@pyric/cli 0.1.0-alpha.10

package/dist/bridge/server/tool-metadata.js

@@ -0,0 +1,84 @@
+/**
+ * Extract tool metadata (name + description + parameters) from the
+ * existing `pyric/rules` factories without running any
+ * tool logic. Used by the bridge to register MCP tools whose actual
+ * dispatch happens against the connected browser peer.
+ *
+ * Why: `createFirestoreSimulatorTools` returns `ToolHandler[]` with
+ * `execute` bound to a `LocalEnvironment`. The bridge process doesn't
+ * have a `LocalEnvironment` — it forwards. But it does need the
+ * metadata to populate the MCP server's tool list. This module calls
+ * the factory with a stub resolver and reads only the metadata; the
+ * stub never gets invoked because the bridge replaces `execute`
+ * before dispatch.
+ */
+import { createFirestoreSimulatorTools, createFirestoreRulesTools, } from 'pyric/rules/internal/node';
+import { createFirestoreDataTools, createFirestoreInspectTools } from 'pyric/firestore';
+import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
+import { createConformanceTools } from '../../conformance/tools.js';
+function toMetadata(handler) {
+    return {
+        name: handler.name,
+        description: handler.description,
+        parameters: handler.parameters,
+    };
+}
+/**
+ * Tool metadata for the sandbox bridge. Includes the
+ * data-plane / sandbox-management tools that the browser dispatches
+ * via `LocalEnvironment`. Rules tooling (lint, validate, simulate,
+ * test) is NOT included here — those execute in Node and are
+ * registered separately, since they don't need the browser sandbox.
+ */
+export function getSandboxToolMetadata() {
+    // The resolver stub never runs: the bridge replaces execute() with
+    // its own forward-to-peer dispatch.
+    const stubResolver = async () => {
+        throw new Error('BUG: sandbox-tool factory executor invoked on the bridge side — should have been replaced');
+    };
+    const handlers = [
+        // Simulator / write / batch / undo / redo / events / transaction —
+        // 8 tools that mutate or read the in-browser sandbox state.
+        ...createFirestoreSimulatorTools({
+            resolveSandbox: stubResolver,
+        }),
+        // Data plane — addDoc / setDoc / getDoc / updateDoc / deleteDoc /
+        // collection / query / where — the modular Firestore CRUD surface
+        // routed through the browser sandbox so agents can drive a real app
+        // session rather than only the simulator.
+        ...createFirestoreDataTools({
+            resolveDb: stubResolver,
+        }),
+        // `sandbox_inspect` — single-call diagnostic that answers
+        // "what state is the sandbox in?" Born out of CLAUDE_DEBUG_SESSION.md
+        // (a real agent needing 51 tool calls + 72k tokens to figure out
+        // that rules weren't loaded). Routes to the browser sandbox like
+        // the other forwarded tools.
+        ...createFirestoreInspectTools({
+            resolveSandbox: stubResolver,
+        }),
+        ...createRtdbInspectionTools({
+            resolveSandbox: stubResolver,
+        }),
+    ];
+    return handlers.map(toMetadata);
+}
+/**
+ * Tooling factories that execute in-process on the bridge
+ * (no browser needed). Returned as live ToolHandlers — the bridge
+ * registers each handler's `execute` directly.
+ *
+ * `scope` is forwarded so the hosted Rules Test API verification tool can
+ * authenticate without changing the bridge's sandbox-only execution model.
+ */
+export function getInProcessToolHandlers(scope) {
+    // Factory accepts { scope } per packages/pyric/src/rules/tools.ts.
+    // The bridge does not need to own the structurally compatible type.
+    // Includes the rules tool surface plus the Node-only conformance query.
+    // No browser is needed.
+    return [
+        ...createFirestoreRulesTools({ scope }),
+        ...createConformanceTools(),
+    ];
+}
+//# sourceMappingURL=tool-metadata.js.map

package/dist/bridge/server/tool-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-metadata.js","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAQpE,SAAS,UAAU,CAAC,OAAoB;IACtC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAqC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB;IACpC,mEAAmE;IACnE,oCAAoC;IACpC,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,QAAQ,GAAkB;QAC9B,mEAAmE;QACnE,4DAA4D;QAC5D,GAAG,6BAA6B,CAAC;YAC/B,cAAc,EAAE,YAAqB;SACtC,CAAC;QACF,kEAAkE;QAClE,kEAAkE;QAClE,oEAAoE;QACpE,0CAA0C;QAC1C,GAAG,wBAAwB,CAAC;YAC1B,SAAS,EAAE,YAAqB;SACjC,CAAC;QACF,0DAA0D;QAC1D,sEAAsE;QACtE,iEAAiE;QACjE,iEAAiE;QACjE,6BAA6B;QAC7B,GAAG,2BAA2B,CAAC;YAC7B,cAAc,EAAE,YAAqB;SACtC,CAAC;QACF,GAAG,yBAAyB,CAAC;YAC3B,cAAc,EAAE,YAAqB;SACtC,CAAC;KACH,CAAC;IACF,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAe;IACtD,mEAAmE;IACnE,oEAAoE;IACpE,wEAAwE;IACxE,wBAAwB;IACxB,OAAO;QACL,GAAG,yBAAyB,CAAC,EAAE,KAAK,EAAW,CAAC;QAChD,GAAG,sBAAsB,EAAE;KAC5B,CAAC;AACJ,CAAC"}

package/dist/bridge/server.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `@pyric/cli/bridge` — Node-side entry.
+ *
+ * Resolved by the `node` condition in `package.json`'s exports map.
+ * Exports the bridge core (`createBridge`) and the standalone server
+ * (`startServer`). The Vite integration is the `pyricSandbox({ bridge })`
+ * plugin in `@pyric/cli/vite` (the firebase→sandbox swap AND the bridge in
+ * one plugin), not a bridge-only plugin here.
+ *
+ * The browser-side `connectBridge` lives in `./client.ts` and is
+ * resolved by the `browser` condition. Wire format shared by both
+ * lives in `./protocol.ts` (type-only, no runtime imports across the
+ * boundary).
+ */
+export type { HealthReport } from './protocol.js';
+export { DEFAULT_BRIDGE_PORT, DEFAULT_HEALTH_PATH, DEFAULT_MCP_PATH, DEFAULT_SANDBOX_PATH, } from './protocol.js';
+export { createBridge } from './server/bridge.js';
+export type { Bridge, BridgeOptions } from './server/bridge.js';
+export { startServer } from './server/standalone.js';
+export type { ServerHandle, StartServerOptions } from './server/standalone.js';
+//# sourceMappingURL=server.d.ts.map

package/dist/bridge/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/bridge/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/bridge/server.js

@@ -0,0 +1,18 @@
+/**
+ * `@pyric/cli/bridge` — Node-side entry.
+ *
+ * Resolved by the `node` condition in `package.json`'s exports map.
+ * Exports the bridge core (`createBridge`) and the standalone server
+ * (`startServer`). The Vite integration is the `pyricSandbox({ bridge })`
+ * plugin in `@pyric/cli/vite` (the firebase→sandbox swap AND the bridge in
+ * one plugin), not a bridge-only plugin here.
+ *
+ * The browser-side `connectBridge` lives in `./client.ts` and is
+ * resolved by the `browser` condition. Wire format shared by both
+ * lives in `./protocol.ts` (type-only, no runtime imports across the
+ * boundary).
+ */
+export { DEFAULT_BRIDGE_PORT, DEFAULT_HEALTH_PATH, DEFAULT_MCP_PATH, DEFAULT_SANDBOX_PATH, } from './protocol.js';
+export { createBridge } from './server/bridge.js';
+export { startServer } from './server/standalone.js';
+//# sourceMappingURL=server.js.map

package/dist/bridge/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/bridge/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/cli/can-i-use.d.ts

@@ -0,0 +1,5 @@
+import type { ParsedArgs } from './parse-args.js';
+/** Query feature support. This is discovery, independent of rules-fixture
+ * verification, so it owns a top-level CLI command. */
+export declare function runCanIUse(parsed: ParsedArgs): number;
+//# sourceMappingURL=can-i-use.d.ts.map

package/dist/cli/can-i-use.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-i-use.d.ts","sourceRoot":"","sources":["../../src/cli/can-i-use.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD;uDACuD;AACvD,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CA4CrD"}

package/dist/cli/can-i-use.js

@@ -0,0 +1,49 @@
+import { canIUse } from '../conformance/index.js';
+/** Query feature support. This is discovery, independent of rules-fixture
+ * verification, so it owns a top-level CLI command. */
+export function runCanIUse(parsed) {
+    for (const [flag, value] of parsed.flags) {
+        const validJsonValue = flag === 'json' && (value === true || value === 'true' || value === 'false');
+        if (!validJsonValue) {
+            const rendered = value === true ? `--${flag}` : `--${flag}=${String(value)}`;
+            process.stderr.write(`pyric can-i-use: unknown option '${rendered}'\n`);
+            return 1;
+        }
+    }
+    const feature = parsed.positional.join(' ');
+    if (!feature.trim()) {
+        process.stderr.write('pyric can-i-use: provide a developer feature name\n');
+        return 1;
+    }
+    const result = canIUse(feature);
+    const jsonFlag = parsed.flags.get('json');
+    if (jsonFlag === true || jsonFlag === 'true') {
+        process.stdout.write(JSON.stringify(result) + '\n');
+        return result.match === 'exact' ? 0 : 1;
+    }
+    if (result.match === 'none') {
+        process.stdout.write(`No conformance feature matched "${feature}".\n`);
+        return 1;
+    }
+    if (result.match === 'suggestions') {
+        process.stdout.write(`No exact conformance feature matched "${feature}". Did you mean:\n`);
+        for (const support of result.supports)
+            process.stdout.write(`  ${support.surface}/${support.feature}\n`);
+        return 1;
+    }
+    if (result.match === 'ambiguous') {
+        process.stdout.write(`"${feature}" matches more than one surface:\n`);
+    }
+    for (const support of result.supports) {
+        process.stdout.write(`${support.feature} (${support.surface})\n` +
+            `  availability: ${support.availability}\n` +
+            `  fidelity: ${support.fidelity}\n` +
+            `  assurance: ${support.assurance}\n` +
+            `  evidence: ${support.evidenceSlug}\n` +
+            `  ${support.summary}\n`);
+        for (const caveat of support.caveats)
+            process.stdout.write(`  caveat: ${caveat}\n`);
+    }
+    return result.match === 'exact' ? 0 : 1;
+}
+//# sourceMappingURL=can-i-use.js.map

package/dist/cli/can-i-use.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-i-use.js","sourceRoot":"","sources":["../../src/cli/can-i-use.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD;uDACuD;AACvD,MAAM,UAAU,UAAU,CAAC,MAAkB;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC,CAAC;QACpG,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,QAAQ,KAAK,CAAC,CAAC;YACxE,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,OAAO,MAAM,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,OAAO,oBAAoB,CAAC,CAAC;QAC3F,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QACzG,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,oCAAoC,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,KAAK;YACzC,mBAAmB,OAAO,CAAC,YAAY,IAAI;YAC3C,eAAe,OAAO,CAAC,QAAQ,IAAI;YACnC,gBAAgB,OAAO,CAAC,SAAS,IAAI;YACrC,eAAe,OAAO,CAAC,YAAY,IAAI;YACvC,KAAK,OAAO,CAAC,OAAO,IAAI,CAC3B,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,MAAM,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/cli/database-rules.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `pyric database rules *` subcommands — local tooling for Realtime Database
+ * rules JSON.
+ */
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { type CompiledRtdbRules, type SimulationInput, type SimulateResult } from 'pyric/rules/internal/rtdb';
+import type { ParsedArgs } from './parse-args.js';
+import { type FirebaseJson } from './firebase-json.js';
+import { loadRtdbRulesDocument } from '../rtdb/load-rules-document.js';
+export interface DatabaseRulesDeps {
+    readFile?: typeof readFile;
+    writeFile?: typeof writeFile;
+    mkdir?: typeof mkdir;
+    readFirebaseJson?: (cwd: string) => Promise<FirebaseJson>;
+    simulate?: (compiled: CompiledRtdbRules, input: SimulationInput) => SimulateResult;
+    loadRulesDocument?: typeof loadRtdbRulesDocument;
+    cwd?: string;
+    readStdin?: () => Promise<string>;
+    stdout?: {
+        write(s: string): void;
+    };
+    stderr?: {
+        write(s: string): void;
+    };
+}
+export declare function runDatabaseRulesLint(parsed: ParsedArgs, deps?: DatabaseRulesDeps): Promise<number>;
+export declare function runDatabaseRulesValidate(parsed: ParsedArgs, deps?: DatabaseRulesDeps): Promise<number>;
+export declare function runDatabaseRulesSimulate(parsed: ParsedArgs, deps?: DatabaseRulesDeps): Promise<number>;
+/**
+ * `pyric database rules generate [--config <path>] [--out <path>]`
+ *
+ * Loads a user's RTDB constraints module (a file that calls
+ * `defineRtdbRules(...)` from `pyric/rules`), compiles it via
+ * `RtdbRulesDocument#toJSON()` — the same primitive RTDB deploy uses —
+ * and writes the static `database.rules.json` shape to disk so it can
+ * be inspected, diffed, and committed before deploying.
+ *
+ * `--config` defaults to `database.rules.ts`. `--out` defaults to
+ * `firebase.json`'s `database.rules` path, falling back to
+ * `database.rules.json` when firebase.json has no such entry.
+ */
+export declare function runDatabaseRulesGenerate(parsed: ParsedArgs, deps?: DatabaseRulesDeps): Promise<number>;
+//# sourceMappingURL=database-rules.d.ts.map

package/dist/cli/database-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-rules.d.ts","sourceRoot":"","sources":["../../src/cli/database-rules.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAGL,KAAK,iBAAiB,EAEtB,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EACL,qBAAqB,EAEtB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,EAAE,eAAe,KAAK,cAAc,CAAC;IACnF,iBAAiB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrC;AAoED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAuBjB;AA+BD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAkFjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAuCjB"}

package/dist/cli/database-rules.js

@@ -0,0 +1,261 @@
+/**
+ * `pyric database rules *` subcommands — local tooling for Realtime Database
+ * rules JSON.
+ */
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, resolve as resolvePath } from 'node:path';
+import { compileRtdbRules, simulateRtdbRules, } from 'pyric/rules/internal/rtdb';
+import { readFirebaseJson } from './firebase-json.js';
+import { loadRtdbRulesDocument, } from '../rtdb/load-rules-document.js';
+function defaultReadStdin() {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        process.stdin.setEncoding('utf-8');
+        process.stdin.on('data', (chunk) => {
+            data += chunk;
+        });
+        process.stdin.on('end', () => resolve(data));
+        process.stdin.on('error', reject);
+    });
+}
+function parseRulesJson(raw) {
+    return compileRtdbRules(JSON.parse(raw));
+}
+function collectFindings(node, kind) {
+    const findings = [];
+    const rules = [
+        ['.read', node.read],
+        ['.write', node.write],
+        ['.validate', node.validate],
+    ];
+    for (const [rule, expr] of rules) {
+        for (const finding of expr?.parsed[kind] ?? []) {
+            findings.push({
+                path: node.path,
+                rule,
+                code: finding.code,
+                message: finding.message,
+            });
+        }
+    }
+    for (const child of node.children) {
+        findings.push(...collectFindings(child, kind));
+    }
+    return findings;
+}
+async function readRulesFile(path, deps) {
+    const cwd = deps.cwd ?? process.cwd();
+    const readFileFn = deps.readFile ?? readFile;
+    try {
+        return { ok: true, raw: await readFileFn(resolvePath(cwd, path), 'utf-8') };
+    }
+    catch (e) {
+        return { ok: false, message: e instanceof Error ? e.message : String(e) };
+    }
+}
+function jsonError(code, message) {
+    return {
+        errors: [{ path: '/', rule: '.read', code, message }],
+        warnings: [],
+    };
+}
+export async function runDatabaseRulesLint(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const path = parsed.positional[0];
+    if (!path) {
+        err.write('pyric database rules lint: missing rules-file path. Usage: pyric database rules lint <path>\n');
+        return 1;
+    }
+    const file = await readRulesFile(path, deps);
+    if (!file.ok) {
+        err.write(`pyric database rules lint: ${file.message}\n`);
+        return 1;
+    }
+    try {
+        const compiled = parseRulesJson(file.raw);
+        out.write(`${JSON.stringify({ warnings: collectFindings(compiled, 'warnings') }, null, 2)}\n`);
+        return 0;
+    }
+    catch (e) {
+        out.write(`${JSON.stringify(jsonError('INVALID_RULES_JSON', e instanceof Error ? e.message : String(e)), null, 2)}\n`);
+        return 2;
+    }
+}
+export async function runDatabaseRulesValidate(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const path = parsed.positional[0];
+    if (!path) {
+        err.write('pyric database rules validate: missing rules-file path. Usage: pyric database rules validate <path>\n');
+        return 1;
+    }
+    const file = await readRulesFile(path, deps);
+    if (!file.ok) {
+        err.write(`pyric database rules validate: ${file.message}\n`);
+        return 1;
+    }
+    try {
+        const compiled = parseRulesJson(file.raw);
+        out.write(`${JSON.stringify({ errors: collectFindings(compiled, 'errors') }, null, 2)}\n`);
+        return 0;
+    }
+    catch (e) {
+        out.write(`${JSON.stringify(jsonError('INVALID_RULES_JSON', e instanceof Error ? e.message : String(e)), null, 2)}\n`);
+        return 2;
+    }
+}
+async function readFirebaseRules(deps) {
+    const cwd = deps.cwd ?? process.cwd();
+    const fjRead = deps.readFirebaseJson ?? readFirebaseJson;
+    let firebaseJson;
+    try {
+        firebaseJson = await fjRead(cwd);
+    }
+    catch (e) {
+        return { ok: false, message: e instanceof Error ? e.message : String(e) };
+    }
+    const rulesPath = firebaseJson.database?.rules;
+    if (!rulesPath) {
+        return { ok: false, message: 'firebase.json has no `database.rules` path.' };
+    }
+    return readRulesFile(rulesPath, deps);
+}
+export async function runDatabaseRulesSimulate(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const readFileFn = deps.readFile ?? readFile;
+    const simulateFn = deps.simulate ??
+        simulateRtdbRules;
+    let rulesJson;
+    let input;
+    if (parsed.flags.get('stdin') === true) {
+        const readStdinFn = deps.readStdin ?? defaultReadStdin;
+        let payload;
+        try {
+            payload = JSON.parse(await readStdinFn());
+        }
+        catch (e) {
+            err.write(`pyric database rules simulate: failed to parse stdin JSON: ${e instanceof Error ? e.message : String(e)}\n`);
+            return 1;
+        }
+        if (!payload.operation || !payload.path) {
+            err.write('pyric database rules simulate: stdin payload must include `operation` and `path`.\n');
+            return 1;
+        }
+        if (payload.rulesJson !== undefined || payload.rules !== undefined) {
+            rulesJson = payload.rulesJson ?? payload.rules;
+        }
+        else if (payload.rulesPath) {
+            try {
+                rulesJson = JSON.parse(await readFileFn(resolvePath(deps.cwd ?? process.cwd(), payload.rulesPath), 'utf-8'));
+            }
+            catch (e) {
+                err.write(`pyric database rules simulate: ${e instanceof Error ? e.message : String(e)}\n`);
+                return 1;
+            }
+        }
+        else {
+            const file = await readFirebaseRules(deps);
+            if (!file.ok) {
+                err.write(`pyric database rules simulate: ${file.message}\n`);
+                return 1;
+            }
+            try {
+                rulesJson = JSON.parse(file.raw);
+            }
+            catch (e) {
+                err.write(`pyric database rules simulate: ${e instanceof Error ? e.message : String(e)}\n`);
+                return 2;
+            }
+        }
+        input = {
+            operation: payload.operation,
+            path: payload.path,
+            auth: payload.auth ?? null,
+            mockData: payload.mockData ?? {},
+            ...(payload.newData !== undefined ? { newData: payload.newData } : {}),
+        };
+    }
+    else {
+        const file = await readFirebaseRules(deps);
+        if (!file.ok) {
+            err.write(`pyric database rules simulate: ${file.message}\n`);
+            return 1;
+        }
+        try {
+            rulesJson = JSON.parse(file.raw);
+        }
+        catch (e) {
+            err.write(`pyric database rules simulate: ${e instanceof Error ? e.message : String(e)}\n`);
+            return 2;
+        }
+        input = {
+            operation: 'read',
+            path: '/sample/x',
+            auth: null,
+            mockData: {},
+        };
+    }
+    try {
+        const compiled = compileRtdbRules(rulesJson);
+        const result = simulateFn(compiled, input);
+        out.write(`${JSON.stringify(result, null, 2)}\n`);
+        return result.success ? 0 : 2;
+    }
+    catch (e) {
+        err.write(`pyric database rules simulate: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 2;
+    }
+}
+/**
+ * `pyric database rules generate [--config <path>] [--out <path>]`
+ *
+ * Loads a user's RTDB constraints module (a file that calls
+ * `defineRtdbRules(...)` from `pyric/rules`), compiles it via
+ * `RtdbRulesDocument#toJSON()` — the same primitive RTDB deploy uses —
+ * and writes the static `database.rules.json` shape to disk so it can
+ * be inspected, diffed, and committed before deploying.
+ *
+ * `--config` defaults to `database.rules.ts`. `--out` defaults to
+ * `firebase.json`'s `database.rules` path, falling back to
+ * `database.rules.json` when firebase.json has no such entry.
+ */
+export async function runDatabaseRulesGenerate(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const cwd = deps.cwd ?? process.cwd();
+    const writeFileFn = deps.writeFile ?? writeFile;
+    const mkdirFn = deps.mkdir ?? mkdir;
+    const loadRulesDocument = deps.loadRulesDocument ?? loadRtdbRulesDocument;
+    const configFlag = parsed.flags.get('config');
+    const configPath = typeof configFlag === 'string' ? configFlag : 'database.rules.ts';
+    const loaded = await loadRulesDocument(configPath, { cwd });
+    if (!loaded.ok) {
+        err.write(`pyric database rules generate: ${loaded.message}\n`);
+        return 1;
+    }
+    const outFlag = parsed.flags.get('out');
+    let outPath;
+    if (typeof outFlag === 'string') {
+        outPath = outFlag;
+    }
+    else {
+        const fjRead = deps.readFirebaseJson ?? readFirebaseJson;
+        let firebaseJson = null;
+        try {
+            firebaseJson = await fjRead(cwd);
+        }
+        catch {
+            firebaseJson = null;
+        }
+        outPath = firebaseJson?.database?.rules ?? 'database.rules.json';
+    }
+    const resolvedOut = resolvePath(cwd, outPath);
+    const rulesJson = loaded.document.toJSON();
+    await mkdirFn(dirname(resolvedOut), { recursive: true });
+    await writeFileFn(resolvedOut, `${JSON.stringify(rulesJson, null, 2)}\n`, 'utf-8');
+    out.write(`pyric database rules generate: wrote ${resolvedOut}\n`);
+    return 0;
+}
+//# sourceMappingURL=database-rules.js.map

package/dist/cli/database-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-rules.js","sourceRoot":"","sources":["../../src/cli/database-rules.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAKlB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,gBAAgB,EAAqB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EACL,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AAsBxC,SAAS,gBAAgB;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,eAAe,CAAC,IAAc,EAAE,IAA2B;IAClE,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG;QACZ,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;QACpB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;QACtB,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC;KACpB,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI;gBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,OAAe;IAC9C,OAAO;QACL,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrD,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkB,EAClB,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,+FAA+F,CAAC,CAAC;QAC3G,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/F,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAkB,EAClB,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,uGAAuG,CAAC,CAAC;QACnH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3F,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAaD,KAAK,UAAU,iBAAiB,CAC9B,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC;IACzD,IAAI,YAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAkB,EAClB,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC7C,MAAM,UAAU,GACd,IAAI,CAAC,QAAQ;QACb,iBAAiB,CAAC;IAEpB,IAAI,SAAkB,CAAC;IACvB,IAAI,KAAsB,CAAC;IAE3B,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC;QACvD,IAAI,OAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,WAAW,EAAE,CAAoB,CAAC;QAC/D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,8DAA8D,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;YACjG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnE,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;QACjD,CAAC;aAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/G,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5F,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;gBAC9D,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5F,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,KAAK,GAAG;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5F,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,GAAG;YACN,SAAS,EAAE,MAAM;YACjB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAkB,EAClB,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,qBAAqB,CAAC;IAE1E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAErF,MAAM,MAAM,GAAgC,MAAM,iBAAiB,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,OAAe,CAAC;IACpB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC;QACzD,IAAI,YAAY,GAAwB,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,YAAY,EAAE,QAAQ,EAAE,KAAK,IAAI,qBAAqB,CAAC;IACnE,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC3C,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAEnF,GAAG,CAAC,KAAK,CAAC,wCAAwC,WAAW,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/dev-runner.d.ts

@@ -0,0 +1,112 @@
+/**
+ * The `pyric dev` child runner — "one command, not two" (adoption design):
+ * after the host is up, run the user's OWN dev command with the environment
+ * activated so their unchanged firebase-admin/firebase imports resolve to the
+ * pyric sandbox:
+ *
+ *   PYRIC_SANDBOX=remote:<serve url>          (the activator)
+ *   NODE_OPTIONS += --import @pyric/cli/register   (the substitution seam)
+ *
+ * Child-command precedence: explicit `pyric dev -- <cmd>` wins; else the
+ * project package.json `dev` script (via the detected package manager); else
+ * host-only (today's behavior). `--no-run` forces host-only; `--json`
+ * defaults to host-only (an explicit `--` still wins — agents can opt in).
+ *
+ * Everything decision-shaped here is pure and exported for the unit suite;
+ * only `spawnDevChild` touches the process table.
+ */
+import { type ChildProcess } from 'node:child_process';
+/**
+ * Wait (bounded) for a browser tab to register as the bridge's sandbox peer
+ * before the child spawns. `pyric dev` opens the tab and spawns the child in
+ * the same breath; a child whose first line is a sandbox op otherwise races
+ * the tab's boot and dies on the no-tab fail-fast — the exact first-run of
+ * the two-command story. Polls `/__pyric/health` (`sandboxConnected`).
+ *
+ * Returns true when a peer connected, false on timeout (caller warns and
+ * spawns anyway — the child may not touch the sandbox at all). Injectable
+ * clock/fetch for the unit suite.
+ */
+export declare function waitForSandboxPeer(serveUrl: string, opts?: {
+    timeoutMs?: number;
+    intervalMs?: number;
+    fetchImpl?: typeof fetch;
+    sleep?: (ms: number) => Promise<void>;
+}): Promise<boolean>;
+export type PackageManager = 'bun' | 'pnpm' | 'yarn' | 'npm';
+/** Lockfile sniff, mirroring how init/vendor pick their install hints. */
+export declare function detectPackageManager(cwd: string): PackageManager;
+/** The project's `dev` script, or null (no package.json / no script). */
+export declare function readDevScript(cwd: string): string | null;
+export interface DevChildPlan {
+    /** argv to spawn — argv[0] is the executable, no shell. */
+    argv: string[];
+    /** Human-readable command for the pre-spawn line. */
+    label: string;
+}
+/**
+ * Decide what (if anything) to run after the host is up.
+ *
+ * Matrix:
+ *   --no-run                → null, always
+ *   `-- <cmd>`              → that command (wins over everything else)
+ *   --json (no `--`)        → null (machine mode defaults to host-only)
+ *   package.json dev script → `<pm> run dev`
+ *   none of the above       → null (host-only, today's behavior)
+ *
+ * A `dev` script that itself invokes `pyric dev` is treated as absent —
+ * running it would recurse forever (pyric dev → npm run dev → pyric dev …).
+ */
+export declare function resolveDevChild(opts: {
+    passthrough: string[];
+    noRun: boolean;
+    json: boolean;
+    devScript: string | null;
+    packageManager: PackageManager;
+}): DevChildPlan | null;
+/**
+ * The absolute `file:` URL of the register module, resolved from
+ * @pyric/cli' OWN installed location — `import.meta.resolve` walks this
+ * package's `exports` (self-reference), so it lands on the right file no
+ * matter how the user's node_modules are laid out (hoisted, pnpm-isolated,
+ * vendored). Fallback: relative to this compiled file (dist/cli/ →
+ * dist/register/), for runtimes without a usable import.meta.resolve.
+ */
+export declare function registerModuleUrl(): string;
+/**
+ * Child env: sets the activator and APPENDS the loader to NODE_OPTIONS —
+ * never replaces it (the user's own --inspect / --max-old-space-size etc.
+ * must survive). `file:` URLs are percent-encoded, so no quoting is needed
+ * even for paths with spaces.
+ */
+export declare function buildChildEnv(base: NodeJS.ProcessEnv, opts: {
+    serveUrl: string;
+    registerUrl: string;
+}): NodeJS.ProcessEnv;
+/**
+ * Incremental line prefixer: every child output line gets `[dev] `, partial
+ * lines are buffered until their newline (or flush at stream end).
+ */
+export declare function createLinePrefixer(prefix: string, write: (line: string) => void): {
+    push(chunk: string): void;
+    flush(): void;
+};
+export interface DevChildHandle {
+    /** Resolves with the exit code to propagate once the child is gone. */
+    exited: Promise<number>;
+    /** Forward a signal (Ctrl-C / SIGTERM). Marks the exit as user-initiated
+     *  so the propagated code is 0, and SIGKILLs a child that lingers. */
+    signal(sig: NodeJS.Signals): void;
+    child: ChildProcess;
+}
+/**
+ * Spawn the child with inherited stdin and `[dev]`-prefixed stdout/stderr.
+ * In `--json` mode ALL child output goes to stderr — stdout carries exactly
+ * the one machine line (the serve --json contract).
+ */
+export declare function spawnDevChild(plan: DevChildPlan, opts: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    json: boolean;
+}): DevChildHandle;
+//# sourceMappingURL=dev-runner.d.ts.map

package/dist/cli/dev-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-runner.d.ts","sourceRoot":"","sources":["../../src/cli/dev-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAM9D;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC,GACL,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAID,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;AAE7D,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAKhE;AAED,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUxD;AAED,MAAM,WAAW,YAAY;IAC3B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,cAAc,CAAC;CAChC,GAAG,YAAY,GAAG,IAAI,CAWtB;AAID;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAQ1C;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,CAAC,UAAU,EACvB,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC9C,MAAM,CAAC,UAAU,CAOnB;AAID;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC5B;IAAE,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,IAAI,IAAI,CAAA;CAAE,CAkB9C;AAID,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB;0EACsE;IACtE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,YAAY,CAAC;CACrB;AAKD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC3D,cAAc,CAiEhB"}