@pyric/ui 0.1.0-alpha.10

package/dist/traffic/hooks/useTrafficMetrics.js

@@ -0,0 +1,156 @@
+import { useMemo } from 'react';
+/**
+ * Billable-metrics + rules-metrics aggregation (Traffic tab: "Billable
+ * metrics" and "Rules"). Mirrors the Firebase Console
+ * Usage tab's shape (per-series totals + a bucketed time series), built
+ * on top of the same half-open `[window.start, window.end)` bucketing
+ * kernel {@link bucketTraffic} already uses.
+ *
+ * ── Billable mapping (documented; verified against the sandbox source) ──
+ *   reads    = get + list
+ *   writes   = create + update + set
+ *   deletes  = delete + remove
+ *
+ * A `list` event does NOT carry the number of documents the query
+ * returned — `local-environment.ts` emits ONE `allow` event per query
+ * before it computes/constrains the doc set, and the returned doc array
+ * never rides back onto the event. Real Firestore bills a list as one
+ * read PER RETURNED DOCUMENT; this stream can only honestly count list
+ * OPERATIONS, not documents. So this series is "read ops", not "billable
+ * reads" — an op-count proxy, not a byte-accurate bill. See the gap note
+ * in the Traffic feature's tracking issue.
+ *
+ * An op only bills if it actually ran against data: a `deny`/`error`/
+ * `unsupported`/`not-applicable` result means nothing was read or
+ * written, so those never count toward billable totals. An `admin`
+ * (rules-bypassed) op DOES run — admin reads/writes still bill in real
+ * Firestore — so admin ops count toward billable totals even though they
+ * never touch the rules-metrics series below.
+ *
+ * ── Rules metrics ──
+ * Allows / denies / errors are rules-ENGINE verdicts: how many times the
+ * rules engine actually ran and what it decided. An admin (bypassed) op
+ * never reaches rules, so it must never inflate "allows" — that would
+ * misrepresent the rules engine as having evaluated something it never
+ * saw. `unsupported` / `not-applicable` results aren't rules verdicts
+ * either (the simulator declined to evaluate) and are excluded too.
+ *
+ * ── Admin classification ──
+ * The base `TrafficEvent` carries only `origin` (no `detail` field — the
+ * sandbox-layer `RequestEvent.detail.admin` doesn't survive the
+ * `operation`-kind adapter path, and rides untyped through the
+ * `request`-kind cast). `origin === 'admin'` is the one signal declared
+ * on the public type, so it's the default `isAdmin` predicate here.
+ * Firestore's admin-lens ops don't currently set `origin: 'admin'`
+ * (RTDB's do) — callers that can see the richer Studio provenance
+ * (`authLens.mode === 'admin'`, as `verdict.ts#verdictFor` already
+ * checks) should pass their own `isAdmin` predicate to close that gap.
+ */
+const READ_METHODS = new Set(['get', 'list']);
+const WRITE_METHODS = new Set(['create', 'update', 'set']);
+const DELETE_METHODS = new Set(['delete', 'remove']);
+export const BILLABLE_SERIES_DEFS = [
+    { key: 'reads', label: 'Read ops' },
+    { key: 'writes', label: 'Writes' },
+    { key: 'deletes', label: 'Deletes' },
+];
+export const RULES_SERIES_DEFS = [
+    { key: 'allows', label: 'Allows' },
+    { key: 'denies', label: 'Denies' },
+    { key: 'errors', label: 'Errors' },
+];
+/** Default admin predicate: the one signal the public `TrafficEvent`
+ *  type declares. See the module doc for the known Firestore gap. */
+export function isAdminEvent(event) {
+    return event.origin === 'admin';
+}
+/** Classify a billable op, or `null` if it isn't one / never ran. */
+export function classifyBillable(event, isAdmin = isAdminEvent) {
+    const executed = event.result === 'allow' || isAdmin(event);
+    if (!executed)
+        return null;
+    if (READ_METHODS.has(event.method))
+        return 'reads';
+    if (WRITE_METHODS.has(event.method))
+        return 'writes';
+    if (DELETE_METHODS.has(event.method))
+        return 'deletes';
+    return null;
+}
+/** Classify a rules-engine verdict, or `null` if it isn't one (bypassed,
+ *  unsupported, or not-applicable). */
+export function classifyRules(event, isAdmin = isAdminEvent) {
+    if (isAdmin(event))
+        return null;
+    if (event.result === 'allow')
+        return 'allows';
+    if (event.result === 'deny')
+        return 'denies';
+    if (event.result === 'error')
+        return 'errors';
+    return null;
+}
+const EMPTY = (seriesDefs) => ({
+    points: [],
+    series: seriesDefs.map((d) => ({ key: d.key, label: d.label, values: [], total: 0 })),
+    maxValue: 0,
+});
+/** The shared bucketing kernel behind both metric hooks below. */
+function bucketMetrics(events, window, bucketCount, seriesDefs, classify) {
+    const span = window.end - window.start;
+    if (bucketCount <= 0 || span <= 0)
+        return EMPTY(seriesDefs);
+    const width = span / bucketCount;
+    const valuesByKey = new Map(seriesDefs.map((d) => [d.key, new Array(bucketCount).fill(0)]));
+    const totals = new Map(seriesDefs.map((d) => [d.key, 0]));
+    for (const event of events) {
+        const at = event.at;
+        if (at < window.start || at >= window.end)
+            continue;
+        const key = classify(event);
+        if (key == null)
+            continue;
+        let i = Math.floor((at - window.start) / width);
+        if (i >= bucketCount)
+            i = bucketCount - 1;
+        const bucketValues = valuesByKey.get(key);
+        bucketValues[i]++;
+        totals.set(key, (totals.get(key) ?? 0) + 1);
+    }
+    let maxValue = 0;
+    for (const values of valuesByKey.values()) {
+        for (const v of values)
+            if (v > maxValue)
+                maxValue = v;
+    }
+    const points = new Array(bucketCount);
+    for (let i = 0; i < bucketCount; i++) {
+        points[i] = { index: i, start: window.start + i * width, end: window.start + (i + 1) * width };
+    }
+    const series = seriesDefs.map((d) => ({
+        key: d.key,
+        label: d.label,
+        values: valuesByKey.get(d.key),
+        total: totals.get(d.key) ?? 0,
+    }));
+    return { points, series, maxValue };
+}
+/** Pure kernel behind {@link useBillableMetrics} — usable outside React. */
+export function bucketBillableMetrics(events, window, bucketCount = 24, isAdmin = isAdminEvent) {
+    return bucketMetrics(events, window, bucketCount, BILLABLE_SERIES_DEFS, (e) => classifyBillable(e, isAdmin));
+}
+/** Pure kernel behind {@link useRulesMetrics} — usable outside React. */
+export function bucketRulesMetrics(events, window, bucketCount = 24, isAdmin = isAdminEvent) {
+    return bucketMetrics(events, window, bucketCount, RULES_SERIES_DEFS, (e) => classifyRules(e, isAdmin));
+}
+/** Reads / writes / deletes, bucketed over `window`. See the module doc
+ *  for the billable mapping + the "read ops, not billable reads" caveat. */
+export function useBillableMetrics({ events, window, bucketCount = 24, isAdmin, }) {
+    return useMemo(() => bucketBillableMetrics(events, window, bucketCount, isAdmin), [events, window.start, window.end, bucketCount, isAdmin]);
+}
+/** Allows / denies / errors, bucketed over `window`. Excludes
+ *  rules-bypassed (admin) ops — see the module doc. */
+export function useRulesMetrics({ events, window, bucketCount = 24, isAdmin, }) {
+    return useMemo(() => bucketRulesMetrics(events, window, bucketCount, isAdmin), [events, window.start, window.end, bucketCount, isAdmin]);
+}
+//# sourceMappingURL=useTrafficMetrics.js.map

package/dist/traffic/hooks/useTrafficMetrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTrafficMetrics.js","sourceRoot":"","sources":["../../../src/traffic/hooks/useTrafficMetrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAKrD,MAAM,CAAC,MAAM,oBAAoB,GAA6D;IAC5F,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE;IACnC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;IAClC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;CACrC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAA0D;IACtF,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;IAClC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;IAClC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;CACnC,CAAC;AAEF;qEACqE;AACrE,MAAM,UAAU,YAAY,CAAC,KAAmC;IAC9D,OAAO,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC;AAClC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAC9B,KAAyD,EACzD,UAA4D,YAAY;IAExE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IACnD,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;uCACuC;AACvC,MAAM,UAAU,aAAa,CAC3B,KAA8C,EAC9C,UAA4D,YAAY;IAExE,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AA2BD,MAAM,KAAK,GAAG,CACZ,UAAyD,EACnC,EAAE,CAAC,CAAC;IAC1B,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACrF,QAAQ,EAAE,CAAC;CACZ,CAAC,CAAC;AAEH,kEAAkE;AAClE,SAAS,aAAa,CACpB,MAA+B,EAC/B,MAAkB,EAClB,WAAmB,EACnB,UAAoD,EACpD,QAA2C;IAE3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;IACvC,IAAI,WAAW,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,KAAK,GAAG,IAAI,GAAG,WAAW,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAS,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAY,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAErE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QACpB,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,IAAI,MAAM,CAAC,GAAG;YAAE,SAAS;QACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,GAAG,IAAI,IAAI;YAAE,SAAS;QAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,WAAW;YAAE,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QAC3C,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,IAAI,CAAC,GAAG,QAAQ;gBAAE,QAAQ,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAkB,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC;IACjG,CAAC;IAED,MAAM,MAAM,GAAmB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAE;QAC/B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;KAC9B,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CACnC,MAA+B,EAC/B,MAAkB,EAClB,WAAW,GAAG,EAAE,EAChB,UAA4D,YAAY;IAExE,OAAO,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC5E,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAChC,MAA+B,EAC/B,MAAkB,EAClB,WAAW,GAAG,EAAE,EAChB,UAA4D,YAAY;IAExE,OAAO,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CACzE,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAC1B,CAAC;AACJ,CAAC;AAgBD;4EAC4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,EACjC,MAAM,EACN,MAAM,EACN,WAAW,GAAG,EAAE,EAChB,OAAO,GACkB;IACzB,OAAO,OAAO,CACZ,GAAG,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EACjE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CACzD,CAAC;AACJ,CAAC;AAED;uDACuD;AACvD,MAAM,UAAU,eAAe,CAAC,EAC9B,MAAM,EACN,MAAM,EACN,WAAW,GAAG,EAAE,EAChB,OAAO,GACkB;IACzB,OAAO,OAAO,CACZ,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAC9D,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CACzD,CAAC;AACJ,CAAC"}

package/dist/traffic/hooks/useTrafficMonitor.d.ts

@@ -0,0 +1,56 @@
+import type { TrafficEvent, TrafficSource } from '../types.js';
+export interface UseTrafficMonitorOptions {
+    /**
+     * The subscription function — `sandbox.onRequest` satisfies this
+     * directly. Pass a stable reference; the hook re-subscribes on
+     * identity change.
+     */
+    source: TrafficSource;
+    /**
+     * Ring-buffer cap. Once exceeded, the oldest events are dropped.
+     * Default 5000 (~3 MB worst case — see the traffic-monitor probe
+     * findings).
+     */
+    bufferSize?: number;
+    /** Whether the buffer starts paused. Default false. */
+    paused?: boolean;
+    /**
+     * Runs per event before buffering — return a (possibly trimmed)
+     * event. Lets the consumer shrink oversized payloads without the
+     * library knowing payload semantics. Identity is read fresh on
+     * each event, so it need not be memoized.
+     */
+    transform?: (event: TrafficEvent) => TrafficEvent;
+}
+export interface TrafficCounts {
+    /** Events currently in the buffer. */
+    total: number;
+    /** Of those, how many were denied. */
+    denied: number;
+    /** Of those, how many are listener re-evals. */
+    listener: number;
+}
+export interface UseTrafficMonitorResult {
+    /** The buffered events, oldest first. */
+    events: TrafficEvent[];
+    counts: TrafficCounts;
+    isPaused: boolean;
+    /** Stop appending — incoming events are dropped while paused. */
+    pause: () => void;
+    /** Resume appending. */
+    resume: () => void;
+    /** Empty the buffer. */
+    clear: () => void;
+}
+/**
+ * Buffers a traffic stream into a capped ring buffer with
+ * pause/resume/clear. Decoupled from `pyric/sandbox` — `source` is
+ * just a `(cb) => unsubscribe` function.
+ *
+ * Pause is consumer-side: while paused, the subscription stays
+ * attached but incoming events are dropped (not queued). This
+ * matches the probe decision — a `load-test`-shaped session can emit
+ * 100k+ events, so queueing-while-paused would defeat the point.
+ */
+export declare function useTrafficMonitor({ source, bufferSize, paused, transform, }: UseTrafficMonitorOptions): UseTrafficMonitorResult;
+//# sourceMappingURL=useTrafficMonitor.d.ts.map

package/dist/traffic/hooks/useTrafficMonitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTrafficMonitor.d.ts","sourceRoot":"","sources":["../../../src/traffic/hooks/useTrafficMonitor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,MAAM,EAAE,aAAa,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,YAAY,CAAC;CACnD;AAED,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,yCAAyC;IACzC,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,iEAAiE;IACjE,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,wBAAwB;IACxB,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,wBAAwB;IACxB,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,MAAM,EACN,UAAiB,EACjB,MAAc,EACd,SAAS,GACV,EAAE,wBAAwB,GAAG,uBAAuB,CA8CpD"}

package/dist/traffic/hooks/useTrafficMonitor.js

@@ -0,0 +1,58 @@
+import { useEffect, useMemo, useRef, useState } from 'react';
+/**
+ * Buffers a traffic stream into a capped ring buffer with
+ * pause/resume/clear. Decoupled from `pyric/sandbox` — `source` is
+ * just a `(cb) => unsubscribe` function.
+ *
+ * Pause is consumer-side: while paused, the subscription stays
+ * attached but incoming events are dropped (not queued). This
+ * matches the probe decision — a `load-test`-shaped session can emit
+ * 100k+ events, so queueing-while-paused would defeat the point.
+ */
+export function useTrafficMonitor({ source, bufferSize = 5000, paused = false, transform, }) {
+    const [events, setEvents] = useState([]);
+    const [isPaused, setIsPaused] = useState(paused);
+    // The subscription callback closes over these once. Refs keep it
+    // reading the live values without forcing a re-subscribe.
+    const pausedRef = useRef(isPaused);
+    pausedRef.current = isPaused;
+    const bufferSizeRef = useRef(bufferSize);
+    bufferSizeRef.current = bufferSize;
+    const transformRef = useRef(transform);
+    transformRef.current = transform;
+    useEffect(() => {
+        const unsubscribe = source((event) => {
+            if (pausedRef.current)
+                return;
+            const shaped = transformRef.current
+                ? transformRef.current(event)
+                : event;
+            setEvents((prev) => {
+                const next = prev.length >= bufferSizeRef.current ? prev.slice(1) : prev.slice();
+                next.push(shaped);
+                return next;
+            });
+        });
+        return unsubscribe;
+    }, [source]);
+    const counts = useMemo(() => {
+        let denied = 0;
+        let listener = 0;
+        for (const e of events) {
+            if (e.result === 'deny')
+                denied++;
+            if (e.origin === 'listener')
+                listener++;
+        }
+        return { total: events.length, denied, listener };
+    }, [events]);
+    return {
+        events,
+        counts,
+        isPaused,
+        pause: () => setIsPaused(true),
+        resume: () => setIsPaused(false),
+        clear: () => setEvents([]),
+    };
+}
+//# sourceMappingURL=useTrafficMonitor.js.map

package/dist/traffic/hooks/useTrafficMonitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTrafficMonitor.js","sourceRoot":"","sources":["../../../src/traffic/hooks/useTrafficMonitor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAiD7D;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,MAAM,EACN,UAAU,GAAG,IAAI,EACjB,MAAM,GAAG,KAAK,EACd,SAAS,GACgB;IACzB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAiB,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEjD,iEAAiE;IACjE,0DAA0D;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,SAAS,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC7B,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,aAAa,CAAC,OAAO,GAAG,UAAU,CAAC;IACnC,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,YAAY,CAAC,OAAO,GAAG,SAAS,CAAC;IAEjC,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACnC,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO;YAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO;gBACjC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC7B,CAAC,CAAC,KAAK,CAAC;YACV,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;gBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACjF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,MAAM,MAAM,GAAG,OAAO,CAAgB,GAAG,EAAE;QACzC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpD,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,OAAO;QACL,MAAM;QACN,MAAM;QACN,QAAQ;QACR,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC;QAChC,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;KAC3B,CAAC;AACJ,CAAC"}

package/dist/traffic/hooks/useTrafficStats.d.ts

@@ -0,0 +1,32 @@
+import type { TrafficEvent } from '../types.js';
+export interface TrafficStatBucket {
+    key: string;
+    count: number;
+}
+export interface TrafficStatsSummary {
+    total: number;
+    allows: number;
+    denies: number;
+    unsupported: number;
+    /** `denies / total` — 0 for an empty buffer. */
+    denyRate: number;
+    /** Counts by method, sorted descending. */
+    byMethod: TrafficStatBucket[];
+    /** Counts by origin, sorted descending. */
+    byOrigin: TrafficStatBucket[];
+    /** Counts by path, sorted descending, capped at `topPaths`. */
+    byPath: TrafficStatBucket[];
+}
+export interface UseTrafficStatsOptions {
+    events: TrafficEvent[];
+    /** Cap on `byPath` entries — paths are unbounded. Default 10. */
+    topPaths?: number;
+}
+/**
+ * Aggregations over a traffic buffer: totals, deny rate, and counts
+ * broken down by method, origin, and path. Pure derivation — feed it
+ * the filtered or full event list depending on what the panel
+ * should reflect.
+ */
+export declare function useTrafficStats({ events, topPaths, }: UseTrafficStatsOptions): TrafficStatsSummary;
+//# sourceMappingURL=useTrafficStats.d.ts.map

package/dist/traffic/hooks/useTrafficStats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTrafficStats.d.ts","sourceRoot":"","sources":["../../../src/traffic/hooks/useTrafficStats.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,2CAA2C;IAC3C,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,+DAA+D;IAC/D,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAkBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,QAAa,GACd,EAAE,sBAAsB,GAAG,mBAAmB,CAsB9C"}

package/dist/traffic/hooks/useTrafficStats.js

@@ -0,0 +1,45 @@
+import { useMemo } from 'react';
+function buckets(events, pick, limit) {
+    const counts = new Map();
+    for (const event of events) {
+        const key = pick(event);
+        counts.set(key, (counts.get(key) ?? 0) + 1);
+    }
+    const sorted = [...counts.entries()]
+        .map(([key, count]) => ({ key, count }))
+        .sort((a, b) => b.count - a.count || a.key.localeCompare(b.key));
+    return limit === undefined ? sorted : sorted.slice(0, limit);
+}
+/**
+ * Aggregations over a traffic buffer: totals, deny rate, and counts
+ * broken down by method, origin, and path. Pure derivation — feed it
+ * the filtered or full event list depending on what the panel
+ * should reflect.
+ */
+export function useTrafficStats({ events, topPaths = 10, }) {
+    return useMemo(() => {
+        let allows = 0;
+        let denies = 0;
+        let unsupported = 0;
+        for (const event of events) {
+            if (event.result === 'allow')
+                allows++;
+            else if (event.result === 'deny')
+                denies++;
+            else
+                unsupported++;
+        }
+        const total = events.length;
+        return {
+            total,
+            allows,
+            denies,
+            unsupported,
+            denyRate: total === 0 ? 0 : denies / total,
+            byMethod: buckets(events, (e) => e.method),
+            byOrigin: buckets(events, (e) => e.origin),
+            byPath: buckets(events, (e) => e.path, topPaths),
+        };
+    }, [events, topPaths]);
+}
+//# sourceMappingURL=useTrafficStats.js.map

package/dist/traffic/hooks/useTrafficStats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTrafficStats.js","sourceRoot":"","sources":["../../../src/traffic/hooks/useTrafficStats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AA6BhC,SAAS,OAAO,CACd,MAAsB,EACtB,IAAqC,EACrC,KAAc;IAEd,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;SACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,MAAM,EACN,QAAQ,GAAG,EAAE,GACU;IACvB,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,EAAE,CAAC;iBAClC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,EAAE,CAAC;;gBACtC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,OAAO;YACL,KAAK;YACL,MAAM;YACN,MAAM;YACN,WAAW;YACX,QAAQ,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK;YAC1C,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1C,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1C,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC;SACjD,CAAC;IACJ,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AACzB,CAAC"}

package/dist/traffic/index.d.ts

@@ -0,0 +1,4 @@
+export * from './hooks/index.js';
+export * from './components/index.js';
+export type { TrafficEvent, TrafficSource, TrafficMethod, TrafficResult, TrafficOrigin, TrafficAuthState, TrafficResourceState, TrafficMatchedRule, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/traffic/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/traffic/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AAEtC,YAAY,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,YAAY,CAAC"}

package/dist/traffic/index.js

@@ -0,0 +1,3 @@
+export * from './hooks/index.js';
+export * from './components/index.js';
+//# sourceMappingURL=index.js.map

package/dist/traffic/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/traffic/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC"}

package/dist/traffic/types.d.ts

@@ -0,0 +1,72 @@
+/**
+ * The traffic domain types. `TrafficEvent` is structurally identical
+ * to `pyric/sandbox`'s `RequestEvent` (locked in
+ * the design rationale) — but the library defines its
+ * own copy so it never imports `pyric/sandbox`. `sandbox.onRequest`
+ * is assignable as a `TrafficSource` with zero adapter code; a prod
+ * log feed can satisfy the same shape.
+ */
+export type TrafficMethod = 'get' | 'list' | 'create' | 'update' | 'set' | 'delete' | 'remove' | 'push' | 'listen' | 'transaction' | (string & {});
+export type TrafficResult = 'allow' | 'deny' | 'unsupported' | 'error' | 'not-applicable';
+export type TrafficOrigin = 'user' | 'listener' | 'transaction' | 'batch' | 'admin' | 'system';
+export interface TrafficAuthState {
+    uid: string;
+    token?: Record<string, unknown>;
+}
+export interface TrafficResourceState {
+    data: unknown;
+    exists: boolean;
+}
+export interface TrafficMatchedRule {
+    ruleIndex: number;
+    operations: string[];
+}
+export interface TrafficEvent {
+    /** Unique per emission. */
+    id: string;
+    /** Source event kind. Firestore request events omit this in older adapters. */
+    kind?: 'request' | 'operation';
+    /** Service that emitted the event. Omitted means Firestore. */
+    service?: 'firestore' | 'auth' | 'storage' | 'rtdb' | (string & {});
+    /** `Date.now()` at op start. */
+    at: number;
+    /** Simulator eval duration in ms. De-featured in the UI (local
+     *  simulator) — present for the detail panel only. */
+    evalMs?: number;
+    /** Canonical service-operation duration. */
+    durationMs?: number;
+    method: TrafficMethod;
+    path: string;
+    auth: TrafficAuthState | null;
+    result: TrafficResult;
+    /** Simulator debug messages — `Rule #N (op) → ALLOW` format. */
+    reasons: string[];
+    /** Proposed write payload — absent on reads + delete. */
+    request?: {
+        data?: unknown;
+        resourceData?: unknown;
+        query?: unknown;
+    };
+    /** Existing doc state before the write (or the read target). */
+    resourceBefore?: TrafficResourceState;
+    /** Projected doc state after the write — absent on reads. */
+    resourceAfter?: TrafficResourceState;
+    /** Parsed from the matched `Rule #N` debug line — absent if none. */
+    matchedRule?: TrafficMatchedRule;
+    origin: TrafficOrigin;
+    /** Shared across ops in one batch or transaction. */
+    groupId?: string;
+    groupKind?: 'batch' | 'transaction' | (string & {});
+    /** For listener re-evals — the originating user op. */
+    triggeredBy?: {
+        method: string;
+        path?: string;
+    };
+}
+/**
+ * A subscription function: register a callback, get back an
+ * unsubscribe. `pyric/sandbox`'s `Sandbox.onRequest` matches this
+ * signature exactly.
+ */
+export type TrafficSource = (cb: (event: TrafficEvent) => void) => () => void;
+//# sourceMappingURL=types.d.ts.map

package/dist/traffic/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/traffic/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,aAAa,GACrB,KAAK,GACL,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,aAAa,GACb,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,OAAO,GAAG,gBAAgB,CAAC;AAE1F,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/F,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,2BAA2B;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,+EAA+E;IAC/E,IAAI,CAAC,EAAE,SAAS,GAAG,WAAW,CAAC;IAC/B,+DAA+D;IAC/D,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACpE,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;IACX;0DACsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,gEAAgE;IAChE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yDAAyD;IACzD,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACtE,gEAAgE;IAChE,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,6DAA6D;IAC7D,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,qEAAqE;IACrE,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,MAAM,EAAE,aAAa,CAAC;IACtB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,GAAG,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACpD,uDAAuD;IACvD,WAAW,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,EAAE,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,KAC9B,MAAM,IAAI,CAAC"}

package/dist/traffic/types.js

@@ -0,0 +1,10 @@
+/**
+ * The traffic domain types. `TrafficEvent` is structurally identical
+ * to `pyric/sandbox`'s `RequestEvent` (locked in
+ * the design rationale) — but the library defines its
+ * own copy so it never imports `pyric/sandbox`. `sandbox.onRequest`
+ * is assignable as a `TrafficSource` with zero adapter code; a prod
+ * log feed can satisfy the same shape.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/traffic/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/traffic/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/package.json

@@ -0,0 +1,127 @@
+{
+  "name": "@pyric/ui",
+  "version": "0.1.0-alpha.10",
+  "license": "Apache-2.0",
+  "homepage": "https://pyric.dev",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/davideast/pyric.git",
+    "directory": "packages/ui"
+  },
+  "bugs": {
+    "url": "https://github.com/davideast/pyric/issues"
+  },
+  "description": "Headless React data-admin components and hooks for Firebase apps built on pyric. Same components work in sandbox (pyric/firestore against pyric/sandbox) and production (firebase/firestore against real Firebase) via a single Firestore handle prop. Ships zero visual styling — consumers bring their own design system via className + data-* attributes.",
+  "type": "module",
+  "exports": {
+    "./auth": {
+      "types": "./dist/auth/index.d.ts",
+      "import": "./dist/auth/index.js"
+    },
+    "./auth/hooks": {
+      "types": "./dist/auth/hooks/index.d.ts",
+      "import": "./dist/auth/hooks/index.js"
+    },
+    "./primitives": {
+      "types": "./dist/primitives/index.d.ts",
+      "import": "./dist/primitives/index.js"
+    },
+    "./firestore": {
+      "types": "./dist/firestore/index.d.ts",
+      "import": "./dist/firestore/index.js"
+    },
+    "./firestore/hooks": {
+      "types": "./dist/firestore/hooks/index.d.ts",
+      "import": "./dist/firestore/hooks/index.js"
+    },
+    "./rtdb": {
+      "types": "./dist/rtdb/index.d.ts",
+      "import": "./dist/rtdb/index.js"
+    },
+    "./storage": {
+      "types": "./dist/storage/index.d.ts",
+      "import": "./dist/storage/index.js"
+    },
+    "./storage/hooks": {
+      "types": "./dist/storage/hooks/index.d.ts",
+      "import": "./dist/storage/hooks/index.js"
+    },
+    "./traffic": {
+      "types": "./dist/traffic/index.d.ts",
+      "import": "./dist/traffic/index.js"
+    },
+    "./traffic/hooks": {
+      "types": "./dist/traffic/hooks/index.d.ts",
+      "import": "./dist/traffic/hooks/index.js"
+    },
+    "./events": {
+      "types": "./dist/events/index.d.ts",
+      "import": "./dist/events/index.js"
+    },
+    "./events/hooks": {
+      "types": "./dist/events/hooks/index.d.ts",
+      "import": "./dist/events/hooks/index.js"
+    },
+    "./agents": {
+      "types": "./dist/agents/index.d.ts",
+      "import": "./dist/agents/index.js"
+    },
+    "./rules": {
+      "types": "./dist/rules/index.d.ts",
+      "import": "./dist/rules/index.js"
+    },
+    "./rules/hooks": {
+      "types": "./dist/rules/hooks/index.d.ts",
+      "import": "./dist/rules/hooks/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "bun run test:no-dom && bun run test:dom",
+    "test:no-dom": "bun test test/auth/claims test/auth/controller test/auth/hooks test/firestore/hooks test/firestore/inference test/firestore/reducers test/firestore/validation test/firestore/import test/storage/hooks test/storage/logic test/traffic/hooks test/rules/hooks test/rules/logic test/events/hooks test/rtdb/logic test/rtdb/reducers",
+    "test:dom": "bun test test/auth/components test/firestore/components test/primitives test/storage/components test/traffic/components test/rules/components test/events/components test/agents test/rtdb/components",
+    "typecheck": "bun x tsc -p tsconfig.json --noEmit"
+  },
+  "peerDependencies": {
+    "@inbrowser/agent": "0.4.2",
+    "react": ">=19",
+    "react-dom": ">=19",
+    "firebase": ">=12",
+    "pyric": "^0.1.0-alpha.10"
+  },
+  "peerDependenciesMeta": {
+    "@inbrowser/agent": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@testing-library/react": "^16.1.0",
+    "@types/bun": "latest",
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
+    "@types/react-test-renderer": "^19.1.0",
+    "fake-indexeddb": "^6.0.0",
+    "firebase": "^12.12.0",
+    "jsdom": "^29.1.1",
+    "pyric": "^0.1.0-alpha.10",
+    "pyric-admin": "^0.1.0-alpha.10",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "react-test-renderer": "^19.2.6",
+    "typescript": "^5.7.0"
+  },
+  "dependencies": {
+    "@tanstack/react-virtual": "3.13.24"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}