@xenon-device-management/xenon 1.3.0 → 1.4.0

package/lib/src/middleware/apiKeyMiddleware.js

@@ -14,6 +14,7 @@ const typedi_1 = require("typedi");
 const ApiKeyService_1 = require("../services/ApiKeyService");
 const config_1 = require("../config");
 const SESSION_COOKIE = 'xenon_dashboard_session';
+const SESSION_TTL_MS = 24 * 60 * 60 * 1000;
 function readSessionCookie(req) {
     // cookie-parser isn't mounted globally, so parse the header inline.
     const header = req.headers.cookie;
@@ -31,11 +32,14 @@ function readSessionCookie(req) {
 }
 function apiKeyMiddleware(req, res, next) {
     return __awaiter(this, void 0, void 0, function* () {
+        var _a;
         if (config_1.config.authDisabled === true) {
             req.apiKey = { id: 'auth-disabled', scopes: 'admin', rateLimit: 100000 };
             return next();
         }
-        const raw = req.headers['x-xenon-api-key'] || readSessionCookie(req);
+        const headerKey = req.headers['x-xenon-api-key'];
+        const cookieKey = headerKey ? undefined : readSessionCookie(req);
+        const raw = headerKey || cookieKey;
         if (!raw) {
             return res.status(401).json({ error: 'missing API key' });
         }
@@ -43,7 +47,23 @@ function apiKeyMiddleware(req, res, next) {
         if (!row) {
             return res.status(401).json({ error: 'invalid or revoked API key' });
         }
-        req.apiKey = { id: row.id, scopes: row.scopes, rateLimit: row.rateLimit };
+        // Slide the dashboard session forward on every authenticated hit so active
+        // users don't get kicked out 24h after their original login.
+        if (cookieKey) {
+            const isSecure = req.secure || req.headers['x-forwarded-proto'] === 'https';
+            res.cookie(SESSION_COOKIE, raw, {
+                httpOnly: true,
+                secure: isSecure,
+                sameSite: 'strict',
+                maxAge: SESSION_TTL_MS,
+            });
+        }
+        req.apiKey = {
+            id: row.id,
+            scopes: row.scopes,
+            rateLimit: row.rateLimit,
+            teamId: (_a = row.teamId) !== null && _a !== void 0 ? _a : null,
+        };
         next();
     });
 }

package/lib/src/services/ApiKeyService.js

@@ -77,7 +77,7 @@ let ApiKeyService = class ApiKeyService {
     }
     create(params) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a;
+            var _a, _b;
             const raw = this.generateRaw();
             const row = yield prisma_1.prisma.apiKey.create({
                 data: {
@@ -85,6 +85,7 @@ let ApiKeyService = class ApiKeyService {
                     keyHash: this.hash(raw),
                     scopes: params.scopes.join(','),
                     rateLimit: (_a = params.rateLimit) !== null && _a !== void 0 ? _a : 300,
+                    teamId: (_b = params.teamId) !== null && _b !== void 0 ? _b : null,
                 },
             });
             return { id: row.id, raw };
@@ -95,6 +96,24 @@ let ApiKeyService = class ApiKeyService {
             yield prisma_1.prisma.apiKey.update({ where: { id }, data: { revokedAt: new Date() } });
         });
     }
+    list() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return prisma_1.prisma.apiKey.findMany({
+                where: { revokedAt: null },
+                select: {
+                    id: true,
+                    name: true,
+                    scopes: true,
+                    rateLimit: true,
+                    createdAt: true,
+                    lastUsedAt: true,
+                    teamId: true,
+                    role: true,
+                },
+                orderBy: { createdAt: 'desc' },
+            });
+        });
+    }
 };
 exports.ApiKeyService = ApiKeyService;
 exports.ApiKeyService = ApiKeyService = __decorate([

package/lib/src/services/ServerManager.js

@@ -97,7 +97,7 @@ let ServerManager = ServerManager_1 = class ServerManager {
             const context = typedi_1.Container.get(PluginContext_1.PluginContext);
             context.setContext(pluginArgs, cliArgs.port, nodeId, cliArgs.basePath || '');
             yield this.syncDatabaseAndAIConfig(pluginArgs);
-            yield this.initializeCoreSubsystems(pluginArgs);
+            yield this.initializeCoreSubsystems(pluginArgs, cliArgs.port);
             this.registerRoutes(expressApp, cliArgs, pluginArgs);
             yield this.bootEmulators(pluginArgs);
             this.registerDependenciesInContainer(pluginArgs, cliArgs, nodeId);
@@ -194,7 +194,7 @@ let ServerManager = ServerManager_1 = class ServerManager {
             }
         });
     }
-    initializeCoreSubsystems(pluginArgs) {
+    initializeCoreSubsystems(pluginArgs, port) {
         return __awaiter(this, void 0, void 0, function* () {
             yield (0, device_utils_1.initializeStorage)();
             const { runMigrations } = yield Promise.resolve().then(() => __importStar(require('../scripts/run-migrations')));
@@ -202,7 +202,14 @@ let ServerManager = ServerManager_1 = class ServerManager {
             yield device_store_1.DeviceStoreFactory.getStore().clearStorage();
             const { ApiKeyService } = yield Promise.resolve().then(() => __importStar(require('./ApiKeyService')));
             const { config: xenonConfig } = yield Promise.resolve().then(() => __importStar(require('../config')));
-            yield typedi_1.Container.get(ApiKeyService).bootstrapIfEmpty(xenonConfig.bootstrapKeyPath);
+            const raw = yield typedi_1.Container.get(ApiKeyService).bootstrapIfEmpty(xenonConfig.bootstrapKeyPath);
+            if (raw) {
+                logger_1.default.bootstrapKeyBanner({
+                    dashboardUrl: `http://${pluginArgs.bindHostOrIp}:${port}/xenon/`,
+                    key: raw,
+                    keyFilePath: xenonConfig.bootstrapKeyPath,
+                });
+            }
         });
     }
     registerRoutes(expressApp, cliArgs, pluginArgs) {

package/lib/src/services/SessionLifecycleService.js

@@ -81,6 +81,7 @@ const session_service_1 = require("../dashboard/services/session-service");
 const SessionStatus_1 = require("../types/SessionStatus");
 const SessionType_1 = __importDefault(require("../enums/SessionType"));
 const async_lock_1 = __importDefault(require("async-lock"));
+const base_driver_1 = require("@appium/base-driver");
 const commandsQueueGuard = new async_lock_1.default();
 // Serializes concurrent deleteSession cleanup for the same sessionId so
 // that onSessionStopped events don't fire twice if two clients race.
@@ -99,6 +100,7 @@ let SessionLifecycleService = class SessionLifecycleService {
                 this.logger.warn('Rejecting new session: hub is draining for shutdown');
                 throw new Error('Hub is shutting down; please retry against a different node');
             }
+            const authResult = yield this.authorizeSessionRequest(caps);
             const context = typedi_1.Container.get(PluginContext_1.PluginContext);
             const pluginArgs = context.pluginArgs;
             this.logger.debug(`📱 pluginArgs: ${JSON.stringify(pluginArgs)}`);
@@ -145,7 +147,7 @@ let SessionLifecycleService = class SessionLifecycleService {
             this.logger.debug(`📱 Acquiring lock: ${lockName}`);
             const device = yield commandsQueueGuard.acquire(lockName, () => __awaiter(this, void 0, void 0, function* () {
                 try {
-                    return yield (0, device_utils_1.allocateDeviceForSession)(caps, pluginArgs.deviceAvailabilityTimeoutMs, pluginArgs.deviceAvailabilityQueryIntervalMs, pluginArgs);
+                    return yield (0, device_utils_1.allocateDeviceForSession)(caps, pluginArgs.deviceAvailabilityTimeoutMs, pluginArgs.deviceAvailabilityQueryIntervalMs, pluginArgs, authResult.scoped ? authResult.callerTeamId : undefined);
                 }
                 catch (err) {
                     yield (0, pending_sessions_service_1.removePendingSession)(pendingSessionId);
@@ -171,7 +173,7 @@ let SessionLifecycleService = class SessionLifecycleService {
             this.logger.debug(`📱 Removing pending session with capability_id: ${pendingSessionId}`);
             yield (0, pending_sessions_service_1.removePendingSession)(pendingSessionId);
             if (this.isCreateSessionResponseInternal(session)) {
-                yield this.finalizeSession(session, device, caps, driver, isRemoteOrCloudSession);
+                yield this.finalizeSession(session, device, caps, driver, isRemoteOrCloudSession, authResult.apiKeyId);
             }
             else {
                 yield this.handleSessionFailure(session, device, isRemoteOrCloudSession);
@@ -179,6 +181,52 @@ let SessionLifecycleService = class SessionLifecycleService {
             return session;
         });
     }
+    // Verify a WebDriver session request against an API key supplied via the
+    // `xenon:accessKey` capability. Today this is best-effort: if no cap is
+    // supplied we log a warning and let the request through to avoid breaking
+    // pre-existing test clients. A supplied key that is invalid / revoked / has
+    // insufficient scope is rejected. Respects the global `authDisabled` flag.
+    //
+    // Returns the caller's { apiKeyId, callerTeamId } so allocation can filter
+    // devices by team. `apiKeyId` is null when auth is disabled or no key was
+    // presented (back-compat path); `callerTeamId` is null when the caller has
+    // no team (sees the shared pool only).
+    authorizeSessionRequest(caps) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const { config: xenonConfig } = yield Promise.resolve().then(() => __importStar(require('../config')));
+            // `scoped` tells the allocator whether to restrict device candidates by
+            // team. False = see everything (admin, authDisabled, back-compat path);
+            // true = filter to { null, callerTeamId } where callerTeamId may itself
+            // be null (meaning "shared pool only").
+            if (xenonConfig.authDisabled === true) {
+                return { apiKeyId: null, callerTeamId: null, scoped: false };
+            }
+            const raw = (0, XenonCapabilityManager_1.extractAccessKeyCap)(caps);
+            if (!raw) {
+                this.logger.warn('Session created without xenon:accessKey capability. Add `xenon:accessKey` to your Appium capabilities to authenticate this session.');
+                return { apiKeyId: null, callerTeamId: null, scoped: false };
+            }
+            const { ApiKeyService } = yield Promise.resolve().then(() => __importStar(require('./ApiKeyService')));
+            const svc = typedi_1.Container.get(ApiKeyService);
+            const row = yield svc.verify(raw);
+            if (!row || !svc.hasScope(row, ['sessions'])) {
+                this.logger.error('Rejecting session: xenon:accessKey is invalid, revoked, or lacks the `sessions` scope');
+                throw new base_driver_1.errors.InvalidArgumentError('xenon:accessKey is invalid, revoked, or lacks the `sessions` scope');
+            }
+            const isAdmin = svc.hasScope(row, ['admin']);
+            const callerTeamId = (_a = row.teamId) !== null && _a !== void 0 ? _a : null;
+            const requestedTeam = (0, XenonCapabilityManager_1.extractTeamCap)(caps);
+            if (requestedTeam) {
+                if (!isAdmin && requestedTeam !== callerTeamId) {
+                    this.logger.error(`Rejecting session: xenon:team=${requestedTeam} but caller key is bound to team ${callerTeamId !== null && callerTeamId !== void 0 ? callerTeamId : '(none)'}`);
+                    throw new base_driver_1.errors.InvalidArgumentError(`xenon:team '${requestedTeam}' is not allowed for this API key`);
+                }
+                return { apiKeyId: row.id, callerTeamId: requestedTeam, scoped: !isAdmin };
+            }
+            return { apiKeyId: row.id, callerTeamId, scoped: !isAdmin };
+        });
+    }
     handleLocalWDAProvisioning(device, caps) {
         return __awaiter(this, void 0, void 0, function* () {
             if (device.platform === 'ios' && device.realDevice) {
@@ -252,8 +300,8 @@ let SessionLifecycleService = class SessionLifecycleService {
             delete caps.firstMatch[0]['appium:mjpegServerPort'];
         }
     }
-    finalizeSession(session, device, caps, driver, isRemote) {
-        return __awaiter(this, void 0, void 0, function* () {
+    finalizeSession(session_1, device_1, caps_1, driver_1, isRemote_1) {
+        return __awaiter(this, arguments, void 0, function* (session, device, caps, driver, isRemote, apiKeyId = null) {
             var _a;
             const sessionId = session.value[0];
             const sessionResponse = session.value[1];
@@ -284,6 +332,7 @@ let SessionLifecycleService = class SessionLifecycleService {
             }
             const freshDevice = yield this.getFreshDevice(device);
             const sessionInstance = this.createSessionInstance(sessionId, freshDevice, sessionResponse, xenonCapabilities, driver);
+            sessionInstance.apiKeyId = apiKeyId;
             yield this.applyPostSessionLogic(sessionInstance, xenonCapabilities, freshDevice);
         });
     }

package/lib/src/services/TeamService.js

@@ -0,0 +1,100 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TeamService = void 0;
+const typedi_1 = require("typedi");
+const prisma_1 = require("../prisma");
+const logger_1 = __importDefault(require("../logger"));
+let TeamService = class TeamService {
+    constructor() {
+        this.log = logger_1.default.scope('Team');
+    }
+    list() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const rows = yield prisma_1.prisma.team.findMany({
+                orderBy: { createdAt: 'asc' },
+                include: {
+                    _count: { select: { devices: true, apiKeys: true } },
+                },
+            });
+            return rows.map((t) => ({
+                id: t.id,
+                name: t.name,
+                createdAt: t.createdAt,
+                deviceCount: t._count.devices,
+                memberCount: t._count.apiKeys,
+            }));
+        });
+    }
+    create(name) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const trimmed = name.trim();
+            if (!trimmed)
+                throw new Error('name required');
+            return prisma_1.prisma.team.create({ data: { name: trimmed } });
+        });
+    }
+    delete(id) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const [devices, apiKeys] = yield Promise.all([
+                prisma_1.prisma.device.count({ where: { teamId: id } }),
+                prisma_1.prisma.apiKey.count({ where: { teamId: id, revokedAt: null } }),
+            ]);
+            if (devices > 0 || apiKeys > 0) {
+                throw new Error(`Team still has ${devices} device(s) and ${apiKeys} active member(s). Reassign them before deleting.`);
+            }
+            // Clear the teamId on revoked keys so the FK doesn't block the delete.
+            yield prisma_1.prisma.apiKey.updateMany({ where: { teamId: id }, data: { teamId: null } });
+            yield prisma_1.prisma.team.delete({ where: { id } });
+        });
+    }
+    listMembers(teamId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return prisma_1.prisma.apiKey.findMany({
+                where: { teamId, revokedAt: null },
+                select: { id: true, name: true, role: true, scopes: true, createdAt: true },
+                orderBy: { createdAt: 'asc' },
+            });
+        });
+    }
+    addMember(teamId, apiKeyId, role) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (role !== 'admin' && role !== 'member')
+                throw new Error('invalid role');
+            yield prisma_1.prisma.apiKey.update({
+                where: { id: apiKeyId },
+                data: { teamId, role },
+            });
+        });
+    }
+    removeMember(teamId, apiKeyId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // Clear the team link rather than delete the key — scopes still apply.
+            yield prisma_1.prisma.apiKey.updateMany({
+                where: { id: apiKeyId, teamId },
+                data: { teamId: null, role: 'member' },
+            });
+        });
+    }
+};
+exports.TeamService = TeamService;
+exports.TeamService = TeamService = __decorate([
+    (0, typedi_1.Service)()
+], TeamService);

package/lib/src/sessions/XenonSession.js

@@ -22,6 +22,9 @@ class XenonSession {
         this.options = options;
         this.isStopping = false;
         this.healthState = SessionHealthState.HEALTHY;
+        // Phase 2 audit: which API key created this session (null when auth is
+        // disabled or the client didn't present xenon:accessKey).
+        this.apiKeyId = null;
         this.sessionId = options.sessionId;
         this.xenonOption = options.xenonOption;
     }

package/lib/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["../src/InternalHttpClient.ts","../src/PluginContext.ts","../src/XenonCapabilityManager.ts","../src/chromeUtils.ts","../src/config.ts","../src/device-utils.ts","../src/index.ts","../src/logger.ts","../src/plugin.ts","../src/prisma.ts","../src/app/index.ts","../src/app/swagger-docs.ts","../src/app/swagger.ts","../src/app/routers/apikeys.ts","../src/app/routers/apps.ts","../src/app/routers/auth.ts","../src/app/routers/config.ts","../src/app/routers/control.ts","../src/app/routers/dashboard.ts","../src/app/routers/grid.ts","../src/app/routers/processes.ts","../src/app/routers/reservation.ts","../src/app/routers/webhook.ts","../src/auth/nodeSecret.ts","../src/commands/handle.ts","../src/commands/index.ts","../src/dashboard/asset-manager.ts","../src/dashboard/commands.ts","../src/dashboard/event-manager.ts","../src/dashboard/services/app-service.ts","../src/dashboard/services/failure-analysis-service.ts","../src/dashboard/services/session-service.ts","../src/data-service/CircuitBreaker.ts","../src/data-service/config-service.ts","../src/data-service/db.ts","../src/data-service/device-service.ts","../src/data-service/device-store.interface.ts","../src/data-service/device-store.ts","../src/data-service/pending-sessions-service.ts","../src/data-service/pluginArgs.ts","../src/data-service/prisma-service.ts","../src/data-service/prisma-store.ts","../src/data-service/queue-service.ts","../src/data-service/web-config-service.ts","../src/device-managers/AndroidDeviceManager.ts","../src/device-managers/ChromeDriverManager.ts","../src/device-managers/HealthMonitorService.ts","../src/device-managers/IOSDeviceManager.ts","../src/device-managers/NodeDevices.ts","../src/device-managers/iOSTracker.ts","../src/device-managers/index.ts","../src/device-managers/android/AndroidStreamService.ts","../src/device-managers/android/DeviceLockManager.ts","../src/device-managers/cloud/CapabilityManager.ts","../src/device-managers/cloud/Devices.ts","../src/device-managers/ios/IOSDiscoveryService.ts","../src/device-managers/ios/IOSStreamService.ts","../src/device-managers/ios/WDAClient.ts","../src/enums/Capabilities.ts","../src/enums/Cloud.ts","../src/enums/Platform.ts","../src/enums/SessionType.ts","../src/enums/SocketEvents.ts","../src/generated/client/default.d.ts","../src/generated/client/default.js","../src/generated/client/edge.d.ts","../src/generated/client/edge.js","../src/generated/client/index-browser.js","../src/generated/client/index.d.ts","../src/generated/client/index.js","../src/generated/client/wasm.d.ts","../src/generated/client/wasm.js","../src/generated/client/runtime/edge-esm.js","../src/generated/client/runtime/edge.js","../src/generated/client/runtime/index-browser.d.ts","../src/generated/client/runtime/index-browser.js","../src/generated/client/runtime/library.d.ts","../src/generated/client/runtime/library.js","../src/generated/client/runtime/react-native.js","../src/generated/client/runtime/wasm.js","../src/helpers/UniversalMjpegProxy.ts","../src/helpers/index.ts","../src/interceptors/CommandInterceptor.ts","../src/interfaces/ICloudManager.ts","../src/interfaces/IDevice.ts","../src/interfaces/IDeviceFilterOptions.ts","../src/interfaces/IDeviceManager.ts","../src/interfaces/IOptions.ts","../src/interfaces/IPluginArgs.ts","../src/interfaces/ISessionCapability.ts","../src/logging/sessionContext.ts","../src/middleware/apiKeyMiddleware.ts","../src/middleware/csrfMiddleware.ts","../src/middleware/nodeSecretMiddleware.ts","../src/middleware/rateLimitMiddleware.ts","../src/middleware/scopeGuard.ts","../src/profiling/AndroidAppProfiler.ts","../src/proxy/wd-command-proxy.ts","../src/scripts/generate-database-migration.ts","../src/scripts/initialize-database.ts","../src/scripts/install-go-ios.ts","../src/scripts/prepare-prisma.ts","../src/scripts/run-migrations.ts","../src/services/AICommandService.ts","../src/services/AIService.ts","../src/services/ApiKeyService.ts","../src/services/CircuitBreaker.ts","../src/services/CleanupService.ts","../src/services/DeviceReconciler.ts","../src/services/EventBus.ts","../src/services/InspectorService.ts","../src/services/MetricsService.ts","../src/services/NetworkConditioningService.ts","../src/services/NotificationService.ts","../src/services/OrphanSweeper.ts","../src/services/PortAllocator.ts","../src/services/ProcessMetricsService.ts","../src/services/ProcessRegistry.ts","../src/services/RequestLogService.ts","../src/services/ResourceIsolationService.ts","../src/services/SecurityService.ts","../src/services/ServerManager.ts","../src/services/SessionHeartbeatService.ts","../src/services/SessionLifecycleService.ts","../src/services/ShutdownCoordinator.ts","../src/services/SocketClient.ts","../src/services/SocketServer.ts","../src/services/TracingService.ts","../src/services/VideoPipelineService.ts","../src/services/healing/FuzzyXmlHealingProvider.ts","../src/services/healing/HealEtalonService.ts","../src/services/healing/HealedLocatorGenerator.ts","../src/services/healing/HealingMetrics.ts","../src/services/healing/HealingOrchestrator.ts","../src/services/healing/LlmHealingProvider.ts","../src/services/healing/OcrHealingProvider.ts","../src/services/healing/ResilioTreeHealingProvider.ts","../src/services/healing/VisualAiHealingProvider.ts","../src/services/healing/types.ts","../src/services/omni-vision/OmniVisionService.ts","../src/services/omni-vision/VisionAssertionService.ts","../src/sessions/CloudSession.ts","../src/sessions/LocalSession.ts","../src/sessions/RemoteSession.ts","../src/sessions/SessionManager.ts","../src/sessions/XenonSession.ts","../src/types/CLIArgs.ts","../src/types/CloudArgs.ts","../src/types/CloudSchema.ts","../src/types/DeviceType.ts","../src/types/DeviceUpdate.ts","../src/types/IOSDevice.ts","../src/types/Platform.ts","../src/types/SessionStatus.ts","../src/types/express.d.ts","../src/types/healing.d.ts","../src/validators/CapabilityValidator.ts","../test/e2e/e2ehelper.ts","../test/e2e/plugin-harness.ts","../test/e2e/plugin.spec.ts","../test/e2e/startup-verification.spec.ts","../test/e2e/telemetry_verification.spec.ts","../test/e2e/video-recording-test.spec.js","../test/e2e/android/conf.spec.js","../test/e2e/android/conf2.spec.js","../test/e2e/android/conf3.spec.js","../test/e2e/hubnode/forward-request.spec.ts","../test/e2e/hubnode/hubnode.spec.ts","../test/e2e/ios/conf1.spec.js","../test/e2e/ios/conf2.spec.js","../test/helpers/test-container.ts","../test/integration/androidDevices.spec.ts","../test/integration/cliArgs.js","../test/integration/testHelpers.js","../test/integration/ios/01iOSSimulator.spec.ts","../test/integration/ios/02iOSDevices.spec.ts","../test/unit/AndroidDeviceManager.spec.ts","../test/unit/ApiKeyService.test.ts","../test/unit/ChromeDriverManager.spec.js","../test/unit/CleanupService.spec.ts","../test/unit/DeviceModel.spec.ts","../test/unit/FuzzyXmlHealingProvider.test.ts","../test/unit/GetAdbOriginal.js","../test/unit/HealingCascade.test.ts","../test/unit/IOSDeviceManager.spec.js","../test/unit/OrphanSweeper.test.ts","../test/unit/PortAllocator.test.ts","../test/unit/ProcessRegistry.test.ts","../test/unit/RemoteIOs.spec.js","../test/unit/ResilioTreeHealingProvider.test.ts","../test/unit/SessionHeartbeatWrite.test.ts","../test/unit/apiKeyMiddleware.test.ts","../test/unit/commands.spec.js","../test/unit/config.spec.js","../test/unit/device-service.spec.ts","../test/unit/device-utils.spec.ts","../test/unit/helpers.spec.ts","../test/unit/nodeSecretMiddleware.test.ts","../test/unit/omni-vision.spec.ts","../test/unit/plugin.spec.ts","../test/unit/prisma.spec.ts","../test/unit/rateLimitMiddleware.test.ts","../test/unit/fixtures/device.config.js","../test/unit/fixtures/devices.js"],"version":"5.9.3"}
+{"root":["../src/InternalHttpClient.ts","../src/PluginContext.ts","../src/XenonCapabilityManager.ts","../src/chromeUtils.ts","../src/config.ts","../src/device-utils.ts","../src/index.ts","../src/logger.ts","../src/plugin.ts","../src/prisma.ts","../src/app/index.ts","../src/app/swagger-docs.ts","../src/app/swagger.ts","../src/app/routers/apikeys.ts","../src/app/routers/apps.ts","../src/app/routers/auth.ts","../src/app/routers/config.ts","../src/app/routers/control.ts","../src/app/routers/dashboard.ts","../src/app/routers/grid.ts","../src/app/routers/processes.ts","../src/app/routers/reservation.ts","../src/app/routers/teams.ts","../src/app/routers/webhook.ts","../src/auth/nodeSecret.ts","../src/commands/handle.ts","../src/commands/index.ts","../src/dashboard/asset-manager.ts","../src/dashboard/commands.ts","../src/dashboard/event-manager.ts","../src/dashboard/services/app-service.ts","../src/dashboard/services/failure-analysis-service.ts","../src/dashboard/services/session-service.ts","../src/data-service/CircuitBreaker.ts","../src/data-service/config-service.ts","../src/data-service/db.ts","../src/data-service/device-service.ts","../src/data-service/device-store.interface.ts","../src/data-service/device-store.ts","../src/data-service/pending-sessions-service.ts","../src/data-service/pluginArgs.ts","../src/data-service/prisma-service.ts","../src/data-service/prisma-store.ts","../src/data-service/queue-service.ts","../src/data-service/web-config-service.ts","../src/device-managers/AndroidDeviceManager.ts","../src/device-managers/ChromeDriverManager.ts","../src/device-managers/HealthMonitorService.ts","../src/device-managers/IOSDeviceManager.ts","../src/device-managers/NodeDevices.ts","../src/device-managers/iOSTracker.ts","../src/device-managers/index.ts","../src/device-managers/android/AndroidStreamService.ts","../src/device-managers/android/DeviceLockManager.ts","../src/device-managers/cloud/CapabilityManager.ts","../src/device-managers/cloud/Devices.ts","../src/device-managers/ios/IOSDiscoveryService.ts","../src/device-managers/ios/IOSStreamService.ts","../src/device-managers/ios/WDAClient.ts","../src/enums/Capabilities.ts","../src/enums/Cloud.ts","../src/enums/Platform.ts","../src/enums/SessionType.ts","../src/enums/SocketEvents.ts","../src/generated/client/default.d.ts","../src/generated/client/default.js","../src/generated/client/edge.d.ts","../src/generated/client/edge.js","../src/generated/client/index-browser.js","../src/generated/client/index.d.ts","../src/generated/client/index.js","../src/generated/client/wasm.d.ts","../src/generated/client/wasm.js","../src/generated/client/runtime/edge-esm.js","../src/generated/client/runtime/edge.js","../src/generated/client/runtime/index-browser.d.ts","../src/generated/client/runtime/index-browser.js","../src/generated/client/runtime/library.d.ts","../src/generated/client/runtime/library.js","../src/generated/client/runtime/react-native.js","../src/generated/client/runtime/wasm.js","../src/helpers/UniversalMjpegProxy.ts","../src/helpers/index.ts","../src/interceptors/CommandInterceptor.ts","../src/interfaces/ICloudManager.ts","../src/interfaces/IDevice.ts","../src/interfaces/IDeviceFilterOptions.ts","../src/interfaces/IDeviceManager.ts","../src/interfaces/IOptions.ts","../src/interfaces/IPluginArgs.ts","../src/interfaces/ISessionCapability.ts","../src/logging/sessionContext.ts","../src/middleware/apiKeyMiddleware.ts","../src/middleware/csrfMiddleware.ts","../src/middleware/nodeSecretMiddleware.ts","../src/middleware/rateLimitMiddleware.ts","../src/middleware/scopeGuard.ts","../src/profiling/AndroidAppProfiler.ts","../src/proxy/wd-command-proxy.ts","../src/scripts/generate-database-migration.ts","../src/scripts/initialize-database.ts","../src/scripts/install-go-ios.ts","../src/scripts/prepare-prisma.ts","../src/scripts/run-migrations.ts","../src/services/AICommandService.ts","../src/services/AIService.ts","../src/services/ApiKeyService.ts","../src/services/CircuitBreaker.ts","../src/services/CleanupService.ts","../src/services/DeviceReconciler.ts","../src/services/EventBus.ts","../src/services/InspectorService.ts","../src/services/MetricsService.ts","../src/services/NetworkConditioningService.ts","../src/services/NotificationService.ts","../src/services/OrphanSweeper.ts","../src/services/PortAllocator.ts","../src/services/ProcessMetricsService.ts","../src/services/ProcessRegistry.ts","../src/services/RequestLogService.ts","../src/services/ResourceIsolationService.ts","../src/services/SecurityService.ts","../src/services/ServerManager.ts","../src/services/SessionHeartbeatService.ts","../src/services/SessionLifecycleService.ts","../src/services/ShutdownCoordinator.ts","../src/services/SocketClient.ts","../src/services/SocketServer.ts","../src/services/TeamService.ts","../src/services/TracingService.ts","../src/services/VideoPipelineService.ts","../src/services/healing/FuzzyXmlHealingProvider.ts","../src/services/healing/HealEtalonService.ts","../src/services/healing/HealedLocatorGenerator.ts","../src/services/healing/HealingMetrics.ts","../src/services/healing/HealingOrchestrator.ts","../src/services/healing/LlmHealingProvider.ts","../src/services/healing/OcrHealingProvider.ts","../src/services/healing/ResilioTreeHealingProvider.ts","../src/services/healing/VisualAiHealingProvider.ts","../src/services/healing/types.ts","../src/services/omni-vision/OmniVisionService.ts","../src/services/omni-vision/VisionAssertionService.ts","../src/sessions/CloudSession.ts","../src/sessions/LocalSession.ts","../src/sessions/RemoteSession.ts","../src/sessions/SessionManager.ts","../src/sessions/XenonSession.ts","../src/types/CLIArgs.ts","../src/types/CloudArgs.ts","../src/types/CloudSchema.ts","../src/types/DeviceType.ts","../src/types/DeviceUpdate.ts","../src/types/IOSDevice.ts","../src/types/Platform.ts","../src/types/SessionStatus.ts","../src/types/express.d.ts","../src/types/healing.d.ts","../src/validators/CapabilityValidator.ts","../test/e2e/e2ehelper.ts","../test/e2e/plugin-harness.ts","../test/e2e/plugin.spec.ts","../test/e2e/startup-verification.spec.ts","../test/e2e/telemetry_verification.spec.ts","../test/e2e/video-recording-test.spec.js","../test/e2e/android/conf.spec.js","../test/e2e/android/conf2.spec.js","../test/e2e/android/conf3.spec.js","../test/e2e/hubnode/forward-request.spec.ts","../test/e2e/hubnode/hubnode.spec.ts","../test/e2e/ios/conf1.spec.js","../test/e2e/ios/conf2.spec.js","../test/helpers/test-container.ts","../test/integration/androidDevices.spec.ts","../test/integration/cliArgs.js","../test/integration/testHelpers.js","../test/integration/ios/01iOSSimulator.spec.ts","../test/integration/ios/02iOSDevices.spec.ts","../test/unit/AndroidDeviceManager.spec.ts","../test/unit/ApiKeyService.test.ts","../test/unit/ChromeDriverManager.spec.js","../test/unit/CleanupService.spec.ts","../test/unit/DeviceModel.spec.ts","../test/unit/FuzzyXmlHealingProvider.test.ts","../test/unit/GetAdbOriginal.js","../test/unit/HealingCascade.test.ts","../test/unit/IOSDeviceManager.spec.js","../test/unit/OrphanSweeper.test.ts","../test/unit/PortAllocator.test.ts","../test/unit/ProcessRegistry.test.ts","../test/unit/RemoteIOs.spec.js","../test/unit/ResilioTreeHealingProvider.test.ts","../test/unit/SessionHeartbeatWrite.test.ts","../test/unit/apiKeyMiddleware.test.ts","../test/unit/commands.spec.js","../test/unit/config.spec.js","../test/unit/device-service.spec.ts","../test/unit/device-utils.spec.ts","../test/unit/helpers.spec.ts","../test/unit/nodeSecretMiddleware.test.ts","../test/unit/omni-vision.spec.ts","../test/unit/plugin.spec.ts","../test/unit/prisma.spec.ts","../test/unit/rateLimitMiddleware.test.ts","../test/unit/fixtures/device.config.js","../test/unit/fixtures/devices.js"],"version":"5.9.3"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xenon-device-management/xenon",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Xenon - Intelligent Mobile Infrastructure. A self-healing device orchestration platform for Appium.",
   "main": "./lib/src/index.js",
   "exports": {

package/prisma/migrations/20260424033547_add_teams/migration.sql

@@ -0,0 +1,101 @@
+-- AlterTable
+ALTER TABLE "Session" ADD COLUMN "api_key_id" TEXT;
+
+-- CreateTable
+CREATE TABLE "Team" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_ApiKey" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "keyHash" TEXT NOT NULL,
+    "scopes" TEXT NOT NULL,
+    "rateLimit" INTEGER NOT NULL DEFAULT 300,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "revokedAt" DATETIME,
+    "lastUsedAt" DATETIME,
+    "teamId" TEXT,
+    "role" TEXT NOT NULL DEFAULT 'member',
+    CONSTRAINT "ApiKey_teamId_fkey" FOREIGN KEY ("teamId") REFERENCES "Team" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_ApiKey" ("createdAt", "id", "keyHash", "lastUsedAt", "name", "rateLimit", "revokedAt", "scopes") SELECT "createdAt", "id", "keyHash", "lastUsedAt", "name", "rateLimit", "revokedAt", "scopes" FROM "ApiKey";
+DROP TABLE "ApiKey";
+ALTER TABLE "new_ApiKey" RENAME TO "ApiKey";
+CREATE UNIQUE INDEX "ApiKey_keyHash_key" ON "ApiKey"("keyHash");
+CREATE INDEX "ApiKey_teamId_idx" ON "ApiKey"("teamId");
+CREATE TABLE "new_Device" (
+    "udid" TEXT NOT NULL,
+    "host" TEXT NOT NULL,
+    "systemPort" INTEGER,
+    "proxyPort" INTEGER,
+    "proxyHost" TEXT,
+    "wdaLocalPort" INTEGER,
+    "name" TEXT DEFAULT 'unknown',
+    "state" TEXT DEFAULT 'available',
+    "sdk" TEXT DEFAULT 'unknown',
+    "platform" TEXT DEFAULT 'unknown',
+    "deviceType" TEXT DEFAULT 'real',
+    "busy" BOOLEAN DEFAULT false,
+    "userBlocked" BOOLEAN DEFAULT false,
+    "realDevice" BOOLEAN DEFAULT true,
+    "session_id" TEXT,
+    "offline" BOOLEAN DEFAULT false,
+    "mjpegServerPort" INTEGER,
+    "lastCmdExecutedAt" REAL,
+    "totalUtilizationTimeMilliSec" REAL NOT NULL DEFAULT 0,
+    "sessionStartTime" REAL NOT NULL DEFAULT 0,
+    "newCommandTimeout" INTEGER,
+    "cloud" TEXT,
+    "derivedDataPath" TEXT,
+    "chromeDriverPath" TEXT,
+    "capability" TEXT,
+    "adbRemoteHost" TEXT,
+    "adbPort" INTEGER,
+    "nodeId" TEXT,
+    "screenWidth" TEXT,
+    "screenHeight" TEXT,
+    "dashboard_link" TEXT,
+    "total_session_count" INTEGER DEFAULT 0,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    "healthCheckError" TEXT,
+    "healthStatus" TEXT DEFAULT 'Healthy',
+    "lastHealthCheckAt" REAL,
+    "batteryLevel" INTEGER,
+    "reservationReason" TEXT,
+    "reservedBy" TEXT,
+    "reservedUntil" REAL,
+    "storageFree" TEXT,
+    "tags" TEXT,
+    "thermalStatus" TEXT,
+    "sessionProgress" TEXT DEFAULT '',
+    "totalHealedCount" INTEGER DEFAULT 0,
+    "ip" TEXT DEFAULT '',
+    "cpuArchitecture" TEXT,
+    "owning_session_id" TEXT,
+    "locked_at" REAL,
+    "teamId" TEXT,
+
+    PRIMARY KEY ("udid", "host"),
+    CONSTRAINT "Device_teamId_fkey" FOREIGN KEY ("teamId") REFERENCES "Team" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_Device" ("adbPort", "adbRemoteHost", "batteryLevel", "busy", "capability", "chromeDriverPath", "cloud", "cpuArchitecture", "createdAt", "dashboard_link", "derivedDataPath", "deviceType", "healthCheckError", "healthStatus", "host", "ip", "lastCmdExecutedAt", "lastHealthCheckAt", "locked_at", "mjpegServerPort", "name", "newCommandTimeout", "nodeId", "offline", "owning_session_id", "platform", "proxyHost", "proxyPort", "realDevice", "reservationReason", "reservedBy", "reservedUntil", "screenHeight", "screenWidth", "sdk", "sessionProgress", "sessionStartTime", "session_id", "state", "storageFree", "systemPort", "tags", "thermalStatus", "totalHealedCount", "totalUtilizationTimeMilliSec", "total_session_count", "udid", "updatedAt", "userBlocked", "wdaLocalPort") SELECT "adbPort", "adbRemoteHost", "batteryLevel", "busy", "capability", "chromeDriverPath", "cloud", "cpuArchitecture", "createdAt", "dashboard_link", "derivedDataPath", "deviceType", "healthCheckError", "healthStatus", "host", "ip", "lastCmdExecutedAt", "lastHealthCheckAt", "locked_at", "mjpegServerPort", "name", "newCommandTimeout", "nodeId", "offline", "owning_session_id", "platform", "proxyHost", "proxyPort", "realDevice", "reservationReason", "reservedBy", "reservedUntil", "screenHeight", "screenWidth", "sdk", "sessionProgress", "sessionStartTime", "session_id", "state", "storageFree", "systemPort", "tags", "thermalStatus", "totalHealedCount", "totalUtilizationTimeMilliSec", "total_session_count", "udid", "updatedAt", "userBlocked", "wdaLocalPort" FROM "Device";
+DROP TABLE "Device";
+ALTER TABLE "new_Device" RENAME TO "Device";
+CREATE INDEX "Device_owning_session_id_idx" ON "Device"("owning_session_id");
+CREATE INDEX "Device_teamId_idx" ON "Device"("teamId");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Team_name_key" ON "Team"("name");
+
+-- CreateIndex
+CREATE INDEX "Session_api_key_id_idx" ON "Session"("api_key_id");
+

package/prisma/schema.prisma

@@ -47,6 +47,7 @@ model Session {
   last_heartbeat_at       DateTime?
   heartbeat_pid           Int?
   heartbeat_host          String?
+  api_key_id              String?
   Log                     Log[]
   Profiling               Profiling[]
   build                   Build?       @relation(fields: [build_id], references: [id])
@@ -56,6 +57,7 @@ model Session {
   @@index([build_id])
   @@index([device_udid])
   @@index([device_platform, status])
+  @@index([api_key_id])
 }
 
 model SessionLog {
@@ -175,9 +177,12 @@ model Device {
   cpuArchitecture              String?
   owningSessionId              String?  @map("owning_session_id")
   lockedAt                     Float?   @map("locked_at")
+  teamId                       String?
+  team                         Team?    @relation(fields: [teamId], references: [id])
 
   @@id([udid, host])
   @@index([owningSessionId])
+  @@index([teamId])
 }
 
 model PendingSession {
@@ -245,4 +250,17 @@ model ApiKey {
   createdAt   DateTime  @default(now())
   revokedAt   DateTime?
   lastUsedAt  DateTime?
+  teamId      String?
+  role        String    @default("member")
+  team        Team?     @relation(fields: [teamId], references: [id])
+
+  @@index([teamId])
+}
+
+model Team {
+  id        String   @id @default(uuid())
+  name      String   @unique
+  createdAt DateTime @default(now())
+  devices   Device[]
+  apiKeys   ApiKey[]
 }

package/lib/public/assets/button-hZFV1ypT.js

@@ -1,26 +0,0 @@
-import{c as t,r as c,j as i}from"./index-BaTiUCeH.js";import{c as r,a as u}from"./badge-BNR9umdu.js";/**
- * @license lucide-react v0.555.0 - ISC
- *
- * This source code is licensed under the ISC license.
- * See the LICENSE file in the root directory of this source tree.
- */const d=[["path",{d:"M12 6.528V3a1 1 0 0 1 1-1h0",key:"11qiee"}],["path",{d:"M18.237 21A15 15 0 0 0 22 11a6 6 0 0 0-10-4.472A6 6 0 0 0 2 11a15.1 15.1 0 0 0 3.763 10 3 3 0 0 0 3.648.648 5.5 5.5 0 0 1 5.178 0A3 3 0 0 0 18.237 21",key:"110c12"}]],f=t("apple",d);/**
- * @license lucide-react v0.555.0 - ISC
- *
- * This source code is licensed under the ISC license.
- * See the LICENSE file in the root directory of this source tree.
- */const p=[["path",{d:"M20 6 9 17l-5-5",key:"1gmf2c"}]],x=t("check",p);/**
- * @license lucide-react v0.555.0 - ISC
- *
- * This source code is licensed under the ISC license.
- * See the LICENSE file in the root directory of this source tree.
- */const l=[["rect",{width:"14",height:"14",x:"8",y:"8",rx:"2",ry:"2",key:"17jyea"}],["path",{d:"M4 16c-1.1 0-2-.9-2-2V4c0-1.1.9-2 2-2h10c1.1 0 2 .9 2 2",key:"zix9uf"}]],_=t("copy",l);/**
- * @license lucide-react v0.555.0 - ISC
- *
- * This source code is licensed under the ISC license.
- * See the LICENSE file in the root directory of this source tree.
- */const h=[["path",{d:"M12 19h8",key:"baeox8"}],["path",{d:"m4 17 6-6-6-6",key:"1yngyt"}]],g=t("terminal",h);/**
- * @license lucide-react v0.555.0 - ISC
- *
- * This source code is licensed under the ISC license.
- * See the LICENSE file in the root directory of this source tree.
- */const y=[["path",{d:"M12 3v12",key:"1x0j5s"}],["path",{d:"m17 8-5-5-5 5",key:"7q97r8"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}]],M=t("upload",y),b=u("button-base",{variants:{variant:{default:"button-variant-default",outline:"button-variant-outline",ghost:"button-variant-ghost",link:"button-variant-link",destructive:"button-variant-destructive"},size:{default:"button-default",sm:"button-sm",lg:"button-lg",icon:"button-icon"}},defaultVariants:{variant:"default",size:"default"}}),k=c.forwardRef(({className:a,variant:o,size:n,...e},s)=>i.jsx("button",{className:r(b({variant:o,size:n,className:a})),ref:s,...e}));k.displayName="Button";export{f as A,k as B,x as C,g as T,M as U,_ as a};

package/lib/public/assets/settings-BTHP7fj3.js

@@ -1 +0,0 @@
-import{r as i,j as e,g as j,l as S,B as C,i as y,T as N}from"./index-BaTiUCeH.js";import{X as c}from"./index-C1DBaoSh.js";import{A as b}from"./Layouts-D6IPfwoe.js";import{C as k}from"./clock-DrpxSvCL.js";import{C as I}from"./calendar-fehdBtun.js";import{M}from"./mouse-pointer-2-CXdnjXIg.js";const B=()=>{const[a,t]=i.useState({healthCheckIntervalMs:3e4,healthCheckSchedule:"",enableSelfHealing:!0}),[g,d]=i.useState(!0),[m,h]=i.useState(!1),[l,n]=i.useState(null);i.useEffect(()=>{o()},[]);const o=async()=>{d(!0);try{const s=await c.getGlobalConfig();t({healthCheckIntervalMs:s.healthCheckIntervalMs||3e4,healthCheckSchedule:s.healthCheckSchedule||"",enableSelfHealing:s.enableSelfHealing!==void 0?s.enableSelfHealing:!0})}catch(s){console.error("Failed to load settings",s),n({type:"error",message:"Failed to access infrastructure parameters."})}finally{d(!1)}},u=async(s=a)=>{h(!0),n(null);try{await c.updateGlobalConfig(s),n({type:"success",message:"Infrastructure parameters synchronized across fleet."}),setTimeout(()=>n(null),5e3)}catch(r){console.error("Failed to save settings",r),n({type:"error",message:"Synchronization failed. Check network integrity."})}finally{h(!1)}},v=async()=>{const s={healthCheckIntervalMs:3e4,healthCheckSchedule:"",enableSelfHealing:!0};t(s),await u(s);try{await c.resetMetrics()}catch(r){console.error("Failed to reset metrics",r)}},p=[{label:"Battery Saver (2 AM)",value:"0 2 * * *"},{label:"Standard (Hourly)",value:"0 * * * *"},{label:"Operational Coverage (30m)",value:"*/30 * * * *"},{label:"High Performance (10m)",value:"*/10 * * * *"},{label:"Disable Schedule",value:""}],f=s=>s?s.split(" ").filter(x=>x!=="").length!==5?"Invalid Cron format (needs 5 parts)":s==="0 2 * * *"?"Quiet hours: Daily at 2:00 AM":s==="0 * * * *"?"Standard rotation: Start of every hour":s==="*/30 * * * *"?"Balanced: Every 30 minutes":s==="*/10 * * * *"?"Intensive: Every 10 minutes":`Custom orchestration: ${s}`:"Using Idle Health Frequency (Continuous/Passive mode).";return g?e.jsxs("div",{className:"settings-loading",children:[e.jsx(j,{className:"animate-spin",size:32}),e.jsx("span",{children:"Synchronizing Global Infrastructure..."})]}):e.jsxs("div",{className:"settings-container mesh-gradient-infra",children:[e.jsx("div",{className:"scanline",style:{position:"absolute",inset:0,pointerEvents:"none",opacity:.05,zIndex:1001}}),e.jsxs("div",{className:"settings-header",children:[e.jsxs("div",{className:"settings-title-group",children:[e.jsx(S,{className:"settings-icon infra-icon",size:28}),e.jsx("h2",{children:"Infrastructure Control"})]}),e.jsx("p",{className:"settings-subtitle",children:"Manage core farm parameters, heartbeat frequency, and maintenance orchestrations across the global registry."})]}),e.jsxs("div",{className:"settings-content",children:[e.jsxs("div",{className:"settings-grid",children:[e.jsxs("div",{className:"setting-card stagger-1",children:[e.jsxs("div",{className:"setting-card-header",children:[e.jsx(k,{size:16}),e.jsx("h4",{children:"Idle Health Frequency"})]}),e.jsx("p",{className:"section-description-dense",children:"Frequency of passive health pings when the system is in idle state."}),e.jsx("div",{className:"setting-field",children:e.jsxs("div",{className:"input-group",children:[e.jsx("input",{type:"number",value:a.healthCheckIntervalMs,onChange:s=>t({...a,healthCheckIntervalMs:parseInt(s.target.value)}),min:5e3,step:5e3}),e.jsx("span",{className:"code-font",children:"MS"})]})}),e.jsx("div",{className:"setting-hint-clean",children:"Minimum safe value: 5000ms. Note: This frequency is overridden when a schedule is active."})]}),e.jsxs("div",{className:"setting-card stagger-2",children:[e.jsxs("div",{className:"setting-card-header",children:[e.jsx(I,{size:16}),e.jsx("h4",{children:"Deep Diagnostic Schedule"})]}),e.jsx("p",{className:"section-description-dense",children:"Execute intensive reliability bursts (WDA restarts, Cache purges) using standardized Cron syntax."}),e.jsx("div",{className:"setting-field",children:e.jsx("div",{className:"setting-input-wrapper",children:e.jsx("input",{type:"text",placeholder:"e.g. 0 * * * * (At internal min 0)",value:a.healthCheckSchedule,onChange:s=>t({...a,healthCheckSchedule:s.target.value})})})}),e.jsxs("div",{className:"cron-preview",children:[e.jsx("span",{className:"preview-label",children:"Active Logic:"}),e.jsx("span",{className:"preview-value",children:f(a.healthCheckSchedule)})]}),e.jsxs("div",{className:"cron-presets",children:[e.jsxs("div",{className:"presets-label",children:[e.jsx(M,{size:12}),e.jsx("span",{children:"Intent-Based Presets:"})]}),e.jsx("div",{className:"presets-grid",children:p.map(s=>e.jsx("button",{className:`preset-chip ${a.healthCheckSchedule===s.value?"active":""}`,onClick:()=>t({...a,healthCheckSchedule:s.value}),children:s.label},s.label))})]})]}),e.jsxs("div",{className:"setting-card stagger-3",children:[e.jsxs("div",{className:"setting-card-header",children:[e.jsx(C,{size:16}),e.jsx("h4",{children:"AI Self-Healing"})]}),e.jsx("p",{className:"section-description-dense",children:"Automatically intercept and recover from failing locators using Xenon's 5-tier strategy."}),e.jsxs("div",{className:"toggle-group",children:[e.jsxs("label",{className:"switch",children:[e.jsx("input",{type:"checkbox",checked:a.enableSelfHealing,onChange:s=>t({...a,enableSelfHealing:s.target.checked})}),e.jsx("span",{className:"slider round"})]}),e.jsx("span",{className:"toggle-label",children:a.enableSelfHealing?"ENABLED":"DISABLED"})]}),e.jsx("div",{className:"setting-hint-clean",children:"When enabled, Xenon will attempt to find elements via Fuzzy XML, OCR, Visual AI, and LLM before failing a test."})]})]}),l&&e.jsxs("div",{className:`status-banner ${l.type}`,children:[l.type==="success"?e.jsx(y,{size:18}):e.jsx(N,{size:18}),e.jsx("span",{children:l.message})]})]}),e.jsx(b,{onSave:u,onDiscard:o,onRestoreDefaults:v,isSaving:m,saveLabel:"Save Configuration"})]})};export{B as Settings};