pyric-tools 0.1.0-alpha.7

package/dist/cli/auth.js

@@ -0,0 +1,119 @@
+/**
+ * `pyric auth:*` subcommands — thin wrappers over `pyric-tools/auth`.
+ *
+ *   - `auth:configure-provider <provider> <enabled>` — toggle one of
+ *     the Identity Toolkit providers (anonymous / email / phone /
+ *     google).
+ *   - `auth:manage-domains <add|remove|list> [domain]` — manage
+ *     authorized domains for the project's auth config.
+ *
+ * Both call `getAuthTools(scope)` from `pyric-tools/auth`. ProjectScope
+ * is resolved from env (FIREBASE_SA_BASE64 / GOOGLE_APPLICATION_CREDENTIALS)
+ * by the shared `resolveScope` helper.
+ */
+import { getAuthTools } from '../auth/index.js';
+import { resolveScope } from './scope.js';
+import { readFirebaseRc } from './firebase-json.js';
+async function resolveScopeFromArgs(parsed, deps) {
+    const flagProject = parsed.flags.get('project');
+    const explicit = typeof flagProject === 'string' ? flagProject : undefined;
+    let projectIdHint = explicit;
+    if (!projectIdHint) {
+        const rcRead = deps.readFirebaseRc ?? readFirebaseRc;
+        const rc = await rcRead(deps.cwd ?? process.cwd()).catch(() => null);
+        projectIdHint = rc?.projects?.default ?? undefined;
+    }
+    const resolveScopeFn = deps.resolveScope ?? resolveScope;
+    return resolveScopeFn({ projectId: projectIdHint });
+}
+export async function runAuthConfigureProvider(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const provider = parsed.positional[0];
+    const enabledArg = parsed.positional[1];
+    if (!provider || !enabledArg) {
+        err.write('pyric auth:configure-provider: missing args. Usage: pyric auth:configure-provider <anonymous|email|phone|google> <true|false>\n');
+        return 1;
+    }
+    if (provider !== 'anonymous' && provider !== 'email' && provider !== 'phone' && provider !== 'google') {
+        err.write(`pyric auth:configure-provider: unknown provider '${provider}'. Must be one of anonymous, email, phone, google.\n`);
+        return 1;
+    }
+    if (enabledArg !== 'true' && enabledArg !== 'false') {
+        err.write(`pyric auth:configure-provider: enabled must be 'true' or 'false', got '${enabledArg}'.\n`);
+        return 1;
+    }
+    const enabled = enabledArg === 'true';
+    let scope;
+    try {
+        const resolved = await resolveScopeFromArgs(parsed, deps);
+        if (!resolved) {
+            err.write('pyric auth:configure-provider: failed to resolve project scope.\n');
+            return 1;
+        }
+        scope = resolved.scope;
+    }
+    catch (e) {
+        err.write(`${e instanceof Error ? e.message : String(e)}\n`);
+        return 1;
+    }
+    const tools = (deps.getAuthTools ?? getAuthTools)(scope);
+    try {
+        const result = await tools.configureProvider({ provider, enabled });
+        out.write(`${JSON.stringify(result, null, 2)}\n`);
+        return result.success ? 0 : 2;
+    }
+    catch (e) {
+        err.write(`pyric auth:configure-provider: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 2;
+    }
+}
+export async function runAuthManageDomains(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const action = parsed.positional[0];
+    const domain = parsed.positional[1];
+    if (!action) {
+        err.write('pyric auth:manage-domains: missing action. Usage: pyric auth:manage-domains <add|remove|list> [domain]\n');
+        return 1;
+    }
+    if (action !== 'add' && action !== 'remove' && action !== 'list') {
+        err.write(`pyric auth:manage-domains: unknown action '${action}'. Must be add, remove, or list.\n`);
+        return 1;
+    }
+    if ((action === 'add' || action === 'remove') && !domain) {
+        err.write(`pyric auth:manage-domains: action '${action}' requires a domain argument.\n`);
+        return 1;
+    }
+    let scope;
+    try {
+        const resolved = await resolveScopeFromArgs(parsed, deps);
+        if (!resolved) {
+            err.write('pyric auth:manage-domains: failed to resolve project scope.\n');
+            return 1;
+        }
+        scope = resolved.scope;
+    }
+    catch (e) {
+        err.write(`${e instanceof Error ? e.message : String(e)}\n`);
+        return 1;
+    }
+    const tools = (deps.getAuthTools ?? getAuthTools)(scope);
+    try {
+        // `action` is narrowed to the literal union above; the assignment
+        // here re-narrows after the positional destructure (TS otherwise
+        // widens to `string` when constructing an object literal).
+        const narrowedAction = action;
+        const input = domain
+            ? { action: narrowedAction, domain }
+            : { action: narrowedAction };
+        const result = await tools.manageDomains(input);
+        out.write(`${JSON.stringify(result, null, 2)}\n`);
+        return result.success ? 0 : 2;
+    }
+    catch (e) {
+        err.write(`pyric auth:manage-domains: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 2;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/cli/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAkB,MAAM,kBAAkB,CAAC;AAGhE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAWpD,KAAK,UAAU,oBAAoB,CACjC,MAAkB,EAClB,IAAc;IAEd,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,aAAa,GAAG,QAAQ,CAAC;IAC7B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC;QACrD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrE,aAAa,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,IAAI,SAAS,CAAC;IACrD,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC;IACzD,OAAO,cAAc,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAkB,EAClB,OAAiB,EAAE;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAE1C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,GAAG,CAAC,KAAK,CACP,iIAAiI,CAClI,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtG,GAAG,CAAC,KAAK,CACP,oDAAoD,QAAQ,sDAAsD,CACnH,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CACP,0EAA0E,UAAU,MAAM,CAC3F,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,KAAK,MAAM,CAAC;IAEtC,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YAC/E,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACpE,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkB,EAClB,OAAiB,EAAE;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAE1C,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,KAAK,CACP,0GAA0G,CAC3G,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACjE,GAAG,CAAC,KAAK,CACP,8CAA8C,MAAM,oCAAoC,CACzF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACzD,GAAG,CAAC,KAAK,CAAC,sCAAsC,MAAM,iCAAiC,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;YAC3E,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,kEAAkE;QAClE,iEAAiE;QACjE,2DAA2D;QAC3D,MAAM,cAAc,GAA8B,MAAM,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM;YAClB,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE;YACpC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAChD,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/cli/database-rules.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `pyric database:rules:*` subcommands — local tooling for Realtime Database
+ * rules JSON.
+ */
+import { readFile } from 'node:fs/promises';
+import { SimulateHandler, type RtdbIR, type SimulationInput } from 'pyric/rules/rtdb';
+import type { ParsedArgs } from './parse-args.js';
+import { type FirebaseJson } from './firebase-json.js';
+export interface DatabaseRulesDeps {
+    readFile?: typeof readFile;
+    readFirebaseJson?: (cwd: string) => Promise<FirebaseJson>;
+    simulate?: (ir: RtdbIR, input: SimulationInput) => ReturnType<SimulateHandler['execute']>;
+    cwd?: string;
+    readStdin?: () => Promise<string>;
+    stdout?: {
+        write(s: string): void;
+    };
+    stderr?: {
+        write(s: string): void;
+    };
+}
+export declare function runDatabaseRulesLint(parsed: ParsedArgs, deps?: DatabaseRulesDeps): Promise<number>;
+export declare function runDatabaseRulesValidate(parsed: ParsedArgs, deps?: DatabaseRulesDeps): Promise<number>;
+export declare function runDatabaseRulesSimulate(parsed: ParsedArgs, deps?: DatabaseRulesDeps): Promise<number>;
+//# sourceMappingURL=database-rules.d.ts.map

package/dist/cli/database-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-rules.d.ts","sourceRoot":"","sources":["../../src/cli/database-rules.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAEL,eAAe,EACf,KAAK,MAAM,EAEX,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIzE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC;IAC3B,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,KAAK,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrC;AAoED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAwBjB;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAwBjB;AAgCD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAoFjB"}

package/dist/cli/database-rules.js

@@ -0,0 +1,215 @@
+/**
+ * `pyric database:rules:*` subcommands — local tooling for Realtime Database
+ * rules JSON.
+ */
+import { readFile } from 'node:fs/promises';
+import { resolve as resolvePath } from 'node:path';
+import { RtdbMapper, SimulateHandler, } from 'pyric/rules/rtdb';
+import { readFirebaseJson } from './firebase-json.js';
+const LOCAL_DATABASE_URL = 'https://local-rtdb.firebaseio.com';
+function defaultReadStdin() {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        process.stdin.setEncoding('utf-8');
+        process.stdin.on('data', (chunk) => {
+            data += chunk;
+        });
+        process.stdin.on('end', () => resolve(data));
+        process.stdin.on('error', reject);
+    });
+}
+function parseRulesJson(raw, databaseUrl = LOCAL_DATABASE_URL) {
+    return RtdbMapper.mapToIR(JSON.parse(raw), null, databaseUrl);
+}
+function collectFindings(node, kind) {
+    const findings = [];
+    const rules = [
+        ['.read', node.read],
+        ['.write', node.write],
+        ['.validate', node.validate],
+    ];
+    for (const [rule, expr] of rules) {
+        for (const finding of expr?.parsed[kind] ?? []) {
+            findings.push({
+                path: node.path,
+                rule,
+                code: finding.code,
+                message: finding.message,
+            });
+        }
+    }
+    for (const child of node.children) {
+        findings.push(...collectFindings(child, kind));
+    }
+    return findings;
+}
+async function readRulesFile(path, deps) {
+    const cwd = deps.cwd ?? process.cwd();
+    const readFileFn = deps.readFile ?? readFile;
+    try {
+        return { ok: true, raw: await readFileFn(resolvePath(cwd, path), 'utf-8') };
+    }
+    catch (e) {
+        return { ok: false, message: e instanceof Error ? e.message : String(e) };
+    }
+}
+function jsonError(code, message) {
+    return {
+        errors: [{ path: '/', rule: '.read', code, message }],
+        warnings: [],
+    };
+}
+export async function runDatabaseRulesLint(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const path = parsed.positional[0];
+    if (!path) {
+        err.write('pyric database:rules:lint: missing rules-file path. Usage: pyric database:rules:lint <path>\n');
+        return 1;
+    }
+    const file = await readRulesFile(path, deps);
+    if (!file.ok) {
+        err.write(`pyric database:rules:lint: ${file.message}\n`);
+        return 1;
+    }
+    try {
+        const ir = parseRulesJson(file.raw);
+        const root = ir.rules;
+        out.write(`${JSON.stringify({ warnings: collectFindings(root, 'warnings') }, null, 2)}\n`);
+        return 0;
+    }
+    catch (e) {
+        out.write(`${JSON.stringify(jsonError('INVALID_RULES_JSON', e instanceof Error ? e.message : String(e)), null, 2)}\n`);
+        return 2;
+    }
+}
+export async function runDatabaseRulesValidate(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const path = parsed.positional[0];
+    if (!path) {
+        err.write('pyric database:rules:validate: missing rules-file path. Usage: pyric database:rules:validate <path>\n');
+        return 1;
+    }
+    const file = await readRulesFile(path, deps);
+    if (!file.ok) {
+        err.write(`pyric database:rules:validate: ${file.message}\n`);
+        return 1;
+    }
+    try {
+        const ir = parseRulesJson(file.raw);
+        const root = ir.rules;
+        out.write(`${JSON.stringify({ errors: collectFindings(root, 'errors') }, null, 2)}\n`);
+        return 0;
+    }
+    catch (e) {
+        out.write(`${JSON.stringify(jsonError('INVALID_RULES_JSON', e instanceof Error ? e.message : String(e)), null, 2)}\n`);
+        return 2;
+    }
+}
+async function readFirebaseRules(deps) {
+    const cwd = deps.cwd ?? process.cwd();
+    const fjRead = deps.readFirebaseJson ?? readFirebaseJson;
+    let firebaseJson;
+    try {
+        firebaseJson = await fjRead(cwd);
+    }
+    catch (e) {
+        return { ok: false, message: e instanceof Error ? e.message : String(e) };
+    }
+    const rulesPath = firebaseJson.database?.rules;
+    if (!rulesPath) {
+        return { ok: false, message: 'firebase.json has no `database.rules` path.' };
+    }
+    return readRulesFile(rulesPath, deps);
+}
+export async function runDatabaseRulesSimulate(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const readFileFn = deps.readFile ?? readFile;
+    const simulateFn = deps.simulate ??
+        ((ir, input) => new SimulateHandler().execute(ir, input));
+    let rulesJson;
+    let databaseUrl = LOCAL_DATABASE_URL;
+    let input;
+    if (parsed.flags.get('stdin') === true) {
+        const readStdinFn = deps.readStdin ?? defaultReadStdin;
+        let payload;
+        try {
+            payload = JSON.parse(await readStdinFn());
+        }
+        catch (e) {
+            err.write(`pyric database:rules:simulate: failed to parse stdin JSON: ${e instanceof Error ? e.message : String(e)}\n`);
+            return 1;
+        }
+        if (!payload.operation || !payload.path) {
+            err.write('pyric database:rules:simulate: stdin payload must include `operation` and `path`.\n');
+            return 1;
+        }
+        databaseUrl = payload.databaseUrl ?? databaseUrl;
+        if (payload.rulesJson !== undefined || payload.rules !== undefined) {
+            rulesJson = payload.rulesJson ?? payload.rules;
+        }
+        else if (payload.rulesPath) {
+            try {
+                rulesJson = JSON.parse(await readFileFn(resolvePath(deps.cwd ?? process.cwd(), payload.rulesPath), 'utf-8'));
+            }
+            catch (e) {
+                err.write(`pyric database:rules:simulate: ${e instanceof Error ? e.message : String(e)}\n`);
+                return 1;
+            }
+        }
+        else {
+            const file = await readFirebaseRules(deps);
+            if (!file.ok) {
+                err.write(`pyric database:rules:simulate: ${file.message}\n`);
+                return 1;
+            }
+            try {
+                rulesJson = JSON.parse(file.raw);
+            }
+            catch (e) {
+                err.write(`pyric database:rules:simulate: ${e instanceof Error ? e.message : String(e)}\n`);
+                return 2;
+            }
+        }
+        input = {
+            operation: payload.operation,
+            path: payload.path,
+            auth: payload.auth ?? null,
+            mockData: payload.mockData ?? {},
+            ...(payload.newData !== undefined ? { newData: payload.newData } : {}),
+        };
+    }
+    else {
+        const file = await readFirebaseRules(deps);
+        if (!file.ok) {
+            err.write(`pyric database:rules:simulate: ${file.message}\n`);
+            return 1;
+        }
+        try {
+            rulesJson = JSON.parse(file.raw);
+        }
+        catch (e) {
+            err.write(`pyric database:rules:simulate: ${e instanceof Error ? e.message : String(e)}\n`);
+            return 2;
+        }
+        input = {
+            operation: 'read',
+            path: '/sample/x',
+            auth: null,
+            mockData: {},
+        };
+    }
+    try {
+        const ir = RtdbMapper.mapToIR(rulesJson, null, databaseUrl);
+        const result = simulateFn(ir, input);
+        out.write(`${JSON.stringify(result, null, 2)}\n`);
+        return result.success ? 0 : 2;
+    }
+    catch (e) {
+        err.write(`pyric database:rules:simulate: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 2;
+    }
+}
+//# sourceMappingURL=database-rules.js.map

package/dist/cli/database-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-rules.js","sourceRoot":"","sources":["../../src/cli/database-rules.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EACL,UAAU,EACV,eAAe,GAIhB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAqB,MAAM,oBAAoB,CAAC;AAEzE,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAmB/D,SAAS,gBAAgB;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,WAAW,GAAG,kBAAkB;IACnE,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CAAC,IAAc,EAAE,IAA2B;IAClE,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG;QACZ,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;QACpB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;QACtB,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC;KACpB,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI;gBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,OAAe;IAC9C,OAAO;QACL,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrD,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkB,EAClB,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,+FAA+F,CAAC,CAAC;QAC3G,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,EAAE,CAAC,KAAiB,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3F,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAkB,EAClB,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,uGAAuG,CAAC,CAAC;QACnH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,EAAE,CAAC,KAAiB,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACvF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAcD,KAAK,UAAU,iBAAiB,CAC9B,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC;IACzD,IAAI,YAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAkB,EAClB,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC7C,MAAM,UAAU,GACd,IAAI,CAAC,QAAQ;QACb,CAAC,CAAC,EAAU,EAAE,KAAsB,EAAE,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAErF,IAAI,SAAkB,CAAC;IACvB,IAAI,WAAW,GAAG,kBAAkB,CAAC;IACrC,IAAI,KAAsB,CAAC;IAE3B,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC;QACvD,IAAI,OAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,WAAW,EAAE,CAAoB,CAAC;QAC/D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,8DAA8D,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;YACjG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;QACjD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnE,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;QACjD,CAAC;aAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/G,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5F,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;gBAC9D,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5F,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,KAAK,GAAG;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5F,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,GAAG;YACN,SAAS,EAAE,MAAM;YACjB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/cli/deploy-progress.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Live deploy output — a reporter callback, not a rendering framework.
+ *
+ * One event stream ({@link DeployProgressEvent}), three sinks chosen by mode:
+ *   - `--json` (machine): NDJSON, one event per line, plus the terminal result.
+ *   - TTY: a single live spinner line for the active step (braille spinner + a
+ *     live elapsed timer, or a percent when a real denominator exists). This is
+ *     the frame that fills a multi-second wait (e.g. Storage's settle sleep) so
+ *     the terminal is never a frozen black box. No ink/blessed/ora.
+ *   - otherwise (piped): one flat line per event + the summary.
+ *
+ * Exit codes never derive from progress — only from the terminal `ToolResult`.
+ * Delete every `report()` call and behavior is byte-identical to the old output.
+ */
+import type { ToolResult } from '@inbrowser/agent';
+import type { DeployProgressEvent } from '../deploy/provider.js';
+type Sink = {
+    write(s: string): void;
+};
+export interface DeployReporter {
+    /** A progress step for a unit (target already stamped). */
+    report(event: DeployProgressEvent): void;
+    /** The terminal result for a unit (clears the live line first in TTY). */
+    result(result: ToolResult): void;
+    /** Stop the spinner timer + clear any live line. */
+    dispose(): void;
+}
+export declare function createDeployReporter(opts: {
+    out: Sink;
+    err: Sink;
+    machineOutput: boolean;
+    isTTY: boolean;
+}): DeployReporter;
+export {};
+//# sourceMappingURL=deploy-progress.d.ts.map

package/dist/cli/deploy-progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-progress.d.ts","sourceRoot":"","sources":["../../src/cli/deploy-progress.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,KAAK,IAAI,GAAG;IAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEvC,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACzC,0EAA0E;IAC1E,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IACjC,oDAAoD;IACpD,OAAO,IAAI,IAAI,CAAC;CACjB;AAID,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,IAAI,CAAC;IACV,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,cAAc,CAkEjB"}

package/dist/cli/deploy-progress.js

@@ -0,0 +1,69 @@
+const SPINNER = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];
+export function createDeployReporter(opts) {
+    const { out, err, machineOutput, isTTY } = opts;
+    // Machine: NDJSON events + the terminal result object (distinguishable by the
+    // presence of `step` on progress events). Generalizes hosting's per-site NDJSON.
+    if (machineOutput) {
+        // Progress is interactive narration; machine output is the terminal result
+        // only (back-compat with the per-unit NDJSON the CLI suite asserts). A future
+        // --progress-json flag can opt into streaming the events.
+        return {
+            report: () => { },
+            result: (r) => (r.ok ? out : err).write(`${JSON.stringify(r)}\n`),
+            dispose: () => { },
+        };
+    }
+    // Non-TTY (piped to a file/CI): a flat, append-only log. The summary always
+    // goes to stdout in text mode (matching the pre-registry behavior).
+    if (!isTTY) {
+        // Piped / CI: the summary only — progress is interactive narration, so a
+        // captured log stays clean (and the CLI suite's stdout assertions hold).
+        return {
+            report: () => { },
+            result: (r) => out.write(`${r.summary}\n`),
+            dispose: () => { },
+        };
+    }
+    // TTY: one live spinner line for the active step. `start`/`progress` set it;
+    // `done`/`skip`/`fail` are implicit (the next step or the result supersedes).
+    let active = null;
+    let frame = 0;
+    const clearLine = () => out.write('\r\x1b[2K');
+    const paint = () => {
+        if (!active)
+            return;
+        const tail = active.pct !== undefined
+            ? ` ${Math.round(active.pct * 100)}%`
+            : ` ${((Date.now() - active.startedAt) / 1000).toFixed(1)}s`;
+        out.write(`\r\x1b[2K${SPINNER[frame % SPINNER.length]} ${active.target}: ${active.message}${tail}`);
+        frame++;
+    };
+    const timer = setInterval(paint, 100);
+    if (typeof timer === 'object' && timer && 'unref' in timer)
+        timer.unref();
+    return {
+        report: (e) => {
+            if (e.status !== 'start' && e.status !== 'progress')
+                return;
+            if (!active || active.step !== e.step) {
+                active = { target: e.target, step: e.step, message: e.message, pct: e.pct, startedAt: Date.now() };
+            }
+            else {
+                active.message = e.message;
+                active.pct = e.pct;
+            }
+            paint();
+        },
+        result: (r) => {
+            clearLine();
+            active = null;
+            out.write(`${r.summary}\n`);
+        },
+        dispose: () => {
+            clearInterval(timer);
+            clearLine();
+            active = null;
+        },
+    };
+}
+//# sourceMappingURL=deploy-progress.js.map

package/dist/cli/deploy-progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-progress.js","sourceRoot":"","sources":["../../src/cli/deploy-progress.ts"],"names":[],"mappings":"AA4BA,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAEnE,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAEhD,8EAA8E;IAC9E,iFAAiF;IACjF,IAAI,aAAa,EAAE,CAAC;QAClB,2EAA2E;QAC3E,8EAA8E;QAC9E,0DAA0D;QAC1D,OAAO;YACL,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;YAChB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;SAClB,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,yEAAyE;QACzE,yEAAyE;QACzE,OAAO;YACL,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;YAChB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC;YAC1C,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;SAClB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,MAAM,GAA8F,IAAI,CAAC;IAC7G,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,IAAI,GACR,MAAM,CAAC,GAAG,KAAK,SAAS;YACtB,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG;YACrC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;QACjE,GAAG,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QACpG,KAAK,EAAE,CAAC;IACV,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,OAAO,IAAI,KAAK;QAAG,KAA2B,CAAC,KAAK,EAAE,CAAC;IACjG,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YACZ,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO;YAC5D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBACtC,MAAM,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACrG,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;gBAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;YACrB,CAAC;YACD,KAAK,EAAE,CAAC;QACV,CAAC;QACD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YACZ,SAAS,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,GAAG,EAAE;YACZ,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,SAAS,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/deploy.d.ts

@@ -0,0 +1,81 @@
+/**
+ * `pyric deploy [target]` — thin wrapper over `pyric-tools/deploy`'s
+ * programmatic surface. Reads `firebase.json` for paths (rules /
+ * indexes / hosting); resolves the project id from `--project` /
+ * `PYRIC_PROJECT` / `.firebaserc`; resolves a service-account scope
+ * from env.
+ *
+ * Supported targets come from the deploy provider registry (`rules`, `indexes`,
+ * `database`, `hosting`, `functions`, `storage`, ...).
+ * `functions` requires `--source <dir>` and a JSON-formatted
+ * `--config` (FunctionDeployConfig[]); this is the minimum to make
+ * the CLI a real handle on the library — extras (multi-function
+ * config files, watch mode, etc.) land in follow-ups.
+ *
+ * Every handler returns an exit code so the dispatcher can `process.exit`
+ * with the correct value:
+ *   0 — deploy succeeded
+ *   1 — usage error (bad/missing flag, no firebase.json, …)
+ *   2 — runtime / API error (auth failed, API non-2xx, …)
+ */
+import { readFile } from 'node:fs/promises';
+import type { createFirestoreDeployTools, createRtdbDeployTools, createHostingDeployTools, createFunctionsDeployTools, ProjectScope } from '../deploy/index.js';
+import type { ParsedArgs } from './parse-args.js';
+import { readFirebaseRc, type FirebaseJson } from './firebase-json.js';
+import type { Authorizer, CredentialStore, OAuthClient } from '../credentials/core/types.js';
+import { ensureApisEnabled } from '../deploy/api-enablement.js';
+/**
+ * Injectable deps so the CLI test suite can verify the dispatch
+ * without touching disk / network. Defaults call the real libs.
+ */
+export interface DeployDeps {
+    readFirebaseJson?: (cwd: string) => Promise<FirebaseJson>;
+    readFirebaseRc?: typeof readFirebaseRc;
+    resolveScope?: (opts: {
+        projectId?: string;
+    }) => Promise<{
+        scope: ProjectScope;
+        source: string;
+        grantedScopes?: string[] | 'all';
+    }>;
+    /** Scope-upgrade preflight injection (tests). */
+    loginAuthorizer?: Authorizer;
+    credentialStore?: CredentialStore;
+    oauthClient?: OAuthClient;
+    /** API-enablement preflight injection (tests). Defaults to the real
+     *  Service Usage detect/enable. */
+    ensureApis?: typeof ensureApisEnabled;
+    readFile?: typeof readFile;
+    createFirestoreDeployTools?: typeof createFirestoreDeployTools;
+    createRtdbDeployTools?: typeof createRtdbDeployTools;
+    createHostingDeployTools?: typeof createHostingDeployTools;
+    createFunctionsDeployTools?: typeof createFunctionsDeployTools;
+    env?: Record<string, string | undefined>;
+    /**
+     * Current git branch resolver for `--channel auto` — used in tests.
+     * Defaults to `git rev-parse --abbrev-ref HEAD`. Resolves `null`
+     * when git is unavailable / not a repo; `'HEAD'` means detached.
+     */
+    getGitBranch?: (cwd: string) => Promise<string | null>;
+    /** Override cwd — used in tests. Defaults to `process.cwd()`. */
+    cwd?: string;
+    /** Override stdout / stderr — used in tests. */
+    stdout?: {
+        write(s: string): void;
+    };
+    stderr?: {
+        write(s: string): void;
+    };
+}
+export declare function runDeploy(parsed: ParsedArgs, deps?: DeployDeps): Promise<number>;
+/**
+ * `pyric hosting:channel:deploy <channelId> [--expires <ttl>]` —
+ * mirror-form alias of `pyric deploy hosting --channel <channelId>`
+ * (upstream spelling: `firebase hosting:channel:deploy`,
+ * clones/firebase-tools/src/commands/hosting-channel-deploy.ts). It
+ * REWRITES the invocation and calls `runDeploy` — one code path, two
+ * spellings; the equivalence test in cli.test.ts pins both forms to
+ * the identical tool invocation so they can't drift.
+ */
+export declare function runHostingChannelDeploy(parsed: ParsedArgs, deps?: DeployDeps): Promise<number>;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/cli/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/cli/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,KAAK,EACV,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAoB,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGzF,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE7F,OAAO,EAAE,iBAAiB,EAAyB,MAAM,6BAA6B,CAAC;AAIvF;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,cAAc,CAAC,EAAE,OAAO,cAAc,CAAC;IACvC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;KAAE,CAAC,CAAC;IACzF,iDAAiD;IACjD,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;uCACmC;IACnC,UAAU,CAAC,EAAE,OAAO,iBAAiB,CAAC;IACtC,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC;IAC3B,0BAA0B,CAAC,EAAE,OAAO,0BAA0B,CAAC;IAC/D,qBAAqB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IACrD,wBAAwB,CAAC,EAAE,OAAO,wBAAwB,CAAC;IAC3D,0BAA0B,CAAC,EAAE,OAAO,0BAA0B,CAAC;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvD,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrC;AAcD,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CA+H1F;AAwQD;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,UAAe,GACpB,OAAO,CAAC,MAAM,CAAC,CAejB"}