@pyric/cli 0.1.0-alpha.20 → 0.1.0-alpha.22

package/dist/bridge/tool-families.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-families.generated.js","sourceRoot":"","sources":["../../src/bridge/tool-families.generated.ts"],"names":[],"mappings":"AAEA,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAC/D,OAAO,aAAa,MAAM,yCAAyC,CAAC;AACpE,OAAO,gBAAgB,MAAM,4CAA4C,CAAC;AAC1E,OAAO,cAAc,MAAM,0CAA0C,CAAC;AACtE,OAAO,kBAAkB,MAAM,8CAA8C,CAAC;AAC9E,OAAO,cAAc,MAAM,0CAA0C,CAAC;AAEtE,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,WAAW,EAAE;IACtC,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,aAAa,EAAE;IAC3C,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,gBAAgB,EAAE;IACjD,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,cAAc,EAAE;IAC7C,EAAE,GAAG,EAAE,qBAAqB,EAAE,GAAG,kBAAkB,EAAE;IACrD,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,cAAc,EAAE;CACL,CAAC"}

package/dist/bridge/tool-families.js

@@ -0,0 +1,51 @@
+/**
+ * Tool family contract shared by both sides of the bridge.
+ *
+ * A family is authored as one record under `tool-family-records/`: its
+ * transport, its position in the default `tools/list` order, and the exact
+ * tool names its factory yields. `scripts/generate-tool-family-registry.ts`
+ * aggregates the records into `tool-families.generated.ts`. This module reads
+ * only that aggregate, so the browser bundle and the MCP process share one
+ * manifest without either importing the other's factories.
+ *
+ * Factories live in `server/tool-family-factories.ts` (Node) and
+ * `client/tool-family-factories.ts` (browser). Each map is typed against the
+ * family keys derived here, so a record without a factory, or a factory
+ * without a record, fails to compile.
+ */
+import { TOOL_FAMILIES } from './tool-families.generated.js';
+function assertUnique(label, values) {
+    const seen = new Set();
+    for (const value of values) {
+        if (seen.has(value))
+            throw new Error(`duplicate tool family ${label} '${value}'`);
+        seen.add(value);
+    }
+}
+function validateFamilies(families) {
+    assertUnique('key', families.map((family) => family.key));
+    assertUnique('order', families.map((family) => family.order));
+    assertUnique('tool name', families.flatMap((family) => family.tools));
+    return [...families].sort((a, b) => a.order - b.order);
+}
+const FAMILIES_BY_ORDER = validateFamilies(TOOL_FAMILIES);
+/** Families of one transport, sorted by `order`. Validates once at load: duplicate key, order, or tool name throws. */
+export function toolFamilies(transport) {
+    return FAMILIES_BY_ORDER.filter((family) => family.transport === transport);
+}
+/**
+ * Fail closed when a factory yields a different name set from the records.
+ * Both sides call this with the same message so drift reads the same
+ * wherever it surfaces.
+ */
+export function assertExactToolNames(label, actual, expected) {
+    const actualSorted = [...actual].sort();
+    const expectedSorted = [...expected].sort();
+    if (actualSorted.length !== expectedSorted.length ||
+        actualSorted.some((name, index) => name !== expectedSorted[index])) {
+        throw new Error(`${label} drifted from the default MCP contract\n` +
+            `expected: ${expected.join(', ')}\n` +
+            `actual:   ${actual.join(', ')}`);
+    }
+}
+//# sourceMappingURL=tool-families.js.map

package/dist/bridge/tool-families.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-families.js","sourceRoot":"","sources":["../../src/bridge/tool-families.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAsB7D,SAAS,YAAY,CAAC,KAAa,EAAE,MAAoC;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,KAAK,KAAK,GAAG,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAqC;IAC7D,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAE1D,uHAAuH;AACvH,MAAM,UAAU,YAAY,CAC1B,SAAY;IAEZ,OAAO,iBAAiB,CAAC,MAAM,CAC7B,CAAC,MAAM,EAAyD,EAAE,CAChE,MAAM,CAAC,SAAS,KAAK,SAAS,CACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,MAAyB,EACzB,QAA2B;IAE3B,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IACE,YAAY,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC7C,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0CAA0C;YAChD,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACpC,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/bridge/tool-family-records/conformance.d.ts

@@ -0,0 +1,7 @@
+declare const _default: {
+    readonly transport: "in-process";
+    readonly order: 60;
+    readonly tools: readonly ["pyric_can_i_use"];
+};
+export default _default;
+//# sourceMappingURL=conformance.d.ts.map

package/dist/bridge/tool-family-records/conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/conformance.ts"],"names":[],"mappings":";;;;;AACA,wBAIsC"}

package/dist/bridge/tool-family-records/conformance.js

@@ -0,0 +1,6 @@
+export default {
+    transport: 'in-process',
+    order: 60,
+    tools: ['pyric_can_i_use'],
+};
+//# sourceMappingURL=conformance.js.map

package/dist/bridge/tool-family-records/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/conformance.ts"],"names":[],"mappings":"AACA,eAAe;IACb,SAAS,EAAE,YAAY;IACvB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,CAAC,iBAAiB,CAAC;CACS,CAAC"}

package/dist/bridge/tool-family-records/firestore-data.d.ts

@@ -0,0 +1,7 @@
+declare const _default: {
+    readonly transport: "forwarded";
+    readonly order: 20;
+    readonly tools: readonly ["firestore_get_document", "firestore_list_documents", "firestore_create_document", "firestore_add_document", "firestore_update_document", "firestore_delete_document", "firestore_batch_write", "firestore_query_where"];
+};
+export default _default;
+//# sourceMappingURL=firestore-data.d.ts.map

package/dist/bridge/tool-family-records/firestore-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-data.d.ts","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/firestore-data.ts"],"names":[],"mappings":";;;;;AACA,wBAasC"}

package/dist/bridge/tool-family-records/firestore-data.js

@@ -0,0 +1,15 @@
+export default {
+    transport: 'forwarded',
+    order: 20,
+    tools: [
+        'firestore_get_document',
+        'firestore_list_documents',
+        'firestore_create_document',
+        'firestore_add_document',
+        'firestore_update_document',
+        'firestore_delete_document',
+        'firestore_batch_write',
+        'firestore_query_where',
+    ],
+};
+//# sourceMappingURL=firestore-data.js.map

package/dist/bridge/tool-family-records/firestore-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-data.js","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/firestore-data.ts"],"names":[],"mappings":"AACA,eAAe;IACb,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE;QACL,wBAAwB;QACxB,0BAA0B;QAC1B,2BAA2B;QAC3B,wBAAwB;QACxB,2BAA2B;QAC3B,2BAA2B;QAC3B,uBAAuB;QACvB,uBAAuB;KACxB;CACkC,CAAC"}

package/dist/bridge/tool-family-records/firestore-inspect.d.ts

@@ -0,0 +1,7 @@
+declare const _default: {
+    readonly transport: "forwarded";
+    readonly order: 30;
+    readonly tools: readonly ["sandbox_inspect"];
+};
+export default _default;
+//# sourceMappingURL=firestore-inspect.d.ts.map

package/dist/bridge/tool-family-records/firestore-inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-inspect.d.ts","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/firestore-inspect.ts"],"names":[],"mappings":";;;;;AACA,wBAIsC"}

package/dist/bridge/tool-family-records/firestore-inspect.js

@@ -0,0 +1,6 @@
+export default {
+    transport: 'forwarded',
+    order: 30,
+    tools: ['sandbox_inspect'],
+};
+//# sourceMappingURL=firestore-inspect.js.map

package/dist/bridge/tool-family-records/firestore-inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-inspect.js","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/firestore-inspect.ts"],"names":[],"mappings":"AACA,eAAe;IACb,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,CAAC,iBAAiB,CAAC;CACS,CAAC"}

package/dist/bridge/tool-family-records/firestore-rules.d.ts

@@ -0,0 +1,7 @@
+declare const _default: {
+    readonly transport: "in-process";
+    readonly order: 50;
+    readonly tools: readonly ["firestore_simulate_rules", "firestore_rules_stdlib_list", "firestore_rules_stdlib_get", "firestore_lint_rules", "firestore_resolve_modules", "rules_stdlib_list", "rules_stdlib_get", "rules_resolve_modules"];
+};
+export default _default;
+//# sourceMappingURL=firestore-rules.d.ts.map

package/dist/bridge/tool-family-records/firestore-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-rules.d.ts","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/firestore-rules.ts"],"names":[],"mappings":";;;;;AACA,wBAasC"}

package/dist/bridge/tool-family-records/firestore-rules.js

@@ -0,0 +1,15 @@
+export default {
+    transport: 'in-process',
+    order: 50,
+    tools: [
+        'firestore_simulate_rules',
+        'firestore_rules_stdlib_list',
+        'firestore_rules_stdlib_get',
+        'firestore_lint_rules',
+        'firestore_resolve_modules',
+        'rules_stdlib_list',
+        'rules_stdlib_get',
+        'rules_resolve_modules',
+    ],
+};
+//# sourceMappingURL=firestore-rules.js.map

package/dist/bridge/tool-family-records/firestore-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-rules.js","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/firestore-rules.ts"],"names":[],"mappings":"AACA,eAAe;IACb,SAAS,EAAE,YAAY;IACvB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE;QACL,0BAA0B;QAC1B,6BAA6B;QAC7B,4BAA4B;QAC5B,sBAAsB;QACtB,2BAA2B;QAC3B,mBAAmB;QACnB,kBAAkB;QAClB,uBAAuB;KACxB;CACkC,CAAC"}

package/dist/bridge/tool-family-records/firestore-simulator.d.ts

@@ -0,0 +1,7 @@
+declare const _default: {
+    readonly transport: "forwarded";
+    readonly order: 10;
+    readonly tools: readonly ["firestore_simulator_create", "firestore_simulator_execute", "firestore_simulator_read", "firestore_simulator_batch", "firestore_create_with_auto_id", "firestore_simulator_undo", "firestore_simulator_redo", "firestore_simulator_events", "firestore_simulator_transaction"];
+};
+export default _default;
+//# sourceMappingURL=firestore-simulator.d.ts.map

package/dist/bridge/tool-family-records/firestore-simulator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-simulator.d.ts","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/firestore-simulator.ts"],"names":[],"mappings":";;;;;AACA,wBAcsC"}

package/dist/bridge/tool-family-records/firestore-simulator.js

@@ -0,0 +1,16 @@
+export default {
+    transport: 'forwarded',
+    order: 10,
+    tools: [
+        'firestore_simulator_create',
+        'firestore_simulator_execute',
+        'firestore_simulator_read',
+        'firestore_simulator_batch',
+        'firestore_create_with_auto_id',
+        'firestore_simulator_undo',
+        'firestore_simulator_redo',
+        'firestore_simulator_events',
+        'firestore_simulator_transaction',
+    ],
+};
+//# sourceMappingURL=firestore-simulator.js.map

package/dist/bridge/tool-family-records/firestore-simulator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-simulator.js","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/firestore-simulator.ts"],"names":[],"mappings":"AACA,eAAe;IACb,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE;QACL,4BAA4B;QAC5B,6BAA6B;QAC7B,0BAA0B;QAC1B,2BAA2B;QAC3B,+BAA+B;QAC/B,0BAA0B;QAC1B,0BAA0B;QAC1B,4BAA4B;QAC5B,iCAAiC;KAClC;CACkC,CAAC"}

package/dist/bridge/tool-family-records/rtdb-inspection.d.ts

@@ -0,0 +1,7 @@
+declare const _default: {
+    readonly transport: "forwarded";
+    readonly order: 40;
+    readonly tools: readonly ["rtdb_simulate_access", "rtdb_crawl_structure"];
+};
+export default _default;
+//# sourceMappingURL=rtdb-inspection.d.ts.map

package/dist/bridge/tool-family-records/rtdb-inspection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rtdb-inspection.d.ts","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/rtdb-inspection.ts"],"names":[],"mappings":";;;;;AACA,wBAIsC"}

package/dist/bridge/tool-family-records/rtdb-inspection.js

@@ -0,0 +1,6 @@
+export default {
+    transport: 'forwarded',
+    order: 40,
+    tools: ['rtdb_simulate_access', 'rtdb_crawl_structure'],
+};
+//# sourceMappingURL=rtdb-inspection.js.map

package/dist/bridge/tool-family-records/rtdb-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rtdb-inspection.js","sourceRoot":"","sources":["../../../src/bridge/tool-family-records/rtdb-inspection.ts"],"names":[],"mappings":"AACA,eAAe;IACb,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;CACpB,CAAC"}

package/dist/bundler/externals.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Externalization presets and helpers for Node backend bundlers.
+ *
+ * Prevents backend bundlers (Rolldown, esbuild, tsup, Rollup, Vite, Webpack)
+ * from inlining Firebase and Firebase Admin SDKs into bundled server outputs,
+ * preserving runtime interception by `@pyric/cli/register` under `pyric sandbox`.
+ */
+/**
+ * RegExp patterns matching Firebase packages for bundlers that accept RegExp
+ * in their external configuration (Rolldown, Rollup, Vite, Webpack).
+ */
+export declare const pyricRollupExternals: readonly RegExp[];
+/**
+ * Wildcard string patterns matching Firebase packages for bundlers that require
+ * string arrays with glob wildcards (esbuild, tsup).
+ */
+export declare const pyricEsbuildExternals: readonly string[];
+/**
+ * Universal predicate returning true if a module specifier belongs to Firebase
+ * or Firebase Admin SDK surfaces intercepted by Pyric.
+ *
+ * Compatible with bundlers that accept a function in their external setting
+ * (Rolldown, Rollup, Vite, Webpack).
+ */
+export declare function isPyricExternal(id: string): boolean;
+/**
+ * Convenience presets mapping bundler names to their supported external pattern format.
+ */
+export declare const pyricExternals: Readonly<{
+    rolldown: readonly RegExp[];
+    rollup: readonly RegExp[];
+    vite: readonly RegExp[];
+    webpack: readonly RegExp[];
+    esbuild: readonly string[];
+    tsup: readonly string[];
+}>;
+//# sourceMappingURL=externals.d.ts.map

package/dist/bundler/externals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"externals.d.ts","sourceRoot":"","sources":["../../src/bundler/externals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAIhD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAMjD,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAKnD;AAED;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;EAOzB,CAAC"}

package/dist/bundler/externals.js

@@ -0,0 +1,52 @@
+/**
+ * Externalization presets and helpers for Node backend bundlers.
+ *
+ * Prevents backend bundlers (Rolldown, esbuild, tsup, Rollup, Vite, Webpack)
+ * from inlining Firebase and Firebase Admin SDKs into bundled server outputs,
+ * preserving runtime interception by `@pyric/cli/register` under `pyric sandbox`.
+ */
+/**
+ * RegExp patterns matching Firebase packages for bundlers that accept RegExp
+ * in their external configuration (Rolldown, Rollup, Vite, Webpack).
+ */
+export const pyricRollupExternals = Object.freeze([
+    /^firebase-admin(\/.*)?$/,
+    /^firebase(\/.*)?$/,
+    /^@firebase(\/.*)?$/,
+]);
+/**
+ * Wildcard string patterns matching Firebase packages for bundlers that require
+ * string arrays with glob wildcards (esbuild, tsup).
+ */
+export const pyricEsbuildExternals = Object.freeze([
+    'firebase-admin',
+    'firebase-admin/*',
+    'firebase',
+    'firebase/*',
+    '@firebase/*',
+]);
+/**
+ * Universal predicate returning true if a module specifier belongs to Firebase
+ * or Firebase Admin SDK surfaces intercepted by Pyric.
+ *
+ * Compatible with bundlers that accept a function in their external setting
+ * (Rolldown, Rollup, Vite, Webpack).
+ */
+export function isPyricExternal(id) {
+    if (typeof id !== 'string' || id.length === 0) {
+        return false;
+    }
+    return pyricRollupExternals.some((regex) => regex.test(id));
+}
+/**
+ * Convenience presets mapping bundler names to their supported external pattern format.
+ */
+export const pyricExternals = Object.freeze({
+    rolldown: pyricRollupExternals,
+    rollup: pyricRollupExternals,
+    vite: pyricRollupExternals,
+    webpack: pyricRollupExternals,
+    esbuild: pyricEsbuildExternals,
+    tsup: pyricEsbuildExternals,
+});
+//# sourceMappingURL=externals.js.map

package/dist/bundler/externals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externals.js","sourceRoot":"","sources":["../../src/bundler/externals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACnE,yBAAyB;IACzB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACpE,gBAAgB;IAChB,kBAAkB;IAClB,UAAU;IACV,YAAY;IACZ,aAAa;CACd,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,oBAAoB;IAC9B,MAAM,EAAE,oBAAoB;IAC5B,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE,oBAAoB;IAC7B,OAAO,EAAE,qBAAqB;IAC9B,IAAI,EAAE,qBAAqB;CAC5B,CAAC,CAAC"}

package/dist/bundler/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `@pyric/cli/bundler` — externalization presets and helpers for Node backend
+ * bundlers (Rolldown, esbuild, tsup, Rollup, Vite) to preserve `@pyric/cli/register`
+ * runtime sandbox interception.
+ *
+ *   // rolldown.config.ts / rollup.config.js
+ *   import { pyricExternals } from '@pyric/cli/bundler';
+ *   export default { external: pyricExternals.rolldown };
+ *
+ *   // vite.config.ts (SSR / Node backend builds)
+ *   export default { build: { rollupOptions: { external: pyricExternals.vite } } };
+ *
+ *   // tsup.config.ts / esbuild.config.mjs
+ *   export default { external: pyricExternals.esbuild };
+ */
+export { pyricRollupExternals, pyricEsbuildExternals, isPyricExternal, pyricExternals, } from './externals.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/bundler/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bundler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,cAAc,GACf,MAAM,gBAAgB,CAAC"}

package/dist/bundler/index.js

@@ -0,0 +1,17 @@
+/**
+ * `@pyric/cli/bundler` — externalization presets and helpers for Node backend
+ * bundlers (Rolldown, esbuild, tsup, Rollup, Vite) to preserve `@pyric/cli/register`
+ * runtime sandbox interception.
+ *
+ *   // rolldown.config.ts / rollup.config.js
+ *   import { pyricExternals } from '@pyric/cli/bundler';
+ *   export default { external: pyricExternals.rolldown };
+ *
+ *   // vite.config.ts (SSR / Node backend builds)
+ *   export default { build: { rollupOptions: { external: pyricExternals.vite } } };
+ *
+ *   // tsup.config.ts / esbuild.config.mjs
+ *   export default { external: pyricExternals.esbuild };
+ */
+export { pyricRollupExternals, pyricEsbuildExternals, isPyricExternal, pyricExternals, } from './externals.js';
+//# sourceMappingURL=index.js.map

package/dist/bundler/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bundler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,cAAc,GACf,MAAM,gBAAgB,CAAC"}

package/dist/cli/inlined-sdk-scanner.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Scan `dir` for inlined SDK fingerprints and return the offending paths,
+ * relative to `dir`. Bounded: depth 4, 200 script files, first hit per file.
+ */
+export declare function scanForInlinedFirebase(dir: string): string[];
+//# sourceMappingURL=inlined-sdk-scanner.d.ts.map

package/dist/cli/inlined-sdk-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inlined-sdk-scanner.d.ts","sourceRoot":"","sources":["../../src/cli/inlined-sdk-scanner.ts"],"names":[],"mappings":"AA8BA;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CA0C5D"}

package/dist/cli/inlined-sdk-scanner.js

@@ -0,0 +1,82 @@
+/**
+ * Detect a served frontend build that inlined the real Firebase SDK.
+ *
+ * The served import map remaps only bare `firebase/*` specifiers, so a plain
+ * `vite build` that compiled the SDK into an app chunk cannot be sandboxed:
+ * its calls reach real Google endpoints while the injected banner claims
+ * otherwise. `cli/serve.ts` refuses such a dist rather than serving it.
+ *
+ * Only the SDK fingerprint hosts are matched, never the full endpoint catalog.
+ * This check throws, and a dist can legitimately carry a bare callable URL, a
+ * public asset URL, or a `databaseURL` literal without any Firebase SDK in it.
+ *
+ * Backend bundles are deliberately out of scope. `withPyric` externalizes
+ * firebase and firebase-admin, the backend-bundler docs tell users to mark them
+ * external, and the net guard reports real egress at runtime with attribution,
+ * which a grep over build output cannot do.
+ */
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { SDK_FINGERPRINT_HOSTS } from '../google-endpoints.js';
+/** Depth limit for the walk. */
+const MAX_DEPTH = 4;
+/** Total script files read. */
+const MAX_FILES = 200;
+/** Script extensions worth reading in served frontend output. */
+const SCRIPT_FILE = /\.(js|mjs)$/;
+/**
+ * Scan `dir` for inlined SDK fingerprints and return the offending paths,
+ * relative to `dir`. Bounded: depth 4, 200 script files, first hit per file.
+ */
+export function scanForInlinedFirebase(dir) {
+    const hits = [];
+    let scanned = 0;
+    const walk = (current, rel, depth) => {
+        if (depth > MAX_DEPTH || scanned >= MAX_FILES)
+            return;
+        let names;
+        try {
+            names = readdirSync(current);
+        }
+        catch {
+            return;
+        }
+        for (const name of names) {
+            if (scanned >= MAX_FILES)
+                return;
+            const path = join(current, name);
+            const relPath = rel ? `${rel}/${name}` : name;
+            let stat;
+            try {
+                stat = statSync(path);
+            }
+            catch {
+                continue;
+            }
+            if (stat.isDirectory()) {
+                // The pyric namespace itself never lands in hosting.public, but a
+                // node_modules inside a served dir would be a scan-cost trap.
+                // Dot-directories (.next, .git, .pyric) are internal caches.
+                if (name === 'node_modules' || name.startsWith('.'))
+                    continue;
+                walk(path, relPath, depth + 1);
+                continue;
+            }
+            if (!SCRIPT_FILE.test(name))
+                continue;
+            scanned++;
+            let text;
+            try {
+                text = readFileSync(path, 'utf8');
+            }
+            catch {
+                continue; // unreadable asset
+            }
+            if (SDK_FINGERPRINT_HOSTS.some((host) => text.includes(host)))
+                hits.push(relPath);
+        }
+    };
+    walk(dir, '', 0);
+    return hits;
+}
+//# sourceMappingURL=inlined-sdk-scanner.js.map

package/dist/cli/inlined-sdk-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inlined-sdk-scanner.js","sourceRoot":"","sources":["../../src/cli/inlined-sdk-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,gCAAgC;AAChC,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,+BAA+B;AAC/B,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,iEAAiE;AACjE,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,GAAW,EAAE,KAAa,EAAQ,EAAE;QACjE,IAAI,KAAK,GAAG,SAAS,IAAI,OAAO,IAAI,SAAS;YAAE,OAAO;QACtD,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,IAAI,SAAS;gBAAE,OAAO;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9C,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,kEAAkE;gBAClE,8DAA8D;gBAC9D,6DAA6D;gBAC7D,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC9D,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,OAAO,EAAE,CAAC;YACV,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,mBAAmB;YAC/B,CAAC;YACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/sandbox-interlock.d.ts

@@ -0,0 +1,97 @@
+import { type GuardMode } from '../register/net-guard.js';
+/**
+ * What `pyric sandbox` can say about the interception it is about to hand the
+ * child, entirely from the env it just assembled: no waiting, no round trip.
+ */
+export interface InterlockStatus {
+    /** Net-guard mode the child will run under (`PYRIC_GUARD`, default warn). */
+    readonly guard: GuardMode;
+    /** Whether `NODE_OPTIONS` actually carries the register `--import`. */
+    readonly registerImported: boolean;
+    /** Where the child's handshake beacon will land, or null when the
+     *  activator carries no bridge URL. */
+    readonly beacon: string | null;
+}
+/**
+ * Read the interlock off the child env. Everything here is synchronous by
+ * construction: it is a statement about the launch, printed before anything at
+ * runtime has had a chance to go wrong.
+ */
+export declare function describeInterlock(childEnv: NodeJS.ProcessEnv, registerUrl: string): InterlockStatus;
+/**
+ * The startup status line, alongside the other `✔ <service>` checks.
+ *
+ * The healthy line is deliberately short: one fact per field and nothing the
+ * reader has to skim past. The degraded line is long because it reports a
+ * broken launch, which is worth every word.
+ */
+export declare function formatInterlockLine(status: InterlockStatus): string;
+export interface LaunchCheckOptions {
+    /** The environment the child is about to receive. */
+    readonly childEnv: NodeJS.ProcessEnv;
+    /** Absolute `file:` URL of the register module, to look for in NODE_OPTIONS. */
+    readonly registerUrl: string;
+    /** The child's argv, for the unsupported-runtime check. */
+    readonly argv: readonly string[];
+    readonly write: (line: string) => void;
+}
+/**
+ * Every statement the launcher makes about the child, printed in one block
+ * before the spawn, and the interlock status it derived on the way.
+ *
+ * Two checks: the interlock status line, from the env alone, and the
+ * unsupported-runtime warning for the other way interception can be absent, a
+ * child runtime that never evaluates Node loader hooks at all.
+ */
+export declare function reportLaunchChecks(opts: LaunchCheckOptions): InterlockStatus;
+export interface BeaconWatchdogOptions {
+    /** The child command, for attribution in the warning. */
+    readonly label: string;
+    /** The endpoint the child would post to. Null means nothing to watch. */
+    readonly beacon: string | null;
+    /** Whether a beacon from this child has been recorded. */
+    readonly sawBeacon: () => boolean;
+    /** Whether the child is still running. */
+    readonly isAlive: () => boolean;
+    readonly warn: (line: string) => void;
+    readonly graceMs?: number;
+}
+export interface BeaconWatchdog {
+    /** Cancel a pending check. Idempotent. */
+    stop(): void;
+}
+/** The warning itself: one paragraph naming what the silence means and what
+ *  to check. Kept separate so its exact wording is testable. */
+export declare function formatMissingBeaconWarning(opts: {
+    label: string;
+    graceMs: number;
+    beacon: string;
+}): string;
+/**
+ * The warn-only interlock watchdog.
+ *
+ * It never kills the child and never blocks a request. The reason is the
+ * signal's own honesty: beacon delivery is best-effort (see
+ * `register/beacon.ts`), and a plausible silent child is not the same thing as
+ * a broken one. A short-lived script that exits before its POST lands, a child
+ * that reaches the sandbox only through a grandchild, a dev server slow to
+ * boot: each would be killed by a fail-closed version of this check, and each
+ * is fine.
+ *
+ * So the heuristic is the simple, attributable one: the child is still alive
+ * `graceMs` after launch and no beacon has arrived. Both halves matter. An
+ * exited child was never expected to say anything, and a child whose beacon
+ * landed has already proved the point. One warning per child, guaranteed by
+ * the one-shot timer; the timer is unref'd so a watchdog can never be the
+ * reason a process stays up.
+ *
+ * `sawBeacon` is a count delta rather than a pid match, deliberately. The
+ * process that loads register is often a grandchild (`npm run dev` starts
+ * node, `next dev` starts its worker), so the spawned child's own pid is
+ * frequently not the pid in the beacon, and matching on it would warn about
+ * perfectly healthy launches. The delta's known imprecision runs the other
+ * way: a sibling runtime's beacon that lands inside the grace window can mask
+ * a real miss. Erring toward silence is the right bias for a warn-only check.
+ */
+export declare function startBeaconWatchdog(opts: BeaconWatchdogOptions): BeaconWatchdog;
+//# sourceMappingURL=sandbox-interlock.d.ts.map

package/dist/cli/sandbox-interlock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-interlock.d.ts","sourceRoot":"","sources":["../../src/cli/sandbox-interlock.ts"],"names":[],"mappings":"AAWA,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAG1E;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC;2CACuC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,CAAC,UAAU,EAC3B,WAAW,EAAE,MAAM,GAClB,eAAe,CAMjB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAQnE;AAED,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC;IACrC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,GAAG,eAAe,CAM5E;AAKD,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC;IAClC,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,IAAI,IAAI,IAAI,CAAC;CACd;AAED;gEACgE;AAChE,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAUT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,qBAAqB,GAAG,cAAc,CAc/E"}