@imgly/codesign-mcp 0.1.5 → 0.1.7

package/dist/test/test/viewer/broadcaster.test.js

@@ -1,53 +0,0 @@
-import { describe, expect, it, vi } from 'vitest';
-import { SseBroadcaster } from '../../src/viewer/broadcaster.js';
-function fakeRes() {
-    const written = [];
-    const closeCbs = [];
-    return {
-        written,
-        writeHead: vi.fn(),
-        write: vi.fn((chunk) => {
-            written.push(chunk);
-            return true;
-        }),
-        end: vi.fn(() => {
-            for (const cb of closeCbs)
-                cb();
-        }),
-        on: vi.fn((evt, cb) => {
-            if (evt === 'close')
-                closeCbs.push(cb);
-        })
-    };
-}
-describe('SseBroadcaster', () => {
-    it('subscribe writes SSE headers + initial comment', () => {
-        const b = new SseBroadcaster();
-        const res = fakeRes();
-        b.subscribe('root_abc', res);
-        expect(res.writeHead).toHaveBeenCalledWith(200, expect.objectContaining({ 'content-type': 'text/event-stream' }));
-        expect(res.written.some((s) => s.startsWith(':'))).toBe(true); // ping comment
-    });
-    it('broadcast sends `data: { revision, rootRevision }\\n\\n` to all subscribers of that root', () => {
-        const b = new SseBroadcaster();
-        const r1 = fakeRes();
-        const r2 = fakeRes();
-        const r3 = fakeRes();
-        b.subscribe('root_abc', r1);
-        b.subscribe('root_abc', r2);
-        b.subscribe('root_xyz', r3);
-        b.broadcast({ revision: 'rev_1', rootRevision: 'root_abc' });
-        expect(r1.written.some((s) => s.includes('rev_1'))).toBe(true);
-        expect(r2.written.some((s) => s.includes('rev_1'))).toBe(true);
-        expect(r3.written.some((s) => s.includes('rev_1'))).toBe(false);
-    });
-    it('removes subscribers when their response closes', () => {
-        const b = new SseBroadcaster();
-        const res = fakeRes();
-        b.subscribe('root_abc', res);
-        expect(b.subscriberCount('root_abc')).toBe(1);
-        res.end(); // triggers "close" callback
-        expect(b.subscriberCount('root_abc')).toBe(0);
-    });
-});
-//# sourceMappingURL=broadcaster.test.js.map

package/dist/test/test/viewer/broadcaster.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"broadcaster.test.js","sourceRoot":"","sources":["../../../../test/viewer/broadcaster.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAUjE,SAAS,OAAO;IACd,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,OAAO;QACL,OAAO;QACP,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;YAC7B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE;YACd,KAAK,MAAM,EAAE,IAAI,QAAQ;gBAAE,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC;QACF,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAW,EAAE,EAAc,EAAE,EAAE;YACxC,IAAI,GAAG,KAAK,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,GAAY,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACxC,GAAG,EACH,MAAM,CAAC,gBAAgB,CAAC,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC,CACjE,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QACrB,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,EAAW,CAAC,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,EAAW,CAAC,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,EAAW,CAAC,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,GAAY,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,4BAA4B;QACvC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, expect, it, vi } from 'vitest';\nimport { SseBroadcaster } from '../../src/viewer/broadcaster.js';\n\ninterface FakeResponse {\n  written: string[];\n  writeHead: ReturnType<typeof vi.fn>;\n  write: ReturnType<typeof vi.fn>;\n  end: ReturnType<typeof vi.fn>;\n  on: ReturnType<typeof vi.fn>;\n}\n\nfunction fakeRes(): FakeResponse {\n  const written: string[] = [];\n  const closeCbs: Array<() => void> = [];\n  return {\n    written,\n    writeHead: vi.fn(),\n    write: vi.fn((chunk: string) => {\n      written.push(chunk);\n      return true;\n    }),\n    end: vi.fn(() => {\n      for (const cb of closeCbs) cb();\n    }),\n    on: vi.fn((evt: string, cb: () => void) => {\n      if (evt === 'close') closeCbs.push(cb);\n    })\n  };\n}\n\ndescribe('SseBroadcaster', () => {\n  it('subscribe writes SSE headers + initial comment', () => {\n    const b = new SseBroadcaster();\n    const res = fakeRes();\n    b.subscribe('root_abc', res as never);\n    expect(res.writeHead).toHaveBeenCalledWith(\n      200,\n      expect.objectContaining({ 'content-type': 'text/event-stream' })\n    );\n    expect(res.written.some((s) => s.startsWith(':'))).toBe(true); // ping comment\n  });\n\n  it('broadcast sends `data: { revision, rootRevision }\\\\n\\\\n` to all subscribers of that root', () => {\n    const b = new SseBroadcaster();\n    const r1 = fakeRes();\n    const r2 = fakeRes();\n    const r3 = fakeRes();\n    b.subscribe('root_abc', r1 as never);\n    b.subscribe('root_abc', r2 as never);\n    b.subscribe('root_xyz', r3 as never);\n    b.broadcast({ revision: 'rev_1', rootRevision: 'root_abc' });\n    expect(r1.written.some((s) => s.includes('rev_1'))).toBe(true);\n    expect(r2.written.some((s) => s.includes('rev_1'))).toBe(true);\n    expect(r3.written.some((s) => s.includes('rev_1'))).toBe(false);\n  });\n\n  it('removes subscribers when their response closes', () => {\n    const b = new SseBroadcaster();\n    const res = fakeRes();\n    b.subscribe('root_abc', res as never);\n    expect(b.subscriberCount('root_abc')).toBe(1);\n    res.end(); // triggers \"close\" callback\n    expect(b.subscriberCount('root_abc')).toBe(0);\n  });\n});\n"]}

package/dist/test/test/viewer/resource-route.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=resource-route.test.d.ts.map

package/dist/test/test/viewer/resource-route.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource-route.test.d.ts","sourceRoot":"","sources":["../../../../test/viewer/resource-route.test.ts"],"names":[],"mappings":""}

package/dist/test/test/viewer/resource-route.test.js

@@ -1,70 +0,0 @@
-import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import express from 'express';
-import request from 'supertest';
-import { afterEach, describe, expect, it } from 'vitest';
-import { createResourceRoute } from '../../src/viewer/resource-route.js';
-import { InMemoryWorkspaceFS } from '../../src/workspace/in-memory.js';
-describe('resource route — object-store backend', () => {
-    function makeApp() {
-        const fs = new InMemoryWorkspaceFS();
-        const app = express();
-        app.use(createResourceRoute({ fs, workspaceRoot: '' }));
-        return { app, fs };
-    }
-    it('serves a file under assets/ with its content type', async () => {
-        const { app, fs } = makeApp();
-        await fs.writeFile('assets/9f2a1c.png', new Uint8Array([1, 2, 3, 4]));
-        const res = await request(app).get('/r/assets/9f2a1c.png');
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toBe('image/png');
-        expect(res.headers['content-length']).toBe('4');
-    });
-    it('serves a file under exports/', async () => {
-        const { app, fs } = makeApp();
-        await fs.writeFile('exports/ab/cdef012345/pdf.pdf', new Uint8Array([5, 6, 7]));
-        const res = await request(app).get('/r/exports/ab/cdef012345/pdf.pdf');
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toBe('application/pdf');
-    });
-    it('404s a missing file', async () => {
-        const { app } = makeApp();
-        const res = await request(app).get('/r/assets/missing.png');
-        expect(res.status).toBe(404);
-    });
-    it('404s a path outside the assets/ + exports/ allowlist', async () => {
-        const { app, fs } = makeApp();
-        await fs.writeFile('objects/ab/cd.scene', new Uint8Array([9]));
-        const res = await request(app).get('/r/objects/ab/cd.scene');
-        expect(res.status).toBe(404);
-    });
-    it('404s a traversal attempt', async () => {
-        const { app } = makeApp();
-        const res = await request(app).get('/r/assets/%2e%2e/%2e%2e/objects/secret.scene');
-        expect(res.status).toBe(404);
-    });
-});
-describe('resource route — disk backend (range support)', () => {
-    let dir = '';
-    afterEach(async () => {
-        if (dir)
-            await rm(dir, { recursive: true, force: true });
-    });
-    it('streams from disk and honours Range requests', async () => {
-        dir = await mkdtemp(join(tmpdir(), 'resource-route-'));
-        await mkdir(join(dir, 'assets'), { recursive: true });
-        await writeFile(join(dir, 'assets/v.bin'), Buffer.from([10, 11, 12, 13, 14, 15]));
-        const app = express();
-        app.use(createResourceRoute({ fs: new InMemoryWorkspaceFS(), workspaceRoot: dir }));
-        const full = await request(app).get('/r/assets/v.bin');
-        expect(full.status).toBe(200);
-        expect(full.headers['accept-ranges']).toBe('bytes');
-        const partial = await request(app)
-            .get('/r/assets/v.bin')
-            .set('Range', 'bytes=0-2');
-        expect(partial.status).toBe(206);
-        expect(partial.headers['content-length']).toBe('3');
-    });
-});
-//# sourceMappingURL=resource-route.test.js.map

package/dist/test/test/viewer/resource-route.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource-route.test.js","sourceRoot":"","sources":["../../../../test/viewer/resource-route.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,SAAS,OAAO;QACd,MAAM,EAAE,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACrB,CAAC;IAED,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,SAAS,CAChB,+BAA+B,EAC/B,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAC1B,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAChC,8CAA8C,CAC/C,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,GAAG;YAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,CACb,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CACtC,CAAC;QACF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CACL,mBAAmB,CAAC,EAAE,EAAE,EAAE,IAAI,mBAAmB,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAC3E,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;aAC/B,GAAG,CAAC,iBAAiB,CAAC;aACtB,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { join } from 'node:path';\nimport express from 'express';\nimport request from 'supertest';\nimport { afterEach, describe, expect, it } from 'vitest';\nimport { createResourceRoute } from '../../src/viewer/resource-route.js';\nimport { InMemoryWorkspaceFS } from '../../src/workspace/in-memory.js';\n\ndescribe('resource route — object-store backend', () => {\n  function makeApp() {\n    const fs = new InMemoryWorkspaceFS();\n    const app = express();\n    app.use(createResourceRoute({ fs, workspaceRoot: '' }));\n    return { app, fs };\n  }\n\n  it('serves a file under assets/ with its content type', async () => {\n    const { app, fs } = makeApp();\n    await fs.writeFile('assets/9f2a1c.png', new Uint8Array([1, 2, 3, 4]));\n    const res = await request(app).get('/r/assets/9f2a1c.png');\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toBe('image/png');\n    expect(res.headers['content-length']).toBe('4');\n  });\n\n  it('serves a file under exports/', async () => {\n    const { app, fs } = makeApp();\n    await fs.writeFile(\n      'exports/ab/cdef012345/pdf.pdf',\n      new Uint8Array([5, 6, 7])\n    );\n    const res = await request(app).get('/r/exports/ab/cdef012345/pdf.pdf');\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toBe('application/pdf');\n  });\n\n  it('404s a missing file', async () => {\n    const { app } = makeApp();\n    const res = await request(app).get('/r/assets/missing.png');\n    expect(res.status).toBe(404);\n  });\n\n  it('404s a path outside the assets/ + exports/ allowlist', async () => {\n    const { app, fs } = makeApp();\n    await fs.writeFile('objects/ab/cd.scene', new Uint8Array([9]));\n    const res = await request(app).get('/r/objects/ab/cd.scene');\n    expect(res.status).toBe(404);\n  });\n\n  it('404s a traversal attempt', async () => {\n    const { app } = makeApp();\n    const res = await request(app).get(\n      '/r/assets/%2e%2e/%2e%2e/objects/secret.scene'\n    );\n    expect(res.status).toBe(404);\n  });\n});\n\ndescribe('resource route — disk backend (range support)', () => {\n  let dir = '';\n  afterEach(async () => {\n    if (dir) await rm(dir, { recursive: true, force: true });\n  });\n\n  it('streams from disk and honours Range requests', async () => {\n    dir = await mkdtemp(join(tmpdir(), 'resource-route-'));\n    await mkdir(join(dir, 'assets'), { recursive: true });\n    await writeFile(\n      join(dir, 'assets/v.bin'),\n      Buffer.from([10, 11, 12, 13, 14, 15])\n    );\n    const app = express();\n    app.use(\n      createResourceRoute({ fs: new InMemoryWorkspaceFS(), workspaceRoot: dir })\n    );\n\n    const full = await request(app).get('/r/assets/v.bin');\n    expect(full.status).toBe(200);\n    expect(full.headers['accept-ranges']).toBe('bytes');\n\n    const partial = await request(app)\n      .get('/r/assets/v.bin')\n      .set('Range', 'bytes=0-2');\n    expect(partial.status).toBe(206);\n    expect(partial.headers['content-length']).toBe('3');\n  });\n});\n"]}

package/dist/test/test/viewer/router.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=router.test.d.ts.map

package/dist/test/test/viewer/router.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"router.test.d.ts","sourceRoot":"","sources":["../../../../test/viewer/router.test.ts"],"names":[],"mappings":""}

package/dist/test/test/viewer/router.test.js

@@ -1,227 +0,0 @@
-import express from 'express';
-import request from 'supertest';
-import { describe, expect, it } from 'vitest';
-import { RevisionStore } from '../../src/revisions/store.js';
-import { SseBroadcaster } from '../../src/viewer/broadcaster.js';
-import { createViewerRouter } from '../../src/viewer/router.js';
-import { InMemoryWorkspaceFS } from '../../src/workspace/in-memory.js';
-async function makeApp() {
-    const fs = new InMemoryWorkspaceFS();
-    const store = new RevisionStore(fs);
-    const broadcaster = new SseBroadcaster();
-    const app = express();
-    app.use(createViewerRouter({ store, broadcaster, fs }));
-    return { app, fs, store, broadcaster };
-}
-// The HTTP transport mounts the router under "/viewer"; the stdio listener
-// mounts it at root. The SPA must address its assets/API relative to the live
-// mount path, injected at serve time. This mounts under a prefix to lock that
-// in.
-async function makeMountedApp(mount) {
-    const fs = new InMemoryWorkspaceFS();
-    const store = new RevisionStore(fs);
-    const broadcaster = new SseBroadcaster();
-    const app = express();
-    app.use(mount, createViewerRouter({ store, broadcaster, fs }));
-    return { app, fs, store, broadcaster };
-}
-describe('viewer router', () => {
-    it('GET / serves the studio HTML shell', async () => {
-        const { app } = await makeApp();
-        const res = await request(app).get('/');
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toMatch(/html/);
-        expect(res.text).toContain('IMG.LY CODESIGN MCP Workspace');
-    });
-    it('GET /d/<root> serves the viewer HTML shell', async () => {
-        const { app, store } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'T' });
-        const res = await request(app).get(`/d/${r.id}`);
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toMatch(/html/);
-        expect(res.text).toContain('codesign viewer');
-    });
-    it('GET /d/<root>/<rev> serves the viewer HTML shell', async () => {
-        const { app, store } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'T' });
-        const res = await request(app).get(`/d/${r.id}/${r.id}`);
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toMatch(/html/);
-        expect(res.text).toContain('codesign viewer');
-    });
-    it('GET /s/<rev> is removed — returns 404', async () => {
-        const { app, store } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'T' });
-        const res = await request(app).get(`/s/${r.id}`);
-        expect(res.status).toBe(404);
-    });
-    it('GET /static/viewer.js serves the SPA JS', async () => {
-        const { app } = await makeApp();
-        const res = await request(app).get('/static/viewer.js');
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toMatch(/javascript/);
-        expect(res.text).toContain('CreativeEditorSDK');
-        expect(res.text).toContain('setURIResolver');
-    });
-    it('GET /static/revision-panel.js serves the panel module', async () => {
-        const { app } = await makeApp();
-        const res = await request(app).get('/static/revision-panel.js');
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toMatch(/javascript/);
-        expect(res.text).toContain('createRevisionPanel');
-    });
-    it('GET /snapshot/<rev> returns scene + meta + rootRevision', async () => {
-        const { app, store } = await makeApp();
-        const r = await store.write({
-            scene: 'SCENE_BYTES',
-            parent: null,
-            title: 'T'
-        });
-        const res = await request(app).get(`/snapshot/${r.id}`);
-        expect(res.status).toBe(200);
-        expect(res.body).toMatchObject({
-            scene: 'SCENE_BYTES',
-            rootRevision: r.id,
-            title: 'T'
-        });
-    });
-    it('GET /snapshot/<rev> reflects a renamed title (live, not creation-time)', async () => {
-        const { app, store } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'Before' });
-        await store.renameRoot(r.id, 'After');
-        const res = await request(app).get(`/snapshot/${r.id}`);
-        expect(res.status).toBe(200);
-        expect(res.body.title).toBe('After');
-    });
-    it('GET /snapshot/<rev>/thumbnail returns the per-revision webp if present', async () => {
-        const { app, store, fs } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'T' });
-        const shard = r.id.slice(0, 2);
-        const rest = r.id.slice(2);
-        const bytes = new Uint8Array([1, 2, 3, 4]);
-        await fs.writeFile(`exports/${shard}/${rest}/preview.webp`, bytes);
-        const res = await request(app).get(`/snapshot/${r.id}/thumbnail`);
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toBe('image/webp');
-    });
-    it('GET /api/designs returns the root list', async () => {
-        const { app, store } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'T1' });
-        const res = await request(app).get('/api/designs');
-        expect(res.status).toBe(200);
-        expect(res.body).toEqual(expect.arrayContaining([
-            expect.objectContaining({ rootRevision: r.id, title: 'T1' })
-        ]));
-    });
-    it("GET /api/design/<root> returns that design's record", async () => {
-        const { app, store } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'T1' });
-        const res = await request(app).get(`/api/design/${r.id}`);
-        expect(res.status).toBe(200);
-        expect(res.body).toMatchObject({
-            rootRevision: r.id,
-            title: 'T1',
-            latestLeaf: r.id
-        });
-    });
-    it('GET /api/design/<unknown> returns 404', async () => {
-        const { app } = await makeApp();
-        const res = await request(app).get('/api/design/deadbeefdead');
-        expect(res.status).toBe(404);
-        expect(res.body).toEqual({ error: 'unknown design' });
-    });
-    it("GET /api/design/<root>/revisions returns the design's revision tree", async () => {
-        const { app, store } = await makeApp();
-        const r1 = await store.write({ scene: 'a', parent: null, title: 'T' });
-        const r2 = await store.write({ scene: 'b', parent: r1.id, note: 'second' });
-        const fork = await store.write({
-            scene: 'b2',
-            parent: r1.id,
-            note: 'fork'
-        });
-        const res = await request(app).get(`/api/design/${r1.id}/revisions`);
-        expect(res.status).toBe(200);
-        expect(res.body.map((n) => n.id).sort()).toEqual([r1.id, r2.id, fork.id].sort());
-        expect(res.body).toEqual(expect.arrayContaining([
-            expect.objectContaining({ id: r2.id, parent: r1.id, note: 'second' })
-        ]));
-    });
-    it('GET /api/design/<unknown>/revisions returns 404', async () => {
-        const { app } = await makeApp();
-        const res = await request(app).get('/api/design/deadbeefdead/revisions');
-        expect(res.status).toBe(404);
-        expect(res.body).toEqual({ error: 'unknown design' });
-    });
-    it('a /api/design/<root>/revisions error is sanitised to a generic 500', async () => {
-        const { app, store, fs } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'T' });
-        await fs.writeFile(`objects/${r.id.slice(0, 2)}/${r.id.slice(2)}.json`, 'not json');
-        const res = await request(app).get(`/api/design/${r.id}/revisions`);
-        expect(res.status).toBe(500);
-        expect(res.text).toBe('internal error');
-    });
-    it('GET /snapshot/<unknown> returns 404', async () => {
-        const { app } = await makeApp();
-        const res = await request(app).get('/snapshot/deadbeefdead');
-        expect(res.status).toBe(404);
-    });
-    it('GET /api/config includes the /r/ resourceBase', async () => {
-        const { app } = await makeApp();
-        const res = await request(app).get('/api/config');
-        expect(res.status).toBe(200);
-        expect(res.body.resourceBase).toBe('/r/');
-    });
-    it('serves a root-relative SPA base when mounted at root', async () => {
-        const { app, store } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'T' });
-        const res = await request(app).get(`/d/${r.id}`);
-        expect(res.text).toContain("window.__VIEWER_BASE__ = '';");
-        expect(res.text).toContain('src="/static/viewer.js"');
-    });
-    it('injects the mount prefix into the SPA base when mounted at /viewer', async () => {
-        const { app, store } = await makeMountedApp('/viewer');
-        const r = await store.write({ scene: 'S', parent: null, title: 'T' });
-        const res = await request(app).get(`/viewer/d/${r.id}`);
-        expect(res.status).toBe(200);
-        expect(res.text).toContain("window.__VIEWER_BASE__ = '/viewer';");
-        expect(res.text).toContain('src="/viewer/static/viewer.js"');
-        // No leftover unprefixed asset path that would 404 under the mount.
-        expect(res.text).not.toContain('src="/static/viewer.js"');
-    });
-    it('studio shell carries the mount prefix too when mounted at /viewer', async () => {
-        const { app } = await makeMountedApp('/viewer');
-        const res = await request(app).get('/viewer/');
-        expect(res.status).toBe(200);
-        expect(res.text).toContain("window.__VIEWER_BASE__ = '/viewer';");
-        expect(res.text).toContain('src="/viewer/static/studio.js"');
-    });
-    it('resourceBase is mount-relative when mounted at /viewer', async () => {
-        const { app } = await makeMountedApp('/viewer');
-        const res = await request(app).get('/viewer/api/config');
-        expect(res.status).toBe(200);
-        expect(res.body.resourceBase).toBe('/viewer/r/');
-    });
-    it('serves the SPA JS under the mount prefix', async () => {
-        const { app } = await makeMountedApp('/viewer');
-        const res = await request(app).get('/viewer/static/viewer.js');
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toMatch(/javascript/);
-    });
-    it('GET /r/<asset> is reachable through the viewer router', async () => {
-        const { app, fs } = await makeApp();
-        await fs.writeFile('assets/abc.png', new Uint8Array([1, 2, 3]));
-        const res = await request(app).get('/r/assets/abc.png');
-        expect(res.status).toBe(200);
-    });
-    it('a route error is sanitised to a generic 500 (no leak)', async () => {
-        const { app, store, fs } = await makeApp();
-        const r = await store.write({ scene: 'S', parent: null, title: 'T' });
-        // Corrupt the revision meta so store.read throws a non-ENOENT parse error.
-        await fs.writeFile(`objects/${r.id.slice(0, 2)}/${r.id.slice(2)}.json`, 'not json');
-        const res = await request(app).get(`/snapshot/${r.id}`);
-        expect(res.status).toBe(500);
-        expect(res.text).toBe('internal error');
-        expect(res.text).not.toContain('not json');
-    });
-});
-//# sourceMappingURL=router.test.js.map

package/dist/test/test/viewer/router.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"router.test.js","sourceRoot":"","sources":["../../../../test/viewer/router.test.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE,KAAK,UAAU,OAAO;IACpB,MAAM,EAAE,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACzC,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM;AACN,KAAK,UAAU,cAAc,CAAC,KAAa;IACzC,MAAM,EAAE,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACzC,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;YAC1B,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;YAC7B,KAAK,EAAE,aAAa;YACpB,YAAY,EAAE,CAAC,CAAC,EAAE;YAClB,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,IAAI,IAAI,eAAe,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CACtB,MAAM,CAAC,eAAe,CAAC;YACrB,MAAM,CAAC,gBAAgB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAC7D,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;YAC7B,YAAY,EAAE,CAAC,CAAC,EAAE;YAClB,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,CAAC,CAAC,EAAE;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;YAC7B,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,EAAE,CAAC,EAAE;YACb,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAC9D,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAC/B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CACtB,MAAM,CAAC,eAAe,CAAC;YACrB,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;SACtE,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,MAAM,EAAE,CAAC,SAAS,CAChB,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EACnD,UAAU,CACX,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAC7D,oEAAoE;QACpE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QACpC,MAAM,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,2EAA2E;QAC3E,MAAM,EAAE,CAAC,SAAS,CAChB,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EACnD,UAAU,CACX,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import express from 'express';\nimport request from 'supertest';\nimport { describe, expect, it } from 'vitest';\nimport { RevisionStore } from '../../src/revisions/store.js';\nimport { SseBroadcaster } from '../../src/viewer/broadcaster.js';\nimport { createViewerRouter } from '../../src/viewer/router.js';\nimport { InMemoryWorkspaceFS } from '../../src/workspace/in-memory.js';\n\nasync function makeApp() {\n  const fs = new InMemoryWorkspaceFS();\n  const store = new RevisionStore(fs);\n  const broadcaster = new SseBroadcaster();\n  const app = express();\n  app.use(createViewerRouter({ store, broadcaster, fs }));\n  return { app, fs, store, broadcaster };\n}\n\n// The HTTP transport mounts the router under \"/viewer\"; the stdio listener\n// mounts it at root. The SPA must address its assets/API relative to the live\n// mount path, injected at serve time. This mounts under a prefix to lock that\n// in.\nasync function makeMountedApp(mount: string) {\n  const fs = new InMemoryWorkspaceFS();\n  const store = new RevisionStore(fs);\n  const broadcaster = new SseBroadcaster();\n  const app = express();\n  app.use(mount, createViewerRouter({ store, broadcaster, fs }));\n  return { app, fs, store, broadcaster };\n}\n\ndescribe('viewer router', () => {\n  it('GET / serves the studio HTML shell', async () => {\n    const { app } = await makeApp();\n    const res = await request(app).get('/');\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toMatch(/html/);\n    expect(res.text).toContain('IMG.LY CODESIGN MCP Workspace');\n  });\n\n  it('GET /d/<root> serves the viewer HTML shell', async () => {\n    const { app, store } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'T' });\n    const res = await request(app).get(`/d/${r.id}`);\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toMatch(/html/);\n    expect(res.text).toContain('codesign viewer');\n  });\n\n  it('GET /d/<root>/<rev> serves the viewer HTML shell', async () => {\n    const { app, store } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'T' });\n    const res = await request(app).get(`/d/${r.id}/${r.id}`);\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toMatch(/html/);\n    expect(res.text).toContain('codesign viewer');\n  });\n\n  it('GET /s/<rev> is removed — returns 404', async () => {\n    const { app, store } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'T' });\n    const res = await request(app).get(`/s/${r.id}`);\n    expect(res.status).toBe(404);\n  });\n\n  it('GET /static/viewer.js serves the SPA JS', async () => {\n    const { app } = await makeApp();\n    const res = await request(app).get('/static/viewer.js');\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toMatch(/javascript/);\n    expect(res.text).toContain('CreativeEditorSDK');\n    expect(res.text).toContain('setURIResolver');\n  });\n\n  it('GET /static/revision-panel.js serves the panel module', async () => {\n    const { app } = await makeApp();\n    const res = await request(app).get('/static/revision-panel.js');\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toMatch(/javascript/);\n    expect(res.text).toContain('createRevisionPanel');\n  });\n\n  it('GET /snapshot/<rev> returns scene + meta + rootRevision', async () => {\n    const { app, store } = await makeApp();\n    const r = await store.write({\n      scene: 'SCENE_BYTES',\n      parent: null,\n      title: 'T'\n    });\n    const res = await request(app).get(`/snapshot/${r.id}`);\n    expect(res.status).toBe(200);\n    expect(res.body).toMatchObject({\n      scene: 'SCENE_BYTES',\n      rootRevision: r.id,\n      title: 'T'\n    });\n  });\n\n  it('GET /snapshot/<rev> reflects a renamed title (live, not creation-time)', async () => {\n    const { app, store } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'Before' });\n    await store.renameRoot(r.id, 'After');\n    const res = await request(app).get(`/snapshot/${r.id}`);\n    expect(res.status).toBe(200);\n    expect(res.body.title).toBe('After');\n  });\n\n  it('GET /snapshot/<rev>/thumbnail returns the per-revision webp if present', async () => {\n    const { app, store, fs } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'T' });\n    const shard = r.id.slice(0, 2);\n    const rest = r.id.slice(2);\n    const bytes = new Uint8Array([1, 2, 3, 4]);\n    await fs.writeFile(`exports/${shard}/${rest}/preview.webp`, bytes);\n    const res = await request(app).get(`/snapshot/${r.id}/thumbnail`);\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toBe('image/webp');\n  });\n\n  it('GET /api/designs returns the root list', async () => {\n    const { app, store } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'T1' });\n    const res = await request(app).get('/api/designs');\n    expect(res.status).toBe(200);\n    expect(res.body).toEqual(\n      expect.arrayContaining([\n        expect.objectContaining({ rootRevision: r.id, title: 'T1' })\n      ])\n    );\n  });\n\n  it(\"GET /api/design/<root> returns that design's record\", async () => {\n    const { app, store } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'T1' });\n    const res = await request(app).get(`/api/design/${r.id}`);\n    expect(res.status).toBe(200);\n    expect(res.body).toMatchObject({\n      rootRevision: r.id,\n      title: 'T1',\n      latestLeaf: r.id\n    });\n  });\n\n  it('GET /api/design/<unknown> returns 404', async () => {\n    const { app } = await makeApp();\n    const res = await request(app).get('/api/design/deadbeefdead');\n    expect(res.status).toBe(404);\n    expect(res.body).toEqual({ error: 'unknown design' });\n  });\n\n  it(\"GET /api/design/<root>/revisions returns the design's revision tree\", async () => {\n    const { app, store } = await makeApp();\n    const r1 = await store.write({ scene: 'a', parent: null, title: 'T' });\n    const r2 = await store.write({ scene: 'b', parent: r1.id, note: 'second' });\n    const fork = await store.write({\n      scene: 'b2',\n      parent: r1.id,\n      note: 'fork'\n    });\n    const res = await request(app).get(`/api/design/${r1.id}/revisions`);\n    expect(res.status).toBe(200);\n    expect(res.body.map((n: { id: string }) => n.id).sort()).toEqual(\n      [r1.id, r2.id, fork.id].sort()\n    );\n    expect(res.body).toEqual(\n      expect.arrayContaining([\n        expect.objectContaining({ id: r2.id, parent: r1.id, note: 'second' })\n      ])\n    );\n  });\n\n  it('GET /api/design/<unknown>/revisions returns 404', async () => {\n    const { app } = await makeApp();\n    const res = await request(app).get('/api/design/deadbeefdead/revisions');\n    expect(res.status).toBe(404);\n    expect(res.body).toEqual({ error: 'unknown design' });\n  });\n\n  it('a /api/design/<root>/revisions error is sanitised to a generic 500', async () => {\n    const { app, store, fs } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'T' });\n    await fs.writeFile(\n      `objects/${r.id.slice(0, 2)}/${r.id.slice(2)}.json`,\n      'not json'\n    );\n    const res = await request(app).get(`/api/design/${r.id}/revisions`);\n    expect(res.status).toBe(500);\n    expect(res.text).toBe('internal error');\n  });\n\n  it('GET /snapshot/<unknown> returns 404', async () => {\n    const { app } = await makeApp();\n    const res = await request(app).get('/snapshot/deadbeefdead');\n    expect(res.status).toBe(404);\n  });\n\n  it('GET /api/config includes the /r/ resourceBase', async () => {\n    const { app } = await makeApp();\n    const res = await request(app).get('/api/config');\n    expect(res.status).toBe(200);\n    expect(res.body.resourceBase).toBe('/r/');\n  });\n\n  it('serves a root-relative SPA base when mounted at root', async () => {\n    const { app, store } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'T' });\n    const res = await request(app).get(`/d/${r.id}`);\n    expect(res.text).toContain(\"window.__VIEWER_BASE__ = '';\");\n    expect(res.text).toContain('src=\"/static/viewer.js\"');\n  });\n\n  it('injects the mount prefix into the SPA base when mounted at /viewer', async () => {\n    const { app, store } = await makeMountedApp('/viewer');\n    const r = await store.write({ scene: 'S', parent: null, title: 'T' });\n    const res = await request(app).get(`/viewer/d/${r.id}`);\n    expect(res.status).toBe(200);\n    expect(res.text).toContain(\"window.__VIEWER_BASE__ = '/viewer';\");\n    expect(res.text).toContain('src=\"/viewer/static/viewer.js\"');\n    // No leftover unprefixed asset path that would 404 under the mount.\n    expect(res.text).not.toContain('src=\"/static/viewer.js\"');\n  });\n\n  it('studio shell carries the mount prefix too when mounted at /viewer', async () => {\n    const { app } = await makeMountedApp('/viewer');\n    const res = await request(app).get('/viewer/');\n    expect(res.status).toBe(200);\n    expect(res.text).toContain(\"window.__VIEWER_BASE__ = '/viewer';\");\n    expect(res.text).toContain('src=\"/viewer/static/studio.js\"');\n  });\n\n  it('resourceBase is mount-relative when mounted at /viewer', async () => {\n    const { app } = await makeMountedApp('/viewer');\n    const res = await request(app).get('/viewer/api/config');\n    expect(res.status).toBe(200);\n    expect(res.body.resourceBase).toBe('/viewer/r/');\n  });\n\n  it('serves the SPA JS under the mount prefix', async () => {\n    const { app } = await makeMountedApp('/viewer');\n    const res = await request(app).get('/viewer/static/viewer.js');\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toMatch(/javascript/);\n  });\n\n  it('GET /r/<asset> is reachable through the viewer router', async () => {\n    const { app, fs } = await makeApp();\n    await fs.writeFile('assets/abc.png', new Uint8Array([1, 2, 3]));\n    const res = await request(app).get('/r/assets/abc.png');\n    expect(res.status).toBe(200);\n  });\n\n  it('a route error is sanitised to a generic 500 (no leak)', async () => {\n    const { app, store, fs } = await makeApp();\n    const r = await store.write({ scene: 'S', parent: null, title: 'T' });\n    // Corrupt the revision meta so store.read throws a non-ENOENT parse error.\n    await fs.writeFile(\n      `objects/${r.id.slice(0, 2)}/${r.id.slice(2)}.json`,\n      'not json'\n    );\n    const res = await request(app).get(`/snapshot/${r.id}`);\n    expect(res.status).toBe(500);\n    expect(res.text).toBe('internal error');\n    expect(res.text).not.toContain('not json');\n  });\n});\n"]}

package/dist/test/test/viewer/session-mount.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=session-mount.test.d.ts.map

package/dist/test/test/viewer/session-mount.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-mount.test.d.ts","sourceRoot":"","sources":["../../../../test/viewer/session-mount.test.ts"],"names":[],"mappings":""}

package/dist/test/test/viewer/session-mount.test.js

@@ -1,52 +0,0 @@
-import express from 'express';
-import request from 'supertest';
-import { describe, expect, it } from 'vitest';
-import { RevisionStore } from '../../src/revisions/store.js';
-import { SseBroadcaster } from '../../src/viewer/broadcaster.js';
-import { mountSessionViewer } from '../../src/viewer/session-mount.js';
-import { InMemoryWorkspaceFS } from '../../src/workspace/in-memory.js';
-import { ScopedWorkspaceFS } from '../../src/workspace/scoped.js';
-function makeApp() {
-    const rawFs = new InMemoryWorkspaceFS();
-    const app = express();
-    mountSessionViewer(app, {
-        rawFs,
-        broadcaster: new SseBroadcaster(),
-        cesdkLicense: 'lic-123'
-    });
-    return { app, rawFs };
-}
-describe('session viewer mount (/v/:sid)', () => {
-    it('serves the studio shell with the per-session base injected', async () => {
-        const { app } = makeApp();
-        const res = await request(app).get('/v/sid-1/');
-        expect(res.status).toBe(200);
-        expect(res.headers['content-type']).toMatch(/html/);
-        expect(res.text).toContain('/v/sid-1');
-    });
-    it('scopes data to the sid: a design in s/<sid> is visible only there', async () => {
-        const { app, rawFs } = makeApp();
-        const store = new RevisionStore(new ScopedWorkspaceFS(rawFs, 's/sid-1'));
-        const r = await store.write({ scene: 'S', parent: null, title: 'T' });
-        const mine = await request(app).get('/v/sid-1/api/designs');
-        expect(mine.status).toBe(200);
-        expect(mine.body.map((d) => d.rootRevision)).toContain(r.id);
-        const theirs = await request(app).get('/v/sid-2/api/designs');
-        expect(theirs.status).toBe(200);
-        expect(theirs.body).toEqual([]);
-    });
-    it('serves the license via /api/config', async () => {
-        const { app } = makeApp();
-        const res = await request(app).get('/v/sid-1/api/config');
-        expect(res.status).toBe(200);
-        expect(res.body.license).toBe('lic-123');
-        expect(res.body.resourceBase).toBe('/v/sid-1/r/');
-    });
-    it('rejects a traversal sid with 404', async () => {
-        const { app } = makeApp();
-        // %2E%2E decodes to ".." — sanitizeWorkspaceId must reject it.
-        const res = await request(app).get('/v/%2E%2E/api/designs');
-        expect(res.status).toBe(404);
-    });
-});
-//# sourceMappingURL=session-mount.test.js.map

package/dist/test/test/viewer/session-mount.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-mount.test.js","sourceRoot":"","sources":["../../../../test/viewer/session-mount.test.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,SAAS,OAAO;IACd,MAAM,KAAK,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,kBAAkB,CAAC,GAAG,EAAE;QACtB,KAAK;QACL,WAAW,EAAE,IAAI,cAAc,EAAE;QACjC,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CACJ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAA2B,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAC/D,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAElB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC1B,+DAA+D;QAC/D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import express from 'express';\nimport request from 'supertest';\nimport { describe, expect, it } from 'vitest';\nimport { RevisionStore } from '../../src/revisions/store.js';\nimport { SseBroadcaster } from '../../src/viewer/broadcaster.js';\nimport { mountSessionViewer } from '../../src/viewer/session-mount.js';\nimport { InMemoryWorkspaceFS } from '../../src/workspace/in-memory.js';\nimport { ScopedWorkspaceFS } from '../../src/workspace/scoped.js';\n\nfunction makeApp() {\n  const rawFs = new InMemoryWorkspaceFS();\n  const app = express();\n  mountSessionViewer(app, {\n    rawFs,\n    broadcaster: new SseBroadcaster(),\n    cesdkLicense: 'lic-123'\n  });\n  return { app, rawFs };\n}\n\ndescribe('session viewer mount (/v/:sid)', () => {\n  it('serves the studio shell with the per-session base injected', async () => {\n    const { app } = makeApp();\n    const res = await request(app).get('/v/sid-1/');\n    expect(res.status).toBe(200);\n    expect(res.headers['content-type']).toMatch(/html/);\n    expect(res.text).toContain('/v/sid-1');\n  });\n\n  it('scopes data to the sid: a design in s/<sid> is visible only there', async () => {\n    const { app, rawFs } = makeApp();\n    const store = new RevisionStore(new ScopedWorkspaceFS(rawFs, 's/sid-1'));\n    const r = await store.write({ scene: 'S', parent: null, title: 'T' });\n\n    const mine = await request(app).get('/v/sid-1/api/designs');\n    expect(mine.status).toBe(200);\n    expect(\n      mine.body.map((d: { rootRevision: string }) => d.rootRevision)\n    ).toContain(r.id);\n\n    const theirs = await request(app).get('/v/sid-2/api/designs');\n    expect(theirs.status).toBe(200);\n    expect(theirs.body).toEqual([]);\n  });\n\n  it('serves the license via /api/config', async () => {\n    const { app } = makeApp();\n    const res = await request(app).get('/v/sid-1/api/config');\n    expect(res.status).toBe(200);\n    expect(res.body.license).toBe('lic-123');\n    expect(res.body.resourceBase).toBe('/v/sid-1/r/');\n  });\n\n  it('rejects a traversal sid with 404', async () => {\n    const { app } = makeApp();\n    // %2E%2E decodes to \"..\" — sanitizeWorkspaceId must reject it.\n    const res = await request(app).get('/v/%2E%2E/api/designs');\n    expect(res.status).toBe(404);\n  });\n});\n"]}

package/dist/test/test/viewer/url-builder.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=url-builder.test.d.ts.map

package/dist/test/test/viewer/url-builder.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-builder.test.d.ts","sourceRoot":"","sources":["../../../../test/viewer/url-builder.test.ts"],"names":[],"mappings":""}