@pyric/cli 0.1.0-alpha.9

package/dist/bridge/client/bridge.js

@@ -0,0 +1,429 @@
+/**
+ * Browser-side bridge client. Connects an in-page `Sandbox` to a
+ * running pyric bridge process over WebSocket. Once connected,
+ * MCP tool calls reaching the bridge are forwarded here and
+ * dispatched against the in-page `Sandbox`; results flow back
+ * over the same WS.
+ *
+ * Discovery order for the bridge URL:
+ *   1. Explicit `opts.url`.
+ *   2. `window.__PYRIC_BRIDGE_URL__` (set by the Vite plugin).
+ *   3. `ws://${location.hostname}:5174/sandbox` (sidecar default).
+ *
+ * Reconnect strategy: simple exponential backoff up to 30s. The
+ * connection is best-effort — if the bridge is down the host app
+ * keeps working; tool calls just won't reach an external agent.
+ *
+ * Standby: when the bridge closes this connection with the REPLACED code
+ * (another tab registered and won the last-connection-wins slot), the client
+ * does NOT re-hello — that would kick the winner right back out and the two
+ * tabs would fight forever. It health-polls the serve origin at a gentle
+ * jittered cadence and reconnects only once `sandboxConnected` is false
+ * (the winning tab closed or refreshed). Every other close keeps the
+ * immediate reconnect loop — that path is what makes tab-refresh takeover
+ * work.
+ */
+import { isBridgeMessage, assertJsonSafeRelayValue, DEFAULT_BRIDGE_PORT, DEFAULT_SANDBOX_PATH, PEER_REPLACED_CLOSE_CODE, WORKER_RELAY_CAPABILITY, } from '../protocol.js';
+import { dispatchSandboxTool, SANDBOX_TOOL_NAMES } from './dispatch.js';
+const DEFAULT_INITIAL_DELAY = 500;
+const DEFAULT_MAX_DELAY = 30_000;
+const DEFAULT_STANDBY_POLL_MS = 2_000;
+/** Per-poll jitter as a fraction of the poll interval (0..50% added), so two
+ *  standby tabs don't race a freshly vacant slot in lockstep. */
+const STANDBY_POLL_JITTER_RATIO = 0.5;
+/** Consecutive unreachable/unparseable health polls before standby gives up
+ *  and falls back to the plain reconnect loop (a restarted server has a
+ *  vacant slot but may briefly serve nothing). */
+const STANDBY_MAX_POLL_FAILURES = 3;
+export function connectBridge(sandbox, opts = {}) {
+    const url = resolveBridgeUrl(opts.url);
+    const sandboxId = opts.sandboxId ?? randomId();
+    const dispatcher = opts.dispatcher ?? dispatchSandboxTool;
+    const toolNames = opts.toolNames ?? [...SANDBOX_TOOL_NAMES];
+    const initialDelay = opts.initialReconnectDelayMs ?? DEFAULT_INITIAL_DELAY;
+    const maxDelay = opts.maxReconnectDelayMs ?? DEFAULT_MAX_DELAY;
+    const noReconnect = opts.noReconnect ?? false;
+    const onStateChange = opts.onStateChange ?? (() => { });
+    const standbyPollMs = opts.standbyPollMs ?? DEFAULT_STANDBY_POLL_MS;
+    // Wrap rather than alias: an unbound `window.fetch` reference throws
+    // "Illegal invocation" in browsers.
+    const fetchImpl = opts.fetchImpl ?? ((input) => fetch(input));
+    const workerRelay = opts.workerRelay ?? null;
+    let ws = null;
+    let closed = false;
+    let attempt = 0;
+    let reconnectTimer = null;
+    let standbyTimer = null;
+    let standbyPollFailures = 0;
+    let currentState = { kind: 'connecting' };
+    /** Live relay subscriptions (bridge subId → worker unsubscribe). Torn down
+     *  on every socket close: the bridge re-issues its registry to the NEXT
+     *  registered peer, so keeping these would double-deliver. */
+    const relaySubs = new Map();
+    function teardownRelaySubs() {
+        for (const unsubscribe of relaySubs.values()) {
+            try {
+                unsubscribe();
+            }
+            catch { }
+        }
+        relaySubs.clear();
+    }
+    function setState(next) {
+        currentState = next;
+        try {
+            onStateChange(next);
+        }
+        catch {
+            // host callback failures must not interrupt the loop.
+        }
+    }
+    function send(msg) {
+        if (ws && ws.readyState === WebSocket.OPEN) {
+            try {
+                ws.send(JSON.stringify(msg));
+            }
+            catch {
+                // socket likely closing; reconnect will pick up after close event
+            }
+        }
+    }
+    function connect() {
+        if (closed)
+            return;
+        setState({ kind: 'connecting' });
+        let socket;
+        try {
+            socket = new WebSocket(url);
+        }
+        catch (err) {
+            scheduleReconnect(`failed to open WebSocket: ${err instanceof Error ? err.message : String(err)}`);
+            return;
+        }
+        ws = socket;
+        socket.onopen = () => {
+            attempt = 0;
+            const hello = {
+                type: 'hello',
+                protocol: 1,
+                tools: toolNames,
+                sandboxId,
+                ...(workerRelay ? { capabilities: [WORKER_RELAY_CAPABILITY] } : {}),
+            };
+            send(hello);
+        };
+        socket.onmessage = (event) => {
+            let parsed;
+            try {
+                parsed = JSON.parse(typeof event.data === 'string' ? event.data : '');
+            }
+            catch {
+                return;
+            }
+            if (!isBridgeMessage(parsed))
+                return;
+            if (parsed.type === 'hello-ack') {
+                setState({ kind: 'connected', bridgeVersion: parsed.bridgeVersion });
+                return;
+            }
+            if (parsed.type === 'tool-call') {
+                void handleToolCall(parsed);
+                return;
+            }
+            if (parsed.type === 'worker-op') {
+                void handleWorkerOp(parsed);
+                return;
+            }
+            if (parsed.type === 'worker-sub') {
+                handleWorkerSub(parsed);
+                return;
+            }
+            if (parsed.type === 'worker-unsub') {
+                const unsubscribe = relaySubs.get(parsed.subId);
+                if (unsubscribe) {
+                    relaySubs.delete(parsed.subId);
+                    try {
+                        unsubscribe();
+                    }
+                    catch { }
+                }
+                return;
+            }
+            if (parsed.type === 'ping') {
+                send({ type: 'pong', id: parsed.id });
+                return;
+            }
+            // Other message types (tool-result, pong, hello) are peer-only; ignore.
+        };
+        socket.onclose = (event) => {
+            const reason = event.reason || `closed (code ${event.code})`;
+            ws = null;
+            // Relay subs are per-connection: the bridge owns the durable registry
+            // and re-issues it after the next hello, so live worker listeners from
+            // THIS connection must go now (or the next connection double-delivers).
+            teardownRelaySubs();
+            if (event.code === PEER_REPLACED_CLOSE_CODE) {
+                // Another tab won the peer slot. Re-helloing now would kick it right
+                // back out (last-connection-wins) and the two tabs would fight over
+                // the slot forever — re-firing every relayed subscription and
+                // failing all in-flight worker ops once per cycle. Go standby:
+                // health-poll until the slot is genuinely vacant.
+                enterStandby();
+                return;
+            }
+            scheduleReconnect(reason);
+        };
+        socket.onerror = () => {
+            // The browser doesn't provide error detail; rely on onclose
+            // for the reconnect trigger.
+        };
+    }
+    async function handleToolCall(req) {
+        let response;
+        try {
+            const result = await dispatcher(sandbox, req.name, req.args ?? {});
+            response = {
+                type: 'tool-result',
+                id: req.id,
+                ok: true,
+                result,
+            };
+        }
+        catch (err) {
+            response = {
+                type: 'tool-result',
+                id: req.id,
+                ok: false,
+                error: {
+                    code: err instanceof Error ? err.name : 'Error',
+                    message: err instanceof Error ? err.message : String(err),
+                },
+            };
+        }
+        send(response);
+    }
+    async function handleWorkerOp(req) {
+        if (!workerRelay)
+            return; // capability not advertised — drop (wire drift)
+        try {
+            const value = await workerRelay.op(req.op);
+            // Anti-corruption guard: a Blob/ArrayBuffer/TypedArray result would be
+            // SILENTLY mangled by the JSON WS legs ({} / index-keyed object) — turn
+            // it into a loud error naming the base64 storage ops instead.
+            assertJsonSafeRelayValue(`op '${req.op.method}'`, value);
+            send({ type: 'worker-res', id: req.id, ok: true, value });
+        }
+        catch (err) {
+            const denialContext = err.denialContext;
+            send({
+                type: 'worker-res',
+                id: req.id,
+                ok: false,
+                error: {
+                    code: err.code ?? 'unknown',
+                    message: err instanceof Error ? err.message : String(err),
+                    // Structured denial context (spike gap 6) — plain JSON, relayed
+                    // verbatim so the Node side re-attaches it.
+                    ...(denialContext !== undefined ? { denialContext } : {}),
+                },
+            });
+        }
+    }
+    function handleWorkerSub(req) {
+        if (!workerRelay)
+            return; // capability not advertised — drop (wire drift)
+        if (relaySubs.has(req.subId))
+            return; // idempotent
+        try {
+            const unsubscribe = workerRelay.subscribe(req.sub, (value) => {
+                // Same anti-corruption guard as handleWorkerOp: a binary snap value
+                // would be silently mangled by the JSON WS legs — fail the sub with
+                // the snap-error convention (routes to onError on the Node side)
+                // instead of delivering garbage.
+                try {
+                    assertJsonSafeRelayValue(`subscription '${req.subId}'`, value);
+                }
+                catch (err) {
+                    send({
+                        type: 'worker-snap',
+                        subId: req.subId,
+                        value: {
+                            __error: {
+                                code: err.code ?? 'invalid-argument',
+                                message: err instanceof Error ? err.message : String(err),
+                            },
+                        },
+                    });
+                    return;
+                }
+                send({ type: 'worker-snap', subId: req.subId, value });
+            });
+            relaySubs.set(req.subId, unsubscribe);
+        }
+        catch (err) {
+            // Synchronous establishment failure — relay it via the worker host's
+            // snap-error convention so the far side's subscribe can reject.
+            const denialContext = err.denialContext;
+            send({
+                type: 'worker-snap',
+                subId: req.subId,
+                value: {
+                    __error: {
+                        code: err.code ?? 'unknown',
+                        message: err instanceof Error ? err.message : String(err),
+                        ...(denialContext !== undefined ? { denialContext } : {}),
+                    },
+                },
+            });
+        }
+    }
+    // ── Standby: another tab holds the peer slot ─────────────────────────────
+    /**
+     * Health endpoints to poll while in standby, derived from the WS url —
+     * same host, http(s) for ws(s). `pyric dev` mounts `/__pyric/health`
+     * (bridge-mount.ts); the standalone bridge serves `/health` — try both.
+     */
+    function healthUrls() {
+        try {
+            const u = new URL(url);
+            u.protocol = u.protocol === 'wss:' ? 'https:' : 'http:';
+            const base = u.origin;
+            return [`${base}/__pyric/health`, `${base}/health`];
+        }
+        catch {
+            return [];
+        }
+    }
+    function enterStandby() {
+        if (closed)
+            return;
+        if (noReconnect) {
+            setState({ kind: 'disconnected', reason: 'replaced by a newer sandbox peer' });
+            return;
+        }
+        attempt = 0;
+        standbyPollFailures = 0;
+        setState({ kind: 'standby' });
+        scheduleStandbyPoll();
+    }
+    function scheduleStandbyPoll() {
+        if (closed)
+            return;
+        const delay = standbyPollMs * (1 + Math.random() * STANDBY_POLL_JITTER_RATIO);
+        standbyTimer = setTimeout(() => {
+            standbyTimer = null;
+            void pollForVacantSlot();
+        }, delay);
+    }
+    async function pollForVacantSlot() {
+        if (closed)
+            return;
+        // null = health unreadable (unreachable / non-JSON / shape drift).
+        let vacant = null;
+        for (const target of healthUrls()) {
+            try {
+                const res = await fetchImpl(target);
+                if (!res.ok)
+                    continue;
+                const body = (await res.json());
+                if (typeof body.sandboxConnected === 'boolean') {
+                    vacant = !body.sandboxConnected;
+                    break;
+                }
+            }
+            catch {
+                // try the next candidate
+            }
+        }
+        if (closed)
+            return;
+        if (vacant === true) {
+            // The winning tab is gone (refresh / close) — claim the slot. The
+            // bridge replays its sub registry to us on hello; its re-issue dedup
+            // keeps unchanged listeners quiet.
+            connect();
+            return;
+        }
+        if (vacant === false) {
+            standbyPollFailures = 0;
+            scheduleStandbyPoll();
+            return;
+        }
+        // Health unreadable: a restarting server has a vacant slot but may
+        // briefly serve nothing. After a few consecutive failures fall back to
+        // the plain reconnect loop rather than idling in standby forever.
+        standbyPollFailures += 1;
+        if (standbyPollFailures >= STANDBY_MAX_POLL_FAILURES) {
+            scheduleReconnect('standby health poll unreachable');
+            return;
+        }
+        scheduleStandbyPoll();
+    }
+    function scheduleReconnect(reason) {
+        if (closed)
+            return;
+        if (noReconnect) {
+            setState({ kind: 'disconnected', reason });
+            return;
+        }
+        attempt += 1;
+        const delay = Math.min(initialDelay * 2 ** (attempt - 1), maxDelay);
+        setState({ kind: 'reconnecting', attempt, delayMs: delay });
+        reconnectTimer = setTimeout(() => {
+            reconnectTimer = null;
+            connect();
+        }, delay);
+    }
+    // Boot the loop.
+    connect();
+    return {
+        disconnect() {
+            closed = true;
+            teardownRelaySubs();
+            if (reconnectTimer) {
+                clearTimeout(reconnectTimer);
+                reconnectTimer = null;
+            }
+            if (standbyTimer) {
+                clearTimeout(standbyTimer);
+                standbyTimer = null;
+            }
+            if (ws) {
+                try {
+                    ws.close();
+                }
+                catch {
+                    // ignore
+                }
+                ws = null;
+            }
+            setState({ kind: 'disconnected', reason: 'client closed' });
+        },
+        state() {
+            return currentState;
+        },
+    };
+}
+// ── Internal helpers ─────────────────────────────────────────────────
+function resolveBridgeUrl(explicit) {
+    if (explicit)
+        return explicit;
+    if (typeof window !== 'undefined') {
+        const injected = window
+            .__PYRIC_BRIDGE_URL__;
+        if (injected)
+            return injected;
+        const host = window.location.hostname || 'localhost';
+        const protocol = window.location.protocol === 'https:' ? 'wss:' : 'ws:';
+        return `${protocol}//${host}:${DEFAULT_BRIDGE_PORT}${DEFAULT_SANDBOX_PATH}`;
+    }
+    return `ws://localhost:${DEFAULT_BRIDGE_PORT}${DEFAULT_SANDBOX_PATH}`;
+}
+function randomId() {
+    if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function') {
+        return crypto.randomUUID();
+    }
+    // Fallback for ancient environments.
+    return `sb-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+}
+//# sourceMappingURL=bridge.js.map

package/dist/bridge/client/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/bridge/client/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAaH,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAqGxE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC;iEACiE;AACjE,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC;;kDAEkD;AAClD,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC,MAAM,UAAU,aAAa,CAC3B,OAAqB,EACrB,OAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,IAAI,qBAAqB,CAAC;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,IAAI,iBAAiB,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,qEAAqE;IACrE,oCAAoC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,KAAkC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3F,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IAE7C,IAAI,EAAE,GAAqB,IAAI,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,cAAc,GAAyC,IAAI,CAAC;IAChE,IAAI,YAAY,GAAyC,IAAI,CAAC;IAC9D,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAI,YAAY,GAAyB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChE;;kEAE8D;IAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEhD,SAAS,iBAAiB;QACxB,KAAK,MAAM,WAAW,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,WAAW,EAAE,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,SAAS,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAED,SAAS,QAAQ,CAAC,IAA0B;QAC1C,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IAED,SAAS,IAAI,CAAC,GAAkB;QAC9B,IAAI,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,OAAO;QACd,IAAI,MAAM;YAAE,OAAO;QACnB,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACjC,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,EAAE,GAAG,MAAM,CAAC;QAEZ,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE;YACnB,OAAO,GAAG,CAAC,CAAC;YACZ,MAAM,KAAK,GAAoB;gBAC7B,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,CAAC;gBACX,KAAK,EAAE,SAAS;gBAChB,SAAS;gBACT,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;YACzC,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;gBAAE,OAAO;YAErC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjC,eAAe,CAAC,MAAM,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACnC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChD,IAAI,WAAW,EAAE,CAAC;oBAChB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC/B,IAAI,CAAC;wBACH,WAAW,EAAE,CAAC;oBAChB,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;gBACZ,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,wEAAwE;QAC1E,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,GAAG,CAAC,KAAiB,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,gBAAgB,KAAK,CAAC,IAAI,GAAG,CAAC;YAC7D,EAAE,GAAG,IAAI,CAAC;YACV,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,iBAAiB,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC5C,qEAAqE;gBACrE,oEAAoE;gBACpE,8DAA8D;gBAC9D,+DAA+D;gBAC/D,kDAAkD;gBAClD,YAAY,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YACD,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YACpB,4DAA4D;YAC5D,6BAA6B;QAC/B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,GAAoB;QAChD,IAAI,QAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACnE,QAAQ,GAAG;gBACT,IAAI,EAAE,aAAa;gBACnB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,IAAI;gBACR,MAAM;aACP,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,GAAG;gBACT,IAAI,EAAE,aAAa;gBACnB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;oBAC/C,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC1D;aACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,GAAkB;QAC9C,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,gDAAgD;QAC1E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3C,uEAAuE;YACvE,wEAAwE;YACxE,8DAA8D;YAC9D,wBAAwB,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,GAAI,GAAmC,CAAC,aAAa,CAAC;YACzE,IAAI,CAAC;gBACH,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAG,GAAyB,CAAC,IAAI,IAAI,SAAS;oBAClD,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;oBACzD,gEAAgE;oBAChE,4CAA4C;oBAC5C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1D;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,SAAS,eAAe,CAAC,GAAmB;QAC1C,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,gDAAgD;QAC1E,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,aAAa;QACnD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3D,oEAAoE;gBACpE,oEAAoE;gBACpE,iEAAiE;gBACjE,iCAAiC;gBACjC,IAAI,CAAC;oBACH,wBAAwB,CAAC,iBAAiB,GAAG,CAAC,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;gBACjE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC;wBACH,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,KAAK,EAAE;4BACL,OAAO,EAAE;gCACP,IAAI,EAAG,GAAyB,CAAC,IAAI,IAAI,kBAAkB;gCAC3D,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;6BAC1D;yBACF;qBACF,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,gEAAgE;YAChE,MAAM,aAAa,GAAI,GAAmC,CAAC,aAAa,CAAC;YACzE,IAAI,CAAC;gBACH,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,KAAK,EAAE;oBACL,OAAO,EAAE;wBACP,IAAI,EAAG,GAAyB,CAAC,IAAI,IAAI,SAAS;wBAClD,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC1D;iBACF;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E;;;;OAIG;IACH,SAAS,UAAU;QACjB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACxD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;YACtB,OAAO,CAAC,GAAG,IAAI,iBAAiB,EAAE,GAAG,IAAI,SAAS,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,SAAS,YAAY;QACnB,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,WAAW,EAAE,CAAC;YAChB,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QACD,OAAO,GAAG,CAAC,CAAC;QACZ,mBAAmB,GAAG,CAAC,CAAC;QACxB,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9B,mBAAmB,EAAE,CAAC;IACxB,CAAC;IAED,SAAS,mBAAmB;QAC1B,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,KAAK,GAAG,aAAa,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,yBAAyB,CAAC,CAAC;QAC9E,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,YAAY,GAAG,IAAI,CAAC;YACpB,KAAK,iBAAiB,EAAE,CAAC;QAC3B,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED,KAAK,UAAU,iBAAiB;QAC9B,IAAI,MAAM;YAAE,OAAO;QACnB,mEAAmE;QACnE,IAAI,MAAM,GAAmB,IAAI,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,SAAS;gBACtB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmC,CAAC;gBAClE,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;oBAC/C,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;oBAChC,MAAM;gBACR,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QACD,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,kEAAkE;YAClE,qEAAqE;YACrE,mCAAmC;YACnC,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,mBAAmB,GAAG,CAAC,CAAC;YACxB,mBAAmB,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,mEAAmE;QACnE,uEAAuE;QACvE,kEAAkE;QAClE,mBAAmB,IAAI,CAAC,CAAC;QACzB,IAAI,mBAAmB,IAAI,yBAAyB,EAAE,CAAC;YACrD,iBAAiB,CAAC,iCAAiC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,mBAAmB,EAAE,CAAC;IACxB,CAAC;IAED,SAAS,iBAAiB,CAAC,MAAc;QACvC,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,WAAW,EAAE,CAAC;YAChB,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,OAAO,IAAI,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpE,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,cAAc,GAAG,IAAI,CAAC;YACtB,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED,iBAAiB;IACjB,OAAO,EAAE,CAAC;IAEV,OAAO;QACL,UAAU;YACR,MAAM,GAAG,IAAI,CAAC;YACd,iBAAiB,EAAE,CAAC;YACpB,IAAI,cAAc,EAAE,CAAC;gBACnB,YAAY,CAAC,cAAc,CAAC,CAAC;gBAC7B,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC3B,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;YACD,IAAI,EAAE,EAAE,CAAC;gBACP,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,EAAE,GAAG,IAAI,CAAC;YACZ,CAAC;YACD,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK;YACH,OAAO,YAAY,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,SAAS,gBAAgB,CAAC,QAAiB;IACzC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAI,MAAuD;aACtE,oBAAoB,CAAC;QACxB,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,WAAW,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACxE,OAAO,GAAG,QAAQ,KAAK,IAAI,IAAI,mBAAmB,GAAG,oBAAoB,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,kBAAkB,mBAAmB,GAAG,oBAAoB,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,QAAQ;IACf,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC7E,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7B,CAAC;IACD,qCAAqC;IACrC,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC"}

package/dist/bridge/client/dispatch.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Browser-side tool dispatcher. Consumes the SAME tool factories the
+ * bridge advertises over MCP (`getSandboxToolMetadata`), so the set the
+ * bridge LISTS and the set the page EXECUTES are identical. There is one
+ * source of truth: the factories in `buildSandboxHandlers`.
+ *
+ * History of the trap this guards against: earlier this file delegated
+ * to ONLY `createFirestoreSimulatorTools`, while `getSandboxToolMetadata`
+ * advertised the simulator + data-plane + inspect families. The bridge
+ * therefore LISTED `firestore_create_document` / `sandbox_inspect`
+ * etc., but a `callTool` failed at dispatch with "tool 'X' is not
+ * registered with the connected sandbox peer" — succeed-at-list,
+ * fail-at-dispatch. Registering every family here (and deriving
+ * `SANDBOX_TOOL_NAMES` from the same set) closes the gap. The parity is
+ * pinned by `test/bridge/tool-parity.test.ts`.
+ */
+import type { LocalSandbox } from 'pyric/sandbox';
+export interface DispatchResult {
+    ok: boolean;
+    summary: string;
+    data?: unknown;
+}
+/**
+ * Build a dispatcher for the supplied `Sandbox`. The returned function
+ * looks up tools by name across every factory and invokes the
+ * canonical handler. Throws `UnknownToolError` on unknown names.
+ */
+export declare function buildSandboxDispatcher(sandbox: LocalSandbox): (name: string, args: Record<string, unknown>) => Promise<DispatchResult>;
+export declare function dispatchSandboxTool(sandbox: LocalSandbox, name: string, args: Record<string, unknown>): Promise<DispatchResult>;
+/**
+ * Tool names this dispatcher recognises, derived at load time from the
+ * SAME factories — so it equals what the page executes AND what the
+ * bridge advertises. `connectBridge` sends this as the `hello.tools`
+ * payload so the bridge advertises exactly the executable set.
+ */
+export declare const SANDBOX_TOOL_NAMES: string[];
+export declare class UnknownToolError extends Error {
+    readonly tool: string;
+    constructor(tool: string);
+}
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/bridge/client/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/bridge/client/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA6BD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,YAAY,GACpB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,cAAc,CAAC,CAiB1E;AAcD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,cAAc,CAAC,CAOzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,EAUnC,CAAC;AAEL,qBAAa,gBAAiB,SAAQ,KAAK;aACb,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIzC"}

package/dist/bridge/client/dispatch.js

@@ -0,0 +1,111 @@
+/**
+ * Browser-side tool dispatcher. Consumes the SAME tool factories the
+ * bridge advertises over MCP (`getSandboxToolMetadata`), so the set the
+ * bridge LISTS and the set the page EXECUTES are identical. There is one
+ * source of truth: the factories in `buildSandboxHandlers`.
+ *
+ * History of the trap this guards against: earlier this file delegated
+ * to ONLY `createFirestoreSimulatorTools`, while `getSandboxToolMetadata`
+ * advertised the simulator + data-plane + inspect families. The bridge
+ * therefore LISTED `firestore_create_document` / `sandbox_inspect`
+ * etc., but a `callTool` failed at dispatch with "tool 'X' is not
+ * registered with the connected sandbox peer" — succeed-at-list,
+ * fail-at-dispatch. Registering every family here (and deriving
+ * `SANDBOX_TOOL_NAMES` from the same set) closes the gap. The parity is
+ * pinned by `test/bridge/tool-parity.test.ts`.
+ */
+import { createFirestoreSimulatorTools } from 'pyric/rules/internal/node';
+import { createFirestoreDataTools, createFirestoreInspectTools, getFirestore, getAdminFirestore, } from 'pyric/firestore';
+import { getInternalEnv } from 'pyric/sandbox/internal';
+import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
+/**
+ * The full handler set for a sandbox: the simulator family (bound to the
+ * internal env) plus the modular data-plane and inspect families (bound
+ * to a per-call `resolveDb`). This is the single source of truth shared
+ * by `buildSandboxDispatcher` and `SANDBOX_TOOL_NAMES`, and it MUST stay
+ * aligned with `getSandboxToolMetadata` (asserted by tool-parity.test.ts).
+ *
+ * Auth: `resolveDb('admin')` / `resolveDb(undefined)` is an admin-bypass handle
+ * (no rules); `resolveDb({ uid, claims })` is a rules-enforcing client acting as
+ * that user — `claims` ride the auth token, matching the rules
+ * `request.auth.token` shape. This is a SANDBOX dispatcher, so the admin default
+ * is intended; a dispatcher wired to a real backend must reject `'admin'`.
+ */
+function buildSandboxHandlers(sandbox) {
+    const env = getInternalEnv(sandbox);
+    const resolveDb = (actor) => actor && actor !== 'admin'
+        ? getFirestore(sandbox.withAuth({ uid: actor.uid, token: actor.claims }))
+        : getAdminFirestore(sandbox);
+    return [
+        ...createFirestoreSimulatorTools({ resolveSandbox: () => env }),
+        ...createFirestoreDataTools({ resolveDb }),
+        ...createFirestoreInspectTools({ resolveSandbox: () => sandbox }),
+        ...createRtdbInspectionTools({ resolveSandbox: () => sandbox }),
+    ];
+}
+/**
+ * Build a dispatcher for the supplied `Sandbox`. The returned function
+ * looks up tools by name across every factory and invokes the
+ * canonical handler. Throws `UnknownToolError` on unknown names.
+ */
+export function buildSandboxDispatcher(sandbox) {
+    const byName = new Map(buildSandboxHandlers(sandbox).map((h) => [h.name, h]));
+    return async (name, args) => {
+        const handler = byName.get(name);
+        if (!handler)
+            throw new UnknownToolError(name);
+        // ToolContext is supplied minimally; these handlers only read the
+        // signal field (and our factory handlers don't use it).
+        const ctx = {
+            signal: new AbortController().signal,
+        };
+        const result = await handler.execute(args, ctx);
+        return {
+            ok: result.ok,
+            summary: result.summary,
+            data: result.data,
+        };
+    };
+}
+/**
+ * Convenience: build a dispatcher and immediately invoke it. Same shape
+ * `connectBridge` expects as its `dispatcher` option.
+ *
+ * Dispatchers are cached per sandbox so repeated bridge requests reuse the
+ * same bound handler set.
+ */
+const sandboxDispatchers = new WeakMap();
+export async function dispatchSandboxTool(sandbox, name, args) {
+    let dispatcher = sandboxDispatchers.get(sandbox);
+    if (!dispatcher) {
+        dispatcher = buildSandboxDispatcher(sandbox);
+        sandboxDispatchers.set(sandbox, dispatcher);
+    }
+    return dispatcher(name, args);
+}
+/**
+ * Tool names this dispatcher recognises, derived at load time from the
+ * SAME factories — so it equals what the page executes AND what the
+ * bridge advertises. `connectBridge` sends this as the `hello.tools`
+ * payload so the bridge advertises exactly the executable set.
+ */
+export const SANDBOX_TOOL_NAMES = (() => {
+    const stub = async () => {
+        throw new Error('SANDBOX_TOOL_NAMES: stub resolver should never be invoked');
+    };
+    return [
+        ...createFirestoreSimulatorTools({ resolveSandbox: stub }),
+        ...createFirestoreDataTools({ resolveDb: stub }),
+        ...createFirestoreInspectTools({ resolveSandbox: stub }),
+        ...createRtdbInspectionTools({ resolveSandbox: stub }),
+    ].map((h) => h.name);
+})();
+export class UnknownToolError extends Error {
+    tool;
+    constructor(tool) {
+        super(`unknown sandbox tool: ${tool}`);
+        this.tool = tool;
+        this.name = 'UnknownToolError';
+    }
+}
+//# sourceMappingURL=dispatch.js.map

package/dist/bridge/client/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/bridge/client/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,GAElB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAQrE;;;;;;;;;;;;GAYG;AACH,SAAS,oBAAoB,CAAC,OAAqB;IACjD,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,CAAC,KAAU,EAAE,EAAE,CAC/B,KAAK,IAAI,KAAK,KAAK,OAAO;QACxB,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO;QACL,GAAG,6BAA6B,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC/D,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,CAAC;QAC1C,GAAG,2BAA2B,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACjE,GAAG,yBAAyB,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAqB;IAErB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC/C,kEAAkE;QAClE,wDAAwD;QACxD,MAAM,GAAG,GAAG;YACV,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;SAC5B,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAGnC,CAAC;AAEJ,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAqB,EACrB,IAAY,EACZ,IAA6B;IAE7B,IAAI,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC7C,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAa,CAAC,GAAG,EAAE;IAChD,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC,CAAC;IACF,OAAO;QACL,GAAG,6BAA6B,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;QACnE,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC;QACzD,GAAG,2BAA2B,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;QACjE,GAAG,yBAAyB,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;KAChE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAA5B,YAA4B,IAAY;QACtC,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QADb,SAAI,GAAJ,IAAI,CAAQ;QAEtC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}

package/dist/bridge/client.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `@pyric/cli/bridge` — browser-side entry.
+ *
+ * Resolved by the `browser` condition in `package.json`'s exports map.
+ * Exports `connectBridge`, which the host app calls to register its
+ * in-page sandbox with a running pyric bridge process. After
+ * registration, MCP tool calls reaching the bridge are forwarded over
+ * WebSocket and dispatched into the local sandbox.
+ *
+ * The Node-side server entry lives in `./server.ts`. Wire format
+ * shared by both lives in `./protocol.ts`.
+ *
+ * ALSO reachable as `@pyric/cli/bridge/client` — an explicit, condition-free
+ * subpath for browser apps whose TYPE resolution doesn't apply the `browser`
+ * condition (Pyric Studio's `moduleResolution: bundler` tsconfig resolves the
+ * `./bridge` subpath's top-level `types` to the SERVER entry). Same file,
+ * same surface.
+ */
+export type { BridgeMessage, HelloFromClient, HelloFromBridge, ToolCallRequest, ToolCallResponse, } from './protocol.js';
+export { DEFAULT_BRIDGE_PORT, DEFAULT_SANDBOX_PATH, } from './protocol.js';
+export { connectBridge } from './client/bridge.js';
+export type { ConnectBridgeOptions, ConnectedBridge, ConnectedBridgeState, SandboxToolDispatcher, WorkerRelay, } from './client/bridge.js';
+export { toPageOriginWsUrl } from '../serve/entries/bridge-url.js';
+//# sourceMappingURL=client.d.ts.map

package/dist/bridge/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/bridge/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,YAAY,EACV,aAAa,EACb,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,YAAY,EACV,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/bridge/client.js

@@ -0,0 +1,26 @@
+/**
+ * `@pyric/cli/bridge` — browser-side entry.
+ *
+ * Resolved by the `browser` condition in `package.json`'s exports map.
+ * Exports `connectBridge`, which the host app calls to register its
+ * in-page sandbox with a running pyric bridge process. After
+ * registration, MCP tool calls reaching the bridge are forwarded over
+ * WebSocket and dispatched into the local sandbox.
+ *
+ * The Node-side server entry lives in `./server.ts`. Wire format
+ * shared by both lives in `./protocol.ts`.
+ *
+ * ALSO reachable as `@pyric/cli/bridge/client` — an explicit, condition-free
+ * subpath for browser apps whose TYPE resolution doesn't apply the `browser`
+ * condition (Pyric Studio's `moduleResolution: bundler` tsconfig resolves the
+ * `./bridge` subpath's top-level `types` to the SERVER entry). Same file,
+ * same surface.
+ */
+export { DEFAULT_BRIDGE_PORT, DEFAULT_SANDBOX_PATH, } from './protocol.js';
+export { connectBridge } from './client/bridge.js';
+// Re-anchor a served bridge URL to the page's own origin. The served app page
+// and Pyric Studio both do this before connecting as the bridge peer (see
+// `serve/entries/bridge-url.ts` for why the baked host can be the wrong
+// machine). Pure + browser-safe; exported here so Studio reuses it verbatim.
+export { toPageOriginWsUrl } from '../serve/entries/bridge-url.js';
+//# sourceMappingURL=client.js.map