@cleocode/runtime 2026.6.14 → 2026.6.15

package/dist/{chunk-Q7X4XH2V.js → chunk-U2ESNIJ5.js}

@@ -258,6 +258,195 @@ function resolveStreamSource(domain, operation) {
   return STREAM_SOURCES.get(streamSourceKey(domain, operation));
 }
 
+// src/gateway/http/studio-static.ts
+import { createReadStream, existsSync } from "fs";
+import { stat } from "fs/promises";
+import { extname, join, resolve } from "path";
+var log = {
+  info: (obj, msg) => {
+    if (process.env["CLEO_DEBUG_STUDIO"]) console.info("[studio-static]", msg, obj);
+  },
+  warn: (obj, msg) => {
+    if (process.env["NODE_ENV"] !== "test") {
+      console.warn("[studio-static]", msg, obj);
+    }
+  },
+  debug: (_obj, _msg) => {
+    if (process.env["CLEO_DEBUG_STUDIO"]) console.debug("[studio-static]", _msg, _obj);
+  }
+};
+var MIME_TYPES = /* @__PURE__ */ new Map([
+  [".html", "text/html; charset=utf-8"],
+  [".js", "application/javascript; charset=utf-8"],
+  [".mjs", "application/javascript; charset=utf-8"],
+  [".css", "text/css; charset=utf-8"],
+  [".json", "application/json; charset=utf-8"],
+  [".png", "image/png"],
+  [".jpg", "image/jpeg"],
+  [".jpeg", "image/jpeg"],
+  [".svg", "image/svg+xml"],
+  [".ico", "image/x-icon"],
+  [".woff", "font/woff"],
+  [".woff2", "font/woff2"],
+  [".ttf", "font/ttf"],
+  [".map", "application/json; charset=utf-8"],
+  [".txt", "text/plain; charset=utf-8"],
+  [".webmanifest", "application/manifest+json; charset=utf-8"]
+]);
+var MIME_FALLBACK = "application/octet-stream";
+var STUDIO_PREFIX = "/studio";
+function isStudioPath(pathname) {
+  return pathname === STUDIO_PREFIX || pathname.startsWith(`${STUDIO_PREFIX}/`);
+}
+function resolveStudioAssetPath(staticDir, pathname) {
+  const base = resolve(staticDir);
+  const stripped = pathname.slice(STUDIO_PREFIX.length) || "/";
+  const relative = stripped.replace(/^[\\/]+/, "") || ".";
+  const candidate = resolve(base, relative);
+  const safeBase = base.endsWith("/") ? base : `${base}/`;
+  if (candidate !== base && !candidate.startsWith(safeBase)) {
+    return void 0;
+  }
+  return candidate;
+}
+function mimeType(filePath) {
+  return MIME_TYPES.get(extname(filePath).toLowerCase()) ?? MIME_FALLBACK;
+}
+function writeBundleAbsentError(res, hint) {
+  const body = JSON.stringify({
+    success: false,
+    error: {
+      code: "E_STUDIO_BUNDLE_ABSENT",
+      message: "CLEO Studio assets are not available. Run `pnpm --filter @cleocode/studio run build` to build them, or install from npm (npm i -g @cleocode/cleo) for a batteries-included release.",
+      hint: hint ?? null
+    }
+  });
+  res.writeHead(503, { "Content-Type": "application/json; charset=utf-8" });
+  res.end(body);
+}
+async function serveStudioStatic(req, res, opts) {
+  const pathname = new URL(req.url ?? "/", "http://localhost").pathname;
+  if (req.method !== "GET" && req.method !== "HEAD") {
+    res.writeHead(405, {
+      "Content-Type": "application/json; charset=utf-8",
+      Allow: "GET, HEAD"
+    });
+    res.end(
+      JSON.stringify({
+        success: false,
+        error: {
+          code: "E_METHOD_NOT_ALLOWED",
+          message: `Method ${req.method ?? "<none>"} not allowed for /studio routes`
+        }
+      })
+    );
+    return;
+  }
+  if (pathname === STUDIO_PREFIX) {
+    res.writeHead(302, { Location: `${STUDIO_PREFIX}/` });
+    res.end();
+    return;
+  }
+  const staticDir = opts.staticDir;
+  if (staticDir === void 0 || !existsSync(staticDir)) {
+    log.warn({ staticDir }, "studio static dir absent");
+    writeBundleAbsentError(res, staticDir);
+    return;
+  }
+  const assetPath = resolveStudioAssetPath(staticDir, pathname);
+  if (assetPath === void 0) {
+    res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
+    res.end(
+      JSON.stringify({
+        success: false,
+        error: { code: "E_BAD_REQUEST", message: "Invalid path" }
+      })
+    );
+    return;
+  }
+  let targetPath = assetPath;
+  let isSpaFallback = false;
+  try {
+    const st = await stat(targetPath);
+    if (st.isDirectory()) {
+      const dirIndex = join(targetPath, "index.html");
+      if (existsSync(dirIndex)) {
+        targetPath = dirIndex;
+      } else {
+        targetPath = join(staticDir, "index.html");
+        isSpaFallback = true;
+      }
+    }
+  } catch {
+    targetPath = join(staticDir, "index.html");
+    isSpaFallback = true;
+  }
+  if (!existsSync(targetPath)) {
+    res.writeHead(503, { "Content-Type": "application/json; charset=utf-8" });
+    res.end(
+      JSON.stringify({
+        success: false,
+        error: {
+          code: "E_STUDIO_BUNDLE_CORRUPT",
+          message: "Studio index.html not found in the static bundle."
+        }
+      })
+    );
+    return;
+  }
+  const ct = mimeType(targetPath);
+  if (req.method === "HEAD") {
+    try {
+      const st = await stat(targetPath);
+      res.writeHead(200, {
+        "Content-Type": ct,
+        "Content-Length": String(st.size),
+        ...isSpaFallback ? {} : { "Cache-Control": "public, max-age=31536000, immutable" }
+      });
+      res.end();
+    } catch {
+      res.writeHead(404);
+      res.end();
+    }
+    return;
+  }
+  try {
+    const st = await stat(targetPath);
+    res.writeHead(200, {
+      "Content-Type": ct,
+      "Content-Length": String(st.size),
+      // Immutable cache for fingerprinted assets; no cache for SPA fallback.
+      ...isSpaFallback ? { "Cache-Control": "no-cache" } : {
+        "Cache-Control": "public, max-age=31536000, immutable"
+      }
+    });
+    const stream = createReadStream(targetPath);
+    stream.on("error", (err) => {
+      log.warn({ err, targetPath }, "studio static read error");
+      if (!res.writableEnded) res.end();
+    });
+    stream.pipe(res);
+    log.debug({ pathname, targetPath, isSpaFallback, ct }, "studio static served");
+  } catch (err) {
+    log.warn({ err, targetPath }, "studio static stat error");
+    if (!res.headersSent) {
+      res.writeHead(500, { "Content-Type": "application/json; charset=utf-8" });
+      res.end(
+        JSON.stringify({
+          success: false,
+          error: { code: "E_INTERNAL", message: "Failed to read Studio asset" }
+        })
+      );
+    } else if (!res.writableEnded) {
+      res.end();
+    }
+  }
+}
+function resolveStudioStaticDir(cleoPackageDir) {
+  const candidate = join(cleoPackageDir, "studio-dist", "client");
+  return existsSync(candidate) ? candidate : void 0;
+}
+
 // src/gateway/http/ws-pty.ts
 import { createHash } from "crypto";
 import { delimiter } from "path";
@@ -428,7 +617,7 @@ Content-Length: ${Buffer.byteLength(reason)}\r
 }
 function swallowLateSocketError() {
 }
-async function bridgePty(req, socket, opts, log, onTeardown) {
+async function bridgePty(req, socket, opts, log2, onTeardown) {
   const key = req.headers["sec-websocket-key"];
   socket.write(
     `HTTP/1.1 101 Switching Protocols\r
@@ -480,7 +669,7 @@ Sec-WebSocket-Accept: ${computeAcceptKey(typeof key === "string" ? key : "")}\r
       onTeardown();
     } catch {
     }
-    log.debug({ code, reason }, "ws-pty session torn down");
+    log2.debug({ code, reason }, "ws-pty session torn down");
   };
   const onFrame = (frame) => {
     switch (frame.opcode) {
@@ -538,7 +727,7 @@ Sec-WebSocket-Accept: ${computeAcceptKey(typeof key === "string" ? key : "")}\r
       env: scrubPtyEnv()
     });
   } catch (err) {
-    log.warn({ err }, "ws-pty spawn failed");
+    log2.warn({ err }, "ws-pty spawn failed");
     teardown(1011, "PTY spawn failed");
     return { teardown };
   }
@@ -546,7 +735,7 @@ Sec-WebSocket-Accept: ${computeAcceptKey(typeof key === "string" ? key : "")}\r
   if (dataSub && typeof dataSub.dispose === "function") disposables.push(dataSub);
   const exitSub = pty.onExit(({ exitCode }) => teardown(1e3, `pty exited (${exitCode})`));
   if (exitSub && typeof exitSub.dispose === "function") disposables.push(exitSub);
-  log.debug({ shell }, "ws-pty session established");
+  log2.debug({ shell }, "ws-pty session established");
   return { teardown };
 }
 function tryParseControl(text) {
@@ -562,13 +751,13 @@ function tryParseControl(text) {
   return void 0;
 }
 function attachWsPtyEndpoint(server, opts = {}) {
-  const log = getLogger("gateway-ws-pty");
+  const log2 = getLogger("gateway-ws-pty");
   const sessions = /* @__PURE__ */ new Set();
   const onUpgrade = (req, socket, _head) => {
     if (!isWsPtyPath(req.url)) return;
     const decision = authorizeUpgrade(req, req.socket.remoteAddress, opts);
     if (!decision.ok) {
-      log.debug({ status: decision.status, reason: decision.reason }, "ws-pty upgrade rejected");
+      log2.debug({ status: decision.status, reason: decision.reason }, "ws-pty upgrade rejected");
       rejectUpgrade(socket, decision.status, decision.reason);
       return;
     }
@@ -579,11 +768,11 @@ function attachWsPtyEndpoint(server, opts = {}) {
       deregistered = true;
       if (session !== void 0) sessions.delete(session);
     };
-    bridgePty(req, socket, opts, log, deregister).then((s) => {
+    bridgePty(req, socket, opts, log2, deregister).then((s) => {
       session = s;
       if (!deregistered) sessions.add(s);
     }).catch((err) => {
-      log.warn({ err }, "ws-pty bridge failed");
+      log2.warn({ err }, "ws-pty bridge failed");
       deregister();
       if (!socket.destroyed) socket.destroy();
     });
@@ -670,7 +859,7 @@ function parseHttpRoute(method, url) {
   return { ok: true, kind: "unary", gateway, domain, operation };
 }
 function readBody(req) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const chunks = [];
     let size = 0;
     req.on("data", (chunk) => {
@@ -682,7 +871,7 @@ function readBody(req) {
       }
       chunks.push(chunk);
     });
-    req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+    req.on("end", () => resolve2(Buffer.concat(chunks).toString("utf8")));
     req.on("error", reject);
   });
 }
@@ -742,12 +931,12 @@ function writeStreamError(res, domain, operation, requestId) {
   res.writeHead(200, { ...SSE_HEADERS });
   res.end(encodeStreamEvent(frame));
 }
-async function handleStreamRequest(req, res, domain, operation, log) {
+async function handleStreamRequest(req, res, domain, operation, log2) {
   const requestId = randomUUID2();
   const source = resolveStreamSource(domain, operation);
   if (source === void 0) {
     writeStreamError(res, domain, operation, requestId);
-    log.warn({ domain, operation }, "sse stream has no registered source");
+    log2.warn({ domain, operation }, "sse stream has no registered source");
     return;
   }
   const controller = new AbortController();
@@ -768,20 +957,25 @@ async function handleStreamRequest(req, res, domain, operation, log) {
       if (done) break;
       if (res.writableEnded) break;
       if (!res.write(value)) {
-        await new Promise((resolve) => res.once("drain", resolve));
+        await new Promise((resolve2) => res.once("drain", resolve2));
       }
     }
   } catch (err) {
-    log.warn({ err, domain, operation }, "sse stream pipe failed");
+    log2.warn({ err, domain, operation }, "sse stream pipe failed");
   } finally {
     reader.releaseLock();
     req.removeListener("close", onClose);
     if (!controller.signal.aborted) controller.abort();
     if (!res.writableEnded) res.end();
-    log.debug({ domain, operation, requestId }, "sse stream closed");
+    log2.debug({ domain, operation, requestId }, "sse stream closed");
   }
 }
-async function handleHttpRequest(handler, req, res, log) {
+async function handleHttpRequest(handler, req, res, log2, studioOpts) {
+  const pathname = new URL(req.url ?? "/", "http://localhost").pathname;
+  if (studioOpts !== void 0 && isStudioPath(pathname)) {
+    await serveStudioStatic(req, res, studioOpts);
+    return;
+  }
   const route = parseHttpRoute(req.method, req.url);
   if (!route.ok) {
     writeEdgeError(res, route.status, route.code, route.message);
@@ -789,11 +983,11 @@ async function handleHttpRequest(handler, req, res, log) {
   }
   if (route.kind === "health") {
     writeHealth(res);
-    log.debug({ route: "health" }, "http health probe served");
+    log2.debug({ route: "health" }, "http health probe served");
     return;
   }
   if (route.kind === "stream") {
-    await handleStreamRequest(req, res, route.domain, route.operation, log);
+    await handleStreamRequest(req, res, route.domain, route.operation, log2);
     return;
   }
   let params;
@@ -821,7 +1015,7 @@ async function handleHttpRequest(handler, req, res, log) {
   const result = await routeUnary(handler, unary);
   res.writeHead(result.status, { "Content-Type": "application/json" });
   res.end(JSON.stringify(result.body));
-  log.debug(
+  log2.debug(
     {
       gateway: route.gateway,
       domain: route.domain,
@@ -832,12 +1026,16 @@ async function handleHttpRequest(handler, req, res, log) {
   );
 }
 function startHttpServer(handler, opts) {
-  const log = getLogger2("gateway-http");
+  const log2 = getLogger2("gateway-http");
   const host = opts.host ?? "127.0.0.1";
+  const studioOpts = opts.studioStaticDir !== void 0 ? { staticDir: opts.studioStaticDir } : void 0;
+  if (studioOpts !== void 0) {
+    log2.info({ studioStaticDir: opts.studioStaticDir }, "studio static serving enabled at /studio");
+  }
   const server = createServer((req, res) => {
-    handleHttpRequest(handler, req, res, log).catch((err) => {
+    handleHttpRequest(handler, req, res, log2, studioOpts).catch((err) => {
       const message = err instanceof Error ? err.message : String(err);
-      log.warn({ err }, "http request handling failed");
+      log2.warn({ err }, "http request handling failed");
       if (!res.headersSent) {
         writeEdgeError(res, 500, "E_HTTP_INTERNAL", message);
       } else if (!res.writableEnded) {
@@ -846,13 +1044,13 @@ function startHttpServer(handler, opts) {
     });
   });
   const wsPty = opts.wsPty !== void 0 ? attachWsPtyEndpoint(server, opts.wsPty) : void 0;
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     server.once("error", reject);
     server.listen(opts.port, host, () => {
       server.removeListener("error", reject);
       const address = server.address();
       const boundPort = typeof address === "object" && address !== null ? address.port : opts.port;
-      log.info(
+      log2.info(
         { host, port: boundPort, wsPty: wsPty !== void 0 },
         "http gateway server listening"
       );
@@ -871,7 +1069,7 @@ function startHttpServer(handler, opts) {
           });
         }
       };
-      resolve(handle);
+      resolve2(handle);
     });
   });
 }
@@ -886,6 +1084,13 @@ export {
   tickStreamSource,
   registerStreamSource,
   resolveStreamSource,
+  STUDIO_PREFIX,
+  isStudioPath,
+  resolveStudioAssetPath,
+  mimeType,
+  writeBundleAbsentError,
+  serveStudioStatic,
+  resolveStudioStaticDir,
   WS_PTY_PATH,
   NODE_PTY_INSTALL_HINT,
   loadNodePty,
@@ -899,4 +1104,4 @@ export {
   parseHttpRoute,
   startHttpServer
 };
-//# sourceMappingURL=chunk-Q7X4XH2V.js.map
+//# sourceMappingURL=chunk-U2ESNIJ5.js.map