nntrivi2001
57dc91585d
Internal SmartGift build of a Claude Code monitoring dashboard. Lanes: a durable unit of parallel agent work, one per working directory, tracked across session restarts. Managed lanes are git worktrees the dashboard provisions and can reset or remove behind a three-check destroy guard and a counted preflight; adopted lanes are directories you already own and are never destroyable. Pipelines: a lane moves through pipeline stages. A stage the agent declares with evidence renders green; a stage inferred from the tool-event stream renders dashed amber and never counts as done. Detection is forward-only within a 30-minute window, and never writes the declared stage. Workspace: one page at /run with a lane grid, the selected lane's pipeline, and a full Claude console behind a disclosure.
110 lines
2.9 KiB
JavaScript
110 lines
2.9 KiB
JavaScript
/**
|
|
* @file WebSocket functionalities for real-time communication with clients, including connection management, heartbeat for detecting dead connections, and broadcasting messages to all connected clients.
|
|
* @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
|
|
*/
|
|
|
|
const { WebSocketServer } = require("ws");
|
|
const { isHostAllowed, isWebSocketAuthorized } = require("./lib/security");
|
|
|
|
let wss = null;
|
|
|
|
function initWebSocket(server) {
|
|
// Express middleware doesn't run on WS upgrades, so enforce the same Host
|
|
// allowlist (anti DNS-rebinding) and optional token here (GHSA-gr74-4xfh-6jw9).
|
|
wss = new WebSocketServer({
|
|
server,
|
|
path: "/ws",
|
|
maxPayload: 64 * 1024,
|
|
verifyClient(info, done) {
|
|
if (!isHostAllowed(info.req.headers.host)) return done(false, 403, "host not allowed");
|
|
if (!isWebSocketAuthorized(info.req)) return done(false, 401, "unauthorized");
|
|
return done(true);
|
|
},
|
|
});
|
|
|
|
wss.on("connection", (ws) => {
|
|
ws.isAlive = true;
|
|
ws.on("pong", () => {
|
|
ws.isAlive = true;
|
|
});
|
|
ws.on("error", (err) => {
|
|
// Log but don't crash — client disconnects are normal
|
|
if (err.code !== "ECONNRESET") {
|
|
console.warn("[WS] client error:", err.code || err.message);
|
|
}
|
|
});
|
|
});
|
|
|
|
// Heartbeat every 30s to detect dead connections
|
|
const interval = setInterval(() => {
|
|
if (!wss) {
|
|
clearInterval(interval);
|
|
return;
|
|
}
|
|
wss.clients.forEach((ws) => {
|
|
if (!ws.isAlive) {
|
|
ws.terminate();
|
|
return;
|
|
}
|
|
ws.isAlive = false;
|
|
ws.ping();
|
|
});
|
|
}, 30000);
|
|
interval.unref();
|
|
|
|
wss.on("close", () => {
|
|
clearInterval(interval);
|
|
});
|
|
|
|
return wss;
|
|
}
|
|
|
|
function broadcast(type, data) {
|
|
if (!wss) return;
|
|
const message = JSON.stringify({ type, data, timestamp: new Date().toISOString() });
|
|
wss.clients.forEach((client) => {
|
|
if (client.readyState === 1) {
|
|
try {
|
|
client.send(message);
|
|
} catch {
|
|
// Client closed between readyState check and send — safe to ignore
|
|
}
|
|
}
|
|
});
|
|
}
|
|
|
|
function getConnectionCount() {
|
|
if (!wss) return 0;
|
|
let count = 0;
|
|
wss.clients.forEach((client) => {
|
|
if (client.readyState === 1) count++;
|
|
});
|
|
return count;
|
|
}
|
|
|
|
/**
|
|
* Tear down the WebSocket server for a graceful shutdown. Open WS clients keep
|
|
* their underlying TCP sockets alive, which prevents http.Server#close() from
|
|
* ever completing — under `node --watch` that turns every restart into a
|
|
* multi-second "waiting for graceful termination" stall. Terminating the
|
|
* clients first lets the HTTP server drain and close promptly.
|
|
*/
|
|
function closeWebSocket() {
|
|
if (!wss) return;
|
|
wss.clients.forEach((client) => {
|
|
try {
|
|
client.terminate();
|
|
} catch {
|
|
/* already gone */
|
|
}
|
|
});
|
|
try {
|
|
wss.close();
|
|
} catch {
|
|
/* ignore */
|
|
}
|
|
wss = null;
|
|
}
|
|
|
|
module.exports = { initWebSocket, broadcast, getConnectionCount, closeWebSocket };
|