serve.js

/**
 * Production server for userhub-shell.
 *
 * Serves only the pre-built dist/ folder — no source code, no Vite.
 *
 * Routing:
 *   /api/*    → forwarded to API_URL    (full path preserved, e.g. /api/auth/login)
 *   /remote/* → forwarded to REMOTE_URL (/remote prefix stripped)
 *   everything else → dist/index.html  (SPA fallback for React Router)
 *
 * Uses Node's built-in http module — no extra proxy dependencies needed.
 */

import express from 'express';
import http    from 'http';
import https   from 'https';
import path    from 'path';
import { fileURLToPath } from 'url';

const __dirname  = path.dirname(fileURLToPath(import.meta.url));

const app        = express();
const PORT       = process.env.PORT       || 4173;
const API_URL    = process.env.API_URL    || 'http://localhost:3001';
const REMOTE_URL = process.env.REMOTE_URL || 'http://localhost:5001';

/**
 * Forward `req` to `targetBase` using `req.url` as the path.
 * Mounted at the root level so Express does NOT strip any prefix —
 * /api/auth/login arrives at the API as /api/auth/login (not /auth/login).
 */
function forward(req, res, targetBase) {
  const target = new URL(targetBase);
  const client = target.protocol === 'https:' ? https : http;

  const options = {
    hostname: target.hostname,
    port:     target.port || (target.protocol === 'https:' ? 443 : 80),
    path:     req.url,            // full path, e.g. /api/auth/register
    method:   req.method,
    headers:  { ...req.headers, host: target.host },
  };

  const proxyReq = client.request(options, (proxyRes) => {
    res.writeHead(proxyRes.statusCode, proxyRes.headers);
    proxyRes.pipe(res, { end: true });
  });

  proxyReq.on('error', (err) => {
    console.error(`[Proxy error] ${req.method} ${req.url} → ${targetBase} : ${err.message}`);
    if (!res.headersSent) res.status(502).send('Bad Gateway — upstream not reachable');
  });

  req.pipe(proxyReq, { end: true });
}

// ── Root-level proxy middleware (runs before static/SPA handlers) ─────────────
app.use((req, res, next) => {
  // /api/* → API server — full path forwarded as-is
  if (req.url.startsWith('/api')) {
    return forward(req, res, API_URL);
  }

  // /remote/* → remote-app — strip the /remote prefix
  if (req.url.startsWith('/remote')) {
    req.url = req.url.slice('/remote'.length) || '/';
    return forward(req, res, REMOTE_URL);
  }

  next();
});

// ── Serve built assets from dist/ ────────────────────────────────────────────
app.use(express.static(path.join(__dirname, 'dist')));

// ── SPA fallback — React Router handles client-side routing ──────────────────
app.get('*', (_req, res) => {
  res.sendFile(path.join(__dirname, 'dist', 'index.html'));
});

app.listen(PORT, '0.0.0.0', () => {
  console.log(`✅ Shell serving dist/ on http://localhost:${PORT}`);
  console.log(`   API proxy    → ${API_URL}`);
  console.log(`   Remote proxy → ${REMOTE_URL}`);
});