled,
 	Avatar,
+	ButtonStyled,
 	ConfirmModal,
 	EmptyState,
 	injectModrinthClient,

From 849943ed4edde3fba78bea237fac7b9a4943d8f0 Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Mon, 27 Jul 2026 10:41:26 +0100
Subject: [PATCH 12/16] clean up db stuff

---
 ...e3a9a17755694448e00bf5e5faccb3ace76d.json} |  6 +-
 ...765fb64bd9499a796470d544466886e1a808.json} |  6 +-
 ...2ce4ae56f608ec698f6f1ebb4c470bb2f0f5.json} |  6 +-
 ...12240885f2372265597efa6e0361831d1318.json} |  6 +-
 .../20260720105358_delphi_trace_rules.sql     | 68 +++++++++++++++++++
 ...23120000_delphi_effective_rule_details.sql | 37 ----------
 .../20260724120000_delphi_rule_priority.sql   |  2 -
 ...0260726120000_delphi_tech_review_queue.sql | 28 --------
 apps/labrinth/src/database/models/ids.rs      |  1 +
 .../internal/moderation/tech_review/rules.rs  | 23 ++++---
 .../moderation/tech_review/rules_scan.rs      | 16 ++---
 11 files changed, 101 insertions(+), 98 deletions(-)
 rename apps/labrinth/.sqlx/{query-8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1.json => query-159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d.json} (56%)
 rename apps/labrinth/.sqlx/{query-9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5.json => query-3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808.json} (52%)
 rename apps/labrinth/.sqlx/{query-2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358.json => query-b0004df8d3b1c5f9193a21f981452ce4ae56f608ec698f6f1ebb4c470bb2f0f5.json} (80%)
 rename apps/labrinth/.sqlx/{query-5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f.json => query-d973a1edd200b4cd68ec30556a1e12240885f2372265597efa6e0361831d1318.json} (83%)
 delete mode 100644 apps/labrinth/migrations/20260723120000_delphi_effective_rule_details.sql
 delete mode 100644 apps/labrinth/migrations/20260724120000_delphi_rule_priority.sql
 delete mode 100644 apps/labrinth/migrations/20260726120000_delphi_tech_review_queue.sql

diff --git a/apps/labrinth/.sqlx/query-8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1.json b/apps/labrinth/.sqlx/query-159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d.json
similarity index 56%
rename from apps/labrinth/.sqlx/query-8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1.json
rename to apps/labrinth/.sqlx/query-159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d.json
index d44cf6d6d1..f2b063d771 100644
--- a/apps/labrinth/.sqlx/query-8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1.json
+++ b/apps/labrinth/.sqlx/query-159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d.json
@@ -1,11 +1,11 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tSELECT\n\t\t\tdelphi_rule.id,\n\t\t\tdelphi_rule.name,\n\t\t\tdelphi_rule.rule,\n\t\t\tdelphi_rule.priority,\n\t\t\tdelphi_rule.revision,\n\t\t\tdelphi_rule.created_at,\n\t\t\tdelphi_rule.updated_at,\n\t\t\tdelphi_rule.created_by,\n\t\t\tdelphi_rule.updated_by,\n\t\t\tCOALESCE(preview.affected_details_count, 0)\n\t\t\t\tAS \"affected_details_count!\",\n\t\t\tpreview.detail_id AS \"detail_id?: DelphiReportIssueDetailsId\",\n\t\t\tpreview.issue_id AS \"issue_id?: DelphiReportIssueId\",\n\t\t\tpreview.project_id AS \"project_id?: DBProjectId\",\n\t\t\tpreview.project_name AS \"project_name?\",\n\t\t\tpreview.project_icon_url AS \"project_icon_url?\",\n\t\t\tpreview.version_id AS \"version_id?: DBVersionId\",\n\t\t\tpreview.version_name AS \"version_name?\",\n\t\t\tpreview.version_number AS \"version_number?\",\n\t\t\tpreview.issue_type AS \"issue_type?\",\n\t\t\tpreview.key AS \"key?\",\n\t\t\tpreview.jar AS \"jar?\",\n\t\t\tpreview.file_path AS \"file_path?\",\n\t\t\tpreview.original_severity AS \"original_severity?: DelphiSeverity\",\n\t\t\tpreview.severity AS \"effect_severity?: DelphiSeverity\",\n\t\t\tpreview.hidden AS \"hidden?\"\n\t\tFROM delphi_rules delphi_rule\n\t\tLEFT JOIN LATERAL (\n\t\t\tSELECT\n\t\t\t\teffect.detail_id,\n\t\t\t\tdetail.issue_id,\n\t\t\t\tversion.mod_id AS project_id,\n\t\t\t\tproject.name AS project_name,\n\t\t\t\tproject.icon_url AS project_icon_url,\n\t\t\t\tversion.id AS version_id,\n\t\t\t\tversion.name AS version_name,\n\t\t\t\tversion.version_number,\n\t\t\t\tissue.issue_type,\n\t\t\t\tdetail.key,\n\t\t\t\tdetail.jar,\n\t\t\t\tdetail.file_path,\n\t\t\t\tdetail.severity AS original_severity,\n\t\t\t\teffect.severity,\n\t\t\t\teffect.hidden,\n\t\t\t\tCOUNT(*) OVER () AS affected_details_count\n\t\t\tFROM delphi_rule_effects effect\n\t\t\tINNER JOIN delphi_rule_revisions published\n\t\t\t\tON published.revision = effect.revision\n\t\t\tINNER JOIN delphi_report_issue_details detail\n\t\t\t\tON detail.id = effect.detail_id\n\t\t\tINNER JOIN delphi_report_issues issue\n\t\t\t\tON issue.id = detail.issue_id\n\t\t\tINNER JOIN delphi_reports report\n\t\t\t\tON report.id = issue.report_id\n\t\t\tLEFT JOIN files file ON file.id = report.file_id\n\t\t\tLEFT JOIN versions version ON version.id = file.version_id\n\t\t\tLEFT JOIN mods project ON project.id = version.mod_id\n\t\t\tWHERE effect.rule_id = delphi_rule.id\n\t\t\tORDER BY effect.detail_id DESC\n\t\t\tLIMIT 3\n\t\t) preview ON TRUE\n\t\tWHERE NOT delphi_rule.delete_on_next_revision\n\t\tORDER BY\n\t\t\tdelphi_rule.priority DESC,\n\t\t\tdelphi_rule.id,\n\t\t\tpreview.detail_id DESC\n\t\t",
+  "query": "\n\t\tSELECT\n\t\t\tdelphi_rule.id AS \"id!: DelphiRuleId\",\n\t\t\tdelphi_rule.name,\n\t\t\tdelphi_rule.rule,\n\t\t\tdelphi_rule.priority,\n\t\t\tdelphi_rule.revision,\n\t\t\tdelphi_rule.created_at,\n\t\t\tdelphi_rule.updated_at,\n\t\t\tdelphi_rule.created_by,\n\t\t\tdelphi_rule.updated_by,\n\t\t\tCOALESCE(preview.affected_details_count, 0)\n\t\t\t\tAS \"affected_details_count!\",\n\t\t\tpreview.detail_id AS \"detail_id?: DelphiReportIssueDetailsId\",\n\t\t\tpreview.issue_id AS \"issue_id?: DelphiReportIssueId\",\n\t\t\tpreview.project_id AS \"project_id?: DBProjectId\",\n\t\t\tpreview.project_name AS \"project_name?\",\n\t\t\tpreview.project_icon_url AS \"project_icon_url?\",\n\t\t\tpreview.version_id AS \"version_id?: DBVersionId\",\n\t\t\tpreview.version_name AS \"version_name?\",\n\t\t\tpreview.version_number AS \"version_number?\",\n\t\t\tpreview.issue_type AS \"issue_type?\",\n\t\t\tpreview.key AS \"key?\",\n\t\t\tpreview.jar AS \"jar?\",\n\t\t\tpreview.file_path AS \"file_path?\",\n\t\t\tpreview.original_severity AS \"original_severity?: DelphiSeverity\",\n\t\t\tpreview.severity AS \"effect_severity?: DelphiSeverity\",\n\t\t\tpreview.hidden AS \"hidden?\"\n\t\tFROM delphi_rules delphi_rule\n\t\tLEFT JOIN LATERAL (\n\t\t\tSELECT\n\t\t\t\teffect.detail_id,\n\t\t\t\tdetail.issue_id,\n\t\t\t\tversion.mod_id AS project_id,\n\t\t\t\tproject.name AS project_name,\n\t\t\t\tproject.icon_url AS project_icon_url,\n\t\t\t\tversion.id AS version_id,\n\t\t\t\tversion.name AS version_name,\n\t\t\t\tversion.version_number,\n\t\t\t\tissue.issue_type,\n\t\t\t\tdetail.key,\n\t\t\t\tdetail.jar,\n\t\t\t\tdetail.file_path,\n\t\t\t\tdetail.severity AS original_severity,\n\t\t\t\teffect.severity,\n\t\t\t\teffect.hidden,\n\t\t\t\tCOUNT(*) OVER () AS affected_details_count\n\t\t\tFROM delphi_rule_effects effect\n\t\t\tINNER JOIN delphi_rule_revisions published\n\t\t\t\tON published.revision = effect.revision\n\t\t\tINNER JOIN delphi_report_issue_details detail\n\t\t\t\tON detail.id = effect.detail_id\n\t\t\tINNER JOIN delphi_report_issues issue\n\t\t\t\tON issue.id = detail.issue_id\n\t\t\tINNER JOIN delphi_reports report\n\t\t\t\tON report.id = issue.report_id\n\t\t\tLEFT JOIN files file ON file.id = report.file_id\n\t\t\tLEFT JOIN versions version ON version.id = file.version_id\n\t\t\tLEFT JOIN mods project ON project.id = version.mod_id\n\t\t\tWHERE effect.rule_id = delphi_rule.id\n\t\t\tORDER BY effect.detail_id DESC\n\t\t\tLIMIT 3\n\t\t) preview ON TRUE\n\t\tWHERE NOT delphi_rule.delete_on_next_revision\n\t\tORDER BY\n\t\t\tdelphi_rule.priority DESC,\n\t\t\tdelphi_rule.id,\n\t\t\tpreview.detail_id DESC\n\t\t",
   "describe": {
     "columns": [
       {
         "ordinal": 0,
-        "name": "id",
+        "name": "id!: DelphiRuleId",
         "type_info": "Int8"
       },
       {
@@ -184,5 +184,5 @@
       false
     ]
   },
-  "hash": "8c69ee780e418c4ffd5c7b8d23dea9eb742e7365dd3c93479a9d7a5b6283c9b1"
+  "hash": "159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d"
 }
diff --git a/apps/labrinth/.sqlx/query-9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5.json b/apps/labrinth/.sqlx/query-3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808.json
similarity index 52%
rename from apps/labrinth/.sqlx/query-9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5.json
rename to apps/labrinth/.sqlx/query-3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808.json
index 82a88eab0e..bf96272e15 100644
--- a/apps/labrinth/.sqlx/query-9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5.json
+++ b/apps/labrinth/.sqlx/query-3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808.json
@@ -1,11 +1,11 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT id, rule\n        FROM delphi_rules\n        WHERE NOT delete_on_next_revision\n        ORDER BY priority DESC, id\n        ",
+  "query": "\n        SELECT id AS \"id!: DelphiRuleId\", rule\n        FROM delphi_rules\n        WHERE NOT delete_on_next_revision\n        ORDER BY priority DESC, id\n        ",
   "describe": {
     "columns": [
       {
         "ordinal": 0,
-        "name": "id",
+        "name": "id!: DelphiRuleId",
         "type_info": "Int8"
       },
       {
@@ -22,5 +22,5 @@
       false
     ]
   },
-  "hash": "9a93028d19a05ebffb654fbb84ce2326fde91ed9762ad05ee0acda7fdf0245b5"
+  "hash": "3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808"
 }
diff --git a/apps/labrinth/.sqlx/query-2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358.json b/apps/labrinth/.sqlx/query-b0004df8d3b1c5f9193a21f981452ce4ae56f608ec698f6f1ebb4c470bb2f0f5.json
similarity index 80%
rename from apps/labrinth/.sqlx/query-2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358.json
rename to apps/labrinth/.sqlx/query-b0004df8d3b1c5f9193a21f981452ce4ae56f608ec698f6f1ebb4c470bb2f0f5.json
index 651e4e7e63..b7d3810c3e 100644
--- a/apps/labrinth/.sqlx/query-2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358.json
+++ b/apps/labrinth/.sqlx/query-b0004df8d3b1c5f9193a21f981452ce4ae56f608ec698f6f1ebb4c470bb2f0f5.json
@@ -1,11 +1,11 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tINSERT INTO delphi_rules (\n\t\t\tname,\n\t\t\trule,\n\t\t\tpriority,\n\t\t\trevision,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t)\n\t\tVALUES (\n\t\t\t$1,\n\t\t\t$2,\n\t\t\t$3,\n\t\t\t(SELECT revision + 1 FROM delphi_rule_revisions LIMIT 1),\n\t\t\t$4,\n\t\t\t$4\n\t\t)\n\t\tRETURNING\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\tpriority,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
+  "query": "\n\t\tINSERT INTO delphi_rules (\n\t\t\tname,\n\t\t\trule,\n\t\t\tpriority,\n\t\t\trevision,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t)\n\t\tVALUES (\n\t\t\t$1,\n\t\t\t$2,\n\t\t\t$3,\n\t\t\t(SELECT revision + 1 FROM delphi_rule_revisions LIMIT 1),\n\t\t\t$4,\n\t\t\t$4\n\t\t)\n\t\tRETURNING\n\t\t\tid AS \"id!: DelphiRuleId\",\n\t\t\tname,\n\t\t\trule,\n\t\t\tpriority,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
   "describe": {
     "columns": [
       {
         "ordinal": 0,
-        "name": "id",
+        "name": "id!: DelphiRuleId",
         "type_info": "Int8"
       },
       {
@@ -69,5 +69,5 @@
       true
     ]
   },
-  "hash": "2008d5b755863a2128670198c3cd6e41587c64e2e1c48afe9e68ef42ce7f9358"
+  "hash": "b0004df8d3b1c5f9193a21f981452ce4ae56f608ec698f6f1ebb4c470bb2f0f5"
 }
diff --git a/apps/labrinth/.sqlx/query-5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f.json b/apps/labrinth/.sqlx/query-d973a1edd200b4cd68ec30556a1e12240885f2372265597efa6e0361831d1318.json
similarity index 83%
rename from apps/labrinth/.sqlx/query-5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f.json
rename to apps/labrinth/.sqlx/query-d973a1edd200b4cd68ec30556a1e12240885f2372265597efa6e0361831d1318.json
index fd87299dfd..5b5d207a52 100644
--- a/apps/labrinth/.sqlx/query-5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f.json
+++ b/apps/labrinth/.sqlx/query-d973a1edd200b4cd68ec30556a1e12240885f2372265597efa6e0361831d1318.json
@@ -1,11 +1,11 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tname = $2,\n\t\t\trule = $3,\n\t\t\tpriority = $4,\n\t\t\trevision = (\n\t\t\t\tSELECT revision + 1 FROM delphi_rule_revisions LIMIT 1\n\t\t\t),\n\t\t\tupdated_at = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $5\n\t\tWHERE id = $1 AND NOT delete_on_next_revision\n\t\tRETURNING\n\t\t\tid,\n\t\t\tname,\n\t\t\trule,\n\t\t\tpriority,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
+  "query": "\n\t\tUPDATE delphi_rules\n\t\tSET\n\t\t\tname = $2,\n\t\t\trule = $3,\n\t\t\tpriority = $4,\n\t\t\trevision = (\n\t\t\t\tSELECT revision + 1 FROM delphi_rule_revisions LIMIT 1\n\t\t\t),\n\t\t\tupdated_at = CURRENT_TIMESTAMP,\n\t\t\tupdated_by = $5\n\t\tWHERE id = $1 AND NOT delete_on_next_revision\n\t\tRETURNING\n\t\t\tid AS \"id!: DelphiRuleId\",\n\t\t\tname,\n\t\t\trule,\n\t\t\tpriority,\n\t\t\trevision,\n\t\t\tcreated_at,\n\t\t\tupdated_at,\n\t\t\tcreated_by,\n\t\t\tupdated_by\n\t\t",
   "describe": {
     "columns": [
       {
         "ordinal": 0,
-        "name": "id",
+        "name": "id!: DelphiRuleId",
         "type_info": "Int8"
       },
       {
@@ -70,5 +70,5 @@
       true
     ]
   },
-  "hash": "5261240093589617a854a28fca81b7d3faa88dad9575cdf30ae8aa9e7721879f"
+  "hash": "d973a1edd200b4cd68ec30556a1e12240885f2372265597efa6e0361831d1318"
 }
diff --git a/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql b/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql
index 7cbe599623..59d4ffbe82 100644
--- a/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql
+++ b/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql
@@ -8,6 +8,7 @@ CREATE TABLE delphi_rules (
 		ON DELETE SET NULL,
 	name VARCHAR(256) NOT NULL,
 	rule VARCHAR(65536) NOT NULL,
+	priority INTEGER NOT NULL DEFAULT 0,
 	revision BIGINT NOT NULL DEFAULT 0,
 	delete_on_next_revision BOOL NOT NULL DEFAULT FALSE
 );
@@ -32,3 +33,70 @@ CREATE TABLE delphi_rule_effects (
 );
 
 CREATE INDEX delphi_rule_effects_rule_id ON delphi_rule_effects(rule_id);
+
+DROP VIEW delphi_issue_details_with_statuses;
+
+CREATE VIEW delphi_issue_details_with_statuses AS
+SELECT
+	drid.id,
+	drid.issue_id,
+	drid.key,
+	drid.jar,
+	drid.file_path,
+	drid.decompiled_source,
+	drid.data,
+	drid.severity AS original_severity,
+	COALESCE(dre.severity, drid.severity) AS severity,
+	COALESCE(dre.hidden, FALSE) AS hidden,
+	m.id AS project_id,
+	didv.verdict AS local_status,
+	dgdv.verdict AS global_status,
+	COALESCE(dgdv.verdict, didv.verdict, 'pending') AS status
+FROM delphi_report_issue_details drid
+INNER JOIN delphi_report_issues dri ON dri.id = drid.issue_id
+INNER JOIN delphi_reports dr ON dr.id = dri.report_id
+INNER JOIN files f ON f.id = dr.file_id
+INNER JOIN versions v ON v.id = f.version_id
+INNER JOIN mods m ON m.id = v.mod_id
+LEFT JOIN delphi_global_detail_verdicts dgdv
+	ON drid.key = dgdv.detail_key
+LEFT JOIN delphi_issue_detail_verdicts didv
+	ON m.id = didv.project_id
+	AND drid.key = didv.detail_key
+LEFT JOIN (
+	SELECT revision
+	FROM delphi_rule_revisions
+	LIMIT 1
+) drr ON TRUE
+LEFT JOIN delphi_rule_effects dre
+	ON dre.revision = drr.revision
+	AND dre.detail_id = drid.id;
+
+CREATE TABLE delphi_tech_review_queue (
+	project_id BIGINT PRIMARY KEY REFERENCES mods(id)
+		ON DELETE CASCADE
+);
+
+INSERT INTO delphi_tech_review_queue (project_id)
+SELECT DISTINCT didws.project_id
+FROM delphi_issue_details_with_statuses didws
+INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
+WHERE
+	(
+		dri.issue_type = '__dummy'
+		AND didws.status = 'pending'
+	)
+	OR (
+		dri.issue_type != '__dummy'
+		AND didws.status IN ('pending', 'unsafe')
+		AND NOT didws.hidden
+	);
+
+DELETE FROM delphi_report_issue_details detail
+USING delphi_report_issues issue
+WHERE
+	detail.issue_id = issue.id
+	AND issue.issue_type = '__dummy';
+
+DELETE FROM delphi_report_issues
+WHERE issue_type = '__dummy';
diff --git a/apps/labrinth/migrations/20260723120000_delphi_effective_rule_details.sql b/apps/labrinth/migrations/20260723120000_delphi_effective_rule_details.sql
deleted file mode 100644
index 65dc4e2536..0000000000
--- a/apps/labrinth/migrations/20260723120000_delphi_effective_rule_details.sql
+++ /dev/null
@@ -1,37 +0,0 @@
-DROP VIEW delphi_issue_details_with_statuses;
-
-CREATE VIEW delphi_issue_details_with_statuses AS
-SELECT
-	drid.id,
-	drid.issue_id,
-	drid.key,
-	drid.jar,
-	drid.file_path,
-	drid.decompiled_source,
-	drid.data,
-	drid.severity AS original_severity,
-	COALESCE(dre.severity, drid.severity) AS severity,
-	COALESCE(dre.hidden, FALSE) AS hidden,
-	m.id AS project_id,
-	didv.verdict AS local_status,
-	dgdv.verdict AS global_status,
-	COALESCE(dgdv.verdict, didv.verdict, 'pending') AS status
-FROM delphi_report_issue_details drid
-INNER JOIN delphi_report_issues dri ON dri.id = drid.issue_id
-INNER JOIN delphi_reports dr ON dr.id = dri.report_id
-INNER JOIN files f ON f.id = dr.file_id
-INNER JOIN versions v ON v.id = f.version_id
-INNER JOIN mods m ON m.id = v.mod_id
-LEFT JOIN delphi_global_detail_verdicts dgdv
-	ON drid.key = dgdv.detail_key
-LEFT JOIN delphi_issue_detail_verdicts didv
-	ON m.id = didv.project_id
-	AND drid.key = didv.detail_key
-LEFT JOIN (
-	SELECT revision
-	FROM delphi_rule_revisions
-	LIMIT 1
-) drr ON TRUE
-LEFT JOIN delphi_rule_effects dre
-	ON dre.revision = drr.revision
-	AND dre.detail_id = drid.id;
diff --git a/apps/labrinth/migrations/20260724120000_delphi_rule_priority.sql b/apps/labrinth/migrations/20260724120000_delphi_rule_priority.sql
deleted file mode 100644
index 344cac1832..0000000000
--- a/apps/labrinth/migrations/20260724120000_delphi_rule_priority.sql
+++ /dev/null
@@ -1,2 +0,0 @@
-ALTER TABLE delphi_rules
-ADD COLUMN priority INTEGER NOT NULL DEFAULT 0;
diff --git a/apps/labrinth/migrations/20260726120000_delphi_tech_review_queue.sql b/apps/labrinth/migrations/20260726120000_delphi_tech_review_queue.sql
deleted file mode 100644
index f4f5030fa2..0000000000
--- a/apps/labrinth/migrations/20260726120000_delphi_tech_review_queue.sql
+++ /dev/null
@@ -1,28 +0,0 @@
-CREATE TABLE delphi_tech_review_queue (
-	project_id BIGINT PRIMARY KEY REFERENCES mods(id)
-		ON DELETE CASCADE
-);
-
-INSERT INTO delphi_tech_review_queue (project_id)
-SELECT DISTINCT didws.project_id
-FROM delphi_issue_details_with_statuses didws
-INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id
-WHERE
-	(
-		dri.issue_type = '__dummy'
-		AND didws.status = 'pending'
-	)
-	OR (
-		dri.issue_type != '__dummy'
-		AND didws.status IN ('pending', 'unsafe')
-		AND NOT didws.hidden
-	);
-
-DELETE FROM delphi_report_issue_details detail
-USING delphi_report_issues issue
-WHERE
-	detail.issue_id = issue.id
-	AND issue.issue_type = '__dummy';
-
-DELETE FROM delphi_report_issues
-WHERE issue_type = '__dummy';
diff --git a/apps/labrinth/src/database/models/ids.rs b/apps/labrinth/src/database/models/ids.rs
index 5f92ece21d..bd953e7e2d 100644
--- a/apps/labrinth/src/database/models/ids.rs
+++ b/apps/labrinth/src/database/models/ids.rs
@@ -292,4 +292,5 @@ id_type!(StatusId as i32);
 id_type!(DelphiReportId as i64);
 id_type!(DelphiReportIssueId as i64);
 id_type!(DelphiReportIssueDetailsId as i64);
+id_type!(DelphiRuleId as i64);
 id_type!(SharedInstanceId as i64);
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
index 9b53233da7..10a7c0d6fa 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -15,7 +15,8 @@ use crate::{
         PgPool, ReadOnlyPgPool,
         models::{
             DBProjectId, DBVersionId, DelphiReportIssueDetailsId,
-            DelphiReportIssueId, delphi_report_item::DelphiSeverity,
+            DelphiReportIssueId, DelphiRuleId,
+            delphi_report_item::DelphiSeverity,
         },
     },
     models::{
@@ -42,7 +43,7 @@ pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
 
 #[derive(Debug, Serialize, utoipa::ToSchema)]
 pub struct DelphiRule {
-    pub id: i64,
+    pub id: DelphiRuleId,
     pub name: String,
     pub rule: String,
     pub priority: i32,
@@ -270,7 +271,7 @@ pub async fn get_rules(
     let rules = sqlx::query!(
         r#"
 		SELECT
-			delphi_rule.id,
+			delphi_rule.id AS "id!: DelphiRuleId",
 			delphi_rule.name,
 			delphi_rule.rule,
 			delphi_rule.priority,
@@ -421,7 +422,7 @@ pub async fn get_rule_affected_details(
     ro_pool: web::Data<ReadOnlyPgPool>,
     redis: web::Data<RedisPool>,
     session_queue: web::Data<AuthQueue>,
-    path: web::Path<(i64,)>,
+    path: web::Path<(DelphiRuleId,)>,
 ) -> Result<web::Json<Vec<DelphiRuleAffectedDetail>>, ApiError> {
     check_is_moderator_from_headers(
         &req,
@@ -464,7 +465,7 @@ pub async fn get_rule_affected_details(
 		WHERE effect.rule_id = $1
 		ORDER BY effect.detail_id DESC
 		"#,
-        rule_id,
+        rule_id as DelphiRuleId,
     )
     .fetch_all(&***ro_pool)
     .await
@@ -540,7 +541,7 @@ pub async fn create_rule(
 			$4
 		)
 		RETURNING
-			id,
+			id AS "id!: DelphiRuleId",
 			name,
 			rule,
 			priority,
@@ -588,7 +589,7 @@ pub async fn update_rule(
     pool: web::Data<PgPool>,
     redis: web::Data<RedisPool>,
     session_queue: web::Data<AuthQueue>,
-    path: web::Path<(i64,)>,
+    path: web::Path<(DelphiRuleId,)>,
     body: web::Json<WriteDelphiRule>,
 ) -> Result<web::Json<DelphiRule>, ApiError> {
     let user = check_is_moderator_from_headers(
@@ -617,7 +618,7 @@ pub async fn update_rule(
 			updated_by = $5
 		WHERE id = $1 AND NOT delete_on_next_revision
 		RETURNING
-			id,
+			id AS "id!: DelphiRuleId",
 			name,
 			rule,
 			priority,
@@ -627,7 +628,7 @@ pub async fn update_rule(
 			created_by,
 			updated_by
 		"#,
-        id,
+        id as DelphiRuleId,
         rule.name,
         rule.rule,
         rule.priority,
@@ -666,7 +667,7 @@ pub async fn delete_rule(
     pool: web::Data<PgPool>,
     redis: web::Data<RedisPool>,
     session_queue: web::Data<AuthQueue>,
-    path: web::Path<(i64,)>,
+    path: web::Path<(DelphiRuleId,)>,
 ) -> Result<(), ApiError> {
     let user = check_is_moderator_from_headers(
         &req,
@@ -691,7 +692,7 @@ pub async fn delete_rule(
 		WHERE id = $1 AND NOT delete_on_next_revision
 		RETURNING id
 		"#,
-        id,
+        id as DelphiRuleId,
         user.id.0 as i64,
     )
     .fetch_optional(&**pool)
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
index ac5019fb96..de618826c2 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -21,7 +21,7 @@ use crate::{
     database::{
         PgPool, PgTransaction, ReadOnlyPgPool,
         models::{
-            DBProjectId, DelphiReportIssueDetailsId,
+            DBProjectId, DelphiReportIssueDetailsId, DelphiRuleId,
             delphi_report_item::DelphiSeverity,
         },
     },
@@ -90,13 +90,13 @@ pub struct RuleScope {
 }
 
 struct CompiledRule {
-    id: i64,
+    id: DelphiRuleId,
     program: cel::Program,
 }
 
 struct MaterializedEffect {
     detail_id: i64,
-    rule_id: i64,
+    rule_id: DelphiRuleId,
     effect: DelphiRuleEffect,
 }
 
@@ -459,7 +459,7 @@ async fn run_scan(
                 .wrap_err_with(|| {
                     format!(
                         "failed to evaluate delphi rule {} for detail {detail_id}",
-                        rule.id
+                        rule.id.0
                     )
                 })?;
             if let Some(effect) = effect {
@@ -667,7 +667,7 @@ pub(crate) async fn materialize_current_rule_effects(
                 evaluate_rule(&rule.program, &input).wrap_err_with(|| {
                     format!(
                         "failed to evaluate delphi rule {} for detail {}",
-                        rule.id, detail.id
+                        rule.id.0, detail.id
                     )
                 })?;
             if let Some(effect) = effect {
@@ -689,7 +689,7 @@ async fn fetch_compiled_rules(
 ) -> Result<Vec<CompiledRule>> {
     sqlx::query!(
         r#"
-        SELECT id, rule
+        SELECT id AS "id!: DelphiRuleId", rule
         FROM delphi_rules
         WHERE NOT delete_on_next_revision
         ORDER BY priority DESC, id
@@ -701,7 +701,7 @@ async fn fetch_compiled_rules(
     .into_iter()
     .map(|rule| {
         let program = cel::Program::compile(&rule.rule).map_err(|error| {
-            eyre!("failed to compile delphi rule {}: {error}", rule.id)
+            eyre!("failed to compile delphi rule {}: {error}", rule.id.0)
         })?;
         Ok(CompiledRule {
             id: rule.id,
@@ -726,7 +726,7 @@ async fn insert_materialized_effects(
         .collect::<Vec<_>>();
     let rule_ids = effects
         .iter()
-        .map(|effect| effect.rule_id)
+        .map(|effect| effect.rule_id.0)
         .collect::<Vec<_>>();
     let severities = effects
         .iter()

From b92fc10e54b5d71cf136555bbc3230a2e71e4185 Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Mon, 27 Jul 2026 17:47:17 +0100
Subject: [PATCH 13/16] cleanup

---
 .../moderation/technical-review/rules.vue     |  72 ++++--
 .../internal/moderation/tech_review/rules.rs  | 230 +++++++-----------
 .../moderation/tech_review/rules_scan.rs      | 176 +++++++-------
 .../api-client/src/modules/labrinth/types.ts  |  11 +-
 4 files changed, 228 insertions(+), 261 deletions(-)

diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index dc13669e94..4c18acc654 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -434,26 +434,62 @@ const RULE_EDITOR_OPTIONS: Partial<Ace.EditorOptions> = {
 	useSoftTabs: true,
 }
 
-const TEST_TRACES: Labrinth.TechReview.Internal.TestDelphiRuleTrace[] = [
+const TEST_INPUTS: Labrinth.TechReview.Internal.RuleInput[] = [
 	{
-		key: 'known-safe:obfuscated-bootstrap',
-		issue_type: 'OBFUSCATED_NAMES',
-		severity: 'high',
-		jar: 'META-INF/jars/embedded.jar',
-		file_path: 'com/example/Bootstrap.class',
-		data: {
-			confidence: 0.97,
-			symbol_count: 42,
+		schema_version: 1,
+		trace: {
+			key: 'known-safe:obfuscated-bootstrap',
+			issue_type: 'OBFUSCATED_NAMES',
+			severity: 'high',
+			jar: 'META-INF/jars/embedded.jar',
+			file_path: 'com/example/Bootstrap.class',
+			data: {
+				confidence: 0.97,
+				symbol_count: 42,
+			},
+		},
+		scan: {
+			delphi_version: 17,
+		},
+		artifact: {
+			size: 412_892,
+			hashes: {
+				sha1: '0123456789abcdef',
+				sha512: 'fedcba9876543210',
+			},
+		},
+		scope: {
+			project_id: 'example-project',
+			version_id: 'example-version',
+			file_id: 'example-file',
 		},
 	},
 	{
-		key: 'network/known-telemetry-host',
-		issue_type: 'SUSPICIOUS_NETWORK_ACCESS',
-		severity: 'medium',
-		jar: null,
-		file_path: 'com/example/Telemetry.class',
-		data: {
-			host: 'telemetry.example.com',
+		schema_version: 1,
+		trace: {
+			key: 'network/known-telemetry-host',
+			issue_type: 'SUSPICIOUS_NETWORK_ACCESS',
+			severity: 'medium',
+			jar: null,
+			file_path: 'com/example/Telemetry.class',
+			data: {
+				host: 'telemetry.example.com',
+			},
+		},
+		scan: {
+			delphi_version: 18,
+		},
+		artifact: {
+			size: 98_304,
+			hashes: {
+				sha1: 'abcdef0123456789',
+				sha512: '0123456789abcdef',
+			},
+		},
+		scope: {
+			project_id: 'telemetry-project',
+			version_id: 'telemetry-version',
+			file_id: 'telemetry-file',
 		},
 	},
 ]
@@ -511,7 +547,7 @@ const ruleOutputSchemaText = computed(() =>
 	ruleSchema.value ? formatRuleSchema(ruleSchema.value.output, ruleSchema.value.components) : '',
 )
 const previewExamples = computed(() =>
-	TEST_TRACES.map((original, index) => {
+	TEST_INPUTS.map(({ trace: original }, index) => {
 		const effect = ruleTestEffects.value[index] ?? null
 		const effectiveSeverity = effect?.severity ?? original.severity
 		let summary: string
@@ -665,7 +701,7 @@ async function testRule() {
 	try {
 		const response = await client.labrinth.tech_review_internal.testRule({
 			rule,
-			traces: TEST_TRACES,
+			inputs: TEST_INPUTS,
 		})
 		if (requestId !== ruleTestRequestId) return
 
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
index 10a7c0d6fa..7a4e454938 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -1,14 +1,11 @@
-use std::collections::{BTreeMap, HashMap};
-
 use actix_web::{HttpRequest, delete, get, post, put, web};
 use chrono::{DateTime, Utc};
 use eyre::eyre;
 use serde::{Deserialize, Serialize};
+use validator::Validate;
 use xredis::RedisPool;
 
-use super::rules_scan::{
-    RuleArtifact, RuleInput, RuleScan, RuleScope, RuleTrace,
-};
+use super::rules_scan::RuleInput;
 use crate::{
     auth::check_is_moderator_from_headers,
     database::{
@@ -25,13 +22,9 @@ use crate::{
     },
     queue::session::AuthQueue,
     routes::ApiError,
-    util::error::Context,
+    util::{error::Context, validate::validation_errors_to_string},
 };
 
-const MAX_RULE_NAME_LENGTH: usize = 256;
-const MAX_RULE_EXPRESSION_LENGTH: usize = 65_536;
-const MAX_RULE_TEST_TRACES: usize = 10;
-
 pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
     cfg.service(get_rules)
         .service(test_rule)
@@ -75,28 +68,22 @@ pub struct DelphiRuleAffectedDetail {
     pub hidden: bool,
 }
 
-#[derive(Debug, Deserialize, utoipa::ToSchema)]
+#[derive(Debug, Deserialize, Validate, utoipa::ToSchema)]
 pub struct WriteDelphiRule {
+    #[validate(length(min = 1, max = 256))]
     pub name: String,
+    #[validate(length(min = 1, max = 65536))]
     pub rule: String,
     #[serde(default)]
     pub priority: i32,
 }
 
-#[derive(Debug, Deserialize, utoipa::ToSchema)]
+#[derive(Deserialize, Validate, utoipa::ToSchema)]
 pub struct TestDelphiRule {
+    #[validate(length(min = 1, max = 65536))]
     pub rule: String,
-    pub traces: Vec<TestDelphiRuleTrace>,
-}
-
-#[derive(Debug, Deserialize, Serialize, utoipa::ToSchema)]
-pub struct TestDelphiRuleTrace {
-    pub key: String,
-    pub issue_type: String,
-    pub severity: DelphiSeverity,
-    pub jar: Option<String>,
-    pub file_path: String,
-    pub data: HashMap<String, serde_json::Value>,
+    #[validate(length(max = 10))]
+    pub inputs: Vec<RuleInput>,
 }
 
 #[derive(Debug, Serialize, utoipa::ToSchema)]
@@ -120,36 +107,24 @@ struct ValidatedRule {
 }
 
 impl WriteDelphiRule {
-    fn validate(self) -> Result<ValidatedRule, ApiError> {
-        let name = self.name.trim().to_string();
-        if name.is_empty() {
-            return Err(ApiError::Request(eyre!("rule name cannot be empty")));
-        }
-        if name.chars().count() > MAX_RULE_NAME_LENGTH {
-            return Err(ApiError::Request(eyre!(
-                "rule name cannot exceed {MAX_RULE_NAME_LENGTH} characters"
-            )));
-        }
-
-        let rule = self.rule.trim().to_string();
-        if rule.is_empty() {
-            return Err(ApiError::Request(eyre!(
-                "rule expression cannot be empty"
-            )));
-        }
-        if rule.len() > MAX_RULE_EXPRESSION_LENGTH {
-            return Err(ApiError::Request(eyre!(
-                "rule expression cannot exceed {MAX_RULE_EXPRESSION_LENGTH} bytes"
-            )));
-        }
-
-        cel::Program::compile(&rule).map_err(|error| {
-            ApiError::Request(eyre!("invalid cel expression: {error}"))
+    async fn validate(mut self) -> Result<ValidatedRule, ApiError> {
+        self.name = self.name.trim().to_string();
+        self.rule = self.rule.trim().to_string();
+        Validate::validate(&self).map_err(|error| {
+            ApiError::Validation(validation_errors_to_string(error, None))
         })?;
 
+        let expression = self.rule.clone();
+        tokio::task::spawn_blocking(move || cel::Program::compile(&expression))
+            .await
+            .wrap_internal_err("failed to join cel compilation task")?
+            .map_err(|error| {
+                ApiError::Request(eyre!("invalid cel expression: {error}"))
+            })?;
+
         Ok(ValidatedRule {
-            name,
-            rule,
+            name: self.name,
+            rule: self.rule,
             priority: self.priority,
         })
     }
@@ -180,35 +155,27 @@ pub async fn test_rule(
     )
     .await?;
 
-    let request = body.into_inner();
-    let rule = request.rule.trim();
-    if rule.is_empty() {
-        return Err(ApiError::Request(eyre!(
-            "rule expression cannot be empty"
-        )));
-    }
-    if rule.len() > MAX_RULE_EXPRESSION_LENGTH {
-        return Err(ApiError::Request(eyre!(
-            "rule expression cannot exceed {MAX_RULE_EXPRESSION_LENGTH} bytes"
-        )));
-    }
-    if request.traces.len() > MAX_RULE_TEST_TRACES {
-        return Err(ApiError::Request(eyre!(
-            "cannot test more than {MAX_RULE_TEST_TRACES} traces at once"
-        )));
-    }
-
-    let program = cel::Program::compile(rule).map_err(|error| {
-        ApiError::Request(eyre!("invalid cel expression: {error}"))
+    let mut request = body.into_inner();
+    request.rule = request.rule.trim().to_string();
+    request.validate().map_err(|error| {
+        ApiError::Validation(validation_errors_to_string(error, None))
     })?;
-    let mut effects = Vec::with_capacity(request.traces.len());
 
-    for (index, trace) in request.traces.iter().enumerate() {
-        let input = test_rule_input(trace);
+    let rule = request.rule;
+    let program =
+        tokio::task::spawn_blocking(move || cel::Program::compile(&rule))
+            .await
+            .wrap_internal_err("failed to join cel compilation task")?
+            .map_err(|error| {
+                ApiError::Request(eyre!("invalid cel expression: {error}"))
+            })?;
+    let mut effects = Vec::with_capacity(request.inputs.len());
+
+    for (index, input) in request.inputs.iter().enumerate() {
         let effect = super::rules_scan::evaluate_rule(&program, input)
             .map_err(|error| {
                 ApiError::Request(eyre!(
-                    "failed to evaluate test trace {index}: {error}"
+                    "failed to evaluate test input {index}: {error}"
                 ))
             })?;
         effects.push(effect);
@@ -217,33 +184,6 @@ pub async fn test_rule(
     Ok(web::Json(TestDelphiRuleResponse { effects }))
 }
 
-fn test_rule_input(trace: &TestDelphiRuleTrace) -> RuleInput {
-    RuleInput {
-        schema_version: 1,
-        trace: RuleTrace {
-            key: trace.key.clone(),
-            issue_type: trace.issue_type.clone(),
-            severity: trace.severity,
-            jar: trace.jar.clone(),
-            file_path: trace.file_path.clone(),
-            data: trace.data.clone(),
-        },
-        scan: RuleScan { delphi_version: 17 },
-        artifact: RuleArtifact {
-            size: Some(412_892),
-            hashes: BTreeMap::from([
-                ("sha1".to_string(), "0123456789abcdef".to_string()),
-                ("sha512".to_string(), "fedcba9876543210".to_string()),
-            ]),
-        },
-        scope: RuleScope {
-            project_id: Some("example-project".to_string()),
-            version_id: Some("example-version".to_string()),
-            file_id: Some("example-file".to_string()),
-        },
-    }
-}
-
 /// List all Delphi rules that are not pending deletion.
 #[utoipa::path(
 	context_path = "/moderation/tech-review",
@@ -345,26 +285,7 @@ pub async fn get_rules(
 
     let mut response = Vec::<DelphiRule>::new();
     for rule in rules {
-        if response
-            .last()
-            .is_none_or(|existing| existing.id != rule.id)
-        {
-            response.push(DelphiRule {
-                id: rule.id,
-                name: rule.name,
-                rule: rule.rule,
-                priority: rule.priority,
-                revision: rule.revision,
-                created_at: rule.created_at,
-                updated_at: rule.updated_at,
-                created_by: rule.created_by,
-                updated_by: rule.updated_by,
-                affected_details_count: rule.affected_details_count,
-                affected_details: Vec::new(),
-            });
-        }
-
-        if let (
+        let affected_detail = if let (
             Some(detail_id),
             Some(issue_id),
             Some(issue_type),
@@ -381,28 +302,49 @@ pub async fn get_rules(
             rule.original_severity,
             rule.hidden,
         ) {
-            response
-                .last_mut()
-                .expect("a delphi rule was inserted above")
-                .affected_details
-                .push(DelphiRuleAffectedDetail {
-                    detail_id,
-                    issue_id,
-                    project_id: rule.project_id.map(ProjectId::from),
-                    project_name: rule.project_name,
-                    project_icon_url: rule.project_icon_url,
-                    version_id: rule.version_id.map(VersionId::from),
-                    version_name: rule.version_name,
-                    version_number: rule.version_number,
-                    issue_type,
-                    key,
-                    jar: rule.jar,
-                    file_path,
-                    original_severity,
-                    severity: rule.effect_severity,
-                    hidden,
-                });
+            Some(DelphiRuleAffectedDetail {
+                detail_id,
+                issue_id,
+                project_id: rule.project_id.map(ProjectId::from),
+                project_name: rule.project_name,
+                project_icon_url: rule.project_icon_url,
+                version_id: rule.version_id.map(VersionId::from),
+                version_name: rule.version_name,
+                version_number: rule.version_number,
+                issue_type,
+                key,
+                jar: rule.jar,
+                file_path,
+                original_severity,
+                severity: rule.effect_severity,
+                hidden,
+            })
+        } else {
+            None
+        };
+
+        if let Some(existing) = response.last_mut()
+            && existing.id == rule.id
+        {
+            if let Some(affected_detail) = affected_detail {
+                existing.affected_details.push(affected_detail);
+            }
+            continue;
         }
+
+        response.push(DelphiRule {
+            id: rule.id,
+            name: rule.name,
+            rule: rule.rule,
+            priority: rule.priority,
+            revision: rule.revision,
+            created_at: rule.created_at,
+            updated_at: rule.updated_at,
+            created_by: rule.created_by,
+            updated_by: rule.updated_by,
+            affected_details_count: rule.affected_details_count,
+            affected_details: affected_detail.into_iter().collect(),
+        });
     }
 
     Ok(web::Json(response))
@@ -519,7 +461,7 @@ pub async fn create_rule(
         Scopes::PROJECT_WRITE,
     )
     .await?;
-    let rule = body.into_inner().validate()?;
+    let rule = body.into_inner().validate().await?;
     let user_id = user.id.0 as i64;
 
     let rule = sqlx::query!(
@@ -601,7 +543,7 @@ pub async fn update_rule(
     )
     .await?;
     let (id,) = path.into_inner();
-    let rule = body.into_inner().validate()?;
+    let rule = body.into_inner().validate().await?;
     let user_id = user.id.0 as i64;
 
     let rule = sqlx::query!(
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
index de618826c2..f701c5e141 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -5,7 +5,7 @@ use ariadne::ids::base62_impl::to_base62;
 use bytes::Bytes;
 use eyre::{Context as _, Result, eyre};
 use futures_util::{StreamExt, TryStreamExt};
-use serde::Serialize;
+use serde::{Deserialize, Serialize};
 use sqlx::types::Json;
 use tokio::sync::mpsc;
 use tokio_stream::wrappers::UnboundedReceiverStream;
@@ -52,7 +52,7 @@ struct RuleScanErrorEvent<'a> {
     message: &'a str,
 }
 
-#[derive(Serialize, utoipa::ToSchema)]
+#[derive(Deserialize, Serialize, utoipa::ToSchema)]
 pub struct RuleInput {
     pub schema_version: u32,
     pub trace: RuleTrace,
@@ -61,7 +61,7 @@ pub struct RuleInput {
     pub scope: RuleScope,
 }
 
-#[derive(Serialize, utoipa::ToSchema)]
+#[derive(Deserialize, Serialize, utoipa::ToSchema)]
 pub struct RuleTrace {
     pub key: String,
     pub issue_type: String,
@@ -71,18 +71,18 @@ pub struct RuleTrace {
     pub data: HashMap<String, serde_json::Value>,
 }
 
-#[derive(Serialize, utoipa::ToSchema)]
+#[derive(Deserialize, Serialize, utoipa::ToSchema)]
 pub struct RuleScan {
     pub delphi_version: i32,
 }
 
-#[derive(Serialize, utoipa::ToSchema)]
+#[derive(Deserialize, Serialize, utoipa::ToSchema)]
 pub struct RuleArtifact {
     pub size: Option<i32>,
     pub hashes: BTreeMap<String, String>,
 }
 
-#[derive(Serialize, utoipa::ToSchema)]
+#[derive(Deserialize, Serialize, utoipa::ToSchema)]
 pub struct RuleScope {
     pub project_id: Option<String>,
     pub version_id: Option<String>,
@@ -238,9 +238,9 @@ pub async fn get_detail_rule_input(
             hashes: detail.hashes.0,
         },
         scope: RuleScope {
-            project_id: detail.project_id.map(to_public_id),
-            version_id: detail.version_id.map(to_public_id),
-            file_id: detail.file_id.map(to_public_id),
+            project_id: detail.project_id.map(|id| to_base62(id as u64)),
+            version_id: detail.version_id.map(|id| to_base62(id as u64)),
+            file_id: detail.file_id.map(|id| to_base62(id as u64)),
         },
     }))
 }
@@ -316,27 +316,28 @@ pub async fn scan_rules(
     actix_web::rt::spawn(async move {
         match run_scan(transaction, &sender).await {
             Ok(summary) => {
-                send_event(
-                    &sender,
-                    "complete",
-                    &RuleScanEvent {
-                        phase: "complete",
-                        revision: summary.revision,
-                        scanned: summary.scanned,
-                        total: summary.total,
-                        effects: summary.effects,
-                    },
-                );
+                let event = RuleScanEvent {
+                    phase: "complete",
+                    revision: summary.revision,
+                    scanned: summary.scanned,
+                    total: summary.total,
+                    effects: summary.effects,
+                };
+                if let Ok(data) = serde_json::to_string(&event) {
+                    let _ = sender.send(Bytes::from(format!(
+                        "event: complete\ndata: {data}\n\n"
+                    )));
+                }
             }
             Err(error) => {
                 tracing::error!(error = ?error, "delphi rule scan failed");
-                send_event(
-                    &sender,
-                    "failed",
-                    &RuleScanErrorEvent {
-                        message: &error.to_string(),
-                    },
-                );
+                let message = error.to_string();
+                let event = RuleScanErrorEvent { message: &message };
+                if let Ok(data) = serde_json::to_string(&event) {
+                    let _ = sender.send(Bytes::from(format!(
+                        "event: failed\ndata: {data}\n\n"
+                    )));
+                }
             }
         }
     });
@@ -422,7 +423,17 @@ async fn run_scan(
 
     let mut effects = Vec::new();
     let mut scanned = 0;
-    send_progress(sender, "scanning", revision, 0, total, 0);
+    let event = RuleScanEvent {
+        phase: "scanning",
+        revision,
+        scanned: 0,
+        total,
+        effects: 0,
+    };
+    if let Ok(data) = serde_json::to_string(&event) {
+        let _ = sender
+            .send(Bytes::from(format!("event: progress\ndata: {data}\n\n")));
+    }
 
     while let Some(detail) = details
         .try_next()
@@ -448,9 +459,9 @@ async fn run_scan(
                 hashes: detail.hashes.0,
             },
             scope: RuleScope {
-                project_id: detail.project_id.map(to_public_id),
-                version_id: detail.version_id.map(to_public_id),
-                file_id: detail.file_id.map(to_public_id),
+                project_id: detail.project_id.map(|id| to_base62(id as u64)),
+                version_id: detail.version_id.map(|id| to_base62(id as u64)),
+                file_id: detail.file_id.map(|id| to_base62(id as u64)),
             },
         };
 
@@ -474,20 +485,34 @@ async fn run_scan(
 
         scanned += 1;
         if scanned % PROGRESS_INTERVAL == 0 || scanned == total {
-            send_progress(
-                sender,
-                "scanning",
+            let event = RuleScanEvent {
+                phase: "scanning",
                 revision,
                 scanned,
                 total,
-                effects.len(),
-            );
+                effects: effects.len(),
+            };
+            if let Ok(data) = serde_json::to_string(&event) {
+                let _ = sender.send(Bytes::from(format!(
+                    "event: progress\ndata: {data}\n\n"
+                )));
+            }
             tokio::task::yield_now().await;
         }
     }
     drop(details);
 
-    send_progress(sender, "publishing", revision, total, total, effects.len());
+    let event = RuleScanEvent {
+        phase: "publishing",
+        revision,
+        scanned: total,
+        total,
+        effects: effects.len(),
+    };
+    if let Ok(data) = serde_json::to_string(&event) {
+        let _ = sender
+            .send(Bytes::from(format!("event: progress\ndata: {data}\n\n")));
+    }
 
     insert_materialized_effects(revision, &effects, &mut transaction).await?;
 
@@ -656,9 +681,9 @@ pub(crate) async fn materialize_current_rule_effects(
                 hashes: detail.hashes.0,
             },
             scope: RuleScope {
-                project_id: detail.project_id.map(to_public_id),
-                version_id: detail.version_id.map(to_public_id),
-                file_id: detail.file_id.map(to_public_id),
+                project_id: detail.project_id.map(|id| to_base62(id as u64)),
+                version_id: detail.version_id.map(|id| to_base62(id as u64)),
+                file_id: detail.file_id.map(|id| to_base62(id as u64)),
             },
         };
 
@@ -687,7 +712,7 @@ pub(crate) async fn materialize_current_rule_effects(
 async fn fetch_compiled_rules(
     transaction: &mut PgTransaction<'_>,
 ) -> Result<Vec<CompiledRule>> {
-    sqlx::query!(
+    let rules = sqlx::query!(
         r#"
         SELECT id AS "id!: DelphiRuleId", rule
         FROM delphi_rules
@@ -697,18 +722,28 @@ async fn fetch_compiled_rules(
     )
     .fetch_all(&mut *transaction)
     .await
-    .wrap_err("failed to fetch delphi rules")?
-    .into_iter()
-    .map(|rule| {
-        let program = cel::Program::compile(&rule.rule).map_err(|error| {
-            eyre!("failed to compile delphi rule {}: {error}", rule.id.0)
-        })?;
-        Ok(CompiledRule {
-            id: rule.id,
-            program,
-        })
+    .wrap_err("failed to fetch delphi rules")?;
+
+    tokio::task::spawn_blocking(move || {
+        rules
+            .into_iter()
+            .map(|rule| {
+                let program =
+                    cel::Program::compile(&rule.rule).map_err(|error| {
+                        eyre!(
+                            "failed to compile delphi rule {}: {error}",
+                            rule.id.0
+                        )
+                    })?;
+                Ok(CompiledRule {
+                    id: rule.id,
+                    program,
+                })
+            })
+            .collect()
     })
-    .collect()
+    .await
+    .wrap_err("failed to join cel compilation task")?
 }
 
 async fn insert_materialized_effects(
@@ -790,40 +825,3 @@ pub(super) fn evaluate_rule(
             .wrap_err("cel expression returned an invalid rule effect"),
     }
 }
-
-fn to_public_id(id: i64) -> String {
-    to_base62(id as u64)
-}
-
-fn send_progress(
-    sender: &mpsc::UnboundedSender<Bytes>,
-    phase: &'static str,
-    revision: i64,
-    scanned: usize,
-    total: usize,
-    effects: usize,
-) {
-    send_event(
-        sender,
-        "progress",
-        &RuleScanEvent {
-            phase,
-            revision,
-            scanned,
-            total,
-            effects,
-        },
-    );
-}
-
-fn send_event(
-    sender: &mpsc::UnboundedSender<Bytes>,
-    event: &str,
-    data: &impl Serialize,
-) {
-    let Ok(data) = serde_json::to_string(data) else {
-        return;
-    };
-    let _ =
-        sender.send(Bytes::from(format!("event: {event}\ndata: {data}\n\n")));
-}
diff --git a/packages/api-client/src/modules/labrinth/types.ts b/packages/api-client/src/modules/labrinth/types.ts
index e6169e2061..75c84cf450 100644
--- a/packages/api-client/src/modules/labrinth/types.ts
+++ b/packages/api-client/src/modules/labrinth/types.ts
@@ -2288,18 +2288,9 @@ export namespace Labrinth {
 				priority: number
 			}
 
-			export type TestDelphiRuleTrace = {
-				key: string
-				issue_type: string
-				severity: DelphiSeverity
-				jar: string | null
-				file_path: string
-				data: Record<string, unknown>
-			}
-
 			export type TestDelphiRuleRequest = {
 				rule: string
-				traces: TestDelphiRuleTrace[]
+				inputs: RuleInput[]
 			}
 
 			export type DelphiRuleEffect = {

From ddb45f6aacdc8a1c912f857969ff649f23c47fe4 Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Sun, 2 Aug 2026 15:08:27 +0100
Subject: [PATCH 14/16] move hidden to severity

---
 .../ui/moderation/GlobalDetailTracesList.vue  |   3 +
 .../ui/moderation/ModerationTechRevCard.vue   |  11 +-
 .../pages/moderation/global-traces/[key].vue  |   3 +
 .../moderation/technical-review/rules.vue     |  18 ++-
 ...3c1474a73fbce86ee25a3dab2320d59fc72b9.json |  28 ++++
 ...03a765ab60c2b029a47fcd3fe97c02ee5b2a.json} |   8 +-
 ...78f647125717e2d157e0769e80aeae2cdc90.json} |   8 +-
 ...acfcd223bd67f6d5ba95868ace4373a98c67d.json |   4 +-
 ...e6eccc43bf85a44c5ba72020887af8ed98f78.json |  28 ----
 ...593c4b16a3cfcff82a4ce93604f5448e5781.json} |  18 +--
 ...691117412407c4225f966c013fdfef21a82fb.json |   4 +-
 ...cbc274f4b55db499bf83b990634b9a805575.json} |   8 +-
 ...7137bc64408856543ca32091bab0ecc91d819.json |  34 -----
 ...c9f189f1c34a94c27a2b894e7eade286b8a3.json} |   4 +-
 ...0f99a63c3f075cbad8545000a03a5a030323.json} |   4 +-
 ...b5c83300b5649f2ccc215f20fd82e258e76f4.json |  34 +++++
 ...7bab003a40537c191eb6cb64a01d92b57e25f.json |  22 +++
 ...5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json |   4 +-
 ...f03642603c79db754d0530a9c6f2f7d9c32b7.json |  28 ----
 ...f2d13592cc6995d1b87e79397ab592ad7675.json} |  11 +-
 ...08ff40af3b6b56f43540ec3798ef30e5c0b9d.json |   4 +-
 ...ba49f4963315fd7667c6db96e6153e54a2fd2.json |   4 +-
 ...3e70c2fc4456864b9f375debcc266bd658d1d.json | 138 ------------------
 ...312189b48fcafaaf1b8c4c9f483c97b694ed.json} |   4 +-
 ...2a8d3fce511a3d03e883de8ce925f3332957.json} |   4 +-
 ...b4915a88cb9c3ec54493a2a29582c80b5c76.json} |   4 +-
 ...c0fde9d617b6603b99b75cc18d1a02387bac4.json |  28 ++++
 ...8e95e5db9cabd8e1fc177cdfdaf0951e58e4.json} |   4 +-
 ...9a1fcf8991fe53044d79e37f357dd530e3530.json | 135 -----------------
 ...4cd66b78ebb9a1dbf0bb46e5bd6bb2b3a9bb9.json | 135 +++++++++++++++++
 ...5ade08110fb341d694ca0f25eecca2f5ad5bf.json | 138 ++++++++++++++++++
 ...cd8d7d4c27896cbfcb3e26085f99e3552c98.json} |  20 ++-
 ...07c8befb4cdaa728a167bd2586898875836c1.json |  22 ---
 ...de1e7cddd68ac956143bef994104280a8dc07.json |   4 +-
 ...d4ab14cea8575e4a15cf8c1c57e9c1e367a1.json} |   4 +-
 .../20260720105358_delphi_trace_rules.sql     |   9 +-
 .../src/database/models/delphi_report_item.rs |   6 +-
 .../src/routes/internal/delphi/rescan.rs      |   4 +-
 .../internal/delphi/tech_review_queue.rs      |   2 +-
 .../src/routes/internal/moderation/mod.rs     |   8 +-
 .../routes/internal/moderation/tech_review.rs |  16 +-
 .../internal/moderation/tech_review/global.rs |   8 +-
 .../internal/moderation/tech_review/rules.rs  |  23 +--
 .../moderation/tech_review/rules_scan.rs      |  22 ++-
 .../api-client/src/modules/labrinth/types.ts  |   8 +-
 packages/delphi-cel-experiment/src/main.rs    |  13 +-
 46 files changed, 536 insertions(+), 513 deletions(-)
 create mode 100644 apps/labrinth/.sqlx/query-03e377401b1a9bab44f3ff6451d3c1474a73fbce86ee25a3dab2320d59fc72b9.json
 rename apps/labrinth/.sqlx/{query-ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7.json => query-06384971752b20c04d7a747777bf03a765ab60c2b029a47fcd3fe97c02ee5b2a.json} (78%)
 rename apps/labrinth/.sqlx/{query-63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb.json => query-15d8434ef325e21959ef8ab0541f78f647125717e2d157e0769e80aeae2cdc90.json} (92%)
 delete mode 100644 apps/labrinth/.sqlx/query-262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78.json
 rename apps/labrinth/.sqlx/{query-159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d.json => query-26618d64eb4ca9f14ed5cb5f143b593c4b16a3cfcff82a4ce93604f5448e5781.json} (72%)
 rename apps/labrinth/.sqlx/{query-a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475.json => query-36ffcc9010d1f70deba53483cc2bcbc274f4b55db499bf83b990634b9a805575.json} (94%)
 delete mode 100644 apps/labrinth/.sqlx/query-54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819.json
 rename apps/labrinth/.sqlx/{query-c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638.json => query-563d4d8ff958b3a915e6e20b0654c9f189f1c34a94c27a2b894e7eade286b8a3.json} (80%)
 rename apps/labrinth/.sqlx/{query-4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16.json => query-5d5024681546a90c9fb18dae934a0f99a63c3f075cbad8545000a03a5a030323.json} (64%)
 create mode 100644 apps/labrinth/.sqlx/query-628d178e568998627de7e7cdba3b5c83300b5649f2ccc215f20fd82e258e76f4.json
 create mode 100644 apps/labrinth/.sqlx/query-852eff37ff36e1e87fcbc6c50f27bab003a40537c191eb6cb64a01d92b57e25f.json
 delete mode 100644 apps/labrinth/.sqlx/query-89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7.json
 rename apps/labrinth/.sqlx/{query-f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58.json => query-8c7f17ad005b42b4c6cac5ddb6a1f2d13592cc6995d1b87e79397ab592ad7675.json} (64%)
 delete mode 100644 apps/labrinth/.sqlx/query-9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d.json
 rename apps/labrinth/.sqlx/{query-436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06.json => query-9d044826831bd15b1e0772e8a5db312189b48fcafaaf1b8c4c9f483c97b694ed.json} (84%)
 rename apps/labrinth/.sqlx/{query-8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a.json => query-a58e701218270abb1c5b177d7ab12a8d3fce511a3d03e883de8ce925f3332957.json} (57%)
 rename apps/labrinth/.sqlx/{query-e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d.json => query-aedd5d9fe052a9fa70e585f389c3b4915a88cb9c3ec54493a2a29582c80b5c76.json} (71%)
 create mode 100644 apps/labrinth/.sqlx/query-befd8c75e7ed4621f5e99d88719c0fde9d617b6603b99b75cc18d1a02387bac4.json
 rename apps/labrinth/.sqlx/{query-86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d.json => query-cb983aed301378550831204ff7f88e95e5db9cabd8e1fc177cdfdaf0951e58e4.json} (79%)
 delete mode 100644 apps/labrinth/.sqlx/query-cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530.json
 create mode 100644 apps/labrinth/.sqlx/query-d37041da5452ecb82da506a83154cd66b78ebb9a1dbf0bb46e5bd6bb2b3a9bb9.json
 create mode 100644 apps/labrinth/.sqlx/query-d3d320af2786bf7908e65f5b7a35ade08110fb341d694ca0f25eecca2f5ad5bf.json
 rename apps/labrinth/.sqlx/{query-f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b.json => query-e07b7f513dd5d2a0e06cc1880746cd8d7d4c27896cbfcb3e26085f99e3552c98.json} (75%)
 delete mode 100644 apps/labrinth/.sqlx/query-f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1.json
 rename apps/labrinth/.sqlx/{query-b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9.json => query-f952ab269d0aa1b98bb86b58debfd4ab14cea8575e4a15cf8c1c57e9c1e367a1.json} (77%)

diff --git a/apps/frontend/src/components/ui/moderation/GlobalDetailTracesList.vue b/apps/frontend/src/components/ui/moderation/GlobalDetailTracesList.vue
index 1d4fd8cb8a..6738f6f247 100644
--- a/apps/frontend/src/components/ui/moderation/GlobalDetailTracesList.vue
+++ b/apps/frontend/src/components/ui/moderation/GlobalDetailTracesList.vue
@@ -170,12 +170,15 @@ function getSeverityBadgeColor(
 	severity: Labrinth.TechReview.Internal.DelphiSeverity | undefined,
 ): string {
 	switch (severity) {
+		case 'malware':
 		case 'severe':
 			return 'border-red/60 bg-highlight-red text-red'
 		case 'high':
 			return 'border-orange/60 bg-highlight-orange text-orange'
 		case 'medium':
 			return 'border-green/60 bg-highlight-green text-green'
+		case 'hidden':
+			return 'border-divider bg-surface-2 text-secondary'
 		case 'low':
 		default:
 			return 'border-blue/60 bg-highlight-blue text-blue'
diff --git a/apps/frontend/src/components/ui/moderation/ModerationTechRevCard.vue b/apps/frontend/src/components/ui/moderation/ModerationTechRevCard.vue
index 7fa3b7d4a7..de468579c6 100644
--- a/apps/frontend/src/components/ui/moderation/ModerationTechRevCard.vue
+++ b/apps/frontend/src/components/ui/moderation/ModerationTechRevCard.vue
@@ -225,7 +225,10 @@ async function updateGlobalIssueDetail(
 	])
 }
 
-const severityOrder = { severe: 3, high: 2, medium: 1, low: 0 } as Record<string, number>
+const severityOrder = { malware: 4, severe: 3, high: 2, medium: 1, low: 0, hidden: -1 } as Record<
+	string,
+	number
+>
 
 type DetailDecision = 'safe' | 'malware' | 'pending'
 type DetailDecisionScope = 'local' | 'global'
@@ -489,12 +492,15 @@ function handleTabClick(index: number) {
 
 function getSeverityBadgeColor(severity: Labrinth.TechReview.Internal.DelphiSeverity): string {
 	switch (severity) {
+		case 'malware':
 		case 'severe':
 			return 'border-red/60 border bg-highlight-red text-red'
 		case 'high':
 			return 'border-orange/60 border bg-highlight-orange text-orange'
 		case 'medium':
 			return 'border-green/60 border bg-highlight-green text-green'
+		case 'hidden':
+			return 'border-divider border bg-surface-2 text-secondary'
 		case 'low':
 		default:
 			return 'border-blue/60 border bg-highlight-blue text-blue'
@@ -513,12 +519,15 @@ function truncateMiddle(str: string, maxLength: number = 120): string {
 
 const severityColor = computed(() => {
 	switch (highestSeverity.value) {
+		case 'malware':
 		case 'severe':
 			return 'text-red bg-highlight-red border-solid border-[1px] border-red'
 		case 'high':
 			return 'text-orange bg-highlight-orange border-solid border-[1px] border-orange'
 		case 'medium':
 			return 'text-green bg-highlight-green border-solid border-[1px] border-green'
+		case 'hidden':
+			return 'text-secondary bg-surface-2 border-solid border-[1px] border-divider'
 		case 'low':
 		default:
 			return 'text-blue bg-highlight-blue border-solid border-[1px] border-blue'
diff --git a/apps/frontend/src/pages/moderation/global-traces/[key].vue b/apps/frontend/src/pages/moderation/global-traces/[key].vue
index 9224068987..1cc457f195 100644
--- a/apps/frontend/src/pages/moderation/global-traces/[key].vue
+++ b/apps/frontend/src/pages/moderation/global-traces/[key].vue
@@ -140,12 +140,15 @@ const latestLocalTrace = computed(() => trace.value?.local_traces.at(-1))
 
 function getSeverityBadgeColor(severity: Labrinth.TechReview.Internal.DelphiSeverity): string {
 	switch (severity) {
+		case 'malware':
 		case 'severe':
 			return 'border-red/60 bg-highlight-red text-red'
 		case 'high':
 			return 'border-orange/60 bg-highlight-orange text-orange'
 		case 'medium':
 			return 'border-green/60 bg-highlight-green text-green'
+		case 'hidden':
+			return 'border-divider bg-surface-2 text-secondary'
 		case 'low':
 		default:
 			return 'border-blue/60 bg-highlight-blue text-blue'
diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index 4c18acc654..47032a24a9 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -47,7 +47,7 @@
 			</div>
 			<p class="m-0 text-sm text-secondary">
 				Return <code>null</code> when the rule does not match, or a map containing
-				<code>severity</code> and/or <code>hidden</code> when it does.
+				<code>severity</code> when it does.
 			</p>
 
 			<details class="rounded-xl border border-divider bg-bg-raised p-3">
@@ -136,7 +136,10 @@
 						<p class="m-0 text-xs font-semibold uppercase tracking-wide text-secondary">
 							New state
 						</p>
-						<div v-if="example.effect?.hidden" class="flex items-center gap-2 text-secondary">
+						<div
+							v-if="example.effectiveSeverity === 'hidden'"
+							class="flex items-center gap-2 text-secondary"
+						>
 							<EyeOffIcon class="size-5" />
 							<strong class="text-contrast">Hidden from reports</strong>
 						</div>
@@ -327,11 +330,11 @@
 								</div>
 								<div class="flex min-w-0 flex-wrap items-center gap-2">
 									<span
-										v-if="!detail.hidden"
+										v-if="detail.severity !== 'hidden'"
 										class="rounded-full border px-2 py-0.5 text-xs font-semibold capitalize"
-										:class="getSeverityBadgeColor(detail.severity ?? detail.original_severity)"
+										:class="getSeverityBadgeColor(detail.severity)"
 									>
-										{{ detail.severity ?? detail.original_severity }}
+										{{ detail.severity }}
 									</span>
 									<span v-else class="flex items-center gap-1 text-xs font-semibold text-secondary">
 										<EyeOffIcon class="size-4" />
@@ -426,7 +429,7 @@ import type { Component } from 'vue'
 import IssueDetailPath from '~/components/ui/moderation/IssueDetailPath.vue'
 
 const DEFAULT_RULE = `input.trace.issue_type == "OBFUSCATED_NAMES"
-	? {"severity": "low", "hidden": false}
+	? {"severity": "low"}
 	: null`
 const RULE_EDITOR_OPTIONS: Partial<Ace.EditorOptions> = {
 	useWorker: false,
@@ -575,12 +578,15 @@ const previewExamples = computed(() =>
 
 function getSeverityBadgeColor(severity: Labrinth.TechReview.Internal.DelphiSeverity): string {
 	switch (severity) {
+		case 'malware':
 		case 'severe':
 			return 'border-red/60 bg-highlight-red text-red'
 		case 'high':
 			return 'border-orange/60 bg-highlight-orange text-orange'
 		case 'medium':
 			return 'border-green/60 bg-highlight-green text-green'
+		case 'hidden':
+			return 'border-divider bg-surface-2 text-secondary'
 		case 'low':
 		default:
 			return 'border-blue/60 bg-highlight-blue text-blue'
diff --git a/apps/labrinth/.sqlx/query-03e377401b1a9bab44f3ff6451d3c1474a73fbce86ee25a3dab2320d59fc72b9.json b/apps/labrinth/.sqlx/query-03e377401b1a9bab44f3ff6451d3c1474a73fbce86ee25a3dab2320d59fc72b9.json
new file mode 100644
index 0000000000..e929d42e00
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-03e377401b1a9bab44f3ff6451d3c1474a73fbce86ee25a3dab2320d59fc72b9.json
@@ -0,0 +1,28 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        WITH project_membership AS (\n            SELECT\n                detail.project_id,\n                BOOL_OR(\n                    detail.status IN ('pending', 'unsafe')\n                    AND detail.severity != 'hidden'\n                ) AS old_needs_review,\n                BOOL_OR(\n                    detail.status IN ('pending', 'unsafe')\n                    AND COALESCE(\n                        new_effect.severity,\n                        detail.original_severity\n                    ) != 'hidden'\n                ) AS new_needs_review\n            FROM delphi_issue_details_with_statuses detail\n            LEFT JOIN delphi_rule_effects new_effect\n                ON new_effect.revision = $1\n                AND new_effect.detail_id = detail.id\n            GROUP BY detail.project_id\n        )\n        SELECT\n            project_id AS \"project_id!: DBProjectId\",\n            new_needs_review AS \"new_needs_review!\"\n        FROM project_membership\n        WHERE old_needs_review IS DISTINCT FROM new_needs_review\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id!: DBProjectId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "new_needs_review!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      true,
+      null
+    ]
+  },
+  "hash": "03e377401b1a9bab44f3ff6451d3c1474a73fbce86ee25a3dab2320d59fc72b9"
+}
diff --git a/apps/labrinth/.sqlx/query-ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7.json b/apps/labrinth/.sqlx/query-06384971752b20c04d7a747777bf03a765ab60c2b029a47fcd3fe97c02ee5b2a.json
similarity index 78%
rename from apps/labrinth/.sqlx/query-ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7.json
rename to apps/labrinth/.sqlx/query-06384971752b20c04d7a747777bf03a765ab60c2b029a47fcd3fe97c02ee5b2a.json
index 4e5742b00a..deece44e8e 100644
--- a/apps/labrinth/.sqlx/query-ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7.json
+++ b/apps/labrinth/.sqlx/query-06384971752b20c04d7a747777bf03a765ab60c2b029a47fcd3fe97c02ee5b2a.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        WITH ranked_local_traces AS (\n            SELECT\n                didws.key AS detail_key,\n                didws.id AS detail_id,\n                didws.issue_id,\n                dri.issue_type,\n                m.id AS project_id,\n                m.slug AS project_slug,\n                m.name AS project_name,\n                v.id AS version_id,\n                v.version_number,\n                f.id AS file_id,\n                f.filename AS file_name,\n                didws.jar,\n                didws.file_path,\n                didws.severity,\n                COALESCE(didv.verdict, 'pending'::delphi_report_issue_status)\n                    AS local_status,\n                didws.status AS effective_status,\n                ROW_NUMBER() OVER (\n                    PARTITION BY didws.key\n                    ORDER BY didws.id\n                ) AS row_num\n            FROM delphi_issue_details_with_statuses didws\n            INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n            INNER JOIN delphi_reports dr ON dr.id = dri.report_id\n            INNER JOIN files f ON f.id = dr.file_id\n            INNER JOIN versions v ON v.id = f.version_id\n            INNER JOIN mods m ON m.id = v.mod_id\n            LEFT JOIN delphi_issue_detail_verdicts didv\n                ON didv.project_id = didws.project_id\n                AND didv.detail_key = didws.key\n            WHERE\n                didws.key = ANY($1::text[])\n                AND NOT didws.hidden\n        )\n        SELECT\n            detail_key AS \"detail_key!\",\n            detail_id AS \"detail_id!: DelphiReportIssueDetailsId\",\n            issue_id AS \"issue_id!: DelphiReportIssueId\",\n            issue_type,\n            project_id AS \"project_id!: DBProjectId\",\n            project_slug AS \"project_slug?\",\n            project_name AS \"project_name!\",\n            version_id AS \"version_id!: DBVersionId\",\n            v.version_number,\n            file_id AS \"file_id!: DBFileId\",\n            file_name AS \"file_name!\",\n            jar AS \"jar?\",\n            file_path AS \"file_path!\",\n            severity AS \"severity!: DelphiSeverity\",\n            local_status AS \"local_status!: DelphiStatus\",\n            effective_status AS \"effective_status!: DelphiStatus\"\n        FROM ranked_local_traces v\n        WHERE row_num <= $2\n        ORDER BY detail_key, detail_id\n        ",
+  "query": "\n        WITH ranked_local_traces AS (\n            SELECT\n                didws.key AS detail_key,\n                didws.id AS detail_id,\n                didws.issue_id,\n                dri.issue_type,\n                m.id AS project_id,\n                m.slug AS project_slug,\n                m.name AS project_name,\n                v.id AS version_id,\n                v.version_number,\n                f.id AS file_id,\n                f.filename AS file_name,\n                didws.jar,\n                didws.file_path,\n                didws.severity,\n                COALESCE(didv.verdict, 'pending'::delphi_report_issue_status)\n                    AS local_status,\n                didws.status AS effective_status,\n                ROW_NUMBER() OVER (\n                    PARTITION BY didws.key\n                    ORDER BY didws.id\n                ) AS row_num\n            FROM delphi_issue_details_with_statuses didws\n            INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n            INNER JOIN delphi_reports dr ON dr.id = dri.report_id\n            INNER JOIN files f ON f.id = dr.file_id\n            INNER JOIN versions v ON v.id = f.version_id\n            INNER JOIN mods m ON m.id = v.mod_id\n            LEFT JOIN delphi_issue_detail_verdicts didv\n                ON didv.project_id = didws.project_id\n                AND didv.detail_key = didws.key\n            WHERE\n                didws.key = ANY($1::text[])\n                AND didws.severity != 'hidden'\n        )\n        SELECT\n            detail_key AS \"detail_key!\",\n            detail_id AS \"detail_id!: DelphiReportIssueDetailsId\",\n            issue_id AS \"issue_id!: DelphiReportIssueId\",\n            issue_type,\n            project_id AS \"project_id!: DBProjectId\",\n            project_slug AS \"project_slug?\",\n            project_name AS \"project_name!\",\n            version_id AS \"version_id!: DBVersionId\",\n            v.version_number,\n            file_id AS \"file_id!: DBFileId\",\n            file_name AS \"file_name!\",\n            jar AS \"jar?\",\n            file_path AS \"file_path!\",\n            severity AS \"severity!: DelphiSeverity\",\n            local_status AS \"local_status!: DelphiStatus\",\n            effective_status AS \"effective_status!: DelphiStatus\"\n        FROM ranked_local_traces v\n        WHERE row_num <= $2\n        ORDER BY detail_key, detail_id\n        ",
   "describe": {
     "columns": [
       {
@@ -76,10 +76,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
@@ -143,5 +145,5 @@
       true
     ]
   },
-  "hash": "ebbd8dce6a062c18f329381c1d17ece6727b6633053e1fc8b00e48cd539073f7"
+  "hash": "06384971752b20c04d7a747777bf03a765ab60c2b029a47fcd3fe97c02ee5b2a"
 }
diff --git a/apps/labrinth/.sqlx/query-63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb.json b/apps/labrinth/.sqlx/query-15d8434ef325e21959ef8ab0541f78f647125717e2d157e0769e80aeae2cdc90.json
similarity index 92%
rename from apps/labrinth/.sqlx/query-63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb.json
rename to apps/labrinth/.sqlx/query-15d8434ef325e21959ef8ab0541f78f647125717e2d157e0769e80aeae2cdc90.json
index f715919c0e..0905114ade 100644
--- a/apps/labrinth/.sqlx/query-63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb.json
+++ b/apps/labrinth/.sqlx/query-15d8434ef325e21959ef8ab0541f78f647125717e2d157e0769e80aeae2cdc90.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            didws.id AS \"id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            didws.key AS \"key!: String\",\n            didws.jar AS \"jar?: String\",\n            didws.file_path AS \"file_path!: String\",\n            didws.data AS \"data!: sqlx::types::Json<HashMap<String, serde_json::Value>>\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            didws.local_status AS \"local_status?: DelphiStatus\",\n            didws.global_status AS \"global_status?: DelphiStatus\",\n            didws.status AS \"status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        WHERE\n            didws.issue_id = ANY($1::bigint[])\n            AND NOT didws.hidden\n        ORDER BY didws.issue_id, didws.id\n        ",
+  "query": "\n        SELECT\n            didws.id AS \"id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            didws.key AS \"key!: String\",\n            didws.jar AS \"jar?: String\",\n            didws.file_path AS \"file_path!: String\",\n            didws.data AS \"data!: sqlx::types::Json<HashMap<String, serde_json::Value>>\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            didws.local_status AS \"local_status?: DelphiStatus\",\n            didws.global_status AS \"global_status?: DelphiStatus\",\n            didws.status AS \"status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        WHERE\n            didws.issue_id = ANY($1::bigint[])\n            AND didws.severity != 'hidden'\n        ORDER BY didws.issue_id, didws.id\n        ",
   "describe": {
     "columns": [
       {
@@ -41,10 +41,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
@@ -117,5 +119,5 @@
       true
     ]
   },
-  "hash": "63c94bea3d26a55b5eab89f2f6fac0eef45ebaa301f2ae14de4d5f3dcbd65cbb"
+  "hash": "15d8434ef325e21959ef8ab0541f78f647125717e2d157e0769e80aeae2cdc90"
 }
diff --git a/apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json b/apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json
index 099bf29e82..66ae4f6a27 100644
--- a/apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json
+++ b/apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json
@@ -21,10 +21,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
diff --git a/apps/labrinth/.sqlx/query-262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78.json b/apps/labrinth/.sqlx/query-262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78.json
deleted file mode 100644
index d1516e0e95..0000000000
--- a/apps/labrinth/.sqlx/query-262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            WITH moderation_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.description,\n                    m.queued,\n                    m.published,\n                    m.organization_id,\n                    m.team_id,\n                    m.components\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $7::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                                AND NOT didws.hidden\n                        )\n                    )\n            ),\n            external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            version_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            queue_projects AS (\n                SELECT\n                    mp.id,\n                    mp.slug,\n                    mp.name,\n                    mp.summary,\n                    mp.description,\n                    mp.queued,\n                    mp.published,\n                    search_organization.name AS organization_name,\n                    search_owner.username AS owner_name,\n                    CASE\n                        WHEN mp.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(vpt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(vpt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ed.external_dependencies_count, 0) AS external_dependencies_count\n                FROM moderation_projects mp\n                LEFT JOIN organizations search_organization\n                    ON search_organization.id = mp.organization_id\n                    AND $3::text IS NOT NULL\n                LEFT JOIN LATERAL (\n                    SELECT\n                        u.username\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = mp.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) search_owner ON $3::text IS NOT NULL\n                    AND mp.organization_id IS NULL\n                LEFT JOIN external_dependencies ed ON ed.mod_id = mp.id\n                LEFT JOIN version_project_types vpt ON vpt.mod_id = mp.id\n            )\n            SELECT id\n            FROM queue_projects\n            WHERE\n                (\n                    $3::text IS NULL\n                    OR name ILIKE '%' || $3 || '%'\n                    OR slug ILIKE '%' || $3 || '%'\n                    OR summary ILIKE '%' || $3 || '%'\n                    OR description ILIKE '%' || $3 || '%'\n                    OR owner_name ILIKE '%' || $3 || '%'\n                    OR organization_name ILIKE '%' || $3 || '%'\n                    OR EXISTS (\n                        SELECT 1\n                        FROM UNNEST(project_types) AS searched_project_type(project_type)\n                        WHERE searched_project_type.project_type ILIKE '%' || $3 || '%'\n                    )\n                )\n                AND (\n                    $4::text IS NULL\n                    OR ($4 = 'none' AND CARDINALITY(project_types) = 0)\n                    OR ($4 = 'minecraft_java_server' AND project_types @> ARRAY['minecraft_java_server']::text[])\n                    OR ($4 <> 'none' AND $4 <> 'minecraft_java_server' AND project_types[1] = $4)\n                )\n                AND ($5::boolean IS NULL OR (external_dependencies_count > 0) = $5)\n            ORDER BY\n                CASE WHEN $6 = 'most_external_deps' THEN external_dependencies_count END DESC,\n                CASE WHEN $6 = 'least_external_deps' THEN external_dependencies_count END ASC,\n                CASE WHEN $6 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                CASE WHEN $6 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(queued, published) END ASC NULLS LAST,\n                id ASC\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "TextArray",
-        "Text",
-        "Text",
-        "Bool",
-        "Text",
-        "Bool"
-      ]
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "262f8286192e30763553811a7cfe6eccc43bf85a44c5ba72020887af8ed98f78"
-}
diff --git a/apps/labrinth/.sqlx/query-159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d.json b/apps/labrinth/.sqlx/query-26618d64eb4ca9f14ed5cb5f143b593c4b16a3cfcff82a4ce93604f5448e5781.json
similarity index 72%
rename from apps/labrinth/.sqlx/query-159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d.json
rename to apps/labrinth/.sqlx/query-26618d64eb4ca9f14ed5cb5f143b593c4b16a3cfcff82a4ce93604f5448e5781.json
index f2b063d771..ecfdfc77f1 100644
--- a/apps/labrinth/.sqlx/query-159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d.json
+++ b/apps/labrinth/.sqlx/query-26618d64eb4ca9f14ed5cb5f143b593c4b16a3cfcff82a4ce93604f5448e5781.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tSELECT\n\t\t\tdelphi_rule.id AS \"id!: DelphiRuleId\",\n\t\t\tdelphi_rule.name,\n\t\t\tdelphi_rule.rule,\n\t\t\tdelphi_rule.priority,\n\t\t\tdelphi_rule.revision,\n\t\t\tdelphi_rule.created_at,\n\t\t\tdelphi_rule.updated_at,\n\t\t\tdelphi_rule.created_by,\n\t\t\tdelphi_rule.updated_by,\n\t\t\tCOALESCE(preview.affected_details_count, 0)\n\t\t\t\tAS \"affected_details_count!\",\n\t\t\tpreview.detail_id AS \"detail_id?: DelphiReportIssueDetailsId\",\n\t\t\tpreview.issue_id AS \"issue_id?: DelphiReportIssueId\",\n\t\t\tpreview.project_id AS \"project_id?: DBProjectId\",\n\t\t\tpreview.project_name AS \"project_name?\",\n\t\t\tpreview.project_icon_url AS \"project_icon_url?\",\n\t\t\tpreview.version_id AS \"version_id?: DBVersionId\",\n\t\t\tpreview.version_name AS \"version_name?\",\n\t\t\tpreview.version_number AS \"version_number?\",\n\t\t\tpreview.issue_type AS \"issue_type?\",\n\t\t\tpreview.key AS \"key?\",\n\t\t\tpreview.jar AS \"jar?\",\n\t\t\tpreview.file_path AS \"file_path?\",\n\t\t\tpreview.original_severity AS \"original_severity?: DelphiSeverity\",\n\t\t\tpreview.severity AS \"effect_severity?: DelphiSeverity\",\n\t\t\tpreview.hidden AS \"hidden?\"\n\t\tFROM delphi_rules delphi_rule\n\t\tLEFT JOIN LATERAL (\n\t\t\tSELECT\n\t\t\t\teffect.detail_id,\n\t\t\t\tdetail.issue_id,\n\t\t\t\tversion.mod_id AS project_id,\n\t\t\t\tproject.name AS project_name,\n\t\t\t\tproject.icon_url AS project_icon_url,\n\t\t\t\tversion.id AS version_id,\n\t\t\t\tversion.name AS version_name,\n\t\t\t\tversion.version_number,\n\t\t\t\tissue.issue_type,\n\t\t\t\tdetail.key,\n\t\t\t\tdetail.jar,\n\t\t\t\tdetail.file_path,\n\t\t\t\tdetail.severity AS original_severity,\n\t\t\t\teffect.severity,\n\t\t\t\teffect.hidden,\n\t\t\t\tCOUNT(*) OVER () AS affected_details_count\n\t\t\tFROM delphi_rule_effects effect\n\t\t\tINNER JOIN delphi_rule_revisions published\n\t\t\t\tON published.revision = effect.revision\n\t\t\tINNER JOIN delphi_report_issue_details detail\n\t\t\t\tON detail.id = effect.detail_id\n\t\t\tINNER JOIN delphi_report_issues issue\n\t\t\t\tON issue.id = detail.issue_id\n\t\t\tINNER JOIN delphi_reports report\n\t\t\t\tON report.id = issue.report_id\n\t\t\tLEFT JOIN files file ON file.id = report.file_id\n\t\t\tLEFT JOIN versions version ON version.id = file.version_id\n\t\t\tLEFT JOIN mods project ON project.id = version.mod_id\n\t\t\tWHERE effect.rule_id = delphi_rule.id\n\t\t\tORDER BY effect.detail_id DESC\n\t\t\tLIMIT 3\n\t\t) preview ON TRUE\n\t\tWHERE NOT delphi_rule.delete_on_next_revision\n\t\tORDER BY\n\t\t\tdelphi_rule.priority DESC,\n\t\t\tdelphi_rule.id,\n\t\t\tpreview.detail_id DESC\n\t\t",
+  "query": "\n\t\tSELECT\n\t\t\tdelphi_rule.id AS \"id!: DelphiRuleId\",\n\t\t\tdelphi_rule.name,\n\t\t\tdelphi_rule.rule,\n\t\t\tdelphi_rule.priority,\n\t\t\tdelphi_rule.revision,\n\t\t\tdelphi_rule.created_at,\n\t\t\tdelphi_rule.updated_at,\n\t\t\tdelphi_rule.created_by,\n\t\t\tdelphi_rule.updated_by,\n\t\t\tCOALESCE(preview.affected_details_count, 0)\n\t\t\t\tAS \"affected_details_count!\",\n\t\t\tpreview.detail_id AS \"detail_id?: DelphiReportIssueDetailsId\",\n\t\t\tpreview.issue_id AS \"issue_id?: DelphiReportIssueId\",\n\t\t\tpreview.project_id AS \"project_id?: DBProjectId\",\n\t\t\tpreview.project_name AS \"project_name?\",\n\t\t\tpreview.project_icon_url AS \"project_icon_url?\",\n\t\t\tpreview.version_id AS \"version_id?: DBVersionId\",\n\t\t\tpreview.version_name AS \"version_name?\",\n\t\t\tpreview.version_number AS \"version_number?\",\n\t\t\tpreview.issue_type AS \"issue_type?\",\n\t\t\tpreview.key AS \"key?\",\n\t\t\tpreview.jar AS \"jar?\",\n\t\t\tpreview.file_path AS \"file_path?\",\n\t\t\tpreview.original_severity AS \"original_severity?: DelphiSeverity\",\n\t\t\tpreview.severity AS \"effect_severity?: DelphiSeverity\"\n\t\tFROM delphi_rules delphi_rule\n\t\tLEFT JOIN LATERAL (\n\t\t\tSELECT\n\t\t\t\teffect.detail_id,\n\t\t\t\tdetail.issue_id,\n\t\t\t\tversion.mod_id AS project_id,\n\t\t\t\tproject.name AS project_name,\n\t\t\t\tproject.icon_url AS project_icon_url,\n\t\t\t\tversion.id AS version_id,\n\t\t\t\tversion.name AS version_name,\n\t\t\t\tversion.version_number,\n\t\t\t\tissue.issue_type,\n\t\t\t\tdetail.key,\n\t\t\t\tdetail.jar,\n\t\t\t\tdetail.file_path,\n\t\t\t\tdetail.severity AS original_severity,\n\t\t\t\teffect.severity,\n\t\t\t\tCOUNT(*) OVER () AS affected_details_count\n\t\t\tFROM delphi_rule_effects effect\n\t\t\tINNER JOIN delphi_rule_revisions published\n\t\t\t\tON published.revision = effect.revision\n\t\t\tINNER JOIN delphi_report_issue_details detail\n\t\t\t\tON detail.id = effect.detail_id\n\t\t\tINNER JOIN delphi_report_issues issue\n\t\t\t\tON issue.id = detail.issue_id\n\t\t\tINNER JOIN delphi_reports report\n\t\t\t\tON report.id = issue.report_id\n\t\t\tLEFT JOIN files file ON file.id = report.file_id\n\t\t\tLEFT JOIN versions version ON version.id = file.version_id\n\t\t\tLEFT JOIN mods project ON project.id = version.mod_id\n\t\t\tWHERE effect.rule_id = delphi_rule.id\n\t\t\tORDER BY effect.detail_id DESC\n\t\t\tLIMIT 3\n\t\t) preview ON TRUE\n\t\tWHERE NOT delphi_rule.delete_on_next_revision\n\t\tORDER BY\n\t\t\tdelphi_rule.priority DESC,\n\t\t\tdelphi_rule.id,\n\t\t\tpreview.detail_id DESC\n\t\t",
   "describe": {
     "columns": [
       {
@@ -121,10 +121,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
@@ -138,19 +140,16 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
         }
-      },
-      {
-        "ordinal": 24,
-        "name": "hidden?",
-        "type_info": "Bool"
       }
     ],
     "parameters": {
@@ -180,9 +179,8 @@
       true,
       false,
       false,
-      true,
       false
     ]
   },
-  "hash": "159d482c1859b0d0d42a15fb2b49e3a9a17755694448e00bf5e5faccb3ace76d"
+  "hash": "26618d64eb4ca9f14ed5cb5f143b593c4b16a3cfcff82a4ce93604f5448e5781"
 }
diff --git a/apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json b/apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json
index c1aa96d89b..3e24779308 100644
--- a/apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json
+++ b/apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json
@@ -26,10 +26,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
diff --git a/apps/labrinth/.sqlx/query-a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475.json b/apps/labrinth/.sqlx/query-36ffcc9010d1f70deba53483cc2bcbc274f4b55db499bf83b990634b9a805575.json
similarity index 94%
rename from apps/labrinth/.sqlx/query-a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475.json
rename to apps/labrinth/.sqlx/query-36ffcc9010d1f70deba53483cc2bcbc274f4b55db499bf83b990634b9a805575.json
index 51aed00156..8e9078348f 100644
--- a/apps/labrinth/.sqlx/query-a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475.json
+++ b/apps/labrinth/.sqlx/query-36ffcc9010d1f70deba53483cc2bcbc274f4b55db499bf83b990634b9a805575.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            didws.key AS \"detail_key!\",\n            didws.id AS \"detail_id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            dri.issue_type,\n            m.id AS \"project_id!: DBProjectId\",\n            m.slug AS \"project_slug?\",\n            m.name AS \"project_name!\",\n            v.id AS \"version_id!: DBVersionId\",\n            v.version_number,\n            f.id AS \"file_id!: DBFileId\",\n            f.filename AS \"file_name!\",\n            didws.jar AS \"jar?\",\n            didws.file_path AS \"file_path!\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            COALESCE(didv.verdict, 'pending'::delphi_report_issue_status)\n                AS \"local_status!: DelphiStatus\",\n            didws.status AS \"effective_status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n        INNER JOIN delphi_reports dr ON dr.id = dri.report_id\n        INNER JOIN files f ON f.id = dr.file_id\n        INNER JOIN versions v ON v.id = f.version_id\n        INNER JOIN mods m ON m.id = v.mod_id\n        LEFT JOIN delphi_issue_detail_verdicts didv\n            ON didv.project_id = didws.project_id\n            AND didv.detail_key = didws.key\n        WHERE\n            didws.key = $1\n            AND ($2::bigint IS NULL OR didws.id > $2)\n            AND NOT didws.hidden\n        ORDER BY didws.id\n        LIMIT $3\n        ",
+  "query": "\n        SELECT\n            didws.key AS \"detail_key!\",\n            didws.id AS \"detail_id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            dri.issue_type,\n            m.id AS \"project_id!: DBProjectId\",\n            m.slug AS \"project_slug?\",\n            m.name AS \"project_name!\",\n            v.id AS \"version_id!: DBVersionId\",\n            v.version_number,\n            f.id AS \"file_id!: DBFileId\",\n            f.filename AS \"file_name!\",\n            didws.jar AS \"jar?\",\n            didws.file_path AS \"file_path!\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            COALESCE(didv.verdict, 'pending'::delphi_report_issue_status)\n                AS \"local_status!: DelphiStatus\",\n            didws.status AS \"effective_status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        INNER JOIN delphi_report_issues dri ON dri.id = didws.issue_id\n        INNER JOIN delphi_reports dr ON dr.id = dri.report_id\n        INNER JOIN files f ON f.id = dr.file_id\n        INNER JOIN versions v ON v.id = f.version_id\n        INNER JOIN mods m ON m.id = v.mod_id\n        LEFT JOIN delphi_issue_detail_verdicts didv\n            ON didv.project_id = didws.project_id\n            AND didv.detail_key = didws.key\n        WHERE\n            didws.key = $1\n            AND ($2::bigint IS NULL OR didws.id > $2)\n            AND didws.severity != 'hidden'\n        ORDER BY didws.id\n        LIMIT $3\n        ",
   "describe": {
     "columns": [
       {
@@ -76,10 +76,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
@@ -144,5 +146,5 @@
       true
     ]
   },
-  "hash": "a7c4204b80587b0b73127125c695d3c779b1a052c82797b771e8fc9e38169475"
+  "hash": "36ffcc9010d1f70deba53483cc2bcbc274f4b55db499bf83b990634b9a805575"
 }
diff --git a/apps/labrinth/.sqlx/query-54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819.json b/apps/labrinth/.sqlx/query-54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819.json
deleted file mode 100644
index 856b5a1e73..0000000000
--- a/apps/labrinth/.sqlx/query-54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            m.id AS \"project_id: DBProjectId\",\n            MIN(t.id) AS \"thread_id!: DBThreadId\"\n        FROM mods m\n        INNER JOIN delphi_tech_review_queue trq ON trq.project_id = m.id\n        INNER JOIN threads t ON t.mod_id = m.id\n        LEFT JOIN versions v ON v.mod_id = m.id\n        LEFT JOIN files f ON f.version_id = v.id\n        LEFT JOIN delphi_reports dr ON dr.file_id = f.id\n        LEFT JOIN delphi_report_issues dri ON dri.report_id = dr.id\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.issue_id = dri.id\n            AND NOT didws.hidden\n        LEFT JOIN threads_messages tm_last\n            ON tm_last.thread_id = t.id\n            AND tm_last.id = (\n                SELECT id FROM threads_messages\n                WHERE thread_id = t.id\n                ORDER BY created DESC\n                LIMIT 1\n            )\n        LEFT JOIN users u_last\n            ON u_last.id = tm_last.author_id\n        WHERE\n            (\n                cardinality($4::text[]) = 0\n                OR (\n                    'minecraft_java_server' = ANY($4::text[])\n                    AND (\n                        m.components ? 'minecraft_server'\n                        OR m.components ? 'minecraft_java_server'\n                    )\n                )\n                OR EXISTS (\n                    SELECT 1\n                    FROM versions type_v\n                    INNER JOIN loaders_versions type_lv\n                        ON type_lv.version_id = type_v.id\n                    INNER JOIN loaders_project_types type_lpt\n                        ON type_lpt.joining_loader_id = type_lv.loader_id\n                    INNER JOIN project_types type_pt\n                        ON type_pt.id = type_lpt.joining_project_type_id\n                    WHERE\n                        type_v.mod_id = m.id\n                        AND type_pt.name = ANY($4::text[])\n                        AND (\n                            type_pt.name != 'modpack'\n                            OR NOT (\n                                m.components ? 'minecraft_server'\n                                OR m.components ? 'minecraft_java_server'\n                            )\n                        )\n                )\n            )\n            AND m.status NOT IN ('draft', 'rejected', 'withheld')\n            AND (cardinality($6::text[]) = 0 OR m.status = ANY($6::text[]))\n            AND (\n                cardinality($7::text[]) = 0\n                OR EXISTS (\n                    SELECT 1\n                    FROM versions issue_version\n                    INNER JOIN files issue_file\n                        ON issue_file.version_id = issue_version.id\n                    INNER JOIN delphi_reports issue_report\n                        ON issue_report.file_id = issue_file.id\n                    INNER JOIN delphi_report_issues issue\n                        ON issue.report_id = issue_report.id\n                    INNER JOIN delphi_issue_details_with_statuses detail\n                        ON detail.issue_id = issue.id\n                    WHERE\n                        issue_version.mod_id = m.id\n                        AND issue.issue_type = ANY($7::text[])\n                        AND NOT detail.hidden\n                )\n            )\n            AND (\n                $5::text IS NULL\n                OR ($5::text = 'unreplied' AND (tm_last.id IS NULL OR u_last.role IS NULL OR u_last.role NOT IN ('moderator', 'admin')))\n                OR ($5::text = 'replied' AND tm_last.id IS NOT NULL AND u_last.role IS NOT NULL AND u_last.role IN ('moderator', 'admin'))\n            )\n        GROUP BY m.id\n        ORDER BY\n            CASE WHEN $3 = 'created_asc'   THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END ASC,\n            CASE WHEN $3 = 'created_desc'  THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END DESC,\n            CASE WHEN $3 = 'severity_asc'  THEN COALESCE(MAX(didws.severity), 'low'::delphi_severity) ELSE 'low'::delphi_severity END ASC,\n            CASE WHEN $3 = 'severity_desc' THEN COALESCE(MAX(didws.severity), 'low'::delphi_severity) ELSE 'low'::delphi_severity END DESC,\n            -- tie-breaker: oldest reports\n            MIN(dr.created) ASC\n        LIMIT $1 OFFSET $2\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "project_id: DBProjectId",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "thread_id!: DBThreadId",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Int8",
-        "Text",
-        "TextArray",
-        "Text",
-        "TextArray",
-        "TextArray"
-      ]
-    },
-    "nullable": [
-      false,
-      null
-    ]
-  },
-  "hash": "54fd60c11e2a7691b0efcc384917137bc64408856543ca32091bab0ecc91d819"
-}
diff --git a/apps/labrinth/.sqlx/query-c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638.json b/apps/labrinth/.sqlx/query-563d4d8ff958b3a915e6e20b0654c9f189f1c34a94c27a2b894e7eade286b8a3.json
similarity index 80%
rename from apps/labrinth/.sqlx/query-c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638.json
rename to apps/labrinth/.sqlx/query-563d4d8ff958b3a915e6e20b0654c9f189f1c34a94c27a2b894e7eade286b8a3.json
index 58b6b2db78..d9091ae767 100644
--- a/apps/labrinth/.sqlx/query-c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638.json
+++ b/apps/labrinth/.sqlx/query-563d4d8ff958b3a915e6e20b0654c9f189f1c34a94c27a2b894e7eade286b8a3.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            didws.id AS \"issue_detail_id!\"\n        FROM mods m\n        INNER JOIN versions v ON v.mod_id = m.id\n        INNER JOIN files f ON f.version_id = v.id\n        INNER JOIN delphi_reports dr ON dr.file_id = f.id\n        INNER JOIN delphi_report_issues dri ON dri.report_id = dr.id\n        INNER JOIN delphi_issue_details_with_statuses didws ON didws.issue_id = dri.id\n        WHERE\n            m.id = $1\n            AND didws.status = 'pending'\n            AND NOT didws.hidden\n        ",
+  "query": "\n        SELECT\n            didws.id AS \"issue_detail_id!\"\n        FROM mods m\n        INNER JOIN versions v ON v.mod_id = m.id\n        INNER JOIN files f ON f.version_id = v.id\n        INNER JOIN delphi_reports dr ON dr.file_id = f.id\n        INNER JOIN delphi_report_issues dri ON dri.report_id = dr.id\n        INNER JOIN delphi_issue_details_with_statuses didws ON didws.issue_id = dri.id\n        WHERE\n            m.id = $1\n            AND didws.status = 'pending'\n            AND didws.severity != 'hidden'\n        ",
   "describe": {
     "columns": [
       {
@@ -18,5 +18,5 @@
       true
     ]
   },
-  "hash": "c2d2e0feb73843db73c73e8137ff0090ceb2292526e7e9ad5d54c51e8d732638"
+  "hash": "563d4d8ff958b3a915e6e20b0654c9f189f1c34a94c27a2b894e7eade286b8a3"
 }
diff --git a/apps/labrinth/.sqlx/query-4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16.json b/apps/labrinth/.sqlx/query-5d5024681546a90c9fb18dae934a0f99a63c3f075cbad8545000a03a5a030323.json
similarity index 64%
rename from apps/labrinth/.sqlx/query-4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16.json
rename to apps/labrinth/.sqlx/query-5d5024681546a90c9fb18dae934a0f99a63c3f075cbad8545000a03a5a030323.json
index 39d8ee3347..b1341067bb 100644
--- a/apps/labrinth/.sqlx/query-4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16.json
+++ b/apps/labrinth/.sqlx/query-5d5024681546a90c9fb18dae934a0f99a63c3f075cbad8545000a03a5a030323.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n            SELECT id\n            FROM mods\n            WHERE\n                status = $1\n                AND (\n                    $3::boolean = false\n                    OR NOT EXISTS (\n                        SELECT 1\n                        FROM delphi_issue_details_with_statuses didws\n                        WHERE didws.project_id = mods.id\n                            AND didws.status = 'pending'\n                            AND NOT didws.hidden\n                    )\n                )\n            ORDER BY\n                CASE WHEN $2 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                CASE WHEN $2 = 'oldest' THEN COALESCE(queued, published) END ASC NULLS LAST,\n                id ASC\n            ",
+  "query": "\n            SELECT id\n            FROM mods\n            WHERE\n                status = $1\n                AND (\n                    $3::boolean = false\n                    OR NOT EXISTS (\n                        SELECT 1\n                        FROM delphi_issue_details_with_statuses didws\n                        WHERE didws.project_id = mods.id\n                            AND didws.status = 'pending'\n                            AND didws.severity != 'hidden'\n                    )\n                )\n            ORDER BY\n                CASE WHEN $2 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                CASE WHEN $2 = 'oldest' THEN COALESCE(queued, published) END ASC NULLS LAST,\n                id ASC\n            ",
   "describe": {
     "columns": [
       {
@@ -20,5 +20,5 @@
       false
     ]
   },
-  "hash": "4a30e36261229605104f319105e88771f211fc82c2e8dc67fdd36a38d45b9f16"
+  "hash": "5d5024681546a90c9fb18dae934a0f99a63c3f075cbad8545000a03a5a030323"
 }
diff --git a/apps/labrinth/.sqlx/query-628d178e568998627de7e7cdba3b5c83300b5649f2ccc215f20fd82e258e76f4.json b/apps/labrinth/.sqlx/query-628d178e568998627de7e7cdba3b5c83300b5649f2ccc215f20fd82e258e76f4.json
new file mode 100644
index 0000000000..05ff0c342a
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-628d178e568998627de7e7cdba3b5c83300b5649f2ccc215f20fd82e258e76f4.json
@@ -0,0 +1,34 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT\n            m.id AS \"project_id: DBProjectId\",\n            MIN(t.id) AS \"thread_id!: DBThreadId\"\n        FROM mods m\n        INNER JOIN delphi_tech_review_queue trq ON trq.project_id = m.id\n        INNER JOIN threads t ON t.mod_id = m.id\n        LEFT JOIN versions v ON v.mod_id = m.id\n        LEFT JOIN files f ON f.version_id = v.id\n        LEFT JOIN delphi_reports dr ON dr.file_id = f.id\n        LEFT JOIN delphi_report_issues dri ON dri.report_id = dr.id\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.issue_id = dri.id\n            AND didws.severity != 'hidden'\n        LEFT JOIN threads_messages tm_last\n            ON tm_last.thread_id = t.id\n            AND tm_last.id = (\n                SELECT id FROM threads_messages\n                WHERE thread_id = t.id\n                ORDER BY created DESC\n                LIMIT 1\n            )\n        LEFT JOIN users u_last\n            ON u_last.id = tm_last.author_id\n        WHERE\n            (\n                cardinality($4::text[]) = 0\n                OR (\n                    'minecraft_java_server' = ANY($4::text[])\n                    AND (\n                        m.components ? 'minecraft_server'\n                        OR m.components ? 'minecraft_java_server'\n                    )\n                )\n                OR EXISTS (\n                    SELECT 1\n                    FROM versions type_v\n                    INNER JOIN loaders_versions type_lv\n                        ON type_lv.version_id = type_v.id\n                    INNER JOIN loaders_project_types type_lpt\n                        ON type_lpt.joining_loader_id = type_lv.loader_id\n                    INNER JOIN project_types type_pt\n                        ON type_pt.id = type_lpt.joining_project_type_id\n                    WHERE\n                        type_v.mod_id = m.id\n                        AND type_pt.name = ANY($4::text[])\n                        AND (\n                            type_pt.name != 'modpack'\n                            OR NOT (\n                                m.components ? 'minecraft_server'\n                                OR m.components ? 'minecraft_java_server'\n                            )\n                        )\n                )\n            )\n            AND m.status NOT IN ('draft', 'rejected', 'withheld')\n            AND (cardinality($6::text[]) = 0 OR m.status = ANY($6::text[]))\n            AND (\n                cardinality($7::text[]) = 0\n                OR EXISTS (\n                    SELECT 1\n                    FROM versions issue_version\n                    INNER JOIN files issue_file\n                        ON issue_file.version_id = issue_version.id\n                    INNER JOIN delphi_reports issue_report\n                        ON issue_report.file_id = issue_file.id\n                    INNER JOIN delphi_report_issues issue\n                        ON issue.report_id = issue_report.id\n                    INNER JOIN delphi_issue_details_with_statuses detail\n                        ON detail.issue_id = issue.id\n                    WHERE\n                        issue_version.mod_id = m.id\n                        AND issue.issue_type = ANY($7::text[])\n                        AND detail.severity != 'hidden'\n                )\n            )\n            AND (\n                $5::text IS NULL\n                OR ($5::text = 'unreplied' AND (tm_last.id IS NULL OR u_last.role IS NULL OR u_last.role NOT IN ('moderator', 'admin')))\n                OR ($5::text = 'replied' AND tm_last.id IS NOT NULL AND u_last.role IS NOT NULL AND u_last.role IN ('moderator', 'admin'))\n            )\n        GROUP BY m.id\n        ORDER BY\n            CASE WHEN $3 = 'created_asc'   THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END ASC,\n            CASE WHEN $3 = 'created_desc'  THEN MIN(dr.created)  ELSE TO_TIMESTAMP(0)        END DESC,\n            CASE WHEN $3 = 'severity_asc'  THEN COALESCE(MAX(didws.severity), 'low'::delphi_severity) ELSE 'low'::delphi_severity END ASC,\n            CASE WHEN $3 = 'severity_desc' THEN COALESCE(MAX(didws.severity), 'low'::delphi_severity) ELSE 'low'::delphi_severity END DESC,\n            -- tie-breaker: oldest reports\n            MIN(dr.created) ASC\n        LIMIT $1 OFFSET $2\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "project_id: DBProjectId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "thread_id!: DBThreadId",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Int8",
+        "Text",
+        "TextArray",
+        "Text",
+        "TextArray",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      false,
+      null
+    ]
+  },
+  "hash": "628d178e568998627de7e7cdba3b5c83300b5649f2ccc215f20fd82e258e76f4"
+}
diff --git a/apps/labrinth/.sqlx/query-852eff37ff36e1e87fcbc6c50f27bab003a40537c191eb6cb64a01d92b57e25f.json b/apps/labrinth/.sqlx/query-852eff37ff36e1e87fcbc6c50f27bab003a40537c191eb6cb64a01d92b57e25f.json
new file mode 100644
index 0000000000..374b61603c
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-852eff37ff36e1e87fcbc6c50f27bab003a40537c191eb6cb64a01d92b57e25f.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT DISTINCT ON (dr.id)\n            to_jsonb(dr)\n            || jsonb_build_object(\n                'report_id', dr.id,\n                'file_id', to_base62(f.id),\n                'version_id', to_base62(v.id),\n                'project_id', to_base62(v.mod_id),\n                'file_name', f.filename,\n                'file_size', f.size,\n                'flag_reason', 'delphi',\n                'download_url', f.url,\n                'severity', COALESCE((\n                    SELECT MAX(didws.severity)\n                    FROM delphi_report_issues severity_issue\n                    INNER JOIN delphi_issue_details_with_statuses didws\n                        ON didws.issue_id = severity_issue.id\n                    WHERE\n                        severity_issue.report_id = dr.id\n                        AND didws.severity != 'hidden'\n                ), 'low'::delphi_severity),\n                -- TODO: replace with `json_array` in Postgres 16\n\t\t\t\t'issues', (\n\t\t\t\t\tSELECT coalesce(json_agg(\n\t\t\t\t\t\tto_jsonb(dri)\n\t\t\t\t\t\t|| jsonb_build_object(\n\t\t\t\t\t\t\t-- TODO: replace with `json_array` in Postgres 16\n\t\t\t\t\t\t\t'details', (\n\t\t\t\t\t\t\t\tSELECT coalesce(jsonb_agg(\n                                    jsonb_build_object(\n                                        'id', didws.id,\n                                        'issue_id', didws.issue_id,\n                                        'key', didws.key,\n                                        'file_path', didws.file_path,\n                                        'decompiled_source', didws.decompiled_source,\n                                        'data', didws.data,\n                                        'severity', didws.severity,\n                                        'local_status', didws.local_status,\n                                        'global_status', didws.global_status,\n                                        'status', didws.status\n                                    )\n                                ), '[]'::jsonb)\n                                FROM delphi_issue_details_with_statuses didws\n                                WHERE\n                                    didws.issue_id = dri.id\n                                    AND didws.severity != 'hidden'\n                            )\n\t\t\t\t\t\t)\n\t\t\t\t\t), '[]'::json)\n\t\t\t\t\tFROM delphi_report_issues dri\n\t\t\t\t\tWHERE\n                        dri.report_id = dr.id\n                        AND EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses visible_detail\n                            WHERE\n                                visible_detail.issue_id = dri.id\n                                AND visible_detail.severity != 'hidden'\n                        )\n                )\n            ) AS \"data!: sqlx::types::Json<FileReport>\"\n        FROM delphi_reports dr\n        INNER JOIN files f ON f.id = dr.file_id\n        INNER JOIN versions v ON v.id = f.version_id\n        WHERE dr.id = $1\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "data!: sqlx::types::Json<FileReport>",
+        "type_info": "Jsonb"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "852eff37ff36e1e87fcbc6c50f27bab003a40537c191eb6cb64a01d92b57e25f"
+}
diff --git a/apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json b/apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json
index 13ac058e9e..8fc73132b8 100644
--- a/apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json
+++ b/apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json
@@ -26,10 +26,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
diff --git a/apps/labrinth/.sqlx/query-89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7.json b/apps/labrinth/.sqlx/query-89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7.json
deleted file mode 100644
index 5b26565b43..0000000000
--- a/apps/labrinth/.sqlx/query-89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        WITH project_membership AS (\n            SELECT\n                detail.project_id,\n                BOOL_OR(\n                    detail.status IN ('pending', 'unsafe')\n                    AND NOT detail.hidden\n                ) AS old_needs_review,\n                BOOL_OR(\n                    detail.status IN ('pending', 'unsafe')\n                    AND NOT COALESCE(new_effect.hidden, FALSE)\n                ) AS new_needs_review\n            FROM delphi_issue_details_with_statuses detail\n            LEFT JOIN delphi_rule_effects new_effect\n                ON new_effect.revision = $1\n                AND new_effect.detail_id = detail.id\n            GROUP BY detail.project_id\n        )\n        SELECT\n            project_id AS \"project_id!: DBProjectId\",\n            new_needs_review AS \"new_needs_review!\"\n        FROM project_membership\n        WHERE old_needs_review IS DISTINCT FROM new_needs_review\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "project_id!: DBProjectId",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "new_needs_review!",
-        "type_info": "Bool"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      true,
-      null
-    ]
-  },
-  "hash": "89f8fcde28ddb5bc2ccf3beef08f03642603c79db754d0530a9c6f2f7d9c32b7"
-}
diff --git a/apps/labrinth/.sqlx/query-f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58.json b/apps/labrinth/.sqlx/query-8c7f17ad005b42b4c6cac5ddb6a1f2d13592cc6995d1b87e79397ab592ad7675.json
similarity index 64%
rename from apps/labrinth/.sqlx/query-f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58.json
rename to apps/labrinth/.sqlx/query-8c7f17ad005b42b4c6cac5ddb6a1f2d13592cc6995d1b87e79397ab592ad7675.json
index f8cf749c75..4ed9dbbf05 100644
--- a/apps/labrinth/.sqlx/query-f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58.json
+++ b/apps/labrinth/.sqlx/query-8c7f17ad005b42b4c6cac5ddb6a1f2d13592cc6995d1b87e79397ab592ad7675.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        INSERT INTO delphi_rule_effects (\n            revision,\n            detail_id,\n            rule_id,\n            severity,\n            hidden\n        )\n        SELECT $1, effect.*\n        FROM UNNEST(\n            $2::BIGINT[],\n            $3::BIGINT[],\n            $4::delphi_severity[],\n            $5::BOOLEAN[]\n        ) AS effect(detail_id, rule_id, severity, hidden)\n        ",
+  "query": "\n        INSERT INTO delphi_rule_effects (\n            revision,\n            detail_id,\n            rule_id,\n            severity\n        )\n        SELECT $1, effect.*\n        FROM UNNEST(\n            $2::BIGINT[],\n            $3::BIGINT[],\n            $4::delphi_severity[]\n        ) AS effect(detail_id, rule_id, severity)\n        ",
   "describe": {
     "columns": [],
     "parameters": {
@@ -17,21 +17,22 @@
                   "name": "delphi_severity",
                   "kind": {
                     "Enum": [
+                      "hidden",
                       "low",
                       "medium",
                       "high",
-                      "severe"
+                      "severe",
+                      "malware"
                     ]
                   }
                 }
               }
             }
           }
-        },
-        "BoolArray"
+        }
       ]
     },
     "nullable": []
   },
-  "hash": "f94722c5b0092d3fcdb340da0402fb5a46f2ab5121a42b00ee8c0498b2871d58"
+  "hash": "8c7f17ad005b42b4c6cac5ddb6a1f2d13592cc6995d1b87e79397ab592ad7675"
 }
diff --git a/apps/labrinth/.sqlx/query-8d37c8c2633b7d601c7ba74d63608ff40af3b6b56f43540ec3798ef30e5c0b9d.json b/apps/labrinth/.sqlx/query-8d37c8c2633b7d601c7ba74d63608ff40af3b6b56f43540ec3798ef30e5c0b9d.json
index 475dba1b98..cf1d9b23c6 100644
--- a/apps/labrinth/.sqlx/query-8d37c8c2633b7d601c7ba74d63608ff40af3b6b56f43540ec3798ef30e5c0b9d.json
+++ b/apps/labrinth/.sqlx/query-8d37c8c2633b7d601c7ba74d63608ff40af3b6b56f43540ec3798ef30e5c0b9d.json
@@ -26,10 +26,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
diff --git a/apps/labrinth/.sqlx/query-9369f0659c5fbd08463923a9b2bba49f4963315fd7667c6db96e6153e54a2fd2.json b/apps/labrinth/.sqlx/query-9369f0659c5fbd08463923a9b2bba49f4963315fd7667c6db96e6153e54a2fd2.json
index 8ca4b69491..f3609a305c 100644
--- a/apps/labrinth/.sqlx/query-9369f0659c5fbd08463923a9b2bba49f4963315fd7667c6db96e6153e54a2fd2.json
+++ b/apps/labrinth/.sqlx/query-9369f0659c5fbd08463923a9b2bba49f4963315fd7667c6db96e6153e54a2fd2.json
@@ -22,10 +22,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
diff --git a/apps/labrinth/.sqlx/query-9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d.json b/apps/labrinth/.sqlx/query-9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d.json
deleted file mode 100644
index fb177cc69f..0000000000
--- a/apps/labrinth/.sqlx/query-9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d.json
+++ /dev/null
@@ -1,138 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            WITH moderation_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.description,\n                    m.queued,\n                    m.published,\n                    m.organization_id,\n                    m.team_id,\n                    m.components\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $9::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                                AND NOT didws.hidden\n                        )\n                    )\n            ),\n            external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            version_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            queue_projects AS (\n                SELECT\n                    mp.id,\n                    mp.slug,\n                    mp.name,\n                    mp.summary,\n                    mp.description,\n                    mp.queued,\n                    mp.published,\n                    search_organization.name AS organization_name,\n                    search_owner.username AS owner_name,\n                    CASE\n                        WHEN mp.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(vpt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(vpt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ed.external_dependencies_count, 0) AS external_dependencies_count\n                FROM moderation_projects mp\n                LEFT JOIN organizations search_organization\n                    ON search_organization.id = mp.organization_id\n                    AND $3::text IS NOT NULL\n                LEFT JOIN LATERAL (\n                    SELECT\n                        u.username\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = mp.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) search_owner ON $3::text IS NOT NULL\n                    AND mp.organization_id IS NULL\n                LEFT JOIN external_dependencies ed ON ed.mod_id = mp.id\n                LEFT JOIN version_project_types vpt ON vpt.mod_id = mp.id\n            ),\n            filtered_projects AS (\n                SELECT\n                    id,\n                    queued,\n                    published,\n                    project_types,\n                    external_dependencies_count\n                FROM queue_projects\n                WHERE\n                    (\n                        $3::text IS NULL\n                        OR name ILIKE '%' || $3 || '%'\n                        OR slug ILIKE '%' || $3 || '%'\n                        OR summary ILIKE '%' || $3 || '%'\n                        OR description ILIKE '%' || $3 || '%'\n                        OR owner_name ILIKE '%' || $3 || '%'\n                        OR organization_name ILIKE '%' || $3 || '%'\n                        OR EXISTS (\n                            SELECT 1\n                            FROM UNNEST(project_types) AS searched_project_type(project_type)\n                            WHERE searched_project_type.project_type ILIKE '%' || $3 || '%'\n                        )\n                    )\n                    AND (\n                        $4::text IS NULL\n                        OR ($4 = 'none' AND CARDINALITY(project_types) = 0)\n                        OR ($4 = 'minecraft_java_server' AND project_types @> ARRAY['minecraft_java_server']::text[])\n                        OR ($4 <> 'none' AND $4 <> 'minecraft_java_server' AND\n                            project_types[1] = $4\n                        )\n                    )\n                    AND ($5::boolean IS NULL OR (external_dependencies_count > 0) = $5)\n            ),\n            total AS (\n                SELECT COUNT(*) AS total_count FROM filtered_projects\n            ),\n            page_ids AS (\n                SELECT\n                    id,\n                    queued,\n                    published,\n                    project_types,\n                    external_dependencies_count\n                FROM filtered_projects\n                ORDER BY\n                    CASE WHEN $8 = 'most_external_deps' THEN external_dependencies_count END DESC,\n                    CASE WHEN $8 = 'least_external_deps' THEN external_dependencies_count END ASC,\n                    CASE WHEN $8 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                    CASE WHEN $8 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(queued, published) END ASC NULLS LAST,\n                    id ASC\n                OFFSET $7\n                LIMIT $6\n            ),\n            page_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.icon_url,\n                    m.status,\n                    m.requested_status,\n                    m.queued,\n                    m.published,\n                    m.updated,\n                    m.organization_id,\n                    m.team_id,\n                    o.name AS organization_name,\n                    o.icon_url AS organization_icon_url,\n                    owner.user_id AS owner_id,\n                    owner.username AS owner_name,\n                    owner.avatar_url AS owner_icon_url,\n                    page_ids.project_types,\n                    page_ids.external_dependencies_count\n                FROM page_ids\n                INNER JOIN mods m ON m.id = page_ids.id\n                LEFT JOIN organizations o ON o.id = m.organization_id\n                LEFT JOIN LATERAL (\n                    SELECT\n                        tm.user_id,\n                        u.username,\n                        u.avatar_url\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = m.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) owner ON m.organization_id IS NULL\n            )\n            SELECT\n                total.total_count AS \"total_count!\",\n                page_projects.id AS \"id?\",\n                page_projects.slug AS \"slug?\",\n                page_projects.name AS \"name?\",\n                page_projects.summary AS \"summary?\",\n                page_projects.icon_url AS \"icon_url?\",\n                page_projects.status AS \"status?\",\n                page_projects.requested_status AS \"requested_status?\",\n                page_projects.queued AS \"queued?\",\n                page_projects.published AS \"published?\",\n                page_projects.updated AS \"updated?\",\n                page_projects.organization_id AS \"organization_id?\",\n                page_projects.organization_name AS \"organization_name?\",\n                page_projects.organization_icon_url AS \"organization_icon_url?\",\n                page_projects.owner_id AS \"owner_id?\",\n                page_projects.owner_name AS \"owner_name?\",\n                page_projects.owner_icon_url AS \"owner_icon_url?\",\n                page_projects.project_types AS \"project_types?: Vec<String>\",\n                page_projects.external_dependencies_count AS \"external_dependencies_count?\"\n            FROM total\n            LEFT JOIN page_projects ON true\n            ORDER BY\n                CASE WHEN $8 = 'most_external_deps' THEN page_projects.external_dependencies_count END DESC,\n                CASE WHEN $8 = 'least_external_deps' THEN page_projects.external_dependencies_count END ASC,\n                CASE WHEN $8 = 'newest' THEN COALESCE(page_projects.queued, page_projects.published) END DESC NULLS LAST,\n                CASE WHEN $8 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(page_projects.queued, page_projects.published) END ASC NULLS LAST,\n                page_projects.id ASC\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "total_count!",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 2,
-        "name": "slug?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 3,
-        "name": "name?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 4,
-        "name": "summary?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 5,
-        "name": "icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 6,
-        "name": "status?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 7,
-        "name": "requested_status?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 8,
-        "name": "queued?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 9,
-        "name": "published?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 10,
-        "name": "updated?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 11,
-        "name": "organization_id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 12,
-        "name": "organization_name?",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 13,
-        "name": "organization_icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 14,
-        "name": "owner_id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 15,
-        "name": "owner_name?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 16,
-        "name": "owner_icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 17,
-        "name": "project_types?: Vec<String>",
-        "type_info": "TextArray"
-      },
-      {
-        "ordinal": 18,
-        "name": "external_dependencies_count?",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "TextArray",
-        "Text",
-        "Text",
-        "Bool",
-        "Int8",
-        "Int8",
-        "Text",
-        "Bool"
-      ]
-    },
-    "nullable": [
-      null,
-      false,
-      true,
-      false,
-      false,
-      true,
-      false,
-      true,
-      true,
-      false,
-      false,
-      true,
-      false,
-      true,
-      false,
-      false,
-      true,
-      null,
-      null
-    ]
-  },
-  "hash": "9caa3ddeea78b2e0e2afc57bcf53e70c2fc4456864b9f375debcc266bd658d1d"
-}
diff --git a/apps/labrinth/.sqlx/query-436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06.json b/apps/labrinth/.sqlx/query-9d044826831bd15b1e0772e8a5db312189b48fcafaaf1b8c4c9f483c97b694ed.json
similarity index 84%
rename from apps/labrinth/.sqlx/query-436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06.json
rename to apps/labrinth/.sqlx/query-9d044826831bd15b1e0772e8a5db312189b48fcafaaf1b8c4c9f483c97b694ed.json
index 88a5139d85..077a894dfb 100644
--- a/apps/labrinth/.sqlx/query-436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06.json
+++ b/apps/labrinth/.sqlx/query-9d044826831bd15b1e0772e8a5db312189b48fcafaaf1b8c4c9f483c97b694ed.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            to_jsonb(dri)\n            || jsonb_build_object(\n                -- TODO: replace with `json_array` in Postgres 16\n                'details', (\n                    SELECT coalesce(jsonb_agg(\n                        jsonb_build_object(\n                            'id', didws.id,\n                            'issue_id', didws.issue_id,\n                            'key', didws.key,\n                            'file_path', didws.file_path,\n                            'decompiled_source', didws.decompiled_source,\n                            'data', didws.data,\n                            'severity', didws.severity,\n                            'local_status', didws.local_status,\n                            'global_status', didws.global_status,\n                            'status', didws.status\n                        )\n                    ), '[]'::jsonb)\n                    FROM delphi_issue_details_with_statuses didws\n                    WHERE\n                        didws.issue_id = dri.id\n                        AND NOT didws.hidden\n                )\n            ) AS \"data!: sqlx::types::Json<FileIssue>\"\n        FROM delphi_report_issues dri\n        WHERE dri.id = $1\n        ",
+  "query": "\n        SELECT\n            to_jsonb(dri)\n            || jsonb_build_object(\n                -- TODO: replace with `json_array` in Postgres 16\n                'details', (\n                    SELECT coalesce(jsonb_agg(\n                        jsonb_build_object(\n                            'id', didws.id,\n                            'issue_id', didws.issue_id,\n                            'key', didws.key,\n                            'file_path', didws.file_path,\n                            'decompiled_source', didws.decompiled_source,\n                            'data', didws.data,\n                            'severity', didws.severity,\n                            'local_status', didws.local_status,\n                            'global_status', didws.global_status,\n                            'status', didws.status\n                        )\n                    ), '[]'::jsonb)\n                    FROM delphi_issue_details_with_statuses didws\n                    WHERE\n                        didws.issue_id = dri.id\n                        AND didws.severity != 'hidden'\n                )\n            ) AS \"data!: sqlx::types::Json<FileIssue>\"\n        FROM delphi_report_issues dri\n        WHERE dri.id = $1\n        ",
   "describe": {
     "columns": [
       {
@@ -18,5 +18,5 @@
       null
     ]
   },
-  "hash": "436b1dad031f143ba987d992514c7fb02b2a67253c543ce146cf2cf190010a06"
+  "hash": "9d044826831bd15b1e0772e8a5db312189b48fcafaaf1b8c4c9f483c97b694ed"
 }
diff --git a/apps/labrinth/.sqlx/query-8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a.json b/apps/labrinth/.sqlx/query-a58e701218270abb1c5b177d7ab12a8d3fce511a3d03e883de8ce925f3332957.json
similarity index 57%
rename from apps/labrinth/.sqlx/query-8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a.json
rename to apps/labrinth/.sqlx/query-a58e701218270abb1c5b177d7ab12a8d3fce511a3d03e883de8ce925f3332957.json
index 31a3becc83..d747bd944a 100644
--- a/apps/labrinth/.sqlx/query-8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a.json
+++ b/apps/labrinth/.sqlx/query-a58e701218270abb1c5b177d7ab12a8d3fce511a3d03e883de8ce925f3332957.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT DISTINCT m.id\n        FROM mods m\n        INNER JOIN delphi_tech_review_queue queue ON queue.project_id = m.id\n        WHERE\n            EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                WHERE\n                    didws.project_id = m.id\n                    AND didws.status = 'pending'\n                    AND NOT didws.hidden\n            )\n            AND NOT EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                WHERE\n                    didws.project_id = m.id\n                    AND didws.status IN ('safe', 'unsafe')\n                    AND NOT didws.hidden\n            )\n        ",
+  "query": "\n        SELECT DISTINCT m.id\n        FROM mods m\n        INNER JOIN delphi_tech_review_queue queue ON queue.project_id = m.id\n        WHERE\n            EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                WHERE\n                    didws.project_id = m.id\n                    AND didws.status = 'pending'\n                    AND didws.severity != 'hidden'\n            )\n            AND NOT EXISTS(\n                SELECT 1\n                FROM delphi_issue_details_with_statuses didws\n                WHERE\n                    didws.project_id = m.id\n                    AND didws.status IN ('safe', 'unsafe')\n                    AND didws.severity != 'hidden'\n            )\n        ",
   "describe": {
     "columns": [
       {
@@ -16,5 +16,5 @@
       false
     ]
   },
-  "hash": "8107e60111543c351cfa8aaf0d864e270b7b9f3f8041c5feffa43449f4d5251a"
+  "hash": "a58e701218270abb1c5b177d7ab12a8d3fce511a3d03e883de8ce925f3332957"
 }
diff --git a/apps/labrinth/.sqlx/query-e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d.json b/apps/labrinth/.sqlx/query-aedd5d9fe052a9fa70e585f389c3b4915a88cb9c3ec54493a2a29582c80b5c76.json
similarity index 71%
rename from apps/labrinth/.sqlx/query-e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d.json
rename to apps/labrinth/.sqlx/query-aedd5d9fe052a9fa70e585f389c3b4915a88cb9c3ec54493a2a29582c80b5c76.json
index 95d91ae7e1..1b0fcfb6dc 100644
--- a/apps/labrinth/.sqlx/query-e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d.json
+++ b/apps/labrinth/.sqlx/query-aedd5d9fe052a9fa70e585f389c3b4915a88cb9c3ec54493a2a29582c80b5c76.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            dgdv.detail_key,\n            dgdv.verdict AS \"verdict!: DelphiStatus\",\n            COUNT(dri.id) AS \"local_trace_count!\"\n        FROM delphi_global_detail_verdicts dgdv\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.key = dgdv.detail_key\n            AND NOT didws.hidden\n        LEFT JOIN delphi_report_issues dri\n            ON dri.id = didws.issue_id\n        WHERE (\n            $1::text IS NULL\n            OR dgdv.detail_key ILIKE '%' || $1 || '%'\n        )\n        GROUP BY dgdv.detail_key, dgdv.verdict\n        ORDER BY dgdv.detail_key\n        LIMIT $2 OFFSET $3\n        ",
+  "query": "\n        SELECT\n            dgdv.detail_key,\n            dgdv.verdict AS \"verdict!: DelphiStatus\",\n            COUNT(dri.id) AS \"local_trace_count!\"\n        FROM delphi_global_detail_verdicts dgdv\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.key = dgdv.detail_key\n            AND didws.severity != 'hidden'\n        LEFT JOIN delphi_report_issues dri\n            ON dri.id = didws.issue_id\n        WHERE (\n            $1::text IS NULL\n            OR dgdv.detail_key ILIKE '%' || $1 || '%'\n        )\n        GROUP BY dgdv.detail_key, dgdv.verdict\n        ORDER BY dgdv.detail_key\n        LIMIT $2 OFFSET $3\n        ",
   "describe": {
     "columns": [
       {
@@ -43,5 +43,5 @@
       null
     ]
   },
-  "hash": "e38dc9448a56b2dc0e99661775f488c8f1ad2f0fca12655a3cc257a8cb5a784d"
+  "hash": "aedd5d9fe052a9fa70e585f389c3b4915a88cb9c3ec54493a2a29582c80b5c76"
 }
diff --git a/apps/labrinth/.sqlx/query-befd8c75e7ed4621f5e99d88719c0fde9d617b6603b99b75cc18d1a02387bac4.json b/apps/labrinth/.sqlx/query-befd8c75e7ed4621f5e99d88719c0fde9d617b6603b99b75cc18d1a02387bac4.json
new file mode 100644
index 0000000000..d90f24169d
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-befd8c75e7ed4621f5e99d88719c0fde9d617b6603b99b75cc18d1a02387bac4.json
@@ -0,0 +1,28 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH moderation_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.description,\n                    m.queued,\n                    m.published,\n                    m.organization_id,\n                    m.team_id,\n                    m.components\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $7::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                                AND didws.severity != 'hidden'\n                        )\n                    )\n            ),\n            external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            version_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            queue_projects AS (\n                SELECT\n                    mp.id,\n                    mp.slug,\n                    mp.name,\n                    mp.summary,\n                    mp.description,\n                    mp.queued,\n                    mp.published,\n                    search_organization.name AS organization_name,\n                    search_owner.username AS owner_name,\n                    CASE\n                        WHEN mp.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(vpt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(vpt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ed.external_dependencies_count, 0) AS external_dependencies_count\n                FROM moderation_projects mp\n                LEFT JOIN organizations search_organization\n                    ON search_organization.id = mp.organization_id\n                    AND $3::text IS NOT NULL\n                LEFT JOIN LATERAL (\n                    SELECT\n                        u.username\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = mp.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) search_owner ON $3::text IS NOT NULL\n                    AND mp.organization_id IS NULL\n                LEFT JOIN external_dependencies ed ON ed.mod_id = mp.id\n                LEFT JOIN version_project_types vpt ON vpt.mod_id = mp.id\n            )\n            SELECT id\n            FROM queue_projects\n            WHERE\n                (\n                    $3::text IS NULL\n                    OR name ILIKE '%' || $3 || '%'\n                    OR slug ILIKE '%' || $3 || '%'\n                    OR summary ILIKE '%' || $3 || '%'\n                    OR description ILIKE '%' || $3 || '%'\n                    OR owner_name ILIKE '%' || $3 || '%'\n                    OR organization_name ILIKE '%' || $3 || '%'\n                    OR EXISTS (\n                        SELECT 1\n                        FROM UNNEST(project_types) AS searched_project_type(project_type)\n                        WHERE searched_project_type.project_type ILIKE '%' || $3 || '%'\n                    )\n                )\n                AND (\n                    $4::text IS NULL\n                    OR ($4 = 'none' AND CARDINALITY(project_types) = 0)\n                    OR ($4 = 'minecraft_java_server' AND project_types @> ARRAY['minecraft_java_server']::text[])\n                    OR ($4 <> 'none' AND $4 <> 'minecraft_java_server' AND project_types[1] = $4)\n                )\n                AND ($5::boolean IS NULL OR (external_dependencies_count > 0) = $5)\n            ORDER BY\n                CASE WHEN $6 = 'most_external_deps' THEN external_dependencies_count END DESC,\n                CASE WHEN $6 = 'least_external_deps' THEN external_dependencies_count END ASC,\n                CASE WHEN $6 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                CASE WHEN $6 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(queued, published) END ASC NULLS LAST,\n                id ASC\n            ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray",
+        "Text",
+        "Text",
+        "Bool",
+        "Text",
+        "Bool"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "befd8c75e7ed4621f5e99d88719c0fde9d617b6603b99b75cc18d1a02387bac4"
+}
diff --git a/apps/labrinth/.sqlx/query-86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d.json b/apps/labrinth/.sqlx/query-cb983aed301378550831204ff7f88e95e5db9cabd8e1fc177cdfdaf0951e58e4.json
similarity index 79%
rename from apps/labrinth/.sqlx/query-86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d.json
rename to apps/labrinth/.sqlx/query-cb983aed301378550831204ff7f88e95e5db9cabd8e1fc177cdfdaf0951e58e4.json
index 3d337eed1e..16a0b80bde 100644
--- a/apps/labrinth/.sqlx/query-86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d.json
+++ b/apps/labrinth/.sqlx/query-cb983aed301378550831204ff7f88e95e5db9cabd8e1fc177cdfdaf0951e58e4.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT DISTINCT detail.project_id AS \"project_id!: DBProjectId\"\n        FROM delphi_issue_details_with_statuses detail\n        WHERE\n            detail.project_id = ANY($1::bigint[])\n            AND detail.status IN ('pending', 'unsafe')\n            AND NOT detail.hidden\n        ",
+  "query": "\n        SELECT DISTINCT detail.project_id AS \"project_id!: DBProjectId\"\n        FROM delphi_issue_details_with_statuses detail\n        WHERE\n            detail.project_id = ANY($1::bigint[])\n            AND detail.status IN ('pending', 'unsafe')\n            AND detail.severity != 'hidden'\n        ",
   "describe": {
     "columns": [
       {
@@ -18,5 +18,5 @@
       true
     ]
   },
-  "hash": "86141f67ab4efad36497a839e62e989332725543e1d3b11415502dc8521b724d"
+  "hash": "cb983aed301378550831204ff7f88e95e5db9cabd8e1fc177cdfdaf0951e58e4"
 }
diff --git a/apps/labrinth/.sqlx/query-cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530.json b/apps/labrinth/.sqlx/query-cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530.json
deleted file mode 100644
index a17f724a63..0000000000
--- a/apps/labrinth/.sqlx/query-cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530.json
+++ /dev/null
@@ -1,135 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            WITH filtered_projects AS (\n                SELECT\n                    m.id,\n                    m.queued,\n                    m.published\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $6::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                                AND NOT didws.hidden\n                        )\n                    )\n            ),\n            total AS (\n                SELECT COUNT(*) AS total_count FROM filtered_projects\n            ),\n            page_ids AS (\n                SELECT\n                    id,\n                    queued,\n                    published\n                FROM filtered_projects\n                ORDER BY\n                    CASE WHEN $5 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                    CASE WHEN $5 = 'oldest' THEN COALESCE(queued, published) END ASC NULLS LAST,\n                    id ASC\n                OFFSET $4\n                LIMIT $3\n            ),\n            page_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN page_ids page ON page.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            page_external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN page_ids page ON page.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            page_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.icon_url,\n                    m.status,\n                    m.requested_status,\n                    m.queued,\n                    m.published,\n                    m.updated,\n                    m.organization_id,\n                    o.name AS organization_name,\n                    o.icon_url AS organization_icon_url,\n                    owner.user_id AS owner_id,\n                    owner.username AS owner_name,\n                    owner.avatar_url AS owner_icon_url,\n                    CASE\n                        WHEN m.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(ppt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(ppt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ped.external_dependencies_count, 0) AS external_dependencies_count\n                FROM page_ids page\n                INNER JOIN mods m ON m.id = page.id\n                LEFT JOIN organizations o ON o.id = m.organization_id\n                LEFT JOIN LATERAL (\n                    SELECT\n                        tm.user_id,\n                        u.username,\n                        u.avatar_url\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = m.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) owner ON m.organization_id IS NULL\n                LEFT JOIN page_project_types ppt ON ppt.mod_id = m.id\n                LEFT JOIN page_external_dependencies ped ON ped.mod_id = m.id\n            )\n            SELECT\n                total.total_count AS \"total_count!\",\n                page_projects.id AS \"id?\",\n                page_projects.slug AS \"slug?\",\n                page_projects.name AS \"name?\",\n                page_projects.summary AS \"summary?\",\n                page_projects.icon_url AS \"icon_url?\",\n                page_projects.status AS \"status?\",\n                page_projects.requested_status AS \"requested_status?\",\n                page_projects.queued AS \"queued?\",\n                page_projects.published AS \"published?\",\n                page_projects.updated AS \"updated?\",\n                page_projects.organization_id AS \"organization_id?\",\n                page_projects.organization_name AS \"organization_name?\",\n                page_projects.organization_icon_url AS \"organization_icon_url?\",\n                page_projects.owner_id AS \"owner_id?\",\n                page_projects.owner_name AS \"owner_name?\",\n                page_projects.owner_icon_url AS \"owner_icon_url?\",\n                page_projects.project_types AS \"project_types?: Vec<String>\",\n                page_projects.external_dependencies_count AS \"external_dependencies_count?\"\n            FROM total\n            LEFT JOIN page_projects ON true\n            ORDER BY\n                CASE WHEN $5 = 'newest' THEN COALESCE(page_projects.queued, page_projects.published) END DESC NULLS LAST,\n                CASE WHEN $5 = 'oldest' THEN COALESCE(page_projects.queued, page_projects.published) END ASC NULLS LAST,\n                page_projects.id ASC\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "total_count!",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 2,
-        "name": "slug?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 3,
-        "name": "name?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 4,
-        "name": "summary?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 5,
-        "name": "icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 6,
-        "name": "status?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 7,
-        "name": "requested_status?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 8,
-        "name": "queued?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 9,
-        "name": "published?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 10,
-        "name": "updated?",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 11,
-        "name": "organization_id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 12,
-        "name": "organization_name?",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 13,
-        "name": "organization_icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 14,
-        "name": "owner_id?",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 15,
-        "name": "owner_name?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 16,
-        "name": "owner_icon_url?",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 17,
-        "name": "project_types?: Vec<String>",
-        "type_info": "TextArray"
-      },
-      {
-        "ordinal": 18,
-        "name": "external_dependencies_count?",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "TextArray",
-        "Int8",
-        "Int8",
-        "Text",
-        "Bool"
-      ]
-    },
-    "nullable": [
-      null,
-      false,
-      true,
-      false,
-      false,
-      true,
-      false,
-      true,
-      true,
-      false,
-      false,
-      true,
-      false,
-      true,
-      false,
-      false,
-      true,
-      null,
-      null
-    ]
-  },
-  "hash": "cdc0598c4642df1bf2136aa895c9a1fcf8991fe53044d79e37f357dd530e3530"
-}
diff --git a/apps/labrinth/.sqlx/query-d37041da5452ecb82da506a83154cd66b78ebb9a1dbf0bb46e5bd6bb2b3a9bb9.json b/apps/labrinth/.sqlx/query-d37041da5452ecb82da506a83154cd66b78ebb9a1dbf0bb46e5bd6bb2b3a9bb9.json
new file mode 100644
index 0000000000..45ac66fbf6
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-d37041da5452ecb82da506a83154cd66b78ebb9a1dbf0bb46e5bd6bb2b3a9bb9.json
@@ -0,0 +1,135 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH filtered_projects AS (\n                SELECT\n                    m.id,\n                    m.queued,\n                    m.published\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $6::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                                AND didws.severity != 'hidden'\n                        )\n                    )\n            ),\n            total AS (\n                SELECT COUNT(*) AS total_count FROM filtered_projects\n            ),\n            page_ids AS (\n                SELECT\n                    id,\n                    queued,\n                    published\n                FROM filtered_projects\n                ORDER BY\n                    CASE WHEN $5 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                    CASE WHEN $5 = 'oldest' THEN COALESCE(queued, published) END ASC NULLS LAST,\n                    id ASC\n                OFFSET $4\n                LIMIT $3\n            ),\n            page_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN page_ids page ON page.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            page_external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN page_ids page ON page.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            page_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.icon_url,\n                    m.status,\n                    m.requested_status,\n                    m.queued,\n                    m.published,\n                    m.updated,\n                    m.organization_id,\n                    o.name AS organization_name,\n                    o.icon_url AS organization_icon_url,\n                    owner.user_id AS owner_id,\n                    owner.username AS owner_name,\n                    owner.avatar_url AS owner_icon_url,\n                    CASE\n                        WHEN m.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(ppt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(ppt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ped.external_dependencies_count, 0) AS external_dependencies_count\n                FROM page_ids page\n                INNER JOIN mods m ON m.id = page.id\n                LEFT JOIN organizations o ON o.id = m.organization_id\n                LEFT JOIN LATERAL (\n                    SELECT\n                        tm.user_id,\n                        u.username,\n                        u.avatar_url\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = m.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) owner ON m.organization_id IS NULL\n                LEFT JOIN page_project_types ppt ON ppt.mod_id = m.id\n                LEFT JOIN page_external_dependencies ped ON ped.mod_id = m.id\n            )\n            SELECT\n                total.total_count AS \"total_count!\",\n                page_projects.id AS \"id?\",\n                page_projects.slug AS \"slug?\",\n                page_projects.name AS \"name?\",\n                page_projects.summary AS \"summary?\",\n                page_projects.icon_url AS \"icon_url?\",\n                page_projects.status AS \"status?\",\n                page_projects.requested_status AS \"requested_status?\",\n                page_projects.queued AS \"queued?\",\n                page_projects.published AS \"published?\",\n                page_projects.updated AS \"updated?\",\n                page_projects.organization_id AS \"organization_id?\",\n                page_projects.organization_name AS \"organization_name?\",\n                page_projects.organization_icon_url AS \"organization_icon_url?\",\n                page_projects.owner_id AS \"owner_id?\",\n                page_projects.owner_name AS \"owner_name?\",\n                page_projects.owner_icon_url AS \"owner_icon_url?\",\n                page_projects.project_types AS \"project_types?: Vec<String>\",\n                page_projects.external_dependencies_count AS \"external_dependencies_count?\"\n            FROM total\n            LEFT JOIN page_projects ON true\n            ORDER BY\n                CASE WHEN $5 = 'newest' THEN COALESCE(page_projects.queued, page_projects.published) END DESC NULLS LAST,\n                CASE WHEN $5 = 'oldest' THEN COALESCE(page_projects.queued, page_projects.published) END ASC NULLS LAST,\n                page_projects.id ASC\n            ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "total_count!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "slug?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 3,
+        "name": "name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 4,
+        "name": "summary?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 5,
+        "name": "icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 6,
+        "name": "status?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 7,
+        "name": "requested_status?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 8,
+        "name": "queued?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 9,
+        "name": "published?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 10,
+        "name": "updated?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 11,
+        "name": "organization_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 12,
+        "name": "organization_name?",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 13,
+        "name": "organization_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 14,
+        "name": "owner_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 15,
+        "name": "owner_name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 16,
+        "name": "owner_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 17,
+        "name": "project_types?: Vec<String>",
+        "type_info": "TextArray"
+      },
+      {
+        "ordinal": 18,
+        "name": "external_dependencies_count?",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray",
+        "Int8",
+        "Int8",
+        "Text",
+        "Bool"
+      ]
+    },
+    "nullable": [
+      null,
+      false,
+      true,
+      false,
+      false,
+      true,
+      false,
+      true,
+      true,
+      false,
+      false,
+      true,
+      false,
+      true,
+      false,
+      false,
+      true,
+      null,
+      null
+    ]
+  },
+  "hash": "d37041da5452ecb82da506a83154cd66b78ebb9a1dbf0bb46e5bd6bb2b3a9bb9"
+}
diff --git a/apps/labrinth/.sqlx/query-d3d320af2786bf7908e65f5b7a35ade08110fb341d694ca0f25eecca2f5ad5bf.json b/apps/labrinth/.sqlx/query-d3d320af2786bf7908e65f5b7a35ade08110fb341d694ca0f25eecca2f5ad5bf.json
new file mode 100644
index 0000000000..a99323dc54
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-d3d320af2786bf7908e65f5b7a35ade08110fb341d694ca0f25eecca2f5ad5bf.json
@@ -0,0 +1,138 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH moderation_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.description,\n                    m.queued,\n                    m.published,\n                    m.organization_id,\n                    m.team_id,\n                    m.components\n                FROM mods m\n                WHERE\n                    m.status = $1\n                    AND (\n                        $9::boolean = false\n                        OR NOT EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses didws\n                            WHERE didws.project_id = m.id\n                                AND didws.status = 'pending'\n                                AND didws.severity != 'hidden'\n                        )\n                    )\n            ),\n            external_dependencies AS (\n                SELECT\n                    v.mod_id,\n                    COUNT(*) AS external_dependencies_count\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN dependencies d ON d.dependent_id = v.id\n                WHERE d.dependency_file_name IS NOT NULL\n                GROUP BY v.mod_id\n            ),\n            version_project_types AS (\n                SELECT\n                    v.mod_id,\n                    ARRAY_AGG(DISTINCT pt.name::text) FILTER (WHERE pt.name IS NOT NULL) AS project_types\n                FROM versions v\n                INNER JOIN moderation_projects mp ON mp.id = v.mod_id\n                INNER JOIN loaders_versions lv ON v.id = lv.version_id\n                INNER JOIN loaders l ON lv.loader_id = l.id\n                INNER JOIN loaders_project_types lpt ON lpt.joining_loader_id = l.id\n                INNER JOIN project_types pt ON pt.id = lpt.joining_project_type_id\n                WHERE v.status = ANY($2)\n                GROUP BY v.mod_id\n            ),\n            queue_projects AS (\n                SELECT\n                    mp.id,\n                    mp.slug,\n                    mp.name,\n                    mp.summary,\n                    mp.description,\n                    mp.queued,\n                    mp.published,\n                    search_organization.name AS organization_name,\n                    search_owner.username AS owner_name,\n                    CASE\n                        WHEN mp.components ? 'minecraft_server'\n                            THEN ARRAY_APPEND(\n                                ARRAY_REMOVE(\n                                    COALESCE(vpt.project_types::text[], ARRAY[]::text[]),\n                                    'modpack'\n                                ),\n                                'minecraft_java_server'\n                            )\n                        ELSE COALESCE(vpt.project_types::text[], ARRAY[]::text[])\n                    END AS project_types,\n                    COALESCE(ed.external_dependencies_count, 0) AS external_dependencies_count\n                FROM moderation_projects mp\n                LEFT JOIN organizations search_organization\n                    ON search_organization.id = mp.organization_id\n                    AND $3::text IS NOT NULL\n                LEFT JOIN LATERAL (\n                    SELECT\n                        u.username\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = mp.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) search_owner ON $3::text IS NOT NULL\n                    AND mp.organization_id IS NULL\n                LEFT JOIN external_dependencies ed ON ed.mod_id = mp.id\n                LEFT JOIN version_project_types vpt ON vpt.mod_id = mp.id\n            ),\n            filtered_projects AS (\n                SELECT\n                    id,\n                    queued,\n                    published,\n                    project_types,\n                    external_dependencies_count\n                FROM queue_projects\n                WHERE\n                    (\n                        $3::text IS NULL\n                        OR name ILIKE '%' || $3 || '%'\n                        OR slug ILIKE '%' || $3 || '%'\n                        OR summary ILIKE '%' || $3 || '%'\n                        OR description ILIKE '%' || $3 || '%'\n                        OR owner_name ILIKE '%' || $3 || '%'\n                        OR organization_name ILIKE '%' || $3 || '%'\n                        OR EXISTS (\n                            SELECT 1\n                            FROM UNNEST(project_types) AS searched_project_type(project_type)\n                            WHERE searched_project_type.project_type ILIKE '%' || $3 || '%'\n                        )\n                    )\n                    AND (\n                        $4::text IS NULL\n                        OR ($4 = 'none' AND CARDINALITY(project_types) = 0)\n                        OR ($4 = 'minecraft_java_server' AND project_types @> ARRAY['minecraft_java_server']::text[])\n                        OR ($4 <> 'none' AND $4 <> 'minecraft_java_server' AND\n                            project_types[1] = $4\n                        )\n                    )\n                    AND ($5::boolean IS NULL OR (external_dependencies_count > 0) = $5)\n            ),\n            total AS (\n                SELECT COUNT(*) AS total_count FROM filtered_projects\n            ),\n            page_ids AS (\n                SELECT\n                    id,\n                    queued,\n                    published,\n                    project_types,\n                    external_dependencies_count\n                FROM filtered_projects\n                ORDER BY\n                    CASE WHEN $8 = 'most_external_deps' THEN external_dependencies_count END DESC,\n                    CASE WHEN $8 = 'least_external_deps' THEN external_dependencies_count END ASC,\n                    CASE WHEN $8 = 'newest' THEN COALESCE(queued, published) END DESC NULLS LAST,\n                    CASE WHEN $8 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(queued, published) END ASC NULLS LAST,\n                    id ASC\n                OFFSET $7\n                LIMIT $6\n            ),\n            page_projects AS (\n                SELECT\n                    m.id,\n                    m.slug,\n                    m.name,\n                    m.summary,\n                    m.icon_url,\n                    m.status,\n                    m.requested_status,\n                    m.queued,\n                    m.published,\n                    m.updated,\n                    m.organization_id,\n                    m.team_id,\n                    o.name AS organization_name,\n                    o.icon_url AS organization_icon_url,\n                    owner.user_id AS owner_id,\n                    owner.username AS owner_name,\n                    owner.avatar_url AS owner_icon_url,\n                    page_ids.project_types,\n                    page_ids.external_dependencies_count\n                FROM page_ids\n                INNER JOIN mods m ON m.id = page_ids.id\n                LEFT JOIN organizations o ON o.id = m.organization_id\n                LEFT JOIN LATERAL (\n                    SELECT\n                        tm.user_id,\n                        u.username,\n                        u.avatar_url\n                    FROM team_members tm\n                    INNER JOIN users u ON u.id = tm.user_id\n                    WHERE tm.team_id = m.team_id\n                        AND tm.is_owner\n                    ORDER BY tm.ordering ASC\n                    LIMIT 1\n                ) owner ON m.organization_id IS NULL\n            )\n            SELECT\n                total.total_count AS \"total_count!\",\n                page_projects.id AS \"id?\",\n                page_projects.slug AS \"slug?\",\n                page_projects.name AS \"name?\",\n                page_projects.summary AS \"summary?\",\n                page_projects.icon_url AS \"icon_url?\",\n                page_projects.status AS \"status?\",\n                page_projects.requested_status AS \"requested_status?\",\n                page_projects.queued AS \"queued?\",\n                page_projects.published AS \"published?\",\n                page_projects.updated AS \"updated?\",\n                page_projects.organization_id AS \"organization_id?\",\n                page_projects.organization_name AS \"organization_name?\",\n                page_projects.organization_icon_url AS \"organization_icon_url?\",\n                page_projects.owner_id AS \"owner_id?\",\n                page_projects.owner_name AS \"owner_name?\",\n                page_projects.owner_icon_url AS \"owner_icon_url?\",\n                page_projects.project_types AS \"project_types?: Vec<String>\",\n                page_projects.external_dependencies_count AS \"external_dependencies_count?\"\n            FROM total\n            LEFT JOIN page_projects ON true\n            ORDER BY\n                CASE WHEN $8 = 'most_external_deps' THEN page_projects.external_dependencies_count END DESC,\n                CASE WHEN $8 = 'least_external_deps' THEN page_projects.external_dependencies_count END ASC,\n                CASE WHEN $8 = 'newest' THEN COALESCE(page_projects.queued, page_projects.published) END DESC NULLS LAST,\n                CASE WHEN $8 IN ('oldest', 'most_external_deps', 'least_external_deps') THEN COALESCE(page_projects.queued, page_projects.published) END ASC NULLS LAST,\n                page_projects.id ASC\n            ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "total_count!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "slug?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 3,
+        "name": "name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 4,
+        "name": "summary?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 5,
+        "name": "icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 6,
+        "name": "status?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 7,
+        "name": "requested_status?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 8,
+        "name": "queued?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 9,
+        "name": "published?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 10,
+        "name": "updated?",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 11,
+        "name": "organization_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 12,
+        "name": "organization_name?",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 13,
+        "name": "organization_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 14,
+        "name": "owner_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 15,
+        "name": "owner_name?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 16,
+        "name": "owner_icon_url?",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 17,
+        "name": "project_types?: Vec<String>",
+        "type_info": "TextArray"
+      },
+      {
+        "ordinal": 18,
+        "name": "external_dependencies_count?",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray",
+        "Text",
+        "Text",
+        "Bool",
+        "Int8",
+        "Int8",
+        "Text",
+        "Bool"
+      ]
+    },
+    "nullable": [
+      null,
+      false,
+      true,
+      false,
+      false,
+      true,
+      false,
+      true,
+      true,
+      false,
+      false,
+      true,
+      false,
+      true,
+      false,
+      false,
+      true,
+      null,
+      null
+    ]
+  },
+  "hash": "d3d320af2786bf7908e65f5b7a35ade08110fb341d694ca0f25eecca2f5ad5bf"
+}
diff --git a/apps/labrinth/.sqlx/query-f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b.json b/apps/labrinth/.sqlx/query-e07b7f513dd5d2a0e06cc1880746cd8d7d4c27896cbfcb3e26085f99e3552c98.json
similarity index 75%
rename from apps/labrinth/.sqlx/query-f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b.json
rename to apps/labrinth/.sqlx/query-e07b7f513dd5d2a0e06cc1880746cd8d7d4c27896cbfcb3e26085f99e3552c98.json
index 94fb46b58b..eee5100504 100644
--- a/apps/labrinth/.sqlx/query-f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b.json
+++ b/apps/labrinth/.sqlx/query-e07b7f513dd5d2a0e06cc1880746cd8d7d4c27896cbfcb3e26085f99e3552c98.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n\t\tSELECT\n\t\t\teffect.detail_id AS \"detail_id!: DelphiReportIssueDetailsId\",\n\t\t\tdetail.issue_id AS \"issue_id!: DelphiReportIssueId\",\n\t\t\tversion.mod_id AS \"project_id?: DBProjectId\",\n\t\t\tproject.name AS \"project_name?\",\n\t\t\tproject.icon_url AS \"project_icon_url?\",\n\t\t\tversion.id AS \"version_id?: DBVersionId\",\n\t\t\tversion.name AS \"version_name?\",\n\t\t\tversion.version_number AS \"version_number?\",\n\t\t\tissue.issue_type,\n\t\t\tdetail.key,\n\t\t\tdetail.jar,\n\t\t\tdetail.file_path,\n\t\t\tdetail.severity AS \"original_severity!: DelphiSeverity\",\n\t\t\teffect.severity AS \"effect_severity: DelphiSeverity\",\n\t\t\teffect.hidden\n\t\tFROM delphi_rule_effects effect\n\t\tINNER JOIN delphi_rule_revisions published\n\t\t\tON published.revision = effect.revision\n\t\tINNER JOIN delphi_report_issue_details detail\n\t\t\tON detail.id = effect.detail_id\n\t\tINNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n\t\tINNER JOIN delphi_reports report ON report.id = issue.report_id\n\t\tLEFT JOIN files file ON file.id = report.file_id\n\t\tLEFT JOIN versions version ON version.id = file.version_id\n\t\tLEFT JOIN mods project ON project.id = version.mod_id\n\t\tWHERE effect.rule_id = $1\n\t\tORDER BY effect.detail_id DESC\n\t\t",
+  "query": "\n\t\tSELECT\n\t\t\teffect.detail_id AS \"detail_id!: DelphiReportIssueDetailsId\",\n\t\t\tdetail.issue_id AS \"issue_id!: DelphiReportIssueId\",\n\t\t\tversion.mod_id AS \"project_id?: DBProjectId\",\n\t\t\tproject.name AS \"project_name?\",\n\t\t\tproject.icon_url AS \"project_icon_url?\",\n\t\t\tversion.id AS \"version_id?: DBVersionId\",\n\t\t\tversion.name AS \"version_name?\",\n\t\t\tversion.version_number AS \"version_number?\",\n\t\t\tissue.issue_type,\n\t\t\tdetail.key,\n\t\t\tdetail.jar,\n\t\t\tdetail.file_path,\n\t\t\tdetail.severity AS \"original_severity!: DelphiSeverity\",\n\t\t\teffect.severity AS \"effect_severity!: DelphiSeverity\"\n\t\tFROM delphi_rule_effects effect\n\t\tINNER JOIN delphi_rule_revisions published\n\t\t\tON published.revision = effect.revision\n\t\tINNER JOIN delphi_report_issue_details detail\n\t\t\tON detail.id = effect.detail_id\n\t\tINNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n\t\tINNER JOIN delphi_reports report ON report.id = issue.report_id\n\t\tLEFT JOIN files file ON file.id = report.file_id\n\t\tLEFT JOIN versions version ON version.id = file.version_id\n\t\tLEFT JOIN mods project ON project.id = version.mod_id\n\t\tWHERE effect.rule_id = $1\n\t\tORDER BY effect.detail_id DESC\n\t\t",
   "describe": {
     "columns": [
       {
@@ -71,10 +71,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
@@ -82,25 +84,22 @@
       },
       {
         "ordinal": 13,
-        "name": "effect_severity: DelphiSeverity",
+        "name": "effect_severity!: DelphiSeverity",
         "type_info": {
           "Custom": {
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
         }
-      },
-      {
-        "ordinal": 14,
-        "name": "hidden",
-        "type_info": "Bool"
       }
     ],
     "parameters": {
@@ -122,9 +121,8 @@
       true,
       false,
       false,
-      true,
       false
     ]
   },
-  "hash": "f803c8d7ea8457d298beb4acc43667f7e638d7e487c09c86857d316fca40813b"
+  "hash": "e07b7f513dd5d2a0e06cc1880746cd8d7d4c27896cbfcb3e26085f99e3552c98"
 }
diff --git a/apps/labrinth/.sqlx/query-f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1.json b/apps/labrinth/.sqlx/query-f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1.json
deleted file mode 100644
index 129d31765b..0000000000
--- a/apps/labrinth/.sqlx/query-f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        SELECT DISTINCT ON (dr.id)\n            to_jsonb(dr)\n            || jsonb_build_object(\n                'report_id', dr.id,\n                'file_id', to_base62(f.id),\n                'version_id', to_base62(v.id),\n                'project_id', to_base62(v.mod_id),\n                'file_name', f.filename,\n                'file_size', f.size,\n                'flag_reason', 'delphi',\n                'download_url', f.url,\n                'severity', COALESCE((\n                    SELECT MAX(didws.severity)\n                    FROM delphi_report_issues severity_issue\n                    INNER JOIN delphi_issue_details_with_statuses didws\n                        ON didws.issue_id = severity_issue.id\n                    WHERE\n                        severity_issue.report_id = dr.id\n                        AND NOT didws.hidden\n                ), 'low'::delphi_severity),\n                -- TODO: replace with `json_array` in Postgres 16\n\t\t\t\t'issues', (\n\t\t\t\t\tSELECT coalesce(json_agg(\n\t\t\t\t\t\tto_jsonb(dri)\n\t\t\t\t\t\t|| jsonb_build_object(\n\t\t\t\t\t\t\t-- TODO: replace with `json_array` in Postgres 16\n\t\t\t\t\t\t\t'details', (\n\t\t\t\t\t\t\t\tSELECT coalesce(jsonb_agg(\n                                    jsonb_build_object(\n                                        'id', didws.id,\n                                        'issue_id', didws.issue_id,\n                                        'key', didws.key,\n                                        'file_path', didws.file_path,\n                                        'decompiled_source', didws.decompiled_source,\n                                        'data', didws.data,\n                                        'severity', didws.severity,\n                                        'local_status', didws.local_status,\n                                        'global_status', didws.global_status,\n                                        'status', didws.status\n                                    )\n                                ), '[]'::jsonb)\n                                FROM delphi_issue_details_with_statuses didws\n                                WHERE\n                                    didws.issue_id = dri.id\n                                    AND NOT didws.hidden\n                            )\n\t\t\t\t\t\t)\n\t\t\t\t\t), '[]'::json)\n\t\t\t\t\tFROM delphi_report_issues dri\n\t\t\t\t\tWHERE\n                        dri.report_id = dr.id\n                        AND EXISTS (\n                            SELECT 1\n                            FROM delphi_issue_details_with_statuses visible_detail\n                            WHERE\n                                visible_detail.issue_id = dri.id\n                                AND NOT visible_detail.hidden\n                        )\n                )\n            ) AS \"data!: sqlx::types::Json<FileReport>\"\n        FROM delphi_reports dr\n        INNER JOIN files f ON f.id = dr.file_id\n        INNER JOIN versions v ON v.id = f.version_id\n        WHERE dr.id = $1\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "data!: sqlx::types::Json<FileReport>",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "f0333b3cc5ecd51adf07542b85107c8befb4cdaa728a167bd2586898875836c1"
-}
diff --git a/apps/labrinth/.sqlx/query-f2054ae7dcc89b21ed6b2f04526de1e7cddd68ac956143bef994104280a8dc07.json b/apps/labrinth/.sqlx/query-f2054ae7dcc89b21ed6b2f04526de1e7cddd68ac956143bef994104280a8dc07.json
index 8cbe94abd5..1e2ab737e9 100644
--- a/apps/labrinth/.sqlx/query-f2054ae7dcc89b21ed6b2f04526de1e7cddd68ac956143bef994104280a8dc07.json
+++ b/apps/labrinth/.sqlx/query-f2054ae7dcc89b21ed6b2f04526de1e7cddd68ac956143bef994104280a8dc07.json
@@ -19,10 +19,12 @@
             "name": "delphi_severity",
             "kind": {
               "Enum": [
+                "hidden",
                 "low",
                 "medium",
                 "high",
-                "severe"
+                "severe",
+                "malware"
               ]
             }
           }
diff --git a/apps/labrinth/.sqlx/query-b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9.json b/apps/labrinth/.sqlx/query-f952ab269d0aa1b98bb86b58debfd4ab14cea8575e4a15cf8c1c57e9c1e367a1.json
similarity index 77%
rename from apps/labrinth/.sqlx/query-b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9.json
rename to apps/labrinth/.sqlx/query-f952ab269d0aa1b98bb86b58debfd4ab14cea8575e4a15cf8c1c57e9c1e367a1.json
index e77b9af062..06674db8d5 100644
--- a/apps/labrinth/.sqlx/query-b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9.json
+++ b/apps/labrinth/.sqlx/query-f952ab269d0aa1b98bb86b58debfd4ab14cea8575e4a15cf8c1c57e9c1e367a1.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            dgdv.detail_key,\n            dgdv.verdict AS \"verdict!: DelphiStatus\",\n            COUNT(dri.id) AS \"local_trace_count!\"\n        FROM delphi_global_detail_verdicts dgdv\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.key = dgdv.detail_key\n            AND NOT didws.hidden\n        LEFT JOIN delphi_report_issues dri\n            ON dri.id = didws.issue_id\n        WHERE dgdv.detail_key = $1\n        GROUP BY dgdv.detail_key, dgdv.verdict\n        ",
+  "query": "\n        SELECT\n            dgdv.detail_key,\n            dgdv.verdict AS \"verdict!: DelphiStatus\",\n            COUNT(dri.id) AS \"local_trace_count!\"\n        FROM delphi_global_detail_verdicts dgdv\n        LEFT JOIN delphi_issue_details_with_statuses didws\n            ON didws.key = dgdv.detail_key\n            AND didws.severity != 'hidden'\n        LEFT JOIN delphi_report_issues dri\n            ON dri.id = didws.issue_id\n        WHERE dgdv.detail_key = $1\n        GROUP BY dgdv.detail_key, dgdv.verdict\n        ",
   "describe": {
     "columns": [
       {
@@ -41,5 +41,5 @@
       null
     ]
   },
-  "hash": "b4f5fbf3bdc7802c8e282861f1a51991b5b114e1b793210f1d31e0144c2138b9"
+  "hash": "f952ab269d0aa1b98bb86b58debfd4ab14cea8575e4a15cf8c1c57e9c1e367a1"
 }
diff --git a/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql b/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql
index 59d4ffbe82..666a8863d9 100644
--- a/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql
+++ b/apps/labrinth/migrations/20260720105358_delphi_trace_rules.sql
@@ -1,3 +1,6 @@
+ALTER TYPE delphi_severity ADD VALUE IF NOT EXISTS 'hidden' BEFORE 'low';
+ALTER TYPE delphi_severity ADD VALUE IF NOT EXISTS 'malware' AFTER 'severe';
+
 CREATE TABLE delphi_rules (
 	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
 	created_at TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
@@ -27,8 +30,7 @@ CREATE TABLE delphi_rule_effects (
 		ON UPDATE CASCADE,
 	rule_id BIGINT NOT NULL REFERENCES delphi_rules(id)
 		ON UPDATE CASCADE,
-	severity delphi_severity,
-	hidden BOOLEAN NOT NULL DEFAULT FALSE,
+	severity delphi_severity NOT NULL,
 	PRIMARY KEY (revision, detail_id)
 );
 
@@ -47,7 +49,6 @@ SELECT
 	drid.data,
 	drid.severity AS original_severity,
 	COALESCE(dre.severity, drid.severity) AS severity,
-	COALESCE(dre.hidden, FALSE) AS hidden,
 	m.id AS project_id,
 	didv.verdict AS local_status,
 	dgdv.verdict AS global_status,
@@ -89,7 +90,7 @@ WHERE
 	OR (
 		dri.issue_type != '__dummy'
 		AND didws.status IN ('pending', 'unsafe')
-		AND NOT didws.hidden
+		AND didws.severity::text != 'hidden'
 	);
 
 DELETE FROM delphi_report_issue_details detail
diff --git a/apps/labrinth/src/database/models/delphi_report_item.rs b/apps/labrinth/src/database/models/delphi_report_item.rs
index 4ae71749b4..92cf1000aa 100644
--- a/apps/labrinth/src/database/models/delphi_report_item.rs
+++ b/apps/labrinth/src/database/models/delphi_report_item.rs
@@ -55,7 +55,7 @@ impl DBDelphiReport {
     }
 }
 
-/// A severity level reported by Delphi.
+/// A severity level for a Delphi report or transformed issue detail.
 #[derive(
     Deserialize,
     Serialize,
@@ -76,6 +76,8 @@ impl DBDelphiReport {
 #[serde(rename_all = "snake_case")]
 #[sqlx(type_name = "delphi_severity", rename_all = "snake_case")]
 pub enum DelphiSeverity {
+    #[serde(alias = "HIDDEN")]
+    Hidden,
     #[serde(alias = "LOW")]
     Low,
     #[serde(alias = "MEDIUM")]
@@ -84,6 +86,8 @@ pub enum DelphiSeverity {
     High,
     #[serde(alias = "SEVERE")]
     Severe,
+    #[serde(alias = "MALWARE")]
+    Malware,
 }
 
 /// An issue found in a Delphi report. Every issue belongs to a report,
diff --git a/apps/labrinth/src/routes/internal/delphi/rescan.rs b/apps/labrinth/src/routes/internal/delphi/rescan.rs
index bfe40edfc6..71b47d9cee 100644
--- a/apps/labrinth/src/routes/internal/delphi/rescan.rs
+++ b/apps/labrinth/src/routes/internal/delphi/rescan.rs
@@ -105,7 +105,7 @@ async fn fetch_unreviewed_tech_review_project_ids(
                 WHERE
                     didws.project_id = m.id
                     AND didws.status = 'pending'
-                    AND NOT didws.hidden
+                    AND didws.severity != 'hidden'
             )
             AND NOT EXISTS(
                 SELECT 1
@@ -113,7 +113,7 @@ async fn fetch_unreviewed_tech_review_project_ids(
                 WHERE
                     didws.project_id = m.id
                     AND didws.status IN ('safe', 'unsafe')
-                    AND NOT didws.hidden
+                    AND didws.severity != 'hidden'
             )
         "#,
     )
diff --git a/apps/labrinth/src/routes/internal/delphi/tech_review_queue.rs b/apps/labrinth/src/routes/internal/delphi/tech_review_queue.rs
index cde08d1581..de55b758df 100644
--- a/apps/labrinth/src/routes/internal/delphi/tech_review_queue.rs
+++ b/apps/labrinth/src/routes/internal/delphi/tech_review_queue.rs
@@ -145,7 +145,7 @@ pub async fn add_projects_with_review_details(
         WHERE
             detail.project_id = ANY($1::bigint[])
             AND detail.status IN ('pending', 'unsafe')
-            AND NOT detail.hidden
+            AND detail.severity != 'hidden'
         "#,
         &project_ids.iter().map(|id| id.0).collect::<Vec<_>>(),
     )
diff --git a/apps/labrinth/src/routes/internal/moderation/mod.rs b/apps/labrinth/src/routes/internal/moderation/mod.rs
index 7897c8cd84..468fca061c 100644
--- a/apps/labrinth/src/routes/internal/moderation/mod.rs
+++ b/apps/labrinth/src/routes/internal/moderation/mod.rs
@@ -295,7 +295,7 @@ pub async fn get_projects_internal(
                             FROM delphi_issue_details_with_statuses didws
                             WHERE didws.project_id = m.id
                                 AND didws.status = 'pending'
-                                AND NOT didws.hidden
+                                AND didws.severity != 'hidden'
                         )
                     )
             ),
@@ -543,7 +543,7 @@ pub async fn get_projects_internal(
                             FROM delphi_issue_details_with_statuses didws
                             WHERE didws.project_id = m.id
                                 AND didws.status = 'pending'
-                                AND NOT didws.hidden
+                                AND didws.severity != 'hidden'
                         )
                     )
             ),
@@ -772,7 +772,7 @@ pub async fn get_project_ids(
                             FROM delphi_issue_details_with_statuses didws
                             WHERE didws.project_id = m.id
                                 AND didws.status = 'pending'
-                                AND NOT didws.hidden
+                                AND didws.severity != 'hidden'
                         )
                     )
             ),
@@ -901,7 +901,7 @@ pub async fn get_project_ids(
                         FROM delphi_issue_details_with_statuses didws
                         WHERE didws.project_id = mods.id
                             AND didws.status = 'pending'
-                            AND NOT didws.hidden
+                            AND didws.severity != 'hidden'
                     )
                 )
             ORDER BY
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review.rs b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
index 47ed4a6a29..e912746b7b 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review.rs
@@ -253,7 +253,7 @@ pub async fn get_issue(
                     FROM delphi_issue_details_with_statuses didws
                     WHERE
                         didws.issue_id = dri.id
-                        AND NOT didws.hidden
+                        AND didws.severity != 'hidden'
                 )
             ) AS "data!: sqlx::types::Json<FileIssue>"
         FROM delphi_report_issues dri
@@ -315,7 +315,7 @@ pub async fn get_report(
                         ON didws.issue_id = severity_issue.id
                     WHERE
                         severity_issue.report_id = dr.id
-                        AND NOT didws.hidden
+                        AND didws.severity != 'hidden'
                 ), 'low'::delphi_severity),
                 -- TODO: replace with `json_array` in Postgres 16
 				'issues', (
@@ -341,7 +341,7 @@ pub async fn get_report(
                                 FROM delphi_issue_details_with_statuses didws
                                 WHERE
                                     didws.issue_id = dri.id
-                                    AND NOT didws.hidden
+                                    AND didws.severity != 'hidden'
                             )
 						)
 					), '[]'::json)
@@ -353,7 +353,7 @@ pub async fn get_report(
                             FROM delphi_issue_details_with_statuses visible_detail
                             WHERE
                                 visible_detail.issue_id = dri.id
-                                AND NOT visible_detail.hidden
+                                AND visible_detail.severity != 'hidden'
                         )
                 )
             ) AS "data!: sqlx::types::Json<FileReport>"
@@ -551,7 +551,7 @@ async fn fetch_project_reports(
         FROM delphi_issue_details_with_statuses didws
         WHERE
             didws.issue_id = ANY($1::bigint[])
-            AND NOT didws.hidden
+            AND didws.severity != 'hidden'
         ORDER BY didws.issue_id, didws.id
         "#,
         &issue_ids.iter().map(|i| i.0).collect::<Vec<_>>()
@@ -768,7 +768,7 @@ pub async fn search_projects(
         LEFT JOIN delphi_report_issues dri ON dri.report_id = dr.id
         LEFT JOIN delphi_issue_details_with_statuses didws
             ON didws.issue_id = dri.id
-            AND NOT didws.hidden
+            AND didws.severity != 'hidden'
         LEFT JOIN threads_messages tm_last
             ON tm_last.thread_id = t.id
             AND tm_last.id = (
@@ -828,7 +828,7 @@ pub async fn search_projects(
                     WHERE
                         issue_version.mod_id = m.id
                         AND issue.issue_type = ANY($7::text[])
-                        AND NOT detail.hidden
+                        AND detail.severity != 'hidden'
                 )
             )
             AND (
@@ -1086,7 +1086,7 @@ pub async fn submit_report(
         WHERE
             m.id = $1
             AND didws.status = 'pending'
-            AND NOT didws.hidden
+            AND didws.severity != 'hidden'
         "#,
         project_id as _,
     )
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs
index 585a178a71..269d4eac3e 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/global.rs
@@ -188,7 +188,7 @@ pub async fn search_global_issue_details(
         FROM delphi_global_detail_verdicts dgdv
         LEFT JOIN delphi_issue_details_with_statuses didws
             ON didws.key = dgdv.detail_key
-            AND NOT didws.hidden
+            AND didws.severity != 'hidden'
         LEFT JOIN delphi_report_issues dri
             ON dri.id = didws.issue_id
         WHERE (
@@ -248,7 +248,7 @@ pub async fn search_global_issue_details(
                 AND didv.detail_key = didws.key
             WHERE
                 didws.key = ANY($1::text[])
-                AND NOT didws.hidden
+                AND didws.severity != 'hidden'
         )
         SELECT
             detail_key AS "detail_key!",
@@ -367,7 +367,7 @@ pub async fn get_global_issue_detail(
         FROM delphi_global_detail_verdicts dgdv
         LEFT JOIN delphi_issue_details_with_statuses didws
             ON didws.key = dgdv.detail_key
-            AND NOT didws.hidden
+            AND didws.severity != 'hidden'
         LEFT JOIN delphi_report_issues dri
             ON dri.id = didws.issue_id
         WHERE dgdv.detail_key = $1
@@ -412,7 +412,7 @@ pub async fn get_global_issue_detail(
         WHERE
             didws.key = $1
             AND ($2::bigint IS NULL OR didws.id > $2)
-            AND NOT didws.hidden
+            AND didws.severity != 'hidden'
         ORDER BY didws.id
         LIMIT $3
         "#,
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
index 7a4e454938..0021847bd9 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -64,8 +64,7 @@ pub struct DelphiRuleAffectedDetail {
     pub jar: Option<String>,
     pub file_path: String,
     pub original_severity: DelphiSeverity,
-    pub severity: Option<DelphiSeverity>,
-    pub hidden: bool,
+    pub severity: DelphiSeverity,
 }
 
 #[derive(Debug, Deserialize, Validate, utoipa::ToSchema)]
@@ -94,10 +93,7 @@ pub struct TestDelphiRuleResponse {
 #[derive(Debug, Deserialize, Serialize, utoipa::ToSchema)]
 #[serde(deny_unknown_fields)]
 pub struct DelphiRuleEffect {
-    #[serde(default)]
-    pub severity: Option<DelphiSeverity>,
-    #[serde(default)]
-    pub hidden: bool,
+    pub severity: DelphiSeverity,
 }
 
 struct ValidatedRule {
@@ -235,8 +231,7 @@ pub async fn get_rules(
 			preview.jar AS "jar?",
 			preview.file_path AS "file_path?",
 			preview.original_severity AS "original_severity?: DelphiSeverity",
-			preview.severity AS "effect_severity?: DelphiSeverity",
-			preview.hidden AS "hidden?"
+			preview.severity AS "effect_severity?: DelphiSeverity"
 		FROM delphi_rules delphi_rule
 		LEFT JOIN LATERAL (
 			SELECT
@@ -254,7 +249,6 @@ pub async fn get_rules(
 				detail.file_path,
 				detail.severity AS original_severity,
 				effect.severity,
-				effect.hidden,
 				COUNT(*) OVER () AS affected_details_count
 			FROM delphi_rule_effects effect
 			INNER JOIN delphi_rule_revisions published
@@ -292,7 +286,7 @@ pub async fn get_rules(
             Some(key),
             Some(file_path),
             Some(original_severity),
-            Some(hidden),
+            Some(severity),
         ) = (
             rule.detail_id,
             rule.issue_id,
@@ -300,7 +294,7 @@ pub async fn get_rules(
             rule.key,
             rule.file_path,
             rule.original_severity,
-            rule.hidden,
+            rule.effect_severity,
         ) {
             Some(DelphiRuleAffectedDetail {
                 detail_id,
@@ -316,8 +310,7 @@ pub async fn get_rules(
                 jar: rule.jar,
                 file_path,
                 original_severity,
-                severity: rule.effect_severity,
-                hidden,
+                severity,
             })
         } else {
             None
@@ -392,8 +385,7 @@ pub async fn get_rule_affected_details(
 			detail.jar,
 			detail.file_path,
 			detail.severity AS "original_severity!: DelphiSeverity",
-			effect.severity AS "effect_severity: DelphiSeverity",
-			effect.hidden
+			effect.severity AS "effect_severity!: DelphiSeverity"
 		FROM delphi_rule_effects effect
 		INNER JOIN delphi_rule_revisions published
 			ON published.revision = effect.revision
@@ -431,7 +423,6 @@ pub async fn get_rule_affected_details(
                 file_path: detail.file_path,
                 original_severity: detail.original_severity,
                 severity: detail.effect_severity,
-                hidden: detail.hidden,
             })
             .collect(),
     ))
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
index f701c5e141..99d573803f 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -523,11 +523,14 @@ async fn run_scan(
                 detail.project_id,
                 BOOL_OR(
                     detail.status IN ('pending', 'unsafe')
-                    AND NOT detail.hidden
+                    AND detail.severity != 'hidden'
                 ) AS old_needs_review,
                 BOOL_OR(
                     detail.status IN ('pending', 'unsafe')
-                    AND NOT COALESCE(new_effect.hidden, FALSE)
+                    AND COALESCE(
+                        new_effect.severity,
+                        detail.original_severity
+                    ) != 'hidden'
                 ) AS new_needs_review
             FROM delphi_issue_details_with_statuses detail
             LEFT JOIN delphi_rule_effects new_effect
@@ -767,10 +770,6 @@ async fn insert_materialized_effects(
         .iter()
         .map(|effect| effect.effect.severity)
         .collect::<Vec<_>>();
-    let hidden = effects
-        .iter()
-        .map(|effect| effect.effect.hidden)
-        .collect::<Vec<_>>();
 
     sqlx::query!(
         r#"
@@ -778,22 +777,19 @@ async fn insert_materialized_effects(
             revision,
             detail_id,
             rule_id,
-            severity,
-            hidden
+            severity
         )
         SELECT $1, effect.*
         FROM UNNEST(
             $2::BIGINT[],
             $3::BIGINT[],
-            $4::delphi_severity[],
-            $5::BOOLEAN[]
-        ) AS effect(detail_id, rule_id, severity, hidden)
+            $4::delphi_severity[]
+        ) AS effect(detail_id, rule_id, severity)
         "#,
         revision,
         &detail_ids,
         &rule_ids,
-        &severities as &[Option<DelphiSeverity>],
-        &hidden,
+        &severities as &[DelphiSeverity],
     )
     .execute(&mut *transaction)
     .await
diff --git a/packages/api-client/src/modules/labrinth/types.ts b/packages/api-client/src/modules/labrinth/types.ts
index 79340e0340..67bd85bce7 100644
--- a/packages/api-client/src/modules/labrinth/types.ts
+++ b/packages/api-client/src/modules/labrinth/types.ts
@@ -2292,8 +2292,7 @@ export namespace Labrinth {
 				jar: string | null
 				file_path: string
 				original_severity: DelphiSeverity
-				severity: DelphiSeverity | null
-				hidden: boolean
+				severity: DelphiSeverity
 			}
 
 			export type WriteDelphiRule = {
@@ -2308,8 +2307,7 @@ export namespace Labrinth {
 			}
 
 			export type DelphiRuleEffect = {
-				severity: DelphiSeverity | null
-				hidden: boolean
+				severity: DelphiSeverity
 			}
 
 			export type DelphiRuleSchema = Record<string, unknown>
@@ -2607,7 +2605,7 @@ export namespace Labrinth {
 
 			export type FlagReason = 'delphi'
 
-			export type DelphiSeverity = 'low' | 'medium' | 'high' | 'severe'
+			export type DelphiSeverity = 'hidden' | 'low' | 'medium' | 'high' | 'severe' | 'malware'
 
 			export type DelphiReportIssueStatus = 'pending' | 'safe' | 'unsafe'
 
diff --git a/packages/delphi-cel-experiment/src/main.rs b/packages/delphi-cel-experiment/src/main.rs
index 92fe06bd33..7163504bee 100644
--- a/packages/delphi-cel-experiment/src/main.rs
+++ b/packages/delphi-cel-experiment/src/main.rs
@@ -9,8 +9,7 @@ const EFFECT_RULE: &str = r#"
 		&& "confidence" in input.trace.data
 		&& input.trace.data.confidence >= 0.9
 	? {
-		"severity": "low",
-		"hidden": false
+		"severity": "low"
 	}
 	: null
 "#;
@@ -55,19 +54,18 @@ struct ScopeInput {
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Deserialize, Serialize)]
 #[serde(rename_all = "snake_case")]
 enum DelphiSeverity {
+    Hidden,
     Low,
     Medium,
     High,
     Severe,
+    Malware,
 }
 
 #[derive(Debug, PartialEq, Eq, Deserialize)]
 #[serde(deny_unknown_fields)]
 struct RuleEffect {
-    #[serde(default)]
-    severity: Option<DelphiSeverity>,
-    #[serde(default)]
-    hidden: bool,
+    severity: DelphiSeverity,
 }
 
 fn main() -> Result<(), Box<dyn Error>> {
@@ -146,8 +144,7 @@ mod tests {
         assert_eq!(
             effect,
             Some(RuleEffect {
-                severity: Some(DelphiSeverity::Low),
-                hidden: false,
+                severity: DelphiSeverity::Low,
             })
         );
     }

From 5ead1499cd46c033a94baa096eda2502248a7c1d Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Sun, 2 Aug 2026 15:13:13 +0100
Subject: [PATCH 15/16] flatten input context

---
 .../moderation/technical-review/rules.vue     |  4 ++--
 .../moderation/tech_review/rules_scan.rs      | 20 +++++++++++++++----
 packages/delphi-cel-experiment/src/main.rs    | 14 ++++++++-----
 3 files changed, 27 insertions(+), 11 deletions(-)

diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index 47032a24a9..fbc86e94c5 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -64,7 +64,7 @@
 				<div v-else class="mt-3 grid gap-3 md:grid-cols-2">
 					<div class="min-w-0">
 						<p class="m-0 mb-2 text-xs font-semibold uppercase tracking-wide text-secondary">
-							Input (<code>input</code>)
+							Context
 						</p>
 						<pre
 							class="m-0 overflow-x-auto rounded-lg bg-surface-1 p-3 text-xs leading-relaxed text-contrast"
@@ -428,7 +428,7 @@ import type { Component } from 'vue'
 
 import IssueDetailPath from '~/components/ui/moderation/IssueDetailPath.vue'
 
-const DEFAULT_RULE = `input.trace.issue_type == "OBFUSCATED_NAMES"
+const DEFAULT_RULE = `trace.issue_type == "OBFUSCATED_NAMES"
 	? {"severity": "low"}
 	: null`
 const RULE_EDITOR_OPTIONS: Partial<Ace.EditorOptions> = {
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
index 99d573803f..ed39d82193 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -114,7 +114,7 @@ pub struct DelphiRuleSchemaResponse {
     pub components: BTreeMap<String, serde_json::Value>,
 }
 
-/// Get the schemas for the CEL input and output values.
+/// Get the schemas for the CEL context and output values.
 #[utoipa::path(
     context_path = "/moderation/tech-review",
     tag = "moderation",
@@ -800,12 +800,24 @@ async fn insert_materialized_effects(
 
 pub(super) fn evaluate_rule(
     program: &cel::Program,
-    input: impl Serialize,
+    input: &RuleInput,
 ) -> Result<Option<DelphiRuleEffect>> {
     let mut context = cel::Context::default();
     context
-        .add_variable("input", input)
-        .wrap_err("failed to build cel input")?;
+        .add_variable("schema_version", input.schema_version)
+        .wrap_err("failed to add `schema_version` to cel context")?;
+    context
+        .add_variable("trace", &input.trace)
+        .wrap_err("failed to add `trace` to cel context")?;
+    context
+        .add_variable("scan", &input.scan)
+        .wrap_err("failed to add `scan` to cel context")?;
+    context
+        .add_variable("artifact", &input.artifact)
+        .wrap_err("failed to add `artifact` to cel context")?;
+    context
+        .add_variable("scope", &input.scope)
+        .wrap_err("failed to add `scope` to cel context")?;
 
     let value = program
         .execute(&context)
diff --git a/packages/delphi-cel-experiment/src/main.rs b/packages/delphi-cel-experiment/src/main.rs
index 7163504bee..8657e94a1c 100644
--- a/packages/delphi-cel-experiment/src/main.rs
+++ b/packages/delphi-cel-experiment/src/main.rs
@@ -4,10 +4,10 @@ use cel::{Context, Program};
 use serde::{Deserialize, Serialize};
 
 const EFFECT_RULE: &str = r#"
-	input.trace.issue_type == "OBFUSCATED_NAMES"
-		&& input.trace.severity == "high"
-		&& "confidence" in input.trace.data
-		&& input.trace.data.confidence >= 0.9
+	trace.issue_type == "OBFUSCATED_NAMES"
+		&& trace.severity == "high"
+		&& "confidence" in trace.data
+		&& trace.data.confidence >= 0.9
 	? {
 		"severity": "low"
 	}
@@ -116,7 +116,11 @@ fn evaluate_rule(
     input: &RuleInput,
 ) -> Result<Option<RuleEffect>, Box<dyn Error>> {
     let mut context = Context::default();
-    context.add_variable("input", input)?;
+    context.add_variable("schema_version", input.schema_version)?;
+    context.add_variable("trace", &input.trace)?;
+    context.add_variable("scan", &input.scan)?;
+    context.add_variable("artifact", &input.artifact)?;
+    context.add_variable("scope", &input.scope)?;
 
     let value = Program::compile(expression)?.execute(&context)?;
     let json = value

From 4c8abfb78d972d34ccc9be087e6b003fb107ff4d Mon Sep 17 00:00:00 2001
From: aecsocket <43144841+aecsocket@users.noreply.github.com>
Date: Sun, 2 Aug 2026 17:05:41 +0100
Subject: [PATCH 16/16] adjust schema

---
 Cargo.lock                                    |   9 -
 Cargo.toml                                    |   1 -
 .../moderation/technical-review/rules.vue     |  28 ++-
 ...36eb1dd626e77331d8278c406df952691be4c.json |  22 ++
 ...67a2296efc16763cdbd5d8c295a1a7ca08021.json |  12 ++
 ...7a887cebbaeab0a8c1da8b008e0c5e94fbc4e.json |  32 +++
 ...f4eeff66ab4165a9f4980032e114db4dc1286.json |  26 +++
 ...63ce02ca16781e32232ae0fa7a0af1973d3a4.json |  20 ++
 ...b8c14fe329deac983bc2f43ba74e066f9cf8d.json |  14 ++
 ...8518f1272690ce7766dbdc41ec1e98f7f1fec.json |  12 ++
 ...3765fb64bd9499a796470d544466886e1a808.json |  26 ---
 ...78df08d25844f1019d539712b0cb686e4ae81.json |  16 ++
 ...66908ea41a06ba858dc5b523aef6aae27b850.json |  15 ++
 ...19dc0cdef502935dd5939a2f3ab89b0766ad2.json |  12 ++
 ...58541fc78e910111c09ba3d50a12d9ca4a9f8.json |  16 ++
 ...5fd5165d02ebcc0f8454554cbd870e4ddb42.json} |  16 +-
 ...4666378d1d24981ab8113badded16fb63413.json} |  16 +-
 ...1a31da1885cc22bb61be6853950ba52be9aa7.json |  15 ++
 ...a93c7016b2a6f18aa4f22ea57f604d82c1da.json} |  16 +-
 ...d2402f52fea71e27b08e7926fcc2a9e62c0f3.json |  20 ++
 ...2c36b9db3770508be4acbb6b441ed8006d9c7.json |  12 ++
 ...bd875675779a173fb2cd41ba365c1acca96f9.json |  14 ++
 ...afedb074492b4ec7f2457c14113f5fd13aa02.json |  18 ++
 ...e5c93783c7641b019fdb698a1ec0be1393606.json |  17 ++
 ...0d934b9afc6dccc5fc77454fbe45365bdf429.json |  20 ++
 ...86e8917cfab9679d5064074681663ba467e41.json |  22 ++
 .../internal/moderation/tech_review/rules.rs  |  14 +-
 .../moderation/tech_review/rules_scan.rs      | 193 +++++++++++++++---
 .../api-client/src/modules/labrinth/types.ts  |  14 +-
 packages/delphi-cel-experiment/Cargo.toml     |  10 -
 packages/delphi-cel-experiment/src/main.rs    | 174 ----------------
 31 files changed, 577 insertions(+), 275 deletions(-)
 create mode 100644 apps/labrinth/.sqlx/query-0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c.json
 create mode 100644 apps/labrinth/.sqlx/query-0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021.json
 create mode 100644 apps/labrinth/.sqlx/query-182be4110f45b6be6a9174200a07a887cebbaeab0a8c1da8b008e0c5e94fbc4e.json
 create mode 100644 apps/labrinth/.sqlx/query-1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286.json
 create mode 100644 apps/labrinth/.sqlx/query-20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4.json
 create mode 100644 apps/labrinth/.sqlx/query-329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d.json
 create mode 100644 apps/labrinth/.sqlx/query-38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec.json
 delete mode 100644 apps/labrinth/.sqlx/query-3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808.json
 create mode 100644 apps/labrinth/.sqlx/query-5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81.json
 create mode 100644 apps/labrinth/.sqlx/query-6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850.json
 create mode 100644 apps/labrinth/.sqlx/query-66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2.json
 create mode 100644 apps/labrinth/.sqlx/query-69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8.json
 rename apps/labrinth/.sqlx/{query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json => query-7e7e2e9f67158b94eb62834cbfd65fd5165d02ebcc0f8454554cbd870e4ddb42.json} (51%)
 rename apps/labrinth/.sqlx/{query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json => query-8537362d9c11e437ada9ce97bb604666378d1d24981ab8113badded16fb63413.json} (51%)
 create mode 100644 apps/labrinth/.sqlx/query-8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7.json
 rename apps/labrinth/.sqlx/{query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json => query-b536d7870ba77ace55e309938c3ba93c7016b2a6f18aa4f22ea57f604d82c1da.json} (50%)
 create mode 100644 apps/labrinth/.sqlx/query-b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3.json
 create mode 100644 apps/labrinth/.sqlx/query-c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7.json
 create mode 100644 apps/labrinth/.sqlx/query-cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9.json
 create mode 100644 apps/labrinth/.sqlx/query-cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02.json
 create mode 100644 apps/labrinth/.sqlx/query-cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606.json
 create mode 100644 apps/labrinth/.sqlx/query-fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429.json
 create mode 100644 apps/labrinth/.sqlx/query-fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41.json
 delete mode 100644 packages/delphi-cel-experiment/Cargo.toml
 delete mode 100644 packages/delphi-cel-experiment/src/main.rs

diff --git a/Cargo.lock b/Cargo.lock
index feb4429c6e..becdde6fa4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2909,15 +2909,6 @@ version = "0.1.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "26bf8fc351c5ed29b5c2f0cbbac1b209b74f60ecd62e675a998df72c49af5204"
 
-[[package]]
-name = "delphi-cel-experiment"
-version = "0.1.0"
-dependencies = [
- "cel",
- "serde",
- "serde_json",
-]
-
 [[package]]
 name = "der"
 version = "0.7.10"
diff --git a/Cargo.toml b/Cargo.toml
index f6952a2d5b..916ad271a5 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -8,7 +8,6 @@ members = [
   "packages/app-lib",
   "packages/ariadne",
   "packages/daedalus",
-  "packages/delphi-cel-experiment",
   "packages/labrinth-derive",
   "packages/modrinth-content-management",
   "packages/modrinth-log",
diff --git a/apps/frontend/src/pages/moderation/technical-review/rules.vue b/apps/frontend/src/pages/moderation/technical-review/rules.vue
index fbc86e94c5..ef158e1b01 100644
--- a/apps/frontend/src/pages/moderation/technical-review/rules.vue
+++ b/apps/frontend/src/pages/moderation/technical-review/rules.vue
@@ -461,10 +461,16 @@ const TEST_INPUTS: Labrinth.TechReview.Internal.RuleInput[] = [
 				sha512: 'fedcba9876543210',
 			},
 		},
-		scope: {
-			project_id: 'example-project',
-			version_id: 'example-version',
-			file_id: 'example-file',
+		project: {
+			id: 'example-project',
+			types: ['mod'],
+		},
+		version: {
+			id: 'example-version',
+			loaders: ['fabric'],
+		},
+		file: {
+			id: 'example-file',
 		},
 	},
 	{
@@ -489,10 +495,16 @@ const TEST_INPUTS: Labrinth.TechReview.Internal.RuleInput[] = [
 				sha512: '0123456789abcdef',
 			},
 		},
-		scope: {
-			project_id: 'telemetry-project',
-			version_id: 'telemetry-version',
-			file_id: 'telemetry-file',
+		project: {
+			id: 'telemetry-project',
+			types: ['mod'],
+		},
+		version: {
+			id: 'telemetry-version',
+			loaders: ['neoforge'],
+		},
+		file: {
+			id: 'telemetry-file',
 		},
 	},
 ]
diff --git a/apps/labrinth/.sqlx/query-0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c.json b/apps/labrinth/.sqlx/query-0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c.json
new file mode 100644
index 0000000000..4bc87e73a5
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT COUNT(*) FROM payouts_values_notifications WHERE notified = FALSE AND user_id = $1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "count",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "0f3d943e4fc48a94363b77c8a7d36eb1dd626e77331d8278c406df952691be4c"
+}
diff --git a/apps/labrinth/.sqlx/query-0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021.json b/apps/labrinth/.sqlx/query-0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021.json
new file mode 100644
index 0000000000..c8a82d60ef
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n                INSERT INTO users (id, username, email, role)\n                VALUES\n                    (1000, 'userland', 'userland@modrinth.com', 'developer'),\n                    (1001, 'useful', 'useful@modrinth.com', 'developer'),\n                    (1002, 'Useless', 'useless@modrinth.com', 'developer')\n                ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "0ffebf149d50149d0c128478e6267a2296efc16763cdbd5d8c295a1a7ca08021"
+}
diff --git a/apps/labrinth/.sqlx/query-182be4110f45b6be6a9174200a07a887cebbaeab0a8c1da8b008e0c5e94fbc4e.json b/apps/labrinth/.sqlx/query-182be4110f45b6be6a9174200a07a887cebbaeab0a8c1da8b008e0c5e94fbc4e.json
new file mode 100644
index 0000000000..5e057dc995
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-182be4110f45b6be6a9174200a07a887cebbaeab0a8c1da8b008e0c5e94fbc4e.json
@@ -0,0 +1,32 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT id AS \"id!: DelphiRuleId\", name, rule\n        FROM delphi_rules\n        WHERE NOT delete_on_next_revision\n        ORDER BY priority DESC, id\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id!: DelphiRuleId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "name",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 2,
+        "name": "rule",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "182be4110f45b6be6a9174200a07a887cebbaeab0a8c1da8b008e0c5e94fbc4e"
+}
diff --git a/apps/labrinth/.sqlx/query-1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286.json b/apps/labrinth/.sqlx/query-1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286.json
new file mode 100644
index 0000000000..921f7f92d9
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286.json
@@ -0,0 +1,26 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n                SELECT\n                    id,\n                    status AS \"status: PayoutStatus\"\n                FROM payouts\n                ORDER BY id\n                ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "status: PayoutStatus",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "1adbd24d815107e13bc1440c7a8f4eeff66ab4165a9f4980032e114db4dc1286"
+}
diff --git a/apps/labrinth/.sqlx/query-20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4.json b/apps/labrinth/.sqlx/query-20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4.json
new file mode 100644
index 0000000000..3c99ff3fed
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT COUNT(*) FROM payouts_values_notifications WHERE notified = FALSE",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "count",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "20cff8fdf7971e91c9d473b9a4663ce02ca16781e32232ae0fa7a0af1973d3a4"
+}
diff --git a/apps/labrinth/.sqlx/query-329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d.json b/apps/labrinth/.sqlx/query-329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d.json
new file mode 100644
index 0000000000..2731d395ff
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE mods SET status = 'processing' WHERE id = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "329c009635ad2a4c214da2f4651b8c14fe329deac983bc2f43ba74e066f9cf8d"
+}
diff --git a/apps/labrinth/.sqlx/query-38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec.json b/apps/labrinth/.sqlx/query-38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec.json
new file mode 100644
index 0000000000..815e7795ec
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n                INSERT INTO users (id, username, email, role)\n                VALUES (2100, 'prefix_under_score', 'prefix_under_score@modrinth.com', 'developer')\n                ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "38ace0abad724d1111b79a72c7c8518f1272690ce7766dbdc41ec1e98f7f1fec"
+}
diff --git a/apps/labrinth/.sqlx/query-3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808.json b/apps/labrinth/.sqlx/query-3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808.json
deleted file mode 100644
index bf96272e15..0000000000
--- a/apps/labrinth/.sqlx/query-3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808.json
+++ /dev/null
@@ -1,26 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        SELECT id AS \"id!: DelphiRuleId\", rule\n        FROM delphi_rules\n        WHERE NOT delete_on_next_revision\n        ORDER BY priority DESC, id\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id!: DelphiRuleId",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "rule",
-        "type_info": "Varchar"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      false,
-      false
-    ]
-  },
-  "hash": "3f1aaeed6e394294fa32da7e7f83765fb64bd9499a796470d544466886e1a808"
-}
diff --git a/apps/labrinth/.sqlx/query-5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81.json b/apps/labrinth/.sqlx/query-5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81.json
new file mode 100644
index 0000000000..55ba902620
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n                    INSERT INTO users (id, username, email, role)\n                    VALUES ($1, $2, $3, 'developer')\n                    ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Varchar",
+        "Varchar"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "5cb65218a2a4a7343130d838f8a78df08d25844f1019d539712b0cb686e4ae81"
+}
diff --git a/apps/labrinth/.sqlx/query-6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850.json b/apps/labrinth/.sqlx/query-6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850.json
new file mode 100644
index 0000000000..b4c2e5a56e
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO payouts_values_notifications (date_available, user_id, notified)\n                 VALUES ($1, $2, FALSE)\n                 ON CONFLICT (date_available, user_id) DO NOTHING",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Timestamptz",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "6678cd4c51771cfaae2be8021ba66908ea41a06ba858dc5b523aef6aae27b850"
+}
diff --git a/apps/labrinth/.sqlx/query-66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2.json b/apps/labrinth/.sqlx/query-66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2.json
new file mode 100644
index 0000000000..5d509fdf07
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "CREATE SCHEMA public;",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "66868d0b35229abffa3f668eaef19dc0cdef502935dd5939a2f3ab89b0766ad2"
+}
diff --git a/apps/labrinth/.sqlx/query-69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8.json b/apps/labrinth/.sqlx/query-69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8.json
new file mode 100644
index 0000000000..fc7d2ac98d
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO payouts_values (user_id, mod_id, amount, created, date_available)\n                 VALUES ($1, NULL, $2, NOW(), $3)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Numeric",
+        "Timestamptz"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "69a1cb4b7f1115a990d1fc4805d58541fc78e910111c09ba3d50a12d9ca4a9f8"
+}
diff --git a/apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json b/apps/labrinth/.sqlx/query-7e7e2e9f67158b94eb62834cbfd65fd5165d02ebcc0f8454554cbd870e4ddb42.json
similarity index 51%
rename from apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json
rename to apps/labrinth/.sqlx/query-7e7e2e9f67158b94eb62834cbfd65fd5165d02ebcc0f8454554cbd870e4ddb42.json
index 8fc73132b8..14a9377c81 100644
--- a/apps/labrinth/.sqlx/query-868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9.json
+++ b/apps/labrinth/.sqlx/query-7e7e2e9f67158b94eb62834cbfd65fd5165d02ebcc0f8454554cbd870e4ddb42.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            detail.id,\n            detail.key,\n            issue.issue_type,\n            detail.severity AS \"severity: DelphiSeverity\",\n            detail.jar,\n            detail.file_path,\n            detail.data AS \"data: Json<HashMap<String, serde_json::Value>>\",\n            report.delphi_version,\n            file.size AS \"size?\",\n            file.id AS \"file_id?\",\n            version.id AS \"version_id?\",\n            version.mod_id AS \"project_id?\",\n            COALESCE(file_hashes.hashes, '{}'::jsonb)\n                AS \"hashes!: Json<BTreeMap<String, String>>\"\n        FROM delphi_report_issue_details detail\n        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n        INNER JOIN delphi_reports report ON report.id = issue.report_id\n        LEFT JOIN files file ON file.id = report.file_id\n        LEFT JOIN versions version ON version.id = file.version_id\n        LEFT JOIN LATERAL (\n            SELECT\n                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes\n            FROM hashes\n            WHERE hashes.file_id = file.id\n        ) file_hashes ON TRUE\n        WHERE detail.id = ANY($1::bigint[])\n        ORDER BY detail.id\n        ",
+  "query": "\n        SELECT\n            detail.id,\n            detail.key,\n            issue.issue_type,\n            detail.severity AS \"severity: DelphiSeverity\",\n            detail.jar,\n            detail.file_path,\n            detail.data AS \"data: Json<HashMap<String, serde_json::Value>>\",\n            report.delphi_version,\n            file.size AS \"size?\",\n            file.id AS \"file_id?\",\n            version.id AS \"version_id?\",\n            version.mod_id AS \"project_id?\",\n            COALESCE(version_metadata.project_types, ARRAY[]::text[])\n                AS \"project_types!: Vec<String>\",\n            COALESCE(version_metadata.loaders, ARRAY[]::text[])\n                AS \"loaders!: Vec<String>\",\n            COALESCE(file_hashes.hashes, '{}'::jsonb)\n                AS \"hashes!: Json<BTreeMap<String, String>>\"\n        FROM delphi_report_issue_details detail\n        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n        INNER JOIN delphi_reports report ON report.id = issue.report_id\n        LEFT JOIN files file ON file.id = report.file_id\n        LEFT JOIN versions version ON version.id = file.version_id\n        LEFT JOIN LATERAL (\n            SELECT\n                ARRAY_AGG(\n                    DISTINCT project_type.name::text\n                    ORDER BY project_type.name::text\n                ) FILTER (WHERE project_type.name IS NOT NULL)\n                    AS project_types,\n                ARRAY_AGG(\n                    DISTINCT loader.loader\n                    ORDER BY loader.loader\n                ) AS loaders\n            FROM loaders_versions loader_version\n            INNER JOIN loaders loader\n                ON loader.id = loader_version.loader_id\n            LEFT JOIN loaders_project_types loader_project_type\n                ON loader_project_type.joining_loader_id = loader_version.loader_id\n            LEFT JOIN project_types project_type\n                ON project_type.id = loader_project_type.joining_project_type_id\n            WHERE loader_version.version_id = version.id\n        ) version_metadata ON TRUE\n        LEFT JOIN LATERAL (\n            SELECT\n                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes\n            FROM hashes\n            WHERE hashes.file_id = file.id\n        ) file_hashes ON TRUE\n        WHERE detail.id = ANY($1::bigint[])\n        ORDER BY detail.id\n        ",
   "describe": {
     "columns": [
       {
@@ -79,6 +79,16 @@
       },
       {
         "ordinal": 12,
+        "name": "project_types!: Vec<String>",
+        "type_info": "TextArray"
+      },
+      {
+        "ordinal": 13,
+        "name": "loaders!: Vec<String>",
+        "type_info": "VarcharArray"
+      },
+      {
+        "ordinal": 14,
         "name": "hashes!: Json<BTreeMap<String, String>>",
         "type_info": "Jsonb"
       }
@@ -101,8 +111,10 @@
       true,
       true,
       true,
+      null,
+      null,
       null
     ]
   },
-  "hash": "868d19328921b9a3bd56fa9354e5e75d09c76a3eb3ed9c89b05b9aab13505bf9"
+  "hash": "7e7e2e9f67158b94eb62834cbfd65fd5165d02ebcc0f8454554cbd870e4ddb42"
 }
diff --git a/apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json b/apps/labrinth/.sqlx/query-8537362d9c11e437ada9ce97bb604666378d1d24981ab8113badded16fb63413.json
similarity index 51%
rename from apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json
rename to apps/labrinth/.sqlx/query-8537362d9c11e437ada9ce97bb604666378d1d24981ab8113badded16fb63413.json
index 3e24779308..1102be54f7 100644
--- a/apps/labrinth/.sqlx/query-2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb.json
+++ b/apps/labrinth/.sqlx/query-8537362d9c11e437ada9ce97bb604666378d1d24981ab8113badded16fb63413.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            detail.id,\n            detail.key,\n            issue.issue_type,\n            detail.severity AS \"severity: DelphiSeverity\",\n            detail.jar,\n            detail.file_path,\n            detail.data AS \"data: Json<HashMap<String, serde_json::Value>>\",\n            report.delphi_version,\n            file.size AS \"size?\",\n            file.id AS \"file_id?\",\n            version.id AS \"version_id?\",\n            version.mod_id AS \"project_id?\",\n            COALESCE(file_hashes.hashes, '{}'::jsonb)\n                AS \"hashes!: Json<BTreeMap<String, String>>\"\n        FROM delphi_report_issue_details detail\n        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n        INNER JOIN delphi_reports report ON report.id = issue.report_id\n        LEFT JOIN files file ON file.id = report.file_id\n        LEFT JOIN versions version ON version.id = file.version_id\n        LEFT JOIN (\n            SELECT\n                file_id,\n                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes\n            FROM hashes\n            GROUP BY file_id\n        ) file_hashes ON file_hashes.file_id = file.id\n        ORDER BY detail.id\n        ",
+  "query": "\n        SELECT\n            detail.id,\n            detail.key,\n            issue.issue_type,\n            detail.severity AS \"severity: DelphiSeverity\",\n            detail.jar,\n            detail.file_path,\n            detail.data AS \"data: Json<HashMap<String, serde_json::Value>>\",\n            report.delphi_version,\n            file.size AS \"size?\",\n            file.id AS \"file_id?\",\n            version.id AS \"version_id?\",\n            version.mod_id AS \"project_id?\",\n            COALESCE(version_metadata.project_types, ARRAY[]::text[])\n                AS \"project_types!: Vec<String>\",\n            COALESCE(version_metadata.loaders, ARRAY[]::text[])\n                AS \"loaders!: Vec<String>\",\n            COALESCE(file_hashes.hashes, '{}'::jsonb)\n                AS \"hashes!: Json<BTreeMap<String, String>>\"\n        FROM delphi_report_issue_details detail\n        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n        INNER JOIN delphi_reports report ON report.id = issue.report_id\n        LEFT JOIN files file ON file.id = report.file_id\n        LEFT JOIN versions version ON version.id = file.version_id\n        LEFT JOIN (\n            SELECT\n                loader_version.version_id,\n                ARRAY_AGG(\n                    DISTINCT project_type.name::text\n                    ORDER BY project_type.name::text\n                ) FILTER (WHERE project_type.name IS NOT NULL)\n                    AS project_types,\n                ARRAY_AGG(\n                    DISTINCT loader.loader\n                    ORDER BY loader.loader\n                ) AS loaders\n            FROM loaders_versions loader_version\n            INNER JOIN loaders loader\n                ON loader.id = loader_version.loader_id\n            LEFT JOIN loaders_project_types loader_project_type\n                ON loader_project_type.joining_loader_id = loader_version.loader_id\n            LEFT JOIN project_types project_type\n                ON project_type.id = loader_project_type.joining_project_type_id\n            GROUP BY loader_version.version_id\n        ) version_metadata\n            ON version_metadata.version_id = version.id\n        LEFT JOIN (\n            SELECT\n                file_id,\n                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes\n            FROM hashes\n            GROUP BY file_id\n        ) file_hashes ON file_hashes.file_id = file.id\n        ORDER BY detail.id\n        ",
   "describe": {
     "columns": [
       {
@@ -79,6 +79,16 @@
       },
       {
         "ordinal": 12,
+        "name": "project_types!: Vec<String>",
+        "type_info": "TextArray"
+      },
+      {
+        "ordinal": 13,
+        "name": "loaders!: Vec<String>",
+        "type_info": "VarcharArray"
+      },
+      {
+        "ordinal": 14,
         "name": "hashes!: Json<BTreeMap<String, String>>",
         "type_info": "Jsonb"
       }
@@ -99,8 +109,10 @@
       false,
       false,
       false,
+      null,
+      null,
       null
     ]
   },
-  "hash": "2fb03e1de120cf921146b6dbd35691117412407c4225f966c013fdfef21a82fb"
+  "hash": "8537362d9c11e437ada9ce97bb604666378d1d24981ab8113badded16fb63413"
 }
diff --git a/apps/labrinth/.sqlx/query-8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7.json b/apps/labrinth/.sqlx/query-8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7.json
new file mode 100644
index 0000000000..444f57bf3b
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE moderation_locks SET locked_at = NOW() - ($1::bigint * INTERVAL '1 minute') - INTERVAL '1 second' WHERE project_id = $2",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "8ca7f46618bd72cfd5fe1f246d41a31da1885cc22bb61be6853950ba52be9aa7"
+}
diff --git a/apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json b/apps/labrinth/.sqlx/query-b536d7870ba77ace55e309938c3ba93c7016b2a6f18aa4f22ea57f604d82c1da.json
similarity index 50%
rename from apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json
rename to apps/labrinth/.sqlx/query-b536d7870ba77ace55e309938c3ba93c7016b2a6f18aa4f22ea57f604d82c1da.json
index 66ae4f6a27..1d7013755a 100644
--- a/apps/labrinth/.sqlx/query-1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d.json
+++ b/apps/labrinth/.sqlx/query-b536d7870ba77ace55e309938c3ba93c7016b2a6f18aa4f22ea57f604d82c1da.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            detail.key,\n            issue.issue_type,\n            detail.severity AS \"severity: DelphiSeverity\",\n            detail.jar,\n            detail.file_path,\n            detail.data AS \"data: Json<HashMap<String, serde_json::Value>>\",\n            report.delphi_version,\n            file.size AS \"size?\",\n            file.id AS \"file_id?\",\n            version.id AS \"version_id?\",\n            version.mod_id AS \"project_id?\",\n            COALESCE(file_hashes.hashes, '{}'::jsonb)\n                AS \"hashes!: Json<BTreeMap<String, String>>\"\n        FROM delphi_report_issue_details detail\n        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n        INNER JOIN delphi_reports report ON report.id = issue.report_id\n        LEFT JOIN files file ON file.id = report.file_id\n        LEFT JOIN versions version ON version.id = file.version_id\n        LEFT JOIN LATERAL (\n            SELECT\n                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes\n            FROM hashes\n            WHERE hashes.file_id = file.id\n        ) file_hashes ON TRUE\n        WHERE detail.id = $1\n        ",
+  "query": "\n        SELECT\n            detail.key,\n            issue.issue_type,\n            detail.severity AS \"severity: DelphiSeverity\",\n            detail.jar,\n            detail.file_path,\n            detail.data AS \"data: Json<HashMap<String, serde_json::Value>>\",\n            report.delphi_version,\n            file.size AS \"size?\",\n            file.id AS \"file_id?\",\n            version.id AS \"version_id?\",\n            version.mod_id AS \"project_id?\",\n            COALESCE(version_metadata.project_types, ARRAY[]::text[])\n                AS \"project_types!: Vec<String>\",\n            COALESCE(version_metadata.loaders, ARRAY[]::text[])\n                AS \"loaders!: Vec<String>\",\n            COALESCE(file_hashes.hashes, '{}'::jsonb)\n                AS \"hashes!: Json<BTreeMap<String, String>>\"\n        FROM delphi_report_issue_details detail\n        INNER JOIN delphi_report_issues issue ON issue.id = detail.issue_id\n        INNER JOIN delphi_reports report ON report.id = issue.report_id\n        LEFT JOIN files file ON file.id = report.file_id\n        LEFT JOIN versions version ON version.id = file.version_id\n        LEFT JOIN LATERAL (\n            SELECT\n                ARRAY_AGG(\n                    DISTINCT project_type.name::text\n                    ORDER BY project_type.name::text\n                ) FILTER (WHERE project_type.name IS NOT NULL)\n                    AS project_types,\n                ARRAY_AGG(\n                    DISTINCT loader.loader\n                    ORDER BY loader.loader\n                ) AS loaders\n            FROM loaders_versions loader_version\n            INNER JOIN loaders loader\n                ON loader.id = loader_version.loader_id\n            LEFT JOIN loaders_project_types loader_project_type\n                ON loader_project_type.joining_loader_id = loader_version.loader_id\n            LEFT JOIN project_types project_type\n                ON project_type.id = loader_project_type.joining_project_type_id\n            WHERE loader_version.version_id = version.id\n        ) version_metadata ON TRUE\n        LEFT JOIN LATERAL (\n            SELECT\n                jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes\n            FROM hashes\n            WHERE hashes.file_id = file.id\n        ) file_hashes ON TRUE\n        WHERE detail.id = $1\n        ",
   "describe": {
     "columns": [
       {
@@ -74,6 +74,16 @@
       },
       {
         "ordinal": 11,
+        "name": "project_types!: Vec<String>",
+        "type_info": "TextArray"
+      },
+      {
+        "ordinal": 12,
+        "name": "loaders!: Vec<String>",
+        "type_info": "VarcharArray"
+      },
+      {
+        "ordinal": 13,
         "name": "hashes!: Json<BTreeMap<String, String>>",
         "type_info": "Jsonb"
       }
@@ -95,8 +105,10 @@
       false,
       false,
       false,
+      null,
+      null,
       null
     ]
   },
-  "hash": "1f318b0dda5aaf58b9e403f87fcacfcd223bd67f6d5ba95868ace4373a98c67d"
+  "hash": "b536d7870ba77ace55e309938c3ba93c7016b2a6f18aa4f22ea57f604d82c1da"
 }
diff --git a/apps/labrinth/.sqlx/query-b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3.json b/apps/labrinth/.sqlx/query-b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3.json
new file mode 100644
index 0000000000..89bd8147dc
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT status AS \"status: PayoutStatus\" FROM payouts WHERE id = 1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "status: PayoutStatus",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "b92b5bb7d179c4fcdbc45600ccfd2402f52fea71e27b08e7926fcc2a9e62c0f3"
+}
diff --git a/apps/labrinth/.sqlx/query-c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7.json b/apps/labrinth/.sqlx/query-c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7.json
new file mode 100644
index 0000000000..f245ea1c8a
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DROP SCHEMA public CASCADE;",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "c65295f61b18f7be4fdf30b3e2c2c36b9db3770508be4acbb6b441ed8006d9c7"
+}
diff --git a/apps/labrinth/.sqlx/query-cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9.json b/apps/labrinth/.sqlx/query-cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9.json
new file mode 100644
index 0000000000..39215aaedc
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE users SET email_verified = TRUE WHERE id = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "cb626a36deffd73e67de2dc4789bd875675779a173fb2cd41ba365c1acca96f9"
+}
diff --git a/apps/labrinth/.sqlx/query-cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02.json b/apps/labrinth/.sqlx/query-cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02.json
new file mode 100644
index 0000000000..469c30168a
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02.json
@@ -0,0 +1,18 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n                INSERT INTO payouts (id, method, platform_id, status, user_id, amount, created)\n                VALUES ($1, $2, $3, $4, $5, 10.0, NOW())\n                ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Text",
+        "Text",
+        "Varchar",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "cd5ccd618fb3cc41646a6de86f9afedb074492b4ec7f2457c14113f5fd13aa02"
+}
diff --git a/apps/labrinth/.sqlx/query-cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606.json b/apps/labrinth/.sqlx/query-cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606.json
new file mode 100644
index 0000000000..52e020ebf2
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606.json
@@ -0,0 +1,17 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n                    INSERT INTO payouts (id, method, platform_id, status, user_id, amount, created)\n                    VALUES ($1, $2, NULL, $3, $4, 10.00, NOW())\n                    ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Text",
+        "Varchar",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "cec4240c7c848988b3dfd13e3f8e5c93783c7641b019fdb698a1ec0be1393606"
+}
diff --git a/apps/labrinth/.sqlx/query-fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429.json b/apps/labrinth/.sqlx/query-fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429.json
new file mode 100644
index 0000000000..006563f450
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT pg_advisory_unlock(1)",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "pg_advisory_unlock",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "fabba52b34e14196b6305671c060d934b9afc6dccc5fc77454fbe45365bdf429"
+}
diff --git a/apps/labrinth/.sqlx/query-fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41.json b/apps/labrinth/.sqlx/query-fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41.json
new file mode 100644
index 0000000000..d3e3520bcc
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT COUNT(*) FROM notifications WHERE user_id = $1 AND body->>'type' = 'payout_available'",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "count",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "fd5c773a61d35bcd71503ec4d5f86e8917cfab9679d5064074681663ba467e41"
+}
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
index 0021847bd9..a721937b1e 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules.rs
@@ -158,8 +158,9 @@ pub async fn test_rule(
     })?;
 
     let rule = request.rule;
+    let expression = rule.clone();
     let program =
-        tokio::task::spawn_blocking(move || cel::Program::compile(&rule))
+        tokio::task::spawn_blocking(move || cel::Program::compile(&expression))
             .await
             .wrap_internal_err("failed to join cel compilation task")?
             .map_err(|error| {
@@ -168,12 +169,11 @@ pub async fn test_rule(
     let mut effects = Vec::with_capacity(request.inputs.len());
 
     for (index, input) in request.inputs.iter().enumerate() {
-        let effect = super::rules_scan::evaluate_rule(&program, input)
-            .map_err(|error| {
-                ApiError::Request(eyre!(
-                    "failed to evaluate test input {index}: {error}"
-                ))
-            })?;
+        let evaluation =
+            super::rules_scan::evaluate_rule(&program, &rule, input);
+        let effect = evaluation.wrap_request_err(format!(
+            "failed to evaluate test input {index}"
+        ))?;
         effects.push(effect);
     }
 
diff --git a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
index ed39d82193..a0317f383c 100644
--- a/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
+++ b/apps/labrinth/src/routes/internal/moderation/tech_review/rules_scan.rs
@@ -58,7 +58,9 @@ pub struct RuleInput {
     pub trace: RuleTrace,
     pub scan: RuleScan,
     pub artifact: RuleArtifact,
-    pub scope: RuleScope,
+    pub project: RuleProject,
+    pub version: RuleVersion,
+    pub file: RuleFile,
 }
 
 #[derive(Deserialize, Serialize, utoipa::ToSchema)]
@@ -83,14 +85,26 @@ pub struct RuleArtifact {
 }
 
 #[derive(Deserialize, Serialize, utoipa::ToSchema)]
-pub struct RuleScope {
-    pub project_id: Option<String>,
-    pub version_id: Option<String>,
-    pub file_id: Option<String>,
+pub struct RuleProject {
+    pub id: Option<String>,
+    pub types: Vec<String>,
+}
+
+#[derive(Deserialize, Serialize, utoipa::ToSchema)]
+pub struct RuleVersion {
+    pub id: Option<String>,
+    pub loaders: Vec<String>,
+}
+
+#[derive(Deserialize, Serialize, utoipa::ToSchema)]
+pub struct RuleFile {
+    pub id: Option<String>,
 }
 
 struct CompiledRule {
     id: DelphiRuleId,
+    name: String,
+    expression: String,
     program: cel::Program,
 }
 
@@ -197,6 +211,10 @@ pub async fn get_detail_rule_input(
             file.id AS "file_id?",
             version.id AS "version_id?",
             version.mod_id AS "project_id?",
+            COALESCE(version_metadata.project_types, ARRAY[]::text[])
+                AS "project_types!: Vec<String>",
+            COALESCE(version_metadata.loaders, ARRAY[]::text[])
+                AS "loaders!: Vec<String>",
             COALESCE(file_hashes.hashes, '{}'::jsonb)
                 AS "hashes!: Json<BTreeMap<String, String>>"
         FROM delphi_report_issue_details detail
@@ -204,6 +222,26 @@ pub async fn get_detail_rule_input(
         INNER JOIN delphi_reports report ON report.id = issue.report_id
         LEFT JOIN files file ON file.id = report.file_id
         LEFT JOIN versions version ON version.id = file.version_id
+        LEFT JOIN LATERAL (
+            SELECT
+                ARRAY_AGG(
+                    DISTINCT project_type.name::text
+                    ORDER BY project_type.name::text
+                ) FILTER (WHERE project_type.name IS NOT NULL)
+                    AS project_types,
+                ARRAY_AGG(
+                    DISTINCT loader.loader
+                    ORDER BY loader.loader
+                ) AS loaders
+            FROM loaders_versions loader_version
+            INNER JOIN loaders loader
+                ON loader.id = loader_version.loader_id
+            LEFT JOIN loaders_project_types loader_project_type
+                ON loader_project_type.joining_loader_id = loader_version.loader_id
+            LEFT JOIN project_types project_type
+                ON project_type.id = loader_project_type.joining_project_type_id
+            WHERE loader_version.version_id = version.id
+        ) version_metadata ON TRUE
         LEFT JOIN LATERAL (
             SELECT
                 jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes
@@ -237,10 +275,16 @@ pub async fn get_detail_rule_input(
             size: detail.size,
             hashes: detail.hashes.0,
         },
-        scope: RuleScope {
-            project_id: detail.project_id.map(|id| to_base62(id as u64)),
-            version_id: detail.version_id.map(|id| to_base62(id as u64)),
-            file_id: detail.file_id.map(|id| to_base62(id as u64)),
+        project: RuleProject {
+            id: detail.project_id.map(|id| to_base62(id as u64)),
+            types: detail.project_types,
+        },
+        version: RuleVersion {
+            id: detail.version_id.map(|id| to_base62(id as u64)),
+            loaders: detail.loaders,
+        },
+        file: RuleFile {
+            id: detail.file_id.map(|id| to_base62(id as u64)),
         },
     }))
 }
@@ -331,7 +375,7 @@ pub async fn scan_rules(
             }
             Err(error) => {
                 tracing::error!(error = ?error, "delphi rule scan failed");
-                let message = error.to_string();
+                let message = format!("{error:#}");
                 let event = RuleScanErrorEvent { message: &message };
                 if let Ok(data) = serde_json::to_string(&event) {
                     let _ = sender.send(Bytes::from(format!(
@@ -402,6 +446,10 @@ async fn run_scan(
             file.id AS "file_id?",
             version.id AS "version_id?",
             version.mod_id AS "project_id?",
+            COALESCE(version_metadata.project_types, ARRAY[]::text[])
+                AS "project_types!: Vec<String>",
+            COALESCE(version_metadata.loaders, ARRAY[]::text[])
+                AS "loaders!: Vec<String>",
             COALESCE(file_hashes.hashes, '{}'::jsonb)
                 AS "hashes!: Json<BTreeMap<String, String>>"
         FROM delphi_report_issue_details detail
@@ -409,6 +457,28 @@ async fn run_scan(
         INNER JOIN delphi_reports report ON report.id = issue.report_id
         LEFT JOIN files file ON file.id = report.file_id
         LEFT JOIN versions version ON version.id = file.version_id
+        LEFT JOIN (
+            SELECT
+                loader_version.version_id,
+                ARRAY_AGG(
+                    DISTINCT project_type.name::text
+                    ORDER BY project_type.name::text
+                ) FILTER (WHERE project_type.name IS NOT NULL)
+                    AS project_types,
+                ARRAY_AGG(
+                    DISTINCT loader.loader
+                    ORDER BY loader.loader
+                ) AS loaders
+            FROM loaders_versions loader_version
+            INNER JOIN loaders loader
+                ON loader.id = loader_version.loader_id
+            LEFT JOIN loaders_project_types loader_project_type
+                ON loader_project_type.joining_loader_id = loader_version.loader_id
+            LEFT JOIN project_types project_type
+                ON project_type.id = loader_project_type.joining_project_type_id
+            GROUP BY loader_version.version_id
+        ) version_metadata
+            ON version_metadata.version_id = version.id
         LEFT JOIN (
             SELECT
                 file_id,
@@ -458,19 +528,29 @@ async fn run_scan(
                 size: detail.size,
                 hashes: detail.hashes.0,
             },
-            scope: RuleScope {
-                project_id: detail.project_id.map(|id| to_base62(id as u64)),
-                version_id: detail.version_id.map(|id| to_base62(id as u64)),
-                file_id: detail.file_id.map(|id| to_base62(id as u64)),
+            project: RuleProject {
+                id: detail.project_id.map(|id| to_base62(id as u64)),
+                types: detail.project_types,
+            },
+            version: RuleVersion {
+                id: detail.version_id.map(|id| to_base62(id as u64)),
+                loaders: detail.loaders,
+            },
+            file: RuleFile {
+                id: detail.file_id.map(|id| to_base62(id as u64)),
             },
         };
 
         for rule in &rules {
-            let effect = evaluate_rule(&rule.program, &input)
+            let effect = evaluate_rule(
+                &rule.program,
+                &rule.expression,
+                &input,
+            )
                 .wrap_err_with(|| {
                     format!(
-                        "failed to evaluate delphi rule {} for detail {detail_id}",
-                        rule.id.0
+                        "failed to evaluate delphi rule '{}' for detail {detail_id}",
+                        rule.name
                     )
                 })?;
             if let Some(effect) = effect {
@@ -642,6 +722,10 @@ pub(crate) async fn materialize_current_rule_effects(
             file.id AS "file_id?",
             version.id AS "version_id?",
             version.mod_id AS "project_id?",
+            COALESCE(version_metadata.project_types, ARRAY[]::text[])
+                AS "project_types!: Vec<String>",
+            COALESCE(version_metadata.loaders, ARRAY[]::text[])
+                AS "loaders!: Vec<String>",
             COALESCE(file_hashes.hashes, '{}'::jsonb)
                 AS "hashes!: Json<BTreeMap<String, String>>"
         FROM delphi_report_issue_details detail
@@ -649,6 +733,26 @@ pub(crate) async fn materialize_current_rule_effects(
         INNER JOIN delphi_reports report ON report.id = issue.report_id
         LEFT JOIN files file ON file.id = report.file_id
         LEFT JOIN versions version ON version.id = file.version_id
+        LEFT JOIN LATERAL (
+            SELECT
+                ARRAY_AGG(
+                    DISTINCT project_type.name::text
+                    ORDER BY project_type.name::text
+                ) FILTER (WHERE project_type.name IS NOT NULL)
+                    AS project_types,
+                ARRAY_AGG(
+                    DISTINCT loader.loader
+                    ORDER BY loader.loader
+                ) AS loaders
+            FROM loaders_versions loader_version
+            INNER JOIN loaders loader
+                ON loader.id = loader_version.loader_id
+            LEFT JOIN loaders_project_types loader_project_type
+                ON loader_project_type.joining_loader_id = loader_version.loader_id
+            LEFT JOIN project_types project_type
+                ON project_type.id = loader_project_type.joining_project_type_id
+            WHERE loader_version.version_id = version.id
+        ) version_metadata ON TRUE
         LEFT JOIN LATERAL (
             SELECT
                 jsonb_object_agg(algorithm, encode(hash, 'hex')) AS hashes
@@ -683,19 +787,25 @@ pub(crate) async fn materialize_current_rule_effects(
                 size: detail.size,
                 hashes: detail.hashes.0,
             },
-            scope: RuleScope {
-                project_id: detail.project_id.map(|id| to_base62(id as u64)),
-                version_id: detail.version_id.map(|id| to_base62(id as u64)),
-                file_id: detail.file_id.map(|id| to_base62(id as u64)),
+            project: RuleProject {
+                id: detail.project_id.map(|id| to_base62(id as u64)),
+                types: detail.project_types,
+            },
+            version: RuleVersion {
+                id: detail.version_id.map(|id| to_base62(id as u64)),
+                loaders: detail.loaders,
+            },
+            file: RuleFile {
+                id: detail.file_id.map(|id| to_base62(id as u64)),
             },
         };
 
         for rule in &rules {
-            let effect =
-                evaluate_rule(&rule.program, &input).wrap_err_with(|| {
+            let effect = evaluate_rule(&rule.program, &rule.expression, &input)
+                .wrap_err_with(|| {
                     format!(
-                        "failed to evaluate delphi rule {} for detail {}",
-                        rule.id.0, detail.id
+                        "failed to evaluate delphi rule '{}' for detail {}",
+                        rule.name, detail.id
                     )
                 })?;
             if let Some(effect) = effect {
@@ -717,7 +827,7 @@ async fn fetch_compiled_rules(
 ) -> Result<Vec<CompiledRule>> {
     let rules = sqlx::query!(
         r#"
-        SELECT id AS "id!: DelphiRuleId", rule
+        SELECT id AS "id!: DelphiRuleId", name, rule
         FROM delphi_rules
         WHERE NOT delete_on_next_revision
         ORDER BY priority DESC, id
@@ -734,12 +844,14 @@ async fn fetch_compiled_rules(
                 let program =
                     cel::Program::compile(&rule.rule).map_err(|error| {
                         eyre!(
-                            "failed to compile delphi rule {}: {error}",
-                            rule.id.0
+                            "failed to compile delphi rule '{}': {error}",
+                            rule.name
                         )
                     })?;
                 Ok(CompiledRule {
                     id: rule.id,
+                    name: rule.name,
+                    expression: rule.rule,
                     program,
                 })
             })
@@ -799,6 +911,21 @@ async fn insert_materialized_effects(
 }
 
 pub(super) fn evaluate_rule(
+    program: &cel::Program,
+    expression: &str,
+    input: &RuleInput,
+) -> Result<Option<DelphiRuleEffect>> {
+    evaluate_rule_inner(program, input)
+        .wrap_err_with(|| {
+            let input = serde_json::to_string(input).unwrap_or_else(|error| {
+                format!("<failed to serialize CEL input: {error}>")
+            });
+            format!("CEL input: {input}")
+        })
+        .wrap_err_with(|| format!("CEL expression: {expression}"))
+}
+
+fn evaluate_rule_inner(
     program: &cel::Program,
     input: &RuleInput,
 ) -> Result<Option<DelphiRuleEffect>> {
@@ -816,8 +943,14 @@ pub(super) fn evaluate_rule(
         .add_variable("artifact", &input.artifact)
         .wrap_err("failed to add `artifact` to cel context")?;
     context
-        .add_variable("scope", &input.scope)
-        .wrap_err("failed to add `scope` to cel context")?;
+        .add_variable("project", &input.project)
+        .wrap_err("failed to add `project` to cel context")?;
+    context
+        .add_variable("version", &input.version)
+        .wrap_err("failed to add `version` to cel context")?;
+    context
+        .add_variable("file", &input.file)
+        .wrap_err("failed to add `file` to cel context")?;
 
     let value = program
         .execute(&context)
diff --git a/packages/api-client/src/modules/labrinth/types.ts b/packages/api-client/src/modules/labrinth/types.ts
index 67bd85bce7..a943512a30 100644
--- a/packages/api-client/src/modules/labrinth/types.ts
+++ b/packages/api-client/src/modules/labrinth/types.ts
@@ -2335,10 +2335,16 @@ export namespace Labrinth {
 					size: number | null
 					hashes: Record<string, string>
 				}
-				scope: {
-					project_id: string | null
-					version_id: string | null
-					file_id: string | null
+				project: {
+					id: string | null
+					types: string[]
+				}
+				version: {
+					id: string | null
+					loaders: string[]
+				}
+				file: {
+					id: string | null
 				}
 			}
 
diff --git a/packages/delphi-cel-experiment/Cargo.toml b/packages/delphi-cel-experiment/Cargo.toml
deleted file mode 100644
index 34ea4460b0..0000000000
--- a/packages/delphi-cel-experiment/Cargo.toml
+++ /dev/null
@@ -1,10 +0,0 @@
-[package]
-name = "delphi-cel-experiment"
-version = "0.1.0"
-edition.workspace = true
-publish = false
-
-[dependencies]
-cel = { workspace = true }
-serde = { workspace = true, features = ["derive"] }
-serde_json = { workspace = true }
diff --git a/packages/delphi-cel-experiment/src/main.rs b/packages/delphi-cel-experiment/src/main.rs
deleted file mode 100644
index 8657e94a1c..0000000000
--- a/packages/delphi-cel-experiment/src/main.rs
+++ /dev/null
@@ -1,174 +0,0 @@
-use std::{collections::BTreeMap, error::Error, io};
-
-use cel::{Context, Program};
-use serde::{Deserialize, Serialize};
-
-const EFFECT_RULE: &str = r#"
-	trace.issue_type == "OBFUSCATED_NAMES"
-		&& trace.severity == "high"
-		&& "confidence" in trace.data
-		&& trace.data.confidence >= 0.9
-	? {
-		"severity": "low"
-	}
-	: null
-"#;
-
-#[derive(Debug, Serialize)]
-struct RuleInput {
-    schema_version: u32,
-    trace: TraceInput,
-    scan: ScanInput,
-    artifact: ArtifactInput,
-    scope: ScopeInput,
-}
-
-#[derive(Debug, Serialize)]
-struct TraceInput {
-    key: String,
-    issue_type: String,
-    severity: DelphiSeverity,
-    jar: Option<String>,
-    file_path: String,
-    data: BTreeMap<String, serde_json::Value>,
-}
-
-#[derive(Debug, Serialize)]
-struct ScanInput {
-    delphi_version: i32,
-}
-
-#[derive(Debug, Serialize)]
-struct ArtifactInput {
-    size: u32,
-    hashes: BTreeMap<String, String>,
-}
-
-#[derive(Debug, Serialize)]
-struct ScopeInput {
-    project_id: String,
-    version_id: String,
-    file_id: String,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Deserialize, Serialize)]
-#[serde(rename_all = "snake_case")]
-enum DelphiSeverity {
-    Hidden,
-    Low,
-    Medium,
-    High,
-    Severe,
-    Malware,
-}
-
-#[derive(Debug, PartialEq, Eq, Deserialize)]
-#[serde(deny_unknown_fields)]
-struct RuleEffect {
-    severity: DelphiSeverity,
-}
-
-fn main() -> Result<(), Box<dyn Error>> {
-    let input = example_input();
-    println!(
-        "CEL input context:\n{}",
-        serde_json::to_string_pretty(&input)?
-    );
-
-    let effect = evaluate_rule(EFFECT_RULE, &input)?;
-    println!("\nCEL map decoded as RuleEffect:\n{effect:#?}");
-
-    Ok(())
-}
-
-fn example_input() -> RuleInput {
-    RuleInput {
-        schema_version: 1,
-        trace: TraceInput {
-            key: "known-safe:obfuscated-bootstrap".to_string(),
-            issue_type: "OBFUSCATED_NAMES".to_string(),
-            severity: DelphiSeverity::High,
-            jar: Some("META-INF/jars/embedded.jar".to_string()),
-            file_path: "com/example/Bootstrap.class".to_string(),
-            data: BTreeMap::from([
-                ("confidence".to_string(), serde_json::json!(0.97)),
-                ("symbol_count".to_string(), serde_json::json!(42)),
-            ]),
-        },
-        scan: ScanInput { delphi_version: 17 },
-        artifact: ArtifactInput {
-            size: 412_892,
-            hashes: BTreeMap::from([
-                ("sha1".to_string(), "0123456789abcdef".to_string()),
-                ("sha512".to_string(), "fedcba9876543210".to_string()),
-            ]),
-        },
-        scope: ScopeInput {
-            project_id: "AANobbMI".to_string(),
-            version_id: "IIJJKKLL".to_string(),
-            file_id: "XXYYZZ00".to_string(),
-        },
-    }
-}
-
-fn evaluate_rule(
-    expression: &str,
-    input: &RuleInput,
-) -> Result<Option<RuleEffect>, Box<dyn Error>> {
-    let mut context = Context::default();
-    context.add_variable("schema_version", input.schema_version)?;
-    context.add_variable("trace", &input.trace)?;
-    context.add_variable("scan", &input.scan)?;
-    context.add_variable("artifact", &input.artifact)?;
-    context.add_variable("scope", &input.scope)?;
-
-    let value = Program::compile(expression)?.execute(&context)?;
-    let json = value
-        .json()
-        .map_err(|error| invalid_data(error.to_string()))?;
-    match json {
-        serde_json::Value::Null => Ok(None),
-        value => Ok(Some(serde_json::from_value(value)?)),
-    }
-}
-
-fn invalid_data(message: impl Into<String>) -> io::Error {
-    io::Error::new(io::ErrorKind::InvalidData, message.into())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn decodes_a_map_as_an_effect() {
-        let effect = evaluate_rule(EFFECT_RULE, &example_input())
-            .expect("rule should evaluate");
-
-        assert_eq!(
-            effect,
-            Some(RuleEffect {
-                severity: DelphiSeverity::Low,
-            })
-        );
-    }
-
-    #[test]
-    fn returns_none_when_a_rule_does_not_match() {
-        let mut input = example_input();
-        input.trace.issue_type = "NETWORK_ACCESS".to_string();
-
-        let effect =
-            evaluate_rule(EFFECT_RULE, &input).expect("rule should evaluate");
-
-        assert_eq!(effect, None);
-    }
-
-    #[test]
-    fn rejects_unknown_map_fields() {
-        let error = evaluate_rule(r#"{"unknown": true}"#, &example_input())
-            .expect_err("unknown fields should be rejected");
-
-        assert!(error.to_string().contains("unknown field"));
-    }
-}