pyric 0.0.1 → 0.1.0-alpha.10

package/dist/rules/rtdb/constraints/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/policies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAIhD,6DAA6D;AAC7D,eAAO,MAAM,aAAa,GAAI,SAAS,MAAM,KAAG,IACR,CAAC;AAEzC,6EAA6E;AAC7E,eAAO,MAAM,cAAc,GAAI,OAAO,MAAM,KAAG,IACR,CAAC;AAExC,qEAAqE;AACrE,eAAO,MAAM,UAAU,GAAI,OAAO,MAAM,KAAG,IACU,CAAC;AAEtD,4CAA4C;AAC5C,eAAO,MAAM,OAAO,GAAI,UAAU,OAAO,EAAE,EAAE,MAAM,MAAM,KAAG,IAChC,CAAC;AAE7B,yFAAyF;AACzF,eAAO,MAAM,QAAQ,GAAI,UAAU,MAAM,EAAE,aAAa,MAAM,KAAG,IACkB,CAAC;AAEpF,gEAAgE;AAChE,eAAO,MAAM,QAAQ,GAAI,GAAG,QAAQ,MAAM,EAAE,KAAG,IACT,CAAC;AAEvC,yDAAyD;AACzD,eAAO,MAAM,UAAU,GAAI,OAAO,MAAM,EAAE,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAG,IAMzE,CAAC"}

package/dist/rules/rtdb/constraints/policies.js

@@ -0,0 +1,17 @@
+import { all, any, expr } from './compose.js';
+import { authenticated, ownPath, ownField, isNew, hasChild, rootEquals } from './atoms.js';
+/** Only the path owner (auth.uid === $pathVar) can access */
+export const pathOwnerOnly = (pathVar) => all(authenticated(), ownPath(pathVar));
+/** Only the field owner (auth.uid === data.child(field).val()) can access */
+export const fieldOwnerOnly = (field) => all(authenticated(), ownField(field));
+/** Anyone authenticated can create; only the field owner can edit */
+export const ownerOrNew = (field) => all(authenticated(), any(isNew(), ownField(field)));
+/** Cross-path role check via root lookup */
+export const hasRole = (segments, role) => rootEquals(segments, role);
+/** Cross-path membership check: root.child(list).child($var).child(auth.uid).exists() */
+export const isMember = (listName, pathVarName) => expr(`root.child("${listName}").child($${pathVarName}).child(auth.uid).exists()`);
+/** All specified fields must be present in the incoming data */
+export const required = (...fields) => all(...fields.map(f => hasChild(f)));
+/** State machine: only allowed transitions on a field */
+export const transition = (field, allowed) => any(...allowed.map(([from, to]) => all(expr(`data.child("${field}").val() === "${from}"`), expr(`newData.child("${field}").val() === "${to}"`))));
+//# sourceMappingURL=policies.js.map

package/dist/rules/rtdb/constraints/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/policies.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAc,UAAU,EAAE,MAAM,YAAY,CAAC;AAEvG,6DAA6D;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAQ,EAAE,CACrD,GAAG,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAEzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAa,EAAQ,EAAE,CACpD,GAAG,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAExC,qEAAqE;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAQ,EAAE,CAChD,GAAG,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,QAAmB,EAAE,IAAY,EAAQ,EAAE,CACjE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAE7B,yFAAyF;AACzF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,WAAmB,EAAQ,EAAE,CACtE,IAAI,CAAC,eAAe,QAAQ,aAAa,WAAW,4BAA4B,CAAC,CAAC;AAEpF,gEAAgE;AAChE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAgB,EAAQ,EAAE,CACpD,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEvC,yDAAyD;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,OAAgC,EAAQ,EAAE,CAClF,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAChC,GAAG,CACD,IAAI,CAAC,eAAe,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAClD,IAAI,CAAC,kBAAkB,KAAK,iBAAiB,EAAE,GAAG,CAAC,CACpD,CACF,CAAC,CAAC"}

package/dist/rules/rtdb/constraints/ruleset.d.ts

@@ -0,0 +1,5 @@
+import type { CompiledRtdbRules } from '../compiled-rules.js';
+import type { PathDef, RulesetContext } from './types.js';
+/** Compile a declarative rules definition into an environment-independent tree. */
+export declare function ruleset(input: Record<string, PathDef> | ((ctx: RulesetContext) => void)): CompiledRtdbRules;
+//# sourceMappingURL=ruleset.d.ts.map

package/dist/rules/rtdb/constraints/ruleset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleset.d.ts","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/ruleset.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,KAAK,EAAQ,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGhE,mFAAmF;AACnF,wBAAgB,OAAO,CACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC,GAC/D,iBAAiB,CAoCnB"}

package/dist/rules/rtdb/constraints/ruleset.js

@@ -0,0 +1,132 @@
+import { buildRuleExpression } from '../compiled-rules.js';
+import { schemaRules } from './schema.js';
+/** Compile a declarative rules definition into an environment-independent tree. */
+export function ruleset(input) {
+    let pathDefs;
+    if (typeof input === 'function') {
+        const collected = [];
+        input({ path: (p, def) => collected.push([p, def]) });
+        pathDefs = collected;
+    }
+    else {
+        pathDefs = Object.entries(input);
+    }
+    // Flatten nested children into top-level path defs
+    const flattened = flattenChildren(pathDefs);
+    // Sort by depth (root first)
+    flattened.sort((a, b) => {
+        const depthA = a[0] === '/' ? 0 : a[0].split('/').filter(Boolean).length;
+        const depthB = b[0] === '/' ? 0 : b[0].split('/').filter(Boolean).length;
+        return depthA - depthB || a[0].localeCompare(b[0]);
+    });
+    // Pass 1: Build the path tree (nodes only, no rules)
+    const root = { path: '/', pathVariables: [], children: [] };
+    for (const [pathStr] of flattened) {
+        if (pathStr === '/')
+            continue;
+        ensurePath(root, pathStr);
+    }
+    // Pass 2: Apply rules, schemas, and indexOn to each node
+    for (const [pathStr, def] of flattened) {
+        const node = pathStr === '/' ? root : findNode(root, pathStr);
+        if (!node)
+            continue;
+        applyRules(root, node, def, pathStr);
+    }
+    return root;
+}
+// ---- Pass 1: Tree construction ----
+function ensurePath(root, pathStr) {
+    const segments = pathStr.split('/').filter(Boolean);
+    let current = root;
+    for (let i = 0; i < segments.length; i++) {
+        const partialPath = '/' + segments.slice(0, i + 1).join('/');
+        const varsUpToHere = segments.slice(0, i + 1).filter(s => s.startsWith('$'));
+        let child = current.children.find(c => c.path === partialPath);
+        if (!child) {
+            child = { path: partialPath, pathVariables: varsUpToHere, children: [] };
+            current.children.push(child);
+        }
+        current = child;
+    }
+}
+// ---- Pass 2: Rule application ----
+function applyRules(root, node, def, pathStr) {
+    const pathVars = pathStr.split('/').filter(s => s.startsWith('$'));
+    // Read/write/validate expressions
+    if (def.read)
+        node.read = buildExpr(def.read, 'read', pathVars);
+    if (def.write)
+        node.write = buildExpr(def.write, 'write', pathVars);
+    if (def.validate)
+        node.validate = buildExpr(def.validate, 'validate', pathVars);
+    // Schema generates parent validate + child validate rules
+    if (def.schema) {
+        const sr = schemaRules(def.schema, def.fieldConstraints);
+        if (!node.validate) {
+            node.validate = buildExpr(sr.validate, 'validate', pathVars);
+        }
+        for (const [fieldName, fieldDef] of Object.entries(sr.children)) {
+            const fieldPath = `${pathStr}/${fieldName}`;
+            let fieldNode = node.children.find(c => c.path === fieldPath);
+            if (!fieldNode) {
+                fieldNode = { path: fieldPath, pathVariables: pathVars, children: [] };
+                node.children.push(fieldNode);
+            }
+            fieldNode.validate = buildExpr(fieldDef.validate, 'validate', pathVars);
+            // Nested object schema children
+            if ('children' in fieldDef && fieldDef.children) {
+                for (const [nestedName, nestedDef] of Object.entries(fieldDef.children)) {
+                    const nestedPath = `${fieldPath}/${nestedName}`;
+                    let nestedNode = fieldNode.children.find(c => c.path === nestedPath);
+                    if (!nestedNode) {
+                        nestedNode = { path: nestedPath, pathVariables: pathVars, children: [] };
+                        fieldNode.children.push(nestedNode);
+                    }
+                    nestedNode.validate = buildExpr(nestedDef.validate, 'validate', pathVars);
+                }
+            }
+        }
+    }
+    // indexOn goes on the container (parent of wildcard), not the wildcard itself
+    if (def.indexOn) {
+        const segments = pathStr.split('/').filter(Boolean);
+        const lastSegment = segments[segments.length - 1];
+        if (lastSegment?.startsWith('$')) {
+            const parentPath = '/' + segments.slice(0, -1).join('/');
+            const parent = findNode(root, parentPath);
+            if (parent)
+                parent.indexOn = def.indexOn;
+        }
+    }
+}
+// ---- Helpers ----
+/** Flatten nested children into absolute path entries. */
+function flattenChildren(defs) {
+    const result = [];
+    for (const [pathStr, def] of defs) {
+        // Add this path without the children property
+        const { children, ...rest } = def;
+        result.push([pathStr, rest]);
+        // Recursively flatten children
+        if (children) {
+            const childEntries = Object.entries(children).map(([childPath, childDef]) => [pathStr + childPath, childDef]);
+            result.push(...flattenChildren(childEntries));
+        }
+    }
+    return result;
+}
+function buildExpr(raw, context, pathVariables) {
+    return buildRuleExpression(String(raw), context, pathVariables);
+}
+function findNode(root, path) {
+    if (root.path === path)
+        return root;
+    for (const child of root.children) {
+        const found = findNode(child, path);
+        if (found)
+            return found;
+    }
+    return null;
+}
+//# sourceMappingURL=ruleset.js.map

package/dist/rules/rtdb/constraints/ruleset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleset.js","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/ruleset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1C,mFAAmF;AACnF,MAAM,UAAU,OAAO,CACrB,KAAgE;IAEhE,IAAI,QAAkC,CAAC;IAEvC,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,SAAS,GAA6B,EAAE,CAAC;QAC/C,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,mDAAmD;IACnD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE5C,6BAA6B;IAC7B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACzE,OAAO,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,IAAI,GAAa,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACtE,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAC9B,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,yDAAyD;IACzD,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sCAAsC;AAEtC,SAAS,UAAU,CAAC,IAAc,EAAE,OAAe;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,IAAI,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAE7E,IAAI,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACzE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;AACH,CAAC;AAED,qCAAqC;AAErC,SAAS,UAAU,CAAC,IAAc,EAAE,IAAc,EAAE,GAAY,EAAE,OAAe;IAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnE,kCAAkC;IAClC,IAAI,GAAG,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,GAAG,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,GAAG,CAAC,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEhF,0DAA0D;IAC1D,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;YAC5C,IAAI,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;gBACvE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,CAAC;YACD,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;YAExE,gCAAgC;YAChC,IAAI,UAAU,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAChD,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAA8C,CAAC,EAAE,CAAC;oBAC9G,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;oBAChD,IAAI,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;oBACrE,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,UAAU,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;wBACzE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACtC,CAAC;oBACD,UAAU,CAAC,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC1C,IAAI,MAAM;gBAAE,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED,oBAAoB;AAEpB,0DAA0D;AAC1D,SAAS,eAAe,CAAC,IAA8B;IACrD,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAClC,8CAA8C;QAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAe,CAAC,CAAC,CAAC;QAExC,+BAA+B;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAC/C,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,EAAE,QAAQ,CAAsB,CAChF,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,GAAS,EAAE,OAAsC,EAAE,aAAuB;IAC3F,OAAO,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc,EAAE,IAAY;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/rules/rtdb/constraints/schema.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+import type { Expr } from './types.js';
+export interface SchemaRulesResult {
+    validate: Expr;
+    children: Record<string, {
+        validate: Expr;
+        children?: Record<string, {
+            validate: Expr;
+        }>;
+    }>;
+}
+/**
+ * Generate RTDB validate rules from a Zod object schema.
+ * Optional fieldConstraints are AND-composed with the schema type check.
+ */
+export declare function schemaRules(schema: z.ZodObject<any>, fieldConstraints?: Record<string, Expr[]>): SchemaRulesResult;
+//# sourceMappingURL=schema.d.ts.map

package/dist/rules/rtdb/constraints/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAIvC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,QAAQ,EAAE,IAAI,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC7F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,GACxC,iBAAiB,CAwCnB"}

package/dist/rules/rtdb/constraints/schema.js

@@ -0,0 +1,74 @@
+import { z } from 'zod';
+import { all, any, expr } from './compose.js';
+import { hasChild, hasChildren } from './atoms.js';
+/**
+ * Generate RTDB validate rules from a Zod object schema.
+ * Optional fieldConstraints are AND-composed with the schema type check.
+ */
+export function schemaRules(schema, fieldConstraints) {
+    const shape = schema.shape;
+    const requiredFields = [];
+    const children = {};
+    for (const [key, rawType] of Object.entries(shape)) {
+        const zodType = rawType;
+        const isOptional = zodType instanceof z.ZodOptional;
+        const innerType = isOptional ? zodType.unwrap() : zodType;
+        if (!isOptional)
+            requiredFields.push(key);
+        const typeExpr = zodTypeToExpr(innerType, key);
+        // Merge with field constraints if present
+        const constraints = fieldConstraints?.[key];
+        if (constraints && constraints.length > 0) {
+            children[key] = { validate: all(typeExpr, ...constraints) };
+        }
+        else {
+            children[key] = { validate: typeExpr };
+        }
+        // Nested objects produce children
+        if (innerType instanceof z.ZodObject) {
+            const nested = schemaRules(innerType);
+            children[key] = {
+                validate: nested.validate,
+                children: nested.children,
+            };
+        }
+    }
+    // Parent validate: hasChildren + required fields
+    const parentParts = [hasChildren()];
+    for (const f of requiredFields) {
+        parentParts.push(hasChild(f));
+    }
+    const validate = all(...parentParts);
+    return { validate, children };
+}
+function zodTypeToExpr(zodType, fieldName) {
+    if (zodType instanceof z.ZodString) {
+        return expr('newData.isString()');
+    }
+    if (zodType instanceof z.ZodNumber) {
+        return expr('newData.isNumber()');
+    }
+    if (zodType instanceof z.ZodBoolean) {
+        return expr('newData.isBoolean()');
+    }
+    if (zodType instanceof z.ZodEnum) {
+        const values = zodType.options;
+        return expr(values.map(v => `newData.val() === "${v}"`).join(' || '));
+    }
+    if (zodType instanceof z.ZodLiteral) {
+        const v = zodType.value;
+        if (typeof v === 'string')
+            return expr(`newData.val() === "${v}"`);
+        return expr(`newData.val() === ${v}`);
+    }
+    if (zodType instanceof z.ZodUnion) {
+        const options = zodType._def.options;
+        return any(...options.map(opt => zodTypeToExpr(opt, fieldName)));
+    }
+    if (zodType instanceof z.ZodObject) {
+        // Handled separately in the caller — return hasChildren as placeholder
+        return expr('newData.hasChildren()');
+    }
+    throw new Error(`Unsupported Zod type for RTDB rules: ${zodType.constructor.name} on field "${fieldName}"`);
+}
+//# sourceMappingURL=schema.js.map

package/dist/rules/rtdb/constraints/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAOnD;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,MAAwB,EACxB,gBAAyC;IAEzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAkC,EAAE,CAAC;IAEnD,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,OAAuB,CAAC;QACxC,MAAM,UAAU,GAAG,OAAO,YAAY,CAAC,CAAC,WAAW,CAAC;QACpD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAE,OAA8B,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAElF,IAAI,CAAC,UAAU;YAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE1C,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAE/C,0CAA0C;QAC1C,MAAM,WAAW,GAAG,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC;QAED,kCAAkC;QAClC,IAAI,SAAS,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACtC,QAAQ,CAAC,GAAG,CAAC,GAAG;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAe;aACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,MAAM,WAAW,GAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAErC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,OAAqB,EAAE,SAAiB;IAC7D,IAAI,OAAO,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,MAAM,GAAI,OAA0B,CAAC,OAAmB,CAAC;QAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,CAAC,GAAI,OAA6B,CAAC,KAAK,CAAC;QAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,OAAO,GAAI,OAA2B,CAAC,IAAI,CAAC,OAAyB,CAAC;QAC5E,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACnC,uEAAuE;QACvE,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,CAAC,WAAW,CAAC,IAAI,cAAc,SAAS,GAAG,CAAC,CAAC;AAC9G,CAAC"}

package/dist/rules/rtdb/constraints/types.d.ts

@@ -0,0 +1,22 @@
+import type { z } from 'zod';
+/** Type alias for RTDB rule expression strings. */
+export type Expr = string;
+/** A path segment: string for literal, { $: name } for path variable. */
+export type Segment = string | {
+    $: string;
+};
+/** Definition of rules for a single database path. */
+export interface PathDef {
+    read?: Expr;
+    write?: Expr;
+    validate?: Expr;
+    schema?: z.ZodObject<any>;
+    fieldConstraints?: Record<string, Expr[]>;
+    indexOn?: string[];
+    children?: Record<string, PathDef>;
+}
+/** Context passed to the callback overload of ruleset(). */
+export interface RulesetContext {
+    path: (path: string, def: PathDef) => void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/rules/rtdb/constraints/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,mDAAmD;AACnD,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC;AAE1B,yEAAyE;AACzE,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG;IAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,sDAAsD;AACtD,MAAM,WAAW,OAAO;IACtB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAC5C"}

package/dist/rules/rtdb/constraints/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/rules/rtdb/constraints/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/types.ts"],"names":[],"mappings":""}

package/dist/rules/rtdb/constraints/write-rules-file.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Node-only convenience for writing a compiled RTDB rules document to a
+ * static `database.rules.json` file.
+ *
+ * Deliberately kept out of `document.ts` (and out of the browser-facing
+ * `pyric/rules` and `pyric/database` root entries) — it imports
+ * `node:fs` / `node:path`, so it lives alongside the other Node-only
+ * surfaces re-exported from `pyric/rules/node`. It does no compilation
+ * of its own: it calls `doc.toJSON()`, which routes through
+ * the pure RTDB rules serializer, then writes the result.
+ *
+ * Uses the SYNC `node:fs` / `node:path` specifiers (not `node:fs/promises`)
+ * to match the module resolver's existing Node-builtin usage — `pyric/rules`
+ * is statically reachable from Studio's browser bundle (a known wart, see
+ * `modules/resolver.ts` and `@pyric/cli/vite`'s `NODE_BUILTIN_SHIMS`), and
+ * those shims only cover the bare `fs`/`path`/`url` specifiers.
+ */
+import type { RtdbRulesDocumentInternal } from './document.js';
+/**
+ * Write `doc.toJSON()` to `path` as pretty-printed JSON, creating parent
+ * directories as needed. Returns the resolved absolute path written.
+ */
+export declare function writeRtdbRulesFile(doc: RtdbRulesDocumentInternal, path: string): Promise<string>;
+//# sourceMappingURL=write-rules-file.d.ts.map

package/dist/rules/rtdb/constraints/write-rules-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-rules-file.d.ts","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/write-rules-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE/D;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,yBAAyB,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAKjB"}

package/dist/rules/rtdb/constraints/write-rules-file.js

@@ -0,0 +1,30 @@
+/**
+ * Node-only convenience for writing a compiled RTDB rules document to a
+ * static `database.rules.json` file.
+ *
+ * Deliberately kept out of `document.ts` (and out of the browser-facing
+ * `pyric/rules` and `pyric/database` root entries) — it imports
+ * `node:fs` / `node:path`, so it lives alongside the other Node-only
+ * surfaces re-exported from `pyric/rules/node`. It does no compilation
+ * of its own: it calls `doc.toJSON()`, which routes through
+ * the pure RTDB rules serializer, then writes the result.
+ *
+ * Uses the SYNC `node:fs` / `node:path` specifiers (not `node:fs/promises`)
+ * to match the module resolver's existing Node-builtin usage — `pyric/rules`
+ * is statically reachable from Studio's browser bundle (a known wart, see
+ * `modules/resolver.ts` and `@pyric/cli/vite`'s `NODE_BUILTIN_SHIMS`), and
+ * those shims only cover the bare `fs`/`path`/`url` specifiers.
+ */
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { dirname, resolve as resolvePath } from 'node:path';
+/**
+ * Write `doc.toJSON()` to `path` as pretty-printed JSON, creating parent
+ * directories as needed. Returns the resolved absolute path written.
+ */
+export async function writeRtdbRulesFile(doc, path) {
+    const resolved = resolvePath(path);
+    mkdirSync(dirname(resolved), { recursive: true });
+    writeFileSync(resolved, `${JSON.stringify(doc.toJSON(), null, 2)}\n`, 'utf-8');
+    return resolved;
+}
+//# sourceMappingURL=write-rules-file.js.map

package/dist/rules/rtdb/constraints/write-rules-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-rules-file.js","sourceRoot":"","sources":["../../../../src/rules/rtdb/constraints/write-rules-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAG5D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAA8B,EAC9B,IAAY;IAEZ,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/E,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/rules/rtdb/expression-engine.d.ts

@@ -0,0 +1,8 @@
+import * as ohm from 'ohm-js';
+/** Engine-internal diagnostic used to lock lazy rules-barrel initialization. */
+export declare function isRtdbExpressionEngineInitialized(): boolean;
+/** Match expression text without exposing a grammar instance to callers. */
+export declare function matchRtdbExpression(raw: string): ohm.MatchResult;
+/** Create semantics lazily against the shared grammar. Engine-internal only. */
+export declare function createRtdbExpressionSemantics(): ohm.Semantics;
+//# sourceMappingURL=expression-engine.d.ts.map

package/dist/rules/rtdb/expression-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-engine.d.ts","sourceRoot":"","sources":["../../../src/rules/rtdb/expression-engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,QAAQ,CAAC;AAK9B,gFAAgF;AAChF,wBAAgB,iCAAiC,IAAI,OAAO,CAE3D;AAOD,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,WAAW,CAEhE;AAED,gFAAgF;AAChF,wBAAgB,6BAA6B,IAAI,GAAG,CAAC,SAAS,CAE7D"}

package/dist/rules/rtdb/expression-engine.js

@@ -0,0 +1,20 @@
+import * as ohm from 'ohm-js';
+import { RTDB_EXPR_OHM_SOURCE } from './grammar/RtdbExpr.ohm.generated.js';
+let cachedGrammar;
+/** Engine-internal diagnostic used to lock lazy rules-barrel initialization. */
+export function isRtdbExpressionEngineInitialized() {
+    return cachedGrammar !== undefined;
+}
+function getGrammar() {
+    cachedGrammar ??= ohm.grammar(RTDB_EXPR_OHM_SOURCE);
+    return cachedGrammar;
+}
+/** Match expression text without exposing a grammar instance to callers. */
+export function matchRtdbExpression(raw) {
+    return getGrammar().match(raw.trim());
+}
+/** Create semantics lazily against the shared grammar. Engine-internal only. */
+export function createRtdbExpressionSemantics() {
+    return getGrammar().createSemantics();
+}
+//# sourceMappingURL=expression-engine.js.map

package/dist/rules/rtdb/expression-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-engine.js","sourceRoot":"","sources":["../../../src/rules/rtdb/expression-engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,IAAI,aAAsC,CAAC;AAE3C,gFAAgF;AAChF,MAAM,UAAU,iCAAiC;IAC/C,OAAO,aAAa,KAAK,SAAS,CAAC;AACrC,CAAC;AAED,SAAS,UAAU;IACjB,aAAa,KAAK,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACpD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,6BAA6B;IAC3C,OAAO,UAAU,EAAE,CAAC,eAAe,EAAE,CAAC;AACxC,CAAC"}

package/dist/rules/rtdb/grammar/RtdbExpr.ohm

@@ -0,0 +1,98 @@
+RtdbExpr {
+  Expr = Ternary
+
+  Ternary
+    = Logical "?" Ternary ":" Ternary  -- ternary
+    | Logical
+
+  Logical
+    = Logical "&&" Comparison  -- and
+    | Logical "||" Comparison  -- or
+    | Comparison
+
+  Comparison
+    = Comparison "===" Additive  -- strictEq
+    | Comparison "!==" Additive  -- strictNeq
+    | Comparison ">=" Additive   -- gte
+    | Comparison "<=" Additive   -- lte
+    | Comparison ">" Additive    -- gt
+    | Comparison "<" Additive    -- lt
+    | Comparison "==" Additive   -- looseEq
+    | Comparison "!=" Additive   -- looseNeq
+    | Additive
+
+  Additive
+    = Additive "+" Multiplicative  -- add
+    | Additive "-" Multiplicative  -- sub
+    | Multiplicative
+
+  Multiplicative
+    = Multiplicative "*" UnaryExpr  -- mul
+    | Multiplicative "/" UnaryExpr  -- div
+    | Multiplicative "%" UnaryExpr  -- mod
+    | UnaryExpr
+
+  UnaryExpr
+    = "!" UnaryExpr  -- not
+    | "-" UnaryExpr  -- neg
+    | CallExpr
+
+  CallExpr
+    = CallExpr "." ident "(" ListOf<Expr, ","> ")"  -- methodCall
+    | CallExpr "." ident                             -- memberAccess
+    | CallExpr "[" Expr "]"                          -- indexAccess
+    | Primary
+
+  Primary
+    = "(" Expr ")"  -- paren
+    | Array
+    | literal
+    | ident
+
+  Array = "[" ListOf<Expr, ","> "]"
+
+  literal
+    = number
+    | string
+    | regex
+    | bool
+    | null
+
+  number
+    = digit+ "." digit+  -- float
+    | digit+              -- int
+
+  string
+    = "\"" doubleStringChar* "\""  -- double
+    | "'" singleStringChar* "'"    -- single
+
+  doubleStringChar
+    = "\\" any  -- escape
+    | ~"\"" any -- char
+
+  singleStringChar
+    = "\\" any  -- escape
+    | ~"'" any  -- char
+
+  regex = "/" regexBody "/" regexFlags
+
+  regexBody = regexChar+
+
+  regexChar
+    = "\\" any     -- escape
+    | ~("/" | "\n") any  -- char
+
+  regexFlags = alnum*
+
+  bool
+    = "true" ~identChar   -- true
+    | "false" ~identChar  -- false
+
+  null = "null" ~identChar
+
+  ident = "$"? identStart identChar*
+
+  identStart = letter | "_"
+
+  identChar = alnum | "_" | "$"
+}

package/dist/rules/rtdb/grammar/RtdbExpr.ohm.generated.d.ts

@@ -0,0 +1,2 @@
+export declare const RTDB_EXPR_OHM_SOURCE = "RtdbExpr {\n  Expr = Ternary\n\n  Ternary\n    = Logical \"?\" Ternary \":\" Ternary  -- ternary\n    | Logical\n\n  Logical\n    = Logical \"&&\" Comparison  -- and\n    | Logical \"||\" Comparison  -- or\n    | Comparison\n\n  Comparison\n    = Comparison \"===\" Additive  -- strictEq\n    | Comparison \"!==\" Additive  -- strictNeq\n    | Comparison \">=\" Additive   -- gte\n    | Comparison \"<=\" Additive   -- lte\n    | Comparison \">\" Additive    -- gt\n    | Comparison \"<\" Additive    -- lt\n    | Comparison \"==\" Additive   -- looseEq\n    | Comparison \"!=\" Additive   -- looseNeq\n    | Additive\n\n  Additive\n    = Additive \"+\" Multiplicative  -- add\n    | Additive \"-\" Multiplicative  -- sub\n    | Multiplicative\n\n  Multiplicative\n    = Multiplicative \"*\" UnaryExpr  -- mul\n    | Multiplicative \"/\" UnaryExpr  -- div\n    | Multiplicative \"%\" UnaryExpr  -- mod\n    | UnaryExpr\n\n  UnaryExpr\n    = \"!\" UnaryExpr  -- not\n    | \"-\" UnaryExpr  -- neg\n    | CallExpr\n\n  CallExpr\n    = CallExpr \".\" ident \"(\" ListOf<Expr, \",\"> \")\"  -- methodCall\n    | CallExpr \".\" ident                             -- memberAccess\n    | CallExpr \"[\" Expr \"]\"                          -- indexAccess\n    | Primary\n\n  Primary\n    = \"(\" Expr \")\"  -- paren\n    | Array\n    | literal\n    | ident\n\n  Array = \"[\" ListOf<Expr, \",\"> \"]\"\n\n  literal\n    = number\n    | string\n    | regex\n    | bool\n    | null\n\n  number\n    = digit+ \".\" digit+  -- float\n    | digit+              -- int\n\n  string\n    = \"\\\"\" doubleStringChar* \"\\\"\"  -- double\n    | \"'\" singleStringChar* \"'\"    -- single\n\n  doubleStringChar\n    = \"\\\\\" any  -- escape\n    | ~\"\\\"\" any -- char\n\n  singleStringChar\n    = \"\\\\\" any  -- escape\n    | ~\"'\" any  -- char\n\n  regex = \"/\" regexBody \"/\" regexFlags\n\n  regexBody = regexChar+\n\n  regexChar\n    = \"\\\\\" any     -- escape\n    | ~(\"/\" | \"\\n\") any  -- char\n\n  regexFlags = alnum*\n\n  bool\n    = \"true\" ~identChar   -- true\n    | \"false\" ~identChar  -- false\n\n  null = \"null\" ~identChar\n\n  ident = \"$\"? identStart identChar*\n\n  identStart = letter | \"_\"\n\n  identChar = alnum | \"_\" | \"$\"\n}\n";
+//# sourceMappingURL=RtdbExpr.ohm.generated.d.ts.map

package/dist/rules/rtdb/grammar/RtdbExpr.ohm.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RtdbExpr.ohm.generated.d.ts","sourceRoot":"","sources":["../../../../src/rules/rtdb/grammar/RtdbExpr.ohm.generated.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,oBAAoB,otEAkGhC,CAAC"}

package/dist/rules/rtdb/grammar/RtdbExpr.ohm.generated.js

@@ -0,0 +1,103 @@
+// AUTO-GENERATED — do not edit by hand. Regenerate via:
+//   bun packages/rtdb/scripts/inline-grammar.ts
+// Source: RtdbExpr.ohm
+export const RTDB_EXPR_OHM_SOURCE = `RtdbExpr {
+  Expr = Ternary
+
+  Ternary
+    = Logical "?" Ternary ":" Ternary  -- ternary
+    | Logical
+
+  Logical
+    = Logical "&&" Comparison  -- and
+    | Logical "||" Comparison  -- or
+    | Comparison
+
+  Comparison
+    = Comparison "===" Additive  -- strictEq
+    | Comparison "!==" Additive  -- strictNeq
+    | Comparison ">=" Additive   -- gte
+    | Comparison "<=" Additive   -- lte
+    | Comparison ">" Additive    -- gt
+    | Comparison "<" Additive    -- lt
+    | Comparison "==" Additive   -- looseEq
+    | Comparison "!=" Additive   -- looseNeq
+    | Additive
+
+  Additive
+    = Additive "+" Multiplicative  -- add
+    | Additive "-" Multiplicative  -- sub
+    | Multiplicative
+
+  Multiplicative
+    = Multiplicative "*" UnaryExpr  -- mul
+    | Multiplicative "/" UnaryExpr  -- div
+    | Multiplicative "%" UnaryExpr  -- mod
+    | UnaryExpr
+
+  UnaryExpr
+    = "!" UnaryExpr  -- not
+    | "-" UnaryExpr  -- neg
+    | CallExpr
+
+  CallExpr
+    = CallExpr "." ident "(" ListOf<Expr, ","> ")"  -- methodCall
+    | CallExpr "." ident                             -- memberAccess
+    | CallExpr "[" Expr "]"                          -- indexAccess
+    | Primary
+
+  Primary
+    = "(" Expr ")"  -- paren
+    | Array
+    | literal
+    | ident
+
+  Array = "[" ListOf<Expr, ","> "]"
+
+  literal
+    = number
+    | string
+    | regex
+    | bool
+    | null
+
+  number
+    = digit+ "." digit+  -- float
+    | digit+              -- int
+
+  string
+    = "\\"" doubleStringChar* "\\""  -- double
+    | "'" singleStringChar* "'"    -- single
+
+  doubleStringChar
+    = "\\\\" any  -- escape
+    | ~"\\"" any -- char
+
+  singleStringChar
+    = "\\\\" any  -- escape
+    | ~"'" any  -- char
+
+  regex = "/" regexBody "/" regexFlags
+
+  regexBody = regexChar+
+
+  regexChar
+    = "\\\\" any     -- escape
+    | ~("/" | "\\n") any  -- char
+
+  regexFlags = alnum*
+
+  bool
+    = "true" ~identChar   -- true
+    | "false" ~identChar  -- false
+
+  null = "null" ~identChar
+
+  ident = "$"? identStart identChar*
+
+  identStart = letter | "_"
+
+  identChar = alnum | "_" | "$"
+}
+`;
+//# sourceMappingURL=RtdbExpr.ohm.generated.js.map

package/dist/rules/rtdb/grammar/RtdbExpr.ohm.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RtdbExpr.ohm.generated.js","sourceRoot":"","sources":["../../../../src/rules/rtdb/grammar/RtdbExpr.ohm.generated.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,gDAAgD;AAChD,uBAAuB;AAEvB,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkGnC,CAAC"}