@pyric/cli 0.1.0-alpha.9

package/dist/cli/dev-runner.js

@@ -0,0 +1,239 @@
+/**
+ * The `pyric dev` child runner — "one command, not two" (adoption design):
+ * after the host is up, run the user's OWN dev command with the environment
+ * activated so their unchanged firebase-admin/firebase imports resolve to the
+ * pyric sandbox:
+ *
+ *   PYRIC_SANDBOX=remote:<serve url>          (the activator)
+ *   NODE_OPTIONS += --import @pyric/cli/register   (the substitution seam)
+ *
+ * Child-command precedence: explicit `pyric dev -- <cmd>` wins; else the
+ * project package.json `dev` script (via the detected package manager); else
+ * host-only (today's behavior). `--no-run` forces host-only; `--json`
+ * defaults to host-only (an explicit `--` still wins — agents can opt in).
+ *
+ * Everything decision-shaped here is pure and exported for the unit suite;
+ * only `spawnDevChild` touches the process table.
+ */
+import { spawn } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+// ─── First-run race guard ───────────────────────────────────────────────────
+/**
+ * Wait (bounded) for a browser tab to register as the bridge's sandbox peer
+ * before the child spawns. `pyric dev` opens the tab and spawns the child in
+ * the same breath; a child whose first line is a sandbox op otherwise races
+ * the tab's boot and dies on the no-tab fail-fast — the exact first-run of
+ * the two-command story. Polls `/__pyric/health` (`sandboxConnected`).
+ *
+ * Returns true when a peer connected, false on timeout (caller warns and
+ * spawns anyway — the child may not touch the sandbox at all). Injectable
+ * clock/fetch for the unit suite.
+ */
+export async function waitForSandboxPeer(serveUrl, opts = {}) {
+    const timeoutMs = opts.timeoutMs ?? 30_000;
+    const intervalMs = opts.intervalMs ?? 250;
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        try {
+            const res = await fetchImpl(`${serveUrl.replace(/\/$/, '')}/__pyric/health`);
+            if (res.ok) {
+                const health = (await res.json());
+                if (health.sandboxConnected === true)
+                    return true;
+            }
+        }
+        catch {
+            // Health not up yet — keep polling until the deadline.
+        }
+        if (Date.now() >= deadline)
+            return false;
+        await sleep(intervalMs);
+    }
+}
+/** Lockfile sniff, mirroring how init/vendor pick their install hints. */
+export function detectPackageManager(cwd) {
+    if (existsSync(join(cwd, 'bun.lock')) || existsSync(join(cwd, 'bun.lockb')))
+        return 'bun';
+    if (existsSync(join(cwd, 'pnpm-lock.yaml')))
+        return 'pnpm';
+    if (existsSync(join(cwd, 'yarn.lock')))
+        return 'yarn';
+    return 'npm';
+}
+/** The project's `dev` script, or null (no package.json / no script). */
+export function readDevScript(cwd) {
+    try {
+        const pkg = JSON.parse(readFileSync(join(cwd, 'package.json'), 'utf8'));
+        const dev = pkg.scripts?.dev;
+        return typeof dev === 'string' && dev.trim().length > 0 ? dev : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Decide what (if anything) to run after the host is up.
+ *
+ * Matrix:
+ *   --no-run                → null, always
+ *   `-- <cmd>`              → that command (wins over everything else)
+ *   --json (no `--`)        → null (machine mode defaults to host-only)
+ *   package.json dev script → `<pm> run dev`
+ *   none of the above       → null (host-only, today's behavior)
+ *
+ * A `dev` script that itself invokes `pyric dev` is treated as absent —
+ * running it would recurse forever (pyric dev → npm run dev → pyric dev …).
+ */
+export function resolveDevChild(opts) {
+    if (opts.noRun)
+        return null;
+    if (opts.passthrough.length > 0) {
+        return { argv: [...opts.passthrough], label: opts.passthrough.join(' ') };
+    }
+    if (opts.json)
+        return null;
+    if (opts.devScript && !/(^|[\s;&|])pyric\s+dev\b/.test(opts.devScript)) {
+        const label = `${opts.packageManager} run dev`;
+        return { argv: [opts.packageManager, 'run', 'dev'], label };
+    }
+    return null;
+}
+// ─── Environment for the child (pure) ──────────────────────────────────────
+/**
+ * The absolute `file:` URL of the register module, resolved from
+ * @pyric/cli' OWN installed location — `import.meta.resolve` walks this
+ * package's `exports` (self-reference), so it lands on the right file no
+ * matter how the user's node_modules are laid out (hoisted, pnpm-isolated,
+ * vendored). Fallback: relative to this compiled file (dist/cli/ →
+ * dist/register/), for runtimes without a usable import.meta.resolve.
+ */
+export function registerModuleUrl() {
+    try {
+        const url = import.meta.resolve('@pyric/cli/register');
+        if (typeof url === 'string' && url.length > 0)
+            return url;
+    }
+    catch {
+        // fall through
+    }
+    return new URL('../register/index.js', import.meta.url).href;
+}
+/**
+ * Child env: sets the activator and APPENDS the loader to NODE_OPTIONS —
+ * never replaces it (the user's own --inspect / --max-old-space-size etc.
+ * must survive). `file:` URLs are percent-encoded, so no quoting is needed
+ * even for paths with spaces.
+ */
+export function buildChildEnv(base, opts) {
+    const importFlag = `--import ${opts.registerUrl}`;
+    return {
+        ...base,
+        PYRIC_SANDBOX: `remote:${opts.serveUrl}`,
+        NODE_OPTIONS: base.NODE_OPTIONS ? `${base.NODE_OPTIONS} ${importFlag}` : importFlag,
+    };
+}
+// ─── Line prefixing (pure core) ────────────────────────────────────────────
+/**
+ * Incremental line prefixer: every child output line gets `[dev] `, partial
+ * lines are buffered until their newline (or flush at stream end).
+ */
+export function createLinePrefixer(prefix, write) {
+    let buffer = '';
+    return {
+        push(chunk) {
+            buffer += chunk;
+            let nl;
+            while ((nl = buffer.indexOf('\n')) !== -1) {
+                write(`${prefix}${buffer.slice(0, nl)}\n`);
+                buffer = buffer.slice(nl + 1);
+            }
+        },
+        flush() {
+            if (buffer.length > 0) {
+                write(`${prefix}${buffer}\n`);
+                buffer = '';
+            }
+        },
+    };
+}
+/** How long a signalled child may linger before SIGKILL. */
+const FORCE_KILL_AFTER_MS = 2_000;
+/**
+ * Spawn the child with inherited stdin and `[dev]`-prefixed stdout/stderr.
+ * In `--json` mode ALL child output goes to stderr — stdout carries exactly
+ * the one machine line (the serve --json contract).
+ */
+export function spawnDevChild(plan, opts) {
+    const [command, ...args] = plan.argv;
+    const child = spawn(command, args, {
+        cwd: opts.cwd,
+        env: opts.env,
+        stdio: ['inherit', 'pipe', 'pipe'],
+        // Own a process group so shutdown reaches package-manager grandchildren
+        // (for example `bun run dev` -> `node server.js`) rather than orphaning
+        // the actual dev server when only the runner exits.
+        detached: process.platform !== 'win32',
+    });
+    const outTarget = opts.json ? process.stderr : process.stdout;
+    const out = createLinePrefixer('[dev] ', (line) => outTarget.write(line));
+    const err = createLinePrefixer('[dev] ', (line) => process.stderr.write(line));
+    child.stdout?.setEncoding('utf8');
+    child.stderr?.setEncoding('utf8');
+    child.stdout?.on('data', (chunk) => out.push(chunk));
+    child.stderr?.on('data', (chunk) => err.push(chunk));
+    let signalled = false;
+    let forceTimer = null;
+    const killTree = (signal) => {
+        if (process.platform !== 'win32' && child.pid !== undefined) {
+            process.kill(-child.pid, signal);
+        }
+        else {
+            child.kill(signal);
+        }
+    };
+    const exited = new Promise((resolve) => {
+        child.once('error', (e) => {
+            process.stderr.write(`pyric dev: failed to run \`${plan.label}\`: ${e.message}\n`);
+            resolve(1);
+        });
+        child.once('exit', (code, signal) => {
+            out.flush();
+            err.flush();
+            if (forceTimer)
+                clearTimeout(forceTimer);
+            // User-initiated stop (Ctrl-C forwarded) is a clean shutdown → 0.
+            if (signalled)
+                resolve(0);
+            else if (typeof code === 'number')
+                resolve(code);
+            else
+                resolve(signal ? 1 : 0);
+        });
+    });
+    return {
+        exited,
+        child,
+        signal(sig) {
+            if (child.exitCode !== null || signalled)
+                return;
+            signalled = true;
+            try {
+                killTree(sig);
+            }
+            catch {
+                return;
+            }
+            forceTimer = setTimeout(() => {
+                try {
+                    killTree('SIGKILL');
+                }
+                catch { }
+            }, FORCE_KILL_AFTER_MS);
+            forceTimer.unref();
+        },
+    };
+}
+//# sourceMappingURL=dev-runner.js.map

package/dist/cli/dev-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-runner.js","sourceRoot":"","sources":["../../src/cli/dev-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAKI,EAAE;IAEN,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC;YAC7E,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmC,CAAC;gBACpE,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAMD,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAErE,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC;QAC7B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AASD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,IAM/B;IACC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,cAAc,UAAU,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAuB,EACvB,IAA+C;IAE/C,MAAM,UAAU,GAAG,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC;IAClD,OAAO;QACL,GAAG,IAAI;QACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;QACxC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU;KACpF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,KAA6B;IAE7B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO;QACL,IAAI,CAAC,KAAa;YAChB,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,KAAK;YACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,GAAG,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC;gBAC9B,MAAM,GAAG,EAAE,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAaD,4DAA4D;AAC5D,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAkB,EAClB,IAA4D;IAE5D,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAQ,EAAE,IAAI,EAAE;QAClC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;QAClC,wEAAwE;QACxE,wEAAwE;QACxE,oDAAoD;QACpD,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;KACvC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9D,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE7D,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,UAAU,GAAyC,IAAI,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;QAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,UAAU;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;YACzC,kEAAkE;YAClE,IAAI,SAAS;gBAAE,OAAO,CAAC,CAAC,CAAC,CAAC;iBACrB,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;;gBAC5C,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,KAAK;QACL,MAAM,CAAC,GAAmB;YACxB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,SAAS;gBAAE,OAAO;YACjD,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC3B,IAAI,CAAC;oBACH,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,EAAE,mBAAmB,CAAC,CAAC;YACxB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/firebase-json.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Minimal `firebase.json` / `.firebaserc` reader for the CLI.
+ *
+ * Surfaces only the fields the subcommands actually touch — the
+ * full firebase.json schema is huge and a full parse isn't needed
+ * for any current subcommand. New fields land alongside the
+ * subcommand that consumes them.
+ *
+ * `.firebaserc` carries the project id under `projects.default`;
+ * the standard Firebase CLI uses the same convention.
+ */
+export interface FirebaseJson {
+    firestore?: {
+        rules?: string;
+        indexes?: string;
+        database?: string;
+    };
+    /** Realtime Database rules path plus optional explicit instance URL. */
+    database?: {
+        rules?: string;
+        url?: string;
+    };
+    hosting?: unknown;
+    functions?: unknown;
+    /** Storage rules + (optional) target bucket. A single object, or an array for
+     *  multi-bucket projects. `rules` is a path; `bucket` overrides the default
+     *  `{projectId}.firebasestorage.app`. */
+    storage?: {
+        rules?: string;
+        bucket?: string;
+    } | Array<{
+        rules?: string;
+        bucket?: string;
+    }>;
+}
+export interface FirebaseRc {
+    projects?: {
+        default?: string;
+        [alias: string]: string | undefined;
+    };
+    /**
+     * Deploy-target maps, keyed project → resource type → target name →
+     * resource ids (mirrors firebase-tools' RCData,
+     * clones/firebase-tools/src/rc.ts:28-36). Only `hosting` (target →
+     * site ids) is consumed today.
+     */
+    targets?: {
+        [projectId: string]: {
+            [targetType: string]: {
+                [targetName: string]: string[] | undefined;
+            } | undefined;
+        } | undefined;
+    };
+}
+/**
+ * Read + parse `firebase.json` from `cwd`. Throws when missing — every
+ * subcommand that needs project metadata expects a present file.
+ */
+export declare function readFirebaseJson(cwd?: string): Promise<FirebaseJson>;
+/**
+ * Read + parse `.firebaserc` from `cwd`. Returns null when missing —
+ * the project id can also come from `--project` / `PYRIC_PROJECT`, so
+ * absence is not fatal at this layer.
+ */
+export declare function readFirebaseRc(cwd?: string): Promise<FirebaseRc | null>;
+//# sourceMappingURL=firebase-json.d.ts.map

package/dist/cli/firebase-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-json.d.ts","sourceRoot":"","sources":["../../src/cli/firebase-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,wEAAwE;IACxE,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;6CAEyC;IACzC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;KACrC,CAAC;IACF;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QACR,CAAC,SAAS,EAAE,MAAM,GAAG;YACnB,CAAC,UAAU,EAAE,MAAM,GAAG;gBACpB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;aAC5C,GAAG,SAAS,CAAC;SACf,GAAG,SAAS,CAAC;KACf,CAAC;CACH;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAkBzF;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAgB5F"}

package/dist/cli/firebase-json.js

@@ -0,0 +1,60 @@
+/**
+ * Minimal `firebase.json` / `.firebaserc` reader for the CLI.
+ *
+ * Surfaces only the fields the subcommands actually touch — the
+ * full firebase.json schema is huge and a full parse isn't needed
+ * for any current subcommand. New fields land alongside the
+ * subcommand that consumes them.
+ *
+ * `.firebaserc` carries the project id under `projects.default`;
+ * the standard Firebase CLI uses the same convention.
+ */
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * Read + parse `firebase.json` from `cwd`. Throws when missing — every
+ * subcommand that needs project metadata expects a present file.
+ */
+export async function readFirebaseJson(cwd = process.cwd()) {
+    const path = join(cwd, 'firebase.json');
+    let raw;
+    try {
+        raw = await readFile(path, 'utf-8');
+    }
+    catch (e) {
+        if (e.code === 'ENOENT') {
+            throw new Error(`pyric: no firebase.json found at ${path}. Run \`pyric init\` to scaffold one.`);
+        }
+        throw e;
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`pyric: failed to parse firebase.json: ${e instanceof Error ? e.message : String(e)}`);
+    }
+}
+/**
+ * Read + parse `.firebaserc` from `cwd`. Returns null when missing —
+ * the project id can also come from `--project` / `PYRIC_PROJECT`, so
+ * absence is not fatal at this layer.
+ */
+export async function readFirebaseRc(cwd = process.cwd()) {
+    const path = join(cwd, '.firebaserc');
+    let raw;
+    try {
+        raw = await readFile(path, 'utf-8');
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return null;
+        throw e;
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`pyric: failed to parse .firebaserc: ${e instanceof Error ? e.message : String(e)}`);
+    }
+}
+//# sourceMappingURL=firebase-json.js.map

package/dist/cli/firebase-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-json.js","sourceRoot":"","sources":["../../src/cli/firebase-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAyCjC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,uCAAuC,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,yCAAyC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,uCAAuC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/firestore-indexes.d.ts

@@ -0,0 +1,21 @@
+import { mkdir, writeFile } from 'node:fs/promises';
+import { ExtractFirestoreIndexesHandler, type ExtractIndexesOptions } from 'pyric/rules/internal/extract';
+import type { ParsedArgs } from './parse-args.js';
+import { type FirebaseJson } from './firebase-json.js';
+type ExtractResult = ReturnType<ExtractFirestoreIndexesHandler['execute']>;
+export interface FirestoreIndexesDeps {
+    extract?: (options: ExtractIndexesOptions) => ExtractResult;
+    readFirebaseJson?: (cwd: string) => Promise<FirebaseJson>;
+    writeFile?: typeof writeFile;
+    mkdir?: typeof mkdir;
+    cwd?: string;
+    stdout?: {
+        write(s: string): void;
+    };
+    stderr?: {
+        write(s: string): void;
+    };
+}
+export declare function runFirestoreIndexesGenerate(parsed: ParsedArgs, deps?: FirestoreIndexesDeps): Promise<number>;
+export {};
+//# sourceMappingURL=firestore-indexes.d.ts.map

package/dist/cli/firestore-indexes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-indexes.d.ts","sourceRoot":"","sources":["../../src/cli/firestore-indexes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EACL,8BAA8B,EAC9B,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEzE,KAAK,aAAa,GAAG,UAAU,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC,CAAC;AAE3E,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,aAAa,CAAC;IAC5D,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrC;AAED,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,MAAM,CAAC,CA6CjB"}

package/dist/cli/firestore-indexes.js

@@ -0,0 +1,39 @@
+import { mkdir, writeFile } from 'node:fs/promises';
+import { dirname, resolve as resolvePath } from 'node:path';
+import { ExtractFirestoreIndexesHandler, } from 'pyric/rules/internal/extract';
+import { readFirebaseJson } from './firebase-json.js';
+export async function runFirestoreIndexesGenerate(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const cwd = deps.cwd ?? process.cwd();
+    if (parsed.positional.length === 0) {
+        err.write('pyric firestore indexes generate: missing source path. Usage: pyric firestore indexes generate <path...> [--out <path>]\n');
+        return 1;
+    }
+    const extract = deps.extract ??
+        ((options) => new ExtractFirestoreIndexesHandler().execute(options));
+    const result = extract({ paths: parsed.positional.map((path) => resolvePath(cwd, path)) });
+    if (!result.success) {
+        err.write(`pyric firestore indexes generate: ${result.error.message}\n`);
+        return 2;
+    }
+    const outFlag = parsed.flags.get('out');
+    let configuredPath;
+    if (typeof outFlag !== 'string') {
+        try {
+            configuredPath = (await (deps.readFirebaseJson ?? readFirebaseJson)(cwd)).firestore?.indexes;
+        }
+        catch {
+            configuredPath = undefined;
+        }
+    }
+    const outputPath = resolvePath(cwd, typeof outFlag === 'string' ? outFlag : configuredPath ?? 'firestore.indexes.json');
+    await (deps.mkdir ?? mkdir)(dirname(outputPath), { recursive: true });
+    await (deps.writeFile ?? writeFile)(outputPath, `${JSON.stringify(result.data.config, null, 2)}\n`, 'utf-8');
+    out.write(`pyric firestore indexes generate: wrote ${outputPath}\n`);
+    for (const warning of result.data.warnings) {
+        err.write(`pyric firestore indexes generate: warning: ${warning.file}: ${warning.message}\n`);
+    }
+    return 0;
+}
+//# sourceMappingURL=firestore-indexes.js.map

package/dist/cli/firestore-indexes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-indexes.js","sourceRoot":"","sources":["../../src/cli/firestore-indexes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,8BAA8B,GAE/B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,gBAAgB,EAAqB,MAAM,oBAAoB,CAAC;AAczE,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAkB,EAClB,OAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,KAAK,CACP,2HAA2H,CAC5H,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GACX,IAAI,CAAC,OAAO;QACZ,CAAC,CAAC,OAA8B,EAAE,EAAE,CAAC,IAAI,8BAA8B,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,KAAK,CAAC,qCAAqC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,cAAkC,CAAC;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,cAAc,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,GAAG,SAAS,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAC5B,GAAG,EACH,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,wBAAwB,CACnF,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,CACjC,UAAU,EACV,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAClD,OAAO,CACR,CAAC;IAEF,GAAG,CAAC,KAAK,CAAC,2CAA2C,UAAU,IAAI,CAAC,CAAC;IACrE,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,8CAA8C,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+/**
+ * `pyric` CLI — front door to the bridge + project tooling.
+ *
+ * Subcommands:
+ *   pyric bridge [--port N] [--project ID]
+ *   pyric dev [--port N] [--host H] [--no-cache] [--bridge] [--ui] [--seed FILE] [--no-watch] [--no-open] [--no-capture] [--no-run] [--json] [--persist] [--fresh] [-- <cmd>]
+ *   pyric init [dir] [--template web|node] [--name N] [--force] [--json]
+ *   pyric vendor [dir] [--json]
+ *   pyric snapshot [--out FILE] [--port N] [--force] [--json] [--include-passwords]
+ *   pyric mcp
+ *   pyric firestore rules lint <path>
+ *   pyric firestore rules validate <path>
+ *   pyric firestore rules simulate [--stdin]
+ *   pyric firestore rules resolve <path> [--out <path>]
+ *   pyric firestore indexes generate <path...> [--out <path>]
+ *   pyric storage rules lint <path>
+ *   pyric storage rules simulate [--stdin]
+ *   pyric database rules lint <path>
+ *   pyric database rules validate <path>
+ *   pyric database rules simulate [--stdin]
+ *   pyric database rules generate [--config <path>] [--out <path>]
+ *   pyric --help
+ *   pyric --version
+ *
+ * Env vars:
+ *   PYRIC_PORT                       — bridge port (default 5174)
+ *   PYRIC_PROJECT                    — project label for bridge health and audit output
+ *   PYRIC_VERBOSE                    — set to 1 for per-tool-call logging
+ *   FIREBASE_SA_BASE64               — base64-encoded service-account JSON (Rules Test API verify)
+ *   GOOGLE_APPLICATION_CREDENTIALS   — path to service-account JSON (Rules Test API verify)
+ *
+ * Exit codes:
+ *   0  success
+ *   1  usage error
+ *   2  runtime error
+ */
+import { type ParsedArgs } from './parse-args.js';
+/**
+ * Dispatch a parsed CLI invocation to its subcommand handler.
+ * Exported so the test suite can drive the dispatcher directly
+ * without spawning a child process. `process.exit` is not called
+ * here — the caller (the top-level `main()` below) does that.
+ */
+export declare function dispatch(parsed: ParsedArgs): Promise<number>;
+export { parseArgs } from './parse-args.js';
+/**
+ * True when this module is the executable entry rather than an import.
+ *
+ * Bun identifies source and compiled entry points with `import.meta.main`.
+ * Node does not, so compare real paths there: resolving both sides preserves
+ * npm's `node_modules/.bin/pyric` symlink behavior that a textual path check
+ * previously broke.
+ */
+export declare function isDirectRun(): boolean;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAKH,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAwQ7D;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAqClE;AAQD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;GAOG;AACH,wBAAgB,WAAW,IAAI,OAAO,CASrC"}