npm - @pyric/cli - Versions diffs - 0.1.0-alpha.14 → 0.1.0-alpha.15 - Mend

@pyric/cli 0.1.0-alpha.14 → 0.1.0-alpha.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (599) hide show

package/dist/serve/site-ui/docs/trust/rules-standard-library/index.html ADDED Viewed

@@ -0,0 +1,861 @@
+<!DOCTYPE html><html lang="en"> <head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Rules standard library reference · Pyric Studio</title><meta name="description" content="Service compatibility, evidence level, and function reference for every bundled Rules module."><link rel="icon" type="image/svg+xml" href="/__pyric/ui/pyric-logo.svg"><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500;700&display=swap" rel="stylesheet"><link rel="stylesheet" href="/__pyric/ui/_astro/_slug_.CXh9yTP1.css">
+<link rel="stylesheet" href="/__pyric/ui/_astro/_slug_.BoKXYrnu.css"></head> <body> <header class="studio__bar" data-astro-cid-mw7aashj> <div class="studio__bar-inner" data-astro-cid-mw7aashj> <a class="studio__brand" href="/__pyric/ui/" aria-label="Pyric Studio" data-astro-cid-mw7aashj>Pyric</a> <nav class="studio__nav" aria-label="Studio tabs" data-astro-cid-mw7aashj> <a class="studio__nav-tab" href="/__pyric/ui/" data-astro-cid-mw7aashj> Home </a><a class="studio__nav-tab" href="/__pyric/ui/firestore" data-astro-cid-mw7aashj> Firestore </a><a class="studio__nav-tab" href="/__pyric/ui/auth" data-astro-cid-mw7aashj> Auth </a><a class="studio__nav-tab" href="/__pyric/ui/rtdb" data-astro-cid-mw7aashj> RTDB </a><a class="studio__nav-tab" href="/__pyric/ui/storage" data-astro-cid-mw7aashj> Storage </a><a class="studio__nav-tab" href="/__pyric/ui/traffic" data-astro-cid-mw7aashj> Traffic </a><a class="studio__nav-tab" href="/__pyric/ui/settings" data-astro-cid-mw7aashj> Settings </a><a class="studio__nav-tab" href="/__pyric/ui/docs" aria-current="page" data-astro-cid-mw7aashj> Docs </a> </nav> </div> </header> <div class="docs-shell" data-astro-cid-mw7aashj>  <details class="docs-nav-drawer" data-astro-cid-mw7aashj> <summary data-astro-cid-mw7aashj>Navigate</summary> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div> <script type="module">let i=null;function d(t){return i||(i=fetch(t).then(e=>e.json())),i}function l(t,e){return t.title.toLowerCase().includes(e)||t.excerpt.toLowerCase().includes(e)?!0:t.headings.some(r=>r.text.toLowerCase().includes(e))}function u(t,e,r){if(e.innerHTML="",t.length===0){e.hidden=!1;{const n=document.createElement("li");n.className="docs-search-empty",n.textContent="No matches",e.appendChild(n)}return}e.hidden=!1;for(const n of t.slice(0,8)){const s=document.createElement("li"),c=document.createElement("a");c.href=n.path;const o=document.createElement("span");o.className="docs-search-result-title",o.textContent=n.title;const a=document.createElement("span");a.className="docs-search-result-meta",a.textContent=[n.group,n.section].filter(Boolean).join(" / "),c.append(o,a),s.appendChild(c),e.appendChild(s)}}document.querySelectorAll(".docs-search").forEach(t=>{const e=t.dataset.indexUrl,r=t.querySelector(".docs-search-input"),n=t.querySelector(".docs-search-results");r.addEventListener("input",async()=>{const s=r.value.trim().toLowerCase();if(!s){n.hidden=!0,n.innerHTML="";return}const{pages:c}=await d(e);r.value.trim().toLowerCase()===s&&u(c.filter(o=>l(o,s)),n)}),r.addEventListener("focus",()=>{d(e),n.childElementCount>0&&(n.hidden=!1)}),r.addEventListener("keydown",s=>{s.key==="Escape"&&(r.value="",n.hidden=!0,n.innerHTML="",r.blur())}),r.addEventListener("blur",()=>{window.setTimeout(()=>{n.hidden=!0},150)})});document.addEventListener("keydown",t=>{if(!(t.metaKey||t.ctrlKey)||t.key.toLowerCase()!=="k")return;const e=[...document.querySelectorAll(".docs-search-input")].find(r=>r.offsetParent!==null);e&&(t.preventDefault(),e.focus(),e.select())});</script> <details class="docs-nav-group"> <summary>Overview</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/overview/"> Overview </a> </li><li> <a href="/__pyric/ui/docs/tutorial/"> Tutorial </a> </li><li> <a href="/__pyric/ui/docs/examples/"> Examples </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Get started</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/get-started/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/get-started/how-the-swap-works/"> How the swap works </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Build</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/build/authentication/"> Authentication </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-firestore/"> Cloud Firestore </a> </li><li> <a href="/__pyric/ui/docs/build/realtime-database/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-storage/"> Cloud Storage </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-messaging/"> Cloud Messaging </a> </li><li> <a href="/__pyric/ui/docs/build/ai-logic/"> AI Logic </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Secure &amp; debug</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/secure/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/secure/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/secure/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/secure/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/secure/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/secure/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/secure/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/secure/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Examples </h2> <ul> <li> <a href="/__pyric/ui/docs/examples/chess/"> Chess showcase </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Observe &amp; shape</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/observe/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/observe/resolve-runtime-status/"> Runtime status </a> </li><li> <a href="/__pyric/ui/docs/observe/shape-your-data/"> Seed, snapshot, replay </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Ship &amp; test</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/ship/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Work with an agent</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/agent/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/agent/work-with-an-agent/"> Use the MCP tools </a> </li><li> <a href="/__pyric/ui/docs/agent/watch-and-review/"> Watch in Pyric Studio </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" open> <summary>Trust</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/trust/versioning-and-compatibility/"> Versioning and the fb tag </a> </li><li> <a href="/__pyric/ui/docs/trust/storage-rules-stdlib-research/"> Storage Rules modules: evidence and design </a> </li><li> <a href="/__pyric/ui/docs/trust/rules-standard-library/" aria-current="page"> Rules standard library reference </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/conformance-scores/"> Public API coverage </a> </li><li> <a href="/__pyric/ui/docs/trust/how-we-know-it-matches-firebase/"> How we know it matches Firebase </a> </li><li> <a href="/__pyric/ui/docs/app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/functions-rtdb-compat/"> Functions · RTDB </a> </li><li> <a href="/__pyric/ui/docs/rules-compat/"> Rules </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group"> <summary>Reference</summary> <div class="docs-nav-group-body docs-nav-group-body--reference"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/api-reference/"> API reference </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">pyric</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-app-reference-api/"> pyric/app </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-api/"> pyric/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-reference-api/"> pyric/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-reference-api/"> pyric/ai </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-scripting-reference-api/"> pyric/ai/scripting </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-reference-api/"> pyric/database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-api/"> pyric/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-reference-api/"> pyric/messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-sw-reference-api/"> pyric/messaging/sw </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-api/"> pyric/rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-api/"> pyric/sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-firestore-reference-api/"> pyric/sandbox/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-database-reference-api/"> pyric/sandbox/database </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">pyric-admin</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-app-reference-api/"> pyric-admin/app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-api/"> pyric-admin/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth-reference-api/"> pyric-admin/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database-reference-api/"> pyric-admin/database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage-reference-api/"> pyric-admin/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-messaging-reference-api/"> pyric-admin/messaging </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">create-pyric</h2> <ul> <li> <a href="/__pyric/ui/docs/create-pyric-reference-api/"> create-pyric </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">@pyric/cli</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-credentials-node-reference-api/"> @pyric/cli/credentials/node </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-verify-reference-api/"> @pyric/cli/verify </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-reference-api/"> @pyric/cli/conformance </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-browser-reference-api/"> @pyric/cli/conformance/browser </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-docs-reference-api/"> @pyric/cli/conformance/docs </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-assurance-reference-api/"> @pyric/cli/assurance </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-assurance-browser-reference-api/"> @pyric/cli/assurance/browser </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-bridge-reference-api/"> @pyric/cli/bridge </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-bridge-client-reference-api/"> @pyric/cli/bridge/client </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-discover-reference-api/"> @pyric/cli/discover </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-vite-reference-api/"> @pyric/cli/vite </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-serve-worker-reference-api/"> @pyric/cli/serve/worker </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-remote-reference-api/"> @pyric/cli/remote </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-register-reference-api/"> @pyric/cli/register </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">@pyric/ui</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-ui-auth-reference-api/"> @pyric/ui/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-auth-hooks-reference-api/"> @pyric/ui/auth/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-primitives-reference-api/"> @pyric/ui/primitives </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-firestore-reference-api/"> @pyric/ui/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-firestore-hooks-reference-api/"> @pyric/ui/firestore/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rtdb-reference-api/"> @pyric/ui/rtdb </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-storage-reference-api/"> @pyric/ui/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-storage-hooks-reference-api/"> @pyric/ui/storage/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-traffic-reference-api/"> @pyric/ui/traffic </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-traffic-hooks-reference-api/"> @pyric/ui/traffic/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-events-reference-api/"> @pyric/ui/events </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-events-hooks-reference-api/"> @pyric/ui/events/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-agents-reference-api/"> @pyric/ui/agents </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rules-reference-api/"> @pyric/ui/rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rules-hooks-reference-api/"> @pyric/ui/rules/hooks </a> </li> </ul> </div> </div> </details> </nav> </details> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div>  <details class="docs-nav-group" id="nav-group-overview"> <summary>Overview</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/overview/"> Overview </a> </li><li> <a href="/__pyric/ui/docs/tutorial/"> Tutorial </a> </li><li> <a href="/__pyric/ui/docs/examples/"> Examples </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-get-started"> <summary>Get started</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/get-started/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/get-started/how-the-swap-works/"> How the swap works </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-build"> <summary>Build</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/build/authentication/"> Authentication </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-firestore/"> Cloud Firestore </a> </li><li> <a href="/__pyric/ui/docs/build/realtime-database/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-storage/"> Cloud Storage </a> </li><li> <a href="/__pyric/ui/docs/build/cloud-messaging/"> Cloud Messaging </a> </li><li> <a href="/__pyric/ui/docs/build/ai-logic/"> AI Logic </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-secure-debug"> <summary>Secure &amp; debug</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/secure/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/secure/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/secure/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/secure/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/secure/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/secure/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/secure/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/secure/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-secure-debug-examples"> Examples </h2> <ul> <li> <a href="/__pyric/ui/docs/examples/chess/"> Chess showcase </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-observe-shape"> <summary>Observe &amp; shape</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/observe/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/observe/resolve-runtime-status/"> Runtime status </a> </li><li> <a href="/__pyric/ui/docs/observe/shape-your-data/"> Seed, snapshot, replay </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-ship-test"> <summary>Ship &amp; test</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/ship/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-work-with-an-agent"> <summary>Work with an agent</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/agent/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/agent/work-with-an-agent/"> Use the MCP tools </a> </li><li> <a href="/__pyric/ui/docs/agent/watch-and-review/"> Watch in Pyric Studio </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-trust" open> <summary>Trust</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/trust/versioning-and-compatibility/"> Versioning and the fb tag </a> </li><li> <a href="/__pyric/ui/docs/trust/storage-rules-stdlib-research/"> Storage Rules modules: evidence and design </a> </li><li> <a href="/__pyric/ui/docs/trust/rules-standard-library/" aria-current="page"> Rules standard library reference </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-conformance"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/conformance-scores/"> Public API coverage </a> </li><li> <a href="/__pyric/ui/docs/trust/how-we-know-it-matches-firebase/"> How we know it matches Firebase </a> </li><li> <a href="/__pyric/ui/docs/app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/functions-rtdb-compat/"> Functions · RTDB </a> </li><li> <a href="/__pyric/ui/docs/rules-compat/"> Rules </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group" id="nav-group-reference"> <summary>Reference</summary> <div class="docs-nav-group-body docs-nav-group-body--reference"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/api-reference/"> API reference </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">pyric</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-app-reference-api/"> pyric/app </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-api/"> pyric/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-reference-api/"> pyric/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-reference-api/"> pyric/ai </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-scripting-reference-api/"> pyric/ai/scripting </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-reference-api/"> pyric/database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-api/"> pyric/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-reference-api/"> pyric/messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-sw-reference-api/"> pyric/messaging/sw </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-api/"> pyric/rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-api/"> pyric/sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-firestore-reference-api/"> pyric/sandbox/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-database-reference-api/"> pyric/sandbox/database </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">pyric-admin</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-app-reference-api/"> pyric-admin/app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-api/"> pyric-admin/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth-reference-api/"> pyric-admin/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database-reference-api/"> pyric-admin/database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage-reference-api/"> pyric-admin/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-messaging-reference-api/"> pyric-admin/messaging </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">create-pyric</h2> <ul> <li> <a href="/__pyric/ui/docs/create-pyric-reference-api/"> create-pyric </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">@pyric/cli</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-credentials-node-reference-api/"> @pyric/cli/credentials/node </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-verify-reference-api/"> @pyric/cli/verify </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-reference-api/"> @pyric/cli/conformance </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-browser-reference-api/"> @pyric/cli/conformance/browser </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-conformance-docs-reference-api/"> @pyric/cli/conformance/docs </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-assurance-reference-api/"> @pyric/cli/assurance </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-assurance-browser-reference-api/"> @pyric/cli/assurance/browser </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-bridge-reference-api/"> @pyric/cli/bridge </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-bridge-client-reference-api/"> @pyric/cli/bridge/client </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-discover-reference-api/"> @pyric/cli/discover </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-vite-reference-api/"> @pyric/cli/vite </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-serve-worker-reference-api/"> @pyric/cli/serve/worker </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-remote-reference-api/"> @pyric/cli/remote </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-register-reference-api/"> @pyric/cli/register </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading">@pyric/ui</h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-ui-auth-reference-api/"> @pyric/ui/auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-auth-hooks-reference-api/"> @pyric/ui/auth/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-primitives-reference-api/"> @pyric/ui/primitives </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-firestore-reference-api/"> @pyric/ui/firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-firestore-hooks-reference-api/"> @pyric/ui/firestore/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rtdb-reference-api/"> @pyric/ui/rtdb </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-storage-reference-api/"> @pyric/ui/storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-storage-hooks-reference-api/"> @pyric/ui/storage/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-traffic-reference-api/"> @pyric/ui/traffic </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-traffic-hooks-reference-api/"> @pyric/ui/traffic/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-events-reference-api/"> @pyric/ui/events </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-events-hooks-reference-api/"> @pyric/ui/events/hooks </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-agents-reference-api/"> @pyric/ui/agents </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rules-reference-api/"> @pyric/ui/rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-ui-rules-hooks-reference-api/"> @pyric/ui/rules/hooks </a> </li> </ul> </div> </div> </details> </nav> <main class="doc-main" data-astro-cid-mw7aashj> <nav class="docs-breadcrumbs" aria-label="Breadcrumb"> <ol> <li>  <a href="/__pyric/ui/docs/trust/versioning-and-compatibility/">Trust</a> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <span aria-current="page">Rules standard library reference</span> </li> </ol> </nav>  <article class="prose" data-astro-cid-mw7aashj> <h1 id="rules-standard-library--module-manifest">Rules Standard Library — Module Manifest</h1>
+<p>Last audited: 2026-07-21</p>
+<p>The catalog remains Firestore-first, with a small Storage-native layer. Service compatibility is enforced per
+module/export by the <code>2+modules</code> resolver rather than inferred from shared Rules
+syntax. Only <code>auth</code> and <code>membership</code> are admitted for both Firestore and
+Storage; the <code>storage/*</code> modules are Storage-only; all remaining modules are
+Firestore-only. Newly promoted cross-service and Storage-native modules are
+listed only after their production observations replay locally and their
+executable fixtures pass. Legacy Firestore modules retain the evidence level
+shown in each row’s <strong>Verified</strong> column.</p>
+<h2 id="module-index">Module Index</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Module</th><th>Services</th><th>Dependency</th><th>Pattern</th><th>Verified</th></tr></thead><tbody><tr><td><a href="#auth">auth</a></td><td>Firestore + Storage</td><td>Self-contained</td><td>—</td><td>Firestore + Storage production</td></tr><tr><td><a href="#validation">validation</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator</td></tr><tr><td><a href="#lobby">lobby</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator</td></tr><tr><td><a href="#turns">turns</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator</td></tr><tr><td><a href="#state">state</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator</td></tr><tr><td><a href="#membership">membership</a></td><td>Firestore + Storage</td><td>Self-contained</td><td>—</td><td>Firestore + Storage production</td></tr><tr><td><a href="#storageuploads">storage/uploads</a></td><td>Storage</td><td>Self-contained</td><td>—</td><td>Storage evaluator + production oracle</td></tr><tr><td><a href="#storagemetadata">storage/metadata</a></td><td>Storage</td><td>Self-contained</td><td>—</td><td>Storage evaluator + production oracle</td></tr><tr><td><a href="#storageobjects">storage/objects</a></td><td>Storage</td><td>Self-contained</td><td>—</td><td>Storage evaluator + production oracle</td></tr><tr><td><a href="#storagetime">storage/time</a></td><td>Storage</td><td>Self-contained</td><td>—</td><td>Storage evaluator + production oracle</td></tr><tr><td><a href="#lifecycle">lifecycle</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator</td></tr><tr><td><a href="#transitions">transitions</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator</td></tr><tr><td><a href="#geometry">geometry</a></td><td>Firestore</td><td>Explicit param</td><td>Patterns 12-14</td><td>Simulator + live Rules validation</td></tr><tr><td><a href="#counters">counters</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator</td></tr><tr><td><a href="#timing">timing</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator + live Rules validation</td></tr><tr><td><a href="#content">content</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator</td></tr><tr><td><a href="#spaces">spaces</a></td><td>Firestore</td><td>Explicit param</td><td>—</td><td>Simulator + live Rules validation</td></tr><tr><td><a href="#joining">joining</a></td><td>Firestore</td><td>Self-contained</td><td>—</td><td>Simulator + live Rules validation</td></tr><tr><td><a href="#atomic">atomic</a></td><td>Firestore</td><td>Explicit param</td><td>—</td><td>Simulator bodies + live real-DB validation</td></tr></tbody></table></div>
+<h2 id="dependency-types">Dependency Types</h2>
+<ul>
+<li><strong>Self-contained</strong>: Only references <code>request</code>, <code>resource</code>, <code>request.auth</code>. No user-defined functions needed.</li>
+<li><strong>Explicit param</strong>: Requires caller to pass data (e.g., config doc result) as a function parameter. No implicit dependencies.</li>
+</ul>
+<h2 id="modules">Modules</h2>
+<h3 id="auth">auth</h3>
+<p>Access control primitives.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>isAuthenticated()</code></td><td>—</td><td>bool</td><td><code>request.auth != null</code></td></tr><tr><td><code>isOwner(userId)</code></td><td>userId: string field path</td><td>bool</td><td><code>request.auth.uid == userId</code> — when <code>isOwner(resource.data.&#x3C;field>)</code> guards a <code>list</code> rule, queries must carry <code>where('&#x3C;field>', '==', request.auth.uid)</code> (rules are not filters)</td></tr></tbody></table></div>
+<p>File: <code>auth.rules</code> | Tests: <code>auth.test.json</code></p>
+<h3 id="validation">validation</h3>
+<p>Document field validation.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>hasRequired(fields)</code></td><td>fields: list of field names</td><td>bool</td><td><code>request.resource.data.keys().hasAll(fields)</code></td></tr><tr><td><code>hasOnly(fields)</code></td><td>fields: list of field names</td><td>bool</td><td><code>request.resource.data.keys().hasOnly(fields)</code></td></tr><tr><td><code>validString(field, min, max)</code></td><td>field: string, min/max: int</td><td>bool</td><td>Incoming field is a string with size in [min, max]; missing field fails (null-on-miss, not error)</td></tr><tr><td><code>isOneOf(field, values)</code></td><td>field: string, values: list</td><td>bool</td><td>Incoming field value is in the allowed list (enum check)</td></tr></tbody></table></div>
+<p>File: <code>validation.rules</code> | Tests: <code>validation.test.json</code></p>
+<h3 id="lobby">lobby</h3>
+<p>Game session lifecycle (create, join, cancel).</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>validCreate()</code></td><td>—</td><td>bool</td><td>Host is auth user, guest empty, status waiting</td></tr><tr><td><code>validJoin()</code></td><td>—</td><td>bool</td><td>Guest slot empty, joiner is not host, status → playing</td></tr><tr><td><code>canCancel()</code></td><td>—</td><td>bool</td><td>Status is waiting, requester is host</td></tr></tbody></table></div>
+<p>Convention: uses <code>host</code>/<code>guest</code>/<code>status</code> fields on document.</p>
+<p>File: <code>lobby.rules</code> | Tests: <code>lobby.test.json</code></p>
+<h3 id="turns">turns</h3>
+<p>Turn enforcement for two-player games.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>isMyTurn()</code></td><td>—</td><td>bool</td><td>Current player matches auth uid (host/guest)</td></tr><tr><td><code>turnFlipped()</code></td><td>—</td><td>bool</td><td>currentTurn alternates between host and guest</td></tr></tbody></table></div>
+<p>Convention: uses <code>host</code>/<code>guest</code>/<code>currentTurn</code> fields on document.</p>
+<p>File: <code>turns.rules</code> | Tests: <code>turns.test.json</code></p>
+<h3 id="state">state</h3>
+<p>Game state tracking.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>isPlaying()</code></td><td>—</td><td>bool</td><td><code>resource.data.status == 'playing'</code></td></tr><tr><td><code>moveIncremented()</code></td><td>—</td><td>bool</td><td>moveCount increased by exactly 1</td></tr><tr><td><code>participantsUnchanged()</code></td><td>—</td><td>bool</td><td>host and guest fields unchanged</td></tr></tbody></table></div>
+<p>File: <code>state.rules</code> | Tests: <code>state.test.json</code></p>
+<h3 id="membership">membership</h3>
+<p>Role-based and claims-based access control.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>hasClaim(claim)</code></td><td>claim: string</td><td>bool</td><td>Auth token has non-null value for claim key</td></tr><tr><td><code>hasClaimRole(claim, role)</code></td><td>claim: string, role: string</td><td>bool</td><td>Auth token claim matches specific role value</td></tr><tr><td><code>isMemberOf(membersMap)</code></td><td>membersMap: map field</td><td>bool</td><td>Auth uid exists as key in members map</td></tr><tr><td><code>hasRole(membersMap, role)</code></td><td>membersMap: map field, role: string</td><td>bool</td><td>Auth uid has specific role in members map</td></tr></tbody></table></div>
+<p>File: <code>membership.rules</code> | Tests: <code>membership.test.json</code></p>
+<h3 id="storageuploads">storage/uploads</h3>
+<p>Storage upload-request limits over declared size and MIME metadata.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>sizeAtMost(maxBytes)</code></td><td>maxBytes: int</td><td>bool</td><td>Incoming size is at most the inclusive byte limit</td></tr><tr><td><code>sizeBetween(minBytes, maxBytes)</code></td><td>min/max: int</td><td>bool</td><td>Incoming size is within the inclusive range</td></tr><tr><td><code>contentTypeMatches(pattern)</code></td><td>pattern: string</td><td>bool</td><td>Incoming MIME metadata matches the entire RE2 pattern</td></tr><tr><td><code>contentTypeIsOneOf(types)</code></td><td>types: list</td><td>bool</td><td>Incoming MIME metadata equals one allowlisted value</td></tr></tbody></table></div>
+<p>These functions inspect metadata supplied with the object. They do not inspect
+or authenticate file bytes, so they are upload-policy helpers—not content
+validation.</p>
+<p>File: <code>storage/uploads.rules</code> | Tests: <code>storage/uploads.test.json</code></p>
+<h3 id="storagemetadata">storage/metadata</h3>
+<p>Custom-metadata shape and ownership helpers.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>hasRequiredMetadata(keys)</code></td><td>keys: list</td><td>bool</td><td>Incoming custom metadata contains every required own key; extras are allowed</td></tr><tr><td><code>metadataString(key, min, max)</code></td><td>key: string, min/max: int</td><td>bool</td><td>Incoming value is a bounded string; missing keys deny</td></tr><tr><td><code>incomingMetadataOwner(key)</code></td><td>key: string</td><td>bool</td><td>Incoming metadata value equals the authenticated UID</td></tr><tr><td><code>existingMetadataOwner(key)</code></td><td>key: string</td><td>bool</td><td>Existing metadata value equals the authenticated UID</td></tr></tbody></table></div>
+<p>File: <code>storage/metadata.rules</code> | Tests: <code>storage/metadata.test.json</code></p>
+<h3 id="storageobjects">storage/objects</h3>
+<p>Operation identity without unsafe missing-binding null checks.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>isCreate()</code></td><td>—</td><td>bool</td><td><code>request.method == 'create'</code></td></tr><tr><td><code>isUpdate()</code></td><td>—</td><td>bool</td><td><code>request.method == 'update'</code></td></tr><tr><td><code>isDelete()</code></td><td>—</td><td>bool</td><td><code>request.method == 'delete'</code></td></tr></tbody></table></div>
+<p>File: <code>storage/objects.rules</code> | Tests: <code>storage/objects.test.json</code></p>
+<h3 id="storagetime">storage/time</h3>
+<p>Strict freshness windows over server-owned existing-object timestamps.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>createdWithin(seconds)</code></td><td>seconds: int</td><td>bool</td><td>Request time is strictly before creation time plus the window</td></tr><tr><td><code>updatedWithin(seconds)</code></td><td>seconds: int</td><td>bool</td><td>Request time is strictly before update time plus the window</td></tr></tbody></table></div>
+<p>Equality with the deadline denies. These helpers require an existing object.</p>
+<p>File: <code>storage/time.rules</code> | Tests: <code>storage/time.test.json</code></p>
+<h3 id="lifecycle">lifecycle</h3>
+<p>Field immutability and timestamp enforcement.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>fieldUnchanged(field)</code></td><td>field: string</td><td>bool</td><td>Field value identical before and after write</td></tr><tr><td><code>immutableFields(fields)</code></td><td>fields: list of strings</td><td>bool</td><td>All listed fields unchanged (uses MapDiff, replaces chained fieldUnchanged)</td></tr><tr><td><code>isServerTimestamp(field)</code></td><td>field: string</td><td>bool</td><td>Field value equals <code>request.time</code></td></tr><tr><td><code>onlyFieldsChanged(fields)</code></td><td>fields: list of strings</td><td>bool</td><td>Every changed field is in the list — the dual of immutableFields (unlisted fields implicitly immutable). Top-level keys only</td></tr><tr><td><code>nFieldsChanged(n)</code></td><td>n: int</td><td>bool</td><td>Exactly n top-level fields changed (n=1 = board-integrity / edit-one-field guard)</td></tr></tbody></table></div>
+<p>File: <code>lifecycle.rules</code> | Tests: <code>lifecycle.test.json</code></p>
+<h3 id="transitions">transitions</h3>
+<p>State machine enforcement.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>validTransition(field, from, to)</code></td><td>field: string, from: string, to: string</td><td>bool</td><td>Field transitions from one value to another</td></tr><tr><td><code>statusIs(field, value)</code></td><td>field: string, value: string</td><td>bool</td><td>Current (pre-write) field matches value</td></tr><tr><td><code>newStatusIs(field, value)</code></td><td>field: string, value: string</td><td>bool</td><td>Incoming (post-write) field matches value</td></tr></tbody></table></div>
+<p>File: <code>transitions.rules</code> | Tests: <code>transitions.test.json</code></p>
+<h3 id="geometry">geometry</h3>
+<p>Movement game validation via config document lookup. Caller must pass the config data from a <code>get()</code> call — no implicit dependencies.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>validSimpleMove(cfg)</code></td><td>cfg: config doc <code>.data</code> from <code>get()</code></td><td>bool</td><td><code>cfg.moves[piece][from][to] == true</code> — validates geometry for any piece type</td></tr><tr><td><code>validJumpMove(cfg)</code></td><td>cfg: config doc <code>.data</code> from <code>get()</code></td><td>bool</td><td><code>cfg.jumps[piece][from][to] == captured</code> — validates jump + captured cell</td></tr></tbody></table></div>
+<p><strong>Usage</strong>:</p>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="plaintext"><code><span class="line"><span>import { validSimpleMove, validJumpMove } from 'geometry';</span></span>
+<span class="line"><span></span></span>
+<span class="line"><span>function config() {</span></span>
+<span class="line"><span>  return get(/databases/$(database)/documents/gameConfig/checkers).data;</span></span>
+<span class="line"><span>}</span></span>
+<span class="line"><span></span></span>
+<span class="line"><span>// Pass config data explicitly</span></span>
+<span class="line"><span>allow update: if validSimpleMove(config()) &#x26;&#x26; piecePlaced() &#x26;&#x26; moveIntegrity();</span></span>
+<span class="line"><span>allow update: if validJumpMove(config()) &#x26;&#x26; captureValid() &#x26;&#x26; moveIntegrity();</span></span></code></pre>
+<p><strong>Config doc schema</strong>: See Pattern 15 in PATTERNS.md. Keys: <code>moves[pieceType][from][to] = true</code>, <code>jumps[pieceType][from][to] = capturedCell</code>.</p>
+<p>File: <code>geometry.rules</code> | Tests: <code>geometry.test.json</code>
+Proven by lookup-doc, path-blocking, and checkers lookup validation probes.
+Patterns: 12 (Config Document), 13 (Path Blocking), 14 (Piece-Type-Agnostic)</p>
+<h3 id="counters">counters</h3>
+<p>Denormalized numeric integrity (likes, votes, moves, quantities). Generalizes state’s <code>moveIncremented()</code> to any field.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>incrementedBy(field, n)</code></td><td>field: string, n: int</td><td>bool</td><td>Field changed by exactly n vs the existing doc (n may be negative). Update rules only</td></tr><tr><td><code>changedBy(field, min, max)</code></td><td>field: string, min/max: int</td><td>bool</td><td>Field’s delta is within [min, max]; zero delta passes when the range spans 0</td></tr><tr><td><code>boundedNumber(field, min, max)</code></td><td>field: string, min/max: number</td><td>bool</td><td>Incoming value is an int or float within [min, max]; missing field fails closed</td></tr></tbody></table></div>
+<p>File: <code>counters.rules</code> | Tests: <code>counters.test.json</code></p>
+<h3 id="timing">timing</h3>
+<p>Cooldown / rate-limit enforcement. Refutes the “rules cannot rate-limit” assumption (jrpg F-004) — verified against the production engine.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>cooldownElapsed(field, seconds)</code></td><td>field: string (Timestamp field), seconds: int</td><td>bool</td><td><code>request.time > resource.data[field] + duration.value(seconds, 's')</code> — the stored timestamp is strictly older than the window. Pair with <code>isServerTimestamp(field)</code> on the same write so the timestamp can’t be forged</td></tr></tbody></table></div>
+<p>Update rules only (needs <code>resource</code>). Missing / non-timestamp field errors → denies (fail-closed).</p>
+<p>File: <code>timing.rules</code> | Tests: <code>timing.test.json</code>
+Proven by a live Rules Test API validation probe; also records the RFC3339-coercion divergence between the live API and the simulator.</p>
+<h3 id="content">content</h3>
+<p>Author-owned documents — posts, notes, docs, comments, tasks. Field names are parameters, not conventions.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>validAuthorCreate(authorField)</code></td><td>authorField: string</td><td>bool</td><td>Signed in, and the incoming doc’s author field is the caller. Create rules</td></tr><tr><td><code>isAuthor(authorField)</code></td><td>authorField: string</td><td>bool</td><td>Caller is the EXISTING doc’s author. Update/delete rules</td></tr><tr><td><code>canReadContent(statusField, authorField)</code></td><td>statusField, authorField: string</td><td>bool</td><td>Published is public; anything else visible to its author only. <code>get</code> rules — list queries must prove <code>status == 'published'</code> via query filters (rules are not filters)</td></tr><tr><td><code>notDeleted()</code></td><td>—</td><td>bool</td><td>Soft-delete guard: <code>resource.data['deleted'] != true</code> (bracket access — null-on-miss, absent field passes)</td></tr></tbody></table></div>
+<p>File: <code>content.rules</code> | Tests: <code>content.test.json</code></p>
+<h3 id="spaces">spaces</h3>
+<p>Cross-document membership gating for shared spaces (teams, rooms, groups, projects, parties): a PARENT document defines who may touch its children. Explicit param — the caller reads the parent doc once via a <code>space()</code> helper (<code>get()</code> is cached per request) and passes its <code>.data</code> in.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>isSpaceMember(spaceData)</code></td><td>spaceData: parent doc <code>.data</code></td><td>bool</td><td>Caller’s uid is in <code>spaceData.members</code> — covers BOTH list (<code>['a','b']</code>) and map (<code>{a:'admin'}</code>) shapes</td></tr><tr><td><code>hasSpaceRole(spaceData, role)</code></td><td>+ role: string</td><td>bool</td><td>Caller’s role in a MAP-shaped members field equals <code>role</code>; denies on list shape (no roles)</td></tr><tr><td><code>validMemberCreate(spaceData, authorField)</code></td><td>+ authorField: string</td><td>bool</td><td>Member AND the incoming child doc’s author field is the caller — the “post a message / add a task” guard</td></tr></tbody></table></div>
+<p>Missing members field, non-member uid, and missing parent doc (get() errors) all fail CLOSED — production-verified.</p>
+<p>File: <code>spaces.rules</code> | Tests: <code>spaces.test.json</code>
+Proven by simulator and live Rules validation, including list-vs-map <code>in</code> semantics and role lookup.</p>
+<h3 id="joining">joining</h3>
+<p>How membership CHANGES, safely — self-service join/leave on a MAP-shaped members field with no privilege escalation. Compose with <code>lifecycle.onlyFieldsChanged(['members'])</code> so the write can’t touch anything else, and with <code>spaces</code> for the read side.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>onlyAddedSelf(membersField, role)</code></td><td>membersField, role: string</td><td>bool</td><td>The write adds EXACTLY the caller at EXACTLY <code>role</code> — nobody changed, nobody removed, no-op denied (set equality, not hasOnly)</td></tr><tr><td><code>onlyRemovedSelf(membersField)</code></td><td>membersField: string</td><td>bool</td><td>The write removes EXACTLY the caller — nobody added, nobody changed</td></tr></tbody></table></div>
+<p>Production-verified 10/10 (field-level map diff IS reliable — the “nested diff unreliable” finding is about diffing through the document diff, not an explicit <code>.diff()</code> on two map values). Finding this vertical’s semantics also uncovered and fixed a false-permissive simulator bug (FirestoreSet <code>==</code> was always true — RULES-B13, COMPAT row 136b).</p>
+<p>Promoted through <a href="#atomic"><code>atomic</code></a>: single-use invite consumption (join + mark invite used atomically via batch write + <code>getAfter()</code>) is not expressible in either test engine’s mock surface, so real-database validation now owns that wiring contract.</p>
+<p>File: <code>joining.rules</code> | Tests: <code>joining.test.json</code>
+Proven by simulator and live Rules validation after RULES-B13.</p>
+<h3 id="atomic">atomic</h3>
+<p>Cross-document integrity for BATCH writes via the get()/getAfter() pair: “this write is valid only if a companion write happened in the same atomic batch”. Denormalized counters, single-use invite consumption, paired documents.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Function</th><th>Params</th><th>Returns</th><th>Description</th></tr></thead><tbody><tr><td><code>companionChangedBy(before, after, field, n)</code></td><td>before/after: the companion doc’s get()/getAfter() data</td><td>bool</td><td>The companion’s field changed by EXACTLY n in this batch; a solo write denies (after == before)</td></tr><tr><td><code>consumedFlag(before, after, flagField)</code></td><td>+ flagField: string</td><td>bool</td><td>Single-use consumption: pre-batch false AND post-batch true — replays deny (already true), solo writes deny</td></tr></tbody></table></div>
+<p>Live-verified against a REAL production database (rules deployed, batch commits as a signed-in user, rules restored byte-identical): companion visibility, solo/wrong-delta denial, single-use + replay denial, and out-of-batch getAfter() == get() fallback (which matches the simulator’s fallthrough — the sim’s only gap is IN-batch companions, so fixtures test the function bodies with explicit map literals and live validation owns the wiring).</p>
+<p>Remember: every write in a batch is evaluated — companion writes need their own allow rules.</p>
+<p>File: <code>atomic.rules</code> | Tests: <code>atomic.test.json</code>
+Proven by a real-DB validation matrix.</p>
+<h2 id="audit-process">Audit Process</h2>
+<p>When new patterns or approaches are discovered:</p>
+<ol>
+<li><strong>Check this manifest</strong> — does an existing module need updating? Is anything obsolete?</li>
+<li><strong>Evaluate for stdlib</strong> — is the function reusable across games/apps, or game-specific?</li>
+<li><strong>Choose dependency type</strong> — prefer self-contained. If external data is needed, use explicit parameters (never implicit hooks).</li>
+<li><strong>Add .rules + .test.json</strong> — every module must have both. Firestore
+fixtures are executed by <code>test/rules/modules/stdlib-cases.test.ts</code>; Storage
+fixtures are executed by <code>test/storage/stdlib-cases.test.ts</code> (every case must decide
+ALLOW/DENY as expected; UNSUPPORTED is a hard failure). Cases whose
+rules call <code>get()</code>/<code>exists()</code> must carry <code>functionMocks</code> so the
+fixture is self-contained.</li>
+<li><strong>Verify the claim with the right oracle</strong> — for pure function bodies, use
+exact Rules Test API cases plus an AST source lock and local replay. For
+resource-dependent claims (real documents or objects, IAM, lookup budgets,
+caching, or consistency), deploy a bounded live v1 resource probe, restore
+the prior release, and verify cleanup. Record the evidence in the manifest.</li>
+<li><strong>Update this manifest</strong> — add the module, update the audit date.</li>
+</ol>
+<h3 id="stdlib-vs-pattern-vs-asset">Stdlib vs Pattern vs Asset</h3>
+<div class="table-scroll">
+<table><thead><tr><th>Where</th><th>What belongs there</th><th>Example</th></tr></thead><tbody><tr><td><strong>Stdlib module</strong></td><td>Reusable function, works across games/apps</td><td><code>isMyTurn()</code>, <code>validSimpleMove(cfg)</code></td></tr><tr><td><strong>Pattern</strong> (PATTERNS.md)</td><td>Technique/approach agents need to understand</td><td>Config document pattern, path blocking</td></tr><tr><td><strong>Asset</strong> (generator)</td><td>Reference implementation for a specific game</td><td><code>checkers-lookup-generator.ts</code></td></tr></tbody></table></div>
+<p>Rule of thumb: if you’d copy-paste it into every game, it’s stdlib. If you’d adapt it per game, it’s a pattern. If it’s a complete working example, it’s an asset.</p> </article> </main> <aside class="doc-toc" aria-label="On this page" data-astro-cid-mw7aashj> <h2 class="doc-toc-heading" data-astro-cid-mw7aashj>On this page</h2> <ul data-astro-cid-mw7aashj> <li data-depth="2" data-astro-cid-mw7aashj> <a href="#module-index" data-astro-cid-mw7aashj>Module Index</a> </li><li data-depth="2" data-astro-cid-mw7aashj> <a href="#dependency-types" data-astro-cid-mw7aashj>Dependency Types</a> </li><li data-depth="2" data-astro-cid-mw7aashj> <a href="#modules" data-astro-cid-mw7aashj>Modules</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#auth" data-astro-cid-mw7aashj>auth</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#validation" data-astro-cid-mw7aashj>validation</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#lobby" data-astro-cid-mw7aashj>lobby</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#turns" data-astro-cid-mw7aashj>turns</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#state" data-astro-cid-mw7aashj>state</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#membership" data-astro-cid-mw7aashj>membership</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#storageuploads" data-astro-cid-mw7aashj>storage/uploads</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#storagemetadata" data-astro-cid-mw7aashj>storage/metadata</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#storageobjects" data-astro-cid-mw7aashj>storage/objects</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#storagetime" data-astro-cid-mw7aashj>storage/time</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#lifecycle" data-astro-cid-mw7aashj>lifecycle</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#transitions" data-astro-cid-mw7aashj>transitions</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#geometry" data-astro-cid-mw7aashj>geometry</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#counters" data-astro-cid-mw7aashj>counters</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#timing" data-astro-cid-mw7aashj>timing</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#content" data-astro-cid-mw7aashj>content</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#spaces" data-astro-cid-mw7aashj>spaces</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#joining" data-astro-cid-mw7aashj>joining</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#atomic" data-astro-cid-mw7aashj>atomic</a> </li><li data-depth="2" data-astro-cid-mw7aashj> <a href="#audit-process" data-astro-cid-mw7aashj>Audit Process</a> </li><li data-depth="3" data-astro-cid-mw7aashj> <a href="#stdlib-vs-pattern-vs-asset" data-astro-cid-mw7aashj>Stdlib vs Pattern vs Asset</a> </li> </ul> </aside> </div> <script type="module">const a=document.querySelector("[data-api-symbol-filter]"),d=[...document.querySelectorAll("[data-api-symbol-group]")],n=document.querySelector("[data-api-symbol-empty]");a?.addEventListener("input",()=>{const t=a.value.trim().toLowerCase();let o=0;for(const i of d){let e=0;i.querySelectorAll("[data-api-symbol]").forEach(l=>{const r=!t||(l.dataset.apiSymbol??"").includes(t);l.hidden=!r,r&&e++}),i.hidden=e===0,o+=e}n&&(n.hidden=o>0)});</script> <script type="module">const s=new Map;document.querySelectorAll('.doc-toc a[href^="#"]').forEach(t=>s.set(decodeURIComponent(t.hash.slice(1)),t));if(s.size>0){const t=new Set,n=()=>{let o=null;for(const e of s.keys())if(t.has(e)){o=e;break}s.forEach((e,c)=>e.classList.toggle("active",c===o))},r=new IntersectionObserver(o=>{for(const e of o)e.isIntersecting?t.add(e.target.id):t.delete(e.target.id);n()},{rootMargin:"-72px 0px -60% 0px"});s.forEach((o,e)=>{const c=document.getElementById(e);c&&r.observe(c)})}</script> <script type="module">document.querySelector('.studio__nav [aria-current="page"]')?.scrollIntoView({block:"nearest",inline:"center"});</script>  </body></html>