pyric 0.0.1 → 0.1.0-alpha.8

package/dist/rules/simulator-tools-impl.js

@@ -0,0 +1,462 @@
+/**
+ * `createFirestoreSimulatorTools` factory — extracted from `tools.ts`
+ * so it can run in both Node and the browser without forcing the
+ * Node-only `resolveModules` (which reads stdlib off disk) into the
+ * browser bundle.
+ *
+ * The factory takes `resolveModulesFn` as an injected dep:
+ *  - `pyric/rules/node` wires `resolveModules` from `./modules/resolver.js`
+ *    — Node's disk-reading version.
+ *  - `./simulator.ts` wires `resolveModulesBrowser` from
+ *    `./modules/resolver-browser.js`, which pre-supplies the stdlib content
+ *    inlined at build time.
+ *  - When the dep is absent, the `firestore_simulator_create` tool
+ *    returns a clear error if a caller seeds `'2+modules'` rules.
+ *
+ * Why this matters: prior to the extraction, `@pyric/dev`'s browser
+ * client hand-coded a parallel dispatcher that mirrored these tool
+ * shapes. Any new simulator tool added to `tools.ts` silently
+ * diverged from the dispatcher. Now both sides consume this single
+ * source of truth.
+ */
+import { resolveExpressionsInData, ExpressionWalkError, } from './simulator/expression/walk-data.js';
+import { ExpressionLexError, ExpressionParseError, } from './simulator/expression/types.js';
+import { EvalError } from './simulator/expression/eval-errors.js';
+/**
+ * Stateful simulator tools — operate against a session-scoped
+ * `LocalEnvironment`. The nine-tool family — `_create`, `_execute`,
+ * `_read`, `_batch`, `_create_with_auto_id`, `_undo`, `_redo`,
+ * `_events`, `_transaction` — is the factory-shaped simulator tool group.
+ *
+ * Key shape difference vs legacy: there is no `environmentId`. In
+ * factory mode the resolved `LocalEnvironment` IS the environment —
+ * one per session. Hosts that need multi-env semantics can layer
+ * registry/context above the resolver. `firestore_simulator_create`
+ * therefore acts as a re-seed: it overwrites whatever the resolved
+ * env held before.
+ *
+ * `resolveSandbox` is awaited inside each handler so hosts that swap
+ * environments transparently (per-session fleets, hot-reload pipes)
+ * get fresh refs without re-registering tools.
+ */
+export function createFirestoreSimulatorTools(deps) {
+    const { resolveSandbox, resolveModulesFn } = deps;
+    return [
+        {
+            name: 'firestore_simulator_create',
+            description: 'Seed the session\'s local Firestore environment with rules and optional initial documents. Resets any prior state. Supports `rules_version = "2+modules"` — modules resolve in-process before seeding. Returns the lint result + document count for verification.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    rules: {
+                        type: 'string',
+                        description: 'Firestore security rules source (version 2 or 2+modules).',
+                    },
+                    documents: {
+                        type: 'object',
+                        description: 'Initial documents keyed by full path, e.g. `{ "users/u1": { name: "alice" } }`.',
+                        additionalProperties: true,
+                    },
+                },
+                required: ['rules'],
+            },
+            async execute(args) {
+                const { rules: rulesIn, documents } = args;
+                let rules = rulesIn;
+                if (rules.includes("'2+modules'") || rules.includes('"2+modules"')) {
+                    if (!resolveModulesFn) {
+                        return {
+                            ok: false,
+                            summary: 'Module resolve unavailable: this builder was not wired with `resolveModulesFn`. Use a package entry that wires module resolution, such as pyric/rules/node, instead of importing the impl directly.',
+                            data: { code: 'NO_MODULE_RESOLVER' },
+                        };
+                    }
+                    const resolved = resolveModulesFn(rules);
+                    if (!resolved.success) {
+                        return {
+                            ok: false,
+                            summary: `Module resolve failed: ${resolved.error.message}`,
+                            data: resolved,
+                        };
+                    }
+                    rules = resolved.data.resolved;
+                }
+                const env = await resolveSandbox();
+                const lint = env.seed({ rules, documents: documents ?? {} });
+                return {
+                    ok: true,
+                    summary: `Seeded sandbox with ${Object.keys(documents ?? {}).length} document(s)`,
+                    data: { lint, documentCount: Object.keys(documents ?? {}).length },
+                };
+            },
+        },
+        {
+            name: 'firestore_simulator_execute',
+            description: 'Execute a single write (create / update / delete) against the seeded sandbox. Rules evaluate against the in-memory state; allow → state mutates and the op is logged, deny → state unchanged and `debugMessages` explain the rule decision.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    method: { type: 'string', enum: ['create', 'update', 'delete'] },
+                    path: { type: 'string', description: 'Document path, e.g. `users/u1`.' },
+                    auth: {
+                        description: 'Auth context. `null` for unauthenticated. Otherwise `{ uid, token? }` where `token` is the custom-claims object.',
+                    },
+                    data: {
+                        type: 'object',
+                        description: 'Document data. Required for create / update.',
+                        additionalProperties: true,
+                    },
+                },
+                required: ['method', 'path', 'auth'],
+            },
+            async execute(args) {
+                const { method, path, auth, data } = args;
+                const env = await resolveSandbox();
+                const result = env.execute({ method, path, auth, data });
+                return {
+                    ok: result.allowed,
+                    summary: result.allowed
+                        ? `${method} on ${path} allowed`
+                        : `${method} on ${path} denied`,
+                    data: { allowed: result.allowed, debugMessages: result.debugMessages },
+                };
+            },
+        },
+        {
+            name: 'firestore_simulator_read',
+            description: 'Read a document (`get`) or list a collection (`list`) from the seeded sandbox. Default uses admin access (bypasses rules). Set `evaluateRules: true` with an `auth` context to test read access control through the rules engine.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string', description: 'Doc path for `get`, collection path for `list`.' },
+                    method: { type: 'string', enum: ['get', 'list'], description: 'Default `get`.' },
+                    auth: {
+                        description: 'Auth context. Required when `evaluateRules` is true.',
+                    },
+                    evaluateRules: {
+                        type: 'boolean',
+                        description: 'Evaluate read rules against `auth`. Default false (admin read).',
+                    },
+                },
+                required: ['path'],
+            },
+            async execute(args) {
+                const { path, method, auth, evaluateRules } = args;
+                const env = await resolveSandbox();
+                if (evaluateRules) {
+                    const result = env.execute({ method: method ?? 'get', path, auth: auth ?? null });
+                    return {
+                        ok: result.allowed,
+                        summary: result.allowed
+                            ? `${method ?? 'get'} on ${path} allowed`
+                            : `${method ?? 'get'} on ${path} denied`,
+                        data: {
+                            allowed: result.allowed,
+                            document: result.data,
+                            debugMessages: result.debugMessages,
+                        },
+                    };
+                }
+                if (method === 'list') {
+                    return {
+                        ok: true,
+                        summary: `Listed ${path}`,
+                        data: { documents: env.listDocuments(path) },
+                    };
+                }
+                return {
+                    ok: true,
+                    summary: `Read ${path}`,
+                    data: { document: env.getDocument(path) },
+                };
+            },
+        },
+        {
+            name: 'firestore_simulator_batch',
+            description: 'Execute multiple writes atomically. All operations must pass rules — if any denies, none apply. Rules evaluate each op against pre-batch state (no cross-visibility within the batch).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    operations: {
+                        type: 'array',
+                        items: {
+                            type: 'object',
+                            properties: {
+                                method: { type: 'string', enum: ['create', 'update', 'delete'] },
+                                path: { type: 'string' },
+                                data: { type: 'object', additionalProperties: true },
+                            },
+                            required: ['method', 'path'],
+                        },
+                    },
+                    auth: {
+                        description: 'Auth context for every op. `null` for unauthenticated.',
+                    },
+                },
+                required: ['operations', 'auth'],
+            },
+            async execute(args) {
+                const { operations, auth } = args;
+                const env = await resolveSandbox();
+                const result = env.batch(operations, auth);
+                return {
+                    ok: result.allowed,
+                    summary: result.allowed
+                        ? `Batch of ${operations.length} op(s) committed`
+                        : `Batch of ${operations.length} op(s) rejected by rules. To SEED data, use the admin data tool firestore_batch_write; to test rules, pass an auth the rules permit.`,
+                    data: { allowed: result.allowed, results: result.results },
+                };
+            },
+        },
+        {
+            name: 'firestore_create_with_auto_id',
+            description: 'Create a document at `<collection>/<auto-id>` with a Firestore-compatible 20-char alphanumeric id (mirrors the live SDK `addDoc()` flow). Rules evaluate as for an explicit-id `create`. Returns the minted path so the caller can re-read the doc without a side channel.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    collection: {
+                        type: 'string',
+                        description: 'Collection path under which to mint the new document, e.g. `users` or `users/u1/posts`.',
+                    },
+                    auth: {
+                        description: 'Auth context. `null` for unauthenticated. Otherwise `{ uid, token? }`.',
+                    },
+                    data: {
+                        type: 'object',
+                        description: 'Document data.',
+                        additionalProperties: true,
+                    },
+                },
+                required: ['collection', 'auth', 'data'],
+            },
+            async execute(args) {
+                const { collection, auth, data } = args;
+                const env = await resolveSandbox();
+                const { path, result } = env.createWithAutoId(collection, data, auth);
+                return {
+                    ok: result.allowed,
+                    summary: result.allowed
+                        ? `Created ${path}`
+                        : `Create at ${path} denied by rules (as ${auth ? auth.uid : 'unauthenticated'}). To SEED data, use the admin data tool firestore_add_document; to test rules, pass an auth the rules permit.`,
+                    data: {
+                        path,
+                        allowed: result.allowed,
+                        debugMessages: result.debugMessages,
+                    },
+                };
+            },
+        },
+        {
+            name: 'firestore_simulator_undo',
+            description: 'Undo the last allowed write. Restores state to immediately before that op. Returns the undone event, or a `{ undone: false }` outcome when the log is empty.',
+            parameters: { type: 'object', properties: {} },
+            async execute() {
+                const env = await resolveSandbox();
+                const event = env.undo();
+                if (!event) {
+                    return { ok: true, summary: 'Nothing to undo', data: { undone: false } };
+                }
+                return {
+                    ok: true,
+                    summary: `Undid ${event.method} on ${event.path}`,
+                    data: { undone: true, event: { method: event.method, path: event.path } },
+                };
+            },
+        },
+        {
+            name: 'firestore_simulator_redo',
+            description: 'Re-apply the most recently undone write. Pairs with `firestore_simulator_undo`. Returns the re-applied event, or `{ redone: false }` when the undo stack is empty (no recent undo to redo).',
+            parameters: { type: 'object', properties: {} },
+            async execute() {
+                const env = await resolveSandbox();
+                const result = env.redo();
+                if (!result) {
+                    return { ok: true, summary: 'Nothing to redo', data: { redone: false } };
+                }
+                return {
+                    ok: result.allowed,
+                    summary: result.allowed
+                        ? `Redid ${result.event?.method ?? 'op'} on ${result.event?.path ?? '?'}`
+                        : 'Redo restored a denied event (no state change)',
+                    data: {
+                        redone: true,
+                        allowed: result.allowed,
+                        event: result.event
+                            ? { method: result.event.method, path: result.event.path }
+                            : null,
+                        debugMessages: result.debugMessages,
+                    },
+                };
+            },
+        },
+        {
+            name: 'firestore_simulator_events',
+            description: 'Return every event the sandbox has seen — allowed and denied — with timestamps, auth, and debug messages. Useful for audit / replay / "why did this rule deny?" investigations.',
+            parameters: { type: 'object', properties: {} },
+            async execute() {
+                const env = await resolveSandbox();
+                return {
+                    ok: true,
+                    summary: 'Event log',
+                    data: {
+                        events: env.getEvents().map((e) => ({
+                            id: e.id,
+                            method: e.method,
+                            path: e.path,
+                            allowed: e.allowed,
+                            auth: e.auth,
+                            debugMessages: e.debugMessages,
+                        })),
+                    },
+                };
+            },
+        },
+        {
+            name: 'firestore_simulator_transaction',
+            description: 'Run a declarative transaction. Reads are captured server-side and referenced from write data via `{ "$expr": "..." }` wrappers — agents never see the read values, eliminating the "round-trip the doc through context" cost. Expression DSL: arithmetic (+ - * / %), comparison, &&/||/?:, $alias.field references, string literals in either "double" or \'single\' quotes, and @sentinel(...) calls (@increment, @serverTimestamp, @arrayUnion, @arrayRemove, @deleteField). Reads are omitted from the response by default; set `includeReads: true` when debugging a denial.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    auth: {
+                        description: 'Auth context for rule eval. `null` for unauthenticated.',
+                    },
+                    readOnly: {
+                        type: 'boolean',
+                        description: 'Hint that the transaction is read-only. v1: writes are still committed; `readOnlyViolation: true` surfaces on the response if any was queued.',
+                    },
+                    includeReads: {
+                        type: 'boolean',
+                        description: 'Default false. When true, the response includes the captured read data + per-write debugMessages.',
+                    },
+                    reads: {
+                        type: 'object',
+                        description: 'Reads keyed by alias. Aliases referenced from write expressions as `$alias` (e.g. `$src.balance`).',
+                        additionalProperties: { type: 'string' },
+                    },
+                    writes: {
+                        type: 'array',
+                        minItems: 1,
+                        items: {
+                            type: 'object',
+                            properties: {
+                                method: { type: 'string', enum: ['create', 'update', 'set', 'delete'] },
+                                path: { type: 'string' },
+                                data: { type: 'object', additionalProperties: true },
+                            },
+                            required: ['method', 'path'],
+                        },
+                        description: 'Write operations to apply atomically.',
+                    },
+                },
+                required: ['reads', 'writes', 'auth'],
+            },
+            async execute(args) {
+                const { auth, readOnly, includeReads, reads, writes } = args;
+                // Validate method-conditional `data` requirement (JSON Schema
+                // can't express it cleanly).
+                for (let i = 0; i < writes.length; i += 1) {
+                    const w = writes[i];
+                    if (w.method === 'delete' && w.data !== undefined) {
+                        return {
+                            ok: false,
+                            summary: `writes[${i}]: 'delete' must not include 'data'`,
+                            data: { code: 'INVALID_INPUT' },
+                        };
+                    }
+                    if (w.method !== 'delete' && w.data === undefined) {
+                        return {
+                            ok: false,
+                            summary: `writes[${i}]: '${w.method}' requires 'data'`,
+                            data: { code: 'INVALID_INPUT' },
+                        };
+                    }
+                }
+                const env = await resolveSandbox();
+                const showReads = includeReads === true;
+                try {
+                    const result = env.transaction((tx) => {
+                        const readsEnv = {};
+                        for (const [alias, path] of Object.entries(reads)) {
+                            const snap = tx.get(path);
+                            const d = snap.data();
+                            readsEnv[alias] = d === undefined ? null : d;
+                        }
+                        for (let i = 0; i < writes.length; i += 1) {
+                            const w = writes[i];
+                            if (w.method === 'delete') {
+                                tx.delete(w.path);
+                                continue;
+                            }
+                            const resolved = resolveExpressionsInData(w.data, { reads: readsEnv });
+                            if (resolved === null || typeof resolved !== 'object' || Array.isArray(resolved)) {
+                                throw new ExpressionWalkError(`writes[${i}].data resolved to a non-object`, `writes.${i}.data`);
+                            }
+                            const data = resolved;
+                            switch (w.method) {
+                                case 'create':
+                                    tx.create(w.path, data);
+                                    break;
+                                case 'update':
+                                    tx.update(w.path, data);
+                                    break;
+                                case 'set':
+                                    tx.set(w.path, data);
+                                    break;
+                            }
+                        }
+                    }, { auth, readOnly });
+                    const response = {
+                        allowed: result.allowed,
+                        writes: result.writes.map((w) => {
+                            const entry = {
+                                path: w.path,
+                                method: w.method,
+                                allowed: w.allowed,
+                            };
+                            if (w.error)
+                                entry.error = { code: w.error.code, message: w.error.message };
+                            if (showReads)
+                                entry.debugMessages = w.debugMessages;
+                            return entry;
+                        }),
+                    };
+                    if (result.error) {
+                        response.error = { code: result.error.code, message: result.error.message };
+                    }
+                    if (result.readOnlyViolation) {
+                        response.readOnlyViolation = true;
+                    }
+                    if (showReads) {
+                        response.reads = result.reads.map((r) => ({ path: r.path, data: r.data }));
+                    }
+                    return {
+                        ok: result.allowed,
+                        summary: result.allowed
+                            ? `Transaction committed (${writes.length} write(s))`
+                            : `Transaction rolled back`,
+                        data: response,
+                    };
+                }
+                catch (e) {
+                    if (e instanceof ExpressionWalkError ||
+                        e instanceof ExpressionLexError ||
+                        e instanceof ExpressionParseError ||
+                        e instanceof EvalError) {
+                        return {
+                            ok: false,
+                            summary: `Transaction failed: ${e.message}`,
+                            data: {
+                                allowed: false,
+                                writes: [],
+                                error: { code: 'invalid-argument', message: e.message },
+                            },
+                        };
+                    }
+                    // Unknown throw — propagate so we don't swallow bugs.
+                    throw e;
+                }
+            },
+        },
+    ];
+}
+//# sourceMappingURL=simulator-tools-impl.js.map

package/dist/rules/simulator-tools-impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"simulator-tools-impl.js","sourceRoot":"","sources":["../../src/rules/simulator-tools-impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAwBlE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAgC;IAEhC,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAClD,OAAO;QACL;YACE,IAAI,EAAE,4BAA4B;YAClC,WAAW,EACT,mQAAmQ;YACrQ,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,2DAA2D;qBACzE;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,iFAAiF;wBAC9F,oBAAoB,EAAE,IAAI;qBAC3B;iBACF;gBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;aACpB;YACD,KAAK,CAAC,OAAO,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAGrC,CAAC;gBACF,IAAI,KAAK,GAAG,OAAO,CAAC;gBACpB,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBACnE,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACtB,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,OAAO,EACL,qMAAqM;4BACvM,IAAI,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;yBACrC,CAAC;oBACJ,CAAC;oBACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;oBACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACtB,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,OAAO,EAAE,0BAA0B,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;4BAC3D,IAAI,EAAE,QAAQ;yBACf,CAAC;oBACJ,CAAC;oBACD,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjC,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7D,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,uBAAuB,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,cAAc;oBACjF,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;iBACnE,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,6BAA6B;YACnC,WAAW,EACT,6OAA6O;YAC/O,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBAChE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;oBACxE,IAAI,EAAE;wBACJ,WAAW,EACT,kHAAkH;qBACrH;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,8CAA8C;wBAC3D,oBAAoB,EAAE,IAAI;qBAC3B;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aACrC;YACD,KAAK,CAAC,OAAO,CAAC,IAAI;gBAChB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAKpC,CAAC;gBACF,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzD,OAAO;oBACL,EAAE,EAAE,MAAM,CAAC,OAAO;oBAClB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACrB,CAAC,CAAC,GAAG,MAAM,OAAO,IAAI,UAAU;wBAChC,CAAC,CAAC,GAAG,MAAM,OAAO,IAAI,SAAS;oBACjC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE;iBACvE,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EACT,mOAAmO;YACrO,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iDAAiD,EAAE;oBACxF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE;oBAChF,IAAI,EAAE;wBACJ,WAAW,EAAE,sDAAsD;qBACpE;oBACD,aAAa,EAAE;wBACb,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,iEAAiE;qBAC/E;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,KAAK,CAAC,OAAO,CAAC,IAAI;gBAChB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,IAK7C,CAAC;gBACF,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;gBACnC,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;oBAClF,OAAO;wBACL,EAAE,EAAE,MAAM,CAAC,OAAO;wBAClB,OAAO,EAAE,MAAM,CAAC,OAAO;4BACrB,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,OAAO,IAAI,UAAU;4BACzC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,OAAO,IAAI,SAAS;wBAC1C,IAAI,EAAE;4BACJ,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,QAAQ,EAAE,MAAM,CAAC,IAAI;4BACrB,aAAa,EAAE,MAAM,CAAC,aAAa;yBACpC;qBACF,CAAC;gBACJ,CAAC;gBACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,OAAO;wBACL,EAAE,EAAE,IAAI;wBACR,OAAO,EAAE,UAAU,IAAI,EAAE;wBACzB,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;qBAC7C,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,QAAQ,IAAI,EAAE;oBACvB,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;iBAC1C,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,WAAW,EACT,wLAAwL;YAC1L,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,UAAU,EAAE;wBACV,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;gCAChE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gCACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;6BACrD;4BACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;yBAC7B;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EAAE,wDAAwD;qBACtE;iBACF;gBACD,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC;aACjC;YACD,KAAK,CAAC,OAAO,CAAC,IAAI;gBAChB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,IAO5B,CAAC;gBACF,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAC3C,OAAO;oBACL,EAAE,EAAE,MAAM,CAAC,OAAO;oBAClB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACrB,CAAC,CAAC,YAAY,UAAU,CAAC,MAAM,kBAAkB;wBACjD,CAAC,CAAC,YAAY,UAAU,CAAC,MAAM,sIAAsI;oBACvK,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;iBAC3D,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,+BAA+B;YACrC,WAAW,EACT,4QAA4Q;YAC9Q,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,yFAAyF;qBACvG;oBACD,IAAI,EAAE;wBACJ,WAAW,EACT,wEAAwE;qBAC3E;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,gBAAgB;wBAC7B,oBAAoB,EAAE,IAAI;qBAC3B;iBACF;gBACD,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC;aACzC;YACD,KAAK,CAAC,OAAO,CAAC,IAAI;gBAChB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAIlC,CAAC;gBACF,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;gBACnC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBACtE,OAAO;oBACL,EAAE,EAAE,MAAM,CAAC,OAAO;oBAClB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACrB,CAAC,CAAC,WAAW,IAAI,EAAE;wBACnB,CAAC,CAAC,aAAa,IAAI,wBAAwB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,gHAAgH;oBAChM,IAAI,EAAE;wBACJ,IAAI;wBACJ,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,aAAa,EAAE,MAAM,CAAC,aAAa;qBACpC;iBACF,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EACT,8JAA8J;YAChK,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC9C,KAAK,CAAC,OAAO;gBACX,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC3E,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,SAAS,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,IAAI,EAAE;oBACjD,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE;iBAC1E,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EACT,6LAA6L;YAC/L,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC9C,KAAK,CAAC,OAAO;gBACX,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC3E,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,MAAM,CAAC,OAAO;oBAClB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACrB,CAAC,CAAC,SAAS,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,OAAO,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,GAAG,EAAE;wBACzE,CAAC,CAAC,gDAAgD;oBACpD,IAAI,EAAE;wBACJ,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;4BACjB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;4BAC1D,CAAC,CAAC,IAAI;wBACR,aAAa,EAAE,MAAM,CAAC,aAAa;qBACpC;iBACF,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,4BAA4B;YAClC,WAAW,EACT,iLAAiL;YACnL,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC9C,KAAK,CAAC,OAAO;gBACX,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;gBACnC,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,WAAW;oBACpB,IAAI,EAAE;wBACJ,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAClC,EAAE,EAAE,CAAC,CAAC,EAAE;4BACR,MAAM,EAAE,CAAC,CAAC,MAAM;4BAChB,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,OAAO,EAAE,CAAC,CAAC,OAAO;4BAClB,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,aAAa,EAAE,CAAC,CAAC,aAAa;yBAC/B,CAAC,CAAC;qBACJ;iBACF,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,iCAAiC;YACvC,WAAW,EACT,mjBAAmjB;YACrjB,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,WAAW,EAAE,yDAAyD;qBACvE;oBACD,QAAQ,EAAE;wBACR,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,+IAA+I;qBAC7J;oBACD,YAAY,EAAE;wBACZ,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,mGAAmG;qBACjH;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,oGAAoG;wBACjH,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACzC;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,CAAC;wBACX,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE;gCACvE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gCACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;6BACrD;4BACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;yBAC7B;wBACD,WAAW,EAAE,uCAAuC;qBACrD;iBACF;gBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC;aACtC;YACD,KAAK,CAAC,OAAO,CAAC,IAAI;gBAChB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAUvD,CAAC;gBAEF,8DAA8D;gBAC9D,6BAA6B;gBAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACpB,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBAClD,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,OAAO,EAAE,UAAU,CAAC,qCAAqC;4BACzD,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;yBAChC,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBAClD,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,mBAAmB;4BACtD,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;yBAChC,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;gBACnC,MAAM,SAAS,GAAG,YAAY,KAAK,IAAI,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;wBACpC,MAAM,QAAQ,GAAmD,EAAE,CAAC;wBACpE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;4BAClD,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;4BACtB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAA6B,CAAC;wBAC5E,CAAC;wBACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;4BACpB,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gCAC1B,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gCAClB,SAAS;4BACX,CAAC;4BACD,MAAM,QAAQ,GAAG,wBAAwB,CACvC,CAAC,CAAC,IAA+B,EACjC,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;4BACF,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gCACjF,MAAM,IAAI,mBAAmB,CAC3B,UAAU,CAAC,iCAAiC,EAC5C,UAAU,CAAC,OAAO,CACnB,CAAC;4BACJ,CAAC;4BACD,MAAM,IAAI,GAAG,QAAmC,CAAC;4BACjD,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gCACjB,KAAK,QAAQ;oCAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oCAAC,MAAM;gCAC9C,KAAK,QAAQ;oCAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oCAAC,MAAM;gCAC9C,KAAK,KAAK;oCAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oCAAI,MAAM;4BAChD,CAAC;wBACH,CAAC;oBACH,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAEvB,MAAM,QAAQ,GAA4B;wBACxC,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;4BAC9B,MAAM,KAAK,GAA4B;gCACrC,IAAI,EAAE,CAAC,CAAC,IAAI;gCACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gCAChB,OAAO,EAAE,CAAC,CAAC,OAAO;6BACnB,CAAC;4BACF,IAAI,CAAC,CAAC,KAAK;gCAAE,KAAK,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;4BAC5E,IAAI,SAAS;gCAAE,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;4BACrD,OAAO,KAAK,CAAC;wBACf,CAAC,CAAC;qBACH,CAAC;oBACF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;wBACjB,QAAQ,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBAC9E,CAAC;oBACD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;wBAC7B,QAAQ,CAAC,iBAAiB,GAAG,IAAI,CAAC;oBACpC,CAAC;oBACD,IAAI,SAAS,EAAE,CAAC;wBACd,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBAC7E,CAAC;oBACD,OAAO;wBACL,EAAE,EAAE,MAAM,CAAC,OAAO;wBAClB,OAAO,EAAE,MAAM,CAAC,OAAO;4BACrB,CAAC,CAAC,0BAA0B,MAAM,CAAC,MAAM,YAAY;4BACrD,CAAC,CAAC,yBAAyB;wBAC7B,IAAI,EAAE,QAAQ;qBACf,CAAC;gBACJ,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IACE,CAAC,YAAY,mBAAmB;wBAChC,CAAC,YAAY,kBAAkB;wBAC/B,CAAC,YAAY,oBAAoB;wBACjC,CAAC,YAAY,SAAS,EACtB,CAAC;wBACD,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,OAAO,EAAE,uBAAuB,CAAC,CAAC,OAAO,EAAE;4BAC3C,IAAI,EAAE;gCACJ,OAAO,EAAE,KAAK;gCACd,MAAM,EAAE,EAAE;gCACV,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;6BACxD;yBACF,CAAC;oBACJ,CAAC;oBACD,sDAAsD;oBACtD,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/rules/simulator.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Browser-safe entry for the simulator tool factory.
+ *
+ * Hosts building MCP / agent tool surfaces that run in a browser can bundle
+ * this source entry to avoid pulling the Node-only resolver into the browser.
+ *
+ * The factory wires the browser-safe `resolveModulesBrowser` so
+ * `firestore_simulator_create` accepts `rules_version = '2+modules'`
+ * sources without a disk dependency.
+ *
+ * The public Node entry (`pyric/rules/node`) re-exports the same factory wired
+ * with the disk-reading `resolveModules`. The two factories share
+ * `./simulator-tools-impl.ts` so browser dispatch and Node MCP advertisement
+ * stay in lockstep.
+ */
+import { type FirestoreSimulatorToolDeps as FirestoreSimulatorToolDepsImpl } from './simulator-tools-impl.js';
+import type { ToolHandler } from '@inbrowser/agent';
+export type FirestoreSimulatorToolDeps = Pick<FirestoreSimulatorToolDepsImpl, 'resolveSandbox'>;
+export declare function createFirestoreSimulatorTools(deps: FirestoreSimulatorToolDeps): ToolHandler[];
+//# sourceMappingURL=simulator.d.ts.map

package/dist/rules/simulator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"simulator.d.ts","sourceRoot":"","sources":["../../src/rules/simulator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAEL,KAAK,0BAA0B,IAAI,8BAA8B,EAClE,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAC3C,8BAA8B,EAC9B,gBAAgB,CACjB,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,0BAA0B,GAC/B,WAAW,EAAE,CAKf"}

package/dist/rules/simulator.js

@@ -0,0 +1,24 @@
+/**
+ * Browser-safe entry for the simulator tool factory.
+ *
+ * Hosts building MCP / agent tool surfaces that run in a browser can bundle
+ * this source entry to avoid pulling the Node-only resolver into the browser.
+ *
+ * The factory wires the browser-safe `resolveModulesBrowser` so
+ * `firestore_simulator_create` accepts `rules_version = '2+modules'`
+ * sources without a disk dependency.
+ *
+ * The public Node entry (`pyric/rules/node`) re-exports the same factory wired
+ * with the disk-reading `resolveModules`. The two factories share
+ * `./simulator-tools-impl.ts` so browser dispatch and Node MCP advertisement
+ * stay in lockstep.
+ */
+import { resolveModulesBrowser } from './modules/resolver-browser.js';
+import { createFirestoreSimulatorTools as createFirestoreSimulatorToolsImpl, } from './simulator-tools-impl.js';
+export function createFirestoreSimulatorTools(deps) {
+    return createFirestoreSimulatorToolsImpl({
+        resolveSandbox: deps.resolveSandbox,
+        resolveModulesFn: resolveModulesBrowser,
+    });
+}
+//# sourceMappingURL=simulator.js.map

package/dist/rules/simulator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"simulator.js","sourceRoot":"","sources":["../../src/rules/simulator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EACL,6BAA6B,IAAI,iCAAiC,GAEnE,MAAM,2BAA2B,CAAC;AAQnC,MAAM,UAAU,6BAA6B,CAC3C,IAAgC;IAEhC,OAAO,iCAAiC,CAAC;QACvC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,gBAAgB,EAAE,qBAAqB;KACxC,CAAC,CAAC;AACL,CAAC"}

package/dist/rules/stdlib-modules.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Firestore Rules standard library — a module-organized reference an
+ * agent can call before writing rules.
+ *
+ * Three flavors of module live here, distinguished by `kind`:
+ *
+ *   `language-namespace` — namespaces like `math`, `timestamp`,
+ *       `duration`, `latlng`, `hashing`. Functions called as
+ *       `<namespace>.<fn>(...)`. Built into the rules engine; always
+ *       in scope.
+ *   `type-methods` — methods that dispatch on a value's type:
+ *       `string`, `list`, `map`, `bytes`, `path`. Called as
+ *       `<value>.<method>(...)`. Built into the engine; always in
+ *       scope.
+ *   `globals` — root identifiers (`request`, `resource`) that carry
+ *       request-time and existing-doc state. Accessed as paths
+ *       (`request.auth.uid`), not callables.
+ *   `user-module` — reusable libraries shipped under
+ *       `packages/pyric/src/rules/modules/stdlib/` (auth,
+ *       validation, lobby, …). Imported via
+ *       `import { isAuthenticated } from 'auth';` after
+ *       `rules_version = '2+modules';`. Functions called bare after
+ *       import. Resolver also accepts the path form
+ *       `from './stdlib/auth.rules'` if the source prefers.
+ *
+ * Source of truth: this file's names are kept in sync with
+ *   - `BUILTIN_FUNCTIONS` (`grammar/FirestoreValidator.ts`)
+ *   - `BUILTIN_NAMESPACES` (`simulator/evaluator.ts`)
+ *   - `KNOWN_BUILTIN_METHODS` (`linter/hallucinations.ts`)
+ *   - wrapper-class implementations (`simulator/wrappers/*.ts`)
+ *   - `modules/stdlib/STDLIB.md`
+ * by a drift-check vitest in `test/stdlib-modules.test.ts`. If a
+ * runtime constant grows, the test fails until this file catches up.
+ */
+export type ModuleKind = 'language-namespace' | 'type-methods' | 'globals' | 'user-module';
+export interface StdlibEntry {
+    /** Surface signature, e.g. `math.ceil(x: number): int`. */
+    signature: string;
+    /** One-line summary the agent reads first. */
+    description: string;
+    /** ~1–3 lines of real rule fragments. Optional. */
+    examples?: string[];
+    /** Gotchas / common confusions (e.g. "agents commonly write
+     *  `auth.token.admin` — needs leading `request.`"). Optional. */
+    notes?: string;
+}
+export interface StdlibModule {
+    /** Module identifier — the value passed to
+     *  `firestore_rules_stdlib_get({ key })`. Case-insensitive lookup. */
+    key: string;
+    kind: ModuleKind;
+    /** One-line for the list TOC. */
+    description: string;
+    /** One-paragraph: what this module is for. */
+    purpose: string;
+    /** One-line: the situation that should make the agent reach for it. */
+    whenToUse: string;
+    /** Entries inside the module. */
+    entries: StdlibEntry[];
+    /** Module-level snippets — typical patterns. */
+    examples?: string[];
+    /** Cross-references to related modules. Surfaced in the get
+     *  response to help the agent navigate naturally. */
+    relatedKeys?: string[];
+}
+export declare const STDLIB_MODULES: ReadonlyArray<StdlibModule>;
+/** Look up a module by case-insensitive key. */
+export declare function findModuleByKey(key: string): StdlibModule | undefined;
+/** All valid keys — used in the error response when a get-call misses. */
+export declare function allModuleKeys(): string[];
+/** Closest-match suggestion (cheap Levenshtein) for a bad key. */
+export declare function suggestKey(input: string): string | null;
+//# sourceMappingURL=stdlib-modules.d.ts.map

package/dist/rules/stdlib-modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdlib-modules.d.ts","sourceRoot":"","sources":["../../src/rules/stdlib-modules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,MAAM,UAAU,GAClB,oBAAoB,GACpB,cAAc,GACd,SAAS,GACT,aAAa,CAAC;AAElB,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;qEACiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B;0EACsE;IACtE,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;yDACqD;IACrD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAy3BD,eAAO,MAAM,cAAc,EAAE,aAAa,CAAC,YAAY,CAkCtD,CAAC;AAEF,gDAAgD;AAChD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAGrE;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAExC;AAED,kEAAkE;AAClE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUvD"}