npm - pyric-tools - Versions diffs - 0.1.0-alpha.7 - Mend

pyric-tools 0.1.0-alpha.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1052) hide show

package/dist/serve/docs-ui/docs/pyric-storage-compat/index.html ADDED Viewed

@@ -0,0 +1,1076 @@
+<!DOCTYPE html><html lang="en"> <head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>pyric/storage compatibility matrix · Pyric Studio</title><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500;700&display=swap" rel="stylesheet"><link rel="stylesheet" href="/__pyric/ui/_astro/_slug_.BsN3bPok.css"></head> <body>  <header class="studio__bar"> <div class="studio__bar-inner"> <a class="studio__brand" href="/__pyric/ui/" aria-label="Pyric Studio">Pyric</a> <nav class="studio__nav" aria-label="Studio tabs"> <a class="studio__nav-tab" href="/__pyric/ui/"> Home </a><a class="studio__nav-tab" href="/__pyric/ui/firestore"> Firestore </a><a class="studio__nav-tab" href="/__pyric/ui/auth"> Auth </a><a class="studio__nav-tab" href="/__pyric/ui/rtdb"> RTDB </a><a class="studio__nav-tab" href="/__pyric/ui/storage"> Storage </a><a class="studio__nav-tab" href="/__pyric/ui/traffic"> Traffic </a><a class="studio__nav-tab" href="/__pyric/ui/prototype"> Prototype </a><a class="studio__nav-tab" href="/__pyric/ui/settings"> Settings </a><a class="studio__nav-tab" href="/__pyric/ui/docs" aria-current="page"> Docs </a> </nav> </div> </header> <div class="docs-shell">  <details class="docs-nav-drawer"> <summary>Navigate</summary> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div> <script type="module">let i=null;function d(t){return i||(i=fetch(t).then(e=>e.json())),i}function l(t,e){return t.title.toLowerCase().includes(e)||t.excerpt.toLowerCase().includes(e)?!0:t.headings.some(r=>r.text.toLowerCase().includes(e))}function u(t,e,r){if(e.innerHTML="",t.length===0){e.hidden=!1;{const n=document.createElement("li");n.className="docs-search-empty",n.textContent="No matches",e.appendChild(n)}return}e.hidden=!1;for(const n of t.slice(0,8)){const s=document.createElement("li"),c=document.createElement("a");c.href=n.path;const o=document.createElement("span");o.className="docs-search-result-title",o.textContent=n.title;const a=document.createElement("span");a.className="docs-search-result-meta",a.textContent=[n.group,n.section].filter(Boolean).join(" / "),c.append(o,a),s.appendChild(c),e.appendChild(s)}}document.querySelectorAll(".docs-search").forEach(t=>{const e=t.dataset.indexUrl,r=t.querySelector(".docs-search-input"),n=t.querySelector(".docs-search-results");r.addEventListener("input",async()=>{const s=r.value.trim().toLowerCase();if(!s){n.hidden=!0,n.innerHTML="";return}const{pages:c}=await d(e);r.value.trim().toLowerCase()===s&&u(c.filter(o=>l(o,s)),n)}),r.addEventListener("focus",()=>{d(e),n.childElementCount>0&&(n.hidden=!1)}),r.addEventListener("keydown",s=>{s.key==="Escape"&&(r.value="",n.hidden=!0,n.innerHTML="",r.blur())}),r.addEventListener("blur",()=>{window.setTimeout(()=>{n.hidden=!0},150)})});document.addEventListener("keydown",t=>{if(!(t.metaKey||t.ctrlKey)||t.key.toLowerCase()!=="k")return;const e=[...document.querySelectorAll(".docs-search-input")].find(r=>r.offsetParent!==null);e&&(t.preventDefault(),e.focus(),e.select())});</script> <details class="docs-nav-group"> <summary>pyric-tools</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-tools/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-tutorials-getting-started/"> Getting started </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-tutorials-server-adoption/"> Server adoption </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-tutorials-wire-claude-code/"> Wire Claude Code </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-how-to-build-a-standalone-binary/"> Build a standalone binary </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-configure-auth-providers-and-domains/"> Configure auth providers </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-discover-a-schema-from-firestore/"> Infer a schema </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-promote-sandbox-state-to-a-fixture/"> Promote sandbox state </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-serve-persistence-and-multi-tab/"> Persistence &amp; multi-tab </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-use-the-vite-plugin/"> Use the Vite plugin </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-verify-against-a-captured-session/"> Verify rules against prod </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-reference-cli/"> pyric CLI reference </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-reference-verify/"> Verify API </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Bridge </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-bridge/"> pyric-tools/bridge </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>pyric-tools / deploy</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy-tutorials-01-deploy-a-cloud-function/"> Deploy a Cloud Function </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-build-projectscope-from-firebase-auth/"> Scope from Firebase Auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-build-projectscope-from-service-account/"> Scope from service account </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-bundle-and-deploy-a-function/"> Bundle &amp; deploy a function </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-firestore-indexes/"> Deploy Firestore indexes </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-firestore-rules/"> Deploy Firestore rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-hosting-rewrites/"> Deploy Hosting rewrites </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-realtime-database-rules/"> Deploy RTDB rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-to-a-preview-channel/"> Deploy to a preview channel </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-handle-errors-and-outcomes/"> Handle errors and outcomes </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-provision-a-firestore-database/"> Provision a database </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-register-tools-with-an-agent/"> Register deploy tools </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-cli-agent-io/"> pyric deploy agent I/O </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-error-codes/"> Error codes by operation </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-firestore-namespace/"> firestore namespace </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-functions-namespace/"> functions namespace </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-hosting-config/"> firebase.json hosting config </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-hosting-namespace/"> hosting namespace </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-rtdb-namespace/"> rtdb namespace </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-scope-and-outcome/"> Scope and Outcome </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-tool-factories/"> Tool factories </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy-explanation-primitives-vs-orchestrators/"> Primitives vs. orchestrators </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-explanation-token-caching/"> Token caching and memoizeTtl </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-explanation-why-no-firebase-cli/"> Why no Firebase CLI </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-explanation-why-this-package-exists/"> Why this package exists </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>pyric / firestore</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-tutorials-01-write-a-sandbox-demo/"> Sandbox-backed demo </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-tutorials-02-swap-to-prod-backend/"> Swap to prod backend </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-build-queries/"> Build queries </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-migrate-from-firebase-firestore/"> Migrate from Firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-pick-a-backend/"> Pick a backend </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-run-a-transaction/"> Run a transaction </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-use-onsnapshot/"> Use onSnapshot </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-use-sandbox-ops/"> Use sandbox-only ops </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-feature-matrix/"> Feature matrix </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-getfirestore/"> getFirestore overloads </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-query-constraints/"> Query constraints </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-sandbox-ops/"> Sandbox-only operations </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-tool-factories/"> Tool factories </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-explanation-rules-tooling-is-separate/"> Rules tooling is separate </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-explanation-target-symbol-opacity/"> TARGET_SYMBOL opacity </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-explanation-two-backends-one-surface/"> Two backends, one surface </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Compat </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-compat/"> Compatibility matrix </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>pyric / rules</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-rules/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-rules-tutorials-01-lint-your-first-rules-file/"> Lint your first rules file </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-tutorials-02-write-a-test-suite-for-your-rules/"> Write a rules test suite </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-rules-how-to-compare-rulesets-for-weakening/"> Compare rulesets </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-inspect-rules-via-the-ast/"> Inspect rules via the AST </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-lint-rules-source/"> Lint a rules source </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-pin-request-time/"> Pin request.time </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-register-tools-with-an-agent/"> Register rules tools </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-resolve-module-imports/"> Resolve 2+modules imports </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-simulate-rules-locally/"> Simulate rules locally </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-test-rules-against-firebase/"> Test rules against Firebase </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-rules-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-ast/"> AST </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-errors/"> Errors </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-lint-rules/"> Lint rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-simulator-context/"> Simulator context </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-stdlib-modules/"> Standard library modules </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-test-case-schema/"> TestCase schema </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-validator-findings/"> Validator findings </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-value-wrappers/"> Value wrappers </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-rules-explanation-agent-failure-modes/"> Agent failure modes </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-lint-vs-validate-vs-simulate-vs-test/"> Lint vs validate vs test </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-runtime-budget-and-shared-gates/"> Runtime budget and gates </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-sentinel-expression-engine/"> Sentinel expression engine </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-simulator-vs-rules-test-api/"> Simulator vs Rules Test API </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-the-2-plus-modules-extension/"> The 2+modules extension </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-value-wrappers-design/"> Value wrapper design </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-why-this-package-exists/"> Why this package exists </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>pyric / sandbox</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox-tutorials-01-your-first-sandbox-session/"> Your first sandbox session </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-tutorials-02-use-the-sandbox-in-a-test-harness/"> Sandbox in a test harness </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-tutorials-03-build-a-traffic-monitor/"> Traffic monitor </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-multiple-isolated-sandboxes/"> Run isolated sandboxes </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-observe-events/"> Observe sandbox events </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-pick-an-adapter/"> Pick an adapter </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-replay-events/"> Replay events </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-reset-between-tests/"> Reset between tests </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-seed-data-and-rules/"> Seed data and rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-switch-users/"> Switch users </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-use-admin-reads/"> Use admin reads </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-divergences/"> Divergence </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-error-codes/"> SandboxError codes </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-internal-protocol/"> The /internal protocol </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-sandbox-and-context/"> Sandbox and context </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-sandbox-event/"> SandboxEvent </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-snapshot-and-admin/"> Snapshot and admin reads </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-every-op-is-a-request/"> Every operation is a request </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-identity-is-a-context/"> Identity is a context </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-internal-adapter-protocol/"> The /internal protocol </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-listener-re-evaluation/"> Listener re-evaluation </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-local-backend-vs-firestore-offline/"> Local backend vs. offline </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-why-adapters-are-siblings/"> Why adapters are siblings </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-why-this-package-exists/"> Why this package exists </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" open> <summary>pyric / storage</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-storage/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-tutorials-01-upload-and-download/"> Upload and download </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-how-to-enforce-rules/"> Enforce Storage rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-how-to-list-and-delete/"> List and delete objects </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-how-to-round-trip-metadata/"> Round-trip metadata </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-how-to-switch-backends/"> Switch backends </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-how-to-test-rule-expressions/"> Test rule expressions </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-error-codes/"> Error codes </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-rules-subset/"> Storage rules subset </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-storage-options/"> StorageOptions </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-explanation-implementation-scope/"> Implementation scope </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-explanation-session-archive-use-case/"> The session-archive driver </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-explanation-why-indexeddb/"> Why IndexedDB </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Compat </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-compat/" aria-current="page"> Compatibility matrix </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>pyric / auth</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-auth/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-auth-reference-api/"> API reference </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-reference-feature-matrix/"> Feature matrix </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-reference-sandbox-test-driver/"> Sandbox test driver </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Compat </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-auth-compat/"> Compatibility matrix </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>pyric / database</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-database/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-database-tutorials-01-author-rtdb-rules-with-constraints/"> Author RTDB rules </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-database-reference-rules-tooling/"> RTDB rules tooling </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-database-explanation-rules-authoring-and-deploy-are-separate/"> Authoring vs. deploy </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Compat </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-database-compat/"> Compatibility matrix </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>pyric-admin / firestore</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore-tutorials-01-first-admin-session/"> First admin session </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-run-a-transaction/"> Run a transaction </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-seed-and-set-rules/"> Seed and set rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-translate-denials/"> Translate denials </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-use-onsnapshot/"> Use onSnapshot </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-write-a-batch/"> Write a batch </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-onsnapshot/"> onSnapshot overloads </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-re-exported-types/"> Re-exported types </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-sandbox-firestore/"> SandboxFirestore surface </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore-explanation-error-translation/"> Error translation </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-explanation-per-call-delegate/"> Per-call delegate </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-explanation-why-mirror-admin-shape/"> Why mirror the admin SDK </a> </li> </ul> </div> </div> </details><details class="docs-nav-group"> <summary>@pyric/ui</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ui/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Primitives </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-primitives-badge/"> &lt;Badge&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-confirmdialog/"> &lt;ConfirmDialog&gt; + useConfirm </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-copybutton/"> &lt;CopyButton&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-jsonview/"> &lt;JsonView&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-segmentedcontrol/"> &lt;SegmentedControl&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-toast/"> &lt;ToastProvider&gt; + useToast </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-virtuallist/"> &lt;VirtualList&gt; </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Firestore </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-firestore-collectionlist/"> &lt;CollectionList&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-deletewithconfirm/"> &lt;DeleteWithConfirm&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-documenteditor/"> &lt;DocumentEditor&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-documentlist/"> &lt;DocumentList&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-documentpreview/"> &lt;DocumentPreview&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-querybuilder/"> &lt;QueryBuilder&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-referencepicker/"> &lt;ReferencePicker&gt; </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Storage </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-storage-deleteselectionwithconfirm/"> &lt;DeleteSelectionWithConfirm&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-objectbrowser/"> &lt;ObjectBrowser&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-objectinspector/"> &lt;ObjectInspector&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-pathbreadcrumb/"> &lt;PathBreadcrumb&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage/"> @pyric/ui/storage </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-uploaddropzone/"> &lt;UploadDropzone&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-rules-aware-affordances/"> Rules-aware affordances </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-usestoragerulesgate/"> useStorageRulesGate </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Traffic </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-traffic/"> @pyric/ui/traffic </a> </li><li> <a href="/__pyric/ui/docs/ui-traffic-ruleheatmap/"> &lt;RuleHeatmap&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-traffic-trafficdetail/"> &lt;TrafficDetail&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-traffic-trafficlog/"> TrafficLog components </a> </li><li> <a href="/__pyric/ui/docs/ui-traffic-trafficstats/"> &lt;TrafficStats&gt; </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading"> Auth </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-auth-authsigninhelper/"> AuthSignInHelper </a> </li><li> <a href="/__pyric/ui/docs/ui-auth-authusers/"> Auth users admin </a> </li> </ul> </div> </div> </details> </nav> </details> <nav class="docs-nav" aria-label="Documentation"> <div class="docs-search" data-index-url="/__pyric/ui/docs/index.json"> <div class="docs-search-field"> <svg class="docs-search-icon" viewBox="0 0 16 16" width="14" height="14" aria-hidden="true"> <path d="M11.5 11.5 15 15M13 7A6 6 0 1 1 1 7a6 6 0 0 1 12 0Z" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"></path> </svg> <input type="text" class="docs-search-input" placeholder="Search docs" aria-label="Search docs" autocomplete="off" spellcheck="false"> <kbd class="docs-search-kbd">⌘K</kbd> </div> <ul class="docs-search-results" hidden></ul> </div>  <details class="docs-nav-group" id="nav-group-pyric-tools"> <summary>pyric-tools</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-tools/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-tools-tutorials"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-tutorials-getting-started/"> Getting started </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-tutorials-server-adoption/"> Server adoption </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-tutorials-wire-claude-code/"> Wire Claude Code </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-tools-how-to"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-how-to-build-a-standalone-binary/"> Build a standalone binary </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-configure-auth-providers-and-domains/"> Configure auth providers </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-discover-a-schema-from-firestore/"> Infer a schema </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-promote-sandbox-state-to-a-fixture/"> Promote sandbox state </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-serve-persistence-and-multi-tab/"> Persistence &amp; multi-tab </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-use-the-vite-plugin/"> Use the Vite plugin </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-how-to-verify-against-a-captured-session/"> Verify rules against prod </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-tools-reference"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-reference-cli/"> pyric CLI reference </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-reference-verify/"> Verify API </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-tools-bridge"> Bridge </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-bridge/"> pyric-tools/bridge </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-pyric-tools-deploy"> <summary>pyric-tools / deploy</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-tools-deploy-tutorials"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy-tutorials-01-deploy-a-cloud-function/"> Deploy a Cloud Function </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-tools-deploy-how-to"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-build-projectscope-from-firebase-auth/"> Scope from Firebase Auth </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-build-projectscope-from-service-account/"> Scope from service account </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-bundle-and-deploy-a-function/"> Bundle &amp; deploy a function </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-firestore-indexes/"> Deploy Firestore indexes </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-firestore-rules/"> Deploy Firestore rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-hosting-rewrites/"> Deploy Hosting rewrites </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-realtime-database-rules/"> Deploy RTDB rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-deploy-to-a-preview-channel/"> Deploy to a preview channel </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-handle-errors-and-outcomes/"> Handle errors and outcomes </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-provision-a-firestore-database/"> Provision a database </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-how-to-register-tools-with-an-agent/"> Register deploy tools </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-tools-deploy-reference"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-cli-agent-io/"> pyric deploy agent I/O </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-error-codes/"> Error codes by operation </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-firestore-namespace/"> firestore namespace </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-functions-namespace/"> functions namespace </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-hosting-config/"> firebase.json hosting config </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-hosting-namespace/"> hosting namespace </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-rtdb-namespace/"> rtdb namespace </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-scope-and-outcome/"> Scope and Outcome </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-reference-tool-factories/"> Tool factories </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-tools-deploy-explanation"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-tools-deploy-explanation-primitives-vs-orchestrators/"> Primitives vs. orchestrators </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-explanation-token-caching/"> Token caching and memoizeTtl </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-explanation-why-no-firebase-cli/"> Why no Firebase CLI </a> </li><li> <a href="/__pyric/ui/docs/pyric-tools-deploy-explanation-why-this-package-exists/"> Why this package exists </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-pyric-firestore"> <summary>pyric / firestore</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-firestore-tutorials"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-tutorials-01-write-a-sandbox-demo/"> Sandbox-backed demo </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-tutorials-02-swap-to-prod-backend/"> Swap to prod backend </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-firestore-how-to"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-build-queries/"> Build queries </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-migrate-from-firebase-firestore/"> Migrate from Firestore </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-pick-a-backend/"> Pick a backend </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-run-a-transaction/"> Run a transaction </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-use-onsnapshot/"> Use onSnapshot </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-how-to-use-sandbox-ops/"> Use sandbox-only ops </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-firestore-reference"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-feature-matrix/"> Feature matrix </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-getfirestore/"> getFirestore overloads </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-query-constraints/"> Query constraints </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-sandbox-ops/"> Sandbox-only operations </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-reference-tool-factories/"> Tool factories </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-firestore-explanation"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-explanation-rules-tooling-is-separate/"> Rules tooling is separate </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-explanation-target-symbol-opacity/"> TARGET_SYMBOL opacity </a> </li><li> <a href="/__pyric/ui/docs/pyric-firestore-explanation-two-backends-one-surface/"> Two backends, one surface </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-firestore-compat"> Compat </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-firestore-compat/"> Compatibility matrix </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-pyric-rules"> <summary>pyric / rules</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-rules/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-rules-tutorials"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-rules-tutorials-01-lint-your-first-rules-file/"> Lint your first rules file </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-tutorials-02-write-a-test-suite-for-your-rules/"> Write a rules test suite </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-rules-how-to"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-rules-how-to-compare-rulesets-for-weakening/"> Compare rulesets </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-inspect-rules-via-the-ast/"> Inspect rules via the AST </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-lint-rules-source/"> Lint a rules source </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-pin-request-time/"> Pin request.time </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-register-tools-with-an-agent/"> Register rules tools </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-resolve-module-imports/"> Resolve 2+modules imports </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-simulate-rules-locally/"> Simulate rules locally </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-how-to-test-rules-against-firebase/"> Test rules against Firebase </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-rules-reference"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-rules-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-ast/"> AST </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-errors/"> Errors </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-lint-rules/"> Lint rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-simulator-context/"> Simulator context </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-stdlib-modules/"> Standard library modules </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-test-case-schema/"> TestCase schema </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-validator-findings/"> Validator findings </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-reference-value-wrappers/"> Value wrappers </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-rules-explanation"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-rules-explanation-agent-failure-modes/"> Agent failure modes </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-lint-vs-validate-vs-simulate-vs-test/"> Lint vs validate vs test </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-runtime-budget-and-shared-gates/"> Runtime budget and gates </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-sentinel-expression-engine/"> Sentinel expression engine </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-simulator-vs-rules-test-api/"> Simulator vs Rules Test API </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-the-2-plus-modules-extension/"> The 2+modules extension </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-value-wrappers-design/"> Value wrapper design </a> </li><li> <a href="/__pyric/ui/docs/pyric-rules-explanation-why-this-package-exists/"> Why this package exists </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-pyric-sandbox"> <summary>pyric / sandbox</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-sandbox-tutorials"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox-tutorials-01-your-first-sandbox-session/"> Your first sandbox session </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-tutorials-02-use-the-sandbox-in-a-test-harness/"> Sandbox in a test harness </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-tutorials-03-build-a-traffic-monitor/"> Traffic monitor </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-sandbox-how-to"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-multiple-isolated-sandboxes/"> Run isolated sandboxes </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-observe-events/"> Observe sandbox events </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-pick-an-adapter/"> Pick an adapter </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-replay-events/"> Replay events </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-reset-between-tests/"> Reset between tests </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-seed-data-and-rules/"> Seed data and rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-switch-users/"> Switch users </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-how-to-use-admin-reads/"> Use admin reads </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-sandbox-reference"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-divergences/"> Divergence </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-error-codes/"> SandboxError codes </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-internal-protocol/"> The /internal protocol </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-sandbox-and-context/"> Sandbox and context </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-sandbox-event/"> SandboxEvent </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-reference-snapshot-and-admin/"> Snapshot and admin reads </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-sandbox-explanation"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-every-op-is-a-request/"> Every operation is a request </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-identity-is-a-context/"> Identity is a context </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-internal-adapter-protocol/"> The /internal protocol </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-listener-re-evaluation/"> Listener re-evaluation </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-local-backend-vs-firestore-offline/"> Local backend vs. offline </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-why-adapters-are-siblings/"> Why adapters are siblings </a> </li><li> <a href="/__pyric/ui/docs/pyric-sandbox-explanation-why-this-package-exists/"> Why this package exists </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-pyric-storage" open> <summary>pyric / storage</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-storage/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-storage-tutorials"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-tutorials-01-upload-and-download/"> Upload and download </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-storage-how-to"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-how-to-enforce-rules/"> Enforce Storage rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-how-to-list-and-delete/"> List and delete objects </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-how-to-round-trip-metadata/"> Round-trip metadata </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-how-to-switch-backends/"> Switch backends </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-how-to-test-rule-expressions/"> Test rule expressions </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-storage-reference"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-error-codes/"> Error codes </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-rules-subset/"> Storage rules subset </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-reference-storage-options/"> StorageOptions </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-storage-explanation"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-explanation-implementation-scope/"> Implementation scope </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-explanation-session-archive-use-case/"> The session-archive driver </a> </li><li> <a href="/__pyric/ui/docs/pyric-storage-explanation-why-indexeddb/"> Why IndexedDB </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-storage-compat"> Compat </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-storage-compat/" aria-current="page"> Compatibility matrix </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-pyric-auth"> <summary>pyric / auth</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-auth/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-auth-reference"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-auth-reference-api/"> API reference </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-reference-feature-matrix/"> Feature matrix </a> </li><li> <a href="/__pyric/ui/docs/pyric-auth-reference-sandbox-test-driver/"> Sandbox test driver </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-auth-compat"> Compat </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-auth-compat/"> Compatibility matrix </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-pyric-database"> <summary>pyric / database</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-database/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-database-tutorials"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-database-tutorials-01-author-rtdb-rules-with-constraints/"> Author RTDB rules </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-database-reference"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-database-reference-rules-tooling/"> RTDB rules tooling </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-database-explanation"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-database-explanation-rules-authoring-and-deploy-are-separate/"> Authoring vs. deploy </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-database-compat"> Compat </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-database-compat/"> Compatibility matrix </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-pyric-admin-firestore"> <summary>pyric-admin / firestore</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-admin-firestore-tutorials"> Tutorials </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore-tutorials-01-first-admin-session/"> First admin session </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-admin-firestore-how-to"> How-to </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-run-a-transaction/"> Run a transaction </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-seed-and-set-rules/"> Seed and set rules </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-translate-denials/"> Translate denials </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-use-onsnapshot/"> Use onSnapshot </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-how-to-write-a-batch/"> Write a batch </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-admin-firestore-reference"> Reference </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-api/"> Public API </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-onsnapshot/"> onSnapshot overloads </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-re-exported-types/"> Re-exported types </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-reference-sandbox-firestore/"> SandboxFirestore surface </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-admin-firestore-explanation"> Explanation </h2> <ul> <li> <a href="/__pyric/ui/docs/pyric-admin-firestore-explanation-error-translation/"> Error translation </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-explanation-per-call-delegate/"> Per-call delegate </a> </li><li> <a href="/__pyric/ui/docs/pyric-admin-firestore-explanation-why-mirror-admin-shape/"> Why mirror the admin SDK </a> </li> </ul> </div> </div> </details><details class="docs-nav-group" id="nav-group-pyric-ui"> <summary>@pyric/ui</summary> <div class="docs-nav-group-body"> <div class="docs-nav-section">  <ul> <li> <a href="/__pyric/ui/docs/ui/"> Overview </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-ui-primitives"> Primitives </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-primitives-badge/"> &lt;Badge&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-confirmdialog/"> &lt;ConfirmDialog&gt; + useConfirm </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-copybutton/"> &lt;CopyButton&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-jsonview/"> &lt;JsonView&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-segmentedcontrol/"> &lt;SegmentedControl&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-toast/"> &lt;ToastProvider&gt; + useToast </a> </li><li> <a href="/__pyric/ui/docs/ui-primitives-virtuallist/"> &lt;VirtualList&gt; </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-ui-firestore"> Firestore </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-firestore-collectionlist/"> &lt;CollectionList&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-deletewithconfirm/"> &lt;DeleteWithConfirm&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-documenteditor/"> &lt;DocumentEditor&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-documentlist/"> &lt;DocumentList&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-documentpreview/"> &lt;DocumentPreview&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-querybuilder/"> &lt;QueryBuilder&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-firestore-referencepicker/"> &lt;ReferencePicker&gt; </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-ui-storage"> Storage </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-storage-deleteselectionwithconfirm/"> &lt;DeleteSelectionWithConfirm&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-objectbrowser/"> &lt;ObjectBrowser&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-objectinspector/"> &lt;ObjectInspector&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-pathbreadcrumb/"> &lt;PathBreadcrumb&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage/"> @pyric/ui/storage </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-uploaddropzone/"> &lt;UploadDropzone&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-rules-aware-affordances/"> Rules-aware affordances </a> </li><li> <a href="/__pyric/ui/docs/ui-storage-usestoragerulesgate/"> useStorageRulesGate </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-ui-traffic"> Traffic </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-traffic/"> @pyric/ui/traffic </a> </li><li> <a href="/__pyric/ui/docs/ui-traffic-ruleheatmap/"> &lt;RuleHeatmap&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-traffic-trafficdetail/"> &lt;TrafficDetail&gt; </a> </li><li> <a href="/__pyric/ui/docs/ui-traffic-trafficlog/"> TrafficLog components </a> </li><li> <a href="/__pyric/ui/docs/ui-traffic-trafficstats/"> &lt;TrafficStats&gt; </a> </li> </ul> </div><div class="docs-nav-section"> <h2 class="docs-nav-heading" id="nav-section-pyric-ui-auth"> Auth </h2> <ul> <li> <a href="/__pyric/ui/docs/ui-auth-authsigninhelper/"> AuthSignInHelper </a> </li><li> <a href="/__pyric/ui/docs/ui-auth-authusers/"> Auth users admin </a> </li> </ul> </div> </div> </details> </nav> <main class="doc-main"> <nav class="docs-breadcrumbs" aria-label="Breadcrumb"> <ol> <li>  <a href="/__pyric/ui/docs/pyric-storage/">pyric / storage</a> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <a href="#nav-section-pyric-storage-compat">Compat</a> </li><li> <span class="docs-breadcrumbs-sep" aria-hidden="true">/</span> <span aria-current="page">Compatibility matrix</span> </li> </ol> </nav> <article class="prose">  <!-- Generated from scripts/compat/registry/*.ts. Do not edit by hand; run bun run compat:generate. -->
+<h1 id="pyricstorage-compatibility-matrix"><code>pyric/storage</code> compatibility matrix</h1>
+<blockquote>
+<p>⚠ <strong>EXPERIMENTAL — not v1-supported.</strong> <code>pyric/storage</code> is functional but
+work-in-progress. The v1-supported, conformance-held surface is <strong>auth +
+firestore + rules</strong>. The <code>✓</code> rows below are verified <strong>sandbox-side</strong> by unit
+probes against the documented <code>firebase/storage</code> contract — they are NOT
+wrong — but most are <strong>not yet captured against a live prod project</strong> (no
+<code>oracle:</code> citation), so conformance is best-effort, not guaranteed. Don’t
+depend on storage parity for a production swap yet.</p>
+</blockquote>
+<p>The single readable contract for “what this shim guarantees vs the
+production <code>firebase/storage</code> SDK.”</p>
+<p>See the design rationale for the methodology (vocabulary
+of conformance / oracle / matrix; how to add rows; how the runner
+attributes failures).</p>
+<h2 id="status-legend">Status legend</h2>
+<div class="table-scroll">
+<table><thead><tr><th>Status</th><th>Meaning</th></tr></thead><tbody><tr><td>✓</td><td><strong>Conforming</strong> — sandbox matches prod, locked by a passing probe</td></tr><tr><td>⚠</td><td><strong>Diverged (documented)</strong> — intentional difference with a written reason</td></tr><tr><td>✗</td><td><strong>Bug</strong> — should match prod but doesn’t; failing probe pins it</td></tr><tr><td>—</td><td><strong>Unsupported</strong> — not implemented yet (deliberately or pending)</td></tr><tr><td>?</td><td><strong>Unverified</strong> — claim from docs that we haven’t yet observed prod-side</td></tr></tbody></table></div>
+<p>Probe references: <code>unit:&#x3C;file></code> means a Bun test under
+<code>packages/pyric/test/storage/&#x3C;file></code>. <code>oracle:&#x3C;name></code> cites an observation
+under <code>scripts/oracle/observations/&#x3C;name>.json</code> captured by
+<code>scripts/oracle/run.ts</code> against a real Firebase project.</p>
+<p>Targets:</p>
+<ul>
+<li><strong>sandbox</strong> — IDB-backed handle built via <code>getStorageSandbox(target, options?)</code>.
+Identity is either a <code>SandboxContext</code> (frozen at handle-construction)
+or a <code>Sandbox</code> (anonymous, via <code>sandbox.withAuth(null)</code>). Rule
+evaluation runs in-process via <code>enforce.ts</code>.</li>
+<li><strong>prod</strong> — <code>firebase/storage</code> target built via <code>getStorageProd(app)</code>.
+Identity flows naturally from <code>firebase/auth</code>’s <code>currentUser</code>; rules
+enforced server-side by Firebase.</li>
+</ul>
+<p>Storage differs from auth/firestore in a few load-bearing ways the
+matrix has to cover:</p>
+<ul>
+<li>Two layers of payload (the blob bytes AND the metadata record).</li>
+<li>Content-type negotiation with three sources (caller hint, blob’s
+intrinsic type, fallback to <code>application/octet-stream</code>).</li>
+<li>Reference identity is a value object, not an interned handle —
+<code>ref(s, 'a/b')</code> twice are equal-by-path, not <code>===</code>.</li>
+<li>The persistence layer for sandbox is IDB (with <code>fake-indexeddb</code> in
+tests); prod is the Firebase Storage REST API plus a downloadURL
+surface backed by token-signed GETs.</li>
+</ul>
+<hr>
+<h2 id="getstoragesandboxtarget-options--getstorageprodapp-options--initializer"><code>getStorageSandbox(target, options?)</code> / <code>getStorageProd(app, options?)</code> — initializer</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>1</td><td><code>getStorageSandbox(ctx)</code> returns a tagged sandbox-target handle (frozen identity)</td><td>✓</td><td><code>unit:service.test.ts</code></td></tr><tr><td>2</td><td><code>getStorageSandbox(sandbox)</code> wraps a bare Sandbox with an anonymous context (<code>auth: null</code>)</td><td>✓</td><td><code>unit:service.test.ts</code></td></tr><tr><td>3</td><td><code>getStorageProd(app)</code> returns a tagged prod-target handle</td><td>✓</td><td><code>unit:prod-target.test.ts</code></td></tr><tr><td>4</td><td>Two <code>getStorageSandbox(ctx)</code> calls on the same context return the SAME wrapper (identity-stable)</td><td>✓</td><td><code>unit:service.test.ts</code> (“returns the same handle for repeated calls on the same context”)</td></tr><tr><td>4a</td><td>Two <code>getStorageSandbox(sandbox)</code> calls on a bare <code>Sandbox</code> return the SAME wrapper (identity-stable)</td><td>✓</td><td>ST-B3 fixed: <code>withAuth(null)</code> mints a fresh context per call, so the per-context cache missed and bare-Sandbox calls returned different handles. A <code>Sandbox</code>-keyed cache makes the convenience path stable, matching the docstring. Probe: <code>unit:service.test.ts</code> (“ST-B3: returns the same handle for repeated bare-Sandbox calls”).</td></tr><tr><td>5</td><td>Two different <code>SandboxContext</code>s on the same <code>Sandbox</code> get DIFFERENT handles but share the underlying <code>StorageService</code> (IDB)</td><td>✓</td><td><code>unit:service.test.ts</code> (“shares the underlying StorageService across contexts on the same sandbox”)</td></tr><tr><td>6</td><td><code>options.bucket</code> round-trips on metadata records; v1 has a single implicit bucket but the field is preserved</td><td>✓</td><td><code>unit:service.test.ts</code> (“records the bucket value on the handle”)</td></tr><tr><td>7</td><td><code>options.dbName</code> honored on the FIRST call per <code>Sandbox</code>; second-call overrides ignored</td><td>✓</td><td><code>unit:service.test.ts</code> (“dbName only takes effect on the sandbox’s first getStorage call”)</td></tr><tr><td>8</td><td><code>options.rules</code> parsed eagerly — malformed rules throw <code>SyntaxError</code> at config time</td><td>✓</td><td><code>unit:rules.test.ts</code> (parse errors propagate from <code>parseStorageRules</code>)</td></tr><tr><td>9</td><td>Handle dispatch by <code>TARGET_SYMBOL</code> brand — ops route to their owning target</td><td>✓</td><td><code>unit:prod-target.test.ts</code> (“getStorageService throws — service is sandbox-only”)</td></tr><tr><td>10</td><td>Unrecognized handle (not produced by a factory) → <code>TypeError</code> “not a FirebaseStorage handle”</td><td>✓</td><td><code>unit:prod-target.test.ts</code> (“throws TypeError on objects without TARGET_SYMBOL”)</td></tr><tr><td>11</td><td>Prod handle: <code>bucket</code> field sourced from the SDK’s resolved bucket (so <code>gs://</code> overrides round-trip)</td><td>✓</td><td>implicit in <code>unit:prod-target.test.ts</code></td></tr><tr><td>12</td><td><code>getStorageSandbox(undefined)</code> / bare-call default-to-sandbox in playground preview</td><td>—</td><td>not yet wired — mirror of the <code>getFirestore</code> wrap (auth #4 / firestore #4)</td></tr></tbody></table></div>
+<h2 id="refstorage-path--refparent-path--reference-constructor"><code>ref(storage[, path])</code> / <code>ref(parent, path)</code> — reference constructor</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>13</td><td><code>ref(storage)</code> returns the root ref — <code>fullPath === ''</code>, <code>name === ''</code>, <code>parent === null</code>, <code>root === self</code></td><td>✓</td><td><code>unit:reference.test.ts</code> (“root reference has empty fullPath, null parent, and equal root”)</td></tr><tr><td>14</td><td><code>ref(storage, 'sessions/s1.json')</code> populates <code>fullPath</code>, <code>name</code> (last segment), <code>parent</code> (path without last segment)</td><td>✓</td><td><code>unit:reference.test.ts</code> (“ref(storage, path) populates fullPath and name from the last segment”)</td></tr><tr><td>15</td><td>Path normalization: leading slashes stripped (<code>/sessions/s1</code> → <code>sessions/s1</code>)</td><td>✓</td><td><code>unit:reference.test.ts</code> (“normalizes leading/trailing/double slashes”)</td></tr><tr><td>16</td><td>Path normalization: trailing slashes stripped</td><td>✓</td><td><code>unit:reference.test.ts</code></td></tr><tr><td>17</td><td>Path normalization: repeated internal slashes collapsed (<code>a//b</code> → <code>a/b</code>)</td><td>✓</td><td><code>unit:reference.test.ts</code></td></tr><tr><td>18</td><td><code>ref(parent, child)</code> joins relative to parent’s <code>fullPath</code></td><td>✓</td><td><code>unit:reference.test.ts</code> (“ref(parent, child) joins relative to the parent”)</td></tr><tr><td>19</td><td><code>parent</code> chain walks back to root (each <code>.parent</code> strips one segment until empty, then <code>null</code>)</td><td>✓</td><td><code>unit:reference.test.ts</code> (“parent traversal walks back to root”)</td></tr><tr><td>20</td><td><code>root</code> accessor returns the bucket-root ref regardless of starting depth</td><td>✓</td><td><code>unit:reference.test.ts</code></td></tr><tr><td>21</td><td><code>toString()</code> returns <code>gs://&#x3C;bucket>/&#x3C;fullPath></code></td><td>✓</td><td><code>unit:reference.test.ts</code> (“toString returns gs://bucket/path”)</td></tr><tr><td>22</td><td>Reference identity: two <code>ref(s, 'a/b')</code> calls are equal-by-<code>toString</code> but NOT <code>===</code> (value objects, not interned)</td><td>✓</td><td>(implicit in <code>unit:reference.test.ts</code> parent-chain test — each <code>.parent</code> returns a fresh object)</td></tr><tr><td>23</td><td>Prod refs proxy the underlying <code>firebase/storage</code> ref via a WeakMap; <code>parent</code> / <code>root</code> recursively wrap to keep target consistent</td><td>✓</td><td><code>unit:prod-target.test.ts</code> (delegation pattern documented in <code>reference.ts</code>)</td></tr></tbody></table></div>
+<h2 id="uploadbytesref-data-metadata--write-blob"><code>uploadBytes(ref, data, metadata?)</code> — write blob</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>24</td><td>Accepts <code>Blob</code> payload; returns <code>UploadResult</code> with populated <code>metadata</code></td><td>✓</td><td><code>unit:reference.test.ts</code> (“accepts a Blob and round-trips through getBlob”)</td></tr><tr><td>25</td><td>Accepts <code>Uint8Array</code> payload</td><td>✓</td><td><code>unit:reference.test.ts</code> (“accepts a Uint8Array”)</td></tr><tr><td>26</td><td>Accepts <code>ArrayBuffer</code> payload</td><td>✓</td><td><code>unit:reference.test.ts</code> (“accepts an ArrayBuffer”)</td></tr><tr><td>27</td><td>ContentType precedence: caller’s <code>metadata.contentType</code> > <code>Blob.type</code> > <code>application/octet-stream</code></td><td>✓</td><td><code>unit:reference.test.ts</code> (“metadata.contentType overrides the Blob’s intrinsic type” + “falls back to application/octet-stream when no type is supplied”)</td></tr><tr><td>28</td><td><code>Blob.type === ''</code> (no intrinsic type) falls through to <code>application/octet-stream</code>, NOT to <code>''</code></td><td>✓</td><td><code>unit:reference.test.ts</code> (“falls back to application/octet-stream when no type is supplied”)</td></tr><tr><td>29</td><td><code>customMetadata</code> round-trips through the upload pipeline</td><td>✓</td><td><code>unit:reference.test.ts</code> (“round-trips customMetadata”) + <code>unit:metadata.test.ts</code></td></tr><tr><td>30</td><td>Empty <code>Blob.type</code> rewrap: when caller hint differs from <code>Blob.type</code>, the blob is re-wrapped with the caller’s type (same bytes)</td><td>✓</td><td>implicit in <code>unit:reference.test.ts</code> (“metadata.contentType overrides the Blob’s intrinsic type”)</td></tr><tr><td>31</td><td>Throws <code>storage/invalid-root-operation</code> when called on the root reference</td><td>✓</td><td><code>unit:reference.test.ts</code> (“throws on root reference”)</td></tr><tr><td>32</td><td>Returned <code>metadata.fullPath</code> matches the ref’s <code>fullPath</code></td><td>✓</td><td><code>unit:reference.test.ts</code></td></tr><tr><td>33</td><td>Returned <code>metadata.size</code> matches the input blob’s byte length</td><td>✓</td><td><code>unit:reference.test.ts</code></td></tr><tr><td>34</td><td>Returned <code>metadata.bucket</code> matches the storage handle’s bucket</td><td>✓</td><td><code>unit:reference.test.ts</code></td></tr><tr><td>35</td><td>Replaces any existing object at the path (overwrite, not append)</td><td>?</td><td>sandbox semantics in <code>persistence.ts</code> use <code>put</code>; no explicit overwrite test</td></tr><tr><td>36</td><td>Prod: round-trips uploaded bytes through <code>getDownloadURL</code> + fetch (byte-for-byte equality)</td><td>✓ (prod-only)</td><td>oracle: <code>scripts/oracle/observations/storage-upload-bytes-roundtrip.json</code> (against blockingfun, fb-js-sdk 12.13.0: 6-byte payload → uploadBytes → getDownloadURL → HTTPS fetch → <code>bytesMatch: true</code>, <code>urlIsHttps: true</code>, <code>bodyLen === payloadLen === 6</code>). Sandbox doesn’t ship <code>getDownloadURL</code> (row #51 is <code>—</code>); the round-trip is observed prod-side only.</td></tr><tr><td>37</td><td>Returned <code>metadata.contentType</code> matches what the caller hinted (when set)</td><td>✓</td><td><code>unit:reference.test.ts</code> + oracle: <code>scripts/oracle/observations/storage-upload-then-getmetadata.json</code> (<code>contentType: 'application/octet-stream'</code> round-trip against blockingfun, fb-js-sdk 12.13.0; <code>contentTypeMatches: true</code>)</td></tr><tr><td>38</td><td>Returned <code>metadata.generation</code> / <code>metageneration</code> are stringified counters (<code>'1'</code> after fresh upload)</td><td>✓</td><td><code>unit:metadata.test.ts</code></td></tr></tbody></table></div>
+<h2 id="uploadstringref-value-format-metadata--write-string-form"><code>uploadString(ref, value, format?, metadata?)</code> — write string-form</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>39</td><td><code>format='raw'</code> (default): UTF-8 encodes the string; <code>contentType</code> defaults to <code>text/plain;charset=utf-8</code></td><td>✓</td><td><code>unit:reference.test.ts</code> (“raw format encodes UTF-8 and defaults contentType to text/plain”)</td></tr><tr><td>40</td><td><code>format='base64'</code>: decodes payload bytes from standard base64</td><td>✓</td><td><code>unit:reference.test.ts</code> (“base64 format decodes payload bytes”)</td></tr><tr><td>41</td><td>Sandbox: <code>format='base64url'</code> (or any unknown format) rejected with <code>storage/invalid-format</code> naming the bad format. Prod: <code>base64url</code> is ACCEPTED (upload succeeds); a genuinely-unrecognized format throws <code>storage/unknown</code></td><td>⚠</td><td>divergence, both halves oracle-locked by <code>scripts/oracle/observations/storage-uploadstring-unknown-format.json</code>: prod accepts <code>base64url</code> (<code>base64urlOk: true</code>) and throws <code>storage/unknown</code> for an unrecognized format — not <code>storage/invalid-format</code>. The v1 sandbox ships only <code>raw</code>/<code>base64</code>/<code>data_url</code> (matches <code>StringFormat</code>) and throws <code>storage/invalid-format</code> for anything else (ST-B3 replaced the old mis-parse-as-data_url behavior). Both sides pinned in <code>oracle-conformance.test.ts</code>; sandbox code path documented in <code>upload.ts</code>’s <code>decodeString</code>. Implementing base64url decoding is still one line in <code>decodeString</code>.</td></tr><tr><td>42</td><td><code>format='data_url'</code>: parses <code>data:&#x3C;mime>;base64,&#x3C;payload></code>, infers <code>contentType</code> from prefix</td><td>✓</td><td><code>unit:reference.test.ts</code> (“data_url format infers contentType from the prefix”)</td></tr><tr><td>43</td><td><code>format='data_url'</code> with non-base64 payload: percent-decodes the body</td><td>✓</td><td>(covered by <code>decodeString</code> else-branch; no explicit test for the URL-encoded form yet)</td></tr><tr><td>44</td><td>Caller’s <code>metadata.contentType</code> beats data_url inference</td><td>✓</td><td><code>unit:reference.test.ts</code> (“caller metadata.contentType beats data_url inference”)</td></tr><tr><td>45</td><td>Malformed <code>data_url</code> (no comma / doesn’t start with <code>data:</code>) throws <code>TypeError</code> with “data_url format” message</td><td>✓</td><td><code>unit:reference.test.ts</code> (“throws on malformed data_url”)</td></tr><tr><td>46</td><td>Prod: <code>uploadString(ref, value, 'base64')</code> round-trips via <code>getDownloadURL</code> + fetch</td><td>✓ (prod-only)</td><td>oracle: <code>scripts/oracle/observations/storage-uploadstring-base64-roundtrip.json</code> (<code>'aGVsbG8='</code> → <code>'hello'</code> against blockingfun, fb-js-sdk 12.13.0; <code>textMatches: true</code>)</td></tr></tbody></table></div>
+<h2 id="uploadbytesresumableref-data-metadata--resumable-upload--task-observers"><code>uploadBytesResumable(ref, data, metadata?)</code> — resumable upload + task observers</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>47</td><td>Exported by <code>firebase/storage</code>; returns an <code>UploadTask</code> with <code>pause()</code> / <code>resume()</code> / <code>cancel()</code></td><td>—</td><td>not implemented in <code>pyric/storage</code> — out of scope for the v1 v1 scope per <code>index.ts</code></td></tr><tr><td>48</td><td><code>task.on('state_changed', next, error, complete)</code> fires <code>next</code> with <code>{bytesTransferred, totalBytes, state}</code> snapshots</td><td>—</td><td>not implemented</td></tr><tr><td>49</td><td><code>task.pause()</code> flips <code>state</code> to <code>'paused'</code>; <code>task.resume()</code> continues</td><td>—</td><td>not implemented</td></tr><tr><td>50</td><td><code>task.cancel()</code> rejects the upload with <code>storage/canceled</code></td><td>—</td><td>not implemented</td></tr></tbody></table></div>
+<h2 id="getdownloadurlref--read-url"><code>getDownloadURL(ref)</code> — read URL</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>51</td><td>Exported by <code>firebase/storage</code>; returns a token-signed HTTPS URL that fetches the blob</td><td>—</td><td>not implemented in <code>pyric/storage</code> — out of scope per <code>index.ts</code> (no browser-renderable URL in the IDB sandbox)</td></tr><tr><td>52</td><td>Throws <code>storage/object-not-found</code> for missing objects</td><td>—</td><td>not implemented; oracle would lock prod’s error shape if we ever add it</td></tr></tbody></table></div>
+<h2 id="getbytesref-maxdownloadsize--read-as-arraybuffer"><code>getBytes(ref, maxDownloadSize?)</code> — read as ArrayBuffer</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>53</td><td>Returns the blob’s contents as an <code>ArrayBuffer</code></td><td>✓</td><td><code>unit:reference.test.ts</code> (“accepts a Uint8Array” round-trip via <code>getBytes</code>)</td></tr><tr><td>54</td><td>Throws <code>storage/object-not-found</code> when no object exists at the path</td><td>✓</td><td><code>unit:reference.test.ts</code> (“throws storage/object-not-found for missing paths”) + oracle: <code>scripts/oracle/observations/storage-delete-then-get-throws.json</code> (against blockingfun, fb-js-sdk 12.13.0: upload → delete → <code>getDownloadURL</code> on the deleted ref throws <code>FirebaseError</code> with <code>code: 'storage/object-not-found'</code>)</td></tr><tr><td>55</td><td>Throws when <code>blob.size > maxDownloadSize</code> with <code>.code</code> exposed</td><td>⚠</td><td>code-divergence (ST-B1): sandbox now throws a <code>StorageError</code> with <code>.code === 'storage/quota-exceeded'</code> (was a plain <code>Error</code> with the code only in the message). Prod’s client-side cap throws <code>FirebaseError</code> with <code>code: 'storage/invalid-argument'</code> — the codes still differ, but both now expose <code>.code</code>. Probe: <code>unit:error-codes.test.ts</code> (“quota-exceeded when the blob exceeds maxDownloadSizeBytes”). Documented in <code>download.ts</code>. Aligning the code value to <code>invalid-argument</code> is deferred pending an oracle capture of prod’s exact shape.</td></tr><tr><td>56</td><td>Just-under-cap reads succeed and return the full byte length</td><td>✓</td><td><code>unit:reference.test.ts</code> (“honors maxDownloadSizeBytes when the blob is too large”)</td></tr><tr><td>57</td><td>Throws <code>storage/invalid-root-operation</code> when called on the root reference</td><td>✓</td><td><code>unit:reference.test.ts</code> (“throws invalid-root-operation on root reads”)</td></tr></tbody></table></div>
+<h2 id="getblobref-maxdownloadsize--read-as-blob"><code>getBlob(ref, maxDownloadSize?)</code> — read as Blob</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>58</td><td>Returns the stored bytes wrapped as a <code>Blob</code> (with <code>.type</code> from metadata)</td><td>✓</td><td><code>unit:reference.test.ts</code> (“accepts a Blob and round-trips through getBlob”)</td></tr><tr><td>59</td><td>Throws <code>storage/object-not-found</code> for missing paths</td><td>✓</td><td><code>unit:reference.test.ts</code> (“throws storage/object-not-found for missing paths”)</td></tr><tr><td>60</td><td>Honors <code>maxDownloadSize</code> same as <code>getBytes</code></td><td>✓</td><td>(shared <code>fetchBlob</code> helper in <code>download.ts</code>)</td></tr><tr><td>61</td><td>Root-ref read throws <code>storage/invalid-root-operation</code></td><td>✓</td><td>shared via <code>guardNonRoot</code> in <code>download.ts</code></td></tr></tbody></table></div>
+<h2 id="getstreamref-maxdownloadsize--node-specific"><code>getStream(ref, maxDownloadSize?)</code> — Node-specific</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>62</td><td>Exported by <code>firebase/storage</code> (Node entry only); returns a Node <code>Readable</code></td><td>—</td><td>not implemented in <code>pyric/storage</code> — browser-shaped v1 scope, no Node-stream variant</td></tr></tbody></table></div>
+<h2 id="deleteobjectref--delete"><code>deleteObject(ref)</code> — delete</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>63</td><td>Removes both the blob AND the metadata atomically (post-delete <code>getBlob</code> throws <code>object-not-found</code>)</td><td>✓</td><td><code>unit:reference.test.ts</code> (“removes both blob and metadata”)</td></tr><tr><td>64</td><td>Sandbox: no-op on missing path (does NOT throw)</td><td>⚠</td><td>divergence: sandbox is no-op via <code>persistence.ts</code>’s <code>delete</code>. Prod’s <code>deleteObject</code> on a missing path throws <code>storage/object-not-found</code>. Oracle-locked: <code>scripts/oracle/observations/storage-delete-missing-throws.json</code> (<code>code: 'storage/object-not-found'</code>, <code>name: 'FirebaseError'</code> against blockingfun, fb-js-sdk 12.13.0). Both sides pinned in <code>oracle-conformance.test.ts</code>; documented in <code>download.ts</code>.</td></tr><tr><td>65</td><td>Throws <code>storage/invalid-root-operation</code> on the root reference</td><td>✓</td><td><code>unit:reference.test.ts</code> (“throws invalid-root-operation on root”)</td></tr><tr><td>66</td><td>Prod: a successful <code>deleteObject</code> followed by <code>getDownloadURL</code> on the same ref throws <code>storage/object-not-found</code></td><td>✓ (prod-only)</td><td>oracle: <code>scripts/oracle/observations/storage-delete-then-get-throws.json</code> (against blockingfun, fb-js-sdk 12.13.0: upload + delete succeed, then <code>getDownloadURL</code> throws <code>code: 'storage/object-not-found'</code>, message <code>"Firebase Storage: Object '…' does not exist."</code>, <code>isFirebaseError: true</code>)</td></tr><tr><td>67</td><td>Sandbox: writes-then-delete leaves no metadata (post-delete <code>getMetadata</code> throws <code>object-not-found</code>)</td><td>✓</td><td>follows from #63 + <code>getMetadata</code></td></tr></tbody></table></div>
+<h2 id="listallref--list-all-children-under-a-ref"><code>listAll(ref)</code> — list all children under a ref</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>68</td><td>Returns <code>ListResult</code> with <code>items</code> (direct child files) + <code>prefixes</code> (sub-folder refs) + <code>nextPageToken: undefined</code></td><td>✓</td><td><code>unit:list.test.ts</code></td></tr><tr><td>69</td><td>Empty bucket → both arrays empty, <code>nextPageToken: undefined</code></td><td>✓</td><td><code>unit:list.test.ts</code> (“returns empty arrays on an empty bucket”)</td></tr><tr><td>70</td><td>Direct children only — does NOT recurse into grandchildren as items</td><td>✓</td><td><code>unit:list.test.ts</code> (“does not recurse into grandchildren as items”)</td></tr><tr><td>71</td><td>Sub-folders surface as <code>prefixes</code> and are deduplicated (many files under one folder → ONE prefix entry)</td><td>✓</td><td><code>unit:list.test.ts</code> (“promotes sub-folders into prefixes (deduplicated)“)</td></tr><tr><td>72</td><td><code>items</code> sorted by path (IDB key order, lexicographic)</td><td>✓</td><td><code>unit:list.test.ts</code> (“lists direct children of a folder”)</td></tr><tr><td>73</td><td><code>prefixes</code> sorted lexicographically by <code>fullPath</code> (for determinism)</td><td>✓</td><td><code>unit:list.test.ts</code> (root-scan example asserts <code>configs</code> &#x3C; <code>sessions</code>)</td></tr><tr><td>74</td><td>The scanned ref itself is NEVER included in <code>items</code> (even when an object exists at the exact prefix path)</td><td>✓</td><td><code>unit:list.test.ts</code> (“does not include the scanned ref itself”)</td></tr><tr><td>75</td><td><code>listAll(ref(storage))</code> (root) scans the entire bucket</td><td>✓</td><td><code>unit:list.test.ts</code> (“listAll on the root scans the entire bucket”)</td></tr><tr><td>76</td><td>Items expose the full <code>StorageReference</code> shape (storage, bucket, name, parent)</td><td>✓</td><td><code>unit:list.test.ts</code> (“items expose the StorageReference shape”)</td></tr><tr><td>77</td><td>Prod: items + prefixes shape matches sandbox after <code>N</code> uploads under a directory</td><td>✓</td><td>oracle: <code>scripts/oracle/observations/storage-listall-shape.json</code> (against blockingfun, fb-js-sdk 12.13.0: 3 direct children + 1 grandchild → <code>items</code> has all 3 direct children sorted, <code>prefixes</code> has the single sub-folder, <code>itemCount: 3</code>, <code>prefixCount: 1</code>, <code>threeDirectChildren: true</code>, <code>oneSubPrefix: true</code>)</td></tr><tr><td>77a</td><td><code>listAll</code> enforces rules: <code>read</code> permission on the scanned prefix path governs list (Firebase: <code>read</code> covers download AND list), denied prefix → <code>storage/unauthorized</code></td><td>✓</td><td>ST-B2 fixed: <code>list.ts</code> now calls <code>enforceRules</code> with <code>method: 'read'</code> on the listed prefix (was a silent bypass — a denied tree was still fully enumerable). With no rules configured the check is a no-op. Probe: <code>unit:list-rules.test.ts</code> (“denies an anonymous listAll of a tree the rules protect” / “allows an authed listAll”). Note: a <code>read</code> rule scoped to <code>match /sessions/{id}</code> does NOT grant list on <code>/sessions</code> — the folder needs its own read rule, matching prod; the session-archive demo ruleset adds <code>match /sessions { allow read }</code>.</td></tr></tbody></table></div>
+<h2 id="listref-options--paginated-list"><code>list(ref, options?)</code> — paginated list</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>78</td><td>Exported by <code>firebase/storage</code>; accepts <code>{ maxResults, pageToken }</code>, returns a <code>ListResult</code> with <code>nextPageToken</code> set when more pages remain</td><td>—</td><td>not implemented in <code>pyric/storage</code> — pagination deferred per <code>list.ts</code> (the <code>ListResult.nextPageToken</code> field is kept optional so consumer code that handles pagination doesn’t have to special-case the sandbox)</td></tr></tbody></table></div>
+<h2 id="getmetadataref--updatemetadataref-metadata--metadata-ops"><code>getMetadata(ref)</code> / <code>updateMetadata(ref, metadata)</code> — metadata ops</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>79</td><td><code>getMetadata(ref)</code> returns the same <code>FullMetadata</code> shape <code>uploadBytes</code> produced</td><td>✓</td><td><code>unit:metadata.test.ts</code> (“returns the FullMetadata uploadBytes wrote”)</td></tr><tr><td>80</td><td><code>getMetadata(ref)</code> throws <code>storage/object-not-found</code> for missing paths</td><td>✓</td><td><code>unit:metadata.test.ts</code> (“throws object-not-found for missing paths”)</td></tr><tr><td>81</td><td><code>getMetadata(ref)</code> throws <code>storage/invalid-root-operation</code> on the root</td><td>✓</td><td><code>unit:metadata.test.ts</code> (“throws invalid-root-operation on the root reference”)</td></tr><tr><td>82</td><td><code>updateMetadata(ref, patch)</code> replaces the listed client-settable fields wholesale (per Firebase semantics)</td><td>✓</td><td><code>unit:metadata.test.ts</code> (“replaces settable fields, bumps metageneration, refreshes updated”)</td></tr><tr><td>83</td><td><code>updateMetadata</code> bumps <code>metageneration</code> by 1 on each call</td><td>✓</td><td><code>unit:metadata.test.ts</code></td></tr><tr><td>84</td><td><code>updateMetadata</code> refreshes <code>updated</code> to the call moment; <code>timeCreated</code> and <code>generation</code> stay pinned</td><td>✓</td><td><code>unit:metadata.test.ts</code></td></tr><tr><td>85</td><td><code>updateMetadata</code> preserves the blob bytes (only metadata changes)</td><td>✓</td><td><code>unit:metadata.test.ts</code> (“leaves the blob content untouched”)</td></tr><tr><td>86</td><td><code>updateMetadata</code> with <code>undefined</code> field values preserves the prior value (does NOT clear it)</td><td>⚠</td><td>divergence: prod accepts <code>null</code> to explicitly clear a field. Sandbox doesn’t model <code>null</code>-clear (per <code>metadata.ts</code> doc comment). Documented; not probe-locked.</td></tr><tr><td>87</td><td><code>updateMetadata</code> throws <code>storage/object-not-found</code> for missing paths</td><td>✓</td><td><code>unit:metadata.test.ts</code> (“throws object-not-found when the path is missing”)</td></tr><tr><td>88</td><td><code>updateMetadata</code> throws <code>storage/invalid-root-operation</code> on the root</td><td>✓</td><td><code>unit:metadata.test.ts</code> (“throws invalid-root-operation on the root reference”)</td></tr><tr><td>89</td><td>Prod: <code>getMetadata</code> after <code>uploadBytes</code> returns <code>contentType</code> and <code>size</code> matching what was uploaded</td><td>✓ (prod-only)</td><td>oracle: <code>scripts/oracle/observations/storage-upload-then-getmetadata.json</code> (against blockingfun, fb-js-sdk 12.13.0: upload 128-byte payload with <code>contentType: 'application/octet-stream'</code>, getMetadata returns <code>metadataSize: 128</code>, <code>metadataContentType: 'application/octet-stream'</code>, <code>metadataBucket: 'blockingfun.firebasestorage.app'</code>, <code>metadataMetageneration: '1'</code>, <code>fullPathMatches: true</code>)</td></tr><tr><td>90</td><td>Prod: <code>updateMetadata({customMetadata: {...}})</code> round-trips through a follow-up <code>getMetadata</code></td><td>✓ (prod-only)</td><td>oracle: <code>scripts/oracle/observations/storage-update-metadata-roundtrip.json</code> (against blockingfun, fb-js-sdk 12.13.0: post-update <code>getMetadata</code> returns the exact <code>customMetadata</code> object, <code>metageneration</code> bumps <code>'1'</code> → <code>'2'</code>, <code>customSurvived: true</code>, <code>metagenerationBumped: true</code>)</td></tr><tr><td>91</td><td><code>FullMetadata.md5Hash</code> populated on uploads</td><td>⚠</td><td>divergence: sandbox does NOT compute <code>md5Hash</code>. Oracle-locked: <code>scripts/oracle/observations/storage-upload-then-getmetadata.json</code> confirms prod sets <code>md5Hash</code> (<code>hasMd5Hash: true</code> after a vanilla <code>uploadBytes</code>). Both sides pinned in <code>oracle-conformance.test.ts</code>. Aligning the sandbox is a one-spot fix in <code>upload.ts</code>’s <code>buildStoredMetadata</code>.</td></tr><tr><td>92</td><td><code>FullMetadata.ref</code> lazy population (prod populates lazily)</td><td>—</td><td>not modeled in <code>pyric/storage</code> — <code>metadata.ts</code> explicitly omits <code>ref</code> from <code>FullMetadata</code></td></tr></tbody></table></div>
+<h2 id="connectstorageemulatorstorage-host-port--emulator-hook"><code>connectStorageEmulator(storage, host, port)</code> — emulator hook</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>93</td><td>Exported by <code>firebase/storage</code>; reroutes a <code>FirebaseStorage</code> handle to a local emulator</td><td>—</td><td>not implemented in <code>pyric/storage</code> — the sandbox IS the local-target alternative; emulator parity is out of scope per <code>index.ts</code></td></tr></tbody></table></div>
+<h2 id="rules--parsestoragerules--evaluatestoragerules--getstoragectx--rules">Rules — <code>parseStorageRules</code> / <code>evaluateStorageRules</code> / <code>getStorage(ctx, { rules })</code></h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>94</td><td><code>parseStorageRules(source)</code> returns an opaque handle</td><td>✓</td><td><code>unit:rules.test.ts</code> (“parses the canonical session-archive ruleset”)</td></tr><tr><td>95</td><td><code>parseStorageRules</code> rejects non-<code>firebase.storage</code> service headers</td><td>✓</td><td><code>unit:rules.test.ts</code> (“rejects unknown service header”)</td></tr><tr><td>96</td><td><code>parseStorageRules</code> rejects unsupported granular verbs (<code>get</code>/<code>list</code>/<code>create</code>/<code>update</code>/<code>delete</code>) — only <code>read</code>/<code>write</code> in the v1 scope subset</td><td>⚠</td><td>divergence: prod accepts all six. Sandbox v1 limits to the two-verb model per <code>rules.ts</code> doc comment.</td></tr><tr><td>97</td><td><code>parseStorageRules</code> rejects unterminated string literals with <code>SyntaxError</code></td><td>✓</td><td><code>unit:rules.test.ts</code> (“rejects unterminated strings”)</td></tr><tr><td>98</td><td><code>evaluateStorageRules</code> matches <code>match /sessions/{id} { allow read: if request.auth != null; }</code> for an authed read</td><td>✓</td><td><code>unit:rules.test.ts</code> (“allows authenticated reads of /sessions/{id}“)</td></tr><tr><td>99</td><td><code>evaluateStorageRules</code> denies anonymous reads when the rule requires <code>request.auth != null</code></td><td>✓</td><td><code>unit:rules.test.ts</code> (“denies anonymous reads”)</td></tr><tr><td>100</td><td><code>evaluateStorageRules</code> supports <code>request.resource.size &#x3C; N</code> constraints (with arithmetic literals like <code>10 * 1024 * 1024</code>)</td><td>✓</td><td><code>unit:rules.test.ts</code> (“allows JSON writes under 10MB”)</td></tr><tr><td>101</td><td><code>evaluateStorageRules</code> supports <code>request.resource.contentType == '&#x3C;mime>'</code> constraints</td><td>✓</td><td><code>unit:rules.test.ts</code> (mime constraint inside the session-archive ruleset)</td></tr><tr><td>102</td><td>Multi-segment wildcard <code>{allPaths=**}</code> matches zero-or-more remaining segments</td><td>✓</td><td><code>unit:rules.test.ts</code> (parser + evaluator both honor the <code>**</code> form)</td></tr><tr><td>103</td><td>Path-parameter binding (<code>{sessionId}</code>) accessible inside the <code>if</code> expression</td><td>✓</td><td><code>unit:rules.test.ts</code></td></tr><tr><td>104</td><td><code>request.time</code>, <code>matches()</code> regex, function definitions, granular verbs</td><td>—</td><td>deliberately out of scope per <code>rules.ts</code> doc comment</td></tr><tr><td>105</td><td>Op-level enforcement: <code>uploadBytes</code> against a denied path throws <code>storage/unauthorized</code> on sandbox / <code>storage/unauthorized</code> on prod, <code>.code</code> exposed on both</td><td>✓</td><td>ST-B1 fixed: sandbox now throws a <code>StorageError</code> (see <code>src/storage/errors.ts</code>) whose <code>.code === 'storage/unauthorized'</code> — matching prod’s <code>FirebaseError.code</code>. Probe: <code>unit:error-codes.test.ts</code> (“unauthorized when rules deny the operation”). Residual divergence (documented, not a <code>.code</code> gap): the sandbox <code>StorageError.name</code> is <code>'StorageError'</code> (plain <code>Error</code> subclass, same shape as Firestore’s <code>SandboxError</code>) where prod reports <code>name: 'FirebaseError'</code> / <code>isFirebaseError: true</code>, and the message wording differs (sandbox embeds the matched-rule reason chain). Oracle-locked: <code>scripts/oracle/observations/storage-rules-denied-error-code.json</code> (against blockingfun, fb-js-sdk 12.13.0: <code>code: 'storage/unauthorized'</code>, message <code>"Firebase Storage: User does not have permission to access '&#x3C;path>'."</code>, <code>name: 'FirebaseError'</code>, <code>isFirebaseError: true</code>).</td></tr><tr><td>106</td><td><code>getMetadata</code> against a denied path throws <code>storage/unauthorized</code></td><td>✓</td><td><code>unit:rules.test.ts</code> (operation-integration section)</td></tr><tr><td>107</td><td><code>updateMetadata</code> against a denied path throws <code>storage/unauthorized</code></td><td>✓</td><td><code>unit:rules.test.ts</code></td></tr><tr><td>108</td><td><code>deleteObject</code> against a denied path throws <code>storage/unauthorized</code></td><td>✓</td><td><code>unit:rules.test.ts</code></td></tr></tbody></table></div>
+<h2 id="sandbox-sandbox-only-test-driver"><code>sandbox.*</code> (sandbox-only test driver)</h2>
+<div class="table-scroll">
+<table><thead><tr><th>#</th><th>Behavior</th><th>Status</th><th>Probe</th></tr></thead><tbody><tr><td>109</td><td><code>getStorageService(storage)</code> returns the backing <code>StorageService</code> for sandbox handles (sandbox-only escape hatch for tests)</td><td>✓</td><td><code>unit:service.test.ts</code></td></tr><tr><td>110</td><td><code>getStorageService</code> on a prod-target handle throws <code>Error: …sandbox-only</code></td><td>✓</td><td><code>unit:prod-target.test.ts</code> (“throws — service is sandbox-only”)</td></tr><tr><td>111</td><td><code>targetOf(storage)</code> returns the discriminated <code>Target</code> (sandbox / prod)</td><td>✓</td><td><code>unit:service.test.ts</code></td></tr></tbody></table></div>
+<h2 id="visible-gaps--open-questions">Visible gaps / open questions</h2>
+<ul>
+<li><code>getDownloadURL</code> is the most commonly-used Storage API in real apps
+and isn’t implemented. Adding it gates: download-URL token format,
+cache headers, signing, CORS preflight. Tracked under <code>index.ts</code>’s
+“out of scope” header.</li>
+<li><code>uploadBytesResumable</code> (rows 47-50) — the entire upload-task + observer
+surface is unmodeled. The session-archive use case (the v1 driver)
+uses one-shot <code>uploadBytes</code>, so this stayed deferred.</li>
+<li><code>connectStorageEmulator</code> — the sandbox replaces the emulator’s role
+for local development, but a prod-target Storage handle in a Bun
+test still can’t be re-routed to the emulator without this hook.</li>
+<li><code>md5Hash</code> (row 91) — sandbox doesn’t compute it. Oracle confirms
+prod always sets it. Worth a one-row alignment if real consumer
+code reads it.</li>
+<li>Prod target row #11 — needs an explicit oracle observation against
+<code>firebase/storage</code> to lock the bucket-name format (with vs without
+<code>gs://</code> prefix).</li>
+</ul>
+<h2 id="rows-locked-by-the-empirical-oracle-harness">Rows locked by the empirical oracle harness</h2>
+<p>Committed observations under <code>scripts/oracle/observations/</code>, captured
+against the <code>blockingfun</code> project on fb-js-sdk 12.13.0:</p>
+<ul>
+<li>#36 <code>uploadBytes</code> → <code>getDownloadURL</code> → fetch round-trip — bytes
+match exactly; URL is HTTPS.</li>
+<li>#37 <code>metadata.contentType</code> matches caller’s hint — exact round-trip.</li>
+<li>#46 <code>uploadString(_, _, 'base64')</code> → <code>getDownloadURL</code> → fetch text —
+decodes correctly.</li>
+<li>#54 / #66 <code>getDownloadURL</code> on a deleted ref — throws
+<code>FirebaseError</code> with <code>code: 'storage/object-not-found'</code>.</li>
+<li>#64 <code>deleteObject</code> on a never-uploaded path — throws
+<code>FirebaseError</code> with <code>code: 'storage/object-not-found'</code>. <strong>Sandbox
+diverges</strong> (no-op).</li>
+<li>#77 <code>listAll</code> shape — items + prefixes sort lex-order; 3 direct
+children + 1 sub-folder yields the documented shape.</li>
+<li>#89 <code>getMetadata</code> after <code>uploadBytes</code> — <code>contentType</code>, <code>size</code>,
+<code>fullPath</code>, <code>bucket</code>, <code>metageneration: '1'</code> all match.</li>
+<li>#90 <code>updateMetadata({customMetadata})</code> — round-trips through a
+follow-up <code>getMetadata</code>; <code>metageneration</code> bumps <code>'1'</code> → <code>'2'</code>.</li>
+<li>#91 <code>md5Hash</code> — prod sets it on every upload. <strong>Sandbox diverges</strong>
+(does not compute).</li>
+<li>#105 Op-level rules-denied — prod throws <code>FirebaseError</code> with
+<code>code: 'storage/unauthorized'</code>; message shape recorded.</li>
+</ul>
+<h2 id="divergences-surfaced-by-oracle-observations-not-fixed-in-this-pr">Divergences surfaced by oracle observations (not fixed in this PR)</h2>
+<ul>
+<li><strong><code>deleteObject</code> on missing path</strong> (row #64) — sandbox is a no-op
+via <code>persistence.ts</code>’s <code>delete</code>; prod throws
+<code>storage/object-not-found</code>. Fix candidate: detect-and-throw in
+<code>download.ts</code>’s <code>deleteObject</code> sandbox path.</li>
+<li><strong><code>md5Hash</code> not populated by sandbox</strong> (row #91) — prod always sets
+it. Fix candidate: compute hex md5 in <code>upload.ts</code>’s
+<code>buildStoredMetadata</code> (Node <code>crypto</code> or Web Crypto in browser).</li>
+<li><strong><code>uploadString</code> format handling</strong> (row #41) — prod accepts
+<code>base64url</code> and throws <code>storage/unknown</code> for a genuinely-unknown
+format; the sandbox throws <code>storage/invalid-format</code> for both. Fix
+candidates: decode <code>base64url</code> in <code>decodeString</code> (one line) and
+align the unknown-format error code.</li>
+<li><strong>Sandbox <code>quota-exceeded</code> error code value</strong> (row #55) — ST-B1
+gave the sandbox a <code>StorageError</code> class, so the cap now throws with
+<code>.code === 'storage/quota-exceeded'</code> (was a plain <code>Error</code>). The
+remaining gap is the code <em>value</em>: prod throws a <code>FirebaseError</code>
+with <code>code: 'storage/invalid-argument'</code> for the client-side cap.
+Aligning the value is deferred pending an oracle capture of prod’s
+exact shape.</li>
+<li><strong><code>null</code>-clear semantics in <code>updateMetadata</code></strong> (row #86) — sandbox
+preserves prior values when patch fields are <code>undefined</code>, but
+doesn’t model <code>null</code>-clear at all. Documented in <code>metadata.ts</code>.</li>
+</ul>
+<hr>
+<h2 id="deny-list-intentionally-not-shimmed">Deny-list (intentionally NOT shimmed)</h2>
+<p>These exist in <code>firebase/storage</code> but the sandbox refuses to import or
+model them. They’re either out-of-scope per the v1 scope or pending
+a follow-up driver decision.</p>
+<div class="table-scroll">
+<table><thead><tr><th>Name</th><th>Reason</th></tr></thead><tbody><tr><td><code>getDownloadURL</code></td><td>Out of scope — no browser-renderable URL in the IDB sandbox. Re-enable with a token-signed <code>blob:</code> URL or a fake CDN endpoint when needed.</td></tr><tr><td><code>uploadBytesResumable</code> + <code>UploadTask</code> (pause/resume/cancel, state_changed observer)</td><td>Out of scope — session-archive use case is one-shot upload-bytes only</td></tr><tr><td><code>getStream</code></td><td>Node-stream variant not modeled in the browser-shaped v1 scope</td></tr><tr><td><code>list(ref, { maxResults, pageToken })</code> paginated form</td><td>Deferred — <code>listAll</code> covers the v1 scope scenarios; pagination needs a stable <code>pageToken</code> shape</td></tr><tr><td><code>connectStorageEmulator</code></td><td>Sandbox replaces the emulator; emulator parity is out of scope</td></tr><tr><td>Cloud Functions Storage triggers (<code>onFinalize</code>, <code>onArchive</code>, …)</td><td>Server-side surface — not the Web SDK</td></tr><tr><td>Image transformation URLs (Firebase Image extension)</td><td>Extension surface, not core Storage</td></tr><tr><td><code>StorageObserver</code> advanced shapes (progress milestones, error subclasses)</td><td>Tied to <code>UploadTask</code>; out of scope until resumable ships</td></tr></tbody></table></div>  </article> </main> <aside class="doc-toc" aria-label="On this page"> <h2 class="doc-toc-heading">On this page</h2> <ul> <li data-depth="2"> <a href="#status-legend">Status legend</a> </li><li data-depth="2"> <a href="#getstoragesandboxtarget-options--getstorageprodapp-options--initializer">getStorageSandbox(target, options?) / getStorageProd(app, options?) — initializer</a> </li><li data-depth="2"> <a href="#refstorage-path--refparent-path--reference-constructor">ref(storage[, path]) / ref(parent, path) — reference constructor</a> </li><li data-depth="2"> <a href="#uploadbytesref-data-metadata--write-blob">uploadBytes(ref, data, metadata?) — write blob</a> </li><li data-depth="2"> <a href="#uploadstringref-value-format-metadata--write-string-form">uploadString(ref, value, format?, metadata?) — write string-form</a> </li><li data-depth="2"> <a href="#uploadbytesresumableref-data-metadata--resumable-upload--task-observers">uploadBytesResumable(ref, data, metadata?) — resumable upload + task observers</a> </li><li data-depth="2"> <a href="#getdownloadurlref--read-url">getDownloadURL(ref) — read URL</a> </li><li data-depth="2"> <a href="#getbytesref-maxdownloadsize--read-as-arraybuffer">getBytes(ref, maxDownloadSize?) — read as ArrayBuffer</a> </li><li data-depth="2"> <a href="#getblobref-maxdownloadsize--read-as-blob">getBlob(ref, maxDownloadSize?) — read as Blob</a> </li><li data-depth="2"> <a href="#getstreamref-maxdownloadsize--node-specific">getStream(ref, maxDownloadSize?) — Node-specific</a> </li><li data-depth="2"> <a href="#deleteobjectref--delete">deleteObject(ref) — delete</a> </li><li data-depth="2"> <a href="#listallref--list-all-children-under-a-ref">listAll(ref) — list all children under a ref</a> </li><li data-depth="2"> <a href="#listref-options--paginated-list">list(ref, options?) — paginated list</a> </li><li data-depth="2"> <a href="#getmetadataref--updatemetadataref-metadata--metadata-ops">getMetadata(ref) / updateMetadata(ref, metadata) — metadata ops</a> </li><li data-depth="2"> <a href="#connectstorageemulatorstorage-host-port--emulator-hook">connectStorageEmulator(storage, host, port) — emulator hook</a> </li><li data-depth="2"> <a href="#rules--parsestoragerules--evaluatestoragerules--getstoragectx--rules">Rules — parseStorageRules / evaluateStorageRules / getStorage(ctx, { rules })</a> </li><li data-depth="2"> <a href="#sandbox-sandbox-only-test-driver">sandbox.* (sandbox-only test driver)</a> </li><li data-depth="2"> <a href="#visible-gaps--open-questions">Visible gaps / open questions</a> </li><li data-depth="2"> <a href="#rows-locked-by-the-empirical-oracle-harness">Rows locked by the empirical oracle harness</a> </li><li data-depth="2"> <a href="#divergences-surfaced-by-oracle-observations-not-fixed-in-this-pr">Divergences surfaced by oracle observations (not fixed in this PR)</a> </li><li data-depth="2"> <a href="#deny-list-intentionally-not-shimmed">Deny-list (intentionally NOT shimmed)</a> </li> </ul> </aside> </div> <script type="module">const s=new Map;document.querySelectorAll('.doc-toc a[href^="#"]').forEach(t=>s.set(decodeURIComponent(t.hash.slice(1)),t));if(s.size>0){const t=new Set,n=()=>{let o=null;for(const e of s.keys())if(t.has(e)){o=e;break}s.forEach((e,c)=>e.classList.toggle("active",c===o))},r=new IntersectionObserver(o=>{for(const e of o)e.isIntersecting?t.add(e.target.id):t.delete(e.target.id);n()},{rootMargin:"-72px 0px -60% 0px"});s.forEach((o,e)=>{const c=document.getElementById(e);c&&r.observe(c)})}</script> </body> </html>