livedesk 0.1.689 → 0.1.691

package/hub/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "description": "VuvoDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",

package/hub/src/console-direct-frame-admission.mjs

@@ -0,0 +1,80 @@
+export const CONSOLE_MEDIA_ADMISSION = Object.freeze({
+  laneBufferedBytes: 512 * 1024,
+  peerBufferedBytes: 1024 * 1024,
+  bufferedAgeMs: 120,
+  maxStreams: 64,
+  maxMetadataBytes: 64 * 1024
+});
+
+function h264Identity(packet) {
+  if (!Buffer.isBuffer(packet) || packet.length < 5) return null;
+  const size = packet.readUInt32BE(0);
+  if (size < 2 || size > CONSOLE_MEDIA_ADMISSION.maxMetadataBytes || 4 + size >= packet.length) return null;
+  let frame;
+  try { frame = JSON.parse(packet.toString('utf8', 4, 4 + size)); } catch { return null; }
+  if (frame?.frameMode !== 'mode3-h264-hw'
+    || !['wall', 'control'].includes(frame.streamPurpose)
+    || !Number.isSafeInteger(frame.captureGeneration) || frame.captureGeneration <= 0
+    || !Number.isSafeInteger(frame.monitorIndex) || frame.monitorIndex < 0
+    || !['deviceId', 'sessionId', 'streamId', 'commandId'].every(key => (
+      typeof frame[key] === 'string' && frame[key].length > 0 && frame[key].length <= 256
+    ))) return null;
+  return {
+    stream: JSON.stringify([frame.deviceId, frame.streamPurpose]),
+    owner: JSON.stringify([frame.sessionId, frame.streamId, frame.commandId, frame.captureGeneration, frame.monitorIndex]),
+    key: frame.isKeyFrame === true || frame.chunkType === 'key'
+  };
+}
+
+// This is send admission, not authentication or presentation authority. Those
+// exact binding gates still run at the Hub and browser. Retain no payload,
+// timer, task, or outbound queue; every decision precedes wire fragmentation.
+export function createConsoleFrameAdmission() {
+  const streams = new Map();
+  let bufferedSince = null;
+  let droppedFrames = 0;
+  let recoveredStreams = 0;
+  return {
+    admit(packet, { laneBufferedBytes, peerBufferedBytes, now }) {
+      const identity = h264Identity(packet);
+      if (!identity) return 'unmanaged';
+      let state = streams.get(identity.stream);
+      if (!state) {
+        if (streams.size >= CONSOLE_MEDIA_ADMISSION.maxStreams) return 'capacity';
+        state = { owner: identity.owner, awaitingKey: false };
+        streams.set(identity.stream, state);
+      } else if (state.owner !== identity.owner) {
+        state.owner = identity.owner;
+        state.awaitingKey = true;
+      }
+      if (laneBufferedBytes <= 0) bufferedSince = null;
+      else if (bufferedSince === null) bufferedSince = now;
+      const pressured = (laneBufferedBytes > 0 && (
+        laneBufferedBytes + packet.length > CONSOLE_MEDIA_ADMISSION.laneBufferedBytes
+        || now - bufferedSince >= CONSOLE_MEDIA_ADMISSION.bufferedAgeMs
+      )) || (peerBufferedBytes > 0
+        && peerBufferedBytes + packet.length > CONSOLE_MEDIA_ADMISSION.peerBufferedBytes);
+      if (pressured || (state.awaitingKey && !identity.key)) {
+        state.awaitingKey = true;
+        droppedFrames += 1;
+        return 'drop';
+      }
+      if (state.awaitingKey) recoveredStreams += 1;
+      state.awaitingKey = false;
+      return 'send';
+    },
+    inspect() {
+      return {
+        streamOwners: streams.size,
+        awaitingKeyStreams: [...streams.values()].filter(state => state.awaitingKey).length,
+        droppedFrames,
+        recoveredStreams,
+        retainedPayloadBytes: 0
+      };
+    },
+    clear() {
+      streams.clear();
+      bufferedSince = null;
+    }
+  };
+}

package/hub/src/console-direct-frame-admission.test.mjs

@@ -0,0 +1,60 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { CONSOLE_MEDIA_ADMISSION, createConsoleFrameAdmission } from './console-direct-frame-admission.mjs';
+import { buildImmutableRemoteFramePacket } from './frame-packet-contract.mjs';
+
+function packet({ key = false, device = 'a', generation = 1, monitor = 0, bytes = 1024 } = {}) {
+  return buildImmutableRemoteFramePacket({
+    deviceId: device, sessionId: 'session', streamId: 'stream', commandId: 'command',
+    captureGeneration: generation, monitorIndex: monitor, streamPurpose: 'wall',
+    frameMode: 'mode3-h264-hw', isKeyFrame: key
+  }, Buffer.alloc(bytes)).packet;
+}
+const empty = { laneBufferedBytes: 0, peerBufferedBytes: 0, now: 0 };
+
+test('a small persistent backlog is bounded by age without a timer or retained frame', () => {
+  const gate = createConsoleFrameAdmission();
+  assert.equal(gate.admit(packet({ key: true }), empty), 'send');
+  const pending = { laneBufferedBytes: 1024, peerBufferedBytes: 1024, now: 1 };
+  assert.equal(gate.admit(packet(), pending), 'send');
+  assert.equal(gate.admit(packet(), { ...pending, now: 1 + CONSOLE_MEDIA_ADMISSION.bufferedAgeMs }), 'drop');
+  assert.equal(gate.admit(packet(), { ...empty, now: 200 }), 'drop');
+  assert.equal(gate.admit(packet({ key: true }), { ...empty, now: 201 }), 'send');
+  assert.equal(gate.inspect().retainedPayloadBytes, 0);
+  assert.equal(gate.inspect().recoveredStreams, 1);
+  gate.clear();
+  assert.equal(gate.inspect().streamOwners, 0);
+  assert.equal(gate.inspect().awaitingKeyStreams, 0);
+});
+
+test('a pressured viewer cannot poison another viewer, device, or replacement binding', () => {
+  const phone = createConsoleFrameAdmission();
+  const desktop = createConsoleFrameAdmission();
+  const pressure = { ...empty, laneBufferedBytes: CONSOLE_MEDIA_ADMISSION.laneBufferedBytes, peerBufferedBytes: CONSOLE_MEDIA_ADMISSION.laneBufferedBytes };
+  assert.equal(phone.admit(packet(), pressure), 'drop');
+  assert.equal(desktop.admit(packet(), empty), 'send');
+  assert.equal(phone.admit(packet({ device: 'b', key: true }), empty), 'send');
+  assert.equal(phone.admit(packet(), empty), 'drop');
+  assert.equal(phone.admit(packet({ generation: 2, monitor: 1 }), empty), 'drop');
+  assert.equal(phone.admit(packet({ generation: 2, monitor: 1, key: true }), empty), 'send');
+  assert.equal(phone.inspect().awaitingKeyStreams, 0);
+});
+
+test('one complete key may exceed the soft watermark on an empty peer without admitting a second backlog', () => {
+  const gate = createConsoleFrameAdmission();
+  const key = packet({ key: true, bytes: 700 * 1024 });
+  assert.equal(gate.admit(key, empty), 'send');
+  assert.equal(gate.admit(key, { ...empty, laneBufferedBytes: key.length, peerBufferedBytes: key.length }), 'drop');
+  assert.equal(gate.admit(key, empty), 'send');
+  assert.equal(gate.admit(Buffer.from('legacy-binary'), empty), 'unmanaged');
+});
+
+test('a multiplexed lane has a fixed owner bound and releases it on close', () => {
+  const gate = createConsoleFrameAdmission();
+  for (let n = 0; n < CONSOLE_MEDIA_ADMISSION.maxStreams; n++) {
+    assert.equal(gate.admit(packet({ device: `device-${n}`, key: true }), empty), 'send');
+  }
+  assert.equal(gate.admit(packet({ device: 'overflow', key: true }), empty), 'capacity');
+  gate.clear();
+  assert.equal(gate.admit(packet({ device: 'replacement', key: true }), empty), 'send');
+});

package/hub/src/console-direct.js

@@ -9,6 +9,7 @@ import {
   encodeDirectConsoleWireMessage
 } from '../../runtime-core/src/console-direct-wire.js';
 import { workspaceRoleCanControl, workspaceRoleCanRequest } from './auth/workspace-access.js';
+import { createConsoleFrameAdmission } from './console-direct-frame-admission.mjs';
 
 const DEFAULT_SIGNAL_URL = 'https://livedesk-wake.lovecrdm.workers.dev';
 const DEFAULT_STUN_URLS = Object.freeze(['stun:stun.cloudflare.com:3478']);
@@ -87,6 +88,34 @@ function byteLength(value) {
   return Buffer.byteLength(String(value || ''), 'utf8');
 }
 
+function optionalPeerMetric(peer, method) {
+  try {
+    const value = peer[method]?.();
+    return typeof value === 'number' && Number.isFinite(value) && value >= 0 ? value : null;
+  } catch { return null; }
+}
+
+function candidateAddressScope(value) {
+  if (typeof value !== 'string' || !value || value === '?') return 'unknown';
+  if (/^(127\.|::1$)/i.test(value)) return 'loopback';
+  if (/^(10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.|169\.254\.|f[cd][0-9a-f]{2}:|fe80:)/i.test(value)) return 'private';
+  return 'public';
+}
+
+function inspectPeerPath(peer) {
+  try {
+    const pair = peer.getSelectedCandidatePair?.();
+    if (!pair?.local || !pair?.remote) return null;
+    return {
+      localType: String(pair.local.type || 'unknown').slice(0, 24),
+      remoteType: String(pair.remote.type || 'unknown').slice(0, 24),
+      localScope: candidateAddressScope(pair.local.address),
+      remoteScope: candidateAddressScope(pair.remote.address),
+      transport: String(pair.remote.transportType || 'unknown').slice(0, 24)
+    };
+  } catch { return null; }
+}
+
 function parseJson(value) {
   try {
     return JSON.parse(String(value || ''));
@@ -527,6 +556,7 @@ export function createHubConsoleDirect(options = {}) {
     disposePendingLogicalControl(owner, channelState.channelId);
     disposeAssemblerTimer(channelState);
     channelState.assembler.dispose();
+    channelState.frameAdmission?.clear();
     closeLocalSocket(
       owner,
       channelState,
@@ -667,6 +697,18 @@ export function createHubConsoleDirect(options = {}) {
 
   function sendWire(owner, channelState, kind, value, maxMessageBytes, options = {}) {
     if (!isOwnerActive(owner) || channelState.closed || !channelIsOpen(channelState.channel)) return false;
+    if (kind === 'binary' && channelState.frameAdmission && value.byteLength <= maxMessageBytes) {
+      const admission = channelState.frameAdmission.admit(value, {
+        laneBufferedBytes: channelBufferedAmount(channelState),
+        peerBufferedBytes: ownerBufferedAmount(owner),
+        now: performance.now()
+      });
+      if (admission === 'drop') return true;
+      if (admission === 'capacity') {
+        closeLogicalChannel(owner, channelState, { code: 1009, reason: 'console-direct-frame-owner-capacity' });
+        return false;
+      }
+    }
     let chunks;
     try {
       const messageId = channelState.nextSendMessageId >>> 0;
@@ -973,7 +1015,7 @@ export function createHubConsoleDirect(options = {}) {
     socket.on('message', (data, isBinary) => {
       if (!isOwnerActive(owner) || owner.channels.get(channelId) !== channelState || channelState.localSocket !== socket) return;
       const kind = isBinary ? 'binary' : 'text';
-      const value = isBinary ? new Uint8Array(Buffer.from(data)) : String(data);
+      const value = isBinary ? (Buffer.isBuffer(data) ? data : Buffer.from(data)) : String(data);
       if (!sendWire(owner, channelState, kind, value, channelState.maxMessageBytes)) {
         closeLogicalChannel(owner, channelState, {
           code: 1013,
@@ -1182,6 +1224,7 @@ export function createHubConsoleDirect(options = {}) {
         nextSendMessageId: 1,
         openRequested: false,
         localSocket: null,
+        frameAdmission: identity.purpose === 'frame' ? createConsoleFrameAdmission() : null,
         closed: false
       };
       owner.channels.set(identity.channelId, channelState);
@@ -1300,7 +1343,11 @@ export function createHubConsoleDirect(options = {}) {
         iceTransportPolicy: 'all',
         disableAutoNegotiation: false,
         disableFingerprintVerification: false,
-        maxMessageSize: MAX_FRAME_MESSAGE_BYTES
+        // Each native send is one wire chunk. libdatachannel also uses this
+        // setting as the minimum SCTP socket buffer size, below bufferedAmount.
+        // A whole-frame limit here hides megabytes from our admission gate.
+        // Complete frame/HTTP limits remain enforced by the wire assemblers.
+        maxMessageSize: DIRECT_CONSOLE_WIRE_CHUNK_BYTES
       });
     } catch (error) {
       lastError = error instanceof Error ? error.message : String(error);
@@ -1938,6 +1985,7 @@ export function createHubConsoleDirect(options = {}) {
   };
 
   const inspect = () => {
+    const peerDiagnostics = [];
     let logicalWebSocketChannels = 0;
     let localWebSocketChannels = 0;
     let pendingHttpRequests = 0;
@@ -1964,6 +2012,30 @@ export function createHubConsoleDirect(options = {}) {
       }
       retainedAssemblyBytes += Number(owner.wireBudget.inspect().retainedBytes || 0);
       bufferedSendBytes += ownerBufferedAmount(owner);
+      peerDiagnostics.push({
+        consoleId: owner.consoleId,
+        connectionId: owner.connectionId,
+        generation: owner.generation,
+        peerState: owner.peerState,
+        iceState: owner.iceState,
+        rttMs: optionalPeerMetric(owner.peer, 'rtt'),
+        bytesSent: optionalPeerMetric(owner.peer, 'bytesSent'),
+        bytesReceived: optionalPeerMetric(owner.peer, 'bytesReceived'),
+        selectedPath: inspectPeerPath(owner.peer),
+        bufferedSendBytes: (() => {
+          const values = [owner.control, ...owner.channels.values()]
+            .filter(lane => lane && !lane.closed)
+            .map(lane => optionalPeerMetric(lane.channel, 'bufferedAmount'));
+          return values.some(value => value === null) ? null : values.reduce((sum, value) => sum + value, 0);
+        })(),
+        pendingHttpRequests: owner.pendingHttp.size,
+        lanes: [...owner.channels.values()].map(lane => ({
+          channelId: lane.channelId,
+          purpose: lane.purpose,
+          bufferedBytes: optionalPeerMetric(lane.channel, 'bufferedAmount'),
+          frameAdmission: lane.frameAdmission?.inspect() ?? null
+        }))
+      });
     }
     const reconnectTimerActive = Boolean(retryTimer);
     const accessTokenDeadlineActive = Boolean(accessTokenAttempt);
@@ -1982,6 +2054,7 @@ export function createHubConsoleDirect(options = {}) {
       pendingLogicalControlRequests,
       retainedAssemblyBytes,
       bufferedSendBytes,
+      peerDiagnostics,
       iceConnectTimers,
       peerDisconnectTimers,
       assemblyDeadlineTimers,

package/hub/src/console-direct.test.mjs

@@ -4,11 +4,13 @@ import { readFileSync } from 'node:fs';
 import test from 'node:test';
 import nodeDataChannel from 'node-datachannel';
 import {
+  DIRECT_CONSOLE_WIRE_CHUNK_BYTES,
   createDirectConsoleWireAssembler,
   encodeDirectConsoleWireMessage
 } from '../../runtime-core/src/console-direct-wire.js';
 import { consoleDirectContract, createHubConsoleDirect } from './console-direct.js';
 import { workspaceRoleCanRequest } from './auth/workspace-access.js';
+import { buildImmutableRemoteFramePacket } from './frame-packet-contract.mjs';
 
 assert.equal(consoleDirectContract.maxDefaultRetryDelayMs, 20_000);
 assert.equal(consoleDirectContract.peerDisconnectedTimeoutMs, 5_000);
@@ -357,6 +359,8 @@ test('STUN-only peer answers and rejects stale owner callbacks after replacement
   assert.deepEqual(firstPeer.config.iceServers, ['stun:stun.example.test:3478']);
   assert.equal(firstPeer.config.iceTransportPolicy, 'all');
   assert.equal(firstPeer.config.disableFingerprintVerification, false);
+  assert.equal(firstPeer.config.maxMessageSize, DIRECT_CONSOLE_WIRE_CHUNK_BYTES,
+    'native SCTP accepts wire chunks, not whole frames; a frame-sized setting silently enlarges its hidden buffers');
   assert.equal(signalingMessages(signal).some(message => (
     message.type === 'rtc-answer' && message.connectionId === CONNECTION_ONE
   )), true);
@@ -1336,6 +1340,64 @@ test('media pressure retires only its stale logical lane while preserving the co
   direct.close();
 });
 
+test('a pressured H.264 viewer drops whole dependent frames and resumes on a key without reconnecting', async () => {
+  const { direct, signal } = await connectedDirect();
+  const peer = offer(signal);
+  const control = new FakeDataChannel('livedesk-control-v1');
+  peer.emitDataChannel(control);
+  control.open();
+  const lane = new FakeDataChannel(`livedesk-ws-v1:${CHANNEL_ID}:frame`);
+  peer.emitDataChannel(lane);
+  lane.open();
+  sendWire(control, {
+    type: 'ws-open', connectionId: CONNECTION_ONE, hubEpoch: HUB_EPOCH,
+    channelId: CHANNEL_ID, purpose: 'frame', path: '/api/remote/frames/ws'
+  });
+  const local = FakeLocalSocket.instances[0];
+  local.open();
+  const frame = (sequence, key, generation = 1) => buildImmutableRemoteFramePacket({
+    deviceId: 'device-a', sessionId: 'session-a', streamId: 'wall-a', commandId: 'command-a',
+    captureGeneration: generation, monitorIndex: 0, streamPurpose: 'wall',
+    frameMode: 'mode3-h264-hw', chunkType: key ? 'key' : 'delta',
+    isKeyFrame: key, streamFrameSeq: sequence
+  }, Buffer.alloc(32 * 1024)).packet;
+  local.receive(frame(1, true));
+  const initialChunks = lane.sent.length;
+  lane.buffered = consoleDirectContract.controlHeadroomBufferedBytes;
+  local.receive(frame(2, false));
+  assert.equal(lane.closed, false, 'congestion must not create another logical handshake or key-frame burst');
+  assert.equal(lane.sent.length, initialChunks, 'no fragment of a dropped frame enters SCTP');
+  lane.buffered = 0;
+  local.receive(frame(3, false));
+  assert.equal(lane.sent.length, initialChunks, 'a dependent delta cannot follow a discarded delta');
+  local.receive(frame(4, true));
+  assert.ok(lane.sent.length > initialChunks);
+  const recoveredChunks = lane.sent.length;
+  local.receive(frame(5, false));
+  assert.ok(lane.sent.length > recoveredChunks);
+  assert.equal(control.closed, false);
+  assert.equal(peer.closed, false);
+  assert.equal(direct.inspect().dataChannelBackpressureCloses, 0);
+  const diagnostics = direct.inspect().peerDiagnostics[0];
+  assert.equal(diagnostics.rttMs, null, 'missing native RTT is unknown');
+  assert.equal(diagnostics.bytesSent, null, 'missing native byte counters are unknown');
+  assert.equal(diagnostics.lanes[0].frameAdmission.droppedFrames, 2);
+  assert.equal(diagnostics.lanes[0].frameAdmission.recoveredStreams, 1);
+  peer.rtt = () => 12;
+  peer.bytesSent = () => 1234;
+  peer.selectedPair = {
+    local: { type: 'host', address: '192.168.0.4', candidate: 'must-not-leak' },
+    remote: { type: 'host', address: '192.168.0.8', transportType: 'Udp' }
+  };
+  const measured = direct.inspect().peerDiagnostics[0];
+  assert.equal(measured.rttMs, 12);
+  assert.equal(measured.bytesSent, 1234);
+  assert.equal(measured.selectedPath.remoteScope, 'private');
+  assert.doesNotMatch(JSON.stringify(measured), /192\.168\.|must-not-leak/);
+  direct.close();
+  assert.deepEqual(direct.inspect().peerDiagnostics, []);
+});
+
 test('a reliable control response drops stale media backlog without retiring the peer', async () => {
   const { direct, signal } = await connectedDirect({
     fetchImpl: async () => new Response('{"online":true}', {
@@ -1507,18 +1569,19 @@ test('server session refresh preserves peers while logout uses the revoking clos
   assert.doesNotMatch(logoutBlock, /hubConsoleDirect\?\.refresh\(\)/);
 });
 
-test('native node-datachannel buffered sends deliver the complete fragmented wire over loopback', { timeout: 8_000 }, async t => {
+test('native chunk-sized SCTP accepts a full-size fragmented frame over loopback', { timeout: 8_000 }, async t => {
   let offerer = null;
   let answerer = null;
   let offerChannel = null;
   let answerChannel = null;
-  const assembler = createDirectConsoleWireAssembler();
+  const assembler = createDirectConsoleWireAssembler({ maxMessageBytes: consoleDirectContract.maxFrameMessageBytes });
   let openTimer = null;
   let messageTimer = null;
   try {
     nodeDataChannel.setSctpSettings({ sendBufferSize: 64 * 1024 });
-    offerer = new nodeDataChannel.PeerConnection('console-direct-native-offerer', { iceServers: [] });
-    answerer = new nodeDataChannel.PeerConnection('console-direct-native-answerer', { iceServers: [] });
+    const config = { iceServers: [], maxMessageSize: DIRECT_CONSOLE_WIRE_CHUNK_BYTES };
+    offerer = new nodeDataChannel.PeerConnection('console-direct-native-offerer', config);
+    answerer = new nodeDataChannel.PeerConnection('console-direct-native-answerer', config);
     offerer.onLocalDescription((sdp, type) => {
       answerer.setRemoteDescription(sdp, type);
     });
@@ -1552,11 +1615,16 @@ test('native node-datachannel buffered sends deliver the complete fragmented wir
     await opened;
     clearTimeout(openTimer);
     openTimer = null;
-    const payload = JSON.stringify({ type: 'direct-ready', connectionId: CONNECTION_ONE, hubEpoch: HUB_EPOCH });
-    const expected = payload.repeat(20_000);
+    assert.match(offerer.localDescription().sdp, /a=max-message-size:16384(?:\r?\n|$)/);
+    assert.match(answerer.localDescription().sdp, /a=max-message-size:16384(?:\r?\n|$)/);
+    assert.throws(() => offerChannel.sendMessageBinary(Buffer.alloc(DIRECT_CONSOLE_WIRE_CHUNK_BYTES + 1)),
+      /[Mm]essage.*large|[Ss]ize/);
+    const expected = Buffer.alloc(consoleDirectContract.maxFrameMessageBytes);
+    for (let n = 0; n < expected.length; n += 1) expected[n] = n % 251;
     const chunks = encodeDirectConsoleWireMessage(expected, {
       messageId: 77,
-      kind: 'control'
+      kind: 'binary',
+      maxMessageBytes: consoleDirectContract.maxFrameMessageBytes
     });
     assert.ok(chunks.length > 1);
     let bufferedSends = 0;
@@ -1567,8 +1635,8 @@ test('native node-datachannel buffered sends deliver the complete fragmented wir
     const message = await received;
     clearTimeout(messageTimer);
     messageTimer = null;
-    assert.equal(message.kind, 'control');
-    assert.equal(message.data, expected);
+    assert.equal(message.kind, 'binary');
+    assert.deepEqual(Buffer.from(message.data), expected);
     t.diagnostic(`native buffered sends=${bufferedSends}; complete bytes=${message.byteLength}; chunks=${chunks.length}`);
   } finally {
     if (openTimer) clearTimeout(openTimer);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "livedesk",
-  "version": "0.1.689",
+  "version": "0.1.691",
   "livedeskClientVersion": "0.1.275",
   "buildFlavor": "production",
   "description": "VuvoDesk Hub and client launcher",

package/scripts/sync-web-dist.js

@@ -32,6 +32,7 @@ const packagedRuntimeAssets = [
   ['web UI', resolve(targetDist, 'index.html')],
   ['Hub source', resolve(targetHub, 'src', 'server.js')],
   ['Hub mobile Console direct transport', resolve(targetHub, 'src', 'console-direct.js')],
+  ['Hub H.264 media admission', resolve(targetHub, 'src', 'console-direct-frame-admission.mjs')],
   ['Hub remote bridge', resolve(targetHub, 'src', 'remote-hub.js')],
   ['Hub immutable frame packet contract', resolve(targetHub, 'src', 'frame-packet-contract.mjs')],
   ['Hub manifest', resolve(targetHub, 'package.json')],

package/web/dist/app.html

@@ -52,7 +52,7 @@
       .vuvodesk-static-boot [hidden] { display: none; }
       @keyframes vuvodesk-static-boot-spin { to { transform: rotate(360deg); } }
     </style>
-    <script type="module" crossorigin src="/assets/app-D8_G4B_m.js" data-vuvodesk-entry></script>
+    <script type="module" crossorigin src="/assets/app-CVjARKwD.js" data-vuvodesk-entry></script>
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-DD1OZmLC.js">
     <link rel="modulepreload" crossorigin href="/assets/pwa-bootstrap-ljOQTt2e.js">
   </head>

package/web/dist/app.webmanifest

@@ -4,7 +4,7 @@
   "short_name": "VuvoDesk",
   "description": "Monitor and control your VuvoDesk computers from your phone.",
   "lang": "en",
-  "start_url": "/app?pwa=0.1.689",
+  "start_url": "/app?pwa=0.1.691",
   "scope": "/",
   "display": "standalone",
   "orientation": "any",

package/web/dist/assets/{AgentSettingsTab-DqcDj-on.js → AgentSettingsTab-CV_0za4F.js}

@@ -1 +1 @@
-import{j as t}from"./pwa-startup-DvbrYEQi.js";import{r as c,d as A,S as q,T as I,e as z}from"./icons-CuXJn-Hz.js";import{h as x}from"./MonitorStackIcon-4RlZK1aS.js";import"./pwa-bootstrap-ljOQTt2e.js";const E={enabled:!0};function w(i){return{enabled:i?.enabled===!0}}async function L(i,p,f){let l=null;for(let s=0;s<2;s+=1){const g=await x("/api/settings",{signal:f},p);if(g.settings.agent?.enabled===i)return;try{await x("/api/settings",{method:"PATCH",signal:f,body:JSON.stringify({revision:g.revision,agent:{enabled:i}})},p);return}catch(a){if(l=a,s!==0||!String(a instanceof Error?a.message:a).startsWith("409 "))throw a}}throw l}function H({hubUrl:i,showToast:p}){const[f,l]=c.useState(E),[s,g]=c.useState(null),[a,m]=c.useState(""),[j,v]=c.useState(""),[y,d]=c.useState(""),b=c.useRef(0),u=c.useRef(null);c.useEffect(()=>{let e=!0;u.current?.abort();const n=new AbortController;u.current=n;const h=++b.current;return g(null),l(E),m(""),d(""),v(""),x("/api/settings/agent",{signal:n.signal},i).then(o=>{!e||n.signal.aborted||h!==b.current||(g(o.settings),l(w(o.settings)))}).catch(o=>{e&&!n.signal.aborted&&h===b.current&&d(o instanceof Error?o.message:String(o))}),()=>{e=!1,n.abort(),u.current===n&&(u.current=null)}},[i]);const k=(e,n)=>l(h=>({...h,[e]:n})),C=e=>{g(e),l(w(e))},S=()=>({generation:b.current,controller:u.current}),r=e=>e.generation===b.current&&e.controller!==null&&e.controller===u.current&&!e.controller.signal.aborted,R=async()=>{if(!s){d("Agent settings are not available yet.");return}const e=S();if(r(e)){m("save"),d(""),v("");try{if(await L(f.enabled,i,e.controller.signal),!r(e))return;const n=await x("/api/settings/agent",{signal:e.controller.signal},i);if(!r(e))return;C(n.settings),v("Codex Agent settings saved.")}catch(n){r(e)&&d(n instanceof Error?n.message:String(n))}finally{r(e)&&m("")}}},T=async()=>{const e=S();if(r(e)){m("test"),d(""),v("");try{const n=await x("/api/settings/agent/test",{method:"POST",signal:e.controller.signal,body:JSON.stringify({})},i);if(!r(e))return;const h=await x("/api/settings/agent",{signal:e.controller.signal},i);if(!r(e))return;C(h.settings);const o=Number.isFinite(n.connection?.latencyMs)?Math.max(0,Math.round(n.connection.latencyMs)):null;p(`Codex Agent connection verified${o!==null?` in ${o} ms.`:"."}`,"success")}catch(n){r(e)&&d(n instanceof Error?n.message:String(n))}finally{r(e)&&m("")}}},D=s?.codexInstallation==="installed"&&s.codexAuth==="signed-in",N=s!==null;return t.jsxs("div",{className:"settings-tab-content agent-settings-content",children:[t.jsxs("section",{className:"settings-section-card agent-enable-card",children:[t.jsxs("label",{className:"settings-toggle agent-enable-toggle",children:[t.jsx("input",{type:"checkbox",checked:f.enabled,onChange:e=>k("enabled",e.target.checked),disabled:!N||a!==""}),t.jsx("span",{children:"Enable Codex Agent"})]}),t.jsxs("p",{className:"settings-help",children:[t.jsx(A,{size:12})," Enabled by default. Agent commands use only the Codex account signed in on this Hub."]})]}),y&&t.jsx("div",{className:"agent-settings-alert error",role:"alert",children:y}),j&&t.jsx("div",{className:"agent-settings-alert success",role:"status",children:j}),t.jsxs("section",{className:"settings-section-card",children:[t.jsxs("div",{className:"settings-section-heading",children:[t.jsxs("div",{children:[t.jsx("span",{children:"Connection"}),t.jsx("h3",{children:"Codex SDK / CLI"})]}),t.jsx(q,{size:20})]}),t.jsxs("div",{className:"agent-connection-row",children:[t.jsx("span",{className:`agent-connection-dot ${D?"connected":s?.codexAuth==="not-signed-in"?"unavailable":""}`}),t.jsx("span",{children:s?.codexInstallation==="not-installed"?"Codex SDK not installed":s?.codexAuth==="signed-in"?"Codex CLI signed in":s?.codexAuth==="not-signed-in"?"Codex CLI sign-in required":"Codex status not tested"}),t.jsxs("button",{className:"settings-reset",onClick:()=>{T()},disabled:a!=="",type:"button",children:[t.jsx(I,{size:15})," ",a==="test"?"Testing":"Test connection"]})]}),t.jsxs("p",{className:"settings-help",children:[t.jsx(A,{size:12})," The Hub uses the installed Codex SDK / CLI to plan approved commands and run them through VuvoDesk Agent tools on selected computers. VuvoDesk never asks for separate credentials."]})]}),t.jsx("div",{className:"settings-action-row agent-settings-actions",children:t.jsxs("button",{className:"text-button primary",onClick:()=>{R()},disabled:!N||a!=="",type:"button",children:[t.jsx(z,{size:15})," ",a==="save"?"Saving":"Save Agent settings"]})})]})}export{H as AgentSettingsTab};
+import{j as t}from"./pwa-startup-DvbrYEQi.js";import{r as c,d as A,S as q,T as I,e as z}from"./icons-CuXJn-Hz.js";import{h as x}from"./MonitorStackIcon-NxxMF_Ag.js";import"./pwa-bootstrap-ljOQTt2e.js";const E={enabled:!0};function w(i){return{enabled:i?.enabled===!0}}async function L(i,p,f){let l=null;for(let s=0;s<2;s+=1){const g=await x("/api/settings",{signal:f},p);if(g.settings.agent?.enabled===i)return;try{await x("/api/settings",{method:"PATCH",signal:f,body:JSON.stringify({revision:g.revision,agent:{enabled:i}})},p);return}catch(a){if(l=a,s!==0||!String(a instanceof Error?a.message:a).startsWith("409 "))throw a}}throw l}function H({hubUrl:i,showToast:p}){const[f,l]=c.useState(E),[s,g]=c.useState(null),[a,m]=c.useState(""),[j,v]=c.useState(""),[y,d]=c.useState(""),b=c.useRef(0),u=c.useRef(null);c.useEffect(()=>{let e=!0;u.current?.abort();const n=new AbortController;u.current=n;const h=++b.current;return g(null),l(E),m(""),d(""),v(""),x("/api/settings/agent",{signal:n.signal},i).then(o=>{!e||n.signal.aborted||h!==b.current||(g(o.settings),l(w(o.settings)))}).catch(o=>{e&&!n.signal.aborted&&h===b.current&&d(o instanceof Error?o.message:String(o))}),()=>{e=!1,n.abort(),u.current===n&&(u.current=null)}},[i]);const k=(e,n)=>l(h=>({...h,[e]:n})),C=e=>{g(e),l(w(e))},S=()=>({generation:b.current,controller:u.current}),r=e=>e.generation===b.current&&e.controller!==null&&e.controller===u.current&&!e.controller.signal.aborted,R=async()=>{if(!s){d("Agent settings are not available yet.");return}const e=S();if(r(e)){m("save"),d(""),v("");try{if(await L(f.enabled,i,e.controller.signal),!r(e))return;const n=await x("/api/settings/agent",{signal:e.controller.signal},i);if(!r(e))return;C(n.settings),v("Codex Agent settings saved.")}catch(n){r(e)&&d(n instanceof Error?n.message:String(n))}finally{r(e)&&m("")}}},T=async()=>{const e=S();if(r(e)){m("test"),d(""),v("");try{const n=await x("/api/settings/agent/test",{method:"POST",signal:e.controller.signal,body:JSON.stringify({})},i);if(!r(e))return;const h=await x("/api/settings/agent",{signal:e.controller.signal},i);if(!r(e))return;C(h.settings);const o=Number.isFinite(n.connection?.latencyMs)?Math.max(0,Math.round(n.connection.latencyMs)):null;p(`Codex Agent connection verified${o!==null?` in ${o} ms.`:"."}`,"success")}catch(n){r(e)&&d(n instanceof Error?n.message:String(n))}finally{r(e)&&m("")}}},D=s?.codexInstallation==="installed"&&s.codexAuth==="signed-in",N=s!==null;return t.jsxs("div",{className:"settings-tab-content agent-settings-content",children:[t.jsxs("section",{className:"settings-section-card agent-enable-card",children:[t.jsxs("label",{className:"settings-toggle agent-enable-toggle",children:[t.jsx("input",{type:"checkbox",checked:f.enabled,onChange:e=>k("enabled",e.target.checked),disabled:!N||a!==""}),t.jsx("span",{children:"Enable Codex Agent"})]}),t.jsxs("p",{className:"settings-help",children:[t.jsx(A,{size:12})," Enabled by default. Agent commands use only the Codex account signed in on this Hub."]})]}),y&&t.jsx("div",{className:"agent-settings-alert error",role:"alert",children:y}),j&&t.jsx("div",{className:"agent-settings-alert success",role:"status",children:j}),t.jsxs("section",{className:"settings-section-card",children:[t.jsxs("div",{className:"settings-section-heading",children:[t.jsxs("div",{children:[t.jsx("span",{children:"Connection"}),t.jsx("h3",{children:"Codex SDK / CLI"})]}),t.jsx(q,{size:20})]}),t.jsxs("div",{className:"agent-connection-row",children:[t.jsx("span",{className:`agent-connection-dot ${D?"connected":s?.codexAuth==="not-signed-in"?"unavailable":""}`}),t.jsx("span",{children:s?.codexInstallation==="not-installed"?"Codex SDK not installed":s?.codexAuth==="signed-in"?"Codex CLI signed in":s?.codexAuth==="not-signed-in"?"Codex CLI sign-in required":"Codex status not tested"}),t.jsxs("button",{className:"settings-reset",onClick:()=>{T()},disabled:a!=="",type:"button",children:[t.jsx(I,{size:15})," ",a==="test"?"Testing":"Test connection"]})]}),t.jsxs("p",{className:"settings-help",children:[t.jsx(A,{size:12})," The Hub uses the installed Codex SDK / CLI to plan approved commands and run them through VuvoDesk Agent tools on selected computers. VuvoDesk never asks for separate credentials."]})]}),t.jsx("div",{className:"settings-action-row agent-settings-actions",children:t.jsxs("button",{className:"text-button primary",onClick:()=>{R()},disabled:!N||a!=="",type:"button",children:[t.jsx(z,{size:15})," ",a==="save"?"Saving":"Save Agent settings"]})})]})}export{H as AgentSettingsTab};

package/web/dist/assets/{AgentsPage-DtUpg-_-.js → AgentsPage-BtrLYt9x.js}

@@ -1,4 +1,4 @@
-import{j as t}from"./pwa-startup-DvbrYEQi.js";import{r as d,ae as ht,af as Ce,z as yt,G as ee,X as xe,ag as vt,ah as wt,ai as Ze,aj as kt,ak as bt,al as Se,b as H,am as Ct,p as xt,an as _e,o as St,ao as jt,S as Je,ap as At,a9 as Rt,c as Nt,aq as Pt,ar as It,A as Tt,as as ue,M as Xe}from"./icons-CuXJn-Hz.js";import{r as Et,h as F}from"./MonitorStackIcon-4RlZK1aS.js";import"./pwa-bootstrap-ljOQTt2e.js";const Ot=d.forwardRef(function({value:s,onChange:n,onSubmit:r,onOpenSuggestedTasks:i,suggestedOpen:f=!1,suggestedTaskCount:c,disabled:v=!1,placeholder:S="Ask VuvoDesk to work across your machines...",compact:g=!1},x){return t.jsxs("form",{className:"agents-composer",onSubmit:w=>{w.preventDefault(),r()},children:[t.jsx("button",{className:`agents-suggested-trigger ${f?"active":""}`,type:"button","aria-label":c===void 0?"Open Suggested tasks":`Open Suggested tasks (${c} available)`,"aria-expanded":f,onClick:i,disabled:v,children:t.jsx(ht,{size:17})}),t.jsx("textarea",{ref:x,value:s,onChange:w=>n(w.target.value.slice(0,4e3)),placeholder:S,"aria-label":"Ask VuvoDesk",rows:g?1:2,disabled:v}),t.jsxs("button",{className:"agents-run-button",type:"submit",disabled:v||!s.trim(),children:[v?t.jsx(Ce,{className:"spin",size:16}):t.jsx(yt,{size:16}),v?"Running":"Run"]})]})}),$t=["read","processControl","serviceControl","applicationControl","fileRead","fileWrite","fileDelete","shell","script","softwareInstall","network","systemPower","systemConfiguration","userAccount"];function de(e){return e.deviceName?.trim()||e.hostname?.trim()||e.deviceId}function pe(e){return e.connected!==!0?!1:e.synthetic===!0?!0:!e.channels||e.channels.control===!0}function Dt(e){return e==="running"||e==="completed"||e==="failed"||e==="cancelled"?e:"queued"}function _t(e){switch(e){case"process.list":return"Process list";case"system.health":return"System health";case"gpu.status":return"GPU status";case"disk.status":return"Disk status";case"service.status":return"Service status";case"diagnostics.collect":return"Diagnostics";case"process.control":return"Process control";case"service.control":return"Service control";case"application.launch":return"Launch application";case"application.close":return"Close application";case"file.read":return"Read file";case"file.write":return"Write file";case"file.delete":return"Delete file";case"file.list":return"List directory";case"command.run":return"Run command";case"script.run":return"Run script";case"software.install":return"Install software";case"network.status":return"Network status";case"system.power":return"Power action";case"system.configure":return"System configuration";case"logs.collect":return"Collect logs"}}const Mt=64*1024,Me="[Earlier log output hidden by PWA display limit.]",Qe=new TextEncoder,zt=new TextDecoder("utf-8",{fatal:!0}),ze=16*1024,Lt=200,Le="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|authorization|api[_-]?key|private[_-]?key|connection[_-]?string|credential|password|passwd|secret|cookie|set-cookie)",Ft="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|token|authorization|api[_-]?key|private[_-]?key|connection[_-]?string|credential|password|passwd|secret|cookie|set-cookie)",Bt="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|token|authorization|api[_-]?key|credential|password|secret|cookie)",qt=/\b(?:sk-(?:proj-|ant-)?[A-Za-z0-9_-]{8,}|gh[pousr]_[A-Za-z0-9]{8,}|github_pat_[A-Za-z0-9_]{8,}|(?:AKIA|ASIA)[A-Z0-9]{16}|AIza[A-Za-z0-9_-]{35}|npm_[A-Za-z0-9]{8,}|xox[a-z]-[A-Za-z0-9-]{8,}|(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{8,})\b/g;function Ut(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Fe(e){return Qe.encode(e).byteLength}function Be(e,s){const n=Qe.encode(e);if(n.byteLength<=s)return{value:e,truncated:!1};let r=n.byteLength-s;for(;r<n.byteLength&&(n[r]&192)===128;)r+=1;let i=zt.decode(n.subarray(r));const f=i.indexOf(`
+import{j as t}from"./pwa-startup-DvbrYEQi.js";import{r as d,ae as ht,af as Ce,z as yt,G as ee,X as xe,ag as vt,ah as wt,ai as Ze,aj as kt,ak as bt,al as Se,b as H,am as Ct,p as xt,an as _e,o as St,ao as jt,S as Je,ap as At,a9 as Rt,c as Nt,aq as Pt,ar as It,A as Tt,as as ue,M as Xe}from"./icons-CuXJn-Hz.js";import{r as Et,h as F}from"./MonitorStackIcon-NxxMF_Ag.js";import"./pwa-bootstrap-ljOQTt2e.js";const Ot=d.forwardRef(function({value:s,onChange:n,onSubmit:r,onOpenSuggestedTasks:i,suggestedOpen:f=!1,suggestedTaskCount:c,disabled:v=!1,placeholder:S="Ask VuvoDesk to work across your machines...",compact:g=!1},x){return t.jsxs("form",{className:"agents-composer",onSubmit:w=>{w.preventDefault(),r()},children:[t.jsx("button",{className:`agents-suggested-trigger ${f?"active":""}`,type:"button","aria-label":c===void 0?"Open Suggested tasks":`Open Suggested tasks (${c} available)`,"aria-expanded":f,onClick:i,disabled:v,children:t.jsx(ht,{size:17})}),t.jsx("textarea",{ref:x,value:s,onChange:w=>n(w.target.value.slice(0,4e3)),placeholder:S,"aria-label":"Ask VuvoDesk",rows:g?1:2,disabled:v}),t.jsxs("button",{className:"agents-run-button",type:"submit",disabled:v||!s.trim(),children:[v?t.jsx(Ce,{className:"spin",size:16}):t.jsx(yt,{size:16}),v?"Running":"Run"]})]})}),$t=["read","processControl","serviceControl","applicationControl","fileRead","fileWrite","fileDelete","shell","script","softwareInstall","network","systemPower","systemConfiguration","userAccount"];function de(e){return e.deviceName?.trim()||e.hostname?.trim()||e.deviceId}function pe(e){return e.connected!==!0?!1:e.synthetic===!0?!0:!e.channels||e.channels.control===!0}function Dt(e){return e==="running"||e==="completed"||e==="failed"||e==="cancelled"?e:"queued"}function _t(e){switch(e){case"process.list":return"Process list";case"system.health":return"System health";case"gpu.status":return"GPU status";case"disk.status":return"Disk status";case"service.status":return"Service status";case"diagnostics.collect":return"Diagnostics";case"process.control":return"Process control";case"service.control":return"Service control";case"application.launch":return"Launch application";case"application.close":return"Close application";case"file.read":return"Read file";case"file.write":return"Write file";case"file.delete":return"Delete file";case"file.list":return"List directory";case"command.run":return"Run command";case"script.run":return"Run script";case"software.install":return"Install software";case"network.status":return"Network status";case"system.power":return"Power action";case"system.configure":return"System configuration";case"logs.collect":return"Collect logs"}}const Mt=64*1024,Me="[Earlier log output hidden by PWA display limit.]",Qe=new TextEncoder,zt=new TextDecoder("utf-8",{fatal:!0}),ze=16*1024,Lt=200,Le="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|authorization|api[_-]?key|private[_-]?key|connection[_-]?string|credential|password|passwd|secret|cookie|set-cookie)",Ft="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|token|authorization|api[_-]?key|private[_-]?key|connection[_-]?string|credential|password|passwd|secret|cookie|set-cookie)",Bt="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|token|authorization|api[_-]?key|credential|password|secret|cookie)",qt=/\b(?:sk-(?:proj-|ant-)?[A-Za-z0-9_-]{8,}|gh[pousr]_[A-Za-z0-9]{8,}|github_pat_[A-Za-z0-9_]{8,}|(?:AKIA|ASIA)[A-Z0-9]{16}|AIza[A-Za-z0-9_-]{35}|npm_[A-Za-z0-9]{8,}|xox[a-z]-[A-Za-z0-9-]{8,}|(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{8,})\b/g;function Ut(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Fe(e){return Qe.encode(e).byteLength}function Be(e,s){const n=Qe.encode(e);if(n.byteLength<=s)return{value:e,truncated:!1};let r=n.byteLength-s;for(;r<n.byteLength&&(n[r]&192)===128;)r+=1;let i=zt.decode(n.subarray(r));const f=i.indexOf(`
 `);return f>=0&&f<i.length-1&&(i=i.slice(f+1)),{value:i,truncated:!0}}function et(e){return e.replace(/-----BEGIN [^-\r\n]*PRIVATE KEY-----[\s\S]*?-----END [^-\r\n]*PRIVATE KEY-----/gi,"[REDACTED PRIVATE KEY]").replace(/\b(?:proxy-)?authorization\s*[:=]\s*[^\r\n]*|\b(?:set-)?cookie\s*[:=]\s*[^\r\n]*/gi,"credential-header=[REDACTED]").replace(/\bBearer\s+(?:"[^"]*"|'[^']*'|[^\s,;]+)/gi,"Bearer [REDACTED]").replace(new RegExp(`("${Le}"\\s*:\\s*")[^"\\r\\n]*(")`,"gi"),"$1[REDACTED]$2").replace(new RegExp(`('${Le}'\\s*:\\s*')[^'\\r\\n]*(')`,"gi"),"$1[REDACTED]$2").replace(new RegExp(`((?:[A-Za-z0-9.-]+[_-])?${Ft}\\s*[:=]\\s*)(?!\\[REDACTED\\])[^\\s,;&]+`,"gi"),"$1[REDACTED]").replace(new RegExp(`([?&]${Bt}=)[^&\\s]+`,"gi"),"$1[REDACTED]").replace(/\b(?:eyJ|[A-Za-z0-9_-]{8,}\.)[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g,"[REDACTED TOKEN]").replace(qt,"[REDACTED KEY]")}function Gt(e){return typeof e!="string"?"source unknown":et(e).replace(/[\u0000-\u001f\u007f]/g," ").trim().slice(0,64)||"source unknown"}function qe(e){return typeof e=="number"&&Number.isSafeInteger(e)&&e>=0?Math.floor(e):null}function Vt(e){if(typeof e!="string"||e.length===0)return{output:"",displayTruncated:!1};const s=Be(e.replace(/\r\n?/g,`
 `),Mt);let n=et(s.value).replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g," ").trim(),r=s.truncated;const i=n?n.split(`
 `):[];if(i.length>Lt-1&&(n=i.slice(-199).join(`

package/web/dist/assets/{CaptureGallery-BDTCKOQU.js → CaptureGallery-CBc58XJD.js}

@@ -1 +1 @@
-import{j as e}from"./pwa-startup-DvbrYEQi.js";import{r as i,R as x,E as j,D as u,f as g,h as f}from"./icons-CuXJn-Hz.js";import{l as b,c as d,d as y}from"./HubApp-oCD8fLqO.js";import"./pwa-bootstrap-ljOQTt2e.js";import"./preload-helper-DD1OZmLC.js";import"./MonitorStackIcon-4RlZK1aS.js";import"./supabase-C7qjtLN3.js";import"./frame-lifecycle-D91nchvm.js";function z({hubUrl:s,onToast:n}){const[o,m]=i.useState([]),[h,c]=i.useState(!0),r=i.useCallback(async()=>{c(!0);try{m((await b(s)).captures||[])}catch(t){n(t instanceof Error?t.message:String(t))}finally{c(!1)}},[s,n]);i.useEffect(()=>{r()},[r]);const p=async t=>{const a=d(t.id,s);if(navigator.share)try{await navigator.share({title:t.fileName,url:a});return}catch{}window.open(a,"_blank","noopener,noreferrer")};return e.jsxs("section",{className:"capture-gallery",children:[e.jsxs("header",{children:[e.jsxs("div",{children:[e.jsx("span",{className:"settings-eyebrow",children:"Capture Gallery"}),e.jsx("h2",{children:"Saved captures"})]}),e.jsxs("button",{className:"text-button",onClick:()=>{r()},type:"button",children:[e.jsx(x,{size:15})," Refresh"]})]}),h?e.jsx("p",{className:"settings-help",children:"Loading captures..."}):o.length===0?e.jsx("p",{className:"settings-help",children:"No captures saved yet."}):e.jsx("div",{className:"capture-gallery-grid",children:o.map(t=>{const a=d(t.id,s);return e.jsxs("article",{className:"capture-gallery-card",children:[t.mimeType.startsWith("image/")?e.jsx("img",{src:a,alt:t.target.label}):e.jsx("video",{src:a,controls:!0,preload:"metadata"}),e.jsxs("div",{className:"capture-gallery-card-body",children:[e.jsx("strong",{children:t.fileName}),e.jsxs("small",{children:[t.target.label," · ",new Date(t.createdAt).toLocaleString()," · ",Math.ceil(t.sizeBytes/1024)," KB"]}),e.jsxs("div",{children:[e.jsx("button",{className:"icon-button",title:"Open","aria-label":"Open",onClick:()=>window.open(a,"_blank","noopener,noreferrer"),type:"button",children:e.jsx(j,{size:15})}),e.jsx("a",{className:"icon-button",title:"Download","aria-label":"Download",href:`${a}?download=1`,download:t.fileName,children:e.jsx(u,{size:15})}),e.jsx("button",{className:"icon-button",title:"Share","aria-label":"Share",onClick:()=>{p(t)},type:"button",children:e.jsx(g,{size:15})}),e.jsx("button",{className:"icon-button danger",title:"Delete","aria-label":"Delete",onClick:()=>{window.confirm(`Delete ${t.fileName}?`)&&y(t.id,s).then(()=>r()).catch(l=>n(l instanceof Error?l.message:String(l)))},type:"button",children:e.jsx(f,{size:15})})]})]})]},t.id)})})]})}export{z as CaptureGallery};
+import{j as e}from"./pwa-startup-DvbrYEQi.js";import{r as i,R as x,E as j,D as u,f as g,h as f}from"./icons-CuXJn-Hz.js";import{l as b,c as d,d as y}from"./HubApp-D_DdfH3v.js";import"./pwa-bootstrap-ljOQTt2e.js";import"./preload-helper-DD1OZmLC.js";import"./MonitorStackIcon-NxxMF_Ag.js";import"./supabase-C7qjtLN3.js";import"./frame-lifecycle-D91nchvm.js";function z({hubUrl:s,onToast:n}){const[o,m]=i.useState([]),[h,c]=i.useState(!0),r=i.useCallback(async()=>{c(!0);try{m((await b(s)).captures||[])}catch(t){n(t instanceof Error?t.message:String(t))}finally{c(!1)}},[s,n]);i.useEffect(()=>{r()},[r]);const p=async t=>{const a=d(t.id,s);if(navigator.share)try{await navigator.share({title:t.fileName,url:a});return}catch{}window.open(a,"_blank","noopener,noreferrer")};return e.jsxs("section",{className:"capture-gallery",children:[e.jsxs("header",{children:[e.jsxs("div",{children:[e.jsx("span",{className:"settings-eyebrow",children:"Capture Gallery"}),e.jsx("h2",{children:"Saved captures"})]}),e.jsxs("button",{className:"text-button",onClick:()=>{r()},type:"button",children:[e.jsx(x,{size:15})," Refresh"]})]}),h?e.jsx("p",{className:"settings-help",children:"Loading captures..."}):o.length===0?e.jsx("p",{className:"settings-help",children:"No captures saved yet."}):e.jsx("div",{className:"capture-gallery-grid",children:o.map(t=>{const a=d(t.id,s);return e.jsxs("article",{className:"capture-gallery-card",children:[t.mimeType.startsWith("image/")?e.jsx("img",{src:a,alt:t.target.label}):e.jsx("video",{src:a,controls:!0,preload:"metadata"}),e.jsxs("div",{className:"capture-gallery-card-body",children:[e.jsx("strong",{children:t.fileName}),e.jsxs("small",{children:[t.target.label," · ",new Date(t.createdAt).toLocaleString()," · ",Math.ceil(t.sizeBytes/1024)," KB"]}),e.jsxs("div",{children:[e.jsx("button",{className:"icon-button",title:"Open","aria-label":"Open",onClick:()=>window.open(a,"_blank","noopener,noreferrer"),type:"button",children:e.jsx(j,{size:15})}),e.jsx("a",{className:"icon-button",title:"Download","aria-label":"Download",href:`${a}?download=1`,download:t.fileName,children:e.jsx(u,{size:15})}),e.jsx("button",{className:"icon-button",title:"Share","aria-label":"Share",onClick:()=>{p(t)},type:"button",children:e.jsx(g,{size:15})}),e.jsx("button",{className:"icon-button danger",title:"Delete","aria-label":"Delete",onClick:()=>{window.confirm(`Delete ${t.fileName}?`)&&y(t.id,s).then(()=>r()).catch(l=>n(l instanceof Error?l.message:String(l)))},type:"button",children:e.jsx(f,{size:15})})]})]})]},t.id)})})]})}export{z as CaptureGallery};