@linkshell/gateway 0.4.25 → 0.4.28

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linkshell/gateway",
-  "version": "0.4.25",
+  "version": "0.4.28",
   "type": "module",
   "main": "dist/gateway/src/index.js",
   "exports": {

package/src/embedded.ts

@@ -25,6 +25,7 @@ import {
   handleTunnelWsUpgrade,
   cleanupSessionTunnels,
 } from "./tunnel.js";
+import { serveWeb, serveWebAsset, webEnabled, webDistPath } from "./static-web.js";
 
 export interface EmbeddedGatewayOptions {
   port?: number;
@@ -252,6 +253,11 @@ export function startEmbeddedGateway(
         return;
       }
 
+      // Serve the gateway's OWN built web assets (no SPA fallback) before the
+      // tunnel cookie fallback, so a real asset like /assets/index-xxx.js is
+      // served locally instead of being proxied via a stale tunnel cookie.
+      if (await serveWebAsset(req, res)) return;
+
       // Tunnel fallback: cookie-based routing for sub-resources (e.g. /_next/static/...)
       const tunnelCookie = parseTunnelCookie(req);
       if (tunnelCookie && shouldUseTunnelCookieFallback(req, url.pathname, (pathname) =>
@@ -272,6 +278,11 @@ export function startEmbeddedGateway(
         return;
       }
 
+      // Web SPA: last GET fallback, after every API route, so it never shadows
+      // them. Serves index.html for "/" and client-side routes; a no-op (false)
+      // when no web dist is bundled (e.g. an API-only embedded gateway).
+      if (await serveWeb(req, res)) return;
+
       json(res, 404, { error: "not_found" });
     } catch (err) {
       if (err instanceof ZodError) {
@@ -479,6 +490,14 @@ export function startEmbeddedGateway(
       const actualPort =
         typeof addr === "object" && addr ? addr.port : targetPort;
       log("info", `embedded gateway on port ${actualPort}`);
+      // Surface whether the bundled web SPA was found — the in-app WebView loads
+      // this gateway's "/", so a missing dist means a blank screen. Makes the
+      // LAN/self-hosted "WebView is blank" failure mode diagnosable from logs.
+      if (webEnabled()) {
+        log("info", `web UI served from ${webDistPath()}`);
+      } else {
+        log("warn", `web UI not bundled (WEB_DIST=${webDistPath()} has no index.html) — in-app agent console will be blank`);
+      }
       resolve({
         port: actualPort,
         httpUrl: `http://127.0.0.1:${actualPort}`,

package/src/index.ts

@@ -774,7 +774,13 @@ wss.on(
     }
 
     // Ping/pong for liveness — terminate connections that stop responding
-    // to pings (dead/half-open sockets) instead of leaking them.
+    // (dead/half-open sockets) instead of leaking them. Liveness is proven by
+    // EITHER a WS pong OR any inbound message: React Native's WebSocket does
+    // not reliably auto-reply to server ping control frames, so a perfectly
+    // healthy native client (terminal) would otherwise be terminated every
+    // ~40s, silently dropping its keystrokes into the reconnect queue. Active
+    // clients send a heartbeat every 15s (< PING_INTERVAL), so they always
+    // refresh isAlive; only a genuinely silent socket gets reaped.
     const liveSocket = socket as WebSocket & { isAlive?: boolean };
     liveSocket.isAlive = true;
     socket.on("pong", () => {
@@ -791,6 +797,8 @@ wss.on(
     }, PING_INTERVAL);
 
     socket.on("message", (data: WebSocket.RawData) => {
+      // Any inbound traffic counts as proof of life (see ping/pong note above).
+      liveSocket.isAlive = true;
       try {
         handleSocketMessage(
           socket,