@runcore-sh/runcore 0.3.1 → 0.4.0

package/public/nerve/sw.js

@@ -0,0 +1,84 @@
+// Core Nerve — Service Worker
+// Caches app shell, handles push notifications
+
+const CACHE_NAME = "nerve-v1";
+const SHELL = ["/nerve"];
+
+// Install: cache the app shell
+self.addEventListener("install", (e) => {
+  e.waitUntil(
+    caches.open(CACHE_NAME).then((c) => c.addAll(SHELL))
+  );
+  self.skipWaiting();
+});
+
+// Activate: clean old caches
+self.addEventListener("activate", (e) => {
+  e.waitUntil(
+    caches.keys().then((keys) =>
+      Promise.all(keys.filter((k) => k !== CACHE_NAME).map((k) => caches.delete(k)))
+    )
+  );
+  self.clients.claim();
+});
+
+// Fetch: cache-first for shell, network-only for API
+self.addEventListener("fetch", (e) => {
+  const url = new URL(e.request.url);
+
+  // API calls always go to network
+  if (url.pathname.startsWith("/api/")) return;
+
+  e.respondWith(
+    caches.match(e.request).then((cached) => {
+      if (cached) return cached;
+      return fetch(e.request).then((res) => {
+        if (res.ok && e.request.method === "GET") {
+          const clone = res.clone();
+          caches.open(CACHE_NAME).then((c) => c.put(e.request, clone));
+        }
+        return res;
+      });
+    })
+  );
+});
+
+// Push: show notification when server sends one
+self.addEventListener("push", (e) => {
+  if (!e.data) return;
+
+  let payload;
+  try {
+    payload = e.data.json();
+  } catch {
+    payload = { title: "Core", body: e.data.text() };
+  }
+
+  const options = {
+    body: payload.body || "",
+    icon: "/public/nerve/icon-192.svg",
+    badge: "/public/nerve/icon-192.svg",
+    vibrate: [100, 50, 100],
+    data: payload.data || {},
+    actions: [{ action: "open", title: "Open" }],
+    tag: "nerve-" + (payload.data?.state ? Object.values(payload.data.state).join("-") : "update"),
+    renotify: true,
+  };
+
+  e.waitUntil(self.registration.showNotification(payload.title || "Core", options));
+});
+
+// Notification click: open the nerve PWA
+self.addEventListener("notificationclick", (e) => {
+  e.notification.close();
+  e.waitUntil(
+    self.clients.matchAll({ type: "window" }).then((clients) => {
+      for (const client of clients) {
+        if (client.url.includes("/nerve") && "focus" in client) {
+          return client.focus();
+        }
+      }
+      return self.clients.openWindow("/nerve");
+    })
+  );
+});

package/public/observatory.html

@@ -915,6 +915,9 @@
 </main>
 
 <script>
+var sessionId = sessionStorage.getItem("dash_sid");
+function authHeaders() { return sessionId ? { "x-session-id": sessionId } : {}; }
+fetch('/api/tier', { headers: authHeaders() }).then(r=>{ if(r.status===401){location.href='/';return null;} return r.json(); }).then(d=>{if(d&&(!d.capabilities||!d.capabilities.spawning))location.href='/'}).catch(()=>{});
 (function() {
   // --- Helpers ---
 
@@ -941,7 +944,8 @@
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeoutMs);
     try {
-      const res = await fetch(url, { signal: controller.signal });
+      const res = await fetch(url, { signal: controller.signal, headers: authHeaders() });
+      if (res.status === 401) { window.location.href = '/'; return null; }
       if (!res.ok) throw new Error(res.statusText);
       return res.json();
     } finally {

package/public/ops.html

@@ -652,6 +652,9 @@
 </main>
 
 <script>
+var sessionId = sessionStorage.getItem("dash_sid");
+function authHeaders() { return sessionId ? { "x-session-id": sessionId } : {}; }
+fetch('/api/tier', { headers: authHeaders() }).then(r=>{ if(r.status===401){location.href='/';return null;} return r.json(); }).then(d=>{if(d&&(!d.capabilities||!d.capabilities.spawning))location.href='/'}).catch(()=>{});
 (function() {
   const POLL_INTERVAL = 15000;
   let activitySince = 0;
@@ -704,7 +707,8 @@
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeoutMs);
     try {
-      const res = await fetch(url, { signal: controller.signal });
+      const res = await fetch(url, { signal: controller.signal, headers: authHeaders() });
+      if (res.status === 401) { window.location.href = '/'; return null; }
       if (!res.ok) throw new Error(res.statusText);
       return res.json();
     } finally {
@@ -774,7 +778,7 @@
         btn.disabled = true;
         btn.textContent = 'Restarting...';
         try {
-          await fetch('/api/ops/sidecars/' + name + '/restart', { method: 'POST' });
+          await fetch('/api/ops/sidecars/' + name + '/restart', { method: 'POST', headers: authHeaders() });
           // Refresh after short delay to let sidecar come up
           setTimeout(() => refreshAll(), 1500);
         } catch {
@@ -784,6 +788,32 @@
     });
   }
 
+  function humanizeOps(summary, source) {
+    if (!summary) return "";
+    var s = summary;
+    var cm = s.match(/^Agent task "(.+?)" completed/);
+    if (cm) return "\u2705 " + cm[1];
+    var fm = s.match(/^Agent task "(.+?)" failed.*?\n(?:Output:\n)?(.+)/s);
+    if (fm) return "\u274C " + fm[1] + " \u2014 " + fm[2].trim().slice(0, 60);
+    var fs = s.match(/^Agent task "(.+?)" failed/);
+    if (fs) return "\u274C " + fs[1];
+    var sp = s.match(/^Spawn (\d+) agent\(s\): (.+)/);
+    if (sp) return "\u{1F680} Starting " + sp[1] + ": " + sp[2];
+    var wm = s.match(/^Working on (\d+) task\(s\): (.+)/);
+    if (wm) return "\u{1F3C3} " + wm[1] + " running: " + wm[2];
+    if (s.startsWith("Batch done")) return "\u{1F3C1} Batch complete";
+    var lm = s.match(/^LLM call: "(.+?)"/);
+    if (lm) return "\u{1F4AD} " + lm[1];
+    if (s.includes("credits exhausted") || s.includes("Credits exhausted")) return "\u{1F4B8} Credits used up";
+    var qm = s.match(/New queue item (DASH-\d+).*?"(.+?)"/);
+    if (qm) return "\u{1F4CB} " + qm[2];
+    if (s.includes("new email")) return "\u{1F4E7} " + s;
+    if (s.includes("Compacted conversation")) return "\u{1F4E6} Memory compacted";
+    var pe = s.match(/^Poll error: (.+)/);
+    if (pe) return "\u{1F50C} " + pe[1].slice(0, 60);
+    return s.length > 100 ? s.slice(0, 97) + "..." : s;
+  }
+
   function renderActivity(data) {
     if (data.activities.length > 0) {
       allActivities = allActivities.concat(data.activities);
@@ -805,7 +835,7 @@
       <div class="activity-item">
         <span class="activity-time">${fmtTime(a.timestamp)}</span>
         <span class="activity-source" data-s="${escHtml(a.source)}">${escHtml(a.source)}</span>
-        <span class="activity-text">${escHtml(a.summary)}</span>
+        <span class="activity-text">${escHtml(humanizeOps(a.summary, a.source))}</span>
       </div>
     `).join('');
   }

package/public/pulse.html

@@ -229,6 +229,9 @@
 </div>
 
 <script>
+var sessionId = sessionStorage.getItem("dash_sid");
+function authHeaders() { return sessionId ? { "x-session-id": sessionId } : {}; }
+fetch('/api/tier', { headers: authHeaders() }).then(r=>{ if(r.status===401){location.href='/';return null;} return r.json(); }).then(d=>{if(d&&(!d.capabilities||!d.capabilities.vault))location.href='/'}).catch(()=>{});
 // --- State ---
 const state = {
   sense: 0.3,

package/public/registry.html

@@ -399,12 +399,16 @@
 </div>
 
 <script>
+var sessionId = sessionStorage.getItem("dash_sid");
+function authHeaders() { return sessionId ? { "x-session-id": sessionId } : {}; }
+fetch('/api/tier', { headers: authHeaders() }).then(r=>{ if(r.status===401){location.href='/';return null;} return r.json(); }).then(d=>{if(d&&(!d.capabilities||!d.capabilities.integrations))location.href='/'}).catch(()=>{});
 (function() {
   let currentData = null;
 
   async function fetchData() {
     try {
-      const res = await fetch("/api/capabilities");
+      const res = await fetch("/api/capabilities", { headers: authHeaders() });
+      if (res.status === 401) { window.location.href = '/'; return null; }
       if (!res.ok) throw new Error("HTTP " + res.status);
       return await res.json();
     } catch (err) {
@@ -593,7 +597,7 @@
         try {
           await fetch("/api/settings", {
             method: "PUT",
-            headers: { "Content-Type": "application/json" },
+            headers: Object.assign({ "Content-Type": "application/json" }, authHeaders()),
             body: JSON.stringify({ capabilities: { [capId]: enabled } })
           });
           await refresh();

package/public/roadmap.html

@@ -496,6 +496,9 @@
 </div>
 
 <script>
+var sessionId = sessionStorage.getItem("dash_sid");
+function authHeaders() { return sessionId ? { "x-session-id": sessionId } : {}; }
+fetch('/api/tier', { headers: authHeaders() }).then(r=>{ if(r.status===401){location.href='/';return null;} return r.json(); }).then(d=>{if(d&&(!d.capabilities||!d.capabilities.spawning))location.href='/'}).catch(()=>{});
 // --- View switching (global scope for inline onclick) ---
 let currentView = 'roadmap';
 let rearviewLoaded = false;
@@ -526,7 +529,8 @@ async function loadRearview(hours) {
   container.innerHTML = '<div class="loading">Loading recent activity...</div>';
 
   try {
-    const res = await fetch('/api/roadmap/recent?hours=' + hours);
+    const res = await fetch('/api/roadmap/recent?hours=' + hours, { headers: authHeaders() });
+    if (res.status === 401) { window.location.href = '/'; return; }
     if (!res.ok) throw new Error('Failed to load');
     const data = await res.json();
     rearviewLoaded = true;
@@ -584,7 +588,8 @@ function renderRearview(data, container) {
 
   // --- Fetch & parse ---
   async function load() {
-    const res = await fetch('/api/roadmap');
+    const res = await fetch('/api/roadmap', { headers: authHeaders() });
+    if (res.status === 401) { window.location.href = '/'; return; }
     if (!res.ok) { document.getElementById('loading').textContent = 'Failed to load roadmap'; return; }
     data = await res.json();
     activeStreams = new Set(data.streams.map(s => s.id));

package/public/sw.js

@@ -0,0 +1,65 @@
+// Core service worker — cache-first for app shell, network-first for API
+const CACHE_NAME = "core-v1";
+const APP_SHELL = [
+  "/",
+  "/public/manifest.json",
+];
+
+// Install: cache app shell
+self.addEventListener("install", (e) => {
+  e.waitUntil(
+    caches.open(CACHE_NAME).then((cache) => cache.addAll(APP_SHELL))
+  );
+  self.skipWaiting();
+});
+
+// Activate: clean old caches
+self.addEventListener("activate", (e) => {
+  e.waitUntil(
+    caches.keys().then((keys) =>
+      Promise.all(keys.filter((k) => k !== CACHE_NAME).map((k) => caches.delete(k)))
+    )
+  );
+  self.clients.claim();
+});
+
+// Fetch: network-first for API, cache-first for shell/static
+self.addEventListener("fetch", (e) => {
+  const url = new URL(e.request.url);
+
+  // Skip non-GET, SSE, and cross-origin
+  if (e.request.method !== "GET") return;
+  if (url.origin !== self.location.origin) return;
+  if (e.request.headers.get("accept") === "text/event-stream") return;
+
+  // API calls: network-first, cache fallback for reads
+  if (url.pathname.startsWith("/api/")) {
+    e.respondWith(
+      fetch(e.request)
+        .then((res) => {
+          // Cache successful GET responses for offline fallback
+          if (res.ok) {
+            const clone = res.clone();
+            caches.open(CACHE_NAME).then((cache) => cache.put(e.request, clone));
+          }
+          return res;
+        })
+        .catch(() => caches.match(e.request))
+    );
+    return;
+  }
+
+  // App shell & static: cache-first, network fallback
+  e.respondWith(
+    caches.match(e.request).then((cached) => {
+      if (cached) return cached;
+      return fetch(e.request).then((res) => {
+        if (res.ok) {
+          const clone = res.clone();
+          caches.open(CACHE_NAME).then((cache) => cache.put(e.request, clone));
+        }
+        return res;
+      });
+    })
+  );
+});