pyric-tools 0.1.0-alpha.7

package/dist/serve/entries/runtime.js

@@ -0,0 +1,555 @@
+/**
+ * `pyric dev` in-page runtime — the shared chunk every served SDK bundle
+ * closes over. One sandbox per page; init payload (rules, future bridge URL)
+ * fetched from `/__pyric/init.json` at module init.
+ *
+ * TOP-LEVEL AWAIT IS LOAD-BEARING: every importer (the auth/firestore bundles,
+ * and therefore the user's app module) is deferred until this module resolves,
+ * so by the time app code runs the rules are deployed — no
+ * "first write raced the ruleset" class of bugs.
+ *
+ * This file is BUNDLED FOR THE BROWSER by `../bundler.ts` (esbuild) — it is
+ * never imported by node-side pyric-tools code. Bundle splitting must keep it
+ * a single shared chunk: two copies would mean two sandboxes (P0 validation
+ * constraint, design rationale section 9).
+ */
+import { initializeSandbox, recordBackendOverBlob, serializeToBuckets, bundleRecords, } from 'pyric/sandbox';
+import { getFirestore, sandbox as sandboxOps } from 'pyric/firestore';
+import { getDatabase, sandbox as rtdbSandbox } from 'pyric/database/modular';
+import { getAuth, onAuthStateChanged, signOut, sandbox as authOps } from 'pyric/auth';
+import { getFirestore as workerGetFirestore, getWorkerVersion, callTool as workerCallTool, relayWorkerOp, relayWorkerSub, getAuth as workerGetAuth, onAuthStateChanged as workerOnAuthStateChanged, restorePortSession as workerRestorePortSession, } from '../worker/client.js';
+import { SessionStore } from './session-store.js';
+import { keepaliveSafe } from './keepalive.js';
+import { toPageOriginWsUrl } from './bridge-url.js';
+import { buildVerifyFixture } from '../../verify/fixture.js';
+/**
+ * The DEFAULT-ON worker path (Phase 3c): when SharedWorker is available the
+ * `firebase/*` entry adapters route to the worker-hosted sandbox instead of
+ * the in-page one. The worker owns rules/seed/persist/capture/session (it
+ * fetches the SAME `/__pyric/init.json`), so on this path the page MUST NOT
+ * re-run that backend init below — doing so would double-POST captures and
+ * fight the worker over `/__pyric/state`. Unsupported browsers fall back to
+ * the in-page sandbox + the shipped BroadcastChannel sync (strict enhancement).
+ *
+ * `globalThis.__PYRIC_FORCE_INPAGE__` is an explicit opt-out: a host that does
+ * NOT serve the worker bundle (`/__pyric/sdk/worker.js`) sets it before this
+ * module evaluates so the page takes the in-page path instead of trying to load
+ * a worker that 404s. `pyric dev` always serves the worker and never sets it;
+ * the `pyric-tools/vite` plugin sets it until it serves the worker (M2).
+ */
+export const useWorker = typeof SharedWorker !== 'undefined' &&
+    !globalThis.__PYRIC_FORCE_INPAGE__;
+/** Served URL of the bundled SharedWorker host (bundler `worker.js`). */
+export const WORKER_URL = '/__pyric/sdk/worker.js';
+/**
+ * STABLE SharedWorker name — every tab of the origin shares ONE worker (the
+ * whole point: one backend, live multi-tab sync). We deliberately do NOT
+ * version the name: a versioned name would make tabs opened across a pyric
+ * rebuild connect to DIFFERENT workers, silently splitting the backend so a
+ * write in one tab wouldn't reach another.
+ *
+ * The cost: a SharedWorker can't hot-update its code — it runs whatever version
+ * started it until ALL tabs of the origin close. So if pyric itself is rebuilt
+ * while tabs are open, they keep the OLD worker. We DETECT that (see the
+ * staleness check below) and warn, rather than trading away multi-tab sharing.
+ * (End users of `pyric dev` edit their OWN app, not pyric's worker bundle, so
+ * this only affects pyric development.)
+ */
+const WORKER_NAME = 'pyric-shared-worker';
+/**
+ * The in-page sandbox. On the worker path it is NOT the data backend — it
+ * stays mounted as the FALLBACK primitive and as the provider-sign-in
+ * resolution surface (the in-page `AuthFlowResolver` + `ServeAuthHelper`
+ * resolve popup/redirect identities, which the entry then bridges to the
+ * worker via `auth.acceptIdentity`).
+ */
+export const sandbox = initializeSandbox();
+/**
+ * The shared worker-backed Firestore handle (one SharedWorker connection for
+ * the whole page — the auth entry reuses its port too). Null when SharedWorker
+ * is unavailable. Opening it here connects the SharedWorker eagerly so the
+ * worker's first-connect init (rules/seed/persist) is underway before app code
+ * issues its first op.
+ */
+export const workerDb = useWorker ? workerGetFirestore(WORKER_URL, WORKER_NAME) : null;
+// Staleness guard: warn (don't split) if the running worker is older than what
+// serve is now serving. serve stamps the served bundle hash into
+// `<meta name="pyric-worker-v">`; the worker reports its OWN baked hash. A
+// mismatch means a still-running worker from before a pyric rebuild — close all
+// tabs of the origin to load the new worker.
+if (useWorker && typeof document !== 'undefined') {
+    const servedV = document
+        .querySelector('meta[name="pyric-worker-v"]')
+        ?.getAttribute('content');
+    void getWorkerVersion(workerDb)
+        .then((runningV) => {
+        if (servedV && runningV && runningV !== 'dev' && servedV !== runningV) {
+            console.warn(`[pyric dev] the SharedWorker is running OLDER code (build ${runningV}) than what is now ` +
+                `served (build ${servedV}). A SharedWorker can't hot-update — CLOSE ALL TABS of this origin ` +
+                'and reopen to load the new worker. (All tabs share one worker, so a partial reload leaves ' +
+                'the old code running for everyone.)');
+        }
+    })
+        .catch(() => { });
+}
+/** Page-wide auth session store — `entries/auth.ts`'s `setPersistence` wrap
+ *  switches its mode. Memory-backed fallback keeps non-browser imports inert. */
+const memoryStorage = () => {
+    const m = new Map();
+    return {
+        getItem: (k) => m.get(k) ?? null,
+        setItem: (k, v) => void m.set(k, v),
+        removeItem: (k) => void m.delete(k),
+    };
+};
+export const sessionStore = new SessionStore(typeof localStorage !== 'undefined' && typeof sessionStorage !== 'undefined'
+    ? { local: localStorage, session: sessionStorage }
+    : { local: memoryStorage(), session: memoryStorage() });
+const diagnostics = {
+    sandboxReady: true,
+    rulesDeployed: false,
+    databaseRulesDeployed: false,
+    rulesHash: null,
+    databaseRulesHash: null,
+    initError: null,
+    bridgeConnected: false,
+    seededDocs: 0,
+    persistEnabled: false,
+    lastFlushAt: null,
+    persistReadOnly: false,
+    seedSkipped: false,
+};
+globalThis.__pyricServe = diagnostics;
+let bridgeUrlFromPayload = null;
+// ── init payload: fetch + apply (top-level await — see header) ────────
+// WORKER PATH: skipped — the worker fetches the same init.json and owns
+// rules/seed/persist/capture/session. Running it here too would double-POST
+// captures and fight the worker over the /__pyric/state writer lock.
+if (!useWorker)
+    try {
+        const res = await fetch('/__pyric/init.json');
+        if (!res.ok)
+            throw new Error(`/__pyric/init.json → ${res.status}`);
+        const payload = (await res.json());
+        bridgeUrlFromPayload = payload.bridgeUrl;
+        // Register RTDB with the persistence registry BEFORE enablePersistence
+        // (below) so the restored tree rides the controller blob and is applied
+        // during restore-on-attach — same eager-registration reasoning as the
+        // worker path (serve-init.ts). `getDatabase(sandbox)` is idempotent
+        // (one backend per sandbox) so a later rules/op call reuses it.
+        getDatabase(sandbox);
+        if (payload.rules) {
+            const db = getFirestore(sandbox);
+            const lint = sandboxOps.setRules(db, payload.rules);
+            if (lint.parseError) {
+                // The server lints before serving, so this is a defensive surface —
+                // loud, but don't brick the page: the sandbox keeps its default rules.
+                throw new Error(`firestore.rules failed to parse in the sandbox: ${JSON.stringify(lint.parseError)}`);
+            }
+            diagnostics.rulesDeployed = true;
+            diagnostics.rulesHash = payload.rulesHash;
+        }
+        if (payload.databaseRules) {
+            rtdbSandbox.setRules(getDatabase(sandbox), payload.databaseRules);
+            diagnostics.databaseRulesDeployed = true;
+            diagnostics.databaseRulesHash = payload.databaseRulesHash ?? null;
+        }
+        // Auth users land first in either mode (persist restore or state-file
+        // fixture) so restored docs' owner uids resolve in rules and the session
+        // restore below has a DB to restore into.
+        if (payload.authUsers && payload.authUsers.length > 0) {
+            authOps.seedUsers(getAuth(sandbox), payload.authUsers);
+        }
+        if (!payload.persist && payload.seedState) {
+            // ── ephemeral fixture (`--seed <state-file>`): restore the blob through
+            // the persistence controller's OWN deserializer (wrapper re-hydration —
+            // seedDocuments on raw marker JSON would break instanceof in rules) via
+            // a read-only backend. Writes go nowhere: ephemeral stays ephemeral.
+            const seedSnap = payload.seedState;
+            const fixtureBundle = bundleRecords(serializeToBuckets(seedSnap.firestore ?? {}, seedSnap.services ?? {}, 0));
+            // NOTE (pre-mortem #6b): this attaches a PERMANENT controller whose
+            // write() is a no-op — so every later mutation in this page pays the
+            // whole-state serialize cost to feed a sink. pyric exposes no
+            // `disablePersistence`/dispose, so a one-shot restore isn't possible from
+            // here without a pyric change (tracked as a pyric follow-up). Accepted:
+            // fixture pages are demo-sized; the cost is bounded and invisible to
+            // correctness.
+            await sandbox.enablePersistence({
+                key: 'pyric-serve-fixture',
+                injectedBackend: recordBackendOverBlob({
+                    read: async () => fixtureBundle,
+                    write: async () => { },
+                    clear: async () => { },
+                }),
+            });
+            const docs = payload.seedState.firestore;
+            diagnostics.seededDocs = docs ? Object.keys(docs).length : 0;
+        }
+        if (payload.persist) {
+            // ── persist mode (flow doc section 3c): the substrate is durable. The
+            // sandbox's OWN persistence controller with an HTTP backend over
+            // /__pyric/state — it owns restore-on-attach (wrapper re-hydration),
+            // debounced auto-flush, and the beforeunload safety flush.
+            const section = (name) => `/__pyric/state?section=${name}`;
+            // Single-writer lock (pre-mortem #3): a per-page id claims the writer
+            // role on first flush; a second tab gets 423 and drops to read-only so
+            // it can't erase this tab's world. The server frees a stale lock, so a
+            // reload after the writer closed can reclaim it.
+            const writerId = typeof crypto !== 'undefined' && crypto.randomUUID ? crypto.randomUUID() : `w-${Date.now()}`;
+            const writerHeaders = { 'content-type': 'application/json', 'x-pyric-writer': writerId };
+            let readOnly = false;
+            const lostWriterLock = () => {
+                if (readOnly)
+                    return;
+                readOnly = true;
+                diagnostics.persistReadOnly = true;
+                console.warn('[pyric dev] another tab is the persist writer — THIS tab is read-only ' +
+                    '(your changes here will NOT be saved). Close the other tab and reload to take over.');
+            };
+            await sandbox.enablePersistence({
+                key: 'pyric-serve',
+                injectedBackend: recordBackendOverBlob({
+                    async read() {
+                        const res = await fetch(section('firestore'));
+                        return res.status === 200 ? await res.text() : null;
+                    },
+                    async write(value) {
+                        if (readOnly)
+                            return; // a non-writer tab silently no-ops its flushes
+                        const res = await fetch(section('firestore'), {
+                            method: 'POST',
+                            headers: writerHeaders,
+                            body: value,
+                            // The controller's beforeunload flush fires THIS write as the
+                            // page is leaving; a plain fetch is aborted on unload (pre-mortem
+                            // #1 — the "crash-only" claim was wrong). `keepalive` lets a
+                            // small final flush survive unload. It's capped (~64KB across
+                            // all keepalive requests), so large states skip it and warn
+                            // once — those lose the final unsaved delta on tab close
+                            // (reload-based flushes are unaffected).
+                            keepalive: keepaliveSafe(value),
+                        });
+                        if (res.status === 423)
+                            return lostWriterLock();
+                        if (!res.ok)
+                            throw new Error(`state flush → ${res.status}`);
+                        diagnostics.lastFlushAt = Date.now();
+                    },
+                    async clear() {
+                        if (readOnly)
+                            return;
+                        await fetch(section('firestore'), { method: 'POST', headers: writerHeaders, body: 'null' });
+                    },
+                }),
+            });
+            diagnostics.persistEnabled = true;
+            // Heartbeat: keep an alive-but-idle writer's lock fresh. PUT refreshes
+            // the lock WITHOUT writing state (a POST would clobber). Release on
+            // pagehide so another tab can take over promptly.
+            const heartbeat = setInterval(() => {
+                if (readOnly)
+                    return;
+                void fetch('/__pyric/state', { method: 'PUT', headers: writerHeaders }).then((res) => {
+                    if (res.status === 423) {
+                        lostWriterLock();
+                        clearInterval(heartbeat);
+                    }
+                }, () => { });
+            }, 20_000);
+            if (typeof window !== 'undefined') {
+                window.addEventListener('pagehide', () => {
+                    clearInterval(heartbeat);
+                    if (!readOnly) {
+                        fetch('/__pyric/state', { method: 'DELETE', headers: writerHeaders, keepalive: true }).catch(() => { });
+                    }
+                });
+            }
+            // Auth user-DB changes flush separately (the controller's blob is
+            // firestore-only). Debounced; exportUsers→seedUsers round-trips.
+            const auth = getAuth(sandbox);
+            let authFlushTimer = null;
+            authOps.subscribeUsers(auth, () => {
+                if (readOnly)
+                    return;
+                if (authFlushTimer)
+                    clearTimeout(authFlushTimer);
+                authFlushTimer = setTimeout(() => {
+                    void fetch(section('auth'), {
+                        method: 'POST',
+                        headers: writerHeaders,
+                        body: JSON.stringify({ users: authOps.exportUsers(auth) }),
+                    }).then((res) => {
+                        if (res.status === 423)
+                            lostWriterLock();
+                        else if (res.ok)
+                            diagnostics.lastFlushAt = Date.now();
+                    }, (e) => console.warn('[pyric dev] auth state flush failed:', e));
+                }, 500);
+            });
+        }
+        if (payload.capture) {
+            // ── capture mode (the write-side of the pyric verify loop): whenever
+            // the sandbox changes, push a snapshot of the full session fixture
+            // (rules + history + firestore state) to /__pyric/capture. The server
+            // writes it verbatim to `.pyric/last-session.json` so `pyric verify`
+            // can replay without any extra arguments. This is independent of
+            // --persist — capture is about the verify loop, persist is about
+            // cross-reload durability.
+            const flushCapture = () => {
+                const rtdbState = payload.databaseRules || sandbox.history().some((event) => event.service === 'rtdb')
+                    ? rtdbSandbox.snapshotState(getDatabase(sandbox))
+                    : undefined;
+                const auth = getAuth(sandbox);
+                const body = JSON.stringify(buildVerifyFixture({
+                    sandbox,
+                    firestoreRules: payload.rules,
+                    rtdbRules: payload.databaseRules ?? null,
+                    rtdbState,
+                    rtdbDatabaseUrl: payload.databaseUrl ?? null,
+                    authState: {
+                        users: authOps.exportUsers(auth),
+                        currentUser: auth.currentUser,
+                    },
+                }));
+                fetch('/__pyric/capture', {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json' },
+                    body,
+                    keepalive: keepaliveSafe(body),
+                }).catch(() => { });
+            };
+            // Debounced flush on every sandbox event — coalesces rapid writes (e.g.
+            // seeding multiple docs) into a single push. 400ms matches the cadence
+            // of the persist auth flush; small enough to feel live, large enough to
+            // avoid one-POST-per-write on bulk ops.
+            let captureTimer = null;
+            sandbox.onEvent(() => {
+                if (captureTimer)
+                    clearTimeout(captureTimer);
+                captureTimer = setTimeout(flushCapture, 400);
+            });
+            // Unload flush — best-effort, keepalive. Separate from any persist
+            // pagehide listener so they don't interfere.
+            if (typeof window !== 'undefined') {
+                window.addEventListener('pagehide', () => {
+                    flushCapture();
+                });
+            }
+        }
+        if (payload.seed && Object.keys(payload.seed).length > 0) {
+            // A seed fixture applies only into an empty home — mirrors the worker's
+            // guard (serve/worker/serve-init.ts): by this point any --persist restore
+            // above has already run, so an existing document means lived/restored
+            // data, not a blank slate. Never stomp it with a fixture.
+            const existing = Object.keys(sandboxOps.snapshotState(getFirestore(sandbox))).length > 0;
+            if (existing) {
+                diagnostics.seedSkipped = true;
+                console.info('[pyric dev] --seed skipped: the sandbox already has restored data — the fixture would ' +
+                    'have overwritten it. Use `--persist --fresh` to discard existing state and re-seed.');
+            }
+            else {
+                // Admin-style fixture load (bypasses rules) — runs before app code
+                // (top-level await), so the app's first render sees the seeded state.
+                sandboxOps.seedDocuments(getFirestore(sandbox), payload.seed);
+                diagnostics.seededDocs = Object.keys(payload.seed).length;
+            }
+        }
+    }
+    catch (e) {
+        diagnostics.initError = e instanceof Error ? e.message : String(e);
+        console.error('[pyric dev] init failed — the sandbox is running WITHOUT your project rules:', diagnostics.initError);
+    }
+// ── auth session persistence (flow doc section 3c — client-fidelity item): real
+// Firebase keeps you signed in across reloads by default. Restore BEFORE
+// subscribing so the initial signed-out emission can't clear the stored
+// session; a session only resolves while its uid still exists in the user
+// DB (ephemeral reloads drop helper-created sessions, consistently).
+// WORKER PATH (#754): sessions are PER-PORT in the worker, so this page
+// re-establishes ITS OWN session (`auth.restorePortSession`) from the same
+// web-storage record, then keeps the record in sync. The top-level await
+// below is load-bearing: it keeps a restored session ordered BEFORE the
+// app's first auth op on this port (worker messages are FIFO). ──
+if (useWorker && workerDb) {
+    const auth = workerGetAuth(workerDb);
+    const stored = sessionStore.load();
+    if (stored) {
+        const user = await workerRestorePortSession(auth, stored.uid);
+        if (user)
+            console.info(`[pyric dev] auth session restored (${user.uid})`);
+        else
+            sessionStore.clear(); // user gone or disabled — signed out, like a stale token
+    }
+    workerOnAuthStateChanged(auth, (user) => {
+        if (user)
+            sessionStore.save(user.uid);
+        else
+            sessionStore.clear();
+    });
+}
+else if (!useWorker) {
+    const auth = getAuth(sandbox);
+    const stored = sessionStore.load();
+    if (stored) {
+        try {
+            authOps.restoreSession(auth, stored.uid);
+            console.info(`[pyric dev] auth session restored (${stored.uid})`);
+        }
+        catch {
+            sessionStore.clear(); // user gone or disabled — signed out, like a stale token
+        }
+    }
+    onAuthStateChanged(auth, (user) => {
+        if (user)
+            sessionStore.save(user.uid);
+        else
+            sessionStore.clear();
+    });
+}
+// ── provenance (flow doc section 3a): make the shim's presence unmistakable.
+// Source says `firebase/*`; what runs is the pyric sandbox — say so loudly
+// once, and explain any stack frame that points into /__pyric/sdk/. ────────
+console.info(`[pyric dev] firebase/* on this page is served by the pyric sandbox` +
+    (useWorker
+        ? ' in a SharedWorker (one backend for all tabs; rules/seed/persist owned by the worker)'
+        : diagnostics.rulesHash
+            ? ` (rules ${diagnostics.rulesHash})`
+            : ' (no project rules)') +
+    ` — diagnostics: globalThis.__pyricServe`);
+let provenanceHintShown = false;
+function explainSandboxFrame(stackOrUrl) {
+    if (provenanceHintShown || !stackOrUrl || !stackOrUrl.includes('/__pyric/sdk/'))
+        return;
+    provenanceHintShown = true;
+    console.info('[pyric dev] the error above originates in the pyric sandbox shim serving firebase/*, ' +
+        'not the real Firebase SDK — behavior can differ where COMPAT coverage is incomplete.');
+}
+if (typeof window !== 'undefined') {
+    window.addEventListener('error', (e) => explainSandboxFrame(e.error instanceof Error ? (e.error.stack ?? e.filename) : e.filename));
+    window.addEventListener('unhandledrejection', (e) => explainSandboxFrame(e.reason instanceof Error ? e.reason.stack : undefined));
+}
+// ── bridge peer (only when `pyric dev --bridge` put a URL in the payload;
+//    dynamic import so bridge-less pages never load the client chunk) ─────
+async function connectBridgePeer(rawUrl) {
+    // Re-anchor the bridge WS to THIS page's origin so it reaches the server the
+    // page was actually served from over Tailscale / a LAN IP / https, not the
+    // server's baked-in localhost. See bridge-url.ts.
+    const url = toPageOriginWsUrl(rawUrl, window.location);
+    const { connectBridge } = await import('../../bridge/client/bridge.js');
+    // On the worker path, route agent tool-calls THROUGH the SharedWorker so the
+    // agent shares the one sandbox the app + Studio use (no separate in-page
+    // backend). Off the worker path (in-page fallback), dispatch in-page as before.
+    if (useWorker && workerDb) {
+        const wdb = workerDb;
+        connectBridge(sandbox, {
+            url,
+            dispatcher: (_sandbox, name, args) => workerCallTool(wdb, name, args),
+            // Generic worker relay (remote sandbox, slice 1): server-side Node code
+            // (`connectRemoteSandbox`) reaches THIS page's SharedWorker through the
+            // bridge — ops and snap-delivering subscriptions pass straight through
+            // to the one sandbox the app + Studio + agent share.
+            workerRelay: {
+                op: (op) => relayWorkerOp(wdb, op),
+                subscribe: (sub, onValue) => relayWorkerSub(wdb, sub, onValue),
+            },
+        });
+    }
+    else {
+        connectBridge(sandbox, { url });
+    }
+    diagnostics.bridgeConnected = true;
+    console.info('[pyric dev] sandbox registered with the MCP bridge at', url);
+}
+if (bridgeUrlFromPayload) {
+    // In-page path: bridgeUrlFromPayload came from the (already-blocking) init
+    // block above, so connect inline.
+    try {
+        await connectBridgePeer(bridgeUrlFromPayload);
+    }
+    catch (e) {
+        console.error('[pyric dev] bridge connect failed:', e instanceof Error ? e.message : String(e));
+    }
+}
+else if (useWorker) {
+    // Worker path: the worker owns serve-init, so the page skipped the init.json
+    // fetch. Discover the bridge URL (the agent routes its tool-calls THROUGH the
+    // worker) in a FIRE-AND-FORGET task so app boot is NEVER blocked — runtime.ts
+    // is on the load-bearing top-level-await path, and the agent connecting a beat
+    // later is fine. Bridge-less pages just read a null bridgeUrl and stop.
+    void (async () => {
+        try {
+            const res = await fetch('/__pyric/init.json');
+            const url = res.ok ? (await res.json()).bridgeUrl : null;
+            if (url)
+                await connectBridgePeer(url);
+        }
+        catch (e) {
+            console.error('[pyric dev] bridge connect failed:', e instanceof Error ? e.message : String(e));
+        }
+    })();
+}
+// ── cross-tab realtime sync — wire AFTER sandbox + auth are fully set up ──────
+//
+// Two independent channels, two independent kinds of state:
+//
+//   Channel 1 — Firestore writes (`pyric:serve:tabsync`):
+//     `sandbox.enableTabSync` owns the channel entirely. It broadcasts every
+//     committed Firestore write event to peer tabs and runs the hello/state
+//     late-join handshake so a freshly-opened tab inherits the current
+//     Firestore documents. A write in Tab A fires `onSnapshot` listeners in Tab B
+//     — restoring production's cross-client realtime without a server.
+//
+//   Channel 2 — Auth state (`pyric:serve:auth-sync`):
+//     Auth lives outside the Firestore environment so `enableTabSync` can't
+//     carry it. `wireAuthTabSync` bridges sign-in/sign-out/user-DB changes
+//     over its own BroadcastChannel using a full-state protocol (see
+//     `tab-sync-wiring.ts` for the detailed protocol + echo-guard rationale).
+//
+// Both are no-ops in non-browser environments (`BroadcastChannel` absent).
+//
+// WORKER PATH: retired. The SharedWorker IS the single backend for all tabs, so
+// cross-tab Firestore + auth are automatic — the in-page sandbox these channels
+// would sync isn't the data backend here. Kept ONLY for the in-page fallback
+// (the tier the plan designates for browsers without SharedWorker).
+if (!useWorker && typeof BroadcastChannel !== 'undefined') {
+    // 1. Firestore cross-tab — library primitive does the heavy lifting.
+    sandbox.enableTabSync({
+        channel: new BroadcastChannel('pyric:serve:tabsync'),
+    });
+    // 2. Auth cross-tab — our own bridge (see tab-sync-wiring.ts).
+    //    Dynamic import keeps the module out of the critical path; the channel
+    //    is opened synchronously above so `hello` is posted as soon as the
+    //    listener is wired (wireAuthTabSync handles ordering internally).
+    void import('./tab-sync-wiring.js').then(({ wireAuthTabSync }) => {
+        wireAuthTabSync(getAuth(sandbox), 
+        // Cast: authOps's generics are narrowed to `Auth` which is exactly what
+        // wireAuthTabSync expects; `as` here avoids a deep generic unification
+        // that TypeScript can't resolve across module boundaries.
+        authOps, onAuthStateChanged, signOut);
+    });
+}
+// ── rules hot-reload (SSE) — `pyric dev` watches firestore.rules and
+//    broadcasts; we re-deploy in place, no page refresh. EventSource is
+//    browser-only; guarded so the bundle stays inert under other runtimes. ──
+// IN-PAGE PATH ONLY: open a per-tab SSE to re-deploy rules to the in-page
+// sandbox. On the WORKER path the SharedWorker owns ONE hot-reload stream for
+// the whole origin (see entry.ts), so tabs open NO SSE connection — multi-tab
+// pages would otherwise exhaust Chrome's ~6-connections-per-origin cap and a
+// later tab's navigation would hang until an earlier tab closed.
+if (!useWorker && typeof EventSource !== 'undefined') {
+    const events = new EventSource('/__pyric/events');
+    events.addEventListener('rules-changed', (e) => {
+        try {
+            const { rules, rulesHash } = JSON.parse(e.data);
+            const lint = sandboxOps.setRules(getFirestore(sandbox), rules);
+            if (lint.parseError)
+                throw new Error(JSON.stringify(lint.parseError));
+            diagnostics.rulesDeployed = true;
+            diagnostics.rulesHash = rulesHash;
+            console.info(`[pyric dev] firestore.rules hot-reloaded (hash ${rulesHash})`);
+        }
+        catch (err) {
+            console.error('[pyric dev] rules hot-reload failed:', err instanceof Error ? err.message : String(err));
+        }
+    });
+}
+//# sourceMappingURL=runtime.js.map

package/dist/serve/entries/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/serve/entries/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,IAAI,OAAO,EAAiB,MAAM,YAAY,CAAC;AACrG,OAAO,EACL,YAAY,IAAI,kBAAkB,EAClC,gBAAgB,EAChB,QAAQ,IAAI,cAAc,EAC1B,aAAa,EACb,cAAc,EACd,OAAO,IAAI,aAAa,EACxB,kBAAkB,IAAI,wBAAwB,EAC9C,kBAAkB,IAAI,wBAAwB,GAE/C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,SAAS,GACpB,OAAO,YAAY,KAAK,WAAW;IACnC,CAAE,UAAmD,CAAC,sBAAsB,CAAC;AAE/E,yEAAyE;AACzE,MAAM,CAAC,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAEnD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAoB,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAExG,+EAA+E;AAC/E,iEAAiE;AACjE,2EAA2E;AAC3E,gFAAgF;AAChF,6CAA6C;AAC7C,IAAI,SAAS,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,QAAQ;SACrB,aAAa,CAAC,6BAA6B,CAAC;QAC7C,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IAC5B,KAAK,gBAAgB,CAAC,QAAS,CAAC;SAC7B,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACjB,IAAI,OAAO,IAAI,QAAQ,IAAI,QAAQ,KAAK,KAAK,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACtE,OAAO,CAAC,IAAI,CACV,6DAA6D,QAAQ,qBAAqB;gBACxF,iBAAiB,OAAO,qEAAqE;gBAC7F,4FAA4F;gBAC5F,qCAAqC,CACxC,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED;iFACiF;AACjF,MAAM,aAAa,GAAG,GAAwD,EAAE;IAC9E,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI;QAChC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACpC,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,YAAY,CAC1C,OAAO,YAAY,KAAK,WAAW,IAAI,OAAO,cAAc,KAAK,WAAW;IAC1E,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE;IAClD,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CACzD,CAAC;AAuDF,MAAM,WAAW,GAAqB;IACpC,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,KAAK;IACpB,qBAAqB,EAAE,KAAK;IAC5B,SAAS,EAAE,IAAI;IACf,iBAAiB,EAAE,IAAI;IACvB,SAAS,EAAE,IAAI;IACf,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,CAAC;IACb,cAAc,EAAE,KAAK;IACrB,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,KAAK;IACtB,WAAW,EAAE,KAAK;CACnB,CAAC;AACF,UAAU,CAAC,YAAY,GAAG,WAAW,CAAC;AAEtC,IAAI,oBAAoB,GAAkB,IAAI,CAAC;AAE/C,yEAAyE;AACzE,wEAAwE;AACxE,4EAA4E;AAC5E,qEAAqE;AACrE,IAAI,CAAC,SAAS;IAAE,IAAI,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;QAClD,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC;QACzC,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,gEAAgE;QAChE,WAAW,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,oEAAoE;gBACpE,uEAAuE;gBACvE,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CACrF,CAAC;YACJ,CAAC;YACD,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC;YACjC,WAAW,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YAClE,WAAW,CAAC,qBAAqB,GAAG,IAAI,CAAC;YACzC,WAAW,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;QACpE,CAAC;QACD,sEAAsE;QACtE,yEAAyE;QACzE,0CAA0C;QAC1C,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAC1C,yEAAyE;YACzE,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,SAGxB,CAAC;YACF,MAAM,aAAa,GAAG,aAAa,CACjC,kBAAkB,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CACzE,CAAC;YACF,oEAAoE;YACpE,qEAAqE;YACrE,8DAA8D;YAC9D,0EAA0E;YAC1E,wEAAwE;YACxE,qEAAqE;YACrE,eAAe;YACf,MAAM,OAAO,CAAC,iBAAiB,CAAC;gBAC9B,GAAG,EAAE,qBAAqB;gBAC1B,eAAe,EAAE,qBAAqB,CAAC;oBACrC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,aAAa;oBAC/B,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;oBACrB,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;iBACtB,CAAC;aACH,CAAC,CAAC;YACH,MAAM,IAAI,GAAI,OAAO,CAAC,SAAqD,CAAC,SAAS,CAAC;YACtF,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,uEAAuE;YACvE,iEAAiE;YACjE,qEAAqE;YACrE,2DAA2D;YAC3D,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,0BAA0B,IAAI,EAAE,CAAC;YAC3E,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,iDAAiD;YACjD,MAAM,QAAQ,GACZ,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC/F,MAAM,aAAa,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;YACzF,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,cAAc,GAAG,GAAS,EAAE;gBAChC,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,WAAW,CAAC,eAAe,GAAG,IAAI,CAAC;gBACnC,OAAO,CAAC,IAAI,CACV,wEAAwE;oBACtE,qFAAqF,CACxF,CAAC;YACJ,CAAC,CAAC;YACF,MAAM,OAAO,CAAC,iBAAiB,CAAC;gBAC9B,GAAG,EAAE,aAAa;gBAClB,eAAe,EAAE,qBAAqB,CAAC;oBACrC,KAAK,CAAC,IAAI;wBACR,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;wBAC9C,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBACtD,CAAC;oBACD,KAAK,CAAC,KAAK,CAAC,KAAK;wBACf,IAAI,QAAQ;4BAAE,OAAO,CAAC,+CAA+C;wBACrE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;4BAC5C,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,aAAa;4BACtB,IAAI,EAAE,KAAK;4BACX,8DAA8D;4BAC9D,kEAAkE;4BAClE,6DAA6D;4BAC7D,8DAA8D;4BAC9D,4DAA4D;4BAC5D,yDAAyD;4BACzD,yCAAyC;4BACzC,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC;yBAChC,CAAC,CAAC;wBACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;4BAAE,OAAO,cAAc,EAAE,CAAC;wBAChD,IAAI,CAAC,GAAG,CAAC,EAAE;4BAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;wBAC5D,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBACvC,CAAC;oBACD,KAAK,CAAC,KAAK;wBACT,IAAI,QAAQ;4BAAE,OAAO;wBACrB,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC9F,CAAC;iBACF,CAAC;aACH,CAAC,CAAC;YACH,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC;YAElC,uEAAuE;YACvE,oEAAoE;YACpE,kDAAkD;YAClD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBACjC,IAAI,QAAQ;oBAAE,OAAO;gBACrB,KAAK,KAAK,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;oBACnF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACvB,cAAc,EAAE,CAAC;wBACjB,aAAa,CAAC,SAAS,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACf,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE;oBACvC,aAAa,CAAC,SAAS,CAAC,CAAC;oBACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,KAAK,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACzG,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;YAED,kEAAkE;YAClE,iEAAiE;YACjE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,cAAc,GAAyC,IAAI,CAAC;YAChE,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE;gBAChC,IAAI,QAAQ;oBAAE,OAAO;gBACrB,IAAI,cAAc;oBAAE,YAAY,CAAC,cAAc,CAAC,CAAC;gBACjD,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC/B,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;wBAC1B,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,aAAa;wBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;qBAC3D,CAAC,CAAC,IAAI,CACL,CAAC,GAAG,EAAE,EAAE;wBACN,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;4BAAE,cAAc,EAAE,CAAC;6BACpC,IAAI,GAAG,CAAC,EAAE;4BAAE,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBACxD,CAAC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAC/D,CAAC;gBACJ,CAAC,EAAE,GAAG,CAAC,CAAC;YACV,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,qEAAqE;YACrE,iEAAiE;YACjE,iEAAiE;YACjE,2BAA2B;YAC3B,MAAM,YAAY,GAAG,GAAS,EAAE;gBAC9B,MAAM,SAAS,GACb,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC;oBAClF,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;oBACjD,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC;oBAC7C,OAAO;oBACP,cAAc,EAAE,OAAO,CAAC,KAAK;oBAC7B,SAAS,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;oBACxC,SAAS;oBACT,eAAe,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;oBAC5C,SAAS,EAAE;wBACT,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;wBAChC,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B;iBACF,CAAC,CAAC,CAAC;gBACJ,KAAK,CAAC,kBAAkB,EAAE;oBACxB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI;oBACJ,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC;iBAC/B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC;YAEF,wEAAwE;YACxE,uEAAuE;YACvE,wEAAwE;YACxE,wCAAwC;YACxC,IAAI,YAAY,GAAyC,IAAI,CAAC;YAC9D,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;gBACnB,IAAI,YAAY;oBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC7C,YAAY,GAAG,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,mEAAmE;YACnE,6CAA6C;YAC7C,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE;oBACvC,YAAY,EAAE,CAAC;gBACjB,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,wEAAwE;YACxE,0EAA0E;YAC1E,sEAAsE;YACtE,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACzF,IAAI,QAAQ,EAAE,CAAC;gBACb,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC/B,OAAO,CAAC,IAAI,CACV,wFAAwF;oBACtF,qFAAqF,CACxF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,sEAAsE;gBACtE,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC9D,WAAW,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,WAAW,CAAC,SAAS,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,KAAK,CACX,8EAA8E,EAC9E,WAAW,CAAC,SAAS,CACtB,CAAC;IACJ,CAAC;AAED,iFAAiF;AACjF,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AACrE,wEAAwE;AACxE,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,kEAAkE;AAClE,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,sCAAsC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;;YACrE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,yDAAyD;IACtF,CAAC;IACD,wBAAwB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QACtC,IAAI,IAAI;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YACjC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,sCAAsC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,yDAAyD;QACjF,CAAC;IACH,CAAC;IACD,kBAAkB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QAChC,IAAI,IAAI;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YACjC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,OAAO,CAAC,IAAI,CACV,oEAAoE;IAClE,CAAC,SAAS;QACR,CAAC,CAAC,uFAAuF;QACzF,CAAC,CAAC,WAAW,CAAC,SAAS;YACrB,CAAC,CAAC,WAAW,WAAW,CAAC,SAAS,GAAG;YACrC,CAAC,CAAC,qBAAqB,CAAC;IAC5B,yCAAyC,CAC5C,CAAC;AAEF,IAAI,mBAAmB,GAAG,KAAK,CAAC;AAChC,SAAS,mBAAmB,CAAC,UAA8B;IACzD,IAAI,mBAAmB,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO;IACxF,mBAAmB,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,IAAI,CACV,uFAAuF;QACrF,sFAAsF,CACzF,CAAC;AACJ,CAAC;AACD,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IAClC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACrC,mBAAmB,CAAC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC3F,CAAC;IACF,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAClD,mBAAmB,CAAC,CAAC,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,4EAA4E;AAC5E,KAAK,UAAU,iBAAiB,CAAC,MAAc;IAC7C,6EAA6E;IAC7E,2EAA2E;IAC3E,kDAAkD;IAClD,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;IACxE,6EAA6E;IAC7E,yEAAyE;IACzE,gFAAgF;IAChF,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC;QACrB,aAAa,CAAC,OAAO,EAAE;YACrB,GAAG;YACH,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;YACrE,wEAAwE;YACxE,wEAAwE;YACxE,uEAAuE;YACvE,qDAAqD;YACrD,WAAW,EAAE;gBACX,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC;gBAClC,SAAS,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;aAC/D;SACF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,WAAW,CAAC,eAAe,GAAG,IAAI,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;AAC7E,CAAC;AACD,IAAI,oBAAoB,EAAE,CAAC;IACzB,2EAA2E;IAC3E,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;KAAM,IAAI,SAAS,EAAE,CAAC;IACrB,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,wEAAwE;IACxE,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1E,IAAI,GAAG;gBAAE,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,iFAAiF;AACjF,EAAE;AACF,4DAA4D;AAC5D,EAAE;AACF,0DAA0D;AAC1D,6EAA6E;AAC7E,4EAA4E;AAC5E,uEAAuE;AACvE,kFAAkF;AAClF,uEAAuE;AACvE,EAAE;AACF,sDAAsD;AACtD,4EAA4E;AAC5E,2EAA2E;AAC3E,qEAAqE;AACrE,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,oEAAoE;AACpE,IAAI,CAAC,SAAS,IAAI,OAAO,gBAAgB,KAAK,WAAW,EAAE,CAAC;IAC1D,qEAAqE;IACrE,OAAO,CAAC,aAAa,CAAC;QACpB,OAAO,EAAE,IAAI,gBAAgB,CAAC,qBAAqB,CAAC;KACrD,CAAC,CAAC;IAEH,+DAA+D;IAC/D,2EAA2E;IAC3E,uEAAuE;IACvE,sEAAsE;IACtE,KAAK,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE;QAC/D,eAAe,CACb,OAAO,CAAC,OAAO,CAAC;QAChB,wEAAwE;QACxE,uEAAuE;QACvE,0DAA0D;QAC1D,OAAiD,EACjD,kBAAkB,EAClB,OAAO,CACR,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,wEAAwE;AACxE,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,iEAAiE;AACjE,IAAI,CAAC,SAAS,IAAI,OAAO,WAAW,KAAK,WAAW,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAClD,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAE,CAAkB,CAAC,IAAc,CAGzE,CAAC;YACF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACtE,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC;YACjC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,kDAAkD,SAAS,GAAG,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/serve/entries/session-store.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Auth session persistence for `pyric dev` — the one genuine
+ * client-fidelity item in the persistence model (flow doc section 3c): real
+ * Firebase keeps you signed in across reloads by DEFAULT
+ * (`browserLocalPersistence`), so the served sandbox does too.
+ *
+ * The user *database* persists with the substrate (`--persist`); the
+ * *session* persists like the real client — independent of data mode, in
+ * web storage, honoring `setPersistence` semantics:
+ *
+ *   LOCAL  (default) → localStorage     (survives reload + browser restart)
+ *   SESSION          → sessionStorage   (survives reload, not the tab)
+ *   NONE             → nothing stored
+ *
+ * A restored session only resolves when the referenced uid still exists in
+ * the sandbox user DB — so ephemeral mode drops helper-created sessions on
+ * reload, consistently (`sandbox.restoreSession` throws, we clear).
+ *
+ * Pure over injected Storage objects so the logic is bun-testable; the
+ * browser wiring (real storages, `onAuthStateChanged` recording, restore at
+ * init) lives in the entries that import this.
+ */
+export type SessionMode = 'LOCAL' | 'SESSION' | 'NONE';
+export interface SessionStores {
+    local: Pick<Storage, 'getItem' | 'setItem' | 'removeItem'>;
+    session: Pick<Storage, 'getItem' | 'setItem' | 'removeItem'>;
+}
+export interface StoredSession {
+    uid: string;
+}
+export declare class SessionStore {
+    private readonly stores;
+    private mode;
+    constructor(stores: SessionStores);
+    /** `setPersistence` parity: switch the backing store and MIGRATE any
+     *  current session into it (the real SDK carries the session over). */
+    setMode(mode: SessionMode): void;
+    save(uid: string): void;
+    /** Reads BOTH storages (localStorage first — matches lookup order when a
+     *  prior page used a different mode). */
+    load(): StoredSession | null;
+    clear(): void;
+    private backing;
+}
+//# sourceMappingURL=session-store.d.ts.map

package/dist/serve/entries/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../../src/serve/entries/session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAIvD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,CAAC;IAC3D,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,qBAAa,YAAY;IAGX,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,IAAI,CAAwB;gBAEP,MAAM,EAAE,aAAa;IAElD;2EACuE;IACvE,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAOhC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMvB;6CACyC;IACzC,IAAI,IAAI,aAAa,GAAG,IAAI;IAc5B,KAAK,IAAI,IAAI;IAKb,OAAO,CAAC,OAAO;CAGhB"}