npm - @pyric/cli - Versions diffs - 0.1.0-alpha.9 - Mend

@pyric/cli 0.1.0-alpha.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1169) hide show

package/dist/serve/docs-ui/docs/pyric-auth-reference-feature-matrix/index.html ADDED Viewed

@@ -0,0 +1,781 @@
+<!DOCTYPE html><html lang="en"> <head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Feature matrix: pyric/auth coverage of firebase/auth · Pyric Studio</title><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500;700&display=swap" rel="stylesheet"><link rel="stylesheet" href="/__pyric/ui/_astro/_slug_.CQYSemvw.css"></head> <body>  <header class="studio__bar"> <div class="studio__bar-inner"> <a class="studio__brand" href="/__pyric/ui/" aria-label="Pyric Studio">Pyric</a> <nav class="studio__nav" aria-label="Studio tabs"> <a class="studio__nav-tab" href="/__pyric/ui/"> Home </a><a class="studio__nav-tab" href="/__pyric/ui/firestore"> Firestore </a><a class="studio__nav-tab" href="/__pyric/ui/auth"> Auth </a><a class="studio__nav-tab" href="/__pyric/ui/rtdb"> RTDB </a><a class="studio__nav-tab" href="/__pyric/ui/storage"> Storage </a><a class="studio__nav-tab" href="/__pyric/ui/traffic"> Traffic </a><a class="studio__nav-tab" href="/__pyric/ui/settings"> Settings </a><a class="studio__nav-tab" href="/__pyric/ui/docs" aria-current="page"> Docs </a> </nav> </div> </header> <div class="docs-shell">  <details class="docs-nav-drawer"> <summary>Navigate</summary> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div> <script type="module">let i=null;function d(t){return i||(i=fetch(t).then(e=>e.json())),i}function l(t,e){return t.title.toLowerCase().includes(e)||t.excerpt.toLowerCase().includes(e)?!0:t.headings.some(r=>r.text.toLowerCase().includes(e))}function u(t,e,r){if(e.innerHTML="",t.length===0){e.hidden=!1;{const n=document.createElement("li");n.className="docs-search-empty",n.textContent="No matches",e.appendChild(n)}return}e.hidden=!1;for(const n of t.slice(0,8)){const s=document.createElement("li"),c=document.createElement("a");c.href=n.path;const o=document.createElement("span");o.className="docs-search-result-title",o.textContent=n.title;const a=document.createElement("span");a.className="docs-search-result-meta",a.textContent=[n.group,n.section].filter(Boolean).join(" / "),c.append(o,a),s.appendChild(c),e.appendChild(s)}}document.querySelectorAll(".docs-search").forEach(t=>{const e=t.dataset.indexUrl,r=t.querySelector(".docs-search-input"),n=t.querySelector(".docs-search-results");r.addEventListener("input",async()=>{const s=r.value.trim().toLowerCase();if(!s){n.hidden=!0,n.innerHTML="";return}const{pages:c}=await d(e);r.value.trim().toLowerCase()===s&&u(c.filter(o=>l(o,s)),n)}),r.addEventListener("focus",()=>{d(e),n.childElementCount>0&&(n.hidden=!1)}),r.addEventListener("keydown",s=>{s.key==="Escape"&&(r.value="",n.hidden=!0,n.innerHTML="",r.blur())}),r.addEventListener("blur",()=>{window.setTimeout(()=>{n.hidden=!0},150)})});document.addEventListener("keydown",t=>{if(!(t.metaKey||t.ctrlKey)||t.key.toLowerCase()!=="k")return;const e=[...document.querySelectorAll(".docs-search-input")].find(r=>r.offsetParent!==null);e&&(t.preventDefault(),e.focus(),e.select())});</script> <a class="docs-nav-toplink" href="/__pyric/ui/docs/overview/"> Overview </a><details class="docs-nav-group"> <summary>Run locally</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/how-the-swap-works/"> How the swap works </a> </li><li> <a href="/__pyric/ui/docs/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Develop with Firebase APIs</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/sign-in-and-manage-users/"> Sign in and manage users </a> </li><li> <a href="/__pyric/ui/docs/store-and-query-data/"> Store and query data </a> </li><li> <a href="/__pyric/ui/docs/sync-realtime-data/"> Sync realtime data </a> </li><li> <a href="/__pyric/ui/docs/store-files/"> Store files </a> </li><li> <a href="/__pyric/ui/docs/receive-messages/"> Receive messages </a> </li><li> <a href="/__pyric/ui/docs/run-ai-logic-locally/"> Run AI Logic locally </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-how-to-run-rtdb-onvaluecreated/"> Run an RTDB function locally </a> </li><li> <a href="/__pyric/ui/docs/which-data-service/"> Which data service? </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Inspect and correct</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <h2 class="docs-nav-heading"> Inspect the sandbox </h2> <ul> <li> <a href="/__pyric/ui/docs/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/shape-your-data/"> Seed, snapshot, replay </a> </li><li> <a href="/__pyric/ui/docs/watch-and-review/"> Review agent activity </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Correct Security Rules </h2> <ul> <li> <a href="/__pyric/ui/docs/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/rules-patterns/"> Rules patterns </a> </li><li> <a href="/__pyric/ui/docs/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/whats-possible/"> Case studies </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Work with an agent </h2> <ul> <li> <a href="/__pyric/ui/docs/what-your-agent-can-do/"> Work through an agent </a> </li><li> <a href="/__pyric/ui/docs/skills/"> Agent skills </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Verify the boundary</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-how-to-verify-against-a-captured-session/"> Verify a captured session </a> </li><li> <a href="/__pyric/ui/docs/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Ship unchanged</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/set-up-the-project/"> Set up the Firebase project </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/how-we-know-it-matches-firebase/"> Conformance </a> </li><li> <a href="/__pyric/ui/docs/whats-experimental/"> What&#39;s experimental </a> </li><li> <a href="/__pyric/ui/docs/pyric-conformance-scores/"> Conformance scores </a> </li><li> <a href="/__pyric/ui/docs/pyric-app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-compat/"> Rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-functions-rtdb-compat/"> Functions · RTDB </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group" open> <summary>Reference</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli/"> @pyric/cli </a> </li><li> <a href="/__pyric/ui/docs/pyric-explanation-versioning-and-compatibility/"> pyric </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore/"> pyric / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules/"> pyric / rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox/"> pyric / sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage/"> pyric / storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth/" aria-current="true"> pyric / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database/"> pyric / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-app/"> pyric-admin / app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore/"> pyric-admin / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth/"> pyric-admin / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database/"> pyric-admin / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage/"> pyric-admin / storage </a> </li><li> <a href="/__pyric/ui/docs/ui/"> @pyric/ui </a> </li><li> <a href="/__pyric/ui/docs/api-reference/"> API reference </a> </li> </ul> </div> </div> </details> </nav> </details> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div>  <a class="docs-nav-toplink" href="/__pyric/ui/docs/overview/" id="nav-group-overview"> Overview </a><details class="docs-nav-group" id="nav-group-run-locally"> <summary>Run locally</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/start-building/"> Quickstart </a> </li><li> <a href="/__pyric/ui/docs/how-the-swap-works/"> How the swap works </a> </li><li> <a href="/__pyric/ui/docs/set-up-your-agent/"> Connect an agent </a> </li><li> <a href="/__pyric/ui/docs/test-in-node/"> Test in Node </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-develop-with-firebase-apis"> <summary>Develop with Firebase APIs</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/sign-in-and-manage-users/"> Sign in and manage users </a> </li><li> <a href="/__pyric/ui/docs/store-and-query-data/"> Store and query data </a> </li><li> <a href="/__pyric/ui/docs/sync-realtime-data/"> Sync realtime data </a> </li><li> <a href="/__pyric/ui/docs/store-files/"> Store files </a> </li><li> <a href="/__pyric/ui/docs/receive-messages/"> Receive messages </a> </li><li> <a href="/__pyric/ui/docs/run-ai-logic-locally/"> Run AI Logic locally </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-how-to-run-rtdb-onvaluecreated/"> Run an RTDB function locally </a> </li><li> <a href="/__pyric/ui/docs/which-data-service/"> Which data service? </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-inspect-and-correct"> <summary>Inspect and correct</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-inspect-and-correct-inspect-the-sandbox"> Inspect the sandbox </h2> <ul> <li> <a href="/__pyric/ui/docs/see-whats-happening/"> Traffic &amp; rule verdicts </a> </li><li> <a href="/__pyric/ui/docs/read-a-denial/"> Read a denial and understand it </a> </li><li> <a href="/__pyric/ui/docs/shape-your-data/"> Seed, snapshot, replay </a> </li><li> <a href="/__pyric/ui/docs/watch-and-review/"> Review agent activity </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-inspect-and-correct-correct-security-rules"> Correct Security Rules </h2> <ul> <li> <a href="/__pyric/ui/docs/secure-it-with-rules/"> Security Rules </a> </li><li> <a href="/__pyric/ui/docs/simulate-and-lint/"> Simulate and lint before you deploy </a> </li><li> <a href="/__pyric/ui/docs/rules-patterns/"> Rules patterns </a> </li><li> <a href="/__pyric/ui/docs/rules-standard-library/"> The rules standard library </a> </li><li> <a href="/__pyric/ui/docs/rtdb-rules-in-typescript/"> RTDB rules in TypeScript </a> </li><li> <a href="/__pyric/ui/docs/firestore-rules-limits/"> Rules limits </a> </li><li> <a href="/__pyric/ui/docs/whats-possible/"> Case studies </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-inspect-and-correct-work-with-an-agent"> Work with an agent </h2> <ul> <li> <a href="/__pyric/ui/docs/what-your-agent-can-do/"> Work through an agent </a> </li><li> <a href="/__pyric/ui/docs/skills/"> Agent skills </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-verify-the-boundary"> <summary>Verify the boundary</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-cli-how-to-verify-against-a-captured-session/"> Verify a captured session </a> </li><li> <a href="/__pyric/ui/docs/write-a-rules-test-suite/"> Write a rules test suite </a> </li><li> <a href="/__pyric/ui/docs/audit-your-rules/"> Audit rules and data </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-ship-unchanged"> <summary>Ship unchanged</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ship-to-production/"> Ship to production </a> </li><li> <a href="/__pyric/ui/docs/set-up-the-project/"> Set up the Firebase project </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-conformance"> <summary>Conformance</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/how-we-know-it-matches-firebase/"> Conformance </a> </li><li> <a href="/__pyric/ui/docs/whats-experimental/"> What&#39;s experimental </a> </li><li> <a href="/__pyric/ui/docs/pyric-conformance-scores/"> Conformance scores </a> </li><li> <a href="/__pyric/ui/docs/pyric-app-compat/"> App </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-compat/"> Firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-compat/"> Auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database-compat/"> Realtime Database </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-compat/"> Storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-compat/"> Rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-messaging-compat/"> Messaging </a> </li><li> <a href="/__pyric/ui/docs/pyric-ai-compat/"> AI Logic </a> </li><li> <a href="/__pyric/ui/docs/pyric-cli-functions-rtdb-compat/"> Functions · RTDB </a> </li> </ul> </div> </div> </details> <details class="docs-nav-group" id="nav-group-reference" open> <summary>Reference</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section"> <ul> <li> <a href="/__pyric/ui/docs/pyric-cli/"> @pyric/cli </a> </li><li> <a href="/__pyric/ui/docs/pyric-explanation-versioning-and-compatibility/"> pyric </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore/"> pyric / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules/"> pyric / rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox/"> pyric / sandbox </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage/"> pyric / storage </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth/" aria-current="true"> pyric / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-database/"> pyric / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-app/"> pyric-admin / app </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore/"> pyric-admin / firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-auth/"> pyric-admin / auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-database/"> pyric-admin / database </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-storage/"> pyric-admin / storage </a> </li><li> <a href="/__pyric/ui/docs/ui/"> @pyric/ui </a> </li><li> <a href="/__pyric/ui/docs/api-reference/"> API reference </a> </li> </ul> </div> </div> </details> </nav> <main class="doc-main"> <nav class="docs-breadcrumbs" aria-label="Breadcrumb"> <ol> <li>  <a href="/__pyric/ui/docs/pyric-auth/">pyric / auth</a> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <span>Reference</span> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <span aria-current="page">Feature matrix</span> </li> </ol> </nav>  <article class="prose">  <h1 id="feature-matrix-pyricauth-coverage-of-firebaseauth">Feature matrix: <code>pyric/auth</code> coverage of <code>firebase/auth</code></h1>
+<p>Coverage of the modular Web SDK Auth surface when package resolution swaps canonical <code>firebase/auth</code> imports to the Pyric sandbox mirror. Production installs no swap and continues using Firebase.</p>
+<p><strong>Legend:</strong></p>
+<ul>
+<li>✅: exported by <code>pyric/auth</code> with the same name and compatible signature as upstream.</li>
+<li>⚠️: exported, but with a caveat: signature subset, sandbox-only no-op, runtime parity gap, or similar. Read the note.</li>
+<li>❌: not exported. Code that imports it will fail to resolve when the sandbox-preview build aliases <code>firebase/auth</code> → <code>pyric/auth</code>.</li>
+</ul>
+<p>The right column (“Use in agent-generated <code>appSource</code>?”) is the deny-list / allow-list the agent’s system prompt should encode once the playground alias swap lands.</p>
+<hr>
+<h2 id="initialization--lifecycle">Initialization &#x26; lifecycle</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>getAuth(app)</code></td><td>✅</td><td>Also accepts <code>Sandbox</code> overload (sandbox-only)</td><td>Yes</td></tr><tr><td><code>initializeAuth(app, deps?)</code></td><td>❌</td><td>No custom dependency injection on sandbox backend</td><td>No</td></tr><tr><td><code>connectAuthEmulator(auth, url, options?)</code></td><td>✅</td><td>Accepted no-op; the mirror is already a sandbox</td><td>Yes</td></tr><tr><td><code>setPersistence(auth, persistence)</code></td><td>✅</td><td>Records the sandbox session storage mode; rejects unknown marker types</td><td>Yes</td></tr><tr><td><code>inMemoryPersistence</code></td><td>✅</td><td>Marker <code>{type: 'NONE'}</code>; maps to upstream singleton</td><td>Yes</td></tr><tr><td><code>browserSessionPersistence</code></td><td>✅</td><td>Marker <code>{type: 'SESSION'}</code></td><td>Yes</td></tr><tr><td><code>browserLocalPersistence</code></td><td>✅</td><td>Marker <code>{type: 'LOCAL'}</code></td><td>Yes</td></tr><tr><td><code>indexedDBLocalPersistence</code></td><td>❌</td><td>Browser-specific persistence not modelled in sandbox</td><td>No</td></tr><tr><td><code>useDeviceLanguage(auth)</code></td><td>❌</td><td>Localization not modelled</td><td>No</td></tr><tr><td><code>auth.languageCode</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>auth.tenantId</code></td><td>❌</td><td>Multi-tenant not in v0</td><td>No</td></tr></tbody></table></div>
+<h2 id="sign-in--sign-out">Sign-in / sign-out</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>signInAnonymously(auth)</code></td><td>✅</td><td>Sandbox: auto-mints <code>anonymous-N</code> uid (recorded in the user DB; <code>sign_in_provider: 'anonymous'</code>)</td><td>Yes</td></tr><tr><td><code>signInWithEmailAndPassword(auth, email, pw)</code></td><td>✅</td><td>Sandbox: lookup in in-memory DB. Disabled accounts (<code>sandbox.updateUser(…, {disabled: true})</code>) throw <code>auth/user-disabled</code></td><td>Yes</td></tr><tr><td><code>createUserWithEmailAndPassword(auth, email, pw)</code></td><td>✅</td><td>Sandbox: adds to in-memory DB with the <code>password</code> provider recorded</td><td>Yes</td></tr><tr><td><code>signInWithPopup(auth, provider, resolver?)</code></td><td>⚠️</td><td>Delegates to a configured sandbox <code>AuthFlowResolver</code> (per-call arg → <code>sandbox.setAuthFlowResolver</code> → one-shot <code>mockSignInResult</code> → throws <code>auth/argument-error</code>, matching upstream’s no-resolver default). The <code>resolver</code> arg is sandbox-only. Unswapped production imports remain on <code>firebase/auth</code> and its platform resolver. Sandbox sign-in records the provider on the identity (user DB upsert) and throws <code>auth/user-disabled</code> for disabled accounts</td><td>Yes</td></tr><tr><td><code>signInWithCredential(auth, credential)</code></td><td>⚠️</td><td>Mock-or-throw, keyed on <code>credential.providerId</code> (not a popup/resolver flow, opens no UI); throws <code>auth/no-mock-configured</code> with none staged. Records the provider; disabled accounts throw <code>auth/user-disabled</code></td><td>Yes</td></tr><tr><td><code>signInWithRedirect(auth, provider, resolver?)</code></td><td>⚠️</td><td>Resolves inline via the sandbox <code>AuthFlowResolver</code> (no real navigation); signs in + stashes for <code>getRedirectResult</code>. Unswapped production imports remain on <code>firebase/auth</code> (real navigation)</td><td>Yes</td></tr><tr><td><code>getRedirectResult(auth)</code></td><td>⚠️</td><td>Returns-and-clears the pending sandbox redirect credential (one-shot), or <code>null</code>. Unswapped production imports remain on <code>firebase/auth</code></td><td>Yes</td></tr><tr><td><code>signInWithCustomToken(auth, token)</code></td><td>✅</td><td>Accepts JSON <code>{uid, claims?}</code> (or base64url / JWT payload segment). Signature not verified (documented ⚠ accept-path). Mints identity if missing; <code>providerId: null</code></td><td>Yes</td></tr><tr><td><code>signInWithPhoneNumber(auth, phone, verifier)</code></td><td>❌</td><td>Phone auth out of scope v0</td><td>No</td></tr><tr><td><code>signInWithEmailLink(auth, email, link)</code></td><td>⚠️</td><td>Sandbox: consumes outbox / action-code path; see COMPAT email-link rows</td><td>Yes</td></tr><tr><td><code>isSignInWithEmailLink(auth, link)</code></td><td>✅</td><td>Client-side predicate</td><td>Yes</td></tr><tr><td><code>sendSignInLinkToEmail(auth, email, settings)</code></td><td>⚠️</td><td>Sandbox: records mail in auth outbox (<code>sandbox.takeAuthMail</code>) rather than SMTP</td><td>Yes</td></tr><tr><td><code>signOut(auth)</code></td><td>✅</td><td>Sandbox: sets currentUser to null, emits</td><td>Yes</td></tr><tr><td><code>auth.signOut()</code> (method form)</td><td>✅</td><td>Same as the free function; <code>firebase/auth</code>’s <code>Auth</code> exposes both (AUTH-GAP)</td><td>Yes</td></tr></tbody></table></div>
+<h2 id="observers">Observers</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>onAuthStateChanged(auth, observer)</code></td><td>✅</td><td>Function + observer-object forms; immediate fire on subscribe</td><td>Yes</td></tr><tr><td><code>onIdTokenChanged(auth, observer)</code></td><td>✅</td><td>Sandbox: fires on identity change AND on <code>getIdToken(true)</code> forced refresh, matching prod (oracle <code>auth-onidtokenchanged-force-refresh.json</code>). Does not fire <em>spontaneously</em> (sandbox tokens don’t expire).</td><td>Yes</td></tr><tr><td><code>beforeAuthStateChanged(auth, callback, onAbort?)</code></td><td>✅</td><td>Blocking gate: runs before a real sign-in/sign-out transition commits. A throwing callback aborts the transition (<code>auth/login-blocked</code>); <code>currentUser</code> unchanged, <code>onAuthStateChanged</code>/<code>onIdTokenChanged</code> don’t fire. Covers every sign-in path <code>pyric/auth</code> has. Does NOT gate <code>sandbox.setUser</code> (test-only, no prod analog) — see COMPAT.md.</td><td>Yes</td></tr></tbody></table></div>
+<h2 id="providers">Providers</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>GoogleAuthProvider</code></td><td>✅</td><td><code>PROVIDER_ID = 'google.com'</code>; <code>addScope</code> / <code>setCustomParameters</code> no-ops</td><td>Yes</td></tr><tr><td><code>EmailAuthProvider</code></td><td>✅</td><td><code>PROVIDER_ID = 'password'</code></td><td>Yes</td></tr><tr><td><code>FacebookAuthProvider</code></td><td>✅</td><td><code>PROVIDER_ID = 'facebook.com'</code></td><td>Yes</td></tr><tr><td><code>GithubAuthProvider</code></td><td>✅</td><td><code>PROVIDER_ID = 'github.com'</code></td><td>Yes</td></tr><tr><td><code>OAuthProvider</code></td><td>✅</td><td>Constructor takes <code>providerId: string</code></td><td>Yes</td></tr><tr><td><code>TwitterAuthProvider</code></td><td>❌</td><td>Use <code>new OAuthProvider('twitter.com')</code> instead</td><td>No</td></tr><tr><td><code>SAMLAuthProvider</code></td><td>❌</td><td>Enterprise SSO out of scope v0</td><td>No</td></tr><tr><td><code>PhoneAuthProvider</code></td><td>❌</td><td>Phone auth out of scope v0</td><td>No</td></tr><tr><td><code>RecaptchaVerifier</code></td><td>❌</td><td>As above</td><td>No</td></tr></tbody></table></div>
+<h2 id="multi-factor">Multi-factor</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>multiFactor(user)</code></td><td>❌</td><td>MFA out of scope v0</td><td>No</td></tr><tr><td><code>MultiFactorSession</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>getMultiFactorResolver(auth, error)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>PhoneMultiFactorGenerator</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>TotpMultiFactorGenerator</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>TotpSecret</code></td><td>❌</td><td>As above</td><td>No</td></tr></tbody></table></div>
+<h2 id="link--unlink--re-authenticate">Link / unlink / re-authenticate</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>linkWithCredential(user, credential)</code></td><td>❌</td><td>Link flows out of scope v0</td><td>No</td></tr><tr><td><code>linkWithPopup(user, provider)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>linkWithRedirect(user, provider)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>unlink(user, providerId)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>reauthenticateWithCredential(user, credential)</code></td><td>❌</td><td>Re-auth out of scope v0</td><td>No</td></tr><tr><td><code>reauthenticateWithPopup(user, provider)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>reauthenticateWithRedirect(user, provider)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>reauthenticateWithPhoneNumber(user, phone, verifier)</code></td><td>❌</td><td>As above</td><td>No</td></tr></tbody></table></div>
+<h2 id="profile-mutation">Profile mutation</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>updateProfile(user, { displayName, photoURL })</code></td><td>✅</td><td>Mutates held user + stored record; null clears; no extra <code>onAuthStateChanged</code></td><td>Yes</td></tr><tr><td><code>updateEmail(user, newEmail)</code></td><td>✅</td><td>Updates store + held user; next sign-in uses the new email (no <code>requires-recent-login</code>)</td><td>Yes</td></tr><tr><td><code>updatePassword(user, newPassword)</code></td><td>✅</td><td>Stored + verified; old password rejected after change (no <code>requires-recent-login</code>)</td><td>Yes</td></tr><tr><td><code>verifyBeforeUpdateEmail(user, newEmail, settings?)</code></td><td>✅</td><td>Mails a code to the new address via auth outbox; email changes only on redemption (<code>emailVerified: true</code>)</td><td>Yes</td></tr><tr><td><code>deleteUser(user)</code></td><td>✅</td><td>Removes store record and signs out if current; post-delete <code>reload(user)</code> → <code>auth/user-token-expired</code></td><td>Yes</td></tr><tr><td><code>reload(user)</code></td><td>✅</td><td>Re-reads store into held user; missing identity → <code>auth/user-token-expired</code></td><td>Yes</td></tr></tbody></table></div>
+<h2 id="password-reset--email-verification">Password reset &#x26; email verification</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>sendPasswordResetEmail(auth, email, settings?)</code></td><td>❌</td><td>Email flows out of scope v0</td><td>No</td></tr><tr><td><code>confirmPasswordReset(auth, code, newPassword)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>sendEmailVerification(user, settings?)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>applyActionCode(auth, code)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>verifyPasswordResetCode(auth, code)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>checkActionCode(auth, code)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>revokeAccessToken(auth, token)</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>validatePassword(auth, password)</code></td><td>❌</td><td>Password-policy enforcement out of scope v0</td><td>No</td></tr></tbody></table></div>
+<h2 id="user-token--refresh">User token / refresh</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>user.getIdToken(forceRefresh?)</code></td><td>⚠️</td><td>Sandbox: returns stable opaque <code>sandbox-id-token-…</code> string</td><td>Yes</td></tr><tr><td><code>user.getIdTokenResult(forceRefresh?)</code></td><td>⚠️</td><td>Sandbox: claims include <code>customClaims</code> + synthesized <code>sub</code>/<code>aud</code>/<code>iss</code> + reserved <code>firebase.sign_in_provider</code>; <code>signInProvider</code> reflects the session’s provider (<code>'anonymous'</code>/<code>'password'</code>/<code>'google.com'</code>/…). Claims are read live from the user DB, so <code>sandbox.updateUser</code> claims changes land on the next forced refresh (prod parity)</td><td>Yes</td></tr><tr><td><code>user.{photoURL, emailVerified, phoneNumber, providerId, providerData}</code></td><td>✅</td><td>Present on every <code>User</code>; sandbox synthesizes (photoURL/phoneNumber <code>null</code>, emailVerified <code>false</code>, one <code>providerData</code> entry for non-anon); prod passes the real values through (no longer stripped) (AUTH-GAP)</td><td>Yes</td></tr><tr><td><code>user.reload()</code> / <code>user.delete()</code></td><td>⚠️</td><td>Prefer top-level <code>reload(user)</code> / <code>deleteUser(user)</code> (COMPAT ✓); instance methods are not the documented appSource path</td><td>No</td></tr><tr><td><code>user.{metadata, refreshToken, tenantId, toJSON()}</code></td><td>❌</td><td>Not modeled by the sandbox; documented per AUTH-GAP</td><td>No</td></tr></tbody></table></div>
+<h2 id="error-code-constants">Error code constants</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>AuthErrorCodes</code> module</td><td>❌</td><td>Use string literals (<code>'auth/user-not-found'</code> etc.)</td><td>No</td></tr><tr><td><code>FirebaseError</code> instanceof check</td><td>✅</td><td>Sandbox throws a real <code>FirebaseError</code> (from <code>firebase/app</code>) with the prod message wrapper <code>Firebase: &#x3C;msg> (&#x3C;auth/...>).</code>; <code>err instanceof FirebaseError</code> holds (AUTH-GAP)</td><td>Yes</td></tr></tbody></table></div>
+<h2 id="result--wrapper-types">Result &#x26; wrapper types</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>Auth</code></td><td>✅</td><td>Opaque handle with <code>currentUser</code> getter + <code>TARGET_SYMBOL</code> brand</td><td>Yes</td></tr><tr><td><code>User</code></td><td>✅</td><td>Subset: uid, email, displayName, isAnonymous, getIdToken, getIdTokenResult</td><td>Yes</td></tr><tr><td><code>UserCredential</code></td><td>✅</td><td><code>{ user, providerId, operationType }</code></td><td>Yes</td></tr><tr><td><code>AuthCredential</code></td><td>✅</td><td><code>{ providerId, signInMethod }</code> opaque marker</td><td>Yes</td></tr><tr><td><code>IdTokenResult</code></td><td>✅</td><td><code>{ token, claims, expirationTime, issuedAtTime, authTime, signInProvider? }</code>. <code>signInProvider</code> optional at the type level until all <code>User</code> minting is backend-owned (post-B1); the sandbox always populates it</td><td>Yes</td></tr><tr><td><code>Persistence</code></td><td>✅</td><td><code>{ type: 'NONE' | 'SESSION' | 'LOCAL' }</code></td><td>Yes</td></tr><tr><td><code>AuthObserver</code></td><td>✅</td><td>Function or <code>{ next, error, complete }</code> object</td><td>Yes</td></tr><tr><td><code>Unsubscribe</code></td><td>✅</td><td><code>() => void</code></td><td>Yes</td></tr><tr><td><code>AuthProvider</code></td><td>✅</td><td>Union of provider classes</td><td>Yes</td></tr><tr><td><code>ActionCodeSettings</code></td><td>❌</td><td>Action-code flows out of scope v0</td><td>No</td></tr><tr><td><code>ActionCodeInfo</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>UserMetadata</code></td><td>❌</td><td>Not exposed on the v0 User subset</td><td>No</td></tr><tr><td><code>UserInfo</code></td><td>❌</td><td>As above</td><td>No</td></tr><tr><td><code>AdditionalUserInfo</code></td><td>❌</td><td>As above</td><td>No</td></tr></tbody></table></div>
+<h2 id="sandbox-only-additions">Sandbox-only additions</h2>
+<p>These have no <code>firebase/auth</code> equivalent. They live under the <code>sandbox.*</code> namespace and require an <code>Auth</code> handle produced by this mirror.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Symbol</th><th>Status</th><th>Note</th><th>Use in <code>appSource</code>?</th></tr></thead><tbody><tr><td><code>sandbox.setUser(auth, user)</code></td><td>✅</td><td>Sandbox-only test driver. Bypasses the <code>disabled</code> check and does NOT bump <code>lastLoginAt</code> (not a real sign-in)</td><td><strong>No</strong>, never appears in deployed app code</td></tr><tr><td><code>sandbox.mockSignInResult(auth, result)</code></td><td>✅</td><td>Sandbox-only test driver (one-shot resolver tier)</td><td><strong>No</strong>, same</td></tr><tr><td><code>sandbox.seedUsers(auth, users)</code></td><td>✅</td><td>Sandbox-only test driver. Seed records accept optional <code>providerId</code> (default <code>'password'</code>)</td><td><strong>No</strong>, same</td></tr><tr><td><code>sandbox.setAuthFlowResolver(auth, resolver)</code></td><td>✅</td><td>Sandbox-only: installs the popup/redirect resolver (host serves the sign-in UI)</td><td><strong>No</strong>, host wiring, never app code</td></tr><tr><td><code>sandbox.listIdentities(auth)</code></td><td>✅</td><td>Sandbox-only: snapshot of seeded/created identities for an account-picker UI. Returns the REAL provider per identity (<code>providerId</code> primary label + emulator-shaped <code>providerUserInfo</code> array); anonymous users included</td><td><strong>No</strong>, host wiring</td></tr><tr><td><code>sandbox.createSignInCredential(auth, {providerId, uid | spec})</code></td><td>✅</td><td>Sandbox-only: backend-owned credential minting for host-driven flows (account picker pick/add). Tokens route through the backend token cache</td><td><strong>No</strong>, host wiring</td></tr><tr><td><code>sandbox.listUsers(auth)</code></td><td>✅</td><td>Sandbox-only user admin: every DB record as an emulator-REST-shaped <code>AuthUserRecord</code></td><td><strong>No</strong>, host wiring</td></tr><tr><td><code>sandbox.createUser(auth, request)</code></td><td>✅</td><td>Sandbox-only user admin: create WITHOUT signing in (admin semantics)</td><td><strong>No</strong>, host wiring</td></tr><tr><td><code>sandbox.updateUser(auth, uid, update)</code></td><td>✅</td><td>Sandbox-only user admin: displayName/email/password/customClaims/disabled/emailVerified</td><td><strong>No</strong>, host wiring</td></tr><tr><td><code>sandbox.deleteUser(auth, uid)</code></td><td>✅</td><td>Sandbox-only user admin. Active session not terminated (prod parity)</td><td><strong>No</strong>, host wiring</td></tr><tr><td><code>sandbox.clearUsers(auth)</code></td><td>✅</td><td>Sandbox-only user admin: the emulator’s “delete all accounts”</td><td><strong>No</strong>, host wiring</td></tr><tr><td><code>sandbox.subscribeUsers(auth, cb)</code></td><td>✅</td><td>Sandbox-only: coarse user-DB-changed callback (no payload, no initial fire; re-list in the callback)</td><td><strong>No</strong>, host wiring</td></tr><tr><td><code>TARGET_SYMBOL</code></td><td>✅</td><td>Internal brand; agents should not read it</td><td>No</td></tr></tbody></table></div>
+<p>See <a href="../pyric-auth-reference-sandbox-test-driver/">sandbox-test-driver.md</a> for the full driver API.</p>
+<hr>
+<h2 id="adjacent-surfaces-not-in-this-matrix">Adjacent surfaces not in this matrix</h2>
+<ul>
+<li><code>firebase/app</code>: <code>initializeApp</code>, <code>getApp</code>, <code>getApps</code>, <code>FirebaseApp</code>. Used by the playground template; no pyric shim because <code>getAuth(sandbox)</code> skips the app handle entirely.</li>
+</ul>
+<h2 id="how-this-matrix-gets-used">How this matrix gets used</h2>
+<ul>
+<li><strong>The agent’s system prompt</strong> (once the alias swap lands) encodes the “No” column as an explicit deny-list. Agents generating <code>appSource</code> won’t reach for symbols that break sandbox preview.</li>
+<li><strong>The sandbox preview build</strong> (deferred follow-up) aliases <code>firebase/auth</code> → <code>pyric/auth</code>. A ✅ row is guaranteed to work. A ⚠️ row works at the type level but has a sandbox-runtime caveat: acceptable for preview, fix-on-deploy.</li>
+<li><strong>The deploy build</strong> has no aliases. Whatever the agent imports resolves to real <code>firebase/auth</code> in node_modules. Any symbol the upstream SDK exports works; ❌ rows from this matrix only fail in sandbox preview, not in production. The deploy adapter’s metafile gate rejects any prod bundle containing <code>@pyric/*</code>.</li>
+</ul>
+<hr>
+<h2 id="keeping-this-matrix-honest">Keeping this matrix honest</h2>
+<p>Re-run this audit when:</p>
+<ul>
+<li><code>pyric/auth</code> adds or removes exports.</li>
+<li>The upstream <code>firebase/auth</code> modular SDK adds a new symbol category (passkeys / WebAuthn extensions, OAuth2 client_credentials grants, etc.).</li>
+<li>The sandbox backend closes a parity gap: flip the row from ⚠️ to ✅. (Done for <code>onIdTokenChanged</code> forced-refresh and the popup/redirect resolver flow.)</li>
+</ul>  </article> </main> <aside class="doc-toc" aria-label="On this page"> <h2 class="doc-toc-heading">On this page</h2> <ul> <li data-depth="2"> <a href="#initialization--lifecycle">Initialization &amp; lifecycle</a> </li><li data-depth="2"> <a href="#sign-in--sign-out">Sign-in / sign-out</a> </li><li data-depth="2"> <a href="#observers">Observers</a> </li><li data-depth="2"> <a href="#providers">Providers</a> </li><li data-depth="2"> <a href="#multi-factor">Multi-factor</a> </li><li data-depth="2"> <a href="#link--unlink--re-authenticate">Link / unlink / re-authenticate</a> </li><li data-depth="2"> <a href="#profile-mutation">Profile mutation</a> </li><li data-depth="2"> <a href="#password-reset--email-verification">Password reset &amp; email verification</a> </li><li data-depth="2"> <a href="#user-token--refresh">User token / refresh</a> </li><li data-depth="2"> <a href="#error-code-constants">Error code constants</a> </li><li data-depth="2"> <a href="#result--wrapper-types">Result &amp; wrapper types</a> </li><li data-depth="2"> <a href="#sandbox-only-additions">Sandbox-only additions</a> </li><li data-depth="2"> <a href="#adjacent-surfaces-not-in-this-matrix">Adjacent surfaces not in this matrix</a> </li><li data-depth="2"> <a href="#how-this-matrix-gets-used">How this matrix gets used</a> </li><li data-depth="2"> <a href="#keeping-this-matrix-honest">Keeping this matrix honest</a> </li> </ul> </aside> </div> <script type="module">const a=document.querySelector("[data-api-symbol-filter]"),d=[...document.querySelectorAll("[data-api-symbol-group]")],n=document.querySelector("[data-api-symbol-empty]");a?.addEventListener("input",()=>{const t=a.value.trim().toLowerCase();let o=0;for(const i of d){let e=0;i.querySelectorAll("[data-api-symbol]").forEach(l=>{const r=!t||(l.dataset.apiSymbol??"").includes(t);l.hidden=!r,r&&e++}),i.hidden=e===0,o+=e}n&&(n.hidden=o>0)});</script> <script type="module">const s=new Map;document.querySelectorAll('.doc-toc a[href^="#"]').forEach(t=>s.set(decodeURIComponent(t.hash.slice(1)),t));if(s.size>0){const t=new Set,n=()=>{let o=null;for(const e of s.keys())if(t.has(e)){o=e;break}s.forEach((e,c)=>e.classList.toggle("active",c===o))},r=new IntersectionObserver(o=>{for(const e of o)e.isIntersecting?t.add(e.target.id):t.delete(e.target.id);n()},{rootMargin:"-72px 0px -60% 0px"});s.forEach((o,e)=>{const c=document.getElementById(e);c&&r.observe(c)})}</script> <script type="module">document.querySelector('.studio__nav [aria-current="page"]')?.scrollIntoView({block:"nearest",inline:"center"});</script> </body> </html>