@pyric/cli 0.1.0-alpha.30.2 → 0.1.0-alpha.31

package/dist/serve/site-ui/docs/firestore-swift-compat/index.html

@@ -319,7 +319,7 @@ html{scrollbar-gutter:stable}
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">SnapshotMetadata (hasPendingWrites, isFromCache)</code><span class="compat-sub"><span class="compat-behavior">Flags indicating uncommitted local writes and cache data origin.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">FirebaseFirestore Swift specification. When the bridge connection drops, a listener registered with includeMetadataChanges receives its last documents with isFromCache true and no changes, and its first snapshot after re-attach has isFromCache false; a listener without includeMetadataChanges receives neither, as production raises a metadata-only change only to listeners that include metadata changes. Reconnect tests: <a href="https://github.com/davideast/pyric/blob/main/packages/swift-client/Tests/PyricFirestoreTests/BridgeReconnectTests.swift#L823" target="_blank" rel="noopener noreferrer"><code>BridgeReconnectTests.swift</code></a>. Swift test: <a href="https://github.com/davideast/pyric/blob/main/packages/swift-client/Tests/PyricFirestoreTests/ConformanceQueryAndCodableTests.swift#L291" target="_blank" rel="noopener noreferrer"><code>packages/swift-client/Tests/PyricFirestoreTests/ConformanceQueryAndCodableTests.swift</code></a> assertion set <code>firestore-swift#73</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">FirebaseFirestore Swift specification. When the bridge connection drops, a listener registered with includeMetadataChanges receives its last documents with isFromCache true and no changes, and its first snapshot after re-attach has isFromCache false; a listener without includeMetadataChanges receives neither, as production raises a metadata-only change only to listeners that include metadata changes. Reconnect tests: <a href="https://github.com/davideast/pyric/blob/main/packages/swift-client/Tests/PyricFirestoreTests/BridgeReconnectTests.swift#L829" target="_blank" rel="noopener noreferrer"><code>BridgeReconnectTests.swift</code></a>. Swift test: <a href="https://github.com/davideast/pyric/blob/main/packages/swift-client/Tests/PyricFirestoreTests/ConformanceQueryAndCodableTests.swift#L291" target="_blank" rel="noopener noreferrer"><code>packages/swift-client/Tests/PyricFirestoreTests/ConformanceQueryAndCodableTests.swift</code></a> assertion set <code>firestore-swift#73</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">QuerySnapshot.documents</code><span class="compat-sub"><span class="compat-behavior">Ordered array of QueryDocumentSnapshot instances matched by query.</span></span></span></summary>

package/dist/serve/site-ui/docs/firestore-swift-compat.md

@@ -330,7 +330,7 @@
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">SnapshotMetadata (hasPendingWrites, isFromCache)</code><span class="compat-sub"><span class="compat-behavior">Flags indicating uncommitted local writes and cache data origin.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">FirebaseFirestore Swift specification. When the bridge connection drops, a listener registered with includeMetadataChanges receives its last documents with isFromCache true and no changes, and its first snapshot after re-attach has isFromCache false; a listener without includeMetadataChanges receives neither, as production raises a metadata-only change only to listeners that include metadata changes. Reconnect tests: <a href="https://github.com/davideast/pyric/blob/main/packages/swift-client/Tests/PyricFirestoreTests/BridgeReconnectTests.swift#L823" target="_blank" rel="noopener noreferrer"><code>BridgeReconnectTests.swift</code></a>. Swift test: <a href="https://github.com/davideast/pyric/blob/main/packages/swift-client/Tests/PyricFirestoreTests/ConformanceQueryAndCodableTests.swift#L291" target="_blank" rel="noopener noreferrer"><code>packages/swift-client/Tests/PyricFirestoreTests/ConformanceQueryAndCodableTests.swift</code></a> assertion set <code>firestore-swift#73</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">FirebaseFirestore Swift specification. When the bridge connection drops, a listener registered with includeMetadataChanges receives its last documents with isFromCache true and no changes, and its first snapshot after re-attach has isFromCache false; a listener without includeMetadataChanges receives neither, as production raises a metadata-only change only to listeners that include metadata changes. Reconnect tests: <a href="https://github.com/davideast/pyric/blob/main/packages/swift-client/Tests/PyricFirestoreTests/BridgeReconnectTests.swift#L829" target="_blank" rel="noopener noreferrer"><code>BridgeReconnectTests.swift</code></a>. Swift test: <a href="https://github.com/davideast/pyric/blob/main/packages/swift-client/Tests/PyricFirestoreTests/ConformanceQueryAndCodableTests.swift#L291" target="_blank" rel="noopener noreferrer"><code>packages/swift-client/Tests/PyricFirestoreTests/ConformanceQueryAndCodableTests.swift</code></a> assertion set <code>firestore-swift#73</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">QuerySnapshot.documents</code><span class="compat-sub"><span class="compat-behavior">Ordered array of QueryDocumentSnapshot instances matched by query.</span></span></span></summary>

package/dist/serve/site-ui/docs/functions-rtdb-compat/index.html

@@ -16,47 +16,47 @@ html{scrollbar-gutter:stable}
 <div class="compat-list">
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">A write that changes an exact matched RTDB location from absent to present invokes the handler once with a create CloudEvent and a DataSnapshot containing the created value.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a> (firebase-functions 7.2.5); production exact-create behavior. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#1</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a> (firebase-functions 7.2.5); production exact-create behavior. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#1</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">After the initial create delivery, changing or deleting that same matched value does not invoke an onValueCreated handler.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; update/delete produced no additional delivery in the bounded production scenario. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#2</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; update/delete produced no additional delivery in the bounded production scenario. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#2</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">A value that already exists when the trigger is deployed does not produce a historical create delivery.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-startup-existing.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-startup-existing.json</code></a>; pre-seeded value, zero delivery in the observation window. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L324" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#3</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-startup-existing.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-startup-existing.json</code></a>; pre-seeded value, zero delivery in the observation window. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L322" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#3</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">A named single-segment wildcard matches a created child and exposes the matched segment through event.params.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; production populated caseId and itemId. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L325" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#4</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; production populated caseId and itemId. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#4</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">Creating an ancestor object invokes the wildcard handler once for each newly-present matching descendant.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; one ancestor set delivered alpha and beta. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L325" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#5</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; one ancestor set delivered alpha and beta. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#5</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">When an ancestor write creates an exact matched descendant, the event snapshot is projected to that descendant rather than the ancestor object.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-descendant-projection.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-descendant-projection.json</code></a>; leaf snapshot excluded its sibling. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L326" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#6</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-descendant-projection.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-descendant-projection.json</code></a>; leaf snapshot excluded its sibling. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L324" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#6</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">One multi-location update that creates multiple wildcard-matched children produces one create delivery for each child.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; one update delivered delta and gamma. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L325" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#7</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; one update delivered delta and gamma. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#7</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">DatabaseEvent.data</code><span class="compat-sub"><span class="compat-behavior">The delivered DataSnapshot exposes the created value, key, existence, JSON projection, child lookup, child count, and child enumeration.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; frozen val/key/exists/toJSON/child enumeration shape. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#8</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; frozen val/key/exists/toJSON/child enumeration shape. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#8</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">DatabaseEvent.data.ref</code><span class="compat-sub"><span class="compat-behavior">The snapshot ref is an Admin DatabaseReference rooted at the matched path and can perform an awaited write from the handler.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; matched Admin ref completed the awaited sibling write. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#9</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; matched Admin ref completed the awaited sibling write. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#9</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">DatabaseEvent.authType / authId</code><span class="compat-sub"><span class="compat-behavior">For the production Admin SDK write, the event exposes authType <code>unknown</code> and authId <code>null</code>.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#10</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#10</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, async handler)</code><span class="compat-sub"><span class="compat-behavior">A Promise returned by the handler keeps the execution open through delayed asynchronous work and its awaited Admin write.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; capture logged only after the delayed Admin write completed. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#11</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; capture logged only after the delayed Admin write completed. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#11</code>.</div></div>
 </details>
 <details class="compat-row" data-status="unverified">
 <summary class="compat-line"><span class="compat-dot" data-status="unverified" role="img" aria-label="Unverified" title="Unverified"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">A handler that throws or returns a rejected Promise is reported by the managed runtime; with retry disabled, the Eventarc request can still be acknowledged with HTTP 200.</span></span></span></summary>
@@ -64,7 +64,7 @@ html{scrollbar-gutter:stable}
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">Sequential creates are all delivered; their observed arrival order is evidence, not an ordering guarantee.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; all three arrived in observed order 2, 1, 3. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L325" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#13</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; all three arrived in observed order 2, 1, 3. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#13</code>.</div></div>
 </details>
 </div>
 <h2 id="current-gaps">Current gaps</h2>

package/dist/serve/site-ui/docs/functions-rtdb-compat.md

@@ -19,47 +19,47 @@
 <div class="compat-list">
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">A write that changes an exact matched RTDB location from absent to present invokes the handler once with a create CloudEvent and a DataSnapshot containing the created value.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a> (firebase-functions 7.2.5); production exact-create behavior. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#1</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a> (firebase-functions 7.2.5); production exact-create behavior. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#1</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">After the initial create delivery, changing or deleting that same matched value does not invoke an onValueCreated handler.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; update/delete produced no additional delivery in the bounded production scenario. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#2</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; update/delete produced no additional delivery in the bounded production scenario. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#2</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">A value that already exists when the trigger is deployed does not produce a historical create delivery.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-startup-existing.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-startup-existing.json</code></a>; pre-seeded value, zero delivery in the observation window. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L324" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#3</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-startup-existing.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-startup-existing.json</code></a>; pre-seeded value, zero delivery in the observation window. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L322" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#3</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">A named single-segment wildcard matches a created child and exposes the matched segment through event.params.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; production populated caseId and itemId. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L325" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#4</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; production populated caseId and itemId. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#4</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">Creating an ancestor object invokes the wildcard handler once for each newly-present matching descendant.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; one ancestor set delivered alpha and beta. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L325" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#5</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; one ancestor set delivered alpha and beta. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#5</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">When an ancestor write creates an exact matched descendant, the event snapshot is projected to that descendant rather than the ancestor object.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-descendant-projection.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-descendant-projection.json</code></a>; leaf snapshot excluded its sibling. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L326" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#6</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-descendant-projection.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-descendant-projection.json</code></a>; leaf snapshot excluded its sibling. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L324" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#6</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">One multi-location update that creates multiple wildcard-matched children produces one create delivery for each child.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; one update delivered delta and gamma. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L325" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#7</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; one update delivered delta and gamma. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#7</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">DatabaseEvent.data</code><span class="compat-sub"><span class="compat-behavior">The delivered DataSnapshot exposes the created value, key, existence, JSON projection, child lookup, child count, and child enumeration.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; frozen val/key/exists/toJSON/child enumeration shape. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#8</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; frozen val/key/exists/toJSON/child enumeration shape. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#8</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">DatabaseEvent.data.ref</code><span class="compat-sub"><span class="compat-behavior">The snapshot ref is an Admin DatabaseReference rooted at the matched path and can perform an awaited write from the handler.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; matched Admin ref completed the awaited sibling write. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#9</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; matched Admin ref completed the awaited sibling write. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#9</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">DatabaseEvent.authType / authId</code><span class="compat-sub"><span class="compat-behavior">For the production Admin SDK write, the event exposes authType <code>unknown</code> and authId <code>null</code>.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#10</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#10</code>.</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, async handler)</code><span class="compat-sub"><span class="compat-behavior">A Promise returned by the handler keeps the execution open through delayed asynchronous work and its awaited Admin write.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; capture logged only after the delayed Admin write completed. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#11</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-exact-create.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-exact-create.json</code></a>; capture logged only after the delayed Admin write completed. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L321" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#11</code>.</div></div>
 </details>
 <details class="compat-row" data-status="unverified">
 <summary class="compat-line"><span class="compat-dot" data-status="unverified" role="img" aria-label="Unverified" title="Unverified"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">A handler that throws or returns a rejected Promise is reported by the managed runtime; with retry disabled, the Eventarc request can still be acknowledged with HTTP 200.</span></span></span></summary>
@@ -67,7 +67,7 @@
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">onValueCreated(ref, handler)</code><span class="compat-sub"><span class="compat-behavior">Sequential creates are all delivered; their observed arrival order is evidence, not an ordering guarantee.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; all three arrived in observed order 2, 1, 3. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L325" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#13</code>.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/functions-rtdb/functions-rtdb-onvaluecreated-wildcard-batches.json" target="_blank" rel="noopener noreferrer"><code>functions-rtdb-onvaluecreated-wildcard-batches.json</code></a>; all three arrived in observed order 2, 1, 3. Local replay: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/functions-rtdb/oracle-conformance.test.ts#L323" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/functions-rtdb/oracle-conformance.test.ts</code></a> assertion set <code>functions-rtdb#13</code>.</div></div>
 </details>
 </div>
 

package/dist/serve/site-ui/docs/get-started/how-the-swap-works/index.html

@@ -49,7 +49,7 @@ html{scrollbar-gutter:stable}
 
 
 
-<table><thead><tr><th>In a server-rendered module</th><th><code>pyric({ hosted: true })</code></th><th>the default SharedWorker sandbox</th></tr></thead><tbody><tr><td><code>firebase/app</code>, <code>auth</code>, <code>database</code>, <code>firestore</code>, <code>storage</code></td><td>reach the dev server’s sandbox, signed in as the server’s own user, under your rules</td><td>each call fails with <code>failed-precondition</code>, naming <code>hosted: true</code></td></tr><tr><td><code>firebase/ai</code>, <code>firebase/messaging</code></td><td>each call fails with <code>failed-precondition</code></td><td>the same</td></tr><tr><td><code>firebase/app-check</code></td><td><code>initializeAppCheck</code> and token calls work in the server’s process; tokens are minted locally with production’s shape</td><td>the same</td></tr><tr><td><code>firebase/analytics</code>, <code>firestore/lite</code>, <code>functions</code>, <code>performance</code>, <code>remote-config</code></td><td>imports resolve; each call fails with <code>PyricDeferredApiError</code> naming the subpath</td><td>the same</td></tr><tr><td><code>firebase-admin/*</code></td><td>reaches the dev server’s sandbox as admin, past your rules</td><td>each call fails with <code>failed-precondition</code>, naming <code>hosted: true</code></td></tr></tbody></table></div>
+<table><thead><tr><th>In a server-rendered module</th><th><code>pyric({ hosted: true })</code></th><th>the default SharedWorker sandbox</th></tr></thead><tbody><tr><td><code>firebase/app</code>, <code>auth</code>, <code>database</code>, <code>firestore</code>, <code>storage</code></td><td>reach the dev server’s sandbox, signed in as the server’s own user, under your rules</td><td>each call fails with <code>failed-precondition</code>, naming <code>hosted: true</code></td></tr><tr><td><code>firebase/ai</code>, <code>firebase/messaging</code></td><td>each call fails with <code>failed-precondition</code></td><td>the same</td></tr><tr><td><code>firebase/app-check</code></td><td><code>initializeAppCheck</code> with a <code>CustomProvider</code>, and token calls, work in the server’s process; tokens are minted locally with production’s shape, except that the <code>CustomProvider</code> is called when no debug token is set. A reCAPTCHA provider throws <code>ReferenceError: document is not defined</code>, as the Firebase SDK does on a server</td><td>the same</td></tr><tr><td><code>firebase/analytics</code>, <code>firestore/lite</code>, <code>functions</code>, <code>performance</code>, <code>remote-config</code></td><td>imports resolve; each call fails with <code>PyricDeferredApiError</code> naming the subpath</td><td>the same</td></tr><tr><td><code>firebase-admin/*</code></td><td>reaches the dev server’s sandbox as admin, past your rules</td><td>each call fails with <code>failed-precondition</code>, naming <code>hosted: true</code></td></tr></tbody></table></div>
 <p>Server code has one signed-in user for the whole dev server process, shared by every request, as a Node server that calls <code>initializeApp</code> has in production. Browser sessions are separate.</p>
 <p>Vite’s default externalization and <code>ssr.noExternal</code> both work. A server environment Vite does not run in its own Node process, such as a Cloudflare Workers runtime, gets a module that throws when it loads.</p>
 <p>The dev server’s network guard stays on for Firebase code the swap does not reach: other <code>firebase/*</code> subpaths, an installed package that imports <code>firebase</code> itself, and your Vite config’s own imports. The dev server log names each refused host.</p>

package/dist/serve/site-ui/docs/get-started/how-the-swap-works.md

@@ -29,7 +29,7 @@ Under `vite dev`, modules Vite loads for server rendering get the swap too: `ser
 |---|---|---|
 | `firebase/app`, `auth`, `database`, `firestore`, `storage` | reach the dev server's sandbox, signed in as the server's own user, under your rules | each call fails with `failed-precondition`, naming `hosted: true` |
 | `firebase/ai`, `firebase/messaging` | each call fails with `failed-precondition` | the same |
-| `firebase/app-check` | `initializeAppCheck` and token calls work in the server's process; tokens are minted locally with production's shape | the same |
+| `firebase/app-check` | `initializeAppCheck` with a `CustomProvider`, and token calls, work in the server's process; tokens are minted locally with production's shape, except that the `CustomProvider` is called when no debug token is set. A reCAPTCHA provider throws `ReferenceError: document is not defined`, as the Firebase SDK does on a server | the same |
 | `firebase/analytics`, `firestore/lite`, `functions`, `performance`, `remote-config` | imports resolve; each call fails with `PyricDeferredApiError` naming the subpath | the same |
 | `firebase-admin/*` | reaches the dev server's sandbox as admin, past your rules | each call fails with `failed-precondition`, naming `hosted: true` |
 

package/dist/serve/site-ui/docs/get-started/node-host/index.html

@@ -63,6 +63,7 @@ html{scrollbar-gutter:stable}
 <span class="line"></span>
 <span class="line"><span style="color:#7F848E;font-style:italic"># Run host and execute your application command with automatic interception</span></span>
 <span class="line"><span style="color:#61AFEF">npx</span><span style="color:#98C379"> pyric</span><span style="color:#98C379"> sandbox</span><span style="color:#D19A66"> --hosted</span><span style="color:#D19A66"> --</span><span style="color:#98C379"> npm</span><span style="color:#98C379"> run</span><span style="color:#98C379"> dev</span></span></code></pre>
+<p><code>pyric sandbox</code> serves the directory <code>hosting.public</code> names. When that is a build output such as <code>dist</code>, run the build first. For a Vite dev server, set <code>pyric({ hosted: true })</code> in <code>vite.config.ts</code> instead, as the next section shows.</p>
 <p>When running <code>-- &#x3C;command></code>, Pyric automatically activates <code>@pyric/cli/register</code> in the child environment via <code>NODE_OPTIONS</code>. Unchanged <code>firebase-admin</code> imports in your child command connect to the Node host.</p>
 <p>Client Firebase SDKs in the child connect to the Node host too. <code>firebase/database</code>, <code>firebase/firestore</code>, <code>firebase/auth</code> and <code>firebase/storage</code> run as the process’s own signed-in user, so your rules apply to server code as they do in production. The app must use the same Firebase options as your pages. <code>firebase/ai</code> and <code>firebase/messaging</code> in a server process fail with <code>failed-precondition</code>; use <code>firebase-admin</code> for those. Against the browser-hosted sandbox (<code>pyric sandbox</code> without <code>--hosted</code>), client SDKs in a server process fail with <code>failed-precondition</code> and name the Node host.</p>
 <p>A process that used <code>firebase/database</code> stays running until it calls <code>goOffline()</code> or <code>deleteApp()</code>, as the production SDK keeps it running.</p>

package/dist/serve/site-ui/docs/get-started/node-host.md

@@ -38,6 +38,8 @@ npx pyric sandbox --hosted
 npx pyric sandbox --hosted -- npm run dev
 ```
 
+`pyric sandbox` serves the directory `hosting.public` names. When that is a build output such as `dist`, run the build first. For a Vite dev server, set `pyric({ hosted: true })` in `vite.config.ts` instead, as the next section shows.
+
 When running `-- <command>`, Pyric automatically activates `@pyric/cli/register` in the child environment via `NODE_OPTIONS`. Unchanged `firebase-admin` imports in your child command connect to the Node host.
 
 Client Firebase SDKs in the child connect to the Node host too. `firebase/database`, `firebase/firestore`, `firebase/auth` and `firebase/storage` run as the process's own signed-in user, so your rules apply to server code as they do in production. The app must use the same Firebase options as your pages. `firebase/ai` and `firebase/messaging` in a server process fail with `failed-precondition`; use `firebase-admin` for those. Against the browser-hosted sandbox (`pyric sandbox` without `--hosted`), client SDKs in a server process fail with `failed-precondition` and name the Node host.

package/dist/serve/site-ui/docs/index.json

@@ -2047,6 +2047,11 @@
           "slug": "error-envelopes",
           "text": "Error envelopes"
         },
+        {
+          "depth": 2,
+          "slug": "requests-checked-against-production-captures",
+          "text": "Requests checked against production captures"
+        },
         {
           "depth": 2,
           "slug": "response-helpers-enhancedgeneratecontentresponse",
@@ -2092,6 +2097,11 @@
           "slug": "documented-divergences",
           "text": "Documented divergences"
         },
+        {
+          "depth": 3,
+          "slug": "bugs",
+          "text": "Bugs"
+        },
         {
           "depth": 2,
           "slug": "reviewed-public-runtime-gaps",
@@ -2237,6 +2247,11 @@
           "slug": "documented-divergences",
           "text": "Documented divergences"
         },
+        {
+          "depth": 3,
+          "slug": "bugs",
+          "text": "Bugs"
+        },
         {
           "depth": 3,
           "slug": "not-implemented-yet",
@@ -2407,6 +2422,11 @@
           "slug": "server-rendered-modules-under-vite-dev",
           "text": "Server-rendered modules under vite dev"
         },
+        {
+          "depth": 2,
+          "slug": "behavior-checked-against-production-captures",
+          "text": "Behavior checked against production captures"
+        },
         {
           "depth": 2,
           "slug": "current-gaps",
@@ -2416,6 +2436,11 @@
           "depth": 3,
           "slug": "documented-divergences",
           "text": "Documented divergences"
+        },
+        {
+          "depth": 3,
+          "slug": "bugs",
+          "text": "Bugs"
         }
       ],
       "excerpt": "<div class=\"compat-stat\"> <p class=\"compat-stat-figure\"> <span class=\"compat-stat-pct\">100%</span> <span class=\"compat-stat-label\">of the public API supported</span> </p> <div class=\"compat-meters\"> <span class=\"compat-meter-track\"><span class=\"compat-meter-fill\" style=\"width: 100%\"></span></span> </div> <p class=\"compat-stat-denom\">182 of 182 public API</p> </div>"
@@ -2532,6 +2557,11 @@
           "slug": "server-rendered-modules-under-vite-dev",
           "text": "Server-rendered modules under vite dev"
         },
+        {
+          "depth": 2,
+          "slug": "behavior-checked-against-production-captures",
+          "text": "Behavior checked against production captures"
+        },
         {
           "depth": 2,
           "slug": "current-gaps",
@@ -2541,6 +2571,11 @@
           "depth": 3,
           "slug": "documented-divergences",
           "text": "Documented divergences"
+        },
+        {
+          "depth": 3,
+          "slug": "bugs",
+          "text": "Bugs"
         }
       ],
       "excerpt": "<div class=\"compat-stat\"> <p class=\"compat-stat-figure\"> <span class=\"compat-stat-pct\">100%</span> <span class=\"compat-stat-label\">of the public API supported</span> </p> <div class=\"compat-meters\"> <span class=\"compat-meter-track\"><span class=\"compat-meter-fill\" style=\"width: 100%\"></span></span> </div> <p class=\"compat-stat-denom\">59 of 59 public API</p> </div>"
@@ -2807,6 +2842,11 @@
           "slug": "firebase-admin-getappcheck",
           "text": "firebase-admin getAppCheck()"
         },
+        {
+          "depth": 2,
+          "slug": "firebase-admin-createtoken-options-checked-against-production-captures",
+          "text": "firebase-admin createToken options, checked against production captures"
+        },
         {
           "depth": 2,
           "slug": "current-gaps",
@@ -2817,6 +2857,11 @@
           "slug": "documented-divergences",
           "text": "Documented divergences"
         },
+        {
+          "depth": 3,
+          "slug": "bugs",
+          "text": "Bugs"
+        },
         {
           "depth": 3,
           "slug": "not-implemented-yet",
@@ -2896,11 +2941,6 @@
           "depth": 3,
           "slug": "documented-divergences",
           "text": "Documented divergences"
-        },
-        {
-          "depth": 3,
-          "slug": "unverified",
-          "text": "Unverified"
         }
       ],
       "excerpt": "<div class=\"compat-stat\"> <p class=\"compat-stat-surface\">This is a Pyric-native API with no Firebase counterpart, so coverage is measured against its own public exports rather than a Firebase surface.</p> </div>"

package/dist/serve/site-ui/docs/messaging-compat/index.html

@@ -307,7 +307,7 @@ html{scrollbar-gutter:stable}
 <div class="compat-list">
 <details class="compat-row" data-status="diverged">
 <summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">getMessaging(app) in a registered server process</code><span class="compat-sub"><span class="compat-behavior">Under a remote register activation, <code>getMessaging(app)</code> in a server process fails with <code>failed-precondition</code> and a message that names the client services that do reach the Node host: <code>firebase/messaging</code> has no path to the host, and no in-process sandbox stands in for it.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">App scenario <code>test/apps/client-sdk-under-register</code> calls it under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server and asserts the refusal; on main (942cb175) it returned a handle on a private in-process sandbox. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L80" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins that the subpath keeps its mirror under a remote activation, and <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-origin.test.ts</code></a> that a mirror resolved from such an app refuses. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L479" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div>
+<div class="compat-evidence"><div class="compat-probe">App scenario <code>test/apps/client-sdk-under-register</code> calls it under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server and asserts the refusal; on main (942cb175) it returned a handle on a private in-process sandbox. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L78" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins that the subpath keeps its mirror under a remote activation, and <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-origin.test.ts</code></a> that a mirror resolved from such an app refuses. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L479" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div>
 <div class="compat-note">refused in a server process; production runs it in Node</div></div>
 </details>
 <details class="compat-row" data-status="diverged">
@@ -321,7 +321,7 @@ html{scrollbar-gutter:stable}
 <p>Known differences between Pyric and production Firebase. Each remains tracked as a non-conforming row.</p>
 <div class="compat-list">
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">getMessaging(app) in a registered server process</code><span class="compat-sub"><span class="compat-behavior">Under a remote register activation, <code>getMessaging(app)</code> in a server process fails with <code>failed-precondition</code> and a message that names the client services that do reach the Node host: <code>firebase/messaging</code> has no path to the host, and no in-process sandbox stands in for it.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/client-sdk-under-register</code> calls it under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server and asserts the refusal; on main (942cb175) it returned a handle on a private in-process sandbox. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L80" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins that the subpath keeps its mirror under a remote activation, and <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-origin.test.ts</code></a> that a mirror resolved from such an app refuses. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L479" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div></div></details>
+<div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/client-sdk-under-register</code> calls it under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server and asserts the refusal; on main (942cb175) it returned a handle on a private in-process sandbox. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L78" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins that the subpath keeps its mirror under a remote activation, and <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-origin.test.ts</code></a> that a mirror resolved from such an app refuses. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L479" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div></div></details>
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">getMessaging(app) in a server-rendered module under vite dev</code><span class="compat-sub"><span class="compat-behavior">Under <code>vite dev</code>, <code>getMessaging(app)</code> in a server-rendered module fails with <code>failed-precondition</code>, naming the client services that reach the host: <code>firebase/messaging</code> has no path to the dev server's host from server code, and the real SDK does not load.</span></span></span></summary>
 <div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/vite-ssr-client-sdk</code> calls it in SSR on a hosted dev server and asserts the refusal. On main (ba2c0bf0a) it was the real SDK. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/vite-module-swap.test.ts#L4" target="_blank" rel="noopener noreferrer"><code>vite-module-swap.test.ts</code></a> pins the routing. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/vite-ssr-client-sdk/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L493" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div></div></details>
 </div>

package/dist/serve/site-ui/docs/messaging-compat.md

@@ -330,7 +330,7 @@
 <div class="compat-list">
 <details class="compat-row" data-status="diverged">
 <summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">getMessaging(app) in a registered server process</code><span class="compat-sub"><span class="compat-behavior">Under a remote register activation, <code>getMessaging(app)</code> in a server process fails with <code>failed-precondition</code> and a message that names the client services that do reach the Node host: <code>firebase/messaging</code> has no path to the host, and no in-process sandbox stands in for it.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">App scenario <code>test/apps/client-sdk-under-register</code> calls it under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server and asserts the refusal; on main (942cb175) it returned a handle on a private in-process sandbox. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L80" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins that the subpath keeps its mirror under a remote activation, and <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-origin.test.ts</code></a> that a mirror resolved from such an app refuses. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L479" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div>
+<div class="compat-evidence"><div class="compat-probe">App scenario <code>test/apps/client-sdk-under-register</code> calls it under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server and asserts the refusal; on main (942cb175) it returned a handle on a private in-process sandbox. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L78" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins that the subpath keeps its mirror under a remote activation, and <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-origin.test.ts</code></a> that a mirror resolved from such an app refuses. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L479" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div>
 <div class="compat-note">refused in a server process; production runs it in Node</div></div>
 </details>
 <details class="compat-row" data-status="diverged">
@@ -348,7 +348,7 @@ Known differences between Pyric and production Firebase. Each remains tracked as
 
 <div class="compat-list">
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">getMessaging(app) in a registered server process</code><span class="compat-sub"><span class="compat-behavior">Under a remote register activation, <code>getMessaging(app)</code> in a server process fails with <code>failed-precondition</code> and a message that names the client services that do reach the Node host: <code>firebase/messaging</code> has no path to the host, and no in-process sandbox stands in for it.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/client-sdk-under-register</code> calls it under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server and asserts the refusal; on main (942cb175) it returned a handle on a private in-process sandbox. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L80" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins that the subpath keeps its mirror under a remote activation, and <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-origin.test.ts</code></a> that a mirror resolved from such an app refuses. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L479" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div></div></details>
+<div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/client-sdk-under-register</code> calls it under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server and asserts the refusal; on main (942cb175) it returned a handle on a private in-process sandbox. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L78" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins that the subpath keeps its mirror under a remote activation, and <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-origin.test.ts</code></a> that a mirror resolved from such an app refuses. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L479" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div></div></details>
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">getMessaging(app) in a server-rendered module under vite dev</code><span class="compat-sub"><span class="compat-behavior">Under <code>vite dev</code>, <code>getMessaging(app)</code> in a server-rendered module fails with <code>failed-precondition</code>, naming the client services that reach the host: <code>firebase/messaging</code> has no path to the dev server's host from server code, and the real SDK does not load.</span></span></span></summary>
 <div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/vite-ssr-client-sdk</code> calls it in SSR on a hosted dev server and asserts the refusal. On main (ba2c0bf0a) it was the real SDK. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/vite-module-swap.test.ts#L4" target="_blank" rel="noopener noreferrer"><code>vite-module-swap.test.ts</code></a> pins the routing. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/vite-ssr-client-sdk/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/messaging/oracle-conformance.test.ts#L493" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>)</div></div></details>
 </div>

package/dist/serve/site-ui/docs/pyric-ai-scripting-reference-api/index.html

@@ -377,7 +377,9 @@ every event is <code>data: &#x3C;complete JSON></code>, events separated by CRLF
 <p><a id="lastusertext"></a></p>
 <h3 id="lastusertext">lastUserText()</h3>
 <pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> lastUserText</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">req</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">GenerateContentRequest</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;</span></span></code></pre>
-<p>Text of the last <code>user</code> turn — what string/regex matchers run against.</p>
+<p>Text of the last <code>user</code> turn — what string/regex matchers run against.
+A function response turn rides under role <code>user</code> too (#1410); it carries
+a tool result, not a prompt, so it is skipped.</p>
 <h4 id="parameters-3">Parameters</h4>
 <div class="table-scroll">
 

package/dist/serve/site-ui/docs/pyric-ai-scripting-reference-api.md

@@ -228,6 +228,8 @@ function lastUserText(req: GenerateContentRequest): string;
 ```
 
 Text of the last `user` turn — what string/regex matchers run against.
+A function response turn rides under role `user` too (#1410); it carries
+a tool result, not a prompt, so it is skipped.
 
 #### Parameters
 

package/dist/serve/site-ui/docs/pyric-app-check-reference-api/index.html

@@ -206,10 +206,18 @@ Check behavioral conformance
 <hr>
 <p><a id="appchecktoken"></a></p>
 <h3 id="appchecktoken">AppCheckToken</h3>
-<p>The three attestation providers. The sandbox has no attestation service, so
-it never calls a provider, as production never does under a debug token
-(capture <code>app-check-client-debug-get-token</code>, <code>customProviderCalls: 0</code>).
+<p>The three attestation providers. The sandbox has no reCAPTCHA, so it never
+calls a reCAPTCHA provider. It calls a <code>CustomProvider</code> as production does
+when no debug token is set (<code>state.ts</code>); under a debug token production
+never calls one (capture <code>app-check-client-debug-get-token</code>,
+<code>customProviderCalls: 0</code>), and neither does the sandbox.
 <code>isEqual</code> decides whether a second <code>initializeAppCheck</code> has the same options.</p>
+<p><code>initialize</code> is called at the end of <code>initializeAppCheck</code>, as upstream
+<code>_activate</code> calls each provider’s (<code>@firebase/app-check</code> 0.11.3, line 1559).
+Upstream’s reCAPTCHA providers add a hidden div to <code>document</code> there
+(<code>makeDiv</code>, line 1133), so where there is no <code>document</code>, such as a Node
+process or a server-rendered module, they throw <code>ReferenceError: document is not defined</code>, debug token or not. The sandbox throws the same error. A
+<code>CustomProvider</code> needs nothing to initialize.</p>
 <h4 id="properties-2">Properties</h4>
 <div class="table-scroll">