@lacneu/atrium 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Olivier Neu
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,129 @@
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="docs/assets/atrium-mark-dark.svg">
+    <img alt="" src="docs/assets/atrium-mark-light.svg" width="76" height="76">
+  </picture>
+</p>
+
+<h1 align="center">Atrium</h1>
+
+<p align="center">A clean, self-hostable, multi-user web chat for your AI agents — one UI across agent gateways.</p>
+
+<p align="center">
+  <img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-blue">
+  <img alt="Status: early / 0.x" src="https://img.shields.io/badge/status-early%20%2F%200.x-orange">
+  <!-- After the first push (once CI has run once), uncomment the CI badge:
+  <img alt="CI" src="https://github.com/lacneu/atrium/actions/workflows/ci.yml/badge.svg"> -->
+</p>
+
+An open-source, self-hostable web chat UI for **AI agent gateways**. It gives a
+team a clean multi-user chat front end across one or more gateways, with streaming
+replies, file exchange, per-user agent routing, and a built-in observability
+surface. **OpenClaw is the first supported provider; Hermes is next** — each
+provider lives behind a bridge adapter, so the UI stays the same as gateways are
+added.
+
+> Atrium is **provider-agnostic by design** and a community project — not
+> affiliated with or endorsed by any gateway vendor. You bring your own gateway
+> (OpenClaw today, Hermes next); Atrium is the chat surface in front of it.
+
+## Status
+
+Early but functional, designed as a public, forkable foundation. The project is
+`0.x`: the bridge protocol and APIs are documented and versioned, but breaking
+changes can still happen before `1.0`.
+
+## What it is
+
+Agent gateways are event-driven and best driven over a WebSocket: a single user
+turn can produce multiple runs, intermediate replies, tool output, generated
+media, auto-compaction restarts, and messages that arrive after a browser
+reconnect. Atrium embraces that model instead of fighting it:
+
+- A **React + Vite** front end (TypeScript, built on assistant-ui).
+- A **Convex** self-hosted backend (TypeScript functions + reactive database)
+  that owns chats, messages, routing, auth, and the observability data.
+- A **Node/TypeScript bridge** with a **per-provider adapter** (OpenClaw today,
+  Hermes planned) that holds a persistent operator WebSocket to the gateway,
+  normalizes the version-specific event stream into a small stable shape, and
+  relays turns to and from Convex. The provider is the only vendor-coupled layer.
+- An external **agent gateway** (OpenClaw, or Hermes when available) that actually
+  runs the agents. Atrium never runs the model itself — you bring your own gateway.
+
+The front end never parses raw gateway frames; it subscribes to Convex, which is
+fed by the bridge. The result is a stable UI even as providers and versions evolve.
+
+```text
+Browser ──▶ Convex (queries/mutations, reactive)
+  ▲             │  schedules an outbound turn
+  │ live        ▼
+  └──────  Bridge ◀──▶ agent gateway (WebSocket: OpenClaw today, Hermes next)
+        (ingests normalized events back into Convex)
+```
+
+See [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) for the full picture.
+
+## Features
+
+- Google and Microsoft Entra sign-in (via `@convex-dev/auth`), restricted to
+  allowed email domains; the first sign-in from an allowed domain becomes admin.
+- Multi-user, multi-agent, multi-instance routing: each user is routed to the
+  gateway instance and agent assigned to them.
+- Streaming assistant replies with a stable contract (deltas, snapshots,
+  finalize, run status, tool status, media), resilient to provider and version
+  differences, empty/duplicate finals, follow-on runs, and auto-compaction.
+- File exchange in both directions (inbound attachments, outbound generated
+  media served from Convex storage — server filesystem paths never reach the
+  browser).
+- A key-authed observability API (`/api/v1`) and an MCP server (`mcp/`) for
+  traces, KPIs, anomalies, and diagnostics — metadata only, no chat content.
+- Full internationalization (French default, English) via Paraglide JS.
+
+## Quickstart
+
+The frontend and bridge ship as Docker images; Convex runs self-hosted. The
+canonical, env-driven deployment guide (Docker Compose and Helm) lives in
+[`deploy/`](deploy/):
+
+```bash
+cd deploy/compose
+cp .env.example .env          # fill every required value (see comments inside)
+docker compose up -d          # convex backend + dashboard + frontend + bridge
+./bootstrap-env.sh            # push the Convex-scoped vars (auth, bridge wiring)
+```
+
+Open the app at your frontend origin and sign in. See
+[`deploy/README.md`](deploy/README.md) for the full guide, including the
+two-environment-scope gotcha and the stateful/stateless lifecycle.
+
+For local development (no Docker), see [docs/DEVELOPMENT.md](docs/DEVELOPMENT.md).
+
+## Documentation
+
+- [Architecture](docs/ARCHITECTURE.md) — components, data flow, auth.
+- [Development](docs/DEVELOPMENT.md) — local dev workflow, tests, Convex, Vite.
+- [Configuration](docs/CONFIGURATION.md) — environment variable reference.
+- [Bridge protocol](docs/BRIDGE_PROTOCOL.md) — bridge ↔ Convex ↔ gateway contract.
+- [Deployment](docs/DEPLOYMENT.md) → points to [`deploy/`](deploy/).
+- [OpenClaw version compatibility](docs/OPENCLAW_VERSION_COMPAT.md).
+- [Compliance / Trust Center](compliance/) — SOC 2 control mapping (incl. the
+  metadata-only `/api/v1` surface) + the software-vs-operator
+  shared-responsibility model.
+- [Vision](VISION.md) · [Changelog](CHANGELOG.md) ·
+  [Third-party notices](THIRD_PARTY_NOTICES.md) ·
+  [Contributing & agent guide](AGENTS.md).
+
+## Security
+
+Gateway tokens and device identities live only in the bridge process — never in
+Convex tables and never in the browser. Outbound media is served through Convex
+storage with no server paths exposed. See [SECURITY.md](SECURITY.md).
+
+## Contributing
+
+Contributions are welcome — see [CONTRIBUTING.md](CONTRIBUTING.md) and the
+[Code of Conduct](CODE_OF_CONDUCT.md).
+
+## License
+
+MIT. See [LICENSE](LICENSE).

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@lacneu/atrium",
+  "version": "0.1.0",
+  "description": "Atrium — public, self-hostable Convex-backed chat UI for OpenClaw. Ships an origin-agnostic static bundle (Convex URL injected at runtime via /config.json).",
+  "license": "MIT",
+  "type": "module",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "dev": "vite",
+    "dev:convex": "convex dev",
+    "build": "vite build",
+    "paraglide:compile": "paraglide-js compile --project ./project.inlang --outdir ./src/paraglide --emit-ts-declarations --strategy localStorage baseLocale",
+    "typecheck": "npm run paraglide:compile && tsc --noEmit",
+    "test": "npm run paraglide:compile && npm run i18n:check && vitest run",
+    "i18n:check": "npm run i18n:check-parity && npm run i18n:check-literals",
+    "i18n:check-parity": "node scripts/i18n-check-parity.mjs",
+    "i18n:check-literals": "node scripts/i18n-check-literals.mjs",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "@assistant-ui/react": "^0.14.13",
+    "@assistant-ui/react-markdown": "^0.14.1",
+    "@auth/core": "^0.37.0",
+    "@convex-dev/auth": "^0.0.80",
+    "@dnd-kit/core": "^6.3.1",
+    "@dnd-kit/modifiers": "^9.0.0",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@dnd-kit/utilities": "^3.2.2",
+    "@inlang/paraglide-js": "^2.18.2",
+    "@tailwindcss/vite": "^4.3.0",
+    "@tanstack/react-router": "^1.170.11",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "convex": "^1.39.1",
+    "lucide-react": "^1.17.0",
+    "radix-ui": "^1.4.3",
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6",
+    "remark-gfm": "^4.0.1",
+    "tailwind-merge": "^3.6.0",
+    "tailwindcss": "^4.3.0",
+    "tw-animate-css": "^1.4.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@edge-runtime/vm": "^5.0.0",
+    "@tanstack/react-router-devtools": "^1.167.0",
+    "@types/node": "^25.9.1",
+    "@types/react": "^19.2.15",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.2",
+    "convex-test": "^0.0.53",
+    "shadcn": "^4.10.0",
+    "typescript": "^6.0.3",
+    "vite": "^8.0.14",
+    "vitest": "^4.1.8"
+  }
+}