@xenon-device-management/xenon 2.13.1 → 2.14.0

package/lib/public/assets/{users-CqBuxMlX.js → users-CFba5TSy.js}

@@ -1 +1 @@
-import{o as s}from"./index-BGBqohfQ.js";const o="/xenon/api/users";async function c(){const t=await fetch(`${o}/`,{credentials:"include"});if(!t.ok)throw new Error(`listUsers failed (${t.status})`);return t.json()}async function i(t){const e=await fetch(`${o}/`,{method:"POST",credentials:"include",headers:{"Content-Type":"application/json",...s},body:JSON.stringify(t)});if(!e.ok){const n=await e.json().catch(()=>({}));throw new Error(n.error||`createUser failed (${e.status})`)}return e.json()}async function d(t,e){const n=await fetch(`${o}/${encodeURIComponent(t)}`,{method:"PATCH",credentials:"include",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)});if(!n.ok){const r=await n.json().catch(()=>({}));throw new Error(r.error||`updateUser failed (${n.status})`)}return n.json()}async function l(t){const e=await fetch(`${o}/${encodeURIComponent(t)}`,{method:"DELETE",credentials:"include"});if(!e.ok&&e.status!==204){const n=await e.json().catch(()=>({}));throw new Error(n.error||`deleteUser failed (${e.status})`)}}async function u(t){const e=await fetch(`${o}/${encodeURIComponent(t)}/reset-link`,{method:"POST",credentials:"include"}),n=await e.json().catch(()=>({}));if(!e.ok)throw new Error(n.error||`Reset link failed (${e.status})`);return n}export{i as a,u as c,l as d,c as l,d as u};
+import{o as s}from"./index-BbKEXUFH.js";const o="/xenon/api/users";async function c(){const t=await fetch(`${o}/`,{credentials:"include"});if(!t.ok)throw new Error(`listUsers failed (${t.status})`);return t.json()}async function i(t){const e=await fetch(`${o}/`,{method:"POST",credentials:"include",headers:{"Content-Type":"application/json",...s},body:JSON.stringify(t)});if(!e.ok){const n=await e.json().catch(()=>({}));throw new Error(n.error||`createUser failed (${e.status})`)}return e.json()}async function d(t,e){const n=await fetch(`${o}/${encodeURIComponent(t)}`,{method:"PATCH",credentials:"include",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)});if(!n.ok){const r=await n.json().catch(()=>({}));throw new Error(r.error||`updateUser failed (${n.status})`)}return n.json()}async function l(t){const e=await fetch(`${o}/${encodeURIComponent(t)}`,{method:"DELETE",credentials:"include"});if(!e.ok&&e.status!==204){const n=await e.json().catch(()=>({}));throw new Error(n.error||`deleteUser failed (${e.status})`)}}async function u(t){const e=await fetch(`${o}/${encodeURIComponent(t)}/reset-link`,{method:"POST",credentials:"include"}),n=await e.json().catch(()=>({}));if(!e.ok)throw new Error(n.error||`Reset link failed (${e.status})`);return n}export{i as a,u as c,l as d,c as l,d as u};

package/lib/public/assets/{users-DjQSucKb.js → users-Cp0beJm3.js}

@@ -1,4 +1,4 @@
-import{c as w,b as k,r as a,j as e,a1 as C}from"./index-BGBqohfQ.js";import{l as M,d as R,c as I,a as A,u as D}from"./users-CqBuxMlX.js";import{f as U}from"./time-D-gjmE1o.js";import{P}from"./page-header-FXPlo6az.js";import{B as y}from"./button-Cq_zHETv.js";import{I as N}from"./input-BvB1cjHE.js";import{S as g}from"./select-12RThAXc.js";import{P as B}from"./plus-B2xCnntV.js";import{T as L}from"./trash-2-B54e-TfY.js";import"./utils-CDN07tui.js";/**
+import{c as w,b as k,r as a,j as e,a2 as C}from"./index-BbKEXUFH.js";import{l as M,d as R,c as I,a as A,u as D}from"./users-CFba5TSy.js";import{f as U}from"./time-D-gjmE1o.js";import{P}from"./page-header-BjzgWz-T.js";import{B as y}from"./button-Dda4irn_.js";import{I as N}from"./input-Cm0tmSoc.js";import{S as g}from"./select-88jHcl-Z.js";import{P as B}from"./plus-nBFSMu_X.js";import{T as L}from"./trash-2-C5RSuX0e.js";import"./utils-CDN07tui.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/lib/public/assets/{video-off-T0rlt0GA.js → video-off-DDsEISjV.js}

@@ -1,4 +1,4 @@
-import{c as o}from"./index-BGBqohfQ.js";/**
+import{c as o}from"./index-BbKEXUFH.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/lib/public/assets/webhook-settings-BGu32vSB.js

@@ -0,0 +1 @@
+import{t as P,r as l,X as p,j as e,P as w,A as x,C as V,Q as I}from"./index-BbKEXUFH.js";/* empty css                 */import{F as k}from"./FieldGroup-Cb5QZsE1.js";import{S as U}from"./select-88jHcl-Z.js";import{P as B}from"./page-header-BjzgWz-T.js";import{T as D}from"./trash-2-C5RSuX0e.js";import{P as _}from"./plus-nBFSMu_X.js";import{C as J}from"./circle-x-DlDJtnVz.js";import{C as K}from"./circle-check-CqAJjQ5O.js";import{Z as M}from"./zap-l4VaXzq8.js";import{A as X}from"./activity-DOVdsfMQ.js";import"./utils-CDN07tui.js";const Z=["udid","name","host","platform"],q=["udid","name","host","platform"],G=["sessionId","sessionName","failureReason","udid","deviceName","platform","osVersion","startTime","endTime"],Q=["windowDays","totalHeals","distinctSelectors"],Y={device_offline:Z,device_new:q,session_failed:G,selector_health_digest:Q},ee=Y,se={eventType:"The event: device_offline, session_failed, ...",udid:"The device's id",name:"The device's name",host:"The machine it is plugged into",platform:"android or ios",sessionId:"The session's id",sessionName:"The session's name, if the test gave it one",failureReason:"Why it failed",deviceName:"The device's name",osVersion:"The device's OS version",startTime:"When it started (ISO 8601)",endTime:"When it ended (ISO 8601)",windowDays:"How many days the digest covers",totalHeals:"Heals in that time",distinctSelectors:"Selectors that were healed"};function te(o){const c=["eventType"];for(const u of o)for(const h of ee[u]??[])c.includes(h)||c.push(h);return c}const ae=[{id:"slack",label:"Slack message"},{id:"webhook",label:"JSON (event and payload)"}];function oe(o){return o.payloadTemplate?"CUSTOM":o.type==="slack"?"SLACK":"JSON"}const j=[{id:"device_offline",label:"Device offline",icon:V,tone:"red"},{id:"device_new",label:"New device",icon:_,tone:"green"},{id:"session_failed",label:"Session failed",icon:J,tone:"amber"},{id:"selector_health_digest",label:"Selector health digest",icon:I,tone:"green"}],be=()=>{const{toast:o}=P(),[c,u]=l.useState([]),[h,N]=l.useState(!0),[r,y]=l.useState(""),[i,S]=l.useState(["device_offline","session_failed"]),[f,T]=l.useState(!1),[C,A]=l.useState(!1),[d,E]=l.useState(!1),[m,g]=l.useState(""),[b,O]=l.useState("slack");l.useEffect(()=>{v()},[]);const v=async()=>{N(!0);try{const s=await p.getWebhookConfigs();u(s||[])}catch(s){console.error("Failed to load webhook configs",s),o("Failed to load webhooks.","error")}finally{N(!1)}},W=async()=>{if(!r.trim()){o("Webhook URL is required.","error");return}if(i.length===0){o("Select at least one trigger event.","error");return}T(!0);try{await p.addWebhookConfig(r.trim(),i,b,m||void 0),y(""),g(""),E(!1),O("slack"),S(["device_offline","session_failed"]),await v(),o("Webhook saved.","success")}catch(s){console.error("Failed to add webhook",s),o(`Failed to add webhook: ${s.message||"unknown error"}`,"error")}finally{T(!1)}},$=async(s,t)=>{if(window.confirm(`Remove webhook for "${t}"?`))try{await p.deleteWebhookConfig(s),await v(),o("Webhook removed.","success")}catch(a){console.error("Failed to delete webhook",a),o(`Failed to delete: ${a.message||"unknown error"}`,"error")}},L=async()=>{if(!r.trim()||i.length===0)return;A(!0);const s=t=>{var a;return((a=j.find(n=>n.id===t))==null?void 0:a.label)??t};try{for(const t of i)try{await p.testWebhook(r.trim(),b,m||void 0,t)}catch(a){o(`Test failed for ${s(t)}: ${a.message||"check the URL"}`,"error");return}o(i.length===1?`Test message delivered: ${s(i[0])}.`:`Test messages delivered: ${i.map(s).join(", ")}.`,"success")}finally{A(!1)}},R=s=>{S(t=>t.includes(s)?t.filter(a=>a!==s):[...t,s])},z=s=>{g(t=>t+`{{${s}}} `)};return e.jsxs("div",{className:"settings-container",children:[e.jsx(B,{icon:w,title:"Notifications",subtitle:"Configure Slack or generic webhooks to receive alerts for critical infrastructure events."}),e.jsxs("div",{className:"settings-content",children:[h?e.jsxs("div",{className:"settings-loading",style:{height:200},children:[e.jsx(x,{className:"animate-spin",size:28}),e.jsx("span",{children:"Loading webhooks…"})]}):c.length===0?e.jsxs("div",{className:"empty-state",children:[e.jsx("div",{className:"empty-state__icon",children:e.jsx(w,{size:28})}),e.jsx("h3",{className:"empty-state__title",children:"No webhooks configured"}),e.jsx("p",{className:"empty-state__copy",children:"Wire up a Slack incoming webhook or any HTTPS endpoint to receive alerts when devices go offline, new devices register, or sessions fail. Configure your first webhook below."})]}):e.jsx("div",{className:"webhook-list-grid",children:c.map(s=>{const t=(()=>{try{return JSON.parse(s.events)}catch{return[]}})();return e.jsxs("div",{className:"webhook-row-card",children:[e.jsxs("div",{className:"webhook-row-card__header",children:[e.jsx("span",{className:`pill-chip ${s.payloadTemplate?"pill-chip--admin":"pill-chip--scope"}`,children:oe(s)}),e.jsx("span",{className:"webhook-row-card__url",title:s.url,children:s.url}),e.jsxs("button",{type:"button",className:"row-action row-action--danger",onClick:()=>$(s.id,s.url),"aria-label":`Remove webhook for ${s.url}`,children:[e.jsx(D,{size:13}),e.jsx("span",{children:"Remove"})]})]}),e.jsx("div",{className:"webhook-row-card__events",children:t.length===0?e.jsx("span",{className:"webhook-row-card__no-events",children:"No triggers"}):t.map(a=>{const n=j.find(H=>H.id===a),F=(n==null?void 0:n.icon)??w;return e.jsxs("span",{className:`event-pill event-pill--${(n==null?void 0:n.tone)||"gray"}`,children:[e.jsx(F,{size:11}),(n==null?void 0:n.label)||a]},a)})})]},s.id)})}),e.jsxs("div",{className:"add-webhook-card",children:[e.jsxs("div",{className:"add-webhook-card__header",children:[e.jsx(_,{size:14}),e.jsx("span",{children:"Add a new webhook"})]}),e.jsxs("div",{className:"add-webhook-card__body",children:[e.jsx(k,{label:"Webhook URL",description:"The endpoint we POST webhook events to.",htmlFor:"webhook-url",children:e.jsx("div",{className:"setting-input-wrapper",children:e.jsx("input",{id:"webhook-url",type:"url",placeholder:"https://hooks.slack.com/services/...",value:r,onChange:s=>y(s.target.value)})})}),e.jsx(k,{label:"Message format",description:m.trim()?"Your custom payload is sent as written, whatever the format.":"Slack message for a Slack incoming webhook; JSON for anything else.",htmlFor:"webhook-format",children:e.jsx(U,{id:"webhook-format",value:b,onChange:s=>O(s.target.value),children:ae.map(s=>e.jsx("option",{value:s.id,children:s.label},s.id))})}),e.jsx(k,{label:"Trigger events",children:e.jsx("div",{className:"event-toggle-grid",children:j.map(s=>{const t=i.includes(s.id),a=s.icon;return e.jsxs("button",{type:"button",role:"checkbox","aria-checked":t,className:`event-toggle event-toggle--${s.tone} ${t?"is-selected":""}`,onClick:()=>R(s.id),children:[e.jsx(a,{size:14,className:"event-toggle__lead"}),e.jsx("span",{children:s.label}),t&&e.jsx(K,{size:14,className:"event-toggle__check"})]},s.id)})})}),e.jsxs("div",{className:"template-section",children:[e.jsxs("button",{type:"button",className:"template-section__toggle",onClick:()=>E(!d),"aria-expanded":d,children:[e.jsx(M,{size:14,className:d?"tone-amber":"tone-dim"}),e.jsx("span",{children:"Use custom payload (optional)"}),e.jsx("span",{className:"template-section__indicator",children:d?"−":"+"})]}),d&&e.jsxs("div",{className:"template-editor",children:[e.jsx("p",{className:"template-editor__hint",children:"Define a JSON or text template. Click a name below to insert it; the names are the ones your selected events carry."}),e.jsx("div",{className:"template-editor__chips",children:te(i).map(s=>e.jsx("button",{type:"button",className:"template-editor__chip","aria-label":`{{${s}}}`,title:se[s],onClick:()=>z(s),children:`{{${s}}}`},s))}),e.jsx("textarea",{className:"template-editor__textarea",placeholder:'Example: { "text": "Alert: Device {{udid}} is offline!" }',value:m,onChange:s=>g(s.target.value),rows:4})]})]})]}),e.jsxs("div",{className:"add-webhook-card__footer",children:[e.jsxs("button",{type:"button",className:"page-header-action page-header-action--ghost",onClick:L,disabled:!r.trim()||i.length===0||C,"aria-label":"Send test",title:i.length===0?"Select a trigger event to send a sample of":"Sends a sample message for each selected event",children:[C?e.jsx(x,{size:14,className:"animate-spin"}):e.jsx(X,{size:14}),e.jsx("span",{children:"Send test"})]}),e.jsxs("button",{type:"button",className:"page-header-action",onClick:W,disabled:f||!r.trim(),children:[f?e.jsx(x,{size:14,className:"animate-spin"}):e.jsx(_,{size:14}),e.jsx("span",{children:f?"Saving…":"Save webhook"})]})]})]})]})]})};export{be as WebhookSettings};

package/lib/public/assets/{zap-gBHqutZV.js → zap-l4VaXzq8.js}

@@ -1,4 +1,4 @@
-import{c as a}from"./index-BGBqohfQ.js";/**
+import{c as a}from"./index-BbKEXUFH.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/lib/public/index.html

@@ -36,8 +36,8 @@
       Learn how to configure a non-root public URL by running `npm run build`.
     -->
   <title>Xenon</title>
-  <script type="module" crossorigin src="/xenon/assets/index-BGBqohfQ.js"></script>
-  <link rel="stylesheet" crossorigin href="/xenon/assets/index-BTYMAqNW.css">
+  <script type="module" crossorigin src="/xenon/assets/index-BbKEXUFH.js"></script>
+  <link rel="stylesheet" crossorigin href="/xenon/assets/index-Bxoxt9sV.css">
 </head>
 
 <body>

package/lib/schema.json

@@ -67,7 +67,7 @@
         "maxSessions": {
             "type": "number",
             "default": 8,
-            "description": "Maximum number of Appium sessions this node will run concurrently. Additional requests queue until a slot frees."
+            "description": "Maximum number of Appium sessions this server runs at once. A new session waits until fewer are running or being started. A live preview, a recording, or an SDK lease that has no session on it does not use a slot; a session started on a leased phone does, but is never held back itself. On a hub the count includes its nodes' phones. A value below 1 means no limit."
         },
         "cloud": {
             "type": "object",
@@ -87,7 +87,7 @@
                 "$ref": "#/definitions/EmulatorConfig"
             },
             "default": [],
-            "description": "Allow-list of Android emulator AVDs to expose. Empty array means expose all discoverable emulators."
+            "description": "Android emulators (AVDs) to boot when the server starts, each as `{ \"avdName\": \"Pixel_7\", ... }`. Any other field is a launch option passed to the emulator: `args`, `env`, `language`, `country`, `launchTimeout`, `readyTimeout`, `retryTimes`. Nothing is booted when `platform` is `ios` or `androidDeviceType` is `real`. It does not limit which emulators are discovered: every emulator that is running is found, as `bootedEmulators` allows."
         },
         "proxy": {
             "type": "object",
@@ -146,16 +146,16 @@
         "removeDevicesFromDatabaseBeforeRunningThePlugin": {
             "type": "boolean",
             "default": false,
-            "description": "Wipe the persisted Device table at startup so discovery begins from a clean slate. Useful after hardware changes."
+            "description": "At startup, also forget what was set for this server's own phones (team, tags, maintenance, reservations), so each comes back as a new phone. Without it a phone keeps those whenever it reconnects, through restarts. A node forgets them for every phone it has; a hub keeps its nodes' phones and theirs either way."
         },
         "healthCheckIntervalMs": {
             "type": "number",
             "default": 300000,
-            "description": "Default interval (ms) between background device health checks. Overridden when `healthCheckSchedule` is set. Default 5 minutes — frequent enough to keep battery/thermal badges fresh without hammering devices."
+            "description": "Default interval (ms) between background device health checks. Overridden when `healthCheckSchedule` is set. Default 5 minutes — frequent enough to keep battery/thermal badges fresh without hammering devices. A value saved on the dashboard's Settings page replaces this one."
         },
         "healthCheckSchedule": {
             "type": "string",
-            "description": "Cron expression for the device health-check job (e.g. '0 * * * *' for hourly). When set, takes precedence over `healthCheckIntervalMs`."
+            "description": "Cron expression for the device health-check job (e.g. '0 * * * *' for hourly). When set, takes precedence over `healthCheckIntervalMs`. A schedule saved on the dashboard's Settings page replaces this one."
         },
         "databaseProvider": {
             "type": "string",
@@ -163,11 +163,11 @@
                 "sqlite",
                 "postgresql"
             ],
-            "description": "Database backend. Defaults to sqlite (file under ~/.cache/xenon). Use postgresql for multi-node hub deployments."
+            "description": "Database backend. The published plugin stores its data in SQLite only, and each server, hub or node, has its own database. postgresql is accepted so older configs still start, and has no effect: the database URL decides."
         },
         "databaseUrl": {
             "type": "string",
-            "description": "Prisma-style database URL. For sqlite: `file:/path/to/xenon.db`. For postgres: `postgresql://user:pass@host/db`. Falls back to the DATABASE_URL env var."
+            "description": "Where the SQLite database lives, as `file:/path/to/xenon.db`. Falls back to the DATABASE_URL env var, then to a file under ~/.cache/xenon. A PostgreSQL URL stops the server at startup."
         },
         "aiProvider": {
             "type": "string",
@@ -202,27 +202,27 @@
         "enableSelfHealing": {
             "type": "boolean",
             "default": true,
-            "description": "Enable the 5-tier self-healing pipeline (Native → Fuzzy XML → OCR → Visual AI → LLM) for failed findElement calls. Can also be toggled at runtime from the dashboard."
+            "description": "Enable the self-healing pipeline (etalon recovery → Native → Fuzzy XML → OCR → Visual AI → LLM) for failed findElement calls. A value saved with the AI self-healing switch on the dashboard's Settings page replaces this one, and applies from the next command without a restart. A session can limit the tiers it uses with `xe:options.healingTiers`; that cannot turn healing off."
         },
         "buildCleanupDays": {
             "type": "number",
             "default": 30,
-            "description": "Builds/sessions older than this many days are purged by the cleanup job."
+            "description": "Builds/sessions older than this many days are purged by the cleanup job. A value saved on the dashboard's Maintenance page replaces this one, and applies at the next cleanup run without a restart."
         },
         "buildCleanupMaxCount": {
             "type": "number",
             "default": 100,
-            "description": "Maximum number of builds to retain. Oldest-first eviction beyond this cap regardless of `buildCleanupDays`."
+            "description": "Maximum number of builds to retain. Oldest-first eviction beyond this cap regardless of `buildCleanupDays`. A value saved on the dashboard's Maintenance page replaces this one."
         },
         "buildCleanupSchedule": {
             "type": "string",
             "default": "0 0 * * *",
-            "description": "Cron expression for the retention job. Default '0 0 * * *' runs at midnight."
+            "description": "Cron expression for the retention job. Default '0 0 * * *' runs at midnight. A schedule saved on the dashboard's Maintenance page replaces this one, and takes effect at once."
         },
         "deleteBuildAssets": {
             "type": "boolean",
             "default": true,
-            "description": "When true, the cleanup job also deletes session video recordings and screenshots from disk (not just DB rows)."
+            "description": "When true, the cleanup job also deletes session video recordings and screenshots from disk (not just DB rows). A value saved on the dashboard's Maintenance page replaces this one."
         },
         "recordingCleanupDays": {
             "type": "number",
@@ -246,8 +246,7 @@
         },
         "enableJsonLogging": {
             "type": "boolean",
-            "default": false,
-            "description": "Emit structured JSON log lines instead of human-readable text. Recommended for shipping logs to a log aggregator."
+            "description": "Emit structured JSON log lines instead of human-readable text. Recommended for shipping logs to a log aggregator. Off by default. When unset, the XENON_JSON_LOGGING environment variable decides (`true` turns it on); setting this to true or false overrides the variable."
         },
         "tlsRejectUnauthorized": {
             "type": "boolean",
@@ -261,18 +260,17 @@
         },
         "interceptor": {
             "type": "object",
-            "description": "Network request interception configuration (capture + mock + modify). See InterceptorConfig interface for details. Android-only in v1."
+            "description": "Network capture (the interceptor) for sessions on this server's own Android phones: the default each session gets when its own interceptor capability doesn't say. A session's capability wins field by field. Fields: enabled, bufferSize, captureBodies. Android only."
         },
         "maxConcurrentRecordings": {
             "type": "integer",
             "minimum": 1,
             "maximum": 16,
-            "default": 4,
-            "description": "Server-wide hard cap on simultaneous free-form (non-session) screen recordings across all users. Automation session recording is exempt and not counted against this cap."
+            "description": "Server-wide hard cap on simultaneous free-form (non-session) screen recordings across all users. Automation session recording is exempt and not counted against this cap. Default 4. When unset, the XENON_MAX_CONCURRENT_RECORDINGS environment variable is used if it is a whole number of at least 1."
         },
         "recordingsAssetsPath": {
             "type": "string",
-            "description": "Override directory for free-form recording artifacts. Defaults to <sessionAssetsPath>/recordings."
+            "description": "Directory for free-form recording artifacts. When unset, the XENON_RECORDINGS_ASSETS_PATH environment variable is used if it is set, else ~/.cache/xenon/assets/sessions/recordings."
         },
         "autowait": {
             "type": "object",
@@ -288,31 +286,6 @@
             "description": "Record CPU and memory every 2 s for each session on this server's own phones (Android: the app under test and the device; iPhone: device CPU), shown in the session page's Performance panel. Needs the dashboard."
         }
     },
-    "required": [
-        "platform",
-        "androidDeviceType",
-        "iosDeviceType",
-        "skipChromeDownload",
-        "maxSessions",
-        "deviceAvailabilityTimeoutMs",
-        "deviceAvailabilityQueryIntervalMs",
-        "sendNodeDevicesToHubIntervalMs",
-        "checkStaleDevicesIntervalMs",
-        "checkBlockedDevicesIntervalMs",
-        "newCommandTimeoutSec",
-        "bindHostOrIp",
-        "enableDashboard",
-        "bootedSimulators",
-        "removeDevicesFromDatabaseBeforeRunningThePlugin",
-        "healthCheckIntervalMs",
-        "enableSelfHealing",
-        "buildCleanupDays",
-        "buildCleanupMaxCount",
-        "buildCleanupSchedule",
-        "deleteBuildAssets",
-        "sessionHeartbeatIntervalMs",
-        "enableJsonLogging"
-    ],
     "title": "IPluginArgs",
     "type": "object",
     "definitions": {
@@ -474,17 +447,17 @@
                 "enabled": {
                     "type": "boolean",
                     "default": false,
-                    "description": "Enable the network interceptor. Sessions still need to opt in via any of: xe:options.interceptor.enabled=true (or the xenon:options alias), xe:interceptor.enabled=true, appium:interceptor.enabled=true, a bare interceptor.enabled=true cap, or the flat interceptorEnabled cap."
+                    "description": "Capture the network traffic of every Android session on this server that doesn't say otherwise. A session turns capture on or off for itself with its interceptor capability (xe:interceptor.enabled, xe:options.interceptor.enabled, the flat interceptorEnabled, ...), which wins over this. While capture runs, the phone's global HTTP proxy points at Xenon; it is put back when the session ends, however it ends."
                 },
                 "bufferSize": {
                     "type": "number",
                     "default": 1000,
-                    "description": "Maximum number of captured requests to retain in-memory per session before evicting oldest."
+                    "description": "Maximum number of captured requests to retain in-memory per session before evicting oldest. The default for sessions whose interceptor capability doesn't set bufferSize."
                 },
                 "captureBodies": {
                     "type": "boolean",
                     "default": true,
-                    "description": "Whether to capture request/response bodies. Disable for privacy or to reduce memory usage."
+                    "description": "Whether to capture request/response bodies. Disable for privacy or to reduce memory usage. The default for sessions whose interceptor capability doesn't set captureBodies."
                 }
             }
         },

package/lib/src/XenonCapabilityManager.js

@@ -303,11 +303,13 @@ function getXenonCapabilities(caps) {
     // Accept either a structured object (`xe:interceptor: { enabled, mocks, ... }`)
     // or individual flat keys for users who prefer them.
     const interceptorObj = getAnyCap(XENON_CAPABILITIES.INTERCEPTOR, 'interceptor');
+    // `enabled` and `captureBodies` stay undefined when the session doesn't set
+    // them: the server's `interceptor` option decides those
+    // (resolveInterceptorOptions).
     if (interceptorObj && typeof interceptorObj === 'object') {
-        capabilities[XENON_CAPABILITIES.INTERCEPTOR_ENABLED] = !!interceptorObj.enabled;
+        capabilities[XENON_CAPABILITIES.INTERCEPTOR_ENABLED] = flagOrUnset(interceptorObj.enabled);
         capabilities[XENON_CAPABILITIES.INTERCEPTOR_BUFFER_SIZE] = interceptorObj.bufferSize;
-        capabilities[XENON_CAPABILITIES.INTERCEPTOR_CAPTURE_BODIES] =
-            interceptorObj.captureBodies !== false;
+        capabilities[XENON_CAPABILITIES.INTERCEPTOR_CAPTURE_BODIES] = flagOrUnset(interceptorObj.captureBodies);
         capabilities[XENON_CAPABILITIES.INTERCEPTOR_MOCKS] = Array.isArray(interceptorObj.mocks)
             ? interceptorObj.mocks
             : [];
@@ -321,9 +323,9 @@ function getXenonCapabilities(caps) {
     else {
         const enabledFlat = getAnyCap(XENON_CAPABILITIES.INTERCEPTOR_ENABLED, 'interceptorEnabled');
         capabilities[XENON_CAPABILITIES.INTERCEPTOR_ENABLED] =
-            enabledFlat !== undefined ? String(enabledFlat) === 'true' : false;
+            enabledFlat !== undefined ? String(enabledFlat) === 'true' : undefined;
         capabilities[XENON_CAPABILITIES.INTERCEPTOR_BUFFER_SIZE] = getAnyCap(XENON_CAPABILITIES.INTERCEPTOR_BUFFER_SIZE, 'interceptorBufferSize');
-        capabilities[XENON_CAPABILITIES.INTERCEPTOR_CAPTURE_BODIES] = true;
+        capabilities[XENON_CAPABILITIES.INTERCEPTOR_CAPTURE_BODIES] = undefined;
         capabilities[XENON_CAPABILITIES.INTERCEPTOR_MOCKS] = [];
         const includeFlat = getAnyCap(XENON_CAPABILITIES.INTERCEPTOR_INCLUDE_HOSTS, 'interceptorIncludeHosts');
         const excludeFlat = getAnyCap(XENON_CAPABILITIES.INTERCEPTOR_EXCLUDE_HOSTS, 'interceptorExcludeHosts');
@@ -341,3 +343,18 @@ function getXenonCapabilities(caps) {
         `SaveLogs=${capabilities[XENON_CAPABILITIES.SAVE_DEVICE_LOGS]}`);
     return capabilities;
 }
+/** true/false (or 'true'/'false'), undefined when not given; anything else by truthiness. */
+function flagOrUnset(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value === 'boolean')
+        return value;
+    if (typeof value === 'string') {
+        const v = value.trim().toLowerCase();
+        if (v === 'true')
+            return true;
+        if (v === 'false')
+            return false;
+    }
+    return !!value;
+}

package/lib/src/app/openapi/control.yaml

@@ -1483,13 +1483,20 @@ paths:
         refused, and so is a command that fails, **with `200`** and an `error` field instead of
         `output` (the dashboard's terminal prints either).
 
-        - **Android** (`adb shell`): commands starting with `ls`, `ps`, `top`, `dumpsys battery`,
-        `dumpsys wifi`, `dumpsys power`, `whoami`, `getprop`, `pm list packages`, `ip addr`, `cat
-        /proc/meminfo`, `cat /proc/cpuinfo`, `date`, `uptime` or `netstat`.
+        A command must be one of the commands below, word for word, on one line. Where it takes
+        arguments, they are plain words: letters, digits and `._/:=@%+,-`. Anything a shell would
+        interpret (`;`, `|`, `&`, `$`, backticks, quotes, `<`, `>`) is refused.
 
-        - **iOS:** simulator commands `listapps`, `get_app_container`, `list`, `getenv` (through
-        `simctl`); go-ios commands `apps`, `info`, `syslog`, `list`, `deviceinfo`, `diagnostics`;
-        and `ls`, `ps`, `top`, `whoami`, `date`, `uptime`, `netstat`, `id`.
+        - **Android** (`adb shell`): `ls`, `ps`, `top`, `getprop`, `pm list packages`, `ip addr`,
+        `date` and `netstat`, with arguments; `dumpsys battery`, `dumpsys wifi`, `dumpsys power`,
+        `whoami`, `cat /proc/meminfo`, `cat /proc/cpuinfo` and `uptime`, without.
+
+        - **iOS simulator:** `listapps`, and `get_app_container` and `getenv` with arguments
+        (through `simctl`); `ls`, `ps`, `whoami`, `date`, `uptime` and `id` without arguments
+        (spawned in the simulator).
+
+        - **Real iPhone** (go-ios, through the phone's tunnel): `apps` with arguments and `info`
+        without. Xenon names the phone; a command may not pass `--udid`.
 
         Needs the `MEMBER` role and the `devices` scope. Refused with `409` while another user holds
         the device (their live preview or recording) or runs an Appium session on it; admins are
@@ -1639,14 +1646,14 @@ paths:
       operationId: scanDeviceScreen
       summary: Analyse the screen with OCR and AI
       description: >-
-        Screenshots the device, runs OCR over it (every word with its confidence and box) and asks
-        the configured AI provider for a qualitative read of the screen. No Appium session is
-        needed. Slow: allow tens of seconds.
+        Screenshots the device, runs OCR over it (every word with its confidence and box, in the
+        screenshot's pixels) and sends the screenshot to the configured AI provider for a short
+        description of the screen. No Appium session is needed. Slow: allow tens of seconds.
 
 
         If the analysis itself fails (an empty screenshot, OCR failing), the answer is `500` with
-        `{ status: 'error', message }`. If only the AI step fails, the answer is `200` and
-        `ai_insights` is `null`.
+        `{ status: 'error', message }`. If only the AI step fails, or no AI provider is
+        configured, the answer is `200`, `ai_insights` is `null` and `ai_insights_error` says why.
 
 
         Open to watchers. Needs the `MEMBER` role; any scope will do.
@@ -1683,10 +1690,27 @@ paths:
                               y0: 210
                               x1: 188
                               y1: 236
-                      ai_insights:
-                        summary: >-
-                          A sign-in form with email and password fields and a disabled Sign in
-                          button.
+                      ai_insights: >-
+                        A sign-in screen with empty email and password fields and a disabled Sign
+                        in button. No error or dialog is shown.
+                noProvider:
+                  summary: No AI provider configured
+                  value:
+                    status: success
+                    value:
+                      timestamp: '2026-10-04T14:05:22.118Z'
+                      ocr:
+                        text: Sign in
+                        words:
+                          - text: Sign
+                            confidence: 96.2
+                            bbox:
+                              x0: 142
+                              y0: 210
+                              x1: 188
+                              y1: 236
+                      ai_insights: null
+                      ai_insights_error: No AI provider is configured
         '400':
           description: This server has no device manager for the platform, or the udid is malformed.
           content:
@@ -1745,8 +1769,9 @@ paths:
         Runs one of Xenon's AI locator strategies against a fresh screenshot, as a test would with
         `findElement`, without an Appium session.
 
-        - `-custom:ai-text`: OCR; every word containing `selector` (case-insensitive, confidence
-        above 60%).
+        - `-custom:ai-text`: OCR; every place `selector` appears (case-insensitive), within a word
+        or across neighbouring words on one line, so `Sign in` matches; each match read with
+        confidence above 60%.
 
         - `-custom:ai-icon`: the configured AI provider looks for what `selector` describes; at most
         one match, a 40×40 box around the point it names.
@@ -1939,6 +1964,28 @@ paths:
         On a hub, for a node's phone, the request is forwarded to the node, which holds the phone by
         its own rules; on success the hub also marks the phone busy and held by you at once. A cloud
         provider's phone answers `501`.
+
+        One capture runs per Android device. A page that shows MJPEG (a browser that cannot decode
+        H.264, which on plain http it cannot, or a page whose H.264 player failed) sends
+        `player: mjpeg`: the server then starts the MJPEG capture, and first ends an H.264 capture
+        already running for the device, so the two never run together.
+      requestBody:
+        required: false
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                player:
+                  type: string
+                  enum:
+                    - mjpeg
+                  description: >-
+                    Set to `mjpeg` when the page shows MJPEG. Left out, or any other value, the
+                    server chooses: H.264 for an Android device when the setting is on and the
+                    device is not being recorded, MJPEG otherwise.
+            example:
+              player: mjpeg
       responses:
         '200':
           description: The preview is running. `type` says which transport to use.
@@ -2968,10 +3015,14 @@ components:
                           y1:
                             type: number
             ai_insights:
-              type: object
+              type: string
               nullable: true
-              additionalProperties: true
-              description: The AI provider's analysis; null if it was skipped or failed.
+              description: >-
+                The AI provider's description of the screen, in plain text; null when there is no
+                AI provider or its call failed.
+            ai_insights_error:
+              type: string
+              description: Why `ai_insights` is null. Present only then.
     ControlTestLocatorRequest:
       type: object
       required:

package/lib/src/app/openapi/grid.yaml

@@ -141,7 +141,8 @@ paths:
       description: |
         Sets `userBlocked` on a device, so no new session or lease is
         allocated to it. A session already running on it is not affected,
-        and neither is `busy`.
+        and neither is `busy`. The device stays blocked when it disconnects
+        and comes back, through restarts too.
 
         Send both `udid` and `host`, exactly as `GET /api/devices` shows
         them: the device is the row of that udid on that host. Without
@@ -247,7 +248,9 @@ paths:
         Replaces the device's tag list with `tags` (it doesn't append). Tags
         are free-form labels, such as `flaky` or `lab-row-3`, that a lease
         can filter on. The row is chosen by exact `udid` and `host`; a pair
-        that names no device changes nothing and still answers `200`.
+        that names no device is `404` (through 2.13 it changed nothing and
+        answered `200`). The device keeps its tags when it disconnects and
+        comes back, through restarts too.
 
         Needs role `ADMIN` and the `devices` scope.
       tags:
@@ -298,6 +301,14 @@ paths:
           $ref: '#/components/responses/Unauthorized'
         '403':
           $ref: '#/components/responses/Forbidden'
+        '404':
+          description: No device of that udid on that host.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              example:
+                error: Device not found
         '429':
           $ref: '#/components/responses/RateLimited'
   /api/device/{udid}/team:
@@ -307,10 +318,14 @@ paths:
       description: |
         Gives the device to a team, or with `teamId: null` returns it to the
         shared pool, which every member sees. A missing `teamId` counts as
-        null. Every row with this udid changes (on a hub, each node that
+        null. Every device with this udid changes (on a hub, each node that
         reports it), and allocation and live dashboard events follow the new
         team at once.
 
+        A device keeps its team when it disconnects and comes back, through
+        restarts too, and this also moves one of this udid that isn't
+        connected now: a team that one belongs to can't be deleted.
+
         Needs role `ADMIN` and the `admin` scope.
       tags:
         - Devices
@@ -336,7 +351,7 @@ paths:
                   example: clx9k2v0a0000qz8r4h7m3n2p
       responses:
         '200':
-          description: The device's team changed. `updated` is how many rows changed.
+          description: The device's team changed. `updated` is how many devices changed, connected or not.
           content:
             application/json:
               schema:
@@ -432,7 +447,10 @@ paths:
         (`reservedByUserId`), who alone, or an admin, may release or extend
         it. A device already reserved by someone else, or running an Appium
         session, is refused with `409`. The same user under the same
-        `reservedBy` may reserve it again, which restarts the clock.
+        `reservedBy` may reserve it again, which restarts the clock. The
+        reservation lasts until it ends even if the device disconnects or
+        the server restarts meanwhile; one that ended while the device was
+        away is not brought back.
 
         The device is the row of `udid` on `host`, so send both exactly as
         `GET /api/devices` shows them. No such row, or a device outside the