@huynle/hub 0.9.0 → 0.9.2

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # Changelog
 
+## 0.9.2
+
+Webhooks can reach a named receiver on your own network without opening the hub to every private address. No
+migration is needed.
+
+### For operators
+- **`agents.webhooks.allowPrivateHosts`** in `hub.json`: a list of exact hostnames whose `https://` webhook URLs may
+  resolve to private addresses (a LAN-hosted app behind split DNS, such as a Brain on the same cluster). Everything
+  else keeps the public-host rule: no `http://`, no IPs, no other hosts or subdomains, and the check still runs before
+  every send, and webhooks to a listed host must use port 443. Use it instead of `allowPrivate`, which opens private
+  targets for every webhook on the hub. In Kubernetes, also allow egress to the receiver's private address.
+  [docs/launches.md → Where webhooks may go](docs/launches.md#where-webhooks-may-go)
+
+## 0.9.1
+
+**+ launch node on Windows.** `hubctl` installs `hub node` as a per-user logon task (Task Scheduler: no admin, no
+stored password, no window), and on Windows the node starts OpenCode's background service, so a Windows machine stays
+online and takes launches without OpenCode left open. Choose it in the console's Set up dialog or with
+`install.ps1?profile=launch-node`. All harnesses (Claude Code, Codex) stays coming soon on Windows. No migration is
+needed.
+
+### Machine setup
+- **+ launch node on Windows**: `install.ps1` takes `profile=launch-node` with a `~/…` or `C:/…` workspace root and
+  `activate=1` (passed to hubctl as `--workspace-root` and `--confirm-activation`), and the console's Set up dialog
+  offers **+ launch node** on Windows (workspace folder as `C:\Users\you\projects`, `C:/…` or `~/…`; network
+  folders refused; Start services now). **All harnesses** stays coming soon on Windows.
+- **hubctl: the `task-scheduler` service manager** (windows-x64): `hub node` runs as task `hub-node-<user>` at logon
+  (`conhost --headless hubctl.exe node run`, InteractiveToken, LeastPrivilege; the Task XML is UTF-16 in
+  `~/.local/state/hub/tasks`), restarted within a minute if it exits, controlled through a fixed `schtasks`/`taskkill`
+  allowlist with a locale-independent running check; `hub node install/uninstall` writes the XML and prints the
+  `schtasks` commands. `launch-node` plans on Windows; `full-harness` stays refused there.
+- **The node on Windows**: canonical `C:/…` paths in the launch protocol, node.json (`C:\…`, `C:/…`, `~/…`) and
+  worktrees; it starts OpenCode's background service when none runs, then keeps it warm; a node with no workspace
+  roots waits for node.json instead of exiting; its log goes to `~/.local/state/hub/node.log`. git commands that hang
+  are killed with their children; every spawn starts hidden.
+
 ## 0.9.0
 
 Three things in one release: **media in sessions** (screenshots, images, Mermaid diagrams, safe HTML previews, and

package/README.md

@@ -198,8 +198,9 @@ curl -fsSL 'https://hub.example.com/install.sh?profile=launch-node&root=~/projec
 ```
 
 ```powershell
-# Windows x64 (PowerShell 5.1 or 7): the same steps with hubctl-windows-x64.exe; OpenCode only for now
+# Windows x64 (PowerShell 5.1 or 7): the same steps with hubctl-windows-x64.exe
 irm 'https://hub.example.com/install.ps1' | iex
+irm 'https://hub.example.com/install.ps1?profile=launch-node&root=C:/Users/me/projects&activate=1' | iex
 ```
 
 Query options (each optional, at most once; anything else answers 400 with the reason):
@@ -207,11 +208,12 @@ Query options (each optional, at most once; anything else answers 400 with the r
 | Key | Values | Default |
 |---|---|---|
 | `profile` | `session-only` (OpenCode only), `launch-node` (+ a launch node), `full-harness` (all harnesses) | `session-only` |
-| `root` | the launch node's workspace root, only with `launch-node`: up to 200 characters of `A-Z a-z 0-9 . _ / ~ -`, starting with `/` or `~/`, no `..` or `//` | `~/projects` |
+| `root` | the launch node's workspace root, only with `launch-node`: up to 200 characters of `A-Z a-z 0-9 . _ / ~ -`, starting with `/` or `~/` (`install.ps1`: `~/` or a drive path such as `C:/`, forward slashes), no `..` or `//` | `~/projects` |
 | `activate` | `1` starts the services now (`--confirm-activation`), `0` leaves them stopped | `0` |
 
-`install.ps1` takes only `profile=session-only` and `activate=0` for now (hubctl does not install user services on
-Windows yet) and runs on x64 Windows only (no arm64 build yet). It never closes your PowerShell window: a failure is
+`install.ps1` takes `session-only` and `launch-node` (the node runs as a per-user logon task); `full-harness` answers
+400 for now (Claude Code and Codex need user services hubctl does not install on Windows yet). It runs on x64
+Windows only (no arm64 build yet). It never closes your PowerShell window: a failure is
 one red `hub setup:` line. After a successful apply it adds `%USERPROFILE%\.local\bin` to your user PATH (once; open a
 new terminal for other windows). The scripts carry
 the hub's public URL, version and the validated choices; never a token. They download hubctl from this version's
@@ -1993,6 +1995,7 @@ in the file).
 | `agents.never` | permission patterns (`action[:glob]`) no agent may ever approve, for every user, checked before any grant; see [Agent actions and grants](#agent-actions-and-grants) |
 | `agents.launches` | per-user launch caps `{maxQueued?, maxActive?, perHour?}` (defaults 50, 4, 60) and `lostAfterMinutes?` (0–1440 or false, default 5: a running launch the same node instance stops reporting, with its session gone, ends lost; 0/false: never); see [docs/launches.md](docs/launches.md#placement-and-caps) |
 | `agents.webhooks.allowPrivate` | `true` lets webhooks target `http://`, loopback and private hosts (self-hosted receivers); see [docs/launches.md](docs/launches.md#where-webhooks-may-go) |
+| `agents.webhooks.allowPrivateHosts` | exact hostnames (at most 50) whose `https://` webhook URLs may resolve to private addresses, e.g. a LAN-hosted app behind split DNS; nothing else is opened; see [docs/launches.md](docs/launches.md#where-webhooks-may-go) |
 
 Server fields: env vars (`HUB_HOST`, `HUB_PORT`, `HUB_PUBLIC_URL`, `HUB_STATE_DIR`) > hub.json >
 defaults. Speech: phone settings > hub.json > env vars. Values are checked like the phone's speech

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Hub: a harness-agnostic central hub your AI agent harnesses connect to (OpenCode first). Follow, steer and stop sessions from your phone or browser, with notifications, optional hands-free Voice and a self-hostable server.",
   "license": "MIT",
   "author": "Huy Le",

package/packages/claude-code/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-claude-code",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "private": true,
   "description": "The Claude Code hooks spoke: per-user daemon, hook bridge, plugin dir, `hub claude` wrapper and daemon-backed MCP server (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/claude-code/src/wrapper.ts

@@ -57,7 +57,7 @@ function spawnDaemon(io: ClaudeIo): void {
   ensurePrivateDir(dir)
   const log = openSync(path.join(dir, "daemon.log"), "a", 0o600)
   try {
-    const child = spawn(io.program.execPath, [io.program.entry, "claude-code", "daemon"], { detached: true, stdio: ["ignore", log, log], env: { ...io.env, BUN_BE_BUN: "1" } })
+    const child = spawn(io.program.execPath, [io.program.entry, "claude-code", "daemon"], { detached: true, windowsHide: true, stdio: ["ignore", log, log], env: { ...io.env, BUN_BE_BUN: "1" } })
     child.on("error", () => {})
     child.unref()
   } finally {
@@ -100,7 +100,7 @@ async function prepare(io: ClaudeIo, socket: string): Promise<string | undefined
 /** Runs `bin` with the terminal; resolves with its exit code (128 + signal number when a signal ended it). */
 function spawnClaude(bin: string, args: readonly string[], env: Env, stderr: (s: string) => void): Promise<number> {
   return new Promise((resolve) => {
-    const child = spawn(bin, args, { stdio: "inherit", env: env as NodeJS.ProcessEnv })
+    const child = spawn(bin, args, { stdio: "inherit", windowsHide: true, env: env as NodeJS.ProcessEnv })
     // The terminal sends Ctrl-C to Claude Code too: it decides what that means; this process keeps waiting.
     const ignore = () => {}
     const forward = () => child.kill("SIGTERM")