""" Hub web application — serves the MeshBay SPA and static assets. The SPA (Preact + htm) handles: - Authentication (login, register, token refresh) - Group discovery and browsing - WebRTC connection to nodes for P2P file transfer - Dark/light theme with system preference detection Static files are served from meshbay_hub/static/ via Starlette StaticFiles. The root route (/) returns the SPA HTML shell. """ import hashlib from pathlib import Path from fastapi import APIRouter from fastapi.responses import HTMLResponse STATIC_DIR = Path(__file__).parent.parent / "static" router = APIRouter(tags=["webapp"]) # Assets the shell pulls in, in load order. Everything else is imported by # app.js and rides on the same query string via window.__MB_ASSET_V. # Every module the page loads. A file missing from here is a file whose change # does not move the URL, so a browser holding the old one never asks for it — # which is the failure this list exists to prevent, and it is silent. _ASSETS = ("style.css", "keyderive.js", "crypto.js", "transport.js", "app.js", "i18n.js", "downloads.js", "transfers.js", "zipstream.js", "platform.js", "meshbay-m.png", # Split out of app.js by the group-page refactor — each imported by # app.js or group-page.js, so a change to any of them is a change # to what the browser must fetch. "icon.js", "file-utils.js", "hub-client.js", "apps.js", "chat-app.js", "files-app.js", "video-player.js", "video-app.js", "group-settings.js", "group-page.js") def _asset_version() -> str: """A fingerprint of what we are actually serving. `Cache-Control: no-cache` only binds a browser that asks. One that cached app.js *before* that header existed applies heuristic freshness — a fraction of the file's age, which for a file dated weeks ago is days — and never asks at all. It then runs last week's player against this week's node for as long as that lasts, which is indistinguishable from the fix not working. Changing the URL is the only thing that reaches such a browser, and a content hash changes it exactly when the content changes. """ h = hashlib.sha256() for name in _ASSETS: path = STATIC_DIR / name if path.exists(): h.update(path.read_bytes()) return h.hexdigest()[:12] ASSET_V = _asset_version() @router.get("/app", response_class=HTMLResponse) async def app_root(): return HTMLResponse(_HTML) @router.get("/app/{path:path}", response_class=HTMLResponse) async def app_catchall(path: str): return HTMLResponse(_HTML) @router.get("/", response_class=HTMLResponse) async def index(): return HTMLResponse(_HTML) _HTML = """\