@pyric/cli 0.1.0-alpha.9

package/dist/serve/bridge-mount.js

@@ -0,0 +1,162 @@
+/**
+ * `--bridge` for `pyric dev` — mounts the MCP bridge on the SAME origin
+ * the app is served from, so one URL carries the app, the sandbox SDK, AND
+ * the agent endpoint (the retrofit story end-to-end: `pyric dev --bridge`,
+ * point an MCP client at `http://localhost:3473/__pyric/mcp`, and the agent
+ * drives the sandbox living in the served page).
+ *
+ * REUSES the bridge internals (`createBridge`, `buildMcpServer`,
+ * `attachPeer`, `collectBody`) directly — the shared transport helpers live in
+ * `../bridge/server/peer.ts`; this module composes the bridge into the serve /
+ * Vite-plugin origin, it is not a fork of the bridge.
+ *
+ * Routes (composed into the `/__pyric/` namespace handler):
+ *   POST /__pyric/mcp       MCP over streamable HTTP
+ *   GET  /__pyric/health    bridge health JSON
+ *   WS   /__pyric/sandbox   the in-page sandbox peer (server `upgrade`)
+ */
+import { randomUUID } from 'node:crypto';
+import { WebSocketServer } from 'ws';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { createBridge } from '../bridge/server/bridge.js';
+import { buildMcpServer } from '../bridge/server/mcp.js';
+import { getDefaultMcpToolSurface } from '../bridge/server/mcp-contract.js';
+import { createAuditWriter } from '../bridge/server/audit.js';
+import { attachPeer } from '../bridge/server/peer.js';
+import { pyricVersion } from './standalone-assets.js';
+import { isAllowedUpgrade } from './server.js';
+const WS_PATH = '/__pyric/sandbox';
+const MCP_PATH = '/__pyric/mcp';
+const HEALTH_PATH = '/__pyric/health';
+const BRIDGE_VERSION = pyricVersion();
+export function createBridgeMount(opts = {}) {
+    const project = opts.project ?? 'sandbox';
+    const auditWriter = opts.disableAuditLog ? null : createAuditWriter(project);
+    const bridge = createBridge({
+        project,
+        version: BRIDGE_VERSION,
+        onToolEvent: auditWriter ? (event) => auditWriter.write(event) : undefined,
+    });
+    // STATEFUL MCP: a per-session transport+server map, mirroring the standalone
+    // bridge (`bridge/server/standalone.ts`). Each Streamable-HTTP client gets an
+    // `Mcp-Session-Id` on initialize and resumes the SAME session on every later
+    // request. The old per-request, `sessionIdGenerator: undefined` build returned
+    // no session id, so clients (Claude Code, Cursor) dropped and 404'd on every
+    // reconnect/dev-server restart. The long-lived `bridge` (peer + dispatch +
+    // audit) is shared; each session owns its transport+server.
+    const SESSION_IDLE_MS = 10 * 60_000;
+    const MAX_SESSIONS = 64;
+    const sessions = new Map();
+    const bumpIdle = (s) => {
+        if (s.idle)
+            clearTimeout(s.idle);
+        s.idle = setTimeout(() => {
+            if (s.sessionId)
+                sessions.delete(s.sessionId);
+            void s.close();
+        }, SESSION_IDLE_MS);
+    };
+    const newSession = async () => {
+        if (sessions.size >= MAX_SESSIONS) {
+            const e = new Error(`pyric bridge: at session cap (${MAX_SESSIONS})`);
+            e.statusCode = 503;
+            throw e;
+        }
+        const session = {
+            transport: null,
+            close: async () => { },
+            idle: null,
+            sessionId: null,
+        };
+        session.transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+            onsessioninitialized: (id) => {
+                session.sessionId = id;
+                sessions.set(id, session);
+                bumpIdle(session);
+            },
+        });
+        session.transport.onclose = () => {
+            if (session.sessionId)
+                sessions.delete(session.sessionId);
+        };
+        const surface = getDefaultMcpToolSurface();
+        const server = buildMcpServer(bridge, {
+            forwarded: surface.forwarded,
+            inProcess: surface.inProcess,
+        });
+        session.close = async () => {
+            if (session.idle)
+                clearTimeout(session.idle);
+            await server.close().catch(() => { });
+            await session.transport.close().catch(() => { });
+        };
+        await server.connect(session.transport);
+        return session;
+    };
+    return {
+        async handler(req, res, url) {
+            if (url.pathname === HEALTH_PATH) {
+                res.writeHead(200, { 'content-type': 'application/json' }).end(JSON.stringify(bridge.health()));
+                return true;
+            }
+            if (url.pathname === MCP_PATH) {
+                try {
+                    const sessionId = (req.headers['mcp-session-id'] ?? req.headers['Mcp-Session-Id']);
+                    let session = sessionId ? sessions.get(sessionId) : undefined;
+                    if (session)
+                        bumpIdle(session);
+                    else
+                        session = await newSession();
+                    if (req.method === 'DELETE' && sessionId) {
+                        await session.close();
+                        sessions.delete(sessionId);
+                        res.writeHead(204).end();
+                        return true;
+                    }
+                    // The transport reads the raw request stream itself. Do NOT pre-parse
+                    // the body (the old `collectBody` path); a double read hangs the
+                    // initialize POST.
+                    await session.transport.handleRequest(req, res);
+                }
+                catch (err) {
+                    const statusCode = err?.statusCode ?? 500;
+                    if (!res.headersSent) {
+                        res.writeHead(statusCode, { 'content-type': 'application/json' });
+                        res.end(JSON.stringify({ error: err instanceof Error ? err.message : String(err) }));
+                    }
+                }
+                return true;
+            }
+            return false;
+        },
+        attachUpgrade(server) {
+            const wss = new WebSocketServer({ noServer: true });
+            const guard = opts.upgradeGuard;
+            server.on('upgrade', (req, socket, head) => {
+                if ((req.url ?? '') !== WS_PATH)
+                    return;
+                // DNS-rebinding + cross-origin hijack guard. The static/dev server runs
+                // isAllowedHost on the `request` event only; `upgrade` is a separate
+                // listener that bypasses it, so re-check both Host and Origin here
+                // before registering the peer (which last-wins the tool channel).
+                // `allowedHosts: true` means the caller explicitly opted into all hosts.
+                if (guard && guard.allowedHosts !== true) {
+                    const boundHost = guard.boundHost;
+                    const extra = Array.isArray(guard.allowedHosts) ? guard.allowedHosts : [];
+                    if (!isAllowedUpgrade(req.headers, boundHost, extra)) {
+                        socket.destroy();
+                        return;
+                    }
+                }
+                wss.handleUpgrade(req, socket, head, (ws) => {
+                    attachPeer(bridge, ws);
+                });
+            });
+        },
+        instanceId: bridge.instanceId,
+        wsUrl: ({ host, port }) => `ws://${host}:${port}${WS_PATH}`,
+        mcpUrl: ({ host, port }) => `http://${host}:${port}${MCP_PATH}`,
+    };
+}
+//# sourceMappingURL=bridge-mount.js.map

package/dist/serve/bridge-mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-mount.js","sourceRoot":"","sources":["../../src/serve/bridge-mount.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAkB,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,YAAY,EAAwB,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,OAAO,GAAG,kBAAkB,CAAC;AACnC,MAAM,QAAQ,GAAG,cAAc,CAAC;AAChC,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,cAAc,GAAG,YAAY,EAAE,CAAC;AA4BtC,MAAM,UAAU,iBAAiB,CAAC,OAA2B,EAAE;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,OAAO;QACP,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,KAAsB,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;KAC5F,CAAC,CAAC;IAEH,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC;IACpC,MAAM,YAAY,GAAG,EAAE,CAAC;IAOxB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAQ,EAAE;QACpC,IAAI,CAAC,CAAC,IAAI;YAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE;YACvB,IAAI,CAAC,CAAC,SAAS;gBAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9C,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,EAAE,eAAe,CAAC,CAAC;IACtB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAAsB,EAAE;QAC9C,IAAI,QAAQ,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,iCAAiC,YAAY,GAAG,CAAC,CAAC;YACrE,CAA6B,CAAC,UAAU,GAAG,GAAG,CAAC;YAChD,MAAM,CAAC,CAAC;QACV,CAAC;QACD,MAAM,OAAO,GAAY;YACvB,SAAS,EAAE,IAAgD;YAC3D,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACrB,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,OAAO,CAAC,SAAS,GAAG,IAAI,6BAA6B,CAAC;YACpD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE;gBAC3B,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC1B,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC;SACF,CAAC,CAAC;QACH,OAAO,CAAC,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;YAC/B,IAAI,OAAO,CAAC,SAAS;gBAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;YACzB,IAAI,OAAO,CAAC,IAAI;gBAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG;YACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAChG,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAuB,CAAC;oBACzG,IAAI,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC9D,IAAI,OAAO;wBAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;;wBAC1B,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;oBAElC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;wBACzC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;wBACtB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;wBAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;wBACzB,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,sEAAsE;oBACtE,iEAAiE;oBACjE,mBAAmB;oBACnB,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAClD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,UAAU,GAAI,GAA+B,EAAE,UAAU,IAAI,GAAG,CAAC;oBACvE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;wBACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAClE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBACvF,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,aAAa,CAAC,MAAM;YAClB,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;YAChC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;gBACzC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO;oBAAE,OAAO;gBACxC,wEAAwE;gBACxE,qEAAqE;gBACrE,mEAAmE;gBACnE,kEAAkE;gBAClE,yEAAyE;gBACzE,IAAI,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;oBACzC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;oBAClC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1E,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;wBACrD,MAAM,CAAC,OAAO,EAAE,CAAC;wBACjB,OAAO;oBACT,CAAC;gBACH,CAAC;gBACD,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAa,EAAE,EAAE;oBAC9D,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QACD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,OAAO,EAAE;QAC3D,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI,IAAI,GAAG,QAAQ,EAAE;KAChE,CAAC;AACJ,CAAC"}

package/dist/serve/bundler.d.ts

@@ -0,0 +1,110 @@
+/** Modules the import map serves. Keys are the bare specifiers app code uses. */
+export declare const SDK_MODULES: readonly ["firebase/ai", "firebase/app", "firebase/auth", "firebase/firestore", "firebase/database", "firebase/messaging", "firebase/messaging/sw", "firebase/storage"];
+/**
+ * The wrapper entries shipped with @pyric/cli, located relative to this
+ * module: compiled `.js` siblings when running from dist (npx install), `.ts`
+ * sources in the workspace (tests / dev). esbuild bundles either.
+ */
+export declare function defaultSdkEntries(): Record<string, string>;
+/**
+ * Resolve the built Studio app dir (the plugin's `ui` option + the CLI's
+ * `--ui`). Reached by file path so @pyric/cli never imports `@pyric/studio`:
+ * the packaged location (`dist/serve/studio-ui`, copied at build) or, in the
+ * monorepo, the sibling studio build. Null when neither exists. The standalone
+ * binary embeds these same bytes instead (see `standalone-assets.ts`).
+ */
+export declare function resolveStudioUiDir(): string | null;
+/**
+ * Resolve the built docs site dir (site-docs). `pyric dev --ui` embeds it so
+ * the Studio Docs tab has local docs without the hosted site. Built with base
+ * `/__pyric/ui/` (see scripts/build.sh) so every page/asset/twin URL resolves
+ * under the CLI mount: pages at `/__pyric/ui/docs/<slug>/`, assets at
+ * `/__pyric/ui/_astro/*`, the search index at `/__pyric/ui/docs/index.json`,
+ * and the shell chrome's tab links back at `/__pyric/ui/<tab>`. The dir holds
+ * the site-docs `dist/` verbatim: `docs/`, `_astro/`, `index.html`, `llms.txt`.
+ */
+export declare function resolveDocsUiDir(): string | null;
+/** Locate the installed pyric package root (works in the workspace and when
+ *  @pyric/cli is npm-installed — pyric is a direct dependency). */
+export declare function pyricPackageRoot(): string;
+export declare function pyricVersion(root?: string): string;
+/** The node builtins pyric's browser graph reaches for (via the rules module
+ *  resolver). Bare and `node:`-prefixed both match. */
+export declare const NODE_BUILTIN_RE: RegExp;
+/** Benign browser shim SOURCE per builtin (see header — droppable only when
+ *  pyric breaks the `firestore/index → rules/tools → modules/resolver` static
+ *  chain, #553). Exported so the Vite plugin (`./vite`) reuses the SAME shims
+ *  through its own resolveId/load + optimizeDeps esbuild pass, instead of
+ *  re-deriving them. */
+export declare const NODE_BUILTIN_SHIMS: Record<string, string>;
+export interface BundleOptions {
+    /** Entry files (the wrapper modules in `entries/`), keyed by the served
+     *  basename (`auth` → `/__pyric/sdk/auth.js`). */
+    entries: Record<string, string>;
+    /** Bypass the cache and build an immutable, process-independent generation. */
+    noCache?: boolean;
+    /** Override the cache root (tests). Default `~/.pyric/serve-cache`. */
+    cacheRoot?: string;
+    minify?: boolean;
+}
+export interface BundleResult {
+    outDir: string;
+    /** Served basename → absolute file path (entry bundles + shared chunks). */
+    files: string[];
+    cached: boolean;
+    /** Release a bypass generation after its server stops. Cache generations
+     *  deliberately remain durable, so their disposer is a no-op. */
+    dispose(): void;
+}
+export declare function cacheKey(opts: BundleOptions, version: string, graphRoot?: string, pyricRoot?: string): string;
+export declare function bundleSdk(opts: BundleOptions): Promise<BundleResult>;
+/**
+ * Locate the SharedWorker entry (`worker/entry.ts`) — compiled `.js` sibling
+ * from dist, `.ts` source in the workspace. Same dual-resolution as
+ * `defaultSdkEntries`.
+ */
+export declare function workerEntryPath(): string;
+export interface WorkerBundleOptions {
+    /** Where to write `worker.js` — normally the SDK bundle's `outDir` so the
+     *  existing `/__pyric/sdk/<file>` route serves it with no extra wiring. */
+    outDir: string;
+    /** Bypass + overwrite the cached worker bundle. */
+    noCache?: boolean;
+    minify?: boolean;
+}
+/**
+ * Content hash of the worker's executable CLI graph + pyric version. The worker bundle
+ * shares the SDK `outDir` (keyed by the SDK entries), which does NOT cover the
+ * worker graph — so the worker bundle carries its OWN content marker. Hash the
+ * full CLI source/dist tree because the worker imports bridge and verify leaves
+ * outside `serve/worker`; an allowlist would silently miss future dependencies.
+ * Installed pyric dist bytes are also hashed because workspace and prerelease
+ * builds can change implementation without a version bump.
+ */
+export declare function workerSourceHash(pyricRoot?: string, graphRoot?: string): string;
+/** Hash every JS/TS source below a directory, including split host/client leaves. */
+export declare function sourceTreeHash(root: string): string;
+/**
+ * Bundle the SharedWorker entry into a single classic worker script served at
+ * `/__pyric/sdk/worker.js`.
+ *
+ * WHY A SEPARATE BUILD (not part of `bundleSdk`'s splitting graph): a
+ * SharedWorker script is loaded by URL into its OWN realm — it cannot share
+ * the page's runtime chunk. So it is bundled standalone: `splitting: false`,
+ * `format: 'iife'` (the client opens it with `new SharedWorker(url, { type:
+ * 'classic' })`), everything inlined into one file. It reuses the same three
+ * browser-standalone plugins as the SDK bundle (pyric-resolve + node-shims +
+ * firebase-stub) so `pyric/*`, node builtins, and the `firebase/*` peer stubs
+ * resolve identically.
+ *
+ * NOTE: the worker legitimately holds the whole sandbox engine — it IS the
+ * backend — so this bundle is large, but it loads ONCE per origin (not per
+ * page). Trimming node/admin dead paths is tracked as Phase 3b.
+ *
+ * The `.worker-complete` marker is independent of `bundleSdk`'s `.complete`,
+ * while `cacheKey()` includes the complete CLI source graph. A worker/client
+ * or protocol edit therefore invalidates the shared SDK generation too, so
+ * the page and worker halves cannot come from different source generations.
+ */
+export declare function bundleWorker(opts: WorkerBundleOptions): Promise<string>;
+//# sourceMappingURL=bundler.d.ts.map

package/dist/serve/bundler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundler.d.ts","sourceRoot":"","sources":["../../src/serve/bundler.ts"],"names":[],"mappings":"AA8BA,iFAAiF;AACjF,eAAO,MAAM,WAAW,yKASd,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoB1D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAUlD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAShD;AAID;mEACmE;AACnE,wBAAgB,gBAAgB,IAAI,MAAM,CAYzC;AAED,wBAAgB,YAAY,CAAC,IAAI,GAAE,MAA2B,GAAG,MAAM,CAGtE;AAmBD;uDACuD;AACvD,eAAO,MAAM,eAAe,QAA4B,CAAC;AAEzD;;;;wBAIwB;AACxB,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAarD,CAAC;AAoBF,MAAM,WAAW,aAAa;IAC5B;sDACkD;IAClD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB;qEACiE;IACjE,OAAO,IAAI,IAAI,CAAC;CACjB;AA2DD,wBAAgB,QAAQ,CACtB,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,SAAS,SAAmD,EAC5D,SAAS,SAAqB,GAC7B,MAAM,CAkBR;AAID,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAgE1E;AAID;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAOxC;AAED,MAAM,WAAW,mBAAmB;IAClC;+EAC2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,SAAqB,EAC9B,SAAS,SAAmD,GAC3D,MAAM,CAQR;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBnD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyC7E"}