@pyric/cli 0.1.0-alpha.10

package/dist/serve/worker/host-messaging.js

@@ -0,0 +1,226 @@
+/**
+ * SharedWorker host — messaging subsystem: the broker's documented
+ * worker-host seam, wired (see `pyric/src/messaging/broker/broker.ts`
+ * header — each public broker method is one `messaging.*` op here).
+ *
+ * ONE broker per sandbox (`getMessagingBroker`), shared by every port —
+ * production's one-service-worker-per-origin model. Two seams cross the
+ * transport:
+ *
+ *   OPS   token lifecycle (`getToken`/`deleteToken`), the send plane
+ *         (`send`, topic management), the delivery driver (`deliver`), and
+ *         visibility (`setVisibility`). Send-plane rejections carry the
+ *         broker's captured google.rpc envelope VERBATIM on
+ *         `error.envelope` (plain JSON, structured-clone-safe).
+ *
+ *   SUBS  `messaging.foreground` / `messaging.background` register real
+ *         broker handlers whose payloads forward to the subscribing port as
+ *         snaps. Unsubs ride the ordinary `ctx.subs` registry, so
+ *         `cleanupPort` tears them down like Firestore listeners.
+ *
+ * PER-PORT VISIBILITY — the captured routing rule crossing the transport:
+ * each port that reports `messaging.setVisibility` is ONE window client in
+ * the broker (`setClientVisibility(portId, state)` on the page's
+ * `visibilitychange`). A hidden tab's port marks its client not-visible;
+ * routing is foreground iff ANY visible client (oracle:
+ * `messaging-web-visibility-routing` — visibility, never focus). Port close
+ * removes the client so a dead tab cannot pin foreground routing.
+ *
+ * HOST CAPABILITY GATE: ops exist only when the ctx was built with
+ * `messagingEnabled: true`. Both serve producers enable it because Messaging
+ * is part of the canonical Firebase SDK swap. The disabled path remains for
+ * standalone host construction and focused tests.
+ *
+ * Imports only from `./host-context.js` + external packages (host-auth
+ * precedent — no circular imports).
+ */
+import { getMessagingBroker, BrokerSendError } from 'pyric/messaging/internal';
+import { post, ok, fail } from './host-context.js';
+/** Registration id used when a `messaging.getToken`/`deleteToken` op names
+ *  none — the transport twin of the mirrors' module-default registration. */
+export const DEFAULT_WIRE_REGISTRATION_ID = 'swreg-port-default';
+const MESSAGING_METHODS = new Set([
+    'messaging.getToken',
+    'messaging.deleteToken',
+    'messaging.send',
+    'messaging.subscribeToTopic',
+    'messaging.unsubscribeFromTopic',
+    'messaging.deliver',
+    'messaging.setVisibility',
+]);
+/** Is this op method part of the messaging surface? (Routing predicate for
+ *  handleMessage — the auth-op precedent.) */
+export function isMessagingOp(method) {
+    return MESSAGING_METHODS.has(method);
+}
+/** The error every messaging op/sub answers on a host without the capability. */
+function disabledError() {
+    return {
+        code: 'messaging/disabled',
+        message: 'pyric worker: this host was created without Messaging enabled. ' +
+            'Build the worker host ctx with `messagingEnabled: true`.',
+    };
+}
+function broker(ctx) {
+    return getMessagingBroker(ctx.sandbox);
+}
+// Module-level mint so client ids never collide across delete/re-add on one
+// broker (a ctx-map-size mint would reuse ids after removal).
+let clientSeq = 0;
+/** The port's broker client id, minted on first visibility report. */
+function clientIdFor(ctx, port) {
+    const clients = (ctx.messagingClients ??= new Map());
+    let id = clients.get(port);
+    if (id === undefined) {
+        id = `port-client-${++clientSeq}`;
+        clients.set(port, id);
+    }
+    return id;
+}
+/**
+ * Fail a messaging op. A `BrokerSendError` crosses the wire as its captured
+ * envelope (the seam contract): `code` is the envelope's google.rpc status
+ * (`INVALID_ARGUMENT`, `NOT_FOUND`, …), `envelope` the full pinned value.
+ */
+function failMessaging(port, id, err) {
+    if (err instanceof BrokerSendError) {
+        post(port, {
+            t: 'res',
+            id,
+            ok: false,
+            error: {
+                code: err.envelope.error.status,
+                message: err.envelope.error.message,
+                envelope: err.envelope,
+            },
+        });
+        return;
+    }
+    fail(port, id, err);
+}
+export async function handleMessagingOp(ctx, port, msg) {
+    if (ctx.messagingEnabled !== true) {
+        post(port, { t: 'res', id: msg.id, ok: false, error: disabledError() });
+        return;
+    }
+    switch (msg.method) {
+        case 'messaging.getToken': {
+            // Stable per registration (oracle: `messaging-web-token-stability`).
+            try {
+                const token = broker(ctx).getTokenFor(msg.registrationId ?? DEFAULT_WIRE_REGISTRATION_ID);
+                ok(port, msg.id, { token });
+            }
+            catch (e) {
+                failMessaging(port, msg.id, e);
+            }
+            break;
+        }
+        case 'messaging.deleteToken': {
+            // Resolves truthy either way (oracle: `messaging-web-deletetoken-unregistered`).
+            try {
+                ok(port, msg.id, broker(ctx).deleteTokenFor(msg.registrationId ?? DEFAULT_WIRE_REGISTRATION_ID));
+            }
+            catch (e) {
+                failMessaging(port, msg.id, e);
+            }
+            break;
+        }
+        case 'messaging.send': {
+            // AcceptedSend is plain JSON — replies verbatim. Rejections carry the
+            // captured envelope (see failMessaging).
+            try {
+                const accepted = broker(ctx).send(msg.message, {
+                    ...(msg.validateOnly !== undefined ? { validateOnly: msg.validateOnly } : {}),
+                });
+                ok(port, msg.id, accepted);
+            }
+            catch (e) {
+                failMessaging(port, msg.id, e);
+            }
+            break;
+        }
+        case 'messaging.subscribeToTopic': {
+            try {
+                ok(port, msg.id, broker(ctx).subscribeToTopic(msg.tokens, msg.topic));
+            }
+            catch (e) {
+                failMessaging(port, msg.id, e);
+            }
+            break;
+        }
+        case 'messaging.unsubscribeFromTopic': {
+            try {
+                ok(port, msg.id, broker(ctx).unsubscribeFromTopic(msg.tokens, msg.topic));
+            }
+            catch (e) {
+                failMessaging(port, msg.id, e);
+            }
+            break;
+        }
+        case 'messaging.deliver': {
+            // Test/Studio driver — DeliveryResult { route, handlerCount, payload }
+            // is plain JSON.
+            try {
+                ok(port, msg.id, broker(ctx).deliver(msg.spec));
+            }
+            catch (e) {
+                failMessaging(port, msg.id, e);
+            }
+            break;
+        }
+        case 'messaging.setVisibility': {
+            // THE routing input crossing the transport: this port's tab is one
+            // window client; its visibility report updates the broker state the
+            // captured rule routes on.
+            try {
+                broker(ctx).setClientVisibility(clientIdFor(ctx, port), msg.state);
+                ok(port, msg.id, null);
+            }
+            catch (e) {
+                failMessaging(port, msg.id, e);
+            }
+            break;
+        }
+        default:
+            fail(port, msg.id, new Error(`Unknown messaging method: ${String(msg.method)}`));
+    }
+}
+/**
+ * Register a foreground/background delivery listener for this port. The
+ * broker handler's unsub goes into the ordinary `ctx.subs` registry, so the
+ * generic unsub path and `cleanupPort` both tear it down. Payloads are plain
+ * JSON (`DeliveredPayload`) — no codec round-trip.
+ */
+export function handleMessagingSub(ctx, port, msg) {
+    if (ctx.messagingEnabled !== true) {
+        // Mirror handleSub's error path: deliver the gate as a snap-error so the
+        // client's error callback fires instead of the sub silently dying.
+        post(port, { t: 'snap', subId: msg.subId, value: { __error: disabledError() } });
+        return;
+    }
+    if (!ctx.subs.has(port))
+        ctx.subs.set(port, new Map());
+    const portSubs = ctx.subs.get(port);
+    if (portSubs.has(msg.subId))
+        return; // idempotent
+    const b = broker(ctx);
+    const forward = (payload) => post(port, { t: 'snap', subId: msg.subId, value: payload });
+    const unsub = msg.target === 'messaging.foreground'
+        ? b.onForegroundMessage(forward)
+        : b.onBackgroundMessage(forward);
+    portSubs.set(msg.subId, unsub);
+}
+/**
+ * Drop a disconnected port's broker client so its last-reported visibility
+ * stops feeding the routing rule (a closed visible tab must not pin
+ * foreground routing forever). Handler subs are NOT touched here — they
+ * live in `ctx.subs`, which `cleanupPort` already tears down.
+ */
+export function cleanupPortMessaging(ctx, port) {
+    const id = ctx.messagingClients?.get(port);
+    if (id === undefined)
+        return;
+    ctx.messagingClients.delete(port);
+    broker(ctx).removeClient(id);
+}
+//# sourceMappingURL=host-messaging.js.map

package/dist/serve/worker/host-messaging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-messaging.js","sourceRoot":"","sources":["../../../src/serve/worker/host-messaging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG/E,OAAO,EAA+B,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGhF;6EAC6E;AAC7E,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAAoB,CAAC;AAEjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,oBAAoB;IACpB,uBAAuB;IACvB,gBAAgB;IAChB,4BAA4B;IAC5B,gCAAgC;IAChC,mBAAmB;IACnB,yBAAyB;CAC1B,CAAC,CAAC;AAEH;8CAC8C;AAC9C,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa;IACpB,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EACL,iEAAiE;YACjE,0DAA0D;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,8DAA8D;AAC9D,IAAI,SAAS,GAAG,CAAC,CAAC;AAElB,sEAAsE;AACtE,SAAS,WAAW,CAAC,GAAY,EAAE,IAAc;IAC/C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;IACrD,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAc,EAAE,EAAU,EAAE,GAAY;IAC7D,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE;YACT,CAAC,EAAE,KAAK;YACR,EAAE;YACF,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM;gBAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO;gBACnC,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACvB;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAY,EACZ,IAAc,EACd,GAAc;IAEd,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,qEAAqE;YACrE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,IAAI,4BAA4B,CAAC,CAAC;gBAC1F,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QAED,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,iFAAiF;YACjF,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,IAAI,4BAA4B,CAAC,CAAC,CAAC;YACnG,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,sEAAsE;YACtE,yCAAyC;YACzC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE;oBAC7C,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9E,CAAC,CAAC;gBACH,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QAED,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QAED,KAAK,gCAAgC,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QAED,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,uEAAuE;YACvE,iBAAiB;YACjB,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QAED,KAAK,yBAAyB,CAAC,CAAC,CAAC;YAC/B,mEAAmE;YACnE,oEAAoE;YACpE,2BAA2B;YAC3B,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBACnE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QAED;YACE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,IAAc,EAAE,GAAwB;IACvF,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAClC,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;IACrC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,aAAa;IAElD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAQ,EAAE,CACzC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,MAAM,KAAK,GACT,GAAG,CAAC,MAAM,KAAK,sBAAsB;QACnC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,IAAc;IAC/D,MAAM,EAAE,GAAG,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO;IAC7B,GAAG,CAAC,gBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC"}

package/dist/serve/worker/host.d.ts

@@ -0,0 +1,36 @@
+/**
+ * SharedWorker host — public barrel over the per-family modules under `host/`.
+ *
+ * The host is the SharedWorker's data plane: one `HostCtx` shared across ALL
+ * connected ports, driven per message by `handleMessage(ctx, port, msg)`. It is
+ * deliberately decoupled from `SharedWorkerGlobalScope` so unit tests can drive
+ * it with a REAL pyric sandbox + fake MessagePort objects — no browser or
+ * SharedWorker runtime required. The entry point (`entry.ts`) creates the real
+ * sandbox + db and wires the connecting ports to this module.
+ *
+ * This file re-exports only the host's PUBLIC surface; the implementation lives
+ * in the per-family modules (mirroring the client split under `client/`):
+ *   - `host/core`            shared lens/handle resolution, descriptor → ref
+ *                            resolution, snapshot serialization, op provenance
+ *   - `host/dispatch`        `handleMessage` seam + family routing + `cleanupPort`
+ *   - `host/firestore-reads` getDoc/getDocs/count/aggregate/keyspace ops
+ *   - `host/firestore-writes` set/update/delete/add/batch/txn ops (+ sentinels)
+ *   - `host/rules`           firestore/rtdb rules deploy + status
+ *   - `host/admin-firestore` admin-lens document ops (rules bypass)
+ *   - `host/rtdb`            RTDB modular ops + snapshot→wire shaping
+ *   - `host/storage`         worker-backed Cloud Storage ops + lens resolver
+ *   - `host/connection`      version / state transfer / branches + instance id
+ *   - `host/studio`          runtime confirm-policy + sandbox snapshot
+ *   - `host/subscriptions`   Firestore/RTDB value-subscription registry (#754)
+ *
+ * The already-extracted auth / AI / events / messaging families keep their
+ * sibling `host-*.ts` modules; `host/dispatch` routes to them.
+ *
+ * `HostCtx` + the shared reply/port primitives live in `host-context.ts` (the
+ * engine-free dependency root).
+ */
+export { ensureAuth, portSession } from './host-auth.js';
+export type { HostCtx, PortLike } from './host-context.js';
+export { INSTANCE_ID_KEY, randomUuid, getOrCreateInstanceId, BRANCH_PREFIX, BRANCH_REGISTRY_KEY, listBranchNames, } from './host/connection.js';
+export { handleMessage, cleanupPort } from './host/dispatch.js';
+//# sourceMappingURL=host.d.ts.map

package/dist/serve/worker/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../../src/serve/worker/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACzD,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG3D,OAAO,EACL,eAAe,EACf,UAAU,EACV,qBAAqB,EACrB,aAAa,EACb,mBAAmB,EACnB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/serve/worker/host.js

@@ -0,0 +1,39 @@
+/**
+ * SharedWorker host — public barrel over the per-family modules under `host/`.
+ *
+ * The host is the SharedWorker's data plane: one `HostCtx` shared across ALL
+ * connected ports, driven per message by `handleMessage(ctx, port, msg)`. It is
+ * deliberately decoupled from `SharedWorkerGlobalScope` so unit tests can drive
+ * it with a REAL pyric sandbox + fake MessagePort objects — no browser or
+ * SharedWorker runtime required. The entry point (`entry.ts`) creates the real
+ * sandbox + db and wires the connecting ports to this module.
+ *
+ * This file re-exports only the host's PUBLIC surface; the implementation lives
+ * in the per-family modules (mirroring the client split under `client/`):
+ *   - `host/core`            shared lens/handle resolution, descriptor → ref
+ *                            resolution, snapshot serialization, op provenance
+ *   - `host/dispatch`        `handleMessage` seam + family routing + `cleanupPort`
+ *   - `host/firestore-reads` getDoc/getDocs/count/aggregate/keyspace ops
+ *   - `host/firestore-writes` set/update/delete/add/batch/txn ops (+ sentinels)
+ *   - `host/rules`           firestore/rtdb rules deploy + status
+ *   - `host/admin-firestore` admin-lens document ops (rules bypass)
+ *   - `host/rtdb`            RTDB modular ops + snapshot→wire shaping
+ *   - `host/storage`         worker-backed Cloud Storage ops + lens resolver
+ *   - `host/connection`      version / state transfer / branches + instance id
+ *   - `host/studio`          runtime confirm-policy + sandbox snapshot
+ *   - `host/subscriptions`   Firestore/RTDB value-subscription registry (#754)
+ *
+ * The already-extracted auth / AI / events / messaging families keep their
+ * sibling `host-*.ts` modules; `host/dispatch` routes to them.
+ *
+ * `HostCtx` + the shared reply/port primitives live in `host-context.ts` (the
+ * engine-free dependency root).
+ */
+// Auth surface used by serve-init (ensureAuth) + the per-port session accessor.
+export { ensureAuth, portSession } from './host-auth.js';
+// Instance-id + named-branch surface (part of the host's public shape:
+// serve-init imports getOrCreateInstanceId; tests import the rest).
+export { INSTANCE_ID_KEY, randomUuid, getOrCreateInstanceId, BRANCH_PREFIX, BRANCH_REGISTRY_KEY, listBranchNames, } from './host/connection.js';
+// The message dispatcher seam (entry.ts + tests) and per-port teardown.
+export { handleMessage, cleanupPort } from './host/dispatch.js';
+//# sourceMappingURL=host.js.map

package/dist/serve/worker/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../src/serve/worker/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,gFAAgF;AAChF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEzD,uEAAuE;AACvE,oEAAoE;AACpE,OAAO,EACL,eAAe,EACf,UAAU,EACV,qBAAqB,EACrB,aAAa,EACb,mBAAmB,EACnB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,wEAAwE;AACxE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/serve/worker/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Browser-safe SharedWorker CLIENT surface (Pyric Studio data plane).
+ *
+ * This barrel exports ONLY the leaf client + the wire-protocol types — the
+ * pieces a browser app (the served page, or Pyric Studio's Vite app) imports to
+ * connect to the `pyric-shared-worker` over its `MessagePort`. It deliberately
+ * does NOT re-export `host.ts`/`entry.ts`:
+ *   - `host.ts` imports the full `pyric/firestore` + `pyric/auth` engine (it IS
+ *     the backend) — node/engine-heavy, never wanted in a page bundle.
+ *   - `entry.ts` references `SharedWorkerGlobalScope` and is esbuild-only.
+ *
+ * `client.ts` imports only the value codec (`pyric/firestore-values`, a leaf)
+ * and type-only `pyric/sandbox` (erased at build), so this entry stays free of
+ * the ~10 MB rules/sandbox engine — safe to import from any browser app.
+ *
+ * Exposed by `@pyric/cli`'s `./serve/worker` package export so Studio can
+ * `import { getFirestore, subscribeEvents, setLens } from
+ * '@pyric/cli/serve/worker'` and reach the live SharedWorker backend.
+ */
+export { callTool, relayWorkerOp, relayWorkerSub, setOpIssuer, getFirestore, getAuth, getWorkerVersion, getWorkerInstanceId, exportWorkerState, importWorkerState, saveWorkerBranch, listWorkerBranches, switchWorkerBranch, deleteWorkerBranch, type ClientDb, type ClientAuth, type ClientUser, type ClientUserCredential, type DocRefHandle, type CollRefHandle, type QueryHandle, type AnyHandle, type Unsubscribe, type ClientDocSnapshot, type ClientQuerySnapshot, doc, collection, collectionGroup, query, where, and, or, orderBy, limit, limitToLast, startAt, startAfter, endAt, endBefore, serverTimestamp, increment, arrayUnion, arrayRemove, deleteField, getDoc, getDocs, setDoc, updateDoc, deleteDoc, addDoc, getCountFromServer, getAggregateFromServer, count, sum, average, listRootCollections, listSubcollections, onSnapshot, writeBatch, runTransaction, setRules, setFirestoreRules, setDatabaseRules, getActiveRules, getRulesStatus, adminGetDocument, adminListDocuments, adminSetDocument, adminDeleteDocument, adminReadState, type ClientWriteBatch, type ClientTransaction, createUserWithEmailAndPassword, listUsers, adminCreateUser, adminUpdateUser, adminDeleteUser, adminClearUsers, getProviderConfig, setProviderConfig, signInWithEmailAndPassword, signInAnonymously, signOut, acceptProviderCredential, onAuthStateChanged, onIdTokenChanged, getIdToken, getIdTokenResult, setPersistence, connectAuthEmulator, inMemoryPersistence, browserSessionPersistence, browserLocalPersistence, setLens, getLens, getStorage, ref, listAll, getMetadata, getBlob, getDownloadURL, uploadBytes, getBytes, deleteObject, type ClientFirebaseStorage, type ClientStorageReference, type ClientSettableMetadata, subscribeEvents, eventHistory, startPresence, subscribePresence, mintPresenceClientId, PRESENCE_HEARTBEAT_INTERVAL_MS, PRESENCE_STALE_MS, type PresenceSession, type PresenceSnapshot, type PresenceClientKind, type PresenceVisibility, getSnapshot, rtdbGetDatabase, rtdbRef, rtdbChild, rtdbGet, rtdbSet, rtdbUpdate, rtdbRemove, rtdbPush, rtdbOnValue, rtdbOff, rtdbServerTimestamp, rtdbConnectDatabaseEmulator, adminReadRtdbState, adminSetRtdbValue, adminUpdateRtdbValue, adminDeleteRtdbValue, adminSubscribeRtdbValue, type ClientRtdb, type RtdbRefHandle, type RtdbDataSnapshot, } from './client.js';
+export type { AuthPersistenceMode, SerializedUser, SerializedUserCredential, SerializedIdTokenResult, ResolvedIdentity, } from './protocol.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/serve/worker/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/serve/worker/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAML,QAAQ,EACR,aAAa,EACb,cAAc,EAKd,WAAW,EAEX,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EAExB,GAAG,EACH,UAAU,EACV,eAAe,EACf,KAAK,EACL,KAAK,EACL,GAAG,EACH,EAAE,EACF,OAAO,EACP,KAAK,EACL,WAAW,EACX,OAAO,EACP,UAAU,EACV,KAAK,EACL,SAAS,EAET,eAAe,EACf,SAAS,EACT,UAAU,EACV,WAAW,EACX,WAAW,EAEX,MAAM,EACN,OAAO,EACP,MAAM,EACN,SAAS,EACT,SAAS,EACT,MAAM,EACN,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,EACL,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,UAAU,EACV,cAAc,EACd,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAEtB,8BAA8B,EAE9B,SAAS,EACT,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe,EAEf,iBAAiB,EACjB,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,OAAO,EACP,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EAEvB,OAAO,EACP,OAAO,EAEP,UAAU,EACV,GAAG,EACH,OAAO,EACP,WAAW,EACX,OAAO,EACP,cAAc,EAEd,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAE3B,eAAe,EACf,YAAY,EAEZ,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,8BAA8B,EAC9B,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAEvB,WAAW,EAGX,eAAe,EACf,OAAO,EACP,SAAS,EACT,OAAO,EACP,OAAO,EACP,UAAU,EACV,UAAU,EACV,QAAQ,EACR,WAAW,EACX,OAAO,EACP,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,eAAe,CAAC"}

package/dist/serve/worker/index.js

@@ -0,0 +1,61 @@
+/**
+ * Browser-safe SharedWorker CLIENT surface (Pyric Studio data plane).
+ *
+ * This barrel exports ONLY the leaf client + the wire-protocol types — the
+ * pieces a browser app (the served page, or Pyric Studio's Vite app) imports to
+ * connect to the `pyric-shared-worker` over its `MessagePort`. It deliberately
+ * does NOT re-export `host.ts`/`entry.ts`:
+ *   - `host.ts` imports the full `pyric/firestore` + `pyric/auth` engine (it IS
+ *     the backend) — node/engine-heavy, never wanted in a page bundle.
+ *   - `entry.ts` references `SharedWorkerGlobalScope` and is esbuild-only.
+ *
+ * `client.ts` imports only the value codec (`pyric/firestore-values`, a leaf)
+ * and type-only `pyric/sandbox` (erased at build), so this entry stays free of
+ * the ~10 MB rules/sandbox engine — safe to import from any browser app.
+ *
+ * Exposed by `@pyric/cli`'s `./serve/worker` package export so Studio can
+ * `import { getFirestore, subscribeEvents, setLens } from
+ * '@pyric/cli/serve/worker'` and reach the live SharedWorker backend.
+ */
+export { 
+// Bridge-peer relay seams (leaf-safe: ids are re-minted in-page, frames go
+// over the worker port). The served page wires these into `connectBridge`'s
+// `dispatcher`/`workerRelay` (entries/runtime.ts); Pyric Studio reuses the
+// SAME wiring (studio's clients/bridge-peer.ts) so a Studio-only session
+// still serves agent tool-calls + remote worker-ops.
+callTool, relayWorkerOp, relayWorkerSub, 
+// Op provenance: Studio declares itself as the issuer of the ops THIS
+// client-module instance constructs (per-bundle state; the served app's
+// own bundle remains app-attributed by its service handles). Traffic uses the resulting source to
+// filter Studio-driven ops out of the app's stream.
+setOpIssuer, 
+// Connect + handles
+getFirestore, getAuth, getWorkerVersion, getWorkerInstanceId, exportWorkerState, importWorkerState, saveWorkerBranch, listWorkerBranches, switchWorkerBranch, deleteWorkerBranch, 
+// Path + query factories
+doc, collection, collectionGroup, query, where, and, or, orderBy, limit, limitToLast, startAt, startAfter, endAt, endBefore, 
+// Sentinels
+serverTimestamp, increment, arrayUnion, arrayRemove, deleteField, 
+// Firestore execution
+getDoc, getDocs, setDoc, updateDoc, deleteDoc, addDoc, getCountFromServer, getAggregateFromServer, count, sum, average, listRootCollections, listSubcollections, onSnapshot, writeBatch, runTransaction, setRules, setFirestoreRules, setDatabaseRules, getActiveRules, getRulesStatus, adminGetDocument, adminListDocuments, adminSetDocument, adminDeleteDocument, adminReadState, 
+// Auth
+createUserWithEmailAndPassword, 
+// Admin user-DB ops (Pyric Studio data browse)
+listUsers, adminCreateUser, adminUpdateUser, adminDeleteUser, adminClearUsers, 
+// Sign-in provider config (Pyric Studio S-AUTH)
+getProviderConfig, setProviderConfig, signInWithEmailAndPassword, signInAnonymously, signOut, acceptProviderCredential, onAuthStateChanged, onIdTokenChanged, getIdToken, getIdTokenResult, setPersistence, connectAuthEmulator, inMemoryPersistence, browserSessionPersistence, browserLocalPersistence, 
+// Auth lens (Pyric Studio — admin / impersonation / app-session)
+setLens, getLens, 
+// Storage (Pyric Studio data browse): worker-backed FirebaseStorage mirror
+getStorage, ref, listAll, getMetadata, getBlob, getDownloadURL, 
+// Storage byte ops (worker-mode uploads/reads via the base64 protocol)
+uploadBytes, getBytes, deleteObject, 
+// Event stream (Pyric Studio keystone — onEvent/history over the port)
+subscribeEvents, eventHistory, 
+// Connected-page presence (#227)
+startPresence, subscribePresence, mintPresenceClientId, PRESENCE_HEARTBEAT_INTERVAL_MS, PRESENCE_STALE_MS, 
+// Sandbox snapshot export (Pyric Studio rules re-run: fork + test edited rules)
+getSnapshot, 
+// RTDB shared-worker preview bridge. Aliased to avoid colliding with Storage
+// `ref` and Firestore sentinels in this worker barrel.
+rtdbGetDatabase, rtdbRef, rtdbChild, rtdbGet, rtdbSet, rtdbUpdate, rtdbRemove, rtdbPush, rtdbOnValue, rtdbOff, rtdbServerTimestamp, rtdbConnectDatabaseEmulator, adminReadRtdbState, adminSetRtdbValue, adminUpdateRtdbValue, adminDeleteRtdbValue, adminSubscribeRtdbValue, } from './client.js';
+//# sourceMappingURL=index.js.map

package/dist/serve/worker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/serve/worker/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO;AACL,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,qDAAqD;AACrD,QAAQ,EACR,aAAa,EACb,cAAc;AACd,sEAAsE;AACtE,wEAAwE;AACxE,kGAAkG;AAClG,oDAAoD;AACpD,WAAW;AACX,oBAAoB;AACpB,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB;AAYlB,yBAAyB;AACzB,GAAG,EACH,UAAU,EACV,eAAe,EACf,KAAK,EACL,KAAK,EACL,GAAG,EACH,EAAE,EACF,OAAO,EACP,KAAK,EACL,WAAW,EACX,OAAO,EACP,UAAU,EACV,KAAK,EACL,SAAS;AACT,YAAY;AACZ,eAAe,EACf,SAAS,EACT,UAAU,EACV,WAAW,EACX,WAAW;AACX,sBAAsB;AACtB,MAAM,EACN,OAAO,EACP,MAAM,EACN,SAAS,EACT,SAAS,EACT,MAAM,EACN,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,EACL,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,UAAU,EACV,cAAc,EACd,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc;AAGd,OAAO;AACP,8BAA8B;AAC9B,+CAA+C;AAC/C,SAAS,EACT,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe;AACf,gDAAgD;AAChD,iBAAiB,EACjB,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,OAAO,EACP,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB;AACvB,iEAAiE;AACjE,OAAO,EACP,OAAO;AACP,2EAA2E;AAC3E,UAAU,EACV,GAAG,EACH,OAAO,EACP,WAAW,EACX,OAAO,EACP,cAAc;AACd,uEAAuE;AACvE,WAAW,EACX,QAAQ,EACR,YAAY;AAIZ,uEAAuE;AACvE,eAAe,EACf,YAAY;AACZ,iCAAiC;AACjC,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,8BAA8B,EAC9B,iBAAiB;AAKjB,gFAAgF;AAChF,WAAW;AACX,6EAA6E;AAC7E,uDAAuD;AACvD,eAAe,EACf,OAAO,EACP,SAAS,EACT,OAAO,EACP,OAAO,EACP,UAAU,EACV,UAAU,EACV,QAAQ,EACR,WAAW,EACX,OAAO,EACP,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GAIxB,MAAM,aAAa,CAAC"}

package/dist/serve/worker/presence-timing.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Connected-page presence lease timing (#227).
+ *
+ * Leaf module — safe for both the SharedWorker host and the browser client
+ * bundle. Do not import host or sandbox code here.
+ */
+/** Suggested client heartbeat interval. */
+export declare const PRESENCE_HEARTBEAT_INTERVAL_MS = 15000;
+/**
+ * Lease TTL. Sized to tolerate one delayed background-tab heartbeat under
+ * typical timer throttling (~1/min) without falsely evicting a live page.
+ */
+export declare const PRESENCE_STALE_MS = 90000;
+//# sourceMappingURL=presence-timing.d.ts.map

package/dist/serve/worker/presence-timing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence-timing.d.ts","sourceRoot":"","sources":["../../../src/serve/worker/presence-timing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,2CAA2C;AAC3C,eAAO,MAAM,8BAA8B,QAAS,CAAC;AAErD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAAS,CAAC"}

package/dist/serve/worker/presence-timing.js

@@ -0,0 +1,14 @@
+/**
+ * Connected-page presence lease timing (#227).
+ *
+ * Leaf module — safe for both the SharedWorker host and the browser client
+ * bundle. Do not import host or sandbox code here.
+ */
+/** Suggested client heartbeat interval. */
+export const PRESENCE_HEARTBEAT_INTERVAL_MS = 15_000;
+/**
+ * Lease TTL. Sized to tolerate one delayed background-tab heartbeat under
+ * typical timer throttling (~1/min) without falsely evicting a live page.
+ */
+export const PRESENCE_STALE_MS = 90_000;
+//# sourceMappingURL=presence-timing.js.map

package/dist/serve/worker/presence-timing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence-timing.js","sourceRoot":"","sources":["../../../src/serve/worker/presence-timing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAErD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC"}