@xenon-device-management/xenon 1.2.0 → 1.3.0

package/lib/src/generated/client/edge.js

@@ -400,8 +400,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "generator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../src/generated/client\"\n  binaryTargets = [\"native\", \"darwin\", \"darwin-arm64\", \"linux-musl-arm64-openssl-3.0.x\", \"linux-musl-openssl-3.0.x\", \"debian-openssl-3.0.x\"]\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel Build {\n  id        String    @id @default(uuid())\n  name      String?\n  createdAt DateTime  @default(now())\n  updatedAt DateTime  @updatedAt\n  sessions  Session[]\n}\n\nmodel Session {\n  id                      String       @id\n  build_id                String?\n  name                    String?\n  status                  String       @default(\"running\")\n  desired_capabilities    String\n  session_capabilities    String\n  node_id                 String\n  has_live_video          Boolean\n  video_recording_enabled Boolean      @default(true)\n  video_recording         String?\n  startTime               DateTime     @default(now())\n  endTime                 DateTime?\n  failure_reason          String?\n  is_profiling_available  Boolean      @default(false)\n  device_info             String?\n  device_udid             String\n  device_platform         String\n  device_version          String\n  device_name             String?\n  createdAt               DateTime     @default(now())\n  updatedAt               DateTime     @updatedAt\n  performance_trace       String?      @map(\"performance_trace\")\n  failure_category        String?\n  ai_analysis             String?\n  tags                    String?\n  trace_id                String?\n  last_heartbeat_at       DateTime?\n  heartbeat_pid           Int?\n  heartbeat_host          String?\n  Log                     Log[]\n  Profiling               Profiling[]\n  build                   Build?       @relation(fields: [build_id], references: [id])\n  SessionLog              SessionLog[]\n\n  @@index([status, last_heartbeat_at])\n}\n\nmodel SessionLog {\n  id                 String   @id @default(uuid())\n  session_id         String\n  command_name       String?\n  url                String\n  method             String\n  title              String\n  subtitle           String?\n  body               String?\n  response           String\n  screenshot         String?\n  is_success         Boolean?\n  is_error           Boolean  @default(false)\n  is_healed          Boolean  @default(false)\n  original_selector  String?\n  healed_selector    String?\n  healing_confidence Float?\n  createdAt          DateTime @default(now())\n  updatedAt          DateTime @updatedAt\n  duration           Int?\n  span_id            String?\n  trace_id           String?\n  session            Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel Log {\n  id         String   @id @default(uuid())\n  session_id String\n  log_type   String\n  message    String\n  timestamp  DateTime @default(now())\n  createdAt  DateTime @default(now())\n  updatedAt  DateTime @updatedAt\n  session    Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel Profiling {\n  id                Int      @id @default(autoincrement())\n  session_id        String\n  cpu               String?\n  memory            String?\n  total_cpu_used    String?\n  total_memory_used String?\n  raw_cpu_log       String?\n  raw_memory_log    String?\n  timestamp         DateTime\n  createdAt         DateTime @default(now())\n  updatedAt         DateTime @updatedAt\n  session           Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel App {\n  id          String   @id @default(uuid())\n  name        String\n  filename    String\n  filepath    String\n  mimetype    String\n  size        Int\n  packageName String?\n  version     String?\n  platform    String?\n  md5         String?  @unique\n  createdAt   DateTime @default(now())\n  updatedAt   DateTime @updatedAt\n}\n\nmodel Device {\n  udid                         String\n  host                         String\n  systemPort                   Int?\n  proxyPort                    Int?\n  proxyHost                    String?\n  wdaLocalPort                 Int?\n  name                         String?  @default(\"unknown\")\n  state                        String?  @default(\"available\")\n  sdk                          String?  @default(\"unknown\")\n  platform                     String?  @default(\"unknown\")\n  deviceType                   String?  @default(\"real\")\n  busy                         Boolean? @default(false)\n  userBlocked                  Boolean? @default(false)\n  realDevice                   Boolean? @default(true)\n  session_id                   String?\n  offline                      Boolean? @default(false)\n  mjpegServerPort              Int?\n  lastCmdExecutedAt            Float?\n  totalUtilizationTimeMilliSec Float    @default(0)\n  sessionStartTime             Float    @default(0)\n  newCommandTimeout            Int?\n  cloud                        String?\n  derivedDataPath              String?\n  chromeDriverPath             String?\n  capability                   String?\n  adbRemoteHost                String?\n  adbPort                      Int?\n  nodeId                       String?\n  screenWidth                  String?\n  screenHeight                 String?\n  dashboard_link               String?\n  total_session_count          Int?     @default(0)\n  createdAt                    DateTime @default(now())\n  updatedAt                    DateTime @updatedAt\n  healthCheckError             String?\n  healthStatus                 String?  @default(\"Healthy\")\n  lastHealthCheckAt            Float?\n  batteryLevel                 Int?\n  reservationReason            String?\n  reservedBy                   String?\n  reservedUntil                Float?\n  storageFree                  String?\n  tags                         String?\n  thermalStatus                String?\n  sessionProgress              String?  @default(\"\")\n  totalHealedCount             Int?     @default(0)\n  ip                           String?  @default(\"\")\n  cpuArchitecture              String?\n  owningSessionId              String?  @map(\"owning_session_id\")\n  lockedAt                     Float?   @map(\"locked_at\")\n\n  @@id([udid, host])\n  @@index([owningSessionId])\n}\n\nmodel PendingSession {\n  id            Int    @id @default(autoincrement())\n  capability_id String @unique\n  capability    String\n  createdAt     Float\n}\n\nmodel CLIArgs {\n  id        Int      @id @default(autoincrement())\n  args      String\n  createdAt DateTime @default(now())\n}\n\nmodel WebhookConfig {\n  id              String   @id @default(uuid())\n  url             String\n  type            String   @default(\"slack\")\n  events          String\n  active          Boolean  @default(true)\n  createdAt       DateTime @default(now())\n  updatedAt       DateTime @updatedAt\n  payloadTemplate String?\n}\n\nmodel WebConfig {\n  id        String   @id @default(\"global\")\n  name      String   @unique\n  value     String\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n}\n\nmodel LocatorEtalon {\n  id         String   @id @default(uuid())\n  selector   String   @unique\n  strategy   String\n  attributes String\n  nodeName   String\n  lastSeen   DateTime @default(now())\n  createdAt  DateTime @default(now())\n  updatedAt  DateTime @updatedAt\n}\n\nmodel PortLease {\n  port         Int    @id\n  purpose      String\n  leasedToUdid String\n  leasedToPid  Int?\n  leasedAt     Float\n  expiresAt    Float\n\n  @@index([purpose, expiresAt])\n  @@index([leasedToUdid])\n  @@index([expiresAt])\n}\n\nmodel ApiKey {\n  id         String    @id @default(uuid())\n  name       String\n  keyHash    String    @unique\n  scopes     String\n  rateLimit  Int       @default(300)\n  createdAt  DateTime  @default(now())\n  revokedAt  DateTime?\n  lastUsedAt DateTime?\n}\n",
-  "inlineSchemaHash": "63bca573ac32eb8f7ecdad65dacae428e37c45913b9c1d26de562bdd7fd2ad55",
+  "inlineSchema": "generator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../src/generated/client\"\n  binaryTargets = [\"native\", \"darwin\", \"darwin-arm64\", \"linux-musl-arm64-openssl-3.0.x\", \"linux-musl-openssl-3.0.x\", \"debian-openssl-3.0.x\"]\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel Build {\n  id        String    @id @default(uuid())\n  name      String?\n  createdAt DateTime  @default(now())\n  updatedAt DateTime  @updatedAt\n  sessions  Session[]\n}\n\nmodel Session {\n  id                      String       @id\n  build_id                String?\n  name                    String?\n  status                  String       @default(\"running\")\n  desired_capabilities    String\n  session_capabilities    String\n  node_id                 String\n  has_live_video          Boolean\n  video_recording_enabled Boolean      @default(true)\n  video_recording         String?\n  startTime               DateTime     @default(now())\n  endTime                 DateTime?\n  failure_reason          String?\n  is_profiling_available  Boolean      @default(false)\n  device_info             String?\n  device_udid             String\n  device_platform         String\n  device_version          String\n  device_name             String?\n  createdAt               DateTime     @default(now())\n  updatedAt               DateTime     @updatedAt\n  performance_trace       String?      @map(\"performance_trace\")\n  failure_category        String?\n  ai_analysis             String?\n  tags                    String?\n  trace_id                String?\n  last_heartbeat_at       DateTime?\n  heartbeat_pid           Int?\n  heartbeat_host          String?\n  Log                     Log[]\n  Profiling               Profiling[]\n  build                   Build?       @relation(fields: [build_id], references: [id])\n  SessionLog              SessionLog[]\n\n  @@index([status, last_heartbeat_at])\n  @@index([build_id])\n  @@index([device_udid])\n  @@index([device_platform, status])\n}\n\nmodel SessionLog {\n  id                 String   @id @default(uuid())\n  session_id         String\n  command_name       String?\n  url                String\n  method             String\n  title              String\n  subtitle           String?\n  body               String?\n  response           String\n  screenshot         String?\n  is_success         Boolean?\n  is_error           Boolean  @default(false)\n  is_healed          Boolean  @default(false)\n  original_selector  String?\n  healed_selector    String?\n  healing_confidence Float?\n  createdAt          DateTime @default(now())\n  updatedAt          DateTime @updatedAt\n  duration           Int?\n  span_id            String?\n  trace_id           String?\n  session            Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel Log {\n  id         String   @id @default(uuid())\n  session_id String\n  log_type   String\n  message    String\n  timestamp  DateTime @default(now())\n  createdAt  DateTime @default(now())\n  updatedAt  DateTime @updatedAt\n  session    Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel Profiling {\n  id                Int      @id @default(autoincrement())\n  session_id        String\n  cpu               String?\n  memory            String?\n  total_cpu_used    String?\n  total_memory_used String?\n  raw_cpu_log       String?\n  raw_memory_log    String?\n  timestamp         DateTime\n  createdAt         DateTime @default(now())\n  updatedAt         DateTime @updatedAt\n  session           Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel App {\n  id          String   @id @default(uuid())\n  name        String\n  filename    String\n  filepath    String\n  mimetype    String\n  size        Int\n  packageName String?\n  version     String?\n  platform    String?\n  md5         String?  @unique\n  createdAt   DateTime @default(now())\n  updatedAt   DateTime @updatedAt\n}\n\nmodel Device {\n  udid                         String\n  host                         String\n  systemPort                   Int?\n  proxyPort                    Int?\n  proxyHost                    String?\n  wdaLocalPort                 Int?\n  name                         String?  @default(\"unknown\")\n  state                        String?  @default(\"available\")\n  sdk                          String?  @default(\"unknown\")\n  platform                     String?  @default(\"unknown\")\n  deviceType                   String?  @default(\"real\")\n  busy                         Boolean? @default(false)\n  userBlocked                  Boolean? @default(false)\n  realDevice                   Boolean? @default(true)\n  session_id                   String?\n  offline                      Boolean? @default(false)\n  mjpegServerPort              Int?\n  lastCmdExecutedAt            Float?\n  totalUtilizationTimeMilliSec Float    @default(0)\n  sessionStartTime             Float    @default(0)\n  newCommandTimeout            Int?\n  cloud                        String?\n  derivedDataPath              String?\n  chromeDriverPath             String?\n  capability                   String?\n  adbRemoteHost                String?\n  adbPort                      Int?\n  nodeId                       String?\n  screenWidth                  String?\n  screenHeight                 String?\n  dashboard_link               String?\n  total_session_count          Int?     @default(0)\n  createdAt                    DateTime @default(now())\n  updatedAt                    DateTime @updatedAt\n  healthCheckError             String?\n  healthStatus                 String?  @default(\"Healthy\")\n  lastHealthCheckAt            Float?\n  batteryLevel                 Int?\n  reservationReason            String?\n  reservedBy                   String?\n  reservedUntil                Float?\n  storageFree                  String?\n  tags                         String?\n  thermalStatus                String?\n  sessionProgress              String?  @default(\"\")\n  totalHealedCount             Int?     @default(0)\n  ip                           String?  @default(\"\")\n  cpuArchitecture              String?\n  owningSessionId              String?  @map(\"owning_session_id\")\n  lockedAt                     Float?   @map(\"locked_at\")\n\n  @@id([udid, host])\n  @@index([owningSessionId])\n}\n\nmodel PendingSession {\n  id            Int    @id @default(autoincrement())\n  capability_id String @unique\n  capability    String\n  createdAt     Float\n}\n\nmodel CLIArgs {\n  id        Int      @id @default(autoincrement())\n  args      String\n  createdAt DateTime @default(now())\n}\n\nmodel WebhookConfig {\n  id              String   @id @default(uuid())\n  url             String\n  type            String   @default(\"slack\")\n  events          String\n  active          Boolean  @default(true)\n  createdAt       DateTime @default(now())\n  updatedAt       DateTime @updatedAt\n  payloadTemplate String?\n}\n\nmodel WebConfig {\n  id        String   @id @default(\"global\")\n  name      String   @unique\n  value     String\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n}\n\nmodel LocatorEtalon {\n  id         String   @id @default(uuid())\n  selector   String   @unique\n  strategy   String\n  attributes String\n  nodeName   String\n  lastSeen   DateTime @default(now())\n  createdAt  DateTime @default(now())\n  updatedAt  DateTime @updatedAt\n}\n\nmodel PortLease {\n  port         Int    @id\n  purpose      String\n  leasedToUdid String\n  leasedToPid  Int?\n  leasedAt     Float\n  expiresAt    Float\n\n  @@index([purpose, expiresAt])\n  @@index([leasedToUdid])\n  @@index([expiresAt])\n}\n\nmodel ApiKey {\n  id         String    @id @default(uuid())\n  name       String\n  keyHash    String    @unique\n  scopes     String\n  rateLimit  Int       @default(300)\n  createdAt  DateTime  @default(now())\n  revokedAt  DateTime?\n  lastUsedAt DateTime?\n}\n",
+  "inlineSchemaHash": "6864fff1fc9fe0ae6d8012e4e368ce177d5d16a754ba6305deaef00b7524ef05",
   "copyEngine": true
 }
 config.dirname = '/'

package/lib/src/generated/client/index.js

@@ -401,8 +401,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "generator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../src/generated/client\"\n  binaryTargets = [\"native\", \"darwin\", \"darwin-arm64\", \"linux-musl-arm64-openssl-3.0.x\", \"linux-musl-openssl-3.0.x\", \"debian-openssl-3.0.x\"]\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel Build {\n  id        String    @id @default(uuid())\n  name      String?\n  createdAt DateTime  @default(now())\n  updatedAt DateTime  @updatedAt\n  sessions  Session[]\n}\n\nmodel Session {\n  id                      String       @id\n  build_id                String?\n  name                    String?\n  status                  String       @default(\"running\")\n  desired_capabilities    String\n  session_capabilities    String\n  node_id                 String\n  has_live_video          Boolean\n  video_recording_enabled Boolean      @default(true)\n  video_recording         String?\n  startTime               DateTime     @default(now())\n  endTime                 DateTime?\n  failure_reason          String?\n  is_profiling_available  Boolean      @default(false)\n  device_info             String?\n  device_udid             String\n  device_platform         String\n  device_version          String\n  device_name             String?\n  createdAt               DateTime     @default(now())\n  updatedAt               DateTime     @updatedAt\n  performance_trace       String?      @map(\"performance_trace\")\n  failure_category        String?\n  ai_analysis             String?\n  tags                    String?\n  trace_id                String?\n  last_heartbeat_at       DateTime?\n  heartbeat_pid           Int?\n  heartbeat_host          String?\n  Log                     Log[]\n  Profiling               Profiling[]\n  build                   Build?       @relation(fields: [build_id], references: [id])\n  SessionLog              SessionLog[]\n\n  @@index([status, last_heartbeat_at])\n}\n\nmodel SessionLog {\n  id                 String   @id @default(uuid())\n  session_id         String\n  command_name       String?\n  url                String\n  method             String\n  title              String\n  subtitle           String?\n  body               String?\n  response           String\n  screenshot         String?\n  is_success         Boolean?\n  is_error           Boolean  @default(false)\n  is_healed          Boolean  @default(false)\n  original_selector  String?\n  healed_selector    String?\n  healing_confidence Float?\n  createdAt          DateTime @default(now())\n  updatedAt          DateTime @updatedAt\n  duration           Int?\n  span_id            String?\n  trace_id           String?\n  session            Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel Log {\n  id         String   @id @default(uuid())\n  session_id String\n  log_type   String\n  message    String\n  timestamp  DateTime @default(now())\n  createdAt  DateTime @default(now())\n  updatedAt  DateTime @updatedAt\n  session    Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel Profiling {\n  id                Int      @id @default(autoincrement())\n  session_id        String\n  cpu               String?\n  memory            String?\n  total_cpu_used    String?\n  total_memory_used String?\n  raw_cpu_log       String?\n  raw_memory_log    String?\n  timestamp         DateTime\n  createdAt         DateTime @default(now())\n  updatedAt         DateTime @updatedAt\n  session           Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel App {\n  id          String   @id @default(uuid())\n  name        String\n  filename    String\n  filepath    String\n  mimetype    String\n  size        Int\n  packageName String?\n  version     String?\n  platform    String?\n  md5         String?  @unique\n  createdAt   DateTime @default(now())\n  updatedAt   DateTime @updatedAt\n}\n\nmodel Device {\n  udid                         String\n  host                         String\n  systemPort                   Int?\n  proxyPort                    Int?\n  proxyHost                    String?\n  wdaLocalPort                 Int?\n  name                         String?  @default(\"unknown\")\n  state                        String?  @default(\"available\")\n  sdk                          String?  @default(\"unknown\")\n  platform                     String?  @default(\"unknown\")\n  deviceType                   String?  @default(\"real\")\n  busy                         Boolean? @default(false)\n  userBlocked                  Boolean? @default(false)\n  realDevice                   Boolean? @default(true)\n  session_id                   String?\n  offline                      Boolean? @default(false)\n  mjpegServerPort              Int?\n  lastCmdExecutedAt            Float?\n  totalUtilizationTimeMilliSec Float    @default(0)\n  sessionStartTime             Float    @default(0)\n  newCommandTimeout            Int?\n  cloud                        String?\n  derivedDataPath              String?\n  chromeDriverPath             String?\n  capability                   String?\n  adbRemoteHost                String?\n  adbPort                      Int?\n  nodeId                       String?\n  screenWidth                  String?\n  screenHeight                 String?\n  dashboard_link               String?\n  total_session_count          Int?     @default(0)\n  createdAt                    DateTime @default(now())\n  updatedAt                    DateTime @updatedAt\n  healthCheckError             String?\n  healthStatus                 String?  @default(\"Healthy\")\n  lastHealthCheckAt            Float?\n  batteryLevel                 Int?\n  reservationReason            String?\n  reservedBy                   String?\n  reservedUntil                Float?\n  storageFree                  String?\n  tags                         String?\n  thermalStatus                String?\n  sessionProgress              String?  @default(\"\")\n  totalHealedCount             Int?     @default(0)\n  ip                           String?  @default(\"\")\n  cpuArchitecture              String?\n  owningSessionId              String?  @map(\"owning_session_id\")\n  lockedAt                     Float?   @map(\"locked_at\")\n\n  @@id([udid, host])\n  @@index([owningSessionId])\n}\n\nmodel PendingSession {\n  id            Int    @id @default(autoincrement())\n  capability_id String @unique\n  capability    String\n  createdAt     Float\n}\n\nmodel CLIArgs {\n  id        Int      @id @default(autoincrement())\n  args      String\n  createdAt DateTime @default(now())\n}\n\nmodel WebhookConfig {\n  id              String   @id @default(uuid())\n  url             String\n  type            String   @default(\"slack\")\n  events          String\n  active          Boolean  @default(true)\n  createdAt       DateTime @default(now())\n  updatedAt       DateTime @updatedAt\n  payloadTemplate String?\n}\n\nmodel WebConfig {\n  id        String   @id @default(\"global\")\n  name      String   @unique\n  value     String\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n}\n\nmodel LocatorEtalon {\n  id         String   @id @default(uuid())\n  selector   String   @unique\n  strategy   String\n  attributes String\n  nodeName   String\n  lastSeen   DateTime @default(now())\n  createdAt  DateTime @default(now())\n  updatedAt  DateTime @updatedAt\n}\n\nmodel PortLease {\n  port         Int    @id\n  purpose      String\n  leasedToUdid String\n  leasedToPid  Int?\n  leasedAt     Float\n  expiresAt    Float\n\n  @@index([purpose, expiresAt])\n  @@index([leasedToUdid])\n  @@index([expiresAt])\n}\n\nmodel ApiKey {\n  id         String    @id @default(uuid())\n  name       String\n  keyHash    String    @unique\n  scopes     String\n  rateLimit  Int       @default(300)\n  createdAt  DateTime  @default(now())\n  revokedAt  DateTime?\n  lastUsedAt DateTime?\n}\n",
-  "inlineSchemaHash": "63bca573ac32eb8f7ecdad65dacae428e37c45913b9c1d26de562bdd7fd2ad55",
+  "inlineSchema": "generator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../src/generated/client\"\n  binaryTargets = [\"native\", \"darwin\", \"darwin-arm64\", \"linux-musl-arm64-openssl-3.0.x\", \"linux-musl-openssl-3.0.x\", \"debian-openssl-3.0.x\"]\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel Build {\n  id        String    @id @default(uuid())\n  name      String?\n  createdAt DateTime  @default(now())\n  updatedAt DateTime  @updatedAt\n  sessions  Session[]\n}\n\nmodel Session {\n  id                      String       @id\n  build_id                String?\n  name                    String?\n  status                  String       @default(\"running\")\n  desired_capabilities    String\n  session_capabilities    String\n  node_id                 String\n  has_live_video          Boolean\n  video_recording_enabled Boolean      @default(true)\n  video_recording         String?\n  startTime               DateTime     @default(now())\n  endTime                 DateTime?\n  failure_reason          String?\n  is_profiling_available  Boolean      @default(false)\n  device_info             String?\n  device_udid             String\n  device_platform         String\n  device_version          String\n  device_name             String?\n  createdAt               DateTime     @default(now())\n  updatedAt               DateTime     @updatedAt\n  performance_trace       String?      @map(\"performance_trace\")\n  failure_category        String?\n  ai_analysis             String?\n  tags                    String?\n  trace_id                String?\n  last_heartbeat_at       DateTime?\n  heartbeat_pid           Int?\n  heartbeat_host          String?\n  Log                     Log[]\n  Profiling               Profiling[]\n  build                   Build?       @relation(fields: [build_id], references: [id])\n  SessionLog              SessionLog[]\n\n  @@index([status, last_heartbeat_at])\n  @@index([build_id])\n  @@index([device_udid])\n  @@index([device_platform, status])\n}\n\nmodel SessionLog {\n  id                 String   @id @default(uuid())\n  session_id         String\n  command_name       String?\n  url                String\n  method             String\n  title              String\n  subtitle           String?\n  body               String?\n  response           String\n  screenshot         String?\n  is_success         Boolean?\n  is_error           Boolean  @default(false)\n  is_healed          Boolean  @default(false)\n  original_selector  String?\n  healed_selector    String?\n  healing_confidence Float?\n  createdAt          DateTime @default(now())\n  updatedAt          DateTime @updatedAt\n  duration           Int?\n  span_id            String?\n  trace_id           String?\n  session            Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel Log {\n  id         String   @id @default(uuid())\n  session_id String\n  log_type   String\n  message    String\n  timestamp  DateTime @default(now())\n  createdAt  DateTime @default(now())\n  updatedAt  DateTime @updatedAt\n  session    Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel Profiling {\n  id                Int      @id @default(autoincrement())\n  session_id        String\n  cpu               String?\n  memory            String?\n  total_cpu_used    String?\n  total_memory_used String?\n  raw_cpu_log       String?\n  raw_memory_log    String?\n  timestamp         DateTime\n  createdAt         DateTime @default(now())\n  updatedAt         DateTime @updatedAt\n  session           Session  @relation(fields: [session_id], references: [id])\n}\n\nmodel App {\n  id          String   @id @default(uuid())\n  name        String\n  filename    String\n  filepath    String\n  mimetype    String\n  size        Int\n  packageName String?\n  version     String?\n  platform    String?\n  md5         String?  @unique\n  createdAt   DateTime @default(now())\n  updatedAt   DateTime @updatedAt\n}\n\nmodel Device {\n  udid                         String\n  host                         String\n  systemPort                   Int?\n  proxyPort                    Int?\n  proxyHost                    String?\n  wdaLocalPort                 Int?\n  name                         String?  @default(\"unknown\")\n  state                        String?  @default(\"available\")\n  sdk                          String?  @default(\"unknown\")\n  platform                     String?  @default(\"unknown\")\n  deviceType                   String?  @default(\"real\")\n  busy                         Boolean? @default(false)\n  userBlocked                  Boolean? @default(false)\n  realDevice                   Boolean? @default(true)\n  session_id                   String?\n  offline                      Boolean? @default(false)\n  mjpegServerPort              Int?\n  lastCmdExecutedAt            Float?\n  totalUtilizationTimeMilliSec Float    @default(0)\n  sessionStartTime             Float    @default(0)\n  newCommandTimeout            Int?\n  cloud                        String?\n  derivedDataPath              String?\n  chromeDriverPath             String?\n  capability                   String?\n  adbRemoteHost                String?\n  adbPort                      Int?\n  nodeId                       String?\n  screenWidth                  String?\n  screenHeight                 String?\n  dashboard_link               String?\n  total_session_count          Int?     @default(0)\n  createdAt                    DateTime @default(now())\n  updatedAt                    DateTime @updatedAt\n  healthCheckError             String?\n  healthStatus                 String?  @default(\"Healthy\")\n  lastHealthCheckAt            Float?\n  batteryLevel                 Int?\n  reservationReason            String?\n  reservedBy                   String?\n  reservedUntil                Float?\n  storageFree                  String?\n  tags                         String?\n  thermalStatus                String?\n  sessionProgress              String?  @default(\"\")\n  totalHealedCount             Int?     @default(0)\n  ip                           String?  @default(\"\")\n  cpuArchitecture              String?\n  owningSessionId              String?  @map(\"owning_session_id\")\n  lockedAt                     Float?   @map(\"locked_at\")\n\n  @@id([udid, host])\n  @@index([owningSessionId])\n}\n\nmodel PendingSession {\n  id            Int    @id @default(autoincrement())\n  capability_id String @unique\n  capability    String\n  createdAt     Float\n}\n\nmodel CLIArgs {\n  id        Int      @id @default(autoincrement())\n  args      String\n  createdAt DateTime @default(now())\n}\n\nmodel WebhookConfig {\n  id              String   @id @default(uuid())\n  url             String\n  type            String   @default(\"slack\")\n  events          String\n  active          Boolean  @default(true)\n  createdAt       DateTime @default(now())\n  updatedAt       DateTime @updatedAt\n  payloadTemplate String?\n}\n\nmodel WebConfig {\n  id        String   @id @default(\"global\")\n  name      String   @unique\n  value     String\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n}\n\nmodel LocatorEtalon {\n  id         String   @id @default(uuid())\n  selector   String   @unique\n  strategy   String\n  attributes String\n  nodeName   String\n  lastSeen   DateTime @default(now())\n  createdAt  DateTime @default(now())\n  updatedAt  DateTime @updatedAt\n}\n\nmodel PortLease {\n  port         Int    @id\n  purpose      String\n  leasedToUdid String\n  leasedToPid  Int?\n  leasedAt     Float\n  expiresAt    Float\n\n  @@index([purpose, expiresAt])\n  @@index([leasedToUdid])\n  @@index([expiresAt])\n}\n\nmodel ApiKey {\n  id         String    @id @default(uuid())\n  name       String\n  keyHash    String    @unique\n  scopes     String\n  rateLimit  Int       @default(300)\n  createdAt  DateTime  @default(now())\n  revokedAt  DateTime?\n  lastUsedAt DateTime?\n}\n",
+  "inlineSchemaHash": "6864fff1fc9fe0ae6d8012e4e368ce177d5d16a754ba6305deaef00b7524ef05",
   "copyEngine": true
 }
 

package/lib/src/generated/client/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "prisma-client-d4c43073a25210b44af705e38a5145f202638c15575b7a217b98d91bbb52c599",
+  "name": "prisma-client-b9d7255c28647be181530780d93fb8b58302c33ef3d6c27d829ee40419725e48",
   "main": "index.js",
   "types": "index.d.ts",
   "browser": "index-browser.js",

package/lib/src/generated/client/schema.prisma

@@ -53,6 +53,9 @@ model Session {
   SessionLog              SessionLog[]
 
   @@index([status, last_heartbeat_at])
+  @@index([build_id])
+  @@index([device_udid])
+  @@index([device_platform, status])
 }
 
 model SessionLog {

package/lib/src/helpers/UniversalMjpegProxy.js

@@ -182,7 +182,25 @@ class UniversalMjpegProxy {
         });
     }
     broadcast(chunk) {
+        var _a, _b, _c;
         for (const client of this.clients) {
+            if (!client.writable || client.destroyed) {
+                this.clients.delete(client);
+                continue;
+            }
+            const socket = (_a = client.socket) !== null && _a !== void 0 ? _a : (_b = client.req) === null || _b === void 0 ? void 0 : _b.socket;
+            const backlog = (_c = socket === null || socket === void 0 ? void 0 : socket.writableLength) !== null && _c !== void 0 ? _c : 0;
+            if (backlog > UniversalMjpegProxy.MAX_CLIENT_BACKLOG_BYTES) {
+                logger_1.default.warn(`[MjpegProxy] Dropping lagging client (backlog=${backlog}B > ${UniversalMjpegProxy.MAX_CLIENT_BACKLOG_BYTES}B) on ${this.mjpegUrl}`);
+                try {
+                    client.end();
+                }
+                catch (e) {
+                    /* ignore */
+                }
+                this.clients.delete(client);
+                continue;
+            }
             try {
                 client.write(chunk);
             }
@@ -271,3 +289,8 @@ exports.UniversalMjpegProxy = UniversalMjpegProxy;
 UniversalMjpegProxy.MAX_RETRIES = 10;
 UniversalMjpegProxy.BASE_RETRY_MS = 500;
 UniversalMjpegProxy.MAX_RETRY_MS = 10000;
+// Drop a client whose kernel send buffer exceeds this. MJPEG frames must not be
+// split mid-boundary, so we drop the whole client rather than partial chunks —
+// otherwise a single paused browser tab silently queues frames in Node's heap
+// until the process OOMs on a long session.
+UniversalMjpegProxy.MAX_CLIENT_BACKLOG_BYTES = 4 * 1024 * 1024;

package/lib/src/index.js

@@ -61,17 +61,25 @@ process.env.PATH = process.env.PATH + ':' + ffmpeg_1.path.replace(/ffmpeg$/g, ''
  * all spawned sidecar processes (go-ios, iproxy, tunnels) are killed.
  */
 const cleanup = () => __awaiter(void 0, void 0, void 0, function* () {
-    logger_1.default.info('🚀 [Xenon] Shutdown signal received. Performing graceful cleanup...');
+    logger_1.default.info('🚀 [Xenon] Shutdown signal received. Performing graceful drain + cleanup...');
     try {
+        // Phase 1: drain active sessions so in-flight video gets archived,
+        // ports get released, and the DB rows don't stay "running" forever.
+        // Bounded so a hung driver can't hold up systemd (default 90s timeout).
+        const { ShutdownCoordinator } = yield Promise.resolve().then(() => __importStar(require('./services/ShutdownCoordinator')));
+        yield typedi_1.Container.get(ShutdownCoordinator).drain(15000);
         const { default: IOSStreamService } = yield Promise.resolve().then(() => __importStar(require('./device-managers/ios/IOSStreamService')));
         const { default: AndroidStreamService } = yield Promise.resolve().then(() => __importStar(require('./device-managers/android/AndroidStreamService')));
         const { stopAllTimers } = yield Promise.resolve().then(() => __importStar(require('./device-utils')));
         const { VideoPipelineService } = yield Promise.resolve().then(() => __importStar(require('./services/VideoPipelineService')));
-        // Shutdown all independent MJPEG streams, tunnels, and video recordings
+        const { ProcessRegistry } = yield Promise.resolve().then(() => __importStar(require('./services/ProcessRegistry')));
+        // Phase 2: tear down infra (timers, sidecars, MJPEG streams).
         stopAllTimers();
         yield typedi_1.Container.get(IOSStreamService).cleanup();
         yield typedi_1.Container.get(AndroidStreamService).cleanup();
         yield typedi_1.Container.get(VideoPipelineService).cleanup();
+        // Phase 3: kill anything that's still running
+        yield typedi_1.Container.get(ProcessRegistry).terminateAll();
         logger_1.default.info('✅ [Xenon] Infrastructure components sanitized. Safe to exit.');
     }
     catch (err) {

package/lib/src/interceptors/CommandInterceptor.js

@@ -61,6 +61,8 @@ const HealEtalonService_1 = require("../services/healing/HealEtalonService");
 const OmniVisionService_1 = require("../services/omni-vision/OmniVisionService");
 const AICommandService_1 = require("../services/AICommandService");
 const logger_1 = __importDefault(require("../logger"));
+const sessionContext_1 = require("../logging/sessionContext");
+const ProcessMetricsService_1 = require("../services/ProcessMetricsService");
 let CommandInterceptor = class CommandInterceptor {
     constructor() {
         this.log = logger_1.default.scope('CommandInterceptor');
@@ -68,6 +70,7 @@ let CommandInterceptor = class CommandInterceptor {
     }
     handle(next, driver, commandName, args, pluginArgs, isHub) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             const IGNORED_COMMANDS = ['getScreenshot', 'stopRecordingScreen', 'startRecordingScreen'];
             if (IGNORED_COMMANDS.includes(commandName))
                 return yield next();
@@ -79,6 +82,32 @@ let CommandInterceptor = class CommandInterceptor {
                     'xenon.command.args': JSON.stringify(args),
                 });
             }
+            // Wrap the rest of the work in an AsyncLocalStorage frame so logs emitted
+            // from any downstream service (healing, omni-vision, dashboard event
+            // manager) automatically carry session/command/trace attribution without
+            // those services having to accept a context parameter.
+            const spanCtx = span === null || span === void 0 ? void 0 : span.spanContext();
+            const cmdStart = Date.now();
+            try {
+                return yield sessionContext_1.sessionContext.run({
+                    sessionId: sessionId || undefined,
+                    udid: (_a = driver === null || driver === void 0 ? void 0 : driver.caps) === null || _a === void 0 ? void 0 : _a.udid,
+                    commandName,
+                    traceId: spanCtx === null || spanCtx === void 0 ? void 0 : spanCtx.traceId,
+                    spanId: spanCtx === null || spanCtx === void 0 ? void 0 : spanCtx.spanId,
+                }, () => this.handleInContext(next, driver, commandName, args, pluginArgs, isHub, sessionId, span, tracingService));
+            }
+            finally {
+                // Aggregate counter — no per-session label, just fleet-wide throughput
+                // so Prom rate() gives commands/sec and the duration sum gives avg
+                // latency. Errors still count: a 429-hit dashboard poll is still hub
+                // work done.
+                typedi_1.Container.get(ProcessMetricsService_1.ProcessMetricsService).recordCommand(Date.now() - cmdStart);
+            }
+        });
+    }
+    handleInContext(next, driver, commandName, args, pluginArgs, isHub, sessionId, span, tracingService) {
+        return __awaiter(this, void 0, void 0, function* () {
             if (commandName === 'createSession' || commandName === 'deleteSession') {
                 try {
                     return yield next();

package/lib/src/interfaces/IPluginArgs.js

@@ -34,7 +34,6 @@ exports.DefaultPluginArgs = {
     bindHostOrIp: ip_1.default.address(),
     enableDashboard: false,
     bootedSimulators: false,
-    bootedEmulators: false,
     healthCheckIntervalMs: 86400000,
     healthCheckSchedule: undefined,
     removeDevicesFromDatabaseBeforeRunningThePlugin: false,

package/lib/src/logger.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.XenonLogger = void 0;
 exports.redactSecrets = redactSecrets;
 const support_1 = require("@appium/support");
+const sessionContext_1 = require("./logging/sessionContext");
 /**
  * Keys whose values must never appear in log output.
  * Case-insensitive substring matching is used so 'myApiKey' and 'API_KEY' both match.
@@ -133,20 +134,47 @@ class XenonLogger {
     logMessage(level, message, ...args) {
         const redactedMessage = redactSecrets(message);
         const redactedArgs = args.map((arg) => redactSecrets(arg));
+        const ctx = sessionContext_1.sessionContext.get();
         if (XenonLogger.isJsonLogging) {
             const logEntry = {
                 timestamp: new Date().toISOString(),
                 level,
                 scope: this.context.trim() || 'root',
                 message: this.format(redactedMessage),
-                args: redactedArgs.length ? redactedArgs : undefined,
             };
+            if (ctx) {
+                if (ctx.sessionId)
+                    logEntry.sessionId = ctx.sessionId;
+                if (ctx.udid)
+                    logEntry.udid = ctx.udid;
+                if (ctx.requestId)
+                    logEntry.requestId = ctx.requestId;
+                if (ctx.commandName)
+                    logEntry.commandName = ctx.commandName;
+                if (ctx.traceId)
+                    logEntry.traceId = ctx.traceId;
+                if (ctx.spanId)
+                    logEntry.spanId = ctx.spanId;
+            }
+            if (redactedArgs.length)
+                logEntry.args = redactedArgs;
             this.baseLogger.info(JSON.stringify(logEntry));
         }
         else {
-            this.baseLogger[level](`${this.context}${this.format(redactedMessage)}`, ...redactedArgs);
+            const ctxPrefix = this.buildTextPrefix(ctx);
+            this.baseLogger[level](`${this.context}${ctxPrefix}${this.format(redactedMessage)}`, ...redactedArgs);
         }
     }
+    // Emit a compact [s:shortId] marker when async context has a sessionId that
+    // isn't already baked into this.context (i.e. this logger wasn't created via
+    // withSession). Keeps console lines short while still giving grep-ability.
+    buildTextPrefix(ctx) {
+        if (!(ctx === null || ctx === void 0 ? void 0 : ctx.sessionId))
+            return '';
+        if (this.context.includes(ctx.sessionId))
+            return '';
+        return `[s:${ctx.sessionId.slice(0, 8)}] `;
+    }
     info(message, ...args) {
         this.logMessage('info', message, ...args);
     }

package/lib/src/logging/sessionContext.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionContext = void 0;
+const async_hooks_1 = require("async_hooks");
+class SessionContextHolder {
+    constructor() {
+        this.als = new async_hooks_1.AsyncLocalStorage();
+    }
+    // Open a new context frame. Inherits the parent frame's fields so child
+    // run() calls can add detail (e.g. command name) without losing session ids.
+    run(ctx, fn) {
+        const parent = this.als.getStore();
+        const merged = Object.assign(Object.assign({}, (parent !== null && parent !== void 0 ? parent : {})), ctx);
+        return this.als.run(merged, fn);
+    }
+    get() {
+        return this.als.getStore();
+    }
+    // Mutate the active frame. Useful when a value becomes known mid-request
+    // (e.g. sessionId resolved from a route param after the frame was opened).
+    update(patch) {
+        const store = this.als.getStore();
+        if (!store)
+            return;
+        Object.assign(store, patch);
+    }
+}
+exports.sessionContext = new SessionContextHolder();

package/lib/src/middleware/apiKeyMiddleware.js

@@ -0,0 +1,49 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiKeyMiddleware = apiKeyMiddleware;
+const typedi_1 = require("typedi");
+const ApiKeyService_1 = require("../services/ApiKeyService");
+const config_1 = require("../config");
+const SESSION_COOKIE = 'xenon_dashboard_session';
+function readSessionCookie(req) {
+    // cookie-parser isn't mounted globally, so parse the header inline.
+    const header = req.headers.cookie;
+    if (!header)
+        return undefined;
+    for (const part of header.split(';')) {
+        const eq = part.indexOf('=');
+        if (eq < 0)
+            continue;
+        if (part.slice(0, eq).trim() === SESSION_COOKIE) {
+            return decodeURIComponent(part.slice(eq + 1).trim());
+        }
+    }
+    return undefined;
+}
+function apiKeyMiddleware(req, res, next) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (config_1.config.authDisabled === true) {
+            req.apiKey = { id: 'auth-disabled', scopes: 'admin', rateLimit: 100000 };
+            return next();
+        }
+        const raw = req.headers['x-xenon-api-key'] || readSessionCookie(req);
+        if (!raw) {
+            return res.status(401).json({ error: 'missing API key' });
+        }
+        const row = yield typedi_1.Container.get(ApiKeyService_1.ApiKeyService).verify(raw);
+        if (!row) {
+            return res.status(401).json({ error: 'invalid or revoked API key' });
+        }
+        req.apiKey = { id: row.id, scopes: row.scopes, rateLimit: row.rateLimit };
+        next();
+    });
+}

package/lib/src/middleware/csrfMiddleware.js

@@ -0,0 +1,73 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.csrfMiddleware = csrfMiddleware;
+const logger_1 = __importDefault(require("../logger"));
+const config_1 = require("../config");
+// Defense-in-depth CSRF for cookie-authed dashboard callers. The session
+// cookie is already SameSite=Strict (see auth.ts), which blocks the common
+// cross-origin form-submit vector on modern browsers. This middleware adds
+// an Origin/Referer check so we're also covered against:
+//   - subdomain-takeover (SameSite considers *.example.com same-site)
+//   - reverse-proxy misconfigurations that strip SameSite enforcement
+//   - older browsers whose SameSite implementation has known gaps
+//
+// Header-authed callers (x-xenon-api-key, x-xenon-node-secret) are immune to
+// CSRF by construction: a browser will not attach a custom header without an
+// explicit CORS preflight, and the apiRouter's cors({origin:false}) already
+// refuses preflights. Those requests pass through unchanged.
+const STATE_CHANGING_METHODS = new Set(['POST', 'PUT', 'DELETE', 'PATCH']);
+// Comma-separated list of allowed origins, intended for ops running the
+// dashboard behind a reverse proxy on a different host than the Xenon API.
+// Values can be full origins (https://dash.example.com) or bare hosts
+// (dash.example.com) — either matches.
+const ALLOWED_ORIGINS = (() => {
+    const raw = process.env.XENON_ALLOWED_ORIGINS || '';
+    return new Set(raw
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean));
+})();
+function sourceHostOf(source) {
+    if (!source)
+        return null;
+    try {
+        return new URL(source).host;
+    }
+    catch (_a) {
+        return null;
+    }
+}
+function csrfMiddleware(req, res, next) {
+    if (config_1.config.authDisabled === true)
+        return next();
+    if (!STATE_CHANGING_METHODS.has(req.method))
+        return next();
+    // Header-based auth: safe by construction (see block comment above).
+    if (req.headers['x-xenon-api-key'] || req.headers['x-xenon-node-secret']) {
+        return next();
+    }
+    // Cookie-authed (or unauthenticated) state-changer. Require Origin or
+    // Referer to match the Host we're being served from.
+    const host = req.headers.host;
+    const origin = req.headers.origin;
+    const referer = req.headers.referer;
+    const source = origin || referer;
+    if (!source) {
+        logger_1.default.warn(`[csrf] Blocked ${req.method} ${req.originalUrl}: no Origin/Referer header`);
+        return res.status(403).json({ error: 'CSRF: Origin or Referer header required' });
+    }
+    const sourceHost = sourceHostOf(source);
+    if (!sourceHost) {
+        logger_1.default.warn(`[csrf] Blocked ${req.method} ${req.originalUrl}: unparseable Origin/Referer=${source}`);
+        return res.status(403).json({ error: 'CSRF: invalid Origin/Referer' });
+    }
+    if (sourceHost === host)
+        return next();
+    if (ALLOWED_ORIGINS.has(source) || ALLOWED_ORIGINS.has(sourceHost))
+        return next();
+    logger_1.default.warn(`[csrf] Blocked ${req.method} ${req.originalUrl}: Origin/Referer host=${sourceHost} != Host=${host}`);
+    return res.status(403).json({ error: 'CSRF: Origin/Referer mismatch' });
+}

package/lib/src/middleware/nodeSecretMiddleware.js

@@ -0,0 +1,38 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nodeSecretMiddleware = nodeSecretMiddleware;
+const logger_1 = __importDefault(require("../logger"));
+const config_1 = require("../config");
+const nodeSecret_1 = require("../auth/nodeSecret");
+let lastWarnAt = 0;
+function nodeSecretMiddleware(expected) {
+    return function (req, res, next) {
+        if (!expected) {
+            // Fail closed when API-key auth is also disabled — otherwise the route
+            // would be wide open. If auth is enabled, fall through to apiKeyMiddleware.
+            if (config_1.config.authDisabled === true) {
+                return res.status(503).json({
+                    error: 'hub-node secret not configured while API-key auth is disabled; set --plugin-xenon-node-secret',
+                });
+            }
+            const now = Date.now();
+            if (now - lastWarnAt > 60000) {
+                logger_1.default.warn('[nodeSecret] node-secret not configured; hub-node channel falls back to API-key auth. Set --plugin-xenon-node-secret for defense in depth.');
+                lastWarnAt = now;
+            }
+            return next();
+        }
+        const got = req.headers['x-xenon-node-secret'] || '';
+        const outcome = (0, nodeSecret_1.validateNodeSecret)(got, {
+            current: expected,
+            previous: config_1.config.nodeSecretPrevious,
+        });
+        if (outcome === 'reject') {
+            return res.status(401).json({ error: 'invalid node secret' });
+        }
+        next();
+    };
+}

package/lib/src/middleware/rateLimitMiddleware.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rateLimitMiddleware = rateLimitMiddleware;
+exports.__resetBucketsForTests = __resetBucketsForTests;
+const buckets = new Map();
+// Path patterns that should count against the 'heavy' bucket. Matches the
+// AI / visual-healing / test-ai style routes where a single request can
+// incur a multi-second LLM call.
+const HEAVY_PATH_RE = /\/(test-ai|ai|omni|visual|heal|test-locator)(\b|\/|$)/i;
+function categorize(req) {
+    const method = req.method.toUpperCase();
+    if (method === 'GET' || method === 'HEAD' || method === 'OPTIONS')
+        return 'read';
+    if (HEAVY_PATH_RE.test(req.path))
+        return 'heavy';
+    return 'control';
+}
+function capacityFor(keyLimit, cat) {
+    if (cat === 'heavy')
+        return Math.max(10, Math.floor(keyLimit / 4));
+    return keyLimit;
+}
+function refill(b) {
+    const now = Date.now();
+    const elapsed = (now - b.lastRefill) / 1000;
+    b.tokens = Math.min(b.capacity, b.tokens + elapsed * b.refillPerSec);
+    b.lastRefill = now;
+}
+function rateLimitMiddleware() {
+    return function (req, res, next) {
+        const key = req.apiKey;
+        if (!key)
+            return next();
+        const category = categorize(req);
+        const bucketKey = `${key.id}:${category}`;
+        let bucket = buckets.get(bucketKey);
+        if (!bucket) {
+            const capacity = capacityFor(key.rateLimit, category);
+            bucket = {
+                tokens: capacity,
+                lastRefill: Date.now(),
+                capacity,
+                refillPerSec: capacity / 60,
+            };
+            buckets.set(bucketKey, bucket);
+        }
+        refill(bucket);
+        // Surfacing the category + remaining tokens makes 429s debuggable from
+        // the client side without access to server logs.
+        res.set('X-RateLimit-Category', category);
+        res.set('X-RateLimit-Remaining', String(Math.floor(bucket.tokens)));
+        res.set('X-RateLimit-Capacity', String(bucket.capacity));
+        if (bucket.tokens < 1) {
+            const retryAfter = Math.ceil((1 - bucket.tokens) / bucket.refillPerSec);
+            res.set('Retry-After', String(retryAfter));
+            return res.status(429).json({
+                error: 'rate limit exceeded',
+                category,
+                retryAfter,
+            });
+        }
+        bucket.tokens -= 1;
+        next();
+    };
+}
+function __resetBucketsForTests() {
+    buckets.clear();
+}

package/lib/src/middleware/scopeGuard.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scopeGuard = scopeGuard;
+exports.mutationScopeGuard = mutationScopeGuard;
+const typedi_1 = require("typedi");
+const ApiKeyService_1 = require("../services/ApiKeyService");
+// Full guard: denies unless the caller's API key has at least one of the
+// required scopes (admin always satisfies). Use when GETs on the same
+// resource should also be gated.
+function scopeGuard(required) {
+    return function (req, res, next) {
+        const key = req.apiKey;
+        if (!key)
+            return res.status(401).json({ error: 'unauthenticated' });
+        const svc = typedi_1.Container.get(ApiKeyService_1.ApiKeyService);
+        const ok = svc.hasScope({
+            id: key.id,
+            name: '',
+            keyHash: '',
+            scopes: key.scopes,
+            rateLimit: key.rateLimit,
+            revokedAt: null,
+        }, required);
+        if (!ok)
+            return res.status(403).json({ error: 'insufficient scope' });
+        next();
+    };
+}
+// Mutation-only guard: GET/HEAD/OPTIONS pass through, POST/PUT/DELETE/PATCH
+// go through scopeGuard. Lets us mount one middleware on a whole sub-router
+// (e.g. /control) and keep all its mutations gated without touching the
+// existing GET reads. Any authenticated API key can still list/query.
+function mutationScopeGuard(required) {
+    const STATE_CHANGING = new Set(['POST', 'PUT', 'DELETE', 'PATCH']);
+    const guard = scopeGuard(required);
+    return function (req, res, next) {
+        if (!STATE_CHANGING.has(req.method))
+            return next();
+        return guard(req, res, next);
+    };
+}

package/lib/src/plugin.js

@@ -97,7 +97,7 @@ class XenonPlugin extends base_plugin_1.default {
                 udid: driver.caps && driver.caps.udid ? driver.caps.udid : undefined,
             };
             if (this.pluginArgs.hub !== undefined) {
-                yield new NodeDevices_1.default(this.pluginArgs.hub, this.pluginArgs.tlsRejectUnauthorized).unblockDevice(deviceFilter);
+                yield new NodeDevices_1.default(this.pluginArgs.hub, this.pluginArgs.tlsRejectUnauthorized, this.pluginArgs.nodeSecret).unblockDevice(deviceFilter);
             }
             else {
                 yield (0, device_service_1.unblockDeviceMatchingFilter)(deviceFilter);