@pyric/cli 0.1.0-alpha.9

package/dist/serve/worker/client/core.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Worker-client transport core — the shared singleton machinery every API
+ * family (firestore, auth, rtdb, storage) rides on: port wiring, RPC
+ * correlation, the pending/subscriber maps, the Pyric Studio auth-lens default,
+ * and the op-source (issuer) stamp.
+ *
+ * This module owns the client's mutable module state. Because ES module
+ * bindings are live, family modules import `_defaultLens` (and the maps) and
+ * observe every `setLens(...)` update through the same singleton — exactly as
+ * they did when all of this lived inline in `client.ts`.
+ */
+import type { InboundMessage } from '../protocol.js';
+import type { AuthLens, SandboxEvent } from 'pyric/sandbox';
+import type { ClientPort } from './handles.js';
+export declare function nextId(): string;
+export declare function nextSubId(): string;
+/**
+ * Pending RPC resolvers. Keyed by correlation id.
+ * Resolves with the `value` field on success; rejects with a typed error
+ * on failure.
+ */
+export declare const _pending: Map<string, {
+    port: ClientPort;
+    resolve: (v: unknown) => void;
+    reject: (e: Error & {
+        code: string;
+    }) => void;
+}>;
+/**
+ * Active snapshot subscribers. Keyed by subId.
+ * `next` is the user-supplied callback; `error` is the optional error handler.
+ */
+export declare const _snapSubs: Map<string, {
+    port: ClientPort;
+    next: (snap: unknown) => void;
+    error?: (err: unknown) => void;
+    /** Firestore listeners abort on app deletion; RTDB/Auth stop silently. */
+    service?: "firestore";
+}>;
+/**
+ * Active event-stream subscribers (Pyric Studio keystone). Keyed by subId.
+ * `next` receives each delivered BATCH of `SandboxEvent`s — the first batch is
+ * the initial `history()` snapshot, subsequent batches are single live events.
+ */
+export declare const _eventSubs: Map<string, {
+    port: ClientPort;
+    next: (events: readonly SandboxEvent[]) => void;
+}>;
+export declare function isDisconnectedPort(port: ClientPort): boolean;
+/** Atomically register and post a subscription unless its app port is closed. */
+export declare function openSnapshotSubscription(port: ClientPort, subId: string, subscription: (typeof _snapSubs extends Map<string, infer T> ? T : never), message: InboundMessage): boolean;
+/** Atomically register an event-stream subscription unless its port is closed. */
+export declare function openEventSubscription(port: ClientPort, subId: string, next: (events: readonly SandboxEvent[]) => void, message: InboundMessage): boolean;
+/** Remove a local subscription and notify only a live app port. */
+export declare function closeSubscription(port: ClientPort, subId: string): void;
+/** Drop every client-side correlation owned by a closing app port. */
+export declare function disconnectPort(port: ClientPort): void;
+/** Wire up the port's onmessage handler (idempotent per-port). */
+export declare function wirePort(port: ClientPort): void;
+/** Module-level default lens. `undefined` ⇒ the worker treats the op as the
+ *  app's session (the additive default — existing senders omit `actAs`).
+ *
+ *  Exported as a LIVE binding: family modules read it to stamp the lens onto
+ *  subscriptions (`onSnapshot`, `rtdbOnValue`), and see `setLens(...)` updates
+ *  through this one singleton. */
+export declare let _defaultLens: AuthLens | undefined;
+/**
+ * Set the default auth lens applied to subsequent Firestore DATA ops from this
+ * client (Pyric Studio). Pass `{ mode: 'as', uid }` to read/write AS a user
+ * (rules apply), `{ mode: 'admin' }` for the admin lens, or
+ * `{ mode: 'app-session' }` / `undefined` to revert to the app's own session.
+ *
+ * The lens is process-wide for this client module (one served page = one
+ * worker port), mirroring how Studio drives a single active identity at a time.
+ * Auth ops are unaffected — they always operate the real session.
+ */
+export declare function setLens(lens: AuthLens | undefined): void;
+/** The active default lens (read-only view), for Studio UI to reflect state. */
+export declare function getLens(): AuthLens | undefined;
+/** Declare who issues the ops this client module constructs. See {@link _opIssuer}. */
+export declare function setOpIssuer(source: 'studio' | undefined): void;
+/** Stamp the declared op source onto a client-constructed message. Ops and
+ *  subscriptions only — control frames (`tool`, `unsub`) never carry it
+ *  (agent tool-calls dispatched through this port must not inherit
+ *  Studio's source; their inner ops are attributed by the host). */
+export declare function stampIssuer<T extends {
+    t?: string;
+}>(msg: T): T;
+/**
+ * Send an already-final message and return a promise for its result — no
+ * stamping. The RELAY path ({@link relayWorkerOp}) sends through this so
+ * remote frames pass verbatim.
+ */
+export declare function rawRpc(port: ClientPort, msg: InboundMessage): Promise<unknown>;
+/** Send a CLIENT-CONSTRUCTED message: stamps the declared op source, then sends. */
+export declare function rpc(port: ClientPort, msg: InboundMessage): Promise<unknown>;
+/**
+ * Like {@link rpc} but stamps the active default auth lens onto the op message
+ * (Pyric Studio). Used by data-service ops so a `setLens(...)` choice
+ * carries per op without every call site threading `actAs`. Auth ops + version
+ * use the bare {@link rpc} so they never carry a lens.
+ *
+ * `actAs` is only attached when a lens is active — when none is set the wire
+ * message is byte-identical to before, preserving the additive contract.
+ */
+export declare function dataRpc(port: ClientPort, msg: InboundMessage & {
+    t: 'op';
+}): Promise<unknown>;
+//# sourceMappingURL=core.d.ts.map

package/dist/serve/worker/client/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../../src/serve/worker/client/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,gBAAgB,CAAC;AAItE,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAO/C,wBAAgB,MAAM,IAAI,MAAM,CAAiC;AACjE,wBAAgB,SAAS,IAAI,MAAM,CAAmC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,QAAQ;UACb,UAAU;aACP,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI;YACrB,CAAC,CAAC,EAAE,KAAK,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI;EAC3C,CAAC;AAEL;;;GAGG;AACH,eAAO,MAAM,SAAS;UACd,UAAU;UACV,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI;YACrB,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI;IAC9B,0EAA0E;cAChE,WAAW;EACnB,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,UAAU;UACf,UAAU;UACV,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,KAAK,IAAI;EAC7C,CAAC;AAOL,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAE5D;AAED,iFAAiF;AACjF,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,CAAC,OAAO,SAAS,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,EACzE,OAAO,EAAE,cAAc,GACtB,OAAO,CAKT;AAED,kFAAkF;AAClF,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,KAAK,IAAI,EAC/C,OAAO,EAAE,cAAc,GACtB,OAAO,CAKT;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAMvE;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAoBrD;AAED,kEAAkE;AAClE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAyD/C;AAeD;;;;;kCAKkC;AAClC,eAAO,IAAI,YAAY,EAAE,QAAQ,GAAG,SAAS,CAAC;AAE9C;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAExD;AAED,gFAAgF;AAChF,wBAAgB,OAAO,IAAI,QAAQ,GAAG,SAAS,CAE9C;AAmBD,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAE9D;AAED;;;oEAGoE;AACpE,wBAAgB,WAAW,CAAC,CAAC,SAAS;IAAE,CAAC,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAI/D;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAW9E;AAED,oFAAoF;AACpF,wBAAgB,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAE3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,GAAG;IAAE,CAAC,EAAE,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ7F"}

package/dist/serve/worker/client/core.js

@@ -0,0 +1,248 @@
+import { FirebaseError } from 'pyric/app';
+// ─── Port + correlation machinery ─────────────────────────────────────────
+let _opCounter = 0;
+let _subCounter = 0;
+export function nextId() { return `op-${++_opCounter}`; }
+export function nextSubId() { return `sub-${++_subCounter}`; }
+/**
+ * Pending RPC resolvers. Keyed by correlation id.
+ * Resolves with the `value` field on success; rejects with a typed error
+ * on failure.
+ */
+export const _pending = new Map();
+/**
+ * Active snapshot subscribers. Keyed by subId.
+ * `next` is the user-supplied callback; `error` is the optional error handler.
+ */
+export const _snapSubs = new Map();
+/**
+ * Active event-stream subscribers (Pyric Studio keystone). Keyed by subId.
+ * `next` receives each delivered BATCH of `SandboxEvent`s — the first batch is
+ * the initial `history()` snapshot, subsequent batches are single live events.
+ */
+export const _eventSubs = new Map();
+const disconnectedPorts = new WeakSet();
+function appDeletedError() {
+    return Object.assign(new Error('Firebase App was deleted'), { code: 'app/app-deleted' });
+}
+export function isDisconnectedPort(port) {
+    return disconnectedPorts.has(port);
+}
+/** Atomically register and post a subscription unless its app port is closed. */
+export function openSnapshotSubscription(port, subId, subscription, message) {
+    if (disconnectedPorts.has(port))
+        return false;
+    _snapSubs.set(subId, subscription);
+    port.postMessage(message);
+    return true;
+}
+/** Atomically register an event-stream subscription unless its port is closed. */
+export function openEventSubscription(port, subId, next, message) {
+    if (disconnectedPorts.has(port))
+        return false;
+    _eventSubs.set(subId, { port, next });
+    port.postMessage(message);
+    return true;
+}
+/** Remove a local subscription and notify only a live app port. */
+export function closeSubscription(port, subId) {
+    _snapSubs.delete(subId);
+    _eventSubs.delete(subId);
+    if (!disconnectedPorts.has(port)) {
+        port.postMessage({ t: 'unsub', subId });
+    }
+}
+/** Drop every client-side correlation owned by a closing app port. */
+export function disconnectPort(port) {
+    disconnectedPorts.add(port);
+    const error = appDeletedError();
+    for (const [id, pending] of [..._pending]) {
+        if (pending.port !== port)
+            continue;
+        _pending.delete(id);
+        pending.reject(error);
+    }
+    for (const [id, subscription] of [..._snapSubs]) {
+        if (subscription.port !== port)
+            continue;
+        _snapSubs.delete(id);
+        if (subscription.service === 'firestore') {
+            subscription.error?.(new FirebaseError('aborted', 'The operation was aborted.'));
+        }
+    }
+    for (const [id, subscription] of [..._eventSubs]) {
+        if (subscription.port !== port)
+            continue;
+        _eventSubs.delete(id);
+    }
+    port.onmessage = null;
+}
+/** Wire up the port's onmessage handler (idempotent per-port). */
+export function wirePort(port) {
+    port.onmessage = (ev) => {
+        const msg = ev.data;
+        if (msg.t === 'res') {
+            const pending = _pending.get(msg.id);
+            if (!pending)
+                return;
+            _pending.delete(msg.id);
+            if (msg.ok) {
+                pending.resolve(msg.value);
+            }
+            else {
+                const err = new Error(msg.error.message);
+                err.code = msg.error.code;
+                // Structured denial context (spike gap 6): re-attach so consumers —
+                // and the bridge relay, which re-serializes thrown errors — see the
+                // same shape a local SandboxError carries.
+                if (msg.error.denialContext !== undefined) {
+                    err.denialContext = msg.error.denialContext;
+                }
+                // AI wire error envelope (pyric/ai): re-attach so the served
+                // `firebase/ai` entry can mint the exact SDK AIError decoration the
+                // in-process plane applies (see entries/ai.ts).
+                if (msg.error.aiEnvelope !== undefined) {
+                    err.aiEnvelope = msg.error.aiEnvelope;
+                }
+                pending.reject(err);
+            }
+        }
+        else if (msg.t === 'snap') {
+            const sub = _snapSubs.get(msg.subId);
+            if (!sub)
+                return;
+            // Auth snaps carry `SerializedUser | null` — a null value is a valid
+            // "signed out" payload, not an error, so guard the __error sniff.
+            const value = (msg.value ?? {});
+            if (value.__error) {
+                const errPayload = value.__error;
+                const err = new Error(errPayload.message);
+                err.code = errPayload.code;
+                if (errPayload.denialContext !== undefined)
+                    err.denialContext = errPayload.denialContext;
+                if (errPayload.aiEnvelope !== undefined)
+                    err.aiEnvelope = errPayload.aiEnvelope;
+                // Surface an unobserved listener error instead of swallowing it — the
+                // worker-path twin of the in-page default (a denied listener after a
+                // rules change / sign-out must not fail silently on the page console).
+                if (sub.error)
+                    sub.error(err);
+                else
+                    console.error('pyric/firestore: Uncaught Error in snapshot listener:', err);
+                return;
+            }
+            sub.next(msg.value);
+        }
+        else if (msg.t === 'event') {
+            // Event-stream batch (Pyric Studio keystone). Plain JSON SandboxEvents —
+            // no rehydration. Deliver the whole batch to the registered subscriber.
+            const subscription = _eventSubs.get(msg.subId);
+            if (subscription)
+                subscription.next(msg.events);
+        }
+    };
+}
+// ─── Auth lens (Pyric Studio) ──────────────────────────────────────────────
+//
+// The default per-op auth lens carried on every FIRESTORE DATA op this client
+// sends. The host resolves a data handle from it (`lensDb` in host.ts):
+//   - `{ mode: 'app-session' }` (the default): the served app's own session.
+//   - `{ mode: 'as', uid }`: impersonate — rules evaluate as that user.
+//   - `{ mode: 'admin' }`: admin lens (rule bypass; see host.ts gap note).
+//
+// Studio sets this so its data grids / rules-debug "re-run as user" views run
+// under the chosen identity without threading `actAs` through every call. AUTH
+// ops (`auth.*`) and `getVersion` are NEVER lensed — they operate the worker's
+// session, not data — so the lens is stamped only on the data-op path.
+/** Module-level default lens. `undefined` ⇒ the worker treats the op as the
+ *  app's session (the additive default — existing senders omit `actAs`).
+ *
+ *  Exported as a LIVE binding: family modules read it to stamp the lens onto
+ *  subscriptions (`onSnapshot`, `rtdbOnValue`), and see `setLens(...)` updates
+ *  through this one singleton. */
+export let _defaultLens;
+/**
+ * Set the default auth lens applied to subsequent Firestore DATA ops from this
+ * client (Pyric Studio). Pass `{ mode: 'as', uid }` to read/write AS a user
+ * (rules apply), `{ mode: 'admin' }` for the admin lens, or
+ * `{ mode: 'app-session' }` / `undefined` to revert to the app's own session.
+ *
+ * The lens is process-wide for this client module (one served page = one
+ * worker port), mirroring how Studio drives a single active identity at a time.
+ * Auth ops are unaffected — they always operate the real session.
+ */
+export function setLens(lens) {
+    _defaultLens = lens && lens.mode === 'app-session' ? undefined : lens;
+}
+/** The active default lens (read-only view), for Studio UI to reflect state. */
+export function getLens() {
+    return _defaultLens;
+}
+/**
+ * Module-level op-source declaration (Pyric Studio traffic attribution).
+ * When set, every op/sub message THIS CLIENT MODULE CONSTRUCTS is stamped
+ * `source: 'studio'` on the wire; the host maps that onto the unified
+ * event stream's `actor` field so Traffic can filter Studio's own
+ * viewer/editor ops out of the app's stream.
+ *
+ * Studio's live plane sets this once at connect (`connectWorkerLive`);
+ * the served APP page never calls it (its service handles remain the source
+ * of app attribution), and RELAYED frames bypass Studio stamping entirely — the bridge
+ * relay ({@link relayWorkerOp} / {@link relayWorkerSub}) forwards remote
+ * frames verbatim through {@link rawRpc} / a direct postMessage, so a
+ * user's own admin-SDK traffic through the remote bridge is never
+ * mislabeled as Studio's even though it rides the same port.
+ */
+let _opIssuer;
+/** Declare who issues the ops this client module constructs. See {@link _opIssuer}. */
+export function setOpIssuer(source) {
+    _opIssuer = source;
+}
+/** Stamp the declared op source onto a client-constructed message. Ops and
+ *  subscriptions only — control frames (`tool`, `unsub`) never carry it
+ *  (agent tool-calls dispatched through this port must not inherit
+ *  Studio's source; their inner ops are attributed by the host). */
+export function stampIssuer(msg) {
+    return _opIssuer && (msg.t === 'op' || msg.t === 'sub')
+        ? { ...msg, issuer: _opIssuer }
+        : msg;
+}
+/**
+ * Send an already-final message and return a promise for its result — no
+ * stamping. The RELAY path ({@link relayWorkerOp}) sends through this so
+ * remote frames pass verbatim.
+ */
+export function rawRpc(port, msg) {
+    if (disconnectedPorts.has(port))
+        return Promise.reject(appDeletedError());
+    return new Promise((resolve, reject) => {
+        const opMsg = msg;
+        _pending.set(opMsg.id, {
+            port,
+            resolve,
+            reject: reject,
+        });
+        port.postMessage(msg);
+    });
+}
+/** Send a CLIENT-CONSTRUCTED message: stamps the declared op source, then sends. */
+export function rpc(port, msg) {
+    return rawRpc(port, stampIssuer(msg));
+}
+/**
+ * Like {@link rpc} but stamps the active default auth lens onto the op message
+ * (Pyric Studio). Used by data-service ops so a `setLens(...)` choice
+ * carries per op without every call site threading `actAs`. Auth ops + version
+ * use the bare {@link rpc} so they never carry a lens.
+ *
+ * `actAs` is only attached when a lens is active — when none is set the wire
+ * message is byte-identical to before, preserving the additive contract.
+ */
+export function dataRpc(port, msg) {
+    if (disconnectedPorts.has(port) && !msg.method.startsWith('rtdb.')) {
+        return Promise.reject(new FirebaseError('failed-precondition', 'The client has already been terminated.'));
+    }
+    const withLens = _defaultLens ? { ...msg, actAs: _defaultLens } : msg;
+    return rpc(port, withLens);
+}
+//# sourceMappingURL=core.js.map

package/dist/serve/worker/client/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../../src/serve/worker/client/core.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,6EAA6E;AAE7E,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB,MAAM,UAAU,MAAM,KAAa,OAAO,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AACjE,MAAM,UAAU,SAAS,KAAa,OAAO,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAI3B,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,EAM5B,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,EAG7B,CAAC;AACL,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAc,CAAC;AAEpD,SAAS,eAAe;IACtB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAgB;IACjD,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,wBAAwB,CACtC,IAAgB,EAChB,KAAa,EACb,YAAyE,EACzE,OAAuB;IAEvB,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACnC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,qBAAqB,CACnC,IAAgB,EAChB,KAAa,EACb,IAA+C,EAC/C,OAAuB;IAEvB,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,IAAgB,EAAE,KAAa;IAC/D,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAA2B,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;QAChD,IAAI,YAAY,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QACzC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,YAAY,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACzC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,aAAa,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC;QACjD,IAAI,YAAY,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QACzC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;AACxB,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,QAAQ,CAAC,IAAgB;IACvC,IAAI,CAAC,SAAS,GAAG,CAAC,EAAiC,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC;QACpB,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAItC,CAAC;gBACF,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC1B,oEAAoE;gBACpE,oEAAoE;gBACpE,2CAA2C;gBAC3C,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBAC1C,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC9C,CAAC;gBACD,6DAA6D;gBAC7D,oEAAoE;gBACpE,gDAAgD;gBAChD,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;oBACvC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;gBACxC,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG;gBAAE,OAAO;YACjB,qEAAqE;YACrE,kEAAkE;YAClE,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;YAC3D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,UAAU,GAAG,KAAK,CAAC,OAA2F,CAAC;gBACrH,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAA4E,CAAC;gBACrH,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;gBAC3B,IAAI,UAAU,CAAC,aAAa,KAAK,SAAS;oBAAE,GAAG,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;gBACzF,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS;oBAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;gBAChF,sEAAsE;gBACtE,qEAAqE;gBACrE,uEAAuE;gBACvE,IAAI,GAAG,CAAC,KAAK;oBAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;;oBACzB,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;gBACjF,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC7B,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,YAAY;gBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,6EAA6E;AAC7E,wEAAwE;AACxE,2EAA2E;AAC3E,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,uEAAuE;AAEvE;;;;;kCAKkC;AAClC,MAAM,CAAC,IAAI,YAAkC,CAAC;AAE9C;;;;;;;;;GASG;AACH,MAAM,UAAU,OAAO,CAAC,IAA0B;IAChD,YAAY,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,OAAO;IACrB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,IAAI,SAA+B,CAAC;AAEpC,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,MAA4B;IACtD,SAAS,GAAG,MAAM,CAAC;AACrB,CAAC;AAED;;;oEAGoE;AACpE,MAAM,UAAU,WAAW,CAA2B,GAAM;IAC1D,OAAO,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC;QACrD,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE;QAC/B,CAAC,CAAC,GAAG,CAAC;AACV,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,IAAgB,EAAE,GAAmB;IAC1D,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IAC1E,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,GAAqB,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;YACrB,IAAI;YACJ,OAAO;YACP,MAAM,EAAE,MAA+C;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAE,GAAmB;IACvD,OAAO,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,IAAgB,EAAE,GAAiC;IACzE,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,aAAa,CAAC,qBAAqB,EAAE,yCAAyC,CAAC,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACtE,OAAO,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC"}

package/dist/serve/worker/client/disconnect.d.ts

@@ -0,0 +1,7 @@
+import type { ClientDb } from './handles.js';
+export interface DisconnectClientOptions {
+    /** Bound version-skew and worker-crash cases where no disconnect reply arrives. */
+    ackTimeoutMs?: number;
+}
+export declare function disconnectClient(db: ClientDb, options?: DisconnectClientOptions): Promise<void>;
+//# sourceMappingURL=disconnect.d.ts.map

package/dist/serve/worker/client/disconnect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disconnect.d.ts","sourceRoot":"","sources":["../../../../src/serve/worker/client/disconnect.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,uBAAuB;IACtC,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAcD,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,QAAQ,EACZ,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CAmBf"}

package/dist/serve/worker/client/disconnect.js

@@ -0,0 +1,26 @@
+import { disconnectPort, nextId, rawRpc } from './core.js';
+const DEFAULT_ACK_TIMEOUT_MS = 5_000;
+function deleteTimeoutError() {
+    return Object.assign(new Error('Timed out waiting for SharedWorker app cleanup acknowledgment. ' +
+        'Close all tabs using this pyric dev origin so the worker can restart.'), { code: 'app/delete-timeout' });
+}
+export async function disconnectClient(db, options = {}) {
+    let timeout;
+    try {
+        const acknowledged = rawRpc(db.port, {
+            t: 'disconnect',
+            id: nextId(),
+        });
+        const timedOut = new Promise((_resolve, reject) => {
+            timeout = setTimeout(() => reject(deleteTimeoutError()), options.ackTimeoutMs ?? DEFAULT_ACK_TIMEOUT_MS);
+        });
+        await Promise.race([acknowledged, timedOut]);
+    }
+    finally {
+        if (timeout !== undefined)
+            clearTimeout(timeout);
+        disconnectPort(db.port);
+        db.port.close();
+    }
+}
+//# sourceMappingURL=disconnect.js.map

package/dist/serve/worker/client/disconnect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disconnect.js","sourceRoot":"","sources":["../../../../src/serve/worker/client/disconnect.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAQ3D,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,SAAS,kBAAkB;IACzB,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CACP,iEAAiE;QACjE,uEAAuE,CACxE,EACD,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAY,EACZ,UAAmC,EAAE;IAErC,IAAI,OAAkD,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;YACnC,CAAC,EAAE,YAAY;YACf,EAAE,EAAE,MAAM,EAAE;SACY,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACvD,OAAO,GAAG,UAAU,CAClB,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,EAClC,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAC/C,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,KAAK,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,CAAC;QACjD,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACxB,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/serve/worker/client/firestore-reads.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Firestore read execution — document/collection reads, keyspace enumeration,
+ * count/aggregate reads, and the `onSnapshot` listener. Each RPCs the worker and
+ * rehydrates the reply into the modular SDK's snapshot shapes.
+ */
+import type { AggregateFieldDescriptor, AggregateSpecDescriptor } from '../protocol.js';
+import type { ClientDb, DocRefHandle, CollRefHandle, QueryHandle, Unsubscribe } from './handles.js';
+import type { ClientDocSnapshot, ClientQuerySnapshot } from './snapshots.js';
+export declare function getDoc(ref: DocRefHandle): Promise<ClientDocSnapshot>;
+export declare function getDocs(source: CollRefHandle | QueryHandle): Promise<ClientQuerySnapshot>;
+/**
+ * Enumerate root collection ids (Pyric Studio data browse). The modular SDK has
+ * no client `listCollections`, so the host scans the sandbox keyspace and
+ * returns the ids. Lens is attached (via dataRpc) but the host enumeration is
+ * lens-independent.
+ */
+export declare function listRootCollections(db: ClientDb): Promise<string[]>;
+/** Enumerate subcollection ids under a document path (Pyric Studio data browse). */
+export declare function listSubcollections(db: ClientDb, docPath: string): Promise<string[]>;
+export declare function getCountFromServer(source: CollRefHandle | QueryHandle): Promise<{
+    data(): {
+        count: number;
+    };
+}>;
+/** Factory: count() aggregate field. Mirrors `pyric/firestore`'s `count()`. */
+export declare function count(): AggregateFieldDescriptor;
+/** Factory: sum-of-`field` aggregate. Mirrors `pyric/firestore`'s `sum()`. */
+export declare function sum(field: string): AggregateFieldDescriptor;
+/** Factory: average-of-`field` aggregate. Empty input yields `null`. */
+export declare function average(field: string): AggregateFieldDescriptor;
+/**
+ * Run a multi-field aggregate on the worker. Mirrors `pyric/firestore`'s
+ * `getAggregateFromServer(query, spec)`: spec entries are keyed by
+ * caller-chosen aliases; `.data()` returns the numbers under the same keys
+ * (`average` over no rows is `null`).
+ */
+export declare function getAggregateFromServer<S extends AggregateSpecDescriptor>(source: CollRefHandle | QueryHandle, spec: S): Promise<{
+    data(): {
+        [K in keyof S]: number | null;
+    };
+}>;
+/**
+ * Subscribe to a document or query. Mirrors `pyric/firestore`'s `onSnapshot`.
+ *
+ * Returns an `unsub` function. Sends `{ t:'unsub', subId }` to the worker
+ * to deregister the listener on the worker side.
+ */
+export declare function onSnapshot(target: DocRefHandle | CollRefHandle | QueryHandle, callback: (snap: ClientDocSnapshot | ClientQuerySnapshot) => void, errorCallback?: (err: unknown) => void): Unsubscribe;
+//# sourceMappingURL=firestore-reads.d.ts.map

package/dist/serve/worker/client/firestore-reads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-reads.d.ts","sourceRoot":"","sources":["../../../../src/serve/worker/client/firestore-reads.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAEV,wBAAwB,EACxB,uBAAuB,EAExB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEpG,OAAO,KAAK,EAAgC,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAI3G,wBAAsB,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAQ1E;AAED,wBAAsB,OAAO,CAC3B,MAAM,EAAE,aAAa,GAAG,WAAW,GAClC,OAAO,CAAC,mBAAmB,CAAC,CAU9B;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOzE;AAED,oFAAoF;AACpF,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQzF;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,aAAa,GAAG,WAAW,GAClC,OAAO,CAAC;IAAE,IAAI,IAAI;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CAUxC;AAID,+EAA+E;AAC/E,wBAAgB,KAAK,IAAI,wBAAwB,CAEhD;AAED,8EAA8E;AAC9E,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAE3D;AAED,wEAAwE;AACxE,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAE/D;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,SAAS,uBAAuB,EAC5E,MAAM,EAAE,aAAa,GAAG,WAAW,EACnC,IAAI,EAAE,CAAC,GACN,OAAO,CAAC;IAAE,IAAI,IAAI;SAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI;KAAE,CAAA;CAAE,CAAC,CAWxD;AAID;;;;;GAKG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,YAAY,GAAG,aAAa,GAAG,WAAW,EAClD,QAAQ,EAAE,CAAC,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,KAAK,IAAI,EACjE,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,GACrC,WAAW,CA8Cb"}

package/dist/serve/worker/client/firestore-reads.js

@@ -0,0 +1,139 @@
+/**
+ * Firestore read execution — document/collection reads, keyspace enumeration,
+ * count/aggregate reads, and the `onSnapshot` listener. Each RPCs the worker and
+ * rehydrates the reply into the modular SDK's snapshot shapes.
+ */
+import { closeSubscription, nextId, nextSubId, dataRpc, _defaultLens, openSnapshotSubscription, stampIssuer } from './core.js';
+import { makeDocSnapshot, makeQuerySnapshot } from './snapshots.js';
+// ─── Execution functions (RPC) ────────────────────────────────────────────
+export async function getDoc(ref) {
+    const result = await dataRpc(ref.port, {
+        t: 'op',
+        id: nextId(),
+        method: 'getDoc',
+        path: ref.descriptor.path,
+    });
+    return makeDocSnapshot(result, ref.port);
+}
+export async function getDocs(source) {
+    const result = await dataRpc(source.port, {
+        t: 'op',
+        id: nextId(),
+        method: 'getDocs',
+        source: source.__kind === 'coll-ref'
+            ? source.descriptor
+            : source.descriptor,
+    });
+    return makeQuerySnapshot(result, source.port);
+}
+/**
+ * Enumerate root collection ids (Pyric Studio data browse). The modular SDK has
+ * no client `listCollections`, so the host scans the sandbox keyspace and
+ * returns the ids. Lens is attached (via dataRpc) but the host enumeration is
+ * lens-independent.
+ */
+export async function listRootCollections(db) {
+    const r = (await dataRpc(db.port, {
+        t: 'op',
+        id: nextId(),
+        method: 'listRootCollections',
+    }));
+    return r.ids;
+}
+/** Enumerate subcollection ids under a document path (Pyric Studio data browse). */
+export async function listSubcollections(db, docPath) {
+    const r = (await dataRpc(db.port, {
+        t: 'op',
+        id: nextId(),
+        method: 'listSubcollections',
+        docPath,
+    }));
+    return r.ids;
+}
+export async function getCountFromServer(source) {
+    const result = await dataRpc(source.port, {
+        t: 'op',
+        id: nextId(),
+        method: 'count',
+        source: source.__kind === 'coll-ref'
+            ? source.descriptor
+            : source.descriptor,
+    });
+    return { data: () => ({ count: result.count }) };
+}
+// ─── Multi-field aggregates (count / sum / average) ───────────────────────
+/** Factory: count() aggregate field. Mirrors `pyric/firestore`'s `count()`. */
+export function count() {
+    return { kind: 'count' };
+}
+/** Factory: sum-of-`field` aggregate. Mirrors `pyric/firestore`'s `sum()`. */
+export function sum(field) {
+    return { kind: 'sum', field };
+}
+/** Factory: average-of-`field` aggregate. Empty input yields `null`. */
+export function average(field) {
+    return { kind: 'average', field };
+}
+/**
+ * Run a multi-field aggregate on the worker. Mirrors `pyric/firestore`'s
+ * `getAggregateFromServer(query, spec)`: spec entries are keyed by
+ * caller-chosen aliases; `.data()` returns the numbers under the same keys
+ * (`average` over no rows is `null`).
+ */
+export async function getAggregateFromServer(source, spec) {
+    const result = await dataRpc(source.port, {
+        t: 'op',
+        id: nextId(),
+        method: 'aggregate',
+        source: source.__kind === 'coll-ref'
+            ? source.descriptor
+            : source.descriptor,
+        spec,
+    });
+    return { data: () => result.data };
+}
+// ─── onSnapshot ──────────────────────────────────────────────────────────
+/**
+ * Subscribe to a document or query. Mirrors `pyric/firestore`'s `onSnapshot`.
+ *
+ * Returns an `unsub` function. Sends `{ t:'unsub', subId }` to the worker
+ * to deregister the listener on the worker side.
+ */
+export function onSnapshot(target, callback, errorCallback) {
+    const subId = nextSubId();
+    const port = target.port;
+    const subscription = {
+        port,
+        service: 'firestore',
+        next: (raw) => {
+            const r = raw;
+            if ('docs' in r) {
+                callback(makeQuerySnapshot(r, port));
+            }
+            else {
+                callback(makeDocSnapshot(r, port));
+            }
+        },
+        error: errorCallback,
+    };
+    const descriptor = target.__kind === 'doc-ref'
+        ? target.descriptor
+        : target.__kind === 'coll-ref'
+            ? target.descriptor
+            : target.descriptor;
+    // Stamp the active default lens onto the sub (Pyric Studio "watch as user")
+    // exactly as `dataRpc` does for ops, so a `setLens({mode:'as',uid})` choice
+    // makes listeners impersonate too. Omitted when no lens is set → byte-identical
+    // wire message, preserving the additive contract. The declared op source
+    // rides along the same way (client-constructed subs only — the relay's
+    // subs post verbatim).
+    const opened = openSnapshotSubscription(port, subId, subscription, stampIssuer((_defaultLens
+        ? { t: 'sub', subId, target: descriptor, actAs: _defaultLens }
+        : { t: 'sub', subId, target: descriptor })));
+    if (!opened && errorCallback)
+        queueMicrotask(() => errorCallback(new Error('Firebase App was deleted')));
+    return () => {
+        closeSubscription(port, subId);
+    };
+}
+//# sourceMappingURL=firestore-reads.js.map

package/dist/serve/worker/client/firestore-reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-reads.js","sourceRoot":"","sources":["../../../../src/serve/worker/client/firestore-reads.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE/H,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGpE,6EAA6E;AAE7E,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAiB;IAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;QACrC,CAAC,EAAE,IAAI;QACP,EAAE,EAAE,MAAM,EAAE;QACZ,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI;KAC1B,CAAiB,CAAC;IACnB,OAAO,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAmC;IAEnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;QACxC,CAAC,EAAE,IAAI;QACP,EAAE,EAAE,MAAM,EAAE;QACZ,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU;YAClC,CAAC,CAAE,MAAwB,CAAC,UAAU;YACtC,CAAC,CAAE,MAAsB,CAAC,UAAU;KACvC,CAAmB,CAAC;IACrB,OAAO,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAY;IACpD,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;QAChC,CAAC,EAAE,IAAI;QACP,EAAE,EAAE,MAAM,EAAE;QACZ,MAAM,EAAE,qBAAqB;KAC9B,CAAC,CAAsB,CAAC;IACzB,OAAO,CAAC,CAAC,GAAG,CAAC;AACf,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAY,EAAE,OAAe;IACpE,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;QAChC,CAAC,EAAE,IAAI;QACP,EAAE,EAAE,MAAM,EAAE;QACZ,MAAM,EAAE,oBAAoB;QAC5B,OAAO;KACR,CAAC,CAAsB,CAAC;IACzB,OAAO,CAAC,CAAC,GAAG,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAmC;IAEnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;QACxC,CAAC,EAAE,IAAI;QACP,EAAE,EAAE,MAAM,EAAE;QACZ,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU;YAClC,CAAC,CAAE,MAAwB,CAAC,UAAU;YACtC,CAAC,CAAE,MAAsB,CAAC,UAAU;KACvC,CAAsB,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,6EAA6E;AAE7E,+EAA+E;AAC/E,MAAM,UAAU,KAAK;IACnB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAmC,EACnC,IAAO;IAEP,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;QACxC,CAAC,EAAE,IAAI;QACP,EAAE,EAAE,MAAM,EAAE;QACZ,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU;YAClC,CAAC,CAAE,MAAwB,CAAC,UAAU;YACtC,CAAC,CAAE,MAAsB,CAAC,UAAU;QACtC,IAAI;KACL,CAAgD,CAAC;IAClD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,4EAA4E;AAE5E;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACxB,MAAkD,EAClD,QAAiE,EACjE,aAAsC;IAEtC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IAEzB,MAAM,YAAY,GAAG;QACnB,IAAI;QACJ,OAAO,EAAE,WAAoB;QAC7B,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE;YACrB,MAAM,CAAC,GAAG,GAA8B,CAAC;YACzC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBAChB,QAAQ,CAAC,iBAAiB,CAAC,CAA8B,EAAE,IAAI,CAAC,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,eAAe,CAAC,CAA4B,EAAE,IAAI,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,KAAK,EAAE,aAAa;KACrB,CAAC;IAEF,MAAM,UAAU,GACd,MAAM,CAAC,MAAM,KAAK,SAAS;QACzB,CAAC,CAAE,MAAuB,CAAC,UAAU;QACrC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;YAC5B,CAAC,CAAE,MAAwB,CAAC,UAAU;YACtC,CAAC,CAAE,MAAsB,CAAC,UAAU,CAAC;IAE3C,4EAA4E;IAC5E,4EAA4E;IAC5E,gFAAgF;IAChF,yEAAyE;IACzE,uEAAuE;IACvE,uBAAuB;IACvB,MAAM,MAAM,GAAG,wBAAwB,CACrC,IAAI,EACJ,KAAK,EACL,YAAY,EACZ,WAAW,CACT,CAAC,YAAY;QACX,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE;QAC9D,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAA0B,CACtE,CACF,CAAC;IACF,IAAI,CAAC,MAAM,IAAI,aAAa;QAAE,cAAc,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;IAEzG,OAAO,GAAG,EAAE;QACV,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC"}