@pyric/cli 0.1.0-alpha.10

package/dist/bridge/server/bridge.js

@@ -0,0 +1,383 @@
+/**
+ * Bridge core — process-local state for forwarding MCP tool calls
+ * from external clients to the (one) connected sandbox peer in the
+ * browser. Transport-agnostic: the HTTP MCP server and the WS server
+ * both plug into this through `dispatch()` / `handleSandboxMessage()`
+ * / `registerSandboxPeer()`.
+ *
+ * Multi-tab is naive: last-connection-wins. New peer replaces the
+ * old, pending calls against the old peer reject with a clear error.
+ *
+ * Every tool call is forwarded over WS to the browser. The bridge does not
+ * execute data-plane tools itself; it acts as a relay with a tool-name
+ * allow-list pinned by the peer's `hello`.
+ */
+import { randomUUID } from 'node:crypto';
+import { NO_SANDBOX_ERROR_MESSAGE, NO_WORKER_RELAY_ERROR_MESSAGE, WORKER_RELAY_CAPABILITY, } from '../protocol.js';
+/** Build the typed Error worker-op rejections carry. `denialContext` (spike
+ *  gap 6) is re-attached when the wire error carried one, so the structured
+ *  denial frame survives the bridge hop. */
+function workerOpError(code, message, denialContext) {
+    const err = new Error(message);
+    err.code = code;
+    if (denialContext !== undefined)
+        err.denialContext = denialContext;
+    return err;
+}
+export function createBridge(opts) {
+    const project = opts.project ?? 'sandbox';
+    const version = opts.version;
+    const callTimeoutMs = opts.callTimeoutMs ?? 30_000;
+    const startedAt = new Date().toISOString();
+    // Per-process identity (see HealthReport.instanceId): the discovery pointer
+    // records this so a proxy can verify it reached THIS server, not a different
+    // sandbox squatting the same port on the other loopback family.
+    const instanceId = randomUUID();
+    const onToolEvent = opts.onToolEvent;
+    let peer = null;
+    const pending = new Map();
+    // ── worker relay state ──
+    // Generation counter: bumped on every peer registration. Inbound frames
+    // tagged with an older generation are stale (a replaced tab's socket) and
+    // must not resolve ops / deliver snaps registered under the new peer.
+    let generation = 0;
+    const workerPending = new Map();
+    // Subscription ownership lives on the bridge: entries survive peer churn
+    // and are re-issued to every newly registered relay-capable peer.
+    const workerSubs = new Map();
+    function failAllPending(reason) {
+        for (const call of pending.values()) {
+            clearTimeout(call.timer);
+            call.resolve({
+                ok: false,
+                summary: reason,
+            });
+        }
+        pending.clear();
+        for (const op of workerPending.values()) {
+            clearTimeout(op.timer);
+            op.reject(workerOpError('unavailable', reason));
+        }
+        workerPending.clear();
+    }
+    function peerHasRelay() {
+        return peer !== null && peer.capabilities.has(WORKER_RELAY_CAPABILITY);
+    }
+    function registerSandboxPeer(send, tools, sandboxId, capabilities = [], onReplaced) {
+        if (peer) {
+            // Last-wins: kick the old peer and reject its pending calls.
+            failAllPending('sandbox peer replaced by a newer connection');
+            // Tear the old peer down (the transport closes its socket). The
+            // browser's close handler tears down its relayed worker
+            // subscriptions — otherwise the replaced tab's SharedWorker
+            // listeners would keep posting snaps this bridge drops as
+            // stale-generation until the tab closed.
+            try {
+                peer.onReplaced?.();
+            }
+            catch {
+                // A failing transport hook must not block the new registration.
+            }
+        }
+        generation += 1;
+        const myPeer = {
+            send,
+            tools: new Set(tools),
+            sandboxId,
+            capabilities: new Set(capabilities),
+            onReplaced,
+        };
+        peer = myPeer;
+        // Re-issue every registered worker subscription to the new peer — the
+        // replay is cursor-free because each (re)subscribe delivers a fresh
+        // initial snapshot. That snapshot is a DUPLICATE whenever nothing
+        // changed while the peer churned, so `awaitingReissueSnap` arms the
+        // per-sub dedup (see WorkerSubEntry) — without it, tabs cycling through
+        // last-wins registration re-fire every consumer listener with
+        // byte-identical data on every registration.
+        if (myPeer.capabilities.has(WORKER_RELAY_CAPABILITY)) {
+            for (const [subId, entry] of workerSubs) {
+                entry.awaitingReissueSnap = true;
+                try {
+                    myPeer.send({ type: 'worker-sub', subId, sub: entry.sub });
+                }
+                catch {
+                    // Socket failure surfaces via the transport's close handler.
+                }
+            }
+        }
+        return () => {
+            if (peer === myPeer) {
+                failAllPending(NO_SANDBOX_ERROR_MESSAGE);
+                peer = null;
+            }
+        };
+    }
+    function isSandboxConnected() {
+        return peer !== null;
+    }
+    function peerGeneration() {
+        return generation;
+    }
+    function toolNames() {
+        return peer ? Array.from(peer.tools).sort() : [];
+    }
+    async function dispatch(name, args) {
+        const startedAtMs = Date.now();
+        let result;
+        try {
+            result = await dispatchSandbox(name, args);
+        }
+        catch (err) {
+            result = {
+                ok: false,
+                summary: err instanceof Error ? err.message : String(err),
+            };
+        }
+        if (onToolEvent) {
+            try {
+                onToolEvent({
+                    timestamp: new Date(startedAtMs).toISOString(),
+                    mode: 'sandbox',
+                    project,
+                    tool: name,
+                    args,
+                    result,
+                    durationMs: Date.now() - startedAtMs,
+                });
+            }
+            catch {
+                // Audit-log failures must not break tool dispatch.
+            }
+        }
+        return result;
+    }
+    function dispatchSandbox(name, args) {
+        if (!peer) {
+            return Promise.resolve({ ok: false, summary: NO_SANDBOX_ERROR_MESSAGE });
+        }
+        if (!peer.tools.has(name)) {
+            return Promise.resolve({
+                ok: false,
+                summary: `tool '${name}' is not registered with the connected sandbox peer`,
+            });
+        }
+        return new Promise((resolve) => {
+            const id = randomUUID();
+            const timer = setTimeout(() => {
+                if (pending.has(id)) {
+                    pending.delete(id);
+                    resolve({
+                        ok: false,
+                        summary: `sandbox call timed out after ${callTimeoutMs}ms (tool: ${name})`,
+                    });
+                }
+            }, callTimeoutMs);
+            pending.set(id, { id, resolve, timer, tool: name });
+            try {
+                peer.send({
+                    type: 'tool-call',
+                    id,
+                    name,
+                    args,
+                });
+            }
+            catch (err) {
+                clearTimeout(timer);
+                pending.delete(id);
+                resolve({
+                    ok: false,
+                    summary: `failed to send tool call to sandbox: ${err instanceof Error ? err.message : String(err)}`,
+                });
+            }
+        });
+    }
+    function dispatchWorkerOp(op) {
+        if (!peer) {
+            return Promise.reject(workerOpError('unavailable', NO_SANDBOX_ERROR_MESSAGE));
+        }
+        if (!peerHasRelay()) {
+            return Promise.reject(workerOpError('unimplemented', NO_WORKER_RELAY_ERROR_MESSAGE));
+        }
+        return new Promise((resolve, reject) => {
+            const id = randomUUID();
+            const timer = setTimeout(() => {
+                if (workerPending.has(id)) {
+                    workerPending.delete(id);
+                    reject(workerOpError('deadline-exceeded', `sandbox worker op timed out after ${callTimeoutMs}ms (op: ${op.method})`));
+                }
+            }, callTimeoutMs);
+            workerPending.set(id, { resolve, reject, timer, method: op.method });
+            try {
+                peer.send({ type: 'worker-op', id, op });
+            }
+            catch (err) {
+                clearTimeout(timer);
+                workerPending.delete(id);
+                reject(workerOpError('unavailable', `failed to send worker op to sandbox: ${err instanceof Error ? err.message : String(err)}`));
+            }
+        });
+    }
+    function subscribeWorker(sub, onSnap) {
+        const subId = randomUUID();
+        workerSubs.set(subId, { sub, onSnap });
+        if (peerHasRelay()) {
+            try {
+                peer.send({ type: 'worker-sub', subId, sub });
+            }
+            catch {
+                // Socket failure surfaces via the transport's close handler; the
+                // registry entry replays on the next peer registration.
+            }
+        }
+        // No peer (or a relay-less peer) is NOT an error here: the registry is
+        // replayed on the next registration, mirroring RTDB's offline semantics.
+        return () => {
+            if (!workerSubs.delete(subId))
+                return;
+            if (peerHasRelay()) {
+                try {
+                    peer.send({ type: 'worker-unsub', subId });
+                }
+                catch { }
+            }
+        };
+    }
+    function handleSandboxMessage(msg, msgGeneration) {
+        // Frames from a REPLACED peer's socket must not act on the current
+        // peer's state (subscriptions make stale delivery likely on tab
+        // refresh: the old tab's worker port keeps firing until its WS dies).
+        const stale = msgGeneration !== undefined && msgGeneration !== generation;
+        switch (msg.type) {
+            case 'worker-res': {
+                if (stale)
+                    return;
+                const res = msg;
+                const op = workerPending.get(res.id);
+                if (!op)
+                    return; // late or unknown — drop silently
+                clearTimeout(op.timer);
+                workerPending.delete(res.id);
+                if (res.ok) {
+                    op.resolve(res.value);
+                }
+                else {
+                    op.reject(workerOpError(res.error?.code ?? 'unknown', res.error?.message ?? 'unknown sandbox error', res.error?.denialContext));
+                }
+                return;
+            }
+            case 'worker-snap': {
+                if (stale)
+                    return;
+                const snap = msg;
+                const entry = workerSubs.get(snap.subId);
+                if (!entry)
+                    return; // unsubscribed or unknown — drop silently
+                // Re-issue dedup (see WorkerSubEntry.awaitingReissueSnap): the first
+                // snap after a peer (re)registration is the re-established listener's
+                // initial snapshot — suppress it when byte-identical to what the
+                // consumer already holds. Values are JSON-clean (they crossed the WS
+                // legs) and produced by the same serializer each time, so string
+                // equality is exact. One-frame window: the flag clears on the first
+                // snap either way, keeping steady-state delivery 1:1.
+                const json = JSON.stringify(snap.value);
+                const duplicate = entry.awaitingReissueSnap === true && json === entry.lastDeliveredJson;
+                entry.awaitingReissueSnap = false;
+                entry.lastDeliveredJson = json;
+                if (duplicate)
+                    return;
+                try {
+                    entry.onSnap(snap.value);
+                }
+                catch {
+                    // Consumer callback failures must not break the relay loop.
+                }
+                return;
+            }
+            default:
+                break;
+        }
+        switch (msg.type) {
+            case 'tool-result': {
+                const response = msg;
+                const call = pending.get(response.id);
+                if (!call)
+                    return; // late or unknown — drop silently
+                clearTimeout(call.timer);
+                pending.delete(response.id);
+                if (response.ok && response.result) {
+                    call.resolve({
+                        ok: response.result.ok,
+                        summary: response.result.summary,
+                        data: response.result.data,
+                    });
+                }
+                else {
+                    const error = response.error;
+                    call.resolve({
+                        ok: false,
+                        summary: error?.message ?? 'unknown sandbox error',
+                    });
+                }
+                break;
+            }
+            case 'pong': {
+                // Keepalive ack; no-op.
+                break;
+            }
+            case 'ping': {
+                // Browser-initiated ping; echo back.
+                if (peer) {
+                    peer.send({ type: 'pong', id: msg.id });
+                }
+                break;
+            }
+            case 'hello': {
+                // Re-hello after reconnect would arrive here, but the
+                // registration path is owned by the transport layer (it sees
+                // the WS first). Ignore.
+                break;
+            }
+            default:
+                break;
+        }
+    }
+    function health() {
+        return {
+            status: 'ok',
+            mode: 'sandbox',
+            project,
+            sandboxConnected: peer !== null,
+            version,
+            startedAt,
+            instanceId,
+        };
+    }
+    function recordToolEvent(event) {
+        if (!onToolEvent)
+            return;
+        try {
+            onToolEvent(event);
+        }
+        catch {
+            // Audit-log failures must not break tool dispatch.
+        }
+    }
+    return {
+        project,
+        version,
+        startedAt,
+        instanceId,
+        recordToolEvent,
+        registerSandboxPeer,
+        isSandboxConnected,
+        peerGeneration,
+        toolNames,
+        dispatch,
+        dispatchWorkerOp,
+        subscribeWorker,
+        handleSandboxMessage,
+        health,
+    };
+}
+//# sourceMappingURL=bridge.js.map

package/dist/bridge/server/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/bridge/server/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUzC,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AA4KxB;;4CAE4C;AAC5C,SAAS,aAAa,CACpB,IAAY,EACZ,OAAe,EACf,aAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAsD,CAAC;IACpF,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,aAAa,KAAK,SAAS;QAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;IACnE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAmB;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,4EAA4E;IAC5E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAErC,IAAI,IAAI,GAAsB,IAAI,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,2BAA2B;IAC3B,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,aAAa,GAAG,IAAI,GAAG,EAA2B,CAAC;IACzD,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IAErD,SAAS,cAAc,CAAC,MAAc;QACpC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC;gBACX,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YACxC,YAAY,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACvB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,aAAa,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,SAAS,YAAY;QACnB,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACzE,CAAC;IAED,SAAS,mBAAmB,CAC1B,IAAgB,EAChB,KAAe,EACf,SAAiB,EACjB,eAAyB,EAAE,EAC3B,UAAuB;QAEvB,IAAI,IAAI,EAAE,CAAC;YACT,6DAA6D;YAC7D,cAAc,CAAC,6CAA6C,CAAC,CAAC;YAC9D,gEAAgE;YAChE,wDAAwD;YACxD,4DAA4D;YAC5D,0DAA0D;YAC1D,yCAAyC;YACzC,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;QACH,CAAC;QACD,UAAU,IAAI,CAAC,CAAC;QAChB,MAAM,MAAM,GAAe;YACzB,IAAI;YACJ,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC;YACrB,SAAS;YACT,YAAY,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC;YACnC,UAAU;SACX,CAAC;QACF,IAAI,GAAG,MAAM,CAAC;QACd,sEAAsE;QACtE,oEAAoE;QACpE,kEAAkE;QAClE,oEAAoE;QACpE,wEAAwE;QACxE,8DAA8D;QAC9D,6CAA6C;QAC7C,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACrD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;gBACxC,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,6DAA6D;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,EAAE;YACV,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,cAAc,CAAC,wBAAwB,CAAC,CAAC;gBACzC,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,SAAS,kBAAkB;QACzB,OAAO,IAAI,KAAK,IAAI,CAAC;IACvB,CAAC;IAED,SAAS,cAAc;QACrB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,SAAS,SAAS;QAChB,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,UAAU,QAAQ,CACrB,IAAY,EACZ,IAA6B;QAE7B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG;gBACP,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC1D,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,WAAW,CAAC;oBACV,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;oBAC9C,IAAI,EAAE,SAAS;oBACf,OAAO;oBACP,IAAI,EAAE,IAAI;oBACV,IAAI;oBACJ,MAAM;oBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;iBACrC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,eAAe,CACtB,IAAY,EACZ,IAA6B;QAE7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,SAAS,IAAI,qDAAqD;aAC5E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE;YAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBACpB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnB,OAAO,CAAC;wBACN,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,gCAAgC,aAAa,aAAa,IAAI,GAAG;qBAC3E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,EAAE,aAAa,CAAC,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,IAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,WAAW;oBACjB,EAAE;oBACF,IAAI;oBACJ,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACpG,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,gBAAgB,CAAC,EAAmB;QAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACpB,OAAO,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,EAAE,6BAA6B,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC1B,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACzB,MAAM,CACJ,aAAa,CACX,mBAAmB,EACnB,qCAAqC,aAAa,WAAW,EAAE,CAAC,MAAM,GAAG,CAC1E,CACF,CAAC;gBACJ,CAAC;YACH,CAAC,EAAE,aAAa,CAAC,CAAC;YAClB,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC;gBACH,IAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,MAAM,CACJ,aAAa,CACX,aAAa,EACb,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC3F,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,eAAe,CACtB,GAAqB,EACrB,MAAgC;QAEhC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,IAAI,YAAY,EAAE,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,IAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,wDAAwD;YAC1D,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,yEAAyE;QACzE,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO;YACtC,IAAI,YAAY,EAAE,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,IAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9C,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,SAAS,oBAAoB,CAAC,GAAkB,EAAE,aAAsB;QACtE,mEAAmE;QACnE,gEAAgE;QAChE,sEAAsE;QACtE,MAAM,KAAK,GAAG,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,UAAU,CAAC;QAC1E,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,IAAI,KAAK;oBAAE,OAAO;gBAClB,MAAM,GAAG,GAAG,GAAqB,CAAC;gBAClC,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,EAAE;oBAAE,OAAO,CAAC,kCAAkC;gBACnD,YAAY,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;gBACvB,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7B,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,EAAE,CAAC,MAAM,CACP,aAAa,CACX,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,SAAS,EAC5B,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,uBAAuB,EAC7C,GAAG,CAAC,KAAK,EAAE,aAAa,CACzB,CACF,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,IAAI,KAAK;oBAAE,OAAO;gBAClB,MAAM,IAAI,GAAG,GAAsB,CAAC;gBACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,CAAC,KAAK;oBAAE,OAAO,CAAC,0CAA0C;gBAC9D,qEAAqE;gBACrE,sEAAsE;gBACtE,iEAAiE;gBACjE,qEAAqE;gBACrE,iEAAiE;gBACjE,oEAAoE;gBACpE,sDAAsD;gBACtD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxC,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,iBAAiB,CAAC;gBACzF,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC;gBAClC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBAC/B,IAAI,SAAS;oBAAE,OAAO;gBACtB,IAAI,CAAC;oBACH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;gBACD,OAAO;YACT,CAAC;YACD;gBACE,MAAM;QACV,CAAC;QACD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,QAAQ,GAAG,GAAuB,CAAC;gBACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACtC,IAAI,CAAC,IAAI;oBAAE,OAAO,CAAC,kCAAkC;gBACrD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACnC,IAAI,CAAC,OAAO,CAAC;wBACX,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;wBACtB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO;wBAChC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;qBAC3B,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;oBAC7B,IAAI,CAAC,OAAO,CAAC;wBACX,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,uBAAuB;qBACnD,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,wBAAwB;gBACxB,MAAM;YACR,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,qCAAqC;gBACrC,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1C,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,sDAAsD;gBACtD,6DAA6D;gBAC7D,yBAAyB;gBACzB,MAAM;YACR,CAAC;YACD;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,SAAS,MAAM;QACb,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS;YACf,OAAO;YACP,gBAAgB,EAAE,IAAI,KAAK,IAAI;YAC/B,OAAO;YACP,SAAS;YACT,UAAU;SACX,CAAC;IACJ,CAAC;IAED,SAAS,eAAe,CAAC,KAAsB;QAC7C,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,WAAW,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,OAAO;QACP,SAAS;QACT,UAAU;QACV,eAAe;QACf,mBAAmB;QACnB,kBAAkB;QAClB,cAAc;QACd,SAAS;QACT,QAAQ;QACR,gBAAgB;QAChB,eAAe;QACf,oBAAoB;QACpB,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/bridge/server/headless.d.ts

@@ -0,0 +1,36 @@
+import { type LocalSandbox } from 'pyric/sandbox';
+import { type LocalBridgeOptions } from './local-bridge.js';
+/** Where the headless sandbox snapshot is persisted (relative to the project
+ *  dir). Deliberately separate from serve's `state.json` (different format). */
+export declare const HEADLESS_STATE_RELATIVE: string;
+/**
+ * Build the headless MCP server around an in-process sandbox. Pure: no I/O and
+ * no transport, so callers (and tests) can drive it however they like. Mirrors
+ * the served bridge's construction (forwarded data-plane + in-process rules
+ * tools), with `dispatch` bound to the local sandbox instead of a ws peer.
+ */
+export declare function buildHeadlessMcpServer(sandbox: LocalSandbox, opts?: LocalBridgeOptions): import("@modelcontextprotocol/sdk/server/mcp").McpServer;
+/**
+ * Load `<cwd>/firestore.rules` into the sandbox when present. Returns the path
+ * it loaded, or null if there was no rules file. Without rules, rules-enforcing
+ * (`as:{uid}`) ops fall back to the sandbox's default; admin ops are unaffected.
+ */
+export declare function loadProjectRules(sandbox: LocalSandbox, cwd: string): string | null;
+/**
+ * Persist the sandbox to `<cwd>/.pyric/state/headless.json` using the v3 bundle
+ * codec (the same `serializeToBuckets` + `bundleRecords` the worker uses). Atomic
+ * tmp+rename so a crash mid-write never truncates the live file.
+ */
+export declare function saveSandboxSnapshot(sandbox: LocalSandbox, cwd: string): void;
+/**
+ * Restore the sandbox from the headless snapshot file if present (a clobber via
+ * `loadSnapshot`). Returns the restored doc count, or null when there is no file.
+ */
+export declare function loadSandboxSnapshot(sandbox: LocalSandbox, cwd: string): number | null;
+/**
+ * Run the headless MCP server over stdio. Loads `.pyric/state/headless.json` on
+ * start, debounces a save after each dispatch, and flushes on shutdown. Resolves
+ * with an exit code when the stdio transport closes (the editor disconnects).
+ */
+export declare function runHeadlessMcp(cwd?: string): Promise<number>;
+//# sourceMappingURL=headless.d.ts.map

package/dist/bridge/server/headless.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headless.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/headless.ts"],"names":[],"mappings":"AAoBA,OAAO,EAML,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAKvB,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE/E;gFACgF;AAChF,eAAO,MAAM,uBAAuB,QAA2C,CAAC;AAEhF;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,kBAAkB,4DAGtF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKlF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAQ5E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMrF;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkEjF"}

package/dist/bridge/server/headless.js

@@ -0,0 +1,142 @@
+/**
+ * Headless MCP server: runs the pyric sandbox IN this process (no browser, no
+ * serve) and exposes the SAME tool surface the bridge advertises, over stdio.
+ *
+ * This is the zero-setup half of the hybrid MCP server
+ * (design rationale): when no `pyric dev --bridge` is running to
+ * attach to, the MCP server hosts its own sandbox. The tool surface is identical
+ * to the served bridge by construction (`buildSandboxDispatcher` is the shared
+ * source pinned by `tool-parity.test.ts`), including the per-identity `as` arg.
+ *
+ * Persistence (Phase 1b) uses the v3 bundle codec the worker already uses for
+ * transfer/branches (`serializeToBuckets` + `bundleRecords`). It writes its OWN
+ * `.pyric/state/headless.json`, NOT serve's `state.json` (which currently uses a
+ * different on-disk envelope, and carries a controller-blob version that has
+ * drifted from pyric's snapshot SCHEMA_VERSION). Unifying the two formats so a
+ * headless session and a `pyric dev` session can share one file is a tracked
+ * design item, not done here.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { initializeSandbox, serializeToBuckets, bundleRecords, parseBundle, deserializeFromBuckets, } from 'pyric/sandbox';
+import { setRules } from 'pyric/sandbox/firestore';
+import { buildMcpServer } from './mcp.js';
+import { getDefaultMcpToolSurface } from './mcp-contract.js';
+import { createLocalBridge } from './local-bridge.js';
+/** Where the headless sandbox snapshot is persisted (relative to the project
+ *  dir). Deliberately separate from serve's `state.json` (different format). */
+export const HEADLESS_STATE_RELATIVE = join('.pyric', 'state', 'headless.json');
+/**
+ * Build the headless MCP server around an in-process sandbox. Pure: no I/O and
+ * no transport, so callers (and tests) can drive it however they like. Mirrors
+ * the served bridge's construction (forwarded data-plane + in-process rules
+ * tools), with `dispatch` bound to the local sandbox instead of a ws peer.
+ */
+export function buildHeadlessMcpServer(sandbox, opts) {
+    const bridge = createLocalBridge(sandbox, opts);
+    return buildMcpServer(bridge, getDefaultMcpToolSurface());
+}
+/**
+ * Load `<cwd>/firestore.rules` into the sandbox when present. Returns the path
+ * it loaded, or null if there was no rules file. Without rules, rules-enforcing
+ * (`as:{uid}`) ops fall back to the sandbox's default; admin ops are unaffected.
+ */
+export function loadProjectRules(sandbox, cwd) {
+    const rulesPath = join(cwd, 'firestore.rules');
+    if (!existsSync(rulesPath))
+        return null;
+    setRules(sandbox, readFileSync(rulesPath, 'utf8'));
+    return rulesPath;
+}
+/**
+ * Persist the sandbox to `<cwd>/.pyric/state/headless.json` using the v3 bundle
+ * codec (the same `serializeToBuckets` + `bundleRecords` the worker uses). Atomic
+ * tmp+rename so a crash mid-write never truncates the live file.
+ */
+export function saveSandboxSnapshot(sandbox, cwd) {
+    const snap = sandbox.snapshot();
+    const bundle = bundleRecords(serializeToBuckets(snap.firestore, snap.services, 0));
+    const path = join(cwd, HEADLESS_STATE_RELATIVE);
+    mkdirSync(dirname(path), { recursive: true });
+    const tmp = `${path}.tmp-${process.pid}`;
+    writeFileSync(tmp, bundle, 'utf8');
+    renameSync(tmp, path);
+}
+/**
+ * Restore the sandbox from the headless snapshot file if present (a clobber via
+ * `loadSnapshot`). Returns the restored doc count, or null when there is no file.
+ */
+export function loadSandboxSnapshot(sandbox, cwd) {
+    const path = join(cwd, HEADLESS_STATE_RELATIVE);
+    if (!existsSync(path))
+        return null;
+    const snap = deserializeFromBuckets(parseBundle(readFileSync(path, 'utf8')));
+    sandbox.loadSnapshot(snap);
+    return Object.keys(snap.firestore).length;
+}
+/**
+ * Run the headless MCP server over stdio. Loads `.pyric/state/headless.json` on
+ * start, debounces a save after each dispatch, and flushes on shutdown. Resolves
+ * with an exit code when the stdio transport closes (the editor disconnects).
+ */
+export async function runHeadlessMcp(cwd = process.cwd()) {
+    const log = (m) => {
+        process.stderr.write(`[pyric mcp headless] ${m}\n`);
+    };
+    const sandbox = initializeSandbox();
+    const rulesPath = loadProjectRules(sandbox, cwd);
+    log(rulesPath ? `rules loaded from ${rulesPath}` : `no firestore.rules found in ${cwd}`);
+    const restored = loadSandboxSnapshot(sandbox, cwd);
+    if (restored !== null)
+        log(`restored ${restored} docs from ${join(cwd, HEADLESS_STATE_RELATIVE)}`);
+    // Debounced persistence: a burst of writes collapses to one flush; the final
+    // flush runs on shutdown so a clean disconnect never loses the tail.
+    let saveTimer = null;
+    const flush = () => {
+        if (saveTimer) {
+            clearTimeout(saveTimer);
+            saveTimer = null;
+        }
+        try {
+            saveSandboxSnapshot(sandbox, cwd);
+        }
+        catch (e) {
+            log(`persist failed: ${e instanceof Error ? e.message : String(e)}`);
+        }
+    };
+    const scheduleSave = () => {
+        if (saveTimer)
+            clearTimeout(saveTimer);
+        saveTimer = setTimeout(flush, 750);
+    };
+    const server = buildHeadlessMcpServer(sandbox, { onAfterDispatch: scheduleSave });
+    const { StdioServerTransport } = await import('@modelcontextprotocol/sdk/server/stdio.js');
+    const transport = new StdioServerTransport();
+    return await new Promise((resolve) => {
+        let stopping = false;
+        const onStdinEnd = () => stop(0);
+        const stop = (code) => {
+            if (stopping)
+                return;
+            stopping = true;
+            process.stdin.off('end', onStdinEnd);
+            flush();
+            void server.close().then(() => resolve(code), (e) => {
+                log(`shutdown failed: ${e instanceof Error ? e.message : String(e)}`);
+                resolve(code === 0 ? 1 : code);
+            });
+        };
+        transport.onclose = () => stop(0);
+        // StdioServerTransport 1.29 no longer reports stdin EOF through onclose.
+        // Editors close the pipe to end an MCP session, so own that lifecycle
+        // signal explicitly and then close the server/transport above.
+        process.stdin.once('end', onStdinEnd);
+        process.once('SIGINT', () => stop(0));
+        process.once('SIGTERM', () => stop(0));
+        void server.connect(transport).then(() => log(`headless sandbox MCP server ready (persisting to ${HEADLESS_STATE_RELATIVE})`), (e) => {
+            log(`failed to start: ${e instanceof Error ? e.message : String(e)}`);
+            resolve(1);
+        });
+    });
+}
+//# sourceMappingURL=headless.js.map

package/dist/bridge/server/headless.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headless.js","sourceRoot":"","sources":["../../../src/bridge/server/headless.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,sBAAsB,GAEvB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAA2B,MAAM,mBAAmB,CAAC;AAE/E;gFACgF;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAqB,EAAE,IAAyB;IACrF,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChD,OAAO,cAAc,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAqB,EAAE,GAAW;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAqB,EAAE,GAAW;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAChD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAqB,EAAE,GAAW;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC9D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAQ,EAAE;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,SAAS,EAAE,CAAC,CAAC,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;IAEzF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,IAAI;QAAE,GAAG,CAAC,YAAY,QAAQ,cAAc,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAEnG,6EAA6E;IAC7E,qEAAqE;IACrE,IAAI,SAAS,GAAyC,IAAI,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,SAAS,EAAE,CAAC;YACd,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,mBAAmB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,GAAS,EAAE;QAC9B,IAAI,SAAS;YAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QACvC,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC;IAClF,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC3C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,UAAU,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAQ,EAAE;YAClC,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACrC,KAAK,EAAE,CAAC;YACR,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EACnB,CAAC,CAAC,EAAE,EAAE;gBACJ,GAAG,CAAC,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtE,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC,CACF,CAAC;QACJ,CAAC,CAAC;QACF,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,yEAAyE;QACzE,sEAAsE;QACtE,+DAA+D;QAC/D,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CACjC,GAAG,EAAE,CAAC,GAAG,CAAC,oDAAoD,uBAAuB,GAAG,CAAC,EACzF,CAAC,CAAC,EAAE,EAAE;YACJ,GAAG,CAAC,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/bridge/server/json-schema-to-zod.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Tiny JSON-Schema → Zod shape converter. Handles only the shapes
+ * pyric's tool factories actually produce (string, number, boolean,
+ * object, array, enum, plus untyped catch-all). Anything outside this
+ * grammar becomes `z.any()` — better to under-validate than refuse to
+ * register a tool.
+ *
+ * The MCP SDK's `server.tool()` / `server.registerTool()` insist on
+ * Zod schemas for input validation. Pyric's tool definitions are
+ * plain JSON Schema (matching the inline shape in
+ * `packages/pyric/src/rules/tools.ts`), so the bridge converts
+ * just-in-time when registering each tool with the MCP server.
+ */
+import { type ZodRawShape } from 'zod';
+type JsonSchemaObject = {
+    type?: string | string[];
+    description?: string;
+    properties?: Record<string, JsonSchemaObject>;
+    items?: JsonSchemaObject;
+    required?: string[];
+    enum?: unknown[];
+    additionalProperties?: boolean | JsonSchemaObject;
+    [k: string]: unknown;
+};
+/**
+ * Convert a JSON-Schema-of-an-object into a Zod raw shape suitable
+ * for passing to `server.tool(name, description, shape, handler)`.
+ *
+ * Behaviour:
+ *  - Empty / no `properties` returns `{}` (valid for parameterless tools).
+ *  - Each property becomes a Zod schema chosen from its `type`.
+ *  - Properties NOT in `required` are made `.optional()`.
+ *  - Description metadata is attached via `.describe()` for MCP surfacing.
+ */
+export declare function jsonSchemaToZodShape(schema: JsonSchemaObject): ZodRawShape;
+export {};
+//# sourceMappingURL=json-schema-to-zod.d.ts.map

package/dist/bridge/server/json-schema-to-zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema-to-zod.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/json-schema-to-zod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAK,KAAK,WAAW,EAAmB,MAAM,KAAK,CAAC;AAE3D,KAAK,gBAAgB,GAAG;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,oBAAoB,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;IAClD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAe1E"}