feat(server): serve prebuilt client via module API and inject runtime config

- Add app/client-path.js to resolve client public path via webssh2_client.getPublicPath() with fallback
- Mount static assets under /ssh/assets using resolved client path (app/app.js)
- Inject runtime webssh2Config and rewrite asset URLs in modifyHtml via connectionHandler
- Update package metadata/lockfile for new dependency wiring

Enables serving the Vite-built client from webssh2_client/client/public without rebundling, fixing browser-side “require is not defined”
issues.

Author: billchurch

app/app.js

@@ -2,7 +2,6 @@
 // app/app.js
 
 import express from 'express'
-import webssh2Client from 'webssh2_client'
 import config, { getConfig } from './config.js'
 import SSHConnection from './ssh.js'
 import socketHandler from './socket.js'
@@ -13,6 +12,7 @@ import { configureSocketIO } from './io.js'
 import { handleError, ConfigError } from './errors.js'
 import { createNamespacedDebug } from './logger.js'
 import { MESSAGES } from './constants.js'
+import { getClientPublicPath } from './client-path.js'
 
 const debug = createNamespacedDebug('app')
 
@@ -26,7 +26,7 @@ function createAppAsync(appConfig) {
 
   try {
     // Resolve the correct path to the webssh2_client module
-    const clientPath = webssh2Client.getPublicPath()
+    const clientPath = getClientPublicPath()
 
     // Apply middleware
     const { sessionMiddleware } = applyMiddleware(app, appConfig)
@@ -57,7 +57,7 @@ function createApp() {
 
   try {
     // Resolve the correct path to the webssh2_client module
-    const clientPath = webssh2Client.getPublicPath()
+    const clientPath = getClientPublicPath()
 
     // Apply middleware
     const { sessionMiddleware } = applyMiddleware(app, config)

app/client-path.js

@@ -0,0 +1,23 @@
+// server
+// app/client-path.js
+
+import webssh2Client from 'webssh2_client'
+import { DEFAULTS } from './constants.js'
+import { createNamespacedDebug } from './logger.js'
+
+const debug = createNamespacedDebug('client-path')
+
+/**
+ * Resolve the public path for the webssh2_client assets.
+ * Prefers module API, falls back to DEFAULTS.WEBSSH2_CLIENT_PATH.
+ * @returns {string} absolute path to client public assets
+ */
+export function getClientPublicPath() {
+  try {
+    const p = webssh2Client.getPublicPath()
+    return p
+  } catch (err) {
+    debug('Falling back to DEFAULTS.WEBSSH2_CLIENT_PATH:', err?.message)
+    return DEFAULTS.WEBSSH2_CLIENT_PATH
+  }
+}

app/connectionHandler.js

@@ -3,10 +3,10 @@
 
 import { promises as fs } from 'fs'
 import path from 'path'
-import webssh2Client from 'webssh2_client'
 import { createNamespacedDebug } from './logger.js'
 import { HTTP, MESSAGES, DEFAULTS } from './constants.js'
 import { modifyHtml } from './utils.js'
+import { getClientPublicPath } from './client-path.js'
 const debug = createNamespacedDebug('connectionHandler')
 
 /**
@@ -33,7 +33,7 @@ async function handleFileRead(filePath, config, res) {
 async function handleConnection(req, res) {
   debug('Handling connection req.path:', req.path)
 
-  const clientPath = webssh2Client.getPublicPath()
+  const clientPath = getClientPublicPath()
 
   const tempConfig = {
     socket: {

package-lock.json

@@ -38,7 +38,7 @@
     "debug": "^4.4.1",
     "express": "^5.1.0",
     "express-session": "^1.18.2",
-    "jsmasker": "^1.7.0",
+    "jsmasker": "^2.0.0",
     "socket.io": "^4.8.1",
     "ssh2": "1.17",
     "validator": "^13.15.15",