@pyric/cli 0.1.0-alpha.30.2 → 0.1.0-alpha.31

package/src/bridge/surface/method-types.ts

@@ -10,7 +10,7 @@
  * the evaluation variants serve, and the `pyric <tool> <method>` command line.
  */
 import type { z } from 'zod';
-import type { OperationResult, SurfaceContext } from './types.js';
+import type { OperationResult, SandboxSurfaceContext, SurfaceContext } from './types.js';
 
 /** Arguments as they arrive from a client. */
 export type Args = Record<string, unknown>;
@@ -95,10 +95,19 @@ export type CanonicalOperation =
     };
 
 /**
- * One authored method record. The tool and the method are also the record's
- * path, and the loader refuses a record whose fields disagree with it.
+ * Where a record's handler runs.
+ *
+ * - `sandbox`: wherever the sandbox lives, including a host that keeps it in a
+ *   browser. The handler is given only a `SandboxSurfaceContext`, and its
+ *   module graph imports nothing Node-only and dispatches no in-process tool
+ *   family (`test/bridge/surface/methods/sandbox-registry.test.ts`).
+ * - `bridge`: in the bridge process only, because it reads the project
+ *   directory, imports a Node-only module, or dispatches an in-process family.
  */
-export interface MethodRecord {
+export type RunsIn = 'sandbox' | 'bridge';
+
+/** The fields every record carries, whichever side its handler runs on. */
+interface MethodRecordFields {
   /** The service tool this method belongs to, which is its directory. */
   tool: string;
   /** The method name, which is its filename. */
@@ -119,15 +128,40 @@ export interface MethodRecord {
   example: Args;
   /** Rules a schema cannot state. Returns a rejection or null. */
   validate?(args: Args, ctx: MethodValidationContext): InvalidArguments | null;
+}
+
+/** A record whose handler runs wherever the sandbox lives. */
+export interface SandboxMethodRecord extends MethodRecordFields {
+  runsIn: 'sandbox';
+  /**
+   * The one implementation. Declared as a property, not a method, so its
+   * parameter is checked strictly: a handler that annotates `ctx` as the wider
+   * `SurfaceContext` to reach `projectDir` does not compile.
+   */
+  handler: (args: Args, ctx: SandboxSurfaceContext) => Promise<OperationResult>;
+}
+
+/** A record whose handler runs only in the bridge process. */
+export interface BridgeMethodRecord extends MethodRecordFields {
+  runsIn: 'bridge';
   /** The one implementation. */
-  handler(args: Args, ctx: SurfaceContext): Promise<OperationResult>;
+  handler: (args: Args, ctx: SurfaceContext) => Promise<OperationResult>;
 }
 
+/**
+ * One authored method record. The tool and the method are also the record's
+ * path, and the loader refuses a record whose fields disagree with it.
+ */
+export type MethodRecord = SandboxMethodRecord | BridgeMethodRecord;
+
 /** A loaded record: the authored fields plus the key read from the path. */
-export interface Method extends MethodRecord {
+export type Method = MethodRecord & {
   /** `<tool>.<method>`, the key every derived surface joins on. */
   readonly key: string;
-}
+};
+
+/** A loaded record that runs wherever the sandbox lives. */
+export type SandboxMethod = SandboxMethodRecord & { readonly key: string };
 
 /** One service tool, authored as `tools/<tool>.ts`. */
 export interface ToolRecord {
@@ -143,6 +177,26 @@ export interface Tool extends ToolRecord {
   readonly methods: readonly Method[];
 }
 
+/**
+ * Stamp one record with the key its path carries. Throws when the record's own
+ * `tool` or `method` disagrees with where it lives, because a record that says
+ * one thing and is filed under another would be reachable under two names and
+ * auditable under neither.
+ */
+export function stampRecord<R extends MethodRecord>(
+  owner: string,
+  name: string,
+  record: R,
+): R & { readonly key: string } {
+  if (record.tool !== owner) {
+    throw new Error(`method record methods/${owner}/${name}.ts declares tool '${record.tool}'`);
+  }
+  if (record.method !== name) {
+    throw new Error(`method record methods/${owner}/${name}.ts declares method '${record.method}'`);
+  }
+  return { ...record, key: `${owner}.${name}` };
+}
+
 /** Every canonical id one record can reach. */
 export function operationIds(record: MethodRecord): readonly string[] {
   if (typeof record.operation === 'string') return [record.operation];

package/src/bridge/surface/methods/ai_logic/clearScripts.ts

@@ -9,13 +9,14 @@
 import { z } from 'zod';
 import { AIError, AIErrorCode } from 'pyric/ai';
 import { clearScripts as clearScriptsEngine } from 'pyric/ai/scripting';
-import { operationFailure } from '../../context.js';
+import { operationFailure } from '../../sandbox-context.js';
 import { aiFor } from '../../service-handles.js';
 import type { MethodRecord } from '../../method-types.js';
 
 export default {
   tool: 'ai_logic',
   method: 'clearScripts',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'clearScripts()',

package/src/bridge/surface/methods/ai_logic/script.ts

@@ -18,7 +18,7 @@ import { z } from 'zod';
 import { AIError, AIErrorCode } from 'pyric/ai';
 import { script as scriptEngine } from 'pyric/ai/scripting';
 import { scriptMatchArgument, scriptResponseArgument } from '../../arguments/ai_logic.js';
-import { operationFailure } from '../../context.js';
+import { operationFailure } from '../../sandbox-context.js';
 import { aiFor } from '../../service-handles.js';
 import { matcherFor, respondFor, type ScriptMatch, type ScriptResponse } from '../../ai-logic-matchers.js';
 import type {
@@ -65,6 +65,7 @@ function refusePayloadMismatch(args: Args, ctx: MethodValidationContext): Invali
 export default {
   tool: 'ai_logic',
   method: 'script',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'script(match{substring?, model?}, response{type: text|json|error, payload})',

package/src/bridge/surface/methods/ai_logic/scripts.ts

@@ -8,7 +8,7 @@
 import { z } from 'zod';
 import { AIError, AIErrorCode } from 'pyric/ai';
 import { scripts as scriptsEngine } from 'pyric/ai/scripting';
-import { operationFailure } from '../../context.js';
+import { operationFailure } from '../../sandbox-context.js';
 import { aiFor } from '../../service-handles.js';
 import { describeMatch, describeRespond } from '../../ai-logic-matchers.js';
 import type { MethodRecord } from '../../method-types.js';
@@ -16,6 +16,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'ai_logic',
   method: 'scripts',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'read',
   signature: 'scripts()',

package/src/bridge/surface/methods/ai_logic/status.ts

@@ -17,6 +17,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'ai_logic',
   method: 'status',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'read',
   signature: 'status()',

package/src/bridge/surface/methods/assurance/attach.ts

@@ -16,6 +16,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'attach',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'attach(campaignId?, maxRuns?)',

package/src/bridge/surface/methods/assurance/canIUse.ts

@@ -30,6 +30,7 @@ function summaryFor(result: ReturnType<typeof canIUse>, feature: string): string
 export default {
   tool: 'assurance',
   method: 'canIUse',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'read',
   signature: 'canIUse(feature)',

package/src/bridge/surface/methods/assurance/define.ts

@@ -14,6 +14,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'define',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature:

package/src/bridge/surface/methods/assurance/export.ts

@@ -21,6 +21,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'export',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'export(campaignId, path?)',

package/src/bridge/surface/methods/assurance/inspect.ts

@@ -13,6 +13,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'inspect',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'read',
   signature: 'inspect(campaignId, probeId)',

package/src/bridge/surface/methods/assurance/map.ts

@@ -20,6 +20,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'map',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature:

package/src/bridge/surface/methods/assurance/minimize.ts

@@ -14,6 +14,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'minimize',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'minimize(campaignId, probeId)',

package/src/bridge/surface/methods/assurance/propose.ts

@@ -14,6 +14,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'propose',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature:

package/src/bridge/surface/methods/assurance/replaySession.ts

@@ -71,6 +71,7 @@ function stateDivergences(service: string, found: readonly VerifyDivergence[]):
 export default {
   tool: 'assurance',
   method: 'replaySession',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'read',
   signature: 'replaySession(sessionPath?, candidateRules?, service?: firestore|database)',

package/src/bridge/surface/methods/assurance/run.ts

@@ -15,6 +15,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'run',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'run(campaignId, probeIds?)',

package/src/bridge/surface/methods/assurance/start.ts

@@ -15,6 +15,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'start',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'start(target, campaignId?, maxRuns?)',

package/src/bridge/surface/methods/assurance/testRulesHosted.ts

@@ -23,6 +23,7 @@ import type { OperationResult } from '../../types.js';
 export default {
   tool: 'assurance',
   method: 'testRulesHosted',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'production',
   signature: 'testRulesHosted(service: firestore, rules, cases, confirm)',

package/src/bridge/surface/methods/assurance/verify.ts

@@ -20,6 +20,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'assurance',
   method: 'verify',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'verify(campaignId, rules, includeCandidates?, verificationId?)',

package/src/bridge/surface/methods/assurance/verifyCases.ts

@@ -25,6 +25,7 @@ import type { OperationResult } from '../../types.js';
 export default {
   tool: 'assurance',
   method: 'verifyCases',
+  runsIn: 'bridge',
   sdkOrigin: 'pyric',
   effect: 'read',
   signature: 'verifyCases(fixture?, candidateRules?, service?: firestore)',

package/src/bridge/surface/methods/auth/actAsAdmin.ts

@@ -6,6 +6,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'actAsAdmin',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'actAsAdmin()',

package/src/bridge/surface/methods/auth/actAsAnonymous.ts

@@ -6,6 +6,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'actAsAnonymous',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'actAsAnonymous()',

package/src/bridge/surface/methods/auth/createCustomToken.ts

@@ -14,6 +14,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'createCustomToken',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-admin',
   effect: 'read',
   signature: 'createCustomToken(uid, developerClaims?)',

package/src/bridge/surface/methods/auth/createUser.ts

@@ -14,7 +14,7 @@ import {
   RENAMES,
   tenantId,
 } from '../../arguments/auth.js';
-import { callSandboxTool } from '../../context.js';
+import { callSandboxTool } from '../../sandbox-context.js';
 import type { Args, MethodRecord } from '../../method-types.js';
 
 interface TenantSeedInput {
@@ -70,6 +70,7 @@ function tenantSeed(args: Args, tenant: string): TenantSeedInput {
 export default {
   tool: 'auth',
   method: 'createUser',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-admin',
   effect: 'write',
   signature: 'createUser(uid?, email?, password?, displayName?, customClaims?, tenantId?)',

package/src/bridge/surface/methods/auth/deleteUser.ts

@@ -1,12 +1,13 @@
 /** Remove one user from the sandbox auth pool. */
 import { z } from 'zod';
 import { RENAMES, uid } from '../../arguments/auth.js';
-import { callSandboxTool } from '../../context.js';
+import { callSandboxTool } from '../../sandbox-context.js';
 import type { MethodRecord } from '../../method-types.js';
 
 export default {
   tool: 'auth',
   method: 'deleteUser',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-admin',
   effect: 'write',
   signature: 'deleteUser(uid)',

package/src/bridge/surface/methods/auth/getUser.ts

@@ -1,12 +1,13 @@
 /** Read one user record from the sandbox auth pool. */
 import { z } from 'zod';
 import { RENAMES, uid } from '../../arguments/auth.js';
-import { callSandboxTool } from '../../context.js';
+import { callSandboxTool } from '../../sandbox-context.js';
 import type { MethodRecord } from '../../method-types.js';
 
 export default {
   tool: 'auth',
   method: 'getUser',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-admin',
   effect: 'read',
   signature: 'getUser(uid)',

package/src/bridge/surface/methods/auth/getUserByEmail.ts

@@ -1,12 +1,13 @@
 /** Read one user record by its email address. */
 import { z } from 'zod';
 import { RENAMES } from '../../arguments/auth.js';
-import { callSandboxTool } from '../../context.js';
+import { callSandboxTool } from '../../sandbox-context.js';
 import type { MethodRecord } from '../../method-types.js';
 
 export default {
   tool: 'auth',
   method: 'getUserByEmail',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-admin',
   effect: 'read',
   signature: 'getUserByEmail(email)',

package/src/bridge/surface/methods/auth/impersonate.ts

@@ -14,6 +14,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'impersonate',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'impersonate(uid, tenantId?, customClaims?)',

package/src/bridge/surface/methods/auth/importUsers.ts

@@ -6,8 +6,8 @@
  * seeding function that carries a tenant onto a stored record.
  */
 import { z } from 'zod';
-import { checkUserFields, userSeed } from '../../arguments/sandbox.js';
-import { operationFailure } from '../../context.js';
+import { checkUserFields, userSeed } from '../../arguments/seed.js';
+import { operationFailure } from '../../sandbox-context.js';
 import { applyUsers, type SeedUserEntry } from '../../seed-apply.js';
 import { RENAMES } from '../../arguments/auth.js';
 import type { MethodRecord } from '../../method-types.js';
@@ -15,6 +15,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'importUsers',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-admin',
   effect: 'write',
   signature: 'importUsers(users[])',

package/src/bridge/surface/methods/auth/listUsers.ts

@@ -1,12 +1,13 @@
 /** List the users in the sandbox auth pool. */
 import { z } from 'zod';
 import { RENAMES } from '../../arguments/auth.js';
-import { callSandboxTool } from '../../context.js';
+import { callSandboxTool } from '../../sandbox-context.js';
 import type { Args, MethodRecord } from '../../method-types.js';
 
 export default {
   tool: 'auth',
   method: 'listUsers',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-admin',
   effect: 'read',
   signature: 'listUsers(maxResults?)',

package/src/bridge/surface/methods/auth/sessions.ts

@@ -6,6 +6,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'sessions',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'read',
   signature: 'sessions()',

package/src/bridge/surface/methods/auth/setCustomUserClaims.ts

@@ -1,12 +1,13 @@
 /** Replace the complete custom claims map on one user. */
 import { z } from 'zod';
 import { RENAMES, uid } from '../../arguments/auth.js';
-import { callSandboxTool } from '../../context.js';
+import { callSandboxTool } from '../../sandbox-context.js';
 import type { MethodRecord } from '../../method-types.js';
 
 export default {
   tool: 'auth',
   method: 'setCustomUserClaims',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-admin',
   effect: 'write',
   signature: 'setCustomUserClaims(uid, customClaims)',

package/src/bridge/surface/methods/auth/signInAnonymously.ts

@@ -12,6 +12,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'signInAnonymously',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'signInAnonymously()',

package/src/bridge/surface/methods/auth/signInWithCredential.ts

@@ -41,6 +41,7 @@ function tokensOf(credential: Credential): { idToken?: string; accessToken?: str
 export default {
   tool: 'auth',
   method: 'signInWithCredential',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature:

package/src/bridge/surface/methods/auth/signInWithCustomToken.ts

@@ -19,6 +19,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'signInWithCustomToken',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'signInWithCustomToken(token)',

package/src/bridge/surface/methods/auth/signInWithEmailAndPassword.ts

@@ -14,6 +14,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'signInWithEmailAndPassword',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'signInWithEmailAndPassword(email, password)',

package/src/bridge/surface/methods/auth/signOut.ts

@@ -13,6 +13,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'signOut',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'signOut()',

package/src/bridge/surface/methods/auth/takeAuthMail.ts

@@ -14,6 +14,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'takeAuthMail',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'takeAuthMail(email?)',

package/src/bridge/surface/methods/auth/updateUser.ts

@@ -1,12 +1,13 @@
 /** Change one user record in the sandbox auth pool. */
 import { z } from 'zod';
 import { checkCredentials, RENAMES, uid } from '../../arguments/auth.js';
-import { callSandboxTool } from '../../context.js';
+import { callSandboxTool } from '../../sandbox-context.js';
 import type { Args, MethodRecord } from '../../method-types.js';
 
 export default {
   tool: 'auth',
   method: 'updateUser',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-admin',
   effect: 'write',
   signature: 'updateUser(uid, email?, password?, displayName?, disabled?, emailVerified?)',

package/src/bridge/surface/methods/auth/useAppSession.ts

@@ -22,6 +22,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'useAppSession',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'write',
   signature: 'useAppSession()',

package/src/bridge/surface/methods/auth/whoami.ts

@@ -6,6 +6,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'auth',
   method: 'whoami',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'read',
   signature: 'whoami()',

package/src/bridge/surface/methods/database/crawl.ts

@@ -21,6 +21,7 @@ const MAX_DEPTH = 10;
 export default {
   tool: 'database',
   method: 'crawl',
+  runsIn: 'sandbox',
   sdkOrigin: 'pyric',
   effect: 'read',
   signature: `crawl(path?, depth? = ${DEFAULT_DEPTH}, maximum ${MAX_DEPTH}, instance?)`,

package/src/bridge/surface/methods/database/get.ts

@@ -9,6 +9,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'database',
   method: 'get',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'read',
   signature: 'get(path, instance?)',

package/src/bridge/surface/methods/database/push.ts

@@ -20,6 +20,7 @@ function childPathOf(path: string, key: string): string {
 export default {
   tool: 'database',
   method: 'push',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'push(path, value?, instance?)',

package/src/bridge/surface/methods/database/query.ts

@@ -18,6 +18,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'database',
   method: 'query',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'read',
   signature: 'query(path, orderByChild?, equalTo?, limitToFirst?, instance?)',

package/src/bridge/surface/methods/database/remove.ts

@@ -9,6 +9,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'database',
   method: 'remove',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'remove(path, instance?)',

package/src/bridge/surface/methods/database/set.ts

@@ -9,6 +9,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'database',
   method: 'set',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'set(path, value, instance?)',

package/src/bridge/surface/methods/database/update.ts

@@ -9,6 +9,7 @@ import type { MethodRecord } from '../../method-types.js';
 export default {
   tool: 'database',
   method: 'update',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'update(path, values, instance?)',

package/src/bridge/surface/methods/firestore/addDoc.ts

@@ -6,12 +6,13 @@ import {
   fieldValuesOf,
   RENAMES,
 } from '../../arguments/firestore.js';
-import { callSandboxTool } from '../../context.js';
+import { callSandboxTool } from '../../sandbox-context.js';
 import type { MethodRecord } from '../../method-types.js';
 
 export default {
   tool: 'firestore',
   method: 'addDoc',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'addDoc(path, data)',

package/src/bridge/surface/methods/firestore/deleteDoc.ts

@@ -1,12 +1,13 @@
 /** Delete one Firestore document. */
 import { z } from 'zod';
 import { checkDocumentPath, RENAMES } from '../../arguments/firestore.js';
-import { callSandboxTool } from '../../context.js';
+import { callSandboxTool } from '../../sandbox-context.js';
 import type { MethodRecord } from '../../method-types.js';
 
 export default {
   tool: 'firestore',
   method: 'deleteDoc',
+  runsIn: 'sandbox',
   sdkOrigin: 'firebase-js',
   effect: 'write',
   signature: 'deleteDoc(path)',