npm - @pyric/cli - Versions diffs - 0.1.0-alpha.9 - Mend

@pyric/cli 0.1.0-alpha.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1169) hide show

package/dist/serve/docs-ui/docs/pyric-storage-reference-api/index.html ADDED Viewed

@@ -0,0 +1,2120 @@
+<!DOCTYPE html><html lang="en"> <head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>API reference: pyric/storage · Pyric Studio</title><meta name="description" content="Published declarations for pyric/storage."><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500;700&display=swap" rel="stylesheet"><link rel="stylesheet" href="/__pyric/ui/_astro/_slug_.CQYSemvw.css"></head> <body>  <header class="studio__bar"> <div class="studio__bar-inner"> <a class="studio__brand" href="/__pyric/ui/" aria-label="Pyric Studio">Pyric</a> <nav class="studio__nav" aria-label="Studio tabs"> <a class="studio__nav-tab" href="/__pyric/ui/"> Home </a><a class="studio__nav-tab" href="/__pyric/ui/firestore"> Firestore </a><a class="studio__nav-tab" href="/__pyric/ui/auth"> Auth </a><a class="studio__nav-tab" href="/__pyric/ui/rtdb"> RTDB </a><a class="studio__nav-tab" href="/__pyric/ui/storage"> Storage </a><a class="studio__nav-tab" href="/__pyric/ui/traffic"> Traffic </a><a class="studio__nav-tab" href="/__pyric/ui/settings"> Settings </a><a class="studio__nav-tab" href="/__pyric/ui/docs" aria-current="page"> Docs </a> </nav> </div> </header> <div class="docs-shell">  <details class="docs-nav-drawer"> <summary>Navigate</summary> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div> <script type="module">let i=null;function d(t){return i||(i=fetch(t).then(e=>e.json())),i}function l(t,e){return t.title.toLowerCase().includes(e)||t.excerpt.toLowerCase().includes(e)?!0:t.headings.some(r=>r.text.toLowerCase().includes(e))}function u(t,e,r){if(e.innerHTML="",t.length===0){e.hidden=!1;{const n=document.createElement("li");n.className="docs-search-empty",n.textContent="No matches",e.appendChild(n)}return}e.hidden=!1;for(const n of t.slice(0,8)){const s=document.createElement("li"),c=document.createElement("a");c.href=n.path;const o=document.createElement("span");o.className="docs-search-result-title",o.textContent=n.title;const a=document.createElement("span");a.className="docs-search-result-meta",a.textContent=[n.group,n.section].filter(Boolean).join(" / "),c.append(o,a),s.appendChild(c),e.appendChild(s)}}document.querySelectorAll(".docs-search").forEach(t=>{const e=t.dataset.indexUrl,r=t.querySelector(".docs-search-input"),n=t.querySelector(".docs-search-results");r.addEventListener("input",async()=>{const s=r.value.trim().toLowerCase();if(!s){n.hidden=!0,n.innerHTML="";return}const{pages:c}=await d(e);r.value.trim().toLowerCase()===s&&u(c.filter(o=>l(o,s)),n)}),r.addEventListener("focus",()=>{d(e),n.childElementCount>0&&(n.hidden=!1)}),r.addEventListener("keydown",s=>{s.key==="Escape"&&(r.value="",n.hidden=!0,n.innerHTML="",r.blur())}),r.addEventListener("blur",()=>{window.setTimeout(()=>{n.hidden=!0},150)})});document.addEventListener("keydown",t=>{if(!(t.metaKey||t.ctrlKey)||t.key.toLowerCase()!=="k")return;const e=[...document.querySelectorAll(".docs-search-input")].find(r=>r.offsetParent!==null);e&&(t.preventDefault(),e.focus(),e.select())});</script> <a class="docs-nav-toplink" href="/__pyric/ui/docs/overview/"> Overview </a><details class="docs-nav-group"> <summary>Run locally</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/how-the-swap-works/"> How the swap works </a> </li><li> <a href="/__pyric/ui/docs/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Develop with Firebase APIs</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/sign-in-and-manage-users/"> Sign in and manage users </a> </li><li> <a href="/__pyric/ui/docs/store-and-query-data/"> Store and query data </a> </li><li> <a href="/__pyric/ui/docs/sync-realtime-data/"> Sync realtime data </a> </li><li> <a href="/__pyric/ui/docs/store-files/"> Store files </a> </li><li> <a href="/__pyric/ui/docs/receive-messages/"> Receive messages </a> </li><li> <a href="/__pyric/ui/docs/run-ai-logic-locally/"> Run AI Logic locally </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-how-to-run-rtdb-onvaluecreated/"> Run an RTDB function locally </a> </li><li> <a href="/__pyric/ui/docs/which-data-service/"> Which data service? </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Inspect and correct</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <h2 class="docs-nav-heading"> Inspect the sandbox </h2> <ul> <li> <a href="/__pyric/ui/docs/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/shape-your-data/"> Seed, snapshot, replay </a> </li><li> <a href="/__pyric/ui/docs/watch-and-review/"> Review agent activity </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Correct Security Rules </h2> <ul> <li> <a href="/__pyric/ui/docs/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/rules-patterns/"> Rules patterns </a> </li><li> <a href="/__pyric/ui/docs/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/whats-possible/"> Case studies </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Work with an agent </h2> <ul> <li> <a href="/__pyric/ui/docs/what-your-agent-can-do/"> Work through an agent </a> </li><li> <a href="/__pyric/ui/docs/skills/"> Agent skills </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Verify the boundary</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-how-to-verify-against-a-captured-session/"> Verify a captured session </a> </li><li> <a href="/__pyric/ui/docs/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Ship unchanged</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/set-up-the-project/"> Set up the Firebase project </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/how-we-know-it-matches-firebase/"> Conformance </a> </li><li> <a href="/__pyric/ui/docs/whats-experimental/"> What&#39;s experimental </a> </li><li> <a href="/__pyric/ui/docs/pyric-conformance-scores/"> Conformance scores </a> </li><li> <a href="/__pyric/ui/docs/pyric-app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-compat/"> Rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-functions-rtdb-compat/"> Functions · RTDB </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group" open> <summary>Reference</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli/"> @pyric/cli </a> </li><li> <a href="/__pyric/ui/docs/pyric-explanation-versioning-and-compatibility/"> pyric </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore/"> pyric / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules/"> pyric / rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox/"> pyric / sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage/"> pyric / storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth/"> pyric / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database/"> pyric / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-app/"> pyric-admin / app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore/"> pyric-admin / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth/"> pyric-admin / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database/"> pyric-admin / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage/"> pyric-admin / storage </a> </li><li> <a href="/__pyric/ui/docs/ui/"> @pyric/ui </a> </li><li> <a href="/__pyric/ui/docs/api-reference/" aria-current="true"> API reference </a> </li> </ul> </div> </div> </details> </nav> </details> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div>  <a class="docs-nav-toplink" href="/__pyric/ui/docs/overview/" id="nav-group-overview"> Overview </a><details class="docs-nav-group" id="nav-group-run-locally"> <summary>Run locally</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/how-the-swap-works/"> How the swap works </a> </li><li> <a href="/__pyric/ui/docs/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-develop-with-firebase-apis"> <summary>Develop with Firebase APIs</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/sign-in-and-manage-users/"> Sign in and manage users </a> </li><li> <a href="/__pyric/ui/docs/store-and-query-data/"> Store and query data </a> </li><li> <a href="/__pyric/ui/docs/sync-realtime-data/"> Sync realtime data </a> </li><li> <a href="/__pyric/ui/docs/store-files/"> Store files </a> </li><li> <a href="/__pyric/ui/docs/receive-messages/"> Receive messages </a> </li><li> <a href="/__pyric/ui/docs/run-ai-logic-locally/"> Run AI Logic locally </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-how-to-run-rtdb-onvaluecreated/"> Run an RTDB function locally </a> </li><li> <a href="/__pyric/ui/docs/which-data-service/"> Which data service? </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-inspect-and-correct"> <summary>Inspect and correct</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-inspect-and-correct-inspect-the-sandbox"> Inspect the sandbox </h2> <ul> <li> <a href="/__pyric/ui/docs/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/shape-your-data/"> Seed, snapshot, replay </a> </li><li> <a href="/__pyric/ui/docs/watch-and-review/"> Review agent activity </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-inspect-and-correct-correct-security-rules"> Correct Security Rules </h2> <ul> <li> <a href="/__pyric/ui/docs/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/rules-patterns/"> Rules patterns </a> </li><li> <a href="/__pyric/ui/docs/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/whats-possible/"> Case studies </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-inspect-and-correct-work-with-an-agent"> Work with an agent </h2> <ul> <li> <a href="/__pyric/ui/docs/what-your-agent-can-do/"> Work through an agent </a> </li><li> <a href="/__pyric/ui/docs/skills/"> Agent skills </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-verify-the-boundary"> <summary>Verify the boundary</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-how-to-verify-against-a-captured-session/"> Verify a captured session </a> </li><li> <a href="/__pyric/ui/docs/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-ship-unchanged"> <summary>Ship unchanged</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/set-up-the-project/"> Set up the Firebase project </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-conformance"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/how-we-know-it-matches-firebase/"> Conformance </a> </li><li> <a href="/__pyric/ui/docs/whats-experimental/"> What&#39;s experimental </a> </li><li> <a href="/__pyric/ui/docs/pyric-conformance-scores/"> Conformance scores </a> </li><li> <a href="/__pyric/ui/docs/pyric-app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-compat/"> Rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-functions-rtdb-compat/"> Functions · RTDB </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group" id="nav-group-reference" open> <summary>Reference</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli/"> @pyric/cli </a> </li><li> <a href="/__pyric/ui/docs/pyric-explanation-versioning-and-compatibility/"> pyric </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore/"> pyric / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules/"> pyric / rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox/"> pyric / sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage/"> pyric / storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth/"> pyric / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database/"> pyric / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-app/"> pyric-admin / app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore/"> pyric-admin / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth/"> pyric-admin / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database/"> pyric-admin / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage/"> pyric-admin / storage </a> </li><li> <a href="/__pyric/ui/docs/ui/"> @pyric/ui </a> </li><li> <a href="/__pyric/ui/docs/api-reference/" aria-current="true"> API reference </a> </li> </ul> </div> </div> </details> </nav> <main class="doc-main"> <nav class="docs-breadcrumbs" aria-label="Breadcrumb"> <ol> <li>  <a href="/__pyric/ui/docs/api-reference/">API reference</a> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <span>pyric</span> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <span aria-current="page">pyric/storage</span> </li> </ol> </nav> <header class="api-reference-header"> <p class="api-reference-kicker">API reference</p> <h1><code>pyric/storage</code></h1> <p class="api-reference-meta"> 64 published symbols from <code>pyric</code> </p> <p class="api-reference-source">
+Generated from the TypeScript declarations shipped at this import path.
+</p> <a class="api-reference-evidence" href="/__pyric/ui/docs/pyric-storage-compat/">
+Check behavioral conformance
+</a> </header> <article class="prose api-reference-body">  <!-- Generated from published package declarations via TypeDoc. Do not edit by hand; run bun run docs:api:generate. -->
+<h2 id="classes">Classes</h2>
+<p><a id="inspectstoragehandler"></a></p>
+<h3 id="inspectstoragehandler">InspectStorageHandler</h3>
+<h4 id="constructors">Constructors</h4>
+<p><a id="constructor"></a></p>
+<h5 id="constructor">Constructor</h5>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">new</span><span style="color:#61AFEF"> InspectStorageHandler</span><span style="color:#ABB2BF">(): </span><span style="color:#E06C75">InspectStorageHandler</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<h6 id="returns">Returns</h6>
+<p><a href="#inspectstoragehandler"><code>InspectStorageHandler</code></a></p>
+<h4 id="methods">Methods</h4>
+<p><a id="execute"></a></p>
+<h5 id="execute">execute()</h5>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#61AFEF">execute</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75">scope</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">ProjectScope</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#56B6C2">&#x3C;</span><span style="color:#E06C75">InspectStorageResult</span><span style="color:#56B6C2">></span><span style="color:#ABB2BF">;</span></span></code></pre>
+<h6 id="parameters">Parameters</h6>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>scope</code></td><td align="left"><code>ProjectScope</code></td></tr></tbody></table></div>
+<h6 id="returns-1">Returns</h6>
+<p><code>Promise</code>&#x3C;<a href="#inspectstorageresult"><code>InspectStorageResult</code></a>></p>
+<hr>
+<p><a id="provisionstoragehandler"></a></p>
+<h3 id="provisionstoragehandler">ProvisionStorageHandler</h3>
+<h4 id="constructors-1">Constructors</h4>
+<p><a id="constructor-1"></a></p>
+<h5 id="constructor-1">Constructor</h5>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">new</span><span style="color:#61AFEF"> ProvisionStorageHandler</span><span style="color:#ABB2BF">(): </span><span style="color:#E06C75">ProvisionStorageHandler</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<h6 id="returns-2">Returns</h6>
+<p><a href="#provisionstoragehandler"><code>ProvisionStorageHandler</code></a></p>
+<h4 id="methods-1">Methods</h4>
+<p><a id="execute-2"></a></p>
+<h5 id="execute-1">execute()</h5>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#61AFEF">execute</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75">   scope</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">ProjectScope</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75">   input</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">ProvisionStorageInput</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75">onProgress</span><span style="color:#C678DD">?:</span><span style="color:#E06C75"> ProvisionProgress</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#56B6C2">&#x3C;</span><span style="color:#E06C75">ProvisionStorageOutcome</span><span style="color:#56B6C2">></span><span style="color:#ABB2BF">;</span></span></code></pre>
+<h6 id="parameters-1">Parameters</h6>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>scope</code></td><td align="left"><code>ProjectScope</code></td></tr><tr><td align="left"><code>input</code></td><td align="left"><a href="#provisionstorageinput"><code>ProvisionStorageInput</code></a></td></tr><tr><td align="left"><code>onProgress?</code></td><td align="left"><code>ProvisionProgress</code></td></tr></tbody></table></div>
+<h6 id="returns-3">Returns</h6>
+<p><code>Promise</code>&#x3C;<a href="#provisionstorageoutcome"><code>ProvisionStorageOutcome</code></a>></p>
+<hr>
+<p><a id="storageerror"></a></p>
+<h3 id="storageerror">StorageError</h3>
+<p>Storage error carrying a prefixed <code>storage/&#x3C;code></code> on <code>.code</code>.
+Drop-in for <code>err.code === 'storage/object-not-found'</code> branching.</p>
+<h4 id="extends">Extends</h4>
+<ul>
+<li><code>Error</code></li>
+</ul>
+<h4 id="constructors-2">Constructors</h4>
+<p><a id="constructor-2"></a></p>
+<h5 id="constructor-2">Constructor</h5>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">new</span><span style="color:#61AFEF"> StorageError</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75">code</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">StorageErrorCode</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75">message</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">string</span><span style="color:#ABB2BF">): </span><span style="color:#E06C75">StorageError</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<h6 id="parameters-2">Parameters</h6>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>code</code></td><td align="left"><a href="#storageerrorcode-1"><code>StorageErrorCode</code></a></td></tr><tr><td align="left"><code>message</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h6 id="returns-4">Returns</h6>
+<p><a href="#storageerror"><code>StorageError</code></a></p>
+<h6 id="overrides">Overrides</h6>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#E5C07B">Error</span><span style="color:#ABB2BF">.</span><span style="color:#E06C75">constructor</span></span></code></pre>
+<h4 id="properties">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Modifier</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="code"></a> <code>code</code></td><td align="left"><code>readonly</code></td><td align="left">| <code>"storage/unknown"</code> | <code>"storage/object-not-found"</code> | <code>"storage/quota-exceeded"</code> | <code>"storage/unauthenticated"</code> | <code>"storage/unauthorized"</code> | <code>"storage/invalid-root-operation"</code> | <code>"storage/invalid-format"</code> | <code>"storage/invalid-argument"</code></td><td align="left">Prefixed code, e.g. <code>storage/object-not-found</code>.</td></tr></tbody></table></div>
+<hr>
+<p><a id="storageprovisioningerror"></a></p>
+<h3 id="storageprovisioningerror">StorageProvisioningError</h3>
+<p>Pure-fetch client for the Firebase Storage provisioning APIs.
+Takes an OAuth access token directly — works equally from a Node
+agent runtime or a browser. Used by:</p>
+<ul>
+<li><code>ProvisionStorageHandler</code> server-side via the agent SDK</li>
+<li>Consumers like the multi-tenant playground via direct import</li>
+</ul>
+<p>The caller is responsible for token scope. <code>firebase</code> scope is
+enough for the <code>:addFirebase</code> + <code>defaultLocation:finalize</code> calls,
+but <strong>NOT</strong> for enabling the underlying <code>firebasestorage.googleapis.com</code>
+service (which is the first-time gate). Service-enable requires
+<code>cloud-platform</code> scope OR a service account with
+<code>roles/serviceusage.serviceUsageAdmin</code>. Each function below
+documents which scope it needs.</p>
+<p>Endpoints under play:</p>
+<ul>
+<li>serviceusage.googleapis.com/v1/projects/{p}/services/{s}:enable</li>
+<li>firebase.googleapis.com/v1beta1/projects/{p}/defaultLocation:finalize</li>
+<li>firebasestorage.googleapis.com/v1beta/projects/{p}/buckets</li>
+<li>firebasestorage.googleapis.com/v1beta/projects/{p}/buckets/{b}:addFirebase</li>
+<li>firebaserules.googleapis.com/v1/projects/{p}/releases/firebase.storage</li>
+</ul>
+<h4 id="extends-1">Extends</h4>
+<ul>
+<li><code>Error</code></li>
+</ul>
+<h4 id="constructors-3">Constructors</h4>
+<p><a id="constructor-3"></a></p>
+<h5 id="constructor-3">Constructor</h5>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">new</span><span style="color:#61AFEF"> StorageProvisioningError</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75">   status</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">number</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75">   body</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75">   reason</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75">   message</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">string</span><span style="color:#ABB2BF">): </span><span style="color:#E06C75">StorageProvisioningError</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<h6 id="parameters-3">Parameters</h6>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>status</code></td><td align="left"><code>number</code></td></tr><tr><td align="left"><code>body</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>reason</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>message</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h6 id="returns-5">Returns</h6>
+<p><a href="#storageprovisioningerror"><code>StorageProvisioningError</code></a></p>
+<h6 id="overrides-1">Overrides</h6>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#E5C07B">Error</span><span style="color:#ABB2BF">.</span><span style="color:#E06C75">constructor</span></span></code></pre>
+<h4 id="properties-1">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Modifier</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="body"></a> <code>body</code></td><td align="left"><code>readonly</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="reason"></a> <code>reason</code></td><td align="left"><code>readonly</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="status"></a> <code>status</code></td><td align="left"><code>readonly</code></td><td align="left"><code>number</code></td></tr></tbody></table></div>
+<h2 id="interfaces">Interfaces</h2>
+<p><a id="corsrule"></a></p>
+<h3 id="corsrule">CorsRule</h3>
+<p>A single CORS rule entry, mirroring the GCS bucket CORS schema.
+See <a href="https://cloud.google.com/storage/docs/cross-origin#cors-elements" target="_blank" rel="noopener noreferrer" class="external-link">https://cloud.google.com/storage/docs/cross-origin#cors-elements</a>.</p>
+<h4 id="properties-2">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="maxageseconds"></a> <code>maxAgeSeconds?</code></td><td align="left"><code>number</code></td></tr><tr><td align="left"><a id="method"></a> <code>method</code></td><td align="left"><code>string</code>[]</td></tr><tr><td align="left"><a id="origin"></a> <code>origin</code></td><td align="left"><code>string</code>[]</td></tr><tr><td align="left"><a id="responseheader"></a> <code>responseHeader?</code></td><td align="left"><code>string</code>[]</td></tr></tbody></table></div>
+<hr>
+<p><a id="evaluationinput"></a></p>
+<h3 id="evaluationinput">EvaluationInput</h3>
+<h4 id="properties-3">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="request"></a> <code>request</code></td><td align="left"><a href="#storagerequest"><code>StorageRequest</code></a></td></tr><tr><td align="left"><a id="resource"></a> <code>resource</code></td><td align="left"><a href="#storageresource"><code>StorageResource</code></a></td></tr></tbody></table></div>
+<hr>
+<p><a id="evaluationresult"></a></p>
+<h3 id="evaluationresult">EvaluationResult</h3>
+<h4 id="properties-4">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="allowed"></a> <code>allowed</code></td><td align="left"><code>boolean</code></td><td align="left">-</td></tr><tr><td align="left"><a id="reasons"></a> <code>reasons</code></td><td align="left"><code>string</code>[]</td><td align="left">Human-readable explanation of why — used by Slice 8’s integration to populate <code>storage/unauthorized</code> error messages.</td></tr></tbody></table></div>
+<hr>
+<p><a id="firebasestorage"></a></p>
+<h3 id="firebasestorage">FirebaseStorage</h3>
+<p>Public opaque handle. Carries a <a href="#target">Target</a> via
+<a href="#target_symbol-1">TARGET_SYMBOL</a>; never inspected by consumer code, which
+interacts with storage only through <a href="#ref-1">ref</a> and the operation
+free functions.</p>
+<h4 id="properties-5">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Modifier</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="target_symbol"></a> <code>[TARGET_SYMBOL]</code></td><td align="left"><code>readonly</code></td><td align="left"><a href="#sandboxtarget"><code>SandboxTarget</code></a></td></tr><tr><td align="left"><a id="app"></a> <code>app?</code></td><td align="left"><code>readonly</code></td><td align="left"><code>FirebaseApp</code></td></tr></tbody></table></div>
+<hr>
+<p><a id="firebasestoragebucket"></a></p>
+<h3 id="firebasestoragebucket">FirebaseStorageBucket</h3>
+<h4 id="properties-6">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="bucketid"></a> <code>bucketId</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="name"></a> <code>name</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="reconciling"></a> <code>reconciling?</code></td><td align="left"><code>boolean</code></td></tr></tbody></table></div>
+<hr>
+<p><a id="firestorelookup"></a></p>
+<h3 id="firestorelookup">FirestoreLookup</h3>
+<p>Injected capability that lets a Storage rule read Firestore documents
+(<code>firestore.get(path)</code> / <code>firestore.exists(path)</code>), WITHOUT the pure
+evaluator importing the Firestore sandbox. The enforcement layer builds
+one from the sandbox’s admin Firestore accessor (a synchronous in-memory
+read) and passes it into <a href="#evaluatestoragerules">evaluateStorageRules</a>; pure/test callers
+that omit it get the deny-with-reason “unsupported” behavior instead.</p>
+<p>Paths are the document path RELATIVE to the database — the
+<code>collection/doc</code> form <code>sandbox.admin.getDocument</code> expects — after the
+evaluator has stripped the <code>/databases/&#x3C;db>/documents/</code> prefix from the
+rule’s path literal.</p>
+<h4 id="methods-2">Methods</h4>
+<p><a id="exists"></a></p>
+<h5 id="exists">exists()</h5>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#61AFEF">exists</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75">path</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">string</span><span style="color:#ABB2BF">): </span><span style="color:#E06C75">boolean</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Whether a document exists at <code>path</code>.</p>
+<h6 id="parameters-4">Parameters</h6>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>path</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h6 id="returns-6">Returns</h6>
+<p><code>boolean</code></p>
+<p><a id="get"></a></p>
+<h5 id="get">get()</h5>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#61AFEF">get</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75">path</span><span style="color:#ABB2BF">: </span><span style="color:#E06C75">string</span><span style="color:#ABB2BF">): </span><span style="color:#E06C75">Record</span><span style="color:#56B6C2">&#x3C;</span><span style="color:#E06C75">string</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75">unknown</span><span style="color:#56B6C2">></span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>The document’s fields, or <code>null</code> when the document does not exist.</p>
+<h6 id="parameters-5">Parameters</h6>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>path</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h6 id="returns-7">Returns</h6>
+<p><code>Record</code>&#x3C;<code>string</code>, <code>unknown</code>></p>
+<hr>
+<p><a id="fullmetadata"></a></p>
+<h3 id="fullmetadata">FullMetadata</h3>
+<p>Server-set + client-settable fields read back from
+<code>uploadBytes</code> / <code>getMetadata</code> / <code>updateMetadata</code>. Server-set
+fields (<code>bucket</code>, <code>fullPath</code>, <code>name</code>, <code>generation</code>,
+<code>metageneration</code>, <code>timeCreated</code>, <code>updated</code>, <code>size</code>) are populated
+by the upload pipeline; client-settable fields round-trip from
+<code>SettableMetadata</code>.</p>
+<h4 id="extends-2">Extends</h4>
+<ul>
+<li><a href="#settablemetadata"><code>SettableMetadata</code></a></li>
+</ul>
+<h4 id="properties-7">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="bucket"></a> <code>bucket</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="cachecontrol"></a> <code>cacheControl?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="contentdisposition"></a> <code>contentDisposition?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="contentencoding"></a> <code>contentEncoding?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="contentlanguage"></a> <code>contentLanguage?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="contenttype"></a> <code>contentType?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="custommetadata"></a> <code>customMetadata?</code></td><td align="left">{ [<code>key</code>: <code>string</code>]: <code>string</code>; }</td></tr><tr><td align="left"><a id="fullpath"></a> <code>fullPath</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="generation"></a> <code>generation</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="md5hash"></a> <code>md5Hash?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="metageneration"></a> <code>metageneration</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="name-1"></a> <code>name</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="size"></a> <code>size</code></td><td align="left"><code>number</code></td></tr><tr><td align="left"><a id="timecreated"></a> <code>timeCreated</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="updated"></a> <code>updated</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<hr>
+<p><a id="inspectstorageresult"></a></p>
+<h3 id="inspectstorageresult">InspectStorageResult</h3>
+<h4 id="properties-8">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="buckets"></a> <code>buckets</code></td><td align="left">{ <code>bucketId</code>: <code>string</code>; <code>name</code>: <code>string</code>; }[]</td></tr><tr><td align="left"><a id="defaultlocation"></a> <code>defaultLocation</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="servicestate"></a> <code>serviceState</code></td><td align="left"><code>"unknown"</code> | <code>"enabled"</code> | <code>"disabled"</code></td></tr></tbody></table></div>
+<hr>
+<p><a id="listresult"></a></p>
+<h3 id="listresult">ListResult</h3>
+<p>Mirrors <code>firebase/storage</code>’s <code>ListResult</code>. <code>nextPageToken</code> is
+<code>undefined</code> for <code>listAll</code>; pagination via <code>list()</code> is deferred.</p>
+<h4 id="properties-9">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="items"></a> <code>items</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a>[]</td></tr><tr><td align="left"><a id="nextpagetoken"></a> <code>nextPageToken?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="prefixes"></a> <code>prefixes</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a>[]</td></tr></tbody></table></div>
+<hr>
+<p><a id="provisionstorageinput"></a></p>
+<h3 id="provisionstorageinput">ProvisionStorageInput</h3>
+<p>Shapes for the Storage provisioning + status tools.</p>
+<p>Types only — the agent-tool parameter schemas live inline in
+<code>tools.ts</code> as JSON Schema (the <code>ToolHandler</code> contract).</p>
+<h4 id="properties-10">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="bucketid-1"></a> <code>bucketId?</code></td><td align="left"><code>string</code></td><td align="left">Override the default Firebase Storage bucket ID. Defaults to <code>{projectId}.firebasestorage.app</code>.</td></tr><tr><td align="left"><a id="cors"></a> <code>cors?</code></td><td align="left">{ <code>maxAgeSeconds?</code>: <code>number</code>; <code>method</code>: <code>string</code>[]; <code>origin</code>: <code>string</code>[]; <code>responseHeader?</code>: <code>string</code>[]; }[]</td><td align="left">CORS rules to apply to the bucket. Required for browser-side reads/writes from a non-Firebase origin. Omit to leave existing CORS untouched.</td></tr><tr><td align="left"><a id="locationid"></a> <code>locationId?</code></td><td align="left"><code>string</code></td><td align="left">Default GCP resources location to use when the project has not been finalized yet. IRREVERSIBLE once set. Common values: <code>us-central</code>, <code>nam5</code>, <code>eur3</code>. Default: <code>us-central</code>.</td></tr><tr><td align="left"><a id="rules"></a> <code>rules?</code></td><td align="left"><code>string</code></td><td align="left">Storage rules source to deploy after the bucket is linked. Optional; when omitted, whatever rules are currently released (possibly the deny-all default) stay in place.</td></tr></tbody></table></div>
+<hr>
+<p><a id="provisionstorageoptions"></a></p>
+<h3 id="provisionstorageoptions">ProvisionStorageOptions</h3>
+<h4 id="properties-11">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="bucketid-2"></a> <code>bucketId?</code></td><td align="left"><code>string</code></td><td align="left">Override the default Firebase Storage bucket ID. Defaults to <code>{projectId}.firebasestorage.app</code> — the bucket Firebase Console creates automatically.</td></tr><tr><td align="left"><a id="cors-1"></a> <code>cors?</code></td><td align="left"><a href="#corsrule"><code>CorsRule</code></a>[]</td><td align="left">CORS rules to apply to the bucket after it’s linked. Required for browser-side reads/writes from a non-Firebase origin — buckets created via the Cloud Console (vs Firebase Console) often ship with no CORS configuration, which manifests as <code>No 'Access-Control-Allow-Origin' header</code> on the first <code>XMLHttpRequest</code> from a hosted page. Pass <code>defaultPlaygroundCors(origin)</code> for a sensible starter config, or a custom array. Omit to leave the bucket’s CORS alone.</td></tr><tr><td align="left"><a id="locationid-1"></a> <code>locationId?</code></td><td align="left"><code>string</code></td><td align="left">Default GCP resources location to use if the project hasn’t been finalized yet. Ignored when the location is already set. Default: <code>'us-central'</code>.</td></tr><tr><td align="left"><a id="onprogress"></a> <code>onProgress?</code></td><td align="left"><code>ProvisionProgress</code></td><td align="left">Optional progress callback, invoked at each provisioning step boundary.</td></tr><tr><td align="left"><a id="rules-1"></a> <code>rules?</code></td><td align="left"><code>string</code></td><td align="left">Storage rules source to deploy after the bucket is linked. When omitted, no rules are deployed (the project keeps whatever rules were last released — possibly the default deny-all).</td></tr></tbody></table></div>
+<hr>
+<p><a id="provisionstorageresult"></a></p>
+<h3 id="provisionstorageresult">ProvisionStorageResult</h3>
+<h4 id="properties-12">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="bucketcreated"></a> <code>bucketCreated</code></td><td align="left"><code>boolean</code></td></tr><tr><td align="left"><a id="bucketid-3"></a> <code>bucketId</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="corsapplied"></a> <code>corsApplied</code></td><td align="left"><code>boolean</code></td></tr><tr><td align="left"><a id="locationfinalized"></a> <code>locationFinalized</code></td><td align="left"><code>boolean</code></td></tr><tr><td align="left"><a id="locationid-2"></a> <code>locationId</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="ok"></a> <code>ok</code></td><td align="left"><code>true</code></td></tr><tr><td align="left"><a id="rulesdeployed"></a> <code>rulesDeployed</code></td><td align="left"><code>boolean</code></td></tr><tr><td align="left"><a id="rulesetname"></a> <code>rulesetName?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="serviceenabled"></a> <code>serviceEnabled</code></td><td align="left"><code>boolean</code></td></tr></tbody></table></div>
+<hr>
+<p><a id="sandboxtarget"></a></p>
+<h3 id="sandboxtarget">SandboxTarget</h3>
+<p>Sandbox target — IDB-backed, identity from <code>SandboxContext</code>, rules
+enforced in-process via <code>enforce.ts</code>.</p>
+<h4 id="properties-13">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Modifier</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="admin"></a> <code>admin?</code></td><td align="left"><code>readonly</code></td><td align="left"><code>boolean</code></td><td align="left">Rules-bypass admin plane. <code>true</code> only on handles minted by the INTERNAL getAdminStorageSandbox factory (exported via <code>pyric/storage/internal</code>, never the public surface): operations on an admin handle skip rule evaluation entirely — the storage mirror of <code>getAdminFirestore</code> / <code>getAdminDatabase</code>. The public modular surface stays rules-honest; this exists so hosts (the SharedWorker’s <code>actAs: { mode: 'admin' }</code> lens) can serve firebase-admin semantics against the same shared store.</td></tr><tr><td align="left"><a id="bucket-1"></a> <code>bucket</code></td><td align="left"><code>readonly</code></td><td align="left"><code>string</code></td><td align="left">-</td></tr><tr><td align="left"><a id="context"></a> <code>context</code></td><td align="left"><code>readonly</code></td><td align="left"><code>SandboxContext</code></td><td align="left">-</td></tr><tr><td align="left"><a id="currentauth"></a> <code>currentAuth?</code></td><td align="left"><code>readonly</code></td><td align="left">() => <code>AuthState</code></td><td align="left">App handles resolve auth at operation time; explicit contexts stay frozen.</td></tr><tr><td align="left"><a id="kind"></a> <code>kind</code></td><td align="left"><code>readonly</code></td><td align="left"><code>"sandbox"</code></td><td align="left">-</td></tr><tr><td align="left"><a id="sandbox"></a> <code>sandbox</code></td><td align="left"><code>readonly</code></td><td align="left"><code>Sandbox</code></td><td align="left">-</td></tr><tr><td align="left"><a id="servicepromise"></a> <code>servicePromise</code></td><td align="left"><code>readonly</code></td><td align="left"><code>Promise</code>&#x3C;<code>StorageService</code>></td><td align="left">-</td></tr></tbody></table></div>
+<hr>
+<p><a id="settablemetadata"></a></p>
+<h3 id="settablemetadata">SettableMetadata</h3>
+<p>Client-settable fields. Passed to <code>uploadBytes</code> /
+<code>uploadString</code> / <code>updateMetadata</code>. Every field is optional — the
+upload pipeline fills any unsupplied client fields with sane
+defaults (e.g. <code>contentType</code> falls back to <code>application/octet-stream</code>).</p>
+<h4 id="extended-by">Extended by</h4>
+<ul>
+<li><a href="#fullmetadata"><code>FullMetadata</code></a></li>
+</ul>
+<h4 id="properties-14">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="cachecontrol-1"></a> <code>cacheControl?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="contentdisposition-1"></a> <code>contentDisposition?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="contentencoding-1"></a> <code>contentEncoding?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="contentlanguage-1"></a> <code>contentLanguage?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="contenttype-1"></a> <code>contentType?</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="custommetadata-1"></a> <code>customMetadata?</code></td><td align="left">{ [<code>key</code>: <code>string</code>]: <code>string</code>; }</td></tr></tbody></table></div>
+<hr>
+<p><a id="storageadmintooldeps"></a></p>
+<h3 id="storageadmintooldeps">StorageAdminToolDeps</h3>
+<h4 id="properties-15">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="scope"></a> <code>scope</code></td><td align="left"><code>ProjectScope</code></td><td align="left">Project identity + token resolver.</td></tr></tbody></table></div>
+<hr>
+<p><a id="storageauth"></a></p>
+<h3 id="storageauth">StorageAuth</h3>
+<p>Identity passed in with the request. <code>null</code> is anonymous.</p>
+<h4 id="properties-16">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="token"></a> <code>token?</code></td><td align="left"><code>Record</code>&#x3C;<code>string</code>, <code>unknown</code>></td></tr><tr><td align="left"><a id="uid"></a> <code>uid</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<hr>
+<p><a id="storageoptions"></a></p>
+<h3 id="storageoptions">StorageOptions</h3>
+<p>Options for <a href="#getstoragesandbox">getStorageSandbox</a>.</p>
+<h4 id="properties-17">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="bucket-2"></a> <code>bucket?</code></td><td align="left"><code>string</code></td><td align="left">Bucket identifier recorded on uploaded metadata. v1 has a single implicit bucket and does not enforce cross-bucket isolation — passing different values per call is accepted and round-trips in metadata, but the data store is shared.</td></tr><tr><td align="left"><a id="dbname"></a> <code>dbName?</code></td><td align="left"><code>string</code></td><td align="left">Override the IndexedDB database name. Tests pass per-case unique names so state doesn’t leak between runs. Only takes effect on the FIRST call per <code>Sandbox</code>.</td></tr><tr><td align="left"><a id="rules-2"></a> <code>rules?</code></td><td align="left"><code>string</code></td><td align="left">Storage rules source. Parsed eagerly so a malformed string throws at config time. Only honored on the FIRST call per <code>Sandbox</code>.</td></tr></tbody></table></div>
+<hr>
+<p><a id="storagereference"></a></p>
+<h3 id="storagereference">StorageReference</h3>
+<p>Public reference shape. Methods are inherited from the impl
+classes below; the interface is exported so consumer code can
+name the type without depending on the impls.</p>
+<h4 id="properties-18">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Modifier</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="bucket-3"></a> <code>bucket</code></td><td align="left"><code>readonly</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="fullpath-1"></a> <code>fullPath</code></td><td align="left"><code>readonly</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="name-2"></a> <code>name</code></td><td align="left"><code>readonly</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><a id="parent"></a> <code>parent</code></td><td align="left"><code>readonly</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr><tr><td align="left"><a id="root"></a> <code>root</code></td><td align="left"><code>readonly</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr><tr><td align="left"><a id="storage"></a> <code>storage</code></td><td align="left"><code>readonly</code></td><td align="left"><a href="#firebasestorage"><code>FirebaseStorage</code></a></td></tr></tbody></table></div>
+<h4 id="methods-3">Methods</h4>
+<p><a id="tostring"></a></p>
+<h5 id="tostring">toString()</h5>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#61AFEF">toString</span><span style="color:#ABB2BF">(): </span><span style="color:#E06C75">string</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<h6 id="returns-8">Returns</h6>
+<p><code>string</code></p>
+<hr>
+<p><a id="storagerequest"></a></p>
+<h3 id="storagerequest">StorageRequest</h3>
+<p>Inbound request bindings the rules see.</p>
+<h4 id="properties-19">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="auth"></a> <code>auth</code></td><td align="left"><a href="#storageauth"><code>StorageAuth</code></a></td><td align="left">-</td></tr><tr><td align="left"><a id="method-1"></a> <code>method</code></td><td align="left"><a href="#storagerequestmethod-1"><code>StorageRequestMethod</code></a></td><td align="left">-</td></tr><tr><td align="left"><a id="path"></a> <code>path</code></td><td align="left"><code>string</code></td><td align="left">Path of the object the request targets.</td></tr><tr><td align="left"><a id="resource-1"></a> <code>resource?</code></td><td align="left">{ <code>contentType?</code>: <code>string</code>; <code>metadata?</code>: <code>Record</code>&#x3C;<code>string</code>, <code>string</code>>; <code>size</code>: <code>number</code>; }</td><td align="left">Per-Firebase: on writes, <code>request.resource</code> describes the about-to-write object. Omit for reads (the rules language treats <code>request.resource</code> as unset there).</td></tr><tr><td align="left"><code>resource.contentType?</code></td><td align="left"><code>string</code></td><td align="left">-</td></tr><tr><td align="left"><code>resource.metadata?</code></td><td align="left"><code>Record</code>&#x3C;<code>string</code>, <code>string</code>></td><td align="left">-</td></tr><tr><td align="left"><code>resource.size</code></td><td align="left"><code>number</code></td><td align="left">-</td></tr></tbody></table></div>
+<hr>
+<p><a id="storageresource"></a></p>
+<h3 id="storageresource">StorageResource</h3>
+<p>Existing-object bindings (for <code>resource.*</code>). <code>null</code> when no object exists
+yet (creates).</p>
+<p>The object-identity/time fields carry GOOGLE CLOUD STORAGE semantics, not
+the client SDK’s <code>FullMetadata</code> semantics — the two disagree on <code>name</code>:</p>
+<ul>
+<li>rules <code>resource.name</code> is the object’s FULL path within the bucket
+(<code>uploads/pic.png</code>), the GCS object-name convention. The client SDK’s
+<code>FullMetadata.name</code> is the LAST path segment (<code>pic.png</code>). The adapter
+(<code>resourceFromStored</code>) therefore sources <code>name</code> from the persisted
+record’s <code>fullPath</code>, NOT its <code>name</code>.</li>
+<li><code>timeCreated</code> / <code>updated</code> are ISO-8601 strings here (the persisted
+shape); the evaluator converts them to epoch millis when it builds the
+binding, so they compare numerically against <code>request.time</code> and against
+each other. Production types them as <code>timestamp</code> and rejects an int in
+their place (“Received: int &#x3C; timestamp”).</li>
+<li>The update-time field is <code>updated</code>. There is NO <code>resource.timeUpdated</code>
+in the Storage rules language.</li>
+</ul>
+<p>A field left <code>undefined</code> reads as ABSENT, which production treats as an
+evaluation error that denies (see RuleError).</p>
+<h4 id="properties-20">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><a id="bucket-4"></a> <code>bucket?</code></td><td align="left"><code>string</code></td><td align="left">Bucket the object lives in.</td></tr><tr><td align="left"><a id="contenttype-2"></a> <code>contentType?</code></td><td align="left"><code>string</code></td><td align="left">-</td></tr><tr><td align="left"><a id="generation-1"></a> <code>generation?</code></td><td align="left"><code>number</code></td><td align="left">Content generation (production types it <code>int</code>).</td></tr><tr><td align="left"><a id="metadata"></a> <code>metadata?</code></td><td align="left"><code>Record</code>&#x3C;<code>string</code>, <code>string</code>></td><td align="left">-</td></tr><tr><td align="left"><a id="metageneration-1"></a> <code>metageneration?</code></td><td align="left"><code>number</code></td><td align="left">Metadata generation (production types it <code>int</code>).</td></tr><tr><td align="left"><a id="name-3"></a> <code>name?</code></td><td align="left"><code>string</code></td><td align="left">Full object path within the bucket, e.g. <code>uploads/pic.png</code>.</td></tr><tr><td align="left"><a id="size-1"></a> <code>size</code></td><td align="left"><code>number</code></td><td align="left">-</td></tr><tr><td align="left"><a id="timecreated-1"></a> <code>timeCreated?</code></td><td align="left"><code>string</code></td><td align="left">ISO-8601 creation time.</td></tr><tr><td align="left"><a id="updated-1"></a> <code>updated?</code></td><td align="left"><code>string</code></td><td align="left">ISO-8601 time of the most recent content/metadata update.</td></tr></tbody></table></div>
+<hr>
+<p><a id="storagerules"></a></p>
+<h3 id="storagerules">StorageRules</h3>
+<p>Opaque parsed-rules handle returned by <code>parseStorageRules</code>.</p>
+<hr>
+<p><a id="uploadresult"></a></p>
+<h3 id="uploadresult">UploadResult</h3>
+<p>Return shape of <code>uploadBytes</code> / <code>uploadString</code>.</p>
+<h4 id="properties-21">Properties</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Property</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><a id="metadata-1"></a> <code>metadata</code></td><td align="left"><a href="#fullmetadata"><code>FullMetadata</code></a></td></tr><tr><td align="left"><a id="ref"></a> <code>ref</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr></tbody></table></div>
+<h2 id="type-aliases">Type Aliases</h2>
+<p><a id="provisionstorageerrorcode"></a></p>
+<h3 id="provisionstorageerrorcode">ProvisionStorageErrorCode</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> ProvisionStorageErrorCode</span><span style="color:#56B6C2"> =</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"PERMISSION_DENIED"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"SERVICE_DISABLED"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"LOCATION_FINALIZE_FAILED"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"BUCKET_CREATE_FAILED"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"RULES_DEPLOY_FAILED"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"CORS_UPDATE_FAILED"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"UNKNOWN"</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<hr>
+<p><a id="provisionstorageoutcome"></a></p>
+<h3 id="provisionstorageoutcome">ProvisionStorageOutcome</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> ProvisionStorageOutcome</span><span style="color:#56B6C2"> =</span></span>
+<span class="line"><span style="color:#ABB2BF">  | {</span></span>
+<span class="line"><span style="color:#E06C75">  bucketCreated</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">boolean</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  bucketId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  corsApplied</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">boolean</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  locationFinalized</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">boolean</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  locationId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">null</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  rulesDeployed</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">boolean</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  rulesetName</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  serviceEnabled</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">boolean</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">  success</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">true</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#ABB2BF">}</span></span>
+<span class="line"><span style="color:#ABB2BF">  | {</span></span>
+<span class="line"><span style="color:#E06C75">  error</span><span style="color:#ABB2BF">: {</span></span>
+<span class="line"><span style="color:#E06C75">     code</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">ProvisionStorageErrorCode</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">     message</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#E06C75">     recoverable</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">boolean</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#ABB2BF">  };</span></span>
+<span class="line"><span style="color:#E06C75">  success</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">false</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#ABB2BF">};</span></span></code></pre>
+<hr>
+<p><a id="serviceenablestate"></a></p>
+<h3 id="serviceenablestate">ServiceEnableState</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> ServiceEnableState</span><span style="color:#56B6C2"> =</span><span style="color:#98C379"> "enabled"</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">"disabled"</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">"unknown"</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<hr>
+<p><a id="storageerrorcode-1"></a></p>
+<h3 id="storageerrorcode">StorageErrorCode</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> StorageErrorCode</span><span style="color:#56B6C2"> =</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"unknown"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"object-not-found"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"quota-exceeded"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"unauthenticated"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"unauthorized"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"invalid-root-operation"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"invalid-format"</span></span>
+<span class="line"><span style="color:#ABB2BF">  | </span><span style="color:#98C379">"invalid-argument"</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>The unprefixed storage error codes the sandbox can raise. Mirrors
+the subset of <code>StorageErrorCode</code> the implemented operations use;
+resumable uploads and checksums remain out of scope.</p>
+<hr>
+<p><a id="storagegrantverb"></a></p>
+<h3 id="storagegrantverb">StorageGrantVerb</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> StorageGrantVerb</span><span style="color:#56B6C2"> =</span><span style="color:#E5C07B"> StorageMethod</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">StorageVerb</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>A verb token that may appear in an <code>allow</code> clause.</p>
+<hr>
+<p><a id="storagemethod"></a></p>
+<h3 id="storagemethod">StorageMethod</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> StorageMethod</span><span style="color:#56B6C2"> =</span><span style="color:#98C379"> "read"</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">"write"</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Coarse permission umbrellas. <code>read</code> covers get + list; <code>write</code>
+covers create + update + delete.</p>
+<hr>
+<p><a id="storagerequestmethod-1"></a></p>
+<h3 id="storagerequestmethod">StorageRequestMethod</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> StorageRequestMethod</span><span style="color:#56B6C2"> =</span><span style="color:#E5C07B"> StorageMethod</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">StorageVerb</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>What a caller records as the request’s operation. Callers pass the
+precise granular verb; the coarse forms remain accepted so the
+umbrella semantics are symmetric.</p>
+<hr>
+<p><a id="storageverb"></a></p>
+<h3 id="storageverb">StorageVerb</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> StorageVerb</span><span style="color:#56B6C2"> =</span><span style="color:#98C379"> "get"</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">"list"</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">"create"</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">"update"</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">"delete"</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Granular operation verbs. Production Storage maps each operation to
+exactly one of these:
+download / getMetadata      → get
+list                        → list
+upload to NONEXISTENT path  → create
+upload / updateMetadata over
+an EXISTING object        → update
+delete                      → delete</p>
+<hr>
+<p><a id="stringformat"></a></p>
+<h3 id="stringformat">StringFormat</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> StringFormat</span><span style="color:#56B6C2"> =</span><span style="color:#98C379"> "raw"</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">"base64"</span><span style="color:#ABB2BF"> | </span><span style="color:#98C379">"data_url"</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p><code>uploadString</code> format selector.</p>
+<hr>
+<p><a id="target"></a></p>
+<h3 id="target">Target</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">type</span><span style="color:#E5C07B"> Target</span><span style="color:#56B6C2"> =</span><span style="color:#E5C07B"> SandboxTarget</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<h2 id="variables">Variables</h2>
+<p><a id="target_symbol-1"></a></p>
+<h3 id="target_symbol">TARGET_SYMBOL</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">const</span><span style="color:#E5C07B"> TARGET_SYMBOL</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">unique</span><span style="color:#E5C07B"> symbol</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Hidden property on every <a href="#firebasestorage">FirebaseStorage</a> handle. Carries
+the sandbox state free functions share without exposing it publicly.</p>
+<h2 id="functions">Functions</h2>
+<p><a id="addfirebasetobucket"></a></p>
+<h3 id="addfirebasetobucket">addFirebaseToBucket()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> addFirebaseToBucket</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   projectId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">bucketId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">FirebaseStorageBucket</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Link a Cloud Storage bucket to Firebase Storage. Idempotent — if
+the bucket is already Firebase-linked, the API returns 200 with
+the existing record. The bucket must already exist as a GCS
+resource; for the default Firebase bucket name
+(<code>{projectId}.firebasestorage.app</code>), Firebase auto-creates it on
+first <code>:addFirebase</code> call.</p>
+<h4 id="parameters-6">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>projectId</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>bucketId</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-9">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#firebasestoragebucket"><code>FirebaseStorageBucket</code></a>></p>
+<hr>
+<p><a id="connectstorageemulator"></a></p>
+<h3 id="connectstorageemulator">connectStorageEmulator()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> connectStorageEmulator</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   _storage</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">FirebaseStorage</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   _host</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   _port</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">number</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   _options</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: {</span></span>
+<span class="line"><span style="color:#E06C75">  mockUserToken</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">Record</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">, </span><span style="color:#E5C07B">unknown</span><span style="color:#ABB2BF">>;</span></span>
+<span class="line"><span style="color:#ABB2BF">}): </span><span style="color:#E5C07B">void</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Accepted no-op because the selected Storage backend already is local.</p>
+<h4 id="parameters-7">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>_storage</code></td><td align="left"><a href="#firebasestorage"><code>FirebaseStorage</code></a></td></tr><tr><td align="left"><code>_host</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>_port</code></td><td align="left"><code>number</code></td></tr><tr><td align="left"><code>_options?</code></td><td align="left">{ <code>mockUserToken?</code>: <code>string</code> | <code>Record</code>&#x3C;<code>string</code>, <code>unknown</code>>; }</td></tr><tr><td align="left"><code>_options.mockUserToken?</code></td><td align="left"><code>string</code> | <code>Record</code>&#x3C;<code>string</code>, <code>unknown</code>></td></tr></tbody></table></div>
+<h4 id="returns-10">Returns</h4>
+<p><code>void</code></p>
+<hr>
+<p><a id="createstorageadmintools"></a></p>
+<h3 id="createstorageadmintools">createStorageAdminTools()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> createStorageAdminTools</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">deps</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageAdminToolDeps</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">ToolHandler</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">unknown</span><span style="color:#ABB2BF">, </span><span style="color:#E5C07B">unknown</span><span style="color:#ABB2BF">>[];</span></span></code></pre>
+<p>Bundles:</p>
+<ul>
+<li><code>storage_get_status</code></li>
+<li><code>storage_provision</code></li>
+</ul>
+<h4 id="parameters-8">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>deps</code></td><td align="left"><a href="#storageadmintooldeps"><code>StorageAdminToolDeps</code></a></td></tr></tbody></table></div>
+<h4 id="returns-11">Returns</h4>
+<p><code>ToolHandler</code>&#x3C;<code>unknown</code>, <code>unknown</code>>[]</p>
+<hr>
+<p><a id="defaultplaygroundcors"></a></p>
+<h3 id="defaultplaygroundcors">defaultPlaygroundCors()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> defaultPlaygroundCors</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">hostingOrigin</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">CorsRule</span><span style="color:#ABB2BF">[];</span></span></code></pre>
+<p>Default rule for a browser playground hosted on Firebase Hosting.
+Allows GET/POST/PUT/DELETE/HEAD/OPTIONS from the Hosting origin</p>
+<ul>
+<li>common localhost dev ports, with response headers needed by the
+Firebase Storage Web SDK.</li>
+</ul>
+<h4 id="parameters-9">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>hostingOrigin</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-12">Returns</h4>
+<p><a href="#corsrule"><code>CorsRule</code></a>[]</p>
+<hr>
+<p><a id="deleteobject"></a></p>
+<h3 id="deleteobject">deleteObject()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> deleteObject</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">ref</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">provenance</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">EventProvenance</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">void</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Delete the object at <code>ref</code> — removes both the blob and the
+metadata atomically. No-op when the path doesn’t exist (the
+persistence layer’s <code>delete</code> is no-op on missing keys).</p>
+<p>NOTE: the JS SDK’s <code>deleteObject</code> throws
+<code>storage/object-not-found</code> when the path is missing. The v1 scope
+keeps the persistence-layer no-op behavior for now; Slice 8 will
+reconsider whether to mirror the strict throw.</p>
+<p><code>provenance</code> (host-only): op EventProvenance bound at ISSUE time,
+threaded EXPLICITLY onto the emitted <code>object_delete</code> event. The delete
+awaits the backend before emitting, so it escapes the sandbox’s
+synchronous ambient-provenance window — see the note on <code>uploadBytes</code>.</p>
+<h4 id="parameters-10">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>ref</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr><tr><td align="left"><code>provenance?</code></td><td align="left"><code>EventProvenance</code></td></tr></tbody></table></div>
+<h4 id="returns-13">Returns</h4>
+<p><code>Promise</code>&#x3C;<code>void</code>></p>
+<hr>
+<p><a id="deploystoragerules"></a></p>
+<h3 id="deploystoragerules">deployStorageRules()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> deployStorageRules</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   projectId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   source</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   bucketId</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;{</span></span>
+<span class="line"><span style="color:#E06C75">  rulesetName</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">;</span></span>
+<span class="line"><span style="color:#ABB2BF">}>;</span></span></code></pre>
+<p>Deploy a Storage rules source for a specific bucket. Firebase
+Storage uses <strong>per-bucket</strong> release names —
+<code>projects/{p}/releases/firebase.storage/{bucketId}</code> — for actual
+rule application. The project-wide <code>firebase.storage</code> release
+exists as a legacy alias but isn’t bound to any bucket in modern
+projects; deploying to it leaves the bucket’s deny-all rule
+unchanged.</p>
+<p>Defaults <code>bucketId</code> to <code>{projectId}.firebasestorage.app</code> (the
+Firebase default bucket name). Pass an override when targeting a
+non-default bucket.</p>
+<h4 id="parameters-11">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>projectId</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>source</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>bucketId?</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-14">Returns</h4>
+<p><code>Promise</code>&#x3C;{
+<code>rulesetName</code>: <code>string</code>;
+}></p>
+<hr>
+<p><a id="enablestorageservice"></a></p>
+<h3 id="enablestorageservice">enableStorageService()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> enableStorageService</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">projectId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">void</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Enable <code>firebasestorage.googleapis.com</code> on the project. Requires
+<code>serviceusage.services.enable</code> IAM permission — included in
+<code>roles/owner</code>, <code>roles/editor</code> (deprecated), or
+<code>roles/serviceusage.serviceUsageAdmin</code>. The default Firebase Admin
+SDK service account does NOT have this; the caller’s token must
+either be a user-OAuth with <code>cloud-platform</code> scope or a SA with
+the elevated role.</p>
+<p>Long-running operation under the hood; the response carries an
+operation name. We don’t poll — the response 200 is enough signal
+for our purposes, and a brief settle delay handles propagation.</p>
+<h4 id="parameters-12">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>projectId</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-15">Returns</h4>
+<p><code>Promise</code>&#x3C;<code>void</code>></p>
+<hr>
+<p><a id="evaluatestoragerules"></a></p>
+<h3 id="evaluatestoragerules">evaluateStorageRules()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> evaluateStorageRules</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   rules</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageRules</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   input</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">EvaluationInput</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   now</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Date</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   firestoreLookup</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">FirestoreLookup</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">EvaluationResult</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Evaluate the rules against a request + resource binding. Returns
+<code>{ allowed, reasons }</code>. <code>allowed</code> is true iff any <code>allow</code> clause
+at any matching match block evaluates to a truthy condition.</p>
+<p>Path-matching strategy: the request’s path is segmented and
+walked against the AST’s match tree. Wildcards (<code>{p=**}</code>) match
+zero or more remaining segments; named params bind one segment.</p>
+<p>Multi-clause failure mode: when no clause matches, <code>reasons</code>
+contains a short trace (“no match found for path X” or “rule at
+match /sessions/{id} denied: condition false”). Helpful for the
+playground’s error surface.</p>
+<h4 id="parameters-13">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>rules</code></td><td align="left"><a href="#storagerules"><code>StorageRules</code></a></td></tr><tr><td align="left"><code>input</code></td><td align="left"><a href="#evaluationinput"><code>EvaluationInput</code></a></td></tr><tr><td align="left"><code>now?</code></td><td align="left"><code>Date</code></td></tr><tr><td align="left"><code>firestoreLookup?</code></td><td align="left"><a href="#firestorelookup"><code>FirestoreLookup</code></a></td></tr></tbody></table></div>
+<h4 id="returns-16">Returns</h4>
+<p><a href="#evaluationresult"><code>EvaluationResult</code></a></p>
+<hr>
+<p><a id="finalizedefaultlocation"></a></p>
+<h3 id="finalizedefaultlocation">finalizeDefaultLocation()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> finalizeDefaultLocation</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   projectId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">locationId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">void</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Set the project’s default GCP resources location. IRREVERSIBLE —
+once set, the location cannot be changed. Skip-if-set is the
+caller’s job; this function unconditionally calls <code>:finalize</code>.</p>
+<p>Per observed behavior, <code>:finalize</code> 404s on projects that already
+have resources provisioned (RTDB, Hosting) without a default
+location. The error path surfaces that to the caller.</p>
+<h4 id="parameters-14">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>projectId</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>locationId</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-17">Returns</h4>
+<p><code>Promise</code>&#x3C;<code>void</code>></p>
+<hr>
+<p><a id="getblob"></a></p>
+<h3 id="getblob">getBlob()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getBlob</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">ref</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">maxDownloadSizeBytes</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">number</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">Blob</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Read the blob at <code>ref</code> and return it as a <code>Blob</code>. Same semantics
+as <code>getBytes</code> but skips the <code>arrayBuffer()</code> conversion when the
+caller wants a <code>Blob</code> directly (e.g. for streaming or
+<code>URL.createObjectURL</code>). Note: this is the browser-side
+counterpart of the JS SDK’s <code>getBlob</code> — the v1 scope doesn’t ship
+a Node-stream variant.</p>
+<h4 id="parameters-15">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>ref</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr><tr><td align="left"><code>maxDownloadSizeBytes?</code></td><td align="left"><code>number</code></td></tr></tbody></table></div>
+<h4 id="returns-18">Returns</h4>
+<p><code>Promise</code>&#x3C;<code>Blob</code>></p>
+<hr>
+<p><a id="getbucketcors"></a></p>
+<h3 id="getbucketcors">getBucketCors()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getBucketCors</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">bucketId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">CorsRule</span><span style="color:#ABB2BF">[]>;</span></span></code></pre>
+<p>Read the current CORS configuration for a bucket.</p>
+<h4 id="parameters-16">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>bucketId</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-19">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#corsrule"><code>CorsRule</code></a>[]></p>
+<hr>
+<p><a id="getbytes"></a></p>
+<h3 id="getbytes">getBytes()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getBytes</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">ref</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">maxDownloadSizeBytes</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">number</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">ArrayBuffer</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Read the blob at <code>ref</code> and return its contents as an
+<code>ArrayBuffer</code>. Honors the optional <code>maxDownloadSizeBytes</code> cap by
+truncating to that length.</p>
+<h4 id="parameters-17">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>ref</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr><tr><td align="left"><code>maxDownloadSizeBytes?</code></td><td align="left"><code>number</code></td></tr></tbody></table></div>
+<h4 id="returns-20">Returns</h4>
+<p><code>Promise</code>&#x3C;<code>ArrayBuffer</code>></p>
+<hr>
+<p><a id="getdefaultlocation"></a></p>
+<h3 id="getdefaultlocation">getDefaultLocation()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getDefaultLocation</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">projectId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Read the project’s current default GCP resources location. Returns
+null when the project hasn’t been finalized yet — e.g. brand-new
+Firebase projects with no resources. <code>firebase</code> scope is sufficient.</p>
+<h4 id="parameters-18">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>projectId</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-21">Returns</h4>
+<p><code>Promise</code>&#x3C;<code>string</code>></p>
+<hr>
+<p><a id="getdownloadurl"></a></p>
+<h3 id="getdownloadurl">getDownloadURL()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getDownloadURL</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">ref</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Return a URL the current page can use to read the sandbox object. The URL is
+created from the same rules-checked blob as <a href="#getblob">getBlob</a>. It is a
+snapshot, cannot be shared outside the page, and stays
+alive until the caller revokes it or the page unloads.</p>
+<h4 id="parameters-19">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>ref</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr></tbody></table></div>
+<h4 id="returns-22">Returns</h4>
+<p><code>Promise</code>&#x3C;<code>string</code>></p>
+<hr>
+<p><a id="getmetadata"></a></p>
+<h3 id="getmetadata">getMetadata()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getMetadata</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">ref</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">FullMetadata</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Read the full metadata record at <code>ref</code>. Throws when no object
+exists at the path (<code>storage/object-not-found</code>).</p>
+<p>Mirrors <code>firebase/storage</code>’s <code>getMetadata</code>. Returns the same
+<code>FullMetadata</code> shape <code>uploadBytes</code> produced — server-set fields
+pinned at upload time, client-settable fields whatever the latest
+write left them as.</p>
+<h4 id="parameters-20">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>ref</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr></tbody></table></div>
+<h4 id="returns-23">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#fullmetadata"><code>FullMetadata</code></a>></p>
+<hr>
+<p><a id="getstorage"></a></p>
+<h3 id="getstorage">getStorage()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getStorage</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">app</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">FirebaseApp</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">bucketUrl</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">AppFirebaseStorage</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Resolve the Firebase-shaped Storage service associated with an app.</p>
+<h4 id="parameters-21">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>app?</code></td><td align="left"><code>FirebaseApp</code></td></tr><tr><td align="left"><code>bucketUrl?</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-24">Returns</h4>
+<p><code>AppFirebaseStorage</code></p>
+<hr>
+<p><a id="getstoragesandbox"></a></p>
+<h3 id="getstoragesandbox">getStorageSandbox()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getStorageSandbox</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">target</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">any</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">options</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageOptions</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">FirebaseStorage</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Construct (or return cached) a sandbox-backed <code>FirebaseStorage</code>
+handle. Accepts either a bare <code>Sandbox</code> (anonymous identity wired
+up via <code>sandbox.withAuth(null)</code>) or an explicit <code>SandboxContext</code>.
+Idempotent on <code>SandboxContext</code> identity.</p>
+<h4 id="parameters-22">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>target</code></td><td align="left"><code>any</code></td></tr><tr><td align="left"><code>options?</code></td><td align="left"><a href="#storageoptions"><code>StorageOptions</code></a></td></tr></tbody></table></div>
+<h4 id="returns-25">Returns</h4>
+<p><a href="#firebasestorage"><code>FirebaseStorage</code></a></p>
+<hr>
+<p><a id="getstorageservicestate"></a></p>
+<h3 id="getstorageservicestate">getStorageServiceState()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> getStorageServiceState</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">projectId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">ServiceEnableState</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Probe whether the <code>firebasestorage.googleapis.com</code> service is
+enabled on the project. Cheap, uses Service Usage <code>GET</code>. Requires
+<code>serviceusage.services.get</code> permission (the default Firebase Admin
+SDK SA has this; user OAuth tokens with <code>firebase</code> scope do not).</p>
+<p>Returns <code>'unknown'</code> on permission failures so callers can downgrade
+to “try the operation; observe SERVICE_DISABLED” rather than block.</p>
+<h4 id="parameters-23">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>projectId</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-26">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#serviceenablestate"><code>ServiceEnableState</code></a>></p>
+<hr>
+<p><a id="listall"></a></p>
+<h3 id="listall">listAll()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> listAll</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">refIn</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">ListResult</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Enumerate every immediate child item + sub-prefix under <code>refIn</code>.
+Works on the root reference too — pass <code>ref(storage)</code> to scan the
+whole bucket.</p>
+<h4 id="parameters-24">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>refIn</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr></tbody></table></div>
+<h4 id="returns-27">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#listresult"><code>ListResult</code></a>></p>
+<hr>
+<p><a id="listfirebasebuckets"></a></p>
+<h3 id="listfirebasebuckets">listFirebaseBuckets()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> listFirebaseBuckets</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">projectId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">FirebaseStorageBucket</span><span style="color:#ABB2BF">[]>;</span></span></code></pre>
+<p>List Firebase-linked Storage buckets on the project. Returns an
+empty list when none exist yet. Throws when the underlying service
+is disabled — callers should check <code>getStorageServiceState</code> first
+if they want to distinguish.</p>
+<h4 id="parameters-25">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>projectId</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-28">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#firebasestoragebucket"><code>FirebaseStorageBucket</code></a>[]></p>
+<hr>
+<p><a id="parsestoragerules"></a></p>
+<h3 id="parsestoragerules">parseStorageRules()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> parseStorageRules</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">source</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">StorageRules</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Parse a Storage rules source into an opaque handle. Throws
+<code>SyntaxError</code> on malformed input. Used by Slice 8’s
+<code>getStorage(ctx, { rules })</code> to validate upfront.</p>
+<h4 id="parameters-26">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>source</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h4 id="returns-29">Returns</h4>
+<p><a href="#storagerules"><code>StorageRules</code></a></p>
+<hr>
+<p><a id="provisionstorage"></a></p>
+<h3 id="provisionstorage">provisionStorage()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> provisionStorage</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   projectId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">options</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">ProvisionStorageOptions</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">ProvisionStorageResult</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>End-to-end Storage enablement + provisioning. Each step is
+idempotent (probe before mutating); the result reports what was
+actually done.</p>
+<p>Permission requirements (caller’s token):</p>
+<ul>
+<li><code>roles/serviceusage.serviceUsageAdmin</code> (or Owner) — to enable
+the service when it’s disabled</li>
+<li><code>cloud-platform</code> OAuth scope (or <code>firebase</code> if service already
+enabled)</li>
+</ul>
+<p>The handler throws <code>StorageProvisioningError</code> with the
+underlying <code>reason</code> (e.g. <code>AUTH_PERMISSION_DENIED</code>,
+<code>SERVICE_DISABLED</code>) so the caller can route to actionable UX.</p>
+<h4 id="parameters-27">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>projectId</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>options?</code></td><td align="left"><a href="#provisionstorageoptions"><code>ProvisionStorageOptions</code></a></td></tr></tbody></table></div>
+<h4 id="returns-30">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#provisionstorageresult"><code>ProvisionStorageResult</code></a>></p>
+<hr>
+<p><a id="ref-1"></a></p>
+<h3 id="ref">ref()</h3>
+<h4 id="call-signature">Call Signature</h4>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> ref</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">storage</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">FirebaseStorage</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">path</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Construct a reference. Two overloads matching Firebase:</p>
+<p><code>ref(storage, path?)</code>   — <code>path</code> is bucket-rooted. Omit for root.
+<code>ref(parent, path)</code>     — <code>path</code> is relative to <code>parent.fullPath</code>.</p>
+<h5 id="parameters-28">Parameters</h5>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>storage</code></td><td align="left"><a href="#firebasestorage"><code>FirebaseStorage</code></a></td></tr><tr><td align="left"><code>path?</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h5 id="returns-31">Returns</h5>
+<p><a href="#storagereference"><code>StorageReference</code></a></p>
+<h4 id="call-signature-1">Call Signature</h4>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> ref</span><span style="color:#ABB2BF">(</span><span style="color:#E06C75;font-style:italic">parent</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">, </span><span style="color:#E06C75;font-style:italic">path</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">;</span></span></code></pre>
+<p>Construct a reference. Two overloads matching Firebase:</p>
+<p><code>ref(storage, path?)</code>   — <code>path</code> is bucket-rooted. Omit for root.
+<code>ref(parent, path)</code>     — <code>path</code> is relative to <code>parent.fullPath</code>.</p>
+<h5 id="parameters-29">Parameters</h5>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>parent</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr><tr><td align="left"><code>path</code></td><td align="left"><code>string</code></td></tr></tbody></table></div>
+<h5 id="returns-32">Returns</h5>
+<p><a href="#storagereference"><code>StorageReference</code></a></p>
+<hr>
+<p><a id="setbucketcors"></a></p>
+<h3 id="setbucketcors">setBucketCors()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> setBucketCors</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   accessToken</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   bucketId</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">cors</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">CorsRule</span><span style="color:#ABB2BF">[]): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">void</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Replace the bucket’s CORS configuration. Pass an empty array to
+clear all rules. The GCS API replaces (not merges) the cors field
+on PATCH.</p>
+<h4 id="parameters-30">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>accessToken</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>bucketId</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>cors</code></td><td align="left"><a href="#corsrule"><code>CorsRule</code></a>[]</td></tr></tbody></table></div>
+<h4 id="returns-33">Returns</h4>
+<p><code>Promise</code>&#x3C;<code>void</code>></p>
+<hr>
+<p><a id="updatemetadata"></a></p>
+<h3 id="updatemetadata">updateMetadata()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> updateMetadata</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   ref</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   patch</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">SettableMetadata</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">provenance</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">EventProvenance</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">FullMetadata</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Update the client-settable metadata at <code>ref</code>. Server-set fields
+(<code>bucket</code>, <code>fullPath</code>, <code>name</code>, <code>generation</code>, <code>timeCreated</code>,
+<code>size</code>, <code>md5Hash</code>) are preserved; <code>metageneration</code> bumps and
+<code>updated</code> refreshes. The blob is untouched.</p>
+<p>Pass <code>undefined</code> for a field to leave the previous value in
+place. To explicitly clear a field, the JS SDK accepts <code>null</code> —
+we don’t model that in the v1 scope to keep the patch logic simple.
+Documented for Slice 9’s deferred-features section.</p>
+<p><code>provenance</code> (host-only): op EventProvenance bound at ISSUE time,
+threaded EXPLICITLY onto the emitted <code>metadata_update</code> event. Emit runs
+after the backend awaits, escaping the sandbox’s synchronous
+ambient-provenance window — see the note on <code>uploadBytes</code>.</p>
+<h4 id="parameters-31">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>ref</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr><tr><td align="left"><code>patch</code></td><td align="left"><a href="#settablemetadata"><code>SettableMetadata</code></a></td></tr><tr><td align="left"><code>provenance?</code></td><td align="left"><code>EventProvenance</code></td></tr></tbody></table></div>
+<h4 id="returns-34">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#fullmetadata"><code>FullMetadata</code></a>></p>
+<hr>
+<p><a id="uploadbytes"></a></p>
+<h3 id="uploadbytes">uploadBytes()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> uploadBytes</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   ref</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   data</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">Blob</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">ArrayBuffer</span><span style="color:#ABB2BF"> | </span><span style="color:#E5C07B">Uint8Array</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">ArrayBufferLike</span><span style="color:#ABB2BF">>,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   metadata</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">SettableMetadata</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">provenance</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">EventProvenance</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">UploadResult</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Upload bytes to the reference’s <code>fullPath</code>. Replaces any existing
+object at the path. Returns the populated <code>FullMetadata</code> and the
+same <code>ref</code> for chaining.</p>
+<p>Throws when the reference targets the root (<code>fullPath === ''</code>) —
+uploads need a non-empty path, matching Firebase’s
+<code>invalid-root-operation</code> precondition.</p>
+<p>Provenance is captured from the reference’s operation-scoped Storage
+handle before the first await. The optional <code>provenance</code> argument remains
+as a compatibility override for internal callers. Either way, concurrent
+uploads cannot exchange source or auth-lens identity, and
+<code>service: 'storage'</code> always wins.</p>
+<h4 id="parameters-32">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>ref</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr><tr><td align="left"><code>data</code></td><td align="left"><code>Blob</code> | <code>ArrayBuffer</code> | <code>Uint8Array</code>&#x3C;<code>ArrayBufferLike</code>></td></tr><tr><td align="left"><code>metadata?</code></td><td align="left"><a href="#settablemetadata"><code>SettableMetadata</code></a></td></tr><tr><td align="left"><code>provenance?</code></td><td align="left"><code>EventProvenance</code></td></tr></tbody></table></div>
+<h4 id="returns-35">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#uploadresult"><code>UploadResult</code></a>></p>
+<hr>
+<p><a id="uploadstring"></a></p>
+<h3 id="uploadstring">uploadString()</h3>
+<pre class="astro-code one-dark-pro" style="background-color:#282c34;color:#abb2bf; overflow-x: auto;" tabindex="0" data-language="ts"><code><span class="line"><span style="color:#C678DD">function</span><span style="color:#61AFEF"> uploadString</span><span style="color:#ABB2BF">(</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   ref</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StorageReference</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   value</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">string</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   format</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">StringFormat</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">   metadata</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">SettableMetadata</span><span style="color:#ABB2BF">,</span></span>
+<span class="line"><span style="color:#E06C75;font-style:italic">provenance</span><span style="color:#C678DD">?</span><span style="color:#ABB2BF">: </span><span style="color:#E5C07B">EventProvenance</span><span style="color:#ABB2BF">): </span><span style="color:#E5C07B">Promise</span><span style="color:#ABB2BF">&#x3C;</span><span style="color:#E5C07B">UploadResult</span><span style="color:#ABB2BF">>;</span></span></code></pre>
+<p>Upload a string in one of three formats:</p>
+<ul>
+<li><code>raw</code> (default): UTF-8 text. Defaults <code>contentType</code> to
+<code>text/plain;charset=utf-8</code> if neither metadata nor the data
+specify one.</li>
+<li><code>base64</code>: standard base64-encoded bytes.</li>
+<li><code>data_url</code>: a <code>data:</code> URL — the MIME prefix is honored as
+<code>contentType</code> unless the caller overrides it explicitly.</li>
+</ul>
+<h4 id="parameters-33">Parameters</h4>
+<div class="table-scroll">
+<table><thead><tr><th align="left">Parameter</th><th align="left">Type</th></tr></thead><tbody><tr><td align="left"><code>ref</code></td><td align="left"><a href="#storagereference"><code>StorageReference</code></a></td></tr><tr><td align="left"><code>value</code></td><td align="left"><code>string</code></td></tr><tr><td align="left"><code>format?</code></td><td align="left"><a href="#stringformat"><code>StringFormat</code></a></td></tr><tr><td align="left"><code>metadata?</code></td><td align="left"><a href="#settablemetadata"><code>SettableMetadata</code></a></td></tr><tr><td align="left"><code>provenance?</code></td><td align="left"><code>EventProvenance</code></td></tr></tbody></table></div>
+<h4 id="returns-36">Returns</h4>
+<p><code>Promise</code>&#x3C;<a href="#uploadresult"><code>UploadResult</code></a>></p>  </article> </main> <aside class="doc-toc api-symbols" aria-label="API symbols"> <h2 class="doc-toc-heading">Symbols</h2> <input class="api-symbol-filter" type="search" placeholder="Filter symbols" aria-label="Filter API symbols" data-api-symbol-filter> <div class="api-symbol-groups" data-api-symbol-groups> <section class="api-symbol-group" data-api-symbol-group> <a class="api-symbol-kind" href="#classes"> Classes </a> <ul> <li data-api-symbol="inspectstoragehandler"> <a href="#inspectstoragehandler">InspectStorageHandler</a> </li><li data-api-symbol="provisionstoragehandler"> <a href="#provisionstoragehandler">ProvisionStorageHandler</a> </li><li data-api-symbol="storageerror"> <a href="#storageerror">StorageError</a> </li><li data-api-symbol="storageprovisioningerror"> <a href="#storageprovisioningerror">StorageProvisioningError</a> </li> </ul> </section><section class="api-symbol-group" data-api-symbol-group> <a class="api-symbol-kind" href="#interfaces"> Interfaces </a> <ul> <li data-api-symbol="corsrule"> <a href="#corsrule">CorsRule</a> </li><li data-api-symbol="evaluationinput"> <a href="#evaluationinput">EvaluationInput</a> </li><li data-api-symbol="evaluationresult"> <a href="#evaluationresult">EvaluationResult</a> </li><li data-api-symbol="firebasestorage"> <a href="#firebasestorage">FirebaseStorage</a> </li><li data-api-symbol="firebasestoragebucket"> <a href="#firebasestoragebucket">FirebaseStorageBucket</a> </li><li data-api-symbol="firestorelookup"> <a href="#firestorelookup">FirestoreLookup</a> </li><li data-api-symbol="fullmetadata"> <a href="#fullmetadata">FullMetadata</a> </li><li data-api-symbol="inspectstorageresult"> <a href="#inspectstorageresult">InspectStorageResult</a> </li><li data-api-symbol="listresult"> <a href="#listresult">ListResult</a> </li><li data-api-symbol="provisionstorageinput"> <a href="#provisionstorageinput">ProvisionStorageInput</a> </li><li data-api-symbol="provisionstorageoptions"> <a href="#provisionstorageoptions">ProvisionStorageOptions</a> </li><li data-api-symbol="provisionstorageresult"> <a href="#provisionstorageresult">ProvisionStorageResult</a> </li><li data-api-symbol="sandboxtarget"> <a href="#sandboxtarget">SandboxTarget</a> </li><li data-api-symbol="settablemetadata"> <a href="#settablemetadata">SettableMetadata</a> </li><li data-api-symbol="storageadmintooldeps"> <a href="#storageadmintooldeps">StorageAdminToolDeps</a> </li><li data-api-symbol="storageauth"> <a href="#storageauth">StorageAuth</a> </li><li data-api-symbol="storageoptions"> <a href="#storageoptions">StorageOptions</a> </li><li data-api-symbol="storagereference"> <a href="#storagereference">StorageReference</a> </li><li data-api-symbol="storagerequest"> <a href="#storagerequest">StorageRequest</a> </li><li data-api-symbol="storageresource"> <a href="#storageresource">StorageResource</a> </li><li data-api-symbol="storagerules"> <a href="#storagerules">StorageRules</a> </li><li data-api-symbol="uploadresult"> <a href="#uploadresult">UploadResult</a> </li> </ul> </section><section class="api-symbol-group" data-api-symbol-group> <a class="api-symbol-kind" href="#type-aliases"> Type Aliases </a> <ul> <li data-api-symbol="provisionstorageerrorcode"> <a href="#provisionstorageerrorcode">ProvisionStorageErrorCode</a> </li><li data-api-symbol="provisionstorageoutcome"> <a href="#provisionstorageoutcome">ProvisionStorageOutcome</a> </li><li data-api-symbol="serviceenablestate"> <a href="#serviceenablestate">ServiceEnableState</a> </li><li data-api-symbol="storageerrorcode"> <a href="#storageerrorcode">StorageErrorCode</a> </li><li data-api-symbol="storagegrantverb"> <a href="#storagegrantverb">StorageGrantVerb</a> </li><li data-api-symbol="storagemethod"> <a href="#storagemethod">StorageMethod</a> </li><li data-api-symbol="storagerequestmethod"> <a href="#storagerequestmethod">StorageRequestMethod</a> </li><li data-api-symbol="storageverb"> <a href="#storageverb">StorageVerb</a> </li><li data-api-symbol="stringformat"> <a href="#stringformat">StringFormat</a> </li><li data-api-symbol="target"> <a href="#target">Target</a> </li> </ul> </section><section class="api-symbol-group" data-api-symbol-group> <a class="api-symbol-kind" href="#variables"> Variables </a> <ul> <li data-api-symbol="target_symbol"> <a href="#target_symbol">TARGET_SYMBOL</a> </li> </ul> </section><section class="api-symbol-group" data-api-symbol-group> <a class="api-symbol-kind" href="#functions"> Functions </a> <ul> <li data-api-symbol="addfirebasetobucket()"> <a href="#addfirebasetobucket">addFirebaseToBucket()</a> </li><li data-api-symbol="connectstorageemulator()"> <a href="#connectstorageemulator">connectStorageEmulator()</a> </li><li data-api-symbol="createstorageadmintools()"> <a href="#createstorageadmintools">createStorageAdminTools()</a> </li><li data-api-symbol="defaultplaygroundcors()"> <a href="#defaultplaygroundcors">defaultPlaygroundCors()</a> </li><li data-api-symbol="deleteobject()"> <a href="#deleteobject">deleteObject()</a> </li><li data-api-symbol="deploystoragerules()"> <a href="#deploystoragerules">deployStorageRules()</a> </li><li data-api-symbol="enablestorageservice()"> <a href="#enablestorageservice">enableStorageService()</a> </li><li data-api-symbol="evaluatestoragerules()"> <a href="#evaluatestoragerules">evaluateStorageRules()</a> </li><li data-api-symbol="finalizedefaultlocation()"> <a href="#finalizedefaultlocation">finalizeDefaultLocation()</a> </li><li data-api-symbol="getblob()"> <a href="#getblob">getBlob()</a> </li><li data-api-symbol="getbucketcors()"> <a href="#getbucketcors">getBucketCors()</a> </li><li data-api-symbol="getbytes()"> <a href="#getbytes">getBytes()</a> </li><li data-api-symbol="getdefaultlocation()"> <a href="#getdefaultlocation">getDefaultLocation()</a> </li><li data-api-symbol="getdownloadurl()"> <a href="#getdownloadurl">getDownloadURL()</a> </li><li data-api-symbol="getmetadata()"> <a href="#getmetadata">getMetadata()</a> </li><li data-api-symbol="getstorage()"> <a href="#getstorage">getStorage()</a> </li><li data-api-symbol="getstoragesandbox()"> <a href="#getstoragesandbox">getStorageSandbox()</a> </li><li data-api-symbol="getstorageservicestate()"> <a href="#getstorageservicestate">getStorageServiceState()</a> </li><li data-api-symbol="listall()"> <a href="#listall">listAll()</a> </li><li data-api-symbol="listfirebasebuckets()"> <a href="#listfirebasebuckets">listFirebaseBuckets()</a> </li><li data-api-symbol="parsestoragerules()"> <a href="#parsestoragerules">parseStorageRules()</a> </li><li data-api-symbol="provisionstorage()"> <a href="#provisionstorage">provisionStorage()</a> </li><li data-api-symbol="ref()"> <a href="#ref">ref()</a> </li><li data-api-symbol="setbucketcors()"> <a href="#setbucketcors">setBucketCors()</a> </li><li data-api-symbol="updatemetadata()"> <a href="#updatemetadata">updateMetadata()</a> </li><li data-api-symbol="uploadbytes()"> <a href="#uploadbytes">uploadBytes()</a> </li><li data-api-symbol="uploadstring()"> <a href="#uploadstring">uploadString()</a> </li> </ul> </section> <p class="api-symbol-empty" data-api-symbol-empty hidden>No matching symbols</p> </div> </aside> </div> <script type="module">const a=document.querySelector("[data-api-symbol-filter]"),d=[...document.querySelectorAll("[data-api-symbol-group]")],n=document.querySelector("[data-api-symbol-empty]");a?.addEventListener("input",()=>{const t=a.value.trim().toLowerCase();let o=0;for(const i of d){let e=0;i.querySelectorAll("[data-api-symbol]").forEach(l=>{const r=!t||(l.dataset.apiSymbol??"").includes(t);l.hidden=!r,r&&e++}),i.hidden=e===0,o+=e}n&&(n.hidden=o>0)});</script> <script type="module">const s=new Map;document.querySelectorAll('.doc-toc a[href^="#"]').forEach(t=>s.set(decodeURIComponent(t.hash.slice(1)),t));if(s.size>0){const t=new Set,n=()=>{let o=null;for(const e of s.keys())if(t.has(e)){o=e;break}s.forEach((e,c)=>e.classList.toggle("active",c===o))},r=new IntersectionObserver(o=>{for(const e of o)e.isIntersecting?t.add(e.target.id):t.delete(e.target.id);n()},{rootMargin:"-72px 0px -60% 0px"});s.forEach((o,e)=>{const c=document.getElementById(e);c&&r.observe(c)})}</script> <script type="module">document.querySelector('.studio__nav [aria-current="page"]')?.scrollIntoView({block:"nearest",inline:"center"});</script> </body> </html>