@seleniumbox/sbox-mcp 0.2.0

package/dist/adapters/user.adapter.js

@@ -0,0 +1,25 @@
+"use strict";
+/**
+ * Adapter for SBOX user APIs. Calls /users and uses session data for active counts.
+ * No business logic; only HTTP and response typing.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userAdapter = void 0;
+const sbox_api_client_1 = require("./sbox-api.client");
+async function searchUsers(params, token) {
+    const q = new URLSearchParams();
+    q.set("realmId", params.realmId);
+    if (params.filter)
+        q.set("filter", params.filter);
+    if (params.size != null)
+        q.set("size", String(params.size));
+    const path = `users?${q.toString()}`;
+    const { data, status } = await (0, sbox_api_client_1.get)(path, token);
+    if (status !== 200) {
+        const msg = (0, sbox_api_client_1.isSboxError)(data) ? data.message : "Failed to search users";
+        return { status, users: [], error: msg };
+    }
+    const list = Array.isArray(data) ? data : [];
+    return { status, users: list };
+}
+exports.userAdapter = { searchUsers };

package/dist/app.d.ts

@@ -0,0 +1,2 @@
+declare const app: import("express-serve-static-core").Express;
+export default app;

package/dist/app.js

@@ -0,0 +1,16 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = __importDefault(require("express"));
+const routes_1 = require("./routes");
+const error_middleware_1 = require("./middleware/error.middleware");
+const debug_log_middleware_1 = require("./middleware/debug-log.middleware");
+const app = (0, express_1.default)();
+app.use(express_1.default.json());
+app.use(express_1.default.urlencoded({ extended: true }));
+app.use(debug_log_middleware_1.debugLogMiddleware);
+app.use("/", routes_1.routes);
+app.use(error_middleware_1.errorMiddleware);
+exports.default = app;

package/dist/config/env.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Environment and configuration values for MCP module.
+ * Reads from process.env; no dependency on SBOX backend config files.
+ */
+export declare const config: {
+    readonly port: number;
+    readonly nodeEnv: string;
+    readonly sboxApiBaseUrl: string;
+    readonly sboxApiPrefix: "/e34/api";
+    readonly jwtHeader: "Authorization";
+    readonly requestTimeoutMs: number;
+    readonly mcpVersion: string;
+    readonly mcpServerHeaderName: "sbox-mcp-server";
+    /** When true, log each request and response (for troubleshooting). Default off. Set MCP_DEBUG=1 or DEBUG=1 */
+    readonly debug: boolean;
+};
+/** SBOX UI login page URL used for API/internal use (e.g. redirects). */
+export declare function getSboxLoginPageUrl(): string;
+/** Login page URL to return to the user (works in their browser). Same as hub base when running locally. */
+export declare function getPublicLoginPageUrl(): string;
+export declare function getSboxApiUrl(path: string): string;

package/dist/config/env.js

@@ -0,0 +1,55 @@
+"use strict";
+/**
+ * Environment and configuration values for MCP module.
+ * Reads from process.env; no dependency on SBOX backend config files.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.config = void 0;
+exports.getSboxLoginPageUrl = getSboxLoginPageUrl;
+exports.getPublicLoginPageUrl = getPublicLoginPageUrl;
+exports.getSboxApiUrl = getSboxApiUrl;
+const fs_1 = require("fs");
+const path_1 = require("path");
+function getMcpVersion() {
+    if (process.env.SBOX_MCP_VERSION)
+        return process.env.SBOX_MCP_VERSION;
+    try {
+        const pkgPath = (0, path_1.join)(__dirname, "../../package.json");
+        const pkg = JSON.parse((0, fs_1.readFileSync)(pkgPath, "utf-8"));
+        return pkg.version ?? "1.0.0";
+    }
+    catch {
+        return "1.0.0";
+    }
+}
+function isDebugEnabled() {
+    const v = process.env.MCP_DEBUG ?? process.env.DEBUG ?? "";
+    return v === "1" || v === "true" || v.toLowerCase() === "yes";
+}
+/** Base URL of the SBOX hub (SBOX_API or SBOX_API_BASE_URL). No trailing slash. */
+const sboxApiBaseUrl = (process.env.SBOX_API ?? process.env.SBOX_API_BASE_URL ?? "http://localhost:4444").replace(/\/$/, "");
+exports.config = {
+    port: parseInt(process.env.PORT ?? process.env.MCP_PORT ?? "3344", 10),
+    nodeEnv: process.env.NODE_ENV ?? "development",
+    sboxApiBaseUrl,
+    sboxApiPrefix: "/e34/api",
+    jwtHeader: "Authorization",
+    requestTimeoutMs: parseInt(process.env.MCP_REQUEST_TIMEOUT_MS ?? "30000", 10),
+    mcpVersion: getMcpVersion(),
+    mcpServerHeaderName: "sbox-mcp-server",
+    /** When true, log each request and response (for troubleshooting). Default off. Set MCP_DEBUG=1 or DEBUG=1 */
+    debug: isDebugEnabled(),
+};
+/** SBOX UI login page URL used for API/internal use (e.g. redirects). */
+function getSboxLoginPageUrl() {
+    return `${exports.config.sboxApiBaseUrl}/ui/login`;
+}
+/** Login page URL to return to the user (works in their browser). Same as hub base when running locally. */
+function getPublicLoginPageUrl() {
+    return `${exports.config.sboxApiBaseUrl}/ui/login`;
+}
+function getSboxApiUrl(path) {
+    const base = exports.config.sboxApiBaseUrl + exports.config.sboxApiPrefix;
+    const p = path.startsWith("/") ? path : `/${path}`;
+    return base + p;
+}

package/dist/config/index.d.ts

@@ -0,0 +1 @@
+export { config, getSboxApiUrl, getSboxLoginPageUrl, getPublicLoginPageUrl } from "./env";

package/dist/config/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPublicLoginPageUrl = exports.getSboxLoginPageUrl = exports.getSboxApiUrl = exports.config = void 0;
+var env_1 = require("./env");
+Object.defineProperty(exports, "config", { enumerable: true, get: function () { return env_1.config; } });
+Object.defineProperty(exports, "getSboxApiUrl", { enumerable: true, get: function () { return env_1.getSboxApiUrl; } });
+Object.defineProperty(exports, "getSboxLoginPageUrl", { enumerable: true, get: function () { return env_1.getSboxLoginPageUrl; } });
+Object.defineProperty(exports, "getPublicLoginPageUrl", { enumerable: true, get: function () { return env_1.getPublicLoginPageUrl; } });

package/dist/controllers/analytics.controller.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Analytics controller: sessions per browser, by build, failed count, most active project/user.
+ * Query: value (number), unit (hour|minute|day). Requires both.
+ */
+import { Request, Response } from "express";
+export declare function getSessionsPerBrowser(req: Request, res: Response): void;
+export declare function getSessionsByBuild(req: Request, res: Response): void;
+export declare function getFailedCount(req: Request, res: Response): void;
+export declare function getMostActiveProject(req: Request, res: Response): void;
+export declare function getMostActiveUser(req: Request, res: Response): void;

package/dist/controllers/analytics.controller.js

@@ -0,0 +1,127 @@
+"use strict";
+/**
+ * Analytics controller: sessions per browser, by build, failed count, most active project/user.
+ * Query: value (number), unit (hour|minute|day). Requires both.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSessionsPerBrowser = getSessionsPerBrowser;
+exports.getSessionsByBuild = getSessionsByBuild;
+exports.getFailedCount = getFailedCount;
+exports.getMostActiveProject = getMostActiveProject;
+exports.getMostActiveUser = getMostActiveUser;
+const zod_1 = require("zod");
+const services_1 = require("../services");
+const time_range_1 = require("../utils/time-range");
+const QuerySchema = zod_1.z.object({
+    value: zod_1.z.string().transform((s) => parseInt(s, 10)),
+    unit: zod_1.z.enum(["hour", "minute", "day"]),
+});
+function token(req) {
+    return req.token;
+}
+function parseTime(req) {
+    const parsed = QuerySchema.safeParse(req.query);
+    if (!parsed.success || isNaN(parsed.data.value) || parsed.data.value < 1)
+        return null;
+    return { value: parsed.data.value, unit: parsed.data.unit };
+}
+function getSessionsPerBrowser(req, res) {
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    const time = parseTime(req);
+    if (!time) {
+        res.status(400).json({ success: false, message: "Query required: value (number) and unit (hour|minute|day)", code: 400 });
+        return;
+    }
+    services_1.analyticsService.sessionsPerBrowser(t, (0, time_range_1.parseTimeToRange)(time.value, time.unit)).then((out) => {
+        if (out.success)
+            res.status(200).json({ success: true, data: out.data });
+        else
+            res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}
+function getSessionsByBuild(req, res) {
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    const time = parseTime(req);
+    if (!time) {
+        res.status(400).json({ success: false, message: "Query required: value and unit (hour|minute|day)", code: 400 });
+        return;
+    }
+    services_1.analyticsService.sessionsByBuild(t, (0, time_range_1.parseTimeToRange)(time.value, time.unit)).then((out) => {
+        if (out.success)
+            res.status(200).json({ success: true, data: out.data });
+        else
+            res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}
+function getFailedCount(req, res) {
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    const time = parseTime(req);
+    if (!time) {
+        res.status(400).json({ success: false, message: "Query required: value and unit (hour|minute|day)", code: 400 });
+        return;
+    }
+    services_1.analyticsService.failedCount(t, (0, time_range_1.parseTimeToRange)(time.value, time.unit)).then((out) => {
+        if (out.success)
+            res.status(200).json({ success: true, failedCount: out.count });
+        else
+            res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}
+function getMostActiveProject(req, res) {
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    const time = parseTime(req);
+    if (!time) {
+        res.status(400).json({ success: false, message: "Query required: value and unit (hour|minute|day)", code: 400 });
+        return;
+    }
+    services_1.analyticsService.mostActiveProject(t, (0, time_range_1.parseTimeToRange)(time.value, time.unit)).then((out) => {
+        if (out.success)
+            res.status(200).json({ success: true, projectName: out.projectName, count: out.count });
+        else
+            res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}
+function getMostActiveUser(req, res) {
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    const time = parseTime(req);
+    if (!time) {
+        res.status(400).json({ success: false, message: "Query required: value and unit (hour|minute|day)", code: 400 });
+        return;
+    }
+    services_1.analyticsService.mostActiveUser(t, (0, time_range_1.parseTimeToRange)(time.value, time.unit)).then((out) => {
+        if (out.success)
+            res.status(200).json({ success: true, userName: out.userName, count: out.count });
+        else
+            res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}

package/dist/controllers/auth-device.controller.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Device-flow auth: POST /auth/initiate and GET /auth/status for IDE-based login.
+ * No token required; used when IDE opens browser and polls for token.
+ */
+import { Request, Response } from "express";
+export declare function initiate(_req: Request, res: Response): Promise<void>;
+export declare function status(req: Request, res: Response): Promise<void>;

package/dist/controllers/auth-device.controller.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * Device-flow auth: POST /auth/initiate and GET /auth/status for IDE-based login.
+ * No token required; used when IDE opens browser and polls for token.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initiate = initiate;
+exports.status = status;
+const crypto_1 = require("crypto");
+const services_1 = require("../services");
+const config_1 = require("../config");
+const device_flow_store_1 = require("../device-flow.store");
+const EXPIRES_IN_SEC = 300;
+async function initiate(_req, res) {
+    try {
+        const enabled = await services_1.authService.isMcpAddonEnabled();
+        if (!enabled) {
+            res.status(503).json({
+                success: false,
+                message: "MCP add-on is not enabled on this SBOX hub.",
+            });
+            return;
+        }
+        const pollId = (0, crypto_1.randomUUID)();
+        const authUrl = (0, config_1.getPublicLoginPageUrl)() + "?mcp_poll_id=" + encodeURIComponent(pollId);
+        (0, device_flow_store_1.registerPollSession)(pollId, EXPIRES_IN_SEC);
+        res.status(200).json({
+            auth_url: authUrl,
+            poll_id: pollId,
+            expires_in: EXPIRES_IN_SEC,
+        });
+    }
+    catch (e) {
+        res.status(500).json({
+            success: false,
+            message: e instanceof Error ? e.message : "Failed to initiate auth",
+        });
+    }
+}
+async function status(req, res) {
+    const pollId = req.query.poll_id?.trim();
+    if (!pollId) {
+        res.status(400).json({ status: "expired" });
+        return;
+    }
+    if (!(0, device_flow_store_1.hasPollSession)(pollId)) {
+        res.status(200).json({ status: "expired" });
+        return;
+    }
+    if ((0, device_flow_store_1.isExpired)(pollId)) {
+        res.status(200).json({ status: "expired" });
+        return;
+    }
+    const token = await services_1.authService.pollForToken(pollId);
+    if (token) {
+        res.status(200).json({ status: "authenticated", token });
+        return;
+    }
+    res.status(200).json({ status: "pending" });
+}

package/dist/controllers/auth.controller.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Auth controller: login (local/LDAP via same SBOX endpoint). No business logic.
+ */
+import { Request, Response } from "express";
+export declare function login(req: Request, res: Response): void;

package/dist/controllers/auth.controller.js

@@ -0,0 +1,20 @@
+"use strict";
+/**
+ * Auth controller: login (local/LDAP via same SBOX endpoint). No business logic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.login = login;
+const auth_dto_1 = require("../dto/auth.dto");
+const services_1 = require("../services");
+function login(req, res) {
+    const body = auth_dto_1.LoginBodySchema.parse(req.body);
+    services_1.authService.login(body).then((out) => {
+        if (out.success) {
+            res.status(200).json({ success: true, data: out.data });
+            return;
+        }
+        res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Login failed", code: 500 });
+    });
+}

package/dist/controllers/browser.controller.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Browser controller: list supported browsers. No business logic.
+ */
+import { Request, Response } from "express";
+export declare function listBrowsers(req: Request, res: Response): void;

package/dist/controllers/browser.controller.js

@@ -0,0 +1,23 @@
+"use strict";
+/**
+ * Browser controller: list supported browsers. No business logic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listBrowsers = listBrowsers;
+const services_1 = require("../services");
+function listBrowsers(req, res) {
+    const token = req.token;
+    if (!token) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    services_1.browserService.listSupportedBrowsers(token).then((out) => {
+        if (out.success) {
+            res.status(200).json({ success: true, data: out.data });
+            return;
+        }
+        res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}

package/dist/controllers/device.controller.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Device controller: list supported devices. No business logic.
+ */
+import { Request, Response } from "express";
+export declare function listDevices(req: Request, res: Response): void;

package/dist/controllers/device.controller.js

@@ -0,0 +1,23 @@
+"use strict";
+/**
+ * Device controller: list supported devices. No business logic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listDevices = listDevices;
+const services_1 = require("../services");
+function listDevices(req, res) {
+    const token = req.token;
+    if (!token) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    services_1.deviceService.listSupportedDevices(token).then((out) => {
+        if (out.success) {
+            res.status(200).json({ success: true, data: out.data });
+            return;
+        }
+        res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}

package/dist/controllers/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./auth.controller";
+export { listSessions, getSessionDetail, updateSessionStatus, deleteSession, startManualSession } from "./session.controller";
+export * from "./browser.controller";
+export * from "./device.controller";
+export * from "./user.controller";
+export * from "./project-stats.controller";

package/dist/controllers/index.js

@@ -0,0 +1,28 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startManualSession = exports.deleteSession = exports.updateSessionStatus = exports.getSessionDetail = exports.listSessions = void 0;
+__exportStar(require("./auth.controller"), exports);
+var session_controller_1 = require("./session.controller");
+Object.defineProperty(exports, "listSessions", { enumerable: true, get: function () { return session_controller_1.listSessions; } });
+Object.defineProperty(exports, "getSessionDetail", { enumerable: true, get: function () { return session_controller_1.getSessionDetail; } });
+Object.defineProperty(exports, "updateSessionStatus", { enumerable: true, get: function () { return session_controller_1.updateSessionStatus; } });
+Object.defineProperty(exports, "deleteSession", { enumerable: true, get: function () { return session_controller_1.deleteSession; } });
+Object.defineProperty(exports, "startManualSession", { enumerable: true, get: function () { return session_controller_1.startManualSession; } });
+__exportStar(require("./browser.controller"), exports);
+__exportStar(require("./device.controller"), exports);
+__exportStar(require("./user.controller"), exports);
+__exportStar(require("./project-stats.controller"), exports);

package/dist/controllers/project-stats.controller.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Project stats controller: sessions per project (last X days). No business logic.
+ */
+import { Request, Response } from "express";
+export declare function getSessionsPerProject(req: Request, res: Response): void;

package/dist/controllers/project-stats.controller.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * Project stats controller: sessions per project (last X days). No business logic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSessionsPerProject = getSessionsPerProject;
+const zod_1 = require("zod");
+const services_1 = require("../services");
+const QuerySchema = zod_1.z.object({
+    days: zod_1.z.string().optional().transform((s) => (s ? parseInt(s, 10) : 14)),
+});
+function getSessionsPerProject(req, res) {
+    const token = req.token;
+    if (!token) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    const parsed = QuerySchema.safeParse(req.query);
+    const days = parsed.success && !isNaN(parsed.data.days) ? Math.min(Math.max(parsed.data.days, 1), 365) : 14;
+    services_1.sessionsPerProjectService.getSessionsPerProject(token, days).then((out) => {
+        if (out.success) {
+            res.status(200).json({ success: true, data: out.data });
+            return;
+        }
+        res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}

package/dist/controllers/session.controller.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Session controller: get, update status, delete, start manual. No business logic.
+ */
+import { Request, Response } from "express";
+export declare function listSessions(req: Request, res: Response): void;
+export declare function getSessionDetail(req: Request, res: Response): void;
+export declare function updateSessionStatus(req: Request, res: Response): void;
+export declare function deleteSession(req: Request, res: Response): void;
+export declare function startManualSession(req: Request, res: Response): void;

package/dist/controllers/session.controller.js

@@ -0,0 +1,120 @@
+"use strict";
+/**
+ * Session controller: get, update status, delete, start manual. No business logic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listSessions = listSessions;
+exports.getSessionDetail = getSessionDetail;
+exports.updateSessionStatus = updateSessionStatus;
+exports.deleteSession = deleteSession;
+exports.startManualSession = startManualSession;
+const services_1 = require("../services");
+const session_dto_1 = require("../dto/session.dto");
+const UpdateBodySchema = session_dto_1.UpdateSessionStatusBodySchema;
+function token(req) {
+    return req.token;
+}
+function listSessions(req, res) {
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    const q = req.query;
+    const limit = q.limit != null ? parseInt(q.limit, 10) : undefined;
+    const offset = q.offset != null ? parseInt(q.offset, 10) : undefined;
+    services_1.sessionService.listSessions({
+        limit: isNaN(limit) ? undefined : limit,
+        offset: isNaN(offset) ? undefined : offset,
+        projectName: q.projectName,
+        status: q.status,
+        browser: q.browser,
+        build: q.build,
+        sortBy: q.sortBy,
+        sortDirection: q.sortDirection,
+    }, t).then((out) => {
+        if (out.success) {
+            res.status(200).json({ success: true, data: out.data });
+            return;
+        }
+        res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}
+function getSessionDetail(req, res) {
+    const ekey = req.params.ekey;
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    services_1.sessionService.getSessionDetail(ekey, t).then((out) => {
+        if (out.success) {
+            res.status(200).json({ success: true, data: out.data });
+            return;
+        }
+        res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}
+function updateSessionStatus(req, res) {
+    const body = UpdateBodySchema.parse(req.body);
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    services_1.sessionService.updateSessionStatus(body, t).then((out) => {
+        if (out.success) {
+            res.status(out.status).json({ success: true });
+            return;
+        }
+        res.status(out.status).json({ success: false, message: out.message ?? "Update failed", code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}
+function deleteSession(req, res) {
+    const sessionId = req.query.sessionId;
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    if (!sessionId) {
+        res.status(400).json({ success: false, message: "sessionId required", code: 400 });
+        return;
+    }
+    services_1.sessionService.deleteSession(sessionId, t).then((out) => {
+        if (out.success) {
+            res.status(200).json({ success: true, data: out.data });
+            return;
+        }
+        res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}
+function startManualSession(req, res) {
+    const body = req.body;
+    const t = token(req);
+    if (!t) {
+        res.status(401).json({ success: false, message: "Authorization required", code: 401 });
+        return;
+    }
+    if (!body || typeof body.projectName !== "string") {
+        res.status(400).json({ success: false, message: "projectName is required", code: 400 });
+        return;
+    }
+    services_1.sessionService.startManualSession(body, t).then((out) => {
+        if (out.success) {
+            res.status(200).json({ success: true, data: out.data });
+            return;
+        }
+        res.status(out.status).json({ success: false, message: out.message, code: out.status });
+    }).catch((err) => {
+        res.status(500).json({ success: false, message: err instanceof Error ? err.message : "Error", code: 500 });
+    });
+}

package/dist/controllers/upload.controller.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Upload controller: upload mobile app (APK/IPA) to SBOX. No business logic.
+ */
+import { Request, Response } from "express";
+export declare function uploadMobileApp(req: Request, res: Response): void;