pyric-tools 0.1.0-alpha.7

package/dist/bridge/server/confirm-prompt.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Terminal prompt rendering + single-key input for prod-mode
+ * confirmation.
+ *
+ * The prompt opens `/dev/tty` directly — not stdin — so that:
+ *
+ *  (a) An inherited / redirected stdin can't feed the prompt fake
+ *      "y" bytes. The controlling tty is what the human at the
+ *      keyboard talks to. A same-user malicious process can't
+ *      write to another process's controlling tty without elevated
+ *      privilege (this is what makes confirmation a real defense).
+ *
+ *  (b) The bridge can run with its stdin closed / piped (e.g.,
+ *      launched from a Vite plugin, an Electron app, or any other
+ *      host) while still being able to ask the user for approval.
+ *
+ * TTY presence detection (`hasInteractiveTTY`) is exported so the
+ * standalone server can refuse to start prod mode in headless
+ * environments.
+ */
+export interface PromptRequest {
+    tool: string;
+    args: Record<string, unknown>;
+    project: string;
+    policy: 'always' | 'session';
+    /** Optional pretty diff lines (current vs proposed). v1: not populated. */
+    diff?: string[];
+    /** Optional auth context highlight (rule-eval as user X). */
+    asUser?: string | null;
+    /** Iso timestamp for header. Default: now. */
+    now?: () => Date;
+    /** Color output. Default: auto-detect from tty. */
+    useColor?: boolean;
+}
+export type PromptKey = 'approve' | 'deny' | 'approve-tool' | 'deny-all' | 'timeout' | 'unknown';
+export interface PromptIO {
+    /** Whether a real interactive tty is available right now. */
+    isInteractive(): boolean;
+    /** Print prompt text to the tty (or fake). */
+    write(text: string): void;
+    /**
+     * Read a single key from the tty. Returns the parsed PromptKey,
+     * or 'timeout' if the deadline expires, or 'unknown' for any
+     * other key (so the caller can re-prompt).
+     */
+    readKey(timeoutMs: number): Promise<PromptKey>;
+    /** Restore tty state / close fds. Safe to call multiple times. */
+    close(): void;
+}
+/** Returns true iff `/dev/tty` exists and is a real TTY. */
+export declare function hasInteractiveTTY(): boolean;
+/**
+ * Open `/dev/tty` and return a PromptIO that reads/writes it in raw
+ * mode. The caller is responsible for `close()` when done.
+ *
+ * Throws if /dev/tty isn't available — caller must check with
+ * `hasInteractiveTTY()` first.
+ */
+export declare function openTtyPromptIO(): PromptIO;
+/** Map a raw single character to a semantic PromptKey. */
+export declare function parseKey(ch: string): PromptKey;
+/**
+ * Build the multi-line prompt string. Pure function — no I/O —
+ * so it's straightforward to unit-test.
+ */
+export declare function renderPrompt(req: PromptRequest): string;
+/**
+ * Pretty-print args. Truncates at 2KB (showing `…` and a hint). The
+ * intent is "enough to recognise the call," not the full payload —
+ * for that, the audit log has the unmodified args.
+ */
+export declare function formatArgs(args: Record<string, unknown>): string;
+//# sourceMappingURL=confirm-prompt.d.ts.map

package/dist/bridge/server/confirm-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-prompt.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/confirm-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,MAAM,GACN,cAAc,GACd,UAAU,GACV,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,QAAQ;IACvB,6DAA6D;IAC7D,aAAa,IAAI,OAAO,CAAC;IACzB,8CAA8C;IAC9C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,kEAAkE;IAClE,KAAK,IAAI,IAAI,CAAC;CACf;AAID,4DAA4D;AAC5D,wBAAgB,iBAAiB,IAAI,OAAO,CAgB3C;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,QAAQ,CAgD1C;AAED,0DAA0D;AAC1D,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,CAe9C;AAiBD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CA6CvD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAkBhE"}

package/dist/bridge/server/confirm-prompt.js

@@ -0,0 +1,199 @@
+/**
+ * Terminal prompt rendering + single-key input for prod-mode
+ * confirmation.
+ *
+ * The prompt opens `/dev/tty` directly — not stdin — so that:
+ *
+ *  (a) An inherited / redirected stdin can't feed the prompt fake
+ *      "y" bytes. The controlling tty is what the human at the
+ *      keyboard talks to. A same-user malicious process can't
+ *      write to another process's controlling tty without elevated
+ *      privilege (this is what makes confirmation a real defense).
+ *
+ *  (b) The bridge can run with its stdin closed / piped (e.g.,
+ *      launched from a Vite plugin, an Electron app, or any other
+ *      host) while still being able to ask the user for approval.
+ *
+ * TTY presence detection (`hasInteractiveTTY`) is exported so the
+ * standalone server can refuse to start prod mode in headless
+ * environments.
+ */
+import { openSync, closeSync } from 'node:fs';
+import { isatty } from 'node:tty';
+import { ReadStream, WriteStream } from 'node:tty';
+// ── Interactive (real /dev/tty) implementation ────────────────────────
+/** Returns true iff `/dev/tty` exists and is a real TTY. */
+export function hasInteractiveTTY() {
+    let fd = null;
+    try {
+        fd = openSync('/dev/tty', 'r+');
+        return isatty(fd);
+    }
+    catch {
+        return false;
+    }
+    finally {
+        if (fd !== null) {
+            try {
+                closeSync(fd);
+            }
+            catch {
+                // ignore
+            }
+        }
+    }
+}
+/**
+ * Open `/dev/tty` and return a PromptIO that reads/writes it in raw
+ * mode. The caller is responsible for `close()` when done.
+ *
+ * Throws if /dev/tty isn't available — caller must check with
+ * `hasInteractiveTTY()` first.
+ */
+export function openTtyPromptIO() {
+    const fd = openSync('/dev/tty', 'r+');
+    const reader = new ReadStream(fd);
+    const writer = new WriteStream(fd);
+    reader.setRawMode(true);
+    reader.resume();
+    return {
+        isInteractive: () => true,
+        write(text) {
+            writer.write(text);
+        },
+        readKey(timeoutMs) {
+            return new Promise((resolve) => {
+                let done = false;
+                const finish = (key) => {
+                    if (done)
+                        return;
+                    done = true;
+                    reader.off('data', onData);
+                    clearTimeout(timer);
+                    resolve(key);
+                };
+                const timer = setTimeout(() => finish('timeout'), timeoutMs);
+                const onData = (chunk) => {
+                    const byte = chunk[0];
+                    if (byte === undefined)
+                        return;
+                    // Ctrl-C aborts as deny.
+                    if (byte === 0x03) {
+                        finish('deny');
+                        return;
+                    }
+                    finish(parseKey(String.fromCharCode(byte)));
+                };
+                reader.on('data', onData);
+            });
+        },
+        close() {
+            try {
+                reader.setRawMode(false);
+                reader.pause();
+                reader.destroy();
+                writer.destroy();
+                closeSync(fd);
+            }
+            catch {
+                // best-effort
+            }
+        },
+    };
+}
+/** Map a raw single character to a semantic PromptKey. */
+export function parseKey(ch) {
+    switch (ch) {
+        case 'y':
+        case 'Y':
+            return 'approve';
+        case 'n':
+        case 'N':
+            return 'deny';
+        case 'a':
+            return 'approve-tool';
+        case 'D':
+            return 'deny-all';
+        default:
+            return 'unknown';
+    }
+}
+// ── Prompt rendering ──────────────────────────────────────────────────
+const RESET = '\x1b[0m';
+const BOLD = '\x1b[1m';
+const DIM = '\x1b[2m';
+const RED = '\x1b[31m';
+const YELLOW = '\x1b[33m';
+const CYAN = '\x1b[36m';
+const SEP = '─────────────────────────────────────────────────────────';
+function color(text, ansi, useColor) {
+    return useColor ? `${ansi}${text}${RESET}` : text;
+}
+/**
+ * Build the multi-line prompt string. Pure function — no I/O —
+ * so it's straightforward to unit-test.
+ */
+export function renderPrompt(req) {
+    const useColor = req.useColor ?? true;
+    const now = (req.now ?? (() => new Date()))();
+    const hh = now.getUTCHours().toString().padStart(2, '0');
+    const mm = now.getUTCMinutes().toString().padStart(2, '0');
+    const ss = now.getUTCSeconds().toString().padStart(2, '0');
+    const time = `${hh}:${mm}:${ss}`;
+    const isDelete = req.tool.includes('delete') || req.tool.includes('remove');
+    const headerIcon = isDelete ? '⛔' : '⚠';
+    const headerColor = isDelete ? RED : YELLOW;
+    const argsBlock = formatArgs(req.args);
+    const lines = [];
+    lines.push('');
+    lines.push(color(SEP, headerColor, useColor));
+    lines.push(color(`[pyric prod ${time}]  ${headerIcon}  CONFIRM TOOL CALL`, BOLD + headerColor, useColor));
+    lines.push(color(SEP, headerColor, useColor));
+    lines.push(`Project:  ${color(req.project, CYAN, useColor)}`);
+    lines.push(`Tool:     ${color(req.tool, BOLD, useColor)}`);
+    if (req.asUser) {
+        lines.push(`As user:  ${color(req.asUser, YELLOW, useColor)}`);
+    }
+    lines.push(`Args:     ${argsBlock}`);
+    if (req.diff && req.diff.length > 0) {
+        lines.push(`Diff:`);
+        for (const dline of req.diff)
+            lines.push(`          ${dline}`);
+    }
+    lines.push(color(SEP, headerColor, useColor));
+    lines.push(`  ${color('[y]', BOLD, useColor)}   approve this call`);
+    lines.push(`  ${color('[n]', BOLD, useColor)}   deny this call                          ${color('(default after timeout)', DIM, useColor)}`);
+    if (req.policy === 'always') {
+        lines.push(`  ${color('[a]', BOLD, useColor)}   approve all \`${req.tool}\` for this session`);
+    }
+    lines.push(`  ${color('[D]', BOLD + RED, useColor)}   DENY everything for the rest of this session`);
+    lines.push(color(SEP, headerColor, useColor));
+    lines.push(`> `);
+    return lines.join('\n');
+}
+/**
+ * Pretty-print args. Truncates at 2KB (showing `…` and a hint). The
+ * intent is "enough to recognise the call," not the full payload —
+ * for that, the audit log has the unmodified args.
+ */
+export function formatArgs(args) {
+    const MAX_BYTES = 2048;
+    const indent = ' '.repeat(10); // align under "Args:     "
+    let text;
+    try {
+        text = JSON.stringify(args, null, 2);
+    }
+    catch {
+        text = String(args);
+    }
+    if (text.length > MAX_BYTES) {
+        text = text.slice(0, MAX_BYTES) + '\n... (truncated; full args in audit log)';
+    }
+    // Re-indent every line except the first by 10 spaces so output
+    // aligns under the "Args:     " label.
+    const lines = text.split('\n');
+    const head = lines[0] ?? '';
+    const rest = lines.slice(1).map((l) => indent + l);
+    return [head, ...rest].join('\n');
+}
+//# sourceMappingURL=confirm-prompt.js.map

package/dist/bridge/server/confirm-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-prompt.js","sourceRoot":"","sources":["../../../src/bridge/server/confirm-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAwCnD,yEAAyE;AAEzE,4DAA4D;AAC5D,MAAM,UAAU,iBAAiB;IAC/B,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,CAAC,MAAM,EAAE,CAAC;IAEhB,OAAO;QACL,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;QACzB,KAAK,CAAC,IAAY;YAChB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,SAAiB;YACvB,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;gBACxC,IAAI,IAAI,GAAG,KAAK,CAAC;gBACjB,MAAM,MAAM,GAAG,CAAC,GAAc,EAAE,EAAE;oBAChC,IAAI,IAAI;wBAAE,OAAO;oBACjB,IAAI,GAAG,IAAI,CAAC;oBACZ,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC3B,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CAAC,GAAG,CAAC,CAAC;gBACf,CAAC,CAAC;gBACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC7D,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;oBAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,IAAI,IAAI,KAAK,SAAS;wBAAE,OAAO;oBAC/B,yBAAyB;oBACzB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;wBAClB,MAAM,CAAC,MAAM,CAAC,CAAC;wBACf,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC9C,CAAC,CAAC;gBACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK;YACH,IAAI,CAAC;gBACH,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBACzB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,QAAQ,CAAC,EAAU;IACjC,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,GAAG,CAAC;QACT,KAAK,GAAG;YACN,OAAO,SAAS,CAAC;QACnB,KAAK,GAAG,CAAC;QACT,KAAK,GAAG;YACN,OAAO,MAAM,CAAC;QAChB,KAAK,GAAG;YACN,OAAO,cAAc,CAAC;QACxB,KAAK,GAAG;YACN,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,IAAI,GAAG,UAAU,CAAC;AAExB,MAAM,GAAG,GAAG,2DAA2D,CAAC;AAExE,SAAS,KAAK,CAAC,IAAY,EAAE,IAAY,EAAE,QAAiB;IAC1D,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAkB;IAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IAC9C,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;IAEjC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACxC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IAE5C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,eAAe,IAAI,MAAM,UAAU,qBAAqB,EAAE,IAAI,GAAG,WAAW,EAAE,QAAQ,CAAC,CAC9F,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3D,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC,CAAC;IACrC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,8CAA8C,KAAK,CAAC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CACjI,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,oBAAoB,GAAG,CAAC,IAAI,qBAAqB,CACnF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,GAAG,EAAE,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IACrG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAA6B;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC;IACvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B;IAC1D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,2CAA2C,CAAC;IAChF,CAAC;IACD,+DAA+D;IAC/D,uCAAuC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/bridge/server/confirm.d.ts

@@ -0,0 +1,92 @@
+/**
+ * `ConfirmHandler` interface + factory functions.
+ *
+ *   - `createInteractiveConfirmHandler` — production default for
+ *     prod-mode bridges with a TTY. Wires `confirm-policy.ts` +
+ *     `confirm-prompt.ts` + session state + timeout into one
+ *     orchestrated dispatcher.
+ *   - `createAutoApproveHandler` — auto-approves everything. For
+ *     tests + `--non-interactive --i-mean-it` (loud warning at the
+ *     CLI layer).
+ *   - `createDenyAllHandler` — refuses everything. Fail-safe used
+ *     when prod mode is configured without a TTY.
+ *   - `createPolicyHandler` — CI-friendly. Uses an explicit
+ *     allow-list / deny-list; anything not in either gets the
+ *     configured default.
+ *
+ * Concurrent prompts queue inside `createInteractiveConfirmHandler`
+ * — one prompt at a time. Session state ('a' → tool whitelist,
+ * 'D' → session-wide deny) persists until the bridge restarts.
+ */
+import type { BridgeMode } from '../protocol.js';
+import { type ConfirmPolicy } from './confirm-policy.js';
+import { type PromptIO, hasInteractiveTTY } from './confirm-prompt.js';
+import type { BridgeLogger } from './logger.js';
+export type { ConfirmPolicy } from './confirm-policy.js';
+export interface ConfirmRequest {
+    tool: string;
+    args: Record<string, unknown>;
+    mode: BridgeMode;
+    project: string;
+}
+export interface ConfirmDecision {
+    approved: boolean;
+    reason: 'policy-never' | 'policy-deny' | 'session-cached-approve' | 'session-cached-deny' | 'user-approved' | 'user-denied' | 'timeout' | 'no-tty';
+    /** Wall-clock ms from `ask()` start to decision. */
+    elapsedMs: number;
+    /** When the prompt was actually shown (omitted for non-prompted paths). */
+    promptShownAt?: Date;
+}
+export interface ConfirmHandler {
+    /**
+     * Get a decision for one tool call. Implementations MUST resolve
+     * within `timeoutMs + small overhead` even if the user is idle.
+     * Concurrent calls serialise (one prompt at a time).
+     */
+    ask(req: ConfirmRequest): Promise<ConfirmDecision>;
+    /** Cleanup tty / file descriptors. Safe to call repeatedly. */
+    close(): void;
+}
+export { hasInteractiveTTY };
+export interface InteractiveOptions {
+    /** Policy map; usually built via `buildPolicyMap(DEFAULT_PROD_POLICIES, overrides)`. */
+    policies: ReadonlyMap<string, ConfirmPolicy>;
+    /** Default policy for tools not in the map. */
+    fallback?: ConfirmPolicy;
+    /** Per-prompt timeout. Default 45_000 (45s). */
+    timeoutMs?: number;
+    /** Optional logger for lifecycle events (start/deny/approve). */
+    logger?: BridgeLogger;
+    /** Optional PromptIO override (tests inject a fake). Defaults to /dev/tty. */
+    io?: PromptIO;
+    /** Optional clock source for the prompt's timestamp. */
+    now?: () => Date;
+    /** Color output (default true if io supports it). */
+    useColor?: boolean;
+}
+/**
+ * Production-default handler. Reads from /dev/tty (or the supplied
+ * `io`), enforces per-tool policies, queues concurrent prompts,
+ * caches session-rule presses.
+ */
+export declare function createInteractiveConfirmHandler(opts: InteractiveOptions): ConfirmHandler;
+/** Approve everything. Tests + `--non-interactive --i-mean-it`. */
+export declare function createAutoApproveHandler(): ConfirmHandler;
+/** Deny everything. Fail-safe used when prod mode lacks a TTY. */
+export declare function createDenyAllHandler(): ConfirmHandler;
+export interface PolicyHandlerOptions {
+    /** Tools that auto-approve. */
+    allow: ReadonlySet<string>;
+    /** Tools that auto-deny. */
+    deny?: ReadonlySet<string>;
+    /** Behavior for tools in neither set. */
+    default: 'approve' | 'deny';
+}
+/**
+ * CI-friendly handler with explicit allow / deny lists. No TTY,
+ * no session state. Anything not in either list gets `default`.
+ *
+ * Used by `--non-interactive --auto-approve <list>`.
+ */
+export declare function createPolicyHandler(opts: PolicyHandlerOptions): ConfirmHandler;
+//# sourceMappingURL=confirm.d.ts.map

package/dist/bridge/server/confirm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/confirm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,KAAK,aAAa,EAGnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,QAAQ,EAEb,iBAAiB,EAGlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EACF,cAAc,GACd,aAAa,GACb,wBAAwB,GACxB,qBAAqB,GACrB,eAAe,GACf,aAAa,GACb,SAAS,GACT,QAAQ,CAAC;IACb,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,GAAG,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACnD,+DAA+D;IAC/D,KAAK,IAAI,IAAI,CAAC;CACf;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAI7B,MAAM,WAAW,kBAAkB;IACjC,wFAAwF;IACxF,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7C,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,8EAA8E;IAC9E,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,kBAAkB,GACvB,cAAc,CAoGhB;AAsDD,mEAAmE;AACnE,wBAAgB,wBAAwB,IAAI,cAAc,CAOzD;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,IAAI,cAAc,CAOrD;AAED,MAAM,WAAW,oBAAoB;IACnC,+BAA+B;IAC/B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,4BAA4B;IAC5B,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,yCAAyC;IACzC,OAAO,EAAE,SAAS,GAAG,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,cAAc,CAoB9E"}

package/dist/bridge/server/confirm.js

@@ -0,0 +1,210 @@
+/**
+ * `ConfirmHandler` interface + factory functions.
+ *
+ *   - `createInteractiveConfirmHandler` — production default for
+ *     prod-mode bridges with a TTY. Wires `confirm-policy.ts` +
+ *     `confirm-prompt.ts` + session state + timeout into one
+ *     orchestrated dispatcher.
+ *   - `createAutoApproveHandler` — auto-approves everything. For
+ *     tests + `--non-interactive --i-mean-it` (loud warning at the
+ *     CLI layer).
+ *   - `createDenyAllHandler` — refuses everything. Fail-safe used
+ *     when prod mode is configured without a TTY.
+ *   - `createPolicyHandler` — CI-friendly. Uses an explicit
+ *     allow-list / deny-list; anything not in either gets the
+ *     configured default.
+ *
+ * Concurrent prompts queue inside `createInteractiveConfirmHandler`
+ * — one prompt at a time. Session state ('a' → tool whitelist,
+ * 'D' → session-wide deny) persists until the bridge restarts.
+ */
+import { policyFor, FALLBACK_PROD_POLICY, } from './confirm-policy.js';
+import { hasInteractiveTTY, openTtyPromptIO, renderPrompt, } from './confirm-prompt.js';
+import { createSilentLogger } from './logger.js';
+export { hasInteractiveTTY };
+/**
+ * Production-default handler. Reads from /dev/tty (or the supplied
+ * `io`), enforces per-tool policies, queues concurrent prompts,
+ * caches session-rule presses.
+ */
+export function createInteractiveConfirmHandler(opts) {
+    const policies = opts.policies;
+    const fallback = opts.fallback ?? FALLBACK_PROD_POLICY;
+    const timeoutMs = opts.timeoutMs ?? 45_000;
+    const logger = opts.logger ?? createSilentLogger();
+    const io = opts.io ?? openTtyPromptIO();
+    const useColor = opts.useColor ?? true;
+    const now = opts.now ?? (() => new Date());
+    // Session state
+    const approvedTools = new Set();
+    let sessionDenyAll = false;
+    // One-prompt-at-a-time queue. Each ask() chains its prompt off
+    // the previous promise so we never have two prompts rendered
+    // simultaneously to the same tty.
+    let queueTail = Promise.resolve();
+    async function ask(req) {
+        const startedAtMs = Date.now();
+        // ── Fast paths (no prompt) ────────────────────────────────────
+        if (sessionDenyAll) {
+            return {
+                approved: false,
+                reason: 'session-cached-deny',
+                elapsedMs: Date.now() - startedAtMs,
+            };
+        }
+        const policy = policyFor(policies, req.tool, fallback);
+        if (policy === 'never') {
+            return { approved: true, reason: 'policy-never', elapsedMs: Date.now() - startedAtMs };
+        }
+        if (policy === 'deny') {
+            return { approved: false, reason: 'policy-deny', elapsedMs: Date.now() - startedAtMs };
+        }
+        if (approvedTools.has(req.tool)) {
+            return {
+                approved: true,
+                reason: 'session-cached-approve',
+                elapsedMs: Date.now() - startedAtMs,
+            };
+        }
+        // ── Slow path (interactive prompt, serialised) ────────────────
+        const myTurn = queueTail.then(async () => {
+            // Re-check session state after waiting in the queue — earlier
+            // prompts could have flipped `sessionDenyAll` or whitelisted
+            // this tool.
+            if (sessionDenyAll) {
+                return {
+                    approved: false,
+                    reason: 'session-cached-deny',
+                    elapsedMs: Date.now() - startedAtMs,
+                };
+            }
+            if (approvedTools.has(req.tool)) {
+                return {
+                    approved: true,
+                    reason: 'session-cached-approve',
+                    elapsedMs: Date.now() - startedAtMs,
+                };
+            }
+            const promptShownAt = now();
+            const promptText = renderPrompt({
+                tool: req.tool,
+                args: req.args,
+                project: req.project,
+                policy: policy,
+                now,
+                useColor,
+                asUser: extractAsUser(req.args),
+            });
+            io.write(promptText);
+            logger.info(`prompting: ${req.tool}`);
+            const key = await io.readKey(timeoutMs);
+            // Print a newline after the response key so subsequent output
+            // appears on its own line.
+            io.write('\n');
+            return decideFromKey(key, req, approvedTools, () => {
+                sessionDenyAll = true;
+            }, startedAtMs, promptShownAt, logger);
+        });
+        // Tail tracks the OUTCOME so the next prompt only starts after
+        // this one resolves (either via key or via timeout).
+        queueTail = myTurn.catch(() => undefined);
+        return myTurn;
+    }
+    function close() {
+        try {
+            io.close();
+        }
+        catch {
+            // best-effort
+        }
+    }
+    return { ask, close };
+}
+function decideFromKey(key, req, approvedTools, setSessionDenyAll, startedAtMs, promptShownAt, logger) {
+    const base = {
+        elapsedMs: Date.now() - startedAtMs,
+        promptShownAt,
+    };
+    switch (key) {
+        case 'approve':
+            logger.info(`approved: ${req.tool}`);
+            return { ...base, approved: true, reason: 'user-approved' };
+        case 'deny':
+            logger.info(`denied: ${req.tool}`);
+            return { ...base, approved: false, reason: 'user-denied' };
+        case 'approve-tool':
+            approvedTools.add(req.tool);
+            logger.info(`session-approved tool: ${req.tool}`);
+            return { ...base, approved: true, reason: 'user-approved' };
+        case 'deny-all':
+            setSessionDenyAll();
+            logger.info(`session-wide DENY engaged`);
+            return { ...base, approved: false, reason: 'user-denied' };
+        case 'timeout':
+            logger.info(`prompt timed out: ${req.tool}`);
+            return { ...base, approved: false, reason: 'timeout' };
+        case 'unknown':
+        default:
+            // Treat unknown keys as deny — safer than re-prompting and
+            // possibly hanging Claude Code past its tool timeout.
+            logger.info(`prompt unknown-key (denied): ${req.tool}`);
+            return { ...base, approved: false, reason: 'user-denied' };
+    }
+}
+function extractAsUser(args) {
+    // Tools that run with rule evaluation usually pass an `auth: { uid }` arg.
+    const auth = args.auth;
+    if (auth && typeof auth === 'object') {
+        const uid = auth.uid;
+        if (typeof uid === 'string' && uid.length > 0)
+            return uid;
+    }
+    return null;
+}
+// ── Non-interactive factories ────────────────────────────────────────
+/** Approve everything. Tests + `--non-interactive --i-mean-it`. */
+export function createAutoApproveHandler() {
+    return {
+        async ask() {
+            return { approved: true, reason: 'policy-never', elapsedMs: 0 };
+        },
+        close() { },
+    };
+}
+/** Deny everything. Fail-safe used when prod mode lacks a TTY. */
+export function createDenyAllHandler() {
+    return {
+        async ask() {
+            return { approved: false, reason: 'no-tty', elapsedMs: 0 };
+        },
+        close() { },
+    };
+}
+/**
+ * CI-friendly handler with explicit allow / deny lists. No TTY,
+ * no session state. Anything not in either list gets `default`.
+ *
+ * Used by `--non-interactive --auto-approve <list>`.
+ */
+export function createPolicyHandler(opts) {
+    const allow = opts.allow;
+    const deny = opts.deny ?? new Set();
+    const fallback = opts.default;
+    return {
+        async ask(req) {
+            if (allow.has(req.tool)) {
+                return { approved: true, reason: 'policy-never', elapsedMs: 0 };
+            }
+            if (deny.has(req.tool)) {
+                return { approved: false, reason: 'policy-deny', elapsedMs: 0 };
+            }
+            return {
+                approved: fallback === 'approve',
+                reason: fallback === 'approve' ? 'policy-never' : 'policy-deny',
+                elapsedMs: 0,
+            };
+        },
+        close() { },
+    };
+}
+//# sourceMappingURL=confirm.js.map

package/dist/bridge/server/confirm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.js","sourceRoot":"","sources":["../../../src/bridge/server/confirm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAEL,SAAS,EACT,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,iBAAiB,EACjB,eAAe,EACf,YAAY,GACb,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAuCjD,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAqB7B;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAAwB;IAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,oBAAoB,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACnD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,eAAe,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,gBAAgB;IAChB,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,+DAA+D;IAC/D,6DAA6D;IAC7D,kCAAkC;IAClC,IAAI,SAAS,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEpD,KAAK,UAAU,GAAG,CAAC,GAAmB;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE/B,iEAAiE;QACjE,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,qBAAqB;gBAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;aACpC,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,wBAAwB;gBAChC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;aACpC,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACvC,8DAA8D;YAC9D,6DAA6D;YAC7D,aAAa;YACb,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,qBAA8B;oBACtC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;iBACpC,CAAC;YACJ,CAAC;YACD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,wBAAiC;oBACzC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;iBACpC,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,YAAY,CAAC;gBAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,MAAM,EAAE,MAA8B;gBACtC,GAAG;gBACH,QAAQ;gBACR,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;aAChC,CAAC,CAAC;YACH,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAEtC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACxC,8DAA8D;YAC9D,2BAA2B;YAC3B,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACf,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE;gBACjD,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,+DAA+D;QAC/D,qDAAqD;QACrD,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,KAAK;QACZ,IAAI,CAAC;YACH,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,aAAa,CACpB,GAAc,EACd,GAAmB,EACnB,aAA0B,EAC1B,iBAA6B,EAC7B,WAAmB,EACnB,aAAmB,EACnB,MAAoB;IAEpB,MAAM,IAAI,GAAG;QACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;QACnC,aAAa;KACd,CAAC;IACF,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAC9D,KAAK,MAAM;YACT,MAAM,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACnC,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC7D,KAAK,cAAc;YACjB,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAC9D,KAAK,UAAU;YACb,iBAAiB,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACzC,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC7D,KAAK,SAAS;YACZ,MAAM,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzD,KAAK,SAAS,CAAC;QACf;YACE,2DAA2D;YAC3D,sDAAsD;YACtD,MAAM,CAAC,IAAI,CAAC,gCAAgC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAA6B;IAClD,2EAA2E;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,GAAG,GAAI,IAA0B,CAAC,GAAG,CAAC;QAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AAExE,mEAAmE;AACnE,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,KAAK,CAAC,GAAG;YACP,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAClE,CAAC;QACD,KAAK,KAAI,CAAC;KACX,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,KAAK,CAAC,GAAG;YACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,KAAI,CAAC;KACX,CAAC;AACJ,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,EAAU,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YAClE,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YAClE,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,QAAQ,KAAK,SAAS;gBAChC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa;gBAC/D,SAAS,EAAE,CAAC;aACb,CAAC;QACJ,CAAC;QACD,KAAK,KAAI,CAAC;KACX,CAAC;AACJ,CAAC"}

package/dist/bridge/server/headless.d.ts

@@ -0,0 +1,36 @@
+import { type Sandbox } from 'pyric/sandbox';
+import { type LocalBridgeOptions } from './local-bridge.js';
+/** Where the headless sandbox snapshot is persisted (relative to the project
+ *  dir). Deliberately separate from serve's `state.json` (different format). */
+export declare const HEADLESS_STATE_RELATIVE: string;
+/**
+ * Build the headless MCP server around an in-process sandbox. Pure: no I/O and
+ * no transport, so callers (and tests) can drive it however they like. Mirrors
+ * the served bridge's construction (forwarded data-plane + in-process rules
+ * tools), with `dispatch` bound to the local sandbox instead of a ws peer.
+ */
+export declare function buildHeadlessMcpServer(sandbox: Sandbox, opts?: LocalBridgeOptions): import("@modelcontextprotocol/sdk/server/mcp").McpServer;
+/**
+ * Load `<cwd>/firestore.rules` into the sandbox when present. Returns the path
+ * it loaded, or null if there was no rules file. Without rules, rules-enforcing
+ * (`as:{uid}`) ops fall back to the sandbox's default; admin ops are unaffected.
+ */
+export declare function loadProjectRules(sandbox: Sandbox, cwd: string): string | null;
+/**
+ * Persist the sandbox to `<cwd>/.pyric/state/headless.json` using the v3 bundle
+ * codec (the same `serializeToBuckets` + `bundleRecords` the worker uses). Atomic
+ * tmp+rename so a crash mid-write never truncates the live file.
+ */
+export declare function saveSandboxSnapshot(sandbox: Sandbox, cwd: string): void;
+/**
+ * Restore the sandbox from the headless snapshot file if present (a clobber via
+ * `loadSnapshot`). Returns the restored doc count, or null when there is no file.
+ */
+export declare function loadSandboxSnapshot(sandbox: Sandbox, cwd: string): number | null;
+/**
+ * Run the headless MCP server over stdio. Loads `.pyric/state/headless.json` on
+ * start, debounces a save after each dispatch, and flushes on shutdown. Resolves
+ * with an exit code when the stdio transport closes (the editor disconnects).
+ */
+export declare function runHeadlessMcp(cwd?: string): Promise<number>;
+//# sourceMappingURL=headless.d.ts.map

package/dist/bridge/server/headless.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headless.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/headless.ts"],"names":[],"mappings":"AAoBA,OAAO,EAML,KAAK,OAAO,EACb,MAAM,eAAe,CAAC;AAIvB,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE/E;gFACgF;AAChF,eAAO,MAAM,uBAAuB,QAA2C,CAAC;AAEhF;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,kBAAkB,4DAMjF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK7E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAQvE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMhF;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmDjF"}