castle-web-cli 0.4.120 → 0.4.121

package/dist/ide.d.ts

@@ -3,6 +3,7 @@ import { Duplex } from 'stream';
 import { type RawData } from 'ws';
 export declare const IDE_ASSET_PREFIX = "/__castle/ide/";
 export declare const PTY_WS_PATH = "/__castle/pty";
+export declare const VENDOR_PREFIX = "/__castle/vendor/";
 export declare const FAVICON_FILES: string[];
 export declare const FAVICON_LINK_TAGS: string;
 export declare const FILES_API_PREFIX = "/__castle/files/";

package/dist/ide.js

@@ -10,6 +10,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import picomatch from 'picomatch';
 import { fileURLToPath } from 'url';
+import { createRequire } from 'module';
 import { spawn as spawnPty } from '@lydell/node-pty';
 import headlessPkg from '@xterm/headless';
 import { SerializeAddon } from '@xterm/addon-serialize';
@@ -49,6 +50,32 @@ const SHELL_MIME = {
 function deckHasFile(deckDir, name) {
     return (fs.existsSync(path.join(deckDir, name)) || fs.existsSync(path.join(deckDir, 'public', name)));
 }
+// Serve a vendored library from the CLI's own dependencies. Resolved through
+// require rather than a path relative to dist/, so it works the same whether the
+// CLI runs from a checkout or from a global npm install.
+function serveVendorFile(res, asset) {
+    const spec = VENDOR_FILES[asset];
+    if (!spec) {
+        res.writeHead(404).end();
+        return true;
+    }
+    let filePath;
+    try {
+        filePath = createRequire(import.meta.url).resolve(spec);
+    }
+    catch {
+        res.writeHead(404).end();
+        return true;
+    }
+    res.writeHead(200, {
+        'content-type': 'text/javascript; charset=utf-8',
+        // Immutable for the session: the file only changes when the CLI does, and
+        // a capture shouldn't pay for re-fetching 194KB every time.
+        'cache-control': 'public, max-age=3600',
+    });
+    fs.createReadStream(filePath).pipe(res);
+    return true;
+}
 // Serve a file from the bundled shell dir, guarding against path traversal.
 function serveShellFile(res, asset) {
     const rel = path.normalize(asset).replace(/^(\.\.[/\\])+/, '');
@@ -75,6 +102,20 @@ function serveShellFile(res, asset) {
 // upgrade handler on Vite's HTTP server).
 export const IDE_ASSET_PREFIX = '/__castle/ide/';
 export const PTY_WS_PATH = '/__castle/pty';
+// Libraries the PLATFORM lends a deck at runtime, served from this serve's own
+// origin rather than fetched from a CDN.
+//
+// html2canvas is the only one so far: the SDK composites a card (canvas + the
+// deck's own DOM) with it to capture a cover. Serving it here instead of
+// bundling it into the SDK keeps it out of every published deck -- it is ~194KB
+// that only an editor ever runs, and a deck is bundled into a single file, so
+// bundling it could not be made lazy. And it removes a live failure: a CDN
+// import fails closed, silently downgrading a cover to canvas-only whenever the
+// network is slow, blocked, or absent.
+export const VENDOR_PREFIX = '/__castle/vendor/';
+const VENDOR_FILES = {
+    'html2canvas.js': 'html2canvas/dist/html2canvas.esm.js',
+};
 // Castle's favicon (the same files castle.xyz serves), shipped in the shell
 // bundle and also served from the origin root so every page under the serve
 // gets it -- the shell at `/`, the deck page at `/index.html`, and the
@@ -941,6 +982,9 @@ export function createIdeServer(opts) {
         if (favicon && !deckHasFile(deckDir, favicon)) {
             return serveShellFile(res, favicon);
         }
+        if (reqPath.startsWith(VENDOR_PREFIX)) {
+            return serveVendorFile(res, reqPath.slice(VENDOR_PREFIX.length));
+        }
         if (reqPath.startsWith(IDE_ASSET_PREFIX)) {
             return serveShellFile(res, reqPath.slice(IDE_ASSET_PREFIX.length) || 'index.html');
         }

package/dist/init.js

@@ -37,7 +37,7 @@ const DEFAULT_KIT = 'physics-2d';
 // Registry version of castle-web-sdk to inject when scaffolding from a
 // globally-installed castle-web (not from inside the workspace). Bumped
 // alongside cli/sdk version bumps.
-const PUBLISHED_SDK_VERSION = '0.4.12';
+const PUBLISHED_SDK_VERSION = '0.4.13';
 // The account the first-party kits are (to be) published under, so a kit
 // imported from the CLI's copy is named the same as one fetched from the server.
 const KIT_AUTHOR = 'castle';