@pyric/cli 0.1.0-alpha.19 → 0.1.0-alpha.21

package/dist/cli/sandbox-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-runner.js","sourceRoot":"","sources":["../../src/cli/sandbox-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAKI,EAAE;IAEN,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC;YAC7E,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmC,CAAC;gBACpE,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAaD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,+BAA+B,CAAC;IAC9C,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAUD;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAgC;IAClE,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,aAAa,GAAoB,IAAI,CAAC;IAC1C,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC;IACvC,CAAC;SAAM,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC;IACnC,CAAC;IAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE3B,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAuB,EACvB,IAAqB;IAErB,MAAM,UAAU,GAAG,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC;IAClD,MAAM,GAAG,GAAsB;QAC7B,GAAG,IAAI;QACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;QACxC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU;KACpF,CAAC;IACF,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,WAAW,CAAC;IAC9E,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAqB;IAC1D,MAAM,KAAK,GAAG,CAAC,gCAAgC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,iCAAiC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CACL,IAAI;QACJ,+EAA+E;QAC/E,KAAK,OAAO,IAAI;QAChB,IAAI;QACJ,KAAK,OAAO,IAAI,CACjB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,KAA6B;IAE7B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO;QACL,IAAI,CAAC,KAAa;YAChB,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,KAAK;YACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,GAAG,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC;gBAC9B,MAAM,GAAG,EAAE,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,4DAA4D;AAC5D,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAUlC;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAsB,EACtB,IAA4D;IAE5D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE/C,yEAAyE;IACzE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAE5E,4EAA4E;IAC5E,6EAA6E;IAC7E,0BAA0B;IAE1B,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IACjC,IAAI,KAAmB,CAAC;IACxB,IAAI,iBAAiB,EAAE,CAAC;QACtB,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE;YAC5B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG;YACH,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;YAClC,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACvC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,KAAK,CAAC,OAAQ,EAAE,IAAI,EAAE;YAC5B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG;YACH,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACvC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9D,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE7D,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,UAAU,GAAyC,IAAI,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;QAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;YACvF,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,UAAU;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;YACzC,kEAAkE;YAClE,IAAI,SAAS;gBAAE,OAAO,CAAC,CAAC,CAAC,CAAC;iBACrB,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;;gBAC5C,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,KAAK;QACL,MAAM,CAAC,GAAmB;YACxB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,SAAS;gBAAE,OAAO;YACjD,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC3B,IAAI,CAAC;oBACH,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,EAAE,mBAAmB,CAAC,CAAC;YACxB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC"}

package/dist/cli/serve.d.ts

@@ -9,7 +9,7 @@ interface HostingConfig {
         destination?: string;
     }>;
 }
-/** Extract the single hosting config `pyric dev` v1 supports. Arrays
+/** Extract the single hosting config `pyric sandbox` supports. Arrays
  *  (multi-site) take the first entry with a warning — multi-site is out of
  *  scope (plan section 6). */
 export declare function extractHosting(config: FirebaseJson | null): HostingConfig | null;
@@ -21,7 +21,7 @@ export interface ServeRuntime {
     payload: () => InitPayload;
     /** HTTP MCP endpoint when `--bridge` is on; null otherwise. */
     mcpUrl: string | null;
-    /** The Studio app URL (`/__pyric/ui/`) when `--ui` is on and the build is
+    /** The Studio hub URL (`/__pyric/ui/studio`) when `--ui` is on and the build is
      *  present; null otherwise. */
     uiUrl: string | null;
     /** Persistence summary (null when `--persist` is off). */
@@ -29,6 +29,12 @@ export interface ServeRuntime {
         restoredDocs: number;
         restoredUsers: number;
     } | null;
+    /** Handshake beacons posted to `/__pyric/beacon` so far, the interlock
+     *  watchdog's only input. */
+    beaconCount: () => number;
+    /** The per-launch secret a beacon must present, placed in every child's
+     *  `PYRIC_BEACON_TOKEN`. */
+    beaconToken: string;
 }
 /** The `--json` stdout contract — one line, keep stable; agents parse this.
  *  Readiness probe: GET {url}/__pyric/init.json → 200 (body carries the live
@@ -73,6 +79,8 @@ export declare function startServe(opts: {
      *  (the served project's file tree) + `/__pyric/projects` (single-project
      *  store over `cwd`). The Studio app's `local` mode talks to these. */
     ui?: boolean;
+    /** Explicit opt-in to permissive mode (default-allow RTDB rules when unconfigured). */
+    permissive?: boolean;
     logger?: Parameters<typeof startStaticServer>[0]['logger'];
 }): Promise<ServeRuntime>;
 /**
@@ -87,7 +95,7 @@ export declare function bridgeEnabledFromFlags(flags: {
  * A dev child also implies the bridge: the runner injects
  * `PYRIC_SANDBOX=remote:<url>` into the child, whose remote client dials the
  * `/__pyric/sandbox` WS — without the bridge mount that upgrade 404s and
- * plain `pyric dev -- <cmd>` (or a detected dev script) breaks its own
+ * `pyric sandbox -- <cmd>` breaks its own
  * child. Pure + exported for unit coverage.
  */
 export declare function bridgeEnabledFor(flags: {
@@ -95,7 +103,7 @@ export declare function bridgeEnabledFor(flags: {
 }, childPlan: unknown, functionsProject?: unknown): boolean;
 /**
  * Process-level last line of defense for the dev server: a single bad
- * request/WS interaction must never take `pyric dev` down. Node kills the
+ * request/WS interaction must never take `pyric sandbox` down. Node kills the
  * process on an unhandled rejection (default `--unhandled-rejections=throw`
  * since v15) and on any uncaught exception — and the serve process hosts
  * long-lived, browser-driven machinery (WS peers, SSE streams, file watchers,
@@ -108,15 +116,5 @@ export declare function bridgeEnabledFor(flags: {
 export declare function installServeProcessGuard(log: (message: string) => void, proc?: Pick<NodeJS.Process, 'on' | 'off'>): () => void;
 /** CLI entry. Resolves on SIGINT/SIGTERM after a clean stop. */
 export declare function runServe(parsed: ParsedArgs): Promise<number>;
-/**
- * Detect a bundler build that INLINED the real firebase SDK into its served
- * assets (`vite build` output). The served import map remaps only bare
- * `firebase/*` specifiers, so such a build cannot be sandboxed — its calls
- * reach real Google endpoints. Fingerprints are real-SDK-only endpoint hosts
- * that never appear in a sandbox-clean app (whose calls all route to
- * `/__pyric/*`). Bounded: depth ≤ 4, ≤ 200 script files, first hit per file.
- * Returns publicDir-relative paths of offending assets.
- */
-export declare function scanForInlinedFirebase(dir: string): string[];
 export {};
 //# sourceMappingURL=serve.d.ts.map

package/dist/cli/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/cli/serve.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGzD,OAAO,EAAsB,iBAAiB,EAAqB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA8BhH,UAAU,aAAa;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED;;8BAE8B;AAC9B,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CAKhF;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAItE;AAGD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,WAAW,CAAC;IAC3B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;mCAC+B;IAC/B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,0DAA0D;IAC1D,OAAO,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACjE;AAED;;mBAEmB;AACnB,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAY3D;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;6BACyB;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;yCACqC;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;4EACwE;IACxE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;gFAG4E;IAC5E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;2EAEuE;IACvE,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,YAAY,CAAC,CAgYxB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAAG,OAAO,CAEpF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE;IAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EACpC,SAAS,EAAE,OAAO,EAClB,gBAAgB,GAAE,OAAc,GAC/B,OAAO,CAET;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EAC9B,IAAI,GAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,KAAK,CAAW,GACjD,MAAM,IAAI,CAqBZ;AAED,gEAAgE;AAChE,wBAAsB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAiTlE;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CA8C5D"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/cli/serve.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAUzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIzD,OAAO,EAAsB,iBAAiB,EAAqB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAmChH,UAAU,aAAa;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED;;8BAE8B;AAC9B,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CAKhF;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAItE;AAGD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,WAAW,CAAC;IAC3B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;mCAC+B;IAC/B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,0DAA0D;IAC1D,OAAO,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChE;iCAC6B;IAC7B,WAAW,EAAE,MAAM,MAAM,CAAC;IAC1B;gCAC4B;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;mBAEmB;AACnB,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAY3D;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;6BACyB;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;yCACqC;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;4EACwE;IACxE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;gFAG4E;IAC5E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;2EAEuE;IACvE,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,uFAAuF;IACvF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,YAAY,CAAC,CAwaxB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAAG,OAAO,CAEpF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE;IAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EACpC,SAAS,EAAE,OAAO,EAClB,gBAAgB,GAAE,OAAc,GAC/B,OAAO,CAET;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EAC9B,IAAI,GAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,KAAK,CAAW,GACjD,MAAM,IAAI,CAqBZ;AAgCD,gEAAgE;AAChE,wBAAsB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAuVlE"}

package/dist/cli/serve.js

@@ -1,5 +1,5 @@
 /**
- * `pyric dev` — local dev server with the pyric sandbox standing in for
+ * `pyric sandbox` is the local server with the Pyric sandbox standing in for
  * Firebase. Feels like `firebase serve` (banner, labeled lines, port 3473,
  * SIGINT shutdown) with the sandbox-flavored extras firebase can't do: the
  * served page runs an in-browser backend, your `firestore.rules` deploy into
@@ -10,22 +10,28 @@
  * rules load (fail fast on broken rules) → SDK bundle (cached per pyric
  * version) → static server with the `/__pyric/` namespace + HTML injection.
  */
-import { join, relative, resolve } from 'node:path';
-import { existsSync, readdirSync, readFileSync, statSync, watch as watchFile } from 'node:fs';
+import { randomBytes } from 'node:crypto';
+import { relative, resolve } from 'node:path';
+import { existsSync, watch as watchFile } from 'node:fs';
 import { readFirebaseJson, readFirebaseRc } from './firebase-json.js';
 import { bundleSdk, bundleWorker, defaultSdkEntries, resolveSiteUiDir } from '../serve/bundler.js';
 import { isStandalone, materializeServeAssets, materializeSiteUi, embeddedWorkerVersion, } from '../serve/standalone-assets.js';
 import { hasSandboxBuildMarker } from '../serve/sandbox-marker.js';
+import { formatBeaconReceipt } from '../serve/beacon-route.js';
+import { formatAiStatusLine } from '../serve/ai-status.js';
 import { injectServeTags } from '../serve/html-injection.js';
 import { formatActivityWarning } from '../serve/activity-warning.js';
 import { consoleServeLogger, startStaticServer, stderrServeLogger } from '../serve/server.js';
 import { createBridgeMount } from '../serve/bridge-mount.js';
 import { openBrowser, shouldAutoOpen } from '../serve/open-browser.js';
-import { buildChildEnv, detectPackageManager, formatStartupEnvExport, readDevScript, registerModuleUrl, resolveDevChild, spawnDevChild, waitForSandboxPeer, } from './dev-runner.js';
+import { readPyricConfig } from './pyric-config.js';
+import { buildChildEnv, formatStartupEnvExport, registerModuleUrl, resolveSandboxChild, spawnSandboxChild, waitForSandboxPeer, } from './sandbox-runner.js';
+import { reportLaunchChecks, startBeaconWatchdog, } from './sandbox-interlock.js';
+import { scanForInlinedFirebase } from './inlined-sdk-scanner.js';
 import { createFunctionsDevelopmentRuntime, createHttpFunctionsPeerReadiness, } from '../functions-rtdb/development-runtime.js';
 import { discoverFunctionsRtdbProject, } from '../functions-rtdb/project.js';
 import { createSandboxSession, SandboxSeedError, } from '../serve/sandbox-session.js';
-/** Extract the single hosting config `pyric dev` v1 supports. Arrays
+/** Extract the single hosting config `pyric sandbox` supports. Arrays
  *  (multi-site) take the first entry with a warning — multi-site is out of
  *  scope (plan section 6). */
 export function extractHosting(config) {
@@ -62,12 +68,17 @@ export function serveJsonLine(runtime) {
  */
 export async function startServe(opts) {
     const logger = opts.logger ?? consoleServeLogger();
+    // Handshake beacons from pyric-launched children, plus the per-launch secret
+    // that authorizes one. Both live here because the route does.
+    let beaconsSeen = 0;
+    const beaconCount = () => beaconsSeen;
+    const beaconToken = randomBytes(24).toString('base64url');
     // --fresh only means anything against the state.json file `--persist`
     // maintains — without `--persist` there is no file to discard, so
     // `--fresh` alone was a silent no-op (nothing happened, nothing said so).
     // Fail fast instead of pretending to reset something.
     if (opts.fresh && !opts.persist) {
-        throw new Error('pyric dev: --fresh requires --persist (it discards .pyric/state/state.json). ' +
+        throw new Error('pyric sandbox: --fresh requires --persist (it discards .pyric/state/state.json). ' +
             'Browser-stored data is cleared from Studio → Settings → Reset, or DevTools → Clear site data.');
     }
     // firebase.json is optional for serving (firebase-serve parity: warn, then
@@ -81,9 +92,29 @@ export async function startServe(opts) {
             throw e;
         logger.note('  ⚠ no firebase.json found — serving the current directory without hosting config');
     }
+    const pyricConfig = await readPyricConfig(opts.cwd);
+    if (pyricConfig.rules) {
+        if (!config)
+            config = {};
+        if (typeof pyricConfig.rules === 'string') {
+            config.firestore = { ...config.firestore, rules: pyricConfig.rules };
+        }
+        else {
+            if (pyricConfig.rules.firestore) {
+                config.firestore = { ...config.firestore, rules: pyricConfig.rules.firestore };
+            }
+            if (pyricConfig.rules.database) {
+                config.database = { ...config.database, rules: pyricConfig.rules.database };
+            }
+            if (pyricConfig.rules.storage) {
+                const baseStorage = typeof config.storage === 'object' && !Array.isArray(config.storage) ? config.storage : {};
+                config.storage = { ...baseStorage, rules: pyricConfig.rules.storage };
+            }
+        }
+    }
     const hosting = extractHosting(config);
     if (Array.isArray(config?.hosting) && config.hosting.length > 1) {
-        logger.note('  ⚠ multiple hosting sites configured — pyric dev v1 serves the first entry only');
+        logger.note('  ⚠ multiple hosting sites configured. pyric sandbox serves the first entry only');
     }
     const publicDir = resolve(opts.cwd, hosting?.public ?? '.');
     if (!existsSync(publicDir)) {
@@ -93,29 +124,29 @@ export async function startServe(opts) {
         const looksLikeBuildOutput = /(^|[\\/])(dist|build|out)$/.test(publicDir);
         const hint = looksLikeBuildOutput
             ? `\n  No build yet? Run \`bun run dev\` for the live sandbox dev server, ` +
-                `or \`bun run build\` then \`pyric dev\` to preview the production build.`
+                `or \`bun run build\` then \`pyric sandbox\` to preview the production build.`
             : '';
-        throw new Error(`pyric dev: hosting.public directory does not exist: ${publicDir}${hint}`);
+        throw new Error(`pyric sandbox: hosting.public directory does not exist: ${publicDir}${hint}`);
     }
     // The import map can only remap BARE `firebase/*` specifiers. A plain bundler
     // build (`vite build`) inlines the real SDK into the app chunk, leaving
-    // nothing to intercept — the page would then talk to REAL Firebase endpoints
+    // nothing to intercept: the page would then talk to REAL Firebase endpoints
     // with the sandbox's fake credentials while the injected banner claims
-    // otherwise. That hole is structural, so `pyric dev` REFUSES such a dist
+    // otherwise. That hole is structural, so `pyric sandbox` refuses such a dist
     // rather than serving it. A pyric SANDBOX build (`vite build --mode
     // development`) carries the marker and bundles pyric's in-page adapters, so it
-    // is trusted and the scan is skipped (marker present → no real SDK to find).
+    // is trusted and the scan is skipped (marker present, no real SDK to find).
     if (!hasSandboxBuildMarker(publicDir)) {
         const inlined = scanForInlinedFirebase(publicDir);
         if (inlined.length > 0) {
-            throw new Error(`pyric dev: ${inlined[0]} bundles the REAL firebase SDK, so this dist cannot be ` +
+            throw new Error(`pyric sandbox: ${inlined[0]} bundles the real Firebase SDK, so this dist cannot be ` +
                 `sandboxed — its firebase/* calls would reach LIVE Google endpoints, not the ` +
                 `pyric sandbox. Two ways forward:\n` +
-                `  (a) plain \`pyric dev\` runs the child dev-server flow (the @pyric/cli/vite ` +
+                `  (a) \`pyric sandbox -- <command>\` runs the child server with the @pyric/cli/vite ` +
                 `plugin swaps firebase/* live) — use \`bun run dev\`;\n` +
                 `  (b) rebuild as a self-contained sandbox bundle and serve THAT: ` +
                 `\`vite build --mode development\` (or pyric({ swapInBuild: true })) then ` +
-                `\`pyric dev\`.\n` +
+                `\`pyric sandbox\`.\n` +
                 `A plain \`vite build\` is your production build — deploy it, don't sandbox it.`);
         }
     }
@@ -189,6 +220,12 @@ export async function startServe(opts) {
             studio: opts.ui ? { siteUiDir } : false,
             bridgeUrl: () => mount && origin.port > 0 ? mount.wsUrl(origin) : null,
             activity: (incident) => logger.note(formatActivityWarning(incident)),
+            beaconToken,
+            beacon: (report) => {
+                beaconsSeen += 1;
+                logger.note(formatBeaconReceipt(report));
+            },
+            permissive: opts.permissive,
             logger,
         });
     }
@@ -196,9 +233,9 @@ export async function startServe(opts) {
         bundle.dispose?.();
         if (error instanceof SandboxSeedError) {
             if (error.kind === 'read') {
-                throw new Error(`pyric dev: failed to read --seed ${error.path}: ${error.detail}`);
+                throw new Error(`pyric sandbox: failed to read --seed ${error.path}: ${error.detail}`);
             }
-            throw new Error(`pyric dev: --seed must be a JSON object of "collection/doc" → fields, ${error.detail}`);
+            throw new Error(`pyric sandbox: --seed must be a JSON object of "collection/doc" to fields, ${error.detail}`);
         }
         throw error;
     }
@@ -283,7 +320,7 @@ export async function startServe(opts) {
     if (bundle.dispose)
         handle.server.once('close', bundle.dispose);
     handle.server.once('close', () => void closeOwnedResources());
-    const uiUrl = siteUiDir ? `${handle.url}/__pyric/ui/` : null;
+    const uiUrl = siteUiDir ? `${handle.url}/__pyric/ui/studio` : null;
     const docsUrl = siteUiDir ? `${handle.url}/__pyric/ui/docs/` : null;
     // Hot-reload: the static adapter observes the filesystem; the session owns
     // read/prepare/last-good replacement and event broadcast.
@@ -374,7 +411,7 @@ export async function startServe(opts) {
     logger.info(session.payload().storageRules
         ? `✔ rules    ${session.summary.rules.storage.sourcePath} → deployed to the storage sandbox (hash ${session.summary.rules.storage.hash}; ` +
             `edits require a restart — storage rules do not hot-reload)`
-        : `• rules    no storage.rules — storage sandbox runs open (no rules configured)`);
+        : `• rules    no storage.rules — storage sandbox denies client operations by default`);
     if (uiUrl) {
         logger.info(`✔ studio   Pyric Studio: ${uiUrl}`);
     }
@@ -384,6 +421,13 @@ export async function startServe(opts) {
     if (mount) {
         logger.info(`✔ bridge   MCP endpoint: ${mount.mcpUrl(origin)} (sandbox peers over ws at /__pyric/sandbox)`);
     }
+    // AI is a mounted service like the bridge: `/__pyric/ai-proxy` answers from
+    // the first request on, whether or not anything is configured. `pyric
+    // sandbox` has no AI flag, so the ENGINE is always the page's own `getAI()`
+    // choice (resolved lazily in the browser, since nothing here instantiates a
+    // broker to find out); what this server does decide is where the proxy
+    // forwards, and that is what the line reports.
+    logger.info(formatAiStatusLine({}));
     let persistSummary = null;
     const persistence = session.summary.persistence;
     if (persistence) {
@@ -427,7 +471,8 @@ export async function startServe(opts) {
     logger.note('');
     logger.note('  ⚠ the pyric sandbox runs IN the served page — keep the browser tab open.');
     logger.note('    Firestore/auth data and persistence stop when no page is open.');
-    return { handle, publicDir, payload, uiUrl, mcpUrl: mount ? mount.mcpUrl(origin) : null, persist: persistSummary };
+    const mcpUrl = mount ? mount.mcpUrl(origin) : null;
+    return { handle, publicDir, payload, uiUrl, mcpUrl, persist: persistSummary, beaconCount, beaconToken };
 }
 /**
  * `--ui` implies `--bridge` (hybrid-MCP plan Phase 3): a Studio user almost
@@ -441,7 +486,7 @@ export function bridgeEnabledFromFlags(flags) {
  * A dev child also implies the bridge: the runner injects
  * `PYRIC_SANDBOX=remote:<url>` into the child, whose remote client dials the
  * `/__pyric/sandbox` WS — without the bridge mount that upgrade 404s and
- * plain `pyric dev -- <cmd>` (or a detected dev script) breaks its own
+ * `pyric sandbox -- <cmd>` breaks its own
  * child. Pure + exported for unit coverage.
  */
 export function bridgeEnabledFor(flags, childPlan, functionsProject = null) {
@@ -449,7 +494,7 @@ export function bridgeEnabledFor(flags, childPlan, functionsProject = null) {
 }
 /**
  * Process-level last line of defense for the dev server: a single bad
- * request/WS interaction must never take `pyric dev` down. Node kills the
+ * request/WS interaction must never take `pyric sandbox` down. Node kills the
  * process on an unhandled rejection (default `--unhandled-rejections=throw`
  * since v15) and on any uncaught exception — and the serve process hosts
  * long-lived, browser-driven machinery (WS peers, SSE streams, file watchers,
@@ -462,11 +507,11 @@ export function bridgeEnabledFor(flags, childPlan, functionsProject = null) {
 export function installServeProcessGuard(log, proc = process) {
     const describe = (reason) => reason instanceof Error ? (reason.stack ?? reason.message) : String(reason);
     const onRejection = (reason) => {
-        log(`  ✖ pyric dev: UNHANDLED REJECTION (the server was kept alive — please report this):\n` +
+        log(`  ✖ pyric sandbox: unhandled rejection. The server was kept alive. Please report this:\n` +
             `    ${describe(reason).split('\n').join('\n    ')}`);
     };
     const onException = (err) => {
-        log(`  ✖ pyric dev: UNCAUGHT EXCEPTION (the server was kept alive — please report this):\n` +
+        log(`  ✖ pyric sandbox: uncaught exception. The server was kept alive. Please report this:\n` +
             `    ${describe(err).split('\n').join('\n    ')}`);
     };
     proc.on('unhandledRejection', onRejection);
@@ -476,10 +521,48 @@ export function installServeProcessGuard(log, proc = process) {
         proc.off('uncaughtException', onException);
     };
 }
+function resolveServePort(flagPort, configPort) {
+    if (typeof flagPort === 'string')
+        return Number(flagPort);
+    if (typeof flagPort === 'number')
+        return flagPort;
+    if (typeof configPort === 'number')
+        return configPort;
+    return 3473;
+}
+function resolveProjectIdentifier(flagProject, envProject, configProject, rcDefault) {
+    if (typeof flagProject === 'string' && flagProject.length > 0)
+        return flagProject;
+    if (typeof envProject === 'string' && envProject.length > 0)
+        return envProject;
+    if (typeof configProject === 'string' && configProject.length > 0)
+        return configProject;
+    if (typeof rcDefault === 'string' && rcDefault.length > 0)
+        return rcDefault;
+    return 'demo-project';
+}
+function resolveExplicitCommand(parsed) {
+    if (parsed.passthrough && parsed.passthrough.length > 0) {
+        return parsed.passthrough;
+    }
+    if (parsed.positional.length > 0) {
+        return parsed.positional;
+    }
+    return null;
+}
 /** CLI entry. Resolves on SIGINT/SIGTERM after a clean stop. */
 export async function runServe(parsed) {
+    const cwd = process.cwd();
+    let pyricConfig = {};
+    try {
+        pyricConfig = await readPyricConfig(cwd);
+    }
+    catch (error) {
+        process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+        return 2;
+    }
     const flagPort = parsed.flags.get('port');
-    const port = typeof flagPort === 'string' ? Number(flagPort) : 3473;
+    const port = resolveServePort(flagPort, pyricConfig.port);
     if (!Number.isFinite(port) || port < 0 || port > 65535) {
         process.stderr.write(`pyric: invalid --port '${flagPort}'.\n`);
         return 1;
@@ -488,7 +571,7 @@ export async function runServe(parsed) {
     const host = typeof flagHost === 'string' ? flagHost : 'localhost';
     const only = parsed.flags.get('only');
     if (typeof only === 'string' && only !== 'hosting') {
-        process.stderr.write(`pyric: --only '${only}' is not supported — pyric dev v1 serves hosting (with the in-page sandbox standing in for firestore/auth).\n`);
+        process.stderr.write(`pyric: --only '${only}' is not supported. pyric sandbox serves hosting with the in-page sandbox standing in for Firestore and Auth.\n`);
         return 1;
     }
     const json = Boolean(parsed.flags.get('json'));
@@ -497,7 +580,6 @@ export async function runServe(parsed) {
     // Resolve the child plan BEFORE the server starts: a planned child implies
     // the bridge (see bridgeEnabledFor) — the child's injected PYRIC_SANDBOX
     // is useless without the /__pyric/sandbox WS mount.
-    const cwd = process.cwd();
     let functionsProject;
     let functionsProjectId = null;
     try {
@@ -505,23 +587,19 @@ export async function runServe(parsed) {
         if (functionsProject) {
             const flagProject = parsed.flags.get('project');
             const rc = await readFirebaseRc(cwd);
-            functionsProjectId =
-                (typeof flagProject === 'string' ? flagProject : undefined) ??
-                    process.env.PYRIC_PROJECT ??
-                    rc?.projects?.default ??
-                    'demo-project';
+            functionsProjectId = resolveProjectIdentifier(flagProject, process.env.PYRIC_PROJECT, pyricConfig.project, rc?.projects?.default);
         }
     }
     catch (error) {
         process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
         return 2;
     }
-    const plan = resolveDevChild({
-        passthrough: parsed.passthrough ?? [],
+    const explicitCommand = resolveExplicitCommand(parsed);
+    const plan = resolveSandboxChild({
+        explicitCommand,
+        configCommand: pyricConfig.command,
         noRun: Boolean(parsed.flags.get('no-run')),
         json,
-        devScript: readDevScript(cwd),
-        packageManager: detectPackageManager(cwd),
     });
     const bridgeOn = bridgeEnabledFor(parsed.flags, plan, functionsProject);
     let runtime;
@@ -537,6 +615,7 @@ export async function runServe(parsed) {
             watch: parsed.flags.get('no-watch') ? false : undefined,
             persist: Boolean(parsed.flags.get('persist')),
             fresh: Boolean(parsed.flags.get('fresh')),
+            permissive: Boolean(parsed.flags.get('permissive')),
             // --ui mounts the Pyric Studio storage routes (workspace + projects).
             ui: uiOn,
             // --no-capture disables the default-on session capture. The pattern
@@ -547,7 +626,7 @@ export async function runServe(parsed) {
                 : undefined,
             project: typeof parsed.flags.get('project') === 'string'
                 ? parsed.flags.get('project')
-                : process.env.PYRIC_PROJECT ?? functionsProjectId ?? undefined,
+                : process.env.PYRIC_PROJECT ?? pyricConfig.project ?? functionsProjectId ?? undefined,
         });
     }
     catch (e) {
@@ -562,7 +641,7 @@ export async function runServe(parsed) {
     // (the banner went to stderr). Readiness probe: GET /__pyric/init.json.
     if (json)
         process.stdout.write(serveJsonLine(runtime) + '\n');
-    // Footgun guard (hybrid-MCP plan Phase 3): plain `dev` mounts no MCP bridge,
+    // A host-only sandbox mounts no MCP bridge unless one is needed.
     // so a `pyric mcp-proxy` in an editor cannot attach. Nudge toward --bridge.
     if (!bridgeOn && !json) {
         process.stderr.write('  tip  MCP? re-run with --bridge so an editor (Cursor / Claude / Antigravity) can attach via `pyric mcp-proxy`.\n');
@@ -582,6 +661,7 @@ export async function runServe(parsed) {
         void openBrowser(targetUrl);
     }
     let devChild = null;
+    let beaconWatchdog = null;
     let functionsRuntime = null;
     let resolveFunctionsExit;
     const functionsExited = new Promise((resolve) => { resolveFunctionsExit = resolve; });
@@ -603,6 +683,7 @@ export async function runServe(parsed) {
     ]);
     const stopAfterSignal = async () => {
         (json ? process.stderr : process.stdout).write('\nShutting down...\n');
+        beaconWatchdog?.stop();
         if (devChild && devChild.child.exitCode === null)
             devChild.signal(await signal);
         await functionsRuntime?.close().catch(() => undefined);
@@ -645,6 +726,7 @@ export async function runServe(parsed) {
             baseEnv: process.env,
             serveUrl: runtime.handle.url,
             registerUrl: registerModuleUrl(),
+            beaconToken: runtime.beaconToken,
             instance: `${functionsProjectId}-default-rtdb`,
             location: process.env.PYRIC_FUNCTIONS_RTDB_REGION ?? 'us-central1',
             projectId: functionsProjectId ?? 'demo-project',
@@ -657,7 +739,7 @@ export async function runServe(parsed) {
         const result = startOutcome.value;
         if (result.kind === 'no-peer') {
             process.stderr.write(`  ⚠ functions not started — no browser tab connected after 30s. ` +
-                `Open ${runtime.handle.url} and restart pyric dev.\n`);
+                `Open ${runtime.handle.url} and restart pyric sandbox.\n`);
         }
         else if (result.kind === 'failed') {
             process.stderr.write(`${result.error.message}\n`);
@@ -672,14 +754,13 @@ export async function runServe(parsed) {
                 `from ${relative(cwd, functionsProject.entry)}\n`);
             for (const unsupported of ready.unsupportedTriggers) {
                 process.stderr.write(`  ⚠ functions export ${unsupported.exportName} uses unsupported trigger ` +
-                    `${unsupported.eventType}; it will not run in pyric dev.\n`);
+                    `${unsupported.eventType}; it will not run in pyric sandbox.\n`);
             }
         }
     }
-    // The child runner ("one command, not two"): run the user's own dev
-    // command with the sandbox environment injected. Precedence: `-- <cmd>`
-    // wins; else the package.json dev script; else host-only. --no-run forces
-    // host-only; --json defaults to host-only (explicit `--` still wins).
+    // Run the explicit or configured command with the sandbox environment.
+    // `--no-run` forces host-only. `--json` skips the configured command, but an
+    // explicit command still runs.
     // (`plan` was resolved above so it could imply the bridge mount.)
     if (plan) {
         const info = json ? process.stderr : process.stdout;
@@ -698,20 +779,41 @@ export async function runServe(parsed) {
                 info.write(`  ⚠ no browser tab connected after 30s — starting your command anyway; sandbox ops will fail until ${runtime.handle.url} is open.\n`);
             }
         }
+        else if (!json) {
+            info.write(`  ⓘ Auto-open is disabled (--no-open/CI). The pyric sandbox is browser-resident: ` +
+                `open ${runtime.handle.url} to connect if your command performs Firebase operations.\n`);
+        }
         info.write(`✔ run      \`${plan.label}\` — firebase-admin/firebase imports are routed to the sandbox at ${runtime.handle.url}\n`);
-        devChild = spawnDevChild(plan, {
-            cwd,
-            json,
-            env: buildChildEnv(process.env, {
-                serveUrl: runtime.handle.url,
-                registerUrl: registerModuleUrl(),
-            }),
+        const childEnv = buildChildEnv(process.env, {
+            serveUrl: runtime.handle.url,
+            registerUrl: registerModuleUrl(),
+            beaconToken: runtime.beaconToken,
+        });
+        // What we are handing the child, stated before it starts: the interlock
+        // line and the unsupported-runtime check.
+        const interlock = reportLaunchChecks({
+            childEnv,
+            registerUrl: registerModuleUrl(),
+            argv: plan.argv,
+            write: (line) => info.write(line),
+        });
+        devChild = spawnSandboxChild(plan, { cwd, json, env: childEnv });
+        // A child still alive well after launch that never posted a beacon is very
+        // likely not intercepted. `startBeaconWatchdog` says why this only warns.
+        const beaconsAtSpawn = runtime.beaconCount();
+        beaconWatchdog = startBeaconWatchdog({
+            label: plan.label,
+            beacon: interlock.beacon,
+            sawBeacon: () => runtime.beaconCount() > beaconsAtSpawn,
+            isAlive: () => devChild !== null && devChild.child.exitCode === null,
+            warn: (line) => void process.stderr.write(`${line}\n`),
         });
     }
     else if (!json) {
         process.stdout.write(formatStartupEnvExport({
             serveUrl: runtime.handle.url,
             registerUrl: registerModuleUrl(),
+            beaconToken: runtime.beaconToken,
         }));
     }
     return await new Promise((resolveExit) => {
@@ -722,6 +824,7 @@ export async function runServe(parsed) {
                 return;
             settled = true;
             void (async () => {
+                beaconWatchdog?.stop();
                 await functionsRuntime?.close().catch(() => undefined);
                 if (devChild && devChild.child.exitCode === null) {
                     devChild.signal('SIGTERM');
@@ -754,7 +857,7 @@ export async function runServe(parsed) {
         if (functionsRuntime) {
             void functionsExited.then((code) => {
                 if (!settled && !shuttingDown) {
-                    process.stderr.write(`pyric dev: Functions child exited unexpectedly (code ${code}).\n`);
+                    process.stderr.write(`pyric sandbox: Functions child exited unexpectedly (code ${code}).\n`);
                     finish(code === 0 ? 1 : code);
                 }
             });
@@ -762,68 +865,4 @@ export async function runServe(parsed) {
         void signal.then(shutdown);
     });
 }
-/**
- * Detect a bundler build that INLINED the real firebase SDK into its served
- * assets (`vite build` output). The served import map remaps only bare
- * `firebase/*` specifiers, so such a build cannot be sandboxed — its calls
- * reach real Google endpoints. Fingerprints are real-SDK-only endpoint hosts
- * that never appear in a sandbox-clean app (whose calls all route to
- * `/__pyric/*`). Bounded: depth ≤ 4, ≤ 200 script files, first hit per file.
- * Returns publicDir-relative paths of offending assets.
- */
-export function scanForInlinedFirebase(dir) {
-    const FINGERPRINTS = [
-        'identitytoolkit.googleapis.com',
-        'firestore.googleapis.com',
-        'securetoken.googleapis.com',
-        'firebasedatabase.app',
-    ];
-    const hits = [];
-    let scanned = 0;
-    const walk = (d, rel, depth) => {
-        if (depth > 4 || scanned >= 200)
-            return;
-        let names;
-        try {
-            names = readdirSync(d);
-        }
-        catch {
-            return;
-        }
-        for (const name of names) {
-            if (scanned >= 200)
-                return;
-            const p = join(d, name);
-            const r = rel ? `${rel}/${name}` : name;
-            let st;
-            try {
-                st = statSync(p);
-            }
-            catch {
-                continue;
-            }
-            if (st.isDirectory()) {
-                // The pyric namespace itself never lands in hosting.public, but a
-                // node_modules inside a served dir would be a scan-cost trap.
-                // Dot-directories (.next, .git, .pyric) are internal caches and must be ignored.
-                if (name === 'node_modules' || name.startsWith('.'))
-                    continue;
-                walk(p, r, depth + 1);
-            }
-            else if (/\.(js|mjs)$/.test(name)) {
-                scanned++;
-                try {
-                    const text = readFileSync(p, 'utf8');
-                    if (FINGERPRINTS.some((f) => text.includes(f)))
-                        hits.push(r);
-                }
-                catch {
-                    // unreadable asset: skip
-                }
-            }
-        }
-    };
-    walk(dir, '', 0);
-    return hits;
-}
 //# sourceMappingURL=serve.js.map