@pyric/cli 0.1.0-alpha.26 → 0.1.0-alpha.27

package/dist/verify/staging/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/verify/staging/engine.ts"],"names":[],"mappings":"AA+BA,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,cAAc,GAEf,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,YAAY,EAAqE,MAAM,WAAW,CAAC;AAE5G,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE;IAC9D,OAAO,GAAG,qBAAqB,gFAAgF,SAAS,cAAc,EAAE,CAAC,WAAW,EAAE,iEAAiE,CAAC;AAC1N,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAC7B;IAAgC;IAArD,YAAqB,aAAqB,EAAW,UAAkB;QACrE,KAAK,CAAC,wDAAwD,aAAa,KAAK,UAAU,EAAE,CAAC,CAAC;QAD3E,kBAAa,GAAb,aAAa,CAAQ;QAAW,eAAU,GAAV,UAAU,CAAQ;QAErE,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAQD,4GAA4G;AAC5G,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAY1D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAsB,EACtB,SAAiB,EACjB,EAAoB,EACpB,QAAyB,EAAE;IAE3B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,kBAAkB,CAC1B,GAAG,MAAM,CAAC,WAAW,iGAAiG;YACpH,oJAAoJ,CACvJ,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,kBAAkB,CAAC,GAAG,MAAM,CAAC,WAAW,4BAA4B,MAAM,SAAS,SAAS,GAAG,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,kBAAkB,CAAC,WAAW,MAAM,CAAC,WAAW,iBAAiB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9I,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC;QACrG,MAAM,IAAI,kBAAkB,CAAC,MAAM;YACjC,CAAC,CAAC,8BAA8B,MAAM,CAAC,WAAW,uGAAuG;YACzJ,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,iFAAiF,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACjG,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS;QACpC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5C,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,kBAAkB,CAC1B,KAAK,CAAC,MAAM,KAAK,GAAG;YAClB,CAAC,CAAC,6BAA6B,MAAM,CAAC,WAAW,8DAA8D;YAC/G,CAAC,CAAC,uBAAuB,MAAM,CAAC,WAAW,iBAAiB,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACjH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,OAA+D,CAAC;IACpE,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,IAAI,kBAAkB,CAC1B,GAAG,MAAM,CAAC,WAAW,kDAAkD,UAAU,CAAC,aAAa,mBAAmB,UAAU,CAAC,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK;YACrN,oDAAoD,CACvD,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACrC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAsB,EACtB,SAAiB;IAEjB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAE,IAA4B,EAAoB,EAAE;QACrF,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC9B,IAAI,GAAG,mBAAmB,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC,KAAK,SAAS,CAAC;IAC3E,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KASxC;IACC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,QAAQ,GAAG,CAAC;IACrG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,yBAAyB,CAAC,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,yBAAyB,CAAC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAErG,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAC;IAC3H,CAAC;IAED,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACpE,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;;gBACpI,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACpG,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtC,aAAa,IAAI,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;YACnF,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;iBACpI,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;iBACxE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACxC,aAAa,IAAI,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAChH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5F,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;qBACnE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,aAAa,IAAI,CAAC,CAAC;YACnB,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAClG,CAAC;QACD,wFAAwF;QACxF,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;YAAG,UAAgC,CAAC,IAAI,GAAG,KAAK,CAAC;IACrG,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAC/E,WAAW,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC;AAED,yFAAyF;AACzF,SAAS,SAAS,CAAC,IAAa,EAAE,KAAc;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,iBAAiB,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,MAAM,CACnB,MAAsB,EACtB,KAA4B,EAC5B,QAA0B,EAC1B,WAAmC,EACnC,KAAc;IAEd,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,GAAqB,CAAC;IAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,KAAK,CAAC,WAAW,qBAAqB,CAAC,CAAC;QACtI,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACzF,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,WAAW,KAAK,CAAC,WAAW,yBAAyB,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,aAAa;gBACnB,IAAI;gBACJ,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,2FAA2F;aACpG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,IAAI,QAAQ,KAAK,OAAO;YAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAQD,SAAS,cAAc,CAAC,KAA4B;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAgE,CAAC;IACnG,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,KAAK,CAAC;QACX,KAAK,aAAa;YAChB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAChI,KAAK,kBAAkB;YACrB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAChI,KAAK,QAAQ,CAAC;QACd,KAAK,qBAAqB;YACxB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtF,KAAK,QAAQ;YACX,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnE,OAAO,0HAA0H,CAAC;YACpI,CAAC;YACD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAkB,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnI,KAAK,qBAAqB;YACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,mEAAmE,CAAC;YAChG,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3F,KAAK,aAAa;YAChB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,YAAY,EAAE,IAAI,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAChH;YACE,OAAO,sCAAsC,KAAK,CAAC,MAAM,eAAe,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,KAAK,UAAU,WAAW,CACxB,MAAsB,EACtB,MAA0B,EAC1B,IAAkC,EAClC,KAAc;IAEd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,KAAK,QAAQ;YACX,iGAAiG;YACjG,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnG,KAAK,aAAa;YAChB,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,YAAY,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;QACvE,KAAK,aAAa;YAChB,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;QACzG,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjH,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QACD;YACE,OAAO,uCAAuC,MAAM,CAAC,MAAM,YAAY,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,SAAS,YAAY,CAAC,KAAc,EAAE,QAAiB;IACrD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAChE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,4FAA4F;AAC5F,SAAS,SAAS,CAAC,KAA4B;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,KAEf,CAAC;IACd,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;IAC3B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACjG,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAClC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO,iCAAiC,KAAK,CAAC,IAAI,oBAAoB,CAAC;QACpG,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnF,OAAO,uBAAuB,KAAK,CAAC,IAAI,aAAa,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAiD;IACrE,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAuC,CAAC;AAClI,CAAC;AAED,SAAS,MAAM,CAAC,KAAwB;IACtC,OAAO,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC;AAC3B,CAAC;AAED,SAAS,MAAM,CAAC,KAAwC,EAAE,GAAqB;IAC7E,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,wDAAwD,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;AAC3J,CAAC;AAED,SAAS,WAAW,CAAC,KAAwC,EAAE,GAAqB;IAClF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,4BAA4B,GAAG,CAAC,MAAM,KAAK,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AACzJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAqB;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,OAAO,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAkC,EAAE,IAAY;IACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;IAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,iBAAiB,GAAG,CAAC,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/verify/staging/rest.d.ts

@@ -0,0 +1,68 @@
+/**
+ * A minimal Realtime Database REST client for the staging engine: data reads
+ * and writes as admin or as an application user (`auth_variable_override`),
+ * and the rules endpoint (`/.settings/rules.json`).
+ *
+ * Production applies an `auth_variable_override` object as the rules `auth`
+ * variable, `auth.token` claims included; the identity capture recorded in
+ * `packages/conformance/observations/rtdb-staging/rtdb-staging-auth-override.json`
+ * pins that for every field the engine passes.
+ */
+/** The rules `auth` variable a request runs as; `null` is signed out. Absent is admin. */
+export type RtdbAuthOverride = Record<string, unknown> | null;
+export interface RtdbRestResponse {
+    status: number;
+    /** Parsed JSON body, or the raw text when it is not JSON. */
+    body: unknown;
+    text: string;
+    /** The `ETag` of the location, when the request asked for it (`etag: true`). */
+    etag?: string;
+}
+export interface RtdbRestRequest {
+    /** Run as this `auth`; absent runs as admin. */
+    auth?: RtdbAuthOverride;
+    /** REST query parameters (`orderBy`, `startAt`, ...), already JSON-encoded where REST requires it. */
+    query?: Record<string, string>;
+    /** `export` returns priorities as `.priority` keys. */
+    format?: 'export';
+    shallow?: boolean;
+    /** Ask for the location's `ETag` (a read), for a later conditional write. */
+    etag?: boolean;
+    /** Write only if the location's `ETag` is still this one; production answers 412 otherwise. */
+    ifMatch?: string;
+}
+export type FetchLike = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    status: number;
+    text(): Promise<string>;
+    headers?: {
+        get(name: string): string | null;
+    };
+}>;
+export declare class RtdbRestClient {
+    private readonly token;
+    private readonly fetchImpl;
+    readonly databaseUrl: string;
+    constructor(databaseUrl: string, token: () => Promise<string>, fetchImpl?: FetchLike);
+    get(path: string, request?: RtdbRestRequest): Promise<RtdbRestResponse>;
+    put(path: string, value: unknown, request?: RtdbRestRequest): Promise<RtdbRestResponse>;
+    patch(path: string, value: unknown, request?: RtdbRestRequest): Promise<RtdbRestResponse>;
+    delete(path: string, request?: RtdbRestRequest): Promise<RtdbRestResponse>;
+    /** The deployed rules as stored, comments included. */
+    getRulesText(): Promise<string>;
+    /** Deploy `source` as the rules, or validate it without deploying (`dryRun`). */
+    putRules(source: string, options?: {
+        dryRun?: boolean;
+    }): Promise<RtdbRestResponse>;
+    private rules;
+    private send;
+    private fetchResponse;
+}
+/** `/a/b` for any of `a/b`, `/a/b/`, `a//b`; the root is the empty string. */
+export declare function restPath(path: string): string;
+/** Whether a REST status is the rules denying the request. */
+export declare function isRestDenial(status: number): boolean;
+//# sourceMappingURL=rest.d.ts.map

package/dist/verify/staging/rest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../../src/verify/staging/rest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,0FAA0F;AAC1F,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;AAE9D,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,sGAAsG;IACtG,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,uDAAuD;IACvD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,+FAA+F;IAC/F,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC;IACzH,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAChD,CAAC,CAAC;AAEH,qBAAa,cAAc;IAKvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAL5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAG3B,WAAW,EAAE,MAAM,EACF,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EAC5B,SAAS,GAAE,SAA2C;IAKzE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI3E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI3F,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI7F,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI9E,uDAAuD;IACjD,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAMrC,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAIzE,KAAK;YAKL,IAAI;YAcJ,aAAa;CAgB5B;AAED,8EAA8E;AAC9E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7C;AAED,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpD"}

package/dist/verify/staging/rest.js

@@ -0,0 +1,93 @@
+/**
+ * A minimal Realtime Database REST client for the staging engine: data reads
+ * and writes as admin or as an application user (`auth_variable_override`),
+ * and the rules endpoint (`/.settings/rules.json`).
+ *
+ * Production applies an `auth_variable_override` object as the rules `auth`
+ * variable, `auth.token` claims included; the identity capture recorded in
+ * `packages/conformance/observations/rtdb-staging/rtdb-staging-auth-override.json`
+ * pins that for every field the engine passes.
+ */
+export class RtdbRestClient {
+    token;
+    fetchImpl;
+    databaseUrl;
+    constructor(databaseUrl, token, fetchImpl = (url, init) => fetch(url, init)) {
+        this.token = token;
+        this.fetchImpl = fetchImpl;
+        this.databaseUrl = databaseUrl.replace(/\/+$/, '');
+    }
+    get(path, request = {}) {
+        return this.send('GET', path, undefined, request);
+    }
+    put(path, value, request = {}) {
+        return this.send('PUT', path, JSON.stringify(value), request);
+    }
+    patch(path, value, request = {}) {
+        return this.send('PATCH', path, JSON.stringify(value), request);
+    }
+    delete(path, request = {}) {
+        return this.send('DELETE', path, undefined, request);
+    }
+    /** The deployed rules as stored, comments included. */
+    async getRulesText() {
+        const res = await this.rules('GET');
+        if (res.status !== 200)
+            throw new Error(`reading the rules of ${this.databaseUrl} failed: HTTP ${res.status} ${res.text.slice(0, 200)}`);
+        return res.text;
+    }
+    /** Deploy `source` as the rules, or validate it without deploying (`dryRun`). */
+    putRules(source, options = {}) {
+        return this.rules('PUT', source, options.dryRun === true);
+    }
+    async rules(method, body, dryRun = false) {
+        const url = `${this.databaseUrl}/.settings/rules.json${dryRun ? '?dryRun=true' : ''}`;
+        return this.fetchResponse(url, method, body);
+    }
+    async send(method, path, body, request) {
+        const params = new URLSearchParams();
+        if (request.auth !== undefined)
+            params.set('auth_variable_override', JSON.stringify(request.auth));
+        if (request.format)
+            params.set('format', request.format);
+        if (request.shallow)
+            params.set('shallow', 'true');
+        for (const [key, value] of Object.entries(request.query ?? {}))
+            params.set(key, value);
+        const query = params.toString();
+        const url = `${this.databaseUrl}${restPath(path) || '/'}.json${query ? `?${query}` : ''}`;
+        const headers = {};
+        if (request.etag)
+            headers['X-Firebase-ETag'] = 'true';
+        if (request.ifMatch !== undefined)
+            headers['if-match'] = request.ifMatch;
+        return this.fetchResponse(url, method, body, headers);
+    }
+    async fetchResponse(url, method, body, extra = {}) {
+        const res = await this.fetchImpl(url, {
+            method,
+            headers: { Authorization: `Bearer ${await this.token()}`, 'Content-Type': 'application/json', ...extra },
+            ...(body === undefined ? {} : { body }),
+        });
+        const text = await res.text();
+        let parsed = text;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            // Not JSON: keep the text.
+        }
+        const etag = res.headers?.get('etag') ?? undefined;
+        return { status: res.status, body: parsed, text, ...(etag ? { etag } : {}) };
+    }
+}
+/** `/a/b` for any of `a/b`, `/a/b/`, `a//b`; the root is the empty string. */
+export function restPath(path) {
+    const segments = path.split('/').filter(Boolean).map(encodeURIComponent);
+    return segments.length === 0 ? '' : `/${segments.join('/')}`;
+}
+/** Whether a REST status is the rules denying the request. */
+export function isRestDenial(status) {
+    return status === 401 || status === 403;
+}
+//# sourceMappingURL=rest.js.map

package/dist/verify/staging/rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../../src/verify/staging/rest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkCH,MAAM,OAAO,cAAc;IAKN;IACA;IALV,WAAW,CAAS;IAE7B,YACE,WAAmB,EACF,KAA4B,EAC5B,YAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;QADtD,UAAK,GAAL,KAAK,CAAuB;QAC5B,cAAS,GAAT,SAAS,CAA6C;QAEvE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,UAA2B,EAAE;QAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,KAAc,EAAE,UAA2B,EAAE;QAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,KAAc,EAAE,UAA2B,EAAE;QAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,UAA2B,EAAE;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,WAAW,iBAAiB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACzI,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,iFAAiF;IACjF,QAAQ,CAAC,MAAc,EAAE,UAAgC,EAAE;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,MAAqB,EAAE,IAAa,EAAE,MAAM,GAAG,KAAK;QACtE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,wBAAwB,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,IAAY,EAAE,IAAwB,EAAE,OAAwB;QACjG,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnG,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1F,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;QACtD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QACzE,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,MAAc,EAAE,IAAa,EAAE,QAAgC,EAAE;QACxG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM;YACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,KAAK,EAAE;YACxG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAY,IAAI,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC"}

package/dist/verify/staging/target.d.ts

@@ -0,0 +1,39 @@
+import type { FirebaseJson } from '../../cli/firebase-json.js';
+import { resolveScope } from '../../credentials/node/scope.js';
+export interface StagingTarget {
+    projectId: string;
+    databaseUrl: string;
+    /** The instance name the URL names. */
+    instance: string;
+}
+export declare class StagingConfigError extends Error {
+    constructor(message: string);
+}
+/** The staging target in a parsed `pyric.json`, or a config error naming what is missing. */
+export declare function stagingTargetFrom(config: unknown): StagingTarget;
+/**
+ * Refuse a staging instance the app uses: one `firebase.json` deploys rules
+ * to (by instance or by a `.firebaserc` target), or the default instance of
+ * the app's project.
+ */
+export declare function assertNotAppInstance(target: StagingTarget, app: {
+    firebaseJson: FirebaseJson | null;
+    appProjectId?: string;
+    targetInstances?: string[];
+}): void;
+/**
+ * An OAuth token for the staging project: a service account or Application
+ * Default Credentials (`resolveScope`), else the Firebase CLI's login
+ * (`firebase login`) while its access token is fresh.
+ */
+export declare function stagingToken(projectId: string, deps?: {
+    resolve?: typeof resolveScope;
+    env?: NodeJS.ProcessEnv;
+    now?: () => number;
+}): Promise<{
+    token: () => Promise<string>;
+    source: string;
+}>;
+/** How long a CLI token must stay valid for a run to start with it; it cannot be refreshed mid-run. */
+export declare const CLI_TOKEN_MARGIN_MS: number;
+//# sourceMappingURL=target.d.ts.map

package/dist/verify/staging/target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.d.ts","sourceRoot":"","sources":["../../../src/verify/staging/target.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAgE,MAAM,iCAAiC,CAAC;AAE7H,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAID,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,aAAa,CAwBhE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE;IAAE,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC5F,IAAI,CAcN;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,YAAY,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GACxF,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAgB3D;AAOD,uGAAuG;AACvG,eAAO,MAAM,mBAAmB,QAAc,CAAC"}

package/dist/verify/staging/target.js

@@ -0,0 +1,117 @@
+/**
+ * The staging target `pyric verify --engine staging` replays against, from
+ * the project's `pyric.json`:
+ *
+ *   { "verify": { "staging": { "project": "my-staging", "rtdb": "https://my-verify.firebaseio.com" } } }
+ *
+ * `rtdb` is a database URL or an instance name (`my-verify` resolves to
+ * `https://my-verify.firebaseio.com`; an instance outside us-central1 needs
+ * its full URL). The user brings the instance; pyric provisions nothing.
+ *
+ * An instance the app's own `firebase.json` deploys rules to, or the app
+ * project's default instance, is refused: those hold the app's data.
+ */
+import { readFileSync } from 'node:fs';
+import { resolveDatabaseInstance } from 'pyric/sandbox/internal';
+import { firebaseToolsConfigstorePath } from '../../cli/firebase-project.js';
+import { resolveScope, SERVICE_ACCOUNT_BASE64_ENV_KEY, SERVICE_ACCOUNT_FILE_ENV_KEY } from '../../credentials/node/scope.js';
+export class StagingConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'StagingConfigError';
+    }
+}
+const CONFIG_EXAMPLE = '{ "verify": { "staging": { "project": "<staging project id>", "rtdb": "https://<dedicated instance>.firebaseio.com" } } }';
+/** The staging target in a parsed `pyric.json`, or a config error naming what is missing. */
+export function stagingTargetFrom(config) {
+    const staging = config?.verify?.staging;
+    if (staging === undefined) {
+        throw new StagingConfigError(`no staging target. Add one to pyric.json: ${CONFIG_EXAMPLE}`);
+    }
+    const { project, rtdb } = (staging ?? {});
+    if (typeof project !== 'string' || project.trim() === '') {
+        throw new StagingConfigError(`pyric.json verify.staging.project must name the staging project: ${CONFIG_EXAMPLE}`);
+    }
+    if (typeof rtdb !== 'string' || rtdb.trim() === '') {
+        throw new StagingConfigError(`pyric.json verify.staging.rtdb must name the dedicated instance: ${CONFIG_EXAMPLE}`);
+    }
+    const trimmed = rtdb.trim();
+    const databaseUrl = /^[a-z0-9-]+$/i.test(trimmed) ? `https://${trimmed}.firebaseio.com` : trimmed.replace(/\/+$/, '');
+    let instance;
+    try {
+        instance = resolveDatabaseInstance(databaseUrl)?.name;
+    }
+    catch {
+        instance = undefined;
+    }
+    if (instance === undefined) {
+        throw new StagingConfigError(`pyric.json verify.staging.rtdb "${rtdb}" is not a Realtime Database URL or instance name.`);
+    }
+    return { projectId: project.trim(), databaseUrl, instance };
+}
+/**
+ * Refuse a staging instance the app uses: one `firebase.json` deploys rules
+ * to (by instance or by a `.firebaserc` target), or the default instance of
+ * the app's project.
+ */
+export function assertNotAppInstance(target, app) {
+    const declared = new Set(app.targetInstances ?? []);
+    const database = app.firebaseJson?.database;
+    const entries = Array.isArray(database) ? database : database ? [database] : [];
+    for (const entry of entries) {
+        const instance = entry.instance;
+        if (typeof instance === 'string')
+            declared.add(instance);
+    }
+    if (app.appProjectId)
+        declared.add(`${app.appProjectId}-default-rtdb`);
+    if (declared.has(target.instance)) {
+        throw new StagingConfigError(`refusing staging instance ${target.instance}: the app uses it (firebase.json deploys rules to it, or it is the default instance of project ${app.appProjectId}). The staging engine replaces an instance's rules and data, so it needs one dedicated to it.`);
+    }
+}
+/**
+ * An OAuth token for the staging project: a service account or Application
+ * Default Credentials (`resolveScope`), else the Firebase CLI's login
+ * (`firebase login`) while its access token is fresh.
+ */
+export async function stagingToken(projectId, deps = {}) {
+    const env = deps.env ?? process.env;
+    try {
+        const { scope, source } = await (deps.resolve ?? resolveScope)({ projectId, ...(deps.env ? { env: deps.env } : {}) });
+        return { token: () => scope.resolveToken(), source };
+    }
+    catch (resolveError) {
+        // A configured credential that fails is an error to fix, not a reason to
+        // run as the developer's own CLI login instead.
+        if (configuredCredential(env))
+            throw resolveError;
+        const cli = firebaseCliToken(env, (deps.now ?? Date.now)());
+        if (cli !== undefined)
+            return { token: async () => cli, source: 'firebase login' };
+        throw new StagingConfigError(`no credentials for staging project ${projectId}. ${resolveError instanceof Error ? resolveError.message : String(resolveError)} ` +
+            'Or sign in with `firebase login`: its token is used while it has at least 15 minutes left (run any firebase command to refresh it).');
+    }
+}
+/** Whether the environment names a service account (`resolveScope`'s first two sources). */
+function configuredCredential(env) {
+    return [SERVICE_ACCOUNT_BASE64_ENV_KEY, SERVICE_ACCOUNT_FILE_ENV_KEY].some((key) => (env[key] ?? '').trim() !== '');
+}
+/** How long a CLI token must stay valid for a run to start with it; it cannot be refreshed mid-run. */
+export const CLI_TOKEN_MARGIN_MS = 15 * 60_000;
+/** The Firebase CLI's access token, when its configstore holds one with a known expiry at least the margin away. */
+function firebaseCliToken(env, now) {
+    try {
+        const store = JSON.parse(readFileSync(firebaseToolsConfigstorePath(env), 'utf8'));
+        const token = store.tokens?.access_token;
+        const expiresAt = store.tokens?.expires_at;
+        if (typeof token !== 'string' || token === '')
+            return undefined;
+        if (typeof expiresAt !== 'number' || expiresAt - now < CLI_TOKEN_MARGIN_MS)
+            return undefined;
+        return token;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=target.js.map

package/dist/verify/staging/target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.js","sourceRoot":"","sources":["../../../src/verify/staging/target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAE7E,OAAO,EAAE,YAAY,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAS7H,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,cAAc,GAAG,2HAA2H,CAAC;AAEnJ,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,MAAM,OAAO,GAAI,MAAoD,EAAE,MAAM,EAAE,OAAO,CAAC;IACvF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAAC,6CAA6C,cAAc,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAA0C,CAAC;IACnF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,kBAAkB,CAAC,oEAAoE,cAAc,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,kBAAkB,CAAC,oEAAoE,cAAc,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,OAAO,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtH,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,uBAAuB,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,IAAI,oDAAoD,CAAC,CAAC;IAC5H,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAqB,EACrB,GAA6F;IAE7F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,EAAE,QAAmB,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAI,KAAgC,CAAC,QAAQ,CAAC;QAC5D,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,GAAG,CAAC,YAAY;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,eAAe,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,kBAAkB,CAC1B,6BAA6B,MAAM,CAAC,QAAQ,kGAAkG,GAAG,CAAC,YAAY,+FAA+F,CAC9P,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,OAAuF,EAAE;IAEzF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtH,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC;IACvD,CAAC;IAAC,OAAO,YAAY,EAAE,CAAC;QACtB,yEAAyE;QACzE,gDAAgD;QAChD,IAAI,oBAAoB,CAAC,GAAG,CAAC;YAAE,MAAM,YAAY,CAAC;QAClD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACnF,MAAM,IAAI,kBAAkB,CAC1B,sCAAsC,SAAS,KAAK,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG;YAChI,qIAAqI,CACxI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,SAAS,oBAAoB,CAAC,GAAsB;IAClD,OAAO,CAAC,8BAA8B,EAAE,4BAA4B,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtH,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE/C,oHAAoH;AACpH,SAAS,gBAAgB,CAAC,GAAsB,EAAE,GAAW;IAC3D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,4BAA4B,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAE/E,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;QAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QAChE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,GAAG,GAAG,mBAAmB;YAAE,OAAO,SAAS,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pyric/cli",
-  "version": "0.1.0-alpha.26",
+  "version": "0.1.0-alpha.27",
   "license": "Apache-2.0",
   "homepage": "https://pyric.dev",
   "repository": {
@@ -245,12 +245,12 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "create-pyric": "^0.1.0-alpha.26",
+    "create-pyric": "^0.1.0-alpha.27",
     "esbuild": "^0.28.0",
     "fake-indexeddb": "^6.0.0",
     "jsonc-parser": "^3.3.1",
-    "pyric": "^0.1.0-alpha.26",
-    "pyric-admin": "^0.1.0-alpha.26",
+    "pyric": "^0.1.0-alpha.27",
+    "pyric-admin": "^0.1.0-alpha.27",
     "ws": "^8.18.0",
     "zod": "^3.23.0"
   },

package/src/assurance/.generated/conformance-verdicts.ts

@@ -1372,9 +1372,14 @@ export const CONFORMANCE_VERDICTS = {
   "rtdb-modular#MI4": "supported",
   "rtdb-modular#MI5": "supported",
   "rtdb-modular#MI6": "supported",
+  "rtdb-modular#MI7": "supported",
   "rtdb-modular#RS1": "qualified",
   "rtdb-modular#RS2": "qualified",
   "rtdb-modular#RS3": "qualified",
+  "rtdb-modular#VR1": "supported",
+  "rtdb-modular#VR2": "supported",
+  "rtdb-modular#VR3": "supported",
+  "rtdb-modular#VR4": "supported",
   "rtdb-rules#1": "supported",
   "rtdb-rules#10": "supported",
   "rtdb-rules#11": "supported",

package/src/assurance/capabilities.ts

@@ -21,6 +21,7 @@ import {
   type PathSegment,
 } from "pyric/rules/internal";
 import { rtdbRulesSourceRejection } from "pyric/rules/internal/rtdb";
+import { resolveDatabaseInstance } from "pyric/sandbox/internal";
 import { compileStorageRules } from "pyric/storage/internal";
 import {
   CONFORMANCE_VERDICTS,
@@ -101,9 +102,17 @@ export function rulesLoadRefusal(
   service: AssuranceProbe["control"]["service"],
 ): string | undefined {
   if (service === "rtdb") {
-    if (!target.rules.rtdb) return undefined;
-    const rejection = rtdbRulesSourceRejection(target.rules.rtdb);
-    return rejection === null ? undefined : rejection.message;
+    if (target.rules.rtdb) {
+      const rejection = rtdbRulesSourceRejection(target.rules.rtdb);
+      if (rejection !== null) return rejection.message;
+    }
+    if (target.rules.rtdbInstances) {
+      for (const [instanceName, instanceRules] of Object.entries(target.rules.rtdbInstances)) {
+        const rejection = rtdbRulesSourceRejection(instanceRules as any);
+        if (rejection !== null) return `instance '${instanceName}': ${rejection.message}`;
+      }
+    }
+    return undefined;
   }
   const source =
     service === "firestore"
@@ -389,7 +398,16 @@ function rtdbRequirements(
   target: LocalFirebaseTarget,
   probe: AssuranceProbe,
 ): CapabilityRequirement[] {
-  const rules = target.rules.rtdb;
+  let rules = target.rules.rtdb;
+  if (probe.control.service === "rtdb" && probe.control.instance && probe.control.instance !== "default") {
+    const resolvedName = resolveDatabaseInstance(probe.control.instance)?.name;
+    if (resolvedName && target.rules.rtdbInstances) {
+      const declaredEntry = Object.entries(target.rules.rtdbInstances).find(([k]) => resolveDatabaseInstance(k)?.name === resolvedName);
+      if (declaredEntry) {
+        rules = declaredEntry[1] as any;
+      }
+    }
+  }
   const operations = [probe.control, probe.mutation.operation];
   const ruleSources = rules
     ? collectRtdbRuleSources(rules.rules).filter((rule) =>

package/src/assurance/runner.ts

@@ -60,15 +60,17 @@ import {
   initializeSandbox,
   type AuthState,
   type LocalSandbox,
+  type SandboxContext,
   type SandboxEvent,
 } from "pyric/sandbox";
-import { getInternalEnv } from "pyric/sandbox/internal";
+import { getInternalEnv, resolveDatabaseInstance } from "pyric/sandbox/internal";
 import { qualifyProbe, rulesLoadRefusal } from "./capabilities.js";
 import {
   assertActor,
   assertInvariant,
   assertProbe,
   assertTarget,
+  assertCampaign,
 } from "./validation.js";
 import {
   ASSURANCE_CAMPAIGN_SCHEMA,
@@ -96,9 +98,12 @@ interface ActorRuntime {
   auth: AuthState | null;
 }
 
+
+
 interface ServiceRuntime {
   sandbox: LocalSandbox;
   actor: ActorRuntime;
+  context: SandboxContext;
   firestore?: Firestore;
   rtdb?: Database;
   rtdbAdmin?: Database;
@@ -114,56 +119,6 @@ interface ExecutedOperation {
 
 let storageRunSequence = 0;
 
-function assertCampaign(spec: AuthorizationCampaignSpec): void {
-  if (spec.schema !== ASSURANCE_CAMPAIGN_SCHEMA) {
-    throw new AssuranceInputError(
-      `campaign schema must be '${ASSURANCE_CAMPAIGN_SCHEMA}'.`,
-    );
-  }
-  if (!spec.id.trim())
-    throw new AssuranceInputError("campaign id is required.");
-  assertTarget(spec.target);
-  if (!Array.isArray(spec.actors)) {
-    throw new AssuranceInputError("campaign actors must be an array.");
-  }
-  if (!Array.isArray(spec.invariants)) {
-    throw new AssuranceInputError("campaign invariants must be an array.");
-  }
-  if (!Array.isArray(spec.probes)) {
-    throw new AssuranceInputError("campaign probes must be an array.");
-  }
-  for (const actor of spec.actors) assertActor(actor);
-  for (const invariant of spec.invariants) assertInvariant(invariant);
-  for (const probe of spec.probes) assertProbe(probe);
-  uniqueIds(spec.actors, "actor");
-  uniqueIds(spec.invariants, "invariant");
-  uniqueIds(spec.probes, "probe");
-
-  for (const probe of spec.probes) {
-    const actor = spec.actors.find((item) => item.id === probe.actorId);
-    const invariant = spec.invariants.find(
-      (item) => item.id === probe.invariantId,
-    );
-    if (!actor)
-      throw new AssuranceInputError(
-        `probe '${probe.id}' references unknown actor '${probe.actorId}'.`,
-      );
-    if (!invariant) {
-      throw new AssuranceInputError(
-        `probe '${probe.id}' references unknown invariant '${probe.invariantId}'.`,
-      );
-    }
-    if (
-      invariant.service !== "cross-service" &&
-      invariant.service !== probe.control.service
-    ) {
-      throw new AssuranceInputError(
-        `probe '${probe.id}' service does not match invariant '${invariant.id}'.`,
-      );
-    }
-  }
-}
-
 function uniqueIds(items: ReadonlyArray<{ id: string }>, label: string): void {
   const seen = new Set<string>();
   for (const item of items) {
@@ -337,7 +292,7 @@ async function createRuntime(
   const sandbox = initializeSandbox();
   seedAuth(sandbox, target);
   const context = sandbox.withAuth(actorRuntime.auth);
-  const runtime: ServiceRuntime = { sandbox, actor: actorRuntime };
+  const runtime: ServiceRuntime = { sandbox, actor: actorRuntime, context };
 
   if (service === "firestore") {
     const firestore = getFirestore(context);
@@ -347,12 +302,34 @@ async function createRuntime(
   } else if (service === "rtdb") {
     const rtdb = getDatabase(context);
     const admin = getAdminDatabase(sandbox);
-    const refusal = rtdbRulesSourceRejection(target.rules.rtdb);
-    if (refusal !== null) throw new Error(`The assurance target's database rules would not deploy. ${refusal.message}`);
-    rtdbSandbox.setRules(rtdb, target.rules.rtdb!);
-    rtdbSandbox.setData(admin, { "/": target.state.rtdb ?? {} });
+    if (target.rules.rtdb) {
+      const refusal = rtdbRulesSourceRejection(target.rules.rtdb as any);
+      if (refusal !== null) throw new Error(`The assurance target's database rules would not deploy. ${refusal.message}`);
+      rtdbSandbox.setRules(rtdb, target.rules.rtdb as any);
+      rtdbSandbox.setData(admin, { "/": target.state.rtdb ?? {} });
+    }
     runtime.rtdb = rtdb;
     runtime.rtdbAdmin = admin;
+
+    if (target.rules.rtdbInstances) {
+      const stateByResolved = new Map<string, unknown>();
+      if (target.state.rtdbInstances) {
+         for (const [k, v] of Object.entries(target.state.rtdbInstances)) {
+            stateByResolved.set(resolveDatabaseInstance(k)!.name, v);
+         }
+      }
+      for (const [instanceName, instanceValue] of Object.entries(target.rules.rtdbInstances)) {
+        const instanceRefusal = rtdbRulesSourceRejection(instanceValue);
+        if (instanceRefusal !== null) throw new Error(`The assurance target's database rules for instance '${instanceName}' would not deploy. ${instanceRefusal.message}`);
+        
+        const resolved = resolveDatabaseInstance(instanceName)!;
+        const instDb = getDatabase(context, resolved.url);
+        const instAdmin = getAdminDatabase(sandbox, resolved.url);
+        rtdbSandbox.setRules(instDb, instanceValue as { rules: Record<string, unknown> });
+        const instData = stateByResolved.get(resolved.name);
+        rtdbSandbox.setData(instAdmin, { "/": instData ?? {} });
+      }
+    }
   } else {
     if (target.state.firestore) {
       seedDocuments(
@@ -678,7 +655,12 @@ async function readState(
     return state[normalizedPath] ?? null;
   }
   if (operation.service === "rtdb") {
-    return (await getRtdb(rtdbRef(runtime.rtdbAdmin!, operation.path))).val();
+    let admin = runtime.rtdbAdmin!;
+    if (operation.instance && operation.instance !== "default") {
+      const url = resolveDatabaseInstance(operation.instance)!.url;
+      admin = getAdminDatabase(runtime.sandbox, url);
+    }
+    return (await getRtdb(rtdbRef(admin, operation.path))).val();
   }
   return readStorageState(operation, runtime.storageAdmin!);
 }
@@ -740,7 +722,7 @@ async function executeOperation(
       operation.service === "firestore"
         ? await executeFirestore(operation, runtime.firestore!, runtime)
         : operation.service === "rtdb"
-          ? await executeRtdb(operation, runtime.rtdb!)
+          ? await executeRtdb(operation, operation.instance && operation.instance !== "default" ? getDatabase(runtime.context, resolveDatabaseInstance(operation.instance)!.url) : runtime.rtdb!)
           : await executeStorage(operation, runtime.storage!);
   } catch (error) {
     const result = errorDecision(error);