@pyric/cli 0.1.0-alpha.9

package/dist/serve/entries/ai.js

@@ -0,0 +1,184 @@
+/**
+ * The bundle the import map serves for `firebase/ai`.
+ *
+ * DUAL-PATH (cdd-deltas #98): the FULL `pyric/ai` mirror surface
+ * (GenerativeModel / ChatSession / Schema / enums) always runs in-page —
+ * but ANSWERING follows the sandbox. When a SharedWorker is available, the
+ * broker + engines live in the WORKER HOST, in-process with the ONE shared
+ * sandbox (#98.1): `getAI` plugs a port-forwarding AnswerEngine into the
+ * in-page mirror, so every `generateContent` / `streamGenerateContent` /
+ * `countTokens` rides the worker protocol's `ai.*` ops (#98.3) and the
+ * worker broker's `service: 'ai'` events land on the shared event stream
+ * Studio consumes. Otherwise the mirror runs whole against the in-page
+ * sandbox — the unchanged fallback. Branch picked ONCE at load (`useWorker`).
+ *
+ * OPENAI ENGINE IN THE BROWSER (#98.2): an `engine: { kind: 'openai' }`
+ * config with no `baseUrl` targets serve's same-origin `/__pyric/ai-proxy`
+ * route (which forwards to the configured upstream, default
+ * `http://localhost:11434/v1`) — so a localhost Ollama needs no CORS setup
+ * on EITHER path. A custom AnswerEngine OBJECT can't cross the port and is
+ * rejected in worker mode rather than creating a second page-local backend.
+ * Direct/in-process `pyric/ai` sandboxes still accept custom engines.
+ *
+ * Engine config is per-sandbox (#98.4) and first-call-wins at the worker
+ * host. Each app has its own in-page port wrapper so deleting one app cannot
+ * disconnect a sibling; all wrappers still forward to that one worker broker.
+ * Browser-bundled by `../bundler.ts`; never imported by node-side.
+ */
+import * as ipAi from 'pyric/ai';
+import { aiErrorFromEnvelope } from 'pyric/ai/internal';
+import { getAI as pyricGetAI } from 'pyric/ai';
+import { createTransportAI } from 'pyric/ai/internal';
+import { FirebaseError, getApp } from 'pyric/app';
+import { isSandboxAppDeleted } from 'pyric/app/internal';
+import { aiGenerateContent, aiCountTokens, aiStreamGenerateContent } from '../worker/client.js';
+import { useWorker } from './worker-runtime.js';
+import { workerClientForApp } from './app-client.js';
+// ── Mirror surface — path-independent (the mirror always runs in-page) ────
+export { AIError, AIErrorCode, Backend, BackendType, GoogleAIBackend, VertexAIBackend, AIModel, ChatSession, ChatSessionBase, GenerativeModel, AnyOfSchema, ArraySchema, BooleanSchema, IntegerSchema, NumberSchema, ObjectSchema, Schema, StringSchema, BlockReason, FinishReason, FunctionCallingMode, HarmBlockMethod, HarmBlockThreshold, HarmCategory, HarmProbability, HarmSeverity, ImageConfigAspectRatio, ImageConfigImageSize, Language, Modality, Outcome, POSSIBLE_ROLES, ResponseModality, SchemaType, ThinkingLevel, URLRetrievalStatus, getGenerativeModel, } from 'pyric/ai';
+/** The serve proxy route the browser openai engine defaults to (#98.2). */
+const AI_PROXY_PATH = '/__pyric/ai-proxy';
+/** A custom AnswerEngine object (vs a plain, worker-cloneable EngineConfig). */
+function isAnswerEngine(engine) {
+    return typeof engine.generateContent === 'function';
+}
+/**
+ * Derive the JSON-safe wire config that crosses the port from the app's
+ * `AIOptions.engine`. Predicate script matchers are functions — structured
+ * clone rejects them LOUDLY at send time (never silently dropped).
+ */
+function toEngineWire(engine) {
+    if (!engine || isAnswerEngine(engine))
+        return undefined;
+    const config = engine;
+    if (config.kind === 'openai') {
+        const openai = config;
+        return {
+            kind: 'openai',
+            baseUrl: openai.baseUrl ?? AI_PROXY_PATH,
+            ...(openai.model !== undefined ? { model: openai.model } : {}),
+            ...(openai.modelMap !== undefined ? { modelMap: openai.modelMap } : {}),
+        };
+    }
+    const scripted = config;
+    return {
+        kind: 'scripted',
+        ...(scripted.script !== undefined
+            ? { script: scripted.script }
+            : {}),
+    };
+}
+/** In-page path: default an openai config's absent baseUrl to the proxy. */
+function withProxyDefault(options) {
+    const engine = options?.engine;
+    if (!engine || isAnswerEngine(engine))
+        return options;
+    const config = engine;
+    if (config.kind === 'openai' && config.baseUrl === undefined) {
+        return { ...options, engine: { ...config, baseUrl: AI_PROXY_PATH } };
+    }
+    return options;
+}
+function aiErrorFromWire(err, modelResource, op) {
+    const envelope = err
+        ?.aiEnvelope;
+    return envelope ? aiErrorFromEnvelope(envelope, modelResource, op) : err;
+}
+// ── The port-forwarding AnswerEngine (worker path) ─────────────────────────
+function portEngine(db, engineWire) {
+    const params = (model, request) => ({
+        model,
+        request,
+        ...(engineWire !== undefined ? { engine: engineWire } : {}),
+    });
+    const engine = {
+        async generateContent(req, model) {
+            try {
+                return await aiGenerateContent(db, params(model, req));
+            }
+            catch (err) {
+                throw aiErrorFromWire(err, model, 'generateContent');
+            }
+        },
+        streamGenerateContent(req, model) {
+            const inner = aiStreamGenerateContent(db, params(model, req));
+            return (async function* mapped() {
+                try {
+                    for await (const chunk of inner)
+                        yield chunk;
+                }
+                catch (err) {
+                    throw aiErrorFromWire(err, model, 'streamGenerateContent');
+                }
+            })();
+        },
+        async countTokens(req, model) {
+            try {
+                return await aiCountTokens(db, params(model, req));
+            }
+            catch (err) {
+                throw aiErrorFromWire(err, model, 'countTokens');
+            }
+        },
+    };
+    return engine;
+}
+/**
+ * Firebase constructs an AI handle for a deleted app, but that observation
+ * does not authorize resurrecting the app against an in-page sandbox. Keep
+ * the handle constructible while every model operation stays tombstoned.
+ */
+function deletedAppEngine() {
+    return {
+        async generateContent() {
+            throw deletedAppError();
+        },
+        streamGenerateContent() {
+            return (async function* tombstoned() {
+                throw deletedAppError();
+            })();
+        },
+        async countTokens() {
+            throw deletedAppError();
+        },
+    };
+}
+function deletedAppError() {
+    return new FirebaseError('app/app-deleted', 'Firebase App has already been deleted.');
+}
+// ── getAI — worker-forwarded answering or whole-mirror in-page ─────────────
+function mirrorGetAI(app, options) {
+    const resolved = (app ?? getApp());
+    const ai = pyricGetAI(resolved, options);
+    const target = ai[ipAi.TARGET_SYMBOL];
+    if (target) {
+        // Served entries are separately bundled, so the in-page AI mirror cannot
+        // rely on sharing pyric/app's private adapter singleton. Stamp the target
+        // with the served registry's per-app deletion guard instead. The target is
+        // per app handle even though its broker is shared by the sandbox.
+        target.assertAlive = () => {
+            if (isSandboxAppDeleted(resolved))
+                throw deletedAppError();
+        };
+    }
+    return ai;
+}
+export const getAI = (useWorker
+    ? (app, options) => {
+        const resolved = (app ?? getApp());
+        const engine = options?.engine;
+        const assertAlive = () => {
+            if (isSandboxAppDeleted(resolved))
+                throw deletedAppError();
+        };
+        if (isSandboxAppDeleted(resolved)) {
+            return createTransportAI(resolved, options, deletedAppEngine(), assertAlive);
+        }
+        if (engine && isAnswerEngine(engine)) {
+            throw new ipAi.AIError(ipAi.AIErrorCode.UNSUPPORTED, 'Custom AnswerEngine objects cannot run in SharedWorker mode. ' +
+                "Use a structured { kind: 'scripted' } or { kind: 'openai' } engine config.");
+        }
+        return createTransportAI(resolved, options, portEngine(workerClientForApp(resolved), toEngineWire(engine)), assertAlive);
+    }
+    : (app, options) => mirrorGetAI(app, withProxyDefault(options)));
+//# sourceMappingURL=ai.js.map

package/dist/serve/entries/ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.js","sourceRoot":"","sources":["../../../src/serve/entries/ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,IAAI,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,EAAoB,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,6EAA6E;AAC7E,OAAO,EACL,OAAO,EACP,WAAW,EACX,OAAO,EACP,WAAW,EACX,eAAe,EACf,eAAe,EACf,OAAO,EACP,WAAW,EACX,eAAe,EACf,eAAe,EACf,WAAW,EACX,WAAW,EACX,aAAa,EACb,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAKlB,2EAA2E;AAC3E,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C,gFAAgF;AAChF,SAAS,cAAc,CAAC,MAAoB;IAC1C,OAAO,OAAQ,MAAwC,CAAC,eAAe,KAAK,UAAU,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,MAAgC;IACpD,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,MAAM,GAAG,MAAgF,CAAC;IAChG,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAmD,CAAC;QACnE,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,aAAa;YACxC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAqD,CAAC;IACvE,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAmD,EAAE;YAC1E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,OAAwB;IAChD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,MAAM,MAAM,GAAG,MAA6C,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,aAAa,EAAkB,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,GAAY,EAAE,aAAqB,EAAE,EAAU;IACtE,MAAM,QAAQ,GAAI,GAAyE;QACzF,EAAE,UAAU,CAAC;IACf,OAAO,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3E,CAAC;AAED,8EAA8E;AAE9E,SAAS,UAAU,CAAC,EAAyC,EAAE,UAA0C;IACvG,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,OAAgC,EAAE,EAAE,CAAC,CAAC;QACnE,KAAK;QACL,OAAO;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,MAAM,GAAG;QACb,KAAK,CAAC,eAAe,CAAC,GAA4B,EAAE,KAAa;YAC/D,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,qBAAqB,CAAC,GAA4B,EAAE,KAAa;YAC/D,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM;gBAC5B,IAAI,CAAC;oBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK;wBAAE,MAAM,KAAK,CAAC;gBAC/C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,GAA4B,EAAE,KAAa;YAC3D,IAAI,CAAC;gBACH,OAAO,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;KACF,CAAC;IACF,OAAO,MAAoC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB;IACvB,OAAO;QACL,KAAK,CAAC,eAAe;YACnB,MAAM,eAAe,EAAE,CAAC;QAC1B,CAAC;QACD,qBAAqB;YACnB,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,UAAU;gBAChC,MAAM,eAAe,EAAE,CAAC;YAC1B,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,KAAK,CAAC,WAAW;YACf,MAAM,eAAe,EAAE,CAAC;QAC1B,CAAC;KACiB,CAAC;AACvB,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,aAAa,CACtB,iBAAiB,EACjB,wCAAwC,CACzC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,WAAW,CAClB,GAAY,EACZ,OAAwB;IAExB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,MAAM,EAAE,CAAgB,CAAC;IAClD,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAI,EAEd,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvB,IAAI,MAAM,EAAE,CAAC;QACX,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,CAAC,WAAW,GAAG,GAAG,EAAE;YACxB,IAAI,mBAAmB,CAAC,QAAQ,CAAC;gBAAE,MAAM,eAAe,EAAE,CAAC;QAC7D,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,SAAS;IACP,CAAC,CAAC,CAAC,GAAa,EAAE,OAAwB,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,MAAM,EAAE,CAAgB,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,IAAI,mBAAmB,CAAC,QAAQ,CAAC;gBAAE,MAAM,eAAe,EAAE,CAAC;QAC7D,CAAC,CAAC;QACF,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,iBAAiB,CACtB,QAAQ,EACR,OAAO,EACP,gBAAgB,EAAE,EAClB,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC,OAAO,CACpB,IAAI,CAAC,WAAW,CAAC,WAAW,EAC5B,+DAA+D;gBAC7D,4EAA4E,CAC/E,CAAC;QACJ,CAAC;QACD,OAAO,iBAAiB,CACtB,QAAQ,EACR,OAAO,EACP,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,EAC9D,WAAW,CACZ,CAAC;IACJ,CAAC;IACH,CAAC,CAAC,CAAC,GAAa,EAAE,OAAwB,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CACxE,CAAC"}

package/dist/serve/entries/app-backend.d.ts

@@ -0,0 +1,2 @@
+export declare const sandbox: import("pyric/sandbox").LocalSandbox;
+//# sourceMappingURL=app-backend.d.ts.map

package/dist/serve/entries/app-backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-backend.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/app-backend.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,OAAO,sCAAsB,CAAC"}

package/dist/serve/entries/app-backend.js

@@ -0,0 +1,4 @@
+/** Realm-local placeholder attached to app handles; served services use the worker transport. */
+import { initializeSandbox } from 'pyric/sandbox';
+export const sandbox = initializeSandbox();
+//# sourceMappingURL=app-backend.js.map

package/dist/serve/entries/app-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-backend.js","sourceRoot":"","sources":["../../../src/serve/entries/app-backend.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,CAAC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC"}

package/dist/serve/entries/app-client.d.ts

@@ -0,0 +1,5 @@
+/** Per-app SharedWorker ports: distinct Firebase service containers, one worker backend. */
+import type { FirebaseApp } from 'pyric/app';
+import type { ClientDb } from '../worker/client.js';
+export declare function workerClientForApp(app: FirebaseApp): ClientDb;
+//# sourceMappingURL=app-client.d.ts.map

package/dist/serve/entries/app-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-client.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/app-client.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAOpD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,QAAQ,CAe7D"}

package/dist/serve/entries/app-client.js

@@ -0,0 +1,23 @@
+import { registerAppCleanup } from 'pyric/app/internal';
+import { disconnectClient } from '../worker/client/disconnect.js';
+import { openWorkerDb } from './worker-runtime.js';
+const clients = new WeakMap();
+export function workerClientForApp(app) {
+    const existing = clients.get(app);
+    if (existing)
+        return existing;
+    let client;
+    registerAppCleanup(app, async () => {
+        clients.delete(app);
+        if (client)
+            await disconnectClient(client);
+    });
+    client = openWorkerDb(app.name);
+    client.port.postMessage({
+        t: 'appConfig',
+        options: app.options,
+    });
+    clients.set(app, client);
+    return client;
+}
+//# sourceMappingURL=app-client.js.map

package/dist/serve/entries/app-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-client.js","sourceRoot":"","sources":["../../../src/serve/entries/app-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAyB,CAAC;AAErD,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,MAA4B,CAAC;IACjC,kBAAkB,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACjC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,MAAM;YAAE,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QACtB,CAAC,EAAE,WAAW;QACd,OAAO,EAAE,GAAG,CAAC,OAAkC;KACvB,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/serve/entries/app-session-store.d.ts

@@ -0,0 +1,14 @@
+/** App-owned browser auth-session stores for the served Firebase adapters. */
+import type { FirebaseApp } from 'pyric/app';
+import { SessionStore, type SessionStores } from './session-store.js';
+export interface AppSessionStores {
+    forApp(app: FirebaseApp): SessionStore;
+}
+/**
+ * Build an app-identity-keyed store registry. The durable key inside each
+ * SessionStore remains app-name-keyed, so deleting/recreating an app can
+ * restore the same session while its in-memory mode/callback state is fresh.
+ */
+export declare function createAppSessionStores(stores: SessionStores): AppSessionStores;
+export declare function sessionStoreForApp(app: FirebaseApp): SessionStore;
+//# sourceMappingURL=app-session-store.d.ts.map

package/dist/serve/entries/app-session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-session-store.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/app-session-store.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,YAAY,CAAC;CACxC;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAY9E;AAkBD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,YAAY,CAEjE"}

package/dist/serve/entries/app-session-store.js

@@ -0,0 +1,37 @@
+import { registerAppCleanup } from 'pyric/app/internal';
+import { SessionStore } from './session-store.js';
+/**
+ * Build an app-identity-keyed store registry. The durable key inside each
+ * SessionStore remains app-name-keyed, so deleting/recreating an app can
+ * restore the same session while its in-memory mode/callback state is fresh.
+ */
+export function createAppSessionStores(stores) {
+    const byApp = new WeakMap();
+    return {
+        forApp(app) {
+            const existing = byApp.get(app);
+            if (existing)
+                return existing;
+            const store = new SessionStore(stores, app.name);
+            byApp.set(app, store);
+            registerAppCleanup(app, () => { byApp.delete(app); });
+            return store;
+        },
+    };
+}
+function memoryStorage() {
+    const values = new Map();
+    return {
+        getItem: (key) => values.get(key) ?? null,
+        setItem: (key, value) => { values.set(key, value); },
+        removeItem: (key) => { values.delete(key); },
+    };
+}
+const browserStores = typeof localStorage !== 'undefined' && typeof sessionStorage !== 'undefined'
+    ? { local: localStorage, session: sessionStorage }
+    : { local: memoryStorage(), session: memoryStorage() };
+const servedStores = createAppSessionStores(browserStores);
+export function sessionStoreForApp(app) {
+    return servedStores.forApp(app);
+}
+//# sourceMappingURL=app-session-store.js.map

package/dist/serve/entries/app-session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-session-store.js","sourceRoot":"","sources":["../../../src/serve/entries/app-session-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAsB,MAAM,oBAAoB,CAAC;AAMtE;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqB;IAC1D,MAAM,KAAK,GAAG,IAAI,OAAO,EAA6B,CAAC;IACvD,OAAO;QACL,MAAM,CAAC,GAAG;YACR,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACjD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI;QACzC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GACjB,OAAO,YAAY,KAAK,WAAW,IAAI,OAAO,cAAc,KAAK,WAAW;IAC1E,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE;IAClD,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC;AAE3D,MAAM,YAAY,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAE3D,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IACjD,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC"}

package/dist/serve/entries/app.d.ts

@@ -0,0 +1,2 @@
+export * from 'pyric/app';
+//# sourceMappingURL=app.d.ts.map

package/dist/serve/entries/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/app.ts"],"names":[],"mappings":"AAUA,cAAc,WAAW,CAAC"}

package/dist/serve/entries/app.js

@@ -0,0 +1,10 @@
+/** Served `firebase/app`: the exact Pyric client registry over the page runtime. */
+import { bindAppRegistrySandbox } from 'pyric/app/internal';
+import { sandbox } from './app-backend.js';
+// Keep this entry free of dynamic imports: ServiceWorkerGlobalScope supports
+// static module imports but rejects dynamic import(). The attached sandbox is
+// only the app handle's realm-local placeholder; served service calls route to
+// the SharedWorker (directly in Window, via BroadcastChannel in a real SW).
+bindAppRegistrySandbox(sandbox);
+export * from 'pyric/app';
+//# sourceMappingURL=app.js.map

package/dist/serve/entries/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/serve/entries/app.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAEhC,cAAc,WAAW,CAAC"}

package/dist/serve/entries/auth-helper-core.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Framework-free provider account picker controller for `pyric dev`.
+ *
+ * The controller is intentionally backend-agnostic. It receives an identity
+ * directory and returns a Firebase-shaped credential; it never constructs an
+ * Auth handle or mutates a Sandbox. In SharedWorker mode the directory reads
+ * the worker's user pool and the picked credential is committed by
+ * `auth.acceptIdentity`. The in-page fallback supplies a small adapter over its
+ * local auth user store.
+ */
+import type { AuthFlowRequest, AuthFlowResolver } from 'pyric/auth';
+export interface NewIdentitySpec {
+    email: string;
+    displayName?: string;
+    /** Parsed custom claims (the emulator's `customAttributes`). */
+    customClaims?: Record<string, unknown>;
+}
+export interface HelperIdentity {
+    uid: string;
+    email: string | null;
+    displayName: string | null;
+    customClaims: Record<string, unknown>;
+}
+export interface HelperIdentityDirectory {
+    list(): HelperIdentity[] | Promise<HelperIdentity[]>;
+    /** Optional on the worker path: `auth.acceptIdentity` performs the write. */
+    add?(identity: HelperIdentity): void | Promise<void>;
+}
+export interface HelperSnapshot {
+    /** The in-flight request, or null when no popup/redirect is pending. */
+    request: AuthFlowRequest | null;
+    identities: readonly HelperIdentity[];
+}
+export declare class ServeAuthHelper {
+    private readonly directory;
+    private pending;
+    private readonly listeners;
+    private cached;
+    private identities;
+    constructor(directory: HelperIdentityDirectory);
+    resolver(): AuthFlowResolver;
+    subscribe(fn: () => void): () => void;
+    snapshot(): HelperSnapshot;
+    private emit;
+    private refreshIdentities;
+    pick(uid: string): void;
+    add(spec: NewIdentitySpec): void;
+    cancel(): void;
+    private take;
+    private credential;
+}
+//# sourceMappingURL=auth-helper-core.d.ts.map

package/dist/serve/entries/auth-helper-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helper-core.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/auth-helper-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAGjB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,IAAI,cAAc,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACrD,6EAA6E;IAC7E,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;CACvC;AAQD,qBAAa,eAAe;IAMd,OAAO,CAAC,QAAQ,CAAC,SAAS;IALtC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,UAAU,CAAwB;gBAEb,SAAS,EAAE,uBAAuB;IAI/D,QAAQ,IAAI,gBAAgB;IAW5B,SAAS,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAKrC,QAAQ,IAAI,cAAc;IAQ1B,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,iBAAiB;IAwBzB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAWvB,GAAG,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAehC,MAAM,IAAI,IAAI;IAWd,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,UAAU;CAiBnB"}

package/dist/serve/entries/auth-helper-core.js

@@ -0,0 +1,118 @@
+export class ServeAuthHelper {
+    directory;
+    pending = null;
+    listeners = new Set();
+    cached = null;
+    identities = [];
+    constructor(directory) {
+        this.directory = directory;
+        this.refreshIdentities();
+    }
+    resolver() {
+        const open = (req) => new Promise((resolve, reject) => {
+            if (this.pending)
+                this.cancel();
+            this.pending = { req, resolve, reject };
+            this.emit();
+            this.refreshIdentities();
+        });
+        return { openPopup: open, openRedirect: open };
+    }
+    subscribe(fn) {
+        this.listeners.add(fn);
+        return () => this.listeners.delete(fn);
+    }
+    snapshot() {
+        this.cached ??= {
+            request: this.pending?.req ?? null,
+            identities: this.identities,
+        };
+        return this.cached;
+    }
+    emit() {
+        this.cached = null;
+        for (const listener of this.listeners)
+            listener();
+    }
+    refreshIdentities() {
+        try {
+            const listed = this.directory.list();
+            if (listed instanceof Promise) {
+                void listed.then((identities) => {
+                    this.identities = identities;
+                    this.emit();
+                }, (error) => {
+                    const pending = this.take();
+                    pending?.reject(error);
+                });
+            }
+            else {
+                this.identities = listed;
+                this.emit();
+            }
+        }
+        catch (error) {
+            const pending = this.take();
+            pending?.reject(error);
+        }
+    }
+    pick(uid) {
+        const pending = this.take();
+        if (!pending)
+            return;
+        const identity = this.identities.find((candidate) => candidate.uid === uid);
+        if (!identity) {
+            pending.reject(authError('auth/internal-error', `unknown identity ${uid}`));
+            return;
+        }
+        pending.resolve(this.credential(identity, pending.req.providerId));
+    }
+    add(spec) {
+        const pending = this.take();
+        if (!pending)
+            return;
+        const identity = {
+            uid: `${pending.req.providerId}:${spec.email}`,
+            email: spec.email,
+            displayName: spec.displayName ?? null,
+            customClaims: spec.customClaims ?? {},
+        };
+        void Promise.resolve(this.directory.add?.(identity)).then(() => pending.resolve(this.credential(identity, pending.req.providerId)), pending.reject);
+    }
+    cancel() {
+        const pending = this.take();
+        if (!pending)
+            return;
+        pending.reject(authError('auth/popup-closed-by-user', 'The popup has been closed by the user before finalizing the operation.'));
+    }
+    take() {
+        const pending = this.pending;
+        this.pending = null;
+        this.emit();
+        return pending;
+    }
+    credential(identity, providerId) {
+        const user = {
+            uid: identity.uid,
+            email: identity.email,
+            displayName: identity.displayName,
+            isAnonymous: false,
+            getIdToken: async () => `pyric-serve-${identity.uid}`,
+            getIdTokenResult: async () => ({
+                token: `pyric-serve-${identity.uid}`,
+                claims: { sub: identity.uid, ...identity.customClaims },
+                expirationTime: new Date(Date.now() + 3600_000).toISOString(),
+                issuedAtTime: new Date().toISOString(),
+                authTime: new Date().toISOString(),
+            }),
+        };
+        return { user, providerId, operationType: 'signIn' };
+    }
+}
+function authError(code, message) {
+    const error = new Error(message);
+    error.name = 'FirebaseError';
+    error.code = code;
+    return error;
+}
+//# sourceMappingURL=auth-helper-core.js.map

package/dist/serve/entries/auth-helper-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helper-core.js","sourceRoot":"","sources":["../../../src/serve/entries/auth-helper-core.ts"],"names":[],"mappings":"AAiDA,MAAM,OAAO,eAAe;IAMG;IALrB,OAAO,GAAmB,IAAI,CAAC;IACtB,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IAC3C,MAAM,GAA0B,IAAI,CAAC;IACrC,UAAU,GAAqB,EAAE,CAAC;IAE1C,YAA6B,SAAkC;QAAlC,cAAS,GAAT,SAAS,CAAyB;QAC7D,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED,QAAQ;QACN,MAAM,IAAI,GAAG,CAAC,GAAoB,EAA2B,EAAE,CAC7D,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,IAAI,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACL,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IAED,SAAS,CAAC,EAAc;QACtB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,MAAM,KAAK;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI;YAClC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAC;IACpD,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;gBAC9B,KAAK,MAAM,CAAC,IAAI,CACd,CAAC,UAAU,EAAE,EAAE;oBACb,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;oBAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;oBACR,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzB,CAAC,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;gBACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAW;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAAE,oBAAoB,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,GAAG,CAAC,IAAqB;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,QAAQ,GAAmB;YAC/B,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,EAAE;YAC9C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;SACtC,CAAC;QACF,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CACvD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EACxE,OAAO,CAAC,MAAM,CACf,CAAC;IACJ,CAAC;IAED,MAAM;QACJ,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,MAAM,CACZ,SAAS,CACP,2BAA2B,EAC3B,wEAAwE,CACzE,CACF,CAAC;IACJ,CAAC;IAEO,IAAI;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,UAAU,CAAC,QAAwB,EAAE,UAAkB;QAC7D,MAAM,IAAI,GAAS;YACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,QAAQ,CAAC,GAAG,EAAE;YACrD,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC7B,KAAK,EAAE,eAAe,QAAQ,CAAC,GAAG,EAAE;gBACpC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE;gBACvD,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE;gBAC7D,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACnC,CAAC;SACH,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IACvD,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,OAAe;IAC9C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAA6B,CAAC;IAC7D,KAAK,CAAC,IAAI,GAAG,eAAe,CAAC;IAC7B,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/serve/entries/auth-helper-dom.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The `<dialog>` shell over {@link ServeAuthHelper} — pyric dev's analog
+ * of the Auth emulator's sign-in widget. Pure-DOM (no framework): renders an
+ * account picker + an add-account form (email, display name, custom-claims
+ * JSON — emulator parity, `customAttributes`), opens when a popup/redirect
+ * request parks in the helper, closes on settle. Backdrop/Escape cancel →
+ * `auth/popup-closed-by-user` via the core.
+ *
+ * Verified through the scripted browser gate (the bun suite covers the core;
+ * this file is intentionally view-only).
+ */
+import type { ServeAuthHelper } from './auth-helper-core.js';
+export declare function mountAuthHelperDialog(helper: ServeAuthHelper): void;
+//# sourceMappingURL=auth-helper-dom.d.ts.map

package/dist/serve/entries/auth-helper-dom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helper-dom.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/auth-helper-dom.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA8B7D,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CA4FnE"}