@mindexec/cli 0.2.341 → 0.2.342

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindexec/cli",
-  "version": "0.2.341",
+  "version": "0.2.342",
   "description": "MindExec local runtime and bridge CLI",
   "main": "server.js",
   "type": "module",

package/server.js

@@ -1588,8 +1588,15 @@ const CONTENT_TYPE_BY_EXTENSION = new Map([
     ['.mov', 'video/quicktime'],
     ['.m4v', 'video/mp4'],
     ['.pdf', 'application/pdf'],
-    ['.txt', 'text/plain; charset=utf-8'],
-    ['.json', 'application/json; charset=utf-8']
+    ['.js', 'text/javascript; charset=utf-8'],
+    ['.mjs', 'text/javascript; charset=utf-8'],
+    ['.css', 'text/css; charset=utf-8'],
+    ['.html', 'text/html; charset=utf-8'],
+    ['.txt', 'text/plain; charset=utf-8'],
+    ['.json', 'application/json; charset=utf-8'],
+    ['.map', 'application/json; charset=utf-8'],
+    ['.webmanifest', 'application/manifest+json; charset=utf-8'],
+    ['.wasm', 'application/wasm']
 ]);
 
 function detectContentTypeFromHeader(header) {
@@ -2000,6 +2007,47 @@ app.get('/api/assets/resolve', async (req, res) => {
     });
 });
 
+async function trySendPackagedWebAppAsset(req, res, mountPath) {
+    if (!WEB_APP_ROOT || !['GET', 'HEAD'].includes(String(req.method || '').toUpperCase())) {
+        return false;
+    }
+
+    let requestPath = getMountedAssetRequestPath(req, mountPath);
+    try {
+        requestPath = decodeURIComponent(requestPath);
+    } catch {
+        return false;
+    }
+
+    if (!requestPath || requestPath.includes('\0')) {
+        return false;
+    }
+
+    const packagedAssetsRoot = path.resolve(WEB_APP_ROOT, String(mountPath || '').replace(/^\/+/, ''));
+    const packagedAssetPath = path.resolve(packagedAssetsRoot, requestPath);
+    if (!isPathWithin(packagedAssetsRoot, packagedAssetPath)) {
+        return false;
+    }
+
+    let stats = null;
+    try {
+        stats = await fs.stat(packagedAssetPath);
+    } catch {
+        return false;
+    }
+
+    if (!stats.isFile()) {
+        return false;
+    }
+
+    await sendResolvedAssetFile(req, res, packagedAssetPath, {
+        notFoundMessage: 'Web app asset not found',
+        errorScope: 'web',
+        cacheControl: 'public, max-age=31536000, immutable'
+    });
+    return true;
+}
+
 // Static file serving for assets (direct image loading - bypasses base64 encoding)
 // This allows browsers to directly fetch images via http://127.0.0.1:5147/assets/filename.png
 app.use('/assets', async (req, res, next) => {
@@ -2034,11 +2082,15 @@ app.use('/assets', async (req, res, next) => {
             normalizedRequestPath,
             ['.png', '.jpg', '.jpeg', '.webp', '.gif', '.bmp', '.svg', '.mp4', '.webm', '.mov']
         );
-    }
-
-    if (!resolvedPath) {
-        return res.status(404).json({ error: 'Asset not found' });
-    }
+    }
+
+    if (!resolvedPath) {
+        if (await trySendPackagedWebAppAsset(req, res, '/assets')) {
+            return;
+        }
+
+        return res.status(404).json({ error: 'Asset not found' });
+    }
 
     return sendResolvedAssetFile(req, res, resolvedPath, {
         notFoundMessage: 'Asset not found',