Let outside services and computers' browser notifications give bots work

A bot hook (bot_hooks) is a secret URL, POST /api/hooks/<token>, whose
calls queue the hook's brief plus the raw body as a task, per user and
bot like a routine. Only the token's hash is kept (shown once, rotatable);
an optional HMAC-SHA256 signing secret is stored encrypted. Calls are
rate limited per address and per hook, recorded in bot_hook_events
(pruned daily), deduplicated by delivery id, and a call while the last
run still waits joins its brief instead of queueing another. The payload
is fenced data and HookRunNote tells the bot never to take instructions
from it; failed runs retry like routines.

A hook can instead watch a computer's browser notifications: the app
installs a small watcher that owns org.freedesktop.Notifications on the
sandbox's session bus, so Chrome hands it every notification (it only
looks for that service at start-up, so Chrome is restarted once, never
mid-task), and it posts each one to its hooks, optionally filtered.
Computers reach the app at COMPUTER_APP_URL or the app container's name.

Users make hooks in the conversation's Hooks modal and manage them all
on /admin/routines; bots never create or change hooks.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/hooks/use-hook-events.ts

@@ -0,0 +1,48 @@
+import fetchApi from "@moduletrace/twui/utils/fetch/fetchApi";
+import type { APIResponseObject } from "@moduletrace/bunext/types";
+import { useEffect, useState } from "react";
+import type { BUN_SQLITE_COBBLE_BOT_HOOK_EVENTS } from "@/db/types/db";
+
+type Params = {
+    hook_id: number;
+};
+
+/**
+ * One hook's latest calls, loaded when the view showing them opens.
+ */
+export default function useHookEvents({ hook_id }: Params) {
+    const [events, setEvents] = useState<BUN_SQLITE_COBBLE_BOT_HOOK_EVENTS[]>([]);
+    const [loading, setLoading] = useState(true);
+    const [error, setError] = useState<string>();
+
+    useEffect(() => {
+        let live = true;
+
+        setLoading(true);
+        setError(undefined);
+
+        fetchApi<{}, APIResponseObject<BUN_SQLITE_COBBLE_BOT_HOOK_EVENTS>>(
+            `/api/admin/hooks/hook-events?hook_id=${hook_id}`,
+            { method: "GET" },
+        )
+            .catch(() => null)
+            .then((res) => {
+                if (!live) return;
+
+                setLoading(false);
+
+                if (!res?.success) {
+                    setError(res?.msg || `Couldn't load the calls.`);
+                    return;
+                }
+
+                setEvents(res.payload || []);
+            });
+
+        return () => {
+            live = false;
+        };
+    }, [hook_id]);
+
+    return { events, loading, error };
+}