@huynle/hub 0.0.0-stage → 0.6.1

package/web/dist/icon.svg

@@ -0,0 +1,18 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512">
+  <title>Hub</title>
+  <rect width="512" height="512" rx="112" fill="#141413"/>
+  <g transform="translate(0 20.7)">
+    <g stroke="#e8e6e1" stroke-width="22" stroke-linecap="round">
+      <line x1="256" y1="256" x2="256" y2="90"/>
+      <line x1="256" y1="256" x2="399.8" y2="339"/>
+      <line x1="256" y1="256" x2="112.2" y2="339"/>
+    </g>
+    <g fill="#e8e6e1">
+      <circle cx="256" cy="90" r="40"/>
+      <circle cx="399.8" cy="339" r="40"/>
+      <circle cx="112.2" cy="339" r="40"/>
+    </g>
+    <circle cx="256" cy="256" r="71" fill="#141413"/>
+    <circle cx="256" cy="256" r="60" fill="#fab283"/>
+  </g>
+</svg>

package/web/dist/index.html

@@ -0,0 +1,25 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover, interactive-widget=resizes-content" />
+    <meta name="theme-color" content="#141413" />
+    <meta name="color-scheme" content="dark" />
+    <meta name="mobile-web-app-capable" content="yes" />
+    <meta name="apple-mobile-web-app-capable" content="yes" />
+    <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
+    <meta name="apple-mobile-web-app-title" content="Hub" />
+    <title>Hub</title>
+    <link rel="manifest" href="/manifest.webmanifest" />
+    <link rel="icon" href="/favicon.ico" sizes="16x16 32x32 48x48" />
+    <link rel="icon" href="/icon.svg" type="image/svg+xml" />
+    <link rel="icon" href="/icon-192.png" type="image/png" sizes="192x192" />
+    <link rel="apple-touch-icon" href="/apple-touch-icon.png" />
+    <script type="module" crossorigin src="/assets/index-Djo_yF0a.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-DClBvfLL.css">
+  </head>
+  <body>
+    <div id="root"></div>
+    <noscript>Hub needs JavaScript.</noscript>
+  </body>
+</html>

package/web/dist/manifest.webmanifest

@@ -0,0 +1,18 @@
+{
+  "name": "Hub",
+  "short_name": "Hub",
+  "description": "The hub for your AI agent sessions: follow and steer them, answer permission requests, talk to them with Voice, and get notified when they need you.",
+  "id": "/",
+  "start_url": "/",
+  "scope": "/",
+  "display": "standalone",
+  "orientation": "portrait",
+  "theme_color": "#141413",
+  "background_color": "#141413",
+  "icons": [
+    { "src": "/icon-192.png", "sizes": "192x192", "type": "image/png", "purpose": "any" },
+    { "src": "/icon-512.png", "sizes": "512x512", "type": "image/png", "purpose": "any" },
+    { "src": "/icon-maskable-512.png", "sizes": "512x512", "type": "image/png", "purpose": "maskable" },
+    { "src": "/icon.svg", "sizes": "any", "type": "image/svg+xml", "purpose": "any" }
+  ]
+}

package/web/dist/sw.js

@@ -0,0 +1,151 @@
+// Hub service worker: shows push notifications, answers permissions from them, keeps the push
+// subscription known to the hub, and handles the actions of the page's "Voice mode on" notification.
+// No offline caching: every request goes to the network (the API must never be served stale).
+// Requests from here are same-origin with the device cookie (credentials: "same-origin"); POSTs carry the
+// Origin header browsers add to non-GET requests, which the hub's CSRF check accepts.
+self.addEventListener("install", () => self.skipWaiting())
+self.addEventListener("activate", (event) => event.waitUntil(self.clients.claim()))
+
+/** Kinds that wait for the user: stay on screen until handled. */
+const STICKY = new Set(["question", "permission", "blocked"])
+const VIBRATE = { question: [200, 100, 200], permission: [200, 100, 200], blocked: [200, 100, 200], failed: [300], test: [100] }
+
+const sessionURL = (sessionID) => (sessionID ? `/s/${encodeURIComponent(sessionID)}` : "/")
+
+async function postJSON(path, body) {
+  return fetch(path, {
+    method: "POST",
+    credentials: "same-origin",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(body),
+  })
+}
+
+/** The pending permission's summary (e.g. "bash: bun test"), fetched from the hub, never carried by the push. */
+async function permissionSummary(sessionID, requestID) {
+  try {
+    const res = await fetch(`/api/sessions/${encodeURIComponent(sessionID)}`, { credentials: "same-origin" })
+    if (!res.ok) return undefined
+    const session = await res.json()
+    const blocker = (session.blockers || []).find((b) => b && b.kind === "permission" && b.id === requestID)
+    return blocker ? String(blocker.summary || "a tool call") : undefined
+  } catch {
+    return undefined
+  }
+}
+
+self.addEventListener("push", (event) => {
+  let data = {}
+  try {
+    data = event.data ? event.data.json() : {}
+  } catch {
+    data = { title: "Hub", body: event.data ? event.data.text() : "" }
+  }
+  const sessionID = typeof data.sessionID === "string" ? data.sessionID : ""
+  const kind = typeof data.kind === "string" ? data.kind : "update"
+  const requestID = typeof data.requestID === "string" ? data.requestID : ""
+  event.waitUntil(
+    (async () => {
+      let body = data.body || ""
+      let actions = [{ action: "open", title: "Open" }]
+      // Answer from the notification only when the hub confirms the request is pending and we can show what it is.
+      if (kind === "permission" && sessionID && requestID) {
+        const summary = await permissionSummary(sessionID, requestID)
+        if (summary) {
+          body = summary.length > 140 ? `${summary.slice(0, 139)}…` : summary
+          actions = [
+            { action: "allow-once", title: "Allow once" },
+            { action: "reject", title: "Reject" },
+          ]
+        }
+      }
+      await self.registration.showNotification(data.title || "Hub", {
+        body,
+        tag: `${sessionID}:${kind}`,
+        renotify: kind !== "finished",
+        requireInteraction: STICKY.has(kind),
+        vibrate: VIBRATE[kind] || [100],
+        icon: "/icon-192.png",
+        badge: "/icon-192.png",
+        timestamp: Date.now(),
+        actions,
+        data: { url: sessionURL(sessionID), sessionID, kind, requestID },
+      })
+    })(),
+  )
+})
+
+async function focusOrOpen(url) {
+  const windows = await self.clients.matchAll({ type: "window", includeUncontrolled: true })
+  const client = windows.find((c) => new URL(c.url).origin === self.location.origin)
+  if (client) {
+    await client.focus()
+    // The page routes in place (keeps its SSE connection and audio unlock).
+    if (client.url !== url) client.postMessage({ type: "navigate", url })
+    return
+  }
+  await self.clients.openWindow(url)
+}
+
+/** Ends Voice mode: tells an open page, or (no page) turns conversation mode off at the hub itself. */
+async function endVoice(sessionID) {
+  const windows = await self.clients.matchAll({ type: "window", includeUncontrolled: true })
+  const pages = windows.filter((c) => new URL(c.url).origin === self.location.origin)
+  if (pages.length) {
+    for (const page of pages) page.postMessage({ type: "voice-end", sessionID })
+    return
+  }
+  if (!sessionID) return
+  const res = await postJSON(`/api/sessions/${encodeURIComponent(sessionID)}/conversation`, { on: false }).catch(() => undefined)
+  if (!res || !res.ok) await self.clients.openWindow(sessionURL(sessionID))
+}
+
+self.addEventListener("notificationclick", (event) => {
+  const note = event.notification
+  const data = note.data || {}
+  const url = new URL(data.url || "/", self.location.origin).href
+  note.close()
+  event.waitUntil(
+    (async () => {
+      // The ongoing "Voice mode on" notification (shown by the page): End or Open.
+      if (data.kind === "voice") {
+        if (event.action === "end") return endVoice(data.sessionID)
+        return focusOrOpen(url)
+      }
+      if ((event.action === "allow-once" || event.action === "reject") && data.sessionID && data.requestID) {
+        const decision = event.action === "allow-once" ? "once" : "reject"
+        const res = await postJSON(`/api/sessions/${encodeURIComponent(data.sessionID)}/permission`, { requestID: data.requestID, decision }).catch(() => undefined)
+        if (res && res.ok) return
+        // Not answered (signed out, already answered, hub down): show the session instead.
+        return focusOrOpen(url)
+      }
+      return focusOrOpen(url)
+    })(),
+  )
+})
+
+function urlBase64ToBytes(base64url) {
+  const pad = "=".repeat((4 - (base64url.length % 4)) % 4)
+  const raw = atob((base64url + pad).replace(/-/g, "+").replace(/_/g, "/"))
+  return Uint8Array.from(raw, (c) => c.charCodeAt(0))
+}
+
+// The browser replaced (or expired) the subscription: subscribe again and tell the hub, dropping the old one.
+self.addEventListener("pushsubscriptionchange", (event) => {
+  event.waitUntil(
+    (async () => {
+      const old = event.oldSubscription
+      let sub = event.newSubscription
+      if (!sub) {
+        const res = await fetch("/api/push/key", { credentials: "same-origin" })
+        if (!res.ok) return
+        const { publicKey } = await res.json()
+        sub = await self.registration.pushManager.subscribe({ userVisibleOnly: true, applicationServerKey: urlBase64ToBytes(publicKey) })
+      }
+      await postJSON("/api/push/subscribe", { subscription: sub.toJSON(), ...(old ? { oldEndpoint: old.endpoint } : {}) })
+    })().catch(() => {}),
+  )
+})
+
+// Pass-through fetch handler (keeps the app installable); never caches.
+self.addEventListener("fetch", () => {})

package/web/dist/vad-worklet.js

@@ -0,0 +1,27 @@
+// AudioWorklet for conversation mode: batches 128-sample render quanta into ~20 ms mono frames and posts
+// them to the page, where web/conversation-core.js runs the VAD. Loaded with audioWorklet.addModule().
+class VadTap extends AudioWorkletProcessor {
+  constructor() {
+    super()
+    this.size = Math.max(128, Math.round(sampleRate * 0.02))
+    this.buffer = new Float32Array(this.size)
+    this.filled = 0
+  }
+
+  process(inputs) {
+    const channel = inputs[0]?.[0]
+    if (channel) {
+      for (let i = 0; i < channel.length; i++) {
+        this.buffer[this.filled++] = channel[i]
+        if (this.filled === this.size) {
+          this.port.postMessage(this.buffer, [this.buffer.buffer])
+          this.buffer = new Float32Array(this.size)
+          this.filled = 0
+        }
+      }
+    }
+    return true
+  }
+}
+
+registerProcessor("vad-tap", VadTap)