@pyric/cli 0.1.0-alpha.9

package/dist/verify/fixture.js

@@ -0,0 +1,156 @@
+import { getStorageSandbox } from 'pyric/storage';
+import { isRtdbRulesJson } from '../rtdb/rules-json.js';
+export const VERIFY_FIXTURE_SCHEMA = 'pyric.verify.fixture.v1';
+export function buildVerifyFixture(input) {
+    const events = input.sandbox.history();
+    const snapshot = input.sandbox.snapshot();
+    const firestoreDocuments = snapshot.firestore;
+    const services = {};
+    if (input.firestoreRules != null ||
+        Object.keys(firestoreDocuments).length > 0 ||
+        events.some((event) => eventService(event) === 'firestore')) {
+        services.firestore = {
+            rules: {
+                format: 'firestore.rules',
+                source: input.firestoreRules ?? '',
+            },
+            state: { documents: firestoreDocuments },
+        };
+    }
+    if (input.rtdbRules != null ||
+        input.rtdbState !== undefined ||
+        events.some((event) => eventService(event) === 'rtdb')) {
+        services.rtdb = {
+            rules: {
+                format: 'rtdb.rules.json',
+                json: input.rtdbRules ?? { rules: {} },
+            },
+            state: { tree: input.rtdbState ?? null },
+            ...(input.rtdbDatabaseUrl ? { databaseUrl: input.rtdbDatabaseUrl } : {}),
+        };
+    }
+    if (input.storageRules != null ||
+        events.some((event) => eventService(event) === 'storage')) {
+        services.storage = {
+            rules: {
+                format: 'storage.rules',
+                source: input.storageRules ?? '',
+            },
+            // RULES TEXT ONLY (scope note above) — objects are never captured.
+            state: null,
+        };
+    }
+    const authUsers = input.authState?.users;
+    const currentUser = input.authState?.currentUser ?? input.sandbox.currentUser;
+    if ((authUsers && authUsers.length > 0) || currentUser != null) {
+        services.auth = {
+            state: {
+                ...(authUsers ? { users: authUsers } : {}),
+                ...(currentUser != null ? { currentUser } : {}),
+            },
+        };
+    }
+    return {
+        schema: VERIFY_FIXTURE_SCHEMA,
+        ...(input.description ? { description: input.description } : {}),
+        createdAt: input.createdAt ?? new Date().toISOString(),
+        ...(input.capturedBy ? { capturedBy: input.capturedBy } : {}),
+        events,
+        services,
+    };
+}
+export function parseVerifyFixture(value) {
+    if (!isVerifyFixtureObject(value)) {
+        throw new Error('fixture must be a JSON object.');
+    }
+    if (value.schema !== VERIFY_FIXTURE_SCHEMA) {
+        throw new Error(`fixture schema must be '${VERIFY_FIXTURE_SCHEMA}'.`);
+    }
+    if (!Array.isArray(value.events)) {
+        throw new Error('fixture.events must be an array.');
+    }
+    if (!isVerifyFixtureObject(value.services)) {
+        throw new Error('fixture.services must be an object.');
+    }
+    const services = value.services;
+    if (services.firestore !== undefined) {
+        assertFirestoreService(services.firestore);
+    }
+    if (services.rtdb !== undefined) {
+        assertRtdbService(services.rtdb);
+    }
+    if (services.storage !== undefined) {
+        assertStorageService(services.storage);
+    }
+    if (services.auth !== undefined && !isVerifyFixtureObject(services.auth)) {
+        throw new Error('fixture.services.auth must be an object.');
+    }
+    return value;
+}
+export function fixtureVerifiableServices(fixture) {
+    const services = [];
+    if (fixture.services.firestore)
+        services.push('firestore');
+    if (fixture.services.rtdb)
+        services.push('rtdb');
+    return services;
+}
+function assertFirestoreService(value) {
+    if (!isVerifyFixtureObject(value))
+        throw new Error('fixture.services.firestore must be an object.');
+    if (!isVerifyFixtureObject(value.rules) || value.rules.format !== 'firestore.rules' || typeof value.rules.source !== 'string') {
+        throw new Error('fixture.services.firestore.rules must contain firestore.rules source.');
+    }
+    if (!isVerifyFixtureObject(value.state) || !isVerifyFixtureObject(value.state.documents)) {
+        throw new Error('fixture.services.firestore.state.documents must be an object.');
+    }
+}
+function assertRtdbService(value) {
+    if (!isVerifyFixtureObject(value))
+        throw new Error('fixture.services.rtdb must be an object.');
+    if (!isVerifyFixtureObject(value.rules) ||
+        value.rules.format !== 'rtdb.rules.json' ||
+        !isRtdbRulesJson(value.rules.json)) {
+        throw new Error('fixture.services.rtdb.rules must contain RTDB rules JSON.');
+    }
+    if (!isVerifyFixtureObject(value.state) || !('tree' in value.state)) {
+        throw new Error('fixture.services.rtdb.state.tree is required.');
+    }
+}
+function assertStorageService(value) {
+    if (!isVerifyFixtureObject(value))
+        throw new Error('fixture.services.storage must be an object.');
+    if (!isVerifyFixtureObject(value.rules) ||
+        value.rules.format !== 'storage.rules' ||
+        typeof value.rules.source !== 'string') {
+        throw new Error('fixture.services.storage.rules must contain storage.rules source.');
+    }
+}
+/**
+ * Re-deploy a fixture's captured storage rules into a sandbox's storage
+ * evaluator. RULES TEXT ONLY, mirroring the capture-side scope note: this
+ * never touches storage OBJECTS (persistence.ts's IDB blob store) — only
+ * `fixture.services.storage.rules.source` is applied.
+ *
+ * Storage rules are honored only on the FIRST `getStorageSandbox` call per
+ * `Sandbox` (see `storage/service.ts`), so this must run before any other
+ * code opens the storage service on `sandbox` — exactly the same ordering
+ * constraint firestore/rtdb rules already have at restore time. A no-op
+ * when the fixture carries no storage block.
+ */
+export function restoreStorageRulesFromFixture(fixture, sandbox) {
+    const source = fixture.services.storage?.rules?.source;
+    if (source === undefined)
+        return;
+    getStorageSandbox(sandbox, { rules: source });
+}
+function eventService(event) {
+    if ('service' in event && typeof event.service === 'string') {
+        return event.service;
+    }
+    return 'firestore';
+}
+function isVerifyFixtureObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=fixture.js.map

package/dist/verify/fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture.js","sourceRoot":"","sources":["../../src/verify/fixture.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAkC,CAAC;AA8ExE,MAAM,UAAU,kBAAkB,CAAC,KAA8B;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC1C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC9C,MAAM,QAAQ,GAAmC,EAAE,CAAC;IAEpD,IACE,KAAK,CAAC,cAAc,IAAI,IAAI;QAC5B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,GAAG,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,EAC3D,CAAC;QACD,QAAQ,CAAC,SAAS,GAAG;YACnB,KAAK,EAAE;gBACL,MAAM,EAAE,iBAAiB;gBACzB,MAAM,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;aACnC;YACD,KAAK,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE;SACzC,CAAC;IACJ,CAAC;IAED,IACE,KAAK,CAAC,SAAS,IAAI,IAAI;QACvB,KAAK,CAAC,SAAS,KAAK,SAAS;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,EACtD,CAAC;QACD,QAAQ,CAAC,IAAI,GAAG;YACd,KAAK,EAAE;gBACL,MAAM,EAAE,iBAAiB;gBACzB,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;aACvC;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE;YACxC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,IACE,KAAK,CAAC,YAAY,IAAI,IAAI;QAC1B,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,EACzD,CAAC;QACD,QAAQ,CAAC,OAAO,GAAG;YACjB,KAAK,EAAE;gBACL,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;aACjC;YACD,mEAAmE;YACnE,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;IACzC,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,EAAE,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9E,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,GAAG;YACd,KAAK,EAAE;gBACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,qBAAqB;QAC7B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,2BAA2B,qBAAqB,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,KAAsC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAA2B;IAE3B,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACpG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,iBAAiB,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9H,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC/F,IACE,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC;QACnC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,iBAAiB;QACxC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAClG,IACE,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC;QACnC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,eAAe;QACtC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAA2B,EAC3B,OAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;IACvD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO;IACjC,iBAAiB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,KAAmB;IACvC,IAAI,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,OAAuB,CAAC;IACvC,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/verify/index.d.ts

@@ -0,0 +1,102 @@
+import { type EventService } from 'pyric/sandbox';
+import { type ExpressionReportLevel, type TestResult } from 'pyric/rules/internal';
+import type { RtdbRulesDocument } from 'pyric/rules/internal/rtdb';
+import type { ProjectScope } from '../credentials/core/types.js';
+import { type PyricVerifyFixture } from './fixture.js';
+import { type DeriveRulesTestCasesOptions, type DeriveRulesTestCasesResult } from './cases.js';
+export { buildVerifyFixture, fixtureVerifiableServices, parseVerifyFixture, restoreStorageRulesFromFixture, VERIFY_FIXTURE_SCHEMA, type BuildVerifyFixtureInput, type PyricVerifyFixture, type VerifyFirestoreRulesBlock, type VerifyRtdbRulesBlock, type VerifyStorageRulesBlock, } from './fixture.js';
+export { deriveRulesTestCases, type DerivedRulesTestCase, type DeriveRulesTestCasesOptions, type DeriveRulesTestCasesResult, type VerifyFixtureWarning, type VerifyUnsupportedEvent, } from './cases.js';
+export { createVerifyTools, type VerifyToolDeps } from './tools.js';
+export type VerifiableService = 'firestore' | 'rtdb';
+export type VerifyEngine = 'sandbox' | 'rulesTestApi';
+export type VerifyRulesInput = {
+    firestore?: string | {
+        source: string;
+    };
+    rtdb?: {
+        rules: Record<string, unknown>;
+    } | RtdbRulesDocument;
+    storage?: string | {
+        source: string;
+    };
+};
+export interface VerifyFixtureOptions {
+    rules: VerifyRulesInput;
+    services?: VerifiableService[];
+    engines?: VerifyEngine[];
+    rulesTestApi?: {
+        scope: ProjectScope;
+        expressionReportLevel?: ExpressionReportLevel;
+    };
+    caseDerivation?: Omit<DeriveRulesTestCasesOptions, 'service'>;
+}
+export interface VerifyResult {
+    ok: boolean;
+    services: Partial<Record<VerifiableService, VerifyServiceResult>>;
+}
+export interface VerifyServiceResult {
+    service: VerifiableService;
+    ok: boolean;
+    checkedEvents: number;
+    divergences: VerifyDivergence[];
+    engines?: Partial<Record<VerifyEngine, VerifyEngineResult>>;
+}
+export interface VerifyEngineResult {
+    engine: VerifyEngine;
+    ok: boolean;
+    checkedEvents: number;
+    divergences: VerifyDivergence[];
+    testCases?: number;
+    passed?: number;
+    failed?: number;
+    unsupported?: number;
+    derivation?: DeriveRulesTestCasesResult;
+    results?: TestResult[];
+}
+export type VerifyDivergence = {
+    service: EventService | string;
+    kind: 'now-denied';
+    path?: string;
+    method?: string;
+    reason?: string;
+} | {
+    service: EventService | string;
+    kind: 'now-allowed';
+    path?: string;
+    method?: string;
+    reason?: string;
+} | {
+    service: EventService | string;
+    kind: 'state-drift';
+    path?: string;
+    field?: string;
+    before: unknown;
+    after: unknown;
+} | {
+    service: EventService | string;
+    kind: 'unsupported';
+    path?: string;
+    method?: string;
+    reason: string;
+} | {
+    service: EventService | string;
+    kind: 'expected-drift';
+    drift: string;
+    path?: string;
+    field?: string;
+    before?: unknown;
+    after?: unknown;
+} | {
+    service: EventService | string;
+    kind: 'engine-drift';
+    path?: string;
+    method?: string;
+    sandbox: string;
+    rulesTestApi: string;
+    reason?: string;
+};
+export declare class VerifyInputError extends Error {
+    constructor(message: string);
+}
+export declare function verifyFixture(fixtureInput: PyricVerifyFixture | unknown, opts: VerifyFixtureOptions): Promise<VerifyResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/verify/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/verify/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAKvB,OAAO,EAGL,KAAK,qBAAqB,EAE1B,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAMjE,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAEhC,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,8BAA8B,EAC9B,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,GAC5B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,MAAM,CAAC;AACrD,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,cAAc,CAAC;AAEtD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,iBAAiB,CAAC;IAC9D,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE;QACb,KAAK,EAAE,YAAY,CAAC;QACpB,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;KAC/C,CAAC;IACF,cAAc,CAAC,EAAE,IAAI,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB,EAAE,EAAE,OAAO,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACxC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;CACxB;AAED,MAAM,MAAM,gBAAgB,GACxB;IACE,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IACE,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IACE,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB,GACD;IACE,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC;IAC/B,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GACD;IACE,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,aAAa,CACjC,YAAY,EAAE,kBAAkB,GAAG,OAAO,EAC1C,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,YAAY,CAAC,CAyBvB"}

package/dist/verify/index.js

@@ -0,0 +1,318 @@
+import { replay as replayFirestore, } from 'pyric/sandbox';
+import { replay as replayRtdb, } from 'pyric/rules/internal/rtdb';
+import { SimulateFirestoreRulesHandler, TestFirestoreRulesHandler, } from 'pyric/rules/internal';
+import { isRtdbRulesDocument, parseRtdbRulesJson, } from '../rtdb/rules-json.js';
+import { fixtureVerifiableServices, parseVerifyFixture, } from './fixture.js';
+import { deriveRulesTestCases, } from './cases.js';
+export { buildVerifyFixture, fixtureVerifiableServices, parseVerifyFixture, restoreStorageRulesFromFixture, VERIFY_FIXTURE_SCHEMA, } from './fixture.js';
+export { deriveRulesTestCases, } from './cases.js';
+export { createVerifyTools } from './tools.js';
+export class VerifyInputError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'VerifyInputError';
+    }
+}
+export async function verifyFixture(fixtureInput, opts) {
+    const fixture = parseVerifyFixture(fixtureInput);
+    const selected = opts.services ?? fixtureVerifiableServices(fixture);
+    const engines = normalizeEngines(opts.engines);
+    if (selected.length === 0) {
+        throw new VerifyInputError(`fixture ${fixture.schema} does not contain a verifiable rules service.`);
+    }
+    const services = {};
+    for (const service of selected) {
+        if (service === 'firestore') {
+            services.firestore = await verifyFirestore(fixture, requireFirestoreRules(opts.rules), engines, opts);
+        }
+        else if (service === 'rtdb') {
+            services.rtdb = await verifyRtdb(fixture, requireRtdbRules(opts.rules), engines);
+        }
+        else {
+            const exhaustive = service;
+            throw new VerifyInputError(`unsupported verify service: ${exhaustive}`);
+        }
+    }
+    return {
+        ok: Object.values(services).every((result) => result?.ok !== false),
+        services,
+    };
+}
+async function verifyFirestore(fixture, rules, engines, opts) {
+    const firestore = fixture.services.firestore;
+    if (!firestore) {
+        throw new VerifyInputError('fixture does not contain services.firestore.');
+    }
+    const engineResults = {};
+    if (engines.includes('sandbox')) {
+        engineResults.sandbox = verifyFirestoreSandbox(fixture, rules);
+    }
+    if (engines.includes('rulesTestApi')) {
+        engineResults.rulesTestApi = await verifyFirestoreRulesTestApi(fixture, rules, opts);
+    }
+    if (engineResults.sandbox && engineResults.rulesTestApi) {
+        addEngineDrift(rules, engineResults.rulesTestApi);
+    }
+    const divergences = collectEngineDivergences(engineResults);
+    return {
+        service: 'firestore',
+        ok: divergences.every(isInformational),
+        checkedEvents: serviceCheckedEvents(engineResults),
+        divergences,
+        engines: engineResults,
+    };
+}
+function verifyFirestoreSandbox(fixture, rules) {
+    const firestore = fixture.services.firestore;
+    if (!firestore) {
+        throw new VerifyInputError('fixture does not contain services.firestore.');
+    }
+    const { divergences } = replayFirestore(fixture.events, rules, {}, firestore.state.documents);
+    const mapped = divergences.map(mapFirestoreDivergence);
+    return {
+        engine: 'sandbox',
+        ok: mapped.every(isInformational),
+        checkedEvents: fixture.events.filter(isProtectedFirestoreWrite).length,
+        divergences: mapped,
+    };
+}
+function isProtectedFirestoreWrite(event) {
+    return event.kind === 'write' && event.detail?.admin !== true;
+}
+async function verifyFirestoreRulesTestApi(fixture, rules, opts) {
+    const scope = opts.rulesTestApi?.scope;
+    if (!scope) {
+        throw new VerifyInputError('rulesTestApi verification requires rulesTestApi.scope.');
+    }
+    const derivation = deriveRulesTestCases(fixture, {
+        service: 'firestore',
+        ...opts.caseDerivation,
+    });
+    const divergences = derivation.unsupportedEvents.map(mapUnsupportedEvent);
+    if (derivation.testCases.length === 0) {
+        return {
+            engine: 'rulesTestApi',
+            ok: divergences.length === 0,
+            checkedEvents: 0,
+            testCases: 0,
+            passed: 0,
+            failed: 0,
+            unsupported: divergences.length,
+            derivation,
+            divergences,
+        };
+    }
+    const handler = new TestFirestoreRulesHandler();
+    const result = await handler.execute(scope, rules, derivation.testCases, {
+        expressionReportLevel: opts.rulesTestApi?.expressionReportLevel,
+    });
+    if (!result.success) {
+        divergences.push({
+            service: 'firestore',
+            kind: 'unsupported',
+            reason: `Rules Test API failed: ${result.error.message}`,
+        });
+        return {
+            engine: 'rulesTestApi',
+            ok: false,
+            checkedEvents: 0,
+            testCases: derivation.testCases.length,
+            passed: 0,
+            failed: derivation.testCases.length,
+            unsupported: divergences.length,
+            derivation,
+            divergences,
+        };
+    }
+    for (const [index, testResult] of result.data.results.entries()) {
+        if (testResult.state !== 'FAILED')
+            continue;
+        const tc = derivation.testCases[index];
+        divergences.push(mapFailedTestResult(testResult, tc));
+    }
+    return {
+        engine: 'rulesTestApi',
+        ok: divergences.every(isInformational),
+        checkedEvents: result.data.results.length,
+        testCases: derivation.testCases.length,
+        passed: result.data.passed,
+        failed: result.data.failed,
+        unsupported: result.data.unsupported + derivation.unsupportedEvents.length,
+        derivation,
+        results: result.data.results,
+        divergences,
+    };
+}
+async function verifyRtdb(fixture, rulesJson, engines) {
+    const rtdb = fixture.services.rtdb;
+    if (!rtdb) {
+        throw new VerifyInputError('fixture does not contain services.rtdb.');
+    }
+    if (engines.includes('rulesTestApi')) {
+        throw new VerifyInputError('rulesTestApi verification is Firestore-only; select --service firestore or use the sandbox engine for RTDB.');
+    }
+    const replayed = await replayRtdb(fixture.events, {
+        rules: rulesJson,
+        capturedState: rtdb.state.tree,
+        ...(rtdb.databaseUrl ? { databaseUrl: rtdb.databaseUrl } : {}),
+    });
+    const divergences = replayed.divergences.map(mapRtdbReplayDivergence);
+    const sandbox = {
+        engine: 'sandbox',
+        ok: divergences.every(isInformational),
+        checkedEvents: replayed.checkedEvents,
+        divergences,
+    };
+    return {
+        service: 'rtdb',
+        ok: divergences.every(isInformational),
+        checkedEvents: replayed.checkedEvents,
+        divergences,
+        engines: { sandbox },
+    };
+}
+function normalizeEngines(input) {
+    const engines = input ?? ['sandbox'];
+    const out = [];
+    for (const engine of engines) {
+        if (engine !== 'sandbox' && engine !== 'rulesTestApi') {
+            throw new VerifyInputError(`unsupported verify engine: ${String(engine)}`);
+        }
+        if (!out.includes(engine))
+            out.push(engine);
+    }
+    return out.length > 0 ? out : ['sandbox'];
+}
+function collectEngineDivergences(engines) {
+    return Object.values(engines).flatMap((result) => result?.divergences ?? []);
+}
+function serviceCheckedEvents(engines) {
+    return engines.sandbox?.checkedEvents ?? engines.rulesTestApi?.checkedEvents ?? 0;
+}
+function mapUnsupportedEvent(event) {
+    return {
+        service: event.service,
+        kind: 'unsupported',
+        path: event.path,
+        method: event.method,
+        reason: event.reason,
+    };
+}
+function mapFailedTestResult(result, tc) {
+    const path = tc?.path;
+    const method = tc?.method;
+    const reason = result.notes.join('\n') || `expected ${result.expectation}, got ${result.decision}`;
+    if (result.expectation === 'ALLOW') {
+        return {
+            service: 'firestore',
+            kind: 'now-denied',
+            path,
+            method,
+            reason,
+        };
+    }
+    return {
+        service: 'firestore',
+        kind: 'now-allowed',
+        path,
+        method,
+        reason,
+    };
+}
+function addEngineDrift(rules, rulesTestApi) {
+    const hostedCases = rulesTestApi.derivation?.testCases ?? [];
+    if (hostedCases.length === 0)
+        return;
+    const simulator = new SimulateFirestoreRulesHandler();
+    const local = simulator.simulate(rules, hostedCases);
+    if (!local.success)
+        return;
+    for (const [index, localResult] of local.data.results.entries()) {
+        const hostedResult = rulesTestApi.results?.[index];
+        if (!hostedResult)
+            continue;
+        if (localResult.decision === hostedResult.decision)
+            continue;
+        const tc = hostedCases[index];
+        rulesTestApi.divergences.push({
+            service: 'firestore',
+            kind: 'engine-drift',
+            path: tc?.path,
+            method: tc?.method,
+            sandbox: localResult.decision,
+            rulesTestApi: hostedResult.decision,
+            reason: `sandbox decided ${localResult.decision}; Rules Test API decided ${hostedResult.decision}.`,
+        });
+    }
+    rulesTestApi.ok = rulesTestApi.divergences.every(isInformational);
+}
+function requireFirestoreRules(input) {
+    const rules = input.firestore;
+    if (typeof rules === 'string')
+        return rules;
+    if (rules && typeof rules.source === 'string')
+        return rules.source;
+    throw new VerifyInputError('missing candidate Firestore rules. Pass rules.firestore.');
+}
+function requireRtdbRules(input) {
+    const rules = input.rtdb;
+    if (isRtdbRulesDocument(rules)) {
+        return parseRtdbRulesJson(rules.toJSON(), () => new VerifyInputError('candidate RTDB rules document must compile to { rules: object }.'));
+    }
+    if (rules !== undefined) {
+        return parseRtdbRulesJson(rules, () => new VerifyInputError('candidate RTDB rules must be { rules: object }.'));
+    }
+    throw new VerifyInputError('missing candidate RTDB rules. Pass rules.rtdb.');
+}
+function mapFirestoreDivergence(divergence) {
+    switch (divergence.kind) {
+        case 'real-divergence':
+            return {
+                service: 'firestore',
+                kind: 'state-drift',
+                path: divergence.path,
+                field: divergence.field,
+                before: divergence.before,
+                after: divergence.after,
+            };
+        case 'autoid-alias':
+            return {
+                service: 'firestore',
+                kind: 'expected-drift',
+                drift: 'autoid-alias',
+                path: divergence.originalPath,
+                before: divergence.originalPath,
+                after: divergence.replayedPath,
+            };
+        case 'sentinel-drift':
+            return {
+                service: 'firestore',
+                kind: 'expected-drift',
+                drift: 'sentinel-drift',
+                path: divergence.path,
+                field: divergence.field,
+                before: divergence.before,
+                after: divergence.after,
+            };
+        case 'time-drift':
+            return {
+                service: 'firestore',
+                kind: 'expected-drift',
+                drift: 'time-drift',
+                path: divergence.path,
+                field: divergence.field,
+                before: divergence.before,
+                after: divergence.after,
+            };
+    }
+}
+function mapRtdbReplayDivergence(divergence) {
+    return {
+        service: 'rtdb',
+        ...divergence,
+    };
+}
+function isInformational(divergence) {
+    return divergence.kind === 'expected-drift';
+}
+//# sourceMappingURL=index.js.map

package/dist/verify/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/verify/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,IAAI,eAAe,GAG1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,MAAM,IAAI,UAAU,GAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAI1B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GAGnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,GAIrB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,8BAA8B,EAC9B,qBAAqB,GAMtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,GAMrB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAuB,MAAM,YAAY,CAAC;AAiGpE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,YAA0C,EAC1C,IAA0B;IAE1B,MAAM,OAAO,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,gBAAgB,CACxB,WAAW,OAAO,CAAC,MAAM,+CAA+C,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAA4D,EAAE,CAAC;IAC7E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,QAAQ,CAAC,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxG,CAAC;aAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAU,OAAO,CAAC;YAClC,MAAM,IAAI,gBAAgB,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,KAAK,CAAC;QACnE,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAA2B,EAC3B,KAAa,EACb,OAAuB,EACvB,IAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CAAC,8CAA8C,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,aAAa,GAAsD,EAAE,CAAC;IAC5E,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,aAAa,CAAC,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,YAAY,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;QACxD,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,WAAW,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;IAC5D,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC;QACtC,aAAa,EAAE,oBAAoB,CAAC,aAAa,CAAC;QAClD,WAAW;QACX,OAAO,EAAE,aAAa;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA2B,EAC3B,KAAa;IAEb,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CAAC,8CAA8C,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,GAAG,eAAe,CACrC,OAAO,CAAC,MAAM,EACd,KAAK,EACL,EAAE,EACF,SAAS,CAAC,KAAK,CAAC,SAAS,CAC1B,CAAC;IACF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;QACjC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,MAAM;QACtE,WAAW,EAAE,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA2C;IAC5E,OAAO,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,OAA2B,EAC3B,KAAa,EACb,IAA0B;IAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,gBAAgB,CAAC,wDAAwD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,EAAE;QAC/C,OAAO,EAAE,WAAW;QACpB,GAAG,IAAI,CAAC,cAAc;KACvB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,EAAE,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5B,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,WAAW,CAAC,MAAM;YAC/B,UAAU;YACV,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,SAAS,EAAE;QACvE,qBAAqB,EAAE,IAAI,CAAC,YAAY,EAAE,qBAAqB;KAChE,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,WAAW,CAAC,IAAI,CAAC;YACf,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,0BAA0B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;SACzD,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,EAAE,EAAE,KAAK;YACT,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM;YACtC,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM;YACnC,WAAW,EAAE,WAAW,CAAC,MAAM;YAC/B,UAAU;YACV,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QAC5C,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC;QACtC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;QACzC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM;QACtC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;QAC1B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;QAC1B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM;QAC1E,UAAU;QACV,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAC5B,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,OAA2B,EAC3B,SAA6C,EAC7C,OAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,CAAC,yCAAyC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,gBAAgB,CAAC,6GAA6G,CAAC,CAAC;IAC5I,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE;QAChD,KAAK,EAAE,SAAS;QAChB,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;QAC9B,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACtE,MAAM,OAAO,GAAuB;QAClC,MAAM,EAAE,SAAS;QACjB,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC;QACtC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,WAAW;KACZ,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,MAAM;QACf,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC;QACtC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,WAAW;QACX,OAAO,EAAE,EAAE,OAAO,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiC;IACzD,MAAM,OAAO,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YACtD,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAA0D;IAE1D,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA0D;IAE1D,OAAO,OAAO,CAAC,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC,YAAY,EAAE,aAAa,IAAI,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA6B;IACxD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAkB,EAAE,EAAwB;IACvE,MAAM,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC;IACtB,MAAM,MAAM,GAAG,EAAE,EAAE,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,MAAM,CAAC,WAAW,SAAS,MAAM,CAAC,QAAQ,EAAE,CAAC;IACnG,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,YAAY;YAClB,IAAI;YACJ,MAAM;YACN,MAAM;SACP,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,IAAI,EAAE,aAAa;QACnB,IAAI;QACJ,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,KAAa,EACb,YAAgC;IAEhC,MAAM,WAAW,GAAG,YAAY,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC;IAC7D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAErC,MAAM,SAAS,GAAG,IAAI,6BAA6B,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO;IAE3B,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,YAAY;YAAE,SAAS;QAC5B,IAAI,WAAW,CAAC,QAAQ,KAAK,YAAY,CAAC,QAAQ;YAAE,SAAS;QAC7D,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9B,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC;YAC5B,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,EAAE,EAAE,IAAI;YACd,MAAM,EAAE,EAAE,EAAE,MAAM;YAClB,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,YAAY,EAAE,YAAY,CAAC,QAAQ;YACnC,MAAM,EAAE,mBAAmB,WAAW,CAAC,QAAQ,4BAA4B,YAAY,CAAC,QAAQ,GAAG;SACpG,CAAC,CAAC;IACL,CAAC;IACD,YAAY,CAAC,EAAE,GAAG,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAuB;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IACnE,MAAM,IAAI,gBAAgB,CAAC,0DAA0D,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAuB;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;IACzB,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,kBAAkB,CACvB,KAAK,CAAC,MAAM,EAAE,EACd,GAAG,EAAE,CAAC,IAAI,gBAAgB,CAAC,kEAAkE,CAAC,CAC/F,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,kBAAkB,CACvB,KAAK,EACL,GAAG,EAAE,CAAC,IAAI,gBAAgB,CAAC,iDAAiD,CAAC,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,gBAAgB,CAAC,gDAAgD,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAsB;IACpD,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,iBAAiB;YACpB,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;aACxB,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,cAAc;gBACrB,IAAI,EAAE,UAAU,CAAC,YAAY;gBAC7B,MAAM,EAAE,UAAU,CAAC,YAAY;gBAC/B,KAAK,EAAE,UAAU,CAAC,YAAY;aAC/B,CAAC;QACJ,KAAK,gBAAgB;YACnB,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,gBAAgB;gBACvB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;aACxB,CAAC;QACJ,KAAK,YAAY;YACf,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;aACxB,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAgC;IAC/D,OAAO;QACL,OAAO,EAAE,MAAM;QACf,GAAG,UAAU;KACd,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,UAA4B;IACnD,OAAO,UAAU,CAAC,IAAI,KAAK,gBAAgB,CAAC;AAC9C,CAAC"}

package/dist/verify/tools.d.ts

@@ -0,0 +1,7 @@
+import type { ToolHandler } from '@inbrowser/agent';
+import type { ProjectScope } from '../credentials/core/types.js';
+export interface VerifyToolDeps {
+    scope?: ProjectScope;
+}
+export declare function createVerifyTools(deps?: VerifyToolDeps): ToolHandler[];
+//# sourceMappingURL=tools.d.ts.map

package/dist/verify/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/verify/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AASjE,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,cAAmB,GAAG,WAAW,EAAE,CA6F1E"}