@xenon-device-management/xenon 2.1.0 → 2.3.0

package/lib/public/assets/{upload-CIDH9wkj.js → upload-1ZYEVvgD.js}

@@ -1,4 +1,4 @@
-import{c as a}from"./index-BuIIcmGp.js";/**
+import{c as a}from"./index-2XPPbPwy.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/lib/public/assets/{use-password-reset-mode-DYGuSNwl.js → use-password-reset-mode-Dx0ghiiQ.js}

@@ -1 +1 @@
-import{r as t,h as u}from"./index-BuIIcmGp.js";function n(){const[s,r]=t.useState(null);return t.useEffect(()=>{let e=!0;return u().then(o=>e&&r(o.passwordReset)),()=>{e=!1}},[]),s}export{n as u};
+import{r as t,h as u}from"./index-2XPPbPwy.js";function n(){const[s,r]=t.useState(null);return t.useEffect(()=>{let e=!0;return u().then(o=>e&&r(o.passwordReset)),()=>{e=!1}},[]),s}export{n as u};

package/lib/public/assets/{users-7yviqflc.js → users-C5CS5Qez.js}

@@ -1,4 +1,4 @@
-import{c as w,b as k,r as a,j as e,$ as C}from"./index-BuIIcmGp.js";import{l as M,d as R,c as I,a as A,u as D}from"./users-BUE7MoTq.js";import{f as U}from"./time-B8FIgwPE.js";import{P}from"./page-header-CKWFOjOI.js";import{B as y}from"./button-Dd-IhMC1.js";import{I as N}from"./input-Bq9aY-We.js";import{S as g}from"./select-DIZWIoVR.js";import{P as B}from"./plus-BpFKVdC8.js";import{T as L}from"./trash-2-BV88cV3Z.js";import"./utils-CDN07tui.js";/**
+import{c as w,b as k,r as a,j as e,$ as C}from"./index-2XPPbPwy.js";import{l as M,d as R,c as I,a as A,u as D}from"./users-PbGMd5sD.js";import{f as U}from"./time-B8FIgwPE.js";import{P}from"./page-header-DqGlDufy.js";import{B as y}from"./button-D-X4wjO8.js";import{I as N}from"./input-C-1b8J7i.js";import{S as g}from"./select-k5ogtEWW.js";import{P as B}from"./plus-Ct6aQTGM.js";import{T as L}from"./trash-2-D61PoUrZ.js";import"./utils-CDN07tui.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/lib/public/assets/{users-BUE7MoTq.js → users-PbGMd5sD.js}

@@ -1 +1 @@
-import{o as s}from"./index-BuIIcmGp.js";const o="/xenon/api/users";async function c(){const t=await fetch(`${o}/`,{credentials:"include"});if(!t.ok)throw new Error(`listUsers failed (${t.status})`);return t.json()}async function i(t){const e=await fetch(`${o}/`,{method:"POST",credentials:"include",headers:{"Content-Type":"application/json",...s},body:JSON.stringify(t)});if(!e.ok){const n=await e.json().catch(()=>({}));throw new Error(n.error||`createUser failed (${e.status})`)}return e.json()}async function d(t,e){const n=await fetch(`${o}/${encodeURIComponent(t)}`,{method:"PATCH",credentials:"include",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)});if(!n.ok){const r=await n.json().catch(()=>({}));throw new Error(r.error||`updateUser failed (${n.status})`)}return n.json()}async function l(t){const e=await fetch(`${o}/${encodeURIComponent(t)}`,{method:"DELETE",credentials:"include"});if(!e.ok&&e.status!==204){const n=await e.json().catch(()=>({}));throw new Error(n.error||`deleteUser failed (${e.status})`)}}async function u(t){const e=await fetch(`${o}/${encodeURIComponent(t)}/reset-link`,{method:"POST",credentials:"include"}),n=await e.json().catch(()=>({}));if(!e.ok)throw new Error(n.error||`Reset link failed (${e.status})`);return n}export{i as a,u as c,l as d,c as l,d as u};
+import{o as s}from"./index-2XPPbPwy.js";const o="/xenon/api/users";async function c(){const t=await fetch(`${o}/`,{credentials:"include"});if(!t.ok)throw new Error(`listUsers failed (${t.status})`);return t.json()}async function i(t){const e=await fetch(`${o}/`,{method:"POST",credentials:"include",headers:{"Content-Type":"application/json",...s},body:JSON.stringify(t)});if(!e.ok){const n=await e.json().catch(()=>({}));throw new Error(n.error||`createUser failed (${e.status})`)}return e.json()}async function d(t,e){const n=await fetch(`${o}/${encodeURIComponent(t)}`,{method:"PATCH",credentials:"include",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)});if(!n.ok){const r=await n.json().catch(()=>({}));throw new Error(r.error||`updateUser failed (${n.status})`)}return n.json()}async function l(t){const e=await fetch(`${o}/${encodeURIComponent(t)}`,{method:"DELETE",credentials:"include"});if(!e.ok&&e.status!==204){const n=await e.json().catch(()=>({}));throw new Error(n.error||`deleteUser failed (${e.status})`)}}async function u(t){const e=await fetch(`${o}/${encodeURIComponent(t)}/reset-link`,{method:"POST",credentials:"include"}),n=await e.json().catch(()=>({}));if(!e.ok)throw new Error(n.error||`Reset link failed (${e.status})`);return n}export{i as a,u as c,l as d,c as l,d as u};

package/lib/public/assets/{video-off-BTRxtlGo.js → video-off-_XusI0HK.js}

@@ -1,4 +1,4 @@
-import{c as o}from"./index-BuIIcmGp.js";/**
+import{c as o}from"./index-2XPPbPwy.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/lib/public/assets/{webhook-settings-DMKD9Pgm.js → webhook-settings-Bi_HHQlQ.js}

@@ -1 +1 @@
-import{t as P,r,X as c,j as e,J as u,A as b,C as U,K as D}from"./index-BuIIcmGp.js";/* empty css                 */import{F as S}from"./FieldGroup-CCdFlZm6.js";import{P as O}from"./page-header-CKWFOjOI.js";import{T as V}from"./trash-2-BV88cV3Z.js";import{P as x}from"./plus-BpFKVdC8.js";import{C as B}from"./circle-x-pdVkomLa.js";import{C as H}from"./circle-check-Ckn00yMB.js";import{Z as I}from"./zap-CWE94qcK.js";import{A as J}from"./activity-K-hdylwq.js";const C=[{id:"device_offline",label:"Device offline",icon:U,tone:"red"},{id:"device_new",label:"New device",icon:x,tone:"green"},{id:"session_failed",label:"Session failed",icon:B,tone:"amber"},{id:"selector_health_digest",label:"Selector health digest",icon:D,tone:"green"}],X=["udid","host","name","sessionId","failureReason","eventType","platform"],ae=()=>{const{toast:o}=P(),[g,T]=r.useState([]),[A,w]=r.useState(!0),[l,j]=r.useState(""),[d,k]=r.useState(["device_offline","session_failed"]),[h,f]=r.useState(!1),[v,N]=r.useState(!1),[n,_]=r.useState(!1),[y,m]=r.useState("");r.useEffect(()=>{p()},[]);const p=async()=>{w(!0);try{const s=await c.getWebhookConfigs();T(s||[])}catch(s){console.error("Failed to load webhook configs",s),o("Failed to load webhooks.","error")}finally{w(!1)}},z=async()=>{if(!l.trim()){o("Webhook URL is required.","error");return}if(d.length===0){o("Select at least one trigger event.","error");return}f(!0);try{await c.addWebhookConfig(l.trim(),d,"slack",y||void 0),j(""),m(""),_(!1),k(["device_offline","session_failed"]),await p(),o("Webhook saved.","success")}catch(s){console.error("Failed to add webhook",s),o(`Failed to add webhook: ${s.message||"unknown error"}`,"error")}finally{f(!1)}},E=async(s,t)=>{if(window.confirm(`Remove webhook for "${t}"?`))try{await c.deleteWebhookConfig(s),await p(),o("Webhook removed.","success")}catch(a){console.error("Failed to delete webhook",a),o(`Failed to delete: ${a.message||"unknown error"}`,"error")}},L=async()=>{if(l.trim()){N(!0);try{await c.testWebhook(l.trim(),"slack"),o("Test payload delivered.","success")}catch(s){o(`Test failed: ${s.message||"check the URL"}`,"error")}finally{N(!1)}}},$=s=>{k(t=>t.includes(s)?t.filter(a=>a!==s):[...t,s])},R=s=>{m(t=>t+`{{${s}}} `)};return e.jsxs("div",{className:"settings-container",children:[e.jsx(O,{icon:u,title:"Notifications",subtitle:"Configure Slack or generic webhooks to receive alerts for critical infrastructure events."}),e.jsxs("div",{className:"settings-content",children:[A?e.jsxs("div",{className:"settings-loading",style:{height:200},children:[e.jsx(b,{className:"animate-spin",size:28}),e.jsx("span",{children:"Loading webhooks…"})]}):g.length===0?e.jsxs("div",{className:"empty-state",children:[e.jsx("div",{className:"empty-state__icon",children:e.jsx(u,{size:28})}),e.jsx("h3",{className:"empty-state__title",children:"No webhooks configured"}),e.jsx("p",{className:"empty-state__copy",children:"Wire up a Slack incoming webhook or any HTTPS endpoint to receive alerts when devices go offline, new devices register, or sessions fail. Configure your first webhook below."})]}):e.jsx("div",{className:"webhook-list-grid",children:g.map(s=>{const t=(()=>{try{return JSON.parse(s.events)}catch{return[]}})();return e.jsxs("div",{className:"webhook-row-card",children:[e.jsxs("div",{className:"webhook-row-card__header",children:[e.jsx("span",{className:`pill-chip ${s.payloadTemplate?"pill-chip--admin":"pill-chip--scope"}`,children:s.payloadTemplate?"CUSTOM":"SLACK"}),e.jsx("span",{className:"webhook-row-card__url",title:s.url,children:s.url}),e.jsxs("button",{type:"button",className:"row-action row-action--danger",onClick:()=>E(s.id,s.url),"aria-label":`Remove webhook for ${s.url}`,children:[e.jsx(V,{size:13}),e.jsx("span",{children:"Remove"})]})]}),e.jsx("div",{className:"webhook-row-card__events",children:t.length===0?e.jsx("span",{className:"webhook-row-card__no-events",children:"No triggers"}):t.map(a=>{const i=C.find(F=>F.id===a),W=(i==null?void 0:i.icon)??u;return e.jsxs("span",{className:`event-pill event-pill--${(i==null?void 0:i.tone)||"gray"}`,children:[e.jsx(W,{size:11}),(i==null?void 0:i.label)||a]},a)})})]},s.id)})}),e.jsxs("div",{className:"add-webhook-card",children:[e.jsxs("div",{className:"add-webhook-card__header",children:[e.jsx(x,{size:14}),e.jsx("span",{children:"Add a new webhook"})]}),e.jsxs("div",{className:"add-webhook-card__body",children:[e.jsx(S,{label:"Webhook URL",description:"The endpoint we POST webhook events to.",htmlFor:"webhook-url",children:e.jsx("div",{className:"setting-input-wrapper",children:e.jsx("input",{id:"webhook-url",type:"url",placeholder:"https://hooks.slack.com/services/...",value:l,onChange:s=>j(s.target.value)})})}),e.jsx(S,{label:"Trigger events",children:e.jsx("div",{className:"event-toggle-grid",children:C.map(s=>{const t=d.includes(s.id),a=s.icon;return e.jsxs("button",{type:"button",role:"checkbox","aria-checked":t,className:`event-toggle event-toggle--${s.tone} ${t?"is-selected":""}`,onClick:()=>$(s.id),children:[e.jsx(a,{size:14,className:"event-toggle__lead"}),e.jsx("span",{children:s.label}),t&&e.jsx(H,{size:14,className:"event-toggle__check"})]},s.id)})})}),e.jsxs("div",{className:"template-section",children:[e.jsxs("button",{type:"button",className:"template-section__toggle",onClick:()=>_(!n),"aria-expanded":n,children:[e.jsx(I,{size:14,className:n?"tone-amber":"tone-dim"}),e.jsx("span",{children:"Use custom payload (optional)"}),e.jsx("span",{className:"template-section__indicator",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"template-editor",children:[e.jsx("p",{className:"template-editor__hint",children:"Define a JSON or text template. Click a variable below to insert it."}),e.jsx("div",{className:"template-editor__chips",children:X.map(s=>e.jsx("button",{type:"button",className:"template-editor__chip",onClick:()=>R(s),children:`{{${s}}}`},s))}),e.jsx("textarea",{className:"template-editor__textarea",placeholder:'Example: { "text": "Alert: Device {{udid}} is offline!" }',value:y,onChange:s=>m(s.target.value),rows:4})]})]})]}),e.jsxs("div",{className:"add-webhook-card__footer",children:[e.jsxs("button",{type:"button",className:"page-header-action page-header-action--ghost",onClick:L,disabled:!l.trim()||v,children:[v?e.jsx(b,{size:14,className:"animate-spin"}):e.jsx(J,{size:14}),e.jsx("span",{children:"Test payload"})]}),e.jsxs("button",{type:"button",className:"page-header-action",onClick:z,disabled:h||!l.trim(),children:[h?e.jsx(b,{size:14,className:"animate-spin"}):e.jsx(x,{size:14}),e.jsx("span",{children:h?"Saving…":"Save webhook"})]})]})]})]})]})};export{ae as WebhookSettings};
+import{t as P,r,X as c,j as e,J as u,A as b,C as U,K as D}from"./index-2XPPbPwy.js";/* empty css                 */import{F as S}from"./FieldGroup-zQQHPh7x.js";import{P as O}from"./page-header-DqGlDufy.js";import{T as V}from"./trash-2-D61PoUrZ.js";import{P as x}from"./plus-Ct6aQTGM.js";import{C as B}from"./circle-x-BH_cUbqZ.js";import{C as H}from"./circle-check-CNFhu8oE.js";import{Z as I}from"./zap-uzHWFAKI.js";import{A as J}from"./activity-BU55TGRG.js";const C=[{id:"device_offline",label:"Device offline",icon:U,tone:"red"},{id:"device_new",label:"New device",icon:x,tone:"green"},{id:"session_failed",label:"Session failed",icon:B,tone:"amber"},{id:"selector_health_digest",label:"Selector health digest",icon:D,tone:"green"}],X=["udid","host","name","sessionId","failureReason","eventType","platform"],ae=()=>{const{toast:o}=P(),[g,T]=r.useState([]),[A,w]=r.useState(!0),[l,j]=r.useState(""),[d,k]=r.useState(["device_offline","session_failed"]),[h,f]=r.useState(!1),[v,N]=r.useState(!1),[n,_]=r.useState(!1),[y,m]=r.useState("");r.useEffect(()=>{p()},[]);const p=async()=>{w(!0);try{const s=await c.getWebhookConfigs();T(s||[])}catch(s){console.error("Failed to load webhook configs",s),o("Failed to load webhooks.","error")}finally{w(!1)}},z=async()=>{if(!l.trim()){o("Webhook URL is required.","error");return}if(d.length===0){o("Select at least one trigger event.","error");return}f(!0);try{await c.addWebhookConfig(l.trim(),d,"slack",y||void 0),j(""),m(""),_(!1),k(["device_offline","session_failed"]),await p(),o("Webhook saved.","success")}catch(s){console.error("Failed to add webhook",s),o(`Failed to add webhook: ${s.message||"unknown error"}`,"error")}finally{f(!1)}},E=async(s,t)=>{if(window.confirm(`Remove webhook for "${t}"?`))try{await c.deleteWebhookConfig(s),await p(),o("Webhook removed.","success")}catch(a){console.error("Failed to delete webhook",a),o(`Failed to delete: ${a.message||"unknown error"}`,"error")}},L=async()=>{if(l.trim()){N(!0);try{await c.testWebhook(l.trim(),"slack"),o("Test payload delivered.","success")}catch(s){o(`Test failed: ${s.message||"check the URL"}`,"error")}finally{N(!1)}}},$=s=>{k(t=>t.includes(s)?t.filter(a=>a!==s):[...t,s])},R=s=>{m(t=>t+`{{${s}}} `)};return e.jsxs("div",{className:"settings-container",children:[e.jsx(O,{icon:u,title:"Notifications",subtitle:"Configure Slack or generic webhooks to receive alerts for critical infrastructure events."}),e.jsxs("div",{className:"settings-content",children:[A?e.jsxs("div",{className:"settings-loading",style:{height:200},children:[e.jsx(b,{className:"animate-spin",size:28}),e.jsx("span",{children:"Loading webhooks…"})]}):g.length===0?e.jsxs("div",{className:"empty-state",children:[e.jsx("div",{className:"empty-state__icon",children:e.jsx(u,{size:28})}),e.jsx("h3",{className:"empty-state__title",children:"No webhooks configured"}),e.jsx("p",{className:"empty-state__copy",children:"Wire up a Slack incoming webhook or any HTTPS endpoint to receive alerts when devices go offline, new devices register, or sessions fail. Configure your first webhook below."})]}):e.jsx("div",{className:"webhook-list-grid",children:g.map(s=>{const t=(()=>{try{return JSON.parse(s.events)}catch{return[]}})();return e.jsxs("div",{className:"webhook-row-card",children:[e.jsxs("div",{className:"webhook-row-card__header",children:[e.jsx("span",{className:`pill-chip ${s.payloadTemplate?"pill-chip--admin":"pill-chip--scope"}`,children:s.payloadTemplate?"CUSTOM":"SLACK"}),e.jsx("span",{className:"webhook-row-card__url",title:s.url,children:s.url}),e.jsxs("button",{type:"button",className:"row-action row-action--danger",onClick:()=>E(s.id,s.url),"aria-label":`Remove webhook for ${s.url}`,children:[e.jsx(V,{size:13}),e.jsx("span",{children:"Remove"})]})]}),e.jsx("div",{className:"webhook-row-card__events",children:t.length===0?e.jsx("span",{className:"webhook-row-card__no-events",children:"No triggers"}):t.map(a=>{const i=C.find(F=>F.id===a),W=(i==null?void 0:i.icon)??u;return e.jsxs("span",{className:`event-pill event-pill--${(i==null?void 0:i.tone)||"gray"}`,children:[e.jsx(W,{size:11}),(i==null?void 0:i.label)||a]},a)})})]},s.id)})}),e.jsxs("div",{className:"add-webhook-card",children:[e.jsxs("div",{className:"add-webhook-card__header",children:[e.jsx(x,{size:14}),e.jsx("span",{children:"Add a new webhook"})]}),e.jsxs("div",{className:"add-webhook-card__body",children:[e.jsx(S,{label:"Webhook URL",description:"The endpoint we POST webhook events to.",htmlFor:"webhook-url",children:e.jsx("div",{className:"setting-input-wrapper",children:e.jsx("input",{id:"webhook-url",type:"url",placeholder:"https://hooks.slack.com/services/...",value:l,onChange:s=>j(s.target.value)})})}),e.jsx(S,{label:"Trigger events",children:e.jsx("div",{className:"event-toggle-grid",children:C.map(s=>{const t=d.includes(s.id),a=s.icon;return e.jsxs("button",{type:"button",role:"checkbox","aria-checked":t,className:`event-toggle event-toggle--${s.tone} ${t?"is-selected":""}`,onClick:()=>$(s.id),children:[e.jsx(a,{size:14,className:"event-toggle__lead"}),e.jsx("span",{children:s.label}),t&&e.jsx(H,{size:14,className:"event-toggle__check"})]},s.id)})})}),e.jsxs("div",{className:"template-section",children:[e.jsxs("button",{type:"button",className:"template-section__toggle",onClick:()=>_(!n),"aria-expanded":n,children:[e.jsx(I,{size:14,className:n?"tone-amber":"tone-dim"}),e.jsx("span",{children:"Use custom payload (optional)"}),e.jsx("span",{className:"template-section__indicator",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"template-editor",children:[e.jsx("p",{className:"template-editor__hint",children:"Define a JSON or text template. Click a variable below to insert it."}),e.jsx("div",{className:"template-editor__chips",children:X.map(s=>e.jsx("button",{type:"button",className:"template-editor__chip",onClick:()=>R(s),children:`{{${s}}}`},s))}),e.jsx("textarea",{className:"template-editor__textarea",placeholder:'Example: { "text": "Alert: Device {{udid}} is offline!" }',value:y,onChange:s=>m(s.target.value),rows:4})]})]})]}),e.jsxs("div",{className:"add-webhook-card__footer",children:[e.jsxs("button",{type:"button",className:"page-header-action page-header-action--ghost",onClick:L,disabled:!l.trim()||v,children:[v?e.jsx(b,{size:14,className:"animate-spin"}):e.jsx(J,{size:14}),e.jsx("span",{children:"Test payload"})]}),e.jsxs("button",{type:"button",className:"page-header-action",onClick:z,disabled:h||!l.trim(),children:[h?e.jsx(b,{size:14,className:"animate-spin"}):e.jsx(x,{size:14}),e.jsx("span",{children:h?"Saving…":"Save webhook"})]})]})]})]})]})};export{ae as WebhookSettings};

package/lib/public/assets/{zap-CWE94qcK.js → zap-uzHWFAKI.js}

@@ -1,4 +1,4 @@
-import{c as a}from"./index-BuIIcmGp.js";/**
+import{c as a}from"./index-2XPPbPwy.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/lib/public/index.html

@@ -36,7 +36,7 @@
       Learn how to configure a non-root public URL by running `npm run build`.
     -->
   <title>Xenon</title>
-  <script type="module" crossorigin src="/xenon/assets/index-BuIIcmGp.js"></script>
+  <script type="module" crossorigin src="/xenon/assets/index-2XPPbPwy.js"></script>
   <link rel="stylesheet" crossorigin href="/xenon/assets/index-hymrhlEZ.css">
 </head>
 

package/lib/src/app/routers/control.js

@@ -45,7 +45,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.previewLeaves = exports.previewLeaveDeps = void 0;
+exports.previewLeaves = exports.previewLeaveDeps = exports.UPLOAD_INSTALL_MAX_BYTES = void 0;
+exports.uploadName = uploadName;
 const plugin_1 = require("../../plugin");
 const express_1 = require("express");
 const device_store_1 = require("../../data-service/device-store");
@@ -61,6 +62,7 @@ const IOSStreamService_1 = __importDefault(require("../../device-managers/ios/IO
 const AndroidStreamService_1 = __importDefault(require("../../device-managers/android/AndroidStreamService"));
 const AndroidH264StreamService_1 = __importDefault(require("../../device-managers/android/AndroidH264StreamService"));
 const path_1 = __importDefault(require("path"));
+const express_fileupload_1 = __importDefault(require("express-fileupload"));
 const os_1 = __importDefault(require("os"));
 const fs_extra_1 = __importDefault(require("fs-extra"));
 const OmniVisionService_1 = require("../../services/omni-vision/OmniVisionService");
@@ -68,7 +70,6 @@ const InspectorService_1 = require("../../services/InspectorService");
 const StreamTicketService_1 = require("../../services/token/StreamTicketService");
 const appVisibility_1 = require("../../services/device-access/appVisibility");
 const PluginContext_1 = require("../../PluginContext");
-const localDeviceHosts_1 = require("../../device-managers/localDeviceHosts");
 const streamType_1 = require("./streamType");
 const iosStreamPort_1 = require("./iosStreamPort");
 const androidH264Config_1 = require("./androidH264Config");
@@ -81,10 +82,10 @@ const deviceTeamGuard_1 = require("../../middleware/deviceTeamGuard");
 const controlDevice_1 = require("../../middleware/controlDevice");
 const manualLock_1 = require("../../services/recording/manualLock");
 const streamStartConflict_1 = require("./streamStartConflict");
+const nodePhoneControl_1 = require("./nodePhoneControl");
 const streamLeave_1 = require("./streamLeave");
 const SessionOwnerResolver_1 = require("../../services/device-access/SessionOwnerResolver");
 const actor_1 = require("../../services/device-access/actor");
-const hubSessionToken_1 = require("../../gateway/hubSessionToken");
 const deviceAccessPolicy_1 = require("../../services/device-access/deviceAccessPolicy");
 const router = (0, express_1.Router)();
 /** True when an in-memory iOS/Android (MJPEG or H.264) stream session exists. */
@@ -112,76 +113,10 @@ router.use((0, deviceTeamGuard_1.deviceTeamGuard)());
 // another user's Appium session. Mounted here so every current and future
 // mutation is covered without per-handler opt-in.
 router.use((0, deviceAccessGuard_1.deviceAccessGuard)());
-// Cloud metadata endpoints — never proxy to these regardless of caller.
-const FORBIDDEN_PROXY_HOSTS = new Set([
-    '169.254.169.254', // AWS/Azure/GCP IMDS
-    'metadata.google.internal',
-    'metadata.goog',
-    '100.100.100.200', // Alibaba ECS metadata
-    'fd00:ec2::254', // AWS IMDSv6
-]);
-/**
- * Build a safe proxy URL from a device's reported host. Strips any path,
- * query, or fragment the host string carried, blocks cloud-metadata targets,
- * and refuses non-http(s) schemes. Returns null if the host is unsafe.
- */
-function buildProxyUrl(deviceHost, req) {
-    let parsed;
-    try {
-        parsed = new URL(deviceHost);
-    }
-    catch (_a) {
-        return null;
-    }
-    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
-        return null;
-    if (FORBIDDEN_PROXY_HOSTS.has(parsed.hostname))
-        return null;
-    // Only keep scheme + host + port; discard any attacker-baked path/query/fragment.
-    const origin = `${parsed.protocol}//${parsed.host}`;
-    // Treat req.originalUrl as a path — reparse to strip any control characters.
-    const forwardPath = req.originalUrl.startsWith('/') ? req.originalUrl : `/${req.originalUrl}`;
-    return `${origin}${forwardPath}`;
-}
-/**
- * Forward a control action on another server's phone to that server, signed
- * for the caller: the hub's control token (hubSessionToken.ts) names the
- * user, whether they are an admin, the phone and its node. This hub already
- * checked them (the guards above); a node with auth enabled accepts the token
- * for /control on that phone and runs its own ownership guard with that user.
- * Sent with no credential at all, it was refused by every such node. A cloud
- * provider never gets a hub token.
- */
-function forwardControl(device, req, target) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const actor = (0, actor_1.resolveActor)(req);
-        const token = !device.cloud && actor.userId
-            ? yield typedi_1.Container.get(hubSessionToken_1.HubSessionTokenIssuer).controlTokenFor({
-                userId: actor.userId,
-                isAdmin: actor.isAdmin,
-                udid: device.udid,
-                host: device.host,
-            })
-            : null;
-        // Sent once: a retry after a slow node's timeout or 5xx could land the
-        // same tap twice.
-        const config = Object.assign(Object.assign({}, (token ? { headers: { [hubSessionToken_1.HUB_TOKEN_HEADER]: token } } : {})), { retry: false });
-        yield InternalHttpClient_1.InternalHttpClient.post(target, req.body, config);
-    });
-}
-/**
- * A phone another server drives, whose /control actions are forwarded there.
- * Decided by the phone's own row (its nodeId, else its exact host against this
- * server's own hosts), never by the Host header the caller used: a substring
- * match on that header forwarded a lab's own phone back to itself, with no
- * login, whenever the lab was reached as `localhost`.
- */
-function isOtherServersPhone(device) {
-    if (!device.host)
-        return false;
-    const context = typedi_1.Container.get(PluginContext_1.PluginContext);
-    return !(0, localDeviceHosts_1.isOwnDevice)((0, localDeviceHosts_1.localDeviceHosts)(context.pluginArgs, context.port), context.nodeId, device);
-}
+// Another server's phone (a node's, or a cloud provider's): its actions are
+// sent on to its node, answered here, or refused, before any handler below
+// runs it with this server's own tools. See nodePhoneControl.ts.
+router.use((0, nodePhoneControl_1.nodePhoneControl)());
 function getDeviceInfo(udid) {
     return __awaiter(this, void 0, void 0, function* () {
         const device = yield device_store_1.DeviceStoreFactory.getStore().findDevice({ udid });
@@ -213,26 +148,12 @@ function getDeviceManagerForPlatform(platform) {
     });
 }
 router.post('/:udid/tap', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
     const { udid } = req.params;
     const { x, y } = req.body;
     const device = yield getDeviceInfo(udid);
     if (!device)
         return res.status(404).send('Device not found');
     const manager = yield getDeviceManagerForPlatform(device.platform);
-    if (isOtherServersPhone(device)) {
-        const target = buildProxyUrl(device.host, req);
-        if (!target)
-            return res.status(400).send({ error: 'Unsafe device host' });
-        logger_1.default.info(`Proxying tap for ${udid} to ${target}`);
-        try {
-            yield forwardControl(device, req, target);
-            return res.status(200).send({ success: true });
-        }
-        catch (err) {
-            return res.status(((_a = err.response) === null || _a === void 0 ? void 0 : _a.status) || 500).send(((_b = err.response) === null || _b === void 0 ? void 0 : _b.data) || err.message);
-        }
-    }
     if (manager && manager.tap) {
         try {
             yield manager.tap(udid, x, y);
@@ -257,26 +178,12 @@ router.post('/:udid/tap', (req, res) => __awaiter(void 0, void 0, void 0, functi
     res.status(400).send('Manager not found or tap not supported');
 }));
 router.post('/:udid/swipe', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
     const { udid } = req.params;
     const { x, y, endX, endY, duration = 1000 } = req.body;
     const device = yield getDeviceInfo(udid);
     if (!device)
         return res.status(404).send('Device not found');
     const manager = yield getDeviceManagerForPlatform(device.platform);
-    if (isOtherServersPhone(device)) {
-        const target = buildProxyUrl(device.host, req);
-        if (!target)
-            return res.status(400).send({ error: 'Unsafe device host' });
-        logger_1.default.info(`Proxying swipe for ${udid} to ${target}`);
-        try {
-            yield forwardControl(device, req, target);
-            return res.status(200).send({ success: true });
-        }
-        catch (err) {
-            return res.status(((_a = err.response) === null || _a === void 0 ? void 0 : _a.status) || 500).send(((_b = err.response) === null || _b === void 0 ? void 0 : _b.data) || err.message);
-        }
-    }
     if (manager && manager.swipe) {
         try {
             yield manager.swipe(udid, x, y, endX, endY, duration);
@@ -290,26 +197,12 @@ router.post('/:udid/swipe', (req, res) => __awaiter(void 0, void 0, void 0, func
     res.status(400).send('Manager not found or swipe not supported');
 }));
 router.post('/:udid/text', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
     const { udid } = req.params;
     const { text } = req.body;
     const device = yield getDeviceInfo(udid);
     if (!device)
         return res.status(404).send('Device not found');
     const manager = yield getDeviceManagerForPlatform(device.platform);
-    if (isOtherServersPhone(device)) {
-        const target = buildProxyUrl(device.host, req);
-        if (!target)
-            return res.status(400).send({ error: 'Unsafe device host' });
-        logger_1.default.info(`Proxying typeText for ${udid} to ${target}`);
-        try {
-            yield forwardControl(device, req, target);
-            return res.status(200).send({ success: true });
-        }
-        catch (err) {
-            return res.status(((_a = err.response) === null || _a === void 0 ? void 0 : _a.status) || 500).send(((_b = err.response) === null || _b === void 0 ? void 0 : _b.data) || err.message);
-        }
-    }
     if (manager && manager.typeText) {
         try {
             yield manager.typeText(udid, text);
@@ -323,26 +216,12 @@ router.post('/:udid/text', (req, res) => __awaiter(void 0, void 0, void 0, funct
     res.status(400).send('Manager not found or typeText not supported');
 }));
 router.post('/:udid/keyevent', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
     const { udid } = req.params;
     const { keyCode } = req.body;
     const device = yield getDeviceInfo(udid);
     if (!device)
         return res.status(404).send('Device not found');
     const manager = yield getDeviceManagerForPlatform(device.platform);
-    if (isOtherServersPhone(device)) {
-        const target = buildProxyUrl(device.host, req);
-        if (!target)
-            return res.status(400).send({ error: 'Unsafe device host' });
-        logger_1.default.info(`Proxying keyevent for ${udid} to ${target}`);
-        try {
-            yield forwardControl(device, req, target);
-            return res.status(200).send({ success: true });
-        }
-        catch (err) {
-            return res.status(((_a = err.response) === null || _a === void 0 ? void 0 : _a.status) || 500).send(((_b = err.response) === null || _b === void 0 ? void 0 : _b.data) || err.message);
-        }
-    }
     if (manager && manager.pressKey) {
         try {
             yield manager.pressKey(udid, keyCode);
@@ -356,6 +235,7 @@ router.post('/:udid/keyevent', (req, res) => __awaiter(void 0, void 0, void 0, f
     res.status(400).send('Manager not found or pressKey not supported');
 }));
 router.get('/:udid/screenshot', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a, _b;
     const { udid } = req.params;
     const device = yield getDeviceInfo(udid);
     if (!device)
@@ -371,7 +251,16 @@ router.get('/:udid/screenshot', (req, res) => __awaiter(void 0, void 0, void 0,
     }
     const manager = yield getDeviceManagerForPlatform(device.platform);
     if (manager && manager.getScreenshot) {
-        const base64 = yield manager.getScreenshot(udid);
+        let base64;
+        try {
+            base64 = yield manager.getScreenshot(udid);
+        }
+        catch (err) {
+            // Answered: Express 4 doesn't catch a rejected async handler, and an
+            // iPhone with no live preview (no WDA, no tunnel) left this unanswered.
+            logger_1.default.error(`Screenshot capture failed for ${udid}: ${(_a = err === null || err === void 0 ? void 0 : err.message) !== null && _a !== void 0 ? _a : err}`);
+            return res.status(502).send({ error: `Screenshot capture failed: ${(_b = err === null || err === void 0 ? void 0 : err.message) !== null && _b !== void 0 ? _b : err}` });
+        }
         // CRITICAL: Validate screenshot is not empty before returning success
         if (base64 && base64.length > 100) {
             return res.status(200).send({ screenshot: base64 });
@@ -426,26 +315,12 @@ router.post('/:udid/clipboard', (req, res) => __awaiter(void 0, void 0, void 0,
     res.status(400).send('Manager not found or setClipboard not supported');
 }));
 router.post('/:udid/touchAndHold', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
     const { udid } = req.params;
     const { x, y, duration = 1000 } = req.body;
     const device = yield getDeviceInfo(udid);
     if (!device)
         return res.status(404).send('Device not found');
     const manager = yield getDeviceManagerForPlatform(device.platform);
-    if (isOtherServersPhone(device)) {
-        const target = buildProxyUrl(device.host, req);
-        if (!target)
-            return res.status(400).send({ error: 'Unsafe device host' });
-        logger_1.default.info(`Proxying touchAndHold for ${udid} to ${target}`);
-        try {
-            yield forwardControl(device, req, target);
-            return res.status(200).send({ success: true });
-        }
-        catch (err) {
-            return res.status(((_a = err.response) === null || _a === void 0 ? void 0 : _a.status) || 500).send(((_b = err.response) === null || _b === void 0 ? void 0 : _b.data) || err.message);
-        }
-    }
     if (manager && manager.touchAndHold) {
         try {
             yield manager.touchAndHold(udid, x, y, duration);
@@ -552,11 +427,16 @@ router.post('/:udid/install-repository-app', (req, res) => __awaiter(void 0, voi
         if (!(0, appVisibility_1.canSeeApp)(app, (_a = req.auth) === null || _a === void 0 ? void 0 : _a.teamIds)) {
             return res.status(404).send('App not found in repository');
         }
+        // A node's phone: the app is in this server's library, not the node's,
+        // so the file goes to the node's own upload-install.
+        if ((0, nodePhoneControl_1.isOtherServersPhone)(device)) {
+            return yield (0, nodePhoneControl_1.installFileOnNode)(req, res, udid, device, {
+                path: app.filepath,
+                name: app.filename || path_1.default.basename(app.filepath),
+            });
+        }
         const manager = yield getDeviceManagerForPlatform(device.platform);
         if (manager && manager.installApp) {
-            // If it's a local file, pass the path.
-            // In a distributed setup, the node would ideally download it.
-            // For now, we assume hub-node shared storage or hub-local execution.
             yield manager.installApp(udid, app.filepath);
             return res.status(200).send({ success: true, message: `Installed ${app.name}` });
         }
@@ -567,38 +447,71 @@ router.post('/:udid/install-repository-app', (req, res) => __awaiter(void 0, voi
         res.status(500).send({ error: err.message });
     }
 }));
-router.post('/:udid/upload-install', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
+/** Where upload-install writes an uploaded app while it is installed. */
+const UPLOAD_DIR = path_1.default.join(os_1.default.tmpdir(), 'xenon-uploads');
+/** The largest app upload-install takes: room for a large iOS app. */
+exports.UPLOAD_INSTALL_MAX_BYTES = 4 * 1024 ** 3;
+/**
+ * upload-install's own multipart parser. /control had none (only /apps
+ * mounts one), so every upload was answered "No files were uploaded." The
+ * file goes to a temporary file rather than memory, and one past the limit
+ * is answered 413.
+ */
+const uploadParser = (0, express_fileupload_1.default)({
+    useTempFiles: true,
+    tempFileDir: UPLOAD_DIR,
+    limits: { fileSize: exports.UPLOAD_INSTALL_MAX_BYTES },
+    abortOnLimit: true,
+});
+/**
+ * The name an upload is saved under: the client's name, cut to its last
+ * path segment and to safe characters, keeping its extension, which the
+ * installers read. busboy already cuts the name to its last segment (its
+ * `preservePath` is off); this holds if a parser ever keeps paths.
+ */
+function uploadName(clientName) {
+    const base = path_1.default
+        .basename(String(clientName !== null && clientName !== void 0 ? clientName : ''))
+        .replace(/[^\w.-]+/g, '_')
+        .replace(/^\.+/, '');
+    return `${Date.now()}-${base || 'app'}`;
+}
+router.post('/:udid/upload-install', uploadParser, (req, res) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a;
     const { udid } = req.params;
-    const device = yield getDeviceInfo(udid);
-    if (!device)
-        return res.status(404).send('Device not found');
-    if (!req.files || Object.keys(req.files).length === 0) {
-        return res.status(400).send('No files were uploaded.');
-    }
-    const appFile = req.files.app;
-    if (!appFile)
-        return res.status(400).send('File "app" is required');
-    const tmpDir = path_1.default.join(os_1.default.tmpdir(), 'xenon-uploads');
-    if (!fs_extra_1.default.existsSync(tmpDir))
-        fs_extra_1.default.mkdirSync(tmpDir, { recursive: true });
-    const appPath = path_1.default.join(tmpDir, `${Date.now()}-${appFile.name}`);
-    try {
+    const appFile = (_a = req.files) === null || _a === void 0 ? void 0 : _a.app;
+    const appPath = appFile ? path_1.default.join(UPLOAD_DIR, uploadName(appFile.name)) : undefined;
+    const answer = yield (() => __awaiter(void 0, void 0, void 0, function* () {
+        const device = yield getDeviceInfo(udid);
+        if (!device)
+            return { status: 404, body: 'Device not found' };
+        if (!req.files || Object.keys(req.files).length === 0) {
+            return { status: 400, body: 'No files were uploaded.' };
+        }
+        if (!appFile || !appPath)
+            return { status: 400, body: 'File "app" is required' };
         yield appFile.mv(appPath);
         const manager = yield getDeviceManagerForPlatform(device.platform);
-        if (manager && manager.installApp) {
-            yield manager.installApp(udid, appPath);
-            // Clean up after installation
-            setTimeout(() => fs_extra_1.default.remove(appPath).catch(() => { }), 10000);
-            return res
-                .status(200)
-                .send({ success: true, message: `App ${appFile.name} installed successfully` });
+        if (!(manager === null || manager === void 0 ? void 0 : manager.installApp)) {
+            return { status: 400, body: 'Manager not found or installApp not supported' };
         }
-        res.status(400).send('Manager not found or installApp not supported');
-    }
-    catch (err) {
+        yield manager.installApp(udid, appPath);
+        return {
+            status: 200,
+            body: { success: true, message: `App ${appFile.name} installed successfully` },
+        };
+    }))().catch((err) => {
         logger_1.default.error(`Installation failed for ${udid}: ${err.message}`);
-        res.status(500).send({ error: err.message });
+        return { status: 500, body: { error: err.message } };
+    });
+    // The install has finished with the file, whether it worked or not (both
+    // installers wait for their process). Removed before answering, so nothing
+    // is left behind once the caller has the answer.
+    for (const file of [appPath, appFile === null || appFile === void 0 ? void 0 : appFile.tempFilePath]) {
+        if (file)
+            yield fs_extra_1.default.remove(file).catch(() => undefined);
     }
+    res.status(answer.status).send(answer.body);
 }));
 router.post('/:udid/uninstall', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
     const { udid } = req.params;
@@ -1169,6 +1082,33 @@ router.post('/:udid/shell', (req, res) => __awaiter(void 0, void 0, void 0, func
     }
     res.status(400).send('Manager not found or executeShell not supported');
 }));
+/**
+ * Where Omni-Vision reads the screen from, for the stand-in driver it is
+ * given: this server's device manager, or, for a node's phone, the node
+ * (screenshotFromNode). Omni itself runs here either way, with this
+ * server's AI settings. Null when this server has no manager for the phone.
+ */
+function omniScreen(req, udid, device) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if ((0, nodePhoneControl_1.isOtherServersPhone)(device)) {
+            return {
+                getScreenshot: () => (0, nodePhoneControl_1.screenshotFromNode)(req, udid, device),
+                getPageSource: () => __awaiter(this, void 0, void 0, function* () { return ''; }),
+            };
+        }
+        const manager = yield getDeviceManagerForPlatform(device.platform);
+        if (!manager)
+            return null;
+        return {
+            getScreenshot: () => __awaiter(this, void 0, void 0, function* () {
+                if (manager.getScreenshot)
+                    return yield manager.getScreenshot(udid);
+                throw new Error('Screenshot not supported for this device');
+            }),
+            getPageSource: () => __awaiter(this, void 0, void 0, function* () { return (manager.getPageSource ? yield manager.getPageSource(udid) : ''); }),
+        };
+    });
+}
 /**
  * Omni-Scan for manual control (No Appium Session)
  */
@@ -1177,28 +1117,12 @@ router.get('/:udid/omni-scan', (req, res) => __awaiter(void 0, void 0, void 0, f
     const device = yield getDeviceInfo(udid);
     if (!device)
         return res.status(404).send('Device not found');
-    const manager = yield getDeviceManagerForPlatform(device.platform);
-    if (!manager)
+    const screen = yield omniScreen(req, udid, device);
+    if (!screen)
         return res.status(400).send('Manager not found');
     try {
         const omniService = typedi_1.Container.get(OmniVisionService_1.OmniVisionService);
-        // Create a Mock Driver that OmniVisionService can use
-        const mockDriver = {
-            sessionId: `manual_${udid}`,
-            getScreenshot: () => __awaiter(void 0, void 0, void 0, function* () {
-                if (manager.getScreenshot) {
-                    return yield manager.getScreenshot(udid);
-                }
-                throw new Error('Screenshot not supported for this device');
-            }),
-            // OmniVision might need page source for some analysis later
-            getPageSource: () => __awaiter(void 0, void 0, void 0, function* () {
-                if (manager.getPageSource) {
-                    return yield manager.getPageSource(udid);
-                }
-                return '';
-            }),
-        };
+        const mockDriver = Object.assign({ sessionId: `manual_${udid}` }, screen);
         const result = yield omniService.analyzeScreen(mockDriver);
         return res.status(200).send({ status: 'success', value: result });
     }
@@ -1277,20 +1201,12 @@ router.post('/:udid/test-locator', (req, res) => __awaiter(void 0, void 0, void
     const device = yield getDeviceInfo(udid);
     if (!device)
         return res.status(404).send('Device not found');
-    const manager = yield getDeviceManagerForPlatform(device.platform);
-    if (!manager)
+    const screen = yield omniScreen(req, udid, device);
+    if (!screen)
         return res.status(400).send('Manager not found');
     try {
         const omniService = typedi_1.Container.get(OmniVisionService_1.OmniVisionService);
-        const mockDriver = {
-            sessionId: `manual_${udid}`,
-            getScreenshot: () => __awaiter(void 0, void 0, void 0, function* () {
-                if (manager.getScreenshot) {
-                    return yield manager.getScreenshot(udid);
-                }
-                throw new Error('Screenshot not supported for this device');
-            }),
-        };
+        const mockDriver = { sessionId: `manual_${udid}`, getScreenshot: screen.getScreenshot };
         let value = [];
         if (strategy === '-custom:ai-text') {
             value = yield omniService.findByText(mockDriver, selector);