pyric 0.0.1 → 0.1.0-alpha.7

package/dist/database/constraints/data.js

@@ -0,0 +1,46 @@
+const e = (raw) => raw;
+function formatRight(value) {
+    if (value === null)
+        return 'null';
+    if (typeof value === 'object' && '$' in value)
+        return value.$;
+    if (typeof value === 'string')
+        return `"${value}"`;
+    return String(value);
+}
+// ---- Value access ----
+/** Read data value at current node or a child path (pre-write state) */
+export const dataVal = (path) => path ? e(`data.child("${path}").val()`) : e('data.val()');
+/** Read incoming data value at current node or a child path (post-write state) */
+export const newDataVal = (path) => path ? e(`newData.child("${path}").val()`) : e('newData.val()');
+// ---- Existence ----
+/** Check if data exists at current node or a child path */
+export const dataExists = (path) => path ? e(`data.child("${path}").exists()`) : e('data.exists()');
+/** Check if incoming data exists at current node or a child path */
+export const newDataExists = (path) => path ? e(`newData.child("${path}").exists()`) : e('newData.exists()');
+// ---- Type checks ----
+/** Check incoming data type at current node */
+export const newDataIs = (type) => e(`newData.is${type}()`);
+// ---- Parent navigation ----
+function parentChain(base, depth) {
+    return base + '.parent()'.repeat(depth);
+}
+/** Navigate up from data snapshot, then read a child field's value */
+export const dataParentVal = (depth, field) => e(`${parentChain('data', depth)}.child("${field}").val()`);
+/** Navigate up from newData snapshot, then read a child field's value */
+export const newDataParentVal = (depth, field) => e(`${parentChain('newData', depth)}.child("${field}").val()`);
+/** Navigate up from newData snapshot, then check if a child field exists */
+export const newDataParentExists = (depth, field) => e(`${parentChain('newData', depth)}.child("${field}").exists()`);
+// ---- Comparisons ----
+/** Strict equality: left === right (right is a literal value or runtime ref) */
+export const eq = (left, right) => e(`${left} === ${formatRight(right)}`);
+/** Strict inequality: left !== right */
+export const neq = (left, right) => e(`${left} !== ${formatRight(right)}`);
+/** Greater than: left > right */
+export const gt = (left, right) => e(`${left} > ${right}`);
+/** Less than or equal: left <= right */
+export const lte = (left, right) => e(`${left} <= ${right}`);
+// ---- Constants ----
+/** auth.uid as a comparison value (unquoted in expressions) */
+export const AUTH_UID = { $: 'auth.uid' };
+//# sourceMappingURL=data.js.map

package/dist/database/constraints/data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.js","sourceRoot":"","sources":["../../../src/database/constraints/data.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,GAAG,CAAC,GAAW,EAAQ,EAAE,CAAC,GAAW,CAAC;AAI7C,SAAS,WAAW,CAAC,KAAmB;IACtC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,KAAK,GAAG,CAAC;IACnD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,yBAAyB;AAEzB,wEAAwE;AACxE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAa,EAAQ,EAAE,CAC7C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;AAE5D,kFAAkF;AAClF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAa,EAAQ,EAAE,CAChD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AAElE,sBAAsB;AAEtB,2DAA2D;AAC3D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAa,EAAQ,EAAE,CAChD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AAElE,oEAAoE;AACpE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAa,EAAQ,EAAE,CACnD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAExE,wBAAwB;AAExB,+CAA+C;AAC/C,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAqC,EAAQ,EAAE,CACvE,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC;AAE3B,8BAA8B;AAE9B,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE,CAClE,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;AAE7D,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE,CACrE,CAAC,CAAC,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;AAEhE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE,CACxE,CAAC,CAAC,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,KAAK,aAAa,CAAC,CAAC;AAEnE,wBAAwB;AAExB,gFAAgF;AAChF,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAU,EAAE,KAAmB,EAAQ,EAAE,CAC1D,CAAC,CAAC,GAAG,IAAI,QAAQ,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAEzC,wCAAwC;AACxC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAU,EAAE,KAAmB,EAAQ,EAAE,CAC3D,CAAC,CAAC,GAAG,IAAI,QAAQ,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAEzC,iCAAiC;AACjC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAU,EAAE,KAAa,EAAQ,EAAE,CACpD,CAAC,CAAC,GAAG,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC;AAE1B,wCAAwC;AACxC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAU,EAAE,KAAa,EAAQ,EAAE,CACrD,CAAC,CAAC,GAAG,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;AAE3B,sBAAsB;AAEtB,+DAA+D;AAC/D,MAAM,CAAC,MAAM,QAAQ,GAAY,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC"}

package/dist/database/constraints/document.d.ts

@@ -0,0 +1,42 @@
+import type { SimulationInput, SimulateResult } from '../simulation/spec.js';
+import type { RtdbIR } from '../types.js';
+import type { PathDef, RulesetContext } from './types.js';
+export interface RtdbRulesDefinition {
+    databaseUrl?: string;
+    paths: Record<string, PathDef> | ((ctx: RulesetContext) => void);
+}
+export type RtdbRulesJson = {
+    rules: Record<string, unknown>;
+};
+export type RtdbRulesFindingRule = '.read' | '.write' | '.validate' | 'ruleset';
+export interface RtdbRulesFinding {
+    path: string;
+    rule: RtdbRulesFindingRule;
+    code: string;
+    message: string;
+}
+export interface RtdbRulesCheckResult {
+    ok: boolean;
+    errors: RtdbRulesFinding[];
+    warnings: RtdbRulesFinding[];
+    ir?: RtdbIR;
+}
+export type RtdbRulesSimulationAuth = string | {
+    uid: string;
+    token?: Record<string, unknown>;
+} | null;
+export type RtdbRulesSimulationInput = Omit<SimulationInput, 'auth' | 'mockData'> & {
+    auth?: RtdbRulesSimulationAuth;
+    data?: Record<string, unknown>;
+    mockData?: Record<string, unknown>;
+};
+export interface RtdbRulesDocument {
+    toJSON(): RtdbRulesJson;
+    toIR(databaseUrl?: string): RtdbIR;
+    check(databaseUrl?: string): RtdbRulesCheckResult;
+    simulate(input: RtdbRulesSimulationInput, opts?: {
+        databaseUrl?: string;
+    }): SimulateResult;
+}
+export declare function defineRtdbRules(definition: RtdbRulesDefinition): RtdbRulesDocument;
+//# sourceMappingURL=document.d.ts.map

package/dist/database/constraints/document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../../src/database/constraints/document.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,aAAa,CAAC;AAExE,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAI1D,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC,CAAC;CAClE;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAEhF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,uBAAuB,GAC/B,MAAM,GACN;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAChD,IAAI,CAAC;AAET,MAAM,MAAM,wBAAwB,GAClC,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,UAAU,CAAC,GAAG;IAC3C,IAAI,CAAC,EAAE,uBAAuB,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEJ,MAAM,WAAW,iBAAiB;IAChC,MAAM,IAAI,aAAa,CAAC;IACxB,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAAC;IAClD,QAAQ,CACN,KAAK,EAAE,wBAAwB,EAC/B,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9B,cAAc,CAAC;CACnB;AAiGD,wBAAgB,eAAe,CAAC,UAAU,EAAE,mBAAmB,GAAG,iBAAiB,CAElF"}

package/dist/database/constraints/document.js

@@ -0,0 +1,86 @@
+import { RtdbMapper } from '../mapper.js';
+import { SimulateHandler } from '../simulation/handler.js';
+import { ruleset } from './ruleset.js';
+const LOCAL_DATABASE_URL = 'https://local-rtdb.firebaseio.com';
+function resolveDatabaseUrl(definition, databaseUrl) {
+    return databaseUrl ?? definition.databaseUrl ?? LOCAL_DATABASE_URL;
+}
+function normalizeAuth(auth) {
+    if (auth === undefined || auth === null)
+        return null;
+    if (typeof auth === 'string')
+        return { uid: auth, token: {} };
+    return { uid: auth.uid, token: auth.token ?? {} };
+}
+function normalizeSimulationInput(input) {
+    return {
+        operation: input.operation,
+        path: input.path,
+        auth: normalizeAuth(input.auth),
+        mockData: input.mockData ?? input.data ?? {},
+        ...(input.newData !== undefined ? { newData: input.newData } : {}),
+    };
+}
+function collectExpressionFindings(path, rule, expr, kind) {
+    return (expr?.parsed[kind] ?? []).map((finding) => ({
+        path,
+        rule,
+        code: finding.code,
+        message: finding.message,
+    }));
+}
+function collectFindings(node, kind) {
+    const findings = [
+        ...collectExpressionFindings(node.path, '.read', node.read, kind),
+        ...collectExpressionFindings(node.path, '.write', node.write, kind),
+        ...collectExpressionFindings(node.path, '.validate', node.validate, kind),
+    ];
+    for (const child of node.children) {
+        findings.push(...collectFindings(child, kind));
+    }
+    return findings;
+}
+class DefinedRtdbRulesDocument {
+    definition;
+    constructor(definition) {
+        this.definition = definition;
+    }
+    toIR(databaseUrl) {
+        return ruleset(resolveDatabaseUrl(this.definition, databaseUrl), this.definition.paths);
+    }
+    toJSON() {
+        return RtdbMapper.mapToRulesJSON(this.toIR());
+    }
+    check(databaseUrl) {
+        try {
+            const ir = this.toIR(databaseUrl);
+            const errors = collectFindings(ir.rules, 'errors');
+            const warnings = collectFindings(ir.rules, 'warnings');
+            return {
+                ok: errors.length === 0,
+                errors,
+                warnings,
+                ir,
+            };
+        }
+        catch (e) {
+            return {
+                ok: false,
+                errors: [{
+                        path: '/',
+                        rule: 'ruleset',
+                        code: 'COMPILE_ERROR',
+                        message: e instanceof Error ? e.message : String(e),
+                    }],
+                warnings: [],
+            };
+        }
+    }
+    simulate(input, opts = {}) {
+        return new SimulateHandler().execute(this.toIR(opts.databaseUrl), normalizeSimulationInput(input));
+    }
+}
+export function defineRtdbRules(definition) {
+    return new DefinedRtdbRulesDocument(definition);
+}
+//# sourceMappingURL=document.js.map

package/dist/database/constraints/document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.js","sourceRoot":"","sources":["../../../src/database/constraints/document.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG3D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AA+C/D,SAAS,kBAAkB,CAAC,UAA+B,EAAE,WAAoB;IAC/E,OAAO,WAAW,IAAI,UAAU,CAAC,WAAW,IAAI,kBAAkB,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,IAAyC;IAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC9D,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA+B;IAC/D,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE;QAC5C,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,IAAY,EACZ,IAA8C,EAC9C,IAAoC,EACpC,IAA2B;IAE3B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI;QACJ,IAAI;QACJ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,IAAc,EAAE,IAA2B;IAClE,MAAM,QAAQ,GAAuB;QACnC,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QACjE,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;QACnE,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;KAC1E,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,wBAAwB;IACC;IAA7B,YAA6B,UAA+B;QAA/B,eAAU,GAAV,UAAU,CAAqB;IAAG,CAAC;IAEhE,IAAI,CAAC,WAAoB;QACvB,OAAO,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM;QACJ,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,WAAoB;QACxB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC,KAAiB,EAAE,QAAQ,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,CAAC,KAAiB,EAAE,UAAU,CAAC,CAAC;YACnE,OAAO;gBACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;gBACvB,MAAM;gBACN,QAAQ;gBACR,EAAE;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC;wBACP,IAAI,EAAE,GAAG;wBACT,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;qBACpD,CAAC;gBACF,QAAQ,EAAE,EAAE;aACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,QAAQ,CACN,KAA+B,EAC/B,OAAiC,EAAE;QAEnC,OAAO,IAAI,eAAe,EAAE,CAAC,OAAO,CAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAC3B,wBAAwB,CAAC,KAAK,CAAC,CAChC,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,UAA+B;IAC7D,OAAO,IAAI,wBAAwB,CAAC,UAAU,CAAC,CAAC;AAClD,CAAC"}

package/dist/database/constraints/game.d.ts

@@ -0,0 +1,30 @@
+import type { Expr } from './types.js';
+/**
+ * Turn enforcement: only the current turn's player can write.
+ * Uses data (pre-write) for the turn check — NOT newData.
+ *
+ * @param turnField - the field that stores whose turn it is (e.g., "currentTurn")
+ * @param players - map of mark → player field (e.g., { X: "playerX", O: "playerO" })
+ * @param statusField - optional field that must equal playingValue for moves to be allowed
+ * @param playingValue - the value of statusField during active play (e.g., "playing")
+ */
+export declare function turnGuard(turnField: string, players: Record<string, string>, statusField?: string, playingValue?: string): Expr;
+/**
+ * Turn flip: validates a turn field alternates between marks.
+ * First mark is the initial value on creation.
+ * Supports 2+ players with circular rotation.
+ *
+ * @param marks - ordered list of marks (e.g., ["X", "O"])
+ */
+export declare function flip(marks: string[]): Expr;
+/**
+ * Win check helper: validates a boolean field against winning lines on a board.
+ * If true, at least one winning line must exist. If false, no winning line can exist.
+ * Uses the "client claims, rules verify" pattern.
+ *
+ * @param mark - the player mark to check (e.g., "X")
+ * @param lines - array of winning line coordinates (e.g., [[0,1,2], [3,4,5], ...])
+ * @param boardPath - the path to the board relative to the parent (default "board")
+ */
+export declare function winCheckHelper(mark: string, lines: number[][], boardPath?: string): Expr;
+//# sourceMappingURL=game.d.ts.map

package/dist/database/constraints/game.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"game.d.ts","sourceRoot":"","sources":["../../../src/database/constraints/game.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAIvC;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACvB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,GACpB,IAAI,CAUN;AAED;;;;;;GAMG;AACH,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAO1C;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EAAE,EAAE,EACjB,SAAS,GAAE,MAAgB,GAC1B,IAAI,CAUN"}

package/dist/database/constraints/game.js

@@ -0,0 +1,49 @@
+import { all, any, not, expr } from './compose.js';
+import { dataVal, newDataVal, newDataParentVal, newDataIs, eq, neq, AUTH_UID } from './data.js';
+/**
+ * Turn enforcement: only the current turn's player can write.
+ * Uses data (pre-write) for the turn check — NOT newData.
+ *
+ * @param turnField - the field that stores whose turn it is (e.g., "currentTurn")
+ * @param players - map of mark → player field (e.g., { X: "playerX", O: "playerO" })
+ * @param statusField - optional field that must equal playingValue for moves to be allowed
+ * @param playingValue - the value of statusField during active play (e.g., "playing")
+ */
+export function turnGuard(turnField, players, statusField, playingValue) {
+    const branches = Object.entries(players).map(([mark, playerField]) => `${eq(dataVal(turnField), mark)} && ${eq(dataVal(playerField), AUTH_UID)}`);
+    const playerCheck = branches.join(' || ');
+    if (statusField && playingValue) {
+        return all(eq(dataVal(statusField), playingValue), playerCheck);
+    }
+    return playerCheck;
+}
+/**
+ * Turn flip: validates a turn field alternates between marks.
+ * First mark is the initial value on creation.
+ * Supports 2+ players with circular rotation.
+ *
+ * @param marks - ordered list of marks (e.g., ["X", "O"])
+ */
+export function flip(marks) {
+    const creation = all(not(expr('data.exists()')), eq(newDataVal(), marks[0]));
+    const transitions = marks.map((mark, i) => {
+        const next = marks[(i + 1) % marks.length];
+        return all(eq(dataVal(), mark), eq(newDataVal(), next));
+    });
+    return any(creation, ...transitions);
+}
+/**
+ * Win check helper: validates a boolean field against winning lines on a board.
+ * If true, at least one winning line must exist. If false, no winning line can exist.
+ * Uses the "client claims, rules verify" pattern.
+ *
+ * @param mark - the player mark to check (e.g., "X")
+ * @param lines - array of winning line coordinates (e.g., [[0,1,2], [3,4,5], ...])
+ * @param boardPath - the path to the board relative to the parent (default "board")
+ */
+export function winCheckHelper(mark, lines, boardPath = 'board') {
+    const lineCheck = (line) => all(...line.map(n => eq(newDataParentVal(1, `${boardPath}/${n}`), mark)));
+    const anyLine = any(...lines.map(lineCheck));
+    return all(newDataIs('Boolean'), any(neq(newDataVal(), true), anyLine), any(neq(newDataVal(), false), not(anyLine)));
+}
+//# sourceMappingURL=game.js.map

package/dist/database/constraints/game.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"game.js","sourceRoot":"","sources":["../../../src/database/constraints/game.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEhG;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CACvB,SAAiB,EACjB,OAA+B,EAC/B,WAAoB,EACpB,YAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,CACnE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,EAAE,CAC3E,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAS,CAAC;IAElD,IAAI,WAAW,IAAI,YAAY,EAAE,CAAC;QAChC,OAAO,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,IAAI,CAAC,KAAe;IAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,KAAiB,EACjB,YAAoB,OAAO;IAE3B,MAAM,SAAS,GAAG,CAAC,IAAc,EAAE,EAAE,CACnC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,GAAG,SAAS,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7C,OAAO,GAAG,CACR,SAAS,CAAC,SAAS,CAAC,EACpB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,EACrC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAC5C,CAAC;AACJ,CAAC"}

package/dist/database/constraints/index.d.ts

@@ -0,0 +1,12 @@
+export type { Expr, Segment, PathDef, RulesetContext } from './types.js';
+export { expr, all, any, not, deny, always, allow } from './compose.js';
+export { authenticated, ownPath, ownField, isNew, hasChildren, hasChild, fieldIsString, fieldIsNumber, fieldIsBoolean, fieldEnum, immutable, immutableSelf, rootExists, rootEquals, } from './atoms.js';
+export { pathOwnerOnly, fieldOwnerOnly, ownerOrNew, hasRole, isMember, required, transition, } from './policies.js';
+export { dataVal, newDataVal, dataExists, newDataExists, newDataIs, dataParentVal, newDataParentVal, newDataParentExists, eq, neq, gt, lte, AUTH_UID, } from './data.js';
+export { turnGuard, flip, winCheckHelper } from './game.js';
+export { schemaRules } from './schema.js';
+export type { SchemaRulesResult } from './schema.js';
+export { ruleset } from './ruleset.js';
+export { defineRtdbRules } from './document.js';
+export type { RtdbRulesCheckResult, RtdbRulesDefinition, RtdbRulesDocument, RtdbRulesFinding, RtdbRulesFindingRule, RtdbRulesJson, RtdbRulesSimulationAuth, RtdbRulesSimulationInput, } from './document.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/database/constraints/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/database/constraints/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EACL,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EACvC,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAC9E,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,GACjD,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EAAE,cAAc,EAAE,UAAU,EACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,GACxC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAC9C,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAC/D,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,GAC3B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,eAAe,CAAC"}

package/dist/database/constraints/index.js

@@ -0,0 +1,9 @@
+export { expr, all, any, not, deny, always, allow } from './compose.js';
+export { authenticated, ownPath, ownField, isNew, hasChildren, hasChild, fieldIsString, fieldIsNumber, fieldIsBoolean, fieldEnum, immutable, immutableSelf, rootExists, rootEquals, } from './atoms.js';
+export { pathOwnerOnly, fieldOwnerOnly, ownerOrNew, hasRole, isMember, required, transition, } from './policies.js';
+export { dataVal, newDataVal, dataExists, newDataExists, newDataIs, dataParentVal, newDataParentVal, newDataParentExists, eq, neq, gt, lte, AUTH_UID, } from './data.js';
+export { turnGuard, flip, winCheckHelper } from './game.js';
+export { schemaRules } from './schema.js';
+export { ruleset } from './ruleset.js';
+export { defineRtdbRules } from './document.js';
+//# sourceMappingURL=index.js.map

package/dist/database/constraints/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/constraints/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EACL,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EACvC,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAC9E,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,GACjD,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EAAE,cAAc,EAAE,UAAU,EACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,GACxC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAC9C,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAC/D,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,GAC3B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/dist/database/constraints/policies.d.ts

@@ -0,0 +1,16 @@
+import type { Expr, Segment } from './types.js';
+/** Only the path owner (auth.uid === $pathVar) can access */
+export declare const pathOwnerOnly: (pathVar: string) => Expr;
+/** Only the field owner (auth.uid === data.child(field).val()) can access */
+export declare const fieldOwnerOnly: (field: string) => Expr;
+/** Anyone authenticated can create; only the field owner can edit */
+export declare const ownerOrNew: (field: string) => Expr;
+/** Cross-path role check via root lookup */
+export declare const hasRole: (segments: Segment[], role: string) => Expr;
+/** Cross-path membership check: root.child(list).child($var).child(auth.uid).exists() */
+export declare const isMember: (listName: string, pathVarName: string) => Expr;
+/** All specified fields must be present in the incoming data */
+export declare const required: (...fields: string[]) => Expr;
+/** State machine: only allowed transitions on a field */
+export declare const transition: (field: string, allowed: Array<[string, string]>) => Expr;
+//# sourceMappingURL=policies.d.ts.map

package/dist/database/constraints/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/database/constraints/policies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAIhD,6DAA6D;AAC7D,eAAO,MAAM,aAAa,GAAI,SAAS,MAAM,KAAG,IACR,CAAC;AAEzC,6EAA6E;AAC7E,eAAO,MAAM,cAAc,GAAI,OAAO,MAAM,KAAG,IACR,CAAC;AAExC,qEAAqE;AACrE,eAAO,MAAM,UAAU,GAAI,OAAO,MAAM,KAAG,IACU,CAAC;AAEtD,4CAA4C;AAC5C,eAAO,MAAM,OAAO,GAAI,UAAU,OAAO,EAAE,EAAE,MAAM,MAAM,KAAG,IAChC,CAAC;AAE7B,yFAAyF;AACzF,eAAO,MAAM,QAAQ,GAAI,UAAU,MAAM,EAAE,aAAa,MAAM,KAAG,IACkB,CAAC;AAEpF,gEAAgE;AAChE,eAAO,MAAM,QAAQ,GAAI,GAAG,QAAQ,MAAM,EAAE,KAAG,IACT,CAAC;AAEvC,yDAAyD;AACzD,eAAO,MAAM,UAAU,GAAI,OAAO,MAAM,EAAE,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAG,IAMzE,CAAC"}

package/dist/database/constraints/policies.js

@@ -0,0 +1,17 @@
+import { all, any, expr } from './compose.js';
+import { authenticated, ownPath, ownField, isNew, hasChild, rootEquals } from './atoms.js';
+/** Only the path owner (auth.uid === $pathVar) can access */
+export const pathOwnerOnly = (pathVar) => all(authenticated(), ownPath(pathVar));
+/** Only the field owner (auth.uid === data.child(field).val()) can access */
+export const fieldOwnerOnly = (field) => all(authenticated(), ownField(field));
+/** Anyone authenticated can create; only the field owner can edit */
+export const ownerOrNew = (field) => all(authenticated(), any(isNew(), ownField(field)));
+/** Cross-path role check via root lookup */
+export const hasRole = (segments, role) => rootEquals(segments, role);
+/** Cross-path membership check: root.child(list).child($var).child(auth.uid).exists() */
+export const isMember = (listName, pathVarName) => expr(`root.child("${listName}").child($${pathVarName}).child(auth.uid).exists()`);
+/** All specified fields must be present in the incoming data */
+export const required = (...fields) => all(...fields.map(f => hasChild(f)));
+/** State machine: only allowed transitions on a field */
+export const transition = (field, allowed) => any(...allowed.map(([from, to]) => all(expr(`data.child("${field}").val() === "${from}"`), expr(`newData.child("${field}").val() === "${to}"`))));
+//# sourceMappingURL=policies.js.map

package/dist/database/constraints/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../../src/database/constraints/policies.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAc,UAAU,EAAE,MAAM,YAAY,CAAC;AAEvG,6DAA6D;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAQ,EAAE,CACrD,GAAG,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAEzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAa,EAAQ,EAAE,CACpD,GAAG,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAExC,qEAAqE;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAQ,EAAE,CAChD,GAAG,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,QAAmB,EAAE,IAAY,EAAQ,EAAE,CACjE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAE7B,yFAAyF;AACzF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,WAAmB,EAAQ,EAAE,CACtE,IAAI,CAAC,eAAe,QAAQ,aAAa,WAAW,4BAA4B,CAAC,CAAC;AAEpF,gEAAgE;AAChE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAgB,EAAQ,EAAE,CACpD,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEvC,yDAAyD;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,OAAgC,EAAQ,EAAE,CAClF,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAChC,GAAG,CACD,IAAI,CAAC,eAAe,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAClD,IAAI,CAAC,kBAAkB,KAAK,iBAAiB,EAAE,GAAG,CAAC,CACpD,CACF,CAAC,CAAC"}

package/dist/database/constraints/ruleset.d.ts

@@ -0,0 +1,5 @@
+import type { PathDef, RulesetContext } from './types.js';
+import type { RtdbIR } from '../types.js';
+/** Build a complete RtdbIR from a declarative object or callback builder. */
+export declare function ruleset(databaseUrl: string, input: Record<string, PathDef> | ((ctx: RulesetContext) => void)): RtdbIR;
+//# sourceMappingURL=ruleset.d.ts.map

package/dist/database/constraints/ruleset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleset.d.ts","sourceRoot":"","sources":["../../../src/database/constraints/ruleset.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAQ,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,aAAa,CAAC;AAExE,6EAA6E;AAC7E,wBAAgB,OAAO,CACrB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC,GAC/D,MAAM,CAoCR"}

package/dist/database/constraints/ruleset.js

@@ -0,0 +1,132 @@
+import { buildRuleExpression } from '../mapper.js';
+import { schemaRules } from './schema.js';
+/** Build a complete RtdbIR from a declarative object or callback builder. */
+export function ruleset(databaseUrl, input) {
+    let pathDefs;
+    if (typeof input === 'function') {
+        const collected = [];
+        input({ path: (p, def) => collected.push([p, def]) });
+        pathDefs = collected;
+    }
+    else {
+        pathDefs = Object.entries(input);
+    }
+    // Flatten nested children into top-level path defs
+    const flattened = flattenChildren(pathDefs);
+    // Sort by depth (root first)
+    flattened.sort((a, b) => {
+        const depthA = a[0] === '/' ? 0 : a[0].split('/').filter(Boolean).length;
+        const depthB = b[0] === '/' ? 0 : b[0].split('/').filter(Boolean).length;
+        return depthA - depthB || a[0].localeCompare(b[0]);
+    });
+    // Pass 1: Build the path tree (nodes only, no rules)
+    const root = { path: '/', pathVariables: [], exists: true, children: [] };
+    for (const [pathStr] of flattened) {
+        if (pathStr === '/')
+            continue;
+        ensurePath(root, pathStr);
+    }
+    // Pass 2: Apply rules, schemas, and indexOn to each node
+    for (const [pathStr, def] of flattened) {
+        const node = pathStr === '/' ? root : findNode(root, pathStr);
+        if (!node)
+            continue;
+        applyRules(root, node, def, pathStr);
+    }
+    return { service: 'realtime-database', databaseUrl, rules: root };
+}
+// ---- Pass 1: Tree construction ----
+function ensurePath(root, pathStr) {
+    const segments = pathStr.split('/').filter(Boolean);
+    let current = root;
+    for (let i = 0; i < segments.length; i++) {
+        const partialPath = '/' + segments.slice(0, i + 1).join('/');
+        const varsUpToHere = segments.slice(0, i + 1).filter(s => s.startsWith('$'));
+        let child = current.children.find(c => c.path === partialPath);
+        if (!child) {
+            child = { path: partialPath, pathVariables: varsUpToHere, exists: false, children: [] };
+            current.children.push(child);
+        }
+        current = child;
+    }
+}
+// ---- Pass 2: Rule application ----
+function applyRules(root, node, def, pathStr) {
+    const pathVars = pathStr.split('/').filter(s => s.startsWith('$'));
+    // Read/write/validate expressions
+    if (def.read)
+        node.read = buildExpr(def.read, 'read', pathVars);
+    if (def.write)
+        node.write = buildExpr(def.write, 'write', pathVars);
+    if (def.validate)
+        node.validate = buildExpr(def.validate, 'validate', pathVars);
+    // Schema generates parent validate + child validate rules
+    if (def.schema) {
+        const sr = schemaRules(def.schema, def.fieldConstraints);
+        if (!node.validate) {
+            node.validate = buildExpr(sr.validate, 'validate', pathVars);
+        }
+        for (const [fieldName, fieldDef] of Object.entries(sr.children)) {
+            const fieldPath = `${pathStr}/${fieldName}`;
+            let fieldNode = node.children.find(c => c.path === fieldPath);
+            if (!fieldNode) {
+                fieldNode = { path: fieldPath, pathVariables: pathVars, exists: false, children: [] };
+                node.children.push(fieldNode);
+            }
+            fieldNode.validate = buildExpr(fieldDef.validate, 'validate', pathVars);
+            // Nested object schema children
+            if ('children' in fieldDef && fieldDef.children) {
+                for (const [nestedName, nestedDef] of Object.entries(fieldDef.children)) {
+                    const nestedPath = `${fieldPath}/${nestedName}`;
+                    let nestedNode = fieldNode.children.find(c => c.path === nestedPath);
+                    if (!nestedNode) {
+                        nestedNode = { path: nestedPath, pathVariables: pathVars, exists: false, children: [] };
+                        fieldNode.children.push(nestedNode);
+                    }
+                    nestedNode.validate = buildExpr(nestedDef.validate, 'validate', pathVars);
+                }
+            }
+        }
+    }
+    // indexOn goes on the container (parent of wildcard), not the wildcard itself
+    if (def.indexOn) {
+        const segments = pathStr.split('/').filter(Boolean);
+        const lastSegment = segments[segments.length - 1];
+        if (lastSegment?.startsWith('$')) {
+            const parentPath = '/' + segments.slice(0, -1).join('/');
+            const parent = findNode(root, parentPath);
+            if (parent)
+                parent.indexOn = def.indexOn;
+        }
+    }
+}
+// ---- Helpers ----
+/** Flatten nested children into absolute path entries. */
+function flattenChildren(defs) {
+    const result = [];
+    for (const [pathStr, def] of defs) {
+        // Add this path without the children property
+        const { children, ...rest } = def;
+        result.push([pathStr, rest]);
+        // Recursively flatten children
+        if (children) {
+            const childEntries = Object.entries(children).map(([childPath, childDef]) => [pathStr + childPath, childDef]);
+            result.push(...flattenChildren(childEntries));
+        }
+    }
+    return result;
+}
+function buildExpr(raw, context, pathVariables) {
+    return buildRuleExpression(String(raw), context, pathVariables);
+}
+function findNode(root, path) {
+    if (root.path === path)
+        return root;
+    for (const child of root.children) {
+        const found = findNode(child, path);
+        if (found)
+            return found;
+    }
+    return null;
+}
+//# sourceMappingURL=ruleset.js.map

package/dist/database/constraints/ruleset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleset.js","sourceRoot":"","sources":["../../../src/database/constraints/ruleset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1C,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CACrB,WAAmB,EACnB,KAAgE;IAEhE,IAAI,QAAkC,CAAC;IAEvC,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,SAAS,GAA6B,EAAE,CAAC;QAC/C,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,mDAAmD;IACnD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE5C,6BAA6B;IAC7B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACzE,OAAO,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,IAAI,GAAa,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpF,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAC9B,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,yDAAyD;IACzD,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACpE,CAAC;AAED,sCAAsC;AAEtC,SAAS,UAAU,CAAC,IAAc,EAAE,OAAe;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,IAAI,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAE7E,IAAI,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACxF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;AACH,CAAC;AAED,qCAAqC;AAErC,SAAS,UAAU,CAAC,IAAc,EAAE,IAAc,EAAE,GAAY,EAAE,OAAe;IAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnE,kCAAkC;IAClC,IAAI,GAAG,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,GAAG,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,GAAG,CAAC,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEhF,0DAA0D;IAC1D,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;YAC5C,IAAI,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;gBACtF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,CAAC;YACD,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;YAExE,gCAAgC;YAChC,IAAI,UAAU,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAChD,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAA8C,CAAC,EAAE,CAAC;oBAC9G,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;oBAChD,IAAI,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;oBACrE,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,UAAU,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;wBACxF,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACtC,CAAC;oBACD,UAAU,CAAC,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC1C,IAAI,MAAM;gBAAE,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED,oBAAoB;AAEpB,0DAA0D;AAC1D,SAAS,eAAe,CAAC,IAA8B;IACrD,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAClC,8CAA8C;QAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAe,CAAC,CAAC,CAAC;QAExC,+BAA+B;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAC/C,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,EAAE,QAAQ,CAAsB,CAChF,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,GAAS,EAAE,OAAsC,EAAE,aAAuB;IAC3F,OAAO,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc,EAAE,IAAY;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/database/constraints/schema.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+import type { Expr } from './types.js';
+export interface SchemaRulesResult {
+    validate: Expr;
+    children: Record<string, {
+        validate: Expr;
+        children?: Record<string, {
+            validate: Expr;
+        }>;
+    }>;
+}
+/**
+ * Generate RTDB validate rules from a Zod object schema.
+ * Optional fieldConstraints are AND-composed with the schema type check.
+ */
+export declare function schemaRules(schema: z.ZodObject<any>, fieldConstraints?: Record<string, Expr[]>): SchemaRulesResult;
+//# sourceMappingURL=schema.d.ts.map

package/dist/database/constraints/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/database/constraints/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAIvC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,QAAQ,EAAE,IAAI,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC7F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,GACxC,iBAAiB,CAwCnB"}

package/dist/database/constraints/schema.js

@@ -0,0 +1,74 @@
+import { z } from 'zod';
+import { all, any, expr } from './compose.js';
+import { hasChild, hasChildren } from './atoms.js';
+/**
+ * Generate RTDB validate rules from a Zod object schema.
+ * Optional fieldConstraints are AND-composed with the schema type check.
+ */
+export function schemaRules(schema, fieldConstraints) {
+    const shape = schema.shape;
+    const requiredFields = [];
+    const children = {};
+    for (const [key, rawType] of Object.entries(shape)) {
+        const zodType = rawType;
+        const isOptional = zodType instanceof z.ZodOptional;
+        const innerType = isOptional ? zodType.unwrap() : zodType;
+        if (!isOptional)
+            requiredFields.push(key);
+        const typeExpr = zodTypeToExpr(innerType, key);
+        // Merge with field constraints if present
+        const constraints = fieldConstraints?.[key];
+        if (constraints && constraints.length > 0) {
+            children[key] = { validate: all(typeExpr, ...constraints) };
+        }
+        else {
+            children[key] = { validate: typeExpr };
+        }
+        // Nested objects produce children
+        if (innerType instanceof z.ZodObject) {
+            const nested = schemaRules(innerType);
+            children[key] = {
+                validate: nested.validate,
+                children: nested.children,
+            };
+        }
+    }
+    // Parent validate: hasChildren + required fields
+    const parentParts = [hasChildren()];
+    for (const f of requiredFields) {
+        parentParts.push(hasChild(f));
+    }
+    const validate = all(...parentParts);
+    return { validate, children };
+}
+function zodTypeToExpr(zodType, fieldName) {
+    if (zodType instanceof z.ZodString) {
+        return expr('newData.isString()');
+    }
+    if (zodType instanceof z.ZodNumber) {
+        return expr('newData.isNumber()');
+    }
+    if (zodType instanceof z.ZodBoolean) {
+        return expr('newData.isBoolean()');
+    }
+    if (zodType instanceof z.ZodEnum) {
+        const values = zodType.options;
+        return expr(values.map(v => `newData.val() === "${v}"`).join(' || '));
+    }
+    if (zodType instanceof z.ZodLiteral) {
+        const v = zodType.value;
+        if (typeof v === 'string')
+            return expr(`newData.val() === "${v}"`);
+        return expr(`newData.val() === ${v}`);
+    }
+    if (zodType instanceof z.ZodUnion) {
+        const options = zodType._def.options;
+        return any(...options.map(opt => zodTypeToExpr(opt, fieldName)));
+    }
+    if (zodType instanceof z.ZodObject) {
+        // Handled separately in the caller — return hasChildren as placeholder
+        return expr('newData.hasChildren()');
+    }
+    throw new Error(`Unsupported Zod type for RTDB rules: ${zodType.constructor.name} on field "${fieldName}"`);
+}
+//# sourceMappingURL=schema.js.map

package/dist/database/constraints/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/database/constraints/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAOnD;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,MAAwB,EACxB,gBAAyC;IAEzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAkC,EAAE,CAAC;IAEnD,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,OAAuB,CAAC;QACxC,MAAM,UAAU,GAAG,OAAO,YAAY,CAAC,CAAC,WAAW,CAAC;QACpD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAE,OAA8B,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAElF,IAAI,CAAC,UAAU;YAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE1C,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAE/C,0CAA0C;QAC1C,MAAM,WAAW,GAAG,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC;QAED,kCAAkC;QAClC,IAAI,SAAS,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACtC,QAAQ,CAAC,GAAG,CAAC,GAAG;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAe;aACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,MAAM,WAAW,GAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAErC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,OAAqB,EAAE,SAAiB;IAC7D,IAAI,OAAO,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,MAAM,GAAI,OAA0B,CAAC,OAAmB,CAAC;QAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,CAAC,GAAI,OAA6B,CAAC,KAAK,CAAC;QAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,OAAO,GAAI,OAA2B,CAAC,IAAI,CAAC,OAAyB,CAAC;QAC5E,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACnC,uEAAuE;QACvE,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,CAAC,WAAW,CAAC,IAAI,cAAc,SAAS,GAAG,CAAC,CAAC;AAC9G,CAAC"}