pyric 0.1.0-alpha.21 → 0.1.0-alpha.24

package/dist/sandbox/internal/observation-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observation-payload.js","sourceRoot":"","sources":["../../../src/sandbox/internal/observation-payload.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,WAAW,GAAG,oEAAoE,CAAC;AACzF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI;SACR,OAAO,CAAC,oCAAoC,EAAE,mBAAmB,CAAC;SAClE,OAAO,CAAC,wDAAwD,EAAE,kBAAkB,CAAC;SACrF,OAAO,CAAC,uGAAuG,EAAE,cAAc,CAAC,CAAC;AACtI,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,KAAK,GAAG,KAAK;IAC9D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/C,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,YAAY,CAAC;YAC/C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;AACrB,CAAC"}

package/dist/sandbox/internal/provenance.d.ts

@@ -1,4 +1,3 @@
-/** Canonical provenance stamping and nested-window composition. */
 import type { EventProvenance, SandboxEvent } from '../types/events.js';
 /** Stamp canonical context and Rules disposition at the unified event seam. */
 export declare function stampProvenance<E extends SandboxEvent>(event: E, overrides?: EventProvenance): E;

package/dist/sandbox/internal/provenance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../../src/sandbox/internal/provenance.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAEnE,OAAO,KAAK,EACV,eAAe,EAEf,YAAY,EACb,MAAM,oBAAoB,CAAC;AAQ5B,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,CAAC,SAAS,YAAY,EACpD,KAAK,EAAE,CAAC,EACR,SAAS,CAAC,EAAE,eAAe,GAC1B,CAAC,CA+BH;AAkCD;;gEAEgE;AAChE,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,eAAe,GAAG,SAAS,EAClC,KAAK,EAAE,eAAe,GAAG,SAAS,GACjC,eAAe,GAAG,SAAS,CAmD7B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,eAAe,GAAG,SAAS,EACnC,QAAQ,EAAE,eAAe,GAAG,SAAS,GACpC,eAAe,GAAG,SAAS,CAwB7B"}
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../../src/sandbox/internal/provenance.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,eAAe,EAEf,YAAY,EACb,MAAM,oBAAoB,CAAC;AAQ5B,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,CAAC,SAAS,YAAY,EACpD,KAAK,EAAE,CAAC,EACR,SAAS,CAAC,EAAE,eAAe,GAC1B,CAAC,CAmCH;AAkCD;;gEAEgE;AAChE,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,eAAe,GAAG,SAAS,EAClC,KAAK,EAAE,eAAe,GAAG,SAAS,GACjC,eAAe,GAAG,SAAS,CAmD7B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,eAAe,GAAG,SAAS,EACnC,QAAQ,EAAE,eAAe,GAAG,SAAS,GACpC,eAAe,GAAG,SAAS,CAwB7B"}

package/dist/sandbox/internal/provenance.js

@@ -1,8 +1,14 @@
 /** Canonical provenance stamping and nested-window composition. */
+import { sdkActivity } from './sdk-activity.js';
 import { immutableOperationContext, isOperationEvent, resolveOperationContext, rulesDispositionFor, } from '../operation-record.js';
 /** Stamp canonical context and Rules disposition at the unified event seam. */
 export function stampProvenance(event, overrides) {
     const out = { ...event };
+    if (event.kind === 'listener_attach' || (event.kind === 'listener' && event.phase === 'attach')) {
+        const listenerId = sdkActivity.registrationId();
+        if (listenerId)
+            out.activity = { ...out.activity, listenerId };
+    }
     out.service = event.service ?? overrides?.service ?? 'firestore';
     // Pre-context admin events used `detail.admin` as their only execution-lens
     // marker. Normalize that one legacy shape here; new producers bind context.

package/dist/sandbox/internal/provenance.js.map

@@ -1 +1 @@
-{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../../src/sandbox/internal/provenance.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAOnE,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAC7B,KAAQ,EACR,SAA2B;IAE3B,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,EAAyB,CAAC;IAChD,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,OAAO,IAAI,WAAW,CAAC;IAEjE,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,WAAW,GAAG,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;IACtE,MAAM,QAAQ,GAAoB,WAAW;WACxC,KAAK,CAAC,gBAAgB,KAAK,SAAS;WACpC,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC3C,CAAC,CAAC,KAAK,CAAC;IACV,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,kDAAkD;IAClD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAC3E,CAAC,CAAC,uBAAuB,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC9C,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAEzC,GAAG,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAC/B,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9D,IAAI,SAAS,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAsB,EACtB,SAAsC;IAEtC,OAAO,yBAAyB,CAAC;QAC/B,MAAM,EACJ,KAAK,CAAC,KAAK;eACR,KAAK,CAAC,gBAAgB,EAAE,MAAM;eAC9B,SAAS,EAAE,KAAK;eAChB,SAAS,EAAE,gBAAgB,EAAE,MAAM;eACnC,EAAE,IAAI,EAAE,cAAc,EAAE;QAC7B,QAAQ,EACN,KAAK,CAAC,QAAQ;eACX,KAAK,CAAC,gBAAgB,EAAE,QAAQ;eAChC,SAAS,EAAE,QAAQ;eACnB,SAAS,EAAE,gBAAgB,EAAE,QAAQ;eACrC,EAAE,IAAI,EAAE,aAAa,EAAE;QAC5B,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM;eACZ,KAAK,CAAC,gBAAgB,EAAE,MAAM;eAC9B,SAAS,EAAE,MAAM;eACjB,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,KAAK,SAAS;YACrD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,MAAM,EACJ,KAAK,CAAC,MAAM;uBACT,KAAK,CAAC,gBAAgB,EAAE,MAAM;uBAC9B,SAAS,EAAE,MAAM;uBACjB,SAAS,EAAE,gBAAgB,EAAE,MAAM;aACzC,CAAC;KACP,CAAC,CAAC;AACL,CAAC;AAED;;gEAEgE;AAChE,MAAM,UAAU,sBAAsB,CACpC,KAAkC,EAClC,KAAkC;IAElC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,wEAAwE;IACxE,uEAAuE;IACvE,gEAAgE;IAChE,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,UAAU,GACd,KAAK,CAAC,gBAAgB,KAAK,SAAS;WACjC,KAAK,CAAC,KAAK,KAAK,SAAS;WACzB,KAAK,CAAC,QAAQ,KAAK,SAAS;WAC5B,KAAK,CAAC,MAAM,KAAK,SAAS;WAC1B,KAAK,CAAC,KAAK,KAAK,SAAS;WACzB,KAAK,CAAC,QAAQ,KAAK,SAAS;WAC5B,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;IAChC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;IAE/C,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,MAAM,EACJ,KAAK,CAAC,KAAK;eACR,KAAK,CAAC,gBAAgB,EAAE,MAAM;eAC9B,KAAK,CAAC,KAAK;eACX,EAAE,IAAI,EAAE,cAAc,EAAE;QAC7B,QAAQ,EACN,KAAK,CAAC,QAAQ;eACX,KAAK,CAAC,gBAAgB,EAAE,QAAQ;eAChC,KAAK,CAAC,QAAQ;eACd,EAAE,IAAI,EAAE,aAAa,EAAE;QAC5B,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM;eACZ,KAAK,CAAC,gBAAgB,EAAE,MAAM;eAC9B,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,MAAM,EACJ,KAAK,CAAC,MAAM;uBACT,KAAK,CAAC,gBAAgB,EAAE,MAAM;uBAC9B,KAAK,CAAC,MAAM;aAClB,CAAC;KACP,CAAC,CAAC;IACH,OAAO;QACL,GAAG,KAAK;QACR,GAAG,KAAK;QACR,gBAAgB,EAAE,OAAO;QACzB,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAmC,EACnC,QAAqC;IAErC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAE7B,MAAM,UAAU,GACd,MAAM,CAAC,gBAAgB,KAAK,SAAS;WAClC,MAAM,CAAC,KAAK,KAAK,SAAS;WAC1B,MAAM,CAAC,QAAQ,KAAK,SAAS;WAC7B,MAAM,CAAC,MAAM,KAAK,SAAS;WAC3B,QAAQ,CAAC,gBAAgB,KAAK,SAAS;WACvC,QAAQ,CAAC,KAAK,KAAK,SAAS;WAC5B,QAAQ,CAAC,QAAQ,KAAK,SAAS;WAC/B,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC;IACnC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEnD,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1D,OAAO;QACL,GAAG,MAAM;QACT,GAAG,QAAQ;QACX,gBAAgB,EAAE,OAAO;QACzB,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../../src/sandbox/internal/provenance.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAOhD,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAC7B,KAAQ,EACR,SAA2B;IAE3B,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,EAAyB,CAAC;IAChD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QAChG,MAAM,UAAU,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;QAChD,IAAI,UAAU;YAAE,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;IACjE,CAAC;IACD,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,OAAO,IAAI,WAAW,CAAC;IAEjE,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,WAAW,GAAG,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;IACtE,MAAM,QAAQ,GAAoB,WAAW;WACxC,KAAK,CAAC,gBAAgB,KAAK,SAAS;WACpC,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC3C,CAAC,CAAC,KAAK,CAAC;IACV,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,kDAAkD;IAClD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAC3E,CAAC,CAAC,uBAAuB,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC9C,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAEzC,GAAG,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAC/B,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9D,IAAI,SAAS,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAsB,EACtB,SAAsC;IAEtC,OAAO,yBAAyB,CAAC;QAC/B,MAAM,EACJ,KAAK,CAAC,KAAK;eACR,KAAK,CAAC,gBAAgB,EAAE,MAAM;eAC9B,SAAS,EAAE,KAAK;eAChB,SAAS,EAAE,gBAAgB,EAAE,MAAM;eACnC,EAAE,IAAI,EAAE,cAAc,EAAE;QAC7B,QAAQ,EACN,KAAK,CAAC,QAAQ;eACX,KAAK,CAAC,gBAAgB,EAAE,QAAQ;eAChC,SAAS,EAAE,QAAQ;eACnB,SAAS,EAAE,gBAAgB,EAAE,QAAQ;eACrC,EAAE,IAAI,EAAE,aAAa,EAAE;QAC5B,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM;eACZ,KAAK,CAAC,gBAAgB,EAAE,MAAM;eAC9B,SAAS,EAAE,MAAM;eACjB,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,KAAK,SAAS;YACrD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,MAAM,EACJ,KAAK,CAAC,MAAM;uBACT,KAAK,CAAC,gBAAgB,EAAE,MAAM;uBAC9B,SAAS,EAAE,MAAM;uBACjB,SAAS,EAAE,gBAAgB,EAAE,MAAM;aACzC,CAAC;KACP,CAAC,CAAC;AACL,CAAC;AAED;;gEAEgE;AAChE,MAAM,UAAU,sBAAsB,CACpC,KAAkC,EAClC,KAAkC;IAElC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,wEAAwE;IACxE,uEAAuE;IACvE,gEAAgE;IAChE,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,UAAU,GACd,KAAK,CAAC,gBAAgB,KAAK,SAAS;WACjC,KAAK,CAAC,KAAK,KAAK,SAAS;WACzB,KAAK,CAAC,QAAQ,KAAK,SAAS;WAC5B,KAAK,CAAC,MAAM,KAAK,SAAS;WAC1B,KAAK,CAAC,KAAK,KAAK,SAAS;WACzB,KAAK,CAAC,QAAQ,KAAK,SAAS;WAC5B,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;IAChC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;IAE/C,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,MAAM,EACJ,KAAK,CAAC,KAAK;eACR,KAAK,CAAC,gBAAgB,EAAE,MAAM;eAC9B,KAAK,CAAC,KAAK;eACX,EAAE,IAAI,EAAE,cAAc,EAAE;QAC7B,QAAQ,EACN,KAAK,CAAC,QAAQ;eACX,KAAK,CAAC,gBAAgB,EAAE,QAAQ;eAChC,KAAK,CAAC,QAAQ;eACd,EAAE,IAAI,EAAE,aAAa,EAAE;QAC5B,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM;eACZ,KAAK,CAAC,gBAAgB,EAAE,MAAM;eAC9B,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,MAAM,EACJ,KAAK,CAAC,MAAM;uBACT,KAAK,CAAC,gBAAgB,EAAE,MAAM;uBAC9B,KAAK,CAAC,MAAM;aAClB,CAAC;KACP,CAAC,CAAC;IACH,OAAO;QACL,GAAG,KAAK;QACR,GAAG,KAAK;QACR,gBAAgB,EAAE,OAAO;QACzB,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAmC,EACnC,QAAqC;IAErC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAE7B,MAAM,UAAU,GACd,MAAM,CAAC,gBAAgB,KAAK,SAAS;WAClC,MAAM,CAAC,KAAK,KAAK,SAAS;WAC1B,MAAM,CAAC,QAAQ,KAAK,SAAS;WAC7B,MAAM,CAAC,MAAM,KAAK,SAAS;WAC3B,QAAQ,CAAC,gBAAgB,KAAK,SAAS;WACvC,QAAQ,CAAC,KAAK,KAAK,SAAS;WAC5B,QAAQ,CAAC,QAAQ,KAAK,SAAS;WAC/B,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC;IACnC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEnD,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1D,OAAO;QACL,GAAG,MAAM;QACT,GAAG,QAAQ;QACX,gBAAgB,EAAE,OAAO;QACzB,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC"}

package/dist/sandbox/internal/root.d.ts

@@ -1,4 +1,5 @@
+import type { EventHistoryLimits } from './event-history.js';
 import type { LocalSandbox } from '../types/service.js';
 /** Create one isolated in-memory sandbox for any browser host. */
-export declare function createSandboxRoot(): LocalSandbox;
+export declare function createSandboxRoot(historyLimits?: EventHistoryLimits): LocalSandbox;
 //# sourceMappingURL=root.d.ts.map

package/dist/sandbox/internal/root.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../../src/sandbox/internal/root.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,kEAAkE;AAClE,wBAAgB,iBAAiB,IAAI,YAAY,CAEhD"}
+{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../../src/sandbox/internal/root.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,kEAAkE;AAClE,wBAAgB,iBAAiB,CAAC,aAAa,CAAC,EAAE,kBAAkB,GAAG,YAAY,CAElF"}

package/dist/sandbox/internal/root.js

@@ -1,6 +1,6 @@
 import { SandboxImpl } from './sandbox-impl.js';
 /** Create one isolated in-memory sandbox for any browser host. */
-export function createSandboxRoot() {
-    return SandboxImpl.createRoot();
+export function createSandboxRoot(historyLimits) {
+    return SandboxImpl.createRoot(historyLimits);
 }
 //# sourceMappingURL=root.js.map

package/dist/sandbox/internal/root.js.map

@@ -1 +1 @@
-{"version":3,"file":"root.js","sourceRoot":"","sources":["../../../src/sandbox/internal/root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,kEAAkE;AAClE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC,UAAU,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"root.js","sourceRoot":"","sources":["../../../src/sandbox/internal/root.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,aAAkC;IAClE,OAAO,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC"}

package/dist/sandbox/internal/rules-evidence-retention.d.ts

@@ -0,0 +1,11 @@
+import type { SandboxEvent } from '../types/events.js';
+/** Track retained entries by identity so history eviction cannot shift the owner. */
+export declare class RulesEvidenceRetention<Entry extends {
+    event: SandboxEvent;
+}> {
+    private readonly entries;
+    record(entry: Entry): Entry | undefined;
+    forget(entry: Entry): void;
+    clear(): void;
+}
+//# sourceMappingURL=rules-evidence-retention.d.ts.map

package/dist/sandbox/internal/rules-evidence-retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-evidence-retention.d.ts","sourceRoot":"","sources":["../../../src/sandbox/internal/rules-evidence-retention.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,qFAAqF;AACrF,qBAAa,sBAAsB,CAAC,KAAK,SAAS;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE;IACvE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAE5C,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS;IAcvC,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI;IAI1B,KAAK,IAAI,IAAI;CAGd"}

package/dist/sandbox/internal/rules-evidence-retention.js

@@ -0,0 +1,27 @@
+/** Track retained entries by identity so history eviction cannot shift the owner. */
+export class RulesEvidenceRetention {
+    entries = new Set();
+    record(entry) {
+        const event = entry.event;
+        const hasEvidence = event.kind === 'request' && event.rulesEvidence !== undefined;
+        const hasNoEvidence = !hasEvidence;
+        if (hasNoEvidence)
+            return;
+        this.entries.add(entry);
+        const withinLimit = this.entries.size <= 64;
+        if (withinLimit)
+            return;
+        const oldest = this.entries.values().next().value;
+        const hasOldest = oldest !== undefined;
+        if (hasOldest)
+            this.entries.delete(oldest);
+        return oldest;
+    }
+    forget(entry) {
+        this.entries.delete(entry);
+    }
+    clear() {
+        this.entries.clear();
+    }
+}
+//# sourceMappingURL=rules-evidence-retention.js.map

package/dist/sandbox/internal/rules-evidence-retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-evidence-retention.js","sourceRoot":"","sources":["../../../src/sandbox/internal/rules-evidence-retention.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,MAAM,OAAO,sBAAsB;IAChB,OAAO,GAAG,IAAI,GAAG,EAAS,CAAC;IAE5C,MAAM,CAAC,KAAY;QACjB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC;QAClF,MAAM,aAAa,GAAG,CAAC,WAAW,CAAC;QACnC,IAAI,aAAa;YAAE,OAAO;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5C,IAAI,WAAW;YAAE,OAAO;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAC;QACvC,IAAI,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,KAAY;QACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/sandbox/internal/sandbox-impl.d.ts

@@ -1,3 +1,4 @@
+import { type EventHistoryLimits } from './event-history.js';
 /**
  * Internal `Sandbox` implementation — backs the public interface from
  * `/app` and exposes the hook (`getEnv`) that other in-package modules
@@ -18,9 +19,10 @@
  * to {@link SandboxContext}, derived via `withAuth`.
  */
 import { LocalEnvironment } from '../../firestore/sandbox/local-environment.js';
+import { SandboxClock, SANDBOX_CLOCK } from '../clock.js';
 import type { AuthState } from '../types/auth-state.js';
 import type { SandboxContext } from '../types/context.js';
-import type { EventProvenance, SandboxCommitEvent, SandboxEvent, SandboxListenerEvent, SandboxOperationEvent, SandboxRuntimeErrorEvent, ServiceMutationEvent } from '../types/events.js';
+import type { EventProvenance, SandboxCommitEvent, SandboxEvent, SandboxListenerEvent, SandboxOperationEvent, SandboxRuntimeErrorEvent, ServiceMutationEvent, ServiceMutationEventFields } from '../types/events.js';
 import type { PersistableService, SandboxSnapshot } from '../types/persistence.js';
 import type { LocalSandbox, Sandbox, SandboxAdmin } from '../types/service.js';
 import { LOCAL_SANDBOX } from './local-brand.js';
@@ -55,8 +57,8 @@ export declare class SandboxImpl implements LocalSandbox {
     /** Append-only history of every SandboxEvent emitted on this sandbox.
      *  Cleared on `reset()` AFTER the session_boundary event is appended,
      *  so the boundary is the last entry of the old session's history.
-     *  v1 doesn't cap; consumers persist the snapshot they need. */
-    private eventHistory;
+     *  Hosted adapters may bound observation retention; direct SDK roots retain full history. */
+    private readonly eventHistory;
     /** Ambient provenance for the current {@link runWithProvenance} window
      *  (undefined outside any window). Purely synchronous — set on entry,
      *  restored in `finally` — so deferred work (microtask listener drains)
@@ -72,6 +74,10 @@ export declare class SandboxImpl implements LocalSandbox {
     /** Subscribers to currentUser changes. Stable across reset() and
      *  dispose() the same way `eventSubs` is — dispose clears them. */
     private currentUserSubs;
+    private readonly documentChanges;
+    /** Persistence tracks mutations independently of retained events and SDK transport. */
+    onDocumentChange(callback: (path: string | null) => void): () => void;
+    private readonly documentChanged;
     /** Persistence controller. Null until `enablePersistence` is called.
      *  Survives `reset()` so the next write re-flushes the empty state;
      *  cleared by `dispose()` so the sandbox releases its event listeners. */
@@ -104,9 +110,18 @@ export declare class SandboxImpl implements LocalSandbox {
      */
     private _onServiceRegistered;
     private _onServiceUnregistered;
+    /**
+     * The sandbox's one source of time. Handed to every service on this sandbox
+     * so a `serverTimestamp()`, a `request.time`, and a token's `iat` minted in
+     * the same operation agree. Survives `reset()`: a pinned instant belongs to
+     * the session, not to the data. Reached from outside through `getClock`.
+     */
+    readonly clock: SandboxClock;
+    /** The cross-module-instance key `getClock` reads. See `sandbox/clock.ts`. */
+    readonly [SANDBOX_CLOCK]: SandboxClock;
     private constructor();
     /** Factory used by `initializeSandbox`. */
-    static createRoot(): SandboxImpl;
+    static createRoot(historyLimits?: EventHistoryLimits): SandboxImpl;
     /**
      * Resolve the live `LocalEnvironment`. Stable across resets — the
      * sandbox holds whatever env is current, and consumers of `getEnv`
@@ -287,45 +302,37 @@ export declare function primeEventHistory(sandbox: Sandbox, events: readonly San
  * their activity lands on the same stream — e.g.
  *   `emitSandboxEvent(sandbox, userCreatedEvent, { service: 'auth' })`.
  *
- * STATUS (Wave 1.5, Gap #1): Auth / Storage / RTDB now emit here. They share
- * one additive union variant — {@link ServiceMutationEvent} (`kind:
- * 'service_mutation'`) — built via {@link makeServiceMutationEvent}, rather
- * than bending into Firestore's rule-eval-shaped `request`/`write` kinds.
- * Wired emit sites:
- *   - auth:    user create/update/delete, users-clear, sign-in, sign-out
- *              (`SandboxBackend` in `pyric/auth`).
- *   - storage: object put / delete / metadata-update (`pyric/storage`).
- *   - rtdb:    set / update / remove / transaction-commit
- *              (`RtdbBackend` in `pyric/database`, via the modular surface).
- * Firestore still rides the env→sandbox fan-out and is unchanged. See
- * the design rationale.
+ * Every non-Firestore service emits here, sharing one additive union variant,
+ * {@link ServiceMutationEvent} (`kind: 'service_mutation'`), built via
+ * {@link makeServiceMutationEvent}, rather than bending into Firestore's
+ * rule-eval-shaped `request`/`write` kinds. Which services those are, and
+ * which operations each of them emits, is declared once per service in
+ * `<surface>/events.ts` and derived into this variant's types by
+ * `sandbox/types/service-event-records.ts`. Firestore still rides the
+ * env→sandbox fan-out and is unchanged.
  *
  * Throws if `sandbox` wasn't produced by `initializeSandbox()` (same guard
  * as {@link getInternalEnv}).
  */
 export declare function emitSandboxEvent(sandbox: Sandbox, event: SandboxEvent, provenance?: EventProvenance): void;
 /**
- * Build a {@link ServiceMutationEvent} with a fresh `id` + `at` minted from
- * the same monotonic counter Firestore events use — so a non-Firestore
- * service (auth/storage/rtdb) doesn't have to re-implement id minting or
- * worry about colliding with the Firestore stream's ids.
+ * Build a {@link ServiceMutationEvent} with a fresh `id` minted from the same
+ * monotonic counter Firestore events use, so a non-Firestore service
+ * (auth/storage/rtdb) doesn't have to re-implement id minting or worry about
+ * colliding with the Firestore stream's ids.
+ *
+ * `at` is the caller's, and it is required: the instant an event carries is the
+ * sandbox clock's, which only the calling service can resolve, and a default
+ * here would silently stamp the wall clock onto a sandbox running virtual time.
  *
  * The returned event is NOT yet dispatched; hand it to
  * {@link emitSandboxEvent} (which stamps provenance and lands it on the
  * unified stream). The convenience seam for the keystone: a service emit
  * site is `emitSandboxEvent(sandbox, makeServiceMutationEvent({ ... }), { service })`.
  */
-export declare function makeServiceMutationEvent(fields: Omit<ServiceMutationEvent, 'kind' | 'id' | 'at'>): ServiceMutationEvent;
-export declare function makeSandboxOperationEvent(fields: Omit<SandboxOperationEvent, 'kind' | 'id' | 'at'> & {
-    at?: number;
-}): SandboxOperationEvent;
-export declare function makeSandboxCommitEvent(fields: Omit<SandboxCommitEvent, 'kind' | 'id' | 'at'> & {
-    at?: number;
-}): SandboxCommitEvent;
-export declare function makeSandboxListenerEvent(fields: Omit<SandboxListenerEvent, 'kind' | 'id' | 'at'> & {
-    at?: number;
-}): SandboxListenerEvent;
-export declare function makeSandboxRuntimeErrorEvent(fields: Omit<SandboxRuntimeErrorEvent, 'kind' | 'id' | 'at'> & {
-    at?: number;
-}): SandboxRuntimeErrorEvent;
+export declare function makeServiceMutationEvent(fields: ServiceMutationEventFields): ServiceMutationEvent;
+export declare function makeSandboxOperationEvent(fields: Omit<SandboxOperationEvent, 'kind' | 'id'>): SandboxOperationEvent;
+export declare function makeSandboxCommitEvent(fields: Omit<SandboxCommitEvent, 'kind' | 'id'>): SandboxCommitEvent;
+export declare function makeSandboxListenerEvent(fields: Omit<SandboxListenerEvent, 'kind' | 'id'>): SandboxListenerEvent;
+export declare function makeSandboxRuntimeErrorEvent(fields: Omit<SandboxRuntimeErrorEvent, 'kind' | 'id'>): SandboxRuntimeErrorEvent;
 //# sourceMappingURL=sandbox-impl.d.ts.map

package/dist/sandbox/internal/sandbox-impl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-impl.d.ts","sourceRoot":"","sources":["../../../src/sandbox/internal/sandbox-impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EACV,eAAe,EAEf,kBAAkB,EAClB,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EAErB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMjD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AASlD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAY,YAAW,YAAY;IAC9C,SAAiB,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;IACvC,OAAO,CAAC,IAAI,CAAmB;IAC/B,+CAA+C;IAC/C,OAAO,CAAC,SAAS,CAA4C;IAC7D,qEAAqE;IACrE,OAAO,CAAC,SAAS,CAAyB;IAC1C;4EACwE;IACxE,OAAO,CAAC,eAAe,CAAK;IAC5B;;;oEAGgE;IAChE,OAAO,CAAC,YAAY,CAAsB;IAE1C;;;kDAG8C;IAC9C,OAAO,CAAC,iBAAiB,CAA8B;IAEvD;;;;;OAKG;IACH,OAAO,CAAC,YAAY,CAAmB;IACvC;uEACmE;IACnE,OAAO,CAAC,eAAe,CAAwC;IAE/D;;8EAE0E;IAC1E,OAAO,CAAC,WAAW,CAAsC;IACzD;;2CAEuC;IACvC,OAAO,CAAC,wBAAwB,CAA8B;IAE9D;;;;;;;;;;OAUG;IACH,OAAO,CAAC,eAAe,CAAyC;IAEhE;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB,CAAoE;IAChG,OAAO,CAAC,sBAAsB,CAAyC;IAEvE,OAAO;IAKP,2CAA2C;IAC3C,MAAM,CAAC,UAAU,IAAI,WAAW;IAIhC;;;;OAIG;IACH,MAAM,IAAI,gBAAgB;IAI1B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,cAAc;IAKzC;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAwDnB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI;IAQlE;;;;OAIG;IACH,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAUjE;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAiBhB;;;;;OAKG;IACH,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI;IAIrE;;OAEG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,MAAM,IAAI;IAKtD;;;;;;;;;;;;;OAaG;IACH,OAAO,IAAI,YAAY,EAAE;IAIzB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,iBAAiB,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,GAAG,MAAM;IAO1D;;;OAGG;IACH,IAAI,KAAK,IAAI,YAAY,CAQxB;IAED,KAAK,IAAI,IAAI;IAmCP,QAAQ,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA4B/C,OAAO,IAAI,IAAI;IAmCf,QAAQ,IAAI,eAAe;IAY3B,YAAY,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IA6BzC;;;;OAIG;IACH,IAAI,WAAW,IAAI,SAAS,CAE3B;IAED,IAAI,WAAW,CAAC,IAAI,EAAE,SAAS,EAS9B;IAED,oBAAoB,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,GAAG,MAAM,IAAI;IAK/D,OAAO,CAAC,qBAAqB;IAsB7B;;;;;;;;;;;OAWG;IACG,iBAAiB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B1E;;;;;;OAMG;IACH,aAAa,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,MAAM,IAAI;IAI7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAUtB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAKvC,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAwB/E;;;;;;;OAOG;IACH,0BAA0B,CACxB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC,GAAG,IAAI,GAC7D,IAAI;IAIP,kEAAkE;IAClE,4BAA4B,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;IAIvE;;;;OAIG;IACH,kBAAkB,IAAI,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC;CAG9D;AAmBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAQjE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,MAAM,CAQR;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,YAAY,EACnB,UAAU,CAAC,EAAE,eAAe,GAC3B,IAAI,CAQN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,GACvD,oBAAoB,CAOtB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1E,qBAAqB,CAQvB;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE,kBAAkB,CAQpB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE,oBAAoB,CAQtB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7E,wBAAwB,CAQ1B"}
+{"version":3,"file":"sandbox-impl.d.ts","sourceRoot":"","sources":["../../../src/sandbox/internal/sandbox-impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC3E;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EACV,eAAe,EAEf,kBAAkB,EAClB,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMjD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AASlD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAY,YAAW,YAAY;IAC9C,SAAiB,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;IACvC,OAAO,CAAC,IAAI,CAAmB;IAC/B,+CAA+C;IAC/C,OAAO,CAAC,SAAS,CAA4C;IAC7D,qEAAqE;IACrE,OAAO,CAAC,SAAS,CAAyB;IAC1C;4EACwE;IACxE,OAAO,CAAC,eAAe,CAAK;IAC5B;;;iGAG6F;IAC7F,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAE5C;;;kDAG8C;IAC9C,OAAO,CAAC,iBAAiB,CAA8B;IAEvD;;;;;OAKG;IACH,OAAO,CAAC,YAAY,CAAmB;IACvC;uEACmE;IACnE,OAAO,CAAC,eAAe,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4C;IAE5E,uFAAuF;IACvF,gBAAgB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI;IAKrE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAE9B;IAEF;;8EAE0E;IAC1E,OAAO,CAAC,WAAW,CAAsC;IACzD;;2CAEuC;IACvC,OAAO,CAAC,wBAAwB,CAA8B;IAE9D;;;;;;;;;;OAUG;IACH,OAAO,CAAC,eAAe,CAAyC;IAEhE;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB,CAAoE;IAChG,OAAO,CAAC,sBAAsB,CAAyC;IAEvE;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,8EAA8E;IAC9E,SAAiB,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC;IAE/C,OAAO;IAQP,2CAA2C;IAC3C,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,kBAAkB,GAAG,WAAW;IAKlE;;;;OAIG;IACH,MAAM,IAAI,gBAAgB;IAI1B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,cAAc;IAKzC;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAyDnB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI;IAQlE;;;;OAIG;IACH,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAUjE;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAoBhB;;;;;OAKG;IACH,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI;IAIrE;;OAEG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,MAAM,IAAI;IAKtD;;;;;;;;;;;;;OAaG;IACH,OAAO,IAAI,YAAY,EAAE;IAIzB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,iBAAiB,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,GAAG,MAAM;IAiB1D;;;OAGG;IACH,IAAI,KAAK,IAAI,YAAY,CAQxB;IAED,KAAK,IAAI,IAAI;IAqCP,QAAQ,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA4B/C,OAAO,IAAI,IAAI;IAoCf,QAAQ,IAAI,eAAe;IAY3B,YAAY,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IA6BzC;;;;OAIG;IACH,IAAI,WAAW,IAAI,SAAS,CAE3B;IAED,IAAI,WAAW,CAAC,IAAI,EAAE,SAAS,EAS9B;IAED,oBAAoB,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,GAAG,MAAM,IAAI;IAK/D,OAAO,CAAC,qBAAqB;IAsB7B;;;;;;;;;;;OAWG;IACG,iBAAiB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B1E;;;;;;OAMG;IACH,aAAa,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,MAAM,IAAI;IAI7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAUtB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAKvC,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAwB/E;;;;;;;OAOG;IACH,0BAA0B,CACxB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC,GAAG,IAAI,GAC7D,IAAI;IAIP,kEAAkE;IAClE,4BAA4B,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;IAIvE;;;;OAIG;IACH,kBAAkB,IAAI,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC;CAG9D;AAmBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAQjE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,MAAM,CAQR;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,YAAY,EACnB,UAAU,CAAC,EAAE,eAAe,GAC3B,IAAI,CAQN;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,0BAA0B,GACjC,oBAAoB,CAQtB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC,GACjD,qBAAqB,CAQvB;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC,GAC9C,kBAAkB,CAQpB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC,GAChD,oBAAoB,CAQtB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC,GACpD,wBAAwB,CAQ1B"}

package/dist/sandbox/internal/sandbox-impl.js

@@ -1,3 +1,4 @@
+import { EventHistory } from './event-history.js';
 /**
  * Internal `Sandbox` implementation — backs the public interface from
  * `/app` and exposes the hook (`getEnv`) that other in-package modules
@@ -18,6 +19,7 @@
  * to {@link SandboxContext}, derived via `withAuth`.
  */
 import { LocalEnvironment } from '../../firestore/sandbox/local-environment.js';
+import { SandboxClock, SANDBOX_CLOCK } from '../clock.js';
 import { SandboxError } from '../types/errors.js';
 import { SandboxContextImpl, validateAuthState } from '../sandbox-context.js';
 import { attachPersistence, } from '../persistence/controller.js';
@@ -59,8 +61,8 @@ export class SandboxImpl {
     /** Append-only history of every SandboxEvent emitted on this sandbox.
      *  Cleared on `reset()` AFTER the session_boundary event is appended,
      *  so the boundary is the last entry of the old session's history.
-     *  v1 doesn't cap; consumers persist the snapshot they need. */
-    eventHistory = [];
+     *  Hosted adapters may bound observation retention; direct SDK roots retain full history. */
+    eventHistory;
     /** Ambient provenance for the current {@link runWithProvenance} window
      *  (undefined outside any window). Purely synchronous — set on entry,
      *  restored in `finally` — so deferred work (microtask listener drains)
@@ -76,6 +78,16 @@ export class SandboxImpl {
     /** Subscribers to currentUser changes. Stable across reset() and
      *  dispose() the same way `eventSubs` is — dispose clears them. */
     currentUserSubs = new Set();
+    documentChanges = new Set();
+    /** Persistence tracks mutations independently of retained events and SDK transport. */
+    onDocumentChange(callback) {
+        this.documentChanges.add(callback);
+        return () => { this.documentChanges.delete(callback); };
+    }
+    documentChanged = (path) => {
+        for (const callback of this.documentChanges)
+            callback(path);
+    };
     /** Persistence controller. Null until `enablePersistence` is called.
      *  Survives `reset()` so the next write re-flushes the empty state;
      *  cleared by `dispose()` so the sandbox releases its event listeners. */
@@ -108,13 +120,24 @@ export class SandboxImpl {
      */
     _onServiceRegistered = null;
     _onServiceUnregistered = null;
-    constructor(env) {
+    /**
+     * The sandbox's one source of time. Handed to every service on this sandbox
+     * so a `serverTimestamp()`, a `request.time`, and a token's `iat` minted in
+     * the same operation agree. Survives `reset()`: a pinned instant belongs to
+     * the session, not to the data. Reached from outside through `getClock`.
+     */
+    clock;
+    constructor(env, clock, historyLimits) {
+        this.eventHistory = new EventHistory(historyLimits);
         this._env = env;
+        this.clock = clock;
+        Object.defineProperty(this, SANDBOX_CLOCK, { value: clock, enumerable: false });
         this.attachToEnv();
     }
     /** Factory used by `initializeSandbox`. */
-    static createRoot() {
-        return new SandboxImpl(new LocalEnvironment());
+    static createRoot(historyLimits) {
+        const clock = new SandboxClock();
+        return new SandboxImpl(new LocalEnvironment(clock), clock, historyLimits);
     }
     /**
      * Resolve the live `LocalEnvironment`. Stable across resets — the
@@ -134,6 +157,7 @@ export class SandboxImpl {
      * through {@link emit}. Refreshed on `reset()` after the env swap.
      */
     attachToEnv() {
+        this.envUnsubs.push(this._env.onStateChange(this.documentChanged));
         this.envUnsubs.push(this._env.onRequest((event) => {
             // RequestEvent already carries `kind: 'request'` from buildRequestEvent.
             this.emitEvent(event);
@@ -153,7 +177,7 @@ export class SandboxImpl {
             const ev = {
                 kind: 'listener_errored',
                 id: makeSandboxEventId(),
-                at: Date.now(),
+                at: this.clock.now(),
                 listenerId,
                 target: target.kind === 'doc'
                     ? { kind: 'doc', path: target.path }
@@ -212,17 +236,20 @@ export class SandboxImpl {
      * the raw fan-out + history append it wraps.
      */
     dispatch(event) {
+        event = { ...event, observedAt: Date.now() };
         // Append to history unconditionally — consumers that call
         // sandbox.history() expect every event the sandbox saw, regardless
         // of whether onEvent subscribers were attached at emit time.
-        this.eventHistory.push(event);
+        this.eventHistory.append(event);
         this.dispatchedCount++;
-        if (this.eventSubs.size === 0)
+        const hasNoSubscribers = this.eventSubs.size === 0;
+        if (hasNoSubscribers)
             return;
         for (const cb of this.eventSubs) {
             try {
                 const result = cb(event);
-                if (result && typeof result.then === 'function') {
+                const isAsyncResult = result !== null && result !== undefined && typeof result.then === 'function';
+                if (isAsyncResult) {
                     result.catch(() => { });
                 }
             }
@@ -260,7 +287,7 @@ export class SandboxImpl {
      * `dispose()` leaves the boundary as the final entry.
      */
     history() {
-        return [...this.eventHistory];
+        return this.eventHistory.snapshot();
     }
     /**
      * Prime the event-history log with events from a PRIOR session of the
@@ -283,11 +310,23 @@ export class SandboxImpl {
      * interleave after live ones. Returns the number of events primed.
      */
     primeEventHistory(events) {
-        if (this.eventHistory.length > 0)
+        const hasHistory = this.eventHistory.length > 0;
+        const isEmpty = events.length === 0;
+        if (hasHistory)
             return 0;
-        if (events.length === 0)
+        if (isEmpty)
             return 0;
-        this.eventHistory.push(...events);
+        for (const event of events) {
+            const unfinished = event.kind === 'operation' && event.observation?.status === 'pending';
+            if (unfinished) {
+                const observation = {
+                    ...event.observation, status: 'interrupted', error: { code: 'host-restarted' },
+                };
+                this.eventHistory.append({ ...event, observation });
+            }
+            else
+                this.eventHistory.append(event);
+        }
         return events.length;
     }
     /**
@@ -309,7 +348,7 @@ export class SandboxImpl {
         const boundary = {
             kind: 'session_boundary',
             id: makeSandboxEventId(),
-            at: Date.now(),
+            at: this.clock.now(),
             phase: 'reset',
             priorOpCount: this.dispatchedCount,
         };
@@ -317,11 +356,12 @@ export class SandboxImpl {
         // The boundary is now the last entry in eventHistory; clear the
         // history AFTER emit so consumers that took a snapshot before
         // reset() retain the boundary in their copy.
-        this.eventHistory = [];
+        this.eventHistory.clear();
         // Clear currentUser to null and notify — a reset wipes everything
         // including signed-in identity. Subscribers see the sign-out so
         // their UI / Firestore handles reflect the post-reset state.
-        if (this._currentUser !== null) {
+        const hadCurrentUser = this._currentUser !== null;
+        if (hadCurrentUser) {
             this._currentUser = null;
             this.notifyCurrentUserSubs(null);
         }
@@ -332,8 +372,9 @@ export class SandboxImpl {
             unsub();
         this.envUnsubs = [];
         this._env.dispose();
-        this._env = new LocalEnvironment();
+        this._env = new LocalEnvironment(this.clock);
         this.attachToEnv();
+        this.documentChanged(null);
     }
     async resetAll() {
         // Firestore env + signed-in session first (emits the session_boundary),
@@ -367,7 +408,7 @@ export class SandboxImpl {
         const boundary = {
             kind: 'session_boundary',
             id: makeSandboxEventId(),
-            at: Date.now(),
+            at: this.clock.now(),
             phase: 'dispose',
             priorOpCount: this.dispatchedCount,
         };
@@ -394,6 +435,7 @@ export class SandboxImpl {
         // subscriptions on it would leak.
         this.eventSubs.clear();
         this.currentUserSubs.clear();
+        this.documentChanges.clear();
     }
     snapshot() {
         // Collect each registered service's snapshot under its name. The
@@ -641,18 +683,14 @@ export function primeEventHistory(sandbox, events) {
  * their activity lands on the same stream — e.g.
  *   `emitSandboxEvent(sandbox, userCreatedEvent, { service: 'auth' })`.
  *
- * STATUS (Wave 1.5, Gap #1): Auth / Storage / RTDB now emit here. They share
- * one additive union variant — {@link ServiceMutationEvent} (`kind:
- * 'service_mutation'`) — built via {@link makeServiceMutationEvent}, rather
- * than bending into Firestore's rule-eval-shaped `request`/`write` kinds.
- * Wired emit sites:
- *   - auth:    user create/update/delete, users-clear, sign-in, sign-out
- *              (`SandboxBackend` in `pyric/auth`).
- *   - storage: object put / delete / metadata-update (`pyric/storage`).
- *   - rtdb:    set / update / remove / transaction-commit
- *              (`RtdbBackend` in `pyric/database`, via the modular surface).
- * Firestore still rides the env→sandbox fan-out and is unchanged. See
- * the design rationale.
+ * Every non-Firestore service emits here, sharing one additive union variant,
+ * {@link ServiceMutationEvent} (`kind: 'service_mutation'`), built via
+ * {@link makeServiceMutationEvent}, rather than bending into Firestore's
+ * rule-eval-shaped `request`/`write` kinds. Which services those are, and
+ * which operations each of them emits, is declared once per service in
+ * `<surface>/events.ts` and derived into this variant's types by
+ * `sandbox/types/service-event-records.ts`. Firestore still rides the
+ * env→sandbox fan-out and is unchanged.
  *
  * Throws if `sandbox` wasn't produced by `initializeSandbox()` (same guard
  * as {@link getInternalEnv}).
@@ -664,10 +702,14 @@ export function emitSandboxEvent(sandbox, event, provenance) {
     sandbox.emitInternal(event, provenance);
 }
 /**
- * Build a {@link ServiceMutationEvent} with a fresh `id` + `at` minted from
- * the same monotonic counter Firestore events use — so a non-Firestore
- * service (auth/storage/rtdb) doesn't have to re-implement id minting or
- * worry about colliding with the Firestore stream's ids.
+ * Build a {@link ServiceMutationEvent} with a fresh `id` minted from the same
+ * monotonic counter Firestore events use, so a non-Firestore service
+ * (auth/storage/rtdb) doesn't have to re-implement id minting or worry about
+ * colliding with the Firestore stream's ids.
+ *
+ * `at` is the caller's, and it is required: the instant an event carries is the
+ * sandbox clock's, which only the calling service can resolve, and a default
+ * here would silently stamp the wall clock onto a sandbox running virtual time.
  *
  * The returned event is NOT yet dispatched; hand it to
  * {@link emitSandboxEvent} (which stamps provenance and lands it on the
@@ -675,11 +717,12 @@ export function emitSandboxEvent(sandbox, event, provenance) {
  * site is `emitSandboxEvent(sandbox, makeServiceMutationEvent({ ... }), { service })`.
  */
 export function makeServiceMutationEvent(fields) {
+    const { at, ...rest } = fields;
     return {
         kind: 'service_mutation',
         id: makeSandboxEventId(),
-        at: Date.now(),
-        ...fields,
+        at,
+        ...rest,
     };
 }
 export function makeSandboxOperationEvent(fields) {
@@ -687,7 +730,7 @@ export function makeSandboxOperationEvent(fields) {
     return {
         kind: 'operation',
         id: makeSandboxEventId(),
-        at: at ?? Date.now(),
+        at,
         ...rest,
     };
 }
@@ -696,7 +739,7 @@ export function makeSandboxCommitEvent(fields) {
     return {
         kind: 'commit',
         id: makeSandboxEventId(),
-        at: at ?? Date.now(),
+        at,
         ...rest,
     };
 }
@@ -705,7 +748,7 @@ export function makeSandboxListenerEvent(fields) {
     return {
         kind: 'listener',
         id: makeSandboxEventId(),
-        at: at ?? Date.now(),
+        at,
         ...rest,
     };
 }
@@ -714,7 +757,7 @@ export function makeSandboxRuntimeErrorEvent(fields) {
     return {
         kind: 'runtime_error',
         id: makeSandboxEventId(),
-        at: at ?? Date.now(),
+        at,
         ...rest,
     };
 }