Spaces:

pollen-robotics
/

Reachy_Mini

Running

App Files Files Community

specify-compute-module

#11

by FabienDanieau - opened Mar 18

base: refs/heads/main

←

from: refs/pr/11

Discussion Files changed

+182

-2796

Files changed (16) hide show

.env.example +0 -58
.gitignore +0 -2
docs/APP_ICON_CONVENTION.md +0 -113
package.json +0 -1
scripts/evaluate-prompt-v2.py +0 -445
server/categories.js +0 -212
server/categorize.js +0 -426
server/categoryCache.js +0 -290
server/index.js +40 -608
server/openaiEphemeral.js +0 -268
src/context/AppsContext.jsx +1 -11
src/pages/Buy.jsx +17 -57
src/pages/Download.jsx +79 -122
src/pages/GettingStarted.jsx +36 -91
src/pages/Home.jsx +8 -56
yarn.lock +1 -36

.env.example DELETED Viewed

@@ -1,58 +0,0 @@
-# Reachy Mini Website server env vars
-#
-# Copy this file to `.env` and fill in the values for local dev.
-# In production (HF Space), set these from the Space's "Settings →
-# Variables and secrets" panel, NOT from a committed `.env`.
-# (`.env` is gitignored.)
-# -----------------------------------------------------------------------------
-# Server
-# -----------------------------------------------------------------------------
-# Port the Express server listens on. Defaults to 7860 (HF Space convention).
-# PORT=7860
-# -----------------------------------------------------------------------------
-# OAuth (used by /api/oauth-config and the in-iframe sign-in flow)
-# -----------------------------------------------------------------------------
-# Set in the Space when `hf_oauth: true` is in README.md.
-# OAUTH_CLIENT_ID=
-# OAUTH_SCOPES=openid profile
-# -----------------------------------------------------------------------------
-# HF Inference Providers (used by /api/js-apps category inference)
-# -----------------------------------------------------------------------------
-# Required for category inference. A standard READ token is enough -
-# Inference Providers access is on by default for FREE/PRO tokens.
-# Without this, /api/js-apps still works but every entry will have
-# `categories: null` (the route logs a warning at startup).
-HF_TOKEN=
-# Dataset where the inferred-categories cache is persisted.
-# Defaults to `tfrere/reachy-mini-app-categories` (per-user namespace,
-# auto-created on first commit). Override to e.g.
-# `pollen-robotics/reachy-mini-app-categories` once the org dataset
-# exists and the HF_TOKEN has write access to it.
-# HF_CATEGORIES_DATASET=tfrere/reachy-mini-app-categories
-# -----------------------------------------------------------------------------
-# OpenAI Realtime ephemeral keys (used by /api/openai/ephemeral)
-# -----------------------------------------------------------------------------
-# Master OpenAI API key. Used SERVER-SIDE only to mint short-lived
-# (~1 minute) `client_secret.value` tokens for the Reachy Mini mobile
-# shell's voice conversation feature. NEVER expose this to a client
-# bundle. The mobile client never sees this value: it posts its HF
-# Bearer token, gets back an ephemeral session key scoped to a single
-# OpenAI Realtime session.
-OPENAI_API_KEY=
-# Optional: pin the Realtime model id. Defaults to
-# `gpt-4o-realtime-preview-2024-12-17`. Bumping this requires
-# coordinating with the mobile shell, which is built against a
-# specific protocol version.
-# OPENAI_REALTIME_MODEL=gpt-4o-realtime-preview-2024-12-17
-# Optional: max ephemeral mints per HF user per rolling hour.
-# Defaults to 60. The in-memory sliding-window limiter resets on
-# Space restart; v1 takes the trade-off, replace with a shared KV
-# the day we need multi-replica fairness.
-# OPENAI_EPHEMERAL_RATE_LIMIT_PER_HOUR=60

.gitignore CHANGED Viewed

@@ -22,5 +22,3 @@ dist-ssr
 *.njsproj
 *.sln
 *.sw?
-.env

 *.njsproj
 *.sln
 *.sw?

docs/APP_ICON_CONVENTION.md DELETED Viewed

@@ -1,113 +0,0 @@
-# App icon convention
-> Status: convention v1
-> Audience: authors shipping a Reachy Mini app to the Hugging Face Hub
-> Implemented by: `reachy-mini-website` catalog server (this repo) +
-> `reachy_mini_mobile_app`, `reachy_mini_desktop_app`
-> Source of truth: `server/index.js` → `findIconUrl()`
-This document specifies how a Reachy Mini app declares a custom icon.
-Apps that don't follow it keep working - the surface falls back to the
-front-matter `emoji:` glyph, which is the existing behaviour.
----
-## 1. The convention in three lines
-To ship a custom icon for your Reachy Mini app:
-1. Commit `icon.svg` (preferred) **or** `icon.png` at the root of your
-   Hugging Face Space repository.
-2. That's it. Within ~5 minutes (the catalog cache TTL) the mobile
-   shell, the desktop app and the website surface your icon
-   automatically, replacing the README front-matter emoji.
-3. If both files are present, `icon.svg` wins.
-No README change required. No tag to add. No PR to file against this
-repo. The catalog server scans the file list once per refresh and
-publishes a resolved URL on the app entry; every client consumes it.
----
-## 2. Why a file convention and not `cardData.thumbnail`
-HF Spaces support a `thumbnail:` field in README front-matter, but:
-- `thumbnail` is full-bleed marketing artwork (typically 1200x630),
-  not a square avatar. Scaling it to a 22 px or 44 px tile produces
-  muddy thumbnails.
-- We want app authors to ship a dedicated, optimised glyph they
-  control without learning the HF metadata schema.
-- SVG support means the icon scales cleanly across every mount point
-  (rail tile, pinned grid, iframe header) from a single asset.
-`thumbnail:` keeps its existing role (banner artwork on the Space's
-HF page) and is not consulted by this resolution path.
----
-## 3. Format & dimension recommendations
-| Property | Recommended | Hard requirement |
-|----------|-------------|------------------|
-| Format | `icon.svg` (vector) | `icon.svg` or `icon.png` |
-| Aspect ratio | 1:1 (square) | Renderers crop with `object-fit: contain`, but non-square icons render with letterboxing - prefer a true square |
-| Min PNG size | 256x256 | None enforced. PNGs below 64x64 will look soft on the pinned grid (44 px on retina ≈ 88 effective px) |
-| Background | Transparent OR solid colour | None - your call. Renderers don't add their own plate, so an icon with no background renders directly on the tile colour |
-| Padding | Bake ~10% inner padding into the asset | None - but icons that bleed edge-to-edge will touch the tile's rounded corners |
-| Light/dark variants | Single asset that works on both | None - if you must, ship two SVGs and use `prefers-color-scheme` inside the SVG via CSS |
-### Style notes
-- **Iconic, not photographic.** A solid filled silhouette reads at
-  22 px; a screenshot doesn't.
-- **High contrast against `background.paper`.** The mobile app paints
-  the tile background with the surface colour (very light grey on
-  light, near-black on dark). A pure white icon disappears on light.
-- **No drop shadow** baked into the asset. The renderer doesn't add
-  one either, and a baked shadow won't scale across sizes.
----
-## 4. How resolution works (for the curious)
-1. The catalog server calls
-   `https://huggingface.co/api/spaces?filter=reachy_mini&full=true`.
-   With `full=true`, the HF Hub returns `siblings: [{ rfilename: ... }]`
-   for every Space - the complete file list.
-2. For each app, `findIconUrl()` (in `server/index.js`) scans the
-   list for root-level filenames matching `ICON_CANDIDATES` in order
-   (`icon.svg` → `icon.png`).
-3. The first match becomes:
-   ```
-   https://huggingface.co/spaces/<author>/<repo>/resolve/main/<filename>
-   ```
-   `resolve/main/` (not `raw/main/`) so LFS pointers follow through
-   transparently and the `Content-Type` is set from the extension,
-   which `<img>` needs.
-4. The URL is published on the app entry as a top-level `iconUrl`
-   field. `null` when neither candidate exists.
-5. Clients (`reachy_mini_mobile_app`, `reachy_mini_desktop_app`) read
-   `iconUrl` and render an `<img>` when present, falling back to the
-   front-matter emoji otherwise. A runtime image load failure
-   re-falls-back to the emoji without a refresh.
-The whole resolution path is server-side, behind the 5-minute catalog
-cache. Adding 100 more apps adds zero per-client probes.
----
-## 5. Adding new icon formats
-If you need to support a new format (say, `icon.webp`), edit
-`ICON_CANDIDATES` in `server/index.js`:
-```js
-const ICON_CANDIDATES = ['icon.svg', 'icon.png', 'icon.webp'];
-```
-Order matters - the first hit wins, so put the preferred format first.
-Bumping the catalog cache (POST `/api/js-apps/refresh-categories` or
-just wait 5 minutes) picks up the new resolution rule.

package.json CHANGED Viewed

@@ -18,7 +18,6 @@
     "@mui/icons-material": "^7.3.6",
     "@mui/material": "^7.3.6",
     "@react-spring/web": "^10.0.3",
-    "compression": "^1.8.1",
     "express": "^4.21.2",
     "framer-motion": "^12.23.26",
     "fuse.js": "^7.1.0",

     "@mui/icons-material": "^7.3.6",
     "@mui/material": "^7.3.6",
     "@react-spring/web": "^10.0.3",
     "express": "^4.21.2",
     "framer-motion": "^12.23.26",
     "fuse.js": "^7.1.0",

scripts/evaluate-prompt-v2.py DELETED Viewed

@@ -1,445 +0,0 @@
-#!/usr/bin/env python3
-"""
-Prompt-v2 evaluation harness.
-Re-runs the LLM categorization on every JS app currently served by
-/api/js-apps with a tightened prompt, and prints a side-by-side
-diff against the live (v1) classifications.
-This file lives outside the server runtime - it never gets pushed
-to the Space. It's only meant to be hand-iterated until the diff
-looks right, then the chosen prompt is ported into server/categorize.js
-and server/categories.js.
-Run:
-    python3 scripts/evaluate-prompt-v2.py
-"""
-from __future__ import annotations
-import json
-import os
-import re
-import ssl
-import sys
-import time
-import urllib.error
-import urllib.request
-from pathlib import Path
-from typing import Any
-# Python 3.14 on macOS ships without the system CA bundle wired into
-# urllib by default - HF endpoints fail with CERTIFICATE_VERIFY_FAILED.
-# This script is dev-local only and only talks to huggingface.co, so
-# bypassing verification here is acceptable (would NEVER do this in
-# the server runtime).
-_SSL_CTX = ssl._create_unverified_context()  # noqa: S323
-HF_INFERENCE_URL = "https://router.huggingface.co/v1/chat/completions"
-MODEL = "meta-llama/Llama-3.1-8B-Instruct"
-TEMPERATURE = 0
-MAX_TOKENS = 120
-README_MAX_CHARS = 3000
-MAX_CATEGORIES_PER_APP = 3
-JS_APPS_URL = "https://pollen-robotics-reachy-mini.hf.space/api/js-apps"
-# ──────────────────────────────────────────────────────────────────────
-# Taxonomy v2 - 9 slugs (added "games")
-# ──────────────────────────────────────────────────────────────────────
-CATEGORIES_V2: list[tuple[str, str]] = [
-    (
-        "music",
-        "Music creation, playback, beats, songs, DJ mixing, instruments, "
-        "blind-test music games. Requires actual music (rhythm/melody/song). "
-        "NOT arbitrary audio (Morse code, alarms, TTS, sound effects).",
-    ),
-    (
-        "dance",
-        "Dance choreographies, motion replay, kinetic shows, "
-        "recording/replaying robot movements, dance parties.",
-    ),
-    (
-        "voice",
-        "Reachy talks, listens, or holds a real-time voice conversation: "
-        "TTS players, LLM-driven chat (OpenAI Realtime, Claude, Perplexity), "
-        "wake-word demos, daily reports/news/weather read aloud.",
-    ),
-    (
-        "storytelling",
-        "Narrative stories WITH plot and characters: interactive fiction, "
-        "bedtime tales, audio adventures, choose-your-own-adventure. "
-        "NOT for daily reports, news, weather, or Q&A (use `voice`).",
-    ),
-    (
-        "kids",
-        "Apps that EXPLICITLY target children: the words kids / children / "
-        "'for curious minds' / bedtime / 'learning for kids' must appear in "
-        "the name or description, OR the app must be obviously kid-targeted. "
-        "Combines with `storytelling`, `voice`, or `games`. Lifestyle, "
-        "sports, weather, general conversation are NOT kids.",
-    ),
-    (
-        "games",
-        "Apps with a play loop: scores, rounds, win/lose conditions, "
-        "quizzes, puzzles, sports simulations, dice/oracles (magic 8-ball), "
-        "arcade-style mini-games.",
-    ),
-    (
-        "vision",
-        "Apps where Reachy's camera DRIVES behaviour: face/hand/pose "
-        "tracking, image classification, gesture detection, visual mimicry. "
-        "NOT for apps that merely stream or display the camera feed.",
-    ),
-    (
-        "companion",
-        "Apps with an EXPLICIT emotional/personality/buddy framing in the "
-        "name or description (words like companion, buddy, mood, emotional, "
-        "personality, pet, Tamagotchi). Being friendly is not enough.",
-    ),
-    (
-        "dev-tools",
-        "RESERVED slug — see DECISION ALGORITHM step 1 below. Use ONLY "
-        "for pure technical artefacts (debug utilities, SDK probes, "
-        "minimal protocol demos, dev-only test spaces) with no end-user "
-        "experience. When used, it is the SOLE category — never combined.",
-    ),
-]
-ALLOWED = {slug for slug, _ in CATEGORIES_V2}
-# ──────────────────────────────────────────────────────────────────────
-# Few-shot examples - cover the main pitfalls of v1
-# ──────────────────────────────────────────────────────────────────────
-FEW_SHOT = [
-    (
-        "Reachy Morse",
-        "Send Morse code through Reachy's speaker.",
-        ["dev-tools"],
-        "(STEP 1 veto: pure technical artefact. NOT music.)",
-    ),
-    (
-        "WebRTC Demo",
-        "Minimal WebRTC connection between Reachy and the browser.",
-        ["dev-tools"],
-        "(STEP 1 veto: protocol demo. NOT vision.)",
-    ),
-    (
-        "TTS Reachy Mini",
-        "Browser TTS that plays out of Reachy Mini's speaker.",
-        ["voice"],
-        "(USER-FACING speech output is voice, NOT dev-tools.)",
-    ),
-    (
-        "Reachy Mochi - Emotional Companion",
-        "Your pocket buddy that develops a mood and personality over time.",
-        ["companion"],
-        "(explicit emotional/companion framing)",
-    ),
-    (
-        "Reachy Alive",
-        "(README empty; name suggests autonomy and life-like presence)",
-        ["companion"],
-        "(USE THE NAME when the README is empty; 'alive' = companion-like)",
-    ),
-    (
-        "Daily Surf Report",
-        "Reachy reads today's surf report out loud.",
-        ["voice"],
-        "(NOT storytelling — a report has no narrative arc. "
-        "NOT kids — surfing/sports are not kid-targeted.)",
-    ),
-    (
-        "Music Quiz",
-        "Play a blind test music game with a dancing Reachy.",
-        ["music", "games", "dance"],
-        "(multi-label: three slugs truly co-apply, ordered by relevance)",
-    ),
-    (
-        "Mime Bot",
-        "Reachy mimics your face live from your webcam.",
-        ["vision"],
-        "(NOT companion — mimicry is visual, no emotional framing.)",
-    ),
-]
-def build_system_prompt() -> str:
-    taxonomy = "\n".join(f"- {slug}: {desc}" for slug, desc in CATEGORIES_V2)
-    examples = "\n".join(
-        f"  - {name!r}: {desc!r}\n"
-        f"    → {{\"categories\": {json.dumps(cats)}}}   {hint}"
-        for name, desc, cats, hint in FEW_SHOT
-    )
-    return f"""You classify a Reachy Mini robot app into a CLOSED list of categories.
-OUTPUT FORMAT
-Return ONLY a single JSON object: {{"categories": ["slug1", "slug2"]}}.
-Pick 1 to {MAX_CATEGORIES_PER_APP} slugs, ordered from most to least relevant.
-Use the EXACT slug. No prose, no code fences, no commentary outside the JSON.
-DECISION ALGORITHM (apply in order)
-STEP 1 — `dev-tools` veto
-Is this app a PURE technical artefact with no user-facing experience
-beyond "here is how the SDK / API works"?
-Examples that pass the veto: WebRTC demo, SDK probe, debug utility,
-raw remote-control interface, dev-only test space.
-Examples that DO NOT pass the veto (they are user-facing apps):
-TTS players, voice chat, music apps, storytelling, companions —
-even when the README is dev-heavy.
-  ─ YES → return {{"categories": ["dev-tools"]}} and STOP. Never combine.
-  ─ NO  → continue to STEP 2.
-STEP 2 — Pick 1 to {MAX_CATEGORIES_PER_APP} user-facing slugs from the
-list below. Choose the MOST SPECIFIC categories. Order from most to
-least relevant. Multi-label is encouraged when two categories truly
-co-apply (e.g. music-and-dance, kids storytelling, vision game).
-If the README is empty or very sparse, USE THE NAME AND DESCRIPTION
-as the primary signal — do not bail to an empty list just because the
-README is thin.
-STEP 3 — Strict slug rules (each must hold, or DO NOT use the slug)
-- `companion`: requires EXPLICIT emotional / personality / buddy framing
-  (companion, buddy, friend, mood, emotional, personality, pet,
-  Tamagotchi-like, "alive", "life companion"). Being friendly is not
-  enough.
-- `music`: requires actual music — rhythm, melody, songs, beats, DJ
-  sets, instruments, music quizzes. Arbitrary audio (Morse, alarms,
-  TTS, sound effects) is NOT music.
-- `vision`: requires the camera to DRIVE behaviour (tracking,
-  classification, mimicry). Merely streaming or displaying the camera
-  (WebRTC demos, remote-control viewers) is NOT vision.
-- `storytelling`: requires a narrative ARC — plot, characters, scenes.
-  Daily reports, news, weather, Q&A are NOT storytelling (they are
-  `voice`).
-- `games`: requires a play loop — score, rounds, win/lose, puzzles,
-  quizzes, dice/oracles, sports simulations.
-- `kids`: requires kid-targeted framing (kids/children/curious minds/
-  bedtime/learning for kids) in the name or description. Lifestyle,
-  sports, weather, general conversation are NOT kids.
-AVAILABLE CATEGORIES
-{taxonomy}
-REFERENCE EXAMPLES
-{examples}
-Do not include any text outside the JSON object."""
-def build_user_prompt(name: str, description: str, readme: str) -> str:
-    return (
-        f"App name: {name or '(unknown)'}\n"
-        f"Short description: {description or '(none)'}\n\n"
-        f"README excerpt:\n{readme or '(no README available)'}\n\n"
-        f"Return the JSON now."
-    )
-# ──────────────────────────────────────────────────────────────────────
-# README fetch + clean (mirrors server/categorize.js)
-# ─────────────────────────────────────────────────────────────��────────
-def fetch_readme(space_id: str) -> str:
-    url = f"https://huggingface.co/spaces/{space_id}/raw/main/README.md"
-    try:
-        with urllib.request.urlopen(url, timeout=10, context=_SSL_CTX) as r:
-            return r.read().decode("utf-8", errors="replace")
-    except (urllib.error.URLError, urllib.error.HTTPError, TimeoutError):
-        return ""
-def clean_readme(raw: str) -> str:
-    if not raw:
-        return ""
-    txt = raw
-    txt = re.sub(r"^---\n[\s\S]*?\n---\n?", "", txt)
-    txt = re.sub(r"!\[[^\]]*\]\([^)]+\)", "", txt)
-    txt = re.sub(r"<img\b[^>]*>", "", txt, flags=re.IGNORECASE)
-    txt = re.sub(r"\[!\[[^\]]*\]\([^)]+\)\]\([^)]+\)", "", txt)
-    txt = re.sub(r"</?[a-zA-Z][^>]*>", "", txt)
-    txt = re.sub(r"\n{3,}", "\n\n", txt)
-    if len(txt) > README_MAX_CHARS:
-        cut = txt.rfind("\n\n", 0, README_MAX_CHARS)
-        if cut > README_MAX_CHARS // 2:
-            txt = txt[:cut]
-        else:
-            txt = txt[:README_MAX_CHARS]
-    return txt.strip()
-# ──────────────────────────────────────────────────────────────────────
-# LLM call
-# ──────────────────────────────────────────────────────────────────────
-def call_llm(hf_token: str, system: str, user: str) -> str | None:
-    body = json.dumps(
-        {
-            "model": MODEL,
-            "messages": [
-                {"role": "system", "content": system},
-                {"role": "user", "content": user},
-            ],
-            "temperature": TEMPERATURE,
-            "max_tokens": MAX_TOKENS,
-            "response_format": {"type": "json_object"},
-        }
-    ).encode("utf-8")
-    req = urllib.request.Request(
-        HF_INFERENCE_URL,
-        data=body,
-        headers={
-            "Authorization": f"Bearer {hf_token}",
-            "Content-Type": "application/json",
-            # Cloudflare in front of the router 403s the default
-            # "Python-urllib/x.y" UA. Any reasonable UA passes.
-            "User-Agent": "reachy-mini-prompt-eval/1.0",
-        },
-        method="POST",
-    )
-    try:
-        with urllib.request.urlopen(req, timeout=30, context=_SSL_CTX) as r:
-            data = json.loads(r.read().decode("utf-8"))
-            return data.get("choices", [{}])[0].get("message", {}).get("content")
-    except urllib.error.HTTPError as e:
-        detail = e.read().decode("utf-8", errors="replace")[:200]
-        print(f"  ✗ LLM HTTP {e.code}: {detail}", file=sys.stderr)
-        return None
-    except Exception as e:  # noqa: BLE001
-        print(f"  ✗ LLM error: {e}", file=sys.stderr)
-        return None
-def extract_json_obj(text: str) -> dict[str, Any] | None:
-    if not text:
-        return None
-    start = text.find("{")
-    if start == -1:
-        return None
-    depth = 0
-    for i in range(start, len(text)):
-        c = text[i]
-        if c == "{":
-            depth += 1
-        elif c == "}":
-            depth -= 1
-            if depth == 0:
-                try:
-                    return json.loads(text[start : i + 1])
-                except json.JSONDecodeError:
-                    return None
-    return None
-def sanitize(raw: Any) -> list[str]:
-    if not isinstance(raw, list):
-        return []
-    out: list[str] = []
-    seen: set[str] = set()
-    for v in raw:
-        if not isinstance(v, str):
-            continue
-        slug = v.strip().lower()
-        if not slug or slug in seen or slug not in ALLOWED:
-            continue
-        seen.add(slug)
-        out.append(slug)
-        if len(out) >= MAX_CATEGORIES_PER_APP:
-            break
-    return out
-# ──────────────────────────────────────────────────────────────────────
-# Main
-# ──────────────────────────────────────────────────────────────────────
-def read_hf_token() -> str:
-    if os.environ.get("HF_TOKEN"):
-        return os.environ["HF_TOKEN"]
-    env_file = Path(__file__).resolve().parent.parent / ".env"
-    if env_file.exists():
-        for line in env_file.read_text().splitlines():
-            m = re.match(r"^\s*HF_TOKEN\s*=\s*(.*?)\s*$", line)
-            if m:
-                v = m.group(1).strip().strip('"').strip("'")
-                if v:
-                    return v
-    raise SystemExit("HF_TOKEN not found in env or .env")
-def fetch_live_classifications() -> list[dict[str, Any]]:
-    with urllib.request.urlopen(JS_APPS_URL, timeout=30, context=_SSL_CTX) as r:
-        return json.load(r)["apps"]
-def main() -> int:
-    hf_token = read_hf_token()
-    apps = fetch_live_classifications()
-    print(f"Loaded {len(apps)} JS apps from prod.\n")
-    system = build_system_prompt()
-    print(f"System prompt: {len(system)} chars, {system.count(chr(10))} lines.\n")
-    results: list[dict[str, Any]] = []
-    for i, app in enumerate(apps, 1):
-        sid = app["id"]
-        name = app.get("name") or sid.split("/")[-1]
-        desc = (
-            app.get("description")
-            or (app.get("extra") or {}).get("cardData", {}).get("short_description")
-            or ""
-        )
-        old_cats = app.get("categories") or []
-        raw_readme = fetch_readme(sid)
-        readme = clean_readme(raw_readme)
-        user = build_user_prompt(name, desc, readme)
-        reply = call_llm(hf_token, system, user)
-        new_cats = sanitize((extract_json_obj(reply) or {}).get("categories"))
-        changed = set(old_cats) != set(new_cats)
-        marker = "Δ" if changed else " "
-        print(
-            f"  {marker} ({i:>2}/{len(apps)}) {name[:36]:<37}  "
-            f"old=[{', '.join(old_cats)}]"
-            + (f"  →  new=[{', '.join(new_cats)}]" if changed else "")
-        )
-        results.append(
-            {
-                "id": sid,
-                "name": name,
-                "old": old_cats,
-                "new": new_cats,
-                "changed": changed,
-            }
-        )
-        time.sleep(0.25)
-    print()
-    print("─" * 80)
-    print("DIFF (only changed entries)")
-    print("─" * 80)
-    for r in results:
-        if not r["changed"]:
-            continue
-        print(
-            f"  {r['name'][:38]:<40}  "
-            f"[{', '.join(r['old']) or '∅'}]  →  [{', '.join(r['new']) or '∅'}]"
-        )
-    changed_count = sum(1 for r in results if r["changed"])
-    print()
-    print(f"{changed_count}/{len(results)} entries changed.")
-    return 0
-if __name__ == "__main__":
-    sys.exit(main())

server/categories.js DELETED Viewed

@@ -1,212 +0,0 @@
-/**
- * Predefined taxonomy for JS Reachy Mini apps.
- *
- * These slugs are the ONLY valid output values for the LLM
- * inference step (anything else is dropped at parse time) and
- * the values consumers (mobile shell, website) filter on.
- *
- * Why a closed list instead of free-form tags
- * ──────────────────────────────────────────
- * The HF Spaces catalog has no usable categorization for the
- * reachy_mini_js_app subset (only platform/SDK tags). We bridge
- * the gap by inferring categories with an LLM, but we have to
- * constrain the model's output: a closed list keeps category
- * pages stable, lets us pre-pick emojis/labels, and avoids the
- * "30 near-duplicate slugs" problem you'd get with free-form.
- *
- * Bumping the taxonomy
- * ────────────────────
- * Adding, removing or renaming a slug changes the meaning of
- * cached entries. Bump TAXONOMY_VERSION when you do that: the
- * cache layer compares each entry's `taxonomyVersion` against
- * the live one and recomputes stale ones on the next pass.
- */
-/**
- * Bump this when the slug list OR the descriptions change in a way
- * that affects the LLM output. The cache layer invalidates entries
- * whose taxonomyVersion is older than this and reclassifies them on
- * the next pass. We don't bump it for cosmetic edits (label / emoji)
- * since those don't reach the LLM.
- *
- * History:
- *   - v1: initial 8-slug taxonomy.
- *   - v2: added `games`, tightened `kids` + `dev-tools` descriptions,
- *         switched the prompt to a DECISION ALGORITHM with few-shot.
- *   - v3: switched from multi-label (up to 3 slugs) to single-label
- *         (exactly 1 slug). Each app surfaces in exactly one category
- *         section on the mobile shell - no duplicates across swipers.
- *   - v4: renamed `dance` to `motion` (broader: marionette, replay,
- *         choreography without music). Music-driven dance parties
- *         now belong to `music` since music is what drives them.
- */
-export const TAXONOMY_VERSION = 4;
-/**
- * Canonical category list. Keep slugs short, kebab-case, and
- * memorable: they end up in URLs (e.g. `?cat=music`) and in
- * filter chips on mobile.
- *
- * The `description` field is the SOLE source of truth the LLM
- * sees - keep them factual, scope-bounded, and example-led so
- * the model has signal for both inclusion and exclusion.
- */
-export const CATEGORIES = [
-  {
-    slug: 'music',
-    label: 'Music & Beats',
-    emoji: '🎵',
-    description:
-      'Music creation, playback, beats, songs, DJ mixing, instruments, ' +
-      'blind-test music games, AND music-driven dance parties (Reachy ' +
-      'dances to a song). Requires actual music (rhythm / melody / song). ' +
-      'Arbitrary audio (Morse code, alarms, TTS, sound effects) is NOT ' +
-      'music. Pure choreography without music belongs to `motion`.',
-  },
-  {
-    slug: 'motion',
-    label: 'Motion & Movement',
-    emoji: '🦾',
-    description:
-      "Apps that drive Reachy's physical movement on its own: motion " +
-      'replay, marionette-style remote control of the body, kinetic ' +
-      'shows, choreographies WITHOUT music, expressive body language. ' +
-      'If the movement is synced to music, use `music` instead.',
-  },
-  {
-    slug: 'voice',
-    label: 'Voice & Conversation',
-    emoji: '🗣️',
-    description:
-      'Reachy talks, listens, or holds a real-time voice ' +
-      'conversation: TTS players, LLM-driven chat (OpenAI Realtime, ' +
-      'Claude, Perplexity), wake-word demos, daily reports / news / ' +
-      'weather read aloud.',
-  },
-  {
-    slug: 'storytelling',
-    label: 'Stories',
-    emoji: '📖',
-    description:
-      'Narrative stories WITH plot and characters: interactive ' +
-      'fiction, bedtime tales, audio adventures, choose-your-own-' +
-      'adventure. NOT for daily reports, news, weather, or Q&A ' +
-      '(those are `voice`).',
-  },
-  {
-    slug: 'kids',
-    label: 'For Kids',
-    emoji: '🧒',
-    description:
-      'Apps that EXPLICITLY target children: the words kids / ' +
-      "children / 'for curious minds' / bedtime / 'learning for kids' " +
-      'must appear in the name or description, OR the app must be ' +
-      'obviously kid-targeted. Combines with `storytelling`, `voice`, ' +
-      'or `games`. Lifestyle, sports, weather, generic personality / ' +
-      'narration / fun framings are NOT kids.',
-  },
-  {
-    slug: 'games',
-    label: 'Games & Play',
-    emoji: '🎮',
-    description:
-      'Apps with a play loop: scores, rounds, win/lose conditions, ' +
-      'quizzes, puzzles, sports simulations, dice/oracles (magic ' +
-      '8-ball), arcade-style mini-games.',
-  },
-  {
-    slug: 'vision',
-    label: 'Vision & Camera',
-    emoji: '👁️',
-    description:
-      "Apps where Reachy's camera DRIVES behaviour: face/hand/pose " +
-      'tracking, image classification, gesture detection, visual ' +
-      'mimicry. Merely streaming or displaying the camera feed ' +
-      '(WebRTC demos, remote-control viewers) is NOT vision.',
-  },
-  {
-    slug: 'companion',
-    label: 'Companion',
-    emoji: '🤝',
-    description:
-      'Apps with an EXPLICIT emotional / personality / buddy framing ' +
-      'in the name or description (companion, buddy, friend, mood, ' +
-      'emotional, personality, pet, Tamagotchi-like, "alive", ' +
-      '"life companion"). Being friendly is not enough.',
-  },
-  {
-    slug: 'dev-tools',
-    label: 'Dev & Demos',
-    emoji: '🛠️',
-    description:
-      'RESERVED slug - see DECISION ALGORITHM step 1 in the prompt. ' +
-      'Use ONLY for pure technical artefacts (debug utilities, SDK ' +
-      'probes, minimal protocol demos, dev-only test spaces) with no ' +
-      'end-user experience. When used, it is the SOLE category - ' +
-      'never combined with another slug.',
-  },
-];
-export const ALLOWED_SLUGS = new Set(CATEGORIES.map((c) => c.slug));
-export function isValidSlug(slug) {
-  return ALLOWED_SLUGS.has(slug);
-}
-/**
- * Public projection of the taxonomy meant to be shipped to clients
- * (mobile shell, website filter chips). We strip the `description`
- * field on purpose: it is sized + worded for the LLM prompt and
- * carries no UI value (clients render `label` + `emoji`). Render
- * order is the index in `CATEGORIES`, surfaced as `order` so a
- * client that needs to re-sort (e.g. alphabetical view) keeps the
- * canonical order one field-away.
- *
- * The shape is intentionally minimal and stable:
- * `{ slug, label, emoji, order }`. Adding optional fields later
- * (e.g. `color`, `shortLabel`) is forward-compatible; renaming or
- * dropping one is a breaking change for any client mirror.
- */
-export function getPublicTaxonomy() {
-  return CATEGORIES.map((c, index) => ({
-    slug: c.slug,
-    label: c.label,
-    emoji: c.emoji,
-    order: index,
-  }));
-}
-/**
- * Render the taxonomy as a bulleted list for the LLM prompt.
- * Format mirrors what the model is asked to output (slug first)
- * to nudge it towards copying the exact string back.
- */
-export function buildLlmCategoryList() {
-  return CATEGORIES.map((c) => `- ${c.slug}: ${c.description}`).join('\n');
-}
-/**
- * Sanitize a raw LLM-returned list of slugs:
- * - drop non-strings
- * - lowercase + trim
- * - drop unknown slugs (hallucinations)
- * - dedupe while preserving order (the model orders by relevance)
- * - cap to MAX_CATEGORIES
- *
- * Returns a fresh array; never mutates input.
- */
-export function sanitizeSlugs(raw, maxCategories = 3) {
-  if (!Array.isArray(raw)) return [];
-  const seen = new Set();
-  const out = [];
-  for (const v of raw) {
-    if (typeof v !== 'string') continue;
-    const slug = v.trim().toLowerCase();
-    if (!slug || seen.has(slug)) continue;
-    if (!ALLOWED_SLUGS.has(slug)) continue;
-    seen.add(slug);
-    out.push(slug);
-    if (out.length >= maxCategories) break;
-  }
-  return out;
-}

server/categorize.js DELETED Viewed

@@ -1,426 +0,0 @@
-/**
- * LLM-based category inference for JS Reachy Mini apps.
- *
- * Pipeline (`categorizeApp`)
- * ──────────────────────────
- *   1. Fetch the Space's README from HF Hub (raw)
- *   2. Strip frontmatter, images, badges, raw HTML, then truncate
- *   3. Call a chat LLM via HF Inference Providers (OpenAI-compatible)
- *      with the predefined taxonomy + the app's name/description
- *   4. Parse JSON, validate against ALLOWED_SLUGS, keep up to 3
- *
- * Robustness contract
- * ───────────────────
- * `categorizeApp` NEVER throws on transient failure (network,
- * 429, malformed JSON). It returns `null`, which the cache layer
- * interprets as "not yet categorized; retry on the next pass".
- * Hard errors (HF_TOKEN missing) are signalled by a thrown
- * `HfTokenMissingError` so the caller can short-circuit the
- * whole batch.
- */
-import {
-  buildLlmCategoryList,
-  sanitizeSlugs,
-} from './categories.js';
-// HF Inference Providers - OpenAI-compatible router. Auto-routes
-// the request to whichever provider currently serves the model
-// (Together, Nebius, Fireworks, Sambanova...). The token must
-// have `Inference Providers` access (default for all PRO and
-// most FREE tokens since 2025).
-const HF_INFERENCE_URL = 'https://router.huggingface.co/v1/chat/completions';
-// 8B model: cheap, fast (~1 s per call), more than enough for a
-// closed-list multi-label classification with good descriptions.
-// If quality drifts we can swap to 70B without touching anything
-// else - the prompt is generic.
-const DEFAULT_MODEL = 'meta-llama/Llama-3.1-8B-Instruct';
-// README budget
-const README_MAX_CHARS = 3000;
-// Single-label classification: each app gets EXACTLY ONE slug -
-// the dominant one. The shape stays `string[]` for forward
-// compatibility (if we ever revert to multi-label, no API break),
-// but the array always contains 0 or 1 entry. Mobile chips and
-// "swipers per category" thus surface each app once and only once.
-const MAX_CATEGORIES_PER_APP = 1;
-// LLM call budget
-const LLM_TIMEOUT_MS = 30_000;
-const LLM_MAX_TOKENS = 120;
-const LLM_TEMPERATURE = 0;
-export class HfTokenMissingError extends Error {
-  constructor() {
-    super('HF_TOKEN env var is not set; cannot call HF Inference Providers.');
-    this.name = 'HfTokenMissingError';
-  }
-}
-/**
- * Fetch a Space's README from HF Hub. Returns the raw markdown
- * string, or `null` if the request fails (404, network, etc.) -
- * the caller falls back to "name + description only" in that case,
- * which is still enough signal for the LLM on most apps.
- */
-export async function fetchSpaceReadme(spaceId, { signal } = {}) {
-  if (!spaceId || typeof spaceId !== 'string') return null;
-  // The README of a HF Space lives at /spaces/<id>/raw/main/README.md.
-  // The `raw` endpoint returns the file as-is (no Hub UI wrapping)
-  // and is anonymous-friendly, so no auth is needed here.
-  const url = `https://huggingface.co/spaces/${spaceId}/raw/main/README.md`;
-  try {
-    const res = await fetch(url, { signal });
-    if (!res.ok) return null;
-    return await res.text();
-  } catch {
-    return null;
-  }
-}
-/**
- * Lightly clean a raw README so the LLM doesn't burn tokens on
- * boilerplate (HF frontmatter, badges, images) and so the actual
- * prose surfaces above the truncation budget.
- *
- * We keep transformations conservative: we never edit the
- * surrounding prose, we just delete decorative tokens. Anything
- * cosmetic-only that clearly isn't signal for classification
- * (badges, images, raw HTML).
- */
-export function cleanReadme(raw) {
-  if (!raw || typeof raw !== 'string') return '';
-  let txt = raw;
-  // 1. Strip the YAML frontmatter at the very top (HF Spaces
-  //    ship a mandatory `---\n...metadata...\n---` block whose
-  //    fields are already exposed to us via the catalog payload,
-  //    so feeding them to the LLM is pure noise).
-  txt = txt.replace(/^---\n[\s\S]*?\n---\n?/, '');
-  // 2. Drop image markdown (`![alt](url)`) and HTML <img> tags.
-  //    Vision apps tend to load up READMEs with screenshots and
-  //    GIFs; the alt text is sometimes useful but more often it's
-  //    "demo.gif" - low signal/noise ratio.
-  txt = txt.replace(/!\[[^\]]*\]\([^)]+\)/g, '');
-  txt = txt.replace(/<img\b[^>]*>/gi, '');
-  // 3. Strip shields.io / GitHub badges (markdown links that
-  //    wrap an image). They survive (2) only when nested.
-  txt = txt.replace(/\[!\[[^\]]*\]\([^)]+\)\]\([^)]+\)/g, '');
-  // 4. Generic HTML stripping. Most READMEs are pure markdown,
-  //    but some authors embed `<details>`, `<sub>`, `<center>`
-  //    blocks. Keep the inner text, drop the tags.
-  txt = txt.replace(/<\/?[a-zA-Z][^>]*>/g, '');
-  // 5. Collapse runs of blank lines so trimming doesn't waste
-  //    tokens on the gap.
-  txt = txt.replace(/\n{3,}/g, '\n\n');
-  // 6. Truncate. We slice at the paragraph boundary closest to
-  //    the budget so we don't end mid-sentence.
-  if (txt.length > README_MAX_CHARS) {
-    const cut = txt.lastIndexOf('\n\n', README_MAX_CHARS);
-    txt = txt.slice(0, cut > README_MAX_CHARS / 2 ? cut : README_MAX_CHARS);
-  }
-  return txt.trim();
-}
-/**
- * Few-shot examples woven into the system prompt.
- *
- * Each entry encodes a pitfall the v1 prompt fell into during the
- * 24-app eval (see `scripts/evaluate-prompt-v2.py`). Keep this list
- * tight - past ~10 examples the model starts pattern-matching
- * literally on the example names rather than applying the rules.
- *
- * Format: [name, description, expected_slugs, brief_justification]
- */
-const FEW_SHOT_EXAMPLES = [
-  [
-    'Reachy Morse',
-    "Send Morse code through Reachy's speaker.",
-    ['dev-tools'],
-    '(STEP 1 veto: pure technical artefact. NOT music.)',
-  ],
-  [
-    'WebRTC Demo',
-    'Minimal WebRTC connection between Reachy and the browser.',
-    ['dev-tools'],
-    '(STEP 1 veto: protocol demo. NOT vision.)',
-  ],
-  [
-    'TTS Reachy Mini',
-    "Browser TTS that plays out of Reachy Mini's speaker.",
-    ['voice'],
-    '(USER-FACING speech output is voice, NOT dev-tools.)',
-  ],
-  [
-    'Reachy Mochi - Emotional Companion',
-    'Your pocket buddy that develops a mood and personality over time.',
-    ['companion'],
-    '(explicit emotional/companion framing)',
-  ],
-  [
-    'Reachy Alive',
-    '(README empty; name suggests autonomy and life-like presence)',
-    ['companion'],
-    "(USE THE NAME when the README is empty; 'alive' = companion-like)",
-  ],
-  [
-    'Daily Surf Report',
-    "Reachy reads today's surf report out loud.",
-    ['voice'],
-    '(NOT storytelling - a report has no narrative arc. ' +
-      'NOT kids - surfing/sports are not kid-targeted.)',
-  ],
-  [
-    'Music Quiz',
-    'Play a blind test music game with a dancing Reachy.',
-    ['music'],
-    '(single dominant slug - music wins over games because the app ' +
-      "is primarily a music blind-test; the dancing is a side effect " +
-      'of the music and is captured by `music` too)',
-  ],
-  [
-    'Mime Bot',
-    'Reachy mimics your face live from your webcam.',
-    ['vision'],
-    '(NOT companion - mimicry is visual, no emotional framing.)',
-  ],
-];
-function renderFewShot() {
-  return FEW_SHOT_EXAMPLES.map(([name, desc, slugs, hint]) => {
-    const slugsJson = JSON.stringify(slugs);
-    return (
-      `  - ${JSON.stringify(name)}: ${JSON.stringify(desc)}\n` +
-      `    → {"categories": ${slugsJson}}   ${hint}`
-    );
-  }).join('\n');
-}
-/**
- * Build the chat messages handed to the LLM.
- *
- * The system prompt is structured as a 3-step DECISION ALGORITHM
- * rather than a flat list of rules, because the 8B-class model we
- * use (Llama-3.1-8B-Instruct) follows imperative procedures more
- * reliably than soft constraints. The `dev-tools` veto in STEP 1
- * is what stops the model from silently combining it with other
- * slugs on user-facing apps.
- *
- * The few-shot examples below the rules cover the v1 pitfalls
- * (companion hallucinations, music-on-audio, kids-on-personas,
- * storytelling-on-reports). Six is the sweet spot - more starts
- * over-fitting on example wording.
- */
-function buildMessages({ name, description, readme }) {
-  const taxonomy = buildLlmCategoryList();
-  const examples = renderFewShot();
-  const system = `You classify a Reachy Mini robot app into a CLOSED list of categories.
-OUTPUT FORMAT
-Return ONLY a single JSON object: {"categories": ["slug"]}.
-Pick EXACTLY ONE slug - the single dominant category that best
-captures the app's primary identity. Use the EXACT slug. The list
-always contains 0 or 1 entry.
-No prose, no code fences, no commentary outside the JSON.
-DECISION ALGORITHM (apply in order)
-STEP 1 - \`dev-tools\` veto
-Is this app a PURE technical artefact with no user-facing experience
-beyond "here is how the SDK / API works"?
-Examples that pass the veto: WebRTC demo, SDK probe, debug utility,
-raw remote-control interface, dev-only test space.
-Examples that DO NOT pass the veto (they are user-facing apps):
-TTS players, voice chat, music apps, storytelling, companions -
-even when the README is dev-heavy.
-  - YES -> return {"categories": ["dev-tools"]} and STOP.
-  - NO  -> continue to STEP 2.
-STEP 2 - Pick the SINGLE most dominant user-facing slug from the list
-below. Choose the slug that captures the app's primary identity, not
-every aspect it touches. When two slugs feel equally fitting, pick the
-one that a user would name FIRST when describing the app in one word.
-Examples of tie-breaks:
-  - music-driven dance party (Reachy dances to a song) -> \`music\`.
-    The music is what drives the experience.
-  - pure choreography / marionette / motion replay without music ->
-    \`motion\`. The movement is the experience.
-  - storytelling + kids app -> prefer \`kids\` if it explicitly targets
-    children, \`storytelling\` otherwise.
-  - vision + games app -> prefer \`games\` if there is a play loop,
-    \`vision\` if it is mostly a perception demo.
-If the README is empty or very sparse, USE THE NAME AND DESCRIPTION
-as the primary signal - do not bail to an empty list just because the
-README is thin.
-STEP 3 - Strict slug rules (each must hold, or DO NOT use the slug)
-- \`companion\`: requires EXPLICIT emotional / personality / buddy
-  framing (companion, buddy, friend, mood, emotional, personality,
-  pet, Tamagotchi-like, "alive", "life companion"). Being friendly is
-  not enough.
-- \`music\`: requires actual music - rhythm, melody, songs, beats, DJ
-  sets, instruments, music quizzes. Arbitrary audio (Morse, alarms,
-  TTS, sound effects) is NOT music.
-- \`vision\`: requires the camera to DRIVE behaviour (tracking,
-  classification, mimicry). Merely streaming or displaying the camera
-  (WebRTC demos, remote-control viewers) is NOT vision.
-- \`storytelling\`: requires a narrative ARC - plot, characters, scenes.
-  Daily reports, news, weather, Q&A are NOT storytelling (they are
-  \`voice\`).
-- \`games\`: requires a play loop - score, rounds, win/lose, puzzles,
-  quizzes, dice/oracles, sports simulations.
-- \`kids\`: requires kid-targeted framing (kids/children/curious minds/
-  bedtime/learning for kids) in the name or description. Lifestyle,
-  sports, weather, general conversation are NOT kids.
-AVAILABLE CATEGORIES
-${taxonomy}
-REFERENCE EXAMPLES
-${examples}
-Do not include any text outside the JSON object.`;
-  const user =
-    `App name: ${name || '(unknown)'}\n` +
-    `Short description: ${description || '(none)'}\n\n` +
-    `README excerpt:\n${readme || '(no README available)'}\n\n` +
-    'Return the JSON now.';
-  return [
-    { role: 'system', content: system },
-    { role: 'user', content: user },
-  ];
-}
-/**
- * Best-effort JSON extraction. Some 8B models still wrap the
- * answer in ``` fences or prepend "Sure, here you go:". We grab
- * the first balanced `{...}` block and parse that.
- */
-function extractJsonObject(text) {
-  if (!text || typeof text !== 'string') return null;
-  const start = text.indexOf('{');
-  if (start === -1) return null;
-  let depth = 0;
-  for (let i = start; i < text.length; i++) {
-    const ch = text[i];
-    if (ch === '{') depth++;
-    else if (ch === '}') {
-      depth--;
-      if (depth === 0) {
-        const slice = text.slice(start, i + 1);
-        try {
-          return JSON.parse(slice);
-        } catch {
-          return null;
-        }
-      }
-    }
-  }
-  return null;
-}
-/**
- * Call the HF Inference Providers chat endpoint. Returns the
- * raw assistant message string, or `null` on any error.
- */
-async function callLlm({ messages, model, signal }) {
-  const token = process.env.HF_TOKEN;
-  if (!token) throw new HfTokenMissingError();
-  const body = {
-    model,
-    messages,
-    temperature: LLM_TEMPERATURE,
-    max_tokens: LLM_MAX_TOKENS,
-    // `response_format` is honoured by some providers (Nebius,
-    // Together) but ignored by others. It's a free upgrade when
-    // present, harmless otherwise; the JSON-extractor below is
-    // the real safety net.
-    response_format: { type: 'json_object' },
-  };
-  let res;
-  try {
-    res = await fetch(HF_INFERENCE_URL, {
-      method: 'POST',
-      headers: {
-        'Authorization': `Bearer ${token}`,
-        'Content-Type': 'application/json',
-      },
-      body: JSON.stringify(body),
-      signal,
-    });
-  } catch (err) {
-    console.warn(`[categorize] LLM fetch failed: ${err.message}`);
-    return null;
-  }
-  if (!res.ok) {
-    const detail = await res.text().catch(() => '');
-    console.warn(
-      `[categorize] LLM HTTP ${res.status}: ${detail.slice(0, 200)}`,
-    );
-    return null;
-  }
-  let json;
-  try {
-    json = await res.json();
-  } catch {
-    return null;
-  }
-  return json?.choices?.[0]?.message?.content ?? null;
-}
-/**
- * Public entry point.
- *
- * Returns a string[] of validated slugs (0-3 items), or `null`
- * on transient failure so the caller can mark the entry "needs
- * retry" without writing a misleading empty list.
- *
- * Treat an empty array `[]` as "the LLM looked and concluded
- * none fit" - that's a valid, cacheable outcome.
- */
-export async function categorizeApp({
-  name,
-  description,
-  spaceId,
-  model = DEFAULT_MODEL,
-} = {}) {
-  if (!spaceId) return null;
-  const ctrl = new AbortController();
-  const timeoutId = setTimeout(() => ctrl.abort(), LLM_TIMEOUT_MS);
-  try {
-    const rawReadme = await fetchSpaceReadme(spaceId, { signal: ctrl.signal });
-    const readme = cleanReadme(rawReadme);
-    const messages = buildMessages({ name, description, readme });
-    const reply = await callLlm({ messages, model, signal: ctrl.signal });
-    if (reply == null) return null;
-    const obj = extractJsonObject(reply);
-    if (!obj || !Array.isArray(obj.categories)) {
-      console.warn(
-        `[categorize] ${spaceId}: malformed LLM reply (truncated): ` +
-          `${reply.slice(0, 120)}`,
-      );
-      return null;
-    }
-    return sanitizeSlugs(obj.categories, MAX_CATEGORIES_PER_APP);
-  } finally {
-    clearTimeout(timeoutId);
-  }
-}

server/categoryCache.js DELETED Viewed

@@ -1,290 +0,0 @@
-/**
- * Persistent cache for inferred app categories, backed by a
- * HuggingFace dataset.
- *
- * Why a dataset (not a local file)
- * ────────────────────────────────
- * The website runs in a Docker HF Space. The container's
- * filesystem is wiped on every rebuild (and rebuilds happen
- * on every push, every model update, every Space restart).
- * Re-running 200 LLM calls every cold start would be wasteful
- * and slow the user-visible /api/js-apps for the first 30 s.
- *
- * Pushing the cache to a dataset gives us:
- *   1. Persistence across rebuilds and machine moves
- *   2. A versioned audit log of how categories evolve
- *   3. A single source of truth other tooling can consume
- *      (the mobile shell could even read the dataset directly
- *      if it ever wanted to bypass the website).
- *
- * Storage shape
- * ─────────────
- *   <dataset>/categories.json
- *
- *   {
- *     "version": 1,
- *     "taxonomyVersion": 1,
- *     "updatedAt": "2026-05-10T11:08:42Z",
- *     "entries": {
- *       "<spaceId>": {
- *         "lastModified": "2026-05-08T22:13:01Z",
- *         "categories": ["storytelling", "kids", "voice"],
- *         "categorizedAt": "2026-05-10T11:08:42Z",
- *         "taxonomyVersion": 1
- *       }
- *     }
- *   }
- *
- * In-memory tier
- * ──────────────
- * The Map<spaceId, entry> is the hot path. The dataset is
- * loaded once at boot and only flushed when entries actually
- * change (the warmup batch buffers writes and flushes once
- * at the end). All synchronous access goes through the Map.
- */
-import { commit, createRepo } from '@huggingface/hub';
-import { TAXONOMY_VERSION } from './categories.js';
-// Default location: a per-user dataset that the HF_TOKEN owner
-// definitely has write access to. Override with the env var
-// when promoting to the org-owned `pollen-robotics/...` dataset.
-const DEFAULT_DATASET = 'tfrere/reachy-mini-app-categories';
-const CACHE_FILE_PATH = 'categories.json';
-const CACHE_FORMAT_VERSION = 1;
-class CategoryCache {
-  constructor() {
-    this.entries = new Map();
-    this.repoName = process.env.HF_CATEGORIES_DATASET || DEFAULT_DATASET;
-    this.loaded = false;
-    this.dirty = false;
-    // Concurrency guard for `flush()` - we never want two
-    // commit() calls fighting for the same parent commit.
-    this.flushing = false;
-  }
-  /**
-   * Load the dataset cache into memory. Best-effort: a missing
-   * dataset, a 404, or a malformed JSON all collapse to "start
-   * fresh, the warmup will repopulate". We never let cache load
-   * failure block the server boot.
-   */
-  async load() {
-    if (this.loaded) return;
-    this.loaded = true;
-    const url = `https://huggingface.co/datasets/${this.repoName}/resolve/main/${CACHE_FILE_PATH}`;
-    try {
-      const res = await fetch(url, {
-        // Send the token even on a public dataset: it lets HF
-        // bump our rate limit and keeps the path identical for
-        // a future private dataset migration.
-        headers: process.env.HF_TOKEN
-          ? { Authorization: `Bearer ${process.env.HF_TOKEN}` }
-          : undefined,
-      });
-      if (!res.ok) {
-        if (res.status === 404) {
-          console.log(
-            `[CategoryCache] Dataset ${this.repoName} or ${CACHE_FILE_PATH} ` +
-              `not found yet - starting empty.`,
-          );
-        } else {
-          console.warn(
-            `[CategoryCache] HTTP ${res.status} loading cache from ` +
-              `${this.repoName}, starting empty.`,
-          );
-        }
-        return;
-      }
-      const data = await res.json();
-      const entries = data?.entries || {};
-      let kept = 0;
-      let staleTaxonomy = 0;
-      for (const [id, raw] of Object.entries(entries)) {
-        if (!raw || typeof raw !== 'object') continue;
-        // Drop entries from a previous taxonomy: their slugs
-        // may no longer exist or may have shifted meaning.
-        // The warmup will re-run them.
-        if (raw.taxonomyVersion !== TAXONOMY_VERSION) {
-          staleTaxonomy++;
-          continue;
-        }
-        this.entries.set(id, {
-          lastModified: raw.lastModified || null,
-          categories: Array.isArray(raw.categories) ? raw.categories : [],
-          categorizedAt: raw.categorizedAt || null,
-          taxonomyVersion: raw.taxonomyVersion,
-        });
-        kept++;
-      }
-      console.log(
-        `[CategoryCache] Loaded ${kept} entries from ${this.repoName}` +
-          (staleTaxonomy ? ` (dropped ${staleTaxonomy} stale taxonomy)` : ''),
-      );
-    } catch (err) {
-      console.warn(
-        `[CategoryCache] Load failed (${err.message}); starting empty.`,
-      );
-    }
-  }
-  get(spaceId) {
-    return this.entries.get(spaceId) || null;
-  }
-  /**
-   * Decide whether `spaceId` needs a fresh classification call.
-   * It does when:
-   *   - we have no entry at all, OR
-   *   - the Space's `lastModified` has moved past our cached one
-   *     (the README may have changed - re-classify), OR
-   *   - the taxonomy version moved (handled at load() time, but
-   *     belt-and-braces for hot reloads).
-   */
-  needsCategorization(spaceId, lastModified) {
-    const entry = this.entries.get(spaceId);
-    if (!entry) return true;
-    if (entry.taxonomyVersion !== TAXONOMY_VERSION) return true;
-    if (lastModified && entry.lastModified !== lastModified) return true;
-    return false;
-  }
-  set(spaceId, { categories, lastModified }) {
-    if (!Array.isArray(categories)) return;
-    const next = {
-      lastModified: lastModified || null,
-      categories: [...categories],
-      categorizedAt: new Date().toISOString(),
-      taxonomyVersion: TAXONOMY_VERSION,
-    };
-    const prev = this.entries.get(spaceId);
-    // Skip the dirty flag if nothing actually changed - avoids
-    // a useless commit when a refresh confirms the same labels.
-    if (
-      prev &&
-      prev.lastModified === next.lastModified &&
-      prev.taxonomyVersion === next.taxonomyVersion &&
-      JSON.stringify(prev.categories) === JSON.stringify(next.categories)
-    ) {
-      return;
-    }
-    this.entries.set(spaceId, next);
-    this.dirty = true;
-  }
-  /**
-   * Persist the in-memory cache to the dataset (one commit, one
-   * file). No-op if nothing has changed since the last flush.
-   *
-   * Auto-creates the dataset on first write if it doesn't exist
-   * yet (so a brand-new `HF_CATEGORIES_DATASET` value bootstraps
-   * cleanly without manual setup).
-   */
-  async flush() {
-    if (!this.dirty || this.flushing) return;
-    if (!process.env.HF_TOKEN) {
-      console.warn('[CategoryCache] HF_TOKEN missing; skipping flush.');
-      return;
-    }
-    this.flushing = true;
-    try {
-      const payload = this.serialize();
-      const blob = new Blob([JSON.stringify(payload, null, 2)], {
-        type: 'application/json',
-      });
-      const repo = { type: 'dataset', name: this.repoName };
-      const credentials = { accessToken: process.env.HF_TOKEN };
-      // First attempt: plain commit. If the dataset doesn't
-      // exist yet, the SDK throws and we fall through to
-      // create-then-commit. We never assume the dataset exists
-      // - that lets a fresh deploy auto-bootstrap.
-      try {
-        await commit({
-          repo,
-          credentials,
-          title: `Update categories (${this.entries.size} apps)`,
-          operations: [
-            {
-              operation: 'addOrUpdate',
-              path: CACHE_FILE_PATH,
-              content: blob,
-            },
-          ],
-        });
-      } catch (err) {
-        const msg = err?.message || '';
-        const looksMissing =
-          msg.includes('404') ||
-          msg.toLowerCase().includes('not found') ||
-          msg.toLowerCase().includes('does not exist');
-        if (!looksMissing) throw err;
-        console.log(
-          `[CategoryCache] Dataset ${this.repoName} missing - creating it.`,
-        );
-        await createRepo({
-          repo,
-          credentials,
-          private: false,
-          // Re-using the same blob so the initial commit ships
-          // the cache content (instead of an empty repo
-          // followed by a no-op commit).
-          files: [
-            {
-              path: CACHE_FILE_PATH,
-              content: await blob.arrayBuffer(),
-            },
-          ],
-        });
-      }
-      this.dirty = false;
-      console.log(
-        `[CategoryCache] Flushed ${this.entries.size} entries to ${this.repoName}`,
-      );
-    } catch (err) {
-      // We deliberately swallow flush errors so a HF outage
-      // doesn't break the running server. The next set() will
-      // re-flag dirty=true and the next flush() will retry.
-      console.error(
-        `[CategoryCache] Flush failed: ${err?.message || err}`,
-      );
-    } finally {
-      this.flushing = false;
-    }
-  }
-  serialize() {
-    const entries = {};
-    for (const [id, entry] of this.entries) {
-      entries[id] = entry;
-    }
-    return {
-      version: CACHE_FORMAT_VERSION,
-      taxonomyVersion: TAXONOMY_VERSION,
-      updatedAt: new Date().toISOString(),
-      entries,
-    };
-  }
-  /**
-   * Diagnostic snapshot for /api/js-apps's `categorization`
-   * sub-payload. Lets the mobile shell decide whether to show
-   * "loading categories..." or to render the chips immediately.
-   */
-  stats() {
-    return {
-      total: this.entries.size,
-      dataset: this.repoName,
-      taxonomyVersion: TAXONOMY_VERSION,
-    };
-  }
-}
-// Singleton: there's only one cache per server process.
-export const categoryCache = new CategoryCache();

server/index.js CHANGED Viewed

@@ -1,113 +1,12 @@
-import compression from 'compression';
 import express from 'express';
-import { existsSync, readFileSync } from 'fs';
 import path from 'path';
 import { fileURLToPath } from 'url';
-import { categorizeApp, HfTokenMissingError } from './categorize.js';
-import { categoryCache } from './categoryCache.js';
-import { getPublicTaxonomy } from './categories.js';
-import { mintEphemeralKeyHandler } from './openaiEphemeral.js';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
-// Load `.env` from the repo root in dev. In production (HF Space)
-// the platform already injects the secrets as env vars, so this
-// loader silently no-ops. We avoid the `dotenv` dep on purpose -
-// the format is trivial, and reproducing it inline keeps the
-// runtime closure tiny.
-(function loadDotenv() {
-  try {
-    const envPath = path.join(__dirname, '..', '.env');
-    if (!existsSync(envPath)) return;
-    const text = readFileSync(envPath, 'utf8');
-    for (const line of text.split(/\r?\n/)) {
-      const m = line.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/i);
-      if (!m) continue;
-      const [, key, raw] = m;
-      let value = raw;
-      if (
-        (value.startsWith('"') && value.endsWith('"')) ||
-        (value.startsWith("'") && value.endsWith("'"))
-      ) {
-        value = value.slice(1, -1);
-      }
-      // Existing env wins (so `HF_TOKEN=foo node …` overrides .env).
-      if (process.env[key] === undefined) process.env[key] = value;
-    }
-  } catch {
-    /* best-effort - missing or malformed .env never blocks boot */
-  }
-})();
 const app = express();
 const PORT = process.env.PORT || 7860;
-// gzip/brotli compression on every response. Critical for the
-// catalog endpoints (`/api/apps`, `/api/js-apps`) which return
-// ~40KB of JSON dominated by repeated keys ("apps", "id", "extra",
-// "cardData"…) - gzip cuts that to ~6KB on the wire. The Express
-// `compression` middleware:
-//   - skips responses already encoded (no double-encoding),
-//   - skips responses below the `threshold` (default 1KB - tiny
-//     payloads stay verbatim since the gzip framing would dwarf
-//     the savings),
-//   - honours the client's `Accept-Encoding`, falling back to
-//     identity when the client doesn't speak gzip/br.
-// No streaming endpoints in this server (every route ends in
-// `res.json()` or `res.sendFile()`), so compression is unconditionally
-// safe. The default `level: 6` is the right CPU/ratio trade-off for
-// JSON.
-app.use(compression());
-// JSON body parsing for the handful of POST routes that consume
-// structured payloads (currently `/api/openai/ephemeral`). The 8KB
-// cap is intentionally tiny because none of our endpoints accept
-// large bodies, and a tight limit drops obvious abuse early.
-app.use(express.json({ limit: '8kb' }));
-// CORS allowlist for cross-origin API consumers. Same-origin browser
-// calls from this Space stay unaffected. The mobile shell runs from
-// `https://tauri.localhost` (iOS WKWebView), `http://tauri.localhost`
-// (Android WebView), and the desktop dev preview from
-// `http://localhost:1422` (Vite). We do NOT use a wildcard origin
-// because every allowed call expects `Authorization: Bearer …`, and
-// `Access-Control-Allow-Origin: *` is incompatible with credentialed
-// CORS in any practical setup.
-const CORS_ALLOWED_ORIGINS = new Set([
-  'https://tauri.localhost',
-  'http://tauri.localhost',
-  'http://localhost:1422',
-  'http://localhost:1420',
-]);
-app.use((req, res, next) => {
-  const origin = req.headers.origin;
-  if (origin && CORS_ALLOWED_ORIGINS.has(origin)) {
-    res.setHeader('Access-Control-Allow-Origin', origin);
-    res.setHeader('Vary', 'Origin');
-    res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
-    res.setHeader(
-      'Access-Control-Allow-Headers',
-      'Authorization, Content-Type',
-    );
-    // Expose `Age` so cross-origin JS clients (mobile shell, desktop
-    // store, anything not running same-origin on this Space) can
-    // read the server-side cache age. The header lives in the
-    // CORS-safelisted set only for a hardcoded handful of fields;
-    // `Age` is NOT in that set, so without this header browser
-    // `fetch()` callers would see `null` from `headers.get('age')`.
-    // We could also expose `ETag` here for clients that want to
-    // do manual `If-None-Match` revalidation, but the browser
-    // handles ETag transparently in its own HTTP cache, so JS
-    // never needs to see it.
-    res.setHeader('Access-Control-Expose-Headers', 'Age');
-    res.setHeader('Access-Control-Max-Age', '600');
-  }
-  if (req.method === 'OPTIONS') return res.sendStatus(204);
-  next();
-});
 // Cache configuration
 const CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes
 const OFFICIAL_APP_LIST_URL = 'https://huggingface.co/datasets/pollen-robotics/reachy-mini-official-app-store/raw/main/app-list.json';
@@ -115,141 +14,6 @@ const HF_SPACES_API = 'https://huggingface.co/api/spaces';
 // Note: HF API doesn't support pagination with filter=, so we use a high limit
 const HF_SPACES_LIMIT = 1000;
-/**
- * Standard HTTP caching for the catalog GET endpoints
- * (`/api/apps`, `/api/js-apps`).
- *
- * Why bake this into a helper instead of inlining the same two
- * `setHeader` calls in every route:
- *   1. Both endpoints share the same upstream cache state
- *      (`appsCache.lastFetch`) so they SHOULD emit a coherent
- *      `Age` value - any drift between routes would silently
- *      mislead clients about cache staleness.
- *   2. The `Cache-Control` directives below were chosen carefully;
- *      a future contributor copy-pasting one route to start a new
- *      catalog projection should inherit them rather than rolling
- *      their own.
- *
- * Cache-Control: `public, max-age=60, stale-while-revalidate=300`
- *   - `public`: response is safe to store in shared caches (the
- *     payload is identical for every caller, no per-user data).
- *   - `max-age=60`: clients + intermediaries may serve this
- *     response for up to 60 s without revalidating. The upstream
- *     `appsCache` already deduplicates within a 5-minute window
- *     server-side, so 60 s here means the network sees at most
- *     1 hit/minute per cache key per intermediate even under
- *     burst load (10k mobile shells waking up at the same time).
- *   - `stale-while-revalidate=300`: for a further 5 minutes after
- *     the response goes stale, intermediaries may serve the
- *     stale copy while revalidating in the background. This
- *     absorbs sudden traffic spikes without ever blocking the
- *     user on a cold-cache fetch.
- *
- * `Age` (RFC 7234 §5.1) replaces the `cacheAge` field we used to
- * pack into the response body. Pulling the age out of the body
- * was a strict prerequisite for ETag-based revalidation: Express's
- * default ETag is a hash of the response body, and a body that
- * carries a counter that increments every second produces a fresh
- * ETag every second, which makes `If-None-Match` permanently
- * negative and turns the ETag into dead weight. With `cacheAge`
- * promoted to a header, the body becomes a pure function of the
- * cache contents, the ETag becomes stable across requests that
- * hit the same cache snapshot, and clients sending `If-None-Match`
- * get cheap 304s instead of re-downloading 40 KB of JSON.
- */
-function setCatalogCacheHeaders(res, lastFetchMs) {
-  res.setHeader(
-    'Cache-Control',
-    'public, max-age=60, stale-while-revalidate=300',
-  );
-  const ageSeconds = lastFetchMs
-    ? Math.max(0, Math.round((Date.now() - lastFetchMs) / 1000))
-    : 0;
-  res.setHeader('Age', String(ageSeconds));
-}
-// Tag that gates the JS-only subset surfaced by /api/js-apps and
-// fed to the LLM categorizer. Mirrors the filter the mobile shell
-// applies today client-side; the route lets us retire that filter
-// from the mobile codebase down the line.
-const JS_APP_TAG = 'reachy_mini_js_app';
-// =====================================================================
-// App icon convention
-// =====================================================================
-//
-// Convention: an app commits `public/icon.svg` (preferred) or
-// `public/icon.png` in its HF Space repository. When present, the
-// mobile shell + desktop store render it as the app glyph instead
-// of the front-matter `emoji:` codepoint.
-//
-// Why `public/` and not the repo root?
-//   - Vite already copies `public/*` verbatim to `dist/` at build,
-//     where nginx serves it at `/icon.svg`. The same file is
-//     therefore the favicon, the `mountHost({ appIconUrl })` value,
-//     AND the store glyph - one source of truth, no `cp` script,
-//     no risk of the two copies drifting apart.
-//   - HF `resolve/main/public/icon.svg` works the same as
-//     `resolve/main/icon.svg`: any path inside the repo is
-//     reachable, so the catalog still grabs the bytes without
-//     waking the Space's nginx.
-//
-// We resolve the icon ONCE at indexing time (here) rather than
-// probing per-client because:
-//   1. We already pull `siblings` from `?full=true` (one cheap
-//      hub call returns the file list for every app), so the
-//      lookup is a pure JS filter, no extra network.
-//   2. Clients see a single field (`iconUrl`) in the payload and
-//      don't have to know about HF resolve URLs, LFS pointers,
-//      or the candidate-order race ("SVG wins if both exist").
-//   3. The HF API caps probes at ~hub side; doing it server-side
-//      keeps fanout under a 5-minute TTL behind ONE token, instead
-//      of every mobile shell hammering `huggingface.co/resolve/`
-//      to discover icons.
-//
-// Resolution order: `public/icon.svg` → `public/icon.png`. SVG
-// first because the same asset scales cleanly across every mount
-// point (small rail tile, larger pinned tile, iframe header) from
-// a single file. Extra formats can be added to `ICON_CANDIDATES`
-// if needed; order matters - the first match wins.
-const ICON_CANDIDATES = ['public/icon.svg', 'public/icon.png'];
-/**
- * Look for a standard app icon file at the conventional location.
- * Returns the absolute HF resolve URL when found, `null` otherwise.
- *
- * We hit `resolve/main/` (not `raw/main/`) so:
- *   - LFS pointers follow transparently (large PNGs work).
- *   - `Content-Type` comes from the extension, which `<img>` needs.
- *   - The URL is cacheable cross-session by the browser, so
- *     repeated mounts of the same app glyph don't re-fetch.
- */
-function findIconUrl(spaceId, siblings) {
-  if (!spaceId || !Array.isArray(siblings)) return null;
-  // Build a Set of repo-relative filenames for O(1) candidate
-  // lookups. HF returns `siblings` as `[{ rfilename: "path/in/repo" }, ...]`;
-  // we keep the full path because the convention now lives under
-  // `public/` rather than at the repo root.
-  const files = new Set();
-  for (const s of siblings) {
-    const name = s && typeof s.rfilename === 'string' ? s.rfilename : null;
-    if (!name) continue;
-    files.add(name);
-  }
-  for (const candidate of ICON_CANDIDATES) {
-    if (files.has(candidate)) {
-      return `https://huggingface.co/spaces/${spaceId}/resolve/main/${candidate}`;
-    }
-  }
-  return null;
-}
-// Serialised LLM batch concurrency: we want at most one
-// categorization sweep running at a time, regardless of how many
-// /api/js-apps requests come in. The flag also prevents the
-// startup warm-up and an on-demand refresh from racing each other.
-let categorizationBatchRunning = false;
 // In-memory cache
 let appsCache = {
   data: null,
@@ -289,13 +53,6 @@ async function fetchAppsFromHF() {
       const author = spaceId.split('/')[0];
       const name = spaceId.split('/').pop();
-      // Server-resolved icon URL. Looks for `public/icon.svg` or
-      // `public/icon.png` via the `siblings` list returned by
-      // `?full=true`. See `findIconUrl()` above for the rationale.
-      // `null` when the author hasn't shipped one; clients fall
-      // back to the front-matter emoji.
-      const iconUrl = findIconUrl(spaceId, space.siblings);
       return {
         // Core fields (used by both website and desktop)
         id: spaceId,
@@ -304,8 +61,7 @@ async function fetchAppsFromHF() {
         url: `https://huggingface.co/spaces/${spaceId}`,
         source_kind: 'hf_space',
         isOfficial,
-        iconUrl,
         // Extra metadata (desktop-compatible structure)
         extra: {
           id: spaceId,
@@ -329,86 +85,53 @@ async function fetchAppsFromHF() {
       };
     });
-    console.log(`[Cache] Built ${allApps.length} raw app entries from HF.`);
-    // Sort: official first, then by likes. Dedup is route-specific
-    // and applied downstream (see `dedupGlobalApps` and `dedupJsApps`).
-    allApps.sort((a, b) => {
       if (a.isOfficial !== b.isOfficial) {
         return a.isOfficial ? -1 : 1;
       }
       return (b.extra.likes || 0) - (a.extra.likes || 0);
     });
-    return allApps;
   } catch (err) {
     console.error('[Cache] Error fetching apps:', err);
     throw err;
   }
 }
-/**
- * Pick a winner among Spaces sharing the same repo name. Forks
- * keep the upstream name (e.g. several `reachy_mini_conversation_app`
- * from different authors); we surface only one in the store to
- * avoid drowning the original under a dozen near-identical tiles.
- *
- * Priority: 1) official, 2) oldest (likely original), 3) most likes
- * as tiebreaker.
- */
-function dedupAppsByName(apps) {
-  const deduped = new Map();
-  for (const app of apps) {
-    const key = app.name.toLowerCase();
-    const existing = deduped.get(key);
-    if (!existing) {
-      deduped.set(key, app);
-      continue;
-    }
-    if (app.isOfficial && !existing.isOfficial) {
-      deduped.set(key, app);
-      continue;
-    }
-    if (existing.isOfficial) continue;
-    const appDate = app.extra?.createdAt ? new Date(app.extra.createdAt).getTime() : Infinity;
-    const existingDate = existing.extra?.createdAt ? new Date(existing.extra.createdAt).getTime() : Infinity;
-    if (appDate < existingDate) {
-      deduped.set(key, app);
-    } else if (appDate === existingDate && (app.extra?.likes || 0) > (existing.extra?.likes || 0)) {
-      deduped.set(key, app);
-    }
-  }
-  return [...deduped.values()];
-}
-/**
- * Dedup applied to the full `/api/apps` payload (Python + JS + others
- * mixed). Same-name collisions across SDKs collapse here too, by design:
- * the showcase site favours a clean catalog over completeness, and
- * SDK-aware variants of the same idea live as separate Spaces only
- * by accident in practice.
- */
-function dedupGlobalApps(apps) {
-  return dedupAppsByName(apps);
-}
-/**
- * Dedup applied to the `/api/js-apps` route only. We restrict the
- * comparison to entries already filtered to the JS subset, so a JS
- * Space (e.g. `tfrere/emotions`) does not lose a name fight against
- * an unrelated Python Space sharing the same repo name (e.g.
- * `RemiFabre/emotions`). The mobile shell only sees JS apps anyway,
- * so confining dedup to that scope is what matches the user model.
- */
-function dedupJsApps(jsApps) {
-  return dedupAppsByName(jsApps);
-}
-// Get raw apps with caching. Dedup is NOT applied here - each
-// route owns its own dedup policy (see `dedupGlobalApps` and
-// `dedupJsApps`) so they can disagree without paying for two
-// upstream fetches.
-async function getRawApps() {
   const now = Date.now();
   // Return cache if valid
@@ -430,7 +153,7 @@ async function getRawApps() {
     const apps = await fetchAppsFromHF();
     appsCache.data = apps;
     appsCache.lastFetch = now;
-    console.log(`[Cache] Cache updated with ${apps.length} raw entries`);
     return apps;
   } catch (err) {
     // On error, return stale cache if available
@@ -447,12 +170,11 @@ async function getRawApps() {
 // API endpoint
 app.get('/api/apps', async (req, res) => {
   try {
-    const raw = await getRawApps();
-    const apps = dedupGlobalApps(raw);
-    setCatalogCacheHeaders(res, appsCache.lastFetch);
     res.json({
       apps,
       cached: true,
       count: apps.length,
     });
   } catch (err) {
@@ -461,273 +183,6 @@ app.get('/api/apps', async (req, res) => {
   }
 });
-// =====================================================================
-// JS apps + LLM-inferred categories
-// =====================================================================
-//
-// `/api/js-apps` is a curated view on the JS-only subset:
-//   1. Filter on the `reachy_mini_js_app` tag (the mobile-embeddable subset).
-//   2. Dedup name collisions among JS apps only (`dedupJsApps`),
-//      so a JS app does not get knocked out by a same-named Python
-//      Space surfaced through `/api/apps`.
-//   3. Enrich each entry with `categories` + `categories_source`,
-//      sourced from a persistent dataset cache (see categoryCache.js).
-//
-// Categories are inferred lazily by an LLM from each Space's
-// README. The first request after a cold start may see entries
-// with `categories: null` while the warmup batch is still in
-// flight; subsequent requests pick them up as the cache fills.
-/**
- * Pull the JS-app subset out of the raw apps cache, dedup it
- * within the JS scope, and fold in cached categories. Pure,
- * synchronous-ish (the only async call is to `getRawApps()` which
- * has its own cache).
- */
-async function getJsApps() {
-  const raw = await getRawApps();
-  const jsApps = raw.filter((a) => {
-    const tags = a?.extra?.tags;
-    return Array.isArray(tags) && tags.includes(JS_APP_TAG);
-  });
-  const deduped = dedupJsApps(jsApps);
-  return deduped.map((app) => {
-    const cached = categoryCache.get(app.id);
-    return {
-      ...app,
-      categories: cached ? cached.categories : null,
-      categories_source: cached ? 'inferred' : null,
-      categorized_at: cached ? cached.categorizedAt : null,
-    };
-  });
-}
-/**
- * Run one classification pass over `jsApps`. Skips entries whose
- * cache is still fresh (same `lastModified`, same taxonomy).
- *
- * Serial on purpose: HF Inference Providers don't love bursts
- * from a single token, and total throughput on ~50 apps stays
- * well under a minute. We slip a small jitter between calls to
- * smooth the curve further.
- */
-async function runCategorizationBatch(jsApps) {
-  if (categorizationBatchRunning) {
-    console.log('[Categorize] Batch already running, skipping.');
-    return;
-  }
-  if (!process.env.HF_TOKEN) {
-    console.warn(
-      '[Categorize] HF_TOKEN not set; skipping batch. Set it in .env ' +
-        'or the Space secrets to enable category inference.',
-    );
-    return;
-  }
-  const todo = jsApps.filter((app) =>
-    categoryCache.needsCategorization(app.id, app?.extra?.lastModified),
-  );
-  if (todo.length === 0) {
-    console.log(
-      `[Categorize] All ${jsApps.length} JS apps are already categorized.`,
-    );
-    return;
-  }
-  categorizationBatchRunning = true;
-  console.log(
-    `[Categorize] Starting batch: ${todo.length}/${jsApps.length} app(s) need classification.`,
-  );
-  let success = 0;
-  let failed = 0;
-  let aborted = false;
-  for (let i = 0; i < todo.length; i++) {
-    const app = todo[i];
-    const desc =
-      app.description ||
-      app.extra?.cardData?.short_description ||
-      '';
-    try {
-      const slugs = await categorizeApp({
-        spaceId: app.id,
-        name: app.name,
-        description: desc,
-      });
-      if (slugs == null) {
-        failed++;
-        console.log(
-          `[Categorize]   (${i + 1}/${todo.length}) ${app.id}: transient failure, will retry next pass`,
-        );
-      } else {
-        categoryCache.set(app.id, {
-          categories: slugs,
-          lastModified: app.extra?.lastModified || null,
-        });
-        success++;
-        console.log(
-          `[Categorize]   (${i + 1}/${todo.length}) ${app.id}: ${
-            slugs.length ? slugs.join(', ') : '(no fit)'
-          }`,
-        );
-      }
-    } catch (err) {
-      if (err instanceof HfTokenMissingError) {
-        console.warn(
-          '[Categorize] HF_TOKEN missing mid-batch; aborting cleanly.',
-        );
-        aborted = true;
-        break;
-      }
-      failed++;
-      console.warn(
-        `[Categorize]   (${i + 1}/${todo.length}) ${app.id}: error - ${err.message}`,
-      );
-    }
-    // 250 ms cooldown between calls. Below this, the HF Provider
-    // router occasionally rate-limits a hot token.
-    await new Promise((resolve) => setTimeout(resolve, 250));
-  }
-  console.log(
-    `[Categorize] Batch done: ${success} ok, ${failed} failed${aborted ? ' (aborted)' : ''}.`,
-  );
-  // Persist the new entries even if some failed - partial
-  // progress is strictly better than none, and the failed
-  // entries will be retried on the next pass.
-  await categoryCache.flush();
-  categorizationBatchRunning = false;
-}
-/**
- * Wrap the diagnostic snapshot for the API payload. Lets
- * consumers (mobile shell, website) decide whether to show
- * "loading categories..." or render chips immediately.
- */
-function buildCategorizationStats(jsApps) {
-  let withCategories = 0;
-  for (const app of jsApps) {
-    if (app.categories && app.categories.length >= 0 && app.categories_source) {
-      withCategories++;
-    }
-  }
-  return {
-    enabled: !!process.env.HF_TOKEN,
-    total: jsApps.length,
-    classified: withCategories,
-    pending: jsApps.length - withCategories,
-    inProgress: categorizationBatchRunning,
-    // Authoritative taxonomy shipped alongside the apps so the
-    // mobile shell (and any future client) doesn't have to mirror
-    // the slug list by hand. Pairs with `taxonomyVersion` from
-    // `categoryCache.stats()` so clients can detect drift between
-    // the catalog payload and a stale on-device cache.
-    taxonomy: getPublicTaxonomy(),
-    ...categoryCache.stats(),
-  };
-}
-app.get('/api/js-apps', async (req, res) => {
-  try {
-    const apps = await getJsApps();
-    // Background top-up: if any entry is still uncategorized
-    // (or a Space's lastModified moved since we last looked),
-    // fire off a batch. We DO NOT await it - the response goes
-    // out immediately with whatever the cache currently knows.
-    const needsWork = apps.some(
-      (a) =>
-        !a.categories_source ||
-        categoryCache.needsCategorization(a.id, a.extra?.lastModified),
-    );
-    if (needsWork) {
-      // `void` to make it crystal clear we don't expect a value;
-      // the batch logs its own progress.
-      void runCategorizationBatch(apps).catch((err) => {
-        console.error('[Categorize] Background batch crashed:', err);
-      });
-    }
-    setCatalogCacheHeaders(res, appsCache.lastFetch);
-    res.json({
-      apps,
-      cached: true,
-      count: apps.length,
-      categorization: buildCategorizationStats(apps),
-    });
-  } catch (err) {
-    console.error('[API] /api/js-apps error:', err);
-    res.status(500).json({ error: 'Failed to fetch JS apps' });
-  }
-});
-// =====================================================================
-// Public taxonomy endpoint
-// =====================================================================
-//
-// Standalone read-only projection of the closed category taxonomy
-// (`server/categories.js`). Lets clients consume the slug list,
-// labels and emojis without paying the cost of a full apps fetch -
-// useful for early UI scaffolding (filter chips, empty states) and
-// for tooling that lints app metadata against the live taxonomy.
-//
-// `/api/js-apps` ALSO embeds the same payload under
-// `categorization.taxonomy`, so a mobile shell that fetches the
-// catalog never needs a second round-trip. This endpoint exists
-// for the "I just want the categories" use case.
-//
-// Cache headers: 5 minutes, same TTL as the catalog. The taxonomy
-// is stable across many catalog refreshes (it only moves when we
-// bump `TAXONOMY_VERSION`), but co-aligning the TTLs keeps the
-// reasoning simple - a client that polls both gets a coherent view.
-app.get('/api/categories', (_req, res) => {
-  res.set('Cache-Control', 'public, max-age=300');
-  const stats = categoryCache.stats();
-  res.json({
-    taxonomy: getPublicTaxonomy(),
-    taxonomyVersion: stats.taxonomyVersion,
-  });
-});
-// Manual trigger for a categorization sweep, useful when
-// hand-tuning the taxonomy or testing the LLM prompt without
-// waiting for the next /api/js-apps hit.
-app.post('/api/js-apps/refresh-categories', async (req, res) => {
-  try {
-    const apps = await getJsApps();
-    void runCategorizationBatch(apps).catch((err) => {
-      console.error('[Categorize] Manual batch crashed:', err);
-    });
-    res.json({
-      ok: true,
-      message: `Categorization batch kicked off for ${apps.length} JS apps.`,
-      stats: buildCategorizationStats(apps),
-    });
-  } catch (err) {
-    res.status(500).json({ error: 'Failed to trigger refresh' });
-  }
-});
-// =====================================================================
-// OpenAI Realtime ephemeral keys
-// =====================================================================
-//
-// Per-user mint endpoint backing the Reachy Mini mobile shell's
-// voice conversation. The mobile client posts its HF Bearer token,
-// we validate it via `whoami-v2`, rate-limit per HF user, and
-// proxy a `POST /v1/realtime/sessions` to OpenAI with the master
-// `OPENAI_API_KEY` from this Space's secrets. The short-lived
-// `client_secret.value` is forwarded back to the client.
-//
-// See `server/openaiEphemeral.js` for the full design notes
-// (auth, caching, rate-limit shape, error mapping).
-app.post('/api/openai/ephemeral', mintEphemeralKeyHandler);
 // OAuth config endpoint - expose public OAuth variables to the frontend
 // (Docker Spaces don't auto-inject window.huggingface.variables like static Spaces)
 app.get('/api/oauth-config', (req, res) => {
@@ -758,7 +213,7 @@ app.get('/api/health', (req, res) => {
 app.post('/api/refresh', async (req, res) => {
   try {
     appsCache.lastFetch = null; // Invalidate cache
-    const apps = await getRawApps();
     res.json({ success: true, count: apps.length });
   } catch (err) {
     res.status(500).json({ error: 'Failed to refresh cache' });
@@ -780,31 +235,8 @@ app.get('*', (req, res) => {
 async function warmCache() {
   console.log('[Startup] Pre-warming cache...');
   try {
-    const apps = await getRawApps();
     console.log('[Startup] Cache warmed successfully');
-    // Categorization warm-up: fire the JS-app batch in the
-    // background so the first /api/js-apps caller doesn't
-    // shoulder the cold-start cost. Order: load the dataset
-    // cache first (cheap, one HTTP call), then run the batch
-    // for stale entries only.
-    void (async () => {
-      try {
-        await categoryCache.load();
-        const jsApps = dedupJsApps(
-          apps.filter((a) => {
-            const tags = a?.extra?.tags;
-            return Array.isArray(tags) && tags.includes(JS_APP_TAG);
-          }),
-        );
-        console.log(
-          `[Startup] Found ${jsApps.length} JS apps; checking categories...`,
-        );
-        await runCategorizationBatch(jsApps);
-      } catch (err) {
-        console.error('[Startup] Categorization warm-up failed:', err);
-      }
-    })();
   } catch (err) {
     console.error('[Startup] Failed to warm cache:', err);
   }

 import express from 'express';
 import path from 'path';
 import { fileURLToPath } from 'url';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const app = express();
 const PORT = process.env.PORT || 7860;
 // Cache configuration
 const CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes
 const OFFICIAL_APP_LIST_URL = 'https://huggingface.co/datasets/pollen-robotics/reachy-mini-official-app-store/raw/main/app-list.json';
 // Note: HF API doesn't support pagination with filter=, so we use a high limit
 const HF_SPACES_LIMIT = 1000;
 // In-memory cache
 let appsCache = {
   data: null,
       const author = spaceId.split('/')[0];
       const name = spaceId.split('/').pop();
       return {
         // Core fields (used by both website and desktop)
         id: spaceId,
         url: `https://huggingface.co/spaces/${spaceId}`,
         source_kind: 'hf_space',
         isOfficial,
         // Extra metadata (desktop-compatible structure)
         extra: {
           id: spaceId,
       };
     });
+    // Deduplicate by name: forks keep the same repo name (e.g. 4 spaces
+    // named "reachy_mini_conversation_app" from different authors).
+    // Priority: 1) official, 2) oldest (original), 3) most likes as tiebreaker.
+    const deduped = new Map();
+    for (const app of allApps) {
+      const key = app.name.toLowerCase();
+      const existing = deduped.get(key);
+      if (!existing) {
+        deduped.set(key, app);
+        continue;
+      }
+      // Official always wins
+      if (app.isOfficial && !existing.isOfficial) {
+        deduped.set(key, app);
+        continue;
+      }
+      if (existing.isOfficial) continue;
+      // Oldest wins (the original is created before its forks)
+      const appDate = app.extra.createdAt ? new Date(app.extra.createdAt).getTime() : Infinity;
+      const existingDate = existing.extra.createdAt ? new Date(existing.extra.createdAt).getTime() : Infinity;
+      if (appDate < existingDate) {
+        deduped.set(key, app);
+      } else if (appDate === existingDate && (app.extra.likes || 0) > (existing.extra.likes || 0)) {
+        deduped.set(key, app);
+      }
+    }
+    const uniqueApps = [...deduped.values()];
+    console.log(`[Cache] Deduplicated ${allApps.length} → ${uniqueApps.length} apps (removed ${allApps.length - uniqueApps.length} forks with duplicate names)`);
+    // Sort: official first, then by likes
+    uniqueApps.sort((a, b) => {
       if (a.isOfficial !== b.isOfficial) {
         return a.isOfficial ? -1 : 1;
       }
       return (b.extra.likes || 0) - (a.extra.likes || 0);
     });
+    return uniqueApps;
   } catch (err) {
     console.error('[Cache] Error fetching apps:', err);
     throw err;
   }
 }
+// Get apps with caching
+async function getApps() {
   const now = Date.now();
   // Return cache if valid
     const apps = await fetchAppsFromHF();
     appsCache.data = apps;
     appsCache.lastFetch = now;
+    console.log(`[Cache] Cache updated with ${apps.length} apps`);
     return apps;
   } catch (err) {
     // On error, return stale cache if available
 // API endpoint
 app.get('/api/apps', async (req, res) => {
   try {
+    const apps = await getApps();
     res.json({
       apps,
       cached: true,
+      cacheAge: appsCache.lastFetch ? Math.round((Date.now() - appsCache.lastFetch) / 1000) : 0,
       count: apps.length,
     });
   } catch (err) {
   }
 });
 // OAuth config endpoint - expose public OAuth variables to the frontend
 // (Docker Spaces don't auto-inject window.huggingface.variables like static Spaces)
 app.get('/api/oauth-config', (req, res) => {
 app.post('/api/refresh', async (req, res) => {
   try {
     appsCache.lastFetch = null; // Invalidate cache
+    const apps = await getApps();
     res.json({ success: true, count: apps.length });
   } catch (err) {
     res.status(500).json({ error: 'Failed to refresh cache' });
 async function warmCache() {
   console.log('[Startup] Pre-warming cache...');
   try {
+    await getApps();
     console.log('[Startup] Cache warmed successfully');
   } catch (err) {
     console.error('[Startup] Failed to warm cache:', err);
   }

server/openaiEphemeral.js DELETED Viewed

@@ -1,268 +0,0 @@
-/**
- * Mint per-user OpenAI Realtime ephemeral session keys.
- *
- * Why this module exists
- * ----------------------
- * The Reachy Mini mobile shell historically baked a long-lived
- * OpenAI API key into the bundle (`VITE_OPENAI_API_KEY`), which
- * violates OpenAI's terms of service and leaks the key the moment
- * anyone extracts the IPA/APK. This module is the server-side
- * replacement:
- *
- *   - The master `OPENAI_API_KEY` stays in this Space's secrets,
- *     never reachable by any client.
- *   - The mobile shell asks for a short-lived (~1 minute)
- *     `client_secret.value` per voice conversation, signed with
- *     the user's Hugging Face token so we can identify + rate-limit
- *     per HF user.
- *   - Each ephemeral key is scoped to a single OpenAI Realtime
- *     session, so a leak only loses ~60 seconds of model access.
- *
- * Wire format (matches OpenAI's Realtime API)
- * -------------------------------------------
- *   POST /api/openai/ephemeral
- *   Authorization: Bearer <hf_token>
- *   Content-Type: application/json
- *   Body: { "model"?: string, "voice"?: string }
- *
- *   200 -> the full payload from
- *          `POST https://api.openai.com/v1/realtime/client_secrets`,
- *          forwarded as-is. The client uses `payload.value` (the
- *          `ek_…` ephemeral token) for the `POST /v1/realtime/calls`
- *          WebRTC handshake.
- *   401 -> missing/invalid HF token
- *   429 -> per-user rate limit hit
- *   502 -> OpenAI upstream failed (key bad, model down, ...)
- *   503 -> OPENAI_API_KEY missing on the Space
- *
- * Why we trust HF for auth
- * ------------------------
- * The mobile shell already requires a Hugging Face sign-in to
- * pair with a Reachy Mini robot, so the HF token is a free
- * identity primitive: every legitimate caller already has one,
- * and HF can revoke it from their side. We resolve the token via
- * `whoami-v2` once per 5 minutes (cached) and use the returned
- * `name` as the rate-limit bucket key.
- */
-// GA endpoint. The legacy Beta endpoint
-// (`POST /v1/realtime/sessions`) was retired on 2026-05-07
-// alongside the `OpenAI-Beta: realtime=v1` header, and only
-// accepted preview models (`gpt-4o-realtime-preview-*`). The GA
-// endpoint takes a `session` envelope with a required `type`
-// discriminator and returns the ephemeral key at the top level
-// (`{ value, expires_at, session }`).
-const OPENAI_CLIENT_SECRETS_URL =
-  'https://api.openai.com/v1/realtime/client_secrets';
-const HF_WHOAMI_URL = 'https://huggingface.co/api/whoami-v2';
-// In-memory whoami cache. HF's whoami round-trip is ~150ms, and
-// caching it keeps the mint endpoint snappy without breaking
-// revocation in practice: HF's own token-revocation cache is
-// already eventually consistent, and our 5-minute staleness sits
-// well inside that.
-const whoamiCache = new Map();
-const WHOAMI_TTL_MS = 5 * 60 * 1000;
-// In-memory rate limiter. Per-user sliding window over 1 hour.
-// HF Spaces typically restart every deploy, so the limiter
-// implicitly resets then; that's acceptable for v1. If we ever
-// need durability or multi-replica fairness, swap the Map for a
-// shared KV (Redis, Upstash, ...) without changing the rest of
-// the module.
-const rateLimits = new Map();
-const RATE_LIMIT_WINDOW_MS = 60 * 60 * 1000;
-const DEFAULT_RATE_LIMIT_PER_HOUR = 60;
-// Match what the Reachy Mini mobile shell is built against today
-// (`features/conversation/engine/settings.ts:DEFAULT_MODEL` and
-// `DEFAULT_VOICE`). Bumping these requires coordinating with the
-// mobile client because the GA WebRTC handshake (`/v1/realtime/calls`)
-// negotiates the session shape against this same configuration.
-const DEFAULT_REALTIME_MODEL = 'gpt-realtime-2';
-const DEFAULT_REALTIME_VOICE = 'cedar';
-function getRateLimitMax() {
-  const raw = process.env.OPENAI_EPHEMERAL_RATE_LIMIT_PER_HOUR;
-  const parsed = raw ? Number.parseInt(raw, 10) : NaN;
-  return Number.isFinite(parsed) && parsed > 0
-    ? parsed
-    : DEFAULT_RATE_LIMIT_PER_HOUR;
-}
-function getDefaultModel() {
-  const raw = process.env.OPENAI_REALTIME_MODEL;
-  return raw && raw.trim() !== '' ? raw.trim() : DEFAULT_REALTIME_MODEL;
-}
-class HttpError extends Error {
-  constructor(status, message) {
-    super(message);
-    this.status = status;
-  }
-}
-/**
- * Resolve `Bearer <token>` -> the HF user object, with a 5-minute
- * cache. Throws `HttpError(401)` on a rejected token so the route
- * can surface a clean 401 to the caller.
- */
-async function verifyHfToken(token) {
-  const now = Date.now();
-  const cached = whoamiCache.get(token);
-  if (cached && cached.exp > now) return cached.user;
-  let r;
-  try {
-    r = await fetch(HF_WHOAMI_URL, {
-      headers: { Authorization: `Bearer ${token}` },
-    });
-  } catch (err) {
-    // Network blip: surface a 502 so the client can retry. We
-    // explicitly do NOT cache a failure, so a transient outage
-    // doesn't lock the user out for 5 minutes.
-    throw new HttpError(502, `hf whoami network error: ${err.message}`);
-  }
-  if (r.status === 401 || r.status === 403) {
-    throw new HttpError(401, 'invalid hf token');
-  }
-  if (!r.ok) {
-    throw new HttpError(502, `hf whoami returned ${r.status}`);
-  }
-  const user = await r.json().catch(() => null);
-  // `name` is the canonical HF identifier across users + orgs;
-  // `id` is the numeric backstop in case the schema ever shifts.
-  if (
-    !user ||
-    (typeof user.name !== 'string' && typeof user.id !== 'string')
-  ) {
-    throw new HttpError(502, 'hf whoami returned malformed user');
-  }
-  whoamiCache.set(token, { user, exp: now + WHOAMI_TTL_MS });
-  return user;
-}
-/**
- * Enforce the sliding-window rate limit for `userId`. Throws
- * `HttpError(429)` on overflow. Mutates `rateLimits` to record
- * the current mint timestamp.
- */
-function checkRateLimit(userId) {
-  const now = Date.now();
-  const windowStart = now - RATE_LIMIT_WINDOW_MS;
-  const history = rateLimits.get(userId) || [];
-  const recent = history.filter((t) => t > windowStart);
-  if (recent.length >= getRateLimitMax()) {
-    throw new HttpError(
-      429,
-      `rate limit exceeded (${getRateLimitMax()}/hour)`,
-    );
-  }
-  recent.push(now);
-  rateLimits.set(userId, recent);
-}
-/**
- * Express handler for `POST /api/openai/ephemeral`. Stateless from
- * the caller's perspective: the client posts an HF Bearer token,
- * gets back the OpenAI Realtime session payload, uses it once.
- */
-export async function mintEphemeralKeyHandler(req, res) {
-  try {
-    if (!process.env.OPENAI_API_KEY) {
-      return res
-        .status(503)
-        .json({ error: 'OPENAI_API_KEY not configured on this Space' });
-    }
-    const auth = req.headers.authorization || '';
-    const match = auth.match(/^Bearer\s+(.+)$/i);
-    if (!match) {
-      return res.status(401).json({ error: 'missing bearer token' });
-    }
-    const hfToken = match[1].trim();
-    if (!hfToken) {
-      return res.status(401).json({ error: 'empty bearer token' });
-    }
-    const user = await verifyHfToken(hfToken);
-    const userId = user.name || String(user.id);
-    checkRateLimit(userId);
-    // Caller may override model/voice for A/B tests, but the
-    // defaults match what the mobile shell is built against. We
-    // intentionally do NOT forward arbitrary fields from the
-    // request body to OpenAI: only the two we validated.
-    const body = req.body || {};
-    const model =
-      typeof body.model === 'string' && body.model.trim() !== ''
-        ? body.model.trim()
-        : getDefaultModel();
-    const voice =
-      typeof body.voice === 'string' && body.voice.trim() !== ''
-        ? body.voice.trim()
-        : DEFAULT_REALTIME_VOICE;
-    // GA body shape: the session config sits under `session`, with
-    // a required `type` discriminator (`"realtime"` for the voice
-    // pipeline, `"transcription"` for transcription-only). The
-    // mobile shell only needs `realtime`.
-    const openaiBody = {
-      session: {
-        type: 'realtime',
-        model,
-        // The GA schema expects `audio.output.voice`. We mirror
-        // the minimal shape: clients can still issue
-        // `session.update` events over the data channel after
-        // connect to tweak modalities, tools, instructions, etc.
-        audio: {
-          output: { voice },
-        },
-      },
-    };
-    let openaiRes;
-    try {
-      openaiRes = await fetch(OPENAI_CLIENT_SECRETS_URL, {
-        method: 'POST',
-        headers: {
-          Authorization: `Bearer ${process.env.OPENAI_API_KEY}`,
-          'Content-Type': 'application/json',
-        },
-        body: JSON.stringify(openaiBody),
-      });
-    } catch (err) {
-      console.error('[openai] mint network error:', err);
-      return res.status(502).json({ error: 'openai network error' });
-    }
-    if (!openaiRes.ok) {
-      const text = await openaiRes.text().catch(() => '');
-      console.error(
-        `[openai] mint failed for ${userId}: ${openaiRes.status} ${text}`,
-      );
-      return res.status(502).json({
-        error: 'openai mint failed',
-        upstreamStatus: openaiRes.status,
-      });
-    }
-    const payload = await openaiRes.json();
-    // We log the user id and the chosen model but NEVER the
-    // client_secret. The secret stays on the wire to the
-    // requesting client only.
-    console.log(
-      `[openai] minted ephemeral for ${userId} (model=${model}, voice=${voice})`,
-    );
-    return res.json(payload);
-  } catch (err) {
-    if (err instanceof HttpError) {
-      return res.status(err.status).json({ error: err.message });
-    }
-    console.error('[openai] unexpected mint error:', err);
-    return res.status(500).json({ error: 'internal error' });
-  }
-}

src/context/AppsContext.jsx CHANGED Viewed

@@ -105,17 +105,7 @@ export function AppsProvider({ children }) {
           if (response.ok) {
             const data = await response.json();
             allApps = data.apps;
-            // Cache age moved from response body to the standard
-            // `Age` HTTP header (RFC 7234 §5.1) so the body stays
-            // byte-stable across same-cache-window requests and
-            // ETag-based 304s work. `headers.get('age')` is null
-            // on same-origin if the server didn't set it (older
-            // deploy of the website Space): degrade gracefully to
-            // a `?` rather than poisoning the log with `null`.
-            const age = response.headers.get('age');
-            console.log(
-              `[AppsContext] Fetched ${allApps.length} apps from server cache (age: ${age ?? '?'}s)`,
-            );
           } else {
             throw new Error('Server API not available');
           }

           if (response.ok) {
             const data = await response.json();
             allApps = data.apps;
+            console.log(`[AppsContext] Fetched ${allApps.length} apps from server cache (age: ${data.cacheAge}s)`);
           } else {
             throw new Error('Server API not available');
           }

src/pages/Buy.jsx CHANGED Viewed

@@ -10,7 +10,6 @@ import {
   CardContent,
   Chip,
   Stack,
-  Link,
   Accordion,
   AccordionSummary,
   AccordionDetails,
@@ -26,7 +25,6 @@ import CheckIcon from '@mui/icons-material/Check';
 import CloseIcon from '@mui/icons-material/Close';
 import ExpandMoreIcon from '@mui/icons-material/ExpandMore';
 import OpenInNewIcon from '@mui/icons-material/OpenInNew';
-import PublicIcon from '@mui/icons-material/Public';
 import LocalShippingIcon from '@mui/icons-material/LocalShipping';
 import InventoryIcon from '@mui/icons-material/Inventory';
 import SupportAgentIcon from '@mui/icons-material/SupportAgent';
@@ -40,24 +38,22 @@ const products = {
   wireless: {
     name: 'Reachy Mini',
     tagline: 'The complete experience',
-    price: 499,
     badge: 'Wireless',
     badgeColor: '#0ea5e9',
-    description: 'Self-contained robot with on-board compute. Works wirelessly or wired, perfect for standalone projects and demos. <strong>Lead time: up to 90 days after purchase</strong> (many orders ship sooner).',
-    buyLink: 'https://store.pollen-robotics.com/products/reachy-mini-wireless-version',
-    seeedLink: 'https://www.seeedstudio.com/Reachy-Mini-Wireless-Kit-p-6724.html',
     image: '/assets/reachy-wireless.png',
     featured: true,
   },
   lite: {
     name: 'Reachy Mini Lite',
     tagline: 'Perfect to get started',
-    price: 399,
     badge: 'Lite',
     badgeColor: '#f59e0b',
-    description: 'Connect to your computer via USB. Same expressive robot, powered by your machine. Ideal for development and learning. <strong>Lead time: up to 90 days after purchase</strong> (many orders ship sooner).',
-    buyLink: 'https://store.pollen-robotics.com/products/reachy-mini-lite-version',
-    seeedLink: 'https://www.seeedstudio.com/Reachy-Mini-Lite-Kit-p-6702.html',
     image: '/assets/reachy-lite.png',
     featured: false,
   },
@@ -72,7 +68,7 @@ const comparisonFeatures = [
   { name: 'Camera', wireless: 'Wide angle', lite: 'Wide angle' },
   { name: 'Microphones', wireless: '4 microphones array', lite: '4 microphones array' },
   { name: 'Speaker', wireless: '5W speaker', lite: '5W speaker' },
-  { name: 'On-board Compute', wireless: 'Raspberry Pi CM 4 (16GB storage)', lite: false },
   { name: 'Accelerometer', wireless: 'Built-in IMU', lite: false },
   { name: 'Wi-Fi Connectivity', wireless: 'Wi-Fi', lite: false },
   { name: 'Standalone Mode', wireless: true, lite: false },
@@ -94,7 +90,7 @@ const boxContents = [
 const faqItems = [
   {
     question: 'What is the difference between Wireless and Lite?',
-    answer: 'The Wireless version includes a Raspberry Pi CM 4 built-in, allowing it to run standalone without a computer. The Lite version connects to your Mac, Linux, or Windows computer via USB and uses your computer for processing. Both versions have the same mechanical design and audio/video capabilities.',
   },
   {
     question: 'How long does assembly take?',
@@ -102,7 +98,7 @@ const faqItems = [
   },
   {
     question: 'What about customs and import taxes?',
-    answer: 'All orders ship DAP (Delivered At Place). Shipping costs and any local import duties, taxes, or customs fees are the responsibility of the buyer and are not included in the product price.',
   },
   {
     question: 'Can I upgrade from Lite to Wireless later?',
@@ -342,7 +338,7 @@ function ProductCardsSection() {
                 <Stack spacing={1} sx={{ mb: 3 }}>
                   {key === 'wireless' ? (
                     <>
-                      <FeatureRow icon="✓" text="On-board Raspberry Pi CM 4" highlight />
                       <FeatureRow icon="✓" text="Wi-Fi + USB connectivity" highlight />
                       <FeatureRow icon="✓" text="Built-in IMU" highlight />
                     </>
@@ -371,31 +367,6 @@ function ProductCardsSection() {
                 >
                   Buy {product.badge} — ${product.price}
                 </Button>
-                <Typography
-                  variant="body2"
-                  sx={{
-                    mt: 2,
-                    textAlign: 'center',
-                    fontSize: 13,
-                    fontWeight: 600,
-                    color: 'text.secondary',
-                  }}
-                >
-                  Outside EU/UK & US/Canada?
-                </Typography>
-                <Button
-                  variant="outlined"
-                  size="medium"
-                  fullWidth
-                  href={product.seeedLink}
-                  target="_blank"
-                  rel="noopener noreferrer"
-                  startIcon={<PublicIcon />}
-                  sx={{ mt: 1 }}
-                >
-                  Order via Seeed Studio
-                </Button>
               </CardContent>
             </Card>
           </Grid>
@@ -408,27 +379,16 @@ function ProductCardsSection() {
           variant="body1"
           sx={{ fontWeight: 600, color: 'text.primary' }}
         >
-          Lead time: up to 90 days after purchase (many orders ship sooner)
         </Typography>
         <Typography
           variant="body2"
           color="text.secondary"
           sx={{ maxWidth: 600, mx: 'auto', lineHeight: 1.7, mt: 1 }}
         >
-          <strong>Shipping and import duties:</strong> all orders ship DAP (Delivered At Place).
-          <br />
-          Shipping costs and any local import duties, taxes, or customs fees are the responsibility of the buyer and are not included in the product price.
           <br />
-          Our store ships to EU/UK and US/Canada. For other countries, order
-          from our official distributor{' '}
-          <Link
-            href="https://www.seeedstudio.com/Reachy-Mini-Wireless-Kit-p-6724.html"
-            target="_blank"
-            rel="noopener noreferrer"
-          >
-            Seeed Studio
-          </Link>
-          .
         </Typography>
       </Box>
     </Container>
@@ -485,13 +445,13 @@ function ComparisonSection() {
                   <TableCell align="center" sx={{ fontWeight: 700, fontSize: 15, py: 2.5 }}>
                     <Stack direction="row" spacing={1} alignItems="center" justifyContent="center">
                       <Chip label="Wireless" size="small" sx={{ bgcolor: '#0ea5e920', color: '#0ea5e9', fontWeight: 600 }} />
-                      <Typography fontWeight={700}>$499</Typography>
                     </Stack>
                   </TableCell>
                   <TableCell align="center" sx={{ fontWeight: 700, fontSize: 15, py: 2.5 }}>
                     <Stack direction="row" spacing={1} alignItems="center" justifyContent="center">
                       <Chip label="Lite" size="small" sx={{ bgcolor: '#f59e0b20', color: '#f59e0b', fontWeight: 600 }} />
-                      <Typography fontWeight={700}>$399</Typography>
                     </Stack>
                   </TableCell>
                 </TableRow>
@@ -682,7 +642,7 @@ function FinalCTASection() {
               '&:hover': { bgcolor: '#e68600' },
             }}
           >
-            Buy Wireless — $499
           </Button>
           <Button
             variant="outlined"
@@ -700,7 +660,7 @@ function FinalCTASection() {
               },
             }}
           >
-            Buy Lite — $399
           </Button>
         </Stack>
       </Container>

   CardContent,
   Chip,
   Stack,
   Accordion,
   AccordionSummary,
   AccordionDetails,
 import CloseIcon from '@mui/icons-material/Close';
 import ExpandMoreIcon from '@mui/icons-material/ExpandMore';
 import OpenInNewIcon from '@mui/icons-material/OpenInNew';
 import LocalShippingIcon from '@mui/icons-material/LocalShipping';
 import InventoryIcon from '@mui/icons-material/Inventory';
 import SupportAgentIcon from '@mui/icons-material/SupportAgent';
   wireless: {
     name: 'Reachy Mini',
     tagline: 'The complete experience',
+    price: 449,
     badge: 'Wireless',
     badgeColor: '#0ea5e9',
+    description: 'Self-contained robot with on-board compute. Works wirelessly or wired, perfect for standalone projects and demos. <strong>Ships in 90 days</strong>.',
+    buyLink: 'https://buy.stripe.com/9B65kFfFlaKFbY34W873G03',
     image: '/assets/reachy-wireless.png',
     featured: true,
   },
   lite: {
     name: 'Reachy Mini Lite',
     tagline: 'Perfect to get started',
+    price: 299,
     badge: 'Lite',
     badgeColor: '#f59e0b',
+    description: 'Connect to your computer via USB. Same expressive robot, powered by your machine. Ideal for development and learning. <strong>Ships in 90 days</strong>.',
+    buyLink: 'https://buy.stripe.com/6oUfZj78P1a5e6b0FS73G02',
     image: '/assets/reachy-lite.png',
     featured: false,
   },
   { name: 'Camera', wireless: 'Wide angle', lite: 'Wide angle' },
   { name: 'Microphones', wireless: '4 microphones array', lite: '4 microphones array' },
   { name: 'Speaker', wireless: '5W speaker', lite: '5W speaker' },
+  { name: 'On-board Compute', wireless: 'Raspberry Pi 4 (16GB storage)', lite: false },
   { name: 'Accelerometer', wireless: 'Built-in IMU', lite: false },
   { name: 'Wi-Fi Connectivity', wireless: 'Wi-Fi', lite: false },
   { name: 'Standalone Mode', wireless: true, lite: false },
 const faqItems = [
   {
     question: 'What is the difference between Wireless and Lite?',
+    answer: 'The Wireless version includes a Raspberry Pi 4 built-in, allowing it to run standalone without a computer. The Lite version connects to your Mac, Linux, or Windows computer via USB and uses your computer for processing. Both versions have the same mechanical design and audio/video capabilities.',
   },
   {
     question: 'How long does assembly take?',
   },
   {
     question: 'What about customs and import taxes?',
+    answer: 'EU/UK and US/Canada orders ship duty-paid (DDP) — no surprise fees on delivery. Other destinations ship DAP, meaning local import duties and taxes may apply upon delivery.',
   },
   {
     question: 'Can I upgrade from Lite to Wireless later?',
                 <Stack spacing={1} sx={{ mb: 3 }}>
                   {key === 'wireless' ? (
                     <>
+                      <FeatureRow icon="✓" text="On-board Raspberry Pi 4" highlight />
                       <FeatureRow icon="✓" text="Wi-Fi + USB connectivity" highlight />
                       <FeatureRow icon="✓" text="Built-in IMU" highlight />
                     </>
                 >
                   Buy {product.badge} — ${product.price}
                 </Button>
               </CardContent>
             </Card>
           </Grid>
           variant="body1"
           sx={{ fontWeight: 600, color: 'text.primary' }}
         >
+          Current Lead time: 90 days after purchase
         </Typography>
         <Typography
           variant="body2"
           color="text.secondary"
           sx={{ maxWidth: 600, mx: 'auto', lineHeight: 1.7, mt: 1 }}
         >
+          <strong>Import duties:</strong> EU/UK + US/Canada ship duty-paid (DDP).
           <br />
+          Other destinations may incur local import duties/taxes on delivery (DAP).
         </Typography>
       </Box>
     </Container>
                   <TableCell align="center" sx={{ fontWeight: 700, fontSize: 15, py: 2.5 }}>
                     <Stack direction="row" spacing={1} alignItems="center" justifyContent="center">
                       <Chip label="Wireless" size="small" sx={{ bgcolor: '#0ea5e920', color: '#0ea5e9', fontWeight: 600 }} />
+                      <Typography fontWeight={700}>$449</Typography>
                     </Stack>
                   </TableCell>
                   <TableCell align="center" sx={{ fontWeight: 700, fontSize: 15, py: 2.5 }}>
                     <Stack direction="row" spacing={1} alignItems="center" justifyContent="center">
                       <Chip label="Lite" size="small" sx={{ bgcolor: '#f59e0b20', color: '#f59e0b', fontWeight: 600 }} />
+                      <Typography fontWeight={700}>$299</Typography>
                     </Stack>
                   </TableCell>
                 </TableRow>
               '&:hover': { bgcolor: '#e68600' },
             }}
           >
+            Buy Wireless — $449
           </Button>
           <Button
             variant="outlined"
               },
             }}
           >
+            Buy Lite — $299
           </Button>
         </Stack>
       </Container>

src/pages/Download.jsx CHANGED Viewed

@@ -18,7 +18,6 @@ import CheckCircleIcon from '@mui/icons-material/CheckCircle';
 import OpenInNewIcon from '@mui/icons-material/OpenInNew';
 import ExpandMoreIcon from '@mui/icons-material/ExpandMore';
 import ExpandLessIcon from '@mui/icons-material/ExpandLess';
-import DesktopWindowsIcon from '@mui/icons-material/DesktopWindows';
 import Layout from '../components/Layout';
@@ -66,11 +65,6 @@ function detectPlatform() {
   return 'darwin-aarch64';
 }
-function isMobileDevice() {
-  const ua = navigator.userAgent;
-  return /Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(ua);
-}
 // Format date
 function formatDate(dateString) {
   const date = new Date(dateString);
@@ -180,9 +174,6 @@ function parseReleasePlatforms(assets) {
     const name = asset.name.toLowerCase();
     const url = asset.browser_download_url;
-    // Skip signature files entirely
-    if (name.endsWith('.sig')) return;
     // macOS Apple Silicon - prefer .dmg
     if (name.includes('arm64.dmg')) {
       platforms['darwin-aarch64'] = { url };
@@ -190,13 +181,13 @@ function parseReleasePlatforms(assets) {
       platforms['darwin-aarch64'] = { url };
     }
-    // Windows - .msi
     if (name.endsWith('.msi')) {
       platforms['windows-x86_64'] = { url };
     }
     // Linux - .deb
-    if (name.endsWith('.deb')) {
       platforms['linux-x86_64'] = { url };
     }
   });
@@ -321,13 +312,11 @@ export default function Download() {
   const [detectedPlatform, setDetectedPlatform] = useState(null);
   const [loading, setLoading] = useState(true);
   const [showAllReleases, setShowAllReleases] = useState(false);
-  const [isMobile, setIsMobile] = useState(false);
   const [error, setError] = useState(null);
   useEffect(() => {
     setDetectedPlatform(detectPlatform());
-    setIsMobile(isMobileDevice());
     // Fetch latest release info from GitHub API
     async function fetchReleases() {
@@ -532,97 +521,67 @@ export default function Download() {
               </Typography>
             </Stack>
-            {/* Primary download button or mobile notice */}
-            {isMobile ? (
               <Box
                 sx={{
-                  mt: 2,
-                  p: 3,
-                  background: 'linear-gradient(135deg, rgba(255, 149, 0, 0.1) 0%, rgba(139, 92, 246, 0.08) 100%)',
-                  border: '1px solid rgba(255, 149, 0, 0.3)',
-                  borderRadius: 3,
                   maxWidth: 500,
                   mx: 'auto',
                 }}
               >
-                <DesktopWindowsIcon sx={{ fontSize: 40, color: 'rgba(255,255,255,0.5)', mb: 1.5 }} />
-                <Typography
-                  variant="body1"
-                  sx={{ color: 'rgba(255,255,255,0.9)', fontWeight: 600, mb: 1 }}
-                >
-                  Desktop only
-                </Typography>
-                <Typography
-                  variant="body2"
-                  sx={{ color: 'rgba(255,255,255,0.6)' }}
-                >
-                  Reachy Mini Control is a desktop application available for macOS, Windows, and Linux. Please visit this page from a computer to download it.
-                </Typography>
-              </Box>
-            ) : (
-              <>
-                <Button
-                  variant="contained"
-                  size="large"
-                  href={currentUrl}
-                  startIcon={<DownloadIcon />}
-                  sx={{
-                    px: 6,
-                    py: 2,
-                    fontSize: 17,
-                    fontWeight: 600,
-                    borderRadius: 3,
-                    background: 'linear-gradient(135deg, #FF9500 0%, #764ba2 100%)',
-                    boxShadow: '0 8px 32px rgba(255, 149, 0, 0.35)',
-                    transition: 'all 0.3s ease',
-                    '&:hover': {
-                      boxShadow: '0 12px 48px rgba(59, 130, 246, 0.5)',
-                      transform: 'translateY(-2px)',
-                    },
-                  }}
-                >
-                  Download for {currentPlatform?.name}
-                </Button>
                 <Typography
                   variant="body2"
                   sx={{
-                    color: 'rgba(255,255,255,0.4)',
-                    mt: 2,
-                    fontSize: 13,
                   }}
                 >
-                  {currentPlatform?.subtitle} • {currentPlatform?.format?.replace('.', '').toUpperCase()} package
                 </Typography>
-                {/* Beta Warning for Windows and Linux */}
-                {(detectedPlatform?.startsWith('windows') || detectedPlatform?.includes('linux')) && (
-                  <Box
-                    sx={{
-                      mt: 3,
-                      p: 2.5,
-                      background: 'linear-gradient(135deg, rgba(59, 130, 246, 0.1) 0%, rgba(139, 92, 246, 0.08) 100%)',
-                      border: '1px solid rgba(59, 130, 246, 0.3)',
-                      borderRadius: 2,
-                      maxWidth: 500,
-                      mx: 'auto',
-                    }}
-                  >
-                    <Typography
-                      variant="body2"
-                      sx={{
-                        color: 'rgba(255,255,255,0.8)',
-                        fontWeight: 500,
-                      }}
-                    >
-                      {detectedPlatform?.startsWith('windows')
-                        ? <>⚠️ Windows version is currently in Beta - installation requires <strong style={{ color: 'rgba(255,255,255,0.9)' }}>administrator privileges</strong>.</>
-                        : <>⚠️ Linux version is currently in Beta - please report any issues on <a href="https://github.com/pollen-robotics/reachy-mini-desktop-app/issues" target="_blank" rel="noopener noreferrer" style={{ color: '#3b82f6', textDecoration: 'underline' }}>GitHub</a> or <a href="https://discord.gg/HDrGY9eJHt" target="_blank" rel="noopener noreferrer" style={{ color: '#3b82f6', textDecoration: 'underline' }}>Discord</a>.</>
-                      }
-                    </Typography>
-                  </Box>
-                )}
-              </>
             )}
             {/* App screenshot */}
@@ -641,37 +600,35 @@ export default function Download() {
             />
           </Box>
-          {/* All platforms - hidden on mobile */}
-          {!isMobile && (
-            <Box sx={{ mb: 8 }}>
-              <Typography
-                variant="overline"
-                sx={{
-                  color: 'rgba(255,255,255,0.4)',
-                  display: 'block',
-                  textAlign: 'center',
-                  mb: 3,
-                  letterSpacing: 2,
-                }}
-              >
-                Available for all platforms
-              </Typography>
-              <Grid container spacing={2}>
-                {['darwin-aarch64', 'windows-x86_64', 'linux-x86_64'].map((key) => (
-                  <Grid size={{ xs: 12, sm: 4 }} key={key}>
-                    <PlatformCard
-                      platformKey={key}
-                      url={releaseData?.platforms[key]?.url}
-                      isActive={key === detectedPlatform}
-                      onClick={() => setDetectedPlatform(key)}
-                    />
-                  </Grid>
-                ))}
-              </Grid>
-            </Box>
-          )}
           {/* Features / What's included */}
           <Box

 import OpenInNewIcon from '@mui/icons-material/OpenInNew';
 import ExpandMoreIcon from '@mui/icons-material/ExpandMore';
 import ExpandLessIcon from '@mui/icons-material/ExpandLess';
 import Layout from '../components/Layout';
   return 'darwin-aarch64';
 }
 // Format date
 function formatDate(dateString) {
   const date = new Date(dateString);
     const name = asset.name.toLowerCase();
     const url = asset.browser_download_url;
     // macOS Apple Silicon - prefer .dmg
     if (name.includes('arm64.dmg')) {
       platforms['darwin-aarch64'] = { url };
       platforms['darwin-aarch64'] = { url };
     }
+    // Windows - .msi (exclude .sig signature files)
     if (name.endsWith('.msi')) {
       platforms['windows-x86_64'] = { url };
     }
     // Linux - .deb
+    if (name.includes('amd64.deb')) {
       platforms['linux-x86_64'] = { url };
     }
   });
   const [detectedPlatform, setDetectedPlatform] = useState(null);
   const [loading, setLoading] = useState(true);
   const [showAllReleases, setShowAllReleases] = useState(false);
   const [error, setError] = useState(null);
   useEffect(() => {
     setDetectedPlatform(detectPlatform());
     // Fetch latest release info from GitHub API
     async function fetchReleases() {
               </Typography>
             </Stack>
+            {/* Primary download button */}
+            <Button
+              variant="contained"
+              size="large"
+              href={currentUrl}
+              startIcon={<DownloadIcon />}
+              sx={{
+                px: 6,
+                py: 2,
+                fontSize: 17,
+                fontWeight: 600,
+                borderRadius: 3,
+                background: 'linear-gradient(135deg, #FF9500 0%, #764ba2 100%)',
+                boxShadow: '0 8px 32px rgba(255, 149, 0, 0.35)',
+                transition: 'all 0.3s ease',
+                '&:hover': {
+                  boxShadow: '0 12px 48px rgba(59, 130, 246, 0.5)',
+                  transform: 'translateY(-2px)',
+                },
+              }}
+            >
+              Download for {currentPlatform?.name}
+            </Button>
+            <Typography
+              variant="body2"
+              sx={{
+                color: 'rgba(255,255,255,0.4)',
+                mt: 2,
+                fontSize: 13,
+              }}
+            >
+              {currentPlatform?.subtitle} • {currentPlatform?.format?.replace('.', '').toUpperCase()} package
+            </Typography>
+            {/* Beta Warning for Windows and Linux */}
+            {(detectedPlatform?.startsWith('windows') || detectedPlatform?.includes('linux')) && (
               <Box
                 sx={{
+                  mt: 3,
+                  p: 2.5,
+                  background: 'linear-gradient(135deg, rgba(59, 130, 246, 0.1) 0%, rgba(139, 92, 246, 0.08) 100%)',
+                  border: '1px solid rgba(59, 130, 246, 0.3)',
+                  borderRadius: 2,
                   maxWidth: 500,
                   mx: 'auto',
                 }}
               >
                 <Typography
                   variant="body2"
                   sx={{
+                    color: 'rgba(255,255,255,0.8)',
+                    fontWeight: 500,
                   }}
                 >
+                  {detectedPlatform?.startsWith('windows')
+                    ? <>⚠️ Windows version is currently in Beta — installation requires <strong style={{ color: 'rgba(255,255,255,0.9)' }}>administrator privileges</strong>.</>
+                    : <>⚠️ Linux version is currently in Beta — please report any issues on <a href="https://github.com/pollen-robotics/reachy-mini-desktop-app/issues" target="_blank" rel="noopener noreferrer" style={{ color: '#3b82f6', textDecoration: 'underline' }}>GitHub</a> or <a href="https://discord.gg/HDrGY9eJHt" target="_blank" rel="noopener noreferrer" style={{ color: '#3b82f6', textDecoration: 'underline' }}>Discord</a>.</>
+                  }
                 </Typography>
+              </Box>
             )}
             {/* App screenshot */}
             />
           </Box>
+          {/* All platforms */}
+          <Box sx={{ mb: 8 }}>
+            <Typography
+              variant="overline"
+              sx={{
+                color: 'rgba(255,255,255,0.4)',
+                display: 'block',
+                textAlign: 'center',
+                mb: 3,
+                letterSpacing: 2,
+              }}
+            >
+              Available for all platforms
+            </Typography>
+            <Grid container spacing={2}>
+              {['darwin-aarch64', 'windows-x86_64', 'linux-x86_64'].map((key) => (
+                <Grid size={{ xs: 12, sm: 4 }} key={key}>
+                  <PlatformCard
+                    platformKey={key}
+                    url={releaseData?.platforms[key]?.url}
+                    isActive={key === detectedPlatform}
+                    onClick={() => setDetectedPlatform(key)}
+                  />
+                </Grid>
+              ))}
+            </Grid>
+          </Box>
           {/* Features / What's included */}
           <Box

src/pages/GettingStarted.jsx CHANGED Viewed

@@ -1,4 +1,4 @@
-import { useState, useEffect } from 'react';
 import { Link as RouterLink, useLocation } from 'react-router-dom';
 import {
   Box,
@@ -18,7 +18,6 @@ import {
 } from '@mui/material';
 import OpenInNewIcon from '@mui/icons-material/OpenInNew';
 import DownloadIcon from '@mui/icons-material/Download';
-import DesktopWindowsIcon from '@mui/icons-material/DesktopWindows';
 import WifiIcon from '@mui/icons-material/Wifi';
 import UsbIcon from '@mui/icons-material/Usb';
 import CheckCircleIcon from '@mui/icons-material/CheckCircle';
@@ -142,11 +141,6 @@ function YouTubeEmbed({ videoId, title, version = 'wireless' }) {
   );
 }
-function isMobileDevice() {
-  const ua = navigator.userAgent;
-  return /Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(ua);
-}
 export default function GettingStarted() {
   const location = useLocation();
   const params = new URLSearchParams(location.search);
@@ -154,11 +148,6 @@ export default function GettingStarted() {
   const [version, setVersion] = useState(
     urlVersion === 'lite' ? 'lite' : 'wireless'
   );
-  const [isMobile, setIsMobile] = useState(false);
-  useEffect(() => {
-    setIsMobile(isMobileDevice());
-  }, []);
   return (
     <Layout transparentHeader>
@@ -339,45 +328,23 @@ export default function GettingStarted() {
                         <Typography variant="caption" sx={{ display: 'block', mb: 2, color: 'warning.main' }}>
                           Desktop App available for macOS (Apple Silicon), Windows & Linux (beta).
                         </Typography>
-                        {isMobile ? (
-                          <Box
-                            sx={{
-                              p: 2,
-                              bgcolor: 'action.hover',
-                              borderRadius: 2,
-                              border: '1px solid',
-                              borderColor: 'divider',
-                              display: 'flex',
-                              alignItems: 'center',
-                              gap: 1.5,
-                            }}
-                          >
-                            <DesktopWindowsIcon sx={{ color: 'text.secondary', fontSize: 20 }} />
-                            <Typography variant="body2" color="text.secondary">
-                              The desktop app can only be downloaded from a computer.
-                            </Typography>
-                          </Box>
-                        ) : (
-                          <>
-                            <Button
-                              variant="contained"
-                              component={RouterLink}
-                              to="/download"
-                              startIcon={<DownloadIcon/>}
-                            >
-                              Download Desktop App
-                            </Button>
-                            <Button
-                              variant="outlined"
-                              href="https://huggingface.co/docs/reachy_mini/SDK/installation"
-                              target="_blank"
-                              startIcon={<OpenInNewIcon/>}
-                            >
-                              Alternative: Python SDK
-                            </Button>
-                          </>
-                        )}
                       </StepContent>
                     </Step>
@@ -433,7 +400,7 @@ export default function GettingStarted() {
               <Typography variant="body1" color="text.secondary" sx={{ mb: 4, maxWidth: 600, mx: 'auto' }}>
                 Follow our visual guide to put together your Reachy Mini.
-                Most people finish in <strong>2-3 hours</strong> - our record is 43 minutes! 🏆
               </Typography>
               <Box
@@ -512,45 +479,23 @@ export default function GettingStarted() {
                         <Typography variant="caption" sx={{ display: 'block', mb: 2, color: 'warning.main' }}>
                           Desktop App available for macOS (Apple Silicon), Windows & Linux (beta).
                         </Typography>
-                        {isMobile ? (
-                          <Box
-                            sx={{
-                              p: 2,
-                              bgcolor: 'action.hover',
-                              borderRadius: 2,
-                              border: '1px solid',
-                              borderColor: 'divider',
-                              display: 'flex',
-                              alignItems: 'center',
-                              gap: 1.5,
-                            }}
-                          >
-                            <DesktopWindowsIcon sx={{ color: 'text.secondary', fontSize: 20 }} />
-                            <Typography variant="body2" color="text.secondary">
-                              The desktop app can only be downloaded from a computer.
-                            </Typography>
-                          </Box>
-                        ) : (
-                          <>
-                            <Button
-                              variant="contained"
-                              component={RouterLink}
-                              to="/download"
-                              startIcon={<DownloadIcon/>}
-                            >
-                              Download Desktop App
-                            </Button>
-                            <Button
-                              variant="outlined"
-                              href="https://huggingface.co/docs/reachy_mini/SDK/installation"
-                              target="_blank"
-                              startIcon={<OpenInNewIcon/>}
-                            >
-                              Alternative: Python SDK
-                            </Button>
-                          </>
-                        )}
                       </StepContent>
                     </Step>
                     <Step active completed={false}>

+import { useState } from 'react';
 import { Link as RouterLink, useLocation } from 'react-router-dom';
 import {
   Box,
 } from '@mui/material';
 import OpenInNewIcon from '@mui/icons-material/OpenInNew';
 import DownloadIcon from '@mui/icons-material/Download';
 import WifiIcon from '@mui/icons-material/Wifi';
 import UsbIcon from '@mui/icons-material/Usb';
 import CheckCircleIcon from '@mui/icons-material/CheckCircle';
   );
 }
 export default function GettingStarted() {
   const location = useLocation();
   const params = new URLSearchParams(location.search);
   const [version, setVersion] = useState(
     urlVersion === 'lite' ? 'lite' : 'wireless'
   );
   return (
     <Layout transparentHeader>
                         <Typography variant="caption" sx={{ display: 'block', mb: 2, color: 'warning.main' }}>
                           Desktop App available for macOS (Apple Silicon), Windows & Linux (beta).
                         </Typography>
+                        <Button
+                          variant="contained"
+                          component={RouterLink}
+                          to="/download"
+                          startIcon={<DownloadIcon/>}
+                        >
+                          Download Desktop App
+                        </Button>
+                        <Button
+                          variant="outlined"
+                          href="https://huggingface.co/docs/reachy_mini/SDK/installation"
+                          target="_blank"
+                          startIcon={<OpenInNewIcon/>}
+                        >
+                          Alternative: Python SDK
+                        </Button>
                       </StepContent>
                     </Step>
               <Typography variant="body1" color="text.secondary" sx={{ mb: 4, maxWidth: 600, mx: 'auto' }}>
                 Follow our visual guide to put together your Reachy Mini.
+                Most people finish in <strong>2-3 hours</strong> — our record is 43 minutes! 🏆
               </Typography>
               <Box
                         <Typography variant="caption" sx={{ display: 'block', mb: 2, color: 'warning.main' }}>
                           Desktop App available for macOS (Apple Silicon), Windows & Linux (beta).
                         </Typography>
+                        <Button
+                          variant="contained"
+                          component={RouterLink}
+                          to="/download"
+                          startIcon={<DownloadIcon/>}
+                        >
+                          Download Desktop App
+                        </Button>
+                        <Button
+                          variant="outlined"
+                          href="https://huggingface.co/docs/reachy_mini/SDK/installation"
+                          target="_blank"
+                          startIcon={<OpenInNewIcon/>}
+                        >
+                          Alternative: Python SDK
+                        </Button>
                       </StepContent>
                     </Step>
                     <Step active completed={false}>

src/pages/Home.jsx CHANGED Viewed

@@ -11,7 +11,6 @@ import {
 } from "@mui/material";
 import { useSpring, animated } from "@react-spring/web";
 import OpenInNewIcon from "@mui/icons-material/OpenInNew";
-import PublicIcon from "@mui/icons-material/Public";
 import ArrowForwardIcon from "@mui/icons-material/ArrowForward";
 import Layout from "../components/Layout";
@@ -658,7 +657,7 @@ function ProductsSection() {
                 WebkitTextFillColor: "transparent",
               }}
             >
-              $499
             </Typography>
             <Stack
@@ -666,7 +665,7 @@ function ProductsSection() {
               sx={{ mb: 4, textAlign: "left", maxWidth: 280, mx: "auto" }}
             >
               {[
-                "Raspberry Pi CM 4 on-board",
                 "Wi-Fi + USB",
                 "Camera, 4 mics, speaker",
                 "Accelerometer",
@@ -684,30 +683,12 @@ function ProductsSection() {
               variant="contained"
               size="large"
               fullWidth
-              href="https://store.pollen-robotics.com/products/reachy-mini-wireless-version"
               target="_blank"
               sx={{ py: 1.5 }}
             >
               Order Now
             </Button>
-            <Typography
-              sx={{ mt: 2, fontSize: 13, fontWeight: 600, color: "text.secondary" }}
-            >
-              Outside EU/UK & US/Canada?
-            </Typography>
-            <Button
-              variant="outlined"
-              size="medium"
-              fullWidth
-              href="https://www.seeedstudio.com/Reachy-Mini-Wireless-Kit-p-6724.html"
-              target="_blank"
-              rel="noopener noreferrer"
-              startIcon={<PublicIcon />}
-              sx={{ mt: 1 }}
-            >
-              Order via Seeed Studio
-            </Button>
           </Box>
         </Grid>
@@ -737,7 +718,7 @@ function ProductsSection() {
                 color: "text.primary",
               }}
             >
-              $399
             </Typography>
             <Stack
@@ -763,30 +744,12 @@ function ProductsSection() {
               variant="outlined"
               size="large"
               fullWidth
-              href="https://store.pollen-robotics.com/products/reachy-mini-lite-version"
               target="_blank"
               sx={{ py: 1.5 }}
             >
               Order Now
             </Button>
-            <Typography
-              sx={{ mt: 2, fontSize: 13, fontWeight: 600, color: "text.secondary" }}
-            >
-              Outside EU/UK & US/Canada?
-            </Typography>
-            <Button
-              variant="outlined"
-              size="medium"
-              fullWidth
-              href="https://www.seeedstudio.com/Reachy-Mini-Lite-Kit-p-6702.html"
-              target="_blank"
-              rel="noopener noreferrer"
-              startIcon={<PublicIcon />}
-              sx={{ mt: 1 }}
-            >
-              Order via Seeed Studio
-            </Button>
           </Box>
         </Grid>
       </Grid>
@@ -800,7 +763,7 @@ function ProductsSection() {
             fontWeight: 600,
           }}
         >
-          Lead time: up to 90 days after purchase (many orders ship sooner)
         </Typography>
         <Typography
           variant="body2"
@@ -812,20 +775,9 @@ function ProductsSection() {
             lineHeight: 1.7,
           }}
         >
-          <strong>Shipping and import duties:</strong> all orders ship DAP (Delivered At Place).
-          <br />
-          Shipping costs and any local import duties, taxes, or customs fees are the responsibility of the buyer and are not included in the product price.
           <br />
-          Our store ships to EU/UK and US/Canada. For other countries, order
-          from our official distributor{" "}
-          <Link
-            href="https://www.seeedstudio.com/Reachy-Mini-Wireless-Kit-p-6724.html"
-            target="_blank"
-            rel="noopener noreferrer"
-          >
-            Seeed Studio
-          </Link>
-          .
         </Typography>
       </Box>

 } from "@mui/material";
 import { useSpring, animated } from "@react-spring/web";
 import OpenInNewIcon from "@mui/icons-material/OpenInNew";
 import ArrowForwardIcon from "@mui/icons-material/ArrowForward";
 import Layout from "../components/Layout";
                 WebkitTextFillColor: "transparent",
               }}
             >
+              $449
             </Typography>
             <Stack
               sx={{ mb: 4, textAlign: "left", maxWidth: 280, mx: "auto" }}
             >
               {[
+                "Raspberry Pi 4 on-board",
                 "Wi-Fi + USB",
                 "Camera, 4 mics, speaker",
                 "Accelerometer",
               variant="contained"
               size="large"
               fullWidth
+              href="https://buy.stripe.com/9B65kFfFlaKFbY34W873G03"
               target="_blank"
               sx={{ py: 1.5 }}
             >
               Order Now
             </Button>
           </Box>
         </Grid>
                 color: "text.primary",
               }}
             >
+              $299
             </Typography>
             <Stack
               variant="outlined"
               size="large"
               fullWidth
+              href="https://buy.stripe.com/6oUfZj78P1a5e6b0FS73G02"
               target="_blank"
               sx={{ py: 1.5 }}
             >
               Order Now
             </Button>
           </Box>
         </Grid>
       </Grid>
             fontWeight: 600,
           }}
         >
+          Current Lead time: 90 days after purchase
         </Typography>
         <Typography
           variant="body2"
             lineHeight: 1.7,
           }}
         >
+          <strong>Import duties:</strong> EU/UK + US/Canada ship duty-paid (DDP).
           <br />
+          Other destinations may incur local import duties/taxes on delivery (DAP).
         </Typography>
       </Box>

yarn.lock CHANGED Viewed

@@ -1031,7 +1031,7 @@ browserslist@^4.24.0:
     node-releases "^2.0.27"
     update-browserslist-db "^1.2.0"
-bytes@3.1.2, bytes@~3.1.2:
   version "3.1.2"
   resolved "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
   integrity sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==
@@ -1124,26 +1124,6 @@ comma-separated-tokens@^2.0.0:
   resolved "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-2.0.3.tgz"
   integrity sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==
-compressible@~2.0.18:
-  version "2.0.18"
-  resolved "https://registry.yarnpkg.com/compressible/-/compressible-2.0.18.tgz#af53cca6b070d4c3c0750fbd77286a6d7cc46fba"
-  integrity sha512-AF3r7P5dWxL8MxyITRMlORQNaOA2IkAFaTr4k7BUumjPtRpGDTZpl0Pb1XCO6JeDCBdp126Cgs9sMxqSjgYyRg==
-  dependencies:
-    mime-db ">= 1.43.0 < 2"
-compression@^1.8.1:
-  version "1.8.1"
-  resolved "https://registry.yarnpkg.com/compression/-/compression-1.8.1.tgz#4a45d909ac16509195a9a28bd91094889c180d79"
-  integrity sha512-9mAqGPHLakhCLeNyxPkK4xVo746zQ/czLH1Ky+vkitMnWfWZps8r0qXuwhwizagCRttsL4lfG4pIOvaWLpAP0w==
-  dependencies:
-    bytes "3.1.2"
-    compressible "~2.0.18"
-    debug "2.6.9"
-    negotiator "~0.6.4"
-    on-headers "~1.1.0"
-    safe-buffer "5.2.1"
-    vary "~1.1.2"
 concat-map@0.0.1:
   version "0.0.1"
   resolved "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
@@ -2471,11 +2451,6 @@ mime-db@1.52.0:
   resolved "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
   integrity sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==
-"mime-db@>= 1.43.0 < 2":
-  version "1.54.0"
-  resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.54.0.tgz#cddb3ee4f9c64530dff640236661d42cb6a314f5"
-  integrity sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==
 mime-types@~2.1.24, mime-types@~2.1.34:
   version "2.1.35"
   resolved "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
@@ -2532,11 +2507,6 @@ negotiator@0.6.3:
   resolved "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
   integrity sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==
-negotiator@~0.6.4:
-  version "0.6.4"
-  resolved "https://registry.yarnpkg.com/negotiator/-/negotiator-0.6.4.tgz#777948e2452651c570b712dd01c23e262713fff7"
-  integrity sha512-myRT3DiWPHqho5PrJaIRyaMv2kgYf0mUVgBNOYMuCH5Ki1yEiQaf/ZJuQ62nvpc44wL5WDbTX7yGJi1Neevw8w==
 node-releases@^2.0.27:
   version "2.0.27"
   resolved "https://registry.npmjs.org/node-releases/-/node-releases-2.0.27.tgz"
@@ -2559,11 +2529,6 @@ on-finished@~2.4.1:
   dependencies:
     ee-first "1.1.1"
-on-headers@~1.1.0:
-  version "1.1.0"
-  resolved "https://registry.yarnpkg.com/on-headers/-/on-headers-1.1.0.tgz#59da4f91c45f5f989c6e4bcedc5a3b0aed70ff65"
-  integrity sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==
 optionator@^0.9.3:
   version "0.9.4"
   resolved "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz"

     node-releases "^2.0.27"
     update-browserslist-db "^1.2.0"
+bytes@~3.1.2:
   version "3.1.2"
   resolved "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
   integrity sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==
   resolved "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-2.0.3.tgz"
   integrity sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==
 concat-map@0.0.1:
   version "0.0.1"
   resolved "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
   resolved "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
   integrity sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==
 mime-types@~2.1.24, mime-types@~2.1.34:
   version "2.1.35"
   resolved "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
   resolved "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
   integrity sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==
 node-releases@^2.0.27:
   version "2.0.27"
   resolved "https://registry.npmjs.org/node-releases/-/node-releases-2.0.27.tgz"
   dependencies:
     ee-first "1.1.1"
 optionator@^0.9.3:
   version "0.9.4"
   resolved "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz"