phone-lens 1.0.1 → 1.0.3

package/lib/dev.js

@@ -10,6 +10,22 @@ import { homedir } from "node:os";
 import { env } from "node:process";
 
 //#region src/config.ts
+/**
+
+* Offline fallback for the Gitee APK download link. Since v1.0.2 the actual
+
+* link is resolved from Gitee's public latest-release API at runtime (see
+
+* server/apk-link.ts), so this constant needs NO per-release bump anymore —
+
+* it only serves when the API is unreachable, and deliberately points at a
+
+* release known to exist (pointing it at a future tag would 404 until that
+
+* release is actually published).
+
+*/
+const GITEE_APK_DEFAULT = "https://gitee.com/qianfengbingtang/phone-lens/releases/download/v1.0.0/app-release.apk";
 /** Coerce an unknown config object (cordis patch row / CLI overrides) into LensConfig. */
 function normalizeConfig(raw) {
 	const r = raw ?? {};
@@ -20,9 +36,8 @@ function normalizeConfig(raw) {
 	const inject = r.inject ?? {};
 	const target = r.target ?? {};
 	const app = r.app ?? {};
-	const GITEE_APK = "https://gitee.com/qianfengbingtang/phone-lens/releases/download/v1.0.0/app-release.apk";
 	const GITHUB_APK = "https://github.com/yxqfg/phone-lens/releases/latest/download/app-release.apk";
-	const giteeUrl = typeof app.giteeUrl === "string" && app.giteeUrl ? app.giteeUrl : GITEE_APK;
+	const giteeUrl = typeof app.giteeUrl === "string" && app.giteeUrl ? app.giteeUrl : GITEE_APK_DEFAULT;
 	const allowed = Array.isArray(limits.allowedTypes) ? limits.allowedTypes.filter((t) => typeof t === "string") : void 0;
 	const mode = inject.mode === "steer" ? "steer" : "followup";
 	return {
@@ -423,6 +438,77 @@ async function admitImage(input, attachments, fallbackDir) {
 	};
 }
 
+//#endregion
+//#region src/server/apk-link.ts
+const GITEE_LATEST_API = "https://gitee.com/api/v5/repos/qianfengbingtang/phone-lens/releases/latest";
+const CACHE_TTL_MS = 10 * 60 * 1e3;
+const REQUEST_TIMEOUT_MS = 6e3;
+let cached = null;
+let inflight = null;
+/** The asset URL comes from an external API response, so re-validate it before
+*  it ever reaches a QR code: https only, and only the expected release host —
+*  never localhost/loopback/private addresses or any other origin. */
+function isTrustedGiteeAsset(raw) {
+	if (typeof raw !== "string" || !raw.startsWith("https://")) return false;
+	try {
+		const u = new URL(raw);
+		return u.protocol === "https:" && u.host === "gitee.com";
+	} catch {
+		return false;
+	}
+}
+async function fetchLatestGiteeApk() {
+	const ctrl = new AbortController();
+	const timer = setTimeout(() => ctrl.abort(), REQUEST_TIMEOUT_MS);
+	try {
+		const resp = await fetch(GITEE_LATEST_API, {
+			signal: ctrl.signal,
+			headers: { accept: "application/json" }
+		});
+		if (!resp.ok) return null;
+		const data = await resp.json();
+		const assets = data?.assets;
+		if (!Array.isArray(assets)) return null;
+		for (const asset of assets) {
+			const row = asset;
+			if (row.name === "app-release.apk" && isTrustedGiteeAsset(row.browser_download_url)) return row.browser_download_url;
+		}
+		return null;
+	} catch {
+		return null;
+	} finally {
+		clearTimeout(timer);
+	}
+}
+/** Resolve the latest APK URL (cached 10 min, in-flight deduped).
+*  Resolves null when the API is unreachable or carries no trusted asset. */
+function resolveLatestGiteeApk() {
+	if (cached && Date.now() - cached.at < CACHE_TTL_MS) return Promise.resolve(cached.url);
+	if (inflight) return inflight;
+	inflight = fetchLatestGiteeApk().then((url) => {
+		if (url) cached = {
+			url,
+			at: Date.now()
+		};
+		return url;
+	}).finally(() => {
+		inflight = null;
+	});
+	return inflight;
+}
+/**
+* Refresh config.app download links in place, but only while they still carry
+* the built-in defaults — an explicit user config always wins. Mutating the
+* shared config object lets the QR endpoints keep reading the plain fields.
+*/
+async function refreshAppApkLinks(config$1) {
+	if (config$1.app.giteeUrl !== GITEE_APK_DEFAULT) return;
+	const url = await resolveLatestGiteeApk();
+	if (!url) return;
+	config$1.app.giteeUrl = url;
+	if (config$1.app.downloadUrl === GITEE_APK_DEFAULT) config$1.app.downloadUrl = url;
+}
+
 //#endregion
 //#region src/server/qr.ts
 /** Enumerate LAN IPv4 candidates: private ranges first, virtual/tethering included. */
@@ -758,17 +844,25 @@ function queryOf(req) {
 /** Process-lifetime marker: surfaces service rebuilds via /status. */
 const SERVER_BOOT_AT = Date.now();
 /** Boot the receiver: HTTP routes + two websocket endpoints. */
+let ownVersion = null;
+function hostVersion() {
+	if (ownVersion) return ownVersion;
+	try {
+		ownVersion = String(JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version ?? "0.0.0");
+	} catch {
+		ownVersion = "0.0.0";
+	}
+	return ownVersion;
+}
 async function startLensServer(deps) {
 	const { config: config$1, pairing: pairing$1, devices: devices$1, hub: hub$1, targets: targets$1, sink: sink$1, log: log$1 } = deps;
 	const pairLimiter = new RateLimiter(6e4, 10);
 	const uploadReplays = new Map();
-	let currentCameraDeviceId = null;
 	const injectionBox = { last: null };
 	const server = createServer((req, res) => {
 		handle$1(deps, req, res, {
 			pairLimiter,
 			uploadReplays,
-			getCurrentCamera: () => currentCameraDeviceId,
 			noteInjection: (receipt, attachmentId) => {
 				injectionBox.last = {
 					at: Date.now(),
@@ -804,7 +898,6 @@ async function startLensServer(deps) {
 			const record = devices$1.authenticate(deviceId, token);
 			if (!record) return done(401, "Unauthorized");
 			wss.handleUpgrade(req, socket, head, (ws) => {
-				currentCameraDeviceId = record.deviceId;
 				hub$1.attachCamera(record.deviceId, ws, record.name);
 			});
 			return;
@@ -828,6 +921,9 @@ async function startLensServer(deps) {
 		server.listen(config$1.server.port, config$1.server.host, () => resolve$1());
 	});
 	log$1("info", `phone-lens listening on ${config$1.server.host}:${config$1.server.port} (paired devices: ${devices$1.count()})`);
+	resolveLatestGiteeApk().then((url) => {
+		if (url) log$1("info", `APK download link resolved from Gitee API: ${url}`);
+	});
 	return {
 		port: config$1.server.port,
 		dispose: async () => {
@@ -853,7 +949,7 @@ async function handle$1(deps, req, res, ctx) {
 	}
 	if (method === "GET" && path === "/info") return sendJson(res, 200, {
 		name: "PhoneLens 直连取景",
-		version: "0.3.11",
+		version: hostVersion(),
 		requiresPairing: true
 	}, cors);
 	if (!loop && (path === "/" || path === "/view.html" || path === "/qr.json" || path === "/qr.png" || path === "/app-qr.json" || path === "/app-settings")) return sendError(res, 403, ERROR_CODES.LOOPBACK_ONLY, "preview surface is loopback-only");
@@ -891,6 +987,7 @@ async function handle$1(deps, req, res, ctx) {
 		return;
 	}
 	if (method === "GET" && path === "/app-qr.json") {
+		await refreshAppApkLinks(config$1);
 		const target = config$1.app.downloadUrl || config$1.app.giteeUrl;
 		const pngDataUrl = await QRCode.toDataURL(target, {
 			errorCorrectionLevel: "M",
@@ -1061,15 +1158,15 @@ async function handle$1(deps, req, res, ctx) {
 		}
 	}
 	if (method === "GET" && path === "/status") {
-		const cameraDeviceId = ctx.getCurrentCamera();
+		const online = hub$1.onlineDeviceIds();
 		return sendJson(res, 200, {
 			bootAt: SERVER_BOOT_AT,
 			devices: devices$1.list().map((d) => ({
 				id: d.deviceId,
 				name: d.name,
 				model: d.model,
-				online: d.deviceId === cameraDeviceId,
-				streaming: d.deviceId === cameraDeviceId,
+				online: online.has(d.deviceId),
+				streaming: online.has(d.deviceId),
 				lastSeenAt: d.lastSeenAt
 			})),
 			camera: hub$1.stats(),
@@ -1116,6 +1213,7 @@ async function handle$1(deps, req, res, ctx) {
 	return sendError(res, 404, ERROR_CODES.BAD_REQUEST, `no route ${method} ${path}`);
 }
 /** Strip path separators / reserved characters so a phone-supplied upload
+
 *  name can never escape the target directory or hide as a dotfile. */
 function sanitizeFileName(input) {
 	const base = basename(input).replace(/[<>:"|?*\u0000-\u001F]/g, "_").replace(/^[\s.]+/, "").trim();
@@ -1133,13 +1231,17 @@ function nextAvailableName(dir, name) {
 	}
 }
 /** Pending-staging filename for an attachment id. Ids may be URN-ish
+
 *  ("file:<digest>" without the dsh attachment service) and Windows forbids
+
 *  ":" in filenames — flatten to a portable name, write and read alike. */
 function pendingFileName(attachmentId) {
 	return `${attachmentId.replace(/[^A-Za-z0-9._-]/g, "_")}.jpg`;
 }
 /** Resolve `name` under `baseDir` and refuse anything that escapes it
+
 *  (defense in depth on top of sanitizeFileName — e.g. a crafted name that
+
 *  survives sanitization but still resolves outside the base). */
 function resolveUnder(baseDir, name) {
 	const base = resolve(baseDir);
@@ -1221,6 +1323,18 @@ async function pruneUploads(dir, max) {
 //#region src/server/hub.ts
 /**
 
+* A camera uplink with NO inbound traffic for this long is presumed half-open
+
+* (phone switched wifi / laptop slept mid-link): the OS keeps the socket
+
+* "open" without a FIN, so we evict it ourselves. Generous vs the phone's own
+
+* 30s app-level silence limit so the phone normally tears down first.
+
+*/
+const CAM_SILENCE_MS = 6e4;
+/**
+
 * How long the ACTIVE device's stream may go silent before views are told the
 
 * preview was turned off. The phone app never announces "preview off" — it
@@ -1253,6 +1367,22 @@ const PREVIEW_STALL_MS = 3e3;
 var ViewHub = class {
 	cameras = new Map();
 	activeDeviceId = null;
+	/**
+	
+	* The device the flow last settled on EXPLICITLY: picked in the view,
+	
+	* claimed from a phone, or simply the first to come online. When that
+	
+	* device drops and a fallback takes over, detach does NOT clear this — so
+	
+	* the preferred phone reconnecting (network blip, host reboot, delayed
+	
+	* wifi join) takes its hot seat back instead of being parked as "another
+	
+	* device is using the preview". Any explicit switch updates it.
+	
+	*/
+	preferredDeviceId = null;
 	views = new Set();
 	/** captureId → { note, requestedAt } until the matching upload lands or timeout. */
 	pendingCaptures = new Map();
@@ -1285,12 +1415,16 @@ var ViewHub = class {
 			meta: {},
 			lastFrame: null,
 			lastFrameAt: 0,
+			lastSeenAt: Date.now(),
 			frameCount: 0,
 			windowStart: Date.now(),
 			measuredFps: 0
 		};
 		this.cameras.set(deviceId, cam);
-		if (this.activeDeviceId === null) this.activeDeviceId = deviceId;
+		if (this.activeDeviceId === null) {
+			this.activeDeviceId = deviceId;
+			this.preferredDeviceId = deviceId;
+		} else if (this.preferredDeviceId === deviceId && this.activeDeviceId !== deviceId) this.selectDevice(deviceId);
 		if (this.activeDeviceId === deviceId) this.sendControl(deviceId, { type: "resume_preview" });
 		else this.sendControl(deviceId, { type: "pause_preview" });
 		this.log("info", `camera uplink: ${name} (${deviceId.slice(0, 8)})`);
@@ -1298,7 +1432,13 @@ var ViewHub = class {
 			this.log("warn", `camera ws closed: code=${code} reason=${reason.toString("utf8") || "-"} (${name} ${deviceId.slice(0, 8)})`);
 			if (this.cameras.get(deviceId)?.ws === ws) this.detachCamera(deviceId);
 		});
+		ws.on("pong", () => {
+			const c = this.cameras.get(deviceId);
+			if (c) c.lastSeenAt = Date.now();
+		});
 		ws.on("message", (data, isBinary) => {
+			const c = this.cameras.get(deviceId);
+			if (c) c.lastSeenAt = Date.now();
 			if (isBinary) {
 				this.ingestFrame(deviceId, data);
 				return;
@@ -1328,7 +1468,22 @@ var ViewHub = class {
 		this.broadcastDevices();
 	}
 	pingAll() {
-		for (const cam of this.cameras.values()) if (cam.ws.readyState === cam.ws.OPEN) cam.ws.ping();
+		const now = Date.now();
+		for (const [deviceId, cam] of this.cameras) {
+			if (cam.ws.readyState !== cam.ws.OPEN) continue;
+			if (now - cam.lastSeenAt > CAM_SILENCE_MS) {
+				this.log("warn", `camera uplink silent >${CAM_SILENCE_MS}ms — terminating ${deviceId.slice(0, 8)}`);
+				cam.ws.terminate();
+				continue;
+			}
+			cam.ws.ping();
+		}
+	}
+	/** Device ids with a live camera uplink right now (for /status truth). */
+	onlineDeviceIds() {
+		const ids = new Set();
+		for (const [deviceId, cam] of this.cameras) if (cam.ws.readyState === cam.ws.OPEN) ids.add(deviceId);
+		return ids;
 	}
 	onCameraControl(deviceId, msg) {
 		if (!msg) return;
@@ -1359,6 +1514,9 @@ var ViewHub = class {
 			case "claim_active":
 				this.selectDevice(deviceId);
 				break;
+			case "ping":
+				this.sendControl(deviceId, { type: "pong" });
+				break;
 			case "capture_result":
 				if (msg.status !== "taken") {
 					this.pendingCaptures.delete(msg.captureId);
@@ -1481,6 +1639,7 @@ var ViewHub = class {
 		const prevActive = this.activeDeviceId;
 		if (prevActive === deviceId) return;
 		this.activeDeviceId = deviceId;
+		this.preferredDeviceId = deviceId;
 		if (prevActive) this.sendControl(prevActive, { type: "pause_preview" });
 		this.sendControl(deviceId, { type: "resume_preview" });
 		this.broadcastDevices();

package/lib/index.js

@@ -13,6 +13,22 @@ import { homedir } from "node:os";
 import { env } from "node:process";
 
 //#region src/config.ts
+/**
+
+* Offline fallback for the Gitee APK download link. Since v1.0.2 the actual
+
+* link is resolved from Gitee's public latest-release API at runtime (see
+
+* server/apk-link.ts), so this constant needs NO per-release bump anymore —
+
+* it only serves when the API is unreachable, and deliberately points at a
+
+* release known to exist (pointing it at a future tag would 404 until that
+
+* release is actually published).
+
+*/
+const GITEE_APK_DEFAULT = "https://gitee.com/qianfengbingtang/phone-lens/releases/download/v1.0.0/app-release.apk";
 /** Coerce an unknown config object (cordis patch row / CLI overrides) into LensConfig. */
 function normalizeConfig(raw) {
 	const r = raw ?? {};
@@ -23,9 +39,8 @@ function normalizeConfig(raw) {
 	const inject = r.inject ?? {};
 	const target = r.target ?? {};
 	const app = r.app ?? {};
-	const GITEE_APK = "https://gitee.com/qianfengbingtang/phone-lens/releases/download/v1.0.0/app-release.apk";
 	const GITHUB_APK = "https://github.com/yxqfg/phone-lens/releases/latest/download/app-release.apk";
-	const giteeUrl = typeof app.giteeUrl === "string" && app.giteeUrl ? app.giteeUrl : GITEE_APK;
+	const giteeUrl = typeof app.giteeUrl === "string" && app.giteeUrl ? app.giteeUrl : GITEE_APK_DEFAULT;
 	const allowed = Array.isArray(limits.allowedTypes) ? limits.allowedTypes.filter((t) => typeof t === "string") : void 0;
 	const mode = inject.mode === "steer" ? "steer" : "followup";
 	return {
@@ -493,6 +508,77 @@ async function admitImage(input, attachments, fallbackDir) {
 	};
 }
 
+//#endregion
+//#region src/server/apk-link.ts
+const GITEE_LATEST_API = "https://gitee.com/api/v5/repos/qianfengbingtang/phone-lens/releases/latest";
+const CACHE_TTL_MS = 10 * 60 * 1e3;
+const REQUEST_TIMEOUT_MS = 6e3;
+let cached = null;
+let inflight = null;
+/** The asset URL comes from an external API response, so re-validate it before
+*  it ever reaches a QR code: https only, and only the expected release host —
+*  never localhost/loopback/private addresses or any other origin. */
+function isTrustedGiteeAsset(raw) {
+	if (typeof raw !== "string" || !raw.startsWith("https://")) return false;
+	try {
+		const u = new URL(raw);
+		return u.protocol === "https:" && u.host === "gitee.com";
+	} catch {
+		return false;
+	}
+}
+async function fetchLatestGiteeApk() {
+	const ctrl = new AbortController();
+	const timer = setTimeout(() => ctrl.abort(), REQUEST_TIMEOUT_MS);
+	try {
+		const resp = await fetch(GITEE_LATEST_API, {
+			signal: ctrl.signal,
+			headers: { accept: "application/json" }
+		});
+		if (!resp.ok) return null;
+		const data = await resp.json();
+		const assets = data?.assets;
+		if (!Array.isArray(assets)) return null;
+		for (const asset of assets) {
+			const row = asset;
+			if (row.name === "app-release.apk" && isTrustedGiteeAsset(row.browser_download_url)) return row.browser_download_url;
+		}
+		return null;
+	} catch {
+		return null;
+	} finally {
+		clearTimeout(timer);
+	}
+}
+/** Resolve the latest APK URL (cached 10 min, in-flight deduped).
+*  Resolves null when the API is unreachable or carries no trusted asset. */
+function resolveLatestGiteeApk() {
+	if (cached && Date.now() - cached.at < CACHE_TTL_MS) return Promise.resolve(cached.url);
+	if (inflight) return inflight;
+	inflight = fetchLatestGiteeApk().then((url) => {
+		if (url) cached = {
+			url,
+			at: Date.now()
+		};
+		return url;
+	}).finally(() => {
+		inflight = null;
+	});
+	return inflight;
+}
+/**
+* Refresh config.app download links in place, but only while they still carry
+* the built-in defaults — an explicit user config always wins. Mutating the
+* shared config object lets the QR endpoints keep reading the plain fields.
+*/
+async function refreshAppApkLinks(config) {
+	if (config.app.giteeUrl !== GITEE_APK_DEFAULT) return;
+	const url = await resolveLatestGiteeApk();
+	if (!url) return;
+	config.app.giteeUrl = url;
+	if (config.app.downloadUrl === GITEE_APK_DEFAULT) config.app.downloadUrl = url;
+}
+
 //#endregion
 //#region src/server/qr.ts
 /** Enumerate LAN IPv4 candidates: private ranges first, virtual/tethering included. */
@@ -828,17 +914,25 @@ function queryOf(req) {
 /** Process-lifetime marker: surfaces service rebuilds via /status. */
 const SERVER_BOOT_AT = Date.now();
 /** Boot the receiver: HTTP routes + two websocket endpoints. */
+let ownVersion = null;
+function hostVersion() {
+	if (ownVersion) return ownVersion;
+	try {
+		ownVersion = String(JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version ?? "0.0.0");
+	} catch {
+		ownVersion = "0.0.0";
+	}
+	return ownVersion;
+}
 async function startLensServer(deps) {
 	const { config, pairing, devices, hub, targets, sink, log } = deps;
 	const pairLimiter = new RateLimiter(6e4, 10);
 	const uploadReplays = new Map();
-	let currentCameraDeviceId = null;
 	const injectionBox = { last: null };
 	const server = createServer((req, res) => {
 		handle(deps, req, res, {
 			pairLimiter,
 			uploadReplays,
-			getCurrentCamera: () => currentCameraDeviceId,
 			noteInjection: (receipt, attachmentId) => {
 				injectionBox.last = {
 					at: Date.now(),
@@ -874,7 +968,6 @@ async function startLensServer(deps) {
 			const record = devices.authenticate(deviceId, token);
 			if (!record) return done(401, "Unauthorized");
 			wss.handleUpgrade(req, socket, head, (ws) => {
-				currentCameraDeviceId = record.deviceId;
 				hub.attachCamera(record.deviceId, ws, record.name);
 			});
 			return;
@@ -898,6 +991,9 @@ async function startLensServer(deps) {
 		server.listen(config.server.port, config.server.host, () => resolve$1());
 	});
 	log("info", `phone-lens listening on ${config.server.host}:${config.server.port} (paired devices: ${devices.count()})`);
+	resolveLatestGiteeApk().then((url) => {
+		if (url) log("info", `APK download link resolved from Gitee API: ${url}`);
+	});
 	return {
 		port: config.server.port,
 		dispose: async () => {
@@ -923,7 +1019,7 @@ async function handle(deps, req, res, ctx) {
 	}
 	if (method === "GET" && path === "/info") return sendJson(res, 200, {
 		name: "PhoneLens 直连取景",
-		version: "0.3.11",
+		version: hostVersion(),
 		requiresPairing: true
 	}, cors);
 	if (!loop && (path === "/" || path === "/view.html" || path === "/qr.json" || path === "/qr.png" || path === "/app-qr.json" || path === "/app-settings")) return sendError(res, 403, ERROR_CODES.LOOPBACK_ONLY, "preview surface is loopback-only");
@@ -961,6 +1057,7 @@ async function handle(deps, req, res, ctx) {
 		return;
 	}
 	if (method === "GET" && path === "/app-qr.json") {
+		await refreshAppApkLinks(config);
 		const target = config.app.downloadUrl || config.app.giteeUrl;
 		const pngDataUrl = await QRCode.toDataURL(target, {
 			errorCorrectionLevel: "M",
@@ -1131,15 +1228,15 @@ async function handle(deps, req, res, ctx) {
 		}
 	}
 	if (method === "GET" && path === "/status") {
-		const cameraDeviceId = ctx.getCurrentCamera();
+		const online = hub.onlineDeviceIds();
 		return sendJson(res, 200, {
 			bootAt: SERVER_BOOT_AT,
 			devices: devices.list().map((d) => ({
 				id: d.deviceId,
 				name: d.name,
 				model: d.model,
-				online: d.deviceId === cameraDeviceId,
-				streaming: d.deviceId === cameraDeviceId,
+				online: online.has(d.deviceId),
+				streaming: online.has(d.deviceId),
 				lastSeenAt: d.lastSeenAt
 			})),
 			camera: hub.stats(),
@@ -1186,6 +1283,7 @@ async function handle(deps, req, res, ctx) {
 	return sendError(res, 404, ERROR_CODES.BAD_REQUEST, `no route ${method} ${path}`);
 }
 /** Strip path separators / reserved characters so a phone-supplied upload
+
 *  name can never escape the target directory or hide as a dotfile. */
 function sanitizeFileName(input) {
 	const base = basename(input).replace(/[<>:"|?*\u0000-\u001F]/g, "_").replace(/^[\s.]+/, "").trim();
@@ -1203,13 +1301,17 @@ function nextAvailableName(dir, name) {
 	}
 }
 /** Pending-staging filename for an attachment id. Ids may be URN-ish
+
 *  ("file:<digest>" without the dsh attachment service) and Windows forbids
+
 *  ":" in filenames — flatten to a portable name, write and read alike. */
 function pendingFileName(attachmentId) {
 	return `${attachmentId.replace(/[^A-Za-z0-9._-]/g, "_")}.jpg`;
 }
 /** Resolve `name` under `baseDir` and refuse anything that escapes it
+
 *  (defense in depth on top of sanitizeFileName — e.g. a crafted name that
+
 *  survives sanitization but still resolves outside the base). */
 function resolveUnder(baseDir, name) {
 	const base = resolve(baseDir);
@@ -1291,6 +1393,18 @@ async function pruneUploads(dir, max) {
 //#region src/server/hub.ts
 /**
 
+* A camera uplink with NO inbound traffic for this long is presumed half-open
+
+* (phone switched wifi / laptop slept mid-link): the OS keeps the socket
+
+* "open" without a FIN, so we evict it ourselves. Generous vs the phone's own
+
+* 30s app-level silence limit so the phone normally tears down first.
+
+*/
+const CAM_SILENCE_MS = 6e4;
+/**
+
 * How long the ACTIVE device's stream may go silent before views are told the
 
 * preview was turned off. The phone app never announces "preview off" — it
@@ -1323,6 +1437,22 @@ const PREVIEW_STALL_MS = 3e3;
 var ViewHub = class {
 	cameras = new Map();
 	activeDeviceId = null;
+	/**
+	
+	* The device the flow last settled on EXPLICITLY: picked in the view,
+	
+	* claimed from a phone, or simply the first to come online. When that
+	
+	* device drops and a fallback takes over, detach does NOT clear this — so
+	
+	* the preferred phone reconnecting (network blip, host reboot, delayed
+	
+	* wifi join) takes its hot seat back instead of being parked as "another
+	
+	* device is using the preview". Any explicit switch updates it.
+	
+	*/
+	preferredDeviceId = null;
 	views = new Set();
 	/** captureId → { note, requestedAt } until the matching upload lands or timeout. */
 	pendingCaptures = new Map();
@@ -1355,12 +1485,16 @@ var ViewHub = class {
 			meta: {},
 			lastFrame: null,
 			lastFrameAt: 0,
+			lastSeenAt: Date.now(),
 			frameCount: 0,
 			windowStart: Date.now(),
 			measuredFps: 0
 		};
 		this.cameras.set(deviceId, cam);
-		if (this.activeDeviceId === null) this.activeDeviceId = deviceId;
+		if (this.activeDeviceId === null) {
+			this.activeDeviceId = deviceId;
+			this.preferredDeviceId = deviceId;
+		} else if (this.preferredDeviceId === deviceId && this.activeDeviceId !== deviceId) this.selectDevice(deviceId);
 		if (this.activeDeviceId === deviceId) this.sendControl(deviceId, { type: "resume_preview" });
 		else this.sendControl(deviceId, { type: "pause_preview" });
 		this.log("info", `camera uplink: ${name} (${deviceId.slice(0, 8)})`);
@@ -1368,7 +1502,13 @@ var ViewHub = class {
 			this.log("warn", `camera ws closed: code=${code} reason=${reason.toString("utf8") || "-"} (${name} ${deviceId.slice(0, 8)})`);
 			if (this.cameras.get(deviceId)?.ws === ws) this.detachCamera(deviceId);
 		});
+		ws.on("pong", () => {
+			const c = this.cameras.get(deviceId);
+			if (c) c.lastSeenAt = Date.now();
+		});
 		ws.on("message", (data, isBinary) => {
+			const c = this.cameras.get(deviceId);
+			if (c) c.lastSeenAt = Date.now();
 			if (isBinary) {
 				this.ingestFrame(deviceId, data);
 				return;
@@ -1398,7 +1538,22 @@ var ViewHub = class {
 		this.broadcastDevices();
 	}
 	pingAll() {
-		for (const cam of this.cameras.values()) if (cam.ws.readyState === cam.ws.OPEN) cam.ws.ping();
+		const now = Date.now();
+		for (const [deviceId, cam] of this.cameras) {
+			if (cam.ws.readyState !== cam.ws.OPEN) continue;
+			if (now - cam.lastSeenAt > CAM_SILENCE_MS) {
+				this.log("warn", `camera uplink silent >${CAM_SILENCE_MS}ms — terminating ${deviceId.slice(0, 8)}`);
+				cam.ws.terminate();
+				continue;
+			}
+			cam.ws.ping();
+		}
+	}
+	/** Device ids with a live camera uplink right now (for /status truth). */
+	onlineDeviceIds() {
+		const ids = new Set();
+		for (const [deviceId, cam] of this.cameras) if (cam.ws.readyState === cam.ws.OPEN) ids.add(deviceId);
+		return ids;
 	}
 	onCameraControl(deviceId, msg) {
 		if (!msg) return;
@@ -1429,6 +1584,9 @@ var ViewHub = class {
 			case "claim_active":
 				this.selectDevice(deviceId);
 				break;
+			case "ping":
+				this.sendControl(deviceId, { type: "pong" });
+				break;
 			case "capture_result":
 				if (msg.status !== "taken") {
 					this.pendingCaptures.delete(msg.captureId);
@@ -1551,6 +1709,7 @@ var ViewHub = class {
 		const prevActive = this.activeDeviceId;
 		if (prevActive === deviceId) return;
 		this.activeDeviceId = deviceId;
+		this.preferredDeviceId = deviceId;
 		if (prevActive) this.sendControl(prevActive, { type: "pause_preview" });
 		this.sendControl(deviceId, { type: "resume_preview" });
 		this.broadcastDevices();