pyric 0.1.0-alpha.21 → 0.1.0-alpha.24

package/dist/sandbox/types/query-proof.d.ts

@@ -0,0 +1,25 @@
+import type { QueryProofResidual } from '../../rules/simulator/query-proof.js';
+/** Local proof evidence. These categories do not claim a Firebase decision. */
+export interface QueryProofFailure {
+    kind: 'unsupported-predicate' | 'unsupported-path' | 'constraints-not-satisfied';
+    reason: string;
+    residual: QueryProofResidual;
+    /** Location of the rejected predicate, which may be inside a helper. */
+    predicate?: QueryProofFailure['rule'];
+    rule?: {
+        line?: number;
+        col?: number;
+        column?: number;
+        file?: string;
+        citation?: string;
+        expression?: string;
+    };
+}
+export interface QueryProofDiagnostic {
+    kind: QueryProofFailure['kind'] | 'residual-denied' | 'no-rule';
+    /** Rejected rules, in source order. None were evaluated against stored rows. */
+    failures: QueryProofFailure[];
+    /** Complete query identity, separate from the conservative proof projection. */
+    query?: unknown;
+}
+//# sourceMappingURL=query-proof.d.ts.map

package/dist/sandbox/types/query-proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-proof.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types/query-proof.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAE/E,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,uBAAuB,GAAG,kBAAkB,GAAG,2BAA2B,CAAC;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,wEAAwE;IACxE,SAAS,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,iBAAiB,GAAG,SAAS,CAAC;IAChE,gFAAgF;IAChF,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,gFAAgF;IAChF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB"}

package/dist/sandbox/types/query-proof.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=query-proof.js.map

package/dist/sandbox/types/query-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-proof.js","sourceRoot":"","sources":["../../../src/sandbox/types/query-proof.ts"],"names":[],"mappings":""}

package/dist/sandbox/types/request-observation.d.ts

@@ -0,0 +1,19 @@
+import type { AiEvidence } from '../internal/ai-evidence.js';
+/** A cumulative execution snapshot. Its request ID survives lifecycle updates. */
+export interface RequestObservation {
+    readonly id: string;
+    readonly startedAt: number;
+    readonly endedAt?: number;
+    readonly status: 'pending' | 'completed' | 'failed' | 'cancelled' | 'interrupted';
+    readonly ai?: AiEvidence;
+    readonly response?: {
+        readonly text: string;
+        readonly truncated: boolean;
+    };
+    readonly error?: {
+        readonly code: string;
+    };
+}
+/** Consistent execution labels for retained host and page observations. */
+export declare function requestStatusLabel(status: string): string;
+//# sourceMappingURL=request-observation.d.ts.map

package/dist/sandbox/types/request-observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-observation.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types/request-observation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAC;IAClF,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAUzD"}

package/dist/sandbox/types/request-observation.js

@@ -0,0 +1,13 @@
+/** Consistent execution labels for retained host and page observations. */
+export function requestStatusLabel(status) {
+    switch (status) {
+        case 'pending': return 'In progress';
+        case 'completed': return 'Completed';
+        case 'failed': return 'Failed';
+        case 'cancelled': return 'Cancelled';
+        case 'interrupted': return 'Interrupted';
+        case 'closed': return 'Closed';
+        default: return 'Not recorded';
+    }
+}
+//# sourceMappingURL=request-observation.js.map

package/dist/sandbox/types/request-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-observation.js","sourceRoot":"","sources":["../../../src/sandbox/types/request-observation.ts"],"names":[],"mappings":"AAaA,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,SAAS,CAAC,CAAC,OAAO,aAAa,CAAC;QACrC,KAAK,WAAW,CAAC,CAAC,OAAO,WAAW,CAAC;QACrC,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,KAAK,WAAW,CAAC,CAAC,OAAO,WAAW,CAAC;QACrC,KAAK,aAAa,CAAC,CAAC,OAAO,aAAa,CAAC;QACzC,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,OAAO,CAAC,CAAC,OAAO,cAAc,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/sandbox/types/rules-evidence.d.ts

@@ -0,0 +1,48 @@
+export type RuleScalar = string | number | boolean | null;
+interface RuleCheckLocation {
+    expression: string;
+    parent: number | null;
+    operator?: string;
+    kind?: string;
+    helper?: string;
+    binding?: string;
+}
+export type RuleCheck = RuleCheckLocation & ({
+    state: 'value';
+    value: RuleScalar;
+} | {
+    state: 'error';
+    error: string;
+} | {
+    state: 'skipped' | 'unavailable';
+});
+/** Bounded evidence from the evaluation that handled a request; never a replay. */
+export interface RulesEvidence {
+    version: string;
+    scope: 'request' | 'query-residual';
+    decision: 'ALLOW' | 'DENY' | 'UNSUPPORTED';
+    truncated: boolean;
+    rules: Array<{
+        expression: string;
+        verdict: 'ALLOW' | 'DENY' | 'ERROR' | 'UNSUPPORTED';
+        line?: number;
+        path?: string;
+        error?: string;
+        checks: RuleCheck[];
+    }>;
+    paths: Array<{
+        path: string;
+        matched: boolean;
+        line?: number;
+    }>;
+    queryProof?: {
+        kind: string;
+        failures: Array<{
+            reason: string;
+            expression?: string;
+            line?: number;
+        }>;
+    };
+}
+export {};
+//# sourceMappingURL=rules-evidence.d.ts.map

package/dist/sandbox/types/rules-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-evidence.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types/rules-evidence.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE1D,UAAU,iBAAiB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG,CACxC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,SAAS,GAAG,aAAa,CAAA;CAAE,CACvC,CAAC;AAEF,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,GAAG,gBAAgB,CAAC;IACpC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,aAAa,CAAC;IAC3C,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,aAAa,CAAC;QACpD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,SAAS,EAAE,CAAC;KACrB,CAAC,CAAC;IACH,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACzE,CAAC;CACH"}

package/dist/sandbox/types/rules-evidence.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rules-evidence.js.map

package/dist/sandbox/types/rules-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-evidence.js","sourceRoot":"","sources":["../../../src/sandbox/types/rules-evidence.ts"],"names":[],"mappings":""}

package/dist/sandbox/types/service-event-record.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The shape one service declares so the sandbox core knows what that service
+ * puts on the event stream.
+ *
+ * A record is authored next to the service it describes
+ * (`packages/pyric/src/<surface>/events.ts`), the way one tool method is one
+ * record file. The sandbox core derives the service union and each service's
+ * operation enum from those declarations rather than restating them, so a
+ * service cannot emit an operation it never declared and cannot be added to
+ * the stream vocabulary without declaring one.
+ */
+/** What a service event's `path` addresses, in that service's own scheme. */
+export interface ServiceEventTarget {
+    /** The addressing scheme's own name for the target, e.g. `uid`, `fullPath`. */
+    readonly name: string;
+    /** What the target names, for a consumer rendering the event. */
+    readonly description: string;
+    /** Whether every operation this service emits carries a target. */
+    readonly always: boolean;
+}
+/** One service's declaration of its slice of the event stream. */
+export interface ServiceEventRecord<Service extends string = string, Operation extends string = string> {
+    /** The service name that appears on the event and in its provenance. */
+    readonly service: Service;
+    /** Every operation this service emits, in no significant order. */
+    readonly operations: readonly Operation[];
+    /** What the event's `path` addresses. */
+    readonly target: ServiceEventTarget;
+}
+//# sourceMappingURL=service-event-record.d.ts.map

package/dist/sandbox/types/service-event-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-event-record.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types/service-event-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB,CACjC,OAAO,SAAS,MAAM,GAAG,MAAM,EAC/B,SAAS,SAAS,MAAM,GAAG,MAAM;IAEjC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAC;IAC1C,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC"}

package/dist/sandbox/types/service-event-record.js

@@ -0,0 +1,13 @@
+/**
+ * The shape one service declares so the sandbox core knows what that service
+ * puts on the event stream.
+ *
+ * A record is authored next to the service it describes
+ * (`packages/pyric/src/<surface>/events.ts`), the way one tool method is one
+ * record file. The sandbox core derives the service union and each service's
+ * operation enum from those declarations rather than restating them, so a
+ * service cannot emit an operation it never declared and cannot be added to
+ * the stream vocabulary without declaring one.
+ */
+export {};
+//# sourceMappingURL=service-event-record.js.map

package/dist/sandbox/types/service-event-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-event-record.js","sourceRoot":"","sources":["../../../src/sandbox/types/service-event-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/sandbox/types/service-event-records.d.ts

@@ -0,0 +1,64 @@
+/** Keyed by the service name each record declares. */
+export declare const SERVICE_EVENT_RECORDS: {
+    readonly auth: {
+        readonly service: "auth";
+        readonly operations: readonly ["user_create", "user_update", "user_delete", "users_clear", "sign_in", "sign_out", "provider_config_update"];
+        readonly target: {
+            readonly name: "uid";
+            readonly description: "The mutated user's uid, or '*' when every user was cleared.";
+            readonly always: false;
+        };
+    };
+    readonly storage: {
+        readonly service: "storage";
+        readonly operations: readonly ["object_put", "object_delete", "metadata_update"];
+        readonly target: {
+            readonly name: "fullPath";
+            readonly description: "The object's full path within the bucket, e.g. avatars/alice.png.";
+            readonly always: true;
+        };
+    };
+    readonly rtdb: {
+        readonly service: "rtdb";
+        readonly operations: readonly ["set", "update", "remove", "transaction", "setPriority"];
+        readonly target: {
+            readonly name: "path";
+            readonly description: "The database path the call targeted, e.g. /rooms/r1/messages.";
+            readonly always: true;
+        };
+    };
+    readonly messaging: {
+        readonly service: "messaging";
+        readonly operations: readonly ["token_minted", "token_deleted", "subscription_changed", "message_accepted", "message_rejected", "delivery_routed", "message_delivered", "delivery_acknowledged"];
+        readonly target: {
+            readonly name: "token";
+            readonly description: "The registration token a token or subscription operation addressed.";
+            readonly always: false;
+        };
+    };
+    readonly ai: {
+        readonly service: "ai";
+        readonly operations: readonly ["generate_content", "stream_generate_content", "count_tokens", "request_rejected", "response_blocked", "model_substituted"];
+        readonly target: {
+            readonly name: "model";
+            readonly description: "The model name the call named, e.g. gemini-2.5-flash.";
+            readonly always: false;
+        };
+    };
+    readonly functions: {
+        readonly service: "functions";
+        readonly operations: readonly ["trigger_discovered", "handler_fired", "execution_finished"];
+        readonly target: {
+            readonly name: "ref";
+            readonly description: "The trigger's reference pattern on discovery, and the synthetic event's concrete path once a handler fires.";
+            readonly always: false;
+        };
+    };
+};
+/** Every service that emits the cross-service mutation envelope. */
+export type MutationEventService = keyof typeof SERVICE_EVENT_RECORDS;
+/** The operations one service declared. */
+export type ServiceEventOperation<Service extends MutationEventService> = (typeof SERVICE_EVENT_RECORDS)[Service]['operations'][number];
+/** Every declared service name, as a runtime list. */
+export declare const MUTATION_EVENT_SERVICES: MutationEventService[];
+//# sourceMappingURL=service-event-records.d.ts.map

package/dist/sandbox/types/service-event-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-event-records.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types/service-event-records.ts"],"names":[],"mappings":"AAqBA,sDAAsD;AACtD,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOqB,CAAC;AAExD,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,qBAAqB,CAAC;AAEtE,2CAA2C;AAC3C,MAAM,MAAM,qBAAqB,CAAC,OAAO,SAAS,oBAAoB,IACpE,CAAC,OAAO,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,EAE/B,oBAAoB,EAAE,CAAC"}

package/dist/sandbox/types/service-event-records.js

@@ -0,0 +1,31 @@
+/**
+ * Every service's event declaration, in one place, so the sandbox core can
+ * derive the stream's vocabulary instead of restating it.
+ *
+ * Why static imports rather than a registry the capabilities register into.
+ * The operation enums have to exist as types: `ServiceMutationEvent.op` is
+ * derived from them, and a value pushed into a registry at module load carries
+ * no type a `.d.ts` can name. A registry would also make the vocabulary depend
+ * on which surfaces a bundle happened to load, so the same event would be
+ * well-typed in one entry point and untyped in another. These imports reach
+ * six leaf files that declare data and import nothing but the record type, so
+ * the edge costs the central runtime no capability code.
+ */
+import { AI_EVENT_RECORD } from '../../ai/events.js';
+import { AUTH_EVENT_RECORD } from '../../auth/events.js';
+import { RTDB_EVENT_RECORD } from '../../database/events.js';
+import { FUNCTIONS_EVENT_RECORD } from '../../functions/events.js';
+import { MESSAGING_EVENT_RECORD } from '../../messaging/events.js';
+import { STORAGE_EVENT_RECORD } from '../../storage/events.js';
+/** Keyed by the service name each record declares. */
+export const SERVICE_EVENT_RECORDS = {
+    auth: AUTH_EVENT_RECORD,
+    storage: STORAGE_EVENT_RECORD,
+    rtdb: RTDB_EVENT_RECORD,
+    messaging: MESSAGING_EVENT_RECORD,
+    ai: AI_EVENT_RECORD,
+    functions: FUNCTIONS_EVENT_RECORD,
+};
+/** Every declared service name, as a runtime list. */
+export const MUTATION_EVENT_SERVICES = Object.keys(SERVICE_EVENT_RECORDS);
+//# sourceMappingURL=service-event-records.js.map

package/dist/sandbox/types/service-event-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-event-records.js","sourceRoot":"","sources":["../../../src/sandbox/types/service-event-records.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,sDAAsD;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,sBAAsB;IACjC,EAAE,EAAE,eAAe;IACnB,SAAS,EAAE,sBAAsB;CACoB,CAAC;AASxD,sDAAsD;AACtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,IAAI,CAChD,qBAAqB,CACI,CAAC"}

package/dist/sandbox/types/service-mutation-event.d.ts

@@ -0,0 +1,88 @@
+/**
+ * The cross-service mutation envelope: the one event shape every non-Firestore
+ * service uses to report a state change.
+ *
+ * Firestore's existing kinds are tightly coupled to the rules simulator:
+ * `RequestEvent` carries `result`, `evalMs`, the simulator's `reasons[]`, and
+ * `matchedRule`; `WriteSandboxEvent` carries Firestore-specific `sentinels`,
+ * `autoId`, and a Firestore `requestTime`. An auth user-DB mutation has no
+ * path and no rule evaluation, a storage put and an RTDB tree write have
+ * neither sentinels nor auto-ids, and bending them into the Firestore shapes
+ * would either synthesize a fake `result` or pollute the Firestore consumer
+ * contract. So this is one small additive variant those services share;
+ * Firestore consumers filter on their existing kinds and never see it.
+ *
+ * The `service` and `op` fields are derived from the per-service records in
+ * `service-event-records.ts`, so a service joins this envelope by declaring
+ * an event record beside its own code and no other way.
+ */
+import type { AuthState } from './auth-state.js';
+import type { MutationEventService, ServiceEventOperation } from './service-event-records.js';
+/**
+ * One state change one service reported.
+ *
+ * `before` and `after` are best-effort serializable snapshots, omitted when
+ * there is nothing meaningful to carry (a create has no before, a sign-out no
+ * after). Studio's data grids and Action Center render `service`, `op`, and
+ * `path` directly and diff `before` against `after` when both are present.
+ */
+export interface ServiceMutationEventOf<Service extends MutationEventService> {
+    kind: 'service_mutation';
+    id: string;
+    at: number;
+    /**
+     * Which service performed the mutation. Always one of the non-Firestore
+     * services; Firestore rides its own `request`/`write` path. The provenance
+     * `service` field on the stamped event mirrors this, set redundantly here so
+     * a consumer matching purely on `kind` still gets the discriminator without
+     * reaching into provenance.
+     */
+    service: Service;
+    /**
+     * Service-scoped operation name, drawn from the operations that service's
+     * own record declares. A service adds an operation by adding it there.
+     */
+    op: ServiceEventOperation<Service>;
+    /**
+     * The thing mutated, in the service's own addressing scheme:
+     *   - auth:    the user `uid` (or `'*'` for a clear-all). Absent for a
+     *              sign-out with no prior user.
+     *   - storage: the object `fullPath` (e.g. `avatars/alice.png`).
+     *   - rtdb:    the database path (e.g. `/rooms/r1/messages`), or for a
+     *              multi-path `update` the ref path the call targeted.
+     */
+    path?: string;
+    /** Identity in effect when the op ran (the service's `request.auth`
+     *  equivalent). `null` for admin/anonymous-driven mutations (e.g.
+     *  `sandbox.createUser`, an unauthenticated RTDB write). */
+    auth: AuthState;
+    /** Best-effort serializable snapshot of the state BEFORE the mutation.
+     *  Absent when there was no prior state (a create) or it isn't cheap to
+     *  capture. */
+    before?: unknown;
+    /** Best-effort serializable snapshot of the state AFTER the mutation.
+     *  Absent on deletes / sign-outs (nothing remains). */
+    after?: unknown;
+    /** Free-form, service-specific extras a consumer may surface without
+     *  re-deriving (e.g. storage `{ size, contentType }`, rtdb
+     *  `{ committed }` for a transaction). Kept loose on purpose: it is a
+     *  display hint, not a contract. */
+    detail?: Record<string, unknown>;
+}
+/**
+ * The cross-service mutation envelope, as the union over every service that
+ * declared an event record. Narrowing on `service` narrows `op` to that
+ * service's own operations.
+ */
+export type ServiceMutationEvent = {
+    [Service in MutationEventService]: ServiceMutationEventOf<Service>;
+}[MutationEventService];
+/**
+ * The fields a caller supplies to build a {@link ServiceMutationEvent}; `kind`
+ * and `id` are the emitter's. Distributed per service so `op` stays bound to
+ * the `service` beside it.
+ */
+export type ServiceMutationEventFields = {
+    [Service in MutationEventService]: Omit<ServiceMutationEventOf<Service>, 'kind' | 'id'>;
+}[MutationEventService];
+//# sourceMappingURL=service-mutation-event.d.ts.map

package/dist/sandbox/types/service-mutation-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-mutation-event.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types/service-mutation-event.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB,CAAC,OAAO,SAAS,oBAAoB;IAC1E,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX;;;;;;OAMG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,EAAE,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnC;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;gEAE4D;IAC5D,IAAI,EAAE,SAAS,CAAC;IAChB;;mBAEe;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;2DACuD;IACvD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;wCAGoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;KAChC,OAAO,IAAI,oBAAoB,GAAG,sBAAsB,CAAC,OAAO,CAAC;CACnE,CAAC,oBAAoB,CAAC,CAAC;AAExB;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG;KACtC,OAAO,IAAI,oBAAoB,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxF,CAAC,oBAAoB,CAAC,CAAC"}

package/dist/sandbox/types/service-mutation-event.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=service-mutation-event.js.map

package/dist/sandbox/types/service-mutation-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-mutation-event.js","sourceRoot":"","sources":["../../../src/sandbox/types/service-mutation-event.ts"],"names":[],"mappings":""}

package/dist/storage/activity-coverage.d.ts

@@ -0,0 +1,9 @@
+/** Public Storage operations measured once at their SDK boundary. */
+export declare const storageActivityCoverage: {
+    readonly service: "storage";
+    readonly read: readonly ["getBytes", "getBlob", "getDownloadURL", "getMetadata", "listAll"];
+    readonly write: readonly ["uploadBytes", "uploadString", "uploadBytesResumable", "updateMetadata", "deleteObject"];
+    readonly listener: readonly [];
+    readonly untrackedMethods: readonly [];
+};
+//# sourceMappingURL=activity-coverage.d.ts.map

package/dist/storage/activity-coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-coverage.d.ts","sourceRoot":"","sources":["../../src/storage/activity-coverage.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,eAAO,MAAM,uBAAuB;;;;;;CAM1B,CAAC"}

package/dist/storage/activity-coverage.js

@@ -0,0 +1,9 @@
+/** Public Storage operations measured once at their SDK boundary. */
+export const storageActivityCoverage = {
+    service: 'storage',
+    read: ['getBytes', 'getBlob', 'getDownloadURL', 'getMetadata', 'listAll'],
+    write: ['uploadBytes', 'uploadString', 'uploadBytesResumable', 'updateMetadata', 'deleteObject'],
+    listener: [],
+    untrackedMethods: [],
+};
+//# sourceMappingURL=activity-coverage.js.map

package/dist/storage/activity-coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-coverage.js","sourceRoot":"","sources":["../../src/storage/activity-coverage.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,CAAC;IACzE,KAAK,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,cAAc,CAAC;IAChG,QAAQ,EAAE,EAAE;IACZ,gBAAgB,EAAE,EAAE;CACZ,CAAC"}

package/dist/storage/base64.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Base64 encoding for object bytes.
+ *
+ * `getDownloadURL` returns a `data:` URI, so every byte an object holds has to
+ * reach a base64 string on whichever runtime the caller happens to be on.
+ * Node.js and Bun expose `Buffer`; browsers and workers expose `btoa`. This
+ * module is the one place that picks between them, so the SDK's
+ * `getDownloadURL` and the CLI's worker-mode mirror encode identically.
+ */
+/** Encode `buffer` as standard base64 (`+`/`/` alphabet, `=`-padded). */
+export declare function arrayBufferToBase64(buffer: ArrayBuffer): string;
+/** Decode standard base64 back to the bytes {@link arrayBufferToBase64} encoded. */
+export declare function base64ToBytes(encoded: string): Uint8Array;
+//# sourceMappingURL=base64.d.ts.map

package/dist/storage/base64.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../src/storage/base64.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yEAAyE;AACzE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAU/D;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAUzD"}

package/dist/storage/base64.js

@@ -0,0 +1,34 @@
+/**
+ * Base64 encoding for object bytes.
+ *
+ * `getDownloadURL` returns a `data:` URI, so every byte an object holds has to
+ * reach a base64 string on whichever runtime the caller happens to be on.
+ * Node.js and Bun expose `Buffer`; browsers and workers expose `btoa`. This
+ * module is the one place that picks between them, so the SDK's
+ * `getDownloadURL` and the CLI's worker-mode mirror encode identically.
+ */
+/** Encode `buffer` as standard base64 (`+`/`/` alphabet, `=`-padded). */
+export function arrayBufferToBase64(buffer) {
+    const bytes = new Uint8Array(buffer);
+    if (typeof Buffer === 'function' && typeof Buffer.from === 'function') {
+        return Buffer.from(bytes).toString('base64');
+    }
+    let binary = '';
+    for (let i = 0; i < bytes.byteLength; i++) {
+        binary += String.fromCharCode(bytes[i]);
+    }
+    return btoa(binary);
+}
+/** Decode standard base64 back to the bytes {@link arrayBufferToBase64} encoded. */
+export function base64ToBytes(encoded) {
+    if (typeof Buffer === 'function' && typeof Buffer.from === 'function') {
+        return Uint8Array.from(Buffer.from(encoded, 'base64'));
+    }
+    const binary = atob(encoded);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes;
+}
+//# sourceMappingURL=base64.js.map

package/dist/storage/base64.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../../src/storage/base64.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yEAAyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,MAAmB;IACrD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACtE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/storage/download.d.ts

@@ -16,10 +16,18 @@ export declare function getBytes(ref: StorageReference, maxDownloadSizeBytes?: n
  */
 export declare function getBlob(ref: StorageReference, maxDownloadSizeBytes?: number): Promise<Blob>;
 /**
- * Return a URL the current page can use to read the sandbox object. The URL is
- * created from the same rules-checked blob as {@link getBlob}. It is a
- * snapshot, cannot be shared outside the page, and stays
- * alive until the caller revokes it or the page unloads.
+ * Return a URL that reads the sandbox object, built from the same
+ * rules-checked blob as {@link getBlob}.
+ *
+ * The URL is a `data:<contentType>;base64,<payload>` URI: the object's bytes
+ * are carried inside the string itself. That makes it resolvable wherever the
+ * string travels (Node.js, an SSR render, a worker, a page) rather than only
+ * inside the realm that produced it. Production returns a token-signed HTTPS
+ * URL served by Google Cloud Storage instead; a consumer can rely on `fetch`
+ * of either form yielding the object's bytes and its content type.
+ *
+ * Objects stored without a content type read back as
+ * `application/octet-stream`.
  */
 export declare function getDownloadURL(ref: StorageReference): Promise<string>;
 /**

package/dist/storage/download.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../../src/storage/download.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,gBAAgB,EACrB,oBAAoB,CAAC,EAAE,MAAM,GAC5B,OAAO,CAAC,WAAW,CAAC,CAItB;AAED;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,gBAAgB,EACrB,oBAAoB,CAAC,EAAE,MAAM,GAC5B,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAG3E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,gBAAgB,EACrB,UAAU,CAAC,EAAE,eAAe,GAC3B,OAAO,CAAC,IAAI,CAAC,CA+Bf"}
+{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../../src/storage/download.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAMrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,gBAAgB,EACrB,oBAAoB,CAAC,EAAE,MAAM,GAC5B,OAAO,CAAC,WAAW,CAAC,CAItB;AAED;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,gBAAgB,EACrB,oBAAoB,CAAC,EAAE,MAAM,GAC5B,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAM3E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,gBAAgB,EACrB,UAAU,CAAC,EAAE,eAAe,GAC3B,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/storage/download.js

@@ -15,11 +15,12 @@
  *     `getBlobInternal`, which slice after fetch because GCS may ignore
  *     Range on small objects — see COMPAT row 55.
  */
-import { emitSandboxEvent, makeServiceMutationEvent } from 'pyric/sandbox/internal';
+import { emitSandboxEvent, getClock, makeServiceMutationEvent } from 'pyric/sandbox/internal';
 import { getStorageService, storageAuth, storageOperationProvenance, targetOf } from './service.js';
 import { enforceRules } from './enforce.js';
 import { resourceFromStored } from './sandbox/rules-resources.js';
 import { objectNotFound, invalidRootOperation } from './errors.js';
+import { arrayBufferToBase64 } from './base64.js';
 /**
  * Read the blob at `ref` and return its contents as an
  * `ArrayBuffer`. Honors the optional `maxDownloadSizeBytes` cap by
@@ -43,14 +44,25 @@ export async function getBlob(ref, maxDownloadSizeBytes) {
     return fetchBlob(ref, maxDownloadSizeBytes);
 }
 /**
- * Return a URL the current page can use to read the sandbox object. The URL is
- * created from the same rules-checked blob as {@link getBlob}. It is a
- * snapshot, cannot be shared outside the page, and stays
- * alive until the caller revokes it or the page unloads.
+ * Return a URL that reads the sandbox object, built from the same
+ * rules-checked blob as {@link getBlob}.
+ *
+ * The URL is a `data:<contentType>;base64,<payload>` URI: the object's bytes
+ * are carried inside the string itself. That makes it resolvable wherever the
+ * string travels (Node.js, an SSR render, a worker, a page) rather than only
+ * inside the realm that produced it. Production returns a token-signed HTTPS
+ * URL served by Google Cloud Storage instead; a consumer can rely on `fetch`
+ * of either form yielding the object's bytes and its content type.
+ *
+ * Objects stored without a content type read back as
+ * `application/octet-stream`.
  */
 export async function getDownloadURL(ref) {
     guardNonRoot(ref, 'getDownloadURL');
-    return URL.createObjectURL(await fetchBlob(ref, undefined));
+    const blob = await fetchBlob(ref, undefined);
+    const contentType = blob.type || 'application/octet-stream';
+    const base64 = arrayBufferToBase64(await blob.arrayBuffer());
+    return `data:${contentType};base64,${base64}`;
 }
 /**
  * Delete the object at `ref` — removes both the blob and the
@@ -84,6 +96,7 @@ export async function deleteObject(ref, provenance) {
     await service.backend.delete(ref.fullPath);
     try {
         emitSandboxEvent(target.sandbox, makeServiceMutationEvent({
+            at: getClock(target.sandbox).now(),
             service: 'storage',
             op: 'object_delete',
             path: ref.fullPath,

package/dist/storage/download.js.map

@@ -1 +1 @@
-{"version":3,"file":"download.js","sourceRoot":"","sources":["../../src/storage/download.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEpF,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGnE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAqB,EACrB,oBAA6B;IAE7B,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAqB,EACrB,oBAA6B;IAE7B,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7B,OAAO,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAqB;IACxD,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC,eAAe,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAqB,EACrB,UAA4B;IAE5B,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,YAAY,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE;YACP,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,GAAG,CAAC,QAAQ;SACnB;QACD,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KACvC,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAChC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,gBAAgB,CACd,MAAM,CAAC,OAAO,EACd,wBAAwB,CAAC;YACvB,OAAO,EAAE,SAAS;YAClB,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,QAAQ,IAAI,SAAS;YAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;SAC/B,CAAC,EACF,mBAAmB,CACpB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED,sEAAsE;AAEtE,KAAK,UAAU,SAAS,CACtB,GAAqB,EACrB,oBAAwC;IAExC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,gEAAgE;IAChE,iEAAiE;IACjE,8DAA8D;IAC9D,mEAAmE;IACnE,gEAAgE;IAChE,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,YAAY,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE;YACP,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG,CAAC,QAAQ;SACnB;QACD,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KACvC,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,oEAAoE;IACpE,gEAAgE;IAChE,4DAA4D;IAC5D,IACE,OAAO,oBAAoB,KAAK,QAAQ;QACxC,IAAI,CAAC,IAAI,GAAG,oBAAoB,EAChC,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,GAAqB,EAAE,EAAU;IACrD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}
+{"version":3,"file":"download.js","sourceRoot":"","sources":["../../src/storage/download.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAE9F,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGlD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAqB,EACrB,oBAA6B;IAE7B,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAqB,EACrB,oBAA6B;IAE7B,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7B,OAAO,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAqB;IACxD,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,IAAI,0BAA0B,CAAC;IAC5D,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,OAAO,QAAQ,WAAW,WAAW,MAAM,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAqB,EACrB,UAA4B;IAE5B,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,YAAY,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE;YACP,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,GAAG,CAAC,QAAQ;SACnB;QACD,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KACvC,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAChC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,gBAAgB,CACd,MAAM,CAAC,OAAO,EACd,wBAAwB,CAAC;YACvB,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE;YAClC,OAAO,EAAE,SAAS;YAClB,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,QAAQ,IAAI,SAAS;YAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;SAC/B,CAAC,EACF,mBAAmB,CACpB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED,sEAAsE;AAEtE,KAAK,UAAU,SAAS,CACtB,GAAqB,EACrB,oBAAwC;IAExC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,gEAAgE;IAChE,iEAAiE;IACjE,8DAA8D;IAC9D,mEAAmE;IACnE,gEAAgE;IAChE,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,YAAY,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE;YACP,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG,CAAC,QAAQ;SACnB;QACD,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KACvC,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,oEAAoE;IACpE,gEAAgE;IAChE,4DAA4D;IAC5D,IACE,OAAO,oBAAoB,KAAK,QAAQ;QACxC,IAAI,CAAC,IAAI,GAAG,oBAAoB,EAChC,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,GAAqB,EAAE,EAAU;IACrD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/storage/enforce.d.ts

@@ -1,7 +1,18 @@
-import type { EventProvenance } from 'pyric/sandbox';
-import { type StorageService, type Target } from './service.js';
+import type { EventProvenance, Sandbox } from 'pyric/sandbox';
+import { type CrossServiceIam, type StorageService, type Target } from './service.js';
 import type { EvaluationInput, FirestoreLookup } from './sandbox/rules.js';
 export declare function enforceRules(service: StorageService, input: EvaluationInput, target?: Target, provenance?: EventProvenance): void;
+/**
+ * The lookup one sandbox's Storage rules read `firestore.get()/exists()` from,
+ * under one IAM posture.
+ *
+ * Enforcement is not the only reader of it. A rules simulation asks the same
+ * question of the same ruleset without issuing the operation, and a simulation
+ * that built its own lookup, or none, would answer a cross-service rule
+ * differently from the operation it is meant to predict. So the construction
+ * lives here, once, and both paths call it.
+ */
+export declare function storageFirestoreLookup(sandbox: Sandbox, crossServiceIam: CrossServiceIam): FirestoreLookup;
 /**
  * The `crossServiceIam: 'denied'` lookup: every executed
  * `firestore.get()/exists()` throws a {@link RuleEvalError} naming the

package/dist/storage/enforce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enforce.d.ts","sourceRoot":"","sources":["../../src/storage/enforce.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,MAAM,EACZ,MAAM,cAAc,CAAC;AAGtB,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG3E,wBAAgB,YAAY,CAC1B,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,eAAe,EACtB,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,eAAe,GAC3B,IAAI,CAgCN;AA8FD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,IAAI,eAAe,CAW7D"}
+{"version":3,"file":"enforce.d.ts","sourceRoot":"","sources":["../../src/storage/enforce.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,MAAM,EACZ,MAAM,cAAc,CAAC;AAGtB,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG3E,wBAAgB,YAAY,CAC1B,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,eAAe,EACtB,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,eAAe,GAC3B,IAAI,CAoCN;AA0FD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,eAAe,EAAE,eAAe,GAC/B,eAAe,CAOjB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,IAAI,eAAe,CAW7D"}