@xenon-device-management/xenon 2.9.2 → 2.10.0

package/lib/public/assets/{webhook-settings-BYuOib-Q.js → webhook-settings-CQoSshBn.js}

@@ -1 +1 @@
-import{t as P,r,X as c,j as e,J as u,A as b,C as U,K as D}from"./index-CzaIyL9t.js";/* empty css                 */import{F as S}from"./FieldGroup-CUmbJZxI.js";import{P as O}from"./page-header-ZdzNEJp9.js";import{T as V}from"./trash-2-u8MlXUBD.js";import{P as x}from"./plus-1k0sxXyU.js";import{C as B}from"./circle-x-BaRKZyz9.js";import{C as H}from"./circle-check-DnQ263fa.js";import{Z as I}from"./zap-BOpUur0M.js";import{A as J}from"./activity-cNHHOKx5.js";const C=[{id:"device_offline",label:"Device offline",icon:U,tone:"red"},{id:"device_new",label:"New device",icon:x,tone:"green"},{id:"session_failed",label:"Session failed",icon:B,tone:"amber"},{id:"selector_health_digest",label:"Selector health digest",icon:D,tone:"green"}],X=["udid","host","name","sessionId","failureReason","eventType","platform"],ae=()=>{const{toast:o}=P(),[g,T]=r.useState([]),[A,w]=r.useState(!0),[l,j]=r.useState(""),[d,k]=r.useState(["device_offline","session_failed"]),[h,f]=r.useState(!1),[v,N]=r.useState(!1),[n,_]=r.useState(!1),[y,m]=r.useState("");r.useEffect(()=>{p()},[]);const p=async()=>{w(!0);try{const s=await c.getWebhookConfigs();T(s||[])}catch(s){console.error("Failed to load webhook configs",s),o("Failed to load webhooks.","error")}finally{w(!1)}},z=async()=>{if(!l.trim()){o("Webhook URL is required.","error");return}if(d.length===0){o("Select at least one trigger event.","error");return}f(!0);try{await c.addWebhookConfig(l.trim(),d,"slack",y||void 0),j(""),m(""),_(!1),k(["device_offline","session_failed"]),await p(),o("Webhook saved.","success")}catch(s){console.error("Failed to add webhook",s),o(`Failed to add webhook: ${s.message||"unknown error"}`,"error")}finally{f(!1)}},E=async(s,t)=>{if(window.confirm(`Remove webhook for "${t}"?`))try{await c.deleteWebhookConfig(s),await p(),o("Webhook removed.","success")}catch(a){console.error("Failed to delete webhook",a),o(`Failed to delete: ${a.message||"unknown error"}`,"error")}},L=async()=>{if(l.trim()){N(!0);try{await c.testWebhook(l.trim(),"slack"),o("Test payload delivered.","success")}catch(s){o(`Test failed: ${s.message||"check the URL"}`,"error")}finally{N(!1)}}},$=s=>{k(t=>t.includes(s)?t.filter(a=>a!==s):[...t,s])},R=s=>{m(t=>t+`{{${s}}} `)};return e.jsxs("div",{className:"settings-container",children:[e.jsx(O,{icon:u,title:"Notifications",subtitle:"Configure Slack or generic webhooks to receive alerts for critical infrastructure events."}),e.jsxs("div",{className:"settings-content",children:[A?e.jsxs("div",{className:"settings-loading",style:{height:200},children:[e.jsx(b,{className:"animate-spin",size:28}),e.jsx("span",{children:"Loading webhooks…"})]}):g.length===0?e.jsxs("div",{className:"empty-state",children:[e.jsx("div",{className:"empty-state__icon",children:e.jsx(u,{size:28})}),e.jsx("h3",{className:"empty-state__title",children:"No webhooks configured"}),e.jsx("p",{className:"empty-state__copy",children:"Wire up a Slack incoming webhook or any HTTPS endpoint to receive alerts when devices go offline, new devices register, or sessions fail. Configure your first webhook below."})]}):e.jsx("div",{className:"webhook-list-grid",children:g.map(s=>{const t=(()=>{try{return JSON.parse(s.events)}catch{return[]}})();return e.jsxs("div",{className:"webhook-row-card",children:[e.jsxs("div",{className:"webhook-row-card__header",children:[e.jsx("span",{className:`pill-chip ${s.payloadTemplate?"pill-chip--admin":"pill-chip--scope"}`,children:s.payloadTemplate?"CUSTOM":"SLACK"}),e.jsx("span",{className:"webhook-row-card__url",title:s.url,children:s.url}),e.jsxs("button",{type:"button",className:"row-action row-action--danger",onClick:()=>E(s.id,s.url),"aria-label":`Remove webhook for ${s.url}`,children:[e.jsx(V,{size:13}),e.jsx("span",{children:"Remove"})]})]}),e.jsx("div",{className:"webhook-row-card__events",children:t.length===0?e.jsx("span",{className:"webhook-row-card__no-events",children:"No triggers"}):t.map(a=>{const i=C.find(F=>F.id===a),W=(i==null?void 0:i.icon)??u;return e.jsxs("span",{className:`event-pill event-pill--${(i==null?void 0:i.tone)||"gray"}`,children:[e.jsx(W,{size:11}),(i==null?void 0:i.label)||a]},a)})})]},s.id)})}),e.jsxs("div",{className:"add-webhook-card",children:[e.jsxs("div",{className:"add-webhook-card__header",children:[e.jsx(x,{size:14}),e.jsx("span",{children:"Add a new webhook"})]}),e.jsxs("div",{className:"add-webhook-card__body",children:[e.jsx(S,{label:"Webhook URL",description:"The endpoint we POST webhook events to.",htmlFor:"webhook-url",children:e.jsx("div",{className:"setting-input-wrapper",children:e.jsx("input",{id:"webhook-url",type:"url",placeholder:"https://hooks.slack.com/services/...",value:l,onChange:s=>j(s.target.value)})})}),e.jsx(S,{label:"Trigger events",children:e.jsx("div",{className:"event-toggle-grid",children:C.map(s=>{const t=d.includes(s.id),a=s.icon;return e.jsxs("button",{type:"button",role:"checkbox","aria-checked":t,className:`event-toggle event-toggle--${s.tone} ${t?"is-selected":""}`,onClick:()=>$(s.id),children:[e.jsx(a,{size:14,className:"event-toggle__lead"}),e.jsx("span",{children:s.label}),t&&e.jsx(H,{size:14,className:"event-toggle__check"})]},s.id)})})}),e.jsxs("div",{className:"template-section",children:[e.jsxs("button",{type:"button",className:"template-section__toggle",onClick:()=>_(!n),"aria-expanded":n,children:[e.jsx(I,{size:14,className:n?"tone-amber":"tone-dim"}),e.jsx("span",{children:"Use custom payload (optional)"}),e.jsx("span",{className:"template-section__indicator",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"template-editor",children:[e.jsx("p",{className:"template-editor__hint",children:"Define a JSON or text template. Click a variable below to insert it."}),e.jsx("div",{className:"template-editor__chips",children:X.map(s=>e.jsx("button",{type:"button",className:"template-editor__chip",onClick:()=>R(s),children:`{{${s}}}`},s))}),e.jsx("textarea",{className:"template-editor__textarea",placeholder:'Example: { "text": "Alert: Device {{udid}} is offline!" }',value:y,onChange:s=>m(s.target.value),rows:4})]})]})]}),e.jsxs("div",{className:"add-webhook-card__footer",children:[e.jsxs("button",{type:"button",className:"page-header-action page-header-action--ghost",onClick:L,disabled:!l.trim()||v,children:[v?e.jsx(b,{size:14,className:"animate-spin"}):e.jsx(J,{size:14}),e.jsx("span",{children:"Test payload"})]}),e.jsxs("button",{type:"button",className:"page-header-action",onClick:z,disabled:h||!l.trim(),children:[h?e.jsx(b,{size:14,className:"animate-spin"}):e.jsx(x,{size:14}),e.jsx("span",{children:h?"Saving…":"Save webhook"})]})]})]})]})]})};export{ae as WebhookSettings};
+import{t as P,r,X as c,j as e,J as u,A as b,C as U,K as D}from"./index-EkaQM1DK.js";/* empty css                 */import{F as S}from"./FieldGroup-mbfnfTql.js";import{P as O}from"./page-header-DoD3TOzZ.js";import{T as V}from"./trash-2-CJCKBOP9.js";import{P as x}from"./plus-BGvWvpBB.js";import{C as B}from"./circle-x-BZbFCixZ.js";import{C as H}from"./circle-check-CfP79QE2.js";import{Z as I}from"./zap-CICtWiLn.js";import{A as J}from"./activity-C9bE7Jm8.js";const C=[{id:"device_offline",label:"Device offline",icon:U,tone:"red"},{id:"device_new",label:"New device",icon:x,tone:"green"},{id:"session_failed",label:"Session failed",icon:B,tone:"amber"},{id:"selector_health_digest",label:"Selector health digest",icon:D,tone:"green"}],X=["udid","host","name","sessionId","failureReason","eventType","platform"],ae=()=>{const{toast:o}=P(),[g,T]=r.useState([]),[A,w]=r.useState(!0),[l,j]=r.useState(""),[d,k]=r.useState(["device_offline","session_failed"]),[h,f]=r.useState(!1),[v,N]=r.useState(!1),[n,_]=r.useState(!1),[y,m]=r.useState("");r.useEffect(()=>{p()},[]);const p=async()=>{w(!0);try{const s=await c.getWebhookConfigs();T(s||[])}catch(s){console.error("Failed to load webhook configs",s),o("Failed to load webhooks.","error")}finally{w(!1)}},z=async()=>{if(!l.trim()){o("Webhook URL is required.","error");return}if(d.length===0){o("Select at least one trigger event.","error");return}f(!0);try{await c.addWebhookConfig(l.trim(),d,"slack",y||void 0),j(""),m(""),_(!1),k(["device_offline","session_failed"]),await p(),o("Webhook saved.","success")}catch(s){console.error("Failed to add webhook",s),o(`Failed to add webhook: ${s.message||"unknown error"}`,"error")}finally{f(!1)}},E=async(s,t)=>{if(window.confirm(`Remove webhook for "${t}"?`))try{await c.deleteWebhookConfig(s),await p(),o("Webhook removed.","success")}catch(a){console.error("Failed to delete webhook",a),o(`Failed to delete: ${a.message||"unknown error"}`,"error")}},L=async()=>{if(l.trim()){N(!0);try{await c.testWebhook(l.trim(),"slack"),o("Test payload delivered.","success")}catch(s){o(`Test failed: ${s.message||"check the URL"}`,"error")}finally{N(!1)}}},$=s=>{k(t=>t.includes(s)?t.filter(a=>a!==s):[...t,s])},R=s=>{m(t=>t+`{{${s}}} `)};return e.jsxs("div",{className:"settings-container",children:[e.jsx(O,{icon:u,title:"Notifications",subtitle:"Configure Slack or generic webhooks to receive alerts for critical infrastructure events."}),e.jsxs("div",{className:"settings-content",children:[A?e.jsxs("div",{className:"settings-loading",style:{height:200},children:[e.jsx(b,{className:"animate-spin",size:28}),e.jsx("span",{children:"Loading webhooks…"})]}):g.length===0?e.jsxs("div",{className:"empty-state",children:[e.jsx("div",{className:"empty-state__icon",children:e.jsx(u,{size:28})}),e.jsx("h3",{className:"empty-state__title",children:"No webhooks configured"}),e.jsx("p",{className:"empty-state__copy",children:"Wire up a Slack incoming webhook or any HTTPS endpoint to receive alerts when devices go offline, new devices register, or sessions fail. Configure your first webhook below."})]}):e.jsx("div",{className:"webhook-list-grid",children:g.map(s=>{const t=(()=>{try{return JSON.parse(s.events)}catch{return[]}})();return e.jsxs("div",{className:"webhook-row-card",children:[e.jsxs("div",{className:"webhook-row-card__header",children:[e.jsx("span",{className:`pill-chip ${s.payloadTemplate?"pill-chip--admin":"pill-chip--scope"}`,children:s.payloadTemplate?"CUSTOM":"SLACK"}),e.jsx("span",{className:"webhook-row-card__url",title:s.url,children:s.url}),e.jsxs("button",{type:"button",className:"row-action row-action--danger",onClick:()=>E(s.id,s.url),"aria-label":`Remove webhook for ${s.url}`,children:[e.jsx(V,{size:13}),e.jsx("span",{children:"Remove"})]})]}),e.jsx("div",{className:"webhook-row-card__events",children:t.length===0?e.jsx("span",{className:"webhook-row-card__no-events",children:"No triggers"}):t.map(a=>{const i=C.find(F=>F.id===a),W=(i==null?void 0:i.icon)??u;return e.jsxs("span",{className:`event-pill event-pill--${(i==null?void 0:i.tone)||"gray"}`,children:[e.jsx(W,{size:11}),(i==null?void 0:i.label)||a]},a)})})]},s.id)})}),e.jsxs("div",{className:"add-webhook-card",children:[e.jsxs("div",{className:"add-webhook-card__header",children:[e.jsx(x,{size:14}),e.jsx("span",{children:"Add a new webhook"})]}),e.jsxs("div",{className:"add-webhook-card__body",children:[e.jsx(S,{label:"Webhook URL",description:"The endpoint we POST webhook events to.",htmlFor:"webhook-url",children:e.jsx("div",{className:"setting-input-wrapper",children:e.jsx("input",{id:"webhook-url",type:"url",placeholder:"https://hooks.slack.com/services/...",value:l,onChange:s=>j(s.target.value)})})}),e.jsx(S,{label:"Trigger events",children:e.jsx("div",{className:"event-toggle-grid",children:C.map(s=>{const t=d.includes(s.id),a=s.icon;return e.jsxs("button",{type:"button",role:"checkbox","aria-checked":t,className:`event-toggle event-toggle--${s.tone} ${t?"is-selected":""}`,onClick:()=>$(s.id),children:[e.jsx(a,{size:14,className:"event-toggle__lead"}),e.jsx("span",{children:s.label}),t&&e.jsx(H,{size:14,className:"event-toggle__check"})]},s.id)})})}),e.jsxs("div",{className:"template-section",children:[e.jsxs("button",{type:"button",className:"template-section__toggle",onClick:()=>_(!n),"aria-expanded":n,children:[e.jsx(I,{size:14,className:n?"tone-amber":"tone-dim"}),e.jsx("span",{children:"Use custom payload (optional)"}),e.jsx("span",{className:"template-section__indicator",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"template-editor",children:[e.jsx("p",{className:"template-editor__hint",children:"Define a JSON or text template. Click a variable below to insert it."}),e.jsx("div",{className:"template-editor__chips",children:X.map(s=>e.jsx("button",{type:"button",className:"template-editor__chip",onClick:()=>R(s),children:`{{${s}}}`},s))}),e.jsx("textarea",{className:"template-editor__textarea",placeholder:'Example: { "text": "Alert: Device {{udid}} is offline!" }',value:y,onChange:s=>m(s.target.value),rows:4})]})]})]}),e.jsxs("div",{className:"add-webhook-card__footer",children:[e.jsxs("button",{type:"button",className:"page-header-action page-header-action--ghost",onClick:L,disabled:!l.trim()||v,children:[v?e.jsx(b,{size:14,className:"animate-spin"}):e.jsx(J,{size:14}),e.jsx("span",{children:"Test payload"})]}),e.jsxs("button",{type:"button",className:"page-header-action",onClick:z,disabled:h||!l.trim(),children:[h?e.jsx(b,{size:14,className:"animate-spin"}):e.jsx(x,{size:14}),e.jsx("span",{children:h?"Saving…":"Save webhook"})]})]})]})]})]})};export{ae as WebhookSettings};

package/lib/public/assets/{zap-BOpUur0M.js → zap-CICtWiLn.js}

@@ -1,4 +1,4 @@
-import{c as a}from"./index-CzaIyL9t.js";/**
+import{c as a}from"./index-EkaQM1DK.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/lib/public/index.html

@@ -36,8 +36,8 @@
       Learn how to configure a non-root public URL by running `npm run build`.
     -->
   <title>Xenon</title>
-  <script type="module" crossorigin src="/xenon/assets/index-CzaIyL9t.js"></script>
-  <link rel="stylesheet" crossorigin href="/xenon/assets/index-C8pvxG1f.css">
+  <script type="module" crossorigin src="/xenon/assets/index-EkaQM1DK.js"></script>
+  <link rel="stylesheet" crossorigin href="/xenon/assets/index-DQa193-A.css">
 </head>
 
 <body>

package/lib/schema.json

@@ -281,6 +281,11 @@
         "streaming": {
             "type": "object",
             "description": "Live-streaming options. See StreamingConfig interface for details."
+        },
+        "sessionMetrics": {
+            "type": "boolean",
+            "default": true,
+            "description": "Record CPU and memory every 2 s for each session on this server's own phones (Android: the app under test and the device; iPhone: device CPU), shown in the session page's Performance panel. Needs the dashboard."
         }
     },
     "required": [

package/lib/src/app/routers/dashboard.js

@@ -45,6 +45,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.MUTE_REASON_MAX = void 0;
 exports.getRecentHealingEvents = getRecentHealingEvents;
 exports.aggregateHotspots = aggregateHotspots;
 exports.getSelectorHealth = getSelectorHealth;
@@ -59,12 +60,18 @@ const typedi_1 = require("typedi");
 const scopeGuard_1 = require("../../middleware/scopeGuard");
 const roleGuard_1 = require("../../middleware/roleGuard");
 const build_export_1 = __importDefault(require("./build-export"));
+const selector_health_1 = __importDefault(require("./selector-health"));
+const actor_1 = require("../../services/device-access/actor");
+const access_1 = require("../../services/selector-health/access");
 const NotificationService_1 = require("../../services/NotificationService");
 const SelectorStateService_1 = require("../../services/SelectorStateService");
 const path_1 = __importDefault(require("path"));
 const config_1 = require("../../config");
 const sessionVisibility_1 = require("../../services/device-access/sessionVisibility");
 const HealEtalonService_1 = require("../../services/healing/HealEtalonService");
+const metricsBody_1 = require("../../services/metrics/metricsBody");
+const healingTrend_1 = require("../../services/selector-health/healingTrend");
+const SessionMetricsService_1 = require("../../services/metrics/SessionMetricsService");
 const sessionInsights_1 = require("./sessionInsights");
 const logger_1 = __importDefault(require("../../logger"));
 const MJPEG_PROXY_CACHE = new Map();
@@ -324,26 +331,6 @@ function getRecentHealingEvents(request, response) {
         return response.status(200).json({ events, todayCount });
     });
 }
-// Rough per-heal cost estimates in USD. Local tiers are effectively free
-// (CPU/inference cost only); LLM is the headline number testers should
-// optimize against. Surfaced so engineering managers can quantify suite
-// hygiene work without reading raw billing data.
-const TIER_COST_USD = {
-    Native: 0,
-    Resilio: 0,
-    'Fuzzy XML': 0,
-    OCR: 0.0005,
-    'Visual AI': 0.002,
-    LLM: 0.04,
-};
-function estimateCost(byTier) {
-    var _a;
-    let sum = 0;
-    for (const [tier, count] of Object.entries(byTier)) {
-        sum += ((_a = TIER_COST_USD[tier]) !== null && _a !== void 0 ? _a : 0) * count;
-    }
-    return sum;
-}
 function parseWindowDays(raw, fallback = 30) {
     const n = parseInt(typeof raw === 'string' ? raw : '', 10);
     if (!Number.isFinite(n))
@@ -355,6 +342,7 @@ function parseWindowDays(raw, fallback = 30) {
 function getHealingSummary(request, response) {
     return __awaiter(this, void 0, void 0, function* () {
         const windowDays = parseWindowDays(request.query.windowDays);
+        const tz = (0, healingTrend_1.parseTzOffset)(request.query.tz);
         const now = new Date();
         const since = new Date(now);
         since.setDate(since.getDate() - windowDays);
@@ -370,6 +358,8 @@ function getHealingSummary(request, response) {
                     session_id: true,
                     original_selector: true,
                     healing_tier: true,
+                    createdAt: true,
+                    duration: true,
                 },
             }),
             prisma_1.prisma.sessionLog.findMany({
@@ -378,15 +368,20 @@ function getHealingSummary(request, response) {
                     session_id: true,
                     original_selector: true,
                     healing_tier: true,
+                    createdAt: true,
+                    duration: true,
                 },
             }),
         ]);
         const aggregate = (rows) => {
+            var _a;
             const sessions = new Set();
             const selectors = new Set();
             const byTier = {};
+            let timeSpentMs = 0;
             for (const r of rows) {
                 sessions.add(r.session_id);
+                timeSpentMs += (_a = r.duration) !== null && _a !== void 0 ? _a : 0;
                 if (r.original_selector)
                     selectors.add(r.original_selector);
                 const tier = r.healing_tier || 'Unknown';
@@ -397,7 +392,8 @@ function getHealingSummary(request, response) {
                 distinctSelectors: selectors.size,
                 sessionsTouched: sessions.size,
                 byTier,
-                estCostUsd: estimateCost(byTier),
+                // The commands that needed healing, start to end: what healing cost the run.
+                timeSpentMs,
             };
         };
         const current = aggregate(currentRows);
@@ -417,6 +413,7 @@ function getHealingSummary(request, response) {
             prior,
             resolvedCount,
             pendingCount,
+            trend: (0, healingTrend_1.dailyHeals)(currentRows.map((r) => ({ at: r.createdAt, method: r.healing_tier })), since, now, tz),
         });
     });
 }
@@ -624,7 +621,6 @@ function aggregateHotspots(opts) {
             distinctSelectors: buckets.size,
             sessionsTouched: sessionsTouched.size,
             byTier,
-            estCostUsd: estimateCost(byTier),
             hotspots,
         };
     });
@@ -660,7 +656,6 @@ function getHealingViolations(request, response) {
             violationCount: agg.hotspots.length,
             totalHeals: agg.totalHeals,
             distinctSelectors: agg.distinctSelectors,
-            estCostUsd: agg.estCostUsd,
             violations: agg.hotspots,
         });
     });
@@ -685,7 +680,6 @@ function sendHealingDigest(request, response) {
             windowDays,
             totalHeals: agg.totalHeals,
             distinctSelectors: agg.distinctSelectors,
-            estCostUsd: agg.estCostUsd,
             hotspots: agg.hotspots,
         };
         const notifier = typedi_1.Container.get(NotificationService_1.NotificationService);
@@ -801,7 +795,6 @@ function getHealingSelectorDetail(request, response) {
             windowDays,
             healCount: rows.length,
             sessionCount: sessions.size,
-            estCostUsd: estimateCost(byTier),
             byTier,
             byPlatform,
             byBuild: Object.entries(byBuild)
@@ -878,14 +871,24 @@ function getSelectorHealth(request, response) {
 }
 // SelectorState lifecycle action endpoint — mark fixed / mute / unmute /
 // cancel verification. The action vocabulary is closed (any value not in
-// VALID_ACTIONS rejects with 400). A SelectorStateConflictError surfaces as
-// 409 with `currentStatus`; anything else logs and surfaces as 500.
+// VALID_ACTIONS rejects with 400). A member may act on a selector they can
+// see (healed in a session they can see); any other answers 404, as an
+// unknown one. The person acting is recorded (SelectorEvent), with the
+// reason for a mute. A SelectorStateConflictError surfaces as 409 with
+// `currentStatus`; anything else logs and surfaces as 500.
 const VALID_SELECTOR_ACTIONS = ['mark_fixed', 'mute', 'unmute', 'cancel_verification'];
+/** The longest reason a mute may give. */
+exports.MUTE_REASON_MAX = 500;
 function postSelectorStateAction(request, response) {
     return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b, _c, _d;
-        const { original_strategy, original_selector, action } = ((_a = request.body) !== null && _a !== void 0 ? _a : {});
-        if (!original_strategy || !original_selector || !action) {
+        var _a, _b, _c, _d, _e;
+        const { original_strategy, original_selector, action, reason } = ((_a = request.body) !== null && _a !== void 0 ? _a : {});
+        // The strategy may be '': heals recorded before strategies were.
+        if (typeof original_strategy !== 'string' ||
+            typeof original_selector !== 'string' ||
+            !original_selector ||
+            typeof action !== 'string' ||
+            !action) {
             return response.status(400).json({
                 error: 'original_strategy, original_selector, and action are required',
             });
@@ -895,10 +898,29 @@ function postSelectorStateAction(request, response) {
                 error: `action must be one of ${VALID_SELECTOR_ACTIONS.join(', ')}`,
             });
         }
-        const apiKeyId = (_c = (_b = request.apiKey) === null || _b === void 0 ? void 0 : _b.id) !== null && _c !== void 0 ? _c : '';
-        const ctx = { strategy: original_strategy, selector: original_selector, apiKeyId };
+        if (reason !== undefined &&
+            reason !== null &&
+            (typeof reason !== 'string' || reason.length > exports.MUTE_REASON_MAX)) {
+            return response.status(400).json({
+                error: `reason must be text of at most ${exports.MUTE_REASON_MAX} characters`,
+            });
+        }
+        const muteReason = action === 'mute' && typeof reason === 'string' ? reason.trim() : '';
+        const ctx = {
+            strategy: original_strategy,
+            selector: original_selector,
+            apiKeyId: (_c = (_b = request.apiKey) === null || _b === void 0 ? void 0 : _b.id) !== null && _c !== void 0 ? _c : '',
+            userId: (_d = (0, actor_1.resolveActor)(request).userId) !== null && _d !== void 0 ? _d : null,
+            reason: muteReason || null,
+        };
         const service = typedi_1.Container.get(SelectorStateService_1.SelectorStateService);
         try {
+            // Inside the try: a failed lookup answers 500 rather than leaving the
+            // request open (Express 4 doesn't catch a rejected handler).
+            const scope = (yield (0, sessionVisibility_1.visibleSessionWhere)(authOf(request)));
+            if (!(yield (0, access_1.canSeeSelector)({ strategy: original_strategy, selector: original_selector }, scope))) {
+                return response.status(404).json(access_1.SELECTOR_NOT_FOUND);
+            }
             let row;
             switch (action) {
                 case 'mark_fixed':
@@ -920,7 +942,7 @@ function postSelectorStateAction(request, response) {
             if (err instanceof SelectorStateService_1.SelectorStateConflictError) {
                 return response.status(409).json({ error: err.message, currentStatus: err.currentStatus });
             }
-            logger_1.default.error(`[Dashboard] selector state action failed: ${(_d = err === null || err === void 0 ? void 0 : err.message) !== null && _d !== void 0 ? _d : err}`);
+            logger_1.default.error(`[Dashboard] selector state action failed: ${(_e = err === null || err === void 0 ? void 0 : err.message) !== null && _e !== void 0 ? _e : err}`);
             return response.status(500).json({ error: 'internal' });
         }
     });
@@ -1028,6 +1050,27 @@ function getProfilingData(request, response) {
         return response.status(200).json(profilingData);
     });
 }
+/** A session's CPU and memory samples, for the Performance panel. */
+function getSessionMetrics(request, response) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const sessionId = request.params.sessionId;
+        const [session, rows] = yield Promise.all([
+            prisma_1.prisma.session.findFirst({
+                where: { id: sessionId },
+                select: { device_platform: true, status: true },
+            }),
+            prisma_1.prisma.sessionMetric.findMany({ where: { session_id: sessionId }, orderBy: { at: 'asc' } }),
+        ]);
+        // A running session's page says whether it is sampled, not "Collecting…" for one nothing samples.
+        const recording = (session === null || session === void 0 ? void 0 : session.status) === 'running'
+            ? typedi_1.Container.get(SessionMetricsService_1.SessionMetricsService).recordingState(sessionId)
+            : null;
+        return response
+            .status(200)
+            .json((0, metricsBody_1.sessionMetricsBody)((_a = session === null || session === void 0 ? void 0 : session.device_platform) !== null && _a !== void 0 ? _a : '', rows, recording));
+    });
+}
 function streamLiveSessionVideo(request, response) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a;
@@ -1140,6 +1183,7 @@ function register(router) {
     router.get('/session/:sessionId/logs/device', getDeviceLogs);
     router.get('/session/:sessionId/logs/debug', getDebugLogs);
     router.get('/session/:sessionId/profiling', getProfilingData);
+    router.get('/session/:sessionId/metrics', getSessionMetrics);
     router.get('/session/:sessionId/asset/:kind/:file', getSessionAsset);
     // The healing reads count only heals from sessions the caller may see
     // (visibleSessionWhere); the digest below counts every team's.
@@ -1149,16 +1193,18 @@ function register(router) {
     router.get('/healing/hotspots/violations', getHealingViolations);
     router.get('/healing/selector', getHealingSelectorDetail);
     router.get('/healing/selector-health', getSelectorHealth);
+    // The Selector Health page's list and panel (selector-health.ts).
+    selector_health_1.default.register(router);
     // Outbound notification — admin only since it can fan out to every
     // configured webhook (Slack channels, etc.).
     router.post('/healing/digest/send', (0, roleGuard_1.roleGuard)('ADMIN'), (0, scopeGuard_1.scopeGuard)(['admin']), sendHealingDigest);
-    // SelectorState lifecycle: state mutations require admin (they affect what
-    // shows up in the live hotspot list, the CI gate, and the digest); the two
-    // reads inherit the existing dashboard auth. Both reads stay global, not
-    // team-scoped: a selector's mute or fix is one lab-wide row with no team
-    // column, shared by every team whose tests use that selector. The one
-    // heal-derived field, the muted list's `last_healed_at`, is the caller's.
-    router.post('/healing/selector/state', (0, roleGuard_1.roleGuard)('ADMIN'), (0, scopeGuard_1.scopeGuard)(['admin']), postSelectorStateAction);
+    // SelectorState lifecycle: members act on selectors they can see (the
+    // handler checks, and records who acted); the `sessions` scope is needed,
+    // which `admin` implies. The two reads stay global, not team-scoped: a
+    // selector's mute or fix is one lab-wide row with no team column, shared
+    // by every team whose tests use that selector. The one heal-derived field,
+    // the muted list's `last_healed_at`, is the caller's.
+    router.post('/healing/selector/state', (0, roleGuard_1.roleGuard)('MEMBER'), (0, scopeGuard_1.scopeGuard)(['sessions']), postSelectorStateAction);
     router.get('/healing/state/muted', getMutedSelectors);
     router.get('/healing/state/:strategy/:value', getSelectorStateByTuple);
     router.get('/config', getGlobalConfig);

package/lib/src/app/routers/selector-health.js

@@ -0,0 +1,75 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.callerOf = void 0;
+exports.scopeOf = scopeOf;
+exports.getSelectorList = getSelectorList;
+exports.getSelectorDetail = getSelectorDetail;
+const logger_1 = __importDefault(require("../../logger"));
+const sessionVisibility_1 = require("../../services/device-access/sessionVisibility");
+const access_1 = require("../../services/selector-health/access");
+const selectorDetail_1 = require("../../services/selector-health/selectorDetail");
+const selectorList_1 = require("../../services/selector-health/selectorList");
+const callerOf = (request) => request.auth;
+exports.callerOf = callerOf;
+/** The caller's sessions as a Session `where`; undefined for an admin, or with auth disabled. */
+function scopeOf(request) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return (yield (0, sessionVisibility_1.visibleSessionWhere)((0, exports.callerOf)(request)));
+    });
+}
+/** One tab of Selector Health's list, the four tab counts, and whether the caller may act. */
+function getSelectorList(request, response) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        try {
+            const query = (0, selectorList_1.parseSelectorListQuery)(request.query);
+            const answer = yield (0, selectorList_1.listSelectors)(query, yield scopeOf(request));
+            return response
+                .status(200)
+                .json(Object.assign(Object.assign({}, answer), { canAct: (0, access_1.canActOnSelectors)((_a = (0, exports.callerOf)(request)) === null || _a === void 0 ? void 0 : _a.scopes) }));
+        }
+        catch (err) {
+            logger_1.default.error(`[SelectorHealth] list failed: ${(_b = err === null || err === void 0 ? void 0 : err.message) !== null && _b !== void 0 ? _b : err}`);
+            return response.status(500).json({ error: 'internal' });
+        }
+    });
+}
+/** Everything the side panel shows for one selector, and whether the caller may act on it. */
+function getSelectorDetail(request, response) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        const query = (0, selectorDetail_1.parseSelectorDetailQuery)(request.query);
+        if (!query) {
+            return response.status(400).json({ error: 'bad_request', message: 'selector is required' });
+        }
+        try {
+            const detail = yield (0, selectorDetail_1.selectorDetail)(query, yield scopeOf(request));
+            if (!detail)
+                return response.status(404).json(access_1.SELECTOR_NOT_FOUND);
+            return response
+                .status(200)
+                .json(Object.assign(Object.assign({}, detail), { canAct: (0, access_1.canActOnSelectors)((_a = (0, exports.callerOf)(request)) === null || _a === void 0 ? void 0 : _a.scopes) }));
+        }
+        catch (err) {
+            logger_1.default.error(`[SelectorHealth] detail failed: ${(_b = err === null || err === void 0 ? void 0 : err.message) !== null && _b !== void 0 ? _b : err}`);
+            return response.status(500).json({ error: 'internal' });
+        }
+    });
+}
+function register(router) {
+    router.get('/healing/selectors', getSelectorList);
+    router.get('/healing/selectors/detail', getSelectorDetail);
+}
+exports.default = { register };

package/lib/src/app/swagger-docs.js

@@ -218,11 +218,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
  *   post:
  *     summary: Apply a lifecycle action to a selector
  *     description: |
- *       Mutates the SelectorState row for a (strategy, selector) tuple.
- *       Actions are bounded — `mark_fixed`, `mute`, `unmute`,
- *       `cancel_verification`. Returns 409 with `currentStatus` if the
- *       action is incompatible with the row's current state (e.g.
- *       mark_fixed on a muted selector).
+ *       Mutates the SelectorState row for a (strategy, selector) tuple and
+ *       records the change, with the person, in SelectorEvent. Actions are
+ *       bounded — `mark_fixed`, `mute`, `unmute`, `cancel_verification`.
+ *       Members and admins may act on a selector healed in a session they
+ *       can see; any other answers 404, as an unknown one. Needs the
+ *       `sessions` scope (`admin` implies it). `original_strategy` may be
+ *       empty, for heals recorded with no strategy. Returns 409 with
+ *       `currentStatus` if the action is incompatible with the row's
+ *       current state (e.g. mark_fixed on a muted selector).
  *     tags: [Selector Health]
  *     security:
  *       - apiKey: []
@@ -243,13 +247,16 @@ Object.defineProperty(exports, "__esModule", { value: true });
  *               action:
  *                 type: string
  *                 enum: [mark_fixed, mute, unmute, cancel_verification]
+ *               reason: { type: string, maxLength: 500, description: 'Why the selector is muted; mute only' }
  *     responses:
  *       200:
  *         description: Updated SelectorState row
  *       400:
- *         description: Missing fields or unknown action
+ *         description: Missing fields, unknown action, or a reason over 500 characters
  *       403:
- *         description: API key lacks `admin` scope
+ *         description: The caller lacks the `sessions` scope
+ *       404:
+ *         description: '`{ error: "not_found", message: "Selector not found" }`'
  *       409:
  *         description: Action conflicts with current state (returns currentStatus)
  *       401: { $ref: '#/components/responses/Unauthorized' }
@@ -1221,6 +1228,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
  *       - in: query
  *         name: windowDays
  *         schema: { type: integer, minimum: 1, maximum: 365, default: 30 }
+ *       - in: query
+ *         name: tz
+ *         schema: { type: integer, minimum: -840, maximum: 840, default: 0 }
+ *         description: "The caller's offset from UTC in minutes (east positive), so `trend` days are theirs"
  *     responses:
  *       200:
  *         description: KPI summary
@@ -1237,15 +1248,73 @@ Object.defineProperty(exports, "__esModule", { value: true });
  *                     distinctSelectors: { type: integer }
  *                     sessionsTouched: { type: integer }
  *                     byTier: { type: object, additionalProperties: { type: integer } }
- *                     estCostUsd: { type: number }
+ *                     timeSpentMs: { type: integer, description: 'Total duration of the commands that needed healing' }
  *                 prior:
  *                   type: object
  *                   description: 'Same shape as `current` for the immediately preceding window'
  *                 resolvedCount: { type: integer }
  *                 pendingCount: { type: integer }
+ *                 trend:
+ *                   type: array
+ *                   description: 'Heals per day of the period, in the caller''s time zone, days with none included'
+ *                   items:
+ *                     type: object
+ *                     properties:
+ *                       t: { type: integer, description: 'When the day began, epoch ms' }
+ *                       heals: { type: integer }
+ *                       aiHeals: { type: integer, description: 'Heals by Visual AI or an LLM' }
  *       401: { $ref: '#/components/responses/Unauthorized' }
  *       429: { $ref: '#/components/responses/RateLimited' }
  */
+/**
+ * @swagger
+ * /api/healing/selectors:
+ *   get:
+ *     summary: One tab of the Selector Health list
+ *     description: |
+ *       `fix` groups the period's heals by selector and leaves out selectors
+ *       being verified, fixed or muted; the other tabs list the selectors with
+ *       that status (`fixed`: verified within the period). Only selectors
+ *       healed, at any time, in sessions the caller can see. `counts` follow
+ *       the period, not the search or filters. A page past the end answers the
+ *       last page.
+ *     tags: [Selector Health]
+ *     parameters:
+ *       - { in: query, name: tab, schema: { type: string, enum: [fix, verifying, fixed, muted], default: fix } }
+ *       - { in: query, name: days, schema: { type: integer, minimum: 1, maximum: 365, default: 30 } }
+ *       - { in: query, name: q, schema: { type: string }, description: 'Text in the selector, or (fix) in its suggested fix' }
+ *       - { in: query, name: platform, schema: { type: string }, description: 'fix only' }
+ *       - { in: query, name: method, schema: { type: string }, description: 'Healing method, e.g. LLM; fix only' }
+ *       - { in: query, name: sort, schema: { type: string, enum: [heals, recent, time], default: heals }, description: 'fix only' }
+ *       - { in: query, name: page, schema: { type: integer, minimum: 1, default: 1 } }
+ *       - { in: query, name: pageSize, schema: { type: integer, minimum: 1, maximum: 100, default: 50 } }
+ *     responses:
+ *       200: { description: '`{ tab, days, page, pageSize, total, counts, canAct, items }`' }
+ *       401: { $ref: '#/components/responses/Unauthorized' }
+ */
+/**
+ * @swagger
+ * /api/healing/selectors/detail:
+ *   get:
+ *     summary: Everything the Selector Health side panel shows for one selector
+ *     description: |
+ *       Its heals in the period (suggested fixes with their share, methods and
+ *       confidence; heals per day; platforms, builds and devices; the latest 20
+ *       heals), its status, the latest 50 status changes with who made them,
+ *       and whether the caller may act. A selector no session the caller can
+ *       see has healed answers 404, exactly as an unknown one.
+ *     tags: [Selector Health]
+ *     parameters:
+ *       - { in: query, name: selector, required: true, schema: { type: string } }
+ *       - { in: query, name: strategy, schema: { type: string }, description: "Empty for heals recorded with no strategy" }
+ *       - { in: query, name: days, schema: { type: integer, minimum: 1, maximum: 365, default: 30 } }
+ *       - { in: query, name: tz, schema: { type: integer, minimum: -840, maximum: 840, default: 0 } }
+ *     responses:
+ *       200: { description: 'The panel for one selector' }
+ *       400: { description: 'No selector given' }
+ *       404: { description: '`{ error: "not_found", message: "Selector not found" }`' }
+ *       401: { $ref: '#/components/responses/Unauthorized' }
+ */
 /**
  * @swagger
  * /api/healing/digest/send: