@imgly/codesign-mcp 0.1.6 → 0.1.8

package/dist/viewer/listener.js.map

@@ -1 +1 @@
-{"version":3,"file":"listener.js","sourceRoot":"","sources":["../../src/viewer/listener.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,sBAAsB;AAItB,OAAO,OAAyB,MAAM,SAAS,CAAC;AAehD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QACnC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO;QACL,GAAG;QACH,MAAM;QACN,IAAI;QACJ,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9B,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACjC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["//\n// Ephemeral localhost HTTP listener used by stdio mode. Mounts the viewer\n// router; selects an OS-assigned free port (port: 0); reports the base URL.\n// In http mode the same router mounts onto the transport's express app —\n// no listener needed.\n\nimport type { Server } from 'node:http';\nimport type { Router } from 'express';\nimport express, { type Express } from 'express';\n\nexport interface ViewerListener {\n  app: Express;\n  server: Server;\n  base: string;\n  close(): Promise<void>;\n}\n\nexport interface StartViewerListenerOptions {\n  router: Router;\n  host?: string;\n  port?: number;\n}\n\nexport async function startViewerListener(\n  opts: StartViewerListenerOptions\n): Promise<ViewerListener> {\n  const host = opts.host ?? '127.0.0.1';\n  const app = express();\n  app.use(opts.router);\n  const server = app.listen(opts.port ?? 0, host);\n  await new Promise<void>((resolve, reject) => {\n    server.once('listening', () => resolve());\n    server.once('error', (err) => reject(err));\n  });\n  const addr = server.address();\n  if (!addr || typeof addr === 'string')\n    throw new Error('viewer listener: failed to read bound address');\n  const base = `http://${host}:${addr.port}`;\n  return {\n    app,\n    server,\n    base,\n    close: () =>\n      new Promise<void>((resolve) => {\n        server.close(() => resolve());\n        server.closeAllConnections?.();\n      })\n  };\n}\n"]}
+{"version":3,"file":"listener.js","sourceRoot":"","sources":["../../src/viewer/listener.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,sBAAsB;AAItB,OAAO,OAAyB,MAAM,SAAS,CAAC;AAiBhD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE;QAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QACnC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO;QACL,GAAG;QACH,MAAM;QACN,IAAI;QACJ,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9B,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACjC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["//\n// Ephemeral localhost HTTP listener used by stdio mode. Mounts the viewer\n// router; selects an OS-assigned free port (port: 0); reports the base URL.\n// In http mode the same router mounts onto the transport's express app —\n// no listener needed.\n\nimport type { Server } from 'node:http';\nimport type { Router } from 'express';\nimport express, { type Express } from 'express';\n\nexport interface ViewerListener {\n  app: Express;\n  server: Server;\n  base: string;\n  close(): Promise<void>;\n}\n\nexport interface StartViewerListenerOptions {\n  router: Router;\n  /** Additional routers mounted after the main router (e.g. the diagnostics router). */\n  extraRouters?: Router[];\n  host?: string;\n  port?: number;\n}\n\nexport async function startViewerListener(\n  opts: StartViewerListenerOptions\n): Promise<ViewerListener> {\n  const host = opts.host ?? '127.0.0.1';\n  const app = express();\n  app.use(opts.router);\n  for (const extra of opts.extraRouters ?? []) app.use(extra);\n  const server = app.listen(opts.port ?? 0, host);\n  await new Promise<void>((resolve, reject) => {\n    server.once('listening', () => resolve());\n    server.once('error', (err) => reject(err));\n  });\n  const addr = server.address();\n  if (!addr || typeof addr === 'string')\n    throw new Error('viewer listener: failed to read bound address');\n  const base = `http://${host}:${addr.port}`;\n  return {\n    app,\n    server,\n    base,\n    close: () =>\n      new Promise<void>((resolve) => {\n        server.close(() => resolve());\n        server.closeAllConnections?.();\n      })\n  };\n}\n"]}

package/dist/viewer/presigned-r2-url-builder.d.ts

@@ -12,7 +12,7 @@ export interface PresignedR2UrlBuilderOptions extends LocalUrlBuilderOptions {
  * URL builder for S3/R2-backed hosted deployments.
  *
  * Inherits all sync viewer URL methods from LocalViewerUrlBuilder
- * (forDesign / forPinnedRevision / forStudio / forResource), so the
+ * (forDesign / forPinnedRevision / forResource), so the
  * synchronous CE.SDK `workspace://` URI resolver callback continues to work
  * unchanged. Only `forDownload` is overridden to return a presigned GET URL
  * so the MCP client can download artifacts directly from R2 rather than

package/dist/viewer/presigned-r2-url-builder.js

@@ -11,7 +11,7 @@ import { LocalViewerUrlBuilder } from './url-builder.js';
  * URL builder for S3/R2-backed hosted deployments.
  *
  * Inherits all sync viewer URL methods from LocalViewerUrlBuilder
- * (forDesign / forPinnedRevision / forStudio / forResource), so the
+ * (forDesign / forPinnedRevision / forResource), so the
  * synchronous CE.SDK `workspace://` URI resolver callback continues to work
  * unchanged. Only `forDownload` is overridden to return a presigned GET URL
  * so the MCP client can download artifacts directly from R2 rather than

package/dist/viewer/presigned-r2-url-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"presigned-r2-url-builder.js","sourceRoot":"","sources":["../../src/viewer/presigned-r2-url-builder.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,iFAAiF;AACjF,oEAAoE;AACpE,OAAO,EAAE,gBAAgB,EAAiB,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EACL,qBAAqB,EAEtB,MAAM,kBAAkB,CAAC;AAW1B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAsB,SAAQ,qBAAqB;IAM9D,YAAY,IAAkC;QAC5C,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IAC1C,CAAC;IAEQ,KAAK,CAAC,WAAW,CAAC,OAAe;QACxC,2EAA2E;QAC3E,8EAA8E;QAC9E,6EAA6E;QAC7E,2EAA2E;QAC3E,2EAA2E;QAC3E,mBAAmB;QACnB,MAAM,GAAG,GAAG,cAAc,IAAI,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;QACxD,OAAO,YAAY,CACjB,IAAI,CAAC,MAAM,EACX,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EACvD,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC9B,CAAC;IACJ,CAAC;CACF","sourcesContent":["// packages/codesign-mcp/src/viewer/presigned-r2-url-builder.ts\n//\n// Node-only. NOT exported from viewer/index.ts or the main package entrypoint\n// — keeps @aws-sdk/client-s3 and @aws-sdk/s3-request-presigner out of the\n// browser bundle (mirrors the pattern used by S3WorkspaceFS in workspace/s3.ts).\n// Imported directly by cli/http.ts for the S3/R2 hosted deployment.\nimport { GetObjectCommand, type S3Client } from '@aws-sdk/client-s3';\nimport { getSignedUrl } from '@aws-sdk/s3-request-presigner';\nimport {\n  LocalViewerUrlBuilder,\n  type LocalUrlBuilderOptions\n} from './url-builder.js';\n\nexport interface PresignedR2UrlBuilderOptions extends LocalUrlBuilderOptions {\n  client: S3Client;\n  bucket: string;\n  /** The session's workspace id — the R2 key is `workspaces/<workspaceId>/<relpath>`. */\n  workspaceId: string;\n  /** Presigned URL lifetime in seconds. Default 3600. */\n  expiresIn?: number;\n}\n\n/**\n * URL builder for S3/R2-backed hosted deployments.\n *\n * Inherits all sync viewer URL methods from LocalViewerUrlBuilder\n * (forDesign / forPinnedRevision / forStudio / forResource), so the\n * synchronous CE.SDK `workspace://` URI resolver callback continues to work\n * unchanged. Only `forDownload` is overridden to return a presigned GET URL\n * so the MCP client can download artifacts directly from R2 rather than\n * going through the `/r/` Express route (which is not mounted on the hosted\n * Cloudflare deployment).\n */\nexport class PresignedR2UrlBuilder extends LocalViewerUrlBuilder {\n  private readonly client: S3Client;\n  private readonly bucket: string;\n  private readonly workspaceId: string;\n  private readonly expiresIn: number;\n\n  constructor(opts: PresignedR2UrlBuilderOptions) {\n    super(opts);\n    this.client = opts.client;\n    this.bucket = opts.bucket;\n    this.workspaceId = opts.workspaceId;\n    this.expiresIn = opts.expiresIn ?? 3600;\n  }\n\n  override async forDownload(relpath: string): Promise<string> {\n    // workspaceId is used raw (no sanitize here) on purpose: it is the SAME id\n    // ScopedWorkspaceFS used to store the artifact, and ScopedWorkspaceFS already\n    // sanitised it (rejecting traversal) before any bytes were written. So a key\n    // we can presign always corresponds to a stored object, and sanitize is an\n    // identity on accepted ids — re-sanitising here would only risk drift from\n    // the storage key.\n    const key = `workspaces/${this.workspaceId}/${relpath}`;\n    return getSignedUrl(\n      this.client,\n      new GetObjectCommand({ Bucket: this.bucket, Key: key }),\n      { expiresIn: this.expiresIn }\n    );\n  }\n}\n"]}
+{"version":3,"file":"presigned-r2-url-builder.js","sourceRoot":"","sources":["../../src/viewer/presigned-r2-url-builder.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,iFAAiF;AACjF,oEAAoE;AACpE,OAAO,EAAE,gBAAgB,EAAiB,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EACL,qBAAqB,EAEtB,MAAM,kBAAkB,CAAC;AAW1B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAsB,SAAQ,qBAAqB;IAM9D,YAAY,IAAkC;QAC5C,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IAC1C,CAAC;IAEQ,KAAK,CAAC,WAAW,CAAC,OAAe;QACxC,2EAA2E;QAC3E,8EAA8E;QAC9E,6EAA6E;QAC7E,2EAA2E;QAC3E,2EAA2E;QAC3E,mBAAmB;QACnB,MAAM,GAAG,GAAG,cAAc,IAAI,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;QACxD,OAAO,YAAY,CACjB,IAAI,CAAC,MAAM,EACX,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EACvD,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC9B,CAAC;IACJ,CAAC;CACF","sourcesContent":["// packages/codesign-mcp/src/viewer/presigned-r2-url-builder.ts\n//\n// Node-only. NOT exported from viewer/index.ts or the main package entrypoint\n// — keeps @aws-sdk/client-s3 and @aws-sdk/s3-request-presigner out of the\n// browser bundle (mirrors the pattern used by S3WorkspaceFS in workspace/s3.ts).\n// Imported directly by cli/http.ts for the S3/R2 hosted deployment.\nimport { GetObjectCommand, type S3Client } from '@aws-sdk/client-s3';\nimport { getSignedUrl } from '@aws-sdk/s3-request-presigner';\nimport {\n  LocalViewerUrlBuilder,\n  type LocalUrlBuilderOptions\n} from './url-builder.js';\n\nexport interface PresignedR2UrlBuilderOptions extends LocalUrlBuilderOptions {\n  client: S3Client;\n  bucket: string;\n  /** The session's workspace id — the R2 key is `workspaces/<workspaceId>/<relpath>`. */\n  workspaceId: string;\n  /** Presigned URL lifetime in seconds. Default 3600. */\n  expiresIn?: number;\n}\n\n/**\n * URL builder for S3/R2-backed hosted deployments.\n *\n * Inherits all sync viewer URL methods from LocalViewerUrlBuilder\n * (forDesign / forPinnedRevision / forResource), so the\n * synchronous CE.SDK `workspace://` URI resolver callback continues to work\n * unchanged. Only `forDownload` is overridden to return a presigned GET URL\n * so the MCP client can download artifacts directly from R2 rather than\n * going through the `/r/` Express route (which is not mounted on the hosted\n * Cloudflare deployment).\n */\nexport class PresignedR2UrlBuilder extends LocalViewerUrlBuilder {\n  private readonly client: S3Client;\n  private readonly bucket: string;\n  private readonly workspaceId: string;\n  private readonly expiresIn: number;\n\n  constructor(opts: PresignedR2UrlBuilderOptions) {\n    super(opts);\n    this.client = opts.client;\n    this.bucket = opts.bucket;\n    this.workspaceId = opts.workspaceId;\n    this.expiresIn = opts.expiresIn ?? 3600;\n  }\n\n  override async forDownload(relpath: string): Promise<string> {\n    // workspaceId is used raw (no sanitize here) on purpose: it is the SAME id\n    // ScopedWorkspaceFS used to store the artifact, and ScopedWorkspaceFS already\n    // sanitised it (rejecting traversal) before any bytes were written. So a key\n    // we can presign always corresponds to a stored object, and sanitize is an\n    // identity on accepted ids — re-sanitising here would only risk drift from\n    // the storage key.\n    const key = `workspaces/${this.workspaceId}/${relpath}`;\n    return getSignedUrl(\n      this.client,\n      new GetObjectCommand({ Bucket: this.bucket, Key: key }),\n      { expiresIn: this.expiresIn }\n    );\n  }\n}\n"]}

package/dist/viewer/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/viewer/router.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,MAAM,EACP,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKvD,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,aAAa,CAAC;IACrB,EAAE,EAAE,WAAW,CAAC;IAChB,WAAW,EAAE,cAAc,CAAC;IAC5B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gHAAgH;IAChH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,MAAM,CAmJ1E"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/viewer/router.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,MAAM,EACP,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKvD,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,aAAa,CAAC;IACrB,EAAE,EAAE,WAAW,CAAC;IAChB,WAAW,EAAE,cAAc,CAAC;IAC5B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gHAAgH;IAChH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,MAAM,CAwI1E"}

package/dist/viewer/router.js

@@ -1,9 +1,10 @@
 //
-// Express router serving the read-only viewer + mini-studio + JSON snapshot
-// API + SSE channel. Stateless: every request reads through the supplied
+// Express router serving the editor SPA + JSON snapshot API + SSE
+// channel. Stateless: every request reads through the supplied
 // store/fs. Same router mounts on the stdio listener and on the HTTP
 // transport's express app (one impl, no fork).
 import { Router } from 'express';
+import { defaultAssetsBaseUrl } from '../engine/asset-sources.js';
 import { createResourceRoute } from './resource-route.js';
 import { SPA_ASSETS } from './spa-assets.generated.js';
 import { cesdkCdnUrl, installedCesdkVersion } from './cesdk-cdn.js';
@@ -25,16 +26,14 @@ export function createViewerRouter(opts) {
         res.json({
             license: opts.cesdkLicense ?? '',
             resourceBase: `${req.baseUrl}/r/`,
-            cesdkEngineUrl
+            cesdkEngineUrl,
+            defaultAssetsBaseUrl: defaultAssetsBaseUrl()
         });
     });
     router.use(createResourceRoute({ fs, workspaceRoot: opts.workspaceRoot ?? '' }));
-    router.get('/', (req, res) => {
-        res.type('html').send(renderHtml(SPA_ASSETS['studio.html'], req.baseUrl));
-    });
-    // `/d/<root>` (LIVE) and `/d/<root>/<rev>` (PINNED) both serve the viewer
-    // SPA; viewer.js reads the path depth to choose the mode. The old
-    // per-revision `/s/<rev>` route is gone — `open_editor` hands out `/d/`.
+    // `/d/<root>` (LIVE) and `/d/<root>/<rev>` (PINNED) both serve the editor
+    // SPA; editor.js reads the path depth to choose the mode. The old detached
+    // "Edit a copy" route (`/e/<rev>`) is gone — the surface is editable itself.
     const serveViewer = (req, res) => {
         res.type('html').send(renderHtml(SPA_ASSETS['index.html'], req.baseUrl));
     };
@@ -96,14 +95,6 @@ export function createViewerRouter(opts) {
     router.get('/sse/:root', (req, res) => {
         broadcaster.subscribe(req.params.root, res);
     });
-    router.get('/api/designs', async (_req, res, next) => {
-        try {
-            res.json(await store.listRoots());
-        }
-        catch (err) {
-            next(err);
-        }
-    });
     router.get('/api/design/:root', async (req, res, next) => {
         try {
             const roots = await store.listRoots();

package/dist/viewer/router.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/viewer/router.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,qEAAqE;AACrE,+CAA+C;AAC/C,OAAO,EAIL,MAAM,EACP,MAAM,SAAS,CAAC;AAIjB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAuBpE,MAAM,UAAU,kBAAkB,CAAC,IAA+B;IAChE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc,IAAI,WAAW,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAE9D,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,OAAe,EAAU,EAAE,CAC3D,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAE9C,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrC,yEAAyE;QACzE,sEAAsE;QACtE,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;YAChC,YAAY,EAAE,GAAG,GAAG,CAAC,OAAO,KAAK;YACjC,cAAc;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CACR,mBAAmB,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC,CACrE,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,kEAAkE;IAClE,yEAAyE;IACzE,MAAM,WAAW,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;QACxD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAEzC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7C,MAAM,KAAK,GACT,GAAG,KAAK,MAAM;YACZ,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,GAAG,KAAK,IAAI;gBACZ,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,YAAY,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,mEAAmE;IACnE,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,WAAW,KAAK,IAAI,IAAI,eAAe,CAAC;YACxD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACpD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC;gBACP,QAAQ,EAAE,QAAQ,CAAC,EAAE;gBACrB,YAAY;gBACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,KAAK,EAAE,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC;gBAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;gBACxB,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,kEAAkE;YAClE,4DAA4D;YAC5D,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACnD,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,CAAC,GAAG,CACR,CAAC,IAAa,EAAE,IAAa,EAAE,GAAa,EAAE,KAAmB,EAAE,EAAE;QACnE,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["//\n// Express router serving the read-only viewer + mini-studio + JSON snapshot\n// API + SSE channel. Stateless: every request reads through the supplied\n// store/fs. Same router mounts on the stdio listener and on the HTTP\n// transport's express app (one impl, no fork).\nimport {\n  type NextFunction,\n  type Request,\n  type Response,\n  Router\n} from 'express';\nimport type { RevisionStore } from '../revisions/store.js';\nimport type { WorkspaceFS } from '../workspace/types.js';\nimport type { SseBroadcaster } from './broadcaster.js';\nimport { createResourceRoute } from './resource-route.js';\nimport { SPA_ASSETS } from './spa-assets.generated.js';\nimport { cesdkCdnUrl, installedCesdkVersion } from './cesdk-cdn.js';\n\nexport interface CreateViewerRouterOptions {\n  store: RevisionStore;\n  fs: WorkspaceFS;\n  broadcaster: SseBroadcaster;\n  /**\n   * CE.SDK license served to the browser viewer via `/api/config`.\n   * Without it, the SPA can't initialise CreativeEditorSDK and shows a\n   * license error. The viewer requires a browser-shape license (which may\n   * be a separate SKU from the @cesdk/node license used by the agent).\n   */\n  cesdkLicense?: string;\n  /** Absolute workspace root, forwarded to the `/r/` route for disk streaming. Empty on object-store backends. */\n  workspaceRoot?: string;\n  /**\n   * Full cdn.img.ly URL the browser viewer imports the CE.SDK engine from.\n   * Defaults to the installed engine version so the preview can never drift\n   * from the node runtime. Overridable for tests.\n   */\n  cesdkEngineUrl?: string;\n}\n\nexport function createViewerRouter(opts: CreateViewerRouterOptions): Router {\n  const { store, fs, broadcaster } = opts;\n  const router = Router();\n  const cesdkEngineUrl =\n    opts.cesdkEngineUrl ?? cesdkCdnUrl(installedCesdkVersion());\n\n  // The SPA is mounted at root on the stdio listener (req.baseUrl === \"\") and\n  // under \"/viewer\" on the HTTP transport (req.baseUrl === \"/viewer\"). Its\n  // HTML/JS address assets and API routes by path, so we inject the live mount\n  // prefix at serve time: the `{{VIEWER_BASE}}` token in the HTML becomes\n  // req.baseUrl, and the inline `window.__VIEWER_BASE__` global it sets lets\n  // the SPA's JS build matching URLs at runtime. Without this the absolute\n  // paths resolve against the origin root and 404 under \"/viewer\".\n  const renderHtml = (html: string, baseUrl: string): string =>\n    html.replaceAll('{{VIEWER_BASE}}', baseUrl);\n\n  router.get('/api/config', (req, res) => {\n    // `resourceBase` is where the browser viewer resolves workspace:// asset\n    // URIs. `req.baseUrl` is \"\" on the stdio listener, \"/viewer\" on HTTP.\n    res.json({\n      license: opts.cesdkLicense ?? '',\n      resourceBase: `${req.baseUrl}/r/`,\n      cesdkEngineUrl\n    });\n  });\n\n  router.use(\n    createResourceRoute({ fs, workspaceRoot: opts.workspaceRoot ?? '' })\n  );\n\n  router.get('/', (req, res) => {\n    res.type('html').send(renderHtml(SPA_ASSETS['studio.html'], req.baseUrl));\n  });\n\n  // `/d/<root>` (LIVE) and `/d/<root>/<rev>` (PINNED) both serve the viewer\n  // SPA; viewer.js reads the path depth to choose the mode. The old\n  // per-revision `/s/<rev>` route is gone — `open_editor` hands out `/d/`.\n  const serveViewer = (req: Request, res: Response): void => {\n    res.type('html').send(renderHtml(SPA_ASSETS['index.html'], req.baseUrl));\n  };\n  router.get('/d/:root', serveViewer);\n  router.get('/d/:root/:rev', serveViewer);\n\n  router.get('/static/:name', (req, res, next) => {\n    const body = SPA_ASSETS[req.params.name];\n    if (!body) return next();\n    const ext = req.params.name.split('.').pop();\n    const ctype =\n      ext === 'html'\n        ? 'text/html'\n        : ext === 'js'\n          ? 'application/javascript'\n          : 'text/plain';\n    res.type(ctype).send(body);\n  });\n\n  // NOTE: thumbnail MUST be registered before /snapshot/:rev so Express\n  // matches it first (route registration order is resolution order).\n  router.get('/snapshot/:rev/thumbnail', async (req, res, next) => {\n    try {\n      const rev = req.params.rev;\n      const shard = rev.slice(0, 2);\n      const rest = rev.slice(2);\n      const relPath = `exports/${shard}/${rest}/preview.webp`;\n      if (!(await fs.exists(relPath))) return next();\n      const bytes = await fs.readFile(relPath);\n      res.type('image/webp').send(Buffer.from(bytes));\n    } catch (err) {\n      next(err);\n    }\n  });\n\n  router.get('/snapshot/:rev', async (req, res, next) => {\n    try {\n      const revision = await store.read(req.params.rev);\n      const chain = await store.historyOf(req.params.rev);\n      const rootRevision = chain[0].id;\n      res.json({\n        revision: revision.id,\n        rootRevision,\n        scene: revision.scene,\n        title: await store.currentTitle(rootRevision),\n        note: revision.meta.note,\n        createdAt: revision.meta.createdAt\n      });\n    } catch (err) {\n      if ((err as { code?: string }).code === 'ENOENT') {\n        res.status(404).json({ error: 'unknown revision' });\n        return;\n      }\n      // Non-ENOENT errors carry fs paths in their message — hand to the\n      // sanitising error handler rather than echoing err.message.\n      next(err);\n    }\n  });\n\n  router.get('/sse/:root', (req, res) => {\n    broadcaster.subscribe(req.params.root, res);\n  });\n\n  router.get('/api/designs', async (_req, res, next) => {\n    try {\n      res.json(await store.listRoots());\n    } catch (err) {\n      next(err);\n    }\n  });\n\n  router.get('/api/design/:root', async (req, res, next) => {\n    try {\n      const roots = await store.listRoots();\n      const design = roots.find((d) => d.rootRevision === req.params.root);\n      if (!design) {\n        res.status(404).json({ error: 'unknown design' });\n        return;\n      }\n      res.json(design);\n    } catch (err) {\n      next(err);\n    }\n  });\n\n  router.get('/api/design/:root/revisions', async (req, res, next) => {\n    try {\n      const tree = await store.treeOf(req.params.root);\n      if (tree.length === 0) {\n        res.status(404).json({ error: 'unknown design' });\n        return;\n      }\n      res.json(tree);\n    } catch (err) {\n      next(err);\n    }\n  });\n\n  // Sanitising error handler — fs errors embed the absolute workspace path in\n  // their message; convert every error to a generic response so the path\n  // never reaches a client. MUST be last, and MUST take all four args for\n  // Express to recognise it as an error handler.\n  router.use(\n    (_err: unknown, _req: Request, res: Response, _next: NextFunction) => {\n      if (res.headersSent) return;\n      res.status(500).type('text').send('internal error');\n    }\n  );\n\n  return router;\n}\n"]}
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/viewer/router.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,kEAAkE;AAClE,+DAA+D;AAC/D,qEAAqE;AACrE,+CAA+C;AAC/C,OAAO,EAIL,MAAM,EACP,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAuBpE,MAAM,UAAU,kBAAkB,CAAC,IAA+B;IAChE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc,IAAI,WAAW,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAE9D,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,OAAe,EAAU,EAAE,CAC3D,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAE9C,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrC,yEAAyE;QACzE,sEAAsE;QACtE,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;YAChC,YAAY,EAAE,GAAG,GAAG,CAAC,OAAO,KAAK;YACjC,cAAc;YACd,oBAAoB,EAAE,oBAAoB,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CACR,mBAAmB,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC,CACrE,CAAC;IAEF,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,WAAW,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;QACxD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAEzC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7C,MAAM,KAAK,GACT,GAAG,KAAK,MAAM;YACZ,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,GAAG,KAAK,IAAI;gBACZ,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,YAAY,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,mEAAmE;IACnE,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,WAAW,KAAK,IAAI,IAAI,eAAe,CAAC;YACxD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACpD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC;gBACP,QAAQ,EAAE,QAAQ,CAAC,EAAE;gBACrB,YAAY;gBACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,KAAK,EAAE,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC;gBAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;gBACxB,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,kEAAkE;YAClE,4DAA4D;YAC5D,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,CAAC,GAAG,CACR,CAAC,IAAa,EAAE,IAAa,EAAE,GAAa,EAAE,KAAmB,EAAE,EAAE;QACnE,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["//\n// Express router serving the editor SPA + JSON snapshot API + SSE\n// channel. Stateless: every request reads through the supplied\n// store/fs. Same router mounts on the stdio listener and on the HTTP\n// transport's express app (one impl, no fork).\nimport {\n  type NextFunction,\n  type Request,\n  type Response,\n  Router\n} from 'express';\nimport type { RevisionStore } from '../revisions/store.js';\nimport type { WorkspaceFS } from '../workspace/types.js';\nimport { defaultAssetsBaseUrl } from '../engine/asset-sources.js';\nimport type { SseBroadcaster } from './broadcaster.js';\nimport { createResourceRoute } from './resource-route.js';\nimport { SPA_ASSETS } from './spa-assets.generated.js';\nimport { cesdkCdnUrl, installedCesdkVersion } from './cesdk-cdn.js';\n\nexport interface CreateViewerRouterOptions {\n  store: RevisionStore;\n  fs: WorkspaceFS;\n  broadcaster: SseBroadcaster;\n  /**\n   * CE.SDK license served to the browser viewer via `/api/config`.\n   * Without it, the SPA can't initialise CreativeEditorSDK and shows a\n   * license error. The viewer requires a browser-shape license (which may\n   * be a separate SKU from the @cesdk/node license used by the agent).\n   */\n  cesdkLicense?: string;\n  /** Absolute workspace root, forwarded to the `/r/` route for disk streaming. Empty on object-store backends. */\n  workspaceRoot?: string;\n  /**\n   * Full cdn.img.ly URL the browser viewer imports the CE.SDK engine from.\n   * Defaults to the installed engine version so the preview can never drift\n   * from the node runtime. Overridable for tests.\n   */\n  cesdkEngineUrl?: string;\n}\n\nexport function createViewerRouter(opts: CreateViewerRouterOptions): Router {\n  const { store, fs, broadcaster } = opts;\n  const router = Router();\n  const cesdkEngineUrl =\n    opts.cesdkEngineUrl ?? cesdkCdnUrl(installedCesdkVersion());\n\n  // The SPA is mounted at root on the stdio listener (req.baseUrl === \"\") and\n  // under \"/viewer\" on the HTTP transport (req.baseUrl === \"/viewer\"). Its\n  // HTML/JS address assets and API routes by path, so we inject the live mount\n  // prefix at serve time: the `{{VIEWER_BASE}}` token in the HTML becomes\n  // req.baseUrl, and the inline `window.__VIEWER_BASE__` global it sets lets\n  // the SPA's JS build matching URLs at runtime. Without this the absolute\n  // paths resolve against the origin root and 404 under \"/viewer\".\n  const renderHtml = (html: string, baseUrl: string): string =>\n    html.replaceAll('{{VIEWER_BASE}}', baseUrl);\n\n  router.get('/api/config', (req, res) => {\n    // `resourceBase` is where the browser viewer resolves workspace:// asset\n    // URIs. `req.baseUrl` is \"\" on the stdio listener, \"/viewer\" on HTTP.\n    res.json({\n      license: opts.cesdkLicense ?? '',\n      resourceBase: `${req.baseUrl}/r/`,\n      cesdkEngineUrl,\n      defaultAssetsBaseUrl: defaultAssetsBaseUrl()\n    });\n  });\n\n  router.use(\n    createResourceRoute({ fs, workspaceRoot: opts.workspaceRoot ?? '' })\n  );\n\n  // `/d/<root>` (LIVE) and `/d/<root>/<rev>` (PINNED) both serve the editor\n  // SPA; editor.js reads the path depth to choose the mode. The old detached\n  // \"Edit a copy\" route (`/e/<rev>`) is gone — the surface is editable itself.\n  const serveViewer = (req: Request, res: Response): void => {\n    res.type('html').send(renderHtml(SPA_ASSETS['index.html'], req.baseUrl));\n  };\n  router.get('/d/:root', serveViewer);\n  router.get('/d/:root/:rev', serveViewer);\n\n  router.get('/static/:name', (req, res, next) => {\n    const body = SPA_ASSETS[req.params.name];\n    if (!body) return next();\n    const ext = req.params.name.split('.').pop();\n    const ctype =\n      ext === 'html'\n        ? 'text/html'\n        : ext === 'js'\n          ? 'application/javascript'\n          : 'text/plain';\n    res.type(ctype).send(body);\n  });\n\n  // NOTE: thumbnail MUST be registered before /snapshot/:rev so Express\n  // matches it first (route registration order is resolution order).\n  router.get('/snapshot/:rev/thumbnail', async (req, res, next) => {\n    try {\n      const rev = req.params.rev;\n      const shard = rev.slice(0, 2);\n      const rest = rev.slice(2);\n      const relPath = `exports/${shard}/${rest}/preview.webp`;\n      if (!(await fs.exists(relPath))) return next();\n      const bytes = await fs.readFile(relPath);\n      res.type('image/webp').send(Buffer.from(bytes));\n    } catch (err) {\n      next(err);\n    }\n  });\n\n  router.get('/snapshot/:rev', async (req, res, next) => {\n    try {\n      const revision = await store.read(req.params.rev);\n      const chain = await store.historyOf(req.params.rev);\n      const rootRevision = chain[0].id;\n      res.json({\n        revision: revision.id,\n        rootRevision,\n        scene: revision.scene,\n        title: await store.currentTitle(rootRevision),\n        note: revision.meta.note,\n        createdAt: revision.meta.createdAt\n      });\n    } catch (err) {\n      if ((err as { code?: string }).code === 'ENOENT') {\n        res.status(404).json({ error: 'unknown revision' });\n        return;\n      }\n      // Non-ENOENT errors carry fs paths in their message — hand to the\n      // sanitising error handler rather than echoing err.message.\n      next(err);\n    }\n  });\n\n  router.get('/sse/:root', (req, res) => {\n    broadcaster.subscribe(req.params.root, res);\n  });\n\n  router.get('/api/design/:root', async (req, res, next) => {\n    try {\n      const roots = await store.listRoots();\n      const design = roots.find((d) => d.rootRevision === req.params.root);\n      if (!design) {\n        res.status(404).json({ error: 'unknown design' });\n        return;\n      }\n      res.json(design);\n    } catch (err) {\n      next(err);\n    }\n  });\n\n  router.get('/api/design/:root/revisions', async (req, res, next) => {\n    try {\n      const tree = await store.treeOf(req.params.root);\n      if (tree.length === 0) {\n        res.status(404).json({ error: 'unknown design' });\n        return;\n      }\n      res.json(tree);\n    } catch (err) {\n      next(err);\n    }\n  });\n\n  // Sanitising error handler — fs errors embed the absolute workspace path in\n  // their message; convert every error to a generic response so the path\n  // never reaches a client. MUST be last, and MUST take all four args for\n  // Express to recognise it as an error handler.\n  router.use(\n    (_err: unknown, _req: Request, res: Response, _next: NextFunction) => {\n      if (res.headersSent) return;\n      res.status(500).type('text').send('internal error');\n    }\n  );\n\n  return router;\n}\n"]}

package/dist/viewer/session-mount.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-mount.js","sourceRoot":"","sources":["../../src/viewer/session-mount.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQjD,MAAM,UAAU,kBAAkB,CAChC,GAAY,EACZ,IAA+B;IAE/B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACrE,IAAI,QAA2B,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC;YAChC,KAAK,EAAE,IAAI,aAAa,CAAC,QAAQ,CAAC;YAClC,EAAE,EAAE,QAAQ;YACZ,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// packages/codesign-mcp/src/viewer/session-mount.ts\n//\n// Multi-tenant viewer mount for `session` workspace mode: GET /v/<sid>/...\n// serves the same read-only viewer router, scoped to that session's workspace\n// `s/<sid>` — the SAME derivation makeWorkspaceResolver applies on /mcp, so a\n// session always finds its own designs. The sid in the URL is a bearer\n// capability mirroring the /mcp trust posture (unguessable session id); real\n// authentication is a follow-up. The router is built per request: construction\n// is cheap and stateless, and caching by sid would be an unbounded,\n// attacker-fillable map on a public endpoint.\nimport type { Express, NextFunction, Request, Response } from 'express';\nimport { RevisionStore } from '../revisions/store.js';\nimport { ScopedWorkspaceFS } from '../workspace/scoped.js';\nimport type { WorkspaceFS } from '../workspace/types.js';\nimport type { SseBroadcaster } from './broadcaster.js';\nimport { createViewerRouter } from './router.js';\n\nexport interface MountSessionViewerOptions {\n  rawFs: WorkspaceFS;\n  broadcaster: SseBroadcaster;\n  cesdkLicense: string | undefined;\n}\n\nexport function mountSessionViewer(\n  app: Express,\n  opts: MountSessionViewerOptions\n): void {\n  app.use('/v/:sid', (req: Request, res: Response, next: NextFunction) => {\n    let scopedFs: ScopedWorkspaceFS;\n    try {\n      scopedFs = new ScopedWorkspaceFS(opts.rawFs, `s/${req.params.sid}`);\n    } catch {\n      // sanitizeWorkspaceId rejected the sid (traversal / control chars).\n      res.status(404).type('text').send('not found');\n      return;\n    }\n    const router = createViewerRouter({\n      store: new RevisionStore(scopedFs),\n      fs: scopedFs,\n      broadcaster: opts.broadcaster,\n      ...(opts.cesdkLicense ? { cesdkLicense: opts.cesdkLicense } : {})\n    });\n    router(req, res, next);\n  });\n}\n"]}
+{"version":3,"file":"session-mount.js","sourceRoot":"","sources":["../../src/viewer/session-mount.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQjD,MAAM,UAAU,kBAAkB,CAChC,GAAY,EACZ,IAA+B;IAE/B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACrE,IAAI,QAA2B,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC;YAChC,KAAK,EAAE,IAAI,aAAa,CAAC,QAAQ,CAAC;YAClC,EAAE,EAAE,QAAQ;YACZ,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// packages/codesign-mcp/src/viewer/session-mount.ts\n//\n// Multi-tenant viewer mount for `session` workspace mode: GET /v/<sid>/...\n// serves the same editor router, scoped to that session's workspace\n// `s/<sid>` — the SAME derivation makeWorkspaceResolver applies on /mcp, so a\n// session always finds its own designs. The sid in the URL is a bearer\n// capability mirroring the /mcp trust posture (unguessable session id); real\n// authentication is a follow-up. The router is built per request: construction\n// is cheap and stateless, and caching by sid would be an unbounded,\n// attacker-fillable map on a public endpoint.\nimport type { Express, NextFunction, Request, Response } from 'express';\nimport { RevisionStore } from '../revisions/store.js';\nimport { ScopedWorkspaceFS } from '../workspace/scoped.js';\nimport type { WorkspaceFS } from '../workspace/types.js';\nimport type { SseBroadcaster } from './broadcaster.js';\nimport { createViewerRouter } from './router.js';\n\nexport interface MountSessionViewerOptions {\n  rawFs: WorkspaceFS;\n  broadcaster: SseBroadcaster;\n  cesdkLicense: string | undefined;\n}\n\nexport function mountSessionViewer(\n  app: Express,\n  opts: MountSessionViewerOptions\n): void {\n  app.use('/v/:sid', (req: Request, res: Response, next: NextFunction) => {\n    let scopedFs: ScopedWorkspaceFS;\n    try {\n      scopedFs = new ScopedWorkspaceFS(opts.rawFs, `s/${req.params.sid}`);\n    } catch {\n      // sanitizeWorkspaceId rejected the sid (traversal / control chars).\n      res.status(404).type('text').send('not found');\n      return;\n    }\n    const router = createViewerRouter({\n      store: new RevisionStore(scopedFs),\n      fs: scopedFs,\n      broadcaster: opts.broadcaster,\n      ...(opts.cesdkLicense ? { cesdkLicense: opts.cesdkLicense } : {})\n    });\n    router(req, res, next);\n  });\n}\n"]}

package/dist/viewer/spa-assets.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spa-assets.generated.d.ts","sourceRoot":"","sources":["../../src/viewer/spa-assets.generated.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAy9B7C,CAAC"}
+{"version":3,"file":"spa-assets.generated.d.ts","sourceRoot":"","sources":["../../src/viewer/spa-assets.generated.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAk2B7C,CAAC"}