@yugoo-design/dsh-design-studio-dsh 0.1.2 → 0.2.2

package/lib/page-path-BkPiqrUH.d.ts

@@ -0,0 +1,25 @@
+import { a as StudioPreparedLocator } from "./authoring-host.types-BZt9l0xK.js";
+//#region src/page-path.d.ts
+/** Base path owned by the Studio page route. */
+declare const STUDIO_PAGE_BASE = "/design-studio/";
+/** Slash-less route that redirects to the base path. */
+declare const STUDIO_PAGE_PATH = "/design-studio";
+/** Bundle file name served below the base path. */
+declare const STUDIO_PAGE_BUNDLE = "page-client.js";
+interface StudioAuthoringLocation {
+  readonly presentation: 'content-only' | 'full';
+  readonly initialInstance?: Pick<StudioPreparedLocator, 'id' | 'expectedRevision' | 'bundle'>;
+  readonly preparedLocator?: StudioPreparedLocator;
+}
+/** A locator for one parent-owned S2 receipt, never a save or identity capability. */
+declare function studioPreparedUrl(agentId: string, locator: StudioPreparedLocator): string;
+/** Parse exact navigation intent; the live Host revalidates its parent and candidate. */
+declare function studioAuthoringLocation(href?: string | undefined): StudioAuthoringLocation;
+/** Read only an explicit Session locator; the client codec and Host lookup validate it. */
+declare function studioAuthoringSessionLocator(href?: string | undefined): string | undefined;
+/** Recognize only the official Desktop application authority, not a redirect hint. */
+declare function isDshDesktopLocation(href?: string | undefined): boolean;
+/** Desktop returns through the known application root; no caller-controlled redirect. */
+declare function studioConversationReturnPath(href?: string | undefined): '/' | undefined;
+//#endregion
+export { isDshDesktopLocation as a, studioConversationReturnPath as c, StudioAuthoringLocation as i, studioPreparedUrl as l, STUDIO_PAGE_BUNDLE as n, studioAuthoringLocation as o, STUDIO_PAGE_PATH as r, studioAuthoringSessionLocator as s, STUDIO_PAGE_BASE as t };

package/lib/page-path.d.ts

@@ -1,2 +1,2 @@
-import { a as studioConversationReturnPath, i as isDshDesktopLocation, n as STUDIO_PAGE_BUNDLE, r as STUDIO_PAGE_PATH, t as STUDIO_PAGE_BASE } from "./page-path-wn8e_fid.js";
-export { STUDIO_PAGE_BASE, STUDIO_PAGE_BUNDLE, STUDIO_PAGE_PATH, isDshDesktopLocation, studioConversationReturnPath };
+import { a as isDshDesktopLocation, c as studioConversationReturnPath, i as StudioAuthoringLocation, l as studioPreparedUrl, n as STUDIO_PAGE_BUNDLE, o as studioAuthoringLocation, r as STUDIO_PAGE_PATH, s as studioAuthoringSessionLocator, t as STUDIO_PAGE_BASE } from "./page-path-BkPiqrUH.js";
+export { STUDIO_PAGE_BASE, STUDIO_PAGE_BUNDLE, STUDIO_PAGE_PATH, StudioAuthoringLocation, isDshDesktopLocation, studioAuthoringLocation, studioAuthoringSessionLocator, studioConversationReturnPath, studioPreparedUrl };

package/lib/page-path.js

@@ -1,11 +1,79 @@
 //#region src/page-path.ts
-/** Browser-safe path constants shared by the host route and the launcher. */
 /** Base path owned by the Studio page route. */
 const STUDIO_PAGE_BASE = "/design-studio/";
 /** Slash-less route that redirects to the base path. */
 const STUDIO_PAGE_PATH = "/design-studio";
 /** Bundle file name served below the base path. */
 const STUDIO_PAGE_BUNDLE = "page-client.js";
+/** A locator for one parent-owned S2 receipt, never a save or identity capability. */
+function studioPreparedUrl(agentId, locator) {
+	const { requestId, digest, ...target } = locator;
+	const query = new URLSearchParams({
+		agentId,
+		presentation: "full",
+		studioTarget: JSON.stringify(target),
+		studioRequest: requestId,
+		studioDigest: digest
+	});
+	return `${STUDIO_PAGE_BASE}?${query}`;
+}
+/** Parse exact navigation intent; the live Host revalidates its parent and candidate. */
+function studioAuthoringLocation(href = globalThis.location?.href) {
+	if (href === void 0) return { presentation: "full" };
+	const url = new URL(href);
+	const one = (name) => {
+		const values = url.searchParams.getAll(name);
+		if (values.length > 1) throw new Error(`Studio requires one ${name} locator`);
+		return values[0];
+	};
+	const presentation = one("presentation") ?? "full";
+	if (presentation !== "content-only" && presentation !== "full") throw new Error("Unknown Studio presentation");
+	const raw = one("studioTarget"), requestId = one("studioRequest"), digest = one("studioDigest");
+	if (raw === void 0 && requestId === void 0 && digest === void 0) return { presentation };
+	if (!studioAuthoringSessionLocator(href)) throw new Error("Studio candidate navigation requires an explicit native Session");
+	const validIdentity = (value) => typeof value === "string" && value.length > 0 && !/[\u0000-\u001f\u007f]/u.test(value);
+	const object = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+	if (raw === void 0 || raw.length > 8192) throw new Error("Studio target is missing or too large");
+	const value = JSON.parse(raw);
+	if (!object(value) || Object.keys(value).some((key) => ![
+		"id",
+		"expectedRevision",
+		"bundle"
+	].includes(key)) || !validIdentity(value.id) || !Number.isSafeInteger(value.expectedRevision) || Number(value.expectedRevision) < 0) throw new Error("Invalid Studio target");
+	const pin = value.bundle;
+	if (pin !== void 0 && (!object(pin) || Object.keys(pin).some((key) => !["name", "version"].includes(key)) || !validIdentity(pin.name) || !validIdentity(pin.version))) throw new Error("Invalid Studio Bundle pin");
+	const initialInstance = {
+		id: value.id,
+		expectedRevision: value.expectedRevision,
+		...pin === void 0 ? {} : { bundle: {
+			name: pin.name,
+			version: pin.version
+		} }
+	};
+	if (requestId === void 0 && digest === void 0) return {
+		presentation,
+		initialInstance
+	};
+	if (!validIdentity(requestId) || requestId.length > 128 || digest === void 0 || !/^[a-f0-9]{64}$/u.test(digest)) throw new Error("Invalid Studio candidate locator");
+	return {
+		presentation,
+		initialInstance,
+		preparedLocator: {
+			...initialInstance,
+			requestId,
+			digest
+		}
+	};
+}
+/** Read only an explicit Session locator; the client codec and Host lookup validate it. */
+function studioAuthoringSessionLocator(href = globalThis.location?.href) {
+	if (href === void 0) return void 0;
+	const url = new URL(href);
+	const locators = url.searchParams.getAll("agentId");
+	if (!locators.length) return void 0;
+	if (locators.length !== 1 || url.pathname !== "/design-studio/" && url.pathname !== "/design-studio") throw new Error("Studio authoring requires one explicit Session locator on its owned page");
+	return locators[0];
+}
 /** Recognize only the official Desktop application authority, not a redirect hint. */
 function isDshDesktopLocation(href = globalThis.location?.href) {
 	if (href === void 0) return false;
@@ -23,4 +91,4 @@ function studioConversationReturnPath(href = globalThis.location?.href) {
 	return pathname === "/design-studio/" || pathname === "/design-studio" ? "/" : void 0;
 }
 //#endregion
-export { STUDIO_PAGE_BASE, STUDIO_PAGE_BUNDLE, STUDIO_PAGE_PATH, isDshDesktopLocation, studioConversationReturnPath };
+export { STUDIO_PAGE_BASE, STUDIO_PAGE_BUNDLE, STUDIO_PAGE_PATH, isDshDesktopLocation, studioAuthoringLocation, studioAuthoringSessionLocator, studioConversationReturnPath, studioPreparedUrl };

package/lib/page-rpc-DXbf4seT.d.ts

@@ -0,0 +1,24 @@
+import { n as DshStudioRemote } from "./client-adapter-BmIzQcMT.js";
+import { r as StudioStrictCodec } from "./typert.remote-client-CWz-anTr.js";
+//#region src/page-rpc.d.ts
+/** Page transport with the same signature as the global fetch. */
+type StudioPageFetch = (input: URL, init: RequestInit) => Promise<Response>;
+/** Shared carrier for the existing read namespace and optional scoped methods. */
+interface StudioPageRpcDescriptor {
+  readonly namespace: string;
+  readonly method: string;
+  readonly result: StudioStrictCodec;
+}
+/** One session-free read-only studioManagement method. */
+type StudioRpcMethod = 'workspace' | 'readKitWorkspace' | 'readKitFiles' | 'readKitFile' | 'readBundleWorkspace' | 'readBundleFile';
+/** Same Host wire, correlation, strict result and custom-scheme proxy for every Studio namespace. */
+declare function callStudioRemote<T>(descriptor: StudioPageRpcDescriptor, args: Record<string, unknown>, doFetch: StudioPageFetch): Promise<T>;
+/**
+ * Build the session-free Studio Remote over one same-origin /api transport.
+ * No DSH client plugin, runtime, or module loader boots for this page.
+ * @param doFetch - transport override for tests; defaults to the page fetch.
+ * @returns the Remote namespace consumed by the shared client adapter.
+ */
+declare function createSameOriginStudioRemote(doFetch?: StudioPageFetch): DshStudioRemote;
+//#endregion
+export { createSameOriginStudioRemote as a, callStudioRemote as i, StudioPageRpcDescriptor as n, StudioRpcMethod as r, StudioPageFetch as t };

package/lib/page-rpc.d.ts

@@ -1,15 +1,2 @@
-import { DshStudioRemote } from "./client-adapter.js";
-//#region src/page-rpc.d.ts
-/** Page transport with the same signature as the global fetch. */
-type StudioPageFetch = (input: URL, init: RequestInit) => Promise<Response>;
-/** One session-free read-only studioManagement method. */
-type StudioRpcMethod = 'workspace' | 'readKitWorkspace' | 'readKitFiles' | 'readKitFile' | 'readBundleWorkspace' | 'readBundleFile';
-/**
- * Build the session-free Studio Remote over one same-origin /api transport.
- * No DSH client plugin, runtime, or module loader boots for this page.
- * @param doFetch - transport override for tests; defaults to the page fetch.
- * @returns the Remote namespace consumed by the shared client adapter.
- */
-declare function createSameOriginStudioRemote(doFetch?: StudioPageFetch): DshStudioRemote;
-//#endregion
-export { StudioPageFetch, StudioRpcMethod, createSameOriginStudioRemote };
+import { a as createSameOriginStudioRemote, i as callStudioRemote, n as StudioPageRpcDescriptor, r as StudioRpcMethod, t as StudioPageFetch } from "./page-rpc-DXbf4seT.js";
+export { StudioPageFetch, StudioPageRpcDescriptor, StudioRpcMethod, callStudioRemote, createSameOriginStudioRemote };

package/lib/page-rpc.js

@@ -1,5 +1,5 @@
-import { isDshDesktopLocation } from "./page-path.js";
 import { TYPERT_REMOTE } from "./typert.remote-client.js";
+import { isDshDesktopLocation } from "./page-path.js";
 import { z } from "zod";
 //#region src/page-rpc.ts
 /** Thin same-origin RPC transport for the standalone Studio page. */
@@ -40,14 +40,19 @@ function resolveBase() {
 async function callStudioManagement(method, args, doFetch) {
 	const descriptor = TYPERT_REMOTE.descriptors.find((candidate) => candidate.method === method);
 	if (descriptor === void 0) throw new Error(`studio page rpc: unknown method ${JSON.stringify(method)}`);
+	return callStudioRemote(descriptor, args, doFetch);
+}
+/** Same Host wire, correlation, strict result and custom-scheme proxy for every Studio namespace. */
+async function callStudioRemote(descriptor, args, doFetch) {
+	const { namespace, method } = descriptor;
 	const rpcId = crypto.randomUUID();
-	const response = await doFetch(new URL(`/api/studioManagement/${method}`, resolveBase()), {
+	const response = await doFetch(new URL(`/api/${namespace}/${method}`, resolveBase()), {
 		method: "POST",
 		headers: { "content-type": "application/json" },
 		body: JSON.stringify({
 			type: "client-request",
 			rpcId,
-			method: `studioManagement/${method}`,
+			method: `${namespace}/${method}`,
 			payload: { args }
 		})
 	});
@@ -100,4 +105,4 @@ function createSameOriginStudioRemote(doFetch = (input, init) => globalThis.fetc
 	});
 }
 //#endregion
-export { createSameOriginStudioRemote };
+export { callStudioRemote, createSameOriginStudioRemote };

package/lib/page.d.ts

@@ -1,4 +1,5 @@
-import { r as STUDIO_PAGE_PATH, t as STUDIO_PAGE_BASE } from "./page-path-wn8e_fid.js";
+import { r as STUDIO_PAGE_PATH, t as STUDIO_PAGE_BASE } from "./page-path-BkPiqrUH.js";
+import { IncomingMessage, ServerResponse } from "node:http";
 //#region src/page.d.ts
 /** Minimal WebServer surface consumed by this plugin. */
 interface StudioPageWebServer {
@@ -6,18 +7,19 @@ interface StudioPageWebServer {
   register(route: {
     readonly kind: 'exact' | 'prefix';
     readonly path: string;
-    readonly handler: (req: StudioPageRequest, res: StudioPageResponse) => void | Promise<void>;
+    readonly handler: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>;
   }): () => void;
 }
 /** Incoming request slice read by the Studio route. */
 interface StudioPageRequest {
   readonly url?: string;
+  readonly method?: string;
 }
 /** Server response slice written by the Studio route. */
 interface StudioPageResponse {
   statusCode: number;
   setHeader(name: string, value: string): void;
-  getHeader?(name: string): string | number | undefined;
+  getHeader?(name: string): string | number | readonly string[] | undefined;
   end(body?: string | Uint8Array): void;
 }
 /** Cordis plugin name. */

package/lib/page.js

@@ -1,5 +1,219 @@
 import { STUDIO_PAGE_BASE, STUDIO_PAGE_BUNDLE, STUDIO_PAGE_PATH } from "./page-path.js";
+import { join } from "node:path";
+import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
+import { closeSync, constants, fstatSync, lstatSync, openSync, readSync, realpathSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { TextDecoder } from "node:util";
+//#region ../../scripts/css-asset-route.mjs
+const MIME = Object.freeze({
+	eot: "application/vnd.ms-fontobject",
+	svg: "image/svg+xml",
+	ttf: "font/ttf",
+	otf: "font/otf",
+	woff: "font/woff",
+	woff2: "font/woff2",
+	png: "image/png",
+	jpg: "image/jpeg",
+	jpeg: "image/jpeg",
+	gif: "image/gif",
+	webp: "image/webp",
+	avif: "image/avif"
+});
+/** Serve only a verified, immutable CSS asset table, never a directory.
+* Mount behind the owning host's existing access policy. This helper does not
+* supply authentication, register a host route, or certify a packaged build.
+*/
+function createCssAssetHandler({ prefix, assets }) {
+	if (typeof prefix !== "string" || !/^\/design-system-assets\/[a-z0-9-]+\/$/u.test(prefix)) throw Error("Invalid owned CSS asset prefix");
+	if (!Array.isArray(assets) || assets.length > 512) throw Error("CSS asset table exceeds budget");
+	const table = /* @__PURE__ */ new Map();
+	let total = 0;
+	for (const asset of assets) {
+		if (!Buffer.isBuffer(asset?.bytes) || asset.bytes.length > 33554432) throw Error("Invalid CSS asset bytes or budget");
+		total += asset.bytes.length;
+		if (total > 67108864) throw Error("CSS asset table bytes exceed budget");
+		const match = /^([a-f0-9]{64})\.([a-z0-9]+)$/u.exec(asset.name ?? "");
+		if (!match || !Object.hasOwn(MIME, match[2]) || asset.mime !== MIME[match[2]]) throw Error("Invalid CSS asset identity or MIME");
+		const bytes = Buffer.from(asset.bytes);
+		const hash = createHash("sha256").update(bytes).digest("hex");
+		if (hash !== match[1] || asset.sha256 !== hash) throw Error("CSS asset bytes do not match content identity");
+		if (table.has(asset.name)) throw Error("Duplicate CSS asset identity");
+		table.set(asset.name, {
+			bytes,
+			mime: asset.mime,
+			etag: `"${hash}"`
+		});
+	}
+	return function cssAssetHandler(request, response) {
+		response.setHeader("X-Content-Type-Options", "nosniff");
+		if (!["GET", "HEAD"].includes(request.method)) {
+			response.statusCode = 405;
+			response.setHeader("Allow", "GET, HEAD");
+			response.end();
+			return;
+		}
+		const url = request.url;
+		let name;
+		if (typeof url === "string" && url.startsWith(prefix) && !/[\u0000-\u0020\u007f#]/u.test(url)) {
+			const pathname = url.split("?", 1)[0];
+			try {
+				name = decodeURIComponent(pathname.slice(prefix.length));
+			} catch {}
+		}
+		const asset = typeof name === "string" && /^[a-f0-9]{64}\.[a-z0-9]+$/u.test(name) ? table.get(name) : void 0;
+		if (!asset) {
+			response.statusCode = 404;
+			response.end();
+			return;
+		}
+		response.statusCode = 200;
+		response.setHeader("Content-Type", asset.mime);
+		response.setHeader("Content-Length", asset.bytes.length);
+		response.setHeader("Cache-Control", "public, max-age=31536000, immutable");
+		response.setHeader("ETag", asset.etag);
+		response.end(request.method === "HEAD" ? void 0 : asset.bytes);
+	};
+}
+//#endregion
+//#region ../../scripts/css-asset-manifest.mjs
+function ownedRead(root, relative, limit) {
+	let file = root;
+	const parents = [{
+		path: root,
+		info: lstatSync(root)
+	}];
+	const verifyParents = () => {
+		for (const parent of parents) {
+			const current = lstatSync(parent.path);
+			if (!current.isDirectory() || current.isSymbolicLink() || current.dev !== parent.info.dev || current.ino !== parent.info.ino || realpathSync(parent.path) !== parent.path) throw Error("Packaged CSS parent ownership changed");
+		}
+		if (realpathSync(file) !== file) throw Error("Packaged CSS resolved ownership changed");
+	};
+	const parts = relative.split("/");
+	for (const [index, part] of parts.entries()) {
+		if (!part || part === "." || part === ".." || /[\\\u0000-\u001f]/u.test(part)) throw Error("Invalid packaged CSS asset path");
+		file = join(file, part);
+		const info = lstatSync(file);
+		if (info.isSymbolicLink() || !(index === parts.length - 1 ? info.isFile() : info.isDirectory())) throw Error("CSS package assets must be regular owned files");
+		if (index !== parts.length - 1) parents.push({
+			path: file,
+			info
+		});
+	}
+	const checked = lstatSync(file);
+	verifyParents();
+	const fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+	try {
+		const info = fstatSync(fd);
+		verifyParents();
+		if (!info.isFile() || info.dev !== checked.dev || info.ino !== checked.ino || info.size !== checked.size) throw Error("Packaged CSS asset identity changed");
+		if (info.size > limit) throw Error("Packaged CSS bytes exceed budget");
+		const bytes = Buffer.alloc(info.size + 1);
+		let length = 0;
+		while (length < bytes.length) {
+			const count = readSync(fd, bytes, length, bytes.length - length, null);
+			if (!count) break;
+			length += count;
+		}
+		const final = fstatSync(fd);
+		verifyParents();
+		if (length !== info.size || final.size !== info.size || final.mtimeMs !== info.mtimeMs || final.ctimeMs !== info.ctimeMs) throw Error("Packaged CSS asset changed");
+		return bytes.subarray(0, length);
+	} finally {
+		closeSync(fd);
+	}
+}
+/** Read only the current content-addressed manifest, never enumerate a directory.
+* Stale build files are neither admitted nor exposed. The package root is an
+* explicit owner-selected directory; native list paths are not accepted here.
+*/
+function loadPackagedCssAssets(packageRoot, prefix) {
+	createCssAssetHandler({
+		prefix,
+		assets: []
+	});
+	const root = realpathSync(packageRoot);
+	const folder = `css-assets/${prefix.split("/")[2]}`;
+	const manifestBytes = ownedRead(root, `${folder}/manifest.json`, 262144);
+	const manifest = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(manifestBytes));
+	if (manifest?.schema !== "design-system-css-assets-v1" || manifest.prefix !== prefix || !Array.isArray(manifest.assets) || manifest.assets.length > 512) throw Error("Invalid packaged CSS asset manifest");
+	const seen = /* @__PURE__ */ new Set(), assets = [];
+	let total = 0;
+	for (const entry of manifest.assets) {
+		if (!/^[a-f0-9]{64}\.[a-z0-9]+$/u.test(entry?.name ?? "") || entry.file !== `${folder}/${entry.name}` || seen.has(entry.name)) throw Error("Invalid or duplicate packaged CSS identity");
+		if (!Number.isSafeInteger(entry.bytes) || entry.bytes < 0 || entry.bytes > 33554432) throw Error("Invalid packaged CSS byte budget");
+		total += entry.bytes;
+		if (total > 67108864) throw Error("Packaged CSS total exceeds budget");
+		seen.add(entry.name);
+	}
+	for (const entry of manifest.assets) {
+		const bytes = ownedRead(root, entry.file, entry.bytes);
+		if (bytes.length !== entry.bytes) throw Error("Packaged CSS byte length mismatch");
+		assets.push({
+			name: entry.name,
+			bytes,
+			sha256: entry.sha256,
+			mime: entry.mime
+		});
+	}
+	return {
+		handler: createCssAssetHandler({
+			prefix,
+			assets
+		}),
+		manifest,
+		assets
+	};
+}
+//#endregion
+//#region ../../scripts/css-asset-host.mjs
+/** Match the official webServer.register route/disposer contract.
+* Asset tables are verified before the first registration. Call within the
+* owning plugin lifecycle and existing host access policy; no fallback seat
+* or upstream /plugins route is claimed by this helper.
+*/
+function registerPackagedCssAssets(webServer, packageRoot, prefixes) {
+	if (typeof webServer?.register !== "function" || !Array.isArray(prefixes) || !prefixes.length || new Set(prefixes).size !== prefixes.length) throw Error("Explicit CSS route service and unique prefixes required");
+	const tables = prefixes.map((prefix) => ({
+		prefix,
+		...loadPackagedCssAssets(packageRoot, prefix)
+	}));
+	const disposers = [];
+	try {
+		for (const table of tables) {
+			const dispose = webServer.register({
+				kind: "prefix",
+				path: table.prefix.slice(0, -1),
+				handler: table.handler
+			});
+			if (typeof dispose !== "function") throw Error("Host CSS registration did not return a disposer");
+			disposers.push(dispose);
+		}
+	} catch (error) {
+		const failures = [];
+		for (const dispose of disposers.reverse()) try {
+			dispose();
+		} catch (cleanupError) {
+			failures.push(cleanupError);
+		}
+		if (failures.length) throw new AggregateError([error, ...failures], "CSS route registration and rollback failed");
+		throw error;
+	}
+	let closed = false;
+	return () => {
+		if (closed) return;
+		closed = true;
+		const failures = [];
+		for (const dispose of disposers.reverse()) try {
+			dispose();
+		} catch (error) {
+			failures.push(error);
+		}
+		if (failures.length) throw new AggregateError(failures, "CSS route disposal failed");
+	};
+}
+//#endregion
 //#region src/page.ts
 /** Plugin-owned same-origin route serving the standalone Design Studio page. */
 /** Cordis plugin name. */
@@ -46,8 +260,10 @@ function shellHtml(base) {
 function apply(ctx) {
 	const face = ctx;
 	const bundleUrl = new URL(`./${STUDIO_PAGE_BUNDLE}`, import.meta.url);
-	const redirect = async (_req, res) => {
-		send(res, 308, "text/plain; charset=utf-8", "", { Location: STUDIO_PAGE_BASE });
+	const redirect = async (req, res) => {
+		const queryIndex = req.url?.indexOf("?") ?? -1;
+		const query = queryIndex < 0 ? "" : req.url.slice(queryIndex);
+		send(res, 308, "text/plain; charset=utf-8", "", { Location: STUDIO_PAGE_BASE + query });
 	};
 	const handler = async (req, res) => {
 		const path = requestPath(req);
@@ -73,6 +289,7 @@ function apply(ctx) {
 	face.effect(() => {
 		const acquired = [];
 		try {
+			acquired.push(registerPackagedCssAssets(face.webServer, fileURLToPath(new URL(".", import.meta.url)), ["/design-system-assets/dsh-design-studio-page/"]));
 			acquired.push(face.webServer.register({
 				kind: "exact",
 				path: STUDIO_PAGE_PATH,

package/lib/remote-method-ab_lHwWN.js

@@ -0,0 +1,16 @@
+import { Remote } from "@deepseek-ai/dsh-typert-protocol";
+//#region src/remote-method.ts
+/** The public SDK marker, without requiring runtime decorator syntax. */
+function markStudioRemote(prototype, name, method) {
+	Remote(method, {
+		kind: "method",
+		name,
+		static: false,
+		private: false,
+		addInitializer(initializer) {
+			initializer.call(Object.create(prototype));
+		}
+	});
+}
+//#endregion
+export { markStudioRemote as t };