pyric 0.1.0-alpha.21 → 0.1.0-alpha.24

package/dist/storage/sandbox/rules-methods.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules-methods.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-methods.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAgB,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,SAAS,EACT,iBAAiB,IAAI,YAAY,EACjC,WAAW,IAAI,KAAK,EACpB,UAAU,EAEV,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAE3B,kEAAkE;AAClE,mCAAmC;AACnC,kEAAkE;AAElE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,IAA2C,EAAE,GAAY;IACtF,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,IACE,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;QAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;QAChC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,EACjC,CAAC;QACD,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,sEAAsE;IACtE,0EAA0E;IAC1E,IACE,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;QAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;QAC/B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,EACjC,CAAC;QACD,OAAO,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,kDAAkD;IAClD,IACE,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;QAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;QAChC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,EACjC,CAAC;QACD,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,iEAAiE;IACjE,qEAAqE;IACrE,sEAAsE;IACtE,MAAM,IAAI,oBAAoB,CAAC,uBAAuB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,oBAAoB,CAC3B,IAA2C,EAC3C,GAAY;IAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtD,kEAAkE;QAClE,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QACzB,oEAAoE;QACpE,+CAA+C;QAC/C,MAAM,IAAI,aAAa,CACrB,aAAa,IAAI,CAAC,MAAM,uEAAuE,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,mEAAmE;QACnE,MAAM,IAAI,oBAAoB,CAAC,aAAa,IAAI,CAAC,MAAM,mCAAmC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,oBAAoB,CAAC,aAAa,IAAI,CAAC,MAAM,yDAAyD,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;YACpC,iEAAiE;YACjE,6DAA6D;YAC7D,gEAAgE;YAChE,MAAM,IAAI,sBAAsB,CAAC,iEAAiE,CAAC,CAAC;QACtG,CAAC;QACD,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,yEAAyE;QACzE,oEAAoE;QACpE,oEAAoE;QACpE,6DAA6D;QAC7D,OAAO,IAAI,SAAS,CAAC,oDAAoD,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,QAAyC,EACzC,GAAY;IAEZ,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC;QAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,aAAa,CACrB,4CAA4C,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,yEAAyE;IACzE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QAC7E,MAAM,IAAI,aAAa,CACrB,4EAA4E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CACrB,qEAAqE,KAAK,CAAC,CAAC,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,6EAA6E;IAC7E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,aAAa,CACrB,8EAA8E,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,oBAAoB,GAA2B;IACnD,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAC1B,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACtB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACjB,CAAC,EAAE,EAAE,GAAG,IAAI;IACZ,CAAC,EAAE,IAAI;IACP,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,IAAI;CACT,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,IAA2C,EAAE,GAAY;IACpF,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,wBAAwB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACpF,MAAM,IAAI,aAAa,CAAC,4DAA4D,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAwB,CAAC;IACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,aAAa,CACrB,sCAAsC,IAAI,uBAAuB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChH,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,GAAG,MAAM,CAAC;AAC5B,CAAC;AAED;yEACyE;AACzE,SAAS,oBAAoB,CAAC,IAA2C,EAAE,GAAY;IACrF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,aAAa,CAAC,iDAAiD,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,aAAa,CAAC,qDAAqD,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,IAAgC,CAAC;QACnD,0EAA0E;QAC1E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,yBAAyB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,WAAW,CAAC,IAA2C,EAAE,GAAY;IAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,6EAA6E;IAC7E,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,2CAA2C,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,6CAA6C,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;IAChE,CAAC;IACD,mEAAmE;IACnE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1B,MAAM,IAAI,aAAa,CACrB,wDAAwD,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,gCAAgC,CACjI,CAAC;IACJ,CAAC;IACD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,wEAAwE;QACxE,iCAAiC;QACjC,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,OAAO,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAA2C,EAAE,GAAY;IAC1E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,yCAAyC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,2CAA2C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1B,MAAM,IAAI,aAAa,CACrB,sDAAsD,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,gCAAgC,CAC/H,CAAC;IACJ,CAAC;IACD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,kCAAmC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,IAA2C,EAAE,GAAY;IACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC;IACjF,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC5D,MAAM,IAAI,aAAa,CAAC,sDAAsD,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACzG,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,IAA2C,EAAE,GAAY;IAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,aAAa,CAAC,qCAAqC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,qEAAqE;AACrE,SAAS,UAAU,CAAC,IAA2C,EAAE,GAAY;IAC3E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,+CAA+C,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,2CAA2C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,IAA2C,EAAE,GAAY;IAC3E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,aAAa,CAAC,oCAAoC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;QACvD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QACd,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC"}
+{"version":3,"file":"rules-methods.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-methods.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAgB,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEhF,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACrG,OAAO,EAAE,WAAW,IAAI,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAEzD,yEAAyE;AACzE,MAAM,UAAU,GAAyC,IAAI,GAAG,CAAC;IAC/D,CAAC,UAAU,EAAE,qBAAqB,CAAC;IACnC,CAAC,WAAW,EAAE,oBAAoB,CAAC;IACnC,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACjC,CAAC,WAAW,EAAE,sBAAsB,CAAC;CACtC,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,gBAAgB,GAAwC,oBAAoB,CAAC;IACjF,YAAY;IACZ,iBAAiB;IACjB,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,GAAY;IAC3D,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,oBAAoB,CAAC,uBAAuB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,sEAAsE;IACtE,uEAAuE;IACvE,kEAAkE;IAClE,IAAI,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,uFAAuF;AACvF,SAAS,gBAAgB,CAAC,IAAgB,EAAE,GAAY;IACtD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC/D,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,sFAAsF;AACtF,SAAS,oBAAoB,CAAC,OAAmC;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,uBAAuB,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/storage/sandbox/rules-operators.d.ts

@@ -0,0 +1,32 @@
+import { RuleError } from './rules-values.js';
+/**
+ * `value is <type>` check. Numbers use the RULES-B5 model: a `RulesFloat`
+ * wrapper is a FLOAT, a bare number is an INT — so `1.0 is float` and
+ * `!(1.0 is int)` type by literal form exactly as production does. A bare
+ * NON-integral number (a fractional value that arrived from data rather than
+ * a literal, e.g. a Firestore-lookup double) still reads as float. `number`
+ * accepts either. Timestamps, durations, and bytes are wrapper values that
+ * carry their type name.
+ */
+export declare function typeMatches(v: unknown, typeName: string): boolean | RuleError;
+/**
+ * True for a Timestamp, Duration, or Bytes value. These own their operators
+ * through `binaryOp`; floats are wrapper values too but take the numeric
+ * path with ints.
+ */
+export declare function isValueTypeOperand(v: unknown): boolean;
+/**
+ * A comparison or arithmetic operator with a Timestamp, Duration, or Bytes
+ * operand, dispatched to the left value's `binaryOp`. `+` also tries the
+ * right value, so `duration + timestamp` adds like `timestamp + duration`.
+ * An operand pair no value accepts is production's "Unsupported operation
+ * error" (captured for `timestamp < int`), an error value that denies.
+ */
+export declare function evalValueOperator(op: string, left: unknown, right: unknown): unknown;
+/** True for a float (RulesFloat); ints are bare numbers. */
+export declare function isFloatNum(v: unknown): boolean;
+export declare function cmp(a: unknown, b: unknown): number;
+/** Arithmetic over ints and floats: unwraps, computes, and RE-TAGS the result
+ *  as a float when either operand was one (int op float promotes to float). */
+export declare function numOp(a: unknown, b: unknown, fn: (x: number, y: number) => number): unknown;
+//# sourceMappingURL=rules-operators.d.ts.map

package/dist/storage/sandbox/rules-operators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-operators.d.ts","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-operators.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,SAAS,EAIV,MAAM,mBAAmB,CAAC;AAK3B;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAiB7E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAEtD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAYpF;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAE9C;AAED,wBAAgB,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,MAAM,CAOlD;AAED;+EAC+E;AAC/E,wBAAgB,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,OAAO,CAM3F"}

package/dist/storage/sandbox/rules-operators.js

@@ -0,0 +1,85 @@
+import { NO_OP, RulesValue } from '../../rules/simulator/wrappers/base.js';
+import { RulesFloat } from '../../rules/simulator/wrappers/float.js';
+import { RuleError, describeRulesType as describeType, isRulesMap, numericValue as numVal, } from './rules-values.js';
+/** The value types whose `is` test reads the value's own type name. */
+const VALUE_TYPE_NAMES = new Set(['timestamp', 'duration', 'bytes']);
+/**
+ * `value is <type>` check. Numbers use the RULES-B5 model: a `RulesFloat`
+ * wrapper is a FLOAT, a bare number is an INT — so `1.0 is float` and
+ * `!(1.0 is int)` type by literal form exactly as production does. A bare
+ * NON-integral number (a fractional value that arrived from data rather than
+ * a literal, e.g. a Firestore-lookup double) still reads as float. `number`
+ * accepts either. Timestamps, durations, and bytes are wrapper values that
+ * carry their type name.
+ */
+export function typeMatches(v, typeName) {
+    switch (typeName) {
+        case 'string': return typeof v === 'string';
+        case 'bool': return typeof v === 'boolean';
+        case 'int': return typeof v === 'number' && Number.isInteger(v);
+        case 'float': return v instanceof RulesFloat || (typeof v === 'number' && !Number.isInteger(v));
+        case 'number': return v instanceof RulesFloat || typeof v === 'number';
+        case 'list': return Array.isArray(v);
+        case 'map': return isRulesMap(v);
+    }
+    if (VALUE_TYPE_NAMES.has(typeName)) {
+        return v instanceof RulesValue && v.typeName === typeName;
+    }
+    // No capture pins `is` against path, latlng, set, or another type name, so
+    // the test cannot answer honestly: deny with a reason rather than
+    // false-allow.
+    return new RuleError(`'is ${typeName}' is not supported by the storage evaluator.`);
+}
+/**
+ * True for a Timestamp, Duration, or Bytes value. These own their operators
+ * through `binaryOp`; floats are wrapper values too but take the numeric
+ * path with ints.
+ */
+export function isValueTypeOperand(v) {
+    return v instanceof RulesValue && !(v instanceof RulesFloat);
+}
+/**
+ * A comparison or arithmetic operator with a Timestamp, Duration, or Bytes
+ * operand, dispatched to the left value's `binaryOp`. `+` also tries the
+ * right value, so `duration + timestamp` adds like `timestamp + duration`.
+ * An operand pair no value accepts is production's "Unsupported operation
+ * error" (captured for `timestamp < int`), an error value that denies.
+ */
+export function evalValueOperator(op, left, right) {
+    if (left instanceof RulesValue) {
+        const result = left.binaryOp(op, right);
+        if (result !== NO_OP)
+            return result;
+    }
+    if (op === '+' && right instanceof RulesValue) {
+        const result = right.binaryOp(op, left);
+        if (result !== NO_OP)
+            return result;
+    }
+    return new RuleError(`Unsupported operation error. Received: ${describeType(left)} ${op} ${describeType(right)}.`);
+}
+/** True for a float (RulesFloat); ints are bare numbers. */
+export function isFloatNum(v) {
+    return v instanceof RulesFloat;
+}
+export function cmp(a, b) {
+    const an = numVal(a);
+    const bn = numVal(b);
+    // CEL compares int and float by numeric value (`1 < 1.5` is well-typed).
+    if (an !== undefined && bn !== undefined)
+        return an - bn;
+    if (typeof a === 'string' && typeof b === 'string')
+        return a < b ? -1 : a > b ? 1 : 0;
+    return Number.NaN; // mismatched types → NaN → all comparisons return false
+}
+/** Arithmetic over ints and floats: unwraps, computes, and RE-TAGS the result
+ *  as a float when either operand was one (int op float promotes to float). */
+export function numOp(a, b, fn) {
+    const an = numVal(a);
+    const bn = numVal(b);
+    if (an === undefined || bn === undefined)
+        return undefined;
+    const result = fn(an, bn);
+    return isFloatNum(a) || isFloatNum(b) ? new RulesFloat(result) : result;
+}
+//# sourceMappingURL=rules-operators.js.map

package/dist/storage/sandbox/rules-operators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-operators.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-operators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AACrE,OAAO,EACL,SAAS,EACT,iBAAiB,IAAI,YAAY,EACjC,UAAU,EACV,YAAY,IAAI,MAAM,GACvB,MAAM,mBAAmB,CAAC;AAE3B,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAErE;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,QAAgB;IACtD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC;QAC5C,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,SAAS,CAAC;QAC3C,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAChE,KAAK,OAAO,CAAC,CAAC,OAAO,CAAC,YAAY,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,KAAK,QAAQ,CAAC,CAAC,OAAO,CAAC,YAAY,UAAU,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;QACvE,KAAK,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACrC,KAAK,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,YAAY,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC5D,CAAC;IACD,2EAA2E;IAC3E,kEAAkE;IAClE,eAAe;IACf,OAAO,IAAI,SAAS,CAAC,OAAO,QAAQ,8CAA8C,CAAC,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAU;IAC3C,OAAO,CAAC,YAAY,UAAU,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAU,EAAE,IAAa,EAAE,KAAc;IACzE,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC;IACtC,CAAC;IACD,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,SAAS,CAClB,0CAA0C,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAC7F,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,OAAO,CAAC,YAAY,UAAU,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAU,EAAE,CAAU;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,yEAAyE;IACzE,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACzD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,wDAAwD;AAC7E,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,KAAK,CAAC,CAAU,EAAE,CAAU,EAAE,EAAoC;IAChF,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1E,CAAC"}

package/dist/storage/sandbox/rules-string-methods.d.ts

@@ -0,0 +1,3 @@
+import { type ReceiverMethods } from './rules-method-calls.js';
+export declare const stringMethods: ReceiverMethods;
+//# sourceMappingURL=rules-string-methods.d.ts.map

package/dist/storage/sandbox/rules-string-methods.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-string-methods.d.ts","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-string-methods.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,eAAe,EACrB,MAAM,yBAAyB,CAAC;AAoMjC,eAAO,MAAM,aAAa,EAAE,eAQ3B,CAAC"}

package/dist/storage/sandbox/rules-string-methods.js

@@ -0,0 +1,199 @@
+import { Bytes } from '../../rules/simulator/wrappers/bytes.js';
+import { RuleEvalError } from './rules-evaluation-error.js';
+import { evalArguments, expectNoArguments, functionNotFound, } from './rules-method-calls.js';
+import { isRuleError as isErr } from './rules-values.js';
+/** The receiver as a string, or production's function-not-found error. */
+function stringReceiver(receiver, expr) {
+    if (typeof receiver !== 'string')
+        throw functionNotFound(expr.method);
+    return receiver;
+}
+/** The single string argument of `matches()` and `split()`. */
+function patternArgument(expr, ctx) {
+    if (expr.args.length !== 1) {
+        throw new RuleEvalError(`${expr.method}() expects a single pattern argument`);
+    }
+    const args = evalArguments(expr, ctx);
+    if (isErr(args))
+        return args;
+    const [pattern] = args;
+    if (typeof pattern !== 'string') {
+        throw new RuleEvalError(`${expr.method}() pattern must be a string`);
+    }
+    return pattern;
+}
+/**
+ * `string.matches(re)`: regex match anchored to the WHOLE string, mirroring
+ * production Storage (which anchors implicitly, so `'abc'.matches('a')` is
+ * FALSE).
+ *
+ * RE2-vs-JS divergence (honest note): production runs RE2, we compile the
+ * pattern with JavaScript's `RegExp`. JS RegExp is a superset of RE2:
+ * backreferences (`\1`) and lookaround (`(?=`, `(?!`, `(?<=`, `(?<!`) work in
+ * JS but are UNSUPPORTED in RE2 and would fail in production. To avoid ever
+ * false-allowing on a pattern production would reject, those constructs are
+ * detected up front and denied. Invalid patterns (that even JS won't compile)
+ * also deny. A non-string receiver denies too: production would error, and
+ * an error denies.
+ */
+function evalMatches(receiver, expr, ctx) {
+    const subject = stringReceiver(receiver, expr);
+    const pattern = patternArgument(expr, ctx);
+    if (typeof pattern !== 'string')
+        return pattern;
+    // Anchor to the whole string. `(?:...)` keeps the caller's alternations
+    // from binding past the anchors.
+    return compileRe2Pattern('matches', pattern, `^(?:${pattern})$`).test(subject);
+}
+/**
+ * Evaluate `string.split(re)`: RE2 regex split, the storage-rules idiom for
+ * segmenting object names (`fileId.split('-')[0:2]`). Shares matches()'s
+ * RE2-vs-JS guard: constructs RE2 rejects (backreferences, lookaround) deny
+ * with a reason rather than silently (mis)compiling under JS semantics.
+ */
+function evalSplit(receiver, expr, ctx) {
+    const subject = stringReceiver(receiver, expr);
+    const pattern = patternArgument(expr, ctx);
+    if (typeof pattern !== 'string')
+        return pattern;
+    return subject.split(compileRe2Pattern('split', pattern, pattern));
+}
+/**
+ * `string.replace(pattern, replacement)`: replaces every match of the RE2
+ * pattern. The replacement follows Java `Matcher` template rules, which
+ * rules-storage-stdlib-string-bytes-hashing captures: `$n` inserts group n,
+ * `${name}` a named group, and `\c` the character c. Any other `$` is an
+ * illegal group reference and an error; production's Rules Test API answers
+ * one with HTTP 500, so the error here denies rather than guessing a value.
+ */
+function evalReplace(receiver, expr, ctx) {
+    const subject = stringReceiver(receiver, expr);
+    const args = evalArguments(expr, ctx);
+    if (isErr(args))
+        return args;
+    const [pattern, replacement] = args;
+    if (args.length !== 2 || typeof pattern !== 'string' || typeof replacement !== 'string') {
+        throw new RuleEvalError(`replace() expects (pattern: string, replacement: string)`);
+    }
+    const regex = compileRe2Pattern('replace', pattern, pattern, 'g');
+    const groupCount = captureGroupCount(regex);
+    return subject.replace(regex, (...match) => {
+        const groups = match.slice(0, groupCount + 1);
+        return expandReplacement(replacement, groups, namedGroupsOf(match[match.length - 1]));
+    });
+}
+/** The named-groups object JavaScript passes last to a replacer, when the pattern has one. */
+function namedGroupsOf(lastReplacerArgument) {
+    if (typeof lastReplacerArgument === 'object' && lastReplacerArgument !== null) {
+        return lastReplacerArgument;
+    }
+    return {};
+}
+/** Number of capture groups in `regex`, read from a match of the empty alternative. */
+function captureGroupCount(regex) {
+    const probe = new RegExp(`${regex.source}|`).exec('');
+    return probe === null ? 0 : probe.length - 1;
+}
+/**
+ * Expand a Java `Matcher` replacement template. `groups[0]` is the whole
+ * match; a group that did not participate inserts nothing.
+ */
+function expandReplacement(template, groups, namedGroups) {
+    const groupCount = groups.length - 1;
+    let out = '';
+    let i = 0;
+    while (i < template.length) {
+        const char = template[i];
+        if (char === '\\') {
+            if (i + 1 >= template.length) {
+                throw new RuleEvalError('replace() replacement ends with an escape character');
+            }
+            out += template[i + 1];
+            i += 2;
+            continue;
+        }
+        if (char !== '$') {
+            out += char;
+            i += 1;
+            continue;
+        }
+        const next = template[i + 1];
+        if (next === '{') {
+            const close = template.indexOf('}', i + 2);
+            if (close === -1) {
+                throw new RuleEvalError(`replace() replacement has an unclosed group name: ${template.slice(i)}`);
+            }
+            const name = template.slice(i + 2, close);
+            if (!Object.hasOwn(namedGroups, name)) {
+                throw new RuleEvalError(`replace() replacement names no group: ${template.slice(i, close + 1)}`);
+            }
+            out += namedGroups[name] ?? '';
+            i = close + 1;
+            continue;
+        }
+        if (next === undefined || next < '0' || next > '9') {
+            throw new RuleEvalError(`replace() replacement has an illegal group reference: ${template.slice(i)}`);
+        }
+        // Java reads the longest digit run that still names an existing group.
+        let group = Number(next);
+        let end = i + 2;
+        while (end < template.length && template[end] >= '0' && template[end] <= '9') {
+            const longer = group * 10 + Number(template[end]);
+            if (longer > groupCount)
+                break;
+            group = longer;
+            end += 1;
+        }
+        if (group > groupCount) {
+            throw new RuleEvalError(`replace() replacement names group ${group}, but the pattern has ${groupCount}`);
+        }
+        out += groups[group] ?? '';
+        i = end;
+    }
+    return out;
+}
+/** `string.lower()`, `upper()`, and `trim()`. */
+function evalCaseAndTrim(receiver, expr) {
+    const subject = stringReceiver(receiver, expr);
+    expectNoArguments(expr);
+    if (expr.method === 'lower')
+        return subject.toLowerCase();
+    if (expr.method === 'upper')
+        return subject.toUpperCase();
+    return subject.trim();
+}
+/** `string.toUtf8()`: the string's UTF-8 encoding as Bytes. */
+function evalToUtf8(receiver, expr) {
+    const subject = stringReceiver(receiver, expr);
+    expectNoArguments(expr);
+    return Bytes.fromUtf8(subject);
+}
+/**
+ * Compile a rules regular expression with JavaScript's `RegExp`. `pattern`
+ * is the caller's RE2 pattern, checked for the constructs JS accepts and RE2
+ * rejects (backreferences, lookaround); `source` is what compiles, which is
+ * `pattern` itself or an anchored wrapper around it.
+ */
+function compileRe2Pattern(method, pattern, source, flags) {
+    const backref = /\\[1-9]/.test(pattern);
+    const lookaround = /\(\?<?[=!]/.test(pattern);
+    if (backref || lookaround) {
+        throw new RuleEvalError(`${method}() pattern uses an RE2-unsupported construct (${backref ? 'backreference' : 'lookaround'}) that production would reject`);
+    }
+    try {
+        return new RegExp(source, flags);
+    }
+    catch (err) {
+        throw new RuleEvalError(`${method}() invalid regex pattern: ${err.message}`);
+    }
+}
+export const stringMethods = {
+    lower: evalCaseAndTrim,
+    matches: evalMatches,
+    replace: evalReplace,
+    split: evalSplit,
+    toUtf8: evalToUtf8,
+    trim: evalCaseAndTrim,
+    upper: evalCaseAndTrim,
+};
+//# sourceMappingURL=rules-string-methods.js.map

package/dist/storage/sandbox/rules-string-methods.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-string-methods.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-string-methods.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,yCAAyC,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,IAAI,KAAK,EAAkB,MAAM,mBAAmB,CAAC;AAEzE,0EAA0E;AAC1E,SAAS,cAAc,CAAC,QAAiB,EAAE,IAAgB;IACzD,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,SAAS,eAAe,CAAC,IAAgB,EAAE,GAAY;IACrD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,CAAC,MAAM,sCAAsC,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACvB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,CAAC,MAAM,6BAA6B,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,WAAW,CAAC,QAAiB,EAAE,IAAgB,EAAE,GAAY;IACpE,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,wEAAwE;IACxE,iCAAiC;IACjC,OAAO,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACjF,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,QAAiB,EAAE,IAAgB,EAAE,GAAY;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,QAAiB,EAAE,IAAgB,EAAE,GAAY;IACpE,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACxF,MAAM,IAAI,aAAa,CAAC,0DAA0D,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,KAAgB,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAA8B,CAAC;QAC3E,OAAO,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8FAA8F;AAC9F,SAAS,aAAa,CAAC,oBAA6B;IAClD,IAAI,OAAO,oBAAoB,KAAK,QAAQ,IAAI,oBAAoB,KAAK,IAAI,EAAE,CAAC;QAC9E,OAAO,oBAA0D,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,uFAAuF;AACvF,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CACxB,QAAgB,EAChB,MAAyC,EACzC,WAAyD;IAEzD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,IAAI,aAAa,CAAC,qDAAqD,CAAC,CAAC;YACjF,CAAC;YACD,GAAG,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,GAAG,IAAI,IAAI,CAAC;YACZ,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,aAAa,CAAC,qDAAqD,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,aAAa,CAAC,yCAAyC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;YACnD,MAAM,IAAI,aAAa,CAAC,yDAAyD,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,uEAAuE;QACvE,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,GAAG,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;YAC7E,MAAM,MAAM,GAAG,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,IAAI,MAAM,GAAG,UAAU;gBAAE,MAAM;YAC/B,KAAK,GAAG,MAAM,CAAC;YACf,GAAG,IAAI,CAAC,CAAC;QACX,CAAC;QACD,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,aAAa,CAAC,qCAAqC,KAAK,yBAAyB,UAAU,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,GAAG,GAAG,CAAC;IACV,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iDAAiD;AACjD,SAAS,eAAe,CAAC,QAAiB,EAAE,IAAgB;IAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,+DAA+D;AAC/D,SAAS,UAAU,CAAC,QAAiB,EAAE,IAAgB;IACrD,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,OAAe,EAAE,MAAc,EAAE,KAAc;IACxF,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1B,MAAM,IAAI,aAAa,CACrB,GAAG,MAAM,iDAAiD,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,gCAAgC,CACnI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,GAAG,MAAM,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE,WAAW;IACpB,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,eAAe;CACvB,CAAC"}

package/dist/storage/sandbox/rules-time-methods.d.ts

@@ -0,0 +1,25 @@
+import type { EvalCtx } from './rules-evaluator.js';
+import { type MethodCall, type ReceiverMethods } from './rules-method-calls.js';
+/**
+ * `timestamp.date(year, month, day)` (UTC midnight, 1-based month) and
+ * `timestamp.value(epochMillis)`, both returning a Timestamp that compares
+ * with `request.time` and the resource time fields.
+ */
+export declare function evalTimestampNamespace(expr: MethodCall, ctx: EvalCtx): unknown;
+/**
+ * `duration.value(magnitude, unit)`, `duration.time(hours, minutes, seconds,
+ * nanos)`, and `duration.abs(duration)`, each returning a Duration. A
+ * timestamp plus a duration is a timestamp, which is the freshness idiom
+ * production accepts:
+ *
+ *   request.time < resource.timeCreated + duration.value(1, 'h')
+ */
+export declare function evalDurationNamespace(expr: MethodCall, ctx: EvalCtx): unknown;
+/**
+ * The Timestamp accessors and the Duration `seconds()`/`nanos()`, answered
+ * by the value itself. On a timestamp, `seconds()` and `nanos()` are the
+ * seconds of the minute and the nanoseconds of the second; `toMillis()` is
+ * the epoch value.
+ */
+export declare const timeMethods: ReceiverMethods;
+//# sourceMappingURL=rules-time-methods.d.ts.map

package/dist/storage/sandbox/rules-time-methods.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-time-methods.d.ts","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-time-methods.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,eAAe,EACrB,MAAM,yBAAyB,CAAC;AAMjC;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAiB9E;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CA6B7E;AAED;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,eAazB,CAAC"}

package/dist/storage/sandbox/rules-time-methods.js

@@ -0,0 +1,89 @@
+import { Duration } from '../../rules/simulator/wrappers/duration.js';
+import { Timestamp } from '../../rules/simulator/wrappers/timestamp.js';
+import { RuleEvalError } from './rules-evaluation-error.js';
+import { evalArguments, evalValueMethod, } from './rules-method-calls.js';
+import { isRuleError as isErr } from './rules-values.js';
+/** The units `duration.value(magnitude, unit)` accepts, per the rules language. */
+const DURATION_UNITS = ['w', 'd', 'h', 'm', 's', 'ms', 'ns'];
+/**
+ * `timestamp.date(year, month, day)` (UTC midnight, 1-based month) and
+ * `timestamp.value(epochMillis)`, both returning a Timestamp that compares
+ * with `request.time` and the resource time fields.
+ */
+export function evalTimestampNamespace(expr, ctx) {
+    const args = evalArguments(expr, ctx);
+    if (isErr(args))
+        return args;
+    if (expr.method === 'value') {
+        if (args.length !== 1 || typeof args[0] !== 'number') {
+            throw new RuleEvalError(`timestamp.value() expects (epochMillis: number)`);
+        }
+        return Timestamp.fromMillis(args[0]);
+    }
+    if (expr.method === 'date') {
+        if (args.length !== 3 || !args.every((a) => typeof a === 'number')) {
+            throw new RuleEvalError(`timestamp.date() expects (year, month, day) numbers`);
+        }
+        const [year, month, day] = args;
+        return Timestamp.fromYMD(year, month, day);
+    }
+    throw new RuleEvalError(`unsupported timestamp.${expr.method}()`);
+}
+/**
+ * `duration.value(magnitude, unit)`, `duration.time(hours, minutes, seconds,
+ * nanos)`, and `duration.abs(duration)`, each returning a Duration. A
+ * timestamp plus a duration is a timestamp, which is the freshness idiom
+ * production accepts:
+ *
+ *   request.time < resource.timeCreated + duration.value(1, 'h')
+ */
+export function evalDurationNamespace(expr, ctx) {
+    const args = evalArguments(expr, ctx);
+    if (isErr(args))
+        return args;
+    if (expr.method === 'value') {
+        if (args.length !== 2 || typeof args[0] !== 'number' || typeof args[1] !== 'string') {
+            throw new RuleEvalError(`duration.value() expects (magnitude: number, unit: string)`);
+        }
+        const [magnitude, unit] = args;
+        if (!DURATION_UNITS.includes(unit)) {
+            throw new RuleEvalError(`duration.value() got unknown unit "${unit}", expected one of ${DURATION_UNITS.join(', ')}`);
+        }
+        return Duration.fromValue(magnitude, unit);
+    }
+    if (expr.method === 'time') {
+        if (args.length !== 4 || !args.every((a) => typeof a === 'number')) {
+            throw new RuleEvalError(`duration.time() expects (hours, minutes, seconds, nanos) numbers`);
+        }
+        const [hours, minutes, seconds, nanos] = args;
+        return Duration.fromTime(hours, minutes, seconds, nanos);
+    }
+    if (expr.method === 'abs') {
+        if (args.length !== 1 || !(args[0] instanceof Duration)) {
+            throw new RuleEvalError(`duration.abs() expects a single duration`);
+        }
+        return Duration.abs(args[0]);
+    }
+    throw new RuleEvalError(`unsupported duration.${expr.method}()`);
+}
+/**
+ * The Timestamp accessors and the Duration `seconds()`/`nanos()`, answered
+ * by the value itself. On a timestamp, `seconds()` and `nanos()` are the
+ * seconds of the minute and the nanoseconds of the second; `toMillis()` is
+ * the epoch value.
+ */
+export const timeMethods = {
+    date: evalValueMethod,
+    day: evalValueMethod,
+    dayOfWeek: evalValueMethod,
+    dayOfYear: evalValueMethod,
+    hours: evalValueMethod,
+    minutes: evalValueMethod,
+    month: evalValueMethod,
+    nanos: evalValueMethod,
+    seconds: evalValueMethod,
+    time: evalValueMethod,
+    toMillis: evalValueMethod,
+    year: evalValueMethod,
+};
+//# sourceMappingURL=rules-time-methods.js.map

package/dist/storage/sandbox/rules-time-methods.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-time-methods.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-time-methods.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,4CAA4C,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,6CAA6C,CAAC;AAExE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,eAAe,GAGhB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,IAAI,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAEzD,mFAAmF;AACnF,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE7D;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAgB,EAAE,GAAY;IACnE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,aAAa,CAAC,iDAAiD,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,aAAa,CAAC,qDAAqD,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,IAAgC,CAAC;QAC5D,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,yBAAyB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAgB,EAAE,GAAY;IAClE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpF,MAAM,IAAI,aAAa,CAAC,4DAA4D,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAwB,CAAC;QACnD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CACrB,sCAAsC,IAAI,sBAAsB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,aAAa,CAAC,kEAAkE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,IAAwC,CAAC;QAClF,OAAO,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,aAAa,CAAC,0CAA0C,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,wBAAwB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAoB;IAC1C,IAAI,EAAE,eAAe;IACrB,GAAG,EAAE,eAAe;IACpB,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAC1B,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,eAAe;IACxB,KAAK,EAAE,eAAe;IACtB,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,eAAe;IACxB,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,eAAe;IACzB,IAAI,EAAE,eAAe;CACtB,CAAC"}

package/dist/storage/sandbox/rules-values.d.ts

@@ -7,6 +7,12 @@ export declare function isRuleError(value: unknown): value is RuleError;
 export declare function numericValue(value: unknown): number | undefined;
 /** A Rules map is a plain key/value record, never a boxed scalar/wrapper. */
 export declare function isRulesMap(value: unknown): value is Record<string, unknown>;
+/**
+ * Rules value equality. Numbers compare int-to-float by value, lists and maps
+ * compare structurally over own keys, and Timestamp, Duration, Bytes, and Set
+ * values own their equality.
+ */
 export declare function rulesEquals(left: unknown, right: unknown): boolean;
+/** The Rules type name of a value, as production's error messages spell it. */
 export declare function describeRulesType(value: unknown): string;
 //# sourceMappingURL=rules-values.d.ts.map

package/dist/storage/sandbox/rules-values.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules-values.d.ts","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-values.ts"],"names":[],"mappings":"AAEA,0FAA0F;AAC1F,qBAAa,SAAS;IACR,QAAQ,CAAC,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CACrC;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI/D;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI3E;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAmBlE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKxD"}
+{"version":3,"file":"rules-values.d.ts","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-values.ts"],"names":[],"mappings":"AAKA,0FAA0F;AAC1F,qBAAa,SAAS;IACR,QAAQ,CAAC,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CACrC;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI/D;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI3E;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAuBlE;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAWxD"}

package/dist/storage/sandbox/rules-values.js

@@ -1,3 +1,6 @@
+import { FirestoreSet } from '../../rules/simulator/firestore-set.js';
+import { MapDiff } from '../../rules/simulator/mapdiff.js';
+import { RulesValue } from '../../rules/simulator/wrappers/base.js';
 import { RulesFloat } from '../../rules/simulator/wrappers/float.js';
 /** Error value that propagates through an expression and denies at the allow boundary. */
 export class RuleError {
@@ -23,6 +26,11 @@ export function isRulesMap(value) {
     const prototype = Object.getPrototypeOf(value);
     return prototype === Object.prototype || prototype === null;
 }
+/**
+ * Rules value equality. Numbers compare int-to-float by value, lists and maps
+ * compare structurally over own keys, and Timestamp, Duration, Bytes, and Set
+ * values own their equality.
+ */
 export function rulesEquals(left, right) {
     if (left === right)
         return true;
@@ -32,6 +40,12 @@ export function rulesEquals(left, right) {
     const rightNumber = numericValue(right);
     if (leftNumber !== undefined && rightNumber !== undefined)
         return leftNumber === rightNumber;
+    // A wrapper equals only a value of its own type. With a wrapper on the
+    // right alone, no branch below matches and the result is false.
+    if (left instanceof RulesValue)
+        return left.equals(right);
+    if (left instanceof FirestoreSet)
+        return left.equals(right);
     if (Array.isArray(left) && Array.isArray(right)) {
         return left.length === right.length && left.every((value, index) => rulesEquals(value, right[index]));
     }
@@ -43,13 +57,26 @@ export function rulesEquals(left, right) {
     }
     return false;
 }
+/** The Rules type name of a value, as production's error messages spell it. */
 export function describeRulesType(value) {
     if (value === null)
         return 'null';
     if (value === undefined)
         return 'undefined';
-    if (value instanceof RulesFloat)
-        return 'float';
+    if (value instanceof RulesValue)
+        return value.typeName;
+    if (value instanceof FirestoreSet)
+        return 'set';
+    if (value instanceof MapDiff)
+        return 'map_diff';
+    if (typeof value === 'number')
+        return Number.isInteger(value) ? 'int' : 'float';
+    if (typeof value === 'boolean')
+        return 'bool';
+    if (Array.isArray(value))
+        return 'list';
+    if (isRulesMap(value))
+        return 'map';
     return typeof value;
 }
 //# sourceMappingURL=rules-values.js.map

package/dist/storage/sandbox/rules-values.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules-values.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-values.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AAErE,0FAA0F;AAC1F,MAAM,OAAO,SAAS;IACC;IAArB,YAAqB,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;CACzC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,SAAS,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IACpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,KAAc;IACvD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC;IACxE,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,UAAU,KAAK,WAAW,CAAC;IAC7F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAC3D,CAAC,GAAG,EAAE,EAAE,CACN,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;YAChD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC5C,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC"}
+{"version":3,"file":"rules-values.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-values.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AAErE,0FAA0F;AAC1F,MAAM,OAAO,SAAS;IACC;IAArB,YAAqB,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;CACzC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,SAAS,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IACpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,KAAc;IACvD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC;IACxE,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,UAAU,KAAK,WAAW,CAAC;IAC7F,uEAAuE;IACvE,gEAAgE;IAChE,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,IAAI,YAAY,YAAY;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAC3D,CAAC,GAAG,EAAE,EAAE,CACN,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;YAChD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC5C,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;IACvD,IAAI,KAAK,YAAY,YAAY;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,KAAK,YAAY,OAAO;QAAE,OAAO,UAAU,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IAChF,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC"}