npm - @pyric/cli - Versions diffs - 0.1.0-alpha.9 - Mend

@pyric/cli 0.1.0-alpha.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1169) hide show

package/dist/serve/docs-ui/docs/pyric-rules-reference-ast/index.html ADDED Viewed

@@ -0,0 +1,85 @@
+<!DOCTYPE html><html lang="en"> <head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>AST · Pyric Studio</title><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500;700&display=swap" rel="stylesheet"><link rel="stylesheet" href="/__pyric/ui/_astro/_slug_.CQYSemvw.css"></head> <body>  <header class="studio__bar"> <div class="studio__bar-inner"> <a class="studio__brand" href="/__pyric/ui/" aria-label="Pyric Studio">Pyric</a> <nav class="studio__nav" aria-label="Studio tabs"> <a class="studio__nav-tab" href="/__pyric/ui/"> Home </a><a class="studio__nav-tab" href="/__pyric/ui/firestore"> Firestore </a><a class="studio__nav-tab" href="/__pyric/ui/auth"> Auth </a><a class="studio__nav-tab" href="/__pyric/ui/rtdb"> RTDB </a><a class="studio__nav-tab" href="/__pyric/ui/storage"> Storage </a><a class="studio__nav-tab" href="/__pyric/ui/traffic"> Traffic </a><a class="studio__nav-tab" href="/__pyric/ui/settings"> Settings </a><a class="studio__nav-tab" href="/__pyric/ui/docs" aria-current="page"> Docs </a> </nav> </div> </header> <div class="docs-shell">  <details class="docs-nav-drawer"> <summary>Navigate</summary> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div> <script type="module">let i=null;function d(t){return i||(i=fetch(t).then(e=>e.json())),i}function l(t,e){return t.title.toLowerCase().includes(e)||t.excerpt.toLowerCase().includes(e)?!0:t.headings.some(r=>r.text.toLowerCase().includes(e))}function u(t,e,r){if(e.innerHTML="",t.length===0){e.hidden=!1;{const n=document.createElement("li");n.className="docs-search-empty",n.textContent="No matches",e.appendChild(n)}return}e.hidden=!1;for(const n of t.slice(0,8)){const s=document.createElement("li"),c=document.createElement("a");c.href=n.path;const o=document.createElement("span");o.className="docs-search-result-title",o.textContent=n.title;const a=document.createElement("span");a.className="docs-search-result-meta",a.textContent=[n.group,n.section].filter(Boolean).join(" / "),c.append(o,a),s.appendChild(c),e.appendChild(s)}}document.querySelectorAll(".docs-search").forEach(t=>{const e=t.dataset.indexUrl,r=t.querySelector(".docs-search-input"),n=t.querySelector(".docs-search-results");r.addEventListener("input",async()=>{const s=r.value.trim().toLowerCase();if(!s){n.hidden=!0,n.innerHTML="";return}const{pages:c}=await d(e);r.value.trim().toLowerCase()===s&&u(c.filter(o=>l(o,s)),n)}),r.addEventListener("focus",()=>{d(e),n.childElementCount>0&&(n.hidden=!1)}),r.addEventListener("keydown",s=>{s.key==="Escape"&&(r.value="",n.hidden=!0,n.innerHTML="",r.blur())}),r.addEventListener("blur",()=>{window.setTimeout(()=>{n.hidden=!0},150)})});document.addEventListener("keydown",t=>{if(!(t.metaKey||t.ctrlKey)||t.key.toLowerCase()!=="k")return;const e=[...document.querySelectorAll(".docs-search-input")].find(r=>r.offsetParent!==null);e&&(t.preventDefault(),e.focus(),e.select())});</script> <a class="docs-nav-toplink" href="/__pyric/ui/docs/overview/"> Overview </a><details class="docs-nav-group"> <summary>Run locally</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/how-the-swap-works/"> How the swap works </a> </li><li> <a href="/__pyric/ui/docs/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Develop with Firebase APIs</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/sign-in-and-manage-users/"> Sign in and manage users </a> </li><li> <a href="/__pyric/ui/docs/store-and-query-data/"> Store and query data </a> </li><li> <a href="/__pyric/ui/docs/sync-realtime-data/"> Sync realtime data </a> </li><li> <a href="/__pyric/ui/docs/store-files/"> Store files </a> </li><li> <a href="/__pyric/ui/docs/receive-messages/"> Receive messages </a> </li><li> <a href="/__pyric/ui/docs/run-ai-logic-locally/"> Run AI Logic locally </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-how-to-run-rtdb-onvaluecreated/"> Run an RTDB function locally </a> </li><li> <a href="/__pyric/ui/docs/which-data-service/"> Which data service? </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Inspect and correct</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <h2 class="docs-nav-heading"> Inspect the sandbox </h2> <ul> <li> <a href="/__pyric/ui/docs/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/shape-your-data/"> Seed, snapshot, replay </a> </li><li> <a href="/__pyric/ui/docs/watch-and-review/"> Review agent activity </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Correct Security Rules </h2> <ul> <li> <a href="/__pyric/ui/docs/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/rules-patterns/"> Rules patterns </a> </li><li> <a href="/__pyric/ui/docs/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/whats-possible/"> Case studies </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Work with an agent </h2> <ul> <li> <a href="/__pyric/ui/docs/what-your-agent-can-do/"> Work through an agent </a> </li><li> <a href="/__pyric/ui/docs/skills/"> Agent skills </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Verify the boundary</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-how-to-verify-against-a-captured-session/"> Verify a captured session </a> </li><li> <a href="/__pyric/ui/docs/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Ship unchanged</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/set-up-the-project/"> Set up the Firebase project </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/how-we-know-it-matches-firebase/"> Conformance </a> </li><li> <a href="/__pyric/ui/docs/whats-experimental/"> What&#39;s experimental </a> </li><li> <a href="/__pyric/ui/docs/pyric-conformance-scores/"> Conformance scores </a> </li><li> <a href="/__pyric/ui/docs/pyric-app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-compat/"> Rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-functions-rtdb-compat/"> Functions · RTDB </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group" open> <summary>Reference</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli/"> @pyric/cli </a> </li><li> <a href="/__pyric/ui/docs/pyric-explanation-versioning-and-compatibility/"> pyric </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore/"> pyric / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules/" aria-current="true"> pyric / rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox/"> pyric / sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage/"> pyric / storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth/"> pyric / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database/"> pyric / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-app/"> pyric-admin / app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore/"> pyric-admin / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth/"> pyric-admin / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database/"> pyric-admin / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage/"> pyric-admin / storage </a> </li><li> <a href="/__pyric/ui/docs/ui/"> @pyric/ui </a> </li><li> <a href="/__pyric/ui/docs/api-reference/"> API reference </a> </li> </ul> </div> </div> </details> </nav> </details> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div>  <a class="docs-nav-toplink" href="/__pyric/ui/docs/overview/" id="nav-group-overview"> Overview </a><details class="docs-nav-group" id="nav-group-run-locally"> <summary>Run locally</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/how-the-swap-works/"> How the swap works </a> </li><li> <a href="/__pyric/ui/docs/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-develop-with-firebase-apis"> <summary>Develop with Firebase APIs</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/sign-in-and-manage-users/"> Sign in and manage users </a> </li><li> <a href="/__pyric/ui/docs/store-and-query-data/"> Store and query data </a> </li><li> <a href="/__pyric/ui/docs/sync-realtime-data/"> Sync realtime data </a> </li><li> <a href="/__pyric/ui/docs/store-files/"> Store files </a> </li><li> <a href="/__pyric/ui/docs/receive-messages/"> Receive messages </a> </li><li> <a href="/__pyric/ui/docs/run-ai-logic-locally/"> Run AI Logic locally </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-how-to-run-rtdb-onvaluecreated/"> Run an RTDB function locally </a> </li><li> <a href="/__pyric/ui/docs/which-data-service/"> Which data service? </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-inspect-and-correct"> <summary>Inspect and correct</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-inspect-and-correct-inspect-the-sandbox"> Inspect the sandbox </h2> <ul> <li> <a href="/__pyric/ui/docs/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/shape-your-data/"> Seed, snapshot, replay </a> </li><li> <a href="/__pyric/ui/docs/watch-and-review/"> Review agent activity </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-inspect-and-correct-correct-security-rules"> Correct Security Rules </h2> <ul> <li> <a href="/__pyric/ui/docs/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/rules-patterns/"> Rules patterns </a> </li><li> <a href="/__pyric/ui/docs/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/whats-possible/"> Case studies </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-inspect-and-correct-work-with-an-agent"> Work with an agent </h2> <ul> <li> <a href="/__pyric/ui/docs/what-your-agent-can-do/"> Work through an agent </a> </li><li> <a href="/__pyric/ui/docs/skills/"> Agent skills </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-verify-the-boundary"> <summary>Verify the boundary</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-how-to-verify-against-a-captured-session/"> Verify a captured session </a> </li><li> <a href="/__pyric/ui/docs/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-ship-unchanged"> <summary>Ship unchanged</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/set-up-the-project/"> Set up the Firebase project </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-conformance"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/how-we-know-it-matches-firebase/"> Conformance </a> </li><li> <a href="/__pyric/ui/docs/whats-experimental/"> What&#39;s experimental </a> </li><li> <a href="/__pyric/ui/docs/pyric-conformance-scores/"> Conformance scores </a> </li><li> <a href="/__pyric/ui/docs/pyric-app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-compat/"> Rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-functions-rtdb-compat/"> Functions · RTDB </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group" id="nav-group-reference" open> <summary>Reference</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli/"> @pyric/cli </a> </li><li> <a href="/__pyric/ui/docs/pyric-explanation-versioning-and-compatibility/"> pyric </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore/"> pyric / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules/" aria-current="true"> pyric / rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox/"> pyric / sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage/"> pyric / storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth/"> pyric / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database/"> pyric / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-app/"> pyric-admin / app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore/"> pyric-admin / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth/"> pyric-admin / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database/"> pyric-admin / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage/"> pyric-admin / storage </a> </li><li> <a href="/__pyric/ui/docs/ui/"> @pyric/ui </a> </li><li> <a href="/__pyric/ui/docs/api-reference/"> API reference </a> </li> </ul> </div> </div> </details> </nav> <main class="doc-main"> <nav class="docs-breadcrumbs" aria-label="Breadcrumb"> <ol> <li>  <a href="/__pyric/ui/docs/pyric-rules/">pyric / rules</a> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <span>Reference</span> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <span aria-current="page">AST</span> </li> </ol> </nav>  <article class="prose">  <h1 id="ast">AST</h1>
+<p>The AST is the typed tree produced by <code>parseToAST</code> / <code>parseToASTOrError</code>. These functions and the shapes below are exported from <code>pyric/rules/internal</code>, an internal, unstable surface not covered by the public <code>pyric/rules</code> contract: it may change without notice. Most callers reach the AST through the public front door instead: <code>firestoreRules(source).toJSON()</code> returns the same <code>FirestoreRules</code> tree without touching the parser directly. This page documents the shape for callers (and tooling like <a href="../pyric-rules-how-to-inspect-rules-via-the-ast/">Inspect rules via the AST</a>) that need to walk it directly.</p>
+<h2 id="root-firestorerules">Root: <code>FirestoreRules</code></h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">interface</span><span style="color:#E5C07B"> FirestoreRules</span><span style="color:#ABB2BF"> {</span></span>
+<span class="line"><span style="color:#E06C75">  version</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;          </span><span style="color:#7F848E;font-style:italic">// 'rules_version' value, e.g. '2' or '2+modules'</span></span>
+<span class="line"><span style="color:#E06C75">  imports</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">ImportDecl</span><span style="color:#ABB2BF">[];    </span><span style="color:#7F848E;font-style:italic">// only non-empty for '2+modules'</span></span>
+<span class="line"><span style="color:#E06C75">  service</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">ServiceBlock</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#ABB2BF">}</span></span></code></pre>
+<h2 id="importdecl"><code>ImportDecl</code></h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">interface</span><span style="color:#E5C07B"> ImportDecl</span><span style="color:#ABB2BF"> {</span></span>
+<span class="line"><span style="color:#E06C75">  functions</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">[];   </span><span style="color:#7F848E;font-style:italic">// imported function names</span></span>
+<span class="line"><span style="color:#E06C75">  module</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;        </span><span style="color:#7F848E;font-style:italic">// module name (stdlib name or relative path)</span></span>
+<span class="line"><span style="color:#ABB2BF">}</span></span></code></pre>
+<h2 id="serviceblock"><code>ServiceBlock</code></h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">interface</span><span style="color:#E5C07B"> ServiceBlock</span><span style="color:#ABB2BF"> {</span></span>
+<span class="line"><span style="color:#E06C75">  name</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;          </span><span style="color:#7F848E;font-style:italic">// always 'cloud.firestore' for Firestore rules</span></span>
+<span class="line"><span style="color:#E06C75">  match</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">MatchBlock</span><span style="color:#ABB2BF">;     </span><span style="color:#7F848E;font-style:italic">// the root match (/databases/{database}/documents)</span></span>
+<span class="line"><span style="color:#ABB2BF">}</span></span></code></pre>
+<h2 id="matchblock"><code>MatchBlock</code></h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">interface</span><span style="color:#E5C07B"> MatchBlock</span><span style="color:#ABB2BF"> {</span></span>
+<span class="line"><span style="color:#E06C75">  path</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">PathPattern</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  functions</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">FunctionDef</span><span style="color:#ABB2BF">[];</span></span>
+<span class="line"><span style="color:#E06C75">  allows</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">AllowRule</span><span style="color:#ABB2BF">[];</span></span>
+<span class="line"><span style="color:#E06C75">  children</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">MatchBlock</span><span style="color:#ABB2BF">[];</span></span>
+<span class="line"><span style="color:#ABB2BF">}</span></span></code></pre>
+<h2 id="pathpattern"><code>PathPattern</code></h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">interface</span><span style="color:#E5C07B"> PathPattern</span><span style="color:#ABB2BF"> {</span></span>
+<span class="line"><span style="color:#E06C75">  raw</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;              </span><span style="color:#7F848E;font-style:italic">// original path text, e.g. '/users/{uid}'</span></span>
+<span class="line"><span style="color:#E06C75">  segments</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">PathSegment</span><span style="color:#ABB2BF">[];</span></span>
+<span class="line"><span style="color:#ABB2BF">}</span></span>
+<span class="line"></span>
+<span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> PathSegment</span><span style="color:#56B6C2"> =</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'literal'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">value</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'wildcard'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">name</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> }     </span><span style="color:#7F848E;font-style:italic">// {name}</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'recursive'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">name</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> };   </span><span style="color:#7F848E;font-style:italic">// {name=**}</span></span></code></pre>
+<h2 id="allowrule"><code>AllowRule</code></h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">interface</span><span style="color:#E5C07B"> AllowRule</span><span style="color:#ABB2BF"> {</span></span>
+<span class="line"><span style="color:#E06C75">  operations</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Operation</span><span style="color:#ABB2BF">[];</span></span>
+<span class="line"><span style="color:#E06C75">  condition</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#ABB2BF">}</span></span>
+<span class="line"></span>
+<span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> Operation</span><span style="color:#56B6C2"> =</span><span style="color:#98C379"> 'read'</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">'write'</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">'get'</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">'list'</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">'create'</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">'update'</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">'delete'</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<h2 id="functiondef"><code>FunctionDef</code></h2>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">interface</span><span style="color:#E5C07B"> FunctionDef</span><span style="color:#ABB2BF"> {</span></span>
+<span class="line"><span style="color:#E06C75">  name</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  parameters</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">[];</span></span>
+<span class="line"><span style="color:#E06C75">  exported</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">boolean</span><span style="color:#ABB2BF">;       </span><span style="color:#7F848E;font-style:italic">// true when declared `export function ...` (used by '2+modules')</span></span>
+<span class="line"><span style="color:#E06C75">  lets</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">LetBinding</span><span style="color:#ABB2BF">[];</span></span>
+<span class="line"><span style="color:#E06C75">  body</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#ABB2BF">}</span></span>
+<span class="line"></span>
+<span class="line"><span style="color:#C678DD">interface</span><span style="color:#E5C07B"> LetBinding</span><span style="color:#ABB2BF"> {</span></span>
+<span class="line"><span style="color:#E06C75">  name</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  value</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#ABB2BF">}</span></span></code></pre>
+<h2 id="expression"><code>Expression</code></h2>
+<p>Discriminated union. The discriminator is <code>type</code>.</p>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> Expression</span><span style="color:#56B6C2"> =</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'literal'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">value</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">number</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">boolean</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">null</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">raw</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'identifier'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">name</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'memberAccess'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">object</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">property</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'methodCall'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">object</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">method</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">args</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">[] }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'bracketAccess'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">object</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">index</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'sliceAccess'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">object</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">start</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">end</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'binaryOp'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">op</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">left</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">right</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'unaryOp'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">op</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">operand</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'ternary'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">condition</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">consequent</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">alternate</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'inExpr'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">element</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">collection</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'isExpr'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">value</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">typeName</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'listLiteral'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">elements</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">[] }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'mapLiteral'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">entries</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Array</span><span style="color:#ABB2BF">&#x3C;{ </span><span style="color:#E06C75">key</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">value</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF"> }> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'pathLiteral'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">raw</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">segments</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Array</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">> }</span></span>
+<span class="line"><span style="color:#ABB2BF">  | { </span><span style="color:#E06C75">type</span><span style="color:#ABB2BF">: </span><span style="color:#98C379">'functionCall'</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">name</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">; </span><span style="color:#E06C75">args</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Expression</span><span style="color:#ABB2BF">[] };</span></span></code></pre>
+<h3 id="notes-per-variant">Notes per variant</h3>
+<ul>
+<li><code>literal.raw</code> preserves the original source text of the literal, useful for diagnostics and for <code>RULES_WEAKENED</code>’s deterministic serialiser.</li>
+<li><code>binaryOp.op</code> is one of: <code>&#x26;&#x26;</code>, <code>||</code>, <code>==</code>, <code>!=</code>, <code>&#x3C;</code>, <code>&#x3C;=</code>, <code>></code>, <code>>=</code>, <code>+</code>, <code>-</code>, <code>*</code>, <code>/</code>, <code>%</code>.</li>
+<li><code>unaryOp.op</code> is <code>!</code> or <code>-</code>.</li>
+<li><code>methodCall.method</code> and <code>memberAccess.property</code> are strings: there are no nested expressions in the property position.</li>
+<li><code>inExpr</code> represents <code>x in y</code>. <code>isExpr</code> represents <code>x is timestamp</code> (and other type tests).</li>
+<li><code>pathLiteral.segments</code> is <code>Array&#x3C;string | Expression></code>: a string segment is a literal path component, an <code>Expression</code> segment is an interpolation like <code>$(uid)</code>.</li>
+<li><code>sliceAccess</code> represents <code>bytes[0:10]</code> style slicing. Only valid on <code>Bytes</code> at runtime.</li>
+</ul>
+<h2 id="right-associative-chains">Right-associative chains</h2>
+<p>The grammar builds <code>a &#x26;&#x26; b &#x26;&#x26; c</code> as right-associative: <code>BinaryOp('&#x26;&#x26;', a, BinaryOp('&#x26;&#x26;', b, c))</code>. The linter’s chain-depth algorithm walks <code>right</code> recursively for this reason. Don’t assume left-associativity when traversing.</p>  </article> </main> <aside class="doc-toc" aria-label="On this page"> <h2 class="doc-toc-heading">On this page</h2> <ul> <li data-depth="2"> <a href="#root-firestorerules">Root: FirestoreRules</a> </li><li data-depth="2"> <a href="#importdecl">ImportDecl</a> </li><li data-depth="2"> <a href="#serviceblock">ServiceBlock</a> </li><li data-depth="2"> <a href="#matchblock">MatchBlock</a> </li><li data-depth="2"> <a href="#pathpattern">PathPattern</a> </li><li data-depth="2"> <a href="#allowrule">AllowRule</a> </li><li data-depth="2"> <a href="#functiondef">FunctionDef</a> </li><li data-depth="2"> <a href="#expression">Expression</a> </li><li data-depth="3"> <a href="#notes-per-variant">Notes per variant</a> </li><li data-depth="2"> <a href="#right-associative-chains">Right-associative chains</a> </li> </ul> </aside> </div> <script type="module">const a=document.querySelector("[data-api-symbol-filter]"),d=[...document.querySelectorAll("[data-api-symbol-group]")],n=document.querySelector("[data-api-symbol-empty]");a?.addEventListener("input",()=>{const t=a.value.trim().toLowerCase();let o=0;for(const i of d){let e=0;i.querySelectorAll("[data-api-symbol]").forEach(l=>{const r=!t||(l.dataset.apiSymbol??"").includes(t);l.hidden=!r,r&&e++}),i.hidden=e===0,o+=e}n&&(n.hidden=o>0)});</script> <script type="module">const s=new Map;document.querySelectorAll('.doc-toc a[href^="#"]').forEach(t=>s.set(decodeURIComponent(t.hash.slice(1)),t));if(s.size>0){const t=new Set,n=()=>{let o=null;for(const e of s.keys())if(t.has(e)){o=e;break}s.forEach((e,c)=>e.classList.toggle("active",c===o))},r=new IntersectionObserver(o=>{for(const e of o)e.isIntersecting?t.add(e.target.id):t.delete(e.target.id);n()},{rootMargin:"-72px 0px -60% 0px"});s.forEach((o,e)=>{const c=document.getElementById(e);c&&r.observe(c)})}</script> <script type="module">document.querySelector('.studio__nav [aria-current="page"]')?.scrollIntoView({block:"nearest",inline:"center"});</script> </body> </html>

package/dist/serve/docs-ui/docs/pyric-rules-reference-ast.md ADDED Viewed

@@ -0,0 +1,121 @@
+# AST
+The AST is the typed tree produced by `parseToAST` / `parseToASTOrError`. These functions and the shapes below are exported from `pyric/rules/internal`, an internal, unstable surface not covered by the public `pyric/rules` contract: it may change without notice. Most callers reach the AST through the public front door instead: `firestoreRules(source).toJSON()` returns the same `FirestoreRules` tree without touching the parser directly. This page documents the shape for callers (and tooling like [Inspect rules via the AST](../pyric-rules-how-to-inspect-rules-via-the-ast/)) that need to walk it directly.
+## Root: `FirestoreRules`
+```ts
+interface FirestoreRules {
+  version: string;          // 'rules_version' value, e.g. '2' or '2+modules'
+  imports: ImportDecl[];    // only non-empty for '2+modules'
+  service: ServiceBlock;
+}
+```
+## `ImportDecl`
+```ts
+interface ImportDecl {
+  functions: string[];   // imported function names
+  module: string;        // module name (stdlib name or relative path)
+}
+```
+## `ServiceBlock`
+```ts
+interface ServiceBlock {
+  name: string;          // always 'cloud.firestore' for Firestore rules
+  match: MatchBlock;     // the root match (/databases/{database}/documents)
+}
+```
+## `MatchBlock`
+```ts
+interface MatchBlock {
+  path: PathPattern;
+  functions: FunctionDef[];
+  allows: AllowRule[];
+  children: MatchBlock[];
+}
+```
+## `PathPattern`
+```ts
+interface PathPattern {
+  raw: string;              // original path text, e.g. '/users/{uid}'
+  segments: PathSegment[];
+}
+type PathSegment =
+  | { type: 'literal'; value: string }
+  | { type: 'wildcard'; name: string }     // {name}
+  | { type: 'recursive'; name: string };   // {name=**}
+```
+## `AllowRule`
+```ts
+interface AllowRule {
+  operations: Operation[];
+  condition: Expression;
+}
+type Operation = 'read' | 'write' | 'get' | 'list' | 'create' | 'update' | 'delete';
+```
+## `FunctionDef`
+```ts
+interface FunctionDef {
+  name: string;
+  parameters: string[];
+  exported: boolean;       // true when declared `export function ...` (used by '2+modules')
+  lets: LetBinding[];
+  body: Expression;
+}
+interface LetBinding {
+  name: string;
+  value: Expression;
+}
+```
+## `Expression`
+Discriminated union. The discriminator is `type`.
+```ts
+type Expression =
+  | { type: 'literal'; value: string | number | boolean | null; raw: string }
+  | { type: 'identifier'; name: string }
+  | { type: 'memberAccess'; object: Expression; property: string }
+  | { type: 'methodCall'; object: Expression; method: string; args: Expression[] }
+  | { type: 'bracketAccess'; object: Expression; index: Expression }
+  | { type: 'sliceAccess'; object: Expression; start: Expression; end: Expression }
+  | { type: 'binaryOp'; op: string; left: Expression; right: Expression }
+  | { type: 'unaryOp'; op: string; operand: Expression }
+  | { type: 'ternary'; condition: Expression; consequent: Expression; alternate: Expression }
+  | { type: 'inExpr'; element: Expression; collection: Expression }
+  | { type: 'isExpr'; value: Expression; typeName: string }
+  | { type: 'listLiteral'; elements: Expression[] }
+  | { type: 'mapLiteral'; entries: Array<{ key: Expression; value: Expression }> }
+  | { type: 'pathLiteral'; raw: string; segments: Array<string | Expression> }
+  | { type: 'functionCall'; name: string; args: Expression[] };
+```
+### Notes per variant
+- `literal.raw` preserves the original source text of the literal, useful for diagnostics and for `RULES_WEAKENED`'s deterministic serialiser.
+- `binaryOp.op` is one of: `&&`, `||`, `==`, `!=`, `<`, `<=`, `>`, `>=`, `+`, `-`, `*`, `/`, `%`.
+- `unaryOp.op` is `!` or `-`.
+- `methodCall.method` and `memberAccess.property` are strings: there are no nested expressions in the property position.
+- `inExpr` represents `x in y`. `isExpr` represents `x is timestamp` (and other type tests).
+- `pathLiteral.segments` is `Array<string | Expression>`: a string segment is a literal path component, an `Expression` segment is an interpolation like `$(uid)`.
+- `sliceAccess` represents `bytes[0:10]` style slicing. Only valid on `Bytes` at runtime.
+## Right-associative chains
+The grammar builds `a && b && c` as right-associative: `BinaryOp('&&', a, BinaryOp('&&', b, c))`. The linter's chain-depth algorithm walks `right` recursively for this reason. Don't assume left-associativity when traversing.