@pyric/cli 0.1.0-alpha.10

package/dist/serve/docs-ui/llms.txt

@@ -0,0 +1,123 @@
+# Pyric
+
+> Pyric is Firebase for agents: a Firebase-shaped SDK and toolchain
+> (in-browser sandbox, rules tooling, replay verification, deploy)
+> that lets developers and AI agents work against Firebase semantics
+> without touching a live project.
+
+Every page below is also served as raw markdown at the linked `.md` URL.
+
+## Overview
+
+- [Firebase that runs in your browser](/__pyric/ui/docs/overview.md): Understand what Pyric is and what you get, in one short read.
+
+## Get started
+
+- [Run Firebase locally](/__pyric/ui/docs/get-started/start-building.md): Start a new Firebase application or add Pyric to an existing Vite application without connecting development to production.
+- [How firebase/* imports resolve locally and in production](/__pyric/ui/docs/get-started/how-the-swap-works.md): Follow one import from your source to the local sandbox in development and to real Firebase in a production build.
+
+## Build
+
+- [Run Firebase Authentication locally](/__pyric/ui/docs/build/authentication.md): Run real auth flows against a local user database, seed test users with claims, and design an identity model your rules can trust.
+- [Run Cloud Firestore locally](/__pyric/ui/docs/build/cloud-firestore.md): Read, write, query, and stream Firestore documents locally, and derive the composite indexes your queries need from your source.
+- [Run Realtime Database locally](/__pyric/ui/docs/build/realtime-database.md): Store and watch a Realtime Database tree locally, model it around your reads, and guard writes with schema and rules checks.
+- [Run Cloud Storage locally](/__pyric/ui/docs/build/cloud-storage.md): Upload, list, download, and delete files locally, with storage rules enforced in-process.
+- [Receive Firebase Cloud Messaging locally](/__pyric/ui/docs/build/cloud-messaging.md): Keep Firebase Cloud Messaging receive code unchanged while tokens and deliveries stay in the local sandbox.
+- [Run Firebase AI Logic locally](/__pyric/ui/docs/build/ai-logic.md): Keep Firebase AI Logic application code unchanged while model responses stay deterministic or come from a local model.
+
+## Secure & debug
+
+- [Security Rules in Pyric](/__pyric/ui/docs/secure/secure-it-with-rules.md): What Pyric gives you for Security Rules: in-process enforcement, simulation, lint, verdicts that name the rule, and tests — before anything deploys.
+- [Simulate and lint Security Rules before deployment](/__pyric/ui/docs/secure/simulate-and-lint.md): Get a rules verdict and a lint report locally, before production answers with an unexplained 400 or 403.
+- [Write a Security Rules test suite](/__pyric/ui/docs/secure/write-a-rules-test-suite.md): A suite of allow/deny cases that runs in-process, gates CI, and can escalate to Google's own engine.
+- [Read a Security Rules denial](/__pyric/ui/docs/secure/read-a-denial.md): See which rule denied an operation, on what path, with what data, the moment it happens.
+- [Use tested modules in Firestore Security Rules](/__pyric/ui/docs/secure/rules-standard-library.md): Import a tested rule function, resolve it to ordinary Firebase Rules, then lint and simulate the result.
+- [Write Realtime Database rules in TypeScript](/__pyric/ui/docs/secure/rtdb-rules-in-typescript.md): Compose RTDB rules from typed constraints, prove them in-process, and deploy the compiled JSON.
+- [Fix Firestore Security Rules limit failures](/__pyric/ui/docs/secure/firestore-rules-limits.md): Recognise a production Rules limit, see the invalid shape, and replace it with a valid one.
+- [Audit Security Rules and data before production](/__pyric/ui/docs/secure/audit-your-rules.md): Find the rule that looks right and isn't — every finding proven by a simulation you can rerun.
+
+## Observe & shape
+
+- [Watch every read, write, and denial live](/__pyric/ui/docs/observe/see-whats-happening.md): See every operation your backend performs, with its rules verdict, without writing a log line.
+- [Seed, snapshot, reset, and replay the backend](/__pyric/ui/docs/observe/shape-your-data.md): Put the backend in any state you want, capture the good ones, and get them back on demand.
+
+## Ship & test
+
+- [The same code goes live](/__pyric/ui/docs/ship/ship-to-production.md): Deploy rules, indexes, hosting, and functions, and learn what would change before production does.
+- [Run the same backend in tests and scripts](/__pyric/ui/docs/ship/test-in-node.md): Run your rules and data logic in a Node test suite, with no browser and no emulator.
+
+## Work with an agent
+
+- [Connect an agent to the sandbox](/__pyric/ui/docs/agent/set-up-your-agent.md): Connect Claude Code, Cursor, Codex, or any MCP client to your backend in minutes.
+- [Work with an agent in the browser sandbox](/__pyric/ui/docs/agent/work-with-an-agent.md): Give a local coding agent real backend tasks and watch it inspect, change, and verify the same browser sandbox as your app.
+- [Watch your agent in Pyric Studio](/__pyric/ui/docs/agent/watch-and-review.md): See every operation your agent performs, live, with the verdict that decided it.
+
+## Trust
+
+- [Versioning and the fb tag](/__pyric/ui/docs/trust/versioning-and-compatibility.md): Pyric has its own semver. Firebase compatibility is a separate claim, made by an npm dist-tag:
+
+## Conformance
+
+- [Public API coverage](/__pyric/ui/docs/conformance-scores.md): This is the share of Firebase's public API that Pyric supports. Not-implemented-yet, deprecated, and deferred APIs still count against the total. How does Pyric know it works like Firebase? explains the evidence and its limits.
+- [How does Pyric know it works like Firebase?](/__pyric/ui/docs/trust/how-we-know-it-matches-firebase.md): See the production evidence behind Pyric's conformance claims, the gaps those claims leave open, and the checks to make before shipping.
+- [pyric/app compatibility matrix](/__pyric/ui/docs/app-compat.md): <div class="compat-stat"> <p class="compat-stat-figure"> <span class="compat-stat-pct">81.3%</span> <span class="compat-stat-label">of the public API supported</span> </p> <div class="compat-meters"> <span class="compat-meter-track"><span class="compat-meter-fill" style="width: 81.3%"></span></span> </div> <p class="compat-stat-denom">13 of 16 public API</p> </div>
+- [pyric/ai compatibility matrix](/__pyric/ui/docs/ai-compat.md): <div class="compat-stat"> <p class="compat-stat-figure"> <span class="compat-stat-pct">67.1%</span> <span class="compat-stat-label">of the public API supported</span> </p> <div class="compat-meters"> <span class="compat-meter-track"><span class="compat-meter-fill" style="width: 67.1%"></span></span> </div> <p class="compat-stat-denom">147 of 219 public API</p> </div>
+- [pyric/auth compatibility matrix](/__pyric/ui/docs/auth-compat.md): <div class="compat-stat"> <p class="compat-stat-figure"> <span class="compat-stat-pct">63.8%</span> <span class="compat-stat-label">of the public API supported</span> </p> <div class="compat-meters"> <span class="compat-meter-track"><span class="compat-meter-fill" style="width: 63.8%"></span></span> </div> <p class="compat-stat-denom">95 of 149 public API</p> </div>
+- [pyric/firestore compatibility matrix](/__pyric/ui/docs/firestore-compat.md): <div class="compat-stat"> <p class="compat-stat-figure"> <span class="compat-stat-pct">52.7%</span> <span class="compat-stat-label">of the public API supported</span> </p> <div class="compat-meters"> <span class="compat-meter-track"><span class="compat-meter-fill" style="width: 52.7%"></span></span> </div> <p class="compat-stat-denom">96 of 182 public API</p> </div>
+- [pyric/database compatibility matrix](/__pyric/ui/docs/database-compat.md): <div class="compat-stat"> <p class="compat-stat-figure"> <span class="compat-stat-pct">72.9%</span> <span class="compat-stat-label">of the public API supported</span> </p> <div class="compat-meters"> <span class="compat-meter-track"><span class="compat-meter-fill" style="width: 72.9%"></span></span> </div> <p class="compat-stat-denom">43 of 59 public API</p> </div>
+- [pyric/storage compatibility matrix](/__pyric/ui/docs/storage-compat.md): <div class="compat-stat"> <p class="compat-stat-figure"> <span class="compat-stat-pct">62.9%</span> <span class="compat-stat-label">of the public API supported</span> </p> <div class="compat-meters"> <span class="compat-meter-track"><span class="compat-meter-fill" style="width: 62.9%"></span></span> </div> <p class="compat-stat-denom">22 of 35 public API</p> </div>
+- [pyric messaging compatibility matrix](/__pyric/ui/docs/messaging-compat.md): <div class="compat-stat"> <p class="compat-stat-figure"> <span class="compat-stat-pct">100%</span> <span class="compat-stat-label">of the public API supported</span> </p> <div class="compat-meters"> <span class="compat-meter-track"><span class="compat-meter-fill" style="width: 100%"></span></span> </div> <p class="compat-stat-denom">13 of 13 public API</p> </div>
+- [Firebase Functions RTDB integration compatibility](/__pyric/ui/docs/functions-rtdb-compat.md): <div class="compat-stat"> <p class="compat-stat-surface">This page tracks an integration contract: unchanged Firebase code run through a Pyric runtime seam, so there is no separate Firebase public API to measure. The rows below are its signed behavior inventory.</p> </div>
+- [pyric/rules compatibility matrix](/__pyric/ui/docs/rules-compat.md): <div class="compat-stat"> <p class="compat-stat-surface">This is a Pyric-native API with no Firebase counterpart, so coverage is measured against its own public exports rather than a Firebase surface.</p> </div>
+
+## API reference
+
+- [API reference](/__pyric/ui/docs/api-reference.md): Published declarations for every supported Pyric package entry point.
+- [API reference: pyric/app](/__pyric/ui/docs/pyric-app-reference-api.md): Published declarations for pyric/app.
+- [API reference: pyric/firestore](/__pyric/ui/docs/pyric-firestore-reference-api.md): Published declarations for pyric/firestore.
+- [API reference: pyric/auth](/__pyric/ui/docs/pyric-auth-reference-api.md): Published declarations for pyric/auth.
+- [API reference: pyric/ai](/__pyric/ui/docs/pyric-ai-reference-api.md): Published declarations for pyric/ai.
+- [API reference: pyric/ai/scripting](/__pyric/ui/docs/pyric-ai-scripting-reference-api.md): Published declarations for pyric/ai/scripting.
+- [API reference: pyric/database](/__pyric/ui/docs/pyric-database-reference-api.md): Published declarations for pyric/database.
+- [API reference: pyric/storage](/__pyric/ui/docs/pyric-storage-reference-api.md): Published declarations for pyric/storage.
+- [API reference: pyric/messaging](/__pyric/ui/docs/pyric-messaging-reference-api.md): Published declarations for pyric/messaging.
+- [API reference: pyric/messaging/sw](/__pyric/ui/docs/pyric-messaging-sw-reference-api.md): Published declarations for pyric/messaging/sw.
+- [API reference: pyric/rules](/__pyric/ui/docs/pyric-rules-reference-api.md): Published declarations for pyric/rules.
+- [API reference: pyric/firestore-values](/__pyric/ui/docs/pyric-firestore-values-reference-api.md): Published declarations for pyric/firestore-values.
+- [API reference: pyric/sandbox](/__pyric/ui/docs/pyric-sandbox-reference-api.md): Published declarations for pyric/sandbox.
+- [API reference: pyric/sandbox/firestore](/__pyric/ui/docs/pyric-sandbox-firestore-reference-api.md): Published declarations for pyric/sandbox/firestore.
+- [API reference: pyric/sandbox/database](/__pyric/ui/docs/pyric-sandbox-database-reference-api.md): Published declarations for pyric/sandbox/database.
+- [API reference: pyric-admin/app](/__pyric/ui/docs/pyric-admin-app-reference-api.md): Published declarations for pyric-admin/app.
+- [API reference: pyric-admin/firestore](/__pyric/ui/docs/pyric-admin-firestore-reference-api.md): Published declarations for pyric-admin/firestore.
+- [API reference: pyric-admin/auth](/__pyric/ui/docs/pyric-admin-auth-reference-api.md): Published declarations for pyric-admin/auth.
+- [API reference: pyric-admin/database](/__pyric/ui/docs/pyric-admin-database-reference-api.md): Published declarations for pyric-admin/database.
+- [API reference: pyric-admin/storage](/__pyric/ui/docs/pyric-admin-storage-reference-api.md): Published declarations for pyric-admin/storage.
+- [API reference: create-pyric](/__pyric/ui/docs/create-pyric-reference-api.md): Published declarations for create-pyric.
+- [API reference: @pyric/cli/credentials/node](/__pyric/ui/docs/pyric-cli-credentials-node-reference-api.md): Published declarations for @pyric/cli/credentials/node.
+- [API reference: @pyric/cli/verify](/__pyric/ui/docs/pyric-cli-verify-reference-api.md): Published declarations for @pyric/cli/verify.
+- [API reference: @pyric/cli/conformance](/__pyric/ui/docs/pyric-cli-conformance-reference-api.md): Published declarations for @pyric/cli/conformance.
+- [API reference: @pyric/cli/conformance/browser](/__pyric/ui/docs/pyric-cli-conformance-browser-reference-api.md): Published declarations for @pyric/cli/conformance/browser.
+- [API reference: @pyric/cli/assurance](/__pyric/ui/docs/pyric-cli-assurance-reference-api.md): Published declarations for @pyric/cli/assurance.
+- [API reference: @pyric/cli/assurance/browser](/__pyric/ui/docs/pyric-cli-assurance-browser-reference-api.md): Published declarations for @pyric/cli/assurance/browser.
+- [API reference: @pyric/cli/bridge](/__pyric/ui/docs/pyric-cli-bridge-reference-api.md): Published declarations for @pyric/cli/bridge.
+- [API reference: @pyric/cli/bridge/client](/__pyric/ui/docs/pyric-cli-bridge-client-reference-api.md): Published declarations for @pyric/cli/bridge/client.
+- [API reference: @pyric/cli/discover](/__pyric/ui/docs/pyric-cli-discover-reference-api.md): Published declarations for @pyric/cli/discover.
+- [API reference: @pyric/cli/vite](/__pyric/ui/docs/pyric-cli-vite-reference-api.md): Published declarations for @pyric/cli/vite.
+- [API reference: @pyric/cli/serve/worker](/__pyric/ui/docs/pyric-cli-serve-worker-reference-api.md): Published declarations for @pyric/cli/serve/worker.
+- [API reference: @pyric/cli/remote](/__pyric/ui/docs/pyric-cli-remote-reference-api.md): Published declarations for @pyric/cli/remote.
+- [API reference: @pyric/cli/register](/__pyric/ui/docs/pyric-cli-register-reference-api.md): Published declarations for @pyric/cli/register.
+- [API reference: @pyric/ui/auth](/__pyric/ui/docs/pyric-ui-auth-reference-api.md): Published declarations for @pyric/ui/auth.
+- [API reference: @pyric/ui/auth/hooks](/__pyric/ui/docs/pyric-ui-auth-hooks-reference-api.md): Published declarations for @pyric/ui/auth/hooks.
+- [API reference: @pyric/ui/primitives](/__pyric/ui/docs/pyric-ui-primitives-reference-api.md): Published declarations for @pyric/ui/primitives.
+- [API reference: @pyric/ui/firestore](/__pyric/ui/docs/pyric-ui-firestore-reference-api.md): Published declarations for @pyric/ui/firestore.
+- [API reference: @pyric/ui/firestore/hooks](/__pyric/ui/docs/pyric-ui-firestore-hooks-reference-api.md): Published declarations for @pyric/ui/firestore/hooks.
+- [API reference: @pyric/ui/rtdb](/__pyric/ui/docs/pyric-ui-rtdb-reference-api.md): Published declarations for @pyric/ui/rtdb.
+- [API reference: @pyric/ui/storage](/__pyric/ui/docs/pyric-ui-storage-reference-api.md): Published declarations for @pyric/ui/storage.
+- [API reference: @pyric/ui/storage/hooks](/__pyric/ui/docs/pyric-ui-storage-hooks-reference-api.md): Published declarations for @pyric/ui/storage/hooks.
+- [API reference: @pyric/ui/traffic](/__pyric/ui/docs/pyric-ui-traffic-reference-api.md): Published declarations for @pyric/ui/traffic.
+- [API reference: @pyric/ui/traffic/hooks](/__pyric/ui/docs/pyric-ui-traffic-hooks-reference-api.md): Published declarations for @pyric/ui/traffic/hooks.
+- [API reference: @pyric/ui/events](/__pyric/ui/docs/pyric-ui-events-reference-api.md): Published declarations for @pyric/ui/events.
+- [API reference: @pyric/ui/events/hooks](/__pyric/ui/docs/pyric-ui-events-hooks-reference-api.md): Published declarations for @pyric/ui/events/hooks.
+- [API reference: @pyric/ui/agents](/__pyric/ui/docs/pyric-ui-agents-reference-api.md): Published declarations for @pyric/ui/agents.
+- [API reference: @pyric/ui/rules](/__pyric/ui/docs/pyric-ui-rules-reference-api.md): Published declarations for @pyric/ui/rules.
+- [API reference: @pyric/ui/rules/hooks](/__pyric/ui/docs/pyric-ui-rules-hooks-reference-api.md): Published declarations for @pyric/ui/rules/hooks.

package/dist/serve/entries/ai.d.ts

@@ -0,0 +1,4 @@
+import { getAI as pyricGetAI } from 'pyric/ai';
+export { AIError, AIErrorCode, Backend, BackendType, GoogleAIBackend, VertexAIBackend, AIModel, ChatSession, ChatSessionBase, GenerativeModel, AnyOfSchema, ArraySchema, BooleanSchema, IntegerSchema, NumberSchema, ObjectSchema, Schema, StringSchema, BlockReason, FinishReason, FunctionCallingMode, HarmBlockMethod, HarmBlockThreshold, HarmCategory, HarmProbability, HarmSeverity, ImageConfigAspectRatio, ImageConfigImageSize, Language, Modality, Outcome, POSSIBLE_ROLES, ResponseModality, SchemaType, ThinkingLevel, URLRetrievalStatus, getGenerativeModel, } from 'pyric/ai';
+export declare const getAI: typeof pyricGetAI;
+//# sourceMappingURL=ai.d.ts.map

package/dist/serve/entries/ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/ai.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,UAAU,CAAC;AAU/C,OAAO,EACL,OAAO,EACP,WAAW,EACX,OAAO,EACP,WAAW,EACX,eAAe,EACf,eAAe,EACf,OAAO,EACP,WAAW,EACX,eAAe,EACf,eAAe,EACf,WAAW,EACX,WAAW,EACX,aAAa,EACb,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,UAAU,CAAC;AA+IlB,eAAO,MAAM,KAAK,EA+Bb,OAAO,UAAU,CAAC"}

package/dist/serve/entries/ai.js

@@ -0,0 +1,184 @@
+/**
+ * The bundle the import map serves for `firebase/ai`.
+ *
+ * DUAL-PATH (cdd-deltas #98): the FULL `pyric/ai` mirror surface
+ * (GenerativeModel / ChatSession / Schema / enums) always runs in-page —
+ * but ANSWERING follows the sandbox. When a SharedWorker is available, the
+ * broker + engines live in the WORKER HOST, in-process with the ONE shared
+ * sandbox (#98.1): `getAI` plugs a port-forwarding AnswerEngine into the
+ * in-page mirror, so every `generateContent` / `streamGenerateContent` /
+ * `countTokens` rides the worker protocol's `ai.*` ops (#98.3) and the
+ * worker broker's `service: 'ai'` events land on the shared event stream
+ * Studio consumes. Otherwise the mirror runs whole against the in-page
+ * sandbox — the unchanged fallback. Branch picked ONCE at load (`useWorker`).
+ *
+ * OPENAI ENGINE IN THE BROWSER (#98.2): an `engine: { kind: 'openai' }`
+ * config with no `baseUrl` targets serve's same-origin `/__pyric/ai-proxy`
+ * route (which forwards to the configured upstream, default
+ * `http://localhost:11434/v1`) — so a localhost Ollama needs no CORS setup
+ * on EITHER path. A custom AnswerEngine OBJECT can't cross the port and is
+ * rejected in worker mode rather than creating a second page-local backend.
+ * Direct/in-process `pyric/ai` sandboxes still accept custom engines.
+ *
+ * Engine config is per-sandbox (#98.4) and first-call-wins at the worker
+ * host. Each app has its own in-page port wrapper so deleting one app cannot
+ * disconnect a sibling; all wrappers still forward to that one worker broker.
+ * Browser-bundled by `../bundler.ts`; never imported by node-side.
+ */
+import * as ipAi from 'pyric/ai';
+import { aiErrorFromEnvelope } from 'pyric/ai/internal';
+import { getAI as pyricGetAI } from 'pyric/ai';
+import { createTransportAI } from 'pyric/ai/internal';
+import { FirebaseError, getApp } from 'pyric/app';
+import { isSandboxAppDeleted } from 'pyric/app/internal';
+import { aiGenerateContent, aiCountTokens, aiStreamGenerateContent } from '../worker/client.js';
+import { useWorker } from './worker-runtime.js';
+import { workerClientForApp } from './app-client.js';
+// ── Mirror surface — path-independent (the mirror always runs in-page) ────
+export { AIError, AIErrorCode, Backend, BackendType, GoogleAIBackend, VertexAIBackend, AIModel, ChatSession, ChatSessionBase, GenerativeModel, AnyOfSchema, ArraySchema, BooleanSchema, IntegerSchema, NumberSchema, ObjectSchema, Schema, StringSchema, BlockReason, FinishReason, FunctionCallingMode, HarmBlockMethod, HarmBlockThreshold, HarmCategory, HarmProbability, HarmSeverity, ImageConfigAspectRatio, ImageConfigImageSize, Language, Modality, Outcome, POSSIBLE_ROLES, ResponseModality, SchemaType, ThinkingLevel, URLRetrievalStatus, getGenerativeModel, } from 'pyric/ai';
+/** The serve proxy route the browser openai engine defaults to (#98.2). */
+const AI_PROXY_PATH = '/__pyric/ai-proxy';
+/** A custom AnswerEngine object (vs a plain, worker-cloneable EngineConfig). */
+function isAnswerEngine(engine) {
+    return typeof engine.generateContent === 'function';
+}
+/**
+ * Derive the JSON-safe wire config that crosses the port from the app's
+ * `AIOptions.engine`. Predicate script matchers are functions — structured
+ * clone rejects them LOUDLY at send time (never silently dropped).
+ */
+function toEngineWire(engine) {
+    if (!engine || isAnswerEngine(engine))
+        return undefined;
+    const config = engine;
+    if (config.kind === 'openai') {
+        const openai = config;
+        return {
+            kind: 'openai',
+            baseUrl: openai.baseUrl ?? AI_PROXY_PATH,
+            ...(openai.model !== undefined ? { model: openai.model } : {}),
+            ...(openai.modelMap !== undefined ? { modelMap: openai.modelMap } : {}),
+        };
+    }
+    const scripted = config;
+    return {
+        kind: 'scripted',
+        ...(scripted.script !== undefined
+            ? { script: scripted.script }
+            : {}),
+    };
+}
+/** In-page path: default an openai config's absent baseUrl to the proxy. */
+function withProxyDefault(options) {
+    const engine = options?.engine;
+    if (!engine || isAnswerEngine(engine))
+        return options;
+    const config = engine;
+    if (config.kind === 'openai' && config.baseUrl === undefined) {
+        return { ...options, engine: { ...config, baseUrl: AI_PROXY_PATH } };
+    }
+    return options;
+}
+function aiErrorFromWire(err, modelResource, op) {
+    const envelope = err
+        ?.aiEnvelope;
+    return envelope ? aiErrorFromEnvelope(envelope, modelResource, op) : err;
+}
+// ── The port-forwarding AnswerEngine (worker path) ─────────────────────────
+function portEngine(db, engineWire) {
+    const params = (model, request) => ({
+        model,
+        request,
+        ...(engineWire !== undefined ? { engine: engineWire } : {}),
+    });
+    const engine = {
+        async generateContent(req, model) {
+            try {
+                return await aiGenerateContent(db, params(model, req));
+            }
+            catch (err) {
+                throw aiErrorFromWire(err, model, 'generateContent');
+            }
+        },
+        streamGenerateContent(req, model) {
+            const inner = aiStreamGenerateContent(db, params(model, req));
+            return (async function* mapped() {
+                try {
+                    for await (const chunk of inner)
+                        yield chunk;
+                }
+                catch (err) {
+                    throw aiErrorFromWire(err, model, 'streamGenerateContent');
+                }
+            })();
+        },
+        async countTokens(req, model) {
+            try {
+                return await aiCountTokens(db, params(model, req));
+            }
+            catch (err) {
+                throw aiErrorFromWire(err, model, 'countTokens');
+            }
+        },
+    };
+    return engine;
+}
+/**
+ * Firebase constructs an AI handle for a deleted app, but that observation
+ * does not authorize resurrecting the app against an in-page sandbox. Keep
+ * the handle constructible while every model operation stays tombstoned.
+ */
+function deletedAppEngine() {
+    return {
+        async generateContent() {
+            throw deletedAppError();
+        },
+        streamGenerateContent() {
+            return (async function* tombstoned() {
+                throw deletedAppError();
+            })();
+        },
+        async countTokens() {
+            throw deletedAppError();
+        },
+    };
+}
+function deletedAppError() {
+    return new FirebaseError('app/app-deleted', 'Firebase App has already been deleted.');
+}
+// ── getAI — worker-forwarded answering or whole-mirror in-page ─────────────
+function mirrorGetAI(app, options) {
+    const resolved = (app ?? getApp());
+    const ai = pyricGetAI(resolved, options);
+    const target = ai[ipAi.TARGET_SYMBOL];
+    if (target) {
+        // Served entries are separately bundled, so the in-page AI mirror cannot
+        // rely on sharing pyric/app's private adapter singleton. Stamp the target
+        // with the served registry's per-app deletion guard instead. The target is
+        // per app handle even though its broker is shared by the sandbox.
+        target.assertAlive = () => {
+            if (isSandboxAppDeleted(resolved))
+                throw deletedAppError();
+        };
+    }
+    return ai;
+}
+export const getAI = (useWorker
+    ? (app, options) => {
+        const resolved = (app ?? getApp());
+        const engine = options?.engine;
+        const assertAlive = () => {
+            if (isSandboxAppDeleted(resolved))
+                throw deletedAppError();
+        };
+        if (isSandboxAppDeleted(resolved)) {
+            return createTransportAI(resolved, options, deletedAppEngine(), assertAlive);
+        }
+        if (engine && isAnswerEngine(engine)) {
+            throw new ipAi.AIError(ipAi.AIErrorCode.UNSUPPORTED, 'Custom AnswerEngine objects cannot run in SharedWorker mode. ' +
+                "Use a structured { kind: 'scripted' } or { kind: 'openai' } engine config.");
+        }
+        return createTransportAI(resolved, options, portEngine(workerClientForApp(resolved), toEngineWire(engine)), assertAlive);
+    }
+    : (app, options) => mirrorGetAI(app, withProxyDefault(options)));
+//# sourceMappingURL=ai.js.map

package/dist/serve/entries/ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.js","sourceRoot":"","sources":["../../../src/serve/entries/ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,IAAI,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,EAAoB,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,6EAA6E;AAC7E,OAAO,EACL,OAAO,EACP,WAAW,EACX,OAAO,EACP,WAAW,EACX,eAAe,EACf,eAAe,EACf,OAAO,EACP,WAAW,EACX,eAAe,EACf,eAAe,EACf,WAAW,EACX,WAAW,EACX,aAAa,EACb,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAKlB,2EAA2E;AAC3E,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C,gFAAgF;AAChF,SAAS,cAAc,CAAC,MAAoB;IAC1C,OAAO,OAAQ,MAAwC,CAAC,eAAe,KAAK,UAAU,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,MAAgC;IACpD,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,MAAM,GAAG,MAAgF,CAAC;IAChG,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAmD,CAAC;QACnE,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,aAAa;YACxC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAqD,CAAC;IACvE,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAmD,EAAE;YAC1E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,OAAwB;IAChD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,MAAM,MAAM,GAAG,MAA6C,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,aAAa,EAAkB,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,GAAY,EAAE,aAAqB,EAAE,EAAU;IACtE,MAAM,QAAQ,GAAI,GAAyE;QACzF,EAAE,UAAU,CAAC;IACf,OAAO,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3E,CAAC;AAED,8EAA8E;AAE9E,SAAS,UAAU,CAAC,EAAyC,EAAE,UAA0C;IACvG,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,OAAgC,EAAE,EAAE,CAAC,CAAC;QACnE,KAAK;QACL,OAAO;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,MAAM,GAAG;QACb,KAAK,CAAC,eAAe,CAAC,GAA4B,EAAE,KAAa;YAC/D,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,qBAAqB,CAAC,GAA4B,EAAE,KAAa;YAC/D,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM;gBAC5B,IAAI,CAAC;oBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK;wBAAE,MAAM,KAAK,CAAC;gBAC/C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,GAA4B,EAAE,KAAa;YAC3D,IAAI,CAAC;gBACH,OAAO,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;KACF,CAAC;IACF,OAAO,MAAoC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB;IACvB,OAAO;QACL,KAAK,CAAC,eAAe;YACnB,MAAM,eAAe,EAAE,CAAC;QAC1B,CAAC;QACD,qBAAqB;YACnB,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,UAAU;gBAChC,MAAM,eAAe,EAAE,CAAC;YAC1B,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,KAAK,CAAC,WAAW;YACf,MAAM,eAAe,EAAE,CAAC;QAC1B,CAAC;KACiB,CAAC;AACvB,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,aAAa,CACtB,iBAAiB,EACjB,wCAAwC,CACzC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,WAAW,CAClB,GAAY,EACZ,OAAwB;IAExB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,MAAM,EAAE,CAAgB,CAAC;IAClD,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAI,EAEd,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvB,IAAI,MAAM,EAAE,CAAC;QACX,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,CAAC,WAAW,GAAG,GAAG,EAAE;YACxB,IAAI,mBAAmB,CAAC,QAAQ,CAAC;gBAAE,MAAM,eAAe,EAAE,CAAC;QAC7D,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,SAAS;IACP,CAAC,CAAC,CAAC,GAAa,EAAE,OAAwB,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,MAAM,EAAE,CAAgB,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,IAAI,mBAAmB,CAAC,QAAQ,CAAC;gBAAE,MAAM,eAAe,EAAE,CAAC;QAC7D,CAAC,CAAC;QACF,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,iBAAiB,CACtB,QAAQ,EACR,OAAO,EACP,gBAAgB,EAAE,EAClB,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC,OAAO,CACpB,IAAI,CAAC,WAAW,CAAC,WAAW,EAC5B,+DAA+D;gBAC7D,4EAA4E,CAC/E,CAAC;QACJ,CAAC;QACD,OAAO,iBAAiB,CACtB,QAAQ,EACR,OAAO,EACP,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,EAC9D,WAAW,CACZ,CAAC;IACJ,CAAC;IACH,CAAC,CAAC,CAAC,GAAa,EAAE,OAAwB,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CACxE,CAAC"}

package/dist/serve/entries/app-backend.d.ts

@@ -0,0 +1,2 @@
+export declare const sandbox: import("pyric/sandbox").LocalSandbox;
+//# sourceMappingURL=app-backend.d.ts.map

package/dist/serve/entries/app-backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-backend.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/app-backend.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,OAAO,sCAAsB,CAAC"}

package/dist/serve/entries/app-backend.js

@@ -0,0 +1,4 @@
+/** Realm-local placeholder attached to app handles; served services use the worker transport. */
+import { initializeSandbox } from 'pyric/sandbox';
+export const sandbox = initializeSandbox();
+//# sourceMappingURL=app-backend.js.map

package/dist/serve/entries/app-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-backend.js","sourceRoot":"","sources":["../../../src/serve/entries/app-backend.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,CAAC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC"}

package/dist/serve/entries/app-client.d.ts

@@ -0,0 +1,5 @@
+/** Per-app SharedWorker ports: distinct Firebase service containers, one worker backend. */
+import type { FirebaseApp } from 'pyric/app';
+import type { ClientDb } from '../worker/client.js';
+export declare function workerClientForApp(app: FirebaseApp): ClientDb;
+//# sourceMappingURL=app-client.d.ts.map

package/dist/serve/entries/app-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-client.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/app-client.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAOpD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,QAAQ,CAe7D"}

package/dist/serve/entries/app-client.js

@@ -0,0 +1,23 @@
+import { registerAppCleanup } from 'pyric/app/internal';
+import { disconnectClient } from '../worker/client/disconnect.js';
+import { openWorkerDb } from './worker-runtime.js';
+const clients = new WeakMap();
+export function workerClientForApp(app) {
+    const existing = clients.get(app);
+    if (existing)
+        return existing;
+    let client;
+    registerAppCleanup(app, async () => {
+        clients.delete(app);
+        if (client)
+            await disconnectClient(client);
+    });
+    client = openWorkerDb(app.name);
+    client.port.postMessage({
+        t: 'appConfig',
+        options: app.options,
+    });
+    clients.set(app, client);
+    return client;
+}
+//# sourceMappingURL=app-client.js.map

package/dist/serve/entries/app-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-client.js","sourceRoot":"","sources":["../../../src/serve/entries/app-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAyB,CAAC;AAErD,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,MAA4B,CAAC;IACjC,kBAAkB,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACjC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,MAAM;YAAE,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QACtB,CAAC,EAAE,WAAW;QACd,OAAO,EAAE,GAAG,CAAC,OAAkC;KACvB,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/serve/entries/app-session-store.d.ts

@@ -0,0 +1,14 @@
+/** App-owned browser auth-session stores for the served Firebase adapters. */
+import type { FirebaseApp } from 'pyric/app';
+import { SessionStore, type SessionStores } from './session-store.js';
+export interface AppSessionStores {
+    forApp(app: FirebaseApp): SessionStore;
+}
+/**
+ * Build an app-identity-keyed store registry. The durable key inside each
+ * SessionStore remains app-name-keyed, so deleting/recreating an app can
+ * restore the same session while its in-memory mode/callback state is fresh.
+ */
+export declare function createAppSessionStores(stores: SessionStores): AppSessionStores;
+export declare function sessionStoreForApp(app: FirebaseApp): SessionStore;
+//# sourceMappingURL=app-session-store.d.ts.map

package/dist/serve/entries/app-session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-session-store.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/app-session-store.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,YAAY,CAAC;CACxC;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAY9E;AAkBD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,YAAY,CAEjE"}

package/dist/serve/entries/app-session-store.js

@@ -0,0 +1,37 @@
+import { registerAppCleanup } from 'pyric/app/internal';
+import { SessionStore } from './session-store.js';
+/**
+ * Build an app-identity-keyed store registry. The durable key inside each
+ * SessionStore remains app-name-keyed, so deleting/recreating an app can
+ * restore the same session while its in-memory mode/callback state is fresh.
+ */
+export function createAppSessionStores(stores) {
+    const byApp = new WeakMap();
+    return {
+        forApp(app) {
+            const existing = byApp.get(app);
+            if (existing)
+                return existing;
+            const store = new SessionStore(stores, app.name);
+            byApp.set(app, store);
+            registerAppCleanup(app, () => { byApp.delete(app); });
+            return store;
+        },
+    };
+}
+function memoryStorage() {
+    const values = new Map();
+    return {
+        getItem: (key) => values.get(key) ?? null,
+        setItem: (key, value) => { values.set(key, value); },
+        removeItem: (key) => { values.delete(key); },
+    };
+}
+const browserStores = typeof localStorage !== 'undefined' && typeof sessionStorage !== 'undefined'
+    ? { local: localStorage, session: sessionStorage }
+    : { local: memoryStorage(), session: memoryStorage() };
+const servedStores = createAppSessionStores(browserStores);
+export function sessionStoreForApp(app) {
+    return servedStores.forApp(app);
+}
+//# sourceMappingURL=app-session-store.js.map

package/dist/serve/entries/app-session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-session-store.js","sourceRoot":"","sources":["../../../src/serve/entries/app-session-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAsB,MAAM,oBAAoB,CAAC;AAMtE;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqB;IAC1D,MAAM,KAAK,GAAG,IAAI,OAAO,EAA6B,CAAC;IACvD,OAAO;QACL,MAAM,CAAC,GAAG;YACR,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACjD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI;QACzC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GACjB,OAAO,YAAY,KAAK,WAAW,IAAI,OAAO,cAAc,KAAK,WAAW;IAC1E,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE;IAClD,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC;AAE3D,MAAM,YAAY,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAE3D,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IACjD,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC"}

package/dist/serve/entries/app.d.ts

@@ -0,0 +1,2 @@
+export * from 'pyric/app';
+//# sourceMappingURL=app.d.ts.map

package/dist/serve/entries/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/app.ts"],"names":[],"mappings":"AAUA,cAAc,WAAW,CAAC"}

package/dist/serve/entries/app.js

@@ -0,0 +1,10 @@
+/** Served `firebase/app`: the exact Pyric client registry over the page runtime. */
+import { bindAppRegistrySandbox } from 'pyric/app/internal';
+import { sandbox } from './app-backend.js';
+// Keep this entry free of dynamic imports: ServiceWorkerGlobalScope supports
+// static module imports but rejects dynamic import(). The attached sandbox is
+// only the app handle's realm-local placeholder; served service calls route to
+// the SharedWorker (directly in Window, via BroadcastChannel in a real SW).
+bindAppRegistrySandbox(sandbox);
+export * from 'pyric/app';
+//# sourceMappingURL=app.js.map

package/dist/serve/entries/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/serve/entries/app.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAEhC,cAAc,WAAW,CAAC"}

package/dist/serve/entries/auth-helper-core.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Framework-free provider account picker controller for `pyric dev`.
+ *
+ * The controller is intentionally backend-agnostic. It receives an identity
+ * directory and returns a Firebase-shaped credential; it never constructs an
+ * Auth handle or mutates a Sandbox. In SharedWorker mode the directory reads
+ * the worker's user pool and the picked credential is committed by
+ * `auth.acceptIdentity`. The in-page fallback supplies a small adapter over its
+ * local auth user store.
+ */
+import type { AuthFlowRequest, AuthFlowResolver } from 'pyric/auth';
+export interface NewIdentitySpec {
+    email: string;
+    displayName?: string;
+    /** Parsed custom claims (the emulator's `customAttributes`). */
+    customClaims?: Record<string, unknown>;
+}
+export interface HelperIdentity {
+    uid: string;
+    email: string | null;
+    displayName: string | null;
+    customClaims: Record<string, unknown>;
+}
+export interface HelperIdentityDirectory {
+    list(): HelperIdentity[] | Promise<HelperIdentity[]>;
+    /** Optional on the worker path: `auth.acceptIdentity` performs the write. */
+    add?(identity: HelperIdentity): void | Promise<void>;
+}
+export interface HelperSnapshot {
+    /** The in-flight request, or null when no popup/redirect is pending. */
+    request: AuthFlowRequest | null;
+    identities: readonly HelperIdentity[];
+}
+export declare class ServeAuthHelper {
+    private readonly directory;
+    private pending;
+    private readonly listeners;
+    private cached;
+    private identities;
+    constructor(directory: HelperIdentityDirectory);
+    resolver(): AuthFlowResolver;
+    subscribe(fn: () => void): () => void;
+    snapshot(): HelperSnapshot;
+    private emit;
+    private refreshIdentities;
+    pick(uid: string): void;
+    add(spec: NewIdentitySpec): void;
+    cancel(): void;
+    private take;
+    private credential;
+}
+//# sourceMappingURL=auth-helper-core.d.ts.map

package/dist/serve/entries/auth-helper-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helper-core.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/auth-helper-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAGjB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,IAAI,cAAc,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACrD,6EAA6E;IAC7E,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;CACvC;AAQD,qBAAa,eAAe;IAMd,OAAO,CAAC,QAAQ,CAAC,SAAS;IALtC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,UAAU,CAAwB;gBAEb,SAAS,EAAE,uBAAuB;IAI/D,QAAQ,IAAI,gBAAgB;IAW5B,SAAS,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAKrC,QAAQ,IAAI,cAAc;IAQ1B,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,iBAAiB;IAwBzB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAWvB,GAAG,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAehC,MAAM,IAAI,IAAI;IAWd,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,UAAU;CAiBnB"}