GeezerVison

PulseBridge v2.0.0 is an open-source, ultra-low-latency remote companion and telemetry bridge designed specifically for AI IDEs including Google Antigravity, Cursor IDE, and Visual Studio Code (GitHub Copilot & Cline). Built in native Rust (Axum 0.8 with HTTP/2 & zero-copy Bytes WebSockets) and React 19, it captures the host desktop through Win32 GDI (`BitBlt` + CPU `HALFTONE` `StretchBlt` on the interactive desktop), JPEG-encodes frames (with optional TurboJPEG SIMD acceleration), and serves them to mobile browsers from a 150 ms in-memory frame cache that sustains 160.1 requests per second. It allows software engineers to monitor local and background coding agent execution, inspect live project files, zoom 100%–300% via 2-finger pinch gestures, scroll through source code via touch-drag gestures, and inject prompts, 48 virtual hotkeys, or DevOps shell runbooks directly from a mobile phone over local Wi-Fi or 4G/5G cellular tunnels.

PulseBridge natively supports Google Antigravity (Antigravity IDE, Antigravity 2.0 desktop app, Agent Manager `/agents`, `agy` CLI, and sidecars in `~/.gemini/config/config.json`), Cursor IDE (Agent Mode `Ctrl+I`, Agents Window, Cloud Agents—formerly Background Agents—and `.cursor/rules/*.mdc` / `AGENTS.md`), Visual Studio Code (GitHub Copilot Agent Mode, Copilot Edits, `.vscode/mcp.json`, and Cline), and Visual Studio. It automatically discovers active workspaces by scanning local file systems, including Google Antigravity session transcripts in `%USERPROFILE%\.gemini\antigravity\brain`, Cursor workspace storage, and VS Code user state, providing instant telemetry switching across your editor fleet.

Unlike traditional remote desktop stacks that contend for NVENC/AMF hardware video encoders or suffer `DXGI_ERROR_ACCESS_LOST` resets across UAC prompts and desktop switches (a common trade-off with VRAM-resident DXGI Desktop Duplication `IDXGIOutputDuplication`), PulseBridge attaches directly to the interactive desktop (`OpenWindowStationA(WinSta0)` + `SetThreadDesktop`, with `SetProcessDPIAware()`), performs DWM-compatible `BitBlt` and CPU `HALFTONE` `StretchBlt` resampling (`SetStretchBltMode` + `SetBrushOrgEx`) while preserving exact source aspect ratios, and encodes JPEGs in Rust (supporting both the pure-Rust `image` encoder and `libjpeg-turbo` TurboJPEG AVX2/SSE2 SIMD 4:2:0 DCT compression). A 150 ms in-memory frame cache bounds desktop readback to ~6.7 captures/sec while sustaining 160.1 HTTP/WS requests per second under load. Stream-quality profiles trade fidelity for bandwidth on weak cellular links.

When a user drags on the mobile viewport, touch coordinates are mapped with exact 1:1 aspect-ratio calibration and translated into native Windows `SendInput` (`INPUT_MOUSE` + `MOUSEEVENTF_WHEEL`, standard `WHEEL_DELTA = 120` detents) events on the host. This behaves like an authentic desktop mouse wheel, so you can scroll through thousands of lines of code without unwanted text selection or misclicks. Multi-touch 2-finger pinch-to-zoom (100%–300%), docked zoom presets, and a spatial radar navigator help on dense layouts.

Software engineers frequently maintain dozens of historical repositories on their local workstations. When accessing their environment remotely on a mobile screen, navigating hundreds of stale directories is inefficient. PulseBridge implements an automated recency filter that indexes only workspaces modified within the last 7 to 30 days. It renders a clean depth-2 file tree displaying active files, git status, and file sizes, allowing you to focus on currently running agent tasks.

PulseBridge exposes an authenticated command channel compatible with Google Antigravity chat canvas / `agy` TUI, Cursor Agent side pane (`Ctrl+I`), and VS Code GitHub Copilot Agent Mode / Copilot Edits. When you submit a prompt or tap a decision chip, the host attaches to the interactive desktop thread (`AttachThreadInput`), restores the IDE window only if minimized (`IsIconic`), focuses the IDE prompt box, injects the text through a `CF_UNICODETEXT` clipboard buffer, submits with hardware scancodes, and simultaneously queues the response in `/api/inbox`. Mobile hotkeys include 48 Win32 shortcuts (`KEYEVENTF_EXTENDEDKEY` navigation keys, `Ctrl+C`, `Ctrl+Shift+P`, `F1`–`F12`), and optional shell runbooks are opt-in via `--enable-shell-commands` with project `cwd` support and restricted to an allowlist (`git`, `cargo`, `npm`, `pnpm`, `yarn`, `pytest`).

PulseBridge enforces strict Zero-Trust authentication with PIN and Bearer-token verification. Every action and ingest route (`/api/action/*`, `/api/ingest/*`) and the WebSocket handshake require a verified token (unauthenticated sockets are dropped after 15 s), PIN checks use a constant-time comparison, and brute-force protection keys on the physical TCP socket peer (5 failures trigger a 300 s lockout). CORS is restricted to loopback, your LAN IP and verified Cloudflare tunnels, and the mobile client scrubs `?pin=` / `?token=` from the address bar immediately. Tokens persist across server restarts and are never sent to external telemetry. See SECURITY.md in the repository.

PulseBridge does not bundle a tunnel; you start one and point it at port 8080. Documented WAN options include Cloudflare Quick Tunnels (`cloudflared tunnel --url http://localhost:8080`, provisioning an ephemeral `*.trycloudflare.com` URL with no Cloudflare account), Cloudflare Named Tunnels (`cloudflared tunnel run` with persistent custom DNS and Cloudflare Zero Trust Access policies), LocalTunnel, SSH reverse forwarding, and Tailscale / WireGuard. Architecturally, `cloudflared` uses a two-hop encrypted model—HTTPS/TLS 1.3 from your phone to Cloudflare's edge, then an outbound-only QUIC (UDP/443 default) or HTTP/2 (TCP/443 `--protocol http2` fallback) tunnel to local `cloudflared` and loopback `localhost:8080`—whereas Tailscale/WireGuard and SSH provide strict end-to-end encryption with zero edge TLS termination. All tunnel requests still require your session PIN and Bearer token.

No. PulseBridge is 100% self-hosted and zero-telemetry: Infinity AI collects 0 bytes of source code, ASTs, or prompts. Over direct LAN Wi-Fi, Tailscale / WireGuard mesh VPNs, or SSH port forwarding, all screen frames, file trees, and prompts travel strictly peer-to-peer between your Windows host and your phone with no third-party relay. If you choose a Cloudflare Quick or Named Tunnel for 4G/5G convenience, note that Cloudflare terminates TLS at its edge before forwarding over encrypted QUIC/HTTP2 to local `cloudflared`; regulated or sovereign codebases requiring strict end-to-end encryption should pair PulseBridge with Tailscale / WireGuard or SSH.

PulseBridge runs on 64-bit Windows 10 and Windows 11. It is a native Rust (Axum 0.8) server with a React 19 PWA and an MCP server, requiring zero Python runtime. You need a Wi-Fi or Ethernet connection and a mobile browser. Building from source requires the Rust `x86_64-pc-windows-msvc` toolchain (Rust 1.85+ / 2024 Edition) and Node.js 20+ LTS (Node.js 22 or 24 LTS recommended) for bundling PWA assets. macOS and Linux are covered by the multi-OS architecture specification (ARCHITECTURE.md) but are not shipped yet.

The host reuses a 150 ms frame cache instead of re-capturing for every client request, and the Hardware Health HUD shows live workstation CPU, RAM and battery/power state so you can see the cost yourself. Stream-quality profiles reduce bandwidth on cellular, and the PWA uses background Web Push so the phone does not have to stay awake. Exact CPU and memory figures depend on your machine, so measure on your own hardware.

Run the included launcher (scripts/start-bridge.bat or scripts/start-bridge.ps1). It prints your host LAN IP, port 8080, a session PIN and an ASCII QR code, and the server can also render SVG QR codes for pairing. Scan the QR code, or open http://<LAN IP>:8080 and enter the PIN; the client then scrubs the PIN and token from the address bar. Tap Add to Home Screen for a full-screen PWA with no app store.

ask_phone is a Model Context Protocol tool exposed by the PulseBridge MCP server. An AI agent calls it with a question and a list of choices (for example Deploy to Prod, Run Tests First, Cancel). PulseBridge renders them as one-tap decision chips in the mobile chat stream, fires an instant push alert with haptic feedback, and records your selection in `/api/inbox` so `ask_phone` (with optional blocking wait) or `check_phone_inbox` returns your choice directly to the agent. The MCP server also provides notify_phone, update_task_status and check_phone_inbox.

A Security and Governance audit led to: authentication on every action route (CWE-306), opt-in allowlisted shell execution instead of arbitrary PowerShell (CWE-78), rate limiting keyed on the real socket peer instead of the spoofable X-Forwarded-For header (CWE-290), restricted CORS (CWE-942), token-verified WebSockets (CWE-287), in-memory URL credential scrubbing (CWE-598) and honest transport labelling (CWE-319): plain HTTP/WS on a trusted LAN, two-hop HTTPS + QUIC/HTTP2 via Cloudflare Tunnel over WAN/4G, or E2E encrypted Tailscale/WireGuard. Severities range from Critical (CVSS 9.8) down to Low (3.1), and an adversarial penetration suite plus unit tests ship with the repository.

Yes. The PWA supports background Web Push notifications, workstation clipboard sync, hands-free Web Speech dictation for prompts, harmonic audio chimes, haptic vibration on milestones and approval requests, and a Hardware Health HUD for workstation CPU, RAM and power state.