Add Studio provider bridge

Author: DjDeveloperr

README.md

@@ -63,6 +63,12 @@ Use `simdeck ui --open` or `simdeck daemon start` when you want a reusable backg
 The no-subcommand lifecycle shortcuts are `simdeck -d` for detached start, `simdeck -k` to kill the background daemon, and `simdeck -r` to restart it.
 The served loopback browser UI receives the generated API access token automatically. LAN browsers pair with the printed code before receiving the API cookie.
 
+SimDeck Studio providers run the daemon on loopback and use
+`scripts/studio-provider-bridge.mjs` for outbound control-plane communication
+with Studio. Studio hosts the browser UI and proxies SimDeck REST requests over
+that bridge while WebRTC media still negotiates directly between the browser and
+runner through ICE.
+
 CLI commands automatically use the same warm daemon:
 
 ```sh

package.json

@@ -11,6 +11,7 @@
     "README.md",
     "bin/",
     "scripts/experimental/",
+    "scripts/studio-provider-bridge.mjs",
     "scripts/postinstall.mjs",
     "build/simdeck-bin",
     "client/dist/",

scripts/studio-provider-bridge.mjs

@@ -0,0 +1,118 @@
+#!/usr/bin/env node
+
+const cloudUrl = requiredEnv("SIMDECK_CLOUD_URL").replace(/\/$/, "");
+const previewId = requiredEnv("PREVIEW_ID");
+const providerToken = requiredEnv("PROVIDER_TOKEN");
+const localUrl = (
+  process.env.SIMDECK_LOCAL_URL || "http://127.0.0.1:4310"
+).replace(/\/$/, "");
+
+let stopped = false;
+for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) {
+  process.once(signal, () => {
+    stopped = true;
+  });
+}
+
+while (!stopped) {
+  try {
+    const next = await fetchJson(`${cloudUrl}/api/actions/providers/rpc/next`, {
+      previewId,
+      providerToken,
+    });
+    if (!next || !next.request) {
+      await sleep(250);
+      continue;
+    }
+    await handleRequest(next.request);
+  } catch (error) {
+    console.error(
+      `[simdeck-provider-bridge] ${error instanceof Error ? error.message : String(error)}`,
+    );
+    await sleep(1000);
+  }
+}
+
+async function handleRequest(request) {
+  try {
+    const target = new URL(request.path, `${localUrl}/`);
+    if (!target.searchParams.has("simdeckToken")) {
+      target.searchParams.set("simdeckToken", providerToken);
+    }
+    const headers = new Headers(request.headers || {});
+    headers.set("x-simdeck-token", providerToken);
+    headers.delete("host");
+    headers.delete("content-length");
+    const response = await fetch(target, {
+      body: request.bodyBase64
+        ? Buffer.from(request.bodyBase64, "base64")
+        : undefined,
+      headers,
+      method: request.method,
+    });
+    const responseHeaders = {};
+    for (const [name, value] of response.headers.entries()) {
+      const lower = name.toLowerCase();
+      if (
+        lower === "connection" ||
+        lower === "content-encoding" ||
+        lower === "content-length" ||
+        lower === "transfer-encoding"
+      ) {
+        continue;
+      }
+      responseHeaders[name] = value;
+    }
+    const responseBodyBase64 = Buffer.from(
+      await response.arrayBuffer(),
+    ).toString("base64");
+    await complete({
+      requestId: request.id,
+      responseStatus: response.status,
+      responseHeaders,
+      responseBodyBase64,
+    });
+  } catch (error) {
+    await complete({
+      requestId: request.id,
+      error: error instanceof Error ? error.message : String(error),
+    });
+  }
+}
+
+async function complete(payload) {
+  await fetchJson(`${cloudUrl}/api/actions/providers/rpc/complete`, {
+    previewId,
+    providerToken,
+    ...payload,
+  });
+}
+
+async function fetchJson(url, body) {
+  const response = await fetch(url, {
+    body: JSON.stringify(body),
+    headers: { "content-type": "application/json" },
+    method: "POST",
+  });
+  if (response.status === 204) {
+    return null;
+  }
+  if (!response.ok) {
+    throw new Error(
+      `${url} failed with ${response.status}: ${await response.text()}`,
+    );
+  }
+  return response.json();
+}
+
+function requiredEnv(name) {
+  const value = process.env[name];
+  if (!value) {
+    throw new Error(`${name} is required.`);
+  }
+  return value;
+}
+
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}

skills/simdeck/SKILL.md

@@ -39,6 +39,10 @@ TURN server and relay-only ICE:
 `SIMDECK_WEBRTC_ICE_SERVERS=turns:turn.example.com:5349?transport=tcp`,
 `SIMDECK_WEBRTC_ICE_USERNAME`, `SIMDECK_WEBRTC_ICE_CREDENTIAL`, and
 `SIMDECK_WEBRTC_ICE_TRANSPORT_POLICY=relay`.
+SimDeck Studio provider runners keep SimDeck bound to loopback and run
+`scripts/studio-provider-bridge.mjs` as an outbound bridge; Studio hosts the UI
+and proxies REST requests through that bridge while WebRTC media negotiates
+directly with the runner.
 
 The local viewer gets the API token automatically. LAN browsers pair with the printed code before receiving the API cookie. Direct HTTP calls need `X-SimDeck-Token` or `Authorization: Bearer <token>`.