pyric 0.0.1 → 0.1.0-alpha.7

package/dist/storage/errors.js

@@ -0,0 +1,62 @@
+/**
+ * `StorageError` — the sandbox's analog of `firebase/storage`'s
+ * `StorageError`. Every sandbox operation that fails throws one of
+ * these so `err.code === 'storage/...'` branching works identically
+ * against the sandbox and a real bucket (ST-B1).
+ *
+ * Shape parity with upstream (`clones/firebase-js-sdk/packages/
+ * storage/src/implementation/error.ts`):
+ *   - `.code` is the prefixed form `storage/<code>` (e.g.
+ *     `storage/object-not-found`).
+ *   - the message embeds the prefixed code so the substring-matching
+ *     probes (`toThrow(/object-not-found/)`) and `err.code` reads
+ *     agree.
+ *
+ * Intentional divergence (documented in COMPAT row 105): upstream's
+ * `StorageError extends FirebaseError` and reports `name:
+ * 'FirebaseError'` with a `"Firebase Storage: … (storage/…)"`
+ * message. The sandbox keeps a plain `Error` subclass — same as
+ * `SandboxError` for Firestore — so the `.code` contract is faithful
+ * while the message wording stays sandbox-flavored. The
+ * `storage/<code>` prefix is what consumer code branches on.
+ */
+/** Prefix an unprefixed code with `storage/` — matches upstream. */
+export function prependCode(code) {
+    return `storage/${code}`;
+}
+/**
+ * Storage error carrying a prefixed `storage/<code>` on `.code`.
+ * Drop-in for `err.code === 'storage/object-not-found'` branching.
+ */
+export class StorageError extends Error {
+    /** Prefixed code, e.g. `storage/object-not-found`. */
+    code;
+    constructor(code, message) {
+        const prefixed = prependCode(code);
+        // The prefixed code is embedded so substring probes and `.code`
+        // reads see the same value.
+        super(`${prefixed}: ${message}`);
+        this.name = 'StorageError';
+        this.code = prefixed;
+        // Mirror upstream's prototype pin so `instanceof StorageError`
+        // survives the transpile-to-ES5-class-extends pattern.
+        Object.setPrototypeOf(this, StorageError.prototype);
+    }
+}
+// ─── Factory helpers (mirror upstream's error.ts free functions) ────
+export function objectNotFound(path) {
+    return new StorageError('object-not-found', `no object at "${path}".`);
+}
+export function unauthorized(method, path, detail) {
+    return new StorageError('unauthorized', `${method} "${path}" denied by rules${detail}.`);
+}
+export function quotaExceeded(path, size, max) {
+    return new StorageError('quota-exceeded', `object at "${path}" is ${size} bytes, exceeds maxDownloadSizeBytes ${max}.`);
+}
+export function invalidRootOperation(op) {
+    return new StorageError('invalid-root-operation', `${op} cannot operate on the root reference.`);
+}
+export function invalidFormat(format, message) {
+    return new StorageError('invalid-format', `string does not match format "${format}": ${message}`);
+}
+//# sourceMappingURL=errors.js.map

package/dist/storage/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/storage/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAkBH,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,IAAsB;IAChD,OAAO,WAAW,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,sDAAsD;IAC7C,IAAI,CAAgC;IAE7C,YAAY,IAAsB,EAAE,OAAe;QACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,gEAAgE;QAChE,4BAA4B;QAC5B,KAAK,CAAC,GAAG,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QACrB,+DAA+D;QAC/D,uDAAuD;QACvD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED,uEAAuE;AAEvE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,YAAY,CAAC,kBAAkB,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,IAAY,EAAE,MAAc;IACvE,OAAO,IAAI,YAAY,CACrB,cAAc,EACd,GAAG,MAAM,KAAK,IAAI,oBAAoB,MAAM,GAAG,CAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW;IACnE,OAAO,IAAI,YAAY,CACrB,gBAAgB,EAChB,cAAc,IAAI,QAAQ,IAAI,wCAAwC,GAAG,GAAG,CAC7E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,OAAO,IAAI,YAAY,CACrB,wBAAwB,EACxB,GAAG,EAAE,wCAAwC,CAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,OAAe;IAC3D,OAAO,IAAI,YAAY,CAAC,gBAAgB,EAAE,iCAAiC,MAAM,MAAM,OAAO,EAAE,CAAC,CAAC;AACpG,CAAC"}

package/dist/storage/index.d.ts

@@ -0,0 +1,49 @@
+/**
+ * `pyric/storage` — Firebase Storage adapter for the Pyric sandbox.
+ *
+ * Sibling-package layout mirrors Firebase:
+ *   `firebase/app`     ↔ `firebase/storage`
+ *   `pyric/sandbox`   ↔ `pyric/storage`
+ *
+ * Public surface lands incrementally through the slices in
+ * the design rationale:
+ *
+ *   - Slice 4: `getStorage`, `FirebaseStorage`
+ *   - Slice 5 (here): `ref`, `uploadBytes`, `uploadString`,
+ *     `getBytes`, `getBlob`, `deleteObject`, `StorageReference`,
+ *     `SettableMetadata`, `FullMetadata`, `UploadResult`
+ *   - Slice 6: `getMetadata`, `updateMetadata`
+ *   - Slice 7: `listAll`, `ListResult`
+ *   - Slice 8: rules support via `getStorage(ctx, { rules })`
+ *   - Slice 9: end-to-end session-archive demo + README
+ *
+ * Out of scope for the v1 scope (see README): `getDownloadURL`,
+ * paginated `list`, `uploadBytesResumable`, Admin SDK shape,
+ * Storage emulator parity, image transformations, Cloud Functions
+ * triggers.
+ */
+import type { FirebaseStorage } from './service.js';
+import { type PyricApp } from 'pyric/app';
+export { getStorageSandbox, getStorageProd, TARGET_SYMBOL } from './service.js';
+export type { FirebaseStorage, StorageOptions, ProdStorageOptions, Target, SandboxTarget, ProdTarget } from './service.js';
+export declare function getStorage(app: PyricApp): FirebaseStorage;
+export { StorageError } from './errors.js';
+export type { StorageErrorCode } from './errors.js';
+export { ref } from './reference.js';
+export type { StorageReference } from './reference.js';
+export { uploadBytes, uploadString } from './upload.js';
+export type { StringFormat } from './upload.js';
+export { getBytes, getBlob, deleteObject } from './download.js';
+export { getMetadata, updateMetadata } from './metadata.js';
+export type { SettableMetadata, FullMetadata, UploadResult } from './metadata.js';
+export { listAll } from './list.js';
+export type { ListResult } from './list.js';
+export { parseStorageRules, evaluateStorageRules } from './rules.js';
+export type { StorageRules, StorageMethod, StorageAuth, StorageRequest, StorageResource, EvaluationInput, EvaluationResult, } from './rules.js';
+export { provisionStorage, getStorageServiceState, enableStorageService, getDefaultLocation, finalizeDefaultLocation, listFirebaseBuckets, addFirebaseToBucket, deployStorageRules, getBucketCors, setBucketCors, defaultPlaygroundCors, StorageProvisioningError, } from './admin/api.js';
+export type { ServiceEnableState, FirebaseStorageBucket, ProvisionStorageOptions, ProvisionStorageResult, CorsRule, } from './admin/api.js';
+export { InspectStorageHandler, ProvisionStorageHandler } from './admin/handler.js';
+export { createStorageAdminTools } from './admin/tools.js';
+export type { StorageAdminToolDeps } from './admin/tools.js';
+export type { ProvisionStorageInput, ProvisionStorageOutcome, ProvisionStorageErrorCode, InspectStorageResult, } from './admin/spec.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAIpD,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAChF,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAa3H,wBAAgB,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,eAAe,CAIzD;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACrE,YAAY,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,cAAc,EACd,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAOpB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,QAAQ,GACT,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,YAAY,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC"}

package/dist/storage/index.js

@@ -0,0 +1,60 @@
+/**
+ * `pyric/storage` — Firebase Storage adapter for the Pyric sandbox.
+ *
+ * Sibling-package layout mirrors Firebase:
+ *   `firebase/app`     ↔ `firebase/storage`
+ *   `pyric/sandbox`   ↔ `pyric/storage`
+ *
+ * Public surface lands incrementally through the slices in
+ * the design rationale:
+ *
+ *   - Slice 4: `getStorage`, `FirebaseStorage`
+ *   - Slice 5 (here): `ref`, `uploadBytes`, `uploadString`,
+ *     `getBytes`, `getBlob`, `deleteObject`, `StorageReference`,
+ *     `SettableMetadata`, `FullMetadata`, `UploadResult`
+ *   - Slice 6: `getMetadata`, `updateMetadata`
+ *   - Slice 7: `listAll`, `ListResult`
+ *   - Slice 8: rules support via `getStorage(ctx, { rules })`
+ *   - Slice 9: end-to-end session-archive demo + README
+ *
+ * Out of scope for the v1 scope (see README): `getDownloadURL`,
+ * paginated `list`, `uploadBytesResumable`, Admin SDK shape,
+ * Storage emulator parity, image transformations, Cloud Functions
+ * triggers.
+ */
+import { getStorageSandbox, getStorageProd } from './service.js';
+// Phase 3 unified app handle. Adapter dispatch reads `APP_TARGET` and
+// routes to the existing direct-handle path (sandbox vs prod).
+import { APP_TARGET } from 'pyric/app';
+export { getStorageSandbox, getStorageProd, TARGET_SYMBOL } from './service.js';
+// ─── Phase 3 unified getStorage(PyricApp) dispatch ───────────────────
+//
+// `getStorageSandbox(sandbox)` and `getStorageProd(app)` stay as the
+// direct-handle entry points (per the design rationale's
+// split-factory shape). The unified `getStorage(app: PyricApp)` reads
+// the brand on the `pyric/app` handle and forwards to the matching
+// direct-handle factory. Storage takes optional per-backend options
+// (sandbox: bucket/dbName/rules; prod: bucket) that the unified
+// signature can't express without coupling — so this surface is the
+// no-options entry. Callers that need options keep using the direct
+// `getStorageSandbox` / `getStorageProd` factories.
+export function getStorage(app) {
+    return app[APP_TARGET] === 'sandbox'
+        ? getStorageSandbox(app.sandbox)
+        : getStorageProd(app.firebaseApp);
+}
+export { StorageError } from './errors.js';
+export { ref } from './reference.js';
+export { uploadBytes, uploadString } from './upload.js';
+export { getBytes, getBlob, deleteObject } from './download.js';
+export { getMetadata, updateMetadata } from './metadata.js';
+export { listAll } from './list.js';
+export { parseStorageRules, evaluateStorageRules } from './rules.js';
+// ─── Admin / control-plane surface ───────────────────────────────────
+// Firebase Storage provisioning + status. The pure-fetch `api.ts`
+// layer (browser + Node compatible), the `ProjectScope`-shaped
+// handlers, and the agent-tool factory.
+export { provisionStorage, getStorageServiceState, enableStorageService, getDefaultLocation, finalizeDefaultLocation, listFirebaseBuckets, addFirebaseToBucket, deployStorageRules, getBucketCors, setBucketCors, defaultPlaygroundCors, StorageProvisioningError, } from './admin/api.js';
+export { InspectStorageHandler, ProvisionStorageHandler } from './admin/handler.js';
+export { createStorageAdminTools } from './admin/tools.js';
+//# sourceMappingURL=index.js.map

package/dist/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGjE,sEAAsE;AACtE,+DAA+D;AAC/D,OAAO,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGhF,wEAAwE;AACxE,EAAE;AACF,qEAAqE;AACrE,yDAAyD;AACzD,sEAAsE;AACtE,mEAAmE;AACnE,oEAAoE;AACpE,gEAAgE;AAChE,oEAAoE;AACpE,oEAAoE;AACpE,oDAAoD;AACpD,MAAM,UAAU,UAAU,CAAC,GAAa;IACtC,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS;QAClC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAGrC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGxD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAWrE,wEAAwE;AACxE,kEAAkE;AAClE,+DAA+D;AAC/D,wCAAwC;AAExC,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AASxB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/storage/internal.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `pyric/storage/internal` — host-only admin plane for the sandbox
+ * storage backend.
+ *
+ * The public `pyric/storage` surface is deliberately rules-honest:
+ * every operation on a handle from `getStorageSandbox` evaluates the
+ * configured storage rules against the handle's context identity.
+ * Hosts that must serve firebase-admin semantics (the SharedWorker
+ * host resolving `actAs: { mode: 'admin' }` storage ops for
+ * `pyric-admin`'s remote dispatch arm, Pyric Studio's admin lens)
+ * need a rules-BYPASS handle onto the SAME per-sandbox store.
+ *
+ * This subpath exists so that bypass never leaks onto the public
+ * modular surface — mirroring how `pyric/sandbox/internal` carries
+ * the sandbox's host-only seams.
+ */
+export { getAdminStorageSandbox } from './service.js';
+//# sourceMappingURL=internal.d.ts.map

package/dist/storage/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../src/storage/internal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC"}

package/dist/storage/internal.js

@@ -0,0 +1,18 @@
+/**
+ * `pyric/storage/internal` — host-only admin plane for the sandbox
+ * storage backend.
+ *
+ * The public `pyric/storage` surface is deliberately rules-honest:
+ * every operation on a handle from `getStorageSandbox` evaluates the
+ * configured storage rules against the handle's context identity.
+ * Hosts that must serve firebase-admin semantics (the SharedWorker
+ * host resolving `actAs: { mode: 'admin' }` storage ops for
+ * `pyric-admin`'s remote dispatch arm, Pyric Studio's admin lens)
+ * need a rules-BYPASS handle onto the SAME per-sandbox store.
+ *
+ * This subpath exists so that bypass never leaks onto the public
+ * modular surface — mirroring how `pyric/sandbox/internal` carries
+ * the sandbox's host-only seams.
+ */
+export { getAdminStorageSandbox } from './service.js';
+//# sourceMappingURL=internal.js.map

package/dist/storage/internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../src/storage/internal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC"}

package/dist/storage/list.d.ts

@@ -0,0 +1,17 @@
+import { type StorageReference } from './reference.js';
+/**
+ * Mirrors `firebase/storage`'s `ListResult`. `nextPageToken` is
+ * `undefined` for `listAll`; pagination via `list()` is deferred.
+ */
+export interface ListResult {
+    items: StorageReference[];
+    prefixes: StorageReference[];
+    nextPageToken?: string;
+}
+/**
+ * Enumerate every immediate child item + sub-prefix under `refIn`.
+ * Works on the root reference too — pass `ref(storage)` to scan the
+ * whole bucket.
+ */
+export declare function listAll(refIn: StorageReference): Promise<ListResult>;
+//# sourceMappingURL=list.d.ts.map

package/dist/storage/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/storage/list.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIrE;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAyD1E"}

package/dist/storage/list.js

@@ -0,0 +1,91 @@
+/**
+ * List operations — `listAll` only. Paginated `list(ref, options)`
+ * is deferred per the implementation scope (Section 6 of the survey); the
+ * `ListResult` shape keeps `nextPageToken` optional so consumer
+ * code that handles pagination doesn't have to special-case the
+ * sandbox.
+ *
+ * Algorithm:
+ *   1. Compute `scanPrefix`. Empty fullPath → `''` (entire bucket).
+ *      Non-empty fullPath → `fullPath + '/'` so descendants match
+ *      but the ref itself doesn't.
+ *   2. `listByPrefix(scanPrefix)` returns every metadata record
+ *      under the prefix, sorted by IDB key order (i.e. by path).
+ *   3. For each record, compute the path RELATIVE to scanPrefix.
+ *      A relative path with no `'/'` is a direct child file — push
+ *      it to `items`. A relative path with `'/'` denotes a
+ *      sub-folder; the first segment becomes a synthetic prefix
+ *      reference (deduped — many files can share one folder).
+ *   4. Sort prefixes by path for deterministic output. Items are
+ *      already sorted by virtue of the IDB scan.
+ *
+ * Survey alignment (Section 6): the JS SDK's `prefixes` carries
+ * folder-like references for ANY path with descendants; we match
+ * that semantic exactly.
+ */
+import * as fb from 'firebase/storage';
+import { fbRefOf, ref } from './reference.js';
+import { getStorageService, targetOf } from './service.js';
+import { enforceRules } from './enforce.js';
+/**
+ * Enumerate every immediate child item + sub-prefix under `refIn`.
+ * Works on the root reference too — pass `ref(storage)` to scan the
+ * whole bucket.
+ */
+export async function listAll(refIn) {
+    const storage = refIn.storage;
+    const target = targetOf(storage);
+    if (target.kind === 'prod') {
+        const result = await fb.listAll(fbRefOf(refIn));
+        return {
+            items: result.items.map((it) => ref(storage, it.fullPath)),
+            prefixes: result.prefixes.map((p) => ref(storage, p.fullPath)),
+        };
+    }
+    const service = await getStorageService(storage);
+    // ST-B2: enforce rules on the listed prefix. Firebase Storage's
+    // `read` permission governs both download AND list, so a `listAll`
+    // requires `read` on the scanned ref's path. Prefixes have no
+    // backing object, so `resource` is null (a list of an unauthorized
+    // tree throws `storage/unauthorized`, same as a denied read). When
+    // no rules are configured this is a no-op (open-by-default).
+    enforceRules(service, {
+        request: {
+            auth: target.context.auth,
+            method: 'read',
+            path: refIn.fullPath,
+        },
+        resource: null,
+    }, target);
+    const scanPrefix = refIn.fullPath === '' ? '' : `${refIn.fullPath}/`;
+    const records = await service.backend.listByPrefix(scanPrefix);
+    const items = [];
+    const seenPrefixes = new Set();
+    const prefixes = [];
+    for (const md of records) {
+        if (!md.fullPath.startsWith(scanPrefix))
+            continue; // defensive
+        const relative = md.fullPath.slice(scanPrefix.length);
+        if (relative === '')
+            continue;
+        const slashIdx = relative.indexOf('/');
+        if (slashIdx === -1) {
+            // Direct child file.
+            items.push(ref(storage, md.fullPath));
+        }
+        else {
+            const folderName = relative.slice(0, slashIdx);
+            const folderPath = `${scanPrefix}${folderName}`;
+            if (!seenPrefixes.has(folderPath)) {
+                seenPrefixes.add(folderPath);
+                prefixes.push(ref(storage, folderPath));
+            }
+        }
+    }
+    // IDB key order already sorts items; prefixes are first-appearance
+    // order, sort for determinism so consumer code can rely on a stable
+    // shape.
+    prefixes.sort((a, b) => (a.fullPath < b.fullPath ? -1 : a.fullPath > b.fullPath ? 1 : 0));
+    return { items, prefixes };
+}
+//# sourceMappingURL=list.js.map

package/dist/storage/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/storage/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAyB,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAY5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAuB;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;SAC/D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACjD,gEAAgE;IAChE,mEAAmE;IACnE,8DAA8D;IAC9D,mEAAmE;IACnE,mEAAmE;IACnE,6DAA6D;IAC7D,YAAY,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,KAAK,CAAC,QAAQ;SACrB;QACD,QAAQ,EAAE,IAAI;KACf,EAAE,MAAM,CAAC,CAAC;IACX,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,GAAG,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS,CAAC,YAAY;QAC/D,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,EAAE;YAAE,SAAS;QAE9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,qBAAqB;YACrB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,GAAG,UAAU,GAAG,UAAU,EAAE,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,SAAS;IACT,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC"}

package/dist/storage/metadata.d.ts

@@ -0,0 +1,86 @@
+import type { StoredMetadata } from './persistence.js';
+import { type StorageReference } from './reference.js';
+/**
+ * Client-settable fields. Passed to `uploadBytes` /
+ * `uploadString` / `updateMetadata`. Every field is optional — the
+ * upload pipeline fills any unsupplied client fields with sane
+ * defaults (e.g. `contentType` falls back to `application/octet-stream`).
+ */
+export interface SettableMetadata {
+    contentType?: string;
+    cacheControl?: string;
+    contentDisposition?: string;
+    contentEncoding?: string;
+    contentLanguage?: string;
+    customMetadata?: {
+        [key: string]: string;
+    };
+}
+/**
+ * Server-set + client-settable fields read back from
+ * `uploadBytes` / `getMetadata` / `updateMetadata`. Server-set
+ * fields (`bucket`, `fullPath`, `name`, `generation`,
+ * `metageneration`, `timeCreated`, `updated`, `size`) are populated
+ * by the upload pipeline; client-settable fields round-trip from
+ * `SettableMetadata`.
+ */
+export interface FullMetadata extends SettableMetadata {
+    bucket: string;
+    fullPath: string;
+    name: string;
+    generation: string;
+    metageneration: string;
+    timeCreated: string;
+    updated: string;
+    size: number;
+    md5Hash?: string;
+}
+/** Return shape of `uploadBytes` / `uploadString`. */
+export interface UploadResult {
+    metadata: FullMetadata;
+    ref: StorageReference;
+}
+/**
+ * Project a `StoredMetadata` (persistence-layer shape) onto the
+ * public `FullMetadata`. Currently a 1:1 cast — the shapes match —
+ * but kept as a function so future divergence (e.g. lazy `ref`
+ * computation) has a single seam.
+ */
+export declare function toFullMetadata(stored: StoredMetadata): FullMetadata;
+/**
+ * Apply a `SettableMetadata` patch onto an existing
+ * `StoredMetadata`, replacing only the client-settable fields. The
+ * server-set fields (`bucket`, `fullPath`, `name`, `generation`,
+ * `timeCreated`, `size`, `md5Hash`) are preserved. `metageneration`
+ * is bumped, and `updated` is refreshed to the call moment — both
+ * are server-tracked but driven by client-initiated changes.
+ *
+ * Used by `updateMetadata` in Slice 6. Defined here in Slice 5 so
+ * the types stay close to the rest of the metadata model.
+ */
+export declare function applyMetadataPatch(base: StoredMetadata, patch: SettableMetadata, now?: Date): StoredMetadata;
+/** Bump a base-10 numeric string by 1; `'5'` → `'6'`. */
+export declare function bump(value: string): string;
+/**
+ * Read the full metadata record at `ref`. Throws when no object
+ * exists at the path (`storage/object-not-found`).
+ *
+ * Mirrors `firebase/storage`'s `getMetadata`. Returns the same
+ * `FullMetadata` shape `uploadBytes` produced — server-set fields
+ * pinned at upload time, client-settable fields whatever the latest
+ * write left them as.
+ */
+export declare function getMetadata(ref: StorageReference): Promise<FullMetadata>;
+/**
+ * Update the client-settable metadata at `ref`. Server-set fields
+ * (`bucket`, `fullPath`, `name`, `generation`, `timeCreated`,
+ * `size`, `md5Hash`) are preserved; `metageneration` bumps and
+ * `updated` refreshes. The blob is untouched.
+ *
+ * Pass `undefined` for a field to leave the previous value in
+ * place. To explicitly clear a field, the JS SDK accepts `null` —
+ * we don't model that in the v1 scope to keep the patch logic simple.
+ * Documented for Slice 9's deferred-features section.
+ */
+export declare function updateMetadata(ref: StorageReference, patch: SettableMetadata): Promise<FullMetadata>;
+//# sourceMappingURL=metadata.d.ts.map

package/dist/storage/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../src/storage/metadata.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAW,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAa,SAAQ,gBAAgB;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,YAAY,CAAC;IACvB,GAAG,EAAE,gBAAgB,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,YAAY,CAEnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,gBAAgB,EACvB,GAAG,GAAE,IAAiB,GACrB,cAAc,CAchB;AAED,yDAAyD;AACzD,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI1C;AAID;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAqB9E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,YAAY,CAAC,CAsDvB"}

package/dist/storage/metadata.js

@@ -0,0 +1,167 @@
+/**
+ * Metadata types + helpers.
+ *
+ * Type definitions land in Slice 5 (used by `uploadBytes` for its
+ * `SettableMetadata` argument and `UploadResult.metadata` return);
+ * the public `getMetadata` / `updateMetadata` operations land in
+ * Slice 6 on the back of these same types.
+ *
+ * The shapes mirror `firebase/storage`'s `FullMetadata` and
+ * `SettableMetadata` (survey Section 5) so consumer code typechecks
+ * against either implementation. Two intentional differences:
+ *
+ * - `ref` is omitted from `FullMetadata`. The JS SDK populates it
+ *   lazily; we don't need that machinery for the v1 scope.
+ * - `downloadTokens` is omitted. `getDownloadURL` is deferred (no
+ *   browser-renderable URLs in the v1 scope).
+ */
+import * as fb from 'firebase/storage';
+import { emitSandboxEvent, makeServiceMutationEvent } from 'pyric/sandbox/internal';
+import { getStorageService, targetOf } from './service.js';
+import { enforceRules } from './enforce.js';
+import { resourceFromStored, requestResourceFor } from './rules.js';
+import { objectNotFound, invalidRootOperation } from './errors.js';
+import { fbRefOf } from './reference.js';
+/**
+ * Project a `StoredMetadata` (persistence-layer shape) onto the
+ * public `FullMetadata`. Currently a 1:1 cast — the shapes match —
+ * but kept as a function so future divergence (e.g. lazy `ref`
+ * computation) has a single seam.
+ */
+export function toFullMetadata(stored) {
+    return { ...stored };
+}
+/**
+ * Apply a `SettableMetadata` patch onto an existing
+ * `StoredMetadata`, replacing only the client-settable fields. The
+ * server-set fields (`bucket`, `fullPath`, `name`, `generation`,
+ * `timeCreated`, `size`, `md5Hash`) are preserved. `metageneration`
+ * is bumped, and `updated` is refreshed to the call moment — both
+ * are server-tracked but driven by client-initiated changes.
+ *
+ * Used by `updateMetadata` in Slice 6. Defined here in Slice 5 so
+ * the types stay close to the rest of the metadata model.
+ */
+export function applyMetadataPatch(base, patch, now = new Date()) {
+    return {
+        ...base,
+        // Client-settable fields are REPLACED wholesale per Firebase
+        // semantics; passing `undefined` removes the field.
+        contentType: patch.contentType ?? base.contentType,
+        cacheControl: patch.cacheControl ?? base.cacheControl,
+        contentDisposition: patch.contentDisposition ?? base.contentDisposition,
+        contentEncoding: patch.contentEncoding ?? base.contentEncoding,
+        contentLanguage: patch.contentLanguage ?? base.contentLanguage,
+        customMetadata: patch.customMetadata ?? base.customMetadata,
+        metageneration: bump(base.metageneration),
+        updated: now.toISOString(),
+    };
+}
+/** Bump a base-10 numeric string by 1; `'5'` → `'6'`. */
+export function bump(value) {
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isFinite(parsed))
+        return '1';
+    return String(parsed + 1);
+}
+// ─── Public operations (Slice 6) ───────────────────────────────────
+/**
+ * Read the full metadata record at `ref`. Throws when no object
+ * exists at the path (`storage/object-not-found`).
+ *
+ * Mirrors `firebase/storage`'s `getMetadata`. Returns the same
+ * `FullMetadata` shape `uploadBytes` produced — server-set fields
+ * pinned at upload time, client-settable fields whatever the latest
+ * write left them as.
+ */
+export async function getMetadata(ref) {
+    guardNonRoot(ref, 'getMetadata');
+    const target = targetOf(ref.storage);
+    if (target.kind === 'prod') {
+        const result = await fb.getMetadata(fbRefOf(ref));
+        return result;
+    }
+    const service = await getStorageService(ref.storage);
+    const stored = await service.backend.getMetadata(ref.fullPath);
+    enforceRules(service, {
+        request: {
+            auth: target.context.auth,
+            method: 'read',
+            path: ref.fullPath,
+        },
+        resource: resourceFromStored(stored),
+    }, target);
+    if (!stored) {
+        throw objectNotFound(ref.fullPath);
+    }
+    return toFullMetadata(stored);
+}
+/**
+ * Update the client-settable metadata at `ref`. Server-set fields
+ * (`bucket`, `fullPath`, `name`, `generation`, `timeCreated`,
+ * `size`, `md5Hash`) are preserved; `metageneration` bumps and
+ * `updated` refreshes. The blob is untouched.
+ *
+ * Pass `undefined` for a field to leave the previous value in
+ * place. To explicitly clear a field, the JS SDK accepts `null` —
+ * we don't model that in the v1 scope to keep the patch logic simple.
+ * Documented for Slice 9's deferred-features section.
+ */
+export async function updateMetadata(ref, patch) {
+    guardNonRoot(ref, 'updateMetadata');
+    const target = targetOf(ref.storage);
+    if (target.kind === 'prod') {
+        const result = await fb.updateMetadata(fbRefOf(ref), patch);
+        return result;
+    }
+    const service = await getStorageService(ref.storage);
+    const existing = await service.backend.getMetadata(ref.fullPath);
+    enforceRules(service, {
+        request: {
+            auth: target.context.auth,
+            method: 'write',
+            path: ref.fullPath,
+            // The patched view drives `request.resource` for size /
+            // contentType / metadata rule checks. Custom metadata is
+            // REPLACED wholesale on a patch (see `applyMetadataPatch`), so
+            // the about-to-write `request.resource.metadata` is the patch's
+            // custom metadata when supplied, else the existing value.
+            resource: existing
+                ? requestResourceFor({
+                    size: existing.size,
+                    contentType: patch.contentType ?? existing.contentType,
+                    customMetadata: patch.customMetadata ?? existing.customMetadata,
+                })
+                : undefined,
+        },
+        resource: resourceFromStored(existing),
+    }, target);
+    if (!existing) {
+        throw objectNotFound(ref.fullPath);
+    }
+    const next = applyMetadataPatch(existing, patch);
+    await service.backend.putMetadata(ref.fullPath, next);
+    if (target.kind === 'sandbox') {
+        try {
+            emitSandboxEvent(target.sandbox, makeServiceMutationEvent({
+                service: 'storage',
+                op: 'metadata_update',
+                path: ref.fullPath,
+                auth: target.context.auth,
+                before: existing,
+                after: next,
+                detail: { bucket: ref.bucket },
+            }), { service: 'storage' });
+        }
+        catch {
+            // Observational — never let event emission break a metadata update.
+        }
+    }
+    return toFullMetadata(next);
+}
+function guardNonRoot(ref, op) {
+    if (ref.fullPath === '') {
+        throw invalidRootOperation(op);
+    }
+}
+//# sourceMappingURL=metadata.js.map

package/dist/storage/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../src/storage/metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,OAAO,EAAyB,MAAM,gBAAgB,CAAC;AA2ChE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAoB,EACpB,KAAuB,EACvB,MAAY,IAAI,IAAI,EAAE;IAEtB,OAAO;QACL,GAAG,IAAI;QACP,6DAA6D;QAC7D,oDAAoD;QACpD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW;QAClD,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;QACrD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,kBAAkB;QACvE,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe;QAC9D,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe;QAC9D,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;QAC3D,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;QACzC,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE;KAC3B,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,IAAI,CAAC,KAAa;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,sEAAsE;AAEtE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAqB;IACrD,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,OAAO,MAAiC,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/D,YAAY,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,CAAC,QAAQ;SACnB;QACD,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC;KACrC,EAAE,MAAM,CAAC,CAAC;IACX,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAqB,EACrB,KAAuB;IAEvB,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,MAAiC,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,YAAY,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,wDAAwD;YACxD,yDAAyD;YACzD,+DAA+D;YAC/D,gEAAgE;YAChE,0DAA0D;YAC1D,QAAQ,EAAE,QAAQ;gBAChB,CAAC,CAAC,kBAAkB,CAAC;oBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;oBACtD,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;iBAChE,CAAC;gBACJ,CAAC,CAAC,SAAS;SACd;QACD,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KACvC,EAAE,MAAM,CAAC,CAAC;IACX,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,gBAAgB,CACd,MAAM,CAAC,OAAO,EACd,wBAAwB,CAAC;gBACvB,OAAO,EAAE,SAAS;gBAClB,EAAE,EAAE,iBAAiB;gBACrB,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;gBACzB,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;aAC/B,CAAC,EACF,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,GAAqB,EAAE,EAAU;IACrD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}