[espetro]

Summary

Issue #10 — the CSR serving slice. Most of the surface already existed (c.bytes, @chttp/static with sha1 ETag/304, hand-rolled httpDate); this PR lands the two missing pieces and fixes one compiler-mode bug the example exposed.

examples/integrations/csr-react — a Vite-built React SPA served by serveStatic(app, "/", src, { spa: true }) with an /api/hello route on the same router. Two asset modes sharing one buildApp(src: AssetSource):

• src/main.ts: DiskAssets("./dist") — dev/plain-node, re-reads on mtime+size change.
• src/main.baked.ts: BakedAssets — the JSON-baked assets recipe. scripts/bake.mjs walks dist/ and emits src/assets.gen.ts, an EmbeddedAssets subclass whose constructor calls load(records) (array of EmbedRecord, never a path-keyed object). scripts/vendor.mjs stages .vendor/ the same way ws-echo does — BakedAssets subclasses a package class, so scriptc needs the whole graph as program code. pnpm build = bake + vendor + scriptc build → single binary, no filesystem.

fix(router) — ReqViewCore.header() read this._headers[key] and this._headersDistinct[key] bare. Under program-code compilation a missing typed-record key throws "record has no key" (the process aborts on the first request); packed-dist compilation tolerates it, so the bug only shows in vendored builds. Any optional request header lookup (if-none-match, accept-encoding, accept) fenced the whole app — @chttp/static in a vendored ELF crashed serving anything. Both reads now probe with Object.prototype.hasOwnProperty.call, the idiom already used elsewhere in ReqView. Changeset included (patch).

Docs — docs/static.md gains "Baking assets into the binary": the recipe plus the case-6 (JSON b64: +365 KB binary, ~0.15 ms decode) vs case-9 (FFI blob: +303 KB, ~0.055 ms copy, cc + ffi.json toolchain) tradeoffs from bench/scriptc-evidence/frontend-probes-2026-10-14.txt. docs/context.md documents c.bytes; docs/examples.md + examples/README.md index the example.

Verification

• pnpm --filter chttp-example-csr-react test: 6 node tests — sha256 byte-identity of the hashed Vite asset, ETag→304 with empty body, SPA Accept: text/html fallback + extensioned-miss 404, /api JSON 404, and the same assertions against BakedAssets.
• ELF smoke (scriptc 0.3.6, this branch): scriptc coverage src/main.baked.ts = 1713/1713 (100%); the built binary serves /, the hashed JS byte-identical (sha256 match), 304 on revalidation, SPA fallback, /api/hello, and 404s — all verified by curl.
• pnpm --filter @chttp/router test: 93 pass incl. its own elf.test.sh; pnpm --filter @chttp/static test: 24 pass.
• scripts/scriptc-gate.sh: all gates 100% except bench/apps/chttp-stream.ts, which fails identically on origin/main (@chttp/router/src/index.ts unresolvable in the stream package — pre-existing env issue, not this branch).

Link to Devin session: https://app.devin.ai/sessions/2e23b2b68f7a464697373e89c206f61f
Open in Devin Desktop: https://app.devin.ai/desktop/session/2e23b2b68f7a464697373e89c206f61f?variant=devin
Requested by: @espetro

[devin-ai-integration]

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

• Disable automatic comment, CI, and merge conflict monitoring

[cloudflare-workers-and-pages]

Deploying chttpjs with    Cloudflare Pages

Latest commit:	0aa9aae
Status:	✅  Deploy successful!
Preview URL:	https://8dffa566.chttpjs.pages.dev
Branch Preview URL:	https://devin-1792395888-csr-serving.chttpjs.pages.dev

View logs