pyric-tools 0.1.0-alpha.7

package/dist/deploy/providers/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../src/deploy/providers/database.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAO1D,SAAS,UAAU,CAAC,KAA4C,EAAE,IAAY;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAsC;IACtE,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,yCAAyC;IAClD,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAC9E,aAAa,EAAE,MAAM,CAAC,gBAAgB;IACtC,YAAY,EAAE,CAAC,iCAAiC,CAAC;IACjD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC;IAClD,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG;QAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;QAE7F,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAChE,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,SAAS,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC/G,CAAC;QAED,MAAM,WAAW,GACf,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC;YACrC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC;YACpC,GAAG,CAAC,GAAG,EAAE,qBAAqB;YAC9B,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/deploy/providers/firestore.d.ts

@@ -0,0 +1,11 @@
+import type { DeployProvider } from '../provider.js';
+interface FirestoreRulesArgs {
+    source: string;
+}
+interface FirestoreIndexesArgs {
+    config: unknown;
+}
+export declare const firestoreRulesProvider: DeployProvider<FirestoreRulesArgs>;
+export declare const firestoreIndexesProvider: DeployProvider<FirestoreIndexesArgs>;
+export {};
+//# sourceMappingURL=firestore.d.ts.map

package/dist/deploy/providers/firestore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore.d.ts","sourceRoot":"","sources":["../../../src/deploy/providers/firestore.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAA+B,MAAM,gBAAgB,CAAC;AAGlF,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,UAAU,oBAAoB;IAC5B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,eAAO,MAAM,sBAAsB,EAAE,cAAc,CAAC,kBAAkB,CAYrE,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,cAAc,CAAC,oBAAoB,CAiBzE,CAAC"}

package/dist/deploy/providers/firestore.js

@@ -0,0 +1,43 @@
+/**
+ * The `rules` and `indexes` deploy providers (Firestore). Both are simple
+ * single-unit wraps over the existing `createFirestoreDeployTools` factory; their
+ * `resolveConfig` lifts the old if-ladder's firebase.json reading verbatim.
+ */
+import { resolve as resolvePath } from 'node:path';
+import { createFirestoreDeployTools } from '../tools.js';
+import { SCOPES } from '../../credentials/core/scopes.js';
+export const firestoreRulesProvider = {
+    target: 'rules',
+    summary: 'Deploy Firestore security rules',
+    operations: [{ name: 'deploy', default: true, toolName: 'firestore_deploy_rules' }],
+    requiredScope: SCOPES.firebase,
+    requiredApis: ['firebaserules.googleapis.com', 'firestore.googleapis.com'],
+    tools: (scope) => createFirestoreDeployTools({ scope }),
+    async resolveConfig(_op, src) {
+        const rulesPath = src.firebaseJson.firestore?.rules;
+        if (!rulesPath)
+            return { ok: false, message: 'firebase.json has no `firestore.rules` path.' };
+        return { ok: true, units: [{ source: await src.readFile(resolvePath(src.cwd, rulesPath)) }] };
+    },
+};
+export const firestoreIndexesProvider = {
+    target: 'indexes',
+    summary: 'Deploy Firestore indexes',
+    operations: [{ name: 'deploy', default: true, toolName: 'firestore_deploy_indexes' }],
+    requiredScope: SCOPES.datastore,
+    requiredApis: ['firestore.googleapis.com'],
+    tools: (scope) => createFirestoreDeployTools({ scope }),
+    async resolveConfig(_op, src) {
+        const indexesPath = src.firebaseJson.firestore?.indexes;
+        if (!indexesPath)
+            return { ok: false, message: 'firebase.json has no `firestore.indexes` path.' };
+        const raw = await src.readFile(resolvePath(src.cwd, indexesPath));
+        try {
+            return { ok: true, units: [{ config: JSON.parse(raw) }] };
+        }
+        catch (e) {
+            return { ok: false, message: `failed to parse ${indexesPath}: ${e instanceof Error ? e.message : String(e)}` };
+        }
+    },
+};
+//# sourceMappingURL=firestore.js.map

package/dist/deploy/providers/firestore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore.js","sourceRoot":"","sources":["../../../src/deploy/providers/firestore.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAS1D,MAAM,CAAC,MAAM,sBAAsB,GAAuC;IACxE,MAAM,EAAE,OAAO;IACf,OAAO,EAAE,iCAAiC;IAC1C,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC;IACnF,aAAa,EAAE,MAAM,CAAC,QAAQ;IAC9B,YAAY,EAAE,CAAC,8BAA8B,EAAE,0BAA0B,CAAC;IAC1E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,KAAK,EAAE,CAAC;IACvD,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG;QAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;QAC9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChG,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAyC;IAC5E,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,0BAA0B;IACnC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACrF,aAAa,EAAE,MAAM,CAAC,SAAS;IAC/B,YAAY,EAAE,CAAC,0BAA0B,CAAC;IAC1C,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,KAAK,EAAE,CAAC;IACvD,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG;QAC1B,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC;QACxD,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;QAClG,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,WAAW,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACjH,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/deploy/providers/functions.d.ts

@@ -0,0 +1,9 @@
+import type { DeployProvider } from '../provider.js';
+/** The args `functions_deploy` expects (deploy/tools.ts). */
+interface FunctionsArgs {
+    localDir: string;
+    functions: unknown;
+}
+export declare const functionsProvider: DeployProvider<FunctionsArgs>;
+export {};
+//# sourceMappingURL=functions.d.ts.map

package/dist/deploy/providers/functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../../../src/deploy/providers/functions.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAA+B,MAAM,gBAAgB,CAAC;AAGlF,6DAA6D;AAC7D,UAAU,aAAa;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,eAAO,MAAM,iBAAiB,EAAE,cAAc,CAAC,aAAa,CAoC3D,CAAC"}

package/dist/deploy/providers/functions.js

@@ -0,0 +1,49 @@
+/**
+ * The `functions` deploy provider — the FIRST wrap, chosen to forge the contract
+ * because it's the hardest existing shape: flag-driven (it reads `--source` /
+ * `--config`, NOT firebase.json), and its config-resolution can fail as a usage
+ * error before any network call. If the contract carries functions cleanly, it
+ * carries the firebase.json-driven providers too.
+ */
+import { resolve as resolvePath } from 'node:path';
+import { createFunctionsDeployTools } from '../tools.js';
+import { SCOPES } from '../../credentials/core/scopes.js';
+export const functionsProvider = {
+    target: 'functions',
+    summary: 'Deploy Cloud Functions from a source directory',
+    operations: [{ name: 'deploy', default: true, toolName: 'functions_deploy' }],
+    requiredScope: SCOPES.cloudPlatform,
+    requiredApis: [
+        'cloudfunctions.googleapis.com',
+        'cloudbuild.googleapis.com',
+        'run.googleapis.com',
+        'artifactregistry.googleapis.com',
+        'eventarc.googleapis.com',
+    ],
+    tools: (scope) => createFunctionsDeployTools({ scope }),
+    async resolveConfig(_op, src) {
+        const flagSource = src.flags.get('source');
+        if (typeof flagSource !== 'string' || flagSource.length === 0) {
+            return { ok: false, message: '--source <dir> is required.' };
+        }
+        const flagConfig = src.flags.get('config');
+        if (typeof flagConfig !== 'string' || flagConfig.length === 0) {
+            return { ok: false, message: '--config <json|path> is required (FunctionDeployConfig[]).' };
+        }
+        let functions;
+        try {
+            functions = flagConfig.trim().startsWith('[')
+                ? JSON.parse(flagConfig)
+                : JSON.parse(await src.readFile(resolvePath(src.cwd, flagConfig)));
+        }
+        catch (e) {
+            return {
+                ok: false,
+                message: `failed to parse --config: ${e instanceof Error ? e.message : String(e)}`,
+            };
+        }
+        // Single unit today; the dispatcher loops, so multi-unit is free later.
+        return { ok: true, units: [{ localDir: resolvePath(src.cwd, flagSource), functions }] };
+    },
+};
+//# sourceMappingURL=functions.js.map

package/dist/deploy/providers/functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.js","sourceRoot":"","sources":["../../../src/deploy/providers/functions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAQ1D,MAAM,CAAC,MAAM,iBAAiB,GAAkC;IAC9D,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,gDAAgD;IACzD,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC7E,aAAa,EAAE,MAAM,CAAC,aAAa;IACnC,YAAY,EAAE;QACZ,+BAA+B;QAC/B,2BAA2B;QAC3B,oBAAoB;QACpB,iCAAiC;QACjC,yBAAyB;KAC1B;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,KAAK,EAAE,CAAC;IACvD,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG;QAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;QAC9F,CAAC;QACD,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC3C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;gBACxB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,6BAA6B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;aACnF,CAAC;QACJ,CAAC;QACD,wEAAwE;QACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC1F,CAAC;CACF,CAAC"}

package/dist/deploy/providers/hosting.d.ts

@@ -0,0 +1,13 @@
+import type { DeployProvider } from '../provider.js';
+/** The args `hosting_deploy` expects, one per (entry x site). */
+interface HostingArgs {
+    siteId: string;
+    localDir: string;
+    ignore?: string[];
+    config?: Record<string, unknown>;
+    channelId?: string;
+    channelTtl?: string;
+}
+export declare const hostingProvider: DeployProvider<HostingArgs>;
+export {};
+//# sourceMappingURL=hosting.d.ts.map

package/dist/deploy/providers/hosting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosting.d.ts","sourceRoot":"","sources":["../../../src/deploy/providers/hosting.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,cAAc,EAA+B,MAAM,gBAAgB,CAAC;AAIlF,iEAAiE;AACjE,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AASD,eAAO,MAAM,eAAe,EAAE,cAAc,CAAC,WAAW,CAwIvD,CAAC"}

package/dist/deploy/providers/hosting.js

@@ -0,0 +1,149 @@
+/**
+ * The `hosting` deploy provider — the PLURAL/fan-out case that stresses the
+ * contract: a hosting deploy expands over selected entries x resolved site ids,
+ * so `resolveConfig` returns one unit per site and the dispatcher owns the loop.
+ * It also exercises the impure `ConfigSource` (`.firebaserc` target->site, the
+ * git branch for `--channel auto`) and the warn-before-deploy pass (returned as
+ * `warnings`, not stderr side-effects).
+ */
+import { resolve as resolvePath } from 'node:path';
+import { createHostingDeployTools } from '../tools.js';
+import { parseChannelTtl, sanitizeChannelId } from '../hosting/channels.js';
+import { buildVersionConfig } from '../hosting/config.js';
+import { SCOPES } from '../../credentials/core/scopes.js';
+import { hasSandboxBuildMarker } from '../../serve/sandbox-marker.js';
+export const hostingProvider = {
+    target: 'hosting',
+    summary: 'Deploy Hosting site(s) declared in firebase.json',
+    operations: [{ name: 'deploy', default: true, toolName: 'hosting_deploy' }],
+    requiredScope: SCOPES.firebase,
+    requiredApis: ['firebasehosting.googleapis.com'],
+    tools: (scope) => createHostingDeployTools({ scope }),
+    async resolveConfig(_op, src) {
+        const hostingRaw = src.firebaseJson.hosting;
+        const entries = (Array.isArray(hostingRaw) ? hostingRaw : hostingRaw ? [hostingRaw] : []).filter((e) => !!e && typeof e === 'object');
+        if (entries.length === 0) {
+            return {
+                ok: false,
+                message: 'firebase.json has no `hosting` block (need at least one entry with `public` + `site`).',
+            };
+        }
+        // --only hosting:<siteOrTarget> selects by `site` or `target`; default = first.
+        const flagOnly = src.flags.get('only');
+        let selected;
+        if (flagOnly !== undefined) {
+            const key = typeof flagOnly === 'string' && flagOnly.startsWith('hosting:') ? flagOnly.slice('hosting:'.length) : '';
+            if (!key) {
+                return { ok: false, message: '--only expects `hosting:<siteOrTarget>` (e.g. --only hosting:my-site).' };
+            }
+            selected = entries.filter((e) => e.site === key || e.target === key);
+            if (selected.length === 0) {
+                const declared = entries.map((e) => e.site ?? (e.target ? `target '${e.target}'` : '(unnamed)')).join(', ');
+                return { ok: false, message: `--only hosting:${key} matches no hosting entry (declared: ${declared}).` };
+            }
+        }
+        else {
+            selected = [entries[0]];
+        }
+        // --channel <id|auto> (auto derives from the git branch) + --channel-ttl/--expires.
+        const flagChannel = src.flags.get('channel');
+        if (flagChannel === true) {
+            return { ok: false, message: "--channel requires a value (a channel id, or 'auto')." };
+        }
+        let channelId;
+        if (typeof flagChannel === 'string') {
+            if (flagChannel === 'auto') {
+                const branch = await src.getGitBranch();
+                if (!branch || branch === 'HEAD') {
+                    return {
+                        ok: false,
+                        message: '--channel auto could not derive a channel id from git ' +
+                            `(${branch === 'HEAD' ? 'detached HEAD' : 'not a git repo / git unavailable'}). ` +
+                            'Pass an explicit id: --channel <id>.',
+                    };
+                }
+                channelId = sanitizeChannelId(branch);
+                if (!channelId) {
+                    return {
+                        ok: false,
+                        message: `branch '${branch}' sanitizes to an empty channel id. Pass an explicit id: --channel <id>.`,
+                    };
+                }
+            }
+            else {
+                channelId = flagChannel;
+            }
+        }
+        const flagChannelTtl = src.flags.get('channel-ttl') ?? src.flags.get('expires');
+        if (flagChannelTtl !== undefined && channelId === undefined) {
+            return { ok: false, message: '--channel-ttl/--expires requires --channel.' };
+        }
+        let channelTtl;
+        if (flagChannelTtl !== undefined) {
+            const ttl = parseChannelTtl(typeof flagChannelTtl === 'string' ? flagChannelTtl : '');
+            if (!ttl.ok)
+                return { ok: false, message: ttl.message };
+            channelTtl = ttl.ttl;
+        }
+        // Validate each entry + expand to one unit per site. Warnings (non-serving
+        // keys) are collected and returned for the dispatcher to print up front.
+        const units = [];
+        const warnings = [];
+        for (const entry of selected) {
+            const label = entry.site ?? entry.target ?? 'hosting';
+            if (typeof entry.public !== 'string' || !entry.public) {
+                return { ok: false, message: `hosting entry '${label}' has no \`public\` directory.` };
+            }
+            // Refuse a pyric SANDBOX build (`vite build --mode development`): that output
+            // bundles pyric's in-page adapters instead of the real firebase SDK, so
+            // deploying it would ship a fake backend to production. The marker in its
+            // index.html is the tell. This closes the reverse hole of the `pyric dev`
+            // refusal (which stops a REAL-SDK build from being sandboxed).
+            if (hasSandboxBuildMarker(resolvePath(src.cwd, entry.public))) {
+                return {
+                    ok: false,
+                    message: `hosting entry '${label}' points at a pyric SANDBOX build (${entry.public} carries the ` +
+                        `sandbox-build marker). That output bundles pyric's in-page adapters, NOT the real ` +
+                        `firebase SDK, so it must never be deployed. Rebuild for production with \`vite build\` ` +
+                        `(the default production mode) before deploying.`,
+                };
+            }
+            let siteIds;
+            if (entry.site) {
+                siteIds = [entry.site];
+            }
+            else if (entry.target) {
+                const mapped = src.firebaseRc?.targets?.[src.projectId]?.hosting?.[entry.target];
+                if (!Array.isArray(mapped) || mapped.length === 0) {
+                    return {
+                        ok: false,
+                        message: `target '${entry.target}' is not mapped to a site in .firebaserc ` +
+                            `(expected targets.${src.projectId}.hosting.${entry.target}; run ` +
+                            `\`firebase target:apply hosting ${entry.target} <site>\` or add it by hand).`,
+                    };
+                }
+                siteIds = mapped;
+            }
+            else {
+                return { ok: false, message: 'hosting entry declares neither `site` nor `target`.' };
+            }
+            const { public: _pub, site: _site, target: _target, ignore, ...servingConfig } = entry;
+            const built = buildVersionConfig(servingConfig);
+            if (!built.ok)
+                return { ok: false, message: `invalid hosting config for '${label}': ${built.message}` };
+            warnings.push(...built.warnings);
+            for (const siteId of siteIds) {
+                units.push({
+                    siteId,
+                    localDir: resolvePath(src.cwd, entry.public),
+                    ...(Array.isArray(ignore) ? { ignore } : {}),
+                    ...(Object.keys(servingConfig).length > 0 ? { config: servingConfig } : {}),
+                    ...(channelId ? { channelId } : {}),
+                    ...(channelTtl ? { channelTtl } : {}),
+                });
+            }
+        }
+        return { ok: true, units, warnings };
+    },
+};
+//# sourceMappingURL=hosting.js.map

package/dist/deploy/providers/hosting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosting.js","sourceRoot":"","sources":["../../../src/deploy/providers/hosting.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAmBtE,MAAM,CAAC,MAAM,eAAe,GAAgC;IAC1D,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,kDAAkD;IAC3D,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC3E,aAAa,EAAE,MAAM,CAAC,QAAQ;IAC9B,YAAY,EAAE,CAAC,gCAAgC,CAAC;IAChD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC;IACrD,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG;QAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAC9F,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CACvD,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,wFAAwF;aAClG,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,QAAwB,CAAC;QAC7B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,GAAG,GACP,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3G,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wEAAwE,EAAE,CAAC;YAC1G,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;YACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,GAAG,wCAAwC,QAAQ,IAAI,EAAE,CAAC;YAC3G,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;QAC3B,CAAC;QAED,oFAAoF;QACpF,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACjC,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EACL,wDAAwD;4BACxD,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kCAAkC,KAAK;4BACjF,sCAAsC;qBACzC,CAAC;gBACJ,CAAC;gBACD,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,WAAW,MAAM,0EAA0E;qBACrG,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,WAAW,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChF,IAAI,cAAc,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,UAA8B,CAAC;QACnC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YACxD,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC;QACvB,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;YACtD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,KAAK,gCAAgC,EAAE,CAAC;YACzF,CAAC;YACD,8EAA8E;YAC9E,wEAAwE;YACxE,0EAA0E;YAC1E,0EAA0E;YAC1E,+DAA+D;YAC/D,IAAI,qBAAqB,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC9D,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EACL,kBAAkB,KAAK,sCAAsC,KAAK,CAAC,MAAM,eAAe;wBACxF,oFAAoF;wBACpF,yFAAyF;wBACzF,iDAAiD;iBACpD,CAAC;YACJ,CAAC;YACD,IAAI,OAAiB,CAAC;YACtB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAClD,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EACL,WAAW,KAAK,CAAC,MAAM,2CAA2C;4BAClE,qBAAqB,GAAG,CAAC,SAAS,YAAY,KAAK,CAAC,MAAM,QAAQ;4BAClE,mCAAmC,KAAK,CAAC,MAAM,+BAA+B;qBACjF,CAAC;gBACJ,CAAC;gBACD,OAAO,GAAG,MAAM,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;YACvF,CAAC;YACD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,GAAG,KAAK,CAAC;YACvF,MAAM,KAAK,GAAG,kBAAkB,CAAC,aAAkC,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,KAAK,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACxG,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM;oBACN,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;oBAC5C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3E,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACvC,CAAC;CACF,CAAC"}

package/dist/deploy/providers/storage.d.ts

@@ -0,0 +1,9 @@
+import type { DeployProvider } from '../provider.js';
+/** The args `storage_provision` expects (one per bucket). */
+interface StorageArgs {
+    bucketId?: string;
+    rules?: string;
+}
+export declare const storageProvider: DeployProvider<StorageArgs>;
+export {};
+//# sourceMappingURL=storage.d.ts.map

package/dist/deploy/providers/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/deploy/providers/storage.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAA+B,MAAM,gBAAgB,CAAC;AAGlF,6DAA6D;AAC7D,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,eAAe,EAAE,cAAc,CAAC,WAAW,CA+BvD,CAAC"}

package/dist/deploy/providers/storage.js

@@ -0,0 +1,46 @@
+/**
+ * The `storage` deploy provider — the fourth-app gap, finally a first-class
+ * target. It adds NO new deploy logic: it wraps the existing `pyric/storage`
+ * admin tool (`storage_provision`, which enables the API, creates the
+ * bucket, and deploys rules to the PER-BUCKET release `firebase.storage/{bucket}`),
+ * and just maps firebase.json's `storage` block to that tool's args — one unit
+ * per bucket (the plural contract the hosting wrap proved out).
+ */
+import { resolve as resolvePath } from 'node:path';
+import { createStorageAdminTools } from 'pyric/storage';
+import { SCOPES } from '../../credentials/core/scopes.js';
+export const storageProvider = {
+    target: 'storage',
+    summary: 'Provision the default bucket + deploy Storage rules (per-bucket release)',
+    operations: [{ name: 'provision', default: true, toolName: 'storage_provision' }],
+    requiredScope: SCOPES.cloudPlatform,
+    requiredApis: [
+        'firebase.googleapis.com',
+        'firebasestorage.googleapis.com',
+        'storage.googleapis.com',
+        'firebaserules.googleapis.com',
+    ],
+    tools: (scope) => createStorageAdminTools({ scope }),
+    async resolveConfig(_op, src) {
+        const block = src.firebaseJson.storage;
+        if (!block) {
+            return { ok: false, message: 'firebase.json has no `storage` block (need `{ rules: "storage.rules" }`).' };
+        }
+        const entries = (Array.isArray(block) ? block : [block]).filter((e) => !!e && typeof e === 'object');
+        if (entries.length === 0) {
+            return { ok: false, message: '`storage` block is empty.' };
+        }
+        const units = [];
+        for (const entry of entries) {
+            const args = {};
+            if (entry.bucket)
+                args.bucketId = entry.bucket;
+            // `rules` is a path in firebase.json; the tool wants the source text.
+            if (entry.rules)
+                args.rules = await src.readFile(resolvePath(src.cwd, entry.rules));
+            units.push(args);
+        }
+        return { ok: true, units };
+    },
+};
+//# sourceMappingURL=storage.js.map

package/dist/deploy/providers/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/deploy/providers/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAQ1D,MAAM,CAAC,MAAM,eAAe,GAAgC;IAC1D,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,0EAA0E;IACnF,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IACjF,aAAa,EAAE,MAAM,CAAC,aAAa;IACnC,YAAY,EAAE;QACZ,yBAAyB;QACzB,gCAAgC;QAChC,wBAAwB;QACxB,8BAA8B;KAC/B;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,CAAC;IACpD,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2EAA2E,EAAE,CAAC;QAC7G,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACrG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAgB,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;YAC/C,sEAAsE;YACtE,IAAI,KAAK,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACpF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF,CAAC"}

package/dist/deploy/registry.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The deploy provider registry — the single source of truth for deploy targets.
+ *
+ * Both the CLI dispatcher (`cli/deploy.ts`) and the agent tool registry
+ * composer (`registry/compose.ts`) derive from this list, so a target's
+ * identity is declared exactly once. Adding a target = its descriptor module +
+ * one line here.
+ *
+ * Strangler-fig migration: a target listed here dispatches through the
+ * {@link DeployProvider} contract; a target NOT listed here falls through to the
+ * legacy if-ladder in `cli/deploy.ts` until it is migrated. The ladder is deleted
+ * only once this registry covers every target.
+ */
+import type { DeployProvider } from './provider.js';
+export declare const DEPLOY_PROVIDERS: readonly DeployProvider[];
+export declare const providerByTarget: ReadonlyMap<string, DeployProvider>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/deploy/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/deploy/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAOpD,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAOrD,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAEhE,CAAC"}

package/dist/deploy/registry.js

@@ -0,0 +1,15 @@
+import { functionsProvider } from './providers/functions.js';
+import { hostingProvider } from './providers/hosting.js';
+import { storageProvider } from './providers/storage.js';
+import { firestoreRulesProvider, firestoreIndexesProvider } from './providers/firestore.js';
+import { databaseRulesProvider } from './providers/database.js';
+export const DEPLOY_PROVIDERS = [
+    firestoreRulesProvider,
+    firestoreIndexesProvider,
+    databaseRulesProvider,
+    hostingProvider,
+    functionsProvider,
+    storageProvider,
+];
+export const providerByTarget = new Map(DEPLOY_PROVIDERS.map((p) => [p.target, p]));
+//# sourceMappingURL=registry.js.map

package/dist/deploy/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/deploy/registry.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,MAAM,CAAC,MAAM,gBAAgB,GAA8B;IACzD,sBAAsB;IACtB,wBAAwB;IACxB,qBAAqB;IACrB,eAAe;IACf,iBAAiB;IACjB,eAAe;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAwC,IAAI,GAAG,CAC1E,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAU,CAAC,CACpD,CAAC"}

package/dist/deploy/rtdb/rules.d.ts

@@ -0,0 +1,21 @@
+import { type RtdbIR, type RtdbRulesDocument } from 'pyric/rules/rtdb';
+import { type ProjectScope } from '../scope.js';
+export type RtdbDeployRulesInput = {
+    rulesJson: unknown;
+    databaseUrl?: string;
+} | {
+    rules: RtdbRulesDocument;
+    databaseUrl?: string;
+};
+export interface RtdbFetchRulesInput {
+    databaseUrl?: string;
+}
+export interface RtdbRulesDiscoveryResult {
+    databaseUrl: string | null;
+    candidates: string[];
+}
+export declare function discoverDefaultDatabaseUrl(scope: ProjectScope): Promise<RtdbRulesDiscoveryResult>;
+export declare function resolveDatabaseUrl(scope: ProjectScope, explicitDatabaseUrl?: string): Promise<string>;
+export declare function fetchRules(scope: ProjectScope, input?: RtdbFetchRulesInput): Promise<RtdbIR>;
+export declare function deployRules(scope: ProjectScope, input: RtdbDeployRulesInput): Promise<void>;
+//# sourceMappingURL=rules.d.ts.map

package/dist/deploy/rtdb/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../src/deploy/rtdb/rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,MAAM,EACX,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAK/D,MAAM,MAAM,oBAAoB,GAC5B;IACA,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACC;IACA,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEJ,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AA8CD,wBAAsB,0BAA0B,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAuCvG;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,YAAY,EACnB,mBAAmB,CAAC,EAAE,MAAM,GAC3B,OAAO,CAAC,MAAM,CAAC,CAajB;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,GAAE,mBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtG;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOjG"}

package/dist/deploy/rtdb/rules.js

@@ -0,0 +1,104 @@
+import { GenerateIRHandler, RtdbMapper, WriteRulesHandler, } from 'pyric/rules/rtdb';
+import { AdminApiError } from '../scope.js';
+import { isRtdbRulesDocument } from '../../rtdb/rules-json.js';
+const RTDB_ADMIN_API = 'https://firebasedatabase.googleapis.com/v1beta';
+function hostFor(scope, databaseUrl) {
+    return {
+        projectId: scope.projectId,
+        databaseUrl,
+        resolveAdminToken: () => scope.resolveToken(),
+        resolveUserToken: async () => {
+            throw new Error('RTDB deploy tools do not mint user tokens');
+        },
+        getClientForUser: async () => {
+            throw new Error('RTDB deploy tools do not create client SDK handles');
+        },
+    };
+}
+function normalizeDatabaseUrl(raw) {
+    const url = new URL(raw);
+    url.pathname = url.pathname.replace(/\/+$/, '');
+    url.search = '';
+    url.hash = '';
+    return url.toString().replace(/\/$/, '');
+}
+function extractDatabaseUrl(instance) {
+    if (!instance || typeof instance !== 'object')
+        return null;
+    const obj = instance;
+    const direct = obj.databaseUrl;
+    if (typeof direct === 'string' && direct.length > 0)
+        return normalizeDatabaseUrl(direct);
+    const name = obj.name;
+    if (typeof name !== 'string')
+        return null;
+    const instanceId = name.split('/').filter(Boolean).at(-1);
+    return instanceId ? `https://${instanceId}.firebaseio.com` : null;
+}
+function rulesJsonFromInput(input) {
+    if ('rules' in input) {
+        if (!isRtdbRulesDocument(input.rules)) {
+            throw new Error('rtdb.rules.deploy: input.rules must be an RTDB rules document');
+        }
+        return input.rules.toJSON();
+    }
+    return input.rulesJson;
+}
+export async function discoverDefaultDatabaseUrl(scope) {
+    const token = await scope.resolveToken();
+    const res = await fetch(`${RTDB_ADMIN_API}/projects/${encodeURIComponent(scope.projectId)}/locations/-/instances`, { headers: { Authorization: `Bearer ${token}` } });
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        throw new AdminApiError(res.status, body, `RTDB instance discovery failed: ${res.status} ${res.statusText}`);
+    }
+    const body = await res.json().catch(() => ({}));
+    const instances = Array.isArray(body.instances) ? body.instances : [];
+    const candidates = [
+        ...new Set(instances.map(extractDatabaseUrl).filter((url) => Boolean(url))),
+    ];
+    if (candidates.length === 0)
+        return { databaseUrl: null, candidates };
+    if (candidates.length === 1)
+        return { databaseUrl: candidates[0], candidates };
+    const defaultCandidates = [
+        ...new Set(instances
+            .filter((instance) => (typeof instance === 'object' &&
+            instance !== null &&
+            instance.type === 'DEFAULT_DATABASE'))
+            .map(extractDatabaseUrl)
+            .filter((url) => Boolean(url))),
+    ];
+    return {
+        databaseUrl: defaultCandidates.length === 1 ? defaultCandidates[0] : null,
+        candidates,
+    };
+}
+export async function resolveDatabaseUrl(scope, explicitDatabaseUrl) {
+    if (explicitDatabaseUrl)
+        return normalizeDatabaseUrl(explicitDatabaseUrl);
+    const discovered = await discoverDefaultDatabaseUrl(scope);
+    if (discovered.databaseUrl)
+        return discovered.databaseUrl;
+    const suffix = discovered.candidates.length > 0
+        ? ` Found multiple RTDB instances: ${discovered.candidates.join(', ')}.`
+        : '';
+    throw new Error(`Could not resolve a Realtime Database URL for project '${scope.projectId}'. ` +
+        `Pass --database-url, set FIREBASE_DATABASE_URL, or add "database.url" to firebase.json.${suffix}`);
+}
+export async function fetchRules(scope, input = {}) {
+    const databaseUrl = await resolveDatabaseUrl(scope, input.databaseUrl);
+    const result = await new GenerateIRHandler().execute(hostFor(scope, databaseUrl));
+    if (!result.success) {
+        throw new Error(`${result.error.code}: ${result.error.message}`);
+    }
+    return result.data;
+}
+export async function deployRules(scope, input) {
+    const databaseUrl = await resolveDatabaseUrl(scope, input.databaseUrl);
+    const ir = RtdbMapper.mapToIR(rulesJsonFromInput(input), null, databaseUrl);
+    const result = await new WriteRulesHandler().execute(hostFor(scope, databaseUrl), ir);
+    if (!result.success) {
+        throw new Error(`${result.error.code}: ${result.error.message}`);
+    }
+}
+//# sourceMappingURL=rules.js.map

package/dist/deploy/rtdb/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../src/deploy/rtdb/rules.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,iBAAiB,GAIlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,cAAc,GAAG,gDAAgD,CAAC;AAqBxE,SAAS,OAAO,CAAC,KAAmB,EAAE,WAAmB;IACvD,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW;QACX,iBAAiB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE;QAC7C,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAiB;IAC3C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,GAAG,GAAG,QAAmC,CAAC;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC;IAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAEzF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,UAAU,CAAC,CAAC,CAAC,WAAW,UAAU,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA2B;IACrD,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAmB;IAClE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,cAAc,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,wBAAwB,EACzF,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAClD,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,aAAa,CACrB,GAAG,CAAC,MAAM,EACV,IAAI,EACJ,mCAAmC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA8B,CAAC;IAC7E,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3F,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACtE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;IAE/E,MAAM,iBAAiB,GAAG;QACxB,GAAG,IAAI,GAAG,CACR,SAAS;aACN,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CACpB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,QAAQ,KAAK,IAAI;YAChB,QAAoC,CAAC,IAAI,KAAK,kBAAkB,CAClE,CAAC;aACD,GAAG,CAAC,kBAAkB,CAAC;aACvB,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAChD;KACF,CAAC;IACF,OAAO;QACL,WAAW,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QACzE,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAmB,EACnB,mBAA4B;IAE5B,IAAI,mBAAmB;QAAE,OAAO,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;IAE1E,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,WAAW;QAAE,OAAO,UAAU,CAAC,WAAW,CAAC;IAE1D,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC7C,CAAC,CAAC,mCAAmC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACxE,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,KAAK,CACb,0DAA0D,KAAK,CAAC,SAAS,KAAK;QAC5E,0FAA0F,MAAM,EAAE,CACrG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAmB,EAAE,QAA6B,EAAE;IACnF,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,IAAI,iBAAiB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAmB,EAAE,KAA2B;IAChF,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,iBAAiB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}