@pyric/ui 0.1.0-alpha.7

package/dist/rules/types.d.ts

@@ -0,0 +1,75 @@
+import type { RuleEvaluation, PathResolutionTrace, PathResolutionEntry, ExprTraceEntry, FirestoreMethod } from 'pyric/rules';
+export type { RuleEvaluation, PathResolutionTrace, PathResolutionEntry, ExprTraceEntry, FirestoreMethod, };
+/**
+ * The lens a request was issued under, mirroring the Studio's identity
+ * model:
+ *   - `'admin'`        — the admin handle (bypasses rules in production,
+ *                        shown here for provenance only)
+ *   - `{ as: uid }`    — acting as a specific signed-in user
+ *   - `'app-session'`  — the ambient app session (whoever is signed in
+ *                        in the running preview)
+ */
+export type DenialLens = 'admin' | {
+    as: string;
+} | 'app-session';
+/**
+ * One denied Firestore request, enriched with the simulator trace.
+ *
+ * The live denial *event* carries only `debugMessages`; the rich trace
+ * (`evaluation` / `pathResolution`) is produced by re-running the
+ * simulator (tracing always on) against the captured request. Build one
+ * with `useDenialTrace(request, rulesSource)` then spread the captured
+ * request fields alongside.
+ */
+export interface Denial {
+    method: FirestoreMethod;
+    /** Resource path, e.g. `notes/3agHoZHZ`. */
+    path: string;
+    /** `request.auth` — `null` for an unauthenticated request. */
+    auth: {
+        uid: string;
+        token: Record<string, unknown>;
+    } | null;
+    /** Identity lens the request was issued under. */
+    lens?: DenialLens;
+    /** `request.resource.data` — present for writes. */
+    requestData?: Record<string, unknown>;
+    /** `resource.data` — the existing document, `null` when absent. */
+    resourceData?: Record<string, unknown> | null;
+    /** Capture time (epoch ms). */
+    at: number;
+    /** `firestore.rules` source the request was evaluated against. */
+    rulesSource: string;
+    decision: 'DENY';
+    /**
+     * Per allow-rule evaluation, in source order. Each entry carries the
+     * `line`, `verdict`, `conditionText`, and `expressionTrace`.
+     */
+    evaluation: RuleEvaluation[];
+    /**
+     * Path-resolution attempts — present for no-match (default-deny)
+     * denials, where no `allow` rule was evaluated because no `match`
+     * block covered the path.
+     */
+    pathResolution?: PathResolutionTrace;
+}
+/**
+ * Per-line verdict for the rule-source view. `deny` is the deciding
+ * allow line; `skip` is an allow line whose operations don't include
+ * the request method ("not checked"); `allow` is any other allow line.
+ * Non-allow lines (match/braces/comments) get no verdict.
+ */
+export type LineVerdict = 'deny' | 'allow' | 'skip';
+export interface DenialInspectorProps {
+    denial: Denial;
+    /** Sibling denials produced by the same rule. */
+    cluster?: Denial[];
+    /** Re-run the request under `{ mode: 'as', uid }`. */
+    onRerunAs?(uid: string): void;
+    /** Re-run against an edited ruleset (a branch). */
+    onTestEditedRule?(): void;
+    /** A cluster sibling was selected. */
+    onSelectCluster?(d: Denial): void;
+    className?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/rules/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/rules/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,eAAe,EAChB,MAAM,aAAa,CAAC;AAIrB,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,eAAe,GAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,aAAa,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,WAAW,MAAM;IAErB,MAAM,EAAE,eAAe,CAAC;IACxB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7D,kDAAkD;IAClD,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IAGX,kEAAkE;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;CACtC;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,sDAAsD;IACtD,SAAS,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mDAAmD;IACnD,gBAAgB,CAAC,IAAI,IAAI,CAAC;IAC1B,sCAAsC;IACtC,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/rules/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/rules/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/rules/types.ts"],"names":[],"mappings":""}

package/dist/storage/collisionRename.d.ts

@@ -0,0 +1,73 @@
+/**
+ * OS-copy collision renaming for uploads/drops — pure logic, no React.
+ *
+ * THE RULE (mirrors macOS Finder's "keep both" counter semantics, with
+ * the Windows-style ` (n)` spelling the spec pins):
+ *
+ * 1. Split the name into `stem + ext`. The extension is the suffix from
+ *    the LAST dot, only when that dot is neither the first character nor
+ *    the last: `photo.png` → `photo` + `.png`; `archive.tar.gz` →
+ *    `archive.tar` + `.gz`; dotfiles (`.gitignore`) and trailing-dot
+ *    names (`notes.`) have NO extension — the whole name is the stem;
+ *    extensionless names (`Makefile`) likewise.
+ * 2. If the stem already ends in a ` (n)` counter (single space, plain
+ *    decimal integer), the counter is INCREMENTED, not nested:
+ *    `photo (1).png` colliding becomes `photo (2).png`, never
+ *    `photo (1) (1).png`. (`photo (1) (2).png` → base `photo (1)`,
+ *    counter 2 → `photo (1) (3).png`: only the final counter moves.)
+ * 3. Otherwise the first candidate is ` (1)`: `photo.png` →
+ *    `photo (1).png`.
+ * 4. Candidates increment until one is not taken.
+ *
+ * A name that isn't taken is returned unchanged — the renamer only
+ * fires on collision.
+ */
+/** `name` split as the rule defines: `ext` includes the leading dot,
+ *  or is `''` when the name has no extension (dotfiles, trailing dots,
+ *  extensionless names). */
+export declare function splitStorageName(name: string): {
+    stem: string;
+    ext: string;
+};
+/** Trailing ` (n)` counter: `photo (3)` → base `photo`, counter 3.
+ *  `counter: null` when the stem carries none. A counter beyond
+ *  `Number.MAX_SAFE_INTEGER` is treated as plain text (no counter):
+ *  incrementing it would be lossy — `n + 1 === n` in float land, which
+ *  turns {@link resolveCollision}'s probe loop into a hang — and the
+ *  candidate would render in scientific notation anyway. */
+export declare function parseCopyCounter(stem: string): {
+    base: string;
+    counter: number | null;
+};
+/**
+ * Resolve one name against a set of taken sibling names. Returns the
+ * name unchanged when free; otherwise the first ` (n)` candidate that
+ * is free, per the module rule above.
+ */
+export declare function resolveCollision(name: string, taken: ReadonlySet<string>): string;
+/**
+ * Resolve a whole drop/pick batch against the destination folder's
+ * existing names, with OS drop semantics: collisions are detected and
+ * renamed at the batch's TOP LEVEL only (the names the OS drop
+ * "creates" in the destination — a plain file's name, or a dropped
+ * folder's root segment). Files inside a dropped folder ride their
+ * folder's rename and keep their inner structure untouched — exactly
+ * like dropping `photos/` next to an existing `photos/` yields
+ * `photos (1)/…` with the contents intact.
+ *
+ * Within one batch:
+ * - all paths sharing a top-level FOLDER segment share its resolution
+ *   (one dropped folder = one rename), and
+ * - top-level FILES resolve individually in order, each claiming its
+ *   resolved name, so two same-named files in one batch get successive
+ *   counters.
+ *
+ * Only the destination's DIRECT children can be checked — that is all
+ * the drop target (one `listAll` level) knows. Deeper paths follow GCS
+ * overwrite semantics, which the folder-level rename already shields
+ * in practice (a colliding folder is renamed wholesale).
+ *
+ * Returns resolved paths in input order.
+ */
+export declare function planBatchNames(relativePaths: readonly string[], taken: ReadonlySet<string>): string[];
+//# sourceMappingURL=collisionRename.d.ts.map

package/dist/storage/collisionRename.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collisionRename.d.ts","sourceRoot":"","sources":["../../src/storage/collisionRename.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;4BAE4B;AAC5B,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAI5E;AAED;;;;;4DAK4D;AAC5D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAMvF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,CAUjF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GACzB,MAAM,EAAE,CAqBV"}

package/dist/storage/collisionRename.js

@@ -0,0 +1,113 @@
+/**
+ * OS-copy collision renaming for uploads/drops — pure logic, no React.
+ *
+ * THE RULE (mirrors macOS Finder's "keep both" counter semantics, with
+ * the Windows-style ` (n)` spelling the spec pins):
+ *
+ * 1. Split the name into `stem + ext`. The extension is the suffix from
+ *    the LAST dot, only when that dot is neither the first character nor
+ *    the last: `photo.png` → `photo` + `.png`; `archive.tar.gz` →
+ *    `archive.tar` + `.gz`; dotfiles (`.gitignore`) and trailing-dot
+ *    names (`notes.`) have NO extension — the whole name is the stem;
+ *    extensionless names (`Makefile`) likewise.
+ * 2. If the stem already ends in a ` (n)` counter (single space, plain
+ *    decimal integer), the counter is INCREMENTED, not nested:
+ *    `photo (1).png` colliding becomes `photo (2).png`, never
+ *    `photo (1) (1).png`. (`photo (1) (2).png` → base `photo (1)`,
+ *    counter 2 → `photo (1) (3).png`: only the final counter moves.)
+ * 3. Otherwise the first candidate is ` (1)`: `photo.png` →
+ *    `photo (1).png`.
+ * 4. Candidates increment until one is not taken.
+ *
+ * A name that isn't taken is returned unchanged — the renamer only
+ * fires on collision.
+ */
+/** `name` split as the rule defines: `ext` includes the leading dot,
+ *  or is `''` when the name has no extension (dotfiles, trailing dots,
+ *  extensionless names). */
+export function splitStorageName(name) {
+    const dot = name.lastIndexOf('.');
+    if (dot <= 0 || dot === name.length - 1)
+        return { stem: name, ext: '' };
+    return { stem: name.slice(0, dot), ext: name.slice(dot) };
+}
+/** Trailing ` (n)` counter: `photo (3)` → base `photo`, counter 3.
+ *  `counter: null` when the stem carries none. A counter beyond
+ *  `Number.MAX_SAFE_INTEGER` is treated as plain text (no counter):
+ *  incrementing it would be lossy — `n + 1 === n` in float land, which
+ *  turns {@link resolveCollision}'s probe loop into a hang — and the
+ *  candidate would render in scientific notation anyway. */
+export function parseCopyCounter(stem) {
+    const m = /^(.*) \((\d+)\)$/.exec(stem);
+    if (!m)
+        return { base: stem, counter: null };
+    const counter = Number(m[2]);
+    if (!Number.isSafeInteger(counter))
+        return { base: stem, counter: null };
+    return { base: m[1], counter };
+}
+/**
+ * Resolve one name against a set of taken sibling names. Returns the
+ * name unchanged when free; otherwise the first ` (n)` candidate that
+ * is free, per the module rule above.
+ */
+export function resolveCollision(name, taken) {
+    if (!taken.has(name))
+        return name;
+    const { stem, ext } = splitStorageName(name);
+    const { base, counter } = parseCopyCounter(stem);
+    let n = counter === null ? 1 : counter + 1;
+    for (;;) {
+        const candidate = `${base} (${n})${ext}`;
+        if (!taken.has(candidate))
+            return candidate;
+        n += 1;
+    }
+}
+/**
+ * Resolve a whole drop/pick batch against the destination folder's
+ * existing names, with OS drop semantics: collisions are detected and
+ * renamed at the batch's TOP LEVEL only (the names the OS drop
+ * "creates" in the destination — a plain file's name, or a dropped
+ * folder's root segment). Files inside a dropped folder ride their
+ * folder's rename and keep their inner structure untouched — exactly
+ * like dropping `photos/` next to an existing `photos/` yields
+ * `photos (1)/…` with the contents intact.
+ *
+ * Within one batch:
+ * - all paths sharing a top-level FOLDER segment share its resolution
+ *   (one dropped folder = one rename), and
+ * - top-level FILES resolve individually in order, each claiming its
+ *   resolved name, so two same-named files in one batch get successive
+ *   counters.
+ *
+ * Only the destination's DIRECT children can be checked — that is all
+ * the drop target (one `listAll` level) knows. Deeper paths follow GCS
+ * overwrite semantics, which the folder-level rename already shields
+ * in practice (a colliding folder is renamed wholesale).
+ *
+ * Returns resolved paths in input order.
+ */
+export function planBatchNames(relativePaths, taken) {
+    const claimed = new Set(taken);
+    // One resolution per dropped folder root, shared across its files.
+    const folderRenames = new Map();
+    return relativePaths.map((path) => {
+        const slash = path.indexOf('/');
+        if (slash === -1) {
+            // Top-level file: resolve individually, claim the result.
+            const resolved = resolveCollision(path, claimed);
+            claimed.add(resolved);
+            return resolved;
+        }
+        const root = path.slice(0, slash);
+        let renamed = folderRenames.get(root);
+        if (renamed === undefined) {
+            renamed = resolveCollision(root, claimed);
+            claimed.add(renamed);
+            folderRenames.set(root, renamed);
+        }
+        return `${renamed}${path.slice(slash)}`;
+    });
+}
+//# sourceMappingURL=collisionRename.js.map

package/dist/storage/collisionRename.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collisionRename.js","sourceRoot":"","sources":["../../src/storage/collisionRename.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;4BAE4B;AAC5B,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACxE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;4DAK4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAA0B;IACvE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IAC3C,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,cAAc,CAC5B,aAAgC,EAChC,KAA0B;IAE1B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,mEAAmE;IACnE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,GAAG,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/storage/components/DeleteSelectionWithConfirm.d.ts

@@ -0,0 +1,68 @@
+import type { ReactNode } from 'react';
+import type { FirebaseStorage } from 'pyric/storage';
+import type { StorageSelectionEntry } from '../hooks/useStorageSelection.js';
+import type { UseStorageRulesGateResult } from '../hooks/useStorageRulesGate.js';
+import { type StorageDeleteOutcome, type StorageRecursiveDeleteImpl, type UseStorageDeleteOptions } from '../hooks/useStorageDelete.js';
+export interface DeleteSelectionWithConfirmProps {
+    /** The package's single Storage handle prop. */
+    storage: FirebaseStorage | null | undefined;
+    /** What to delete — `useStorageSelection().selected` (or any
+     *  `{kind, fullPath}` rows). Folders delete recursively. */
+    entries: StorageSelectionEntry[];
+    /** Folder-walk impl override (default: the `listAll`-driven one). */
+    impl?: StorageRecursiveDeleteImpl;
+    /** Optimistic seam from `useStorageList`. */
+    list?: UseStorageDeleteOptions['list'];
+    /**
+     * Rules-aware affordance — pass `useStorageRulesGate(storage)`.
+     * When ANY selected entry's DELETE verdict denies, the trigger
+     * disables with the reason (default trigger: `data-pyric-denied` +
+     * `data-pyric-denied-reason` + `title`; `renderTrigger` receives
+     * `deniedReason`). For folder entries the verdict evaluates the
+     * folder path itself — an approximation of the recursive walk
+     * (descendants matched by `{allPaths=**}` rules share the verdict).
+     * On prod handles verdicts are advisory; the server stays
+     * authoritative either way.
+     */
+    gate?: Pick<UseStorageRulesGateResult, 'verdictFor'>;
+    /** Confirm-dialog title. Default derives from the entry count. */
+    title?: string;
+    /** Confirm-dialog body. Default lists the selected paths. */
+    body?: ReactNode;
+    confirmLabel?: string;
+    /** Fired after a run with NO failures (e.g. clear the selection +
+     *  refresh the list). */
+    onDeleted?: (outcome: StorageDeleteOutcome) => void;
+    /** Fired after a run with failures (the toast already showed). */
+    onFailed?: (outcome: StorageDeleteOutcome) => void;
+    /** Render override for the trigger button. */
+    renderTrigger?: (props: {
+        onClick: () => void;
+        isRunning: boolean;
+        progress: number;
+        disabled: boolean;
+        /** Set when the rules gate denied the selection (see `gate`). */
+        deniedReason?: string;
+    }) => ReactNode;
+    /** Class forwarded to the default trigger button. */
+    className?: string;
+}
+/**
+ * Bulk delete behind the confirm-dialog primitive, with toasts on
+ * outcome — wires `useConfirm` + `useStorageDelete` + `useToast` the
+ * way `<DeleteWithConfirm>` wires the Firestore trio. Requires
+ * `<ConfirmProvider>` AND `<ToastProvider>` ancestors.
+ *
+ * Outcome toasts: all-success → one `success` toast with the count;
+ * any failure → an `error` toast listing each failed path with its
+ * typed `StorageError.code`.
+ *
+ * The default trigger styles via `[data-pyric-ui="delete-selection"]`
+ * (+ `[data-pyric-destructive]`, `[data-pyric-running]`,
+ * `[data-pyric-denied]` with the reason on
+ * `data-pyric-denied-reason`/`title`); it disables while running,
+ * when `entries` is empty, or when the rules `gate` denies the
+ * selection.
+ */
+export declare function DeleteSelectionWithConfirm({ storage, entries, impl, list, gate, title, body, confirmLabel, onDeleted, onFailed, renderTrigger, className, }: DeleteSelectionWithConfirmProps): import("react").JSX.Element;
+//# sourceMappingURL=DeleteSelectionWithConfirm.d.ts.map

package/dist/storage/components/DeleteSelectionWithConfirm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeleteSelectionWithConfirm.d.ts","sourceRoot":"","sources":["../../../src/storage/components/DeleteSelectionWithConfirm.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC7B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,WAAW,+BAA+B;IAC9C,gDAAgD;IAChD,OAAO,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,CAAC;IAC5C;gEAC4D;IAC5D,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,qEAAqE;IACrE,IAAI,CAAC,EAAE,0BAA0B,CAAC;IAClC,6CAA6C;IAC7C,IAAI,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACvC;;;;;;;;;;OAUG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;IACrD,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;6BACyB;IACzB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACpD,kEAAkE;IAClE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACnD,8CAA8C;IAC9C,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QACtB,OAAO,EAAE,MAAM,IAAI,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,iEAAiE;QACjE,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,KAAK,SAAS,CAAC;IAChB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,OAAO,EACP,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,YAAuB,EACvB,SAAS,EACT,QAAQ,EACR,aAAa,EACb,SAAS,GACV,EAAE,+BAA+B,+BA0GjC"}

package/dist/storage/components/DeleteSelectionWithConfirm.js

@@ -0,0 +1,82 @@
+import { jsxs as _jsxs, jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
+import { useConfirm } from '../../primitives/useConfirm.js';
+import { useToast } from '../../primitives/Toast.js';
+import { useStorageDelete, } from '../hooks/useStorageDelete.js';
+/**
+ * Bulk delete behind the confirm-dialog primitive, with toasts on
+ * outcome — wires `useConfirm` + `useStorageDelete` + `useToast` the
+ * way `<DeleteWithConfirm>` wires the Firestore trio. Requires
+ * `<ConfirmProvider>` AND `<ToastProvider>` ancestors.
+ *
+ * Outcome toasts: all-success → one `success` toast with the count;
+ * any failure → an `error` toast listing each failed path with its
+ * typed `StorageError.code`.
+ *
+ * The default trigger styles via `[data-pyric-ui="delete-selection"]`
+ * (+ `[data-pyric-destructive]`, `[data-pyric-running]`,
+ * `[data-pyric-denied]` with the reason on
+ * `data-pyric-denied-reason`/`title`); it disables while running,
+ * when `entries` is empty, or when the rules `gate` denies the
+ * selection.
+ */
+export function DeleteSelectionWithConfirm({ storage, entries, impl, list, gate, title, body, confirmLabel = 'Delete', onDeleted, onFailed, renderTrigger, className, }) {
+    const confirm = useConfirm();
+    const { toast } = useToast();
+    const { deleteEntries, isRunning, progress } = useStorageDelete(storage, {
+        impl,
+        list,
+    });
+    // Pre-flight DELETE verdicts over the selection (advisory — the
+    // enforcement layer still decides; see the `gate` prop).
+    const denied = gate
+        ? entries
+            .map((e) => ({ entry: e, verdict: gate.verdictFor(e.fullPath) }))
+            .filter((d) => !d.verdict.delete)
+        : [];
+    const deniedReason = denied.length === 0
+        ? undefined
+        : `Delete denied for ${denied[0].entry.fullPath}${denied.length > 1 ? ` (+${denied.length - 1} more)` : ''}: ${denied[0].verdict.reasons.write.join('; ')}`;
+    const disabled = isRunning || entries.length === 0 || storage == null || denied.length > 0;
+    const handleClick = async () => {
+        if (disabled)
+            return;
+        const ok = await confirm({
+            title: title ??
+                (entries.length === 1
+                    ? `Delete ${entries[0].fullPath}?`
+                    : `Delete ${entries.length} items?`),
+            body: body ?? (_jsx("ul", { "data-pyric-delete-selection-paths": true, children: entries.map((e) => (_jsxs("li", { "data-pyric-entry-kind": e.kind, children: [e.fullPath, e.kind === 'folder' ? '/' : ''] }, e.fullPath))) })),
+            destructive: true,
+            confirmLabel,
+        });
+        if (!ok)
+            return;
+        const outcome = await deleteEntries(entries);
+        if (outcome.failed.length === 0) {
+            toast({
+                title: `Deleted ${outcome.deleted.length} ${outcome.deleted.length === 1 ? 'item' : 'items'}`,
+                kind: 'success',
+            });
+            onDeleted?.(outcome);
+        }
+        else {
+            toast({
+                title: `Delete failed for ${outcome.failed.length} of ${entries.length}`,
+                kind: 'error',
+                body: (_jsx("ul", { "data-pyric-delete-selection-failures": true, children: outcome.failed.map((f) => (_jsxs("li", { children: [f.fullPath, ":", ' ', f.error.code ?? f.error.message] }, f.fullPath))) })),
+            });
+            onFailed?.(outcome);
+        }
+    };
+    if (renderTrigger) {
+        return (_jsx(_Fragment, { children: renderTrigger({
+                onClick: handleClick,
+                isRunning,
+                progress,
+                disabled,
+                deniedReason,
+            }) }));
+    }
+    return (_jsx("button", { type: "button", onClick: handleClick, className: className, disabled: disabled, title: deniedReason, "data-pyric-ui": "delete-selection", "data-pyric-destructive": "", "data-pyric-running": isRunning ? '' : undefined, "data-pyric-denied": deniedReason ? '' : undefined, "data-pyric-denied-reason": deniedReason, children: isRunning ? `Deleting… (${progress})` : confirmLabel }));
+}
+//# sourceMappingURL=DeleteSelectionWithConfirm.js.map

package/dist/storage/components/DeleteSelectionWithConfirm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeleteSelectionWithConfirm.js","sourceRoot":"","sources":["../../../src/storage/components/DeleteSelectionWithConfirm.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAGrD,OAAO,EACL,gBAAgB,GAIjB,MAAM,8BAA8B,CAAC;AA+CtC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,OAAO,EACP,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,YAAY,GAAG,QAAQ,EACvB,SAAS,EACT,QAAQ,EACR,aAAa,EACb,SAAS,GACuB;IAChC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC7B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,OAAO,EAAE;QACvE,IAAI;QACJ,IAAI;KACL,CAAC,CAAC;IAEH,gEAAgE;IAChE,yDAAyD;IACzD,MAAM,MAAM,GAAG,IAAI;QACjB,CAAC,CAAC,OAAO;aACJ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;aAChE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACrC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,YAAY,GAChB,MAAM,CAAC,MAAM,KAAK,CAAC;QACjB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,qBAAqB,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,GAC3C,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EACxD,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAExD,MAAM,QAAQ,GACZ,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAE5E,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC7B,IAAI,QAAQ;YAAE,OAAO;QACrB,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;YACvB,KAAK,EACH,KAAK;gBACL,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;oBACnB,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG;oBAClC,CAAC,CAAC,UAAU,OAAO,CAAC,MAAM,SAAS,CAAC;YACxC,IAAI,EAAE,IAAI,IAAI,CACZ,kEACG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAClB,uCAA4C,CAAC,CAAC,IAAI,aAC/C,CAAC,CAAC,QAAQ,EACV,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAFxB,CAAC,CAAC,QAAQ,CAGd,CACN,CAAC,GACC,CACN;YACD,WAAW,EAAE,IAAI;YACjB,YAAY;SACb,CAAC,CAAC;QACH,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC;gBACJ,KAAK,EAAE,WAAW,OAAO,CAAC,OAAO,CAAC,MAAM,IACtC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAC1C,EAAE;gBACF,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YACH,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC;gBACJ,KAAK,EAAE,qBAAqB,OAAO,CAAC,MAAM,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,EAAE;gBACxE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,CACJ,qEACG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACzB,yBACG,CAAC,CAAC,QAAQ,OAAG,GAAG,EACf,CAAC,CAAC,KAA2B,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,KAFhD,CAAC,CAAC,QAAQ,CAGd,CACN,CAAC,GACC,CACN;aACF,CAAC,CAAC;YACH,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CACL,4BACG,aAAa,CAAC;gBACb,OAAO,EAAE,WAAW;gBACpB,SAAS;gBACT,QAAQ;gBACR,QAAQ;gBACR,YAAY;aACb,CAAC,GACD,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,CACL,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,YAAY,mBACL,kBAAkB,4BACT,EAAE,wBACL,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,uBAC3B,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,8BACtB,YAAY,YAErC,SAAS,CAAC,CAAC,CAAC,cAAc,QAAQ,GAAG,CAAC,CAAC,CAAC,YAAY,GAC9C,CACV,CAAC;AACJ,CAAC"}

package/dist/storage/components/ObjectBrowser.d.ts

@@ -0,0 +1,75 @@
+import type { ReactNode } from 'react';
+import type { StorageReference } from 'pyric/storage';
+import type { StorageListEntry, StorageListStatus } from '../hooks/useStorageList.js';
+import type { UseStorageRulesGateResult } from '../hooks/useStorageRulesGate.js';
+export interface ObjectBrowserProps {
+    /** The folders-first row model from `useStorageList`. */
+    entries: StorageListEntry[];
+    /** Drives the loading state (`'loading'` with no rows yet) and the
+     *  idle short-circuit. Default `'success'` for static usage. */
+    status?: StorageListStatus;
+    /** Renders a `role="alert"` container with the message. Pair with
+     *  the hook's typed `StorageError` for code-driven copy. */
+    error?: Error;
+    /** Folder row click — fired with the prefix's `fullPath`. Wire to
+     *  `usePathState.enter` (or `setPath`). */
+    onNavigate?: (path: string) => void;
+    /** Object row click — fired with the object's reference. */
+    onSelect?: (ref: StorageReference) => void;
+    /** Marks the matching object row `data-pyric-selected` +
+     *  `aria-selected`. */
+    selectedPath?: string;
+    /**
+     * Rules-aware affordances — pass `useStorageRulesGate(storage)`.
+     * Rows whose READ verdict denies are stamped `data-pyric-denied`
+     * (with the evaluator's reason trace on
+     * `data-pyric-denied-reason`). A denied folder row would throw
+     * `storage/unauthorized` on `listAll`; the stamp warns BEFORE the
+     * click. Rows stay clickable — the affordance is advisory and the
+     * enforcement layer remains authoritative (on prod the verdicts
+     * themselves are advisory; see the gate's `advisory` flag).
+     */
+    gate?: Pick<UseStorageRulesGateResult, 'verdictFor'>;
+    /**
+     * Row-label slot. Default renders the entry name. The row button,
+     * its click wiring, and the `data-*` states stay with the
+     * component — the slot only owns the label content.
+     */
+    renderEntry?: (entry: StorageListEntry) => ReactNode;
+    emptyState?: ReactNode;
+    className?: string;
+    /**
+     * Above this row count, the list switches to virtualization via
+     * `<VirtualList>` — `listAll` has no pagination, so a big prefix
+     * arrives as one flat result and virtualization is the only
+     * defense. Default 100 (same as `<DocumentList>`). `Infinity`
+     * disables.
+     */
+    virtualizeThreshold?: number;
+    /** Estimated row height when virtualizing. Default 36. */
+    rowHeight?: number | ((index: number) => number);
+    /** Scroll-container height when virtualized. Default `'60vh'`. */
+    virtualizedHeight?: number | string;
+}
+/**
+ * Headless storage browser shell — renders `useStorageList`'s merged
+ * folder/object rows. Folder rows navigate (`onNavigate` with the
+ * prefix path), object rows select (`onSelect` with the ref). Below
+ * `virtualizeThreshold` renders a plain `<ul>`; above it, composes
+ * the package's `<VirtualList>`.
+ *
+ * Ships no visual styling. Consumers style via:
+ * - `[data-pyric-ui="object-browser"]` — the root (stamps `data-size`)
+ * - `…[data-pyric-loading]` / `[data-pyric-empty]` / `[data-pyric-error]`
+ * - `…[data-pyric-virtualized]` — virtualized mode
+ * - `[data-pyric-object-browser-items]` — the `<ul>` in plain mode
+ * - `[data-pyric-storage-entry]` — each row
+ * - `[data-pyric-storage-entry][data-pyric-entry-kind="folder"|"object"]`
+ * - `[data-pyric-storage-entry][data-pyric-entry-path="docs/a.txt"]`
+ * - `[data-pyric-storage-entry][data-pyric-denied]` — read-denied row
+ *   (rules gate; reason on `data-pyric-denied-reason`)
+ * - `[data-pyric-entry-select]` — the row button
+ * - `[data-pyric-entry-select][data-pyric-selected]` — the selected object
+ */
+export declare function ObjectBrowser({ entries, status, error, onNavigate, onSelect, selectedPath, gate, renderEntry, emptyState, className, virtualizeThreshold, rowHeight, virtualizedHeight, }: ObjectBrowserProps): import("react").JSX.Element;
+//# sourceMappingURL=ObjectBrowser.d.ts.map

package/dist/storage/components/ObjectBrowser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ObjectBrowser.d.ts","sourceRoot":"","sources":["../../../src/storage/components/ObjectBrowser.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGtD,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAEjF,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B;oEACgE;IAChE,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;gEAC4D;IAC5D,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;+CAC2C;IAC3C,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC3C;2BACuB;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;IACrD;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,SAAS,CAAC;IACrD,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;IACjD,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAAC,EAC5B,OAAO,EACP,MAAkB,EAClB,KAAK,EACL,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,WAAW,EACX,UAAU,EACV,SAAS,EACT,mBAAyB,EACzB,SAAc,EACd,iBAA0B,GAC3B,EAAE,kBAAkB,+BAmHpB"}

package/dist/storage/components/ObjectBrowser.js

@@ -0,0 +1,59 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { VirtualList } from '../../primitives/VirtualList.js';
+import { useContainerSize } from '../../primitives/hooks/useContainerSize.js';
+/**
+ * Headless storage browser shell — renders `useStorageList`'s merged
+ * folder/object rows. Folder rows navigate (`onNavigate` with the
+ * prefix path), object rows select (`onSelect` with the ref). Below
+ * `virtualizeThreshold` renders a plain `<ul>`; above it, composes
+ * the package's `<VirtualList>`.
+ *
+ * Ships no visual styling. Consumers style via:
+ * - `[data-pyric-ui="object-browser"]` — the root (stamps `data-size`)
+ * - `…[data-pyric-loading]` / `[data-pyric-empty]` / `[data-pyric-error]`
+ * - `…[data-pyric-virtualized]` — virtualized mode
+ * - `[data-pyric-object-browser-items]` — the `<ul>` in plain mode
+ * - `[data-pyric-storage-entry]` — each row
+ * - `[data-pyric-storage-entry][data-pyric-entry-kind="folder"|"object"]`
+ * - `[data-pyric-storage-entry][data-pyric-entry-path="docs/a.txt"]`
+ * - `[data-pyric-storage-entry][data-pyric-denied]` — read-denied row
+ *   (rules gate; reason on `data-pyric-denied-reason`)
+ * - `[data-pyric-entry-select]` — the row button
+ * - `[data-pyric-entry-select][data-pyric-selected]` — the selected object
+ */
+export function ObjectBrowser({ entries, status = 'success', error, onNavigate, onSelect, selectedPath, gate, renderEntry, emptyState, className, virtualizeThreshold = 100, rowHeight = 36, virtualizedHeight = '60vh', }) {
+    const { ref: rootRef, size } = useContainerSize();
+    if (error) {
+        return (_jsx("div", { className: className, "data-pyric-ui": "object-browser", "data-pyric-error": "", role: "alert", children: error.message }));
+    }
+    if ((status === 'loading' || status === 'idle') && entries.length === 0) {
+        return (_jsx("div", { className: className, "data-pyric-ui": "object-browser", "data-pyric-loading": status === 'loading' ? '' : undefined, "data-pyric-idle": status === 'idle' ? '' : undefined }));
+    }
+    if (entries.length === 0) {
+        return (_jsx("div", { className: className, "data-pyric-ui": "object-browser", "data-pyric-empty": "", children: emptyState }));
+    }
+    // Pre-flight read verdict per row (advisory — see the `gate` prop).
+    const denialFor = (entry) => {
+        if (!gate)
+            return { denied: false };
+        const verdict = gate.verdictFor(entry.fullPath);
+        return verdict.read
+            ? { denied: false }
+            : { denied: true, reason: verdict.reasons.read.join('; ') };
+    };
+    const renderRow = (entry) => {
+        const selected = entry.kind === 'object' && entry.fullPath === selectedPath;
+        return (_jsx("button", { type: "button", onClick: () => entry.kind === 'folder'
+                ? onNavigate?.(entry.fullPath)
+                : onSelect?.(entry.ref), "data-pyric-entry-select": true, "data-pyric-selected": selected ? '' : undefined, "aria-selected": selected || undefined, children: renderEntry ? renderEntry(entry) : entry.name }));
+    };
+    const virtualized = entries.length > virtualizeThreshold;
+    return (_jsx("div", { ref: rootRef, className: className, "data-pyric-ui": "object-browser", "data-size": size, "data-pyric-virtualized": virtualized ? '' : undefined, children: virtualized ? (_jsx(VirtualList, { items: entries, estimateSize: rowHeight, height: virtualizedHeight, getItemKey: (entry) => `${entry.kind}:${entry.fullPath}`, renderItem: (entry) => {
+                const denial = denialFor(entry);
+                return (_jsx("div", { "data-pyric-storage-entry": true, "data-pyric-entry-kind": entry.kind, "data-pyric-entry-path": entry.fullPath, "data-pyric-denied": denial.denied ? '' : undefined, "data-pyric-denied-reason": denial.reason, children: renderRow(entry) }));
+            } })) : (_jsx("ul", { "data-pyric-object-browser-items": true, children: entries.map((entry) => {
+                const denial = denialFor(entry);
+                return (_jsx("li", { "data-pyric-storage-entry": true, "data-pyric-entry-kind": entry.kind, "data-pyric-entry-path": entry.fullPath, "data-pyric-denied": denial.denied ? '' : undefined, "data-pyric-denied-reason": denial.reason, children: renderRow(entry) }, `${entry.kind}:${entry.fullPath}`));
+            }) })) }));
+}
+//# sourceMappingURL=ObjectBrowser.js.map

package/dist/storage/components/ObjectBrowser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ObjectBrowser.js","sourceRoot":"","sources":["../../../src/storage/components/ObjectBrowser.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAyD9E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,aAAa,CAAC,EAC5B,OAAO,EACP,MAAM,GAAG,SAAS,EAClB,KAAK,EACL,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,WAAW,EACX,UAAU,EACV,SAAS,EACT,mBAAmB,GAAG,GAAG,EACzB,SAAS,GAAG,EAAE,EACd,iBAAiB,GAAG,MAAM,GACP;IACnB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,gBAAgB,EAAkB,CAAC;IAElE,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CACL,cACE,SAAS,EAAE,SAAS,mBACN,gBAAgB,sBACb,EAAE,EACnB,IAAI,EAAC,OAAO,YAEX,KAAK,CAAC,OAAO,GACV,CACP,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,CACL,cACE,SAAS,EAAE,SAAS,mBACN,gBAAgB,wBACV,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,qBACxC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GACnD,CACH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CACL,cAAK,SAAS,EAAE,SAAS,mBAAgB,gBAAgB,sBAAkB,EAAE,YAC1E,UAAU,GACP,CACP,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,CAChB,KAAuB,EACmD,EAAE;QAC5E,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC,IAAI;YACjB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;YACnB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAChE,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,KAAuB,EAAE,EAAE;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY,CAAC;QAC5E,OAAO,CACL,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CACZ,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACrB,CAAC,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9B,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,0DAGN,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,mBAC/B,QAAQ,IAAI,SAAS,YAEnC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GACvC,CACV,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,mBAAmB,CAAC;IAEzD,OAAO,CACL,cACE,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,SAAS,mBACN,gBAAgB,eACnB,IAAI,4BACS,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,YAEnD,WAAW,CAAC,CAAC,CAAC,CACb,KAAC,WAAW,IACV,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,SAAS,EACvB,MAAM,EAAE,iBAAiB,EACzB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,EACxD,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;gBACpB,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBAChC,OAAO,CACL,yEAEyB,KAAK,CAAC,IAAI,2BACV,KAAK,CAAC,QAAQ,uBAClB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,8BACvB,MAAM,CAAC,MAAM,YAEtC,SAAS,CAAC,KAAK,CAAC,GACb,CACP,CAAC;YACJ,CAAC,GACD,CACH,CAAC,CAAC,CAAC,CACF,gEACG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrB,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBAChC,OAAO,CACL,wEAGyB,KAAK,CAAC,IAAI,2BACV,KAAK,CAAC,QAAQ,uBAClB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,8BACvB,MAAM,CAAC,MAAM,YAEtC,SAAS,CAAC,KAAK,CAAC,IAPZ,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAQnC,CACN,CAAC;YACJ,CAAC,CAAC,GACC,CACN,GACG,CACP,CAAC;AACJ,CAAC"}