fix(web-server): redirect /command-center and /console to asccli.app

Local static file serving for these routes was broken (files not bundled
in the binary). Routes now 302-redirect to the hosted apps at
asccli.app/command-center and asccli.app/console. Startup banner updated
to show the hosted URLs. Removes dead serveStatic/MIME_TYPES code.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hanrw

CHANGELOG.md

@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+- **`asc web-server`** — `/command-center/`, `/console/`, and `/` now redirect (302) to the hosted apps at `asccli.app/command-center` and `asccli.app/console` instead of serving local files that no longer exist; startup banner updated to show hosted URLs
+
 ---
 
 ## [0.1.56] - 2026-03-21

apps/asc-web/server.js

@@ -7,11 +7,10 @@
 //   node server.js --port 3000  # custom port
 //
 // Routes:
-//   /command-center/  → command-center (dashboard)
-//   /console/         → console (terminal)
-//   /shared/          → shared (domain, infrastructure, static)
-//   /                 → appstore-command-center (default)
 //   /api/run          → execute asc CLI commands
+//   /command-center/  → 302 redirect to asccli.app/command-center
+//   /console/         → 302 redirect to asccli.app/console
+//   /                 → 302 redirect to asccli.app/command-center
 //
 // Prerequisites:
 //   - `asc` CLI installed and on PATH (or built: swift run asc)
@@ -31,18 +30,6 @@ const ASC_DIR = path.join(os.homedir(), '.asc');
 const CERT_KEY = path.join(ASC_DIR, 'server.key');
 const CERT_PEM = path.join(ASC_DIR, 'server.crt');
 
-const APPS_DIR = __dirname;
-const MIME_TYPES = {
-  '.html': 'text/html; charset=utf-8',
-  '.js': 'text/javascript; charset=utf-8',
-  '.css': 'text/css; charset=utf-8',
-  '.json': 'application/json',
-  '.png': 'image/png',
-  '.webp': 'image/webp',
-  '.svg': 'image/svg+xml',
-  '.ico': 'image/x-icon',
-};
-
 function runASC(command) {
   return new Promise((resolve) => {
     const parts = command.split(/\s+/);
@@ -62,32 +49,6 @@ function runASC(command) {
   });
 }
 
-function serveStatic(filePath, res) {
-  const ext = path.extname(filePath);
-  const contentType = MIME_TYPES[ext] || 'application/octet-stream';
-
-  fs.stat(filePath, (statErr, stats) => {
-    if (statErr || !stats) {
-      res.writeHead(404);
-      res.end('Not found');
-      return;
-    }
-    if (stats.isDirectory()) {
-      serveStatic(path.join(filePath, 'index.html'), res);
-      return;
-    }
-    fs.readFile(filePath, (err, data) => {
-      if (err) {
-        res.writeHead(404);
-        res.end('Not found');
-        return;
-      }
-      res.writeHead(200, { 'Content-Type': contentType });
-      res.end(data);
-    });
-  });
-}
-
 function handleRequest(req, res) {
   res.setHeader('Access-Control-Allow-Origin', '*');
   res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
@@ -131,32 +92,22 @@ function handleRequest(req, res) {
     return;
   }
 
-  // Static file serving with app routing
+  // Redirect to hosted web apps at asccli.app
   const urlPath = decodeURIComponent(req.url.split('?')[0]);
 
-  let filePath;
-  if (urlPath.startsWith('/command-center')) {
-    const subPath = urlPath.slice('/command-center'.length) || '/';
-    filePath = path.join(APPS_DIR, 'command-center', subPath === '/' ? 'index.html' : subPath);
-  } else if (urlPath.startsWith('/console')) {
-    const subPath = urlPath.slice('/console'.length) || '/';
-    filePath = path.join(APPS_DIR, 'console', subPath === '/' ? 'index.html' : subPath);
-  } else if (urlPath.startsWith('/shared')) {
-    filePath = path.join(APPS_DIR, urlPath);
-  } else if (urlPath === '/' || urlPath === '/index.html') {
-    filePath = path.join(APPS_DIR, 'command-center', 'index.html');
-  } else {
-    filePath = path.join(APPS_DIR, 'command-center', urlPath);
+  if (urlPath === '/' || urlPath === '/index.html' || urlPath.startsWith('/command-center')) {
+    res.writeHead(302, { 'Location': 'https://asccli.app/command-center' });
+    res.end();
+    return;
   }
-
-  // Security: block path traversal
-  if (!filePath.startsWith(APPS_DIR)) {
-    res.writeHead(403);
-    res.end('Forbidden');
+  if (urlPath.startsWith('/console')) {
+    res.writeHead(302, { 'Location': 'https://asccli.app/console' });
+    res.end();
     return;
   }
 
-  serveStatic(filePath, res);
+  res.writeHead(404);
+  res.end('Not found');
 }
 
 const server = http.createServer(handleRequest);
@@ -221,8 +172,8 @@ server.listen(PORT, () => {
     }
     lines.push(
       '  │                                         │',
-      '  │  /command-center/  Dashboard            │',
-      '  │  /console/         Terminal             │',
+      '  │  asccli.app/command-center              │',
+      '  │  asccli.app/console                     │',
       '  │  /api/run          CLI bridge           │',
       '  │                                         │',
       `  │  Binary: ${ASC_BIN.padEnd(31)}│`,

docs/features/web-apps.md

@@ -13,8 +13,8 @@ asc web-server --port 9000
 ```
 
 Then open either web app:
-- **Command Center:** https://asccli.app/asc-web-command-center/
-- **Console:** https://asccli.app/asc-web-console/
+- **Command Center:** https://asccli.app/command-center
+- **Console:** https://asccli.app/console
 
 **Prerequisites:** Node.js (for the API proxy) and `asc` in your PATH.