@pyric/cli 0.1.0-alpha.9

package/dist/serve/worker/host/presence.js

@@ -0,0 +1,280 @@
+/**
+ * SharedWorker host — connected-page presence (#227).
+ *
+ * Ephemeral, worker-lifetime registry of logical pages attached to this
+ * sandbox worker. Distinct from per-port subscription / auth-session /
+ * messaging maps: the user-facing count is keyed by `clientId`, so one page
+ * with multiple MessagePorts still counts as one client.
+ *
+ * Correctness rests on heartbeats + lease expiry (MessagePort `close` is
+ * best-effort and unreliable in Chrome). `cleanupPort` is an optimization
+ * that removes a client when its last associated port disappears.
+ */
+import { ok, fail, post } from '../host-context.js';
+import { PRESENCE_HEARTBEAT_INTERVAL_MS, PRESENCE_STALE_MS } from '../presence-timing.js';
+export { PRESENCE_HEARTBEAT_INTERVAL_MS, PRESENCE_STALE_MS };
+/** Controllable clock for deterministic lease tests. */
+let _now = () => Date.now();
+export function setPresenceNow(fn) {
+    _now = fn;
+}
+export function resetPresenceNow() {
+    _now = () => Date.now();
+}
+export function presenceNow() {
+    return _now();
+}
+const _state = new WeakMap();
+function stateFor(ctx) {
+    let s = _state.get(ctx);
+    if (!s) {
+        s = {
+            clients: new Map(),
+            portToClient: new Map(),
+            subs: new Map(),
+            timer: null,
+        };
+        _state.set(ctx, s);
+    }
+    return s;
+}
+function ensureExpiryTimer(ctx) {
+    const s = stateFor(ctx);
+    if (s.timer != null)
+        return;
+    // Sweep at half the stale window so expiry is prompt without busy-polling.
+    s.timer = setInterval(() => {
+        expireStalePresence(ctx);
+    }, Math.max(5_000, Math.floor(PRESENCE_STALE_MS / 2)));
+    // Workers may not have unref; guard for Node/test hosts that do.
+    const t = s.timer;
+    if (typeof t.unref === 'function')
+        t.unref();
+}
+function stopExpiryTimerIfIdle(ctx) {
+    const s = stateFor(ctx);
+    if (s.clients.size > 0 || s.subs.size > 0)
+        return;
+    if (s.timer != null) {
+        clearInterval(s.timer);
+        s.timer = null;
+    }
+}
+function toSnapshot(s) {
+    const clients = [];
+    for (const e of s.clients.values()) {
+        clients.push({
+            clientId: e.clientId,
+            kind: e.kind,
+            route: e.route,
+            visibility: e.visibility,
+            connectedAt: e.connectedAt,
+            lastSeen: e.lastSeen,
+        });
+    }
+    clients.sort((a, b) => a.connectedAt - b.connectedAt || a.clientId.localeCompare(b.clientId));
+    return { clients };
+}
+function broadcast(ctx) {
+    const s = stateFor(ctx);
+    const snap = toSnapshot(s);
+    for (const [port, subIds] of s.subs) {
+        for (const subId of subIds) {
+            post(port, { t: 'snap', subId, value: snap });
+        }
+    }
+}
+/**
+ * Drop clients whose lease is older than {@link PRESENCE_STALE_MS}.
+ * Returns true when any client was removed (and subscribers were notified).
+ * Tests call this with a controllable {@link setPresenceNow}.
+ */
+export function expireStalePresence(ctx, now = presenceNow()) {
+    const s = stateFor(ctx);
+    let removed = false;
+    for (const [id, entry] of s.clients) {
+        if (now - entry.lastSeen > PRESENCE_STALE_MS) {
+            for (const port of entry.ports) {
+                if (s.portToClient.get(port) === id)
+                    s.portToClient.delete(port);
+            }
+            s.clients.delete(id);
+            removed = true;
+        }
+    }
+    if (removed) {
+        broadcast(ctx);
+        stopExpiryTimerIfIdle(ctx);
+    }
+    return removed;
+}
+/** Authoritative presence snapshot for diagnostics / tests. */
+export function getPresenceSnapshot(ctx) {
+    expireStalePresence(ctx);
+    return toSnapshot(stateFor(ctx));
+}
+const PRESENCE_METHODS = new Set([
+    'presence.register',
+    'presence.heartbeat',
+    'presence.update',
+    'presence.disconnect',
+]);
+export function isPresenceOp(method) {
+    return PRESENCE_METHODS.has(method);
+}
+export async function handlePresenceOp(ctx, port, msg) {
+    const s = stateFor(ctx);
+    expireStalePresence(ctx);
+    switch (msg.method) {
+        case 'presence.register': {
+            const { clientId, kind, route, visibility } = msg;
+            if (!clientId || (kind !== 'app' && kind !== 'studio')) {
+                fail(port, msg.id, new Error('presence.register: invalid clientId/kind'));
+                return;
+            }
+            const now = presenceNow();
+            const existing = s.clients.get(clientId);
+            if (existing) {
+                // Re-register (reload / reconnect): one logical entry, refresh metadata,
+                // associate this port, drop stale port associations for this clientId.
+                for (const p of existing.ports) {
+                    if (s.portToClient.get(p) === clientId)
+                        s.portToClient.delete(p);
+                }
+                existing.ports.clear();
+                existing.ports.add(port);
+                existing.kind = kind;
+                existing.route = route;
+                existing.visibility = visibility;
+                existing.lastSeen = now;
+                // Keep original connectedAt across reconnects within the worker lifetime
+                // so the UI does not flicker "just connected" on a soft reload — but a
+                // full reconnect after disconnect/expiry starts fresh (new entry below).
+            }
+            else {
+                s.clients.set(clientId, {
+                    clientId,
+                    kind,
+                    route,
+                    visibility,
+                    connectedAt: now,
+                    lastSeen: now,
+                    ports: new Set([port]),
+                });
+            }
+            s.portToClient.set(port, clientId);
+            ensureExpiryTimer(ctx);
+            ok(port, msg.id, { ok: true });
+            broadcast(ctx);
+            break;
+        }
+        case 'presence.heartbeat': {
+            const entry = s.clients.get(msg.clientId);
+            if (!entry) {
+                // Unknown / already expired — client should re-register.
+                ok(port, msg.id, { ok: false, reason: 'unknown' });
+                return;
+            }
+            entry.lastSeen = presenceNow();
+            entry.ports.add(port);
+            s.portToClient.set(port, msg.clientId);
+            ok(port, msg.id, { ok: true });
+            // Heartbeats renew the lease without broadcasting — lastSeen freshness
+            // is only needed for expiry; subscribers care about connect/disconnect/
+            // route/visibility. Still broadcast so Studio can show freshness if it
+            // wants; cheap for small N.
+            broadcast(ctx);
+            break;
+        }
+        case 'presence.update': {
+            const entry = s.clients.get(msg.clientId);
+            if (!entry) {
+                ok(port, msg.id, { ok: false, reason: 'unknown' });
+                return;
+            }
+            if (msg.route !== undefined)
+                entry.route = msg.route;
+            if (msg.visibility !== undefined)
+                entry.visibility = msg.visibility;
+            entry.lastSeen = presenceNow();
+            entry.ports.add(port);
+            s.portToClient.set(port, msg.clientId);
+            ok(port, msg.id, { ok: true });
+            broadcast(ctx);
+            break;
+        }
+        case 'presence.disconnect': {
+            const entry = s.clients.get(msg.clientId);
+            if (entry) {
+                for (const p of entry.ports) {
+                    if (s.portToClient.get(p) === msg.clientId)
+                        s.portToClient.delete(p);
+                }
+                s.clients.delete(msg.clientId);
+                ok(port, msg.id, { ok: true });
+                broadcast(ctx);
+                stopExpiryTimerIfIdle(ctx);
+            }
+            else {
+                ok(port, msg.id, { ok: true });
+            }
+            break;
+        }
+        default: {
+            fail(port, msg.id, new Error(`Unknown method: ${String(msg.method)}`));
+        }
+    }
+}
+export function handlePresenceSub(ctx, port, msg) {
+    expireStalePresence(ctx);
+    const s = stateFor(ctx);
+    let subIds = s.subs.get(port);
+    if (!subIds) {
+        subIds = new Set();
+        s.subs.set(port, subIds);
+    }
+    if (subIds.has(msg.subId))
+        return;
+    subIds.add(msg.subId);
+    ensureExpiryTimer(ctx);
+    post(port, { t: 'snap', subId: msg.subId, value: toSnapshot(s) });
+}
+export function handlePresenceUnsub(ctx, port, subId) {
+    const s = stateFor(ctx);
+    const subIds = s.subs.get(port);
+    if (!subIds || !subIds.has(subId))
+        return false;
+    subIds.delete(subId);
+    if (subIds.size === 0)
+        s.subs.delete(port);
+    stopExpiryTimerIfIdle(ctx);
+    return true;
+}
+/**
+ * Port-close optimization: if this port was the last association for a
+ * logical client, remove that client. Lease expiry remains the correctness
+ * path when close events are missing.
+ */
+export function cleanupPortPresence(ctx, port) {
+    const s = stateFor(ctx);
+    // Drop presence subscriptions on this port.
+    s.subs.delete(port);
+    const clientId = s.portToClient.get(port);
+    s.portToClient.delete(port);
+    if (!clientId) {
+        stopExpiryTimerIfIdle(ctx);
+        return;
+    }
+    const entry = s.clients.get(clientId);
+    if (!entry) {
+        stopExpiryTimerIfIdle(ctx);
+        return;
+    }
+    entry.ports.delete(port);
+    if (entry.ports.size === 0) {
+        s.clients.delete(clientId);
+        broadcast(ctx);
+    }
+    stopExpiryTimerIfIdle(ctx);
+}
+//# sourceMappingURL=presence.js.map

package/dist/serve/worker/host/presence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence.js","sourceRoot":"","sources":["../../../../src/serve/worker/host/presence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAA+B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1F,OAAO,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,CAAC;AAE7D,wDAAwD;AACxD,IAAI,IAAI,GAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AAE1C,MAAM,UAAU,cAAc,CAAC,EAAgB;IAC7C,IAAI,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC;AAiBD,MAAM,MAAM,GAAG,IAAI,OAAO,EAA0B,CAAC;AAErD,SAAS,QAAQ,CAAC,GAAY;IAC5B,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG;YACF,OAAO,EAAE,IAAI,GAAG,EAAE;YAClB,YAAY,EAAE,IAAI,GAAG,EAAE;YACvB,IAAI,EAAE,IAAI,GAAG,EAAE;YACf,KAAK,EAAE,IAAI;SACZ,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI;QAAE,OAAO;IAC5B,2EAA2E;IAC3E,CAAC,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QACzB,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,iEAAiE;IACjE,MAAM,CAAC,GAAG,CAAC,CAAC,KAA+B,CAAC;IAC5C,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,UAAU;QAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO;IAClD,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QACpB,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAgB;IAClC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9F,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,MAAc,WAAW,EAAE;IAC3E,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,iBAAiB,EAAE,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE;oBAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnE,CAAC;YACD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,mBAAmB;IACnB,oBAAoB;IACpB,iBAAiB;IACjB,qBAAqB;CACtB,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,MAA2B;IACtD,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAY,EACZ,IAAc,EACd,GAAc;IAEd,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEzB,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;YAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;gBAC1E,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,yEAAyE;gBACzE,uEAAuE;gBACvE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBAC/B,IAAI,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ;wBAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACnE,CAAC;gBACD,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACvB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACzB,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;gBACrB,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;gBACvB,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;gBACjC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACxB,yEAAyE;gBACzE,uEAAuE;gBACvE,yEAAyE;YAC3E,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACtB,QAAQ;oBACR,IAAI;oBACJ,KAAK;oBACL,UAAU;oBACV,WAAW,EAAE,GAAG;oBAChB,QAAQ,EAAE,GAAG;oBACb,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACnC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACvB,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/B,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM;QACR,CAAC;QAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,yDAAyD;gBACzD,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,KAAK,CAAC,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC/B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/B,uEAAuE;YACvE,wEAAwE;YACxE,uEAAuE;YACvE,4BAA4B;YAC5B,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM;QACR,CAAC;QAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACrD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;gBAAE,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;YACpE,KAAK,CAAC,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC/B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/B,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM;QACR,CAAC;QAED,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBAC5B,IAAI,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,QAAQ;wBAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvE,CAAC;gBACD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC/B,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/B,SAAS,CAAC,GAAG,CAAC,CAAC;gBACf,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YACD,MAAM;QACR,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAE,GAA2B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,IAAc,EAAE,GAAuB;IACrF,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO;IAClC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,IAAc,EAAE,KAAa;IAC7E,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,IAAc;IAC9D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,4CAA4C;IAC5C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEpB,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,SAAS,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,qBAAqB,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/serve/worker/host/rtdb.d.ts

@@ -0,0 +1,18 @@
+/**
+ * SharedWorker host — RTDB modular ops (playground shared-runtime bridge).
+ *
+ * `rtdb.get/set/update/remove/push` run against the op's lens-resolved Database
+ * handle (impersonation / admin / anon / port-session, via `lensRtdb`);
+ * `rtdb.adminSnapshot` reads the whole tree through the rules-bypass admin
+ * handle. Owns the RTDB server-sentinel reconstruction and the snapshot→wire
+ * shaping (`rtdbSnapToWire`, also used by the value-subscription handler).
+ *
+ * Routed here by the host dispatcher. Never imports the dispatcher.
+ */
+import { type DataSnapshot } from 'pyric/database';
+import type { OpMessage } from '../protocol.js';
+import { type HostCtx, type PortLike } from '../host-context.js';
+export declare function rtdbSnapToWire(snap: DataSnapshot): unknown;
+export declare function isRtdbOp(method: OpMessage['method']): boolean;
+export declare function handleRtdbOp(ctx: HostCtx, port: PortLike, msg: OpMessage): Promise<void>;
+//# sourceMappingURL=rtdb.d.ts.map

package/dist/serve/worker/host/rtdb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rtdb.d.ts","sourceRoot":"","sources":["../../../../src/serve/worker/host/rtdb.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAQL,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAA6B,MAAM,oBAAoB,CAAC;AAG5F,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAO1D;AAwBD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,OAAO,CAE7D;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,IAAI,CAAC,CAqEf"}

package/dist/serve/worker/host/rtdb.js

@@ -0,0 +1,128 @@
+/**
+ * SharedWorker host — RTDB modular ops (playground shared-runtime bridge).
+ *
+ * `rtdb.get/set/update/remove/push` run against the op's lens-resolved Database
+ * handle (impersonation / admin / anon / port-session, via `lensRtdb`);
+ * `rtdb.adminSnapshot` reads the whole tree through the rules-bypass admin
+ * handle. Owns the RTDB server-sentinel reconstruction and the snapshot→wire
+ * shaping (`rtdbSnapToWire`, also used by the value-subscription handler).
+ *
+ * Routed here by the host dispatcher. Never imports the dispatcher.
+ */
+import { ref as rtdbRef, get as rtdbGet, set as rtdbSet, update as rtdbUpdate, remove as rtdbRemove, serverTimestamp as rtdbServerTimestamp, sandbox as rtdbSandbox, } from 'pyric/database';
+import { ok, fail, bestEffortFlush } from '../host-context.js';
+import { lensRtdb } from './core.js';
+export function rtdbSnapToWire(snap) {
+    return {
+        key: snap.key,
+        exists: snap.exists(),
+        value: snap.val(),
+        size: snap.size,
+    };
+}
+function resolveRtdbSentinels(value) {
+    if (value && typeof value === 'object') {
+        const marker = value;
+        if (marker.__rtdbSentinel === 'serverTimestamp')
+            return rtdbServerTimestamp();
+        if (Array.isArray(value))
+            return value.map(resolveRtdbSentinels);
+        const out = {};
+        for (const [k, v] of Object.entries(value))
+            out[k] = resolveRtdbSentinels(v);
+        return out;
+    }
+    return value;
+}
+/** The RTDB op methods routed to {@link handleRtdbOp}. */
+const RTDB_METHODS = new Set([
+    'rtdb.get',
+    'rtdb.set',
+    'rtdb.update',
+    'rtdb.remove',
+    'rtdb.push',
+    'rtdb.adminSnapshot',
+]);
+export function isRtdbOp(method) {
+    return RTDB_METHODS.has(method);
+}
+export async function handleRtdbOp(ctx, port, msg) {
+    switch (msg.method) {
+        case 'rtdb.get': {
+            try {
+                const db = lensRtdb(ctx, msg.actAs, port);
+                ok(port, msg.id, rtdbSnapToWire(await rtdbGet(rtdbRef(db, msg.path))));
+            }
+            catch (e) {
+                fail(port, msg.id, e);
+            }
+            break;
+        }
+        case 'rtdb.set': {
+            try {
+                const db = lensRtdb(ctx, msg.actAs, port);
+                const value = resolveRtdbSentinels(msg.value);
+                await rtdbSet(rtdbRef(db, msg.path), value);
+                await bestEffortFlush(ctx);
+                ok(port, msg.id, null);
+            }
+            catch (e) {
+                fail(port, msg.id, e);
+            }
+            break;
+        }
+        case 'rtdb.update': {
+            try {
+                const db = lensRtdb(ctx, msg.actAs, port);
+                await rtdbUpdate(rtdbRef(db, msg.path), resolveRtdbSentinels(msg.values));
+                await bestEffortFlush(ctx);
+                ok(port, msg.id, null);
+            }
+            catch (e) {
+                fail(port, msg.id, e);
+            }
+            break;
+        }
+        case 'rtdb.remove': {
+            try {
+                const db = lensRtdb(ctx, msg.actAs, port);
+                await rtdbRemove(rtdbRef(db, msg.path));
+                await bestEffortFlush(ctx);
+                ok(port, msg.id, null);
+            }
+            catch (e) {
+                fail(port, msg.id, e);
+            }
+            break;
+        }
+        case 'rtdb.push': {
+            try {
+                const db = lensRtdb(ctx, msg.actAs, port);
+                const childPath = `${msg.path}/${msg.key}`;
+                if (msg.value !== undefined) {
+                    await rtdbSet(rtdbRef(db, childPath), resolveRtdbSentinels(msg.value));
+                    await bestEffortFlush(ctx);
+                }
+                const normalizedPath = `/${childPath.split('/').filter(Boolean).join('/')}`;
+                ok(port, msg.id, { key: msg.key, path: normalizedPath });
+            }
+            catch (e) {
+                fail(port, msg.id, e);
+            }
+            break;
+        }
+        case 'rtdb.adminSnapshot': {
+            try {
+                ok(port, msg.id, rtdbSandbox.snapshotState(lensRtdb(ctx, { mode: 'admin' }, port)));
+            }
+            catch (e) {
+                fail(port, msg.id, e);
+            }
+            break;
+        }
+        default: {
+            fail(port, msg.id, new Error(`Unknown method: ${String(msg.method)}`));
+        }
+    }
+}
+//# sourceMappingURL=rtdb.js.map

package/dist/serve/worker/host/rtdb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rtdb.js","sourceRoot":"","sources":["../../../../src/serve/worker/host/rtdb.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,GAAG,IAAI,OAAO,EACd,GAAG,IAAI,OAAO,EACd,GAAG,IAAI,OAAO,EACd,MAAM,IAAI,UAAU,EACpB,MAAM,IAAI,UAAU,EACpB,eAAe,IAAI,mBAAmB,EACtC,OAAO,IAAI,WAAW,GAEvB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAA+B,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;QACrB,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAqC,CAAC;QACrD,IAAI,MAAM,CAAC,cAAc,KAAK,iBAAiB;YAAE,OAAO,mBAAmB,EAAE,CAAC;QAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACjE,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0DAA0D;AAC1D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS;IACnC,UAAU;IACV,UAAU;IACV,aAAa;IACb,aAAa;IACb,WAAW;IACX,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,UAAU,QAAQ,CAAC,MAA2B;IAClD,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAY,EACZ,IAAc,EACd,GAAc;IAEd,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC1C,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACtC,MAAM;QACR,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC9C,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAc,CAAC,CAAC;gBACrD,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC3B,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACtC,MAAM;QACR,CAAC;QAED,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAA4B,CAAC,CAAC;gBACrG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC3B,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACtC,MAAM;QACR,CAAC;QAED,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC3B,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACtC,MAAM;QACR,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;gBAC3C,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,OAAO,CACX,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,EACtB,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAU,CACzC,CAAC;oBACF,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;gBACD,MAAM,cAAc,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5E,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACtC,MAAM;QACR,CAAC;QAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACtC,MAAM;QACR,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAE,GAA2B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/serve/worker/host/rules.d.ts

@@ -0,0 +1,17 @@
+/**
+ * SharedWorker host — rules deploy + status ops.
+ *
+ * Firestore rules hot-reload (`setRules`/`setFirestoreRules`), RTDB rules
+ * deploy (`setDatabaseRules`), and the active-rules / status reflection
+ * (`getActiveRules`/`getRulesStatus`) that shared-runtime diagnostics + revert
+ * read. Tracks the deployed source + last-known-good on `ctx.activeRules`.
+ *
+ * Routed here by the host dispatcher with the op's resolved Firestore handle
+ * (`db`, used by the firestore-rules deploy). Never imports the dispatcher.
+ */
+import type { Firestore } from 'pyric/firestore';
+import type { OpMessage } from '../protocol.js';
+import { type HostCtx, type PortLike } from '../host-context.js';
+export declare function isRulesOp(method: OpMessage['method']): boolean;
+export declare function handleRulesOp(ctx: HostCtx, port: PortLike, msg: OpMessage, db: Firestore): void;
+//# sourceMappingURL=rules.d.ts.map

package/dist/serve/worker/host/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../../src/serve/worker/host/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAIjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAY,MAAM,oBAAoB,CAAC;AA0C3E,wBAAgB,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,OAAO,CAE9D;AAED,wBAAgB,aAAa,CAC3B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,SAAS,EACd,EAAE,EAAE,SAAS,GACZ,IAAI,CA2DN"}

package/dist/serve/worker/host/rules.js

@@ -0,0 +1,118 @@
+/**
+ * SharedWorker host — rules deploy + status ops.
+ *
+ * Firestore rules hot-reload (`setRules`/`setFirestoreRules`), RTDB rules
+ * deploy (`setDatabaseRules`), and the active-rules / status reflection
+ * (`getActiveRules`/`getRulesStatus`) that shared-runtime diagnostics + revert
+ * read. Tracks the deployed source + last-known-good on `ctx.activeRules`.
+ *
+ * Routed here by the host dispatcher with the op's resolved Firestore handle
+ * (`db`, used by the firestore-rules deploy). Never imports the dispatcher.
+ */
+import { setRules } from 'pyric/sandbox/firestore';
+import { sandbox as rtdbSandbox } from 'pyric/database';
+import { ok, fail } from '../host-context.js';
+import { ensureRtdb } from './core.js';
+function normalizeDatabaseRules(source) {
+    if (source === null)
+        return null;
+    if (typeof source === 'string') {
+        return JSON.parse(source);
+    }
+    if (typeof source === 'object' && source !== null) {
+        return source;
+    }
+    throw new Error('RTDB rules must be a rules JSON object or JSON string.');
+}
+function firestoreRuleMessages(result) {
+    const messages = [];
+    if (result.parseError) {
+        messages.push({
+            severity: 'error',
+            text: `PARSE ERROR: expected ${String(result.parseError.expected ?? 'valid rules')}`,
+            line: result.parseError.line,
+            column: result.parseError.column,
+        });
+    }
+    for (const warning of result.warnings ?? []) {
+        messages.push({
+            severity: warning.severity === 'error' ? 'error' : warning.severity === 'warning' ? 'warn' : 'info',
+            text: String(warning.message ?? warning),
+        });
+    }
+    return messages;
+}
+/** The rules deploy/status op methods routed to {@link handleRulesOp}. */
+const RULES_METHODS = new Set([
+    'setRules',
+    'setFirestoreRules',
+    'setDatabaseRules',
+    'getActiveRules',
+    'getRulesStatus',
+]);
+export function isRulesOp(method) {
+    return RULES_METHODS.has(method);
+}
+export function handleRulesOp(ctx, port, msg, db) {
+    switch (msg.method) {
+        case 'setRules':
+        case 'setFirestoreRules': {
+            try {
+                const result = setRules(ctx.sandbox, msg.source);
+                const messages = firestoreRuleMessages(result);
+                const okDeploy = !messages.some((m) => m.severity === 'error');
+                ctx.activeRules ??= {};
+                const previous = ctx.activeRules.firestore?.status === 'active'
+                    ? ctx.activeRules.firestore.source
+                    : ctx.activeRules.firestore?.lastKnownGood;
+                ctx.activeRules.firestore = {
+                    source: okDeploy ? msg.source : ctx.activeRules.firestore?.source ?? msg.source,
+                    updatedAt: Date.now(),
+                    status: okDeploy ? 'active' : 'error',
+                    messages,
+                    ...(previous ? { lastKnownGood: previous } : {}),
+                };
+                ok(port, msg.id, { warnings: result.warnings, messages, ok: okDeploy });
+            }
+            catch (e) {
+                fail(port, msg.id, e);
+            }
+            break;
+        }
+        case 'setDatabaseRules': {
+            try {
+                const db = ensureRtdb(ctx);
+                const rules = normalizeDatabaseRules(msg.source);
+                const previous = ctx.activeRules?.database?.status === 'active'
+                    ? ctx.activeRules.database.source
+                    : ctx.activeRules?.database?.lastKnownGood;
+                rtdbSandbox.setRules(db, rules);
+                ctx.activeRules ??= {};
+                ctx.activeRules.database = {
+                    source: rules,
+                    updatedAt: Date.now(),
+                    status: 'active',
+                    messages: [],
+                    ...(previous ? { lastKnownGood: previous } : {}),
+                };
+                ok(port, msg.id, { ok: true, messages: [] });
+            }
+            catch (e) {
+                fail(port, msg.id, e);
+            }
+            break;
+        }
+        case 'getActiveRules': {
+            ok(port, msg.id, msg.service ? ctx.activeRules?.[msg.service] ?? null : ctx.activeRules ?? {});
+            break;
+        }
+        case 'getRulesStatus': {
+            ok(port, msg.id, msg.service ? ctx.activeRules?.[msg.service] ?? null : ctx.activeRules ?? {});
+            break;
+        }
+        default: {
+            fail(port, msg.id, new Error(`Unknown method: ${String(msg.method)}`));
+        }
+    }
+}
+//# sourceMappingURL=rules.js.map

package/dist/serve/worker/host/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../../src/serve/worker/host/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGxD,OAAO,EAA+B,EAAE,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,SAAS,sBAAsB,CAAC,MAAe;IAC7C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAuC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,MAA4C,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAkK;IAC/L,MAAM,QAAQ,GAAiG,EAAE,CAAC;IAClH,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,yBAAyB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,IAAI,aAAa,CAAC,EAAE;YACpF,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;YAC5B,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;SACjC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACnG,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS;IACpC,UAAU;IACV,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,UAAU,SAAS,CAAC,MAA2B;IACnD,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAY,EACZ,IAAc,EACd,GAAc,EACd,EAAa;IAEb,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,UAAU,CAAC;QAChB,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;gBAC/C,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;gBAC/D,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,KAAK,QAAQ;oBAC7D,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM;oBAClC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC;gBAC7C,GAAG,CAAC,WAAW,CAAC,SAAS,GAAG;oBAC1B,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM;oBAC/E,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;oBACrC,QAAQ;oBACR,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjD,CAAC;gBACF,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACtC,MAAM;QACR,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC3B,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,KAAK,QAAQ;oBAC7D,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM;oBACjC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC;gBAC7C,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAChC,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC;gBACvB,GAAG,CAAC,WAAW,CAAC,QAAQ,GAAG;oBACzB,MAAM,EAAE,KAAK;oBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,EAAE;oBACZ,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjD,CAAC;gBACF,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACtC,MAAM;QACR,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAC/F,MAAM;QACR,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAC/F,MAAM;QACR,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAE,GAA2B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/serve/worker/host/storage.d.ts

@@ -0,0 +1,19 @@
+/**
+ * SharedWorker host — worker-backed Cloud Storage ops.
+ *
+ * Object browse (`storage.listAll`/`getMetadata`), the MessagePort-only
+ * `getBlob`, and the relay-safe base64 byte transfer (`putBytes`/`getBytes`)
+ * plus idempotent `deleteObject`. Owns the storage lens resolver
+ * (`lensStorage` — the storage mirror of the firestore/rtdb lens resolvers),
+ * the lazily-created shared handle, and the wire → `SettableMetadata` mapper.
+ *
+ * Routed here by the host dispatcher. Storage dispatch is async, so the
+ * mutating ops thread the op's provenance EXPLICITLY (their events escape the
+ * dispatcher's synchronous ambient-provenance window). Never imports the
+ * dispatcher.
+ */
+import type { OpMessage } from '../protocol.js';
+import { type HostCtx, type PortLike } from '../host-context.js';
+export declare function isStorageOp(method: OpMessage['method']): boolean;
+export declare function handleStorageOp(ctx: HostCtx, port: PortLike, msg: OpMessage): Promise<void>;
+//# sourceMappingURL=storage.d.ts.map

package/dist/serve/worker/host/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../src/serve/worker/host/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAuBH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAQhD,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAY,MAAM,oBAAoB,CAAC;AAyH3E,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,OAAO,CAEhE;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,IAAI,CAAC,CA0If"}