@pyric/cli 0.1.0-alpha.20 → 0.1.0-alpha.22

package/dist/bridge/client/tool-family-factories.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Browser-side factory for each forwarded tool family, bound to one
+ * sandbox. Imports only browser-safe subpaths (`pyric/rules/internal`, never
+ * `/node`); the Node side has its own map in `server/tool-family-factories.ts`.
+ *
+ * The keys are the family record filenames. `satisfies` against the keys
+ * derived from the generated aggregate makes a missing or surplus entry a
+ * compile error.
+ */
+import type { ToolHandler } from '@inbrowser/agent';
+import { type FirestoreDataToolDeps } from 'pyric/firestore';
+import type { LocalSandbox } from 'pyric/sandbox';
+import type { getInternalEnv } from 'pyric/sandbox/internal';
+/** Everything a forwarded family needs from one sandbox, built once per sandbox. */
+export interface SandboxBinding {
+    sandbox: LocalSandbox;
+    env: ReturnType<typeof getInternalEnv>;
+    resolveDb: FirestoreDataToolDeps['resolveDb'];
+}
+export declare const SANDBOX_HANDLER_FACTORIES: {
+    'firestore-simulator': ({ env }: SandboxBinding) => ToolHandler<unknown, unknown>[];
+    'firestore-data': ({ resolveDb }: SandboxBinding) => ToolHandler<unknown, unknown>[];
+    'firestore-inspect': ({ sandbox }: SandboxBinding) => ToolHandler<unknown, unknown>[];
+    'rtdb-inspection': ({ sandbox }: SandboxBinding) => ToolHandler<unknown, unknown>[];
+};
+//# sourceMappingURL=tool-family-factories.d.ts.map

package/dist/bridge/client/tool-family-factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-family-factories.d.ts","sourceRoot":"","sources":["../../../src/bridge/client/tool-family-factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAI7D,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;IACvC,SAAS,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;CAC/C;AAED,eAAO,MAAM,yBAAyB;;;;;CAK4C,CAAC"}

package/dist/bridge/client/tool-family-factories.js

@@ -0,0 +1,10 @@
+import { createFirestoreSimulatorTools } from 'pyric/rules/internal';
+import { createFirestoreDataTools, createFirestoreInspectTools, } from 'pyric/firestore';
+import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
+export const SANDBOX_HANDLER_FACTORIES = {
+    'firestore-simulator': ({ env }) => createFirestoreSimulatorTools({ resolveSandbox: () => env }),
+    'firestore-data': ({ resolveDb }) => createFirestoreDataTools({ resolveDb }),
+    'firestore-inspect': ({ sandbox }) => createFirestoreInspectTools({ resolveSandbox: () => sandbox }),
+    'rtdb-inspection': ({ sandbox }) => createRtdbInspectionTools({ resolveSandbox: () => sandbox }),
+};
+//# sourceMappingURL=tool-family-factories.js.map

package/dist/bridge/client/tool-family-factories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-family-factories.js","sourceRoot":"","sources":["../../../src/bridge/client/tool-family-factories.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAE5B,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAUrE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,qBAAqB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,6BAA6B,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAChG,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5E,mBAAmB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IACpG,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;CAChB,CAAC"}

package/dist/bridge/server/mcp-contract.d.ts

@@ -1,14 +1,15 @@
 import type { ToolHandler } from '@inbrowser/agent';
 import { type ToolMetadata } from './tool-metadata.js';
 /**
- * The exact tools a default local Pyric MCP server forwards to its sandbox.
- * A tool addition or removal is a public contract change and must update this
- * manifest deliberately.
+ * The exact tools a default local Pyric MCP server forwards to its sandbox,
+ * in `tools/list` order. Names are authored in `bridge/tool-family-records/`;
+ * a tool addition or removal is a public contract change and must update the
+ * family record deliberately.
  */
-export declare const DEFAULT_MCP_FORWARDED_TOOL_NAMES: readonly ["firestore_simulator_create", "firestore_simulator_execute", "firestore_simulator_read", "firestore_simulator_batch", "firestore_create_with_auto_id", "firestore_simulator_undo", "firestore_simulator_redo", "firestore_simulator_events", "firestore_simulator_transaction", "firestore_get_document", "firestore_list_documents", "firestore_create_document", "firestore_add_document", "firestore_update_document", "firestore_delete_document", "firestore_batch_write", "firestore_query_where", "sandbox_inspect", "rtdb_simulate_access", "rtdb_crawl_structure"];
+export declare const DEFAULT_MCP_FORWARDED_TOOL_NAMES: readonly string[];
 /** Local rules tools that run in the MCP process without a browser peer. */
-export declare const DEFAULT_MCP_IN_PROCESS_TOOL_NAMES: readonly ["firestore_simulate_rules", "firestore_rules_stdlib_list", "firestore_rules_stdlib_get", "firestore_lint_rules", "firestore_resolve_modules", "rules_stdlib_list", "rules_stdlib_get", "rules_resolve_modules", "pyric_can_i_use"];
-export declare const DEFAULT_MCP_TOOL_NAMES: readonly ["firestore_simulator_create", "firestore_simulator_execute", "firestore_simulator_read", "firestore_simulator_batch", "firestore_create_with_auto_id", "firestore_simulator_undo", "firestore_simulator_redo", "firestore_simulator_events", "firestore_simulator_transaction", "firestore_get_document", "firestore_list_documents", "firestore_create_document", "firestore_add_document", "firestore_update_document", "firestore_delete_document", "firestore_batch_write", "firestore_query_where", "sandbox_inspect", "rtdb_simulate_access", "rtdb_crawl_structure", "firestore_simulate_rules", "firestore_rules_stdlib_list", "firestore_rules_stdlib_get", "firestore_lint_rules", "firestore_resolve_modules", "rules_stdlib_list", "rules_stdlib_get", "rules_resolve_modules", "pyric_can_i_use"];
+export declare const DEFAULT_MCP_IN_PROCESS_TOOL_NAMES: readonly string[];
+export declare const DEFAULT_MCP_TOOL_NAMES: readonly string[];
 export interface DefaultMcpToolSurface {
     forwarded: ToolMetadata[];
     inProcess: ToolHandler[];

package/dist/bridge/server/mcp-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-contract.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/mcp-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAE5B;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,ujBAqBnC,CAAC;AAEX,4EAA4E;AAC5E,eAAO,MAAM,iCAAiC,8OAUpC,CAAC;AAEX,eAAO,MAAM,sBAAsB,0xBAGzB,CAAC;AAEX,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,SAAS,EAAE,WAAW,EAAE,CAAC;CAC1B;AAqBD;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,qBAAqB,CAchE"}
+{"version":3,"file":"mcp-contract.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/mcp-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAE5B;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAE3B,CAAC;AAEpC,4EAA4E;AAC5E,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAE5B,CAAC;AAEpC,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAGnD,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,SAAS,EAAE,WAAW,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,qBAAqB,CAchE"}

package/dist/bridge/server/mcp-contract.js

@@ -1,57 +1,18 @@
+import { assertExactToolNames, toolFamilies } from '../tool-families.js';
 import { getInProcessToolHandlers, getSandboxToolMetadata, } from './tool-metadata.js';
 /**
- * The exact tools a default local Pyric MCP server forwards to its sandbox.
- * A tool addition or removal is a public contract change and must update this
- * manifest deliberately.
+ * The exact tools a default local Pyric MCP server forwards to its sandbox,
+ * in `tools/list` order. Names are authored in `bridge/tool-family-records/`;
+ * a tool addition or removal is a public contract change and must update the
+ * family record deliberately.
  */
-export const DEFAULT_MCP_FORWARDED_TOOL_NAMES = [
-    'firestore_simulator_create',
-    'firestore_simulator_execute',
-    'firestore_simulator_read',
-    'firestore_simulator_batch',
-    'firestore_create_with_auto_id',
-    'firestore_simulator_undo',
-    'firestore_simulator_redo',
-    'firestore_simulator_events',
-    'firestore_simulator_transaction',
-    'firestore_get_document',
-    'firestore_list_documents',
-    'firestore_create_document',
-    'firestore_add_document',
-    'firestore_update_document',
-    'firestore_delete_document',
-    'firestore_batch_write',
-    'firestore_query_where',
-    'sandbox_inspect',
-    'rtdb_simulate_access',
-    'rtdb_crawl_structure',
-];
+export const DEFAULT_MCP_FORWARDED_TOOL_NAMES = toolFamilies('forwarded').flatMap((family) => family.tools);
 /** Local rules tools that run in the MCP process without a browser peer. */
-export const DEFAULT_MCP_IN_PROCESS_TOOL_NAMES = [
-    'firestore_simulate_rules',
-    'firestore_rules_stdlib_list',
-    'firestore_rules_stdlib_get',
-    'firestore_lint_rules',
-    'firestore_resolve_modules',
-    'rules_stdlib_list',
-    'rules_stdlib_get',
-    'rules_resolve_modules',
-    'pyric_can_i_use',
-];
+export const DEFAULT_MCP_IN_PROCESS_TOOL_NAMES = toolFamilies('in-process').flatMap((family) => family.tools);
 export const DEFAULT_MCP_TOOL_NAMES = [
     ...DEFAULT_MCP_FORWARDED_TOOL_NAMES,
     ...DEFAULT_MCP_IN_PROCESS_TOOL_NAMES,
 ];
-function assertExactNames(label, actual, expected) {
-    const actualSorted = [...actual].sort();
-    const expectedSorted = [...expected].sort();
-    if (actualSorted.length !== expectedSorted.length ||
-        actualSorted.some((name, index) => name !== expectedSorted[index])) {
-        throw new Error(`${label} drifted from the default MCP contract\n` +
-            `expected: ${expected.join(', ')}\n` +
-            `actual:   ${actual.join(', ')}`);
-    }
-}
 /**
  * Assemble the default MCP surface and fail closed if a factory changed
  * without a corresponding public-contract decision.
@@ -59,8 +20,8 @@ function assertExactNames(label, actual, expected) {
 export function getDefaultMcpToolSurface() {
     const forwarded = getSandboxToolMetadata();
     const inProcess = getInProcessToolHandlers();
-    assertExactNames('forwarded sandbox tools', forwarded.map((tool) => tool.name), DEFAULT_MCP_FORWARDED_TOOL_NAMES);
-    assertExactNames('in-process tools', inProcess.map((tool) => tool.name), DEFAULT_MCP_IN_PROCESS_TOOL_NAMES);
+    assertExactToolNames('forwarded sandbox tools', forwarded.map((tool) => tool.name), DEFAULT_MCP_FORWARDED_TOOL_NAMES);
+    assertExactToolNames('in-process tools', inProcess.map((tool) => tool.name), DEFAULT_MCP_IN_PROCESS_TOOL_NAMES);
     return { forwarded, inProcess };
 }
 //# sourceMappingURL=mcp-contract.js.map

package/dist/bridge/server/mcp-contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-contract.js","sourceRoot":"","sources":["../../../src/bridge/server/mcp-contract.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,4BAA4B;IAC5B,6BAA6B;IAC7B,0BAA0B;IAC1B,2BAA2B;IAC3B,+BAA+B;IAC/B,0BAA0B;IAC1B,0BAA0B;IAC1B,4BAA4B;IAC5B,iCAAiC;IACjC,wBAAwB;IACxB,0BAA0B;IAC1B,2BAA2B;IAC3B,wBAAwB;IACxB,2BAA2B;IAC3B,2BAA2B;IAC3B,uBAAuB;IACvB,uBAAuB;IACvB,iBAAiB;IACjB,sBAAsB;IACtB,sBAAsB;CACd,CAAC;AAEX,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,0BAA0B;IAC1B,6BAA6B;IAC7B,4BAA4B;IAC5B,sBAAsB;IACtB,2BAA2B;IAC3B,mBAAmB;IACnB,kBAAkB;IAClB,uBAAuB;IACvB,iBAAiB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,GAAG,gCAAgC;IACnC,GAAG,iCAAiC;CAC5B,CAAC;AAOX,SAAS,gBAAgB,CACvB,KAAa,EACb,MAAyB,EACzB,QAA2B;IAE3B,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IACE,YAAY,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC7C,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0CAA0C;YAChD,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACpC,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;IAC7C,gBAAgB,CACd,yBAAyB,EACzB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAClC,gCAAgC,CACjC,CAAC;IACF,gBAAgB,CACd,kBAAkB,EAClB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAClC,iCAAiC,CAClC,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"mcp-contract.js","sourceRoot":"","sources":["../../../src/bridge/server/mcp-contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAsB,YAAY,CAC7E,WAAW,CACZ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEpC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iCAAiC,GAAsB,YAAY,CAC9E,YAAY,CACb,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,GAAG,gCAAgC;IACnC,GAAG,iCAAiC;CACrC,CAAC;AAOF;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;IAC7C,oBAAoB,CAClB,yBAAyB,EACzB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAClC,gCAAgC,CACjC,CAAC;IACF,oBAAoB,CAClB,kBAAkB,EAClB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAClC,iCAAiC,CAClC,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC"}

package/dist/bridge/server/peer.d.ts

@@ -35,5 +35,15 @@ export interface ConsumerSession {
  * id spaces never mix.
  */
 export declare function createConsumerSession(bridge: Bridge, send: (msg: BridgeMessage) => void): ConsumerSession;
-export declare function collectBody(req: IncomingMessage): Promise<unknown>;
+/** Thrown by {@link collectBody} when a body exceeds the caller's limit. The
+ *  code lets a route answer 413 instead of treating it as malformed JSON. */
+export declare const BODY_TOO_LARGE_CODE = "PYRIC_BODY_TOO_LARGE";
+/**
+ * Read a request body and parse it as JSON.
+ *
+ * `limitBytes` caps how much is buffered. A route that is reachable by
+ * anything other than a trusted local caller must pass one: without it a
+ * single request can grow the string until the process dies.
+ */
+export declare function collectBody(req: IncomingMessage, limitBytes?: number): Promise<unknown>;
 //# sourceMappingURL=peer.d.ts.map

package/dist/bridge/server/peer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AAGxB,wBAAgB,UAAU,CACxB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACvC,EAAE,EAAE,SAAS,GACZ,IAAI,CAwFN;AAID;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;IACxC,6DAA6D;IAC7D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GACjC,eAAe,CAoEjB;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBxE"}
+{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AAGxB,wBAAgB,UAAU,CACxB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACvC,EAAE,EAAE,SAAS,GACZ,IAAI,CAwFN;AAID;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;IACxC,6DAA6D;IAC7D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GACjC,eAAe,CAoEjB;AAED;6EAC6E;AAC7E,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CA8BlB"}

package/dist/bridge/server/peer.js

@@ -163,14 +163,35 @@ export function createConsumerSession(bridge, send) {
         },
     };
 }
-export async function collectBody(req) {
+/** Thrown by {@link collectBody} when a body exceeds the caller's limit. The
+ *  code lets a route answer 413 instead of treating it as malformed JSON. */
+export const BODY_TOO_LARGE_CODE = 'PYRIC_BODY_TOO_LARGE';
+/**
+ * Read a request body and parse it as JSON.
+ *
+ * `limitBytes` caps how much is buffered. A route that is reachable by
+ * anything other than a trusted local caller must pass one: without it a
+ * single request can grow the string until the process dies.
+ */
+export async function collectBody(req, limitBytes) {
     if (req.method === 'GET' || req.method === 'DELETE')
         return undefined;
     return await new Promise((resolve, reject) => {
         let raw = '';
+        let overLimit = false;
         req.setEncoding('utf8');
         req.on('data', (chunk) => {
+            // Past the limit the rest of the upload is read and discarded rather
+            // than the socket being destroyed. Destroying resets the connection, so
+            // the caller's 413 would never reach the client.
+            if (overLimit)
+                return;
             raw += chunk;
+            if (limitBytes === undefined || Buffer.byteLength(raw) <= limitBytes)
+                return;
+            overLimit = true;
+            raw = '';
+            reject(Object.assign(new Error('request body too large'), { code: BODY_TOO_LARGE_CODE }));
         });
         req.on('end', () => {
             if (!raw) {

package/dist/bridge/server/peer.js.map

@@ -1 +1 @@
-{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,GAE3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,UAAU,UAAU,CACxB,MAAuC,EACvC,EAAa;IAEb,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C;;gEAE4D;IAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAE5C,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO;QAClC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE;gBAC9D,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;YACpD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,GAAG,MAAM,CAAC,mBAAmB,CACrC,CAAC,GAAkB,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YACD,mEAAmE;YACnE,iEAAiE;YACjE,4DAA4D;YAC5D,0DAA0D;YAC1D,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EACzC,GAAG,CAAC,SAAS,EACb,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YACvD,gEAAgE;YAChE,4DAA4D;YAC5D,6DAA6D;YAC7D,mEAAmE;YACnE,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,qCAAqC;YACrC,GAAG,EAAE;gBACH,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;gBACjE,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CACF,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,CAAC;oBACX,aAAa,EAAE,MAAM,CAAC,OAAO;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,IAAI,UAAU;YAAE,UAAU,EAAE,CAAC;QAC7B,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,QAAQ;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC3B,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,IAAkC;IAElC,gDAAgD;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE3C,OAAO;QACL,aAAa,CAAC,GAAkB;YAC9B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,2DAA2D;oBAC3D,+DAA+D;oBAC/D,sDAAsD;oBACtD,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,CAAC;wBACX,aAAa,EAAE,MAAM,CAAC,OAAO;wBAC7B,aAAa,EAAE,MAAM,CAAC,kBAAkB,EAAE;wBAC1C,YAAY,EAAE,UAAU,EAAE;qBAC3B,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EACpE,CAAC,GAA2E,EAAE,EAAE,CAC9E,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE;4BACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;4BAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,wDAAwD;4BACxD,oDAAoD;4BACpD,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAChF,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAClE;qBACF,CAAC,CACL,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,OAAO,CAAC,aAAa;oBAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5D,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CACvD,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,WAAW;wBAAE,OAAO;oBACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACvB,WAAW,EAAE,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,OAAO;gBACT,CAAC;gBACD;oBACE,OAAO,CAAC,uCAAuC;YACnD,CAAC;QACH,CAAC;QACD,OAAO;YACL,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,WAAW,EAAE,CAAC;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAoB;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,GAAG,IAAI,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,GAE3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,UAAU,UAAU,CACxB,MAAuC,EACvC,EAAa;IAEb,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C;;gEAE4D;IAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAE5C,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO;QAClC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE;gBAC9D,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;YACpD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,GAAG,MAAM,CAAC,mBAAmB,CACrC,CAAC,GAAkB,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YACD,mEAAmE;YACnE,iEAAiE;YACjE,4DAA4D;YAC5D,0DAA0D;YAC1D,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EACzC,GAAG,CAAC,SAAS,EACb,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YACvD,gEAAgE;YAChE,4DAA4D;YAC5D,6DAA6D;YAC7D,mEAAmE;YACnE,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,qCAAqC;YACrC,GAAG,EAAE;gBACH,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;gBACjE,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CACF,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,CAAC;oBACX,aAAa,EAAE,MAAM,CAAC,OAAO;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,IAAI,UAAU;YAAE,UAAU,EAAE,CAAC;QAC7B,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,QAAQ;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC3B,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,IAAkC;IAElC,gDAAgD;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE3C,OAAO;QACL,aAAa,CAAC,GAAkB;YAC9B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,2DAA2D;oBAC3D,+DAA+D;oBAC/D,sDAAsD;oBACtD,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,CAAC;wBACX,aAAa,EAAE,MAAM,CAAC,OAAO;wBAC7B,aAAa,EAAE,MAAM,CAAC,kBAAkB,EAAE;wBAC1C,YAAY,EAAE,UAAU,EAAE;qBAC3B,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EACpE,CAAC,GAA2E,EAAE,EAAE,CAC9E,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE;4BACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;4BAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,wDAAwD;4BACxD,oDAAoD;4BACpD,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAChF,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAClE;qBACF,CAAC,CACL,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,OAAO,CAAC,aAAa;oBAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5D,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CACvD,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,WAAW;wBAAE,OAAO;oBACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACvB,WAAW,EAAE,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,OAAO;gBACT,CAAC;gBACD;oBACE,OAAO,CAAC,uCAAuC;YACnD,CAAC;QACH,CAAC;QACD,OAAO;YACL,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,WAAW,EAAE,CAAC;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED;6EAC6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAoB,EACpB,UAAmB;IAEnB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,qEAAqE;YACrE,wEAAwE;YACxE,iDAAiD;YACjD,IAAI,SAAS;gBAAE,OAAO;YACtB,GAAG,IAAI,KAAK,CAAC;YACb,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU;gBAAE,OAAO;YAC7E,SAAS,GAAG,IAAI,CAAC;YACjB,GAAG,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/bridge/server/tool-family-factories.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Node-side factory for each tool family. This is the only bridge module
+ * that imports `pyric/rules/internal/node` or the conformance tools; the
+ * browser side has its own map in `client/tool-family-factories.ts`.
+ *
+ * The keys are the family record filenames. `satisfies` against the keys
+ * derived from the generated aggregate makes a missing or surplus entry a
+ * compile error.
+ */
+import type { ToolHandler } from '@inbrowser/agent';
+/** A resolver that must never run: forwarded families are executed by the browser peer, not here. */
+export type StubResolver = () => never;
+/** Forwarded families, called with a stub so only metadata is read. */
+export declare const FORWARDED_METADATA_FACTORIES: {
+    'firestore-simulator': (stub: StubResolver) => ToolHandler<unknown, unknown>[];
+    'firestore-data': (stub: StubResolver) => ToolHandler<unknown, unknown>[];
+    'firestore-inspect': (stub: StubResolver) => ToolHandler<unknown, unknown>[];
+    'rtdb-inspection': (stub: StubResolver) => ToolHandler<unknown, unknown>[];
+};
+/**
+ * In-process families, returned as live handlers the MCP server registers
+ * directly. `scope` reaches the rules factory, which appends a hosted
+ * verification tool only when one is supplied; the default surface supplies
+ * none.
+ */
+export declare const IN_PROCESS_HANDLER_FACTORIES: {
+    'firestore-rules': (scope: unknown) => ToolHandler<unknown, unknown>[];
+    conformance: () => ToolHandler<unknown, unknown>[];
+};
+//# sourceMappingURL=tool-family-factories.d.ts.map

package/dist/bridge/server/tool-family-factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-family-factories.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/tool-family-factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAUpD,qGAAqG;AACrG,MAAM,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC;AAEvC,uEAAuE;AACvE,eAAO,MAAM,4BAA4B;;;;;CAKoC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;CAGiC,CAAC"}

package/dist/bridge/server/tool-family-factories.js

@@ -0,0 +1,22 @@
+import { createFirestoreSimulatorTools, createFirestoreRulesTools, } from 'pyric/rules/internal/node';
+import { createFirestoreDataTools, createFirestoreInspectTools } from 'pyric/firestore';
+import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
+import { createConformanceTools } from '../../conformance/tools.js';
+/** Forwarded families, called with a stub so only metadata is read. */
+export const FORWARDED_METADATA_FACTORIES = {
+    'firestore-simulator': (stub) => createFirestoreSimulatorTools({ resolveSandbox: stub }),
+    'firestore-data': (stub) => createFirestoreDataTools({ resolveDb: stub }),
+    'firestore-inspect': (stub) => createFirestoreInspectTools({ resolveSandbox: stub }),
+    'rtdb-inspection': (stub) => createRtdbInspectionTools({ resolveSandbox: stub }),
+};
+/**
+ * In-process families, returned as live handlers the MCP server registers
+ * directly. `scope` reaches the rules factory, which appends a hosted
+ * verification tool only when one is supplied; the default surface supplies
+ * none.
+ */
+export const IN_PROCESS_HANDLER_FACTORIES = {
+    'firestore-rules': (scope) => createFirestoreRulesTools({ scope }),
+    conformance: () => createConformanceTools(),
+};
+//# sourceMappingURL=tool-family-factories.js.map

package/dist/bridge/server/tool-family-factories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-family-factories.js","sourceRoot":"","sources":["../../../src/bridge/server/tool-family-factories.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAMpE,uEAAuE;AACvE,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,6BAA6B,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;IACjG,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC;IAClF,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;IAC7F,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;CACd,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAW,CAAC;IAC3E,WAAW,EAAE,GAAG,EAAE,CAAC,sBAAsB,EAAE;CAC6B,CAAC"}

package/dist/bridge/server/tool-metadata.d.ts

@@ -1,16 +1,18 @@
 /**
- * Extract tool metadata (name + description + parameters) from the
- * existing `pyric/rules` factories without running any
- * tool logic. Used by the bridge to register MCP tools whose actual
- * dispatch happens against the connected browser peer.
+ * Node-side composition of the tool families the bridge serves over MCP.
  *
- * Why: `createFirestoreSimulatorTools` returns `ToolHandler[]` with
- * `execute` bound to a `LocalEnvironment`. The bridge process doesn't
- * have a `LocalEnvironment` — it forwards. But it does need the
- * metadata to populate the MCP server's tool list. This module calls
- * the factory with a stub resolver and reads only the metadata; the
- * stub never gets invoked because the bridge replaces `execute`
- * before dispatch.
+ * Forwarded families are executed by the browser sandbox peer, so this
+ * process never holds a `LocalEnvironment`. It still needs each tool's
+ * metadata (name, description, parameters) to populate the MCP tool list, so
+ * it calls the family factories with a stub resolver and reads only the
+ * metadata; the bridge replaces `execute` with forward-to-peer dispatch
+ * before any call reaches a handler.
+ *
+ * In-process families run here without a browser peer and are returned as
+ * live handlers.
+ *
+ * Family order comes from the records under `../tool-family-records/`; the
+ * factories come from `./tool-family-factories.ts`.
  */
 import type { ToolHandler } from '@inbrowser/agent';
 export interface ToolMetadata {
@@ -19,16 +21,13 @@ export interface ToolMetadata {
     parameters: Record<string, unknown>;
 }
 /**
- * Tool metadata for the sandbox bridge. Includes the
- * data-plane / sandbox-management tools that the browser dispatches
- * via `LocalEnvironment`. Rules tooling (lint, validate, simulate,
- * test) is NOT included here — those execute in Node and are
- * registered separately, since they don't need the browser sandbox.
+ * Tool metadata for every forwarded family, in family order. The stub
+ * resolver never runs: the bridge replaces `execute()` with its own
+ * forward-to-peer dispatch.
  */
 export declare function getSandboxToolMetadata(): ToolMetadata[];
 /**
- * Tooling factories that execute in-process on the bridge
- * (no browser needed). Returned as live ToolHandlers — the bridge
+ * Live handlers for every in-process family, in family order. The bridge
  * registers each handler's `execute` directly.
  *
  * `scope` is forwarded so the hosted Rules Test API verification tool can

package/dist/bridge/server/tool-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-metadata.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AASpD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAUD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,YAAY,EAAE,CAkCvD;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,CASvE"}
+{"version":3,"file":"tool-metadata.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAQpD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAUD;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,YAAY,EAAE,CASvD;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,CAIvE"}

package/dist/bridge/server/tool-metadata.js

@@ -1,21 +1,21 @@
 /**
- * Extract tool metadata (name + description + parameters) from the
- * existing `pyric/rules` factories without running any
- * tool logic. Used by the bridge to register MCP tools whose actual
- * dispatch happens against the connected browser peer.
+ * Node-side composition of the tool families the bridge serves over MCP.
  *
- * Why: `createFirestoreSimulatorTools` returns `ToolHandler[]` with
- * `execute` bound to a `LocalEnvironment`. The bridge process doesn't
- * have a `LocalEnvironment` — it forwards. But it does need the
- * metadata to populate the MCP server's tool list. This module calls
- * the factory with a stub resolver and reads only the metadata; the
- * stub never gets invoked because the bridge replaces `execute`
- * before dispatch.
+ * Forwarded families are executed by the browser sandbox peer, so this
+ * process never holds a `LocalEnvironment`. It still needs each tool's
+ * metadata (name, description, parameters) to populate the MCP tool list, so
+ * it calls the family factories with a stub resolver and reads only the
+ * metadata; the bridge replaces `execute` with forward-to-peer dispatch
+ * before any call reaches a handler.
+ *
+ * In-process families run here without a browser peer and are returned as
+ * live handlers.
+ *
+ * Family order comes from the records under `../tool-family-records/`; the
+ * factories come from `./tool-family-factories.ts`.
  */
-import { createFirestoreSimulatorTools, createFirestoreRulesTools, } from 'pyric/rules/internal/node';
-import { createFirestoreDataTools, createFirestoreInspectTools } from 'pyric/firestore';
-import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
-import { createConformanceTools } from '../../conformance/tools.js';
+import { toolFamilies } from '../tool-families.js';
+import { FORWARDED_METADATA_FACTORIES, IN_PROCESS_HANDLER_FACTORIES, } from './tool-family-factories.js';
 function toMetadata(handler) {
     return {
         name: handler.name,
@@ -24,61 +24,26 @@ function toMetadata(handler) {
     };
 }
 /**
- * Tool metadata for the sandbox bridge. Includes the
- * data-plane / sandbox-management tools that the browser dispatches
- * via `LocalEnvironment`. Rules tooling (lint, validate, simulate,
- * test) is NOT included here — those execute in Node and are
- * registered separately, since they don't need the browser sandbox.
+ * Tool metadata for every forwarded family, in family order. The stub
+ * resolver never runs: the bridge replaces `execute()` with its own
+ * forward-to-peer dispatch.
  */
 export function getSandboxToolMetadata() {
-    // The resolver stub never runs: the bridge replaces execute() with
-    // its own forward-to-peer dispatch.
-    const stubResolver = async () => {
+    const stub = () => {
         throw new Error('BUG: sandbox-tool factory executor invoked on the bridge side — should have been replaced');
     };
-    const handlers = [
-        // Simulator / write / batch / undo / redo / events / transaction —
-        // 8 tools that mutate or read the in-browser sandbox state.
-        ...createFirestoreSimulatorTools({
-            resolveSandbox: stubResolver,
-        }),
-        // Data plane — addDoc / setDoc / getDoc / updateDoc / deleteDoc /
-        // collection / query / where — the modular Firestore CRUD surface
-        // routed through the browser sandbox so agents can drive a real app
-        // session rather than only the simulator.
-        ...createFirestoreDataTools({
-            resolveDb: stubResolver,
-        }),
-        // `sandbox_inspect` — single-call diagnostic that answers
-        // "what state is the sandbox in?" Born out of CLAUDE_DEBUG_SESSION.md
-        // (a real agent needing 51 tool calls + 72k tokens to figure out
-        // that rules weren't loaded). Routes to the browser sandbox like
-        // the other forwarded tools.
-        ...createFirestoreInspectTools({
-            resolveSandbox: stubResolver,
-        }),
-        ...createRtdbInspectionTools({
-            resolveSandbox: stubResolver,
-        }),
-    ];
-    return handlers.map(toMetadata);
+    return toolFamilies('forwarded')
+        .flatMap((family) => FORWARDED_METADATA_FACTORIES[family.key](stub))
+        .map(toMetadata);
 }
 /**
- * Tooling factories that execute in-process on the bridge
- * (no browser needed). Returned as live ToolHandlers — the bridge
+ * Live handlers for every in-process family, in family order. The bridge
  * registers each handler's `execute` directly.
  *
  * `scope` is forwarded so the hosted Rules Test API verification tool can
  * authenticate without changing the bridge's sandbox-only execution model.
  */
 export function getInProcessToolHandlers(scope) {
-    // Factory accepts { scope } per packages/pyric/src/rules/tools.ts.
-    // The bridge does not need to own the structurally compatible type.
-    // Includes the rules tool surface plus the Node-only conformance query.
-    // No browser is needed.
-    return [
-        ...createFirestoreRulesTools({ scope }),
-        ...createConformanceTools(),
-    ];
+    return toolFamilies('in-process').flatMap((family) => IN_PROCESS_HANDLER_FACTORIES[family.key](scope));
 }
 //# sourceMappingURL=tool-metadata.js.map

package/dist/bridge/server/tool-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-metadata.js","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAQpE,SAAS,UAAU,CAAC,OAAoB;IACtC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAqC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB;IACpC,mEAAmE;IACnE,oCAAoC;IACpC,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,QAAQ,GAAkB;QAC9B,mEAAmE;QACnE,4DAA4D;QAC5D,GAAG,6BAA6B,CAAC;YAC/B,cAAc,EAAE,YAAqB;SACtC,CAAC;QACF,kEAAkE;QAClE,kEAAkE;QAClE,oEAAoE;QACpE,0CAA0C;QAC1C,GAAG,wBAAwB,CAAC;YAC1B,SAAS,EAAE,YAAqB;SACjC,CAAC;QACF,0DAA0D;QAC1D,sEAAsE;QACtE,iEAAiE;QACjE,iEAAiE;QACjE,6BAA6B;QAC7B,GAAG,2BAA2B,CAAC;YAC7B,cAAc,EAAE,YAAqB;SACtC,CAAC;QACF,GAAG,yBAAyB,CAAC;YAC3B,cAAc,EAAE,YAAqB;SACtC,CAAC;KACH,CAAC;IACF,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAe;IACtD,mEAAmE;IACnE,oEAAoE;IACpE,wEAAwE;IACxE,wBAAwB;IACxB,OAAO;QACL,GAAG,yBAAyB,CAAC,EAAE,KAAK,EAAW,CAAC;QAChD,GAAG,sBAAsB,EAAE;KAC5B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"tool-metadata.js","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAE7B,MAAM,4BAA4B,CAAC;AAQpC,SAAS,UAAU,CAAC,OAAoB;IACtC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAqC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,IAAI,GAAiB,GAAG,EAAE;QAC9B,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,YAAY,CAAC,WAAW,CAAC;SAC7B,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;SACnE,GAAG,CAAC,UAAU,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAe;IACtD,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACnD,4BAA4B,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAChD,CAAC;AACJ,CAAC"}

package/dist/bridge/tool-families.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Tool family contract shared by both sides of the bridge.
+ *
+ * A family is authored as one record under `tool-family-records/`: its
+ * transport, its position in the default `tools/list` order, and the exact
+ * tool names its factory yields. `scripts/generate-tool-family-registry.ts`
+ * aggregates the records into `tool-families.generated.ts`. This module reads
+ * only that aggregate, so the browser bundle and the MCP process share one
+ * manifest without either importing the other's factories.
+ *
+ * Factories live in `server/tool-family-factories.ts` (Node) and
+ * `client/tool-family-factories.ts` (browser). Each map is typed against the
+ * family keys derived here, so a record without a factory, or a factory
+ * without a record, fails to compile.
+ */
+import { TOOL_FAMILIES } from './tool-families.generated.js';
+export type ToolTransport = 'forwarded' | 'in-process';
+/** Authored in one record file per family. The key is the filename without `.ts`; the generator adds it. */
+export interface ToolFamilyRecord {
+    /** `forwarded`: executed by the browser sandbox peer. `in-process`: executed in the MCP process. */
+    readonly transport: ToolTransport;
+    /** Stable position in the default `tools/list` order. Unique across all records; authored with gaps of 10. */
+    readonly order: number;
+    /** Exact names the family factory yields for the default surface, in factory order. */
+    readonly tools: readonly string[];
+}
+export interface ToolFamily extends ToolFamilyRecord {
+    readonly key: string;
+}
+type RegisteredFamily = (typeof TOOL_FAMILIES)[number];
+export type ForwardedFamilyKey = Extract<RegisteredFamily, {
+    transport: 'forwarded';
+}>['key'];
+export type InProcessFamilyKey = Extract<RegisteredFamily, {
+    transport: 'in-process';
+}>['key'];
+/** Families of one transport, sorted by `order`. Validates once at load: duplicate key, order, or tool name throws. */
+export declare function toolFamilies<T extends ToolTransport>(transport: T): readonly Extract<RegisteredFamily, {
+    transport: T;
+}>[];
+/**
+ * Fail closed when a factory yields a different name set from the records.
+ * Both sides call this with the same message so drift reads the same
+ * wherever it surfaces.
+ */
+export declare function assertExactToolNames(label: string, actual: readonly string[], expected: readonly string[]): void;
+export {};
+//# sourceMappingURL=tool-families.d.ts.map

package/dist/bridge/tool-families.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-families.d.ts","sourceRoot":"","sources":["../../src/bridge/tool-families.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,YAAY,CAAC;AAEvD,4GAA4G;AAC5G,MAAM,WAAW,gBAAgB;IAC/B,oGAAoG;IACpG,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,8GAA8G;IAC9G,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,UAAW,SAAQ,gBAAgB;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,KAAK,gBAAgB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,EAAE;IAAE,SAAS,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC,KAAK,CAAC,CAAC;AAC9F,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,EAAE;IAAE,SAAS,EAAE,YAAY,CAAA;CAAE,CAAC,CAAC,KAAK,CAAC,CAAC;AAmB/F,uHAAuH;AACvH,wBAAgB,YAAY,CAAC,CAAC,SAAS,aAAa,EAClD,SAAS,EAAE,CAAC,GACX,SAAS,OAAO,CAAC,gBAAgB,EAAE;IAAE,SAAS,EAAE,CAAC,CAAA;CAAE,CAAC,EAAE,CAKxD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,IAAI,CAaN"}

package/dist/bridge/tool-families.generated.d.ts

@@ -0,0 +1,32 @@
+export declare const TOOL_FAMILIES: readonly [{
+    readonly transport: "in-process";
+    readonly order: 60;
+    readonly tools: readonly ["pyric_can_i_use"];
+    readonly key: "conformance";
+}, {
+    readonly transport: "forwarded";
+    readonly order: 20;
+    readonly tools: readonly ["firestore_get_document", "firestore_list_documents", "firestore_create_document", "firestore_add_document", "firestore_update_document", "firestore_delete_document", "firestore_batch_write", "firestore_query_where"];
+    readonly key: "firestore-data";
+}, {
+    readonly transport: "forwarded";
+    readonly order: 30;
+    readonly tools: readonly ["sandbox_inspect"];
+    readonly key: "firestore-inspect";
+}, {
+    readonly transport: "in-process";
+    readonly order: 50;
+    readonly tools: readonly ["firestore_simulate_rules", "firestore_rules_stdlib_list", "firestore_rules_stdlib_get", "firestore_lint_rules", "firestore_resolve_modules", "rules_stdlib_list", "rules_stdlib_get", "rules_resolve_modules"];
+    readonly key: "firestore-rules";
+}, {
+    readonly transport: "forwarded";
+    readonly order: 10;
+    readonly tools: readonly ["firestore_simulator_create", "firestore_simulator_execute", "firestore_simulator_read", "firestore_simulator_batch", "firestore_create_with_auto_id", "firestore_simulator_undo", "firestore_simulator_redo", "firestore_simulator_events", "firestore_simulator_transaction"];
+    readonly key: "firestore-simulator";
+}, {
+    readonly transport: "forwarded";
+    readonly order: 40;
+    readonly tools: readonly ["rtdb_simulate_access", "rtdb_crawl_structure"];
+    readonly key: "rtdb-inspection";
+}];
+//# sourceMappingURL=tool-families.generated.d.ts.map

package/dist/bridge/tool-families.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-families.generated.d.ts","sourceRoot":"","sources":["../../src/bridge/tool-families.generated.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOgB,CAAC"}

package/dist/bridge/tool-families.generated.js

@@ -0,0 +1,15 @@
+import conformance from './tool-family-records/conformance.js';
+import firestoreData from './tool-family-records/firestore-data.js';
+import firestoreInspect from './tool-family-records/firestore-inspect.js';
+import firestoreRules from './tool-family-records/firestore-rules.js';
+import firestoreSimulator from './tool-family-records/firestore-simulator.js';
+import rtdbInspection from './tool-family-records/rtdb-inspection.js';
+export const TOOL_FAMILIES = [
+    { key: "conformance", ...conformance },
+    { key: "firestore-data", ...firestoreData },
+    { key: "firestore-inspect", ...firestoreInspect },
+    { key: "firestore-rules", ...firestoreRules },
+    { key: "firestore-simulator", ...firestoreSimulator },
+    { key: "rtdb-inspection", ...rtdbInspection },
+];
+//# sourceMappingURL=tool-families.generated.js.map