dsh-skill-hub 0.3.23 → 0.3.25

package/CONTRIBUTING.md

@@ -39,7 +39,7 @@ src/client/locales/     dictionaries by view (common/skills/market/sources/detai
 ```bash
 npm install
 npm run typecheck   # tsc --noEmit
-npm test            # vitest (288 tests across 14 suites)
+npm test            # vitest (294 tests across 16 suites)
 npm run build       # tsc declarations + tsdown bundles (lib/index.js + lib/client.js)
 ```
 

package/README.md

@@ -108,7 +108,7 @@ Host uses only `ctx.skills.snapshot/get`, `ctx.webServer.register`, `ctx.systemP
 
 ```bash
 npm run typecheck  # tsc --noEmit
-npm test           # 288 tests, 14 suites
+npm test           # 294 tests, 16 suites
 npm run build      # tsc + tsdown → lib/index.js + lib/client.js
 ```
 

package/README.zh.md

@@ -108,7 +108,7 @@ GitHub 仓库 ──扫描/导入──▶ ~/.dsh/skills
 
 ```bash
 npm run typecheck  # tsc --noEmit
-npm test           # 288 tests, 14 suites
+npm test           # 294 tests, 16 suites
 npm run build      # tsc + tsdown → lib/index.js + lib/client.js
 ```
 

package/lib/client.js

@@ -96,6 +96,36 @@ window.__ModuleLoader__.load({
 			return body;
 		}
 		/**
+		* Resolve one route path against the page's base.
+		*
+		* Every route in this family is registered on the server as a root-absolute
+		* path (`/api/skill-hub/...`), which is right there but wrong in a browser
+		* behind a reverse proxy that owns a path prefix: the page loads from
+		* `https://host/app/dsh/` while a root-absolute URL drops the prefix entirely,
+		* so the gateway answers 404 HTML and `readJson` reports "invalid JSON
+		* response" (issue #18). Resolving against `document.baseURI` is the host's own
+		* convention — `dsh-client-connection` opens its browser carrier with
+		* `new URL(path.slice(1), document.baseURI)` — so a root deployment resolves to
+		* exactly the same absolute path while a prefixed one keeps its prefix, and the
+		* gateway strips it before forwarding: the server still receives
+		* `/api/skill-hub/*`.
+		*
+		* `SKILL_HUB_API_ROOT` must stay absolute (the same constant registers the
+		* routes on the server), which is why the prefix is applied here at the single
+		* outbound boundary rather than in the constants.
+		* @param path - one route path, root-absolute unless it is already a full URL.
+		* @returns the URL to fetch.
+		*/
+		function resolveApiUrl(path) {
+			if (!path.startsWith("/")) return path;
+			if (typeof document === "undefined") return path;
+			try {
+				return new URL(path.slice(1), document.baseURI).href;
+			} catch {
+				return path;
+			}
+		}
+		/**
 		* Fetch with a hard timeout: a hung connection (proxy, stalled keep-alive,
 		* host wedged) must never leave the panel stuck on "loading" forever — it
 		* fails fast and surfaces the error banner instead.
@@ -104,7 +134,7 @@ window.__ModuleLoader__.load({
 			const controller = new AbortController();
 			const timer = setTimeout(() => controller.abort(), ms);
 			try {
-				return await fetch(input, {
+				return await fetch(typeof input === "string" ? resolveApiUrl(input) : input, {
 					...init,
 					signal: controller.signal
 				});