@pyric/cli 0.1.0-alpha.9

package/dist/serve/worker/client/auth.js

@@ -0,0 +1,322 @@
+/**
+ * Worker-client Auth surface — mirrors `pyric/auth` / `firebase/auth` over the
+ * port. Per-port sessions (#754): each port owns its own session; the client
+ * keeps a local `currentUser` mirror updated from the authState stream while the
+ * worker owns the real `User` and token minting.
+ */
+import { closeSubscription, isDisconnectedPort, nextId, nextSubId, openSnapshotSubscription, rpc, wirePort } from './core.js';
+/** Hidden per-`ClientUser` port handle so the top-level `updateProfile(user, …)`
+ *  free function can RPC without an `auth` handle in scope (mirrors
+ *  `firebase/auth`'s user-only signature). Non-enumerable — never serialized. */
+const CLIENT_USER_PORT = Symbol('pyric.clientUser.port');
+/** Build a token-capable ClientUser from a wire SerializedUser. */
+function makeClientUser(port, raw) {
+    const user = {
+        uid: raw.uid,
+        email: raw.email,
+        emailVerified: raw.emailVerified,
+        displayName: raw.displayName,
+        photoURL: raw.photoURL,
+        phoneNumber: raw.phoneNumber,
+        isAnonymous: raw.isAnonymous,
+        providerId: raw.providerId,
+        providerData: raw.providerData,
+        async getIdToken(forceRefresh) {
+            return (await rpc(port, {
+                t: 'op', id: nextId(), method: 'auth.getIdToken', forceRefresh,
+            }));
+        },
+        async getIdTokenResult(forceRefresh) {
+            return (await rpc(port, {
+                t: 'op', id: nextId(), method: 'auth.getIdTokenResult', forceRefresh,
+            }));
+        },
+    };
+    Object.defineProperty(user, CLIENT_USER_PORT, { value: port, enumerable: false });
+    return user;
+}
+/** Convert a wire SerializedUser|null to a ClientUser|null. */
+function toClientUser(port, raw) {
+    return raw ? makeClientUser(port, raw) : null;
+}
+/**
+ * Get the worker-backed Auth handle.
+ *
+ * Mirrors `pyric/auth`'s `getAuth(sandbox)` / `firebase/auth`'s
+ * `getAuth(app)` — but the input is either an existing `ClientDb` (reusing
+ * its port, the common case in serve where Firestore + auth share one
+ * worker) or a worker URL (standalone).
+ *
+ * The returned handle seeds its `currentUser` mirror by opening an internal
+ * authState subscription that keeps it live across tabs.
+ */
+export function getAuth(source, name) {
+    let port;
+    if (typeof source === 'object' && '__kind' in source && source.__kind === 'client-db') {
+        port = source.port;
+    }
+    else {
+        if (typeof SharedWorker === 'undefined') {
+            throw new Error('SharedWorker is not available. ' +
+                'Open this page over http:// (not file://) and use a supported browser ' +
+                '(Chrome 4+, Firefox 29+, Safari 16.4+).');
+        }
+        const worker = new SharedWorker(source, {
+            type: 'classic',
+            name: name ?? 'pyric-shared-worker',
+        });
+        port = worker.port;
+        port.start();
+        wirePort(port);
+    }
+    const auth = { __kind: 'client-auth', port, currentUser: null };
+    // Internal authState subscription keeps `auth.currentUser` live. Per-port
+    // sessions (#754): only THIS port's sign-ins/outs (and its session restore)
+    // fire here — another tab's sign-in is another user, not an update to us.
+    const subId = nextSubId();
+    openSnapshotSubscription(port, subId, {
+        port,
+        next: (raw) => {
+            auth.currentUser = toClientUser(port, raw);
+        },
+    }, { t: 'sub', subId, target: 'authState' });
+    return auth;
+}
+/**
+ * Connect to the auth emulator. No-op shim over the worker: the worker's
+ * sandbox IS the emulator-equivalent backend, so there's nothing to point at.
+ * Present for surface parity so app code that calls it doesn't break.
+ */
+export function connectAuthEmulator(_auth, _url, _options) {
+    // Intentional no-op — the worker's sandbox is the local auth backend.
+}
+// ─── Sign-in / out / create (RPC) ─────────────────────────────────────────
+export async function createUserWithEmailAndPassword(auth, email, password) {
+    const raw = (await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.createUser', email, password,
+    }));
+    return hydrateCred(auth, raw);
+}
+// ─── Admin user-DB ops (Pyric Studio data browse) ─────────────────────────
+// Mirror `pyric/auth`'s `sandbox.{listUsers,createUser,updateUser,deleteUser,
+// clearUsers}` over the port. No lens (admin control surface), so bare `rpc`.
+export async function listUsers(auth) {
+    return (await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.listUsers',
+    }));
+}
+export async function adminCreateUser(auth, request) {
+    return (await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.adminCreateUser',
+        request: request,
+    }));
+}
+export async function adminUpdateUser(auth, uid, request) {
+    return (await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.adminUpdateUser', uid,
+        request: request,
+    }));
+}
+export async function adminDeleteUser(auth, uid) {
+    await rpc(auth.port, { t: 'op', id: nextId(), method: 'auth.adminDeleteUser', uid });
+}
+export async function adminClearUsers(auth) {
+    await rpc(auth.port, { t: 'op', id: nextId(), method: 'auth.adminClearUsers' });
+}
+// ─── Sign-in provider config (Pyric Studio S-AUTH) ────────────────────────
+// Mirror `pyric/auth`'s `sandbox.{getAuthProviderConfig,setAuthProviderConfig}`
+// over the port. No dedicated subscription: `setProviderConfig` fires a
+// `provider_config_update` sandbox event, so a caller re-reads via
+// `getProviderConfig` on the SAME event feed `listUsers` callers already
+// subscribe to (see `worker-live.ts`'s `subscribeUsers`).
+export async function getProviderConfig(auth) {
+    return (await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.getProviderConfig',
+    }));
+}
+export async function setProviderConfig(auth, providerId, enabled) {
+    await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.setProviderConfig', providerId, enabled,
+    });
+}
+export async function signInWithEmailAndPassword(auth, email, password) {
+    const raw = (await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.signInEmail', email, password,
+    }));
+    return hydrateCred(auth, raw);
+}
+export async function signInAnonymously(auth) {
+    const raw = (await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.signInAnonymously',
+    }));
+    return hydrateCred(auth, raw);
+}
+export async function signOut(auth) {
+    if (isDisconnectedPort(auth.port)) {
+        auth.currentUser = null;
+        return;
+    }
+    await rpc(auth.port, { t: 'op', id: nextId(), method: 'auth.signOut' });
+    // The authState stream will also clear the mirror; set eagerly so a
+    // synchronous read right after `await signOut()` reflects the change.
+    auth.currentUser = null;
+}
+/**
+ * Bridge a provider identity resolved IN-PAGE to the worker (the provider
+ * sign-in seam). The entry adapter's worker-path `signInWithPopup`/
+ * `signInWithRedirect` runs the in-page `AuthFlowResolver` (which can't cross
+ * the worker port), then calls this with the picked identity; the worker seeds
+ * it + signs it in, returning a worker-backed credential. The mirror updates
+ * eagerly (like the email/anon paths) so a synchronous `auth.currentUser`
+ * read right after the await reflects the new user.
+ */
+export async function acceptProviderCredential(auth, identity) {
+    const raw = (await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.acceptIdentity', identity,
+    }));
+    return hydrateCred(auth, raw);
+}
+/**
+ * Re-establish THIS PORT's session for an existing identity (#754) — the
+ * per-tab reload restore. The page persists its uid in web storage
+ * (SessionStore); runtime.ts calls this at boot BEFORE app code runs. Soft:
+ * returns null (and leaves the port signed out) when the uid no longer
+ * resolves, so a stale record never throws.
+ */
+export async function restorePortSession(auth, uid) {
+    const raw = (await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.restorePortSession', uid,
+    }));
+    const user = toClientUser(auth.port, raw);
+    if (user)
+        auth.currentUser = user;
+    return user;
+}
+function hydrateCred(auth, raw) {
+    const user = makeClientUser(auth.port, raw.user);
+    // Eagerly update the mirror so `auth.currentUser` is correct immediately
+    // after the await, before the broadcast stream lands.
+    auth.currentUser = user;
+    return { user, providerId: raw.providerId, operationType: raw.operationType };
+}
+// ─── Persistence ──────────────────────────────────────────────────────────
+/** Persistence markers — mirror `firebase/auth` / `pyric/auth`. */
+export const inMemoryPersistence = { type: 'NONE' };
+export const browserSessionPersistence = { type: 'SESSION' };
+export const browserLocalPersistence = { type: 'LOCAL' };
+/**
+ * Record the session-persistence mode on the worker (surface parity). The
+ * effective persistence is CLIENT-side (#754): the entry adapter mirrors the
+ * mode into the page's SessionStore, which decides where — or whether — this
+ * tab's session uid is stored for reload restore.
+ */
+export async function setPersistence(auth, persistence) {
+    await rpc(auth.port, {
+        t: 'op', id: nextId(), method: 'auth.setPersistence', mode: persistence.type,
+    });
+}
+// ─── Observers (streaming subs) ────────────────────────────────────────────
+/**
+ * Subscribe to auth-state changes. Mirrors `firebase/auth`'s
+ * `onAuthStateChanged`. Fires immediately with THIS PORT's current session,
+ * then on every change to it (#754: sessions are per-port — another tab's
+ * sign-in is a different user, not an update to this one). Updates the
+ * handle's `currentUser` mirror before invoking the callback.
+ */
+export function onAuthStateChanged(auth, callback) {
+    return openAuthSub(auth, 'authState', callback);
+}
+/**
+ * Subscribe to ID-token changes. Mirrors `firebase/auth`'s
+ * `onIdTokenChanged` — fires on THIS PORT's identity transitions (per-port
+ * sessions, #754).
+ */
+export function onIdTokenChanged(auth, callback) {
+    return openAuthSub(auth, 'idToken', callback);
+}
+function openAuthSub(auth, target, callback) {
+    const subId = nextSubId();
+    const port = auth.port;
+    openSnapshotSubscription(port, subId, {
+        port,
+        next: (raw) => {
+            const user = toClientUser(port, raw);
+            auth.currentUser = user;
+            callback(user);
+        },
+    }, { t: 'sub', subId, target });
+    return () => {
+        closeSubscription(port, subId);
+    };
+}
+// ─── Token accessors (top-level mirrors) ──────────────────────────────────
+/** Top-level mirror of `firebase/auth`'s `getIdToken(user)`. */
+export async function getIdToken(user, forceRefresh) {
+    return user.getIdToken(forceRefresh);
+}
+/** Top-level mirror of `firebase/auth`'s `getIdTokenResult(user)`. */
+export async function getIdTokenResult(user, forceRefresh) {
+    return user.getIdTokenResult(forceRefresh);
+}
+/**
+ * Top-level mirror of `firebase/auth`'s `updateProfile(user, profile)` over
+ * the worker. RPCs `auth.updateProfile` for THIS PORT's session (the worker
+ * owns the real `User`), then mutates the passed `user` mirror in place with
+ * the returned fields so a synchronous read right after the await is
+ * consistent. `null` clears a field; an absent field is left untouched.
+ *
+ * The port is recovered from the hidden {@link CLIENT_USER_PORT} handle stamped
+ * on every `ClientUser`, so this works without an `auth` handle in scope.
+ */
+export async function updateProfile(user, profile) {
+    const port = user[CLIENT_USER_PORT];
+    if (!port) {
+        const err = new Error('updateProfile: unrecognized user — was it produced by a worker-path sign-in?');
+        err.code = 'auth/invalid-user-token';
+        throw err;
+    }
+    const raw = (await rpc(port, {
+        t: 'op', id: nextId(), method: 'auth.updateProfile',
+        displayName: profile.displayName, photoURL: profile.photoURL,
+    }));
+    // Mutate the passed mirror in place (readonly at the type level, plain data
+    // at runtime) so held references reflect the change immediately.
+    const mutable = user;
+    mutable.displayName = raw.displayName;
+    mutable.photoURL = raw.photoURL;
+    mutable.providerData = raw.providerData;
+}
+// ─── Provider flows — NOT supported over the worker yet ───────────────────
+/**
+ * Provider sign-in (`signInWithCredential`, `signInWithPopup`,
+ * `signInWithRedirect`) needs the AuthFlowResolver, which lives in-page and
+ * can't cross the worker port. NOT SUPPORTED over the SharedWorker in v1 —
+ * a clear error rather than silent breakage. Tracked as a Phase 2 follow-up:
+ * thread the resolver through, or run provider flows in-page and hand the
+ * resulting credential to the worker.
+ */
+export function signInWithCredential() {
+    return Promise.reject(makeUnsupported('signInWithCredential'));
+}
+/**
+ * `beforeAuthStateChanged` gates a LOCAL identity transition — the
+ * worker owns the shared user pool + fires the real transition on its
+ * own side of the port, so a page-local gate registered here would
+ * either never run (silently useless) or run too late to actually
+ * block anything. Rather than accept a callback that quietly does
+ * nothing, fail loudly at registration time — same defensive pattern
+ * as {@link signInWithCredential}. Follow-up: thread registration
+ * through the worker RPC protocol so the gate can run host-side before
+ * the worker commits a transition.
+ */
+export function beforeAuthStateChanged() {
+    throw makeUnsupported('beforeAuthStateChanged');
+}
+function makeUnsupported(api) {
+    const err = new Error(`${api} is not supported over the SharedWorker yet (provider flows need ` +
+        'the in-page AuthFlowResolver). Follow-up: thread the resolver through or ' +
+        'run the flow in-page and hand the credential to the worker.');
+    err.code = 'auth/operation-not-supported-in-this-environment';
+    return err;
+}
+//# sourceMappingURL=auth.js.map

package/dist/serve/worker/client/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../src/serve/worker/client/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,wBAAwB,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AA4D9H;;iFAEiF;AACjF,MAAM,gBAAgB,GAAkB,MAAM,CAAC,uBAAuB,CAAC,CAAC;AAExE,mEAAmE;AACnE,SAAS,cAAc,CAAC,IAAgB,EAAE,GAAmB;IAC3D,MAAM,IAAI,GAAe;QACvB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,KAAK,CAAC,UAAU,CAAC,YAAsB;YACrC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE;gBACtB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY;aAC/D,CAAC,CAAW,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,YAAsB;YAC3C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE;gBACtB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,YAAY;aACrE,CAAC,CAA4B,CAAC;QACjC,CAAC;KACF,CAAC;IACF,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,SAAS,YAAY,CAAC,IAAgB,EAAE,GAA0B;IAChE,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,OAAO,CAAC,MAA+B,EAAE,IAAa;IACpE,IAAI,IAAgB,CAAC;IACrB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACtF,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,iCAAiC;gBACjC,wEAAwE;gBACxE,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAsB,EAAE;YACtD,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI,IAAI,qBAAqB;SACpC,CAAC,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAe,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAE5E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,wBAAwB,CAAC,IAAI,EAAE,KAAK,EAAE;QACpC,IAAI;QACJ,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;YACZ,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,GAA4B,CAAC,CAAC;QACtE,CAAC;KACF,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAA2B,CAAC,CAAC;IAEtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAiB,EACjB,IAAY,EACZ,QAAwC;IAExC,sEAAsE;AACxE,CAAC;AAED,6EAA6E;AAE7E,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,IAAgB,EAChB,KAAa,EACb,QAAgB;IAEhB,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAChC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ;KAClE,CAAC,CAA6B,CAAC;IAChC,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAC3B,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,gBAAgB;KAChD,CAAC,CAAqB,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,OAA0B;IAE1B,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAC3B,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,sBAAsB;QACrD,OAAO,EAAE,OAA6C;KACvD,CAAC,CAAmB,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,GAAW,EACX,OAA0B;IAE1B,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAC3B,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,GAAG;QAC1D,OAAO,EAAE,OAA6C;KACvD,CAAC,CAAmB,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAgB,EAAE,GAAW;IACjE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAgB;IACpD,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,6EAA6E;AAC7E,gFAAgF;AAChF,wEAAwE;AACxE,mEAAmE;AACnE,yEAAyE;AACzE,0DAA0D;AAE1D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAgB;IAEhB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAC3B,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,wBAAwB;KACxD,CAAC,CAAoD,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAgB,EAChB,UAAkB,EAClB,OAAgB;IAEhB,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QACnB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,UAAU,EAAE,OAAO;KAC7E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAgB,EAChB,KAAa,EACb,QAAgB;IAEhB,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAChC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,QAAQ;KACnE,CAAC,CAA6B,CAAC;IAChC,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAgB;IACtD,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAChC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,wBAAwB;KACxD,CAAC,CAA6B,CAAC;IAChC,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAgB;IAC5C,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,OAAO;IACT,CAAC;IACD,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACxE,oEAAoE;IACpE,sEAAsE;IACtE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAgB,EAChB,QAA0B;IAE1B,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAChC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,QAAQ;KAC/D,CAAC,CAA6B,CAAC;IAChC,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAgB,EAChB,GAAW;IAEX,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAChC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,GAAG;KAC9D,CAAC,CAA0B,CAAC;IAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,IAAI;QAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAgB,EAAE,GAA6B;IAClE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,yEAAyE;IACzE,sDAAsD;IACtD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;AAChF,CAAC;AAED,6EAA6E;AAE7E,mEAAmE;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,IAAI,EAAE,MAAM,EAAW,CAAC;AAE7D,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,IAAI,EAAE,SAAS,EAAW,CAAC;AAEtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,IAAI,EAAE,OAAO,EAAW,CAAC;AAIlE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAgB,EAChB,WAA8B;IAE9B,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QACnB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI;KAC7E,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAgB,EAChB,QAA2C;IAE3C,OAAO,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAgB,EAChB,QAA2C;IAE3C,OAAO,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAClB,IAAgB,EAChB,MAA+B,EAC/B,QAA2C;IAE3C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAEvB,wBAAwB,CAAC,IAAI,EAAE,KAAK,EAAE;QACpC,IAAI;QACJ,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;YACZ,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,GAA4B,CAAC,CAAC;YAC9D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;KACF,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAA2B,CAAC,CAAC;IAEzD,OAAO,GAAG,EAAE;QACV,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAgB,EAAE,YAAsB;IACvE,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAgB,EAChB,YAAsB;IAEtB,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAgB,EAChB,OAAkE;IAElE,MAAM,IAAI,GAAI,IAA4C,CAAC,gBAAgB,CAAC,CAAC;IAC7E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,8EAA8E,CACnD,CAAC;QAC9B,GAAG,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACrC,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE;QAC3B,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,oBAAoB;QACnD,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC7D,CAAC,CAAmB,CAAC;IACtB,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,OAAO,GAAG,IAA4D,CAAC;IAC7E,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IACtC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAChC,OAAO,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;AAC1C,CAAC;AAED,6EAA6E;AAE7E;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,eAAe,CAAC,wBAAwB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,GAAG,GAAG,mEAAmE;QACzE,2EAA2E;QAC3E,6DAA6D,CAClC,CAAC;IAC9B,GAAG,CAAC,IAAI,GAAG,kDAAkD,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/serve/worker/client/connection.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Worker-client connection + lifecycle — open the SharedWorker port, query the
+ * worker's version/instance, drive state export/import + named branches, forward
+ * agent tool-calls, and relay raw worker-protocol frames from the bridge peer.
+ */
+import type { WorkerOpPayload, WorkerSubPayload } from '../../../bridge/protocol.js';
+import type { ClientDb } from './handles.js';
+/**
+ * Connect to the SharedWorker and return a client Firestore handle.
+ *
+ * Pass the URL of the SharedWorker script as `workerUrl`. Under `pyric dev`
+ * this is `/__pyric/sdk/worker.js`; for tests or standalone use, pass the path
+ * explicitly.
+ *
+ * `getFirestore` mirrors `pyric/firestore`'s `getFirestore(sandbox)` shape
+ * but returns a `ClientDb` backed by a `MessagePort` instead of a sandbox.
+ */
+export declare function getFirestore(workerUrl: string | URL, name?: string): ClientDb;
+/**
+ * Ask the worker for its baked build version (staleness guard). The page
+ * compares it to the served bundle version and warns when a still-running OLD
+ * worker is older than what's served (a SharedWorker can't hot-update).
+ */
+export declare function getWorkerVersion(db: ClientDb): Promise<string>;
+/**
+ * Ask the worker for its stable per-instance id (see host `INSTANCE_ID_KEY`).
+ * Studio renders a human-friendly form so a user can tell which sandbox instance
+ * they're looking at — the same `localhost:<port>` in a different browser profile
+ * is a SEPARATE sandbox (a separate SharedWorker + IndexedDB), and this is how
+ * the two are told apart.
+ */
+export declare function getWorkerInstanceId(db: ClientDb): Promise<string>;
+/**
+ * Phase 2 (transfer): export the FULL sandbox state as a portable bundle string
+ * (the chunk format the persist layer uses, so wrapper types round-trip). Save
+ * it to a file and {@link importWorkerState} it into another instance.
+ */
+export declare function exportWorkerState(db: ClientDb): Promise<string>;
+/** Phase 2 (clobber): replace this sandbox's ENTIRE state with `bundle`. */
+export declare function importWorkerState(db: ClientDb, bundle: string): Promise<void>;
+/** Phase 3: save the live sandbox as a named branch (a saved state bundle). */
+export declare function saveWorkerBranch(db: ClientDb, name: string): Promise<void>;
+/** Phase 3: list this instance's saved branch names. */
+export declare function listWorkerBranches(db: ClientDb): Promise<string[]>;
+/** Phase 3 (clobber): switch the live sandbox to a named branch's state. */
+export declare function switchWorkerBranch(db: ClientDb, name: string): Promise<void>;
+/** Phase 3: delete a named branch. */
+export declare function deleteWorkerBranch(db: ClientDb, name: string): Promise<void>;
+/**
+ * Forward an agent tool-call to the worker so it executes against the SAME
+ * sandbox the app + Studio use. The worker runs the canonical tool dispatcher
+ * (`buildSandboxDispatcher`) and replies with the `{ ok, summary, data }`
+ * result. Used by the bridge peer on the worker path (`connectBridgePeer` in
+ * `entries/runtime.ts`) so the agent shares the one authoritative sandbox.
+ */
+export declare function callTool(db: ClientDb, name: string, args: Record<string, unknown>): Promise<{
+    ok: boolean;
+    summary: string;
+    data?: unknown;
+}>;
+/**
+ * Relay one raw worker-protocol op into the SharedWorker. `op` is the op
+ * message minus `t`/`id` (the `WorkerOpPayload` wire shape); resolves with
+ * the worker's `res.value`, rejects with an Error carrying `.code`.
+ */
+export declare function relayWorkerOp(db: ClientDb, op: WorkerOpPayload): Promise<unknown>;
+/**
+ * Relay a raw worker-protocol subscription into the SharedWorker. `sub` is
+ * the sub message minus `t`/`subId` (the `WorkerSubPayload` wire shape).
+ * `onValue` receives every snap value VERBATIM — including the worker host's
+ * `{ __error: { code, message } }` establishment-failure convention (listener
+ * errors are re-wrapped into the same shape so the far side sees one form).
+ * Returns the unsubscribe function.
+ *
+ * The unified event stream (`target: 'events'`) is NOT relayable yet — its
+ * history batches aren't coalescible, so it needs bounded backpressure first
+ * (slice 2).
+ */
+export declare function relayWorkerSub(db: ClientDb, sub: WorkerSubPayload, onValue: (value: unknown) => void): () => void;
+//# sourceMappingURL=connection.d.ts.map

package/dist/serve/worker/client/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../../../src/serve/worker/client/connection.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAUrF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAI7C;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAgB7E;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAGpE;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvE;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAGrE;AAED,4EAA4E;AAC5E,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnF;AAED,+EAA+E;AAC/E,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF;AAED,wDAAwD;AACxD,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGxE;AAED,4EAA4E;AAC5E,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAElF;AAED,sCAAsC;AACtC,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAElF;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC5B,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAM3D;AAWD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAKjF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,QAAQ,EACZ,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAChC,MAAM,IAAI,CA0BZ"}

package/dist/serve/worker/client/connection.js

@@ -0,0 +1,148 @@
+/**
+ * Worker-client connection + lifecycle — open the SharedWorker port, query the
+ * worker's version/instance, drive state export/import + named branches, forward
+ * agent tool-calls, and relay raw worker-protocol frames from the bridge peer.
+ */
+import { nextId, nextSubId, wirePort, rpc, rawRpc, openSnapshotSubscription, closeSubscription, } from './core.js';
+// ─── Public API ────────────────────────────────────────────────────────────
+/**
+ * Connect to the SharedWorker and return a client Firestore handle.
+ *
+ * Pass the URL of the SharedWorker script as `workerUrl`. Under `pyric dev`
+ * this is `/__pyric/sdk/worker.js`; for tests or standalone use, pass the path
+ * explicitly.
+ *
+ * `getFirestore` mirrors `pyric/firestore`'s `getFirestore(sandbox)` shape
+ * but returns a `ClientDb` backed by a `MessagePort` instead of a sandbox.
+ */
+export function getFirestore(workerUrl, name) {
+    if (typeof SharedWorker === 'undefined') {
+        throw new Error('SharedWorker is not available. ' +
+            'Open this page over http:// (not file://) and use a supported browser ' +
+            '(Chrome 4+, Firefox 29+, Safari 16.4+).');
+    }
+    const worker = new SharedWorker(workerUrl, {
+        type: 'classic',
+        name: name ?? 'pyric-shared-worker',
+    });
+    const port = worker.port;
+    port.start();
+    wirePort(port);
+    return { __kind: 'client-db', port };
+}
+/**
+ * Ask the worker for its baked build version (staleness guard). The page
+ * compares it to the served bundle version and warns when a still-running OLD
+ * worker is older than what's served (a SharedWorker can't hot-update).
+ */
+export async function getWorkerVersion(db) {
+    const r = (await rpc(db.port, { t: 'op', id: nextId(), method: 'getVersion' }));
+    return r.version;
+}
+/**
+ * Ask the worker for its stable per-instance id (see host `INSTANCE_ID_KEY`).
+ * Studio renders a human-friendly form so a user can tell which sandbox instance
+ * they're looking at — the same `localhost:<port>` in a different browser profile
+ * is a SEPARATE sandbox (a separate SharedWorker + IndexedDB), and this is how
+ * the two are told apart.
+ */
+export async function getWorkerInstanceId(db) {
+    const r = (await rpc(db.port, { t: 'op', id: nextId(), method: 'getVersion' }));
+    return r.instanceId ?? '';
+}
+/**
+ * Phase 2 (transfer): export the FULL sandbox state as a portable bundle string
+ * (the chunk format the persist layer uses, so wrapper types round-trip). Save
+ * it to a file and {@link importWorkerState} it into another instance.
+ */
+export async function exportWorkerState(db) {
+    const r = (await rpc(db.port, { t: 'op', id: nextId(), method: 'exportState' }));
+    return r.bundle;
+}
+/** Phase 2 (clobber): replace this sandbox's ENTIRE state with `bundle`. */
+export async function importWorkerState(db, bundle) {
+    await rpc(db.port, { t: 'op', id: nextId(), method: 'importState', bundle });
+}
+/** Phase 3: save the live sandbox as a named branch (a saved state bundle). */
+export async function saveWorkerBranch(db, name) {
+    await rpc(db.port, { t: 'op', id: nextId(), method: 'saveBranch', name });
+}
+/** Phase 3: list this instance's saved branch names. */
+export async function listWorkerBranches(db) {
+    const r = (await rpc(db.port, { t: 'op', id: nextId(), method: 'listBranches' }));
+    return r.branches ?? [];
+}
+/** Phase 3 (clobber): switch the live sandbox to a named branch's state. */
+export async function switchWorkerBranch(db, name) {
+    await rpc(db.port, { t: 'op', id: nextId(), method: 'switchBranch', name });
+}
+/** Phase 3: delete a named branch. */
+export async function deleteWorkerBranch(db, name) {
+    await rpc(db.port, { t: 'op', id: nextId(), method: 'deleteBranch', name });
+}
+/**
+ * Forward an agent tool-call to the worker so it executes against the SAME
+ * sandbox the app + Studio use. The worker runs the canonical tool dispatcher
+ * (`buildSandboxDispatcher`) and replies with the `{ ok, summary, data }`
+ * result. Used by the bridge peer on the worker path (`connectBridgePeer` in
+ * `entries/runtime.ts`) so the agent shares the one authoritative sandbox.
+ */
+export async function callTool(db, name, args) {
+    return (await rpc(db.port, { t: 'tool', id: nextId(), name, args }));
+}
+// ─── Generic worker relay (remote sandbox, slice 1) ────────────────────────
+//
+// The bridge peer forwards `worker-op` / `worker-sub` frames from the Node
+// side (`connectRemoteSandbox`) into the SharedWorker through these two
+// functions (see `workerRelay` in `bridge/client/bridge.ts` + the wiring in
+// `entries/runtime.ts`). Ids are re-minted LOCALLY (`nextId`/`nextSubId`) so
+// relayed traffic shares this page's pending/sub maps without any chance of
+// colliding with the page's own ids — the bridge correlates by ITS frame id.
+/**
+ * Relay one raw worker-protocol op into the SharedWorker. `op` is the op
+ * message minus `t`/`id` (the `WorkerOpPayload` wire shape); resolves with
+ * the worker's `res.value`, rejects with an Error carrying `.code`.
+ */
+export function relayWorkerOp(db, op) {
+    // rawRpc, NOT rpc: relayed frames must pass verbatim — the declared op
+    // source (`setOpIssuer`) covers only ops THIS client constructs, so
+    // bridge-relayed admin/agent traffic is never mislabeled as Studio's.
+    return rawRpc(db.port, { ...op, t: 'op', id: nextId() });
+}
+/**
+ * Relay a raw worker-protocol subscription into the SharedWorker. `sub` is
+ * the sub message minus `t`/`subId` (the `WorkerSubPayload` wire shape).
+ * `onValue` receives every snap value VERBATIM — including the worker host's
+ * `{ __error: { code, message } }` establishment-failure convention (listener
+ * errors are re-wrapped into the same shape so the far side sees one form).
+ * Returns the unsubscribe function.
+ *
+ * The unified event stream (`target: 'events'`) is NOT relayable yet — its
+ * history batches aren't coalescible, so it needs bounded backpressure first
+ * (slice 2).
+ */
+export function relayWorkerSub(db, sub, onValue) {
+    if (sub.target === 'events') {
+        throw new Error('event-stream subscriptions cannot be relayed over the bridge yet (needs bounded backpressure — slice 2)');
+    }
+    const subId = nextSubId();
+    const opened = openSnapshotSubscription(db.port, subId, {
+        port: db.port,
+        next: onValue,
+        error: (err) => onValue({
+            __error: {
+                code: err.code ?? 'unknown',
+                message: err instanceof Error ? err.message : String(err),
+            },
+        }),
+    }, { ...sub, t: 'sub', subId });
+    if (!opened) {
+        queueMicrotask(() => onValue({
+            __error: { code: 'app/app-deleted', message: 'Firebase App was deleted' },
+        }));
+    }
+    return () => {
+        closeSubscription(db.port, subId);
+    };
+}
+//# sourceMappingURL=connection.js.map

package/dist/serve/worker/client/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../../../src/serve/worker/client/connection.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EACL,MAAM,EACN,SAAS,EACT,QAAQ,EACR,GAAG,EACH,MAAM,EACN,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAGnB,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,SAAuB,EAAE,IAAa;IACjE,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,iCAAiC;YACjC,wEAAwE;YACxE,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,SAAS,EAAE;QACzC,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI,IAAI,qBAAqB;KACpC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,KAAK,EAAE,CAAC;IACb,QAAQ,CAAC,IAAI,CAAC,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAY;IACjD,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAwB,CAAC;IACvG,OAAO,CAAC,CAAC,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAY;IACpD,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAA4B,CAAC;IAC3G,OAAO,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAY;IAClD,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAuB,CAAC;IACvG,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAY,EAAE,MAAc;IAClE,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAY,EAAE,IAAY;IAC/D,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAY;IACnD,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAA4B,CAAC;IAC7G,OAAO,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAY,EAAE,IAAY;IACjE,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,sCAAsC;AACtC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAY,EAAE,IAAY;IACjE,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,EAAY,EACZ,IAAY,EACZ,IAA6B;IAE7B,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAIlE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAY,EAAE,EAAmB;IAC7D,uEAAuE;IACvE,oEAAoE;IACpE,sEAAsE;IACtE,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAoB,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAY,EACZ,GAAqB,EACrB,OAAiC;IAEjC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;QACtD,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,OAAO,CAAC;YACN,OAAO,EAAE;gBACP,IAAI,EAAG,GAAyB,CAAC,IAAI,IAAI,SAAS;gBAClD,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC1D;SACF,CAAC;KACL,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAoB,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,cAAc,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,0BAA0B,EAAE;SAC1E,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO,GAAG,EAAE;QACV,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC"}