@pyric/cli 0.1.0-alpha.30.1 → 0.1.0-alpha.31

package/dist/serve/site-ui/docs/pyric-app-check-reference-api/index.html

@@ -206,10 +206,18 @@ Check behavioral conformance
 <hr>
 <p><a id="appchecktoken"></a></p>
 <h3 id="appchecktoken">AppCheckToken</h3>
-<p>The three attestation providers. The sandbox has no attestation service, so
-it never calls a provider, as production never does under a debug token
-(capture <code>app-check-client-debug-get-token</code>, <code>customProviderCalls: 0</code>).
+<p>The three attestation providers. The sandbox has no reCAPTCHA, so it never
+calls a reCAPTCHA provider. It calls a <code>CustomProvider</code> as production does
+when no debug token is set (<code>state.ts</code>); under a debug token production
+never calls one (capture <code>app-check-client-debug-get-token</code>,
+<code>customProviderCalls: 0</code>), and neither does the sandbox.
 <code>isEqual</code> decides whether a second <code>initializeAppCheck</code> has the same options.</p>
+<p><code>initialize</code> is called at the end of <code>initializeAppCheck</code>, as upstream
+<code>_activate</code> calls each provider’s (<code>@firebase/app-check</code> 0.11.3, line 1559).
+Upstream’s reCAPTCHA providers add a hidden div to <code>document</code> there
+(<code>makeDiv</code>, line 1133), so where there is no <code>document</code>, such as a Node
+process or a server-rendered module, they throw <code>ReferenceError: document is not defined</code>, debug token or not. The sandbox throws the same error. A
+<code>CustomProvider</code> needs nothing to initialize.</p>
 <h4 id="properties-2">Properties</h4>
 <div class="table-scroll">
 

package/dist/serve/site-ui/docs/pyric-app-check-reference-api.md

@@ -201,11 +201,21 @@ ComparableProvider.isEqual
 
 ### AppCheckToken
 
-The three attestation providers. The sandbox has no attestation service, so
-it never calls a provider, as production never does under a debug token
-(capture `app-check-client-debug-get-token`, `customProviderCalls: 0`).
+The three attestation providers. The sandbox has no reCAPTCHA, so it never
+calls a reCAPTCHA provider. It calls a `CustomProvider` as production does
+when no debug token is set (`state.ts`); under a debug token production
+never calls one (capture `app-check-client-debug-get-token`,
+`customProviderCalls: 0`), and neither does the sandbox.
 `isEqual` decides whether a second `initializeAppCheck` has the same options.
 
+`initialize` is called at the end of `initializeAppCheck`, as upstream
+`_activate` calls each provider's (`@firebase/app-check` 0.11.3, line 1559).
+Upstream's reCAPTCHA providers add a hidden div to `document` there
+(`makeDiv`, line 1133), so where there is no `document`, such as a Node
+process or a server-rendered module, they throw `ReferenceError: document is
+not defined`, debug token or not. The sandbox throws the same error. A
+`CustomProvider` needs nothing to initialize.
+
 #### Properties
 
 | Property | Modifier | Type |

package/dist/serve/site-ui/docs/pyric-cli-bridge-client-reference-api/index.html

@@ -74,7 +74,7 @@ Generated from the TypeScript declarations shipped at this import path.
 
 
 
-<table><thead><tr><th align="left">Property</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="dispatcher"></a> <code>dispatcher?</code></td><td align="left"><a href="#sandboxtooldispatcher"><code>SandboxToolDispatcher</code></a></td><td align="left">Custom tool dispatcher. Defaults to the built-in sandbox tool dispatcher (see <code>./dispatch.ts</code>). Hosts can replace this to extend the tool surface.</td></tr><tr><td align="left"><a id="fetchimpl"></a> <code>fetchImpl?</code></td><td align="left"><em>typeof</em> <code>fetch</code></td><td align="left">Injectable fetch for the standby health poll (tests). Default: global.</td></tr><tr><td align="left"><a id="initialreconnectdelayms"></a> <code>initialReconnectDelayMs?</code></td><td align="left"><code>number</code></td><td align="left">Initial reconnect delay in ms (default 500).</td></tr><tr><td align="left"><a id="maxreconnectdelayms"></a> <code>maxReconnectDelayMs?</code></td><td align="left"><code>number</code></td><td align="left">Max reconnect delay in ms (default 30_000).</td></tr><tr><td align="left"><a id="noreconnect"></a> <code>noReconnect?</code></td><td align="left"><code>boolean</code></td><td align="left">Disable the auto-reconnect loop (useful in tests where the test harness explicitly controls connection lifecycle).</td></tr><tr><td align="left"><a id="onstatechange"></a> <code>onStateChange?</code></td><td align="left">(<code>state</code>: <a href="#connectedbridgestate-2"><code>ConnectedBridgeState</code></a>) => <code>void</code></td><td align="left">Called whenever the client transitions connection state.</td></tr><tr><td align="left"><a id="sandboxid"></a> <code>sandboxId?</code></td><td align="left"><code>string</code></td><td align="left">Stable identifier for this sandbox session — surfaces in the bridge’s audit log entries. Default: a random UUID per page load.</td></tr><tr><td align="left"><a id="standbypollms"></a> <code>standbyPollMs?</code></td><td align="left"><code>number</code></td><td align="left">Standby poll interval in ms (default 2_000). When the bridge closes this connection with the REPLACED code (another tab took the peer slot), the client polls the health endpoint at this cadence — plus per-poll jitter, so two standby tabs don’t stampede a freshly vacant slot — and only reconnects when <code>sandboxConnected</code> is false.</td></tr><tr><td align="left"><a id="toolnames"></a> <code>toolNames?</code></td><td align="left"><code>string</code>[]</td><td align="left">Tool names to advertise to the bridge in the hello message. Defaults to <code>SANDBOX_TOOL_NAMES</code>. Override when supplying a custom dispatcher.</td></tr><tr><td align="left"><a id="url"></a> <code>url?</code></td><td align="left"><code>string</code></td><td align="left">Bridge WebSocket URL. Overrides the discovery chain. Example: <code>ws://localhost:5174/sandbox</code>.</td></tr><tr><td align="left"><a id="workerrelay"></a> <code>workerRelay?</code></td><td align="left"><a href="#workerrelay-1"><code>WorkerRelay</code></a></td><td align="left">Generic worker relay (remote sandbox, slice 1). When supplied, the client advertises the <code>worker-relay</code> capability in its hello and routes <code>worker-op</code> / <code>worker-sub</code> / <code>worker-unsub</code> frames through it — on the worker path this forwards them into the SharedWorker port (<code>relayWorkerOp</code> / <code>relayWorkerSub</code> in <code>serve/worker/client.ts</code>).</td></tr></tbody></table></div>
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="dispatcher"></a> <code>dispatcher?</code></td><td align="left"><a href="#sandboxtooldispatcher"><code>SandboxToolDispatcher</code></a></td><td align="left">Custom tool dispatcher. Defaults to the built-in sandbox tool dispatcher (see <code>./dispatch.ts</code>). Hosts can replace this to extend the tool surface.</td></tr><tr><td align="left"><a id="fetchimpl"></a> <code>fetchImpl?</code></td><td align="left"><em>typeof</em> <code>fetch</code></td><td align="left">Injectable fetch for the standby health poll (tests). Default: global.</td></tr><tr><td align="left"><a id="initialreconnectdelayms"></a> <code>initialReconnectDelayMs?</code></td><td align="left"><code>number</code></td><td align="left">Initial reconnect delay in ms (default 500).</td></tr><tr><td align="left"><a id="maxreconnectdelayms"></a> <code>maxReconnectDelayMs?</code></td><td align="left"><code>number</code></td><td align="left">Max reconnect delay in ms (default 30_000).</td></tr><tr><td align="left"><a id="noreconnect"></a> <code>noReconnect?</code></td><td align="left"><code>boolean</code></td><td align="left">Disable the auto-reconnect loop (useful in tests where the test harness explicitly controls connection lifecycle).</td></tr><tr><td align="left"><a id="onstatechange"></a> <code>onStateChange?</code></td><td align="left">(<code>state</code>: <a href="#connectedbridgestate-2"><code>ConnectedBridgeState</code></a>) => <code>void</code></td><td align="left">Called whenever the client transitions connection state.</td></tr><tr><td align="left"><a id="sandboxid"></a> <code>sandboxId?</code></td><td align="left"><code>string</code></td><td align="left">Stable identifier for this sandbox session — surfaces in the bridge’s audit log entries. Default: a random UUID per page load.</td></tr><tr><td align="left"><a id="standbypollms"></a> <code>standbyPollMs?</code></td><td align="left"><code>number</code></td><td align="left">Standby poll interval in ms (default 2_000). When the bridge closes this connection with the REPLACED code (another tab took the peer slot), the client polls the health endpoint at this cadence — plus per-poll jitter, so two standby tabs don’t stampede a freshly vacant slot — and only reconnects when <code>sandboxConnected</code> is false.</td></tr><tr><td align="left"><a id="toolnames"></a> <code>toolNames?</code></td><td align="left"><code>string</code>[]</td><td align="left">Tool names to advertise to the bridge in the hello message. Defaults to <code>SANDBOX_TOOL_NAMES</code>. Override when supplying a custom dispatcher.</td></tr><tr><td align="left"><a id="url"></a> <code>url?</code></td><td align="left"><code>string</code></td><td align="left">Bridge WebSocket URL. Overrides the discovery chain. Example: <code>ws://localhost:3473/__pyric/sandbox</code>, the socket <code>pyric sandbox --bridge</code> serves.</td></tr><tr><td align="left"><a id="workerrelay"></a> <code>workerRelay?</code></td><td align="left"><a href="#workerrelay-1"><code>WorkerRelay</code></a></td><td align="left">Generic worker relay (remote sandbox, slice 1). When supplied, the client advertises the <code>worker-relay</code> capability in its hello and routes <code>worker-op</code> / <code>worker-sub</code> / <code>worker-unsub</code> frames through it — on the worker path this forwards them into the SharedWorker port (<code>relayWorkerOp</code> / <code>relayWorkerSub</code> in <code>serve/worker/client.ts</code>).</td></tr></tbody></table></div>
 <hr>
 <p><a id="connectedbridge"></a></p>
 <h3 id="connectedbridge">ConnectedBridge</h3>

package/dist/serve/site-ui/docs/pyric-cli-bridge-client-reference-api.md

@@ -19,7 +19,7 @@
 | <a id="sandboxid"></a> `sandboxId?` | `string` | Stable identifier for this sandbox session — surfaces in the bridge's audit log entries. Default: a random UUID per page load. |
 | <a id="standbypollms"></a> `standbyPollMs?` | `number` | Standby poll interval in ms (default 2_000). When the bridge closes this connection with the REPLACED code (another tab took the peer slot), the client polls the health endpoint at this cadence — plus per-poll jitter, so two standby tabs don't stampede a freshly vacant slot — and only reconnects when `sandboxConnected` is false. |
 | <a id="toolnames"></a> `toolNames?` | `string`[] | Tool names to advertise to the bridge in the hello message. Defaults to `SANDBOX_TOOL_NAMES`. Override when supplying a custom dispatcher. |
-| <a id="url"></a> `url?` | `string` | Bridge WebSocket URL. Overrides the discovery chain. Example: `ws://localhost:5174/sandbox`. |
+| <a id="url"></a> `url?` | `string` | Bridge WebSocket URL. Overrides the discovery chain. Example: `ws://localhost:3473/__pyric/sandbox`, the socket `pyric sandbox --bridge` serves. |
 | <a id="workerrelay"></a> `workerRelay?` | [`WorkerRelay`](#workerrelay-1) | Generic worker relay (remote sandbox, slice 1). When supplied, the client advertises the `worker-relay` capability in its hello and routes `worker-op` / `worker-sub` / `worker-unsub` frames through it — on the worker path this forwards them into the SharedWorker port (`relayWorkerOp` / `relayWorkerSub` in `serve/worker/client.ts`). |
 
 ***

package/dist/serve/site-ui/docs/pyric-cli-next-reference-api/index.html

@@ -98,6 +98,7 @@ inlining in Server Components and API routes, preserving <code>@pyric/cli/regist
 to the local Pyric server without CORS errors.</li>
 <li>Enforces a bundler safety interlock (guard) to prevent accidental connections to
 production databases when <code>PYRIC_SANDBOX</code> is inactive.</li>
+<li>Defaults the network guard to <code>block</code> unless <code>PYRIC_GUARD</code> names a mode.</li>
 </ul>
 <p>In the production build, export and production server phases (without
 <code>PYRIC_SANDBOX_FORCE=1</code>):</p>

package/dist/serve/site-ui/docs/pyric-cli-next-reference-api.md

@@ -83,6 +83,7 @@ During the development server phase (`pyric sandbox -- next dev`):
     to the local Pyric server without CORS errors.
   - Enforces a bundler safety interlock (guard) to prevent accidental connections to
     production databases when `PYRIC_SANDBOX` is inactive.
+  - Defaults the network guard to `block` unless `PYRIC_GUARD` names a mode.
 
 In the production build, export and production server phases (without
 `PYRIC_SANDBOX_FORCE=1`):

package/dist/serve/site-ui/docs/pyric-cli-register-client-firestore-reference-api/index.html

@@ -89,7 +89,7 @@ Generated from the TypeScript declarations shipped at this import path.
 <hr>
 <p><a id="getaggregatefromserver"></a></p>
 <h3 id="getaggregatefromserver">getAggregateFromServer</h3>
-<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">const</span><span style="color:#E5C07B"> getAggregateFromServer</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">UnsupportedServedApi</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">const</span><span style="color:#E5C07B"> getAggregateFromServer</span><span style="color:#ABB2BF">: </span><span style="color:#C678DD">typeof</span><span style="color:#E06C75"> getAggregateFromServer</span><span style="color:#ABB2BF">;</span></span></code></pre>
 <hr>
 <p><a id="getcountfromserver"></a></p>
 <h3 id="getcountfromserver">getCountFromServer</h3>

package/dist/serve/site-ui/docs/pyric-cli-register-client-firestore-reference-api.md

@@ -209,7 +209,7 @@ const GeoPoint: typeof GeoPoint;
 ### getAggregateFromServer
 
 ```ts
-const getAggregateFromServer: UnsupportedServedApi;
+const getAggregateFromServer: typeof getAggregateFromServer;
 ```
 
 ***

package/dist/serve/site-ui/docs/pyric-cli-serve-worker-reference-api/index.html

@@ -3547,6 +3547,7 @@ context the page hands it to rather than only inside the page that made it.</p>
 <h3 id="gethostedfirestore">getHostedFirestore()</h3>
 <pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getHostedFirestore</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">target</span><span style="color:#ABB2BF">: {</span></span>
 <span class="line"><span style="color:#61AFEF">  currentHostInstanceId</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: () </span><span style="color:#C678DD">=></span><span style="color:#E5C07B"> Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">>;</span></span>
+<span class="line"><span style="color:#61AFEF">  currentUrl</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: () </span><span style="color:#C678DD">=></span><span style="color:#E5C07B"> Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">>;</span></span>
 <span class="line"><span style="color:#E06C75">  initialHostInstanceId</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;</span></span>
 <span class="line"><span style="color:#61AFEF">  onConnection</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: (</span><span style="color:#E06C75;font-style:italic">state</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">HostedConnectionState</span><span style="color:#ABB2BF">) </span><span style="color:#C678DD">=></span><span style="color:#E5C07B"> void</span><span style="color:#ABB2BF">;</span></span>
 <span class="line"><span style="color:#61AFEF">  onError</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: (</span><span style="color:#E06C75;font-style:italic">error</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">FirebaseError</span><span style="color:#ABB2BF">) </span><span style="color:#C678DD">=></span><span style="color:#E5C07B"> void</span><span style="color:#ABB2BF">;</span></span>
@@ -3623,7 +3624,12 @@ context the page hands it to rather than only inside the page that made it.</p>
 
 
 
-<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><code>target</code></td><td align="left">{ <code>currentHostInstanceId?</code>: () => <code>Promise</code>&#x3C;<code>string</code>>; <code>initialHostInstanceId?</code>: <code>string</code>; <code>onConnection?</code>: (<code>state</code>: <code>HostedConnectionState</code>) => <code>void</code>; <code>onError?</code>: (<code>error</code>: <a href="/docs/pyric-app-reference-api/#firebaseerror"><code>FirebaseError</code></a>) => <code>void</code>; <code>projectKey</code>: <code>string</code>; <code>realm?</code>: <code>HostedSocketRealm</code>; <code>retryInitialConnection?</code>: <code>boolean</code>; <code>sessionToken?</code>: () => <code>Promise</code>&#x3C;<code>string</code>>; <code>url</code>: <code>string</code>; }</td><td align="left">-</td></tr><tr><td align="left"><code>target.currentHostInstanceId?</code></td><td align="left">() => <code>Promise</code>&#x3C;<code>string</code>></td><td align="left">Reads the boot id of the host now serving the url, before a reattach. A Node process passes it: it reads init.json again, so after a host restart it presents the new boot and the host holds its config as verified. A page passes nothing and presents the boot it was served by (#1153).</td></tr><tr><td align="left"><code>target.initialHostInstanceId?</code></td><td align="left"><code>string</code></td><td align="left">Host boot identity baked into the served HTML / module at compile time.</td></tr><tr><td align="left"><code>target.onConnection?</code></td><td align="left">(<code>state</code>: <code>HostedConnectionState</code>) => <code>void</code></td><td align="left">-</td></tr><tr><td align="left"><code>target.onError?</code></td><td align="left">(<code>error</code>: <a href="/docs/pyric-app-reference-api/#firebaseerror"><code>FirebaseError</code></a>) => <code>void</code></td><td align="left">-</td></tr><tr><td align="left"><code>target.projectKey?</code></td><td align="left"><code>string</code></td><td align="left">-</td></tr><tr><td align="left"><code>target.realm?</code></td><td align="left"><code>HostedSocketRealm</code></td><td align="left">Present outside a page; see HostedSocketRealm.</td></tr><tr><td align="left"><code>target.retryInitialConnection?</code></td><td align="left"><code>boolean</code></td><td align="left">-</td></tr><tr><td align="left"><code>target.sessionToken?</code></td><td align="left">() => <code>Promise</code>&#x3C;<code>string</code>></td><td align="left">The page’s session token, which authorizes its own reads on the host’s byte route.</td></tr><tr><td align="left"><code>target.url?</code></td><td align="left"><code>string</code></td><td align="left">-</td></tr><tr><td align="left"><code>existingPort?</code></td><td align="left"><code>ClientPort</code></td><td align="left">-</td></tr></tbody></table></div>
+
+
+
+
+
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><code>target</code></td><td align="left">{ <code>currentHostInstanceId?</code>: () => <code>Promise</code>&#x3C;<code>string</code>>; <code>currentUrl?</code>: () => <code>Promise</code>&#x3C;<code>string</code>>; <code>initialHostInstanceId?</code>: <code>string</code>; <code>onConnection?</code>: (<code>state</code>: <code>HostedConnectionState</code>) => <code>void</code>; <code>onError?</code>: (<code>error</code>: <a href="/docs/pyric-app-reference-api/#firebaseerror"><code>FirebaseError</code></a>) => <code>void</code>; <code>projectKey</code>: <code>string</code>; <code>realm?</code>: <code>HostedSocketRealm</code>; <code>retryInitialConnection?</code>: <code>boolean</code>; <code>sessionToken?</code>: () => <code>Promise</code>&#x3C;<code>string</code>>; <code>url</code>: <code>string</code>; }</td><td align="left">-</td></tr><tr><td align="left"><code>target.currentHostInstanceId?</code></td><td align="left">() => <code>Promise</code>&#x3C;<code>string</code>></td><td align="left">Reads the boot id of the host now serving the url, before a reattach. A Node process passes it: it reads init.json again, so after a host restart it presents the new boot and the host holds its config as verified. A page passes nothing and presents the boot it was served by (#1153).</td></tr><tr><td align="left"><code>target.currentUrl?</code></td><td align="left">() => <code>Promise</code>&#x3C;<code>string</code>></td><td align="left">Resolves the socket url again before a reattach. A Node process passes it: a host that stopped may come back on another port, which its <code>.pyric/serve.json</code> names. A page passes nothing and redials its own origin.</td></tr><tr><td align="left"><code>target.initialHostInstanceId?</code></td><td align="left"><code>string</code></td><td align="left">Host boot identity baked into the served HTML / module at compile time.</td></tr><tr><td align="left"><code>target.onConnection?</code></td><td align="left">(<code>state</code>: <code>HostedConnectionState</code>) => <code>void</code></td><td align="left">-</td></tr><tr><td align="left"><code>target.onError?</code></td><td align="left">(<code>error</code>: <a href="/docs/pyric-app-reference-api/#firebaseerror"><code>FirebaseError</code></a>) => <code>void</code></td><td align="left">-</td></tr><tr><td align="left"><code>target.projectKey?</code></td><td align="left"><code>string</code></td><td align="left">-</td></tr><tr><td align="left"><code>target.realm?</code></td><td align="left"><code>HostedSocketRealm</code></td><td align="left">Present outside a page; see HostedSocketRealm.</td></tr><tr><td align="left"><code>target.retryInitialConnection?</code></td><td align="left"><code>boolean</code></td><td align="left">-</td></tr><tr><td align="left"><code>target.sessionToken?</code></td><td align="left">() => <code>Promise</code>&#x3C;<code>string</code>></td><td align="left">The page’s session token, which authorizes its own reads on the host’s byte route.</td></tr><tr><td align="left"><code>target.url?</code></td><td align="left"><code>string</code></td><td align="left">-</td></tr><tr><td align="left"><code>existingPort?</code></td><td align="left"><code>ClientPort</code></td><td align="left">-</td></tr></tbody></table></div>
 <h4 id="returns-101">Returns</h4>
 <p><a href="#clientdb"><code>ClientDb</code></a></p>
 <hr>
@@ -4160,10 +4166,11 @@ lens-independent.</p>
 <span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#E5C07B">DocRefHandle</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">DocumentData</span><span style="color:#ABB2BF">></span></span>
 <span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#E5C07B">CollRefHandle</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">DocumentData</span><span style="color:#ABB2BF">></span></span>
 <span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#E5C07B">QueryHandle</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">DocumentData</span><span style="color:#ABB2BF">>,</span></span>
-<span class="line"><span style="color:#E06C75;font-style:italic">   callback</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">SnapshotCallback</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   observerOrNext</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">ObserverOrNext</span><span style="color:#ABB2BF">,</span></span>
 <span class="line"><span style="color:#E06C75;font-style:italic">   errorCallback</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">SnapshotErrorCallback</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Unsubscribe</span><span style="color:#ABB2BF">;</span></span></code></pre>
-<p>Subscribe to a document or query. Mirrors <code>pyric/firestore</code>’s <code>onSnapshot</code>,
-including its options-second form <code>onSnapshot(target, options, next, error)</code>: <code>@pyric/ui</code>’s hooks pass <code>{ owner }</code> there for listener
+<p>Subscribe to a document or query. Mirrors <code>pyric/firestore</code>’s <code>onSnapshot</code>
+in all four call forms, with a callback or an observer, with or without
+options first: <code>@pyric/ui</code>’s hooks pass <code>{ owner }</code> there for listener
 attribution, and a caller injecting this client as the hooks’ backend must
 not lose its callback to that slot. The owners are derived here, on the page
 whose stack and DOM they describe, and travel with the subscribe message.</p>
@@ -4191,7 +4198,7 @@ to deregister the listener on the worker side.</p>
 
 
 
-<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>target</code></td><td align="left">| <a href="#docrefhandle"><code>DocRefHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>> | <a href="#collrefhandle"><code>CollRefHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>> | <a href="#queryhandle"><code>QueryHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>></td></tr><tr><td align="left"><code>callback</code></td><td align="left"><code>SnapshotCallback</code></td></tr><tr><td align="left"><code>errorCallback?</code></td><td align="left"><code>SnapshotErrorCallback</code></td></tr></tbody></table></div>
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>target</code></td><td align="left">| <a href="#docrefhandle"><code>DocRefHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>> | <a href="#collrefhandle"><code>CollRefHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>> | <a href="#queryhandle"><code>QueryHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>></td></tr><tr><td align="left"><code>observerOrNext</code></td><td align="left"><code>ObserverOrNext</code></td></tr><tr><td align="left"><code>errorCallback?</code></td><td align="left"><code>SnapshotErrorCallback</code></td></tr></tbody></table></div>
 <h5 id="returns-125">Returns</h5>
 <p><a href="#unsubscribe"><code>Unsubscribe</code></a></p>
 <h4 id="call-signature-11">Call Signature</h4>
@@ -4201,10 +4208,11 @@ to deregister the listener on the worker side.</p>
 <span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#E5C07B">CollRefHandle</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">DocumentData</span><span style="color:#ABB2BF">></span></span>
 <span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#E5C07B">QueryHandle</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">DocumentData</span><span style="color:#ABB2BF">>,</span></span>
 <span class="line"><span style="color:#E06C75;font-style:italic">   options</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">object</span><span style="color:#ABB2BF">,</span></span>
-<span class="line"><span style="color:#E06C75;font-style:italic">   callback</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">SnapshotCallback</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   observerOrNext</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">ObserverOrNext</span><span style="color:#ABB2BF">,</span></span>
 <span class="line"><span style="color:#E06C75;font-style:italic">   errorCallback</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">SnapshotErrorCallback</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Unsubscribe</span><span style="color:#ABB2BF">;</span></span></code></pre>
-<p>Subscribe to a document or query. Mirrors <code>pyric/firestore</code>’s <code>onSnapshot</code>,
-including its options-second form <code>onSnapshot(target, options, next, error)</code>: <code>@pyric/ui</code>’s hooks pass <code>{ owner }</code> there for listener
+<p>Subscribe to a document or query. Mirrors <code>pyric/firestore</code>’s <code>onSnapshot</code>
+in all four call forms, with a callback or an observer, with or without
+options first: <code>@pyric/ui</code>’s hooks pass <code>{ owner }</code> there for listener
 attribution, and a caller injecting this client as the hooks’ backend must
 not lose its callback to that slot. The owners are derived here, on the page
 whose stack and DOM they describe, and travel with the subscribe message.</p>
@@ -4236,7 +4244,7 @@ to deregister the listener on the worker side.</p>
 
 
 
-<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>target</code></td><td align="left">| <a href="#docrefhandle"><code>DocRefHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>> | <a href="#collrefhandle"><code>CollRefHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>> | <a href="#queryhandle"><code>QueryHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>></td></tr><tr><td align="left"><code>options</code></td><td align="left"><code>object</code></td></tr><tr><td align="left"><code>callback</code></td><td align="left"><code>SnapshotCallback</code></td></tr><tr><td align="left"><code>errorCallback?</code></td><td align="left"><code>SnapshotErrorCallback</code></td></tr></tbody></table></div>
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>target</code></td><td align="left">| <a href="#docrefhandle"><code>DocRefHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>> | <a href="#collrefhandle"><code>CollRefHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>> | <a href="#queryhandle"><code>QueryHandle</code></a>&#x3C;<a href="/docs/pyric-firestore-reference-api/#documentdata"><code>DocumentData</code></a>></td></tr><tr><td align="left"><code>options</code></td><td align="left"><code>object</code></td></tr><tr><td align="left"><code>observerOrNext</code></td><td align="left"><code>ObserverOrNext</code></td></tr><tr><td align="left"><code>errorCallback?</code></td><td align="left"><code>SnapshotErrorCallback</code></td></tr></tbody></table></div>
 <h5 id="returns-126">Returns</h5>
 <p><a href="#unsubscribe"><code>Unsubscribe</code></a></p>
 <hr>

package/dist/serve/site-ui/docs/pyric-cli-serve-worker-reference-api.md

@@ -2865,6 +2865,7 @@ function getFirestore(
 ```ts
 function getHostedFirestore(target: {
   currentHostInstanceId?: () => Promise<string>;
+  currentUrl?: () => Promise<string>;
   initialHostInstanceId?: string;
   onConnection?: (state: HostedConnectionState) => void;
   onError?: (error: FirebaseError) => void;
@@ -2882,8 +2883,9 @@ Own one app's physical connections while retaining its logical SDK port.
 
 | Parameter | Type | Description |
 | :------ | :------ | :------ |
-| `target` | \{ `currentHostInstanceId?`: () => `Promise`\<`string`\>; `initialHostInstanceId?`: `string`; `onConnection?`: (`state`: `HostedConnectionState`) => `void`; `onError?`: (`error`: [`FirebaseError`](pyric-app-reference-api.md#firebaseerror)) => `void`; `projectKey`: `string`; `realm?`: `HostedSocketRealm`; `retryInitialConnection?`: `boolean`; `sessionToken?`: () => `Promise`\<`string`\>; `url`: `string`; \} | - |
+| `target` | \{ `currentHostInstanceId?`: () => `Promise`\<`string`\>; `currentUrl?`: () => `Promise`\<`string`\>; `initialHostInstanceId?`: `string`; `onConnection?`: (`state`: `HostedConnectionState`) => `void`; `onError?`: (`error`: [`FirebaseError`](pyric-app-reference-api.md#firebaseerror)) => `void`; `projectKey`: `string`; `realm?`: `HostedSocketRealm`; `retryInitialConnection?`: `boolean`; `sessionToken?`: () => `Promise`\<`string`\>; `url`: `string`; \} | - |
 | `target.currentHostInstanceId?` | () => `Promise`\<`string`\> | Reads the boot id of the host now serving the url, before a reattach. A Node process passes it: it reads init.json again, so after a host restart it presents the new boot and the host holds its config as verified. A page passes nothing and presents the boot it was served by (#1153). |
+| `target.currentUrl?` | () => `Promise`\<`string`\> | Resolves the socket url again before a reattach. A Node process passes it: a host that stopped may come back on another port, which its `.pyric/serve.json` names. A page passes nothing and redials its own origin. |
 | `target.initialHostInstanceId?` | `string` | Host boot identity baked into the served HTML / module at compile time. |
 | `target.onConnection?` | (`state`: `HostedConnectionState`) => `void` | - |
 | `target.onError?` | (`error`: [`FirebaseError`](pyric-app-reference-api.md#firebaseerror)) => `void` | - |
@@ -3421,13 +3423,13 @@ function onSnapshot(
   | DocRefHandle<DocumentData>
   | CollRefHandle<DocumentData>
   | QueryHandle<DocumentData>,
-   callback: SnapshotCallback,
+   observerOrNext: ObserverOrNext,
    errorCallback?: SnapshotErrorCallback): Unsubscribe;
 ```
 
-Subscribe to a document or query. Mirrors `pyric/firestore`'s `onSnapshot`,
-including its options-second form `onSnapshot(target, options, next,
-error)`: `@pyric/ui`'s hooks pass `{ owner }` there for listener
+Subscribe to a document or query. Mirrors `pyric/firestore`'s `onSnapshot`
+in all four call forms, with a callback or an observer, with or without
+options first: `@pyric/ui`'s hooks pass `{ owner }` there for listener
 attribution, and a caller injecting this client as the hooks' backend must
 not lose its callback to that slot. The owners are derived here, on the page
 whose stack and DOM they describe, and travel with the subscribe message.
@@ -3440,7 +3442,7 @@ to deregister the listener on the worker side.
 | Parameter | Type |
 | :------ | :------ |
 | `target` | \| [`DocRefHandle`](#docrefhandle)\<[`DocumentData`](pyric-firestore-reference-api.md#documentdata)\> \| [`CollRefHandle`](#collrefhandle)\<[`DocumentData`](pyric-firestore-reference-api.md#documentdata)\> \| [`QueryHandle`](#queryhandle)\<[`DocumentData`](pyric-firestore-reference-api.md#documentdata)\> |
-| `callback` | `SnapshotCallback` |
+| `observerOrNext` | `ObserverOrNext` |
 | `errorCallback?` | `SnapshotErrorCallback` |
 
 ##### Returns
@@ -3456,13 +3458,13 @@ function onSnapshot(
   | CollRefHandle<DocumentData>
   | QueryHandle<DocumentData>,
    options: object,
-   callback: SnapshotCallback,
+   observerOrNext: ObserverOrNext,
    errorCallback?: SnapshotErrorCallback): Unsubscribe;
 ```
 
-Subscribe to a document or query. Mirrors `pyric/firestore`'s `onSnapshot`,
-including its options-second form `onSnapshot(target, options, next,
-error)`: `@pyric/ui`'s hooks pass `{ owner }` there for listener
+Subscribe to a document or query. Mirrors `pyric/firestore`'s `onSnapshot`
+in all four call forms, with a callback or an observer, with or without
+options first: `@pyric/ui`'s hooks pass `{ owner }` there for listener
 attribution, and a caller injecting this client as the hooks' backend must
 not lose its callback to that slot. The owners are derived here, on the page
 whose stack and DOM they describe, and travel with the subscribe message.
@@ -3476,7 +3478,7 @@ to deregister the listener on the worker side.
 | :------ | :------ |
 | `target` | \| [`DocRefHandle`](#docrefhandle)\<[`DocumentData`](pyric-firestore-reference-api.md#documentdata)\> \| [`CollRefHandle`](#collrefhandle)\<[`DocumentData`](pyric-firestore-reference-api.md#documentdata)\> \| [`QueryHandle`](#queryhandle)\<[`DocumentData`](pyric-firestore-reference-api.md#documentdata)\> |
 | `options` | `object` |
-| `callback` | `SnapshotCallback` |
+| `observerOrNext` | `ObserverOrNext` |
 | `errorCallback?` | `SnapshotErrorCallback` |
 
 ##### Returns

package/dist/serve/site-ui/docs/pyric-database-reference-api/index.html

@@ -2439,10 +2439,12 @@ empty path / <code>'/'</code> becomes the root.</p>
 <p><a id="reffromurl"></a></p>
 <h3 id="reffromurl">refFromURL()</h3>
 <pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> refFromURL</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">db</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Database</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">url</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">DatabaseReference</span><span style="color:#ABB2BF">;</span></span></code></pre>
-<p><code>refFromURL(db, url)</code> — build a <a href="#databasereference">DatabaseReference</a> from an
-absolute database URL (<code>https://&#x3C;namespace>.firebaseio.com/path</code>).</p>
-<p>The sandbox is single-database, so only the URL path is honored; unlike the
-production SDK, the host is not checked against the database namespace.</p>
+<p><code>refFromURL(db, url)</code>: build a <a href="#databasereference">DatabaseReference</a> from an absolute
+database URL (<code>https://&#x3C;namespace>.firebaseio.com/path</code>).</p>
+<p>The URL is parsed with the SDK’s rules, and as in the SDK a URL whose host
+is not the database’s host throws, unless the database’s host is custom
+(any domain but <code>firebaseio.com</code> and <code>firebaseio-demo.com</code>). A sandbox
+database opened without a URL has no host, so its URLs are not checked.</p>
 <h4 id="parameters-56">Parameters</h4>
 <div class="table-scroll">
 
@@ -2734,6 +2736,8 @@ delete.</li>
 </ul>
 <p>Both behaviors are sandbox-implemented per the RtdbBackend’s
 <code>update</code> method (<code>rtdb-modular</code>-spec atomic claim, matrix row #23).</p>
+<p>Applies when called, as <code>set()</code> does, so a client’s writes land in call
+order (RT-1, #1359; upstream applies each write to its local view at once).</p>
 <h4 id="parameters-64">Parameters</h4>
 <div class="table-scroll">
 

package/dist/serve/site-ui/docs/pyric-database-reference-api.md

@@ -2546,11 +2546,13 @@ empty path / `'/'` becomes the root.
 function refFromURL(db: Database, url: string): DatabaseReference;
 ```
 
-`refFromURL(db, url)` — build a [DatabaseReference](#databasereference) from an
-absolute database URL (`https://<namespace>.firebaseio.com/path`).
+`refFromURL(db, url)`: build a [DatabaseReference](#databasereference) from an absolute
+database URL (`https://<namespace>.firebaseio.com/path`).
 
-The sandbox is single-database, so only the URL path is honored; unlike the
-production SDK, the host is not checked against the database namespace.
+The URL is parsed with the SDK's rules, and as in the SDK a URL whose host
+is not the database's host throws, unless the database's host is custom
+(any domain but `firebaseio.com` and `firebaseio-demo.com`). A sandbox
+database opened without a URL has no host, so its URLs are not checked.
 
 #### Parameters
 
@@ -2824,6 +2826,9 @@ function update(r: DatabaseReference, values: Record<string, unknown>): Promise<
 Both behaviors are sandbox-implemented per the RtdbBackend's
 `update` method (`rtdb-modular`-spec atomic claim, matrix row #23).
 
+Applies when called, as `set()` does, so a client's writes land in call
+order (RT-1, #1359; upstream applies each write to its local view at once).
+
 #### Parameters
 
 | Parameter | Type |

package/dist/serve/site-ui/docs/pyric-rules-reference-api/index.html

@@ -3408,8 +3408,9 @@ available directly for logging a result without asserting.</p>
 <h4 id="returns-63">Returns</h4>
 <p><a href="#firestoreruleset"><code>FirestoreRuleset</code></a></p>
 <h4 id="throws-4">Throws</h4>
-<p>when the source does not parse or breaks one
-of production’s compile limits. The thrown error carries the
+<p>when the source does not parse, names a
+service other than <code>cloud.firestore</code>, or breaks one of production’s
+compile limits. The thrown error carries the
 compile-blocking issues on <code>.issues</code>.</p>
 <hr>
 <p><a id="flip"></a></p>
@@ -3489,6 +3490,9 @@ Supports 2+ players with circular rotation.</p>
 <table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>lat</code></td><td align="left"><code>number</code></td></tr><tr><td align="left"><code>lng</code></td><td align="left"><code>number</code></td></tr></tbody></table></div>
 <h4 id="returns-66">Returns</h4>
 <p><code>LatLng</code></p>
+<h4 id="throws-5">Throws</h4>
+<p>for a latitude outside -90 to 90 or a longitude outside
+-180 to 180.</p>
 <hr>
 <p><a id="lint-4"></a></p>
 <h3 id="lint-2">lint()</h3>
@@ -3697,6 +3701,7 @@ clock sees a match.</p>
 <pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> timestamp</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">input</span><span style="color:#ABB2BF">:</span></span>
 <span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#E5C07B">string</span></span>
 <span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#E5C07B">number</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#E5C07B">Date</span></span>
 <span class="line"><span style="color:#ABB2BF">  | {</span></span>
 <span class="line"><span style="color:#E06C75">  nanos</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">number</span><span style="color:#ABB2BF">;</span></span>
 <span class="line"><span style="color:#E06C75">  seconds</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">number</span><span style="color:#ABB2BF">;</span></span>
@@ -3704,7 +3709,8 @@ clock sees a match.</p>
 <p>A Firestore <code>timestamp</code> value.</p>
 <ul>
 <li>number → milliseconds since the epoch</li>
-<li>string → ISO-8601</li>
+<li>string → ISO-8601 with <code>Z</code> or an explicit offset</li>
+<li>Date   → its instant</li>
 <li>object → explicit <code>{ seconds, nanos }</code></li>
 </ul>
 <h4 id="parameters-64">Parameters</h4>
@@ -3721,9 +3727,12 @@ clock sees a match.</p>
 
 
 
-<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>input</code></td><td align="left">| <code>string</code> | <code>number</code> | { <code>nanos?</code>: <code>number</code>; <code>seconds</code>: <code>number</code>; }</td></tr></tbody></table></div>
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>input</code></td><td align="left">| <code>string</code> | <code>number</code> | <code>Date</code> | { <code>nanos?</code>: <code>number</code>; <code>seconds</code>: <code>number</code>; }</td></tr></tbody></table></div>
 <h4 id="returns-76">Returns</h4>
 <p><code>Timestamp</code></p>
+<h4 id="throws-6">Throws</h4>
+<p>for an input that names no instant, such as <code>'nope'</code>,
+an ISO string without an offset, an invalid <code>Date</code>, or <code>NaN</code>.</p>
 <hr>
 <p><a id="turnguard"></a></p>
 <h3 id="turnguard">turnGuard()</h3>
@@ -3790,6 +3799,8 @@ Uses data (pre-write) for the turn check — NOT newData.</p>
 <table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>values</code></td><td align="left">readonly <code>number</code>[]</td></tr></tbody></table></div>
 <h4 id="returns-78">Returns</h4>
 <p><code>Vector</code></p>
+<h4 id="throws-7">Throws</h4>
+<p>for a component that is not a finite number.</p>
 <hr>
 <p><a id="wincheckhelper"></a></p>
 <h3 id="wincheckhelper">winCheckHelper()</h3>

package/dist/serve/site-ui/docs/pyric-rules-reference-api.md

@@ -2547,8 +2547,9 @@ Compile Firestore rules source into a deep, safe-by-default handle.
 
 #### Throws
 
-when the source does not parse or breaks one
-  of production's compile limits. The thrown error carries the
+when the source does not parse, names a
+  service other than `cloud.firestore`, or breaks one of production's
+  compile limits. The thrown error carries the
   compile-blocking issues on `.issues`.
 
 ***
@@ -2621,6 +2622,11 @@ A `latlng` geographic point.
 
 `LatLng`
 
+#### Throws
+
+for a latitude outside -90 to 90 or a longitude outside
+  -180 to 180.
+
 ***
 
 <a id="lint-4"></a>
@@ -2842,6 +2848,7 @@ clock sees a match.
 function timestamp(input:
   | string
   | number
+  | Date
   | {
   nanos?: number;
   seconds: number;
@@ -2850,19 +2857,25 @@ function timestamp(input:
 
 A Firestore `timestamp` value.
   - number → milliseconds since the epoch
-  - string → ISO-8601
+  - string → ISO-8601 with `Z` or an explicit offset
+  - Date   → its instant
   - object → explicit `{ seconds, nanos }`
 
 #### Parameters
 
 | Parameter | Type |
 | :------ | :------ |
-| `input` | \| `string` \| `number` \| \{ `nanos?`: `number`; `seconds`: `number`; \} |
+| `input` | \| `string` \| `number` \| `Date` \| \{ `nanos?`: `number`; `seconds`: `number`; \} |
 
 #### Returns
 
 `Timestamp`
 
+#### Throws
+
+for an input that names no instant, such as `'nope'`,
+  an ISO string without an offset, an invalid `Date`, or `NaN`.
+
 ***
 
 <a id="turnguard"></a>
@@ -2915,6 +2928,10 @@ A `vector` value from its numeric components.
 
 `Vector`
 
+#### Throws
+
+for a component that is not a finite number.
+
 ***
 
 <a id="wincheckhelper"></a>

package/dist/serve/site-ui/docs/pyric-storage-reference-api/index.html

@@ -754,7 +754,13 @@ enforced in-process via <code>enforce.ts</code>.</p>
 
 
 
-<table><thead><tr><th align="left">Property</th><th align="left">Modifier</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="admin"></a> <code>admin?</code></td><td align="left"><code>readonly</code></td><td align="left"><code>boolean</code></td><td align="left">Rules-bypass admin plane. <code>true</code> only on handles minted by the INTERNAL getAdminStorageSandbox factory (exported via <code>pyric/storage/internal</code>, never the public surface): operations on an admin handle skip rule evaluation entirely — the storage mirror of <code>getAdminFirestore</code> / <code>getAdminDatabase</code>. The public modular surface stays rules-honest; this exists so hosts (the SharedWorker’s <code>actAs: { mode: 'admin' }</code> lens) can serve firebase-admin semantics against the same shared store.</td></tr><tr><td align="left"><a id="bucket-1"></a> <code>bucket</code></td><td align="left"><code>readonly</code></td><td align="left"><code>string</code></td><td align="left">-</td></tr><tr><td align="left"><a id="context"></a> <code>context</code></td><td align="left"><code>readonly</code></td><td align="left"><a href="/docs/pyric-firestore-reference-api/#sandboxcontext"><code>SandboxContext</code></a></td><td align="left">-</td></tr><tr><td align="left"><a id="currentauth"></a> <code>currentAuth?</code></td><td align="left"><code>readonly</code></td><td align="left">() => { <code>tenant?</code>: <code>string</code>; <code>token?</code>: <code>Record</code>&#x3C;<code>string</code>, <code>unknown</code>>; <code>uid</code>: <code>string</code>; }</td><td align="left">App handles resolve auth at operation time; explicit contexts stay frozen.</td></tr><tr><td align="left"><a id="kind"></a> <code>kind</code></td><td align="left"><code>readonly</code></td><td align="left"><code>"sandbox"</code></td><td align="left">-</td></tr><tr><td align="left"><a id="sandbox"></a> <code>sandbox</code></td><td align="left"><code>readonly</code></td><td align="left"><a href="/docs/pyric-firestore-reference-api/#sandbox"><code>Sandbox</code></a></td><td align="left">-</td></tr><tr><td align="left"><a id="servicepromise"></a> <code>servicePromise</code></td><td align="left"><code>readonly</code></td><td align="left"><code>Promise</code>&#x3C;<code>StorageService</code>></td><td align="left">-</td></tr></tbody></table></div>
+
+
+
+
+
+
+<table><thead><tr><th align="left">Property</th><th align="left">Modifier</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="admin"></a> <code>admin?</code></td><td align="left"><code>readonly</code></td><td align="left"><code>boolean</code></td><td align="left">Rules-bypass admin plane. <code>true</code> only on handles minted by the INTERNAL getAdminStorageSandbox factory (exported via <code>pyric/storage/internal</code>, never the public surface): operations on an admin handle skip rule evaluation entirely — the storage mirror of <code>getAdminFirestore</code> / <code>getAdminDatabase</code>. The public modular surface stays rules-honest; this exists so hosts (the SharedWorker’s <code>actAs: { mode: 'admin' }</code> lens) can serve firebase-admin semantics against the same shared store.</td></tr><tr><td align="left"><a id="bucket-1"></a> <code>bucket</code></td><td align="left"><code>readonly</code></td><td align="left"><code>string</code></td><td align="left">-</td></tr><tr><td align="left"><a id="bucketname"></a> <code>bucketName?</code></td><td align="left"><code>readonly</code></td><td align="left"><code>string</code></td><td align="left">The name the caller knows this bucket by, which Storage rules see in place of the store key <code>bucket</code> (see <code>sandbox/rules-bucket-name.ts</code>). Absent when the caller named none, and the rules then see the store key.</td></tr><tr><td align="left"><a id="context"></a> <code>context</code></td><td align="left"><code>readonly</code></td><td align="left"><a href="/docs/pyric-firestore-reference-api/#sandboxcontext"><code>SandboxContext</code></a></td><td align="left">-</td></tr><tr><td align="left"><a id="currentauth"></a> <code>currentAuth?</code></td><td align="left"><code>readonly</code></td><td align="left">() => { <code>tenant?</code>: <code>string</code>; <code>token?</code>: <code>Record</code>&#x3C;<code>string</code>, <code>unknown</code>>; <code>uid</code>: <code>string</code>; }</td><td align="left">App handles resolve auth at operation time; explicit contexts stay frozen.</td></tr><tr><td align="left"><a id="kind"></a> <code>kind</code></td><td align="left"><code>readonly</code></td><td align="left"><code>"sandbox"</code></td><td align="left">-</td></tr><tr><td align="left"><a id="sandbox"></a> <code>sandbox</code></td><td align="left"><code>readonly</code></td><td align="left"><a href="/docs/pyric-firestore-reference-api/#sandbox"><code>Sandbox</code></a></td><td align="left">-</td></tr><tr><td align="left"><a id="servicepromise"></a> <code>servicePromise</code></td><td align="left"><code>readonly</code></td><td align="left"><code>Promise</code>&#x3C;<code>StorageService</code>></td><td align="left">-</td></tr></tbody></table></div>
 <hr>
 <p><a id="settablemetadata"></a></p>
 <h3 id="settablemetadata">SettableMetadata</h3>

package/dist/serve/site-ui/docs/pyric-storage-reference-api.md

@@ -482,6 +482,7 @@ enforced in-process via `enforce.ts`.
 | :------ | :------ | :------ | :------ |
 | <a id="admin"></a> `admin?` | `readonly` | `boolean` | Rules-bypass admin plane. `true` only on handles minted by the INTERNAL getAdminStorageSandbox factory (exported via `pyric/storage/internal`, never the public surface): operations on an admin handle skip rule evaluation entirely — the storage mirror of `getAdminFirestore` / `getAdminDatabase`. The public modular surface stays rules-honest; this exists so hosts (the SharedWorker's `actAs: { mode: 'admin' }` lens) can serve firebase-admin semantics against the same shared store. |
 | <a id="bucket-1"></a> `bucket` | `readonly` | `string` | - |
+| <a id="bucketname"></a> `bucketName?` | `readonly` | `string` | The name the caller knows this bucket by, which Storage rules see in place of the store key `bucket` (see `sandbox/rules-bucket-name.ts`). Absent when the caller named none, and the rules then see the store key. |
 | <a id="context"></a> `context` | `readonly` | [`SandboxContext`](pyric-firestore-reference-api.md#sandboxcontext) | - |
 | <a id="currentauth"></a> `currentAuth?` | `readonly` | () => \{ `tenant?`: `string`; `token?`: `Record`\<`string`, `unknown`\>; `uid`: `string`; \} | App handles resolve auth at operation time; explicit contexts stay frozen. |
 | <a id="kind"></a> `kind` | `readonly` | `"sandbox"` | - |