Hosted app docs
Hosted app web UI reference
This page explains the pages, controls, and fields in the hosted Aplexica web app at app.aplexica.com. It complements the open source daemon guide; it is not stored in the public daemon repository.
Last updated: 2026-07-06
Public and authentication pages
Sign up
Creates a hosted Aplexica account and starts the first-device setup flow.
Account form
| Field or control | Function |
|---|---|
| The email address used for login, verification, billing notices, and security notifications. | |
| Password | The account password. The form enforces the current minimum length and complexity hints. |
| Plan | The selected service tier. Pricing and availability are loaded from billing configuration, not hardcoded in the UI. |
| Verification challenge | Anti-abuse verification when enabled for the environment. |
| Create account | Submits the account request and moves to email verification when successful. |
Email verification
| Field or control | Function |
|---|---|
| Verification code | One-time code sent to the account email address. |
| Resend code | Requests a new verification email after the cooldown expires. |
| Continue | Verifies the code and continues to onboarding or optional security setup. |
Login and MFA
Signs in to the hosted app and completes any required multi-factor challenge.
Login form
| Field or control | Function |
|---|---|
| Account email address. | |
| Password | Account password. |
| Log in | Submits credentials. Accounts with MFA enabled continue to the MFA page. |
| Forgot password | Opens the password reset request page. |
| Create account | Opens the sign-up page. |
MFA challenge
| Field or control | Function |
|---|---|
| Authentication code | Six-digit code from the enrolled authenticator method. |
| Verify | Completes sign-in when the code is valid. |
| Back | Returns to the login form. |
Password recovery
Requests and completes a password reset.
Request reset
| Field or control | Function |
|---|---|
| Account email address that should receive the reset link. | |
| Send reset link | Sends a reset email when the account exists and policy allows it. |
Confirm reset
| Field or control | Function |
|---|---|
| New password | Replacement password that must satisfy current password rules. |
| Confirm password | Must exactly match the new password. |
| Reset password | Consumes the reset token and saves the new password. |
Email verification and SSO callback
Finishes account verification or an identity-provider sign-in redirect.
Verification states
| Field or control | Function |
|---|---|
| Loading | The app is checking the verification token or identity-provider result. |
| Success | Verification or sign-in completed and the app will continue to the next page. |
| Error | The token, code, or provider response could not be accepted. The page offers the relevant retry path. |
Onboarding
Hosted onboarding
Guides new hosted users through pairing a device and connecting their local agents.
Welcome
| Field or control | Function |
|---|---|
| Continue | Starts the hosted app setup checklist. |
| Skip when available | Leaves onboarding and opens the app shell. |
Pair device
| Field or control | Function |
|---|---|
| Pairing token or PIN | Short-lived credential used by the local daemon or tray to pair this device. |
| Command | Copyable command for pairing from a terminal. |
| Copy | Copies the pairing command or token. |
| Waiting state | Shows that the hosted app is waiting for the daemon to complete pairing. |
| Continue | Moves forward after a device is paired. |
Connect agents
| Field or control | Function |
|---|---|
| Agent setup links | Links to local agent setup guidance. |
| Done | Finishes onboarding and opens the Dashboard. |
Signed-in app pages
Dashboard
Shows the current account state, quick actions, notifications, and recent account activity.
Account summary
| Field or control | Function |
|---|---|
| Plan | Current hosted tier as reported by account and billing services. |
| Devices | Number of paired devices and the tier limit when available. |
| Last activity | Most recent sync or account event known to the hosted service. |
Quick links
| Field or control | Function |
|---|---|
| Pair device | Opens the new-device pairing wizard. |
| Invite team member | Opens the invite flow when the account tier supports team members. |
| View billing | Opens the Billing page. |
Activity and alerts
| Field or control | Function |
|---|---|
| Notifications | Unread in-app notifications and account alerts. |
| Recent events | Audit-style rows showing action, actor, resource, and timestamp. |
Devices
Lists paired devices, starts pairing for new devices, and shows device-level sync history.
Device list
| Field or control | Function |
|---|---|
| Name | Friendly device name. |
| Platform | Operating system or platform reported by the paired daemon. |
| Last seen | Most recent check-in time. |
| Status | Online, recently active, inactive, revoked, or another service-reported state. |
| View | Opens the device detail page. |
| Revoke | Removes the device credentials after confirmation. |
Pair new device
| Field or control | Function |
|---|---|
| Start pairing | Creates a short-lived pairing session. |
| PIN | Human-entered pairing code. |
| QR payload | Machine-readable pairing payload for supported clients. |
| Token | Pairing token used by CLI or tray flows. |
| Expires in | Countdown until the pairing session becomes invalid. |
| Waiting | The page is waiting for a daemon to complete the pairing exchange. |
| Retry | Starts a fresh pairing attempt after expiry or failure. |
| Done | Returns to the device list or the paired device detail page. |
Device detail
| Field or control | Function |
|---|---|
| Platform | Platform reported by the device. |
| Paired | Original pairing time. |
| Last seen | Most recent service contact. |
| Status | Current device state. |
| Recent sync events | Recent device-scoped sync activity. |
| Revoke device | Disables this device credential after confirmation. |
Sessions
Shows browser and API sessions associated with the account.
Session controls
| Field or control | Function |
|---|---|
| Active sessions | Current signed-in sessions. |
| Revoke all other sessions | Keeps the current session and signs out all other sessions. |
Login history table
| Field or control | Function |
|---|---|
| When | Login or session activity time. |
| Device | Browser, operating system, or device description when available. |
| IP | Source IP address shown for account security review. |
| Location | Approximate location derived from network metadata when available. |
| Outcome | Successful, failed, challenged, revoked, or another authentication result. |
| Current | Marks the session currently viewing the page. |
| Revoke | Ends the selected session. |
Integrations
Displays daemon-reported integrations and their configuration status.
Integration list
| Field or control | Function |
|---|---|
| Name | Integration display name. |
| Kind | Integration category or provider kind. |
| Status | Connected, disabled, error, or another service-reported state. |
| Last sync | Most recent integration sync time. |
| View | Opens the integration detail page. |
Integration detail
| Field or control | Function |
|---|---|
| Enabled | Turns the integration on or off when the integration allows hosted-side changes. |
| Save | Persists editable integration settings. |
| Daemon-reported config | Read-only JSON configuration reported by the paired daemon. |
| Read-only notice | Explains when changes must be made locally rather than from the hosted UI. |
Notifications
Shows in-app notifications and account notification settings.
Notifications inbox
| Field or control | Function |
|---|---|
| Unread / All | Tabs that switch between unread notifications and the full notification list. |
| Category filter | Filters notifications by category. |
| Notification row | Shows title, summary, category, time, and read state. |
| Open | Shows the notification detail drawer. |
| Mark read | Marks a notification as read. |
| Archive | Hides the notification from the default list. |
| Load more | Fetches the next page of notifications. |
| Open link | Follows a notification target when one is provided. |
Notification preferences
| Field or control | Function |
|---|---|
| Security | Preferences for sign-in, MFA, token, and session events. |
| Billing | Preferences for subscription and invoice events. |
| Sync alerts | Preferences for sync failures or important device events. |
| Audit | Preferences for audit or compliance events. |
| Product | Preferences for product announcements. |
| Sends the category through email when enabled. | |
| In-app | Shows the category in the notifications inbox when enabled. |
| SMS | Reserved for tiers or environments where SMS is enabled. |
| Save preferences | Persists channel choices. |
Billing, plan, invoices, and payment method
Manages subscription state, invoice history, payment method updates, plan changes, and cancellation or reactivation.
Billing overview
| Field or control | Function |
|---|---|
| Plan | Current tier. |
| Price | Price returned by the billing system for the current plan and interval. |
| Status | Trialing, active, past due, canceled, or another billing state. |
| Renews / Ends on | Current renewal or scheduled cancellation date. |
| Change plan | Opens the plan picker. |
| Cancel subscription | Starts the cancellation flow. |
| Reactivate | Removes a scheduled cancellation when allowed. |
Payment method
| Field or control | Function |
|---|---|
| Brand | Payment method brand returned by the billing provider. |
| Last four | Last four digits for identifying the saved payment method. |
| Expires | Payment method expiration date. |
| Add / Update | Opens the secure billing-provider flow for payment method changes. |
Invoices
| Field or control | Function |
|---|---|
| Number | Invoice number. |
| Date | Invoice creation or issue date. |
| Amount | Invoice amount returned by the billing system. |
| Status | Paid, open, void, uncollectible, or another billing-provider state. |
| Download PDF | Downloads the invoice PDF when available. |
| View | Opens the hosted invoice page when available. |
Plan picker and upgrade
| Field or control | Function |
|---|---|
| Billing interval | Switches between supported billing intervals. |
| Plan card | Shows tier name, included limits, and billing-system price. |
| Current plan | Marks the tier already in use. |
| Upgrade / Downgrade / Switch | Starts the selected plan change. |
| Talk to sales | Opens contact flow for plans that require a sales process. |
| Locked | Indicates a plan unavailable to the current account. |
| Proration due or credit | Estimated immediate adjustment returned by billing. |
| Next renewal | Projected renewal date after the change. |
| Confirm change | Applies the selected plan change. |
Cancellation
| Field or control | Function |
|---|---|
| Reason | Required reason category for cancellation feedback. |
| Optional note | Free-text context for the cancellation reason. |
| Continue | Moves to the final cancellation confirmation. |
| Confirm cancellation | Schedules or completes cancellation according to account policy. |
| Done | Returns to billing after the cancellation state is saved. |
Audit
Searches, verifies, exports, and inspects account audit entries.
Filters and export
| Field or control | Function |
|---|---|
| From date | Start of the audit time range. |
| To date | End of the audit time range. |
| Actor email | Filters entries by actor email. |
| Action category | Filters by auth, device, billing, API, account, or another supported category. |
| Chain verification badge | Shows whether the currently loaded audit chain verifies. |
| Export JSONL | Downloads matching entries as newline-delimited JSON. |
| Export CSV | Downloads matching entries as CSV. |
| Load older entries | Fetches the next page of results. |
Audit table and detail drawer
| Field or control | Function |
|---|---|
| Timestamp | Time the audited action occurred. |
| Actor | User or system actor that performed the action. |
| Action | Audit action name. |
| Resource | Resource affected by the action. |
| Sequence | Monotonic sequence number in the audit chain. |
| Previous hash | Hash pointer to the previous audit entry. |
| Hash | Hash of the selected audit entry. |
| Signature | Entry signature when available. |
| Metadata | Structured, redacted metadata for the action. |
| Verify chain from here | Runs chain verification starting at the selected entry. |
Usage
Shows quota consumption and usage trends for the current account.
Quota cards
| Field or control | Function |
|---|---|
| Events this period | Events recorded in the current billing or usage period. |
| Devices paired | Paired devices compared with the current account limit. |
| Retention window | Configured retention period for hosted usage data. |
Charts and tables
| Field or control | Function |
|---|---|
| Last 30 days | Usage chart for recent events, bytes in, and bytes out. |
| Top devices | Device, event count, byte volume, and last activity rows. |
| Top agents | Agent, event count, byte volume, and last activity rows. |
| Upgrade call to action | Opens plan change when current usage is near or above tier limits. |
API tokens
Creates and revokes account API tokens.
Token list
| Field or control | Function |
|---|---|
| Name | User-defined token label. |
| Prefix | Non-secret token prefix used to identify the token later. |
| Scopes | Permissions granted to the token. |
| Last used | Most recent token use time. |
| Created | Token creation time. |
| Expires | Expiration time when one was set. |
| Revoke | Invalidates the token after confirmation. |
Create token
| Field or control | Function |
|---|---|
| Name | Required label for the token. |
| Scopes | Permission checkboxes such as device read/write, audit read, billing read, and usage read. |
| Expires at | Optional date and time when the token should expire. |
| Create token | Creates the token and shows the secret value once. |
| Copy token | Copies the newly created plaintext token. The value is not shown again after leaving the page. |
Webhooks
Creates webhook endpoints, rotates signing secrets, reviews deliveries, and retries failed deliveries.
Webhook list
| Field or control | Function |
|---|---|
| URL | Endpoint URL. |
| Events | Event types delivered to the endpoint. |
| Status | Active, disabled, failing, or another delivery state. |
| View | Opens webhook detail. |
| View deliveries | Opens delivery history for the endpoint. |
| Delete | Deletes the endpoint after confirmation. |
Create or edit webhook
| Field or control | Function |
|---|---|
| URL | HTTPS endpoint that receives webhook POST requests. |
| Events | Checkboxes for supported event types, such as audit, device, sync, and billing events. |
| Signing secret | Secret used to sign webhook deliveries. New secrets are shown once. |
| Rotate secret | Creates a replacement signing secret. |
| Active | Turns deliveries on or off. |
| Save | Persists webhook settings. |
| Cancel | Returns without saving. |
Delivery history
| Field or control | Function |
|---|---|
| Timestamp | Delivery attempt time. |
| Event | Delivered event type. |
| Status | HTTP result or delivery state. |
| Response time | Endpoint response latency. |
| Attempt | Attempt number for retried deliveries. |
| Resend | Queues another delivery attempt. |
| Test fire | Sends a test event selected from the event picker. |
Profile, security, and danger zone
Manages personal account settings, password and MFA, and destructive account actions.
Profile
| Field or control | Function |
|---|---|
| Avatar initials | Generated visual initials for the account. |
| Display name | Name shown in the hosted app. |
| Read-only login email. | |
| Timezone | Preferred timezone for display dates. |
| Locale | Preferred language and regional formatting where supported. |
| Save profile | Persists editable profile fields. |
Security
| Field or control | Function |
|---|---|
| Current password | Existing password required before setting a new one. |
| New password | Replacement password. |
| Confirm password | Must match the new password. |
| Password strength | Client-side feedback for password quality. |
| Change password | Submits the password change. |
| MFA status | Shows whether multi-factor authentication is enrolled. |
| Enroll MFA | Starts MFA enrollment when available. |
| Disable MFA | Disables MFA after confirmation and required checks. |
| Security history | Recent security-sensitive account events. |
Danger zone
| Field or control | Function |
|---|---|
| Revoke all devices | Requires typing the confirmation phrase and revokes all paired device credentials. |
| Delete account | Requires typing the account email address and schedules or starts account deletion. |
| Scheduled deletion | Shows a pending deletion date when account deletion is scheduled. |
| Cancel deletion | Cancels a scheduled account deletion when policy allows it. |
System pages
Pages shown for invites, missing routes, and unexpected app errors.
Invite and errors
| Field or control | Function |
|---|---|
| Invite email | Email field used for invite or waitlist flows when displayed. |
| 404 page | Shown when a route does not exist or is unavailable. |
| 500 page | Shown when the app cannot recover from a server or client error. |
| Retry / Go home | Actions that retry loading or return to the Dashboard. |
Operations pages
Role-gated operations pages
Operations pages are visible only to authorized support or operations users. They are documented here at a field level without internal procedures.
Ops home
| Field or control | Function |
|---|---|
| Customer search | Searches accounts by allowed identifiers. |
| Billing operations | Opens billing review queues. |
| Abuse queue | Opens policy or abuse review items. |
| Audit lookup | Searches audit entries by allowed account, device, or entry identifiers. |
| Usage totals | Shows service-level usage summaries. |
| System status | Shows operational status signals. |
| Announcements | Creates or reviews hosted app announcements. |
| Feature flags | Reviews or edits account-scoped flags when authorized. |
Customer search and detail
| Field or control | Function |
|---|---|
| Search query | Account identifier, email, or other allowed search key. |
| Results | Account email, tier, status, signup date, and available actions. |
| Customer detail | Account profile, device summary, subscription state, and recent audit entries. |
| Support action controls | Role-checked actions such as impersonation, credits, or device support where enabled. |
Operational tools
| Field or control | Function |
|---|---|
| Billing queues | Pending refund, dunning, or billing-review rows. |
| Abuse queue | Flagged account or event rows and review state. |
| Audit lookup fields | Entry ID, account ID, device ID, or supported audit filters. |
| Usage tables | Top accounts, total events, and total byte volume. |
| Announcement message | Text shown to selected hosted app users. |
| Announcement start / end | Time window for displaying an announcement. |
| Feature flag account | Account identifier for an account-scoped flag. |
| Feature flag key | Flag name. |
| Feature flag value | Boolean, string, or structured value accepted by the flag system. |