pyric-tools 0.1.0-alpha.7

package/dist/bridge/server/standalone.js

@@ -0,0 +1,352 @@
+/**
+ * Standalone bridge server. Spins up an HTTP server on a known
+ * loopback port that handles three routes:
+ *
+ *   GET  /health           — diagnostic
+ *   POST /mcp              — MCP-over-HTTP (StreamableHTTPServerTransport)
+ *   GET  /sandbox (Upgrade) — WebSocket the browser tab connects to
+ *
+ * Bound to 127.0.0.1 only. Refuses to start if the port is occupied.
+ *
+ * Two modes:
+ *  - sandbox: forwards data-plane tool calls to the WS-connected
+ *    browser. Rules tools execute in-process.
+ *  - prod: data-plane + control-plane tools execute in-process via
+ *    composeMcpRegistry. Every prod-write tool call goes through the
+ *    confirmation handler (terminal y/n prompt by default) before
+ *    execution. See design rationale
+ *
+ * Premortem fixes baked in:
+ *  - #S1 — prod-mode tool calls require terminal confirmation
+ *    (`/dev/tty` prompt) instead of a Bearer token. The token was
+ *    security theater against the threats that mattered; the
+ *    confirmation gate is the first defense that actually works
+ *    against same-user malicious processes.
+ *  - #A2 — per-session idle timeout (10 min default) + max-session cap.
+ *  - #U1 — peer connect/disconnect logged; per-call logging behind
+ *    PYRIC_VERBOSE=1.
+ */
+import { createServer } from 'node:http';
+import { randomUUID } from 'node:crypto';
+import { WebSocketServer } from 'ws';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { createBridge } from './bridge.js';
+import { buildMcpServer } from './mcp.js';
+import { getSandboxToolMetadata, getRulesToolHandlers } from './tool-metadata.js';
+import { createAuditWriter } from './audit.js';
+import { createConsoleLogger, createSilentLogger, } from './logger.js';
+import { createInteractiveConfirmHandler, createPolicyHandler, hasInteractiveTTY, } from './confirm.js';
+import { DEFAULT_PROD_POLICIES, buildPolicyMap, } from './confirm-policy.js';
+import { DEFAULT_BRIDGE_PORT, DEFAULT_HEALTH_PATH, DEFAULT_MCP_PATH, DEFAULT_SANDBOX_PATH, isBridgeMessage, } from '../protocol.js';
+import { pyricVersion } from '../../serve/standalone-assets.js';
+import { isAllowedUpgrade } from '../../serve/server.js';
+const BRIDGE_VERSION = pyricVersion();
+const DEFAULT_SESSION_IDLE_MS = 10 * 60 * 1000; // 10 minutes
+const DEFAULT_MAX_SESSIONS = 50;
+const DEFAULT_CONFIRM_TIMEOUT_MS = 45_000;
+export async function startServer(opts = {}) {
+    const mode = opts.mode ?? 'sandbox';
+    // `??` doesn't short-circuit on NaN; Number(undefined) is NaN, which
+    // would silently slip through to the http server and produce
+    // "options.port should be >= 0 and < 65536. Received NaN."
+    // Resolve the env var separately so the default actually wins.
+    const envPort = process.env.PYRIC_PORT ? Number(process.env.PYRIC_PORT) : undefined;
+    const port = opts.port ?? (Number.isFinite(envPort) ? envPort : undefined) ?? DEFAULT_BRIDGE_PORT;
+    const project = opts.project ?? process.env.PYRIC_PROJECT ?? (mode === 'sandbox' ? 'sandbox' : undefined);
+    const logger = opts.logger ?? (opts.silent ? createSilentLogger() : createConsoleLogger());
+    const sessionIdleMs = opts.sessionIdleMs ?? DEFAULT_SESSION_IDLE_MS;
+    const maxSessions = opts.maxSessions ?? DEFAULT_MAX_SESSIONS;
+    if (mode === 'prod' && !project) {
+        throw new Error('pyric bridge: --mode prod requires a project id (--project or PYRIC_PROJECT).');
+    }
+    // ── Prod-mode confirmation handler ──────────────────────────────
+    const confirmHandler = buildConfirmHandler({
+        mode,
+        nonInteractive: opts.nonInteractive ?? false,
+        autoApprove: opts.autoApproveTools ?? [],
+        requireConfirm: opts.requireConfirmTools ?? [],
+        requireConfirmAll: opts.requireConfirmAll ?? false,
+        confirmTimeoutMs: opts.confirmTimeoutMs ?? DEFAULT_CONFIRM_TIMEOUT_MS,
+        override: opts.confirmHandler,
+        logger,
+    });
+    // Set up audit log writer (best-effort).
+    const auditWriter = opts.disableAuditLog
+        ? null
+        : opts.auditWriter ?? createAuditWriter(project);
+    const bridge = createBridge({
+        mode,
+        project: project,
+        version: BRIDGE_VERSION,
+        confirmHandler: confirmHandler ?? undefined,
+        onToolEvent: (event) => {
+            auditWriter?.write(event);
+            logger.verbose(`tool ${event.tool} → ${event.result.ok ? 'ok' : 'fail'} (${event.durationMs}ms) [${event.mode}]`);
+        },
+    });
+    // Build the MCP server. In sandbox mode, forward sandbox tools to
+    // the bridge and run rules tools in-process. In prod mode, run all
+    // tools in-process (caller supplies them via `prodTools`).
+    const forwarded = mode === 'sandbox' ? getSandboxToolMetadata() : [];
+    const rulesTools = mode === 'sandbox' ? getRulesToolHandlers() : [];
+    const inProcess = [
+        ...rulesTools,
+        ...(opts.prodTools ?? []),
+    ];
+    // Build the policy map ONCE up-front, factoring in any per-tool
+    // overrides the caller supplied. Passed through to buildMcpServer
+    // so the in-process tool wrapper can consult it per call.
+    const policies = buildPolicyMap(mode === 'prod' ? DEFAULT_PROD_POLICIES : new Map(), {
+        autoApprove: opts.autoApproveTools,
+        requireConfirm: opts.requireConfirmTools,
+        requireConfirmAll: opts.requireConfirmAll,
+    });
+    const sessions = new Map();
+    const pendingSessions = new Set();
+    function bumpIdle(session) {
+        if (session.idleTimer)
+            clearTimeout(session.idleTimer);
+        session.idleTimer = setTimeout(() => {
+            if (session.sessionId) {
+                logger.verbose(`session ${session.sessionId.slice(0, 8)}… idle-closed`);
+                sessions.delete(session.sessionId);
+            }
+            pendingSessions.delete(session);
+            void session.close();
+        }, sessionIdleMs);
+    }
+    async function newSession() {
+        if (sessions.size >= maxSessions) {
+            const err = new Error(`pyric bridge: refusing new session — at session cap (${maxSessions}). Existing sessions: ${sessions.size}.`);
+            err.statusCode = 503;
+            throw err;
+        }
+        const session = {
+            transport: null,
+            close: async () => { },
+            idleTimer: null,
+            sessionId: null,
+        };
+        session.transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+            onsessioninitialized: (id) => {
+                session.sessionId = id;
+                sessions.set(id, session);
+                pendingSessions.delete(session);
+                bumpIdle(session);
+                logger.verbose(`session ${id.slice(0, 8)}… initialized`);
+            },
+        });
+        const server = buildMcpServer(bridge, { forwarded, inProcess, policies });
+        session.close = async () => {
+            if (session.idleTimer)
+                clearTimeout(session.idleTimer);
+            session.idleTimer = null;
+            await server.close().catch(() => { });
+            await session.transport.close().catch(() => { });
+        };
+        pendingSessions.add(session);
+        await server.connect(session.transport);
+        return session;
+    }
+    // ── HTTP server ─────────────────────────────────────────────────
+    const http = createServer(async (req, res) => {
+        const url = req.url ?? '/';
+        if (process.env.PYRIC_DEBUG) {
+            process.stderr.write(`[pyric debug] ${req.method} ${url}\n`);
+        }
+        if (url === DEFAULT_HEALTH_PATH && req.method === 'GET') {
+            const body = JSON.stringify(bridge.health());
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(body);
+            return;
+        }
+        if (url === DEFAULT_MCP_PATH && (req.method === 'POST' || req.method === 'GET' || req.method === 'DELETE')) {
+            try {
+                const sessionId = (req.headers['mcp-session-id'] ?? req.headers['Mcp-Session-Id']);
+                let session;
+                if (sessionId && sessions.has(sessionId)) {
+                    session = sessions.get(sessionId);
+                    if (session)
+                        bumpIdle(session);
+                }
+                else {
+                    session = await newSession();
+                }
+                if (req.method === 'DELETE' && sessionId) {
+                    if (session)
+                        await session.close();
+                    sessions.delete(sessionId);
+                    res.writeHead(204);
+                    res.end();
+                    return;
+                }
+                await session.transport.handleRequest(req, res);
+            }
+            catch (err) {
+                const statusCode = err?.statusCode ?? 500;
+                const msg = err instanceof Error ? err.stack ?? err.message : String(err);
+                logger.error(`MCP transport error: ${msg}`);
+                if (!res.headersSent) {
+                    res.writeHead(statusCode, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: err instanceof Error ? err.message : String(err) }));
+                }
+            }
+            return;
+        }
+        res.writeHead(404, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: 'not found', path: url }));
+    });
+    // ── WebSocket server (mounted on /sandbox) ──────────────────────
+    const wss = new WebSocketServer({ noServer: true });
+    http.on('upgrade', (req, socket, head) => {
+        if ((req.url ?? '') !== DEFAULT_SANDBOX_PATH) {
+            socket.destroy();
+            return;
+        }
+        // DNS-rebinding + cross-origin hijack guard (the request-time isAllowedHost
+        // runs on the `request` event only — `upgrade` bypasses it). The standalone
+        // bridge binds 127.0.0.1 only, so the allowlist is the loopback set.
+        if (!isAllowedUpgrade(req.headers, '127.0.0.1', opts.allowedHosts)) {
+            logger.error(`refused WS upgrade — Host='${req.headers.host ?? ''}' Origin='${req.headers.origin ?? ''}' (rebinding/origin guard)`);
+            socket.destroy();
+            return;
+        }
+        wss.handleUpgrade(req, socket, head, (ws) => {
+            attachPeer(bridge, ws, logger);
+        });
+    });
+    // Bind to loopback only.
+    await new Promise((resolve, reject) => {
+        http.once('error', reject);
+        http.listen(port, '127.0.0.1', () => {
+            http.removeListener('error', reject);
+            resolve();
+        });
+    });
+    const url = `http://127.0.0.1:${port}`;
+    logger.info(`bridge ${BRIDGE_VERSION} listening on ${url} — mode: ${mode}, project: ${project}`);
+    if (mode === 'prod') {
+        if (opts.nonInteractive) {
+            logger.info(`prod-mode NON-INTERACTIVE — auto-approved tools: ${(opts.autoApproveTools ?? []).join(', ') || '(none)'}`);
+        }
+        else {
+            logger.info(`prod-mode interactive — confirmation prompts appear in this terminal (timeout ${opts.confirmTimeoutMs ?? DEFAULT_CONFIRM_TIMEOUT_MS}ms → DENY)`);
+        }
+    }
+    return {
+        bridge,
+        port,
+        url,
+        auditLogPath: auditWriter?.path ?? null,
+        confirmHandler: confirmHandler ?? null,
+        async stop() {
+            // Stop accepting new WebSocket upgrades…
+            wss.close();
+            // …and forcibly terminate any existing WS clients. Without this,
+            // http.close() below waits for clients to disconnect on their own
+            // (MCP keep-alives sit forever — a Ctrl-C with any open peer
+            // would hang the CLI shutdown indefinitely).
+            for (const client of wss.clients) {
+                try {
+                    client.terminate();
+                }
+                catch { /* already closed */ }
+            }
+            // Destroy any open HTTP keep-alive sockets. Node 18.2+.
+            http.closeAllConnections();
+            await new Promise((resolve) => {
+                http.close(() => resolve());
+            });
+            for (const session of sessions.values()) {
+                await session.close().catch(() => { });
+            }
+            for (const session of pendingSessions) {
+                await session.close().catch(() => { });
+            }
+            sessions.clear();
+            pendingSessions.clear();
+            if (confirmHandler)
+                confirmHandler.close();
+            logger.info('bridge stopped');
+        },
+    };
+}
+function buildConfirmHandler(opts) {
+    if (opts.mode === 'sandbox')
+        return null;
+    // Tests / callers can provide their own handler directly.
+    if (opts.override)
+        return opts.override;
+    if (opts.nonInteractive) {
+        // CI-mode: explicit allow list; deny everything else.
+        return createPolicyHandler({
+            allow: new Set(opts.autoApprove),
+            default: 'deny',
+        });
+    }
+    if (!hasInteractiveTTY()) {
+        throw new Error('pyric bridge: prod mode requires either an interactive terminal or `nonInteractive: true` (CLI: --non-interactive). Refusing to start without a way to confirm tool calls.');
+    }
+    const policies = buildPolicyMap(DEFAULT_PROD_POLICIES, {
+        autoApprove: opts.autoApprove,
+        requireConfirm: opts.requireConfirm,
+        requireConfirmAll: opts.requireConfirmAll,
+    });
+    return createInteractiveConfirmHandler({
+        policies,
+        timeoutMs: opts.confirmTimeoutMs,
+        logger: opts.logger,
+    });
+}
+function attachPeer(bridge, ws, logger) {
+    let disconnect = null;
+    let helloed = false;
+    let sandboxId = null;
+    ws.on('message', (raw) => {
+        let msg;
+        try {
+            msg = JSON.parse(raw.toString());
+        }
+        catch {
+            return; // ignore malformed
+        }
+        if (!isBridgeMessage(msg))
+            return;
+        if (msg.type === 'hello') {
+            if (helloed)
+                return; // ignore duplicate hellos
+            helloed = true;
+            sandboxId = msg.sandboxId;
+            logger.info(`peer connected — sandboxId=${sandboxId.slice(0, 12)} tools=${msg.tools.length}`);
+            disconnect = bridge.registerSandboxPeer((out) => {
+                try {
+                    ws.send(JSON.stringify(out));
+                }
+                catch {
+                    // socket likely closed; the close handler runs disconnect.
+                }
+            }, msg.tools, msg.sandboxId);
+            ws.send(JSON.stringify({
+                type: 'hello-ack',
+                protocol: 1,
+                bridgeVersion: bridge.version,
+            }));
+            return;
+        }
+        if (!helloed)
+            return; // ignore messages before hello
+        bridge.handleSandboxMessage(msg);
+    });
+    ws.on('close', () => {
+        if (disconnect) {
+            disconnect();
+            logger.info(`peer disconnected — sandboxId=${sandboxId ? sandboxId.slice(0, 12) : 'unknown'}`);
+        }
+        disconnect = null;
+    });
+    ws.on('error', () => {
+        // ws will follow up with a 'close' event; cleanup happens there.
+    });
+}
+//# sourceMappingURL=standalone.js.map

package/dist/bridge/server/standalone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone.js","sourceRoot":"","sources":["../../../src/bridge/server/standalone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAa,MAAM,IAAI,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EAAE,YAAY,EAAqC,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAoB,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,+BAA+B,EAE/B,mBAAmB,EACnB,iBAAiB,GAElB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EAErB,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EAGpB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,cAAc,GAAG,YAAY,EAAE,CAAC;AACtC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAC7D,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAyE1C,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA2B,EAAE;IAE7B,MAAM,IAAI,GAAe,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;IAChD,qEAAqE;IACrE,6DAA6D;IAC7D,2DAA2D;IAC3D,+DAA+D;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,mBAAmB,CAAC;IAClG,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAE7D,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,MAAM,cAAc,GAAG,mBAAmB,CAAC;QACzC,IAAI;QACJ,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;QAC5C,WAAW,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;QACxC,cAAc,EAAE,IAAI,CAAC,mBAAmB,IAAI,EAAE;QAC9C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,KAAK;QAClD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,0BAA0B;QACrE,QAAQ,EAAE,IAAI,CAAC,cAAc;QAC7B,MAAM;KACP,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe;QACtC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC,OAAQ,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,IAAI;QACJ,OAAO,EAAE,OAAQ;QACjB,OAAO,EAAE,cAAc;QACvB,cAAc,EAAE,cAAc,IAAI,SAAS;QAC3C,WAAW,EAAE,CAAC,KAAsB,EAAE,EAAE;YACtC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC,OAAO,CACZ,QAAQ,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,QAAQ,KAAK,CAAC,IAAI,GAAG,CAClG,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,kEAAkE;IAClE,mEAAmE;IACnE,2DAA2D;IAC3D,MAAM,SAAS,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,UAAU,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,SAAS,GAAkB;QAC/B,GAAG,UAAU;QACb,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;KAC1B,CAAC;IAEF,gEAAgE;IAChE,kEAAkE;IAClE,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,cAAc,CAC7B,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,GAAG,EAAyB,EAC1E;QACE,WAAW,EAAE,IAAI,CAAC,gBAAgB;QAClC,cAAc,EAAE,IAAI,CAAC,mBAAmB;QACxC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CACF,CAAC;IAWF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAW,CAAC;IAE3C,SAAS,QAAQ,CAAC,OAAgB;QAChC,IAAI,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,OAAO,CAAC,WAAW,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;gBACxE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;YACD,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC,EAAE,aAAa,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,UAAU,UAAU;QACvB,IAAI,QAAQ,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,wDAAwD,WAAW,yBAAyB,QAAQ,CAAC,IAAI,GAAG,CAC7G,CAAC;YACD,GAA+B,CAAC,UAAU,GAAG,GAAG,CAAC;YAClD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,OAAO,GAAY;YACvB,SAAS,EAAE,IAAgD;YAC3D,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACrB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,OAAO,CAAC,SAAS,GAAG,IAAI,6BAA6B,CAAC;YACpD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE;gBAC3B,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC1B,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClB,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;YAC3D,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;YACzB,IAAI,OAAO,CAAC,SAAS;gBAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvD,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mEAAmE;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,GAAG,KAAK,mBAAmB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,GAAG,KAAK,gBAAgB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC3G,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAuB,CAAC;gBACzG,IAAI,OAA4B,CAAC;gBACjC,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzC,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAClC,IAAI,OAAO;wBAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;gBAC/B,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACzC,IAAI,OAAO;wBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;oBACnC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,MAAM,OAAQ,CAAC,SAAS,CAAC,aAAa,CACpC,GAAsB,EACtB,GAAqB,CACtB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,GAAI,GAA+B,EAAE,UAAU,IAAI,GAAG,CAAC;gBACvE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1E,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;gBAC5C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAClE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACvC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,oBAAoB,EAAE,CAAC;YAC7C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,KAAK,CACV,8BAA8B,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,aAAa,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,4BAA4B,CACtH,CAAC;YACF,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YAC1C,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YAClC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,oBAAoB,IAAI,EAAE,CAAC;IAEvC,MAAM,CAAC,IAAI,CACT,UAAU,cAAc,iBAAiB,GAAG,YAAY,IAAI,cAAc,OAAO,EAAE,CACpF,CAAC;IACF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CACT,oDAAoD,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAC3G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,iFACE,IAAI,CAAC,gBAAgB,IAAI,0BAC3B,YAAY,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,IAAI;QACJ,GAAG;QACH,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI;QACvC,cAAc,EAAE,cAAc,IAAI,IAAI;QACtC,KAAK,CAAC,IAAI;YACR,yCAAyC;YACzC,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,iEAAiE;YACjE,kEAAkE;YAClE,6DAA6D;YAC7D,6CAA6C;YAC7C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC;oBAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC5D,CAAC;YACD,wDAAwD;YACxD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,eAAe,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,cAAc;gBAAE,cAAc,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAeD,SAAS,mBAAmB,CAAC,IAAgC;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEzC,0DAA0D;IAC1D,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;IAExC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,sDAAsD;QACtD,OAAO,mBAAmB,CAAC;YACzB,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAChC,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,4KAA4K,CAC7K,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,qBAAqB,EAAE;QACrD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC,CAAC;IAEH,OAAO,+BAA+B,CAAC;QACrC,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,gBAAgB;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,EAAa,EAAE,MAAoB;IACrE,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,mBAAmB;QAC7B,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO;QAElC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,OAAO;gBAAE,OAAO,CAAC,0BAA0B;YAC/C,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,IAAI,CACT,8BAA8B,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CACjF,CAAC;YACF,UAAU,GAAG,MAAM,CAAC,mBAAmB,CACrC,CAAC,GAAkB,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,2DAA2D;gBAC7D,CAAC;YACH,CAAC,EACD,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,SAAS,CACd,CAAC;YACF,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,CAAC;gBACX,aAAa,EAAE,MAAM,CAAC,OAAO;aAC9B,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,+BAA+B;QACrD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,iCAAiC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAClF,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,iEAAiE;IACnE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/bridge/server/tool-metadata.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Extract tool metadata (name + description + parameters) from the
+ * existing `pyric/rules` factories without running any
+ * tool logic. Used by the bridge to register MCP tools whose actual
+ * dispatch happens against the connected browser peer.
+ *
+ * Why: `createFirestoreSimulatorTools` returns `ToolHandler[]` with
+ * `execute` bound to a `LocalEnvironment`. The bridge process doesn't
+ * have a `LocalEnvironment` — it forwards. But it does need the
+ * metadata to populate the MCP server's tool list. This module calls
+ * the factory with a stub resolver and reads only the metadata; the
+ * stub never gets invoked because the bridge replaces `execute`
+ * before dispatch.
+ */
+import type { ToolHandler } from '@inbrowser/agent';
+export interface ToolMetadata {
+    name: string;
+    description: string;
+    parameters: Record<string, unknown>;
+}
+/**
+ * Tool metadata for the sandbox-mode bridge. Includes the
+ * data-plane / sandbox-management tools that the browser dispatches
+ * via `LocalEnvironment`. Rules tooling (lint, validate, simulate,
+ * test) is NOT included here — those execute in Node and are
+ * registered separately, since they don't need the browser sandbox.
+ */
+export declare function getSandboxToolMetadata(): ToolMetadata[];
+/**
+ * Rules tooling factories that execute in-process on the bridge
+ * (no browser needed). Returned as live ToolHandlers — the bridge
+ * registers each handler's `execute` directly.
+ *
+ * `scope` is forwarded to the factory so deploy-gated tools that
+ * need a `ProjectScope` work in prod-mode bridges too.
+ */
+export declare function getRulesToolHandlers(scope?: unknown): ToolHandler[];
+//# sourceMappingURL=tool-metadata.d.ts.map

package/dist/bridge/server/tool-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-metadata.d.ts","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAOpD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAUD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,YAAY,EAAE,CA+BvD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,CASnE"}

package/dist/bridge/server/tool-metadata.js

@@ -0,0 +1,79 @@
+/**
+ * Extract tool metadata (name + description + parameters) from the
+ * existing `pyric/rules` factories without running any
+ * tool logic. Used by the bridge to register MCP tools whose actual
+ * dispatch happens against the connected browser peer.
+ *
+ * Why: `createFirestoreSimulatorTools` returns `ToolHandler[]` with
+ * `execute` bound to a `LocalEnvironment`. The bridge process doesn't
+ * have a `LocalEnvironment` — it forwards. But it does need the
+ * metadata to populate the MCP server's tool list. This module calls
+ * the factory with a stub resolver and reads only the metadata; the
+ * stub never gets invoked because the bridge replaces `execute`
+ * before dispatch.
+ */
+import { createFirestoreSimulatorTools, createFirestoreRulesTools, } from 'pyric/rules/node';
+import { createFirestoreDataTools, createFirestoreInspectTools } from 'pyric/firestore';
+function toMetadata(handler) {
+    return {
+        name: handler.name,
+        description: handler.description,
+        parameters: handler.parameters,
+    };
+}
+/**
+ * Tool metadata for the sandbox-mode bridge. Includes the
+ * data-plane / sandbox-management tools that the browser dispatches
+ * via `LocalEnvironment`. Rules tooling (lint, validate, simulate,
+ * test) is NOT included here — those execute in Node and are
+ * registered separately, since they don't need the browser sandbox.
+ */
+export function getSandboxToolMetadata() {
+    // The resolver stub never runs: the bridge replaces execute() with
+    // its own forward-to-peer dispatch.
+    const stubResolver = async () => {
+        throw new Error('BUG: sandbox-tool factory executor invoked on the bridge side — should have been replaced');
+    };
+    const handlers = [
+        // Simulator / write / batch / undo / redo / events / transaction —
+        // 8 tools that mutate or read the in-browser sandbox state.
+        ...createFirestoreSimulatorTools({
+            resolveSandbox: stubResolver,
+        }),
+        // Data plane — addDoc / setDoc / getDoc / updateDoc / deleteDoc /
+        // collection / query / where — the modular Firestore CRUD surface
+        // routed through the browser sandbox so agents can drive a real app
+        // session rather than only the simulator.
+        ...createFirestoreDataTools({
+            resolveDb: stubResolver,
+        }),
+        // `sandbox_inspect` — single-call diagnostic that answers
+        // "what state is the sandbox in?" Born out of CLAUDE_DEBUG_SESSION.md
+        // (a real agent needing 51 tool calls + 72k tokens to figure out
+        // that rules weren't loaded). Routes to the browser sandbox like
+        // the other forwarded tools.
+        ...createFirestoreInspectTools({
+            resolveDb: stubResolver,
+        }),
+    ];
+    return handlers.map(toMetadata);
+}
+/**
+ * Rules tooling factories that execute in-process on the bridge
+ * (no browser needed). Returned as live ToolHandlers — the bridge
+ * registers each handler's `execute` directly.
+ *
+ * `scope` is forwarded to the factory so deploy-gated tools that
+ * need a `ProjectScope` work in prod-mode bridges too.
+ */
+export function getRulesToolHandlers(scope) {
+    // Factory accepts { scope } per packages/pyric/src/rules/tools.ts.
+    // The cast is because pyric/rules's ProjectScope type is re-exported
+    // from pyric-tools/deploy and we'd otherwise force a type-only import
+    // here. Bridge level we don't need the type.
+    // Includes simulate / lint / resolve_modules / stdlib_list /
+    // stdlib_get + (when scope is supplied) extract + deploy gates —
+    // the full in-process rules tooling surface. No browser needed.
+    return createFirestoreRulesTools({ scope });
+}
+//# sourceMappingURL=tool-metadata.js.map

package/dist/bridge/server/tool-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-metadata.js","sourceRoot":"","sources":["../../../src/bridge/server/tool-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAQxF,SAAS,UAAU,CAAC,OAAoB;IACtC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAqC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB;IACpC,mEAAmE;IACnE,oCAAoC;IACpC,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,QAAQ,GAAkB;QAC9B,mEAAmE;QACnE,4DAA4D;QAC5D,GAAG,6BAA6B,CAAC;YAC/B,cAAc,EAAE,YAAqB;SACtC,CAAC;QACF,kEAAkE;QAClE,kEAAkE;QAClE,oEAAoE;QACpE,0CAA0C;QAC1C,GAAG,wBAAwB,CAAC;YAC1B,SAAS,EAAE,YAAqB;SACjC,CAAC;QACF,0DAA0D;QAC1D,sEAAsE;QACtE,iEAAiE;QACjE,iEAAiE;QACjE,6BAA6B;QAC7B,GAAG,2BAA2B,CAAC;YAC7B,SAAS,EAAE,YAAqB;SACjC,CAAC;KACH,CAAC;IACF,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAe;IAClD,mEAAmE;IACnE,qEAAqE;IACrE,sEAAsE;IACtE,6CAA6C;IAC7C,6DAA6D;IAC7D,iEAAiE;IACjE,gEAAgE;IAChE,OAAO,yBAAyB,CAAC,EAAE,KAAK,EAAW,CAAC,CAAC;AACvD,CAAC"}

package/dist/bridge/server.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `pyric-tools/bridge` — Node-side entry.
+ *
+ * Resolved by the `node` condition in `package.json`'s exports map.
+ * Exports the bridge core (`createBridge`) and the standalone server
+ * (`startServer`). The Vite integration is the `pyricSandbox({ bridge })`
+ * plugin in `pyric-tools/vite` (the firebase→sandbox swap AND the bridge in
+ * one plugin), not a bridge-only plugin here.
+ *
+ * The browser-side `connectBridge` lives in `./client.ts` and is
+ * resolved by the `browser` condition. Wire format shared by both
+ * lives in `./protocol.ts` (type-only, no runtime imports across the
+ * boundary).
+ */
+export type { BridgeMode, HealthReport } from './protocol.js';
+export { DEFAULT_BRIDGE_PORT, DEFAULT_HEALTH_PATH, DEFAULT_MCP_PATH, DEFAULT_SANDBOX_PATH, } from './protocol.js';
+export { createBridge } from './server/bridge.js';
+export type { Bridge, BridgeOptions } from './server/bridge.js';
+export { startServer } from './server/standalone.js';
+export type { ServerHandle, StartServerOptions } from './server/standalone.js';
+export { createInteractiveConfirmHandler, createAutoApproveHandler, createDenyAllHandler, createPolicyHandler, hasInteractiveTTY, } from './server/confirm.js';
+export type { ConfirmHandler, ConfirmRequest, ConfirmDecision, ConfirmPolicy, InteractiveOptions, PolicyHandlerOptions, } from './server/confirm.js';
+export { DEFAULT_PROD_POLICIES, DEFAULT_SANDBOX_POLICY, FALLBACK_PROD_POLICY, buildPolicyMap, policyFor, } from './server/confirm-policy.js';
+export type { PolicyOverrides } from './server/confirm-policy.js';
+//# sourceMappingURL=server.d.ts.map

package/dist/bridge/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/bridge/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAK/E,OAAO,EACL,+BAA+B,EAC/B,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,cAAc,EACd,cAAc,EACd,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,SAAS,GACV,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/bridge/server.js

@@ -0,0 +1,23 @@
+/**
+ * `pyric-tools/bridge` — Node-side entry.
+ *
+ * Resolved by the `node` condition in `package.json`'s exports map.
+ * Exports the bridge core (`createBridge`) and the standalone server
+ * (`startServer`). The Vite integration is the `pyricSandbox({ bridge })`
+ * plugin in `pyric-tools/vite` (the firebase→sandbox swap AND the bridge in
+ * one plugin), not a bridge-only plugin here.
+ *
+ * The browser-side `connectBridge` lives in `./client.ts` and is
+ * resolved by the `browser` condition. Wire format shared by both
+ * lives in `./protocol.ts` (type-only, no runtime imports across the
+ * boundary).
+ */
+export { DEFAULT_BRIDGE_PORT, DEFAULT_HEALTH_PATH, DEFAULT_MCP_PATH, DEFAULT_SANDBOX_PATH, } from './protocol.js';
+export { createBridge } from './server/bridge.js';
+export { startServer } from './server/standalone.js';
+// Prod-mode confirmation surface — exported so callers wiring their
+// own startServer flow (Electron apps, custom dev servers) can plug
+// in non-default confirm handlers.
+export { createInteractiveConfirmHandler, createAutoApproveHandler, createDenyAllHandler, createPolicyHandler, hasInteractiveTTY, } from './server/confirm.js';
+export { DEFAULT_PROD_POLICIES, DEFAULT_SANDBOX_POLICY, FALLBACK_PROD_POLICY, buildPolicyMap, policyFor, } from './server/confirm-policy.js';
+//# sourceMappingURL=server.js.map

package/dist/bridge/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/bridge/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,oEAAoE;AACpE,oEAAoE;AACpE,mCAAmC;AACnC,OAAO,EACL,+BAA+B,EAC/B,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAS7B,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,SAAS,GACV,MAAM,4BAA4B,CAAC"}

package/dist/cli/auth.d.ts

@@ -0,0 +1,37 @@
+/**
+ * `pyric auth:*` subcommands — thin wrappers over `pyric-tools/auth`.
+ *
+ *   - `auth:configure-provider <provider> <enabled>` — toggle one of
+ *     the Identity Toolkit providers (anonymous / email / phone /
+ *     google).
+ *   - `auth:manage-domains <add|remove|list> [domain]` — manage
+ *     authorized domains for the project's auth config.
+ *
+ * Both call `getAuthTools(scope)` from `pyric-tools/auth`. ProjectScope
+ * is resolved from env (FIREBASE_SA_BASE64 / GOOGLE_APPLICATION_CREDENTIALS)
+ * by the shared `resolveScope` helper.
+ */
+import { type AuthTools } from '../auth/index.js';
+import type { ParsedArgs } from './parse-args.js';
+import type { ProjectScope } from '../deploy/index.js';
+import { readFirebaseRc } from './firebase-json.js';
+export interface AuthDeps {
+    resolveScope?: (opts: {
+        projectId?: string;
+    }) => Promise<{
+        scope: ProjectScope;
+        source: string;
+    }>;
+    getAuthTools?: (scope: ProjectScope) => AuthTools;
+    readFirebaseRc?: typeof readFirebaseRc;
+    cwd?: string;
+    stdout?: {
+        write(s: string): void;
+    };
+    stderr?: {
+        write(s: string): void;
+    };
+}
+export declare function runAuthConfigureProvider(parsed: ParsedArgs, deps?: AuthDeps): Promise<number>;
+export declare function runAuthManageDomains(parsed: ParsedArgs, deps?: AuthDeps): Promise<number>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/cli/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,MAAM,WAAW,QAAQ;IACvB,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClG,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,SAAS,CAAC;IAClD,cAAc,CAAC,EAAE,OAAO,cAAc,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrC;AAkBD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,MAAM,CAAC,CAgDjB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,MAAM,CAAC,CAoDjB"}