@pyric/cli 0.1.0-alpha.9

package/dist/bridge/server/peer.js

@@ -0,0 +1,189 @@
+import { isBridgeMessage, PEER_REPLACED_CLOSE_CODE, PEER_REPLACED_CLOSE_REASON, } from '../protocol.js';
+import { cliVersion } from '../../pkg-version.js';
+export function attachPeer(bridge, ws) {
+    let disconnect = null;
+    /** Peer generation captured at registration — tags every inbound frame so
+     *  a replaced tab's socket can't resolve the NEW peer's calls or deliver
+     *  stale subscription snaps (see Bridge.peerGeneration). */
+    let peerGen = 0;
+    let helloed = false;
+    let consumer = null;
+    ws.on('message', (raw) => {
+        let msg;
+        try {
+            msg = JSON.parse(raw.toString());
+        }
+        catch {
+            return;
+        }
+        if (!isBridgeMessage(msg))
+            return;
+        if (msg.type === 'attach') {
+            // Worker-relay consumer (Node client). NOT a peer: attaching never
+            // kicks the browser tab out of last-connection-wins.
+            if (helloed || consumer)
+                return;
+            consumer = createConsumerSession(bridge, (out) => {
+                try {
+                    ws.send(JSON.stringify(out));
+                }
+                catch { }
+            });
+            consumer.handleMessage(msg); // acks with attach-ack
+            return;
+        }
+        if (consumer) {
+            consumer.handleMessage(msg);
+            return;
+        }
+        if (msg.type === 'hello') {
+            if (helloed)
+                return;
+            helloed = true;
+            disconnect = bridge.registerSandboxPeer((out) => {
+                try {
+                    ws.send(JSON.stringify(out));
+                }
+                catch { }
+            }, 
+            // Harden against a malformed hello: these fields come off the wire
+            // and feed `new Set(...)` in the bridge core — a non-array value
+            // (e.g. `capabilities: 42`) would throw inside this message
+            // listener, escape uncaught, and crash the serve process.
+            Array.isArray(msg.tools) ? msg.tools : [], msg.sandboxId, Array.isArray(msg.capabilities) ? msg.capabilities : [], 
+            // On replacement, close THIS socket: the browser side's onclose
+            // handler tears down its relayed worker subscriptions, so a
+            // replaced tab's SharedWorker listeners don't keep streaming
+            // snaps the bridge drops as stale-generation until the tab closes.
+            // The REPLACED close code tells that client to go STANDBY (health-
+            // poll for a vacant slot) instead of re-helloing — an immediate
+            // re-hello would kick the new peer right back, and two open tabs
+            // would fight over the slot forever.
+            () => {
+                try {
+                    ws.close(PEER_REPLACED_CLOSE_CODE, PEER_REPLACED_CLOSE_REASON);
+                }
+                catch { }
+            });
+            peerGen = bridge.peerGeneration();
+            try {
+                ws.send(JSON.stringify({
+                    type: 'hello-ack',
+                    protocol: 1,
+                    bridgeVersion: bridge.version,
+                }));
+            }
+            catch {
+                // Socket died between hello and ack — the close handler unwinds.
+            }
+            return;
+        }
+        if (!helloed)
+            return;
+        bridge.handleSandboxMessage(msg, peerGen);
+    });
+    ws.on('close', () => {
+        if (disconnect)
+            disconnect();
+        disconnect = null;
+        if (consumer)
+            consumer.dispose();
+        consumer = null;
+    });
+    ws.on('error', () => { });
+}
+/**
+ * Create a consumer session over `send`. Correlation ids/subIds on this leg
+ * are CONSUMER-minted and echoed verbatim; the bridge core mints its own ids
+ * for the peer leg (`dispatchWorkerOp` / `subscribeWorker`), so the two legs'
+ * id spaces never mix.
+ */
+export function createConsumerSession(bridge, send) {
+    /** consumer subId → bridge-side unsubscribe. */
+    const subs = new Map();
+    return {
+        handleMessage(msg) {
+            switch (msg.type) {
+                case 'attach': {
+                    // Idempotent re-attach: just re-ack. `serveVersion` is the
+                    // version-skew stamp (bridge/protocol.ts) — this process's own
+                    // @pyric/cli version, compared client-side at attach.
+                    send({
+                        type: 'attach-ack',
+                        protocol: 1,
+                        bridgeVersion: bridge.version,
+                        peerConnected: bridge.isSandboxConnected(),
+                        serveVersion: cliVersion(),
+                    });
+                    return;
+                }
+                case 'worker-op': {
+                    bridge.dispatchWorkerOp(msg.op).then((value) => send({ type: 'worker-res', id: msg.id, ok: true, value }), (err) => send({
+                        type: 'worker-res',
+                        id: msg.id,
+                        ok: false,
+                        error: {
+                            code: err.code ?? 'unknown',
+                            message: err.message,
+                            // Structured denial context (spike gap 6) — plain JSON,
+                            // relayed verbatim so the Node side re-attaches it.
+                            ...(err.denialContext !== undefined ? { denialContext: err.denialContext } : {}),
+                        },
+                    }));
+                    return;
+                }
+                case 'worker-sub': {
+                    if (subs.has(msg.subId))
+                        return; // idempotent
+                    const unsubscribe = bridge.subscribeWorker(msg.sub, (value) => send({ type: 'worker-snap', subId: msg.subId, value }));
+                    subs.set(msg.subId, unsubscribe);
+                    return;
+                }
+                case 'worker-unsub': {
+                    const unsubscribe = subs.get(msg.subId);
+                    if (!unsubscribe)
+                        return;
+                    subs.delete(msg.subId);
+                    unsubscribe();
+                    return;
+                }
+                case 'ping': {
+                    send({ type: 'pong', id: msg.id });
+                    return;
+                }
+                default:
+                    return; // peer-only or unknown frames — ignore
+            }
+        },
+        dispose() {
+            for (const unsubscribe of subs.values())
+                unsubscribe();
+            subs.clear();
+        },
+    };
+}
+export async function collectBody(req) {
+    if (req.method === 'GET' || req.method === 'DELETE')
+        return undefined;
+    return await new Promise((resolve, reject) => {
+        let raw = '';
+        req.setEncoding('utf8');
+        req.on('data', (chunk) => {
+            raw += chunk;
+        });
+        req.on('end', () => {
+            if (!raw) {
+                resolve(undefined);
+                return;
+            }
+            try {
+                resolve(JSON.parse(raw));
+            }
+            catch (err) {
+                reject(err);
+            }
+        });
+        req.on('error', reject);
+    });
+}
+//# sourceMappingURL=peer.js.map

package/dist/bridge/server/peer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,GAE3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,UAAU,UAAU,CACxB,MAAuC,EACvC,EAAa;IAEb,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C;;gEAE4D;IAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAE5C,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO;QAClC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE;gBAC9D,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;YACpD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,GAAG,MAAM,CAAC,mBAAmB,CACrC,CAAC,GAAkB,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YACD,mEAAmE;YACnE,iEAAiE;YACjE,4DAA4D;YAC5D,0DAA0D;YAC1D,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EACzC,GAAG,CAAC,SAAS,EACb,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YACvD,gEAAgE;YAChE,4DAA4D;YAC5D,6DAA6D;YAC7D,mEAAmE;YACnE,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,qCAAqC;YACrC,GAAG,EAAE;gBACH,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;gBACjE,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CACF,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,CAAC;oBACX,aAAa,EAAE,MAAM,CAAC,OAAO;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,IAAI,UAAU;YAAE,UAAU,EAAE,CAAC;QAC7B,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,QAAQ;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC3B,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,IAAkC;IAElC,gDAAgD;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE3C,OAAO;QACL,aAAa,CAAC,GAAkB;YAC9B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,2DAA2D;oBAC3D,+DAA+D;oBAC/D,sDAAsD;oBACtD,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,CAAC;wBACX,aAAa,EAAE,MAAM,CAAC,OAAO;wBAC7B,aAAa,EAAE,MAAM,CAAC,kBAAkB,EAAE;wBAC1C,YAAY,EAAE,UAAU,EAAE;qBAC3B,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EACpE,CAAC,GAAuD,EAAE,EAAE,CAC1D,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE;4BACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;4BAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,wDAAwD;4BACxD,oDAAoD;4BACpD,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACjF;qBACF,CAAC,CACL,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,OAAO,CAAC,aAAa;oBAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5D,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CACvD,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,WAAW;wBAAE,OAAO;oBACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACvB,WAAW,EAAE,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,OAAO;gBACT,CAAC;gBACD;oBACE,OAAO,CAAC,uCAAuC;YACnD,CAAC;QACH,CAAC;QACD,OAAO;YACL,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,WAAW,EAAE,CAAC;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAoB;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,GAAG,IAAI,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/bridge/server/standalone.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Standalone bridge server. Spins up an HTTP server on a known
+ * loopback port that handles three routes:
+ *
+ *   GET  /health           — diagnostic
+ *   POST /mcp              — MCP-over-HTTP (StreamableHTTPServerTransport)
+ *   GET  /sandbox (Upgrade) — WebSocket the browser tab connects to
+ *
+ * Bound to 127.0.0.1 only. Refuses to start if the port is occupied.
+ *
+ * Premortem fixes baked in:
+ *  - #A2 — per-session idle timeout (10 min default) + max-session cap.
+ *  - #U1 — peer connect/disconnect logged; per-call logging behind
+ *    PYRIC_VERBOSE=1.
+ */
+import { type Bridge } from './bridge.js';
+import { type AuditWriter } from './audit.js';
+import { type BridgeLogger } from './logger.js';
+export interface StartServerOptions {
+    /** Port to bind. Default: 5174. Env: PYRIC_PORT. */
+    port?: number;
+    /** Sandbox label surfaced in health and audit metadata. */
+    project?: string;
+    /** Disable the audit log writer (useful in tests). */
+    disableAuditLog?: boolean;
+    /** Extra hostnames allowed past the WS-upgrade rebinding/origin guard
+     *  (besides the loopback set the bridge binds to). Mirrors serve's
+     *  `--allowed-host`. */
+    allowedHosts?: string[];
+    /** Override the audit writer (testing). */
+    auditWriter?: AuditWriter;
+    /** Premortem #A2 — kill idle sessions after this many ms. Default 10 min. */
+    sessionIdleMs?: number;
+    /** Premortem #A2 — refuse new sessions when this many are active. Default 50. */
+    maxSessions?: number;
+    /** Premortem #U1 — logger; defaults to stderr `[pyric]` prefix. */
+    logger?: BridgeLogger;
+    /** Convenience: install a silent logger (tests). */
+    silent?: boolean;
+}
+export interface ServerHandle {
+    readonly bridge: Bridge;
+    readonly port: number;
+    readonly url: string;
+    readonly auditLogPath: string | null;
+    stop(): Promise<void>;
+}
+export declare function startServer(opts?: StartServerOptions): Promise<ServerHandle>;
+//# sourceMappingURL=standalone.d.ts.map

package/dist/bridge/server/standalone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/standalone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAgB,KAAK,MAAM,EAAwB,MAAM,aAAa,CAAC;AAG9E,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAgBrB,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,oDAAoD;IACpD,MAAM,CAAC,EAAE,OAAO,CAAC;CAElB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,wBAAsB,WAAW,CAC/B,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,YAAY,CAAC,CA+MvB"}

package/dist/bridge/server/standalone.js

@@ -0,0 +1,267 @@
+/**
+ * Standalone bridge server. Spins up an HTTP server on a known
+ * loopback port that handles three routes:
+ *
+ *   GET  /health           — diagnostic
+ *   POST /mcp              — MCP-over-HTTP (StreamableHTTPServerTransport)
+ *   GET  /sandbox (Upgrade) — WebSocket the browser tab connects to
+ *
+ * Bound to 127.0.0.1 only. Refuses to start if the port is occupied.
+ *
+ * Premortem fixes baked in:
+ *  - #A2 — per-session idle timeout (10 min default) + max-session cap.
+ *  - #U1 — peer connect/disconnect logged; per-call logging behind
+ *    PYRIC_VERBOSE=1.
+ */
+import { createServer } from 'node:http';
+import { randomUUID } from 'node:crypto';
+import { WebSocketServer } from 'ws';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { createBridge } from './bridge.js';
+import { buildMcpServer } from './mcp.js';
+import { getDefaultMcpToolSurface } from './mcp-contract.js';
+import { createAuditWriter } from './audit.js';
+import { createConsoleLogger, createSilentLogger, } from './logger.js';
+import { DEFAULT_BRIDGE_PORT, DEFAULT_HEALTH_PATH, DEFAULT_MCP_PATH, DEFAULT_SANDBOX_PATH, isBridgeMessage, } from '../protocol.js';
+import { pyricVersion } from '../../serve/standalone-assets.js';
+import { isAllowedUpgrade } from '../../serve/server.js';
+const BRIDGE_VERSION = pyricVersion();
+const DEFAULT_SESSION_IDLE_MS = 10 * 60 * 1000; // 10 minutes
+const DEFAULT_MAX_SESSIONS = 50;
+export async function startServer(opts = {}) {
+    // `??` doesn't short-circuit on NaN; Number(undefined) is NaN, which
+    // would silently slip through to the http server and produce
+    // "options.port should be >= 0 and < 65536. Received NaN."
+    // Resolve the env var separately so the default actually wins.
+    const envPort = process.env.PYRIC_PORT ? Number(process.env.PYRIC_PORT) : undefined;
+    const port = opts.port ?? (Number.isFinite(envPort) ? envPort : undefined) ?? DEFAULT_BRIDGE_PORT;
+    const project = opts.project ?? process.env.PYRIC_PROJECT ?? 'sandbox';
+    const logger = opts.logger ?? (opts.silent ? createSilentLogger() : createConsoleLogger());
+    const sessionIdleMs = opts.sessionIdleMs ?? DEFAULT_SESSION_IDLE_MS;
+    const maxSessions = opts.maxSessions ?? DEFAULT_MAX_SESSIONS;
+    // Set up audit log writer (best-effort).
+    const auditWriter = opts.disableAuditLog
+        ? null
+        : opts.auditWriter ?? createAuditWriter(project);
+    const bridge = createBridge({
+        project,
+        version: BRIDGE_VERSION,
+        onToolEvent: (event) => {
+            auditWriter?.write(event);
+            logger.verbose(`tool ${event.tool} → ${event.result.ok ? 'ok' : 'fail'} (${event.durationMs}ms) [${event.mode}]`);
+        },
+    });
+    const { forwarded, inProcess } = getDefaultMcpToolSurface();
+    const sessions = new Map();
+    const pendingSessions = new Set();
+    function bumpIdle(session) {
+        if (session.idleTimer)
+            clearTimeout(session.idleTimer);
+        session.idleTimer = setTimeout(() => {
+            if (session.sessionId) {
+                logger.verbose(`session ${session.sessionId.slice(0, 8)}… idle-closed`);
+                sessions.delete(session.sessionId);
+            }
+            pendingSessions.delete(session);
+            void session.close();
+        }, sessionIdleMs);
+    }
+    async function newSession() {
+        if (sessions.size >= maxSessions) {
+            const err = new Error(`pyric bridge: refusing new session — at session cap (${maxSessions}). Existing sessions: ${sessions.size}.`);
+            err.statusCode = 503;
+            throw err;
+        }
+        const session = {
+            transport: null,
+            close: async () => { },
+            idleTimer: null,
+            sessionId: null,
+        };
+        session.transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+            onsessioninitialized: (id) => {
+                session.sessionId = id;
+                sessions.set(id, session);
+                pendingSessions.delete(session);
+                bumpIdle(session);
+                logger.verbose(`session ${id.slice(0, 8)}… initialized`);
+            },
+        });
+        const server = buildMcpServer(bridge, { forwarded, inProcess });
+        session.close = async () => {
+            if (session.idleTimer)
+                clearTimeout(session.idleTimer);
+            session.idleTimer = null;
+            await server.close().catch(() => { });
+            await session.transport.close().catch(() => { });
+        };
+        pendingSessions.add(session);
+        await server.connect(session.transport);
+        return session;
+    }
+    // ── HTTP server ─────────────────────────────────────────────────
+    const http = createServer(async (req, res) => {
+        const url = req.url ?? '/';
+        if (process.env.PYRIC_DEBUG) {
+            process.stderr.write(`[pyric debug] ${req.method} ${url}\n`);
+        }
+        if (url === DEFAULT_HEALTH_PATH && req.method === 'GET') {
+            const body = JSON.stringify(bridge.health());
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(body);
+            return;
+        }
+        if (url === DEFAULT_MCP_PATH && (req.method === 'POST' || req.method === 'GET' || req.method === 'DELETE')) {
+            try {
+                const sessionId = (req.headers['mcp-session-id'] ?? req.headers['Mcp-Session-Id']);
+                let session;
+                if (sessionId && sessions.has(sessionId)) {
+                    session = sessions.get(sessionId);
+                    if (session)
+                        bumpIdle(session);
+                }
+                else {
+                    session = await newSession();
+                }
+                if (req.method === 'DELETE' && sessionId) {
+                    if (session)
+                        await session.close();
+                    sessions.delete(sessionId);
+                    res.writeHead(204);
+                    res.end();
+                    return;
+                }
+                await session.transport.handleRequest(req, res);
+            }
+            catch (err) {
+                const statusCode = err?.statusCode ?? 500;
+                const msg = err instanceof Error ? err.stack ?? err.message : String(err);
+                logger.error(`MCP transport error: ${msg}`);
+                if (!res.headersSent) {
+                    res.writeHead(statusCode, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: err instanceof Error ? err.message : String(err) }));
+                }
+            }
+            return;
+        }
+        res.writeHead(404, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: 'not found', path: url }));
+    });
+    // ── WebSocket server (mounted on /sandbox) ──────────────────────
+    const wss = new WebSocketServer({ noServer: true });
+    http.on('upgrade', (req, socket, head) => {
+        if ((req.url ?? '') !== DEFAULT_SANDBOX_PATH) {
+            socket.destroy();
+            return;
+        }
+        // DNS-rebinding + cross-origin hijack guard (the request-time isAllowedHost
+        // runs on the `request` event only — `upgrade` bypasses it). The standalone
+        // bridge binds 127.0.0.1 only, so the allowlist is the loopback set.
+        if (!isAllowedUpgrade(req.headers, '127.0.0.1', opts.allowedHosts)) {
+            logger.error(`refused WS upgrade — Host='${req.headers.host ?? ''}' Origin='${req.headers.origin ?? ''}' (rebinding/origin guard)`);
+            socket.destroy();
+            return;
+        }
+        wss.handleUpgrade(req, socket, head, (ws) => {
+            attachPeer(bridge, ws, logger);
+        });
+    });
+    // Bind to loopback only.
+    await new Promise((resolve, reject) => {
+        http.once('error', reject);
+        http.listen(port, '127.0.0.1', () => {
+            http.removeListener('error', reject);
+            resolve();
+        });
+    });
+    const address = http.address();
+    const boundPort = typeof address === 'object' && address ? address.port : port;
+    const url = `http://127.0.0.1:${boundPort}`;
+    logger.info(`bridge ${BRIDGE_VERSION} listening on ${url} — sandbox: ${project}`);
+    return {
+        bridge,
+        port: boundPort,
+        url,
+        auditLogPath: auditWriter?.path ?? null,
+        async stop() {
+            // Stop accepting new WebSocket upgrades…
+            wss.close();
+            // …and forcibly terminate any existing WS clients. Without this,
+            // http.close() below waits for clients to disconnect on their own
+            // (MCP keep-alives sit forever — a Ctrl-C with any open peer
+            // would hang the CLI shutdown indefinitely).
+            for (const client of wss.clients) {
+                try {
+                    client.terminate();
+                }
+                catch { /* already closed */ }
+            }
+            // Destroy any open HTTP keep-alive sockets. Node 18.2+.
+            http.closeAllConnections();
+            await new Promise((resolve) => {
+                http.close(() => resolve());
+            });
+            for (const session of sessions.values()) {
+                await session.close().catch(() => { });
+            }
+            for (const session of pendingSessions) {
+                await session.close().catch(() => { });
+            }
+            sessions.clear();
+            pendingSessions.clear();
+            logger.info('bridge stopped');
+        },
+    };
+}
+function attachPeer(bridge, ws, logger) {
+    let disconnect = null;
+    let helloed = false;
+    let sandboxId = null;
+    ws.on('message', (raw) => {
+        let msg;
+        try {
+            msg = JSON.parse(raw.toString());
+        }
+        catch {
+            return; // ignore malformed
+        }
+        if (!isBridgeMessage(msg))
+            return;
+        if (msg.type === 'hello') {
+            if (helloed)
+                return; // ignore duplicate hellos
+            helloed = true;
+            sandboxId = msg.sandboxId;
+            logger.info(`peer connected — sandboxId=${sandboxId.slice(0, 12)} tools=${msg.tools.length}`);
+            disconnect = bridge.registerSandboxPeer((out) => {
+                try {
+                    ws.send(JSON.stringify(out));
+                }
+                catch {
+                    // socket likely closed; the close handler runs disconnect.
+                }
+            }, msg.tools, msg.sandboxId);
+            ws.send(JSON.stringify({
+                type: 'hello-ack',
+                protocol: 1,
+                bridgeVersion: bridge.version,
+            }));
+            return;
+        }
+        if (!helloed)
+            return; // ignore messages before hello
+        bridge.handleSandboxMessage(msg);
+    });
+    ws.on('close', () => {
+        if (disconnect) {
+            disconnect();
+            logger.info(`peer disconnected — sandboxId=${sandboxId ? sandboxId.slice(0, 12) : 'unknown'}`);
+        }
+        disconnect = null;
+    });
+    ws.on('error', () => {
+        // ws will follow up with a 'close' event; cleanup happens there.
+    });
+}
+//# sourceMappingURL=standalone.js.map

package/dist/bridge/server/standalone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone.js","sourceRoot":"","sources":["../../../src/bridge/server/standalone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAa,MAAM,IAAI,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,YAAY,EAAqC,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAoB,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EAEpB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,cAAc,GAAG,YAAY,EAAE,CAAC;AACtC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAC7D,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAkChC,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA2B,EAAE;IAE7B,qEAAqE;IACrE,6DAA6D;IAC7D,2DAA2D;IAC3D,+DAA+D;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,mBAAmB,CAAC;IAClG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC;IACvE,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAE7D,yCAAyC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe;QACtC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,OAAO;QACP,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,CAAC,KAAsB,EAAE,EAAE;YACtC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC,OAAO,CACZ,QAAQ,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,QAAQ,KAAK,CAAC,IAAI,GAAG,CAClG,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,wBAAwB,EAAE,CAAC;IAW5D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAW,CAAC;IAE3C,SAAS,QAAQ,CAAC,OAAgB;QAChC,IAAI,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,OAAO,CAAC,WAAW,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;gBACxE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;YACD,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC,EAAE,aAAa,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,UAAU,UAAU;QACvB,IAAI,QAAQ,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,wDAAwD,WAAW,yBAAyB,QAAQ,CAAC,IAAI,GAAG,CAC7G,CAAC;YACD,GAA+B,CAAC,UAAU,GAAG,GAAG,CAAC;YAClD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,OAAO,GAAY;YACvB,SAAS,EAAE,IAAgD;YAC3D,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACrB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,OAAO,CAAC,SAAS,GAAG,IAAI,6BAA6B,CAAC;YACpD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE;gBAC3B,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC1B,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClB,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;YAC3D,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;YACzB,IAAI,OAAO,CAAC,SAAS;gBAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvD,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mEAAmE;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,GAAG,KAAK,mBAAmB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,GAAG,KAAK,gBAAgB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC3G,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAuB,CAAC;gBACzG,IAAI,OAA4B,CAAC;gBACjC,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzC,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAClC,IAAI,OAAO;wBAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;gBAC/B,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACzC,IAAI,OAAO;wBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;oBACnC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,MAAM,OAAQ,CAAC,SAAS,CAAC,aAAa,CACpC,GAAsB,EACtB,GAAqB,CACtB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,GAAI,GAA+B,EAAE,UAAU,IAAI,GAAG,CAAC;gBACvE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1E,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;gBAC5C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAClE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACvC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,oBAAoB,EAAE,CAAC;YAC7C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,KAAK,CACV,8BAA8B,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,aAAa,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,4BAA4B,CACtH,CAAC;YACF,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YAC1C,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YAClC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,MAAM,GAAG,GAAG,oBAAoB,SAAS,EAAE,CAAC;IAE5C,MAAM,CAAC,IAAI,CAAC,UAAU,cAAc,iBAAiB,GAAG,eAAe,OAAO,EAAE,CAAC,CAAC;IAElF,OAAO;QACL,MAAM;QACN,IAAI,EAAE,SAAS;QACf,GAAG;QACH,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI;QACvC,KAAK,CAAC,IAAI;YACR,yCAAyC;YACzC,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,iEAAiE;YACjE,kEAAkE;YAClE,6DAA6D;YAC7D,6CAA6C;YAC7C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC;oBAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC5D,CAAC;YACD,wDAAwD;YACxD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,eAAe,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,EAAa,EAAE,MAAoB;IACrE,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,mBAAmB;QAC7B,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO;QAElC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,OAAO;gBAAE,OAAO,CAAC,0BAA0B;YAC/C,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,IAAI,CACT,8BAA8B,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CACjF,CAAC;YACF,UAAU,GAAG,MAAM,CAAC,mBAAmB,CACrC,CAAC,GAAkB,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,2DAA2D;gBAC7D,CAAC;YACH,CAAC,EACD,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,SAAS,CACd,CAAC;YACF,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,CAAC;gBACX,aAAa,EAAE,MAAM,CAAC,OAAO;aAC9B,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,+BAA+B;QACrD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,iCAAiC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAClF,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,iEAAiE;IACnE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/bridge/server/tool-metadata.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Extract tool metadata (name + description + parameters) from the
+ * existing `pyric/rules` factories without running any
+ * tool logic. Used by the bridge to register MCP tools whose actual
+ * dispatch happens against the connected browser peer.
+ *
+ * Why: `createFirestoreSimulatorTools` returns `ToolHandler[]` with
+ * `execute` bound to a `LocalEnvironment`. The bridge process doesn't
+ * have a `LocalEnvironment` — it forwards. But it does need the
+ * metadata to populate the MCP server's tool list. This module calls
+ * the factory with a stub resolver and reads only the metadata; the
+ * stub never gets invoked because the bridge replaces `execute`
+ * before dispatch.
+ */
+import type { ToolHandler } from '@inbrowser/agent';
+export interface ToolMetadata {
+    name: string;
+    description: string;
+    parameters: Record<string, unknown>;
+}
+/**
+ * Tool metadata for the sandbox bridge. Includes the
+ * data-plane / sandbox-management tools that the browser dispatches
+ * via `LocalEnvironment`. Rules tooling (lint, validate, simulate,
+ * test) is NOT included here — those execute in Node and are
+ * registered separately, since they don't need the browser sandbox.
+ */
+export declare function getSandboxToolMetadata(): ToolMetadata[];
+/**
+ * Rules tooling factories that execute in-process on the bridge
+ * (no browser needed). Returned as live ToolHandlers — the bridge
+ * registers each handler's `execute` directly.
+ *
+ * `scope` is forwarded so the hosted Rules Test API verification tool can
+ * authenticate without changing the bridge's sandbox-only execution model.
+ */
+export declare function getRulesToolHandlers(scope?: unknown): ToolHandler[];
+//# sourceMappingURL=tool-metadata.d.ts.map

package/dist/bridge/server/tool-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-metadata.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAQpD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAUD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,YAAY,EAAE,CAkCvD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,CAOnE"}

package/dist/bridge/server/tool-metadata.js

@@ -0,0 +1,81 @@
+/**
+ * Extract tool metadata (name + description + parameters) from the
+ * existing `pyric/rules` factories without running any
+ * tool logic. Used by the bridge to register MCP tools whose actual
+ * dispatch happens against the connected browser peer.
+ *
+ * Why: `createFirestoreSimulatorTools` returns `ToolHandler[]` with
+ * `execute` bound to a `LocalEnvironment`. The bridge process doesn't
+ * have a `LocalEnvironment` — it forwards. But it does need the
+ * metadata to populate the MCP server's tool list. This module calls
+ * the factory with a stub resolver and reads only the metadata; the
+ * stub never gets invoked because the bridge replaces `execute`
+ * before dispatch.
+ */
+import { createFirestoreSimulatorTools, createFirestoreRulesTools, } from 'pyric/rules/internal/node';
+import { createFirestoreDataTools, createFirestoreInspectTools } from 'pyric/firestore';
+import { createRtdbInspectionTools } from '../../rtdb/inspection.js';
+function toMetadata(handler) {
+    return {
+        name: handler.name,
+        description: handler.description,
+        parameters: handler.parameters,
+    };
+}
+/**
+ * Tool metadata for the sandbox bridge. Includes the
+ * data-plane / sandbox-management tools that the browser dispatches
+ * via `LocalEnvironment`. Rules tooling (lint, validate, simulate,
+ * test) is NOT included here — those execute in Node and are
+ * registered separately, since they don't need the browser sandbox.
+ */
+export function getSandboxToolMetadata() {
+    // The resolver stub never runs: the bridge replaces execute() with
+    // its own forward-to-peer dispatch.
+    const stubResolver = async () => {
+        throw new Error('BUG: sandbox-tool factory executor invoked on the bridge side — should have been replaced');
+    };
+    const handlers = [
+        // Simulator / write / batch / undo / redo / events / transaction —
+        // 8 tools that mutate or read the in-browser sandbox state.
+        ...createFirestoreSimulatorTools({
+            resolveSandbox: stubResolver,
+        }),
+        // Data plane — addDoc / setDoc / getDoc / updateDoc / deleteDoc /
+        // collection / query / where — the modular Firestore CRUD surface
+        // routed through the browser sandbox so agents can drive a real app
+        // session rather than only the simulator.
+        ...createFirestoreDataTools({
+            resolveDb: stubResolver,
+        }),
+        // `sandbox_inspect` — single-call diagnostic that answers
+        // "what state is the sandbox in?" Born out of CLAUDE_DEBUG_SESSION.md
+        // (a real agent needing 51 tool calls + 72k tokens to figure out
+        // that rules weren't loaded). Routes to the browser sandbox like
+        // the other forwarded tools.
+        ...createFirestoreInspectTools({
+            resolveSandbox: stubResolver,
+        }),
+        ...createRtdbInspectionTools({
+            resolveSandbox: stubResolver,
+        }),
+    ];
+    return handlers.map(toMetadata);
+}
+/**
+ * Rules tooling factories that execute in-process on the bridge
+ * (no browser needed). Returned as live ToolHandlers — the bridge
+ * registers each handler's `execute` directly.
+ *
+ * `scope` is forwarded so the hosted Rules Test API verification tool can
+ * authenticate without changing the bridge's sandbox-only execution model.
+ */
+export function getRulesToolHandlers(scope) {
+    // Factory accepts { scope } per packages/pyric/src/rules/tools.ts.
+    // The bridge does not need to own the structurally compatible type.
+    // Includes simulate / lint / resolve_modules / stdlib_list /
+    // stdlib_get + (when scope is supplied) Rules Test API verification —
+    // the full in-process rules tooling surface. No browser needed.
+    return createFirestoreRulesTools({ scope });
+}
+//# sourceMappingURL=tool-metadata.js.map