@pyric/cli 0.1.0-alpha.20 → 0.1.0-alpha.21

package/dist/bridge/client/dispatch.d.ts

@@ -1,18 +1,20 @@
 /**
- * Browser-side tool dispatcher. Consumes the SAME tool factories the
- * bridge advertises over MCP (`getSandboxToolMetadata`), so the set the
- * bridge LISTS and the set the page EXECUTES are identical. There is one
- * source of truth: the factories in `buildSandboxHandlers`.
+ * Browser-side tool dispatcher. Composes the forwarded tool families from the
+ * same records the bridge advertises over MCP (`getSandboxToolMetadata`), so
+ * the set the bridge LISTS and the set the page EXECUTES are identical by
+ * construction: the records under `../tool-family-records/` pin the names,
+ * and `./tool-family-factories.ts` supplies one browser-safe factory per
+ * family.
  *
- * History of the trap this guards against: earlier this file delegated
- * to ONLY `createFirestoreSimulatorTools`, while `getSandboxToolMetadata`
- * advertised the simulator + data-plane + inspect families. The bridge
- * therefore LISTED `firestore_create_document` / `sandbox_inspect`
- * etc., but a `callTool` failed at dispatch with "tool 'X' is not
- * registered with the connected sandbox peer" — succeed-at-list,
- * fail-at-dispatch. Registering every family here (and deriving
- * `SANDBOX_TOOL_NAMES` from the same set) closes the gap. The parity is
- * pinned by `test/bridge/tool-parity.test.ts`.
+ * History of the trap this guards against: earlier this file delegated to
+ * ONLY the simulator factory, while the bridge advertised the simulator,
+ * data-plane and inspect families. The bridge therefore LISTED
+ * `firestore_create_document` / `sandbox_inspect` etc., but a `callTool`
+ * failed at dispatch with "tool 'X' is not registered with the connected
+ * sandbox peer" (succeed-at-list, fail-at-dispatch). Composing every family
+ * from the records, and deriving `SANDBOX_TOOL_NAMES` from the same records,
+ * closes the gap. The parity is pinned by `test/bridge/tool-parity.test.ts`
+ * and `test/bridge/tool-families.test.ts`.
  */
 import type { LocalSandbox } from 'pyric/sandbox';
 export interface DispatchResult {
@@ -22,18 +24,22 @@ export interface DispatchResult {
 }
 /**
  * Build a dispatcher for the supplied `Sandbox`. The returned function
- * looks up tools by name across every factory and invokes the
+ * looks up tools by name across every family and invokes the
  * canonical handler. Throws `UnknownToolError` on unknown names.
+ *
+ * Fails closed before any dispatch if the bound handlers do not yield exactly
+ * the names the family records pin, so a factory that drifts from its record
+ * surfaces when the sandbox connects rather than at the first call.
  */
 export declare function buildSandboxDispatcher(sandbox: LocalSandbox): (name: string, args: Record<string, unknown>) => Promise<DispatchResult>;
 export declare function dispatchSandboxTool(sandbox: LocalSandbox, name: string, args: Record<string, unknown>): Promise<DispatchResult>;
 /**
- * Tool names this dispatcher recognises, derived at load time from the
- * SAME factories — so it equals what the page executes AND what the
- * bridge advertises. `connectBridge` sends this as the `hello.tools`
- * payload so the bridge advertises exactly the executable set.
+ * Tool names this dispatcher recognises, read from the forwarded family
+ * records in family order, so it equals what the page executes AND what the
+ * bridge advertises. `connectBridge` sends this as the `hello.tools` payload
+ * so the bridge advertises exactly the executable set.
  */
-export declare const SANDBOX_TOOL_NAMES: string[];
+export declare const SANDBOX_TOOL_NAMES: readonly string[];
 export declare class UnknownToolError extends Error {
     readonly tool: string;
     constructor(tool: string);

package/dist/bridge/client/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/bridge/client/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA6BD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,YAAY,GACpB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,cAAc,CAAC,CAiB1E;AAcD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,cAAc,CAAC,CAOzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,EAUnC,CAAC;AAEL,qBAAa,gBAAiB,SAAQ,KAAK;aACb,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIzC"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/bridge/client/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAIlD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,YAAY,GACpB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,cAAc,CAAC,CAuB1E;AAcD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,cAAc,CAAC,CAOzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAE/C,CAAC;AAEF,qBAAa,gBAAiB,SAAQ,KAAK;aACb,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIzC"}

package/dist/bridge/client/dispatch.js

@@ -1,29 +1,28 @@
 /**
- * Browser-side tool dispatcher. Consumes the SAME tool factories the
- * bridge advertises over MCP (`getSandboxToolMetadata`), so the set the
- * bridge LISTS and the set the page EXECUTES are identical. There is one
- * source of truth: the factories in `buildSandboxHandlers`.
+ * Browser-side tool dispatcher. Composes the forwarded tool families from the
+ * same records the bridge advertises over MCP (`getSandboxToolMetadata`), so
+ * the set the bridge LISTS and the set the page EXECUTES are identical by
+ * construction: the records under `../tool-family-records/` pin the names,
+ * and `./tool-family-factories.ts` supplies one browser-safe factory per
+ * family.
  *
- * History of the trap this guards against: earlier this file delegated
- * to ONLY `createFirestoreSimulatorTools`, while `getSandboxToolMetadata`
- * advertised the simulator + data-plane + inspect families. The bridge
- * therefore LISTED `firestore_create_document` / `sandbox_inspect`
- * etc., but a `callTool` failed at dispatch with "tool 'X' is not
- * registered with the connected sandbox peer" — succeed-at-list,
- * fail-at-dispatch. Registering every family here (and deriving
- * `SANDBOX_TOOL_NAMES` from the same set) closes the gap. The parity is
- * pinned by `test/bridge/tool-parity.test.ts`.
+ * History of the trap this guards against: earlier this file delegated to
+ * ONLY the simulator factory, while the bridge advertised the simulator,
+ * data-plane and inspect families. The bridge therefore LISTED
+ * `firestore_create_document` / `sandbox_inspect` etc., but a `callTool`
+ * failed at dispatch with "tool 'X' is not registered with the connected
+ * sandbox peer" (succeed-at-list, fail-at-dispatch). Composing every family
+ * from the records, and deriving `SANDBOX_TOOL_NAMES` from the same records,
+ * closes the gap. The parity is pinned by `test/bridge/tool-parity.test.ts`
+ * and `test/bridge/tool-families.test.ts`.
  */
-import { createFirestoreSimulatorTools } from 'pyric/rules/internal';
-import { createFirestoreDataTools, createFirestoreInspectTools, getFirestore, getAdminFirestore, } from 'pyric/firestore';
+import { getFirestore, getAdminFirestore } from 'pyric/firestore';
 import { getInternalEnv } from 'pyric/sandbox/internal';
-import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
+import { assertExactToolNames, toolFamilies } from '../tool-families.js';
+import { SANDBOX_HANDLER_FACTORIES } from './tool-family-factories.js';
 /**
- * The full handler set for a sandbox: the simulator family (bound to the
- * internal env) plus the modular data-plane and inspect families (bound
- * to a per-call `resolveDb`). This is the single source of truth shared
- * by `buildSandboxDispatcher` and `SANDBOX_TOOL_NAMES`, and it MUST stay
- * aligned with `getSandboxToolMetadata` (asserted by tool-parity.test.ts).
+ * The full handler set for a sandbox: every forwarded family bound to one
+ * `SandboxBinding` built here.
  *
  * Auth: `resolveDb('admin')` / `resolveDb(undefined)` is an admin-bypass handle
  * (no rules); `resolveDb({ uid, claims })` is a rules-enforcing client acting as
@@ -32,24 +31,28 @@ import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
  * is intended; a dispatcher wired to a real backend must reject `'admin'`.
  */
 function buildSandboxHandlers(sandbox) {
-    const env = getInternalEnv(sandbox);
-    const resolveDb = (actor) => actor && actor !== 'admin'
-        ? getFirestore(sandbox.withAuth({ uid: actor.uid, token: actor.claims }))
-        : getAdminFirestore(sandbox);
-    return [
-        ...createFirestoreSimulatorTools({ resolveSandbox: () => env }),
-        ...createFirestoreDataTools({ resolveDb }),
-        ...createFirestoreInspectTools({ resolveSandbox: () => sandbox }),
-        ...createRtdbInspectionTools({ resolveSandbox: () => sandbox }),
-    ];
+    const binding = {
+        sandbox,
+        env: getInternalEnv(sandbox),
+        resolveDb: (actor) => actor && actor !== 'admin'
+            ? getFirestore(sandbox.withAuth({ uid: actor.uid, token: actor.claims }))
+            : getAdminFirestore(sandbox),
+    };
+    return toolFamilies('forwarded').flatMap((family) => SANDBOX_HANDLER_FACTORIES[family.key](binding));
 }
 /**
  * Build a dispatcher for the supplied `Sandbox`. The returned function
- * looks up tools by name across every factory and invokes the
+ * looks up tools by name across every family and invokes the
  * canonical handler. Throws `UnknownToolError` on unknown names.
+ *
+ * Fails closed before any dispatch if the bound handlers do not yield exactly
+ * the names the family records pin, so a factory that drifts from its record
+ * surfaces when the sandbox connects rather than at the first call.
  */
 export function buildSandboxDispatcher(sandbox) {
-    const byName = new Map(buildSandboxHandlers(sandbox).map((h) => [h.name, h]));
+    const handlers = buildSandboxHandlers(sandbox);
+    assertExactToolNames('sandbox dispatcher tools', handlers.map((h) => h.name), SANDBOX_TOOL_NAMES);
+    const byName = new Map(handlers.map((h) => [h.name, h]));
     return async (name, args) => {
         const handler = byName.get(name);
         if (!handler)
@@ -84,22 +87,12 @@ export async function dispatchSandboxTool(sandbox, name, args) {
     return dispatcher(name, args);
 }
 /**
- * Tool names this dispatcher recognises, derived at load time from the
- * SAME factories — so it equals what the page executes AND what the
- * bridge advertises. `connectBridge` sends this as the `hello.tools`
- * payload so the bridge advertises exactly the executable set.
+ * Tool names this dispatcher recognises, read from the forwarded family
+ * records in family order, so it equals what the page executes AND what the
+ * bridge advertises. `connectBridge` sends this as the `hello.tools` payload
+ * so the bridge advertises exactly the executable set.
  */
-export const SANDBOX_TOOL_NAMES = (() => {
-    const stub = async () => {
-        throw new Error('SANDBOX_TOOL_NAMES: stub resolver should never be invoked');
-    };
-    return [
-        ...createFirestoreSimulatorTools({ resolveSandbox: stub }),
-        ...createFirestoreDataTools({ resolveDb: stub }),
-        ...createFirestoreInspectTools({ resolveSandbox: stub }),
-        ...createRtdbInspectionTools({ resolveSandbox: stub }),
-    ].map((h) => h.name);
-})();
+export const SANDBOX_TOOL_NAMES = toolFamilies('forwarded').flatMap((family) => family.tools);
 export class UnknownToolError extends Error {
     tool;
     constructor(tool) {

package/dist/bridge/client/dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/bridge/client/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,GAElB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAQrE;;;;;;;;;;;;GAYG;AACH,SAAS,oBAAoB,CAAC,OAAqB;IACjD,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,CAAC,KAAU,EAAE,EAAE,CAC/B,KAAK,IAAI,KAAK,KAAK,OAAO;QACxB,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO;QACL,GAAG,6BAA6B,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC/D,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,CAAC;QAC1C,GAAG,2BAA2B,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACjE,GAAG,yBAAyB,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAqB;IAErB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC/C,kEAAkE;QAClE,wDAAwD;QACxD,MAAM,GAAG,GAAG;YACV,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;SAC5B,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAGnC,CAAC;AAEJ,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAqB,EACrB,IAAY,EACZ,IAA6B;IAE7B,IAAI,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC7C,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAa,CAAC,GAAG,EAAE;IAChD,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC,CAAC;IACF,OAAO;QACL,GAAG,6BAA6B,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;QACnE,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC;QACzD,GAAG,2BAA2B,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;QACjE,GAAG,yBAAyB,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;KAChE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAA5B,YAA4B,IAAY;QACtC,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QADb,SAAI,GAAJ,IAAI,CAAQ;QAEtC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/bridge/client/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAW,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAuB,MAAM,4BAA4B,CAAC;AAQ5F;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,OAAqB;IACjD,MAAM,OAAO,GAAmB;QAC9B,OAAO;QACP,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC;QAC5B,SAAS,EAAE,CAAC,KAAU,EAAE,EAAE,CACxB,KAAK,IAAI,KAAK,KAAK,OAAO;YACxB,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACzE,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC;KACjC,CAAC;IACF,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAClD,yBAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAqB;IAErB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,oBAAoB,CAClB,0BAA0B,EAC1B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAC3B,kBAAkB,CACnB,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC/C,kEAAkE;QAClE,wDAAwD;QACxD,MAAM,GAAG,GAAG;YACV,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;SAC5B,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAGnC,CAAC;AAEJ,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAqB,EACrB,IAAY,EACZ,IAA6B;IAE7B,IAAI,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC7C,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB,YAAY,CAAC,WAAW,CAAC,CAAC,OAAO,CACpF,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CACzB,CAAC;AAEF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAA5B,YAA4B,IAAY;QACtC,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QADb,SAAI,GAAJ,IAAI,CAAQ;QAEtC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}

package/dist/bridge/client/tool-family-factories.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Browser-side factory for each forwarded tool family, bound to one
+ * sandbox. Imports only browser-safe subpaths (`pyric/rules/internal`, never
+ * `/node`); the Node side has its own map in `server/tool-family-factories.ts`.
+ *
+ * The keys are the family record filenames. `satisfies` against the keys
+ * derived from the generated aggregate makes a missing or surplus entry a
+ * compile error.
+ */
+import type { ToolHandler } from '@inbrowser/agent';
+import { type FirestoreDataToolDeps } from 'pyric/firestore';
+import type { LocalSandbox } from 'pyric/sandbox';
+import type { getInternalEnv } from 'pyric/sandbox/internal';
+/** Everything a forwarded family needs from one sandbox, built once per sandbox. */
+export interface SandboxBinding {
+    sandbox: LocalSandbox;
+    env: ReturnType<typeof getInternalEnv>;
+    resolveDb: FirestoreDataToolDeps['resolveDb'];
+}
+export declare const SANDBOX_HANDLER_FACTORIES: {
+    'firestore-simulator': ({ env }: SandboxBinding) => ToolHandler<unknown, unknown>[];
+    'firestore-data': ({ resolveDb }: SandboxBinding) => ToolHandler<unknown, unknown>[];
+    'firestore-inspect': ({ sandbox }: SandboxBinding) => ToolHandler<unknown, unknown>[];
+    'rtdb-inspection': ({ sandbox }: SandboxBinding) => ToolHandler<unknown, unknown>[];
+};
+//# sourceMappingURL=tool-family-factories.d.ts.map

package/dist/bridge/client/tool-family-factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-family-factories.d.ts","sourceRoot":"","sources":["../../../src/bridge/client/tool-family-factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAI7D,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;IACvC,SAAS,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;CAC/C;AAED,eAAO,MAAM,yBAAyB;;;;;CAK4C,CAAC"}

package/dist/bridge/client/tool-family-factories.js

@@ -0,0 +1,10 @@
+import { createFirestoreSimulatorTools } from 'pyric/rules/internal';
+import { createFirestoreDataTools, createFirestoreInspectTools, } from 'pyric/firestore';
+import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
+export const SANDBOX_HANDLER_FACTORIES = {
+    'firestore-simulator': ({ env }) => createFirestoreSimulatorTools({ resolveSandbox: () => env }),
+    'firestore-data': ({ resolveDb }) => createFirestoreDataTools({ resolveDb }),
+    'firestore-inspect': ({ sandbox }) => createFirestoreInspectTools({ resolveSandbox: () => sandbox }),
+    'rtdb-inspection': ({ sandbox }) => createRtdbInspectionTools({ resolveSandbox: () => sandbox }),
+};
+//# sourceMappingURL=tool-family-factories.js.map

package/dist/bridge/client/tool-family-factories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-family-factories.js","sourceRoot":"","sources":["../../../src/bridge/client/tool-family-factories.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAE5B,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAUrE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,qBAAqB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,6BAA6B,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAChG,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5E,mBAAmB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IACpG,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;CAChB,CAAC"}

package/dist/bridge/server/mcp-contract.d.ts

@@ -1,14 +1,15 @@
 import type { ToolHandler } from '@inbrowser/agent';
 import { type ToolMetadata } from './tool-metadata.js';
 /**
- * The exact tools a default local Pyric MCP server forwards to its sandbox.
- * A tool addition or removal is a public contract change and must update this
- * manifest deliberately.
+ * The exact tools a default local Pyric MCP server forwards to its sandbox,
+ * in `tools/list` order. Names are authored in `bridge/tool-family-records/`;
+ * a tool addition or removal is a public contract change and must update the
+ * family record deliberately.
  */
-export declare const DEFAULT_MCP_FORWARDED_TOOL_NAMES: readonly ["firestore_simulator_create", "firestore_simulator_execute", "firestore_simulator_read", "firestore_simulator_batch", "firestore_create_with_auto_id", "firestore_simulator_undo", "firestore_simulator_redo", "firestore_simulator_events", "firestore_simulator_transaction", "firestore_get_document", "firestore_list_documents", "firestore_create_document", "firestore_add_document", "firestore_update_document", "firestore_delete_document", "firestore_batch_write", "firestore_query_where", "sandbox_inspect", "rtdb_simulate_access", "rtdb_crawl_structure"];
+export declare const DEFAULT_MCP_FORWARDED_TOOL_NAMES: readonly string[];
 /** Local rules tools that run in the MCP process without a browser peer. */
-export declare const DEFAULT_MCP_IN_PROCESS_TOOL_NAMES: readonly ["firestore_simulate_rules", "firestore_rules_stdlib_list", "firestore_rules_stdlib_get", "firestore_lint_rules", "firestore_resolve_modules", "rules_stdlib_list", "rules_stdlib_get", "rules_resolve_modules", "pyric_can_i_use"];
-export declare const DEFAULT_MCP_TOOL_NAMES: readonly ["firestore_simulator_create", "firestore_simulator_execute", "firestore_simulator_read", "firestore_simulator_batch", "firestore_create_with_auto_id", "firestore_simulator_undo", "firestore_simulator_redo", "firestore_simulator_events", "firestore_simulator_transaction", "firestore_get_document", "firestore_list_documents", "firestore_create_document", "firestore_add_document", "firestore_update_document", "firestore_delete_document", "firestore_batch_write", "firestore_query_where", "sandbox_inspect", "rtdb_simulate_access", "rtdb_crawl_structure", "firestore_simulate_rules", "firestore_rules_stdlib_list", "firestore_rules_stdlib_get", "firestore_lint_rules", "firestore_resolve_modules", "rules_stdlib_list", "rules_stdlib_get", "rules_resolve_modules", "pyric_can_i_use"];
+export declare const DEFAULT_MCP_IN_PROCESS_TOOL_NAMES: readonly string[];
+export declare const DEFAULT_MCP_TOOL_NAMES: readonly string[];
 export interface DefaultMcpToolSurface {
     forwarded: ToolMetadata[];
     inProcess: ToolHandler[];

package/dist/bridge/server/mcp-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-contract.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/mcp-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAE5B;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,ujBAqBnC,CAAC;AAEX,4EAA4E;AAC5E,eAAO,MAAM,iCAAiC,8OAUpC,CAAC;AAEX,eAAO,MAAM,sBAAsB,0xBAGzB,CAAC;AAEX,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,SAAS,EAAE,WAAW,EAAE,CAAC;CAC1B;AAqBD;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,qBAAqB,CAchE"}
+{"version":3,"file":"mcp-contract.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/mcp-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAE5B;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAE3B,CAAC;AAEpC,4EAA4E;AAC5E,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAE5B,CAAC;AAEpC,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAGnD,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,SAAS,EAAE,WAAW,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,qBAAqB,CAchE"}

package/dist/bridge/server/mcp-contract.js

@@ -1,57 +1,18 @@
+import { assertExactToolNames, toolFamilies } from '../tool-families.js';
 import { getInProcessToolHandlers, getSandboxToolMetadata, } from './tool-metadata.js';
 /**
- * The exact tools a default local Pyric MCP server forwards to its sandbox.
- * A tool addition or removal is a public contract change and must update this
- * manifest deliberately.
+ * The exact tools a default local Pyric MCP server forwards to its sandbox,
+ * in `tools/list` order. Names are authored in `bridge/tool-family-records/`;
+ * a tool addition or removal is a public contract change and must update the
+ * family record deliberately.
  */
-export const DEFAULT_MCP_FORWARDED_TOOL_NAMES = [
-    'firestore_simulator_create',
-    'firestore_simulator_execute',
-    'firestore_simulator_read',
-    'firestore_simulator_batch',
-    'firestore_create_with_auto_id',
-    'firestore_simulator_undo',
-    'firestore_simulator_redo',
-    'firestore_simulator_events',
-    'firestore_simulator_transaction',
-    'firestore_get_document',
-    'firestore_list_documents',
-    'firestore_create_document',
-    'firestore_add_document',
-    'firestore_update_document',
-    'firestore_delete_document',
-    'firestore_batch_write',
-    'firestore_query_where',
-    'sandbox_inspect',
-    'rtdb_simulate_access',
-    'rtdb_crawl_structure',
-];
+export const DEFAULT_MCP_FORWARDED_TOOL_NAMES = toolFamilies('forwarded').flatMap((family) => family.tools);
 /** Local rules tools that run in the MCP process without a browser peer. */
-export const DEFAULT_MCP_IN_PROCESS_TOOL_NAMES = [
-    'firestore_simulate_rules',
-    'firestore_rules_stdlib_list',
-    'firestore_rules_stdlib_get',
-    'firestore_lint_rules',
-    'firestore_resolve_modules',
-    'rules_stdlib_list',
-    'rules_stdlib_get',
-    'rules_resolve_modules',
-    'pyric_can_i_use',
-];
+export const DEFAULT_MCP_IN_PROCESS_TOOL_NAMES = toolFamilies('in-process').flatMap((family) => family.tools);
 export const DEFAULT_MCP_TOOL_NAMES = [
     ...DEFAULT_MCP_FORWARDED_TOOL_NAMES,
     ...DEFAULT_MCP_IN_PROCESS_TOOL_NAMES,
 ];
-function assertExactNames(label, actual, expected) {
-    const actualSorted = [...actual].sort();
-    const expectedSorted = [...expected].sort();
-    if (actualSorted.length !== expectedSorted.length ||
-        actualSorted.some((name, index) => name !== expectedSorted[index])) {
-        throw new Error(`${label} drifted from the default MCP contract\n` +
-            `expected: ${expected.join(', ')}\n` +
-            `actual:   ${actual.join(', ')}`);
-    }
-}
 /**
  * Assemble the default MCP surface and fail closed if a factory changed
  * without a corresponding public-contract decision.
@@ -59,8 +20,8 @@ function assertExactNames(label, actual, expected) {
 export function getDefaultMcpToolSurface() {
     const forwarded = getSandboxToolMetadata();
     const inProcess = getInProcessToolHandlers();
-    assertExactNames('forwarded sandbox tools', forwarded.map((tool) => tool.name), DEFAULT_MCP_FORWARDED_TOOL_NAMES);
-    assertExactNames('in-process tools', inProcess.map((tool) => tool.name), DEFAULT_MCP_IN_PROCESS_TOOL_NAMES);
+    assertExactToolNames('forwarded sandbox tools', forwarded.map((tool) => tool.name), DEFAULT_MCP_FORWARDED_TOOL_NAMES);
+    assertExactToolNames('in-process tools', inProcess.map((tool) => tool.name), DEFAULT_MCP_IN_PROCESS_TOOL_NAMES);
     return { forwarded, inProcess };
 }
 //# sourceMappingURL=mcp-contract.js.map

package/dist/bridge/server/mcp-contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-contract.js","sourceRoot":"","sources":["../../../src/bridge/server/mcp-contract.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,4BAA4B;IAC5B,6BAA6B;IAC7B,0BAA0B;IAC1B,2BAA2B;IAC3B,+BAA+B;IAC/B,0BAA0B;IAC1B,0BAA0B;IAC1B,4BAA4B;IAC5B,iCAAiC;IACjC,wBAAwB;IACxB,0BAA0B;IAC1B,2BAA2B;IAC3B,wBAAwB;IACxB,2BAA2B;IAC3B,2BAA2B;IAC3B,uBAAuB;IACvB,uBAAuB;IACvB,iBAAiB;IACjB,sBAAsB;IACtB,sBAAsB;CACd,CAAC;AAEX,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,0BAA0B;IAC1B,6BAA6B;IAC7B,4BAA4B;IAC5B,sBAAsB;IACtB,2BAA2B;IAC3B,mBAAmB;IACnB,kBAAkB;IAClB,uBAAuB;IACvB,iBAAiB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,GAAG,gCAAgC;IACnC,GAAG,iCAAiC;CAC5B,CAAC;AAOX,SAAS,gBAAgB,CACvB,KAAa,EACb,MAAyB,EACzB,QAA2B;IAE3B,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IACE,YAAY,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC7C,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0CAA0C;YAChD,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACpC,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;IAC7C,gBAAgB,CACd,yBAAyB,EACzB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAClC,gCAAgC,CACjC,CAAC;IACF,gBAAgB,CACd,kBAAkB,EAClB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAClC,iCAAiC,CAClC,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"mcp-contract.js","sourceRoot":"","sources":["../../../src/bridge/server/mcp-contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAsB,YAAY,CAC7E,WAAW,CACZ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEpC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iCAAiC,GAAsB,YAAY,CAC9E,YAAY,CACb,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,GAAG,gCAAgC;IACnC,GAAG,iCAAiC;CACrC,CAAC;AAOF;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;IAC7C,oBAAoB,CAClB,yBAAyB,EACzB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAClC,gCAAgC,CACjC,CAAC;IACF,oBAAoB,CAClB,kBAAkB,EAClB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAClC,iCAAiC,CAClC,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC"}

package/dist/bridge/server/peer.d.ts

@@ -35,5 +35,15 @@ export interface ConsumerSession {
  * id spaces never mix.
  */
 export declare function createConsumerSession(bridge: Bridge, send: (msg: BridgeMessage) => void): ConsumerSession;
-export declare function collectBody(req: IncomingMessage): Promise<unknown>;
+/** Thrown by {@link collectBody} when a body exceeds the caller's limit. The
+ *  code lets a route answer 413 instead of treating it as malformed JSON. */
+export declare const BODY_TOO_LARGE_CODE = "PYRIC_BODY_TOO_LARGE";
+/**
+ * Read a request body and parse it as JSON.
+ *
+ * `limitBytes` caps how much is buffered. A route that is reachable by
+ * anything other than a trusted local caller must pass one: without it a
+ * single request can grow the string until the process dies.
+ */
+export declare function collectBody(req: IncomingMessage, limitBytes?: number): Promise<unknown>;
 //# sourceMappingURL=peer.d.ts.map

package/dist/bridge/server/peer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AAGxB,wBAAgB,UAAU,CACxB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACvC,EAAE,EAAE,SAAS,GACZ,IAAI,CAwFN;AAID;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;IACxC,6DAA6D;IAC7D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GACjC,eAAe,CAoEjB;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBxE"}
+{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AAGxB,wBAAgB,UAAU,CACxB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACvC,EAAE,EAAE,SAAS,GACZ,IAAI,CAwFN;AAID;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;IACxC,6DAA6D;IAC7D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GACjC,eAAe,CAoEjB;AAED;6EAC6E;AAC7E,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CA8BlB"}

package/dist/bridge/server/peer.js

@@ -163,14 +163,35 @@ export function createConsumerSession(bridge, send) {
         },
     };
 }
-export async function collectBody(req) {
+/** Thrown by {@link collectBody} when a body exceeds the caller's limit. The
+ *  code lets a route answer 413 instead of treating it as malformed JSON. */
+export const BODY_TOO_LARGE_CODE = 'PYRIC_BODY_TOO_LARGE';
+/**
+ * Read a request body and parse it as JSON.
+ *
+ * `limitBytes` caps how much is buffered. A route that is reachable by
+ * anything other than a trusted local caller must pass one: without it a
+ * single request can grow the string until the process dies.
+ */
+export async function collectBody(req, limitBytes) {
     if (req.method === 'GET' || req.method === 'DELETE')
         return undefined;
     return await new Promise((resolve, reject) => {
         let raw = '';
+        let overLimit = false;
         req.setEncoding('utf8');
         req.on('data', (chunk) => {
+            // Past the limit the rest of the upload is read and discarded rather
+            // than the socket being destroyed. Destroying resets the connection, so
+            // the caller's 413 would never reach the client.
+            if (overLimit)
+                return;
             raw += chunk;
+            if (limitBytes === undefined || Buffer.byteLength(raw) <= limitBytes)
+                return;
+            overLimit = true;
+            raw = '';
+            reject(Object.assign(new Error('request body too large'), { code: BODY_TOO_LARGE_CODE }));
         });
         req.on('end', () => {
             if (!raw) {

package/dist/bridge/server/peer.js.map

@@ -1 +1 @@
-{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,GAE3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,UAAU,UAAU,CACxB,MAAuC,EACvC,EAAa;IAEb,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C;;gEAE4D;IAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAE5C,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO;QAClC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE;gBAC9D,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;YACpD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,GAAG,MAAM,CAAC,mBAAmB,CACrC,CAAC,GAAkB,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YACD,mEAAmE;YACnE,iEAAiE;YACjE,4DAA4D;YAC5D,0DAA0D;YAC1D,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EACzC,GAAG,CAAC,SAAS,EACb,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YACvD,gEAAgE;YAChE,4DAA4D;YAC5D,6DAA6D;YAC7D,mEAAmE;YACnE,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,qCAAqC;YACrC,GAAG,EAAE;gBACH,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;gBACjE,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CACF,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,CAAC;oBACX,aAAa,EAAE,MAAM,CAAC,OAAO;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,IAAI,UAAU;YAAE,UAAU,EAAE,CAAC;QAC7B,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,QAAQ;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC3B,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,IAAkC;IAElC,gDAAgD;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE3C,OAAO;QACL,aAAa,CAAC,GAAkB;YAC9B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,2DAA2D;oBAC3D,+DAA+D;oBAC/D,sDAAsD;oBACtD,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,CAAC;wBACX,aAAa,EAAE,MAAM,CAAC,OAAO;wBAC7B,aAAa,EAAE,MAAM,CAAC,kBAAkB,EAAE;wBAC1C,YAAY,EAAE,UAAU,EAAE;qBAC3B,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EACpE,CAAC,GAA2E,EAAE,EAAE,CAC9E,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE;4BACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;4BAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,wDAAwD;4BACxD,oDAAoD;4BACpD,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAChF,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAClE;qBACF,CAAC,CACL,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,OAAO,CAAC,aAAa;oBAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5D,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CACvD,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,WAAW;wBAAE,OAAO;oBACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACvB,WAAW,EAAE,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,OAAO;gBACT,CAAC;gBACD;oBACE,OAAO,CAAC,uCAAuC;YACnD,CAAC;QACH,CAAC;QACD,OAAO;YACL,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,WAAW,EAAE,CAAC;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAoB;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,GAAG,IAAI,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,GAE3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,UAAU,UAAU,CACxB,MAAuC,EACvC,EAAa;IAEb,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C;;gEAE4D;IAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAE5C,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO;QAClC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE;gBAC9D,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;YACpD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,GAAG,MAAM,CAAC,mBAAmB,CACrC,CAAC,GAAkB,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YACD,mEAAmE;YACnE,iEAAiE;YACjE,4DAA4D;YAC5D,0DAA0D;YAC1D,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EACzC,GAAG,CAAC,SAAS,EACb,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YACvD,gEAAgE;YAChE,4DAA4D;YAC5D,6DAA6D;YAC7D,mEAAmE;YACnE,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,qCAAqC;YACrC,GAAG,EAAE;gBACH,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;gBACjE,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CACF,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,CAAC;oBACX,aAAa,EAAE,MAAM,CAAC,OAAO;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,IAAI,UAAU;YAAE,UAAU,EAAE,CAAC;QAC7B,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,QAAQ;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC3B,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,IAAkC;IAElC,gDAAgD;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE3C,OAAO;QACL,aAAa,CAAC,GAAkB;YAC9B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,2DAA2D;oBAC3D,+DAA+D;oBAC/D,sDAAsD;oBACtD,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,CAAC;wBACX,aAAa,EAAE,MAAM,CAAC,OAAO;wBAC7B,aAAa,EAAE,MAAM,CAAC,kBAAkB,EAAE;wBAC1C,YAAY,EAAE,UAAU,EAAE;qBAC3B,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EACpE,CAAC,GAA2E,EAAE,EAAE,CAC9E,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE;4BACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;4BAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,wDAAwD;4BACxD,oDAAoD;4BACpD,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAChF,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAClE;qBACF,CAAC,CACL,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,OAAO,CAAC,aAAa;oBAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5D,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CACvD,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,WAAW;wBAAE,OAAO;oBACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACvB,WAAW,EAAE,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,OAAO;gBACT,CAAC;gBACD;oBACE,OAAO,CAAC,uCAAuC;YACnD,CAAC;QACH,CAAC;QACD,OAAO;YACL,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,WAAW,EAAE,CAAC;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED;6EAC6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAoB,EACpB,UAAmB;IAEnB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,qEAAqE;YACrE,wEAAwE;YACxE,iDAAiD;YACjD,IAAI,SAAS;gBAAE,OAAO;YACtB,GAAG,IAAI,KAAK,CAAC;YACb,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU;gBAAE,OAAO;YAC7E,SAAS,GAAG,IAAI,CAAC;YACjB,GAAG,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/bridge/server/tool-family-factories.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Node-side factory for each tool family. This is the only bridge module
+ * that imports `pyric/rules/internal/node` or the conformance tools; the
+ * browser side has its own map in `client/tool-family-factories.ts`.
+ *
+ * The keys are the family record filenames. `satisfies` against the keys
+ * derived from the generated aggregate makes a missing or surplus entry a
+ * compile error.
+ */
+import type { ToolHandler } from '@inbrowser/agent';
+/** A resolver that must never run: forwarded families are executed by the browser peer, not here. */
+export type StubResolver = () => never;
+/** Forwarded families, called with a stub so only metadata is read. */
+export declare const FORWARDED_METADATA_FACTORIES: {
+    'firestore-simulator': (stub: StubResolver) => ToolHandler<unknown, unknown>[];
+    'firestore-data': (stub: StubResolver) => ToolHandler<unknown, unknown>[];
+    'firestore-inspect': (stub: StubResolver) => ToolHandler<unknown, unknown>[];
+    'rtdb-inspection': (stub: StubResolver) => ToolHandler<unknown, unknown>[];
+};
+/**
+ * In-process families, returned as live handlers the MCP server registers
+ * directly. `scope` reaches the rules factory, which appends a hosted
+ * verification tool only when one is supplied; the default surface supplies
+ * none.
+ */
+export declare const IN_PROCESS_HANDLER_FACTORIES: {
+    'firestore-rules': (scope: unknown) => ToolHandler<unknown, unknown>[];
+    conformance: () => ToolHandler<unknown, unknown>[];
+};
+//# sourceMappingURL=tool-family-factories.d.ts.map

package/dist/bridge/server/tool-family-factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-family-factories.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/tool-family-factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAUpD,qGAAqG;AACrG,MAAM,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC;AAEvC,uEAAuE;AACvE,eAAO,MAAM,4BAA4B;;;;;CAKoC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;CAGiC,CAAC"}

package/dist/bridge/server/tool-family-factories.js

@@ -0,0 +1,22 @@
+import { createFirestoreSimulatorTools, createFirestoreRulesTools, } from 'pyric/rules/internal/node';
+import { createFirestoreDataTools, createFirestoreInspectTools } from 'pyric/firestore';
+import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
+import { createConformanceTools } from '../../conformance/tools.js';
+/** Forwarded families, called with a stub so only metadata is read. */
+export const FORWARDED_METADATA_FACTORIES = {
+    'firestore-simulator': (stub) => createFirestoreSimulatorTools({ resolveSandbox: stub }),
+    'firestore-data': (stub) => createFirestoreDataTools({ resolveDb: stub }),
+    'firestore-inspect': (stub) => createFirestoreInspectTools({ resolveSandbox: stub }),
+    'rtdb-inspection': (stub) => createRtdbInspectionTools({ resolveSandbox: stub }),
+};
+/**
+ * In-process families, returned as live handlers the MCP server registers
+ * directly. `scope` reaches the rules factory, which appends a hosted
+ * verification tool only when one is supplied; the default surface supplies
+ * none.
+ */
+export const IN_PROCESS_HANDLER_FACTORIES = {
+    'firestore-rules': (scope) => createFirestoreRulesTools({ scope }),
+    conformance: () => createConformanceTools(),
+};
+//# sourceMappingURL=tool-family-factories.js.map

package/dist/bridge/server/tool-family-factories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-family-factories.js","sourceRoot":"","sources":["../../../src/bridge/server/tool-family-factories.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAMpE,uEAAuE;AACvE,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,6BAA6B,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;IACjG,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC;IAClF,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;IAC7F,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;CACd,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAW,CAAC;IAC3E,WAAW,EAAE,GAAG,EAAE,CAAC,sBAAsB,EAAE;CAC6B,CAAC"}

package/dist/bridge/server/tool-metadata.d.ts

@@ -1,16 +1,18 @@
 /**
- * Extract tool metadata (name + description + parameters) from the
- * existing `pyric/rules` factories without running any
- * tool logic. Used by the bridge to register MCP tools whose actual
- * dispatch happens against the connected browser peer.
+ * Node-side composition of the tool families the bridge serves over MCP.
  *
- * Why: `createFirestoreSimulatorTools` returns `ToolHandler[]` with
- * `execute` bound to a `LocalEnvironment`. The bridge process doesn't
- * have a `LocalEnvironment` — it forwards. But it does need the
- * metadata to populate the MCP server's tool list. This module calls
- * the factory with a stub resolver and reads only the metadata; the
- * stub never gets invoked because the bridge replaces `execute`
- * before dispatch.
+ * Forwarded families are executed by the browser sandbox peer, so this
+ * process never holds a `LocalEnvironment`. It still needs each tool's
+ * metadata (name, description, parameters) to populate the MCP tool list, so
+ * it calls the family factories with a stub resolver and reads only the
+ * metadata; the bridge replaces `execute` with forward-to-peer dispatch
+ * before any call reaches a handler.
+ *
+ * In-process families run here without a browser peer and are returned as
+ * live handlers.
+ *
+ * Family order comes from the records under `../tool-family-records/`; the
+ * factories come from `./tool-family-factories.ts`.
  */
 import type { ToolHandler } from '@inbrowser/agent';
 export interface ToolMetadata {
@@ -19,16 +21,13 @@ export interface ToolMetadata {
     parameters: Record<string, unknown>;
 }
 /**
- * Tool metadata for the sandbox bridge. Includes the
- * data-plane / sandbox-management tools that the browser dispatches
- * via `LocalEnvironment`. Rules tooling (lint, validate, simulate,
- * test) is NOT included here — those execute in Node and are
- * registered separately, since they don't need the browser sandbox.
+ * Tool metadata for every forwarded family, in family order. The stub
+ * resolver never runs: the bridge replaces `execute()` with its own
+ * forward-to-peer dispatch.
  */
 export declare function getSandboxToolMetadata(): ToolMetadata[];
 /**
- * Tooling factories that execute in-process on the bridge
- * (no browser needed). Returned as live ToolHandlers — the bridge
+ * Live handlers for every in-process family, in family order. The bridge
  * registers each handler's `execute` directly.
  *
  * `scope` is forwarded so the hosted Rules Test API verification tool can

package/dist/bridge/server/tool-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-metadata.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AASpD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAUD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,YAAY,EAAE,CAkCvD;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,CASvE"}
+{"version":3,"file":"tool-metadata.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAQpD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAUD;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,YAAY,EAAE,CASvD;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,CAIvE"}