@pyric/cli 0.1.0-alpha.9

package/dist/serve/worker/service-worker-relay.d.ts

@@ -0,0 +1,22 @@
+/** Session-aware Service Worker relay over the authoritative SharedWorker host. */
+import { type HostCtx } from './host.js';
+import type { ServiceWorkerChannelMessage } from './service-worker-channel.js';
+type HostEnvelope = Extract<ServiceWorkerChannelMessage, {
+    direction: 'host';
+}>;
+export interface ServiceWorkerRelay {
+    handle(envelope: HostEnvelope): Promise<void>;
+}
+/**
+ * Keep one virtual host port per logical app while treating each Service Worker
+ * realm as a new session. An attach from a replacement realm first tears down
+ * the previous port's subscriptions; frames from the superseded realm are then
+ * ignored instead of being attributed to the replacement.
+ */
+export declare function createServiceWorkerRelay(options: {
+    getCtx(): Promise<HostCtx>;
+    send(message: ServiceWorkerChannelMessage): void;
+    onError?(error: unknown, envelope: HostEnvelope): void;
+}): ServiceWorkerRelay;
+export {};
+//# sourceMappingURL=service-worker-relay.d.ts.map

package/dist/serve/worker/service-worker-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-worker-relay.d.ts","sourceRoot":"","sources":["../../../src/serve/worker/service-worker-relay.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,EAGL,KAAK,OAAO,EAEb,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE/E,KAAK,YAAY,GAAG,OAAO,CAAC,2BAA2B,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAQhF,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,2BAA2B,GAAG,IAAI,CAAC;IACjD,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;CACxD,GAAG,kBAAkB,CAsDrB"}

package/dist/serve/worker/service-worker-relay.js

@@ -0,0 +1,63 @@
+/** Session-aware Service Worker relay over the authoritative SharedWorker host. */
+import { cleanupPort, handleMessage, } from './host.js';
+/**
+ * Keep one virtual host port per logical app while treating each Service Worker
+ * realm as a new session. An attach from a replacement realm first tears down
+ * the previous port's subscriptions; frames from the superseded realm are then
+ * ignored instead of being attributed to the replacement.
+ */
+export function createServiceWorkerRelay(options) {
+    const ports = new Map();
+    const makePort = (clientId, sessionId) => ({
+        postMessage(message) {
+            options.send({ direction: 'client', clientId, sessionId, message });
+        },
+    });
+    return {
+        async handle(envelope) {
+            if (envelope.phase === 'attach') {
+                const previous = ports.get(envelope.clientId);
+                if (previous?.sessionId === envelope.sessionId) {
+                    await previous.queue;
+                    return;
+                }
+                const state = {
+                    sessionId: envelope.sessionId,
+                    port: makePort(envelope.clientId, envelope.sessionId),
+                    queue: (previous?.queue ?? Promise.resolve()).then(async () => {
+                        if (!previous)
+                            return;
+                        try {
+                            const ctx = await options.getCtx();
+                            cleanupPort(ctx, previous.port);
+                        }
+                        catch (error) {
+                            options.onError?.(error, envelope);
+                        }
+                    }),
+                };
+                ports.set(envelope.clientId, state);
+                await state.queue;
+                return;
+            }
+            const state = ports.get(envelope.clientId);
+            if (!state || state.sessionId !== envelope.sessionId)
+                return;
+            state.queue = state.queue.then(async () => {
+                try {
+                    const ctx = await options.getCtx();
+                    await handleMessage(ctx, state.port, envelope.message);
+                    if (envelope.message.t === 'disconnect'
+                        && ports.get(envelope.clientId) === state) {
+                        ports.delete(envelope.clientId);
+                    }
+                }
+                catch (error) {
+                    options.onError?.(error, envelope);
+                }
+            });
+            await state.queue;
+        },
+    };
+}
+//# sourceMappingURL=service-worker-relay.js.map

package/dist/serve/worker/service-worker-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-worker-relay.js","sourceRoot":"","sources":["../../../src/serve/worker/service-worker-relay.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,EACL,WAAW,EACX,aAAa,GAGd,MAAM,WAAW,CAAC;AAenB;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAIxC;IACC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAY,EAAE,CAAC,CAAC;QACnE,WAAW,CAAC,OAAO;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,QAAQ;YACnB,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,QAAQ,EAAE,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;oBAC/C,MAAM,QAAQ,CAAC,KAAK,CAAC;oBACrB,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAe;oBACxB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC;oBACrD,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;wBAC5D,IAAI,CAAC,QAAQ;4BAAE,OAAO;wBACtB,IAAI,CAAC;4BACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;4BACnC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;wBAClC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;wBACrC,CAAC;oBACH,CAAC,CAAC;iBACH,CAAC;gBACF,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACpC,MAAM,KAAK,CAAC,KAAK,CAAC;gBAClB,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;gBAAE,OAAO;YAC7D,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACxC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnC,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACvD,IACE,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,YAAY;2BAChC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,EACzC,CAAC;wBACD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAClC,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,KAAK,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/serve/writer-lock.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Single-writer lock for `--persist` (pre-mortem #3).
+ *
+ * Two tabs = two sandboxes, each flushing its WHOLE world view — so the
+ * second tab's flush doesn't merge, it ERASES everything the first wrote.
+ * "last-writer-wins" undersold it: last-tab's-universe wins, visibly, on the
+ * loser's next reload.
+ *
+ * The conflict only exists at WRITE time, so the lock is resolved there: the
+ * first page to flush claims the writer role (carried in the
+ * `x-pyric-writer` header); a different page's flush is refused (409) and
+ * that page drops to read-only persistence + a loud console line. A reader
+ * that never mutates never conflicts.
+ *
+ * Liveness: the holder refreshes `lastSeen` on every accepted write and via
+ * a periodic heartbeat. A holder that goes quiet for `staleMs` (crash, or an
+ * idle tab whose heartbeat also stopped) is considered gone, so a fresh page
+ * can claim the role — no permanent wedge. The small overlap window where a
+ * stale-but-alive holder and a new claimer both think they're the writer is
+ * an accepted dev-tool race (documented), kept rare by a generous staleMs.
+ */
+export interface WriterLock {
+    /** Claim/refresh for `id`. Granted when free, already held by `id`, or the
+     *  current holder is stale. Returns whether `id` now holds the lock. */
+    claim(id: string, now: number): boolean;
+    /** Release if `id` is the holder (no-op otherwise). */
+    release(id: string): void;
+    /** Current holder, or null. */
+    holder(): string | null;
+}
+export declare function createWriterLock(staleMs?: number): WriterLock;
+//# sourceMappingURL=writer-lock.d.ts.map

package/dist/serve/writer-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer-lock.d.ts","sourceRoot":"","sources":["../../src/serve/writer-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,UAAU;IACzB;4EACwE;IACxE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACxC,uDAAuD;IACvD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,+BAA+B;IAC/B,MAAM,IAAI,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,SAAS,GAAG,UAAU,CAoB7D"}

package/dist/serve/writer-lock.js

@@ -0,0 +1,43 @@
+/**
+ * Single-writer lock for `--persist` (pre-mortem #3).
+ *
+ * Two tabs = two sandboxes, each flushing its WHOLE world view — so the
+ * second tab's flush doesn't merge, it ERASES everything the first wrote.
+ * "last-writer-wins" undersold it: last-tab's-universe wins, visibly, on the
+ * loser's next reload.
+ *
+ * The conflict only exists at WRITE time, so the lock is resolved there: the
+ * first page to flush claims the writer role (carried in the
+ * `x-pyric-writer` header); a different page's flush is refused (409) and
+ * that page drops to read-only persistence + a loud console line. A reader
+ * that never mutates never conflicts.
+ *
+ * Liveness: the holder refreshes `lastSeen` on every accepted write and via
+ * a periodic heartbeat. A holder that goes quiet for `staleMs` (crash, or an
+ * idle tab whose heartbeat also stopped) is considered gone, so a fresh page
+ * can claim the role — no permanent wedge. The small overlap window where a
+ * stale-but-alive holder and a new claimer both think they're the writer is
+ * an accepted dev-tool race (documented), kept rare by a generous staleMs.
+ */
+export function createWriterLock(staleMs = 60_000) {
+    let holder = null;
+    let lastSeen = 0;
+    return {
+        claim(id, now) {
+            if (holder === null || holder === id || now - lastSeen > staleMs) {
+                holder = id;
+                lastSeen = now;
+                return true;
+            }
+            return false;
+        },
+        release(id) {
+            if (holder === id) {
+                holder = null;
+                lastSeen = 0;
+            }
+        },
+        holder: () => holder,
+    };
+}
+//# sourceMappingURL=writer-lock.js.map

package/dist/serve/writer-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer-lock.js","sourceRoot":"","sources":["../../src/serve/writer-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAYH,MAAM,UAAU,gBAAgB,CAAC,OAAO,GAAG,MAAM;IAC/C,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO;QACL,KAAK,CAAC,EAAE,EAAE,GAAG;YACX,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE,IAAI,GAAG,GAAG,QAAQ,GAAG,OAAO,EAAE,CAAC;gBACjE,MAAM,GAAG,EAAE,CAAC;gBACZ,QAAQ,GAAG,GAAG,CAAC;gBACf,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,CAAC,EAAE;YACR,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;gBAClB,MAAM,GAAG,IAAI,CAAC;gBACd,QAAQ,GAAG,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC"}

package/dist/verify/cases.d.ts

@@ -0,0 +1,37 @@
+import type { TestCase } from 'pyric/rules/internal';
+import { type PyricVerifyFixture } from './fixture.js';
+export type VerifyFixtureWarning = {
+    service: 'firestore';
+    eventId?: string;
+    path?: string;
+    method?: string;
+    code: string;
+    message: string;
+};
+export type VerifyUnsupportedEvent = {
+    service: 'firestore';
+    eventId?: string;
+    path?: string;
+    method?: string;
+    reason: string;
+};
+export interface DeriveRulesTestCasesOptions {
+    service?: 'firestore';
+    includeAllowed?: boolean;
+    includeDenied?: boolean;
+    mockReads?: 'strict' | 'omit';
+}
+export interface DerivedRulesTestCase {
+    eventId: string;
+    testCase: TestCase;
+}
+export interface DeriveRulesTestCasesResult {
+    ok: boolean;
+    service: 'firestore';
+    testCases: TestCase[];
+    derived: DerivedRulesTestCase[];
+    warnings: VerifyFixtureWarning[];
+    unsupportedEvents: VerifyUnsupportedEvent[];
+}
+export declare function deriveRulesTestCases(fixtureInput: PyricVerifyFixture | unknown, opts?: DeriveRulesTestCasesOptions): DeriveRulesTestCasesResult;
+//# sourceMappingURL=cases.d.ts.map

package/dist/verify/cases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cases.d.ts","sourceRoot":"","sources":["../../src/verify/cases.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiC,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,iBAAiB,EAAE,sBAAsB,EAAE,CAAC;CAC7C;AAED,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,kBAAkB,GAAG,OAAO,EAC1C,IAAI,GAAE,2BAAgC,GACrC,0BAA0B,CA6E5B"}

package/dist/verify/cases.js

@@ -0,0 +1,173 @@
+import { parseVerifyFixture, } from './fixture.js';
+export function deriveRulesTestCases(fixtureInput, opts = {}) {
+    const fixture = parseVerifyFixture(fixtureInput);
+    const includeAllowed = opts.includeAllowed ?? true;
+    const includeDenied = opts.includeDenied ?? true;
+    const mockReads = opts.mockReads ?? 'strict';
+    const derived = [];
+    const warnings = [];
+    const unsupportedEvents = [];
+    for (const event of fixture.events) {
+        if (!isFirestoreRequestEvent(event))
+            continue;
+        if (event.origin === 'listener')
+            continue;
+        if (event.detail?.admin === true)
+            continue;
+        if (event.result === 'allow' && !includeAllowed)
+            continue;
+        if (event.result === 'deny' && !includeDenied)
+            continue;
+        if (event.result === 'unsupported') {
+            unsupportedEvents.push({
+                service: 'firestore',
+                eventId: event.id,
+                path: event.path,
+                method: event.method,
+                reason: event.reasons.join('\n') || 'captured Firestore request was unsupported locally.',
+            });
+            continue;
+        }
+        const method = lowerFirestoreMethod(event);
+        if (!method) {
+            unsupportedEvents.push({
+                service: 'firestore',
+                eventId: event.id,
+                path: event.path,
+                method: event.method,
+                reason: `cannot derive a Rules Test API case for Firestore method '${event.method}'.`,
+            });
+            continue;
+        }
+        const functionMocks = extractFunctionMocks(event);
+        if (mockReads === 'strict' && functionMocks === null) {
+            unsupportedEvents.push({
+                service: 'firestore',
+                eventId: event.id,
+                path: event.path,
+                method: event.method,
+                reason: 'captured request appears to depend on get()/exists(), but the fixture does not contain exact rule-read mocks.',
+            });
+            continue;
+        }
+        if (mockReads === 'omit' && eventMayNeedFunctionMocks(event)) {
+            warnings.push({
+                service: 'firestore',
+                eventId: event.id,
+                path: event.path,
+                method: event.method,
+                code: 'READ_MOCKS_OMITTED',
+                message: 'captured request may depend on get()/exists(); deriving the case without functionMocks may change hosted Rules Test API behavior.',
+            });
+        }
+        derived.push({
+            eventId: event.id,
+            testCase: buildTestCase(event, method, functionMocks ?? []),
+        });
+    }
+    return {
+        ok: unsupportedEvents.length === 0,
+        service: 'firestore',
+        testCases: derived.map((item) => item.testCase),
+        derived,
+        warnings,
+        unsupportedEvents,
+    };
+}
+function isFirestoreRequestEvent(event) {
+    if (!isCapturedRequestEvent(event) || event.kind !== 'request')
+        return false;
+    const service = event.service;
+    return service === undefined || service === 'firestore';
+}
+function lowerFirestoreMethod(event) {
+    if (event.method === 'get' || event.method === 'list' || event.method === 'create' || event.method === 'update' || event.method === 'delete') {
+        return event.method;
+    }
+    if (event.method === 'set') {
+        return event.resourceBefore?.exists ? 'update' : 'create';
+    }
+    return null;
+}
+function buildTestCase(event, method, functionMocks) {
+    const testCase = {
+        description: `${event.result === 'allow' ? 'allow' : 'deny'} ${method} ${event.path}`,
+        expectation: event.result === 'allow' ? 'ALLOW' : 'DENY',
+        method,
+        path: event.path,
+        auth: event.auth,
+        requestTime: new Date(event.at).toISOString(),
+    };
+    if (event.resourceBefore?.exists && event.resourceBefore.data !== null) {
+        testCase.resource = event.resourceBefore.data;
+    }
+    if (isWriteMethod(method)) {
+        if (method !== 'delete') {
+            const data = event.resourceAfter?.data ?? event.request?.resourceData;
+            if (isFirestoreWriteData(data))
+                testCase.data = data;
+        }
+        testCase.writeMode = writeModeFor(method);
+    }
+    if (functionMocks.length > 0) {
+        testCase.functionMocks = functionMocks;
+    }
+    const query = event.detail?.query;
+    if (isListQuery(query)) {
+        testCase.query = query;
+    }
+    return testCase;
+}
+function writeModeFor(method) {
+    if (method === 'create')
+        return { kind: 'create' };
+    if (method === 'update')
+        return { kind: 'update' };
+    if (method === 'delete')
+        return { kind: 'delete' };
+    return undefined;
+}
+function isWriteMethod(method) {
+    return method === 'create' || method === 'update' || method === 'delete';
+}
+function extractFunctionMocks(event) {
+    const detail = event.detail;
+    if (Array.isArray(detail?.functionMocks)) {
+        return detail.functionMocks.filter(isFunctionMock);
+    }
+    return eventMayNeedFunctionMocks(event) ? null : [];
+}
+function isFunctionMock(value) {
+    if (!isFunctionMockCandidate(value))
+        return false;
+    if (value.function !== 'get' && value.function !== 'exists')
+        return false;
+    return typeof value.path === 'string' && 'result' in value;
+}
+function isListQuery(value) {
+    if (!isListQueryCandidate(value))
+        return false;
+    if ('limit' in value && value.limit !== undefined && typeof value.limit !== 'number')
+        return false;
+    if ('offset' in value && value.offset !== undefined && typeof value.offset !== 'number')
+        return false;
+    if ('orderBy' in value && value.orderBy !== undefined && typeof value.orderBy !== 'string')
+        return false;
+    return true;
+}
+function eventMayNeedFunctionMocks(event) {
+    return event.reasons.some((reason) => /\b(get|exists)\s*\(/.test(reason));
+}
+function isCapturedRequestEvent(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isFirestoreWriteData(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isFunctionMockCandidate(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isListQueryCandidate(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=cases.js.map

package/dist/verify/cases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cases.js","sourceRoot":"","sources":["../../src/verify/cases.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kBAAkB,GAEnB,MAAM,cAAc,CAAC;AAwCtB,MAAM,UAAU,oBAAoB,CAClC,YAA0C,EAC1C,OAAoC,EAAE;IAEtC,MAAM,OAAO,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC;IAC7C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,iBAAiB,GAA6B,EAAE,CAAC;IAEvD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS;QAC1C,IAAI,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,IAAI;YAAE,SAAS;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,cAAc;YAAE,SAAS;QAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,aAAa;YAAE,SAAS;QAExD,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACnC,iBAAiB,CAAC,IAAI,CAAC;gBACrB,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qDAAqD;aAC1F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,iBAAiB,CAAC,IAAI,CAAC;gBACrB,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,6DAA6D,KAAK,CAAC,MAAM,IAAI;aACtF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,SAAS,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YACrD,iBAAiB,CAAC,IAAI,CAAC;gBACrB,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EACJ,+GAA+G;aAClH,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,MAAM,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EACL,mIAAmI;aACtI,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,EAAE,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAClC,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC/C,OAAO;QACP,QAAQ;QACR,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,WAAW,CAAC;AAC1D,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAmB;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7I,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACpB,KAAmB,EACnB,MAAuB,EACvB,aAA6B;IAE7B,MAAM,QAAQ,GAAa;QACzB,WAAW,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE;QACrF,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QACxD,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;KAC9C,CAAC;IAEF,IAAI,KAAK,CAAC,cAAc,EAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvE,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,EAAE,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC;YACtE,IAAI,oBAAoB,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QACvD,CAAC;QACD,QAAQ,CAAC,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,aAAa,GAAG,aAAa,CAAC;IACzC,CAAC;IAED,MAAM,KAAK,GAAI,KAAK,CAAC,MAA0C,EAAE,KAAK,CAAC;IACvE,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB;IAC3C,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,MAAuB;IAC5C,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC;AAC3E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAmB;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAiD,CAAC;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1E,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnG,IAAI,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtG,IAAI,SAAS,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAmB;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/verify/fixture.d.ts

@@ -0,0 +1,100 @@
+import type { Sandbox, SandboxEvent } from 'pyric/sandbox';
+export declare const VERIFY_FIXTURE_SCHEMA: "pyric.verify.fixture.v1";
+export interface VerifyFirestoreRulesBlock {
+    format: 'firestore.rules';
+    source: string;
+}
+export interface VerifyRtdbRulesBlock {
+    format: 'rtdb.rules.json';
+    json: {
+        rules: Record<string, unknown>;
+    };
+}
+export interface VerifyStorageRulesBlock {
+    format: 'storage.rules';
+    source: string;
+}
+export interface PyricVerifyFixture {
+    schema: typeof VERIFY_FIXTURE_SCHEMA;
+    description?: string;
+    createdAt?: string;
+    /** Opaque id of the sandbox instance that produced this capture (the served
+     *  SharedWorker's `instanceId`). Purely additive: `pyric verify` ignores it.
+     *  Present only on captures written by the worker's capture flush; used by
+     *  boot-time event hydration to SKIP priming a capture that belongs to a
+     *  DIFFERENT instance (e.g. another browser profile sharing one `pyric dev`),
+     *  so someone else's session never shows up as yours. Absent on older /
+     *  standalone captures → hydration primes best-effort. */
+    capturedBy?: string;
+    events: SandboxEvent[];
+    services: {
+        firestore?: {
+            rules: VerifyFirestoreRulesBlock;
+            state: {
+                documents: Record<string, Record<string, unknown>>;
+            };
+        };
+        rtdb?: {
+            rules: VerifyRtdbRulesBlock;
+            state: {
+                tree: unknown;
+            };
+            databaseUrl?: string;
+        };
+        auth?: {
+            state: {
+                users?: unknown[];
+                currentUser?: unknown;
+            };
+        };
+        storage?: {
+            /** RULES TEXT ONLY — captured object state is a separate, larger
+             *  redesign (persistence.ts's IDB blob store) and is deliberately
+             *  left untouched here. `state` stays `null` until that lands. */
+            rules: VerifyStorageRulesBlock;
+            state: unknown;
+        };
+        [service: string]: unknown;
+    };
+}
+export interface BuildVerifyFixtureInput {
+    sandbox: Pick<Sandbox, 'history' | 'snapshot'> & {
+        currentUser?: unknown;
+    };
+    description?: string;
+    firestoreRules?: string | null;
+    rtdbRules?: {
+        rules: Record<string, unknown>;
+    } | null;
+    rtdbState?: unknown;
+    rtdbDatabaseUrl?: string | null;
+    /** Currently-deployed storage rules text. RULES ONLY — there is no
+     *  `storageState` input; captured storage OBJECTS are a separate,
+     *  larger redesign left untouched by this fixture. */
+    storageRules?: string | null;
+    authState?: {
+        users?: unknown[];
+        currentUser?: unknown;
+    } | null;
+    createdAt?: string;
+    /** Stamped into the fixture as `capturedBy` (identity for boot-time event
+     *  hydration). Omit for `pyric verify` builds — they have no instance. */
+    capturedBy?: string;
+}
+export declare function buildVerifyFixture(input: BuildVerifyFixtureInput): PyricVerifyFixture;
+export declare function parseVerifyFixture(value: unknown): PyricVerifyFixture;
+export declare function fixtureVerifiableServices(fixture: PyricVerifyFixture): Array<'firestore' | 'rtdb'>;
+/**
+ * Re-deploy a fixture's captured storage rules into a sandbox's storage
+ * evaluator. RULES TEXT ONLY, mirroring the capture-side scope note: this
+ * never touches storage OBJECTS (persistence.ts's IDB blob store) — only
+ * `fixture.services.storage.rules.source` is applied.
+ *
+ * Storage rules are honored only on the FIRST `getStorageSandbox` call per
+ * `Sandbox` (see `storage/service.ts`), so this must run before any other
+ * code opens the storage service on `sandbox` — exactly the same ordering
+ * constraint firestore/rtdb rules already have at restore time. A no-op
+ * when the fixture carries no storage block.
+ */
+export declare function restoreStorageRulesFromFixture(fixture: PyricVerifyFixture, sandbox: Sandbox): void;
+//# sourceMappingURL=fixture.d.ts.map

package/dist/verify/fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture.d.ts","sourceRoot":"","sources":["../../src/verify/fixture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAIzE,eAAO,MAAM,qBAAqB,EAAG,yBAAkC,CAAC;AAExE,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,qBAAqB,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;8DAM0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,QAAQ,EAAE;QACR,SAAS,CAAC,EAAE;YACV,KAAK,EAAE,yBAAyB,CAAC;YACjC,KAAK,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;aAAE,CAAC;SAC/D,CAAC;QACF,IAAI,CAAC,EAAE;YACL,KAAK,EAAE,oBAAoB,CAAC;YAC5B,KAAK,EAAE;gBAAE,IAAI,EAAE,OAAO,CAAA;aAAE,CAAC;YACzB,WAAW,CAAC,EAAE,MAAM,CAAC;SACtB,CAAC;QACF,IAAI,CAAC,EAAE;YACL,KAAK,EAAE;gBACL,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;gBAClB,WAAW,CAAC,EAAE,OAAO,CAAC;aACvB,CAAC;SACH,CAAC;QACF,OAAO,CAAC,EAAE;YACR;;8EAEkE;YAClE,KAAK,EAAE,uBAAuB,CAAC;YAC/B,KAAK,EAAE,OAAO,CAAC;SAChB,CAAC;QACF,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;KAC5B,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,UAAU,CAAC,GAAG;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;0DAEsD;IACtD,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;QAClB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;8EAC0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,kBAAkB,CAoErF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CA6BrE;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,kBAAkB,GAC1B,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,CAK7B;AAqCD;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,OAAO,GACf,IAAI,CAIN"}