vacuum-wall/webui/static/hoover/websocket.js

/**
 * Hoover — websocket.js
 *
 * WebSocket connection manager with auto-reconnect. WS messages are routed
 * to model-based refresh and direct onMessage handlers.
 * Page-level subscribe/unsubscribe is replaced by the model layer.
 */

import { refreshByTopic } from './model.js';
import { tryRefreshToken, redirectLogin } from './api.js';

let _wsConn = null;
let _wsReconnectMs = 0;
let _wsFailCount = 0;
let _wsRefreshing = false;
let _wsClosingHandled = false;

/** Direct onMessage handlers — { topics, handler, unsubscribed }[] */
const _directHandlers = [];

/**
 * Build the WebSocket URL.  Supports an override via `window.__WS_URL__`
 * (useful for proxy setups).  Falls back to port 9091 when the current
 * origin has no port (nginx fronting the WS on a different port).
 */
function _wsUrl() {
    if (window.__WS_URL__) return window.__WS_URL__;
    const proto = location.protocol === 'https:' ? 'wss:' : 'ws:';
    return proto + '//' + location.host + '/ws';
}

/** Attempt a WebSocket connection.
 *  Passes the JWT in the WebSocket subprotocol header (Sec-WebSocket-Protocol)
 *  instead of a query parameter, keeping it out of logs and browser history.
 */
function _wsConnect() {
    if (_wsConn && _wsConn.readyState <= 1) return;

    _wsClosingHandled = false;
    const token = window.__auth_token__;
    if (token) {
        _wsConn = new WebSocket(_wsUrl(), ['Bearer ' + token]);
    } else {
        _wsConn = new WebSocket(_wsUrl());
    }

    _wsConn.onopen = () => {
        _wsReconnectMs = 0;
        _wsFailCount = 0;
        _wsRefreshing = false;
        _wsClosingHandled = false;
    };

    _wsConn.onclose = () => {
        if (_wsClosingHandled) return;
        _wsClosingHandled = true;
        if (!window.__auth_token__) return;
        _wsFailCount++;

        if (_wsFailCount >= 3 && !_wsRefreshing) {
            _wsRefreshing = true;
            const oldConn = _wsConn;
            tryRefreshToken().then(ok => {
                _wsRefreshing = false;
                if (ok) {
                    _wsFailCount = 0;
                    _wsReconnectMs = 0;
                    _wsConn = null;
                    if (oldConn) oldConn.close();
                    setTimeout(_wsConnect, 100);
                } else {
                    redirectLogin();
                }
            }).catch(() => {
                _wsRefreshing = false;
                _wsReconnectMs = Math.min(_wsReconnectMs * 2 + 1000, 15000);
                setTimeout(_wsConnect, _wsReconnectMs);
            });
            return;
        }

        _wsReconnectMs = Math.min(_wsReconnectMs * 2 + 1000, 15000);
        setTimeout(_wsConnect, _wsReconnectMs);
    };

    _wsConn.onerror = () => {
        _wsConn.close();
    };

    _wsConn.onmessage = (ev) => {
        try {
            const msg = typeof ev.data === 'string' ? JSON.parse(ev.data) : ev.data;
            handleMessage(msg);
        } catch (_) {}
    };
}

/**
 * Route an incoming WS message to model refresh and direct handlers.
 *
 * Expected message shapes:
 *   { type: 'versions', updated: ['firewall', 'dnsmasq', …] }
 *   { type: 'tick',    subsystems: ['firewall', 'wireguard', …] }
 *   { type: 'notify',  topic: 'firewall' }
 *   { type: 'status',  topic: 'firewall', … }
 */
function handleMessage(msg) {
    const topics = [];

    if (msg.type === 'versions' || msg.type === 'refresh' || msg.type === 'tick') {
        topics.push(...(msg.updated || msg.subsystems || msg.topics || []));
    } else if (msg.type === 'notify') {
        topics.push(msg.topic);
    } else if (msg.type === 'status') {
        topics.push(msg.topic || '*');
    }

    // Refresh models for each topic
    for (const topic of topics) {
        refreshByTopic(topic);
    }

    // Notify direct onMessage handlers
    for (const h of _directHandlers) {
        if (h.unsubscribed) continue;
        if (topics.some(t => h.topics.includes(t) || h.topics.includes('*'))) {
            try { h.handler(msg); } catch (_) {}
        }
    }
}

/**
 * Public subscribe API for direct one-off usage (e.g. from page code).
 * Handler receives the raw parsed message when a matching topic arrives.
 * @param {string|string[]} topics
 * @param {function} handler
 * @returns {function} unsubscribe
 */
export function onMessage(topics, handler) {
    const tArray = Array.isArray(topics) ? topics : [topics];
    const entry = { topics: tArray, handler, unsubscribed: false };
    _directHandlers.push(entry);
    return () => {
        entry.unsubscribed = true;
        const idx = _directHandlers.indexOf(entry);
        if (idx !== -1) _directHandlers.splice(idx, 1);
    };
}

/** Start the WebSocket connection. */
export function connect() {
    _wsConnect();
}