Agent-readable docs index: /llms.txt. Full docs in one file: /llms-full.txt. Download /docs.zip to grep all markdown files locally.

Swipe from the control plane

/v1/phones/{phone}/swipePOST
For the control plane's Take Control only: a person drags on the live screen and the iPhone gets a swipe with the same start, end and duration. Like POST /v1/leases/{lease}/swipe it is a human-like flick, lifted while still moving. No lease, and AssistiveTouch like POST /v1/phones/{phone}/tap. Only on the unix socket.
Authorizationoptional
bearerAuth?Bearer <token>
Required on the tunnel. An API token of the account, from ghosthand tunnel url --new-token. The unix socket needs no token
Request Bodyapplication/jsonrequired
from *object
Where the drag starts
Show properties
x *number
Distance from the left edge, as a fraction of the screen width
Example: 0.5Min: 0Max: 1
y *number
Distance from the top edge, as a fraction of the screen height
Example: 0.25Min: 0Max: 1
to *object
Where the drag ends
Show properties
x *number
Distance from the left edge, as a fraction of the screen width
Example: 0.5Min: 0Max: 1
y *number
Distance from the top edge, as a fraction of the screen height
Example: 0.25Min: 0Max: 1
durationMs *number
How long the drag took
Example: 180Min: 16Max: 10000
Response
200 · Swiped
message *string
What the daemon did, for people and logs
Default · Error (RFC 9457 problem details). `code` is stable; switch on it, not on `title` or `detail`.
code *"invalid-request" | "unauthorized" | "not-found" | "device-not-found" | "no-device" | "multiple-devices" | "permission-denied" | "bluetooth-unavailable" | "bluetooth-disconnected" | "no-frame" | "device-locked" | "lock-failed" | "pairing-timeout" | "pointer-not-found" | "lock-state-unavailable" | "lockdown-unavailable" | "unlock-failed" | "mute-unconfirmed" | "text-not-found" | "wait-text-timeout" | "cancelled" | "lease-invalid" | "device-leased" | "recording-active" | "no-recording" | "recording-failed" | "daemon-busy" | "tunnel-offline" | "login-required" | "subscription-required" | "unsupported-in-mode" | "xctest-unavailable" | "task-failed" | "internal-error"
Stable error code. Switch on it; title and detail are for people.
title *string
Short summary of the code, the same for every error with this code
status *integer
HTTP status of the error. In stream mode the response status stays 200.
detail *string
What happened and what to do next. Agents should read it.
Request example
curl -X POST "https://ghosthand.dev/macs/studio/v1/phones/<phone>/swipe" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
  "from": {
    "x": 0.5,
    "y": 0.25
  },
  "to": {
    "x": 0.5,
    "y": 0.25
  },
  "durationMs": 180
}'
Response example
{
  "code": "device-leased",
  "title": "iPhone leased by another client",
  "status": 409,
  "detail": "Tommy's iPhone is in use by another lease:\n  ses_456 (book a table on OpenTable), acquired 2 min ago, last used 10 s ago (tap)\nDecide first: if that task is still active, give up or tell the user the iPhone is busy."
}