@pyric/cli 0.1.0-alpha.10

package/dist/verify/tools.js

@@ -0,0 +1,83 @@
+import { deriveRulesTestCases, verifyFixture, } from './index.js';
+export function createVerifyTools(deps = {}) {
+    return [
+        {
+            name: 'pyric_verify_fixture',
+            description: 'Verify a pyric captured fixture against candidate rules. Uses local sandbox replay by default; rulesTestApi is Firestore-only and requires configured project credentials.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    fixture: { type: 'object' },
+                    rules: { type: 'object' },
+                    services: { type: 'array', items: { type: 'string', enum: ['firestore', 'rtdb'] } },
+                    engines: { type: 'array', items: { type: 'string', enum: ['sandbox', 'rulesTestApi'] } },
+                    expressionReportLevel: { type: 'string', enum: ['NONE', 'VISITED', 'FULL'] },
+                    caseDerivation: { type: 'object' },
+                },
+                required: ['fixture', 'rules'],
+            },
+            async execute(args) {
+                const input = args;
+                try {
+                    if (input.engines?.includes('rulesTestApi') && !deps.scope) {
+                        throw new Error('pyric_verify_fixture: rulesTestApi engine requires a ProjectScope.');
+                    }
+                    const result = await verifyFixture(input.fixture, {
+                        rules: input.rules,
+                        ...(input.services ? { services: input.services } : {}),
+                        ...(input.engines ? { engines: input.engines } : {}),
+                        ...(input.caseDerivation ? { caseDerivation: input.caseDerivation } : {}),
+                        ...(input.engines?.includes('rulesTestApi') && deps.scope
+                            ? { rulesTestApi: { scope: deps.scope, expressionReportLevel: input.expressionReportLevel } }
+                            : {}),
+                    });
+                    return {
+                        ok: result.ok,
+                        summary: result.ok ? 'Fixture verified' : 'Fixture verification found divergences',
+                        data: result,
+                    };
+                }
+                catch (e) {
+                    return { ok: false, summary: e instanceof Error ? e.message : String(e) };
+                }
+            },
+        },
+        {
+            name: 'pyric_derive_rules_test_cases',
+            description: 'Derive Firestore Rules Test API test cases from a pyric captured fixture. This is inspection-only and does not call Firebase.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    fixture: { type: 'object' },
+                    service: { type: 'string', enum: ['firestore'] },
+                    includeAllowed: { type: 'boolean' },
+                    includeDenied: { type: 'boolean' },
+                    mockReads: { type: 'string', enum: ['strict', 'omit'] },
+                },
+                required: ['fixture'],
+            },
+            async execute(args) {
+                const input = args;
+                try {
+                    const result = deriveRulesTestCases(input.fixture, {
+                        service: input.service ?? 'firestore',
+                        includeAllowed: input.includeAllowed,
+                        includeDenied: input.includeDenied,
+                        mockReads: input.mockReads,
+                    });
+                    return {
+                        ok: result.ok,
+                        summary: result.ok
+                            ? `Derived ${result.testCases.length} Firestore test case(s)`
+                            : `Derived ${result.testCases.length} case(s), ${result.unsupportedEvents.length} unsupported event(s)`,
+                        data: result,
+                    };
+                }
+                catch (e) {
+                    return { ok: false, summary: e instanceof Error ? e.message : String(e) };
+                }
+            },
+        },
+    ];
+}
+//# sourceMappingURL=tools.js.map

package/dist/verify/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/verify/tools.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oBAAoB,EACpB,aAAa,GAId,MAAM,YAAY,CAAC;AAMpB,MAAM,UAAU,iBAAiB,CAAC,OAAuB,EAAE;IACzD,OAAO;QACL;YACE,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EACT,4KAA4K;YAC9K,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE;oBACnF,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE;oBACxF,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;oBAC5E,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACnC;gBACD,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;aAC/B;YACD,KAAK,CAAC,OAAO,CAAC,IAAI;gBAChB,MAAM,KAAK,GAAG,IAOb,CAAC;gBACF,IAAI,CAAC;oBACH,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;wBAC3D,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;oBACxF,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE;wBAChD,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpD,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,KAAK;4BACvD,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,EAAE,EAAE;4BAC7F,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC,CAAC;oBACH,OAAO;wBACL,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,wCAAwC;wBAClF,IAAI,EAAE,MAAM;qBACb,CAAC;gBACJ,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,+BAA+B;YACrC,WAAW,EACT,+HAA+H;YACjI,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE;oBAChD,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBACnC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAClC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;iBACxD;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;aACtB;YACD,KAAK,CAAC,OAAO,CAAC,IAAI;gBAChB,MAAM,KAAK,GAAG,IAMb,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE;wBACjD,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,WAAW;wBACrC,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,aAAa,EAAE,KAAK,CAAC,aAAa;wBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B,CAAC,CAAC;oBACH,OAAO;wBACL,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,OAAO,EAAE,MAAM,CAAC,EAAE;4BAChB,CAAC,CAAC,WAAW,MAAM,CAAC,SAAS,CAAC,MAAM,yBAAyB;4BAC7D,CAAC,CAAC,WAAW,MAAM,CAAC,SAAS,CAAC,MAAM,aAAa,MAAM,CAAC,iBAAiB,CAAC,MAAM,uBAAuB;wBACzG,IAAI,EAAE,MAAM;qBACb,CAAC;gBACJ,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/version/compat-target.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Single source of truth for the Firebase version pyric is conformance-
+ * tested against — the number `pyric --version` prints alongside
+ * @pyric/cli' own version, and the number `scripts/publish-alpha.sh`
+ * reads to derive the `fb<major>.<minor>` dist-tag it moves on a green
+ * `compat:check` (see
+ * packages/site-docs/src/content/trust/versioning-and-compatibility.md).
+ *
+ * This is a pin, not @pyric/cli' own version: bumping it starts a
+ * re-snapshot of the upstream surface, and no release claims the new
+ * `fb` line until `compat:check` passes against it.
+ *
+ * TODO: once the upstream-surface snapshot lands, that snapshot becomes
+ * the source of truth for this value and this constant should read
+ * from it instead of being hand-set.
+ */
+export declare const FIREBASE_TESTED_AGAINST = "12.13.0";
+//# sourceMappingURL=compat-target.d.ts.map

package/dist/version/compat-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat-target.d.ts","sourceRoot":"","sources":["../../src/version/compat-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,uBAAuB,YAAY,CAAC"}

package/dist/version/compat-target.js

@@ -0,0 +1,18 @@
+/**
+ * Single source of truth for the Firebase version pyric is conformance-
+ * tested against — the number `pyric --version` prints alongside
+ * @pyric/cli' own version, and the number `scripts/publish-alpha.sh`
+ * reads to derive the `fb<major>.<minor>` dist-tag it moves on a green
+ * `compat:check` (see
+ * packages/site-docs/src/content/trust/versioning-and-compatibility.md).
+ *
+ * This is a pin, not @pyric/cli' own version: bumping it starts a
+ * re-snapshot of the upstream surface, and no release claims the new
+ * `fb` line until `compat:check` passes against it.
+ *
+ * TODO: once the upstream-surface snapshot lands, that snapshot becomes
+ * the source of truth for this value and this constant should read
+ * from it instead of being hand-set.
+ */
+export const FIREBASE_TESTED_AGAINST = '12.13.0';
+//# sourceMappingURL=compat-target.js.map

package/dist/version/compat-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat-target.js","sourceRoot":"","sources":["../../src/version/compat-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC"}

package/dist/vite.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `@pyric/cli/vite` — the dev-only Vite plugin that swaps `firebase/*` to the
+ * in-process pyric sandbox during `vite dev` (the serve analog for source-driven
+ * apps). See `./serve/vite-plugin.ts` and the design rationale.
+ *
+ *   import { pyricSandbox } from '@pyric/cli/vite';
+ *   export default defineConfig({ plugins: [pyricSandbox()] });
+ */
+export { pyricSandbox } from './serve/vite-plugin.js';
+export type { PyricSandboxOptions } from './serve/vite-plugin.js';
+export { NODE_BUILTIN_RE, NODE_BUILTIN_SHIMS } from './serve/bundler.js';
+//# sourceMappingURL=vite.d.ts.map

package/dist/vite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vite.d.ts","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAOlE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/vite.js

@@ -0,0 +1,16 @@
+/**
+ * `@pyric/cli/vite` — the dev-only Vite plugin that swaps `firebase/*` to the
+ * in-process pyric sandbox during `vite dev` (the serve analog for source-driven
+ * apps). See `./serve/vite-plugin.ts` and the design rationale.
+ *
+ *   import { pyricSandbox } from '@pyric/cli/vite';
+ *   export default defineConfig({ plugins: [pyricSandbox()] });
+ */
+export { pyricSandbox } from './serve/vite-plugin.js';
+// The benign node-builtin shims serve's bundler and this plugin apply when
+// bundling pyric's browser graph (`fs`/`path`/`url` reached via the rules
+// module resolver — see `serve/bundler.ts`). Exported so a browser app that
+// bundles @pyric/cli' browser-side bridge client (Pyric Studio registers as
+// the bridge peer) applies the SAME shims instead of re-deriving them.
+export { NODE_BUILTIN_RE, NODE_BUILTIN_SHIMS } from './serve/bundler.js';
+//# sourceMappingURL=vite.js.map

package/dist/vite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vite.js","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,uEAAuE;AACvE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/package.json

@@ -0,0 +1,144 @@
+{
+  "name": "@pyric/cli",
+  "version": "0.1.0-alpha.10",
+  "license": "Apache-2.0",
+  "homepage": "https://pyric.dev",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/davideast/pyric.git",
+    "directory": "packages/cli"
+  },
+  "bugs": {
+    "url": "https://github.com/davideast/pyric/issues"
+  },
+  "description": "Pyric CLI for local sandbox development, verification, artifact generation, and agent bridges.",
+  "type": "module",
+  "exports": {
+    "./credentials/node": {
+      "types": "./dist/credentials/node/index.d.ts",
+      "import": "./dist/credentials/node/index.js"
+    },
+    "./verify": {
+      "types": "./dist/verify/index.d.ts",
+      "import": "./dist/verify/index.js"
+    },
+    "./conformance": {
+      "types": "./dist/conformance/index.d.ts",
+      "import": "./dist/conformance/index.js"
+    },
+    "./conformance/browser": {
+      "types": "./dist/conformance/browser.d.ts",
+      "import": "./dist/conformance/browser.js"
+    },
+    "./assurance": {
+      "types": "./dist/assurance/index.d.ts",
+      "import": "./dist/assurance/index.js"
+    },
+    "./assurance/browser": {
+      "types": "./dist/assurance/browser.d.ts",
+      "import": "./dist/assurance/browser.js"
+    },
+    "./bridge": {
+      "types": "./dist/bridge/server.d.ts",
+      "node": {
+        "types": "./dist/bridge/server.d.ts",
+        "import": "./dist/bridge/server.js"
+      },
+      "browser": {
+        "types": "./dist/bridge/client.d.ts",
+        "import": "./dist/bridge/client.js"
+      },
+      "default": {
+        "types": "./dist/bridge/server.d.ts",
+        "import": "./dist/bridge/server.js"
+      }
+    },
+    "./bridge/client": {
+      "types": "./dist/bridge/client.d.ts",
+      "import": "./dist/bridge/client.js"
+    },
+    "./discover": {
+      "types": "./dist/discover/index.d.ts",
+      "import": "./dist/discover/index.js"
+    },
+    "./vite": {
+      "types": "./dist/vite.d.ts",
+      "import": "./dist/vite.js"
+    },
+    "./serve/worker": {
+      "types": "./dist/serve/worker/index.d.ts",
+      "import": "./dist/serve/worker/index.js"
+    },
+    "./remote": {
+      "types": "./dist/remote/index.d.ts",
+      "node": {
+        "types": "./dist/remote/index.d.ts",
+        "import": "./dist/remote/index.js"
+      }
+    },
+    "./register": {
+      "types": "./dist/register/index.d.ts",
+      "node": {
+        "types": "./dist/register/index.d.ts",
+        "import": "./dist/register/index.js"
+      }
+    }
+  },
+  "bin": {
+    "pyric": "./dist/cli/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "prebuild": "test \"${PYRIC_CONFORMANCE_READY:-0}\" = \"1\" || bun run ../../packages/conformance/src/generate-projections.ts --write",
+    "build": "tsc && bun run scripts/postbuild.ts",
+    "pretest": "bash ../../scripts/build.sh --packages-only",
+    "test": "bun test",
+    "test:app-conformance": "playwright test app-deletion.pw.ts app-multi-app.pw.ts ai-worker-boundary.pw.ts messaging-app-boundary.pw.ts --config test/e2e/playwright.config.ts",
+    "test:soak": "playwright test --config test/e2e/soak/playwright.config.ts",
+    "pretypecheck": "bash ../../scripts/build.sh --packages-only",
+    "typecheck": "bun x tsc -p tsconfig.json --noEmit",
+    "compile": "bun scripts/compile.ts",
+    "release": "bun scripts/release.ts",
+    "smoke:standalone": "bun scripts/standalone-smoke.ts",
+    "smoke:vendor": "bun scripts/standalone-vendor-smoke.ts"
+  },
+  "dependencies": {
+    "@inbrowser/agent": "0.4.2",
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "create-pyric": "^0.1.0-alpha.10",
+    "esbuild": "^0.28.0",
+    "fake-indexeddb": "^6.0.0",
+    "pyric": "^0.1.0-alpha.10",
+    "pyric-admin": "^0.1.0-alpha.10",
+    "ws": "^8.18.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.61.1",
+    "@pyric/conformance": "^0.0.1",
+    "@types/bun": "latest",
+    "@types/ws": "^8.5.0",
+    "firebase": "^12.12.0",
+    "firebase-admin": "^13.0.0",
+    "typescript": "^5.7.0",
+    "vite": "^5.0.0"
+  },
+  "peerDependencies": {
+    "vite": "^5.0.0 || ^6.0.0 || ^7.0.0"
+  },
+  "peerDependenciesMeta": {
+    "vite": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": ">=22.15"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}