@mmmbuto/nexuscrew 0.9.15 → 0.9.17

package/lib/ws/bridge.js

@@ -118,10 +118,24 @@ function sendJson(ws, value) {
 }
 
 function bindWs(ws, deps) {
-  const { openAttach, verifyToken, isValidSession = () => true, runAction = () => false, countClients = () => 0, defaults = {}, onAttach = () => {}, ptyGrace = null } = deps;
+  const { openAttach, verifyToken, isValidSession = () => true, runAction = () => false, countClients = () => 0, defaults = {}, onAttach = () => {}, ptyGrace = null, diagnostics = null, dropCounter = null } = deps;
   let record = null;
   let attached = false;
   let session = null;
+  let closeLogged = false;
+  // UNA sola riga diagnostica per socket: la prima chiusura vince. Le
+  // successive (close + error sullo stesso socket) non generano rumore.
+  const logClose = (level, event, message, meta = {}) => {
+    if (closeLogged) return;
+    closeLogged = true;
+    if (!diagnostics) return;
+    try { diagnostics.record(level, 'ws', event, message, { cell: session || undefined, ...meta }); } catch (_) {}
+  };
+  const countDrop = () => {
+    if (!dropCounter) return {};
+    const snap = dropCounter.recordDrop(session);
+    return { drops: snap.drops };
+  };
 
   const detach = () => {
     if (!record || record.ws !== ws) return;
@@ -144,6 +158,11 @@ function bindWs(ws, deps) {
     // fino al close event tiene in piedi un handle senza scopo.
     clearAttachTimer();
     sendJson(ws, { type: 'error', reason });
+    // Chiusura INITIATA DAL SERVER: il motivo e' qui, non nel close event.
+    // Level warn = sempre visibile (non richiede verbose).
+    logClose('warn', 'WS_SERVER_CLOSE', `Server closed socket: ${reason}`, {
+      reason: String(reason).slice(0, 48), closeCode: Number(code) || undefined, ...countDrop(),
+    });
     try { ws.close(code, reason); } catch (_) {}
   }
 
@@ -197,12 +216,14 @@ function bindWs(ws, deps) {
         attached = true;
         session = record.session;
         onAttach(session, ws);
+        logReattach();
         sendJson(ws, { type: 'attached', reconnectToken: record.resumeToken });
         return;
       }
       attached = true;
       clearAttachTimer();
       session = msg.session;
+      logReattach();
       // Resize default: when nobody else is attached, drive the session size so a
       // small phone gets a usable (non-clipped) view and clean line editing. When a
       // real terminal is already attached, default to ignore-size so we don't shrink
@@ -222,7 +243,7 @@ function bindWs(ws, deps) {
         // e' READONLY nessun client puo' declassarlo (msg.readonly:false non deve
         // vincere). Il client puo' solo AGGIUNGERE restrizione (attach read-only
         // su un server read-write). Contratto design §4b(6): READONLY blocca anche
-        // le scritture PTY. (fix audit finale: prima il ?? faceva vincere il client.)
+        // le scritture PTY. (fix da revisione finale: prima il ?? faceva vincere il client.)
         readonly: defaults.readonlyDefault === true || !!msg.readonly,
         takeSize,
         cols: clamp(msg.cols, 20, 300, 80),
@@ -250,6 +271,9 @@ function bindWs(ws, deps) {
       record.pty.onExit((info) => {
         record.ended = true;
         record.exitCode = info && info.exitCode;
+        logClose('notice', 'PTY_EXIT', 'Sessione terminata dal PTY', {
+          exitCode: typeof record.exitCode === 'number' ? record.exitCode : undefined,
+        });
         if (!record.ws) return;
         sendJson(record.ws, { type: 'exit', code: record.exitCode });
         try { record.ws.close(1000, 'exit'); } catch (_) {}
@@ -272,8 +296,37 @@ function bindWs(ws, deps) {
     else if (msg.type === 'action') runAction(session, msg.name); // nav window/pane server-side
   }
 
+  // Alla riconnessione la DURATA della caduta e' il gap close->reopen della
+  // stessa sessione. Ritorni con gap = notice (sempre visibili); un primo
+  // attach senza storia e' debug (solo verbose).
+  function logReattach() {
+    if (!diagnostics) return;
+    if (!dropCounter) return;
+    try {
+      const reopen = dropCounter.recordReopen(session);
+      if (reopen.gapMs != null) {
+        diagnostics.record('notice', 'ws', 'WS_REATTACHED', 'Riconnesso dopo una caduta', {
+          cell: session, gapMs: reopen.gapMs, drops: reopen.drops,
+        });
+      } else {
+        diagnostics.record('debug', 'ws', 'WS_ATTACHED', 'Attach completato', { cell: session });
+      }
+    } catch (_) {}
+  }
+
   ws.on('message', onMessage);
-  ws.on('close', () => { clearAttachTimer(); detach(); });
+  ws.on('close', (code) => {
+    clearAttachTimer(); detach();
+    if (closeLogged) return;
+    const closeCode = Number(code) || undefined;
+    if (ws.__ncCloseReason === 'heartbeat-timeout') {
+      logClose('warn', 'WS_HEARTBEAT_DROPPED', 'Heartbeat scaduto: connessione mezzo-aperta terminata', { closeCode, ...countDrop() });
+    } else if (closeCode === 1006) {
+      logClose('warn', 'WS_ABNORMAL_CLOSE', 'Chiusura senza handshake (drop TCP o terminate)', { closeCode, ...countDrop() });
+    } else {
+      logClose('notice', 'WS_CLIENT_CLOSE', 'Il client ha chiuso la connessione', { closeCode, ...countDrop() });
+    }
+  });
   ws.on('error', () => { clearAttachTimer(); detach(); });
 }
 module.exports = { bindWs, clamp, createPtyGraceStore, PTY_GRACE_MS };

package/lib/ws/drop-counter.js

@@ -0,0 +1,37 @@
+'use strict';
+// Contatore di cadute WebSocket: trasforma «celle che vanno e vengono»
+// in numeri — quante cadute nella finestra (default 10 minuti) e, alla
+// riconnessione, quanto è durata la caduta (gap tra close e reopen).
+// In memoria, zero I/O: i valori viaggiano nei meta dei log di bridge.js.
+function createDropCounter({ windowMs = 10 * 60 * 1000, now = Date.now } = {}) {
+  const drops = []; // { ts, sessionId }
+  const lastClose = new Map(); // sessionId -> ts
+  const key = (s) => String(s == null ? '' : s);
+  function prune(ts) {
+    const cutoff = ts - windowMs;
+    while (drops.length && drops[0].ts < cutoff) drops.shift();
+  }
+  return {
+    recordDrop(session, ts = now()) {
+      const k = key(session);
+      drops.push({ ts, sessionId: k });
+      if (k) lastClose.set(k, ts);
+      prune(ts);
+      return { drops: drops.length, windowSeconds: Math.round(windowMs / 1000) };
+    },
+    // Alla riconnessione: la durata della caduta e' il gap close->reopen.
+    // Consuma il last close: una connessione lunga e sana non e' «ritorno».
+    recordReopen(session, ts = now()) {
+      const k = key(session);
+      const last = lastClose.get(k);
+      lastClose.delete(k);
+      prune(ts);
+      return { gapMs: last == null ? null : Math.max(0, ts - last), drops: drops.length };
+    },
+    snapshot(ts = now()) {
+      prune(ts);
+      return { drops: drops.length, windowSeconds: Math.round(windowMs / 1000) };
+    },
+  };
+}
+module.exports = { createDropCounter };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmmbuto/nexuscrew",
-  "version": "0.9.15",
+  "version": "0.9.17",
   "description": "Faithful browser tmux client — attach to live sessions over a real PTY, localhost-only, mobile-easy",
   "main": "lib/server.js",
   "bin": {
@@ -11,8 +11,26 @@
     "lib/",
     "skills/",
     "frontend/dist/",
-    "frontend/index.html",
     "CHANGELOG.md",
+    "docs/ALIBABA_TOKEN_PLAN.md",
+    "docs/AUDIO_SHARE.md",
+    "docs/CELL_PANEL.md",
+    "docs/CONFIGURATION.md",
+    "docs/FLEET.md",
+    "docs/INSTALLATION.md",
+    "docs/LIVE_PROMPT.md",
+    "docs/live-prompt-templates/LIVE_PROMPT.en.md",
+    "docs/live-prompt-templates/LIVE_PROMPT.es.md",
+    "docs/live-prompt-templates/LIVE_PROMPT.it.md",
+    "docs/img/fleet-deck-desktop.png",
+    "docs/img/session-mobile.png",
+    "docs/MCP.md",
+    "docs/NODES.md",
+    "docs/NOTIFICATIONS.md",
+    "docs/OPERATIONS.md",
+    "docs/README.md",
+    "docs/SECURITY.md",
+    "docs/VL_MICRO_NODES.md",
     "MCP_COMPANIONS.md",
     "mcp-companions.json",
     "LICENSE",

package/skills/nexuscrew/SKILL.md

@@ -23,7 +23,7 @@ Five nouns carry almost everything:
 - **Node** — one installation on one machine. Its identity is an opaque
   `instanceId`; the human-readable name is a **label**, and two nodes may
   legitimately carry the same one. **Address things by id, never by name.**
-- **Cell** — one stable working identity (`Dev`, `Research`, …) bound to one
+- **Cell** — one stable working identity (`Alpha`, `Beta`, …) bound to one
   tmux session and one engine. A cell is not a process: it survives restarts of
   the service, and stopping it does not end the work it was doing.
 - **Engine** — what a cell runs: an AI CLI, a plain shell, a command in a

package/frontend/index.html

@@ -1,20 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover, interactive-widget=resizes-content" />
-  <meta name="theme-color" content="#0d1117" />
-  <meta name="apple-mobile-web-app-capable" content="yes" />
-  <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
-  <meta name="mobile-web-app-capable" content="yes" />
-  <meta name="application-name" content="NexusCrew" />
-  <meta name="apple-mobile-web-app-title" content="NexusCrew" />
-  <link rel="manifest" href="/manifest.json" />
-  <title>NexusCrew</title>
-</head>
-<body>
-  <div id="root"></div>
-  <script>if('serviceWorker' in navigator) navigator.serviceWorker.register('/sw.js');</script>
-  <script type="module" src="/src/main.jsx"></script>
-</body>
-</html>