npm - @pyric/cli - Versions diffs - 0.1.0-alpha.13 → 0.1.0-alpha.15 - Mend

@pyric/cli 0.1.0-alpha.13 → 0.1.0-alpha.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (614) hide show

package/dist/serve/site-ui/docs/examples/chess/index.html ADDED Viewed

@@ -0,0 +1,384 @@
+<!DOCTYPE html><html lang="en"> <head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Play chess against Security Rules · Pyric Studio</title><meta name="description" content="Play chess against Firestore Security Rules in an isolated Pyric sandbox."><link rel="icon" type="image/svg+xml" href="/__pyric/ui/pyric-logo.svg"><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500;700&display=swap" rel="stylesheet"><link rel="stylesheet" href="/__pyric/ui/_astro/_slug_.CXh9yTP1.css">
+<link rel="stylesheet" href="/__pyric/ui/_astro/_slug_.BoKXYrnu.css"></head> <body> <header class="studio__bar" data-astro-cid-mw7aashj> <div class="studio__bar-inner" data-astro-cid-mw7aashj> <a class="studio__brand" href="/__pyric/ui/" aria-label="Pyric Studio" data-astro-cid-mw7aashj>Pyric</a> <nav class="studio__nav" aria-label="Studio tabs" data-astro-cid-mw7aashj> <a class="studio__nav-tab" href="/__pyric/ui/" data-astro-cid-mw7aashj> Home </a><a class="studio__nav-tab" href="/__pyric/ui/firestore" data-astro-cid-mw7aashj> Firestore </a><a class="studio__nav-tab" href="/__pyric/ui/auth" data-astro-cid-mw7aashj> Auth </a><a class="studio__nav-tab" href="/__pyric/ui/rtdb" data-astro-cid-mw7aashj> RTDB </a><a class="studio__nav-tab" href="/__pyric/ui/storage" data-astro-cid-mw7aashj> Storage </a><a class="studio__nav-tab" href="/__pyric/ui/traffic" data-astro-cid-mw7aashj> Traffic </a><a class="studio__nav-tab" href="/__pyric/ui/settings" data-astro-cid-mw7aashj> Settings </a><a class="studio__nav-tab" href="/__pyric/ui/docs" aria-current="page" data-astro-cid-mw7aashj> Docs </a> </nav> </div> </header> <div class="docs-shell docs-shell--example" data-astro-cid-mw7aashj>  <details class="docs-nav-drawer" data-astro-cid-mw7aashj> <summary data-astro-cid-mw7aashj>Navigate</summary> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div> <script type="module">let i=null;function d(t){return i||(i=fetch(t).then(e=>e.json())),i}function l(t,e){return t.title.toLowerCase().includes(e)||t.excerpt.toLowerCase().includes(e)?!0:t.headings.some(r=>r.text.toLowerCase().includes(e))}function u(t,e,r){if(e.innerHTML="",t.length===0){e.hidden=!1;{const n=document.createElement("li");n.className="docs-search-empty",n.textContent="No matches",e.appendChild(n)}return}e.hidden=!1;for(const n of t.slice(0,8)){const s=document.createElement("li"),c=document.createElement("a");c.href=n.path;const o=document.createElement("span");o.className="docs-search-result-title",o.textContent=n.title;const a=document.createElement("span");a.className="docs-search-result-meta",a.textContent=[n.group,n.section].filter(Boolean).join(" / "),c.append(o,a),s.appendChild(c),e.appendChild(s)}}document.querySelectorAll(".docs-search").forEach(t=>{const e=t.dataset.indexUrl,r=t.querySelector(".docs-search-input"),n=t.querySelector(".docs-search-results");r.addEventListener("input",async()=>{const s=r.value.trim().toLowerCase();if(!s){n.hidden=!0,n.innerHTML="";return}const{pages:c}=await d(e);r.value.trim().toLowerCase()===s&&u(c.filter(o=>l(o,s)),n)}),r.addEventListener("focus",()=>{d(e),n.childElementCount>0&&(n.hidden=!1)}),r.addEventListener("keydown",s=>{s.key==="Escape"&&(r.value="",n.hidden=!0,n.innerHTML="",r.blur())}),r.addEventListener("blur",()=>{window.setTimeout(()=>{n.hidden=!0},150)})});document.addEventListener("keydown",t=>{if(!(t.metaKey||t.ctrlKey)||t.key.toLowerCase()!=="k")return;const e=[...document.querySelectorAll(".docs-search-input")].find(r=>r.offsetParent!==null);e&&(t.preventDefault(),e.focus(),e.select())});</script> <details class="docs-nav-group"> <summary>Overview</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/overview/"> Overview </a> </li><li> <a href="/__pyric/ui/docs/tutorial/"> Tutorial </a> </li><li> <a href="/__pyric/ui/docs/examples/"> Examples </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Get started</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/get-started/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/get-started/how-the-swap-works/"> How the swap works </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Build</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/build/authentication/"> Authentication </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-firestore/"> Cloud Firestore </a> </li><li> <a href="/__pyric/ui/docs/build/realtime-database/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-storage/"> Cloud Storage </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-messaging/"> Cloud Messaging </a> </li><li> <a href="/__pyric/ui/docs/build/ai-logic/"> AI Logic </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" open> <summary>Secure &amp; debug</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/secure/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/secure/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/secure/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/secure/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/secure/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/secure/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/secure/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/secure/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Examples </h2> <ul> <li> <a href="/__pyric/ui/docs/examples/chess/" aria-current="page"> Chess showcase </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Observe &amp; shape</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/observe/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/observe/resolve-runtime-status/"> Runtime status </a> </li><li> <a href="/__pyric/ui/docs/observe/shape-your-data/"> Seed, snapshot, replay </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Ship &amp; test</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/ship/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Work with an agent</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/agent/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/agent/work-with-an-agent/"> Use the MCP tools </a> </li><li> <a href="/__pyric/ui/docs/agent/watch-and-review/"> Watch in Pyric Studio </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Trust</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/trust/versioning-and-compatibility/"> Versioning and the fb tag </a> </li><li> <a href="/__pyric/ui/docs/trust/storage-rules-stdlib-research/"> Storage Rules modules: evidence and design </a> </li><li> <a href="/__pyric/ui/docs/trust/rules-standard-library/"> Rules standard library reference </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/conformance-scores/"> Public API coverage </a> </li><li> <a href="/__pyric/ui/docs/trust/how-we-know-it-matches-firebase/"> How we know it matches Firebase </a> </li><li> <a href="/__pyric/ui/docs/app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/functions-rtdb-compat/"> Functions · RTDB </a> </li><li> <a href="/__pyric/ui/docs/rules-compat/"> Rules </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group"> <summary>Reference</summary> <div class="docs-nav-group-body docs-nav-group-body--reference"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/api-reference/"> API reference </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">pyric</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-app-reference-api/"> pyric/app </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-api/"> pyric/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-reference-api/"> pyric/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-reference-api/"> pyric/ai </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-scripting-reference-api/"> pyric/ai/scripting </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-reference-api/"> pyric/database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-api/"> pyric/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-reference-api/"> pyric/messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-sw-reference-api/"> pyric/messaging/sw </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-api/"> pyric/rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-api/"> pyric/sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-firestore-reference-api/"> pyric/sandbox/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-database-reference-api/"> pyric/sandbox/database </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">pyric-admin</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-app-reference-api/"> pyric-admin/app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-api/"> pyric-admin/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth-reference-api/"> pyric-admin/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database-reference-api/"> pyric-admin/database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage-reference-api/"> pyric-admin/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-messaging-reference-api/"> pyric-admin/messaging </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">create-pyric</h2> <ul> <li> <a href="/__pyric/ui/docs/create-pyric-reference-api/"> create-pyric </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">@pyric/cli</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-credentials-node-reference-api/"> @pyric/cli/credentials/node </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-verify-reference-api/"> @pyric/cli/verify </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-reference-api/"> @pyric/cli/conformance </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-browser-reference-api/"> @pyric/cli/conformance/browser </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-docs-reference-api/"> @pyric/cli/conformance/docs </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-assurance-reference-api/"> @pyric/cli/assurance </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-assurance-browser-reference-api/"> @pyric/cli/assurance/browser </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-bridge-reference-api/"> @pyric/cli/bridge </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-bridge-client-reference-api/"> @pyric/cli/bridge/client </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-discover-reference-api/"> @pyric/cli/discover </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-vite-reference-api/"> @pyric/cli/vite </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-serve-worker-reference-api/"> @pyric/cli/serve/worker </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-remote-reference-api/"> @pyric/cli/remote </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-register-reference-api/"> @pyric/cli/register </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">@pyric/ui</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-ui-auth-reference-api/"> @pyric/ui/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-auth-hooks-reference-api/"> @pyric/ui/auth/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-primitives-reference-api/"> @pyric/ui/primitives </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-firestore-reference-api/"> @pyric/ui/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-firestore-hooks-reference-api/"> @pyric/ui/firestore/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rtdb-reference-api/"> @pyric/ui/rtdb </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-storage-reference-api/"> @pyric/ui/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-storage-hooks-reference-api/"> @pyric/ui/storage/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-traffic-reference-api/"> @pyric/ui/traffic </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-traffic-hooks-reference-api/"> @pyric/ui/traffic/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-events-reference-api/"> @pyric/ui/events </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-events-hooks-reference-api/"> @pyric/ui/events/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-agents-reference-api/"> @pyric/ui/agents </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rules-reference-api/"> @pyric/ui/rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rules-hooks-reference-api/"> @pyric/ui/rules/hooks </a> </li> </ul> </div> </div> </details> </nav> </details> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div>  <details class="docs-nav-group" id="nav-group-overview"> <summary>Overview</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/overview/"> Overview </a> </li><li> <a href="/__pyric/ui/docs/tutorial/"> Tutorial </a> </li><li> <a href="/__pyric/ui/docs/examples/"> Examples </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-get-started"> <summary>Get started</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/get-started/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/get-started/how-the-swap-works/"> How the swap works </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-build"> <summary>Build</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/build/authentication/"> Authentication </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-firestore/"> Cloud Firestore </a> </li><li> <a href="/__pyric/ui/docs/build/realtime-database/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-storage/"> Cloud Storage </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-messaging/"> Cloud Messaging </a> </li><li> <a href="/__pyric/ui/docs/build/ai-logic/"> AI Logic </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-secure-debug" open> <summary>Secure &amp; debug</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/secure/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/secure/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/secure/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/secure/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/secure/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/secure/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/secure/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/secure/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-secure-debug-examples"> Examples </h2> <ul> <li> <a href="/__pyric/ui/docs/examples/chess/" aria-current="page"> Chess showcase </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-observe-shape"> <summary>Observe &amp; shape</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/observe/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/observe/resolve-runtime-status/"> Runtime status </a> </li><li> <a href="/__pyric/ui/docs/observe/shape-your-data/"> Seed, snapshot, replay </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-ship-test"> <summary>Ship &amp; test</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/ship/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-work-with-an-agent"> <summary>Work with an agent</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/agent/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/agent/work-with-an-agent/"> Use the MCP tools </a> </li><li> <a href="/__pyric/ui/docs/agent/watch-and-review/"> Watch in Pyric Studio </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-trust"> <summary>Trust</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/trust/versioning-and-compatibility/"> Versioning and the fb tag </a> </li><li> <a href="/__pyric/ui/docs/trust/storage-rules-stdlib-research/"> Storage Rules modules: evidence and design </a> </li><li> <a href="/__pyric/ui/docs/trust/rules-standard-library/"> Rules standard library reference </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-conformance"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/conformance-scores/"> Public API coverage </a> </li><li> <a href="/__pyric/ui/docs/trust/how-we-know-it-matches-firebase/"> How we know it matches Firebase </a> </li><li> <a href="/__pyric/ui/docs/app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/functions-rtdb-compat/"> Functions · RTDB </a> </li><li> <a href="/__pyric/ui/docs/rules-compat/"> Rules </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group" id="nav-group-reference"> <summary>Reference</summary> <div class="docs-nav-group-body docs-nav-group-body--reference"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/api-reference/"> API reference </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">pyric</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-app-reference-api/"> pyric/app </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-api/"> pyric/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-reference-api/"> pyric/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-reference-api/"> pyric/ai </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-scripting-reference-api/"> pyric/ai/scripting </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-reference-api/"> pyric/database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-api/"> pyric/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-reference-api/"> pyric/messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-sw-reference-api/"> pyric/messaging/sw </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-api/"> pyric/rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-api/"> pyric/sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-firestore-reference-api/"> pyric/sandbox/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-database-reference-api/"> pyric/sandbox/database </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">pyric-admin</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-app-reference-api/"> pyric-admin/app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-api/"> pyric-admin/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth-reference-api/"> pyric-admin/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database-reference-api/"> pyric-admin/database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage-reference-api/"> pyric-admin/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-messaging-reference-api/"> pyric-admin/messaging </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">create-pyric</h2> <ul> <li> <a href="/__pyric/ui/docs/create-pyric-reference-api/"> create-pyric </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">@pyric/cli</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-credentials-node-reference-api/"> @pyric/cli/credentials/node </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-verify-reference-api/"> @pyric/cli/verify </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-reference-api/"> @pyric/cli/conformance </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-browser-reference-api/"> @pyric/cli/conformance/browser </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-docs-reference-api/"> @pyric/cli/conformance/docs </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-assurance-reference-api/"> @pyric/cli/assurance </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-assurance-browser-reference-api/"> @pyric/cli/assurance/browser </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-bridge-reference-api/"> @pyric/cli/bridge </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-bridge-client-reference-api/"> @pyric/cli/bridge/client </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-discover-reference-api/"> @pyric/cli/discover </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-vite-reference-api/"> @pyric/cli/vite </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-serve-worker-reference-api/"> @pyric/cli/serve/worker </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-remote-reference-api/"> @pyric/cli/remote </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-register-reference-api/"> @pyric/cli/register </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">@pyric/ui</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-ui-auth-reference-api/"> @pyric/ui/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-auth-hooks-reference-api/"> @pyric/ui/auth/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-primitives-reference-api/"> @pyric/ui/primitives </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-firestore-reference-api/"> @pyric/ui/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-firestore-hooks-reference-api/"> @pyric/ui/firestore/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rtdb-reference-api/"> @pyric/ui/rtdb </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-storage-reference-api/"> @pyric/ui/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-storage-hooks-reference-api/"> @pyric/ui/storage/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-traffic-reference-api/"> @pyric/ui/traffic </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-traffic-hooks-reference-api/"> @pyric/ui/traffic/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-events-reference-api/"> @pyric/ui/events </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-events-hooks-reference-api/"> @pyric/ui/events/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-agents-reference-api/"> @pyric/ui/agents </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rules-reference-api/"> @pyric/ui/rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rules-hooks-reference-api/"> @pyric/ui/rules/hooks </a> </li> </ul> </div> </div> </details> </nav> <main class="doc-main doc-main--example" data-astro-cid-mw7aashj> <nav class="docs-breadcrumbs" aria-label="Breadcrumb"> <ol> <li>  <a href="/__pyric/ui/docs/secure/secure-it-with-rules/">Secure &amp; debug</a> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <a href="#nav-section-secure-debug-examples">Examples</a> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <span aria-current="page">Chess showcase</span> </li> </ol> </nav>  <div class="example-doc-page" data-astro-cid-ghke3xma> <header class="example-header" data-astro-cid-3f5pqdpq> <p data-astro-cid-3f5pqdpq>Firestore Security Rules · Isolated browser sandbox</p> <h1 data-astro-cid-3f5pqdpq>Play chess against Security Rules</h1> <div data-astro-cid-3f5pqdpq>Move a piece; Pyric commits the new board or denies the write.</div> </header>  <div class="example-stage is-showcase" data-astro-cid-xgvwrve7> <iframe title="Play chess against Security Rules" src="/__pyric/ui/examples/chess/" sandbox="allow-scripts allow-same-origin" scrolling="no" data-example-frame data-example-id="chess" data-min-height="560" data-astro-cid-xgvwrve7></iframe> </div> <script type="module">const i=t=>{if(t.dataset.sizingInstalled==="true")return;t.dataset.sizingInstalled="true";let n;const o=()=>{const e=t.contentDocument;if(!e)return;const s=Math.max(Number(t.dataset.minHeight??0),e.documentElement.scrollHeight,e.body?.scrollHeight??0);t.style.height=`${s}px`};t.addEventListener("load",()=>{n?.disconnect();const e=t.contentDocument;e&&(n=new ResizeObserver(o),n.observe(e.documentElement),e.body&&n.observe(e.body),o())})};document.querySelectorAll("[data-example-frame]").forEach(i);</script>  <article class="prose example-explanation" data-astro-cid-ghke3xma> <h2 id="try-the-board">Try the board</h2>
+<p>Choose a piece and its destination. <code>e2 → e4</code> is allowed; <code>e2 → e5</code> is denied and leaves the board unchanged. Switch the identity to see turn ownership enforced.</p>
+<p>Choose a scenario to run a complete sequence through the Rules. Fool’s Mate and Scholar’s Mate end in checkmate; the opening remains in progress; the illegal pawn leap is denied without changing the board.</p>
+<h2 id="a-move-is-a-firestore-write">A move is a Firestore write</h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="text"><code><span class="line"><span>move → proposed Firestore document → Security Rules → commit or deny → next board</span></span></code></pre>
+<p>Each game is one Firestore document. A move proposes its next state: one square is emptied, another receives the piece, the turn changes, and the move count increases.</p>
+<p>Pyric evaluates that write against Firestore Security Rules in the browser. An allowed write changes the document and the board. A denied write changes neither.</p>
+<h2 id="keep-the-rules-focused-on-chess">Keep the Rules focused on chess</h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="rules"><code><span class="line"><span style="color:#C678DD">rules_version</span><span style="color:#ABB2BF"> = </span><span style="color:#98C379">'2+modules'</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"></span>
+<span class="line"><span style="color:#C678DD">import</span><span style="color:#ABB2BF"> { isAuthenticated } </span><span style="color:#C678DD">from</span><span style="color:#98C379"> 'auth'</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#C678DD">import</span><span style="color:#ABB2BF"> { validSimpleMove } </span><span style="color:#C678DD">from</span><span style="color:#98C379"> 'geometry'</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#C678DD">import</span><span style="color:#ABB2BF"> { isPlaying, moveIncremented, participantsUnchanged } </span><span style="color:#C678DD">from</span><span style="color:#98C379"> 'state'</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#C678DD">import</span><span style="color:#ABB2BF"> { isMyTurn, turnFlipped } </span><span style="color:#C678DD">from</span><span style="color:#98C379"> 'turns'</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p><code>2+modules</code> is Pyric’s modular Rules format. Pyric resolves its imports into ordinary version 2 Rules before evaluation or deployment.</p>
+<p>The Standard Library modules handle checks that are useful beyond chess: authentication, participants, turns, move counts, and movement across a grid. The remaining Rules can concentrate on chess-specific behavior such as blocked paths, captures, castling, and king safety.</p>
+<p>The board’s geometry lives in a read-only Firestore document. <code>validSimpleMove(cfg())</code> uses that data to check whether a piece can travel from one square to another. This turns movement into lookups that the Rules language can evaluate.</p>
+<h2 id="stop-unrelated-rules-early">Stop unrelated Rules early</h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="rules"><code><span class="line"><span style="color:#C678DD">allow</span><span style="color:#61AFEF"> update</span><span style="color:#ABB2BF">: </span><span style="color:#C678DD">if</span><span style="color:#E5C07B"> request</span><span style="color:#ABB2BF">.</span><span style="color:#E5C07B">resource</span><span style="color:#ABB2BF">.data.moveType == </span><span style="color:#98C379">'normal'</span></span>
+<span class="line"><span style="color:#ABB2BF">      &#x26;&#x26; baseMoveChecks() &#x26;&#x26; validPieceMove() &#x26;&#x26; myKingSafe();</span></span>
+<span class="line"></span>
+<span class="line"><span style="color:#C678DD">allow</span><span style="color:#61AFEF"> update</span><span style="color:#ABB2BF">: </span><span style="color:#C678DD">if</span><span style="color:#E5C07B"> request</span><span style="color:#ABB2BF">.</span><span style="color:#E5C07B">resource</span><span style="color:#ABB2BF">.data.moveType == </span><span style="color:#98C379">'capture'</span></span>
+<span class="line"><span style="color:#ABB2BF">      &#x26;&#x26; baseMoveChecks() &#x26;&#x26; validPieceMove() &#x26;&#x26; captureValid() &#x26;&#x26; myKingSafe();</span></span></code></pre>
+<p>Firestore limits how much work a Rules evaluation may perform. Each move type starts with a different value, so only the matching branch continues into the expensive chess checks. Pyric’s linter checks these limits locally instead of waiting for a deployment to expose them.</p>
+<h2 id="checkmate-is-a-result-not-a-trusted-claim">Checkmate is a result, not a trusted claim</h2>
+<p>Security Rules decide whether a move may be stored. After an allowed move commits, the browser checks the resulting board. It reports checkmate only when the king is attacked and no legal move, capture, block, king escape, or en passant response removes the attack.</p>
+<p>There is no client-authored <code>checkmate</code> move for the Rules to trust. The result is derived from the board that the Rules already accepted.</p>
+<h2 id="test-the-same-boundaries-before-production">Test the same boundaries before production</h2>
+<p>The local suite covers allowed and denied geometry, blocked paths, captures, pins, check, turn ownership, resignation, and checkmate. It runs against the same resolved Rules as the board.</p>
+<p>Pyric is a development mirror, not Firebase production. Before shipping a game or any Rules-heavy application, run its important cases against a Firebase project too.</p> </article> <section class="example-rules" data-astro-cid-ghke3xma> <h2 data-astro-cid-ghke3xma>Security Rules</h2> <p data-astro-cid-ghke3xma>The board uses the modular Rules below. Pyric resolves the Standard Library imports into ordinary version 2 Rules before the sandbox evaluates each move.</p> <style>astro-island,astro-slot,astro-static-slot{display:contents}</style><script>(()=>{var a=(s,i,o)=>{let r=async()=>{await(await s())()},t=typeof i.value=="object"?i.value:void 0,c={rootMargin:t==null?void 0:t.rootMargin},n=new IntersectionObserver(e=>{for(let l of e)if(l.isIntersecting){n.disconnect(),r();break}},c);for(let e of o.children)n.observe(e)};(self.Astro||(self.Astro={})).visible=a;window.dispatchEvent(new Event("astro:visible"));})();</script><script>(()=>{var A=Object.defineProperty;var g=(i,o,a)=>o in i?A(i,o,{enumerable:!0,configurable:!0,writable:!0,value:a}):i[o]=a;var d=(i,o,a)=>g(i,typeof o!="symbol"?o+"":o,a);{let i={0:t=>m(t),1:t=>a(t),2:t=>new RegExp(t),3:t=>new Date(t),4:t=>new Map(a(t)),5:t=>new Set(a(t)),6:t=>BigInt(t),7:t=>new URL(t),8:t=>new Uint8Array(t),9:t=>new Uint16Array(t),10:t=>new Uint32Array(t),11:t=>1/0*t},o=t=>{let[l,e]=t;return l in i?i[l](e):void 0},a=t=>t.map(o),m=t=>typeof t!="object"||t===null?t:Object.fromEntries(Object.entries(t).map(([l,e])=>[l,o(e)]));class y extends HTMLElement{constructor(){super(...arguments);d(this,"Component");d(this,"hydrator");d(this,"hydrate",async()=>{var b;if(!this.hydrator||!this.isConnected)return;let e=(b=this.parentElement)==null?void 0:b.closest("astro-island[ssr]");if(e){e.addEventListener("astro:hydrate",this.hydrate,{once:!0});return}let c=this.querySelectorAll("astro-slot"),n={},h=this.querySelectorAll("template[data-astro-template]");for(let r of h){let s=r.closest(this.tagName);s!=null&&s.isSameNode(this)&&(n[r.getAttribute("data-astro-template")||"default"]=r.innerHTML,r.remove())}for(let r of c){let s=r.closest(this.tagName);s!=null&&s.isSameNode(this)&&(n[r.getAttribute("name")||"default"]=r.innerHTML)}let p;try{p=this.hasAttribute("props")?m(JSON.parse(this.getAttribute("props"))):{}}catch(r){let s=this.getAttribute("component-url")||"<unknown>",v=this.getAttribute("component-export");throw v&&(s+=` (export ${v})`),console.error(`[hydrate] Error parsing props for component ${s}`,this.getAttribute("props"),r),r}let u;await this.hydrator(this)(this.Component,p,n,{client:this.getAttribute("client")}),this.removeAttribute("ssr"),this.dispatchEvent(new CustomEvent("astro:hydrate"))});d(this,"unmount",()=>{this.isConnected||this.dispatchEvent(new CustomEvent("astro:unmount"))})}disconnectedCallback(){document.removeEventListener("astro:after-swap",this.unmount),document.addEventListener("astro:after-swap",this.unmount,{once:!0})}connectedCallback(){if(!this.hasAttribute("await-children")||document.readyState==="interactive"||document.readyState==="complete")this.childrenConnectedCallback();else{let e=()=>{document.removeEventListener("DOMContentLoaded",e),c.disconnect(),this.childrenConnectedCallback()},c=new MutationObserver(()=>{var n;((n=this.lastChild)==null?void 0:n.nodeType)===Node.COMMENT_NODE&&this.lastChild.nodeValue==="astro:end"&&(this.lastChild.remove(),e())});c.observe(this,{childList:!0}),document.addEventListener("DOMContentLoaded",e)}}async childrenConnectedCallback(){let e=this.getAttribute("before-hydration-url");e&&await import(e),this.start()}async start(){let e=JSON.parse(this.getAttribute("opts")),c=this.getAttribute("client");if(Astro[c]===void 0){window.addEventListener(`astro:${c}`,()=>this.start(),{once:!0});return}try{await Astro[c](async()=>{let n=this.getAttribute("renderer-url"),[h,{default:p}]=await Promise.all([import(this.getAttribute("component-url")),n?import(n):()=>()=>{}]),u=this.getAttribute("component-export")||"default";if(!u.includes("."))this.Component=h[u];else{this.Component=h;for(let f of u.split("."))this.Component=this.Component[f]}return this.hydrator=p,this.hydrate},e,this)}catch(n){console.error(`[astro-island] Error hydrating ${this.getAttribute("component-url")}`,n)}}attributeChangedCallback(){this.hydrate()}}d(y,"observedAttributes",["props"]),customElements.get("astro-island")||customElements.define("astro-island",y)}})();</script><astro-island uid="1z8X2O" prefix="r1" component-url="/__pyric/ui/_astro/chess-source-explorer.C5k9c5yK.js" component-export="ChessSourceExplorer" renderer-url="/__pyric/ui/_astro/client.D2ORs4B-.js" props="{&quot;data-astro-cid-ghke3xma&quot;:[0,true]}" ssr client="visible" opts="{&quot;name&quot;:&quot;ChessSourceExplorer&quot;,&quot;value&quot;:true}" await-children><section class="source-explorer" aria-label="Chess Security Rules"><div class="source-toolbar"><strong>Security Rules</strong><button type="button" class="copy-source">Copy source</button></div><pre><code>rules_version = &#x27;2+modules&#x27;;
+import { isAuthenticated } from &#x27;auth&#x27;;
+import { validSimpleMove } from &#x27;geometry&#x27;;
+import { isPlaying, moveIncremented, participantsUnchanged } from &#x27;state&#x27;;
+import { isMyTurn, turnFlipped } from &#x27;turns&#x27;;
+service cloud.firestore {
+  match /databases/{database}/documents {
+    match /gameConfig/{id} { allow read: if true; allow write: if false; }
+    match /chess-v2/{gameId} {
+      function cfg() { return get(/databases/$(database)/documents/gameConfig/chessv2).data; }
+      function isOwnPiece() {
+        let piece = resource.data[request.resource.data.moveFrom];
+        return (resource.data.currentTurn == &#x27;host&#x27;
+                &amp;&amp; (piece == &#x27;K&#x27; || piece == &#x27;Q&#x27; || piece == &#x27;R&#x27; || piece == &#x27;B&#x27; || piece == &#x27;N&#x27; || piece == &#x27;P&#x27;))
+            || (resource.data.currentTurn == &#x27;guest&#x27;
+                &amp;&amp; (piece == &#x27;k&#x27; || piece == &#x27;q&#x27; || piece == &#x27;r&#x27; || piece == &#x27;b&#x27; || piece == &#x27;n&#x27; || piece == &#x27;p&#x27;));
+      }
+      function baseMoveChecks() {
+        return isAuthenticated() &amp;&amp; isPlaying()
+            &amp;&amp; isMyTurn() &amp;&amp; turnFlipped() &amp;&amp; isOwnPiece()
+            &amp;&amp; moveIncremented() &amp;&amp; participantsUnchanged();
+      }
+      function validPieceMove() {
+        let mf = request.resource.data.moveFrom;
+        let mt = request.resource.data.moveTo;
+        let piece = resource.data[mf];
+        let p = cfg().paths[mf][mt];
+        return validSimpleMove(cfg())
+            &amp;&amp; (cfg().pieceCategory[piece] == &#x27;jump&#x27;
+                || ((p.len &lt; 1 || resource.data[p.c0] == &#x27;&#x27;)
+                    &amp;&amp; (p.len &lt; 2 || resource.data[p.c1] == &#x27;&#x27;)
+                    &amp;&amp; (p.len &lt; 3 || resource.data[p.c2] == &#x27;&#x27;)
+                    &amp;&amp; (p.len &lt; 4 || resource.data[p.c3] == &#x27;&#x27;)
+                    &amp;&amp; (p.len &lt; 5 || resource.data[p.c4] == &#x27;&#x27;)
+                    &amp;&amp; (p.len &lt; 6 || resource.data[p.c5] == &#x27;&#x27;)));
+      }
+      function validPawnForward() {
+        let mf = request.resource.data.moveFrom;
+        let mt = request.resource.data.moveTo;
+        let piece = resource.data[mf];
+        return (piece == &#x27;P&#x27; || piece == &#x27;p&#x27;) &amp;&amp; mt in cfg().pawnForward[piece][mf] &amp;&amp; resource.data[mt] == &#x27;&#x27;;
+      }
+      function validPawnDouble() {
+        let mf = request.resource.data.moveFrom;
+        let mt = request.resource.data.moveTo;
+        let piece = resource.data[mf];
+        return (piece == &#x27;P&#x27; || piece == &#x27;p&#x27;)
+            &amp;&amp; mf in cfg().pawnDouble[piece]
+            &amp;&amp; cfg().pawnDouble[piece][mf].to == mt
+            &amp;&amp; resource.data[mt] == &#x27;&#x27;
+            &amp;&amp; resource.data[cfg().pawnDouble[piece][mf].between] == &#x27;&#x27;;
+      }
+      function validPawnCapture() {
+        let mf = request.resource.data.moveFrom;
+        let mt = request.resource.data.moveTo;
+        let piece = resource.data[mf];
+        let target = resource.data[mt];
+        return (piece == &#x27;P&#x27; || piece == &#x27;p&#x27;)
+            &amp;&amp; mt in cfg().pawnAttacks[piece][mf]
+            &amp;&amp; target != &#x27;&#x27;
+            &amp;&amp; ((piece == &#x27;P&#x27; &amp;&amp; (target == &#x27;k&#x27; || target == &#x27;q&#x27; || target == &#x27;r&#x27; || target == &#x27;b&#x27; || target == &#x27;n&#x27; || target == &#x27;p&#x27;))
+                || (piece == &#x27;p&#x27; &amp;&amp; (target == &#x27;K&#x27; || target == &#x27;Q&#x27; || target == &#x27;R&#x27; || target == &#x27;B&#x27; || target == &#x27;N&#x27; || target == &#x27;P&#x27;)));
+      }
+      function validPromotion() {
+        let mt = request.resource.data.moveTo;
+        let piece = resource.data[request.resource.data.moveFrom];
+        let pt = request.resource.data.promotedTo;
+        return request.resource.data.moveType == &#x27;promotion&#x27;
+            &amp;&amp; ((piece == &#x27;P&#x27; &amp;&amp; mt &gt;= &#x27;a8&#x27; &amp;&amp; mt &lt;= &#x27;h8&#x27; &amp;&amp; (pt == &#x27;Q&#x27; || pt == &#x27;R&#x27; || pt == &#x27;B&#x27; || pt == &#x27;N&#x27;))
+                || (piece == &#x27;p&#x27; &amp;&amp; mt &gt;= &#x27;a1&#x27; &amp;&amp; mt &lt;= &#x27;h1&#x27; &amp;&amp; (pt == &#x27;q&#x27; || pt == &#x27;r&#x27; || pt == &#x27;b&#x27; || pt == &#x27;n&#x27;)));
+      }
+      function pieceMovedCorrectly() {
+        let mf = request.resource.data.moveFrom;
+        let mt = request.resource.data.moveTo;
+        let piece = resource.data[mf];
+        return request.resource.data[mf] == &#x27;&#x27;
+            &amp;&amp; (request.resource.data.moveType != &#x27;promotion&#x27;
+                ? request.resource.data[mt] == piece
+                : request.resource.data[mt] == request.resource.data.promotedTo)
+            &amp;&amp; resource.data[request.resource.data.movedPiece] == mf
+            &amp;&amp; request.resource.data[request.resource.data.movedPiece] == mt;
+      }
+      function captureValid() {
+        let cp = request.resource.data.capturedPiece;
+        return cp != &#x27;&#x27;
+            &amp;&amp; resource.data[cp] == request.resource.data.moveTo
+            &amp;&amp; request.resource.data[cp] == &#x27;&#x27;;
+      }
+      function validEnPassant() {
+        let mf = request.resource.data.moveFrom;
+        let mt = request.resource.data.moveTo;
+        let piece = resource.data[mf];
+        return (piece == &#x27;P&#x27; || piece == &#x27;p&#x27;)
+            &amp;&amp; mt in cfg().pawnAttacks[piece][mf]
+            &amp;&amp; resource.data[mt] == &#x27;&#x27;
+            &amp;&amp; resource.data.lastDoublePawn == mt;
+      }
+      function validCastleKingside() {
+        let turn = resource.data.currentTurn;
+        let c = cfg().castling;
+        let castle = turn == &#x27;host&#x27; ? c.wk : c.bk;
+        let kingMoved = turn == &#x27;host&#x27; ? resource.data.hp_K_moved : resource.data.gp_k_moved;
+        let rookMoved = turn == &#x27;host&#x27; ? resource.data.hp_R2_moved : resource.data.gp_r2_moved;
+        return !kingMoved &amp;&amp; !rookMoved
+            &amp;&amp; request.resource.data.moveFrom == castle.kingFrom
+            &amp;&amp; request.resource.data.moveTo == castle.kingTo
+            &amp;&amp; resource.data[castle.between[0]] == &#x27;&#x27;
+            &amp;&amp; resource.data[castle.between[1]] == &#x27;&#x27;;
+      }
+      function validCastleQueenside() {
+        let turn = resource.data.currentTurn;
+        let c = cfg().castling;
+        let castle = turn == &#x27;host&#x27; ? c.wq : c.bq;
+        let kingMoved = turn == &#x27;host&#x27; ? resource.data.hp_K_moved : resource.data.gp_k_moved;
+        let rookMoved = turn == &#x27;host&#x27; ? resource.data.hp_R1_moved : resource.data.gp_r1_moved;
+        return !kingMoved &amp;&amp; !rookMoved
+            &amp;&amp; request.resource.data.moveFrom == castle.kingFrom
+            &amp;&amp; request.resource.data.moveTo == castle.kingTo
+            &amp;&amp; resource.data[castle.between[0]] == &#x27;&#x27;
+            &amp;&amp; resource.data[castle.between[1]] == &#x27;&#x27;
+            &amp;&amp; resource.data[castle.between[2]] == &#x27;&#x27;;
+      }
+      function hPC(cfg) {
+        let b = request.resource.data;
+        let ks = b.hp_K;
+        return (b.gp_p1 != &#x27;&#x27; &amp;&amp; b[b.gp_p1] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.gp_p1]][b.gp_p1])
+            || (b.gp_p2 != &#x27;&#x27; &amp;&amp; b[b.gp_p2] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.gp_p2]][b.gp_p2])
+            || (b.gp_p3 != &#x27;&#x27; &amp;&amp; b[b.gp_p3] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.gp_p3]][b.gp_p3])
+            || (b.gp_p4 != &#x27;&#x27; &amp;&amp; b[b.gp_p4] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.gp_p4]][b.gp_p4])
+            || (b.gp_p5 != &#x27;&#x27; &amp;&amp; b[b.gp_p5] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.gp_p5]][b.gp_p5])
+            || (b.gp_p6 != &#x27;&#x27; &amp;&amp; b[b.gp_p6] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.gp_p6]][b.gp_p6])
+            || (b.gp_p7 != &#x27;&#x27; &amp;&amp; b[b.gp_p7] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.gp_p7]][b.gp_p7])
+            || (b.gp_p8 != &#x27;&#x27; &amp;&amp; b[b.gp_p8] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.gp_p8]][b.gp_p8]);
+      }
+      function hMC(cfg) {
+        let b = request.resource.data;
+        let ks = b.hp_K;
+        return (b.gp_n1 != &#x27;&#x27; &amp;&amp; b[b.gp_n1] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.gp_n1]][b.gp_n1])
+            || (b.gp_n2 != &#x27;&#x27; &amp;&amp; b[b.gp_n2] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.gp_n2]][b.gp_n2])
+            || (b.gp_k != &#x27;&#x27; &amp;&amp; b[b.gp_k] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.gp_k]][b.gp_k]);
+      }
+      function hSC(cfg) {
+        let b = request.resource.data;
+        let ks = b.hp_K;
+        return (b.gp_q != &#x27;&#x27; &amp;&amp; b[b.gp_q] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.gp_q]][b.gp_q]
+            &amp;&amp; (cfg.paths[b.gp_q][ks].len &lt; 1 || b[cfg.paths[b.gp_q][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_q][ks].len &lt; 2 || b[cfg.paths[b.gp_q][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_q][ks].len &lt; 3 || b[cfg.paths[b.gp_q][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_q][ks].len &lt; 4 || b[cfg.paths[b.gp_q][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_q][ks].len &lt; 5 || b[cfg.paths[b.gp_q][ks].c4] == &#x27;&#x27;))
+            || (b.gp_r1 != &#x27;&#x27; &amp;&amp; b[b.gp_r1] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.gp_r1]][b.gp_r1]
+            &amp;&amp; (cfg.paths[b.gp_r1][ks].len &lt; 1 || b[cfg.paths[b.gp_r1][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_r1][ks].len &lt; 2 || b[cfg.paths[b.gp_r1][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_r1][ks].len &lt; 3 || b[cfg.paths[b.gp_r1][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_r1][ks].len &lt; 4 || b[cfg.paths[b.gp_r1][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_r1][ks].len &lt; 5 || b[cfg.paths[b.gp_r1][ks].c4] == &#x27;&#x27;))
+            || (b.gp_r2 != &#x27;&#x27; &amp;&amp; b[b.gp_r2] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.gp_r2]][b.gp_r2]
+            &amp;&amp; (cfg.paths[b.gp_r2][ks].len &lt; 1 || b[cfg.paths[b.gp_r2][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_r2][ks].len &lt; 2 || b[cfg.paths[b.gp_r2][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_r2][ks].len &lt; 3 || b[cfg.paths[b.gp_r2][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_r2][ks].len &lt; 4 || b[cfg.paths[b.gp_r2][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_r2][ks].len &lt; 5 || b[cfg.paths[b.gp_r2][ks].c4] == &#x27;&#x27;))
+            || (b.gp_b1 != &#x27;&#x27; &amp;&amp; b[b.gp_b1] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.gp_b1]][b.gp_b1]
+            &amp;&amp; (cfg.paths[b.gp_b1][ks].len &lt; 1 || b[cfg.paths[b.gp_b1][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_b1][ks].len &lt; 2 || b[cfg.paths[b.gp_b1][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_b1][ks].len &lt; 3 || b[cfg.paths[b.gp_b1][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_b1][ks].len &lt; 4 || b[cfg.paths[b.gp_b1][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_b1][ks].len &lt; 5 || b[cfg.paths[b.gp_b1][ks].c4] == &#x27;&#x27;))
+            || (b.gp_b2 != &#x27;&#x27; &amp;&amp; b[b.gp_b2] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.gp_b2]][b.gp_b2]
+            &amp;&amp; (cfg.paths[b.gp_b2][ks].len &lt; 1 || b[cfg.paths[b.gp_b2][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_b2][ks].len &lt; 2 || b[cfg.paths[b.gp_b2][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_b2][ks].len &lt; 3 || b[cfg.paths[b.gp_b2][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_b2][ks].len &lt; 4 || b[cfg.paths[b.gp_b2][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.gp_b2][ks].len &lt; 5 || b[cfg.paths[b.gp_b2][ks].c4] == &#x27;&#x27;));
+      }
+      function gPC(cfg) {
+        let b = request.resource.data;
+        let ks = b.gp_k;
+        return (b.hp_P1 != &#x27;&#x27; &amp;&amp; b[b.hp_P1] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.hp_P1]][b.hp_P1])
+            || (b.hp_P2 != &#x27;&#x27; &amp;&amp; b[b.hp_P2] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.hp_P2]][b.hp_P2])
+            || (b.hp_P3 != &#x27;&#x27; &amp;&amp; b[b.hp_P3] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.hp_P3]][b.hp_P3])
+            || (b.hp_P4 != &#x27;&#x27; &amp;&amp; b[b.hp_P4] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.hp_P4]][b.hp_P4])
+            || (b.hp_P5 != &#x27;&#x27; &amp;&amp; b[b.hp_P5] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.hp_P5]][b.hp_P5])
+            || (b.hp_P6 != &#x27;&#x27; &amp;&amp; b[b.hp_P6] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.hp_P6]][b.hp_P6])
+            || (b.hp_P7 != &#x27;&#x27; &amp;&amp; b[b.hp_P7] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.hp_P7]][b.hp_P7])
+            || (b.hp_P8 != &#x27;&#x27; &amp;&amp; b[b.hp_P8] != &#x27;&#x27; &amp;&amp; ks in cfg.pawnAttacks[b[b.hp_P8]][b.hp_P8]);
+      }
+      function gMC(cfg) {
+        let b = request.resource.data;
+        let ks = b.gp_k;
+        return (b.hp_N1 != &#x27;&#x27; &amp;&amp; b[b.hp_N1] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.hp_N1]][b.hp_N1])
+            || (b.hp_N2 != &#x27;&#x27; &amp;&amp; b[b.hp_N2] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.hp_N2]][b.hp_N2])
+            || (b.hp_K != &#x27;&#x27; &amp;&amp; b[b.hp_K] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.hp_K]][b.hp_K]);
+      }
+      function gSC(cfg) {
+        let b = request.resource.data;
+        let ks = b.gp_k;
+        return (b.hp_Q != &#x27;&#x27; &amp;&amp; b[b.hp_Q] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.hp_Q]][b.hp_Q]
+            &amp;&amp; (cfg.paths[b.hp_Q][ks].len &lt; 1 || b[cfg.paths[b.hp_Q][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_Q][ks].len &lt; 2 || b[cfg.paths[b.hp_Q][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_Q][ks].len &lt; 3 || b[cfg.paths[b.hp_Q][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_Q][ks].len &lt; 4 || b[cfg.paths[b.hp_Q][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_Q][ks].len &lt; 5 || b[cfg.paths[b.hp_Q][ks].c4] == &#x27;&#x27;))
+            || (b.hp_R1 != &#x27;&#x27; &amp;&amp; b[b.hp_R1] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.hp_R1]][b.hp_R1]
+            &amp;&amp; (cfg.paths[b.hp_R1][ks].len &lt; 1 || b[cfg.paths[b.hp_R1][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_R1][ks].len &lt; 2 || b[cfg.paths[b.hp_R1][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_R1][ks].len &lt; 3 || b[cfg.paths[b.hp_R1][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_R1][ks].len &lt; 4 || b[cfg.paths[b.hp_R1][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_R1][ks].len &lt; 5 || b[cfg.paths[b.hp_R1][ks].c4] == &#x27;&#x27;))
+            || (b.hp_R2 != &#x27;&#x27; &amp;&amp; b[b.hp_R2] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.hp_R2]][b.hp_R2]
+            &amp;&amp; (cfg.paths[b.hp_R2][ks].len &lt; 1 || b[cfg.paths[b.hp_R2][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_R2][ks].len &lt; 2 || b[cfg.paths[b.hp_R2][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_R2][ks].len &lt; 3 || b[cfg.paths[b.hp_R2][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_R2][ks].len &lt; 4 || b[cfg.paths[b.hp_R2][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_R2][ks].len &lt; 5 || b[cfg.paths[b.hp_R2][ks].c4] == &#x27;&#x27;))
+            || (b.hp_B1 != &#x27;&#x27; &amp;&amp; b[b.hp_B1] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.hp_B1]][b.hp_B1]
+            &amp;&amp; (cfg.paths[b.hp_B1][ks].len &lt; 1 || b[cfg.paths[b.hp_B1][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_B1][ks].len &lt; 2 || b[cfg.paths[b.hp_B1][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_B1][ks].len &lt; 3 || b[cfg.paths[b.hp_B1][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_B1][ks].len &lt; 4 || b[cfg.paths[b.hp_B1][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_B1][ks].len &lt; 5 || b[cfg.paths[b.hp_B1][ks].c4] == &#x27;&#x27;))
+            || (b.hp_B2 != &#x27;&#x27; &amp;&amp; b[b.hp_B2] != &#x27;&#x27; &amp;&amp; ks in cfg.moves[b[b.hp_B2]][b.hp_B2]
+            &amp;&amp; (cfg.paths[b.hp_B2][ks].len &lt; 1 || b[cfg.paths[b.hp_B2][ks].c0] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_B2][ks].len &lt; 2 || b[cfg.paths[b.hp_B2][ks].c1] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_B2][ks].len &lt; 3 || b[cfg.paths[b.hp_B2][ks].c2] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_B2][ks].len &lt; 4 || b[cfg.paths[b.hp_B2][ks].c3] == &#x27;&#x27;)
+            &amp;&amp; (cfg.paths[b.hp_B2][ks].len &lt; 5 || b[cfg.paths[b.hp_B2][ks].c4] == &#x27;&#x27;));
+      }
+      function myKingSafe() {
+        let c = cfg();
+        return (resource.data.currentTurn == &#x27;host&#x27; &amp;&amp; !hPC(c) &amp;&amp; !hMC(c) &amp;&amp; !hSC(c))
+            || (resource.data.currentTurn == &#x27;guest&#x27; &amp;&amp; !gPC(c) &amp;&amp; !gMC(c) &amp;&amp; !gSC(c));
+      }
+      function opponentInCheck() {
+        let c = cfg();
+        return (resource.data.currentTurn == &#x27;host&#x27; &amp;&amp; (gPC(c) || gMC(c) || gSC(c)))
+            || (resource.data.currentTurn == &#x27;guest&#x27; &amp;&amp; (hPC(c) || hMC(c) || hSC(c)));
+      }
+      // ═══ Lobby ═══
+      allow read: if request.auth != null;
+      allow create: if request.auth != null
+            &amp;&amp; request.resource.data.host == request.auth.uid
+            &amp;&amp; request.resource.data.status == &#x27;waiting&#x27;
+            &amp;&amp; d.a1 == &#x27;R&#x27;
+            &amp;&amp; d.a2 == &#x27;P&#x27;
+            &amp;&amp; d.a7 == &#x27;p&#x27;
+            &amp;&amp; d.a8 == &#x27;r&#x27;
+            &amp;&amp; d.b1 == &#x27;N&#x27;
+            &amp;&amp; d.b2 == &#x27;P&#x27;
+            &amp;&amp; d.b7 == &#x27;p&#x27;
+            &amp;&amp; d.b8 == &#x27;n&#x27;
+            &amp;&amp; d.c1 == &#x27;B&#x27;
+            &amp;&amp; d.c2 == &#x27;P&#x27;
+            &amp;&amp; d.c7 == &#x27;p&#x27;
+            &amp;&amp; d.c8 == &#x27;b&#x27;
+            &amp;&amp; d.d1 == &#x27;Q&#x27;
+            &amp;&amp; d.d2 == &#x27;P&#x27;
+            &amp;&amp; d.d7 == &#x27;p&#x27;
+            &amp;&amp; d.d8 == &#x27;q&#x27;
+            &amp;&amp; d.e1 == &#x27;K&#x27;
+            &amp;&amp; d.e2 == &#x27;P&#x27;
+            &amp;&amp; d.e7 == &#x27;p&#x27;
+            &amp;&amp; d.e8 == &#x27;k&#x27;
+            &amp;&amp; d.f1 == &#x27;B&#x27;
+            &amp;&amp; d.f2 == &#x27;P&#x27;
+            &amp;&amp; d.f7 == &#x27;p&#x27;
+            &amp;&amp; d.f8 == &#x27;b&#x27;
+            &amp;&amp; d.g1 == &#x27;N&#x27;
+            &amp;&amp; d.g2 == &#x27;P&#x27;
+            &amp;&amp; d.g7 == &#x27;p&#x27;
+            &amp;&amp; d.g8 == &#x27;n&#x27;
+            &amp;&amp; d.h1 == &#x27;R&#x27;
+            &amp;&amp; d.h2 == &#x27;P&#x27;
+            &amp;&amp; d.h7 == &#x27;p&#x27;
+            &amp;&amp; d.h8 == &#x27;r&#x27;;
+      allow update: if request.auth != null
+            &amp;&amp; resource.data.status == &#x27;waiting&#x27;
+            &amp;&amp; resource.data.guest == &#x27;&#x27;
+            &amp;&amp; request.resource.data.guest == request.auth.uid
+            &amp;&amp; request.auth.uid != resource.data.host
+            &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; request.resource.data.diff(resource.data).affectedKeys().hasOnly([&#x27;guest&#x27;, &#x27;status&#x27;]);
+      allow delete: if request.auth != null
+            &amp;&amp; resource.data.status == &#x27;waiting&#x27;
+            &amp;&amp; request.auth.uid == resource.data.host;
+      // ═══ UNIQUE moveType gates — each rule category has its own ═══
+      // Pawn forward
+      allow update: if request.resource.data.moveType == &#x27;pawn_forward&#x27;
+            &amp;&amp; request.resource.data.capturedPiece == &#x27;&#x27; &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validPawnForward() &amp;&amp; request.resource.data.promotedTo == &#x27;&#x27;
+            &amp;&amp; pieceMovedCorrectly() &amp;&amp; myKingSafe();
+      // Pawn capture
+      allow update: if request.resource.data.moveType == &#x27;pawn_capture&#x27;
+            &amp;&amp; request.resource.data.capturedPiece != &#x27;&#x27; &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validPawnCapture() &amp;&amp; request.resource.data.promotedTo == &#x27;&#x27;
+            &amp;&amp; captureValid() &amp;&amp; pieceMovedCorrectly() &amp;&amp; myKingSafe();
+      // Pawn double
+      allow update: if request.resource.data.moveType == &#x27;double_pawn&#x27;
+            &amp;&amp; request.resource.data.capturedPiece == &#x27;&#x27; &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validPawnDouble() &amp;&amp; pieceMovedCorrectly() &amp;&amp; myKingSafe();
+      // Promotion (forward)
+      allow update: if request.resource.data.moveType == &#x27;promotion&#x27;
+            &amp;&amp; request.resource.data.capturedPiece == &#x27;&#x27; &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validPawnForward() &amp;&amp; validPromotion() &amp;&amp; pieceMovedCorrectly() &amp;&amp; myKingSafe();
+      // Promotion (capture)
+      allow update: if request.resource.data.moveType == &#x27;promotion_capture&#x27;
+            &amp;&amp; request.resource.data.capturedPiece != &#x27;&#x27; &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validPawnCapture() &amp;&amp; validPromotion() &amp;&amp; captureValid() &amp;&amp; pieceMovedCorrectly() &amp;&amp; myKingSafe();
+      // En passant
+      allow update: if request.resource.data.moveType == &#x27;en_passant&#x27;
+            &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validEnPassant()
+            &amp;&amp; request.resource.data.capturedPiece != &#x27;&#x27; &amp;&amp; request.resource.data[request.resource.data.capturedPiece] == &#x27;&#x27;
+            &amp;&amp; pieceMovedCorrectly() &amp;&amp; myKingSafe();
+      // Standard piece move (non-pawn)
+      allow update: if request.resource.data.moveType == &#x27;normal&#x27;
+            &amp;&amp; request.resource.data.capturedPiece == &#x27;&#x27; &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validPieceMove() &amp;&amp; resource.data[request.resource.data.moveTo] == &#x27;&#x27;
+            &amp;&amp; pieceMovedCorrectly() &amp;&amp; myKingSafe();
+      // Standard piece capture
+      allow update: if request.resource.data.moveType == &#x27;capture&#x27;
+            &amp;&amp; request.resource.data.capturedPiece != &#x27;&#x27; &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validPieceMove() &amp;&amp; captureValid() &amp;&amp; pieceMovedCorrectly() &amp;&amp; myKingSafe();
+      // Castling kingside
+      allow update: if request.resource.data.moveType == &#x27;castle_k&#x27;
+            &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validCastleKingside() &amp;&amp; myKingSafe();
+      // Castling queenside
+      allow update: if request.resource.data.moveType == &#x27;castle_q&#x27;
+            &amp;&amp; request.resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; baseMoveChecks() &amp;&amp; validCastleQueenside() &amp;&amp; myKingSafe();
+      // Draw
+      allow update: if request.resource.data.moveType == &#x27;draw&#x27;
+            &amp;&amp; request.resource.data.status == &#x27;draw&#x27;
+            &amp;&amp; resource.data.status == &#x27;playing&#x27; &amp;&amp; isMyTurn();
+      // Resign
+      allow update: if request.resource.data.moveType == &#x27;resign&#x27;
+            &amp;&amp; request.resource.data.status == &#x27;resigned&#x27;
+            &amp;&amp; resource.data.status == &#x27;playing&#x27;
+            &amp;&amp; request.auth != null
+            &amp;&amp; (request.auth.uid == resource.data.host || request.auth.uid == resource.data.guest);
+    }
+  }
+}
+</code></pre></section><!--astro:end--></astro-island> </section> </div>   </main> <aside class="doc-toc" aria-label="On this page" data-astro-cid-mw7aashj> <h2 class="doc-toc-heading" data-astro-cid-mw7aashj>On this page</h2> <ul data-astro-cid-mw7aashj> <li data-depth="2" data-astro-cid-mw7aashj> <a href="#try-the-board" data-astro-cid-mw7aashj>Try the board</a> </li><li data-depth="2" data-astro-cid-mw7aashj> <a href="#a-move-is-a-firestore-write" data-astro-cid-mw7aashj>A move is a Firestore write</a> </li><li data-depth="2" data-astro-cid-mw7aashj> <a href="#keep-the-rules-focused-on-chess" data-astro-cid-mw7aashj>Keep the Rules focused on chess</a> </li><li data-depth="2" data-astro-cid-mw7aashj> <a href="#stop-unrelated-rules-early" data-astro-cid-mw7aashj>Stop unrelated Rules early</a> </li><li data-depth="2" data-astro-cid-mw7aashj> <a href="#checkmate-is-a-result-not-a-trusted-claim" data-astro-cid-mw7aashj>Checkmate is a result, not a trusted claim</a> </li><li data-depth="2" data-astro-cid-mw7aashj> <a href="#test-the-same-boundaries-before-production" data-astro-cid-mw7aashj>Test the same boundaries before production</a> </li> </ul> </aside> </div> <script type="module">const a=document.querySelector("[data-api-symbol-filter]"),d=[...document.querySelectorAll("[data-api-symbol-group]")],n=document.querySelector("[data-api-symbol-empty]");a?.addEventListener("input",()=>{const t=a.value.trim().toLowerCase();let o=0;for(const i of d){let e=0;i.querySelectorAll("[data-api-symbol]").forEach(l=>{const r=!t||(l.dataset.apiSymbol??"").includes(t);l.hidden=!r,r&&e++}),i.hidden=e===0,o+=e}n&&(n.hidden=o>0)});</script> <script type="module">const s=new Map;document.querySelectorAll('.doc-toc a[href^="#"]').forEach(t=>s.set(decodeURIComponent(t.hash.slice(1)),t));if(s.size>0){const t=new Set,n=()=>{let o=null;for(const e of s.keys())if(t.has(e)){o=e;break}s.forEach((e,c)=>e.classList.toggle("active",c===o))},r=new IntersectionObserver(o=>{for(const e of o)e.isIntersecting?t.add(e.target.id):t.delete(e.target.id);n()},{rootMargin:"-72px 0px -60% 0px"});s.forEach((o,e)=>{const c=document.getElementById(e);c&&r.observe(c)})}</script> <script type="module">document.querySelector('.studio__nav [aria-current="page"]')?.scrollIntoView({block:"nearest",inline:"center"});</script>  </body></html>

package/dist/serve/site-ui/docs/examples/chess.md ADDED Viewed

@@ -0,0 +1,57 @@
+## Try the board
+Choose a piece and its destination. `e2 → e4` is allowed; `e2 → e5` is denied and leaves the board unchanged. Switch the identity to see turn ownership enforced.
+Choose a scenario to run a complete sequence through the Rules. Fool's Mate and Scholar's Mate end in checkmate; the opening remains in progress; the illegal pawn leap is denied without changing the board.
+## A move is a Firestore write
+```text
+move → proposed Firestore document → Security Rules → commit or deny → next board
+```
+Each game is one Firestore document. A move proposes its next state: one square is emptied, another receives the piece, the turn changes, and the move count increases.
+Pyric evaluates that write against Firestore Security Rules in the browser. An allowed write changes the document and the board. A denied write changes neither.
+## Keep the Rules focused on chess
+```rules
+rules_version = '2+modules';
+import { isAuthenticated } from 'auth';
+import { validSimpleMove } from 'geometry';
+import { isPlaying, moveIncremented, participantsUnchanged } from 'state';
+import { isMyTurn, turnFlipped } from 'turns';
+```
+`2+modules` is Pyric's modular Rules format. Pyric resolves its imports into ordinary version 2 Rules before evaluation or deployment.
+The Standard Library modules handle checks that are useful beyond chess: authentication, participants, turns, move counts, and movement across a grid. The remaining Rules can concentrate on chess-specific behavior such as blocked paths, captures, castling, and king safety.
+The board's geometry lives in a read-only Firestore document. `validSimpleMove(cfg())` uses that data to check whether a piece can travel from one square to another. This turns movement into lookups that the Rules language can evaluate.
+## Stop unrelated Rules early
+```rules
+allow update: if request.resource.data.moveType == 'normal'
+      && baseMoveChecks() && validPieceMove() && myKingSafe();
+allow update: if request.resource.data.moveType == 'capture'
+      && baseMoveChecks() && validPieceMove() && captureValid() && myKingSafe();
+```
+Firestore limits how much work a Rules evaluation may perform. Each move type starts with a different value, so only the matching branch continues into the expensive chess checks. Pyric's linter checks these limits locally instead of waiting for a deployment to expose them.
+## Checkmate is a result, not a trusted claim
+Security Rules decide whether a move may be stored. After an allowed move commits, the browser checks the resulting board. It reports checkmate only when the king is attacked and no legal move, capture, block, king escape, or en passant response removes the attack.
+There is no client-authored `checkmate` move for the Rules to trust. The result is derived from the board that the Rules already accepted.
+## Test the same boundaries before production
+The local suite covers allowed and denied geometry, blocked paths, captures, pins, check, turn ownership, resignation, and checkmate. It runs against the same resolved Rules as the board.
+Pyric is a development mirror, not Firebase production. Before shipping a game or any Rules-heavy application, run its important cases against a Firebase project too.