livedesk 0.1.438 → 0.1.439

package/hub/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "LiveDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",

package/hub/src/remote-hub.js

@@ -29,7 +29,12 @@ const LIVE_STREAM_MIN_FRESH_MS = 3000;
 const LIVE_STREAM_MAX_FRESH_MS = 12000;
 const DEFAULT_REMOTE_INPUT_ACK_TIMEOUT_MS = 5000;
 const DEFAULT_LIVE_CAPTURE_STOP_ACK_TIMEOUT_MS = 8000;
-const REMOTE_PROTOCOL_VERSION = 2;
+const REMOTE_POLICY_BYPASS_COMMANDS = new Set([
+    'ping',
+    'stream.stop',
+    'audio.stop'
+]);
+const REMOTE_PROTOCOL_VERSION = 2;
 const REMOTE_AGENT_PROTOCOL = 'mindexec.remote.agent';
 const REMOTE_FRAME_PROTOCOL = 'mindexec.remote.frame.v2';
 const REMOTE_FRAME_PROTOCOL_VERSION = 2;
@@ -1515,12 +1520,16 @@ export function createRemoteHub(options = {}) {
         }
     }
 
-    function policyError(device, permission = '') {
-        const policy = getDevicePolicy(device);
-        if (policy.accessMode === 'block-remote-access') return 'remote-access-blocked-by-settings';
-        if (permission && policy[permission] === false) {
-            return `${permission}-blocked-by-settings`;
-        }
+    function policyError(device, permission = '', command = '') {
+        const policy = getDevicePolicy(device);
+        const commandName = safeString(command, 80);
+        if (policy.accessMode === 'block-remote-access'
+            && !REMOTE_POLICY_BYPASS_COMMANDS.has(commandName)) {
+            return 'remote-access-blocked-by-settings';
+        }
+        if (permission && policy[permission] === false) {
+            return `${permission}-blocked-by-settings`;
+        }
         return '';
     }
 
@@ -5348,7 +5357,7 @@ export function createRemoteHub(options = {}) {
                     : commandName.startsWith('agent.')
                         ? 'allowAgent'
                         : '';
-        const denied = policyError(device, requiredPermission);
+        const denied = policyError(device, requiredPermission, commandName);
         if (denied) return { ok: false, error: denied };
         if (device?.synthetic === true && device.connected) {
             const commandId = safeString(command?.commandId, 128) || crypto.randomUUID();
@@ -6899,7 +6908,7 @@ export function createRemoteHub(options = {}) {
         if (!device) {
             return { ok: false, paused: false, error: 'device-not-found' };
         }
-        const denied = policyError(device);
+        const denied = policyError(device, '', 'stream.stop');
         if (denied) return { ok: false, paused: false, error: denied };
 
         let pause = device.liveCapturePause;

package/hub/src/server.js

@@ -4071,7 +4071,7 @@ app.post('/api/remote/devices/:deviceId/live/stop', (req, res) => {
   res.json(remoteHub.stopLiveStream(req.params.deviceId, req.body || {}));
 });
 
-app.post('/api/remote/devices/:deviceId/live/pause', requireHubFeatureAccess, async (req, res, next) => {
+app.post('/api/remote/devices/:deviceId/live/pause', async (req, res, next) => {
   noStore(res);
   try {
     res.json(await remoteHub.pauseLiveCapture(req.params.deviceId, req.body || {}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "livedesk",
-  "version": "0.1.438",
+  "version": "0.1.439",
   "livedeskClientVersion": "0.1.194",
   "buildFlavor": "production",
   "description": "LiveDesk Hub and client launcher",