@tomorrowos/sdk 0.1.8 → 0.1.10

package/dist/store/memory-store.d.ts

@@ -11,5 +11,6 @@ export declare class MemoryStore implements TomorrowOSStore {
     deletePendingCode(code: string): Promise<void>;
     setPairedDevice(deviceId: string, record: PairedDeviceRecord): Promise<void>;
     getPairedDevice(deviceId: string): Promise<PairedDeviceRecord | undefined>;
+    deletePairedDevice(deviceId: string): Promise<void>;
 }
 //# sourceMappingURL=memory-store.d.ts.map

package/dist/store/memory-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../../src/store/memory-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AACH,qBAAa,WAAY,YAAW,eAAe;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IACrE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyC;IAEjE,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAIpE,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC;IAIV,eAAe,CACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;CAG3C"}
+{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../../src/store/memory-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AACH,qBAAa,WAAY,YAAW,eAAe;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IACrE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyC;IAEjE,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAIpE,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC;IAIV,eAAe,CACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAIpC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG1D"}

package/dist/store/memory-store.js

@@ -20,4 +20,7 @@ export class MemoryStore {
     async getPairedDevice(deviceId) {
         return this.pairedDevices.get(deviceId);
     }
+    async deletePairedDevice(deviceId) {
+        this.pairedDevices.delete(deviceId);
+    }
 }

package/dist/store/types.d.ts

@@ -20,5 +20,6 @@ export interface TomorrowOSStore {
     deletePendingCode(code: string): Promise<void>;
     setPairedDevice(deviceId: string, record: PairedDeviceRecord): Promise<void>;
     getPairedDevice(deviceId: string): Promise<PairedDeviceRecord | undefined>;
+    deletePairedDevice(deviceId: string): Promise<void>;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/store/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/store/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IACrE,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;CAC5E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/store/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IACrE,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC3E,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD"}

package/dist/tomorrowos.d.ts

@@ -40,10 +40,19 @@ export declare class TomorrowOS extends EventEmitter {
     pairingVerify(code: string): Promise<{
         deviceId: string;
     }>;
+    /** Remove pairing for a device and notify it over WebSocket if connected. */
+    pairingUnpair(deviceId: string): Promise<{
+        deviceId: string;
+        notified: boolean;
+    }>;
     pairing: {
         verify: (code: string) => Promise<{
             deviceId: string;
         }>;
+        unpair: (deviceId: string) => Promise<{
+            deviceId: string;
+            notified: boolean;
+        }>;
     };
     device(deviceId: string): {
         sendCommand<T = unknown>(method: string, params?: Record<string, unknown>): Promise<{

package/dist/tomorrowos.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tomorrowos.d.ts","sourceRoot":"","sources":["../src/tomorrowos.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAKxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGxD,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,eAAe,CAAC;IACvB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAwED,qBAAa,UAAW,SAAQ,YAAY;IAC1C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,UAAU,CAA4B;IAC9C,OAAO,CAAC,GAAG,CAAgC;IAC3C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,eAAe,CAAgB;gBAE3B,OAAO,EAAE,iBAAiB;IAMtC,oEAAoE;IAC9D,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAiChE,OAAO;uBACU,MAAM;sBAlCgC,MAAM;;MAmC3D;IAEF,MAAM,CAAC,QAAQ,EAAE,MAAM;oBAGD,CAAC,oBACT,MAAM,WACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;;IAU5E,OAAO,CAAC,mBAAmB;IA6D3B,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM;YAkD7B,iBAAiB;YAqCjB,cAAc;YAmCd,UAAU;YAqDV,gBAAgB;IAgE9B,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,gBAAgB;CAgFzB"}
+{"version":3,"file":"tomorrowos.d.ts","sourceRoot":"","sources":["../src/tomorrowos.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAKxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGxD,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,eAAe,CAAC;IACvB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAyED,qBAAa,UAAW,SAAQ,YAAY;IAC1C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,UAAU,CAA4B;IAC9C,OAAO,CAAC,GAAG,CAAgC;IAC3C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,eAAe,CAAgB;gBAE3B,OAAO,EAAE,iBAAiB;IAMtC,oEAAoE;IAC9D,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAiChE,6EAA6E;IACvE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IA2BvF,OAAO;uBACU,MAAM;sBA9DgC,MAAM;;2BA+DxC,MAAM;sBA7BgC,MAAM;sBAAY,OAAO;;MA8BlF;IAEF,MAAM,CAAC,QAAQ,EAAE,MAAM;oBAGD,CAAC,oBACT,MAAM,WACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;;IAU5E,OAAO,CAAC,mBAAmB;IA6D3B,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM;YAkD7B,iBAAiB;YAqCjB,cAAc;YAmCd,UAAU;YAkEV,gBAAgB;IAgE9B,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,gBAAgB;CAgFzB"}

package/dist/tomorrowos.js

@@ -90,8 +90,31 @@ export class TomorrowOS extends EventEmitter {
         this.emit("device.paired", { deviceId: record.deviceId });
         return { deviceId: record.deviceId };
     }
+    /** Remove pairing for a device and notify it over WebSocket if connected. */
+    async pairingUnpair(deviceId) {
+        const id = String(deviceId || "").trim();
+        if (!id) {
+            const err = new Error("deviceId is required");
+            err.code = "PAIRING_INVALID";
+            throw err;
+        }
+        await this.store.deletePairedDevice(id);
+        const ws = this.devices.get(id);
+        let notified = false;
+        if (ws && ws.readyState === WebSocket.OPEN) {
+            ws.send(JSON.stringify({
+                type: "pairing.unpaired",
+                method: "tomorrowos.pairing.unpair",
+                deviceId: id
+            }));
+            notified = true;
+        }
+        this.emit("device.unpaired", { deviceId: id });
+        return { deviceId: id, notified };
+    }
     pairing = {
-        verify: (code) => this.pairingVerify(code)
+        verify: (code) => this.pairingVerify(code),
+        unpair: (deviceId) => this.pairingUnpair(deviceId)
     };
     device(deviceId) {
         const self = this;
@@ -291,6 +314,19 @@ export class TomorrowOS extends EventEmitter {
                 }
                 return;
             }
+            if (req.method === "POST" && pathname === "/pairing/unpair") {
+                const body = (await readJsonBody(req));
+                const deviceId = typeof body.deviceId === "string" ? body.deviceId : "";
+                try {
+                    const result = await this.pairingUnpair(deviceId);
+                    sendJson(res, 200, { status: "success", ...result });
+                }
+                catch (e) {
+                    const msg = e instanceof Error ? e.message : "Unpair failed";
+                    sendJson(res, 400, { status: "failed", error: msg });
+                }
+                return;
+            }
             if (req.method === "POST") {
                 const parsed = parseDevicePath(pathname);
                 if (parsed) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomorrowos/sdk",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "TomorrowOS CMS server SDK — WebSocket transport, pairing, device commands, optional static CMS UI. Includes CLI (tomorrowos init / build) and starter templates.",
   "type": "module",
   "main": "./dist/index.js",

package/templates/cms-starter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-cms",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "CMS server on @tomorrowos/sdk. Add your UI (React, static files, etc.) alongside this server.",
   "private": true,
   "type": "module",
@@ -10,7 +10,7 @@
     "build-player": "tomorrowos build --platform tizen"
   },
   "dependencies": {
-    "@tomorrowos/sdk": "^0.1.8"
+    "@tomorrowos/sdk": "^0.1.10"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",

package/templates/cms-starter/public/index.html

@@ -19,10 +19,28 @@
           <div class="row">
             <input id="code" maxlength="6" placeholder="6-digit code" />
             <button type="button" onclick="verify()">Verify</button>
+            <button type="button" class="danger" onclick="unpair()">Unpair</button>
           </div>
           <input type="hidden" id="deviceId" />
         </section>
 
+        <section class="card">
+          <h2>CMS URL for screens</h2>
+          <p style="margin: 0 0 0.5rem; font-size: 0.8rem; color: #666">
+            HTTP(S) base URL your TV uses to download uploads (same host as <code>ws://</code> on the
+            device, not <code>localhost</code>).
+          </p>
+          <div class="row">
+            <input
+              id="cmsDeviceBaseUrl"
+              type="text"
+              style="flex: 1; min-width: 16rem"
+              placeholder="http://192.168.1.105:3000"
+            />
+            <button type="button" onclick="saveCmsDeviceBaseUrl()">Save</button>
+          </div>
+        </section>
+
         <section class="card">
           <h2>When this playlist plays</h2>
           <p style="margin: 0 0 0.75rem; font-size: 0.8rem; color: #666">

package/templates/cms-starter/public/methods.js

@@ -1,6 +1,7 @@
 const PANEL_DEVICE_ID_KEY = "tomorrowos.panel.deviceId";
 const PANEL_PLAYLIST_KEY = "tomorrowos.panel.playlistDraft";
 const PANEL_SCHEDULE_KEY = "tomorrowos.panel.scheduleDraft";
+const PANEL_MEDIA_BASE_KEY = "tomorrowos.panel.mediaBaseUrl";
 
 /** @type {{ id: string, url: string, name: string, type: string, durationMs: number }[]} */
 let playlistItems = [];
@@ -25,11 +26,65 @@ function showResult(data) {
   document.getElementById("result").textContent = JSON.stringify(data, null, 2);
 }
 
+function isLocalPanelHost(hostname) {
+  const h = String(hostname || "").toLowerCase();
+  return h === "localhost" || h === "127.0.0.1" || h === "[::1]";
+}
+
+function normalizeMediaBaseUrl(raw) {
+  let s = String(raw || "").trim();
+  if (!s) return "";
+  if (!/^https?:\/\//i.test(s)) {
+    s = `http://${s}`;
+  }
+  try {
+    const u = new URL(s);
+    return u.origin;
+  } catch {
+    return "";
+  }
+}
+
+function getMediaBaseOrigin() {
+  const fromInput = normalizeMediaBaseUrl(
+    document.getElementById("cmsDeviceBaseUrl")?.value ||
+      localStorage.getItem(PANEL_MEDIA_BASE_KEY) ||
+      ""
+  );
+  if (fromInput) return fromInput;
+
+  if (!isLocalPanelHost(window.location.hostname)) {
+    return window.location.origin;
+  }
+
+  return "";
+}
+
+function saveCmsDeviceBaseUrl() {
+  const normalized = normalizeMediaBaseUrl(
+    document.getElementById("cmsDeviceBaseUrl")?.value
+  );
+  if (!normalized) {
+    alert("Enter a valid URL, e.g. http://192.168.1.105:3000");
+    return;
+  }
+  document.getElementById("cmsDeviceBaseUrl").value = normalized;
+  localStorage.setItem(PANEL_MEDIA_BASE_KEY, normalized);
+  showResult({ status: "saved", mediaBaseUrl: normalized });
+}
+
 function absoluteMediaUrl(path) {
   const p = String(path || "").trim();
   if (!p) return "";
   if (/^https?:\/\//i.test(p)) return p;
-  return `${window.location.origin}${p.startsWith("/") ? p : `/${p}`}`;
+
+  const base = getMediaBaseOrigin();
+  if (!base) {
+    throw new Error(
+      "Set CMS URL for screens (use your PC LAN IP or Replit https URL, not localhost)."
+    );
+  }
+  return `${base}${p.startsWith("/") ? p : `/${p}`}`;
 }
 
 function inferMediaType(filename, mime) {
@@ -49,6 +104,19 @@ function defaultDurationMs(type) {
   return 10000;
 }
 
+function normalizeDurationMs(item) {
+  const maxMs = 3600 * 1000;
+  const minMs = 1000;
+  let ms = Number(item?.durationMs);
+  if (!Number.isFinite(ms) || ms < minMs) {
+    return defaultDurationMs(item?.type);
+  }
+  if (ms === 1000000) {
+    return defaultDurationMs(item?.type);
+  }
+  return Math.min(maxMs, ms);
+}
+
 function savePlaylistDraft() {
   localStorage.setItem(PANEL_PLAYLIST_KEY, JSON.stringify(playlistItems));
 }
@@ -87,7 +155,11 @@ function loadPlaylistDraft() {
     if (!raw) return;
     const parsed = JSON.parse(raw);
     if (Array.isArray(parsed)) {
-      playlistItems = parsed;
+      playlistItems = parsed.map((item) => ({
+        ...item,
+        durationMs: normalizeDurationMs(item)
+      }));
+      savePlaylistDraft();
       renderPlaylist();
     }
   } catch {
@@ -145,9 +217,10 @@ function renderPlaylist() {
     durInput.max = "3600";
     durInput.value = String(Math.round(item.durationMs / 1000));
     durInput.addEventListener("change", () => {
-      item.durationMs = Math.max(1000, Number(durInput.value) || 10) * 1000;
+      const seconds = Math.min(3600, Math.max(1, Number(durInput.value) || 10));
+      item.durationMs = seconds * 1000;
+      meta.textContent = `${item.type} · ${seconds}s`;
       savePlaylistDraft();
-      renderPlaylist();
     });
 
     const removeBtn = document.createElement("button");
@@ -258,6 +331,39 @@ async function verify() {
   }
 }
 
+async function unpair() {
+  const deviceId = getPanelDeviceId();
+  if (!deviceId) {
+    alert("No paired device in this panel.");
+    return;
+  }
+
+  if (
+    !confirm(
+      "Unpair this device? The screen will show a new 6-digit code and this panel will forget the device."
+    )
+  ) {
+    return;
+  }
+
+  const res = await fetch("/pairing/unpair", {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ deviceId })
+  });
+
+  const data = await res.json();
+  showResult(data);
+
+  if (res.ok) {
+    setPanelDeviceId("");
+    const codeInput = document.getElementById("code");
+    if (codeInput) codeInput.value = "";
+  } else {
+    alert(data.error || "Unpair failed");
+  }
+}
+
 async function publish() {
   const deviceId = getPanelDeviceId();
 
@@ -271,8 +377,28 @@ async function publish() {
     return;
   }
 
+  const mediaBase = getMediaBaseOrigin();
+  if (!mediaBase) {
+    alert(
+      "Set CMS URL for screens first (e.g. http://192.168.1.105:3000 — same machine as the TV ws:// address)."
+    );
+    return;
+  }
+  if (isLocalPanelHost(new URL(mediaBase).hostname)) {
+    const ok = confirm(
+      "Media URLs use localhost. TVs cannot download from localhost unless the player runs on this PC. Continue anyway?"
+    );
+    if (!ok) return;
+  }
+
   saveScheduleDraft();
-  const payload = buildPolicyPayload();
+  let payload;
+  try {
+    payload = buildPolicyPayload();
+  } catch (err) {
+    alert(err.message);
+    return;
+  }
 
   const res = await fetch(`/device/${deviceId}/content/set-policy`, {
     method: "POST",
@@ -330,6 +456,14 @@ document.addEventListener("DOMContentLoaded", () => {
   const saved = localStorage.getItem(PANEL_DEVICE_ID_KEY);
   if (saved) setPanelDeviceId(saved);
 
+  const savedMediaBase = localStorage.getItem(PANEL_MEDIA_BASE_KEY);
+  const cmsBaseInput = document.getElementById("cmsDeviceBaseUrl");
+  if (savedMediaBase && cmsBaseInput) {
+    cmsBaseInput.value = savedMediaBase;
+  } else if (cmsBaseInput && !isLocalPanelHost(window.location.hostname)) {
+    cmsBaseInput.value = window.location.origin;
+  }
+
   loadPlaylistDraft();
   loadScheduleDraft();