The phone-oriented remote-control server: its HTTP surface, the controller actions phones request, and the concurrency limits that keep them safe.