pyric-tools 0.1.0-alpha.7

package/dist/bridge/server/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../src/bridge/server/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAehD,SAAS,WAAW,CAAC,MAAwB,EAAE,IAAY,EAAE,OAAe;IAC1E,mEAAmE;IACnE,8DAA8D;IAC9D,+DAA+D;IAC/D,uBAAuB;IACvB,MAAM,IAAI,GAAG;QACX,GAAG,MAAM;QACT,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KAC1B,CAAC;IACF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;aACpC;SACF;QACD,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;KACpB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,OAA6B;IAE7B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;IAEH,gEAAgE;IAChE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAmB,CAAC,CAAC;QAC7D,4DAA4D;QAC5D,kEAAkE;QAClE,+DAA+D;QAC/D,+CAA+C;QAC9C,MAAM,CAAC,IAA4B,CAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,WAAW,EAChB,KAAK,EACL,KAAK,EAAE,IAA6B,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC,CACF,CAAC;IACJ,CAAC;IAED,0DAA0D;IAC1D,mEAAmE;IACnE,4CAA4C;IAC5C,+DAA+D;IAC/D,kCAAkC;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAElC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAmB,CAAC,CAAC;QAC/D,MAAM,CAAC,IAA4B,CAClC,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,WAAW,EACnB,KAAK,EACL,KAAK,EAAE,IAA6B,EAAE,EAAE;YACtC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,iBAES,CAAC;YAEd,IAAI,YAAY,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,QAAQ;oBACrB,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;oBAC7C,CAAC,CAAC,QAAQ,CAAC;gBACb,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;oBACvB,0DAA0D;oBAC1D,iBAAiB,GAAG;wBAClB,MAAM;wBACN,QAAQ,EAAE,UAAU;wBACpB,MAAM,EAAE,cAAc;wBACtB,UAAU,EAAE,CAAC;qBACd,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC;wBAC/C,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,IAAI,EAAE,IAAI,IAAI,EAAE;wBAChB,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;qBACxB,CAAC,CAAC;oBACH,iBAAiB,GAAG;wBAClB,MAAM;wBACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;wBACnD,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,UAAU,EAAE,QAAQ,CAAC,SAAS;wBAC9B,eAAe,EAAE,QAAQ,CAAC,aAAa,EAAE,WAAW,EAAE;qBACvD,CAAC;oBACF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;wBACvB,MAAM,MAAM,GAAG;4BACb,EAAE,EAAE,KAAK;4BACT,OAAO,EAAE,sBAAsB,QAAQ,CAAC,MAAM,EAAE;yBACjD,CAAC;wBACF,MAAM,CAAC,eAAe,CAAC;4BACrB,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;4BAC9C,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,IAAI,EAAE,IAAI,IAAI,EAAE;4BAChB,MAAM;4BACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;4BACpC,YAAY,EAAE,iBAAiB;yBAChC,CAAC,CAAC;wBACH,OAAO,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;oBAC1D,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,6DAA6D;gBAC7D,0DAA0D;gBAC1D,uDAAuD;gBACvD,MAAM,GAAG,GAAG;oBACV,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;iBAC5B,CAAC;gBACX,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;gBACtD,MAAM,UAAU,GAAG;oBACjB,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB,CAAC;gBACF,MAAM,CAAC,eAAe,CAAC;oBACrB,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;oBAC9C,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,IAAI,IAAI,EAAE;oBAChB,MAAM,EAAE,UAAU;oBAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;oBACpC,YAAY,EAAE,iBAAiB;iBAChC,CAAC,CAAC;gBACH,OAAO,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG;oBACb,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC1D,CAAC;gBACF,MAAM,CAAC,eAAe,CAAC;oBACrB,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;oBAC9C,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,IAAI,IAAI,EAAE;oBAChB,MAAM;oBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;oBACpC,YAAY,EAAE,iBAAiB;iBAChC,CAAC,CAAC;gBACH,OAAO,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/bridge/server/peer.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Bridge transport helpers shared by the bridge mounts.
+ *
+ * `attachPeer` adapts a `ws` WebSocket into either a registered sandbox PEER
+ * (the browser-side `connectBridge` is the other end — first message
+ * `hello`) or a worker-relay CONSUMER (the Node-side `connectRemoteSandbox`
+ * — first message `attach`); `collectBody` buffers a Node request body into
+ * parsed JSON for the stateless MCP transport.
+ *
+ * Both are consumed by `serve/bridge-mount.ts` (the `pyric dev --bridge` and
+ * `pyricSandbox({ bridge })` mount) and `serve/namespace.ts` (capture route).
+ * They live here — not inline in a plugin file — so retiring the standalone
+ * bridge Vite plugin doesn't drag its consumers with it.
+ */
+import type { IncomingMessage } from 'node:http';
+import type { WebSocket } from 'ws';
+import { createBridge, type Bridge } from './bridge.js';
+import { type BridgeMessage } from '../protocol.js';
+export declare function attachPeer(bridge: ReturnType<typeof createBridge>, ws: WebSocket): void;
+/**
+ * One attached worker-relay consumer (the Node `connectRemoteSandbox`
+ * client). Transport-agnostic — `attachPeer` adapts it onto a `ws` socket;
+ * tests drive `handleMessage` directly.
+ */
+export interface ConsumerSession {
+    /** Handle one parsed message from the consumer. */
+    handleMessage(msg: BridgeMessage): void;
+    /** Tear down every subscription this consumer registered. */
+    dispose(): void;
+}
+/**
+ * Create a consumer session over `send`. Correlation ids/subIds on this leg
+ * are CONSUMER-minted and echoed verbatim; the bridge core mints its own ids
+ * for the peer leg (`dispatchWorkerOp` / `subscribeWorker`), so the two legs'
+ * id spaces never mix.
+ */
+export declare function createConsumerSession(bridge: Bridge, send: (msg: BridgeMessage) => void): ConsumerSession;
+export declare function collectBody(req: IncomingMessage): Promise<unknown>;
+//# sourceMappingURL=peer.d.ts.map

package/dist/bridge/server/peer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AAGxB,wBAAgB,UAAU,CACxB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACvC,EAAE,EAAE,SAAS,GACZ,IAAI,CAwFN;AAID;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;IACxC,6DAA6D;IAC7D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GACjC,eAAe,CAmEjB;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBxE"}

package/dist/bridge/server/peer.js

@@ -0,0 +1,189 @@
+import { isBridgeMessage, PEER_REPLACED_CLOSE_CODE, PEER_REPLACED_CLOSE_REASON, } from '../protocol.js';
+import { pyricToolsVersion } from '../../pkg-version.js';
+export function attachPeer(bridge, ws) {
+    let disconnect = null;
+    /** Peer generation captured at registration — tags every inbound frame so
+     *  a replaced tab's socket can't resolve the NEW peer's calls or deliver
+     *  stale subscription snaps (see Bridge.peerGeneration). */
+    let peerGen = 0;
+    let helloed = false;
+    let consumer = null;
+    ws.on('message', (raw) => {
+        let msg;
+        try {
+            msg = JSON.parse(raw.toString());
+        }
+        catch {
+            return;
+        }
+        if (!isBridgeMessage(msg))
+            return;
+        if (msg.type === 'attach') {
+            // Worker-relay consumer (Node client). NOT a peer: attaching never
+            // kicks the browser tab out of last-connection-wins.
+            if (helloed || consumer)
+                return;
+            consumer = createConsumerSession(bridge, (out) => {
+                try {
+                    ws.send(JSON.stringify(out));
+                }
+                catch { }
+            });
+            consumer.handleMessage(msg); // acks with attach-ack
+            return;
+        }
+        if (consumer) {
+            consumer.handleMessage(msg);
+            return;
+        }
+        if (msg.type === 'hello') {
+            if (helloed)
+                return;
+            helloed = true;
+            disconnect = bridge.registerSandboxPeer((out) => {
+                try {
+                    ws.send(JSON.stringify(out));
+                }
+                catch { }
+            }, 
+            // Harden against a malformed hello: these fields come off the wire
+            // and feed `new Set(...)` in the bridge core — a non-array value
+            // (e.g. `capabilities: 42`) would throw inside this message
+            // listener, escape uncaught, and crash the serve process.
+            Array.isArray(msg.tools) ? msg.tools : [], msg.sandboxId, Array.isArray(msg.capabilities) ? msg.capabilities : [], 
+            // On replacement, close THIS socket: the browser side's onclose
+            // handler tears down its relayed worker subscriptions, so a
+            // replaced tab's SharedWorker listeners don't keep streaming
+            // snaps the bridge drops as stale-generation until the tab closes.
+            // The REPLACED close code tells that client to go STANDBY (health-
+            // poll for a vacant slot) instead of re-helloing — an immediate
+            // re-hello would kick the new peer right back, and two open tabs
+            // would fight over the slot forever.
+            () => {
+                try {
+                    ws.close(PEER_REPLACED_CLOSE_CODE, PEER_REPLACED_CLOSE_REASON);
+                }
+                catch { }
+            });
+            peerGen = bridge.peerGeneration();
+            try {
+                ws.send(JSON.stringify({
+                    type: 'hello-ack',
+                    protocol: 1,
+                    bridgeVersion: bridge.version,
+                }));
+            }
+            catch {
+                // Socket died between hello and ack — the close handler unwinds.
+            }
+            return;
+        }
+        if (!helloed)
+            return;
+        bridge.handleSandboxMessage(msg, peerGen);
+    });
+    ws.on('close', () => {
+        if (disconnect)
+            disconnect();
+        disconnect = null;
+        if (consumer)
+            consumer.dispose();
+        consumer = null;
+    });
+    ws.on('error', () => { });
+}
+/**
+ * Create a consumer session over `send`. Correlation ids/subIds on this leg
+ * are CONSUMER-minted and echoed verbatim; the bridge core mints its own ids
+ * for the peer leg (`dispatchWorkerOp` / `subscribeWorker`), so the two legs'
+ * id spaces never mix.
+ */
+export function createConsumerSession(bridge, send) {
+    /** consumer subId → bridge-side unsubscribe. */
+    const subs = new Map();
+    return {
+        handleMessage(msg) {
+            switch (msg.type) {
+                case 'attach': {
+                    // Idempotent re-attach: just re-ack. `serveVersion` is the
+                    // version-skew stamp (bridge/protocol.ts) — this process's own
+                    // pyric-tools version, compared client-side at attach.
+                    send({
+                        type: 'attach-ack',
+                        protocol: 1,
+                        bridgeVersion: bridge.version,
+                        peerConnected: bridge.isSandboxConnected(),
+                        serveVersion: pyricToolsVersion(),
+                    });
+                    return;
+                }
+                case 'worker-op': {
+                    bridge.dispatchWorkerOp(msg.op).then((value) => send({ type: 'worker-res', id: msg.id, ok: true, value }), (err) => send({
+                        type: 'worker-res',
+                        id: msg.id,
+                        ok: false,
+                        error: {
+                            code: err.code ?? 'unknown',
+                            message: err.message,
+                            // Structured denial context (spike gap 6) — plain JSON,
+                            // relayed verbatim so the Node side re-attaches it.
+                            ...(err.denialContext !== undefined ? { denialContext: err.denialContext } : {}),
+                        },
+                    }));
+                    return;
+                }
+                case 'worker-sub': {
+                    if (subs.has(msg.subId))
+                        return; // idempotent
+                    const unsubscribe = bridge.subscribeWorker(msg.sub, (value) => send({ type: 'worker-snap', subId: msg.subId, value }));
+                    subs.set(msg.subId, unsubscribe);
+                    return;
+                }
+                case 'worker-unsub': {
+                    const unsubscribe = subs.get(msg.subId);
+                    if (!unsubscribe)
+                        return;
+                    subs.delete(msg.subId);
+                    unsubscribe();
+                    return;
+                }
+                case 'ping': {
+                    send({ type: 'pong', id: msg.id });
+                    return;
+                }
+                default:
+                    return; // peer-only or unknown frames — ignore
+            }
+        },
+        dispose() {
+            for (const unsubscribe of subs.values())
+                unsubscribe();
+            subs.clear();
+        },
+    };
+}
+export async function collectBody(req) {
+    if (req.method === 'GET' || req.method === 'DELETE')
+        return undefined;
+    return await new Promise((resolve, reject) => {
+        let raw = '';
+        req.setEncoding('utf8');
+        req.on('data', (chunk) => {
+            raw += chunk;
+        });
+        req.on('end', () => {
+            if (!raw) {
+                resolve(undefined);
+                return;
+            }
+            try {
+                resolve(JSON.parse(raw));
+            }
+            catch (err) {
+                reject(err);
+            }
+        });
+        req.on('error', reject);
+    });
+}
+//# sourceMappingURL=peer.js.map

package/dist/bridge/server/peer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../../src/bridge/server/peer.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,GAE3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,UAAU,UAAU,CACxB,MAAuC,EACvC,EAAa;IAEb,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C;;gEAE4D;IAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAE5C,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO;QAClC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE;gBAC9D,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;YACpD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,GAAG,MAAM,CAAC,mBAAmB,CACrC,CAAC,GAAkB,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YACD,mEAAmE;YACnE,iEAAiE;YACjE,4DAA4D;YAC5D,0DAA0D;YAC1D,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EACzC,GAAG,CAAC,SAAS,EACb,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YACvD,gEAAgE;YAChE,4DAA4D;YAC5D,6DAA6D;YAC7D,mEAAmE;YACnE,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,qCAAqC;YACrC,GAAG,EAAE;gBACH,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;gBACjE,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CACF,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,CAAC;oBACX,aAAa,EAAE,MAAM,CAAC,OAAO;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,IAAI,UAAU;YAAE,UAAU,EAAE,CAAC;QAC7B,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,QAAQ;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC3B,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,IAAkC;IAElC,gDAAgD;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE3C,OAAO;QACL,aAAa,CAAC,GAAkB;YAC9B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,2DAA2D;oBAC3D,+DAA+D;oBAC/D,uDAAuD;oBACvD,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,CAAC;wBACX,aAAa,EAAE,MAAM,CAAC,OAAO;wBAC7B,aAAa,EAAE,MAAM,CAAC,kBAAkB,EAAE;wBAC1C,YAAY,EAAE,iBAAiB,EAAE;qBAClC,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EACpE,CAAC,GAAuD,EAAE,EAAE,CAC1D,IAAI,CAAC;wBACH,IAAI,EAAE,YAAY;wBAClB,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE;4BACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;4BAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,wDAAwD;4BACxD,oDAAoD;4BACpD,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACjF;qBACF,CAAC,CACL,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,OAAO,CAAC,aAAa;oBAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5D,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CACvD,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,WAAW;wBAAE,OAAO;oBACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACvB,WAAW,EAAE,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,OAAO;gBACT,CAAC;gBACD;oBACE,OAAO,CAAC,uCAAuC;YACnD,CAAC;QACH,CAAC;QACD,OAAO;YACL,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,WAAW,EAAE,CAAC;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAoB;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,GAAG,IAAI,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/bridge/server/standalone.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Standalone bridge server. Spins up an HTTP server on a known
+ * loopback port that handles three routes:
+ *
+ *   GET  /health           — diagnostic
+ *   POST /mcp              — MCP-over-HTTP (StreamableHTTPServerTransport)
+ *   GET  /sandbox (Upgrade) — WebSocket the browser tab connects to
+ *
+ * Bound to 127.0.0.1 only. Refuses to start if the port is occupied.
+ *
+ * Two modes:
+ *  - sandbox: forwards data-plane tool calls to the WS-connected
+ *    browser. Rules tools execute in-process.
+ *  - prod: data-plane + control-plane tools execute in-process via
+ *    composeMcpRegistry. Every prod-write tool call goes through the
+ *    confirmation handler (terminal y/n prompt by default) before
+ *    execution. See design rationale
+ *
+ * Premortem fixes baked in:
+ *  - #S1 — prod-mode tool calls require terminal confirmation
+ *    (`/dev/tty` prompt) instead of a Bearer token. The token was
+ *    security theater against the threats that mattered; the
+ *    confirmation gate is the first defense that actually works
+ *    against same-user malicious processes.
+ *  - #A2 — per-session idle timeout (10 min default) + max-session cap.
+ *  - #U1 — peer connect/disconnect logged; per-call logging behind
+ *    PYRIC_VERBOSE=1.
+ */
+import type { ToolHandler } from '@inbrowser/agent';
+import { type Bridge } from './bridge.js';
+import { type AuditWriter } from './audit.js';
+import { type BridgeLogger } from './logger.js';
+import { type ConfirmHandler } from './confirm.js';
+import { type BridgeMode } from '../protocol.js';
+export interface StartServerOptions {
+    /** Sandbox or prod. Default: sandbox. */
+    mode?: BridgeMode;
+    /** Port to bind. Default: 5174. Env: PYRIC_PORT. */
+    port?: number;
+    /** Project id (prod mode requires this; sandbox mode defaults to 'sandbox'). */
+    project?: string;
+    /**
+     * For prod mode: extra ToolHandlers to register (typically the result
+     * of `composeMcpRegistry({ profile: 'full', adminDeps, scope })`).
+     * Required for prod mode; ignored in sandbox mode.
+     */
+    prodTools?: ToolHandler[];
+    /** Disable the audit log writer (useful in tests). */
+    disableAuditLog?: boolean;
+    /** Extra hostnames allowed past the WS-upgrade rebinding/origin guard
+     *  (besides the loopback set the bridge binds to). Mirrors serve's
+     *  `--allowed-host`. */
+    allowedHosts?: string[];
+    /** Override the audit writer (testing). */
+    auditWriter?: AuditWriter;
+    /** Premortem #A2 — kill idle sessions after this many ms. Default 10 min. */
+    sessionIdleMs?: number;
+    /** Premortem #A2 — refuse new sessions when this many are active. Default 50. */
+    maxSessions?: number;
+    /** Premortem #U1 — logger; defaults to stderr `[pyric]` prefix. */
+    logger?: BridgeLogger;
+    /** Convenience: install a silent logger (tests). */
+    silent?: boolean;
+    /**
+     * Per-tool confirmation override: tools listed here drop to `never`
+     * (auto-approve without prompt). Use sparingly — every entry is a
+     * tool you've decided doesn't need the keystroke gate.
+     */
+    autoApproveTools?: string[];
+    /**
+     * Per-tool override: tools listed here force to `always` (prompt
+     * every time). Use to raise the default for read tools when paranoid.
+     */
+    requireConfirmTools?: string[];
+    /** Force EVERY tool to `always`, even reads. Paranoid mode. */
+    requireConfirmAll?: boolean;
+    /** Per-prompt timeout. Default 45_000 (45 s). */
+    confirmTimeoutMs?: number;
+    /**
+     * Run prod mode without an interactive TTY. Requires `autoApproveTools`
+     * to pre-approve any tool the caller wants invocable; everything not
+     * in the allow list denies silently. Throws at startup if mode==='prod'
+     * AND no TTY AND nonInteractive===false.
+     */
+    nonInteractive?: boolean;
+    /**
+     * Direct override of the confirm handler — testing escape hatch.
+     * When set, every other confirm-related option is ignored.
+     */
+    confirmHandler?: ConfirmHandler;
+}
+export interface ServerHandle {
+    readonly bridge: Bridge;
+    readonly port: number;
+    readonly url: string;
+    readonly auditLogPath: string | null;
+    /** The active confirm handler (null in sandbox mode). */
+    readonly confirmHandler: ConfirmHandler | null;
+    stop(): Promise<void>;
+}
+export declare function startServer(opts?: StartServerOptions): Promise<ServerHandle>;
+//# sourceMappingURL=standalone.d.ts.map

package/dist/bridge/server/standalone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/standalone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAgB,KAAK,MAAM,EAAwB,MAAM,aAAa,CAAC;AAG9E,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAOtB,OAAO,EAKL,KAAK,UAAU,EAGhB,MAAM,gBAAgB,CAAC;AASxB,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,sDAAsD;IACtD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,oDAAoD;IACpD,MAAM,CAAC,EAAE,OAAO,CAAC;IAIjB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,yDAAyD;IACzD,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,wBAAsB,WAAW,CAC/B,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,YAAY,CAAC,CAwQvB"}