@livedesk/hub 0.1.32 → 0.1.33

package/src/settings/settings-schema.js

@@ -1,239 +1,251 @@
-import os from 'node:os';
-import path from 'node:path';
-
-export const SETTINGS_SCHEMA_VERSION = 2;
-
-export const DEFAULT_LIVEDESK_SETTINGS = Object.freeze({
-  settingsSchemaVersion: SETTINGS_SCHEMA_VERSION,
-  connection: {},
-  security: {
-    accessMode: 'trusted-only',
-    allowInternetConnections: false,
-    allowLanConnections: true,
-    lockOnControlEnd: true,
-    idleControlMinutes: 30
-  },
-  control: {
-    allowKeyboardMouse: true,
-    allowSystemShortcuts: true,
-    allowClipboardText: true,
-    allowRemoteRestart: false,
-    reconnectAfterRemoteRestart: true,
-    allowSwitchingMonitors: true,
-    showConnectionToolbar: true,
-    showRemoteCursor: true,
-    openControlOnDoubleClick: true,
-    startRemoteAudioWithControl: false,
-    fitRemoteScreen: true,
-    rememberLastMonitor: true,
-    keepControlReadyBetweenPages: true
-  },
-  wall: {
-    performanceMode: 'auto',
-    autoStart: true,
-    connectedOnly: false,
-    keepEmptySlots: true,
-    showDeviceStatus: true,
-    showPerformanceDetails: false,
-    pauseHiddenTiles: true,
-    reduceWhenHidden: true,
-    autoAdjustTileQuality: true,
-    rememberDevicePositions: true
-  },
-  filesAudio: {
-    allowFileTransfer: true,
-    allowFolderSync: false,
-    openReceivedFolder: false,
-    notifyTransferComplete: true,
-    defaultReceiveFolder: 'Desktop/LiveDeskFiles',
-    maxFileSizeBytes: 1024 * 1024 * 1024,
-    allowRemoteAudio: true,
-    startAudioMuted: false,
-    rememberVolume: true,
-    automaticallyRecoverAudio: true,
-    showAudioTroubleshooting: false,
-    rollingBufferEnabled: false,
-    recordingQuality: 'standard',
-    timelapseIntervalSeconds: 10,
-    includeRemoteCursor: true,
-    captureSaveLocation: 'LiveDesk Captures',
-    captureAutoDelete: 'never'
-  },
-  agent: {
-    enabled: false,
-    defaultPermissionMode: 'safe-auto',
-    askBeforeDestructive: true,
-    allowProcessManagement: true,
-    allowServiceManagement: true,
-    allowFileChanges: true,
-    allowCommandExecution: false,
-    allowSoftwareInstallation: false,
-    allowPowerActions: false,
-    keepAuditHistory: true,
-    timeoutMinutes: 10
-  },
-  advanced: {
-    wallFrameMode: 'auto',
-    wallFps: 20,
-    wallMaxWidth: 960,
-    wallMaxHeight: 540,
-    wallQuality: 55,
-    controlFrameMode: 'mode3-h264-hw',
-    controlFps: 30,
-    controlMaxWidth: 1920,
-    controlMaxHeight: 1080,
-    controlQuality: 60,
-    transport: 'auto',
-    verboseLogs: false,
-    frameStatistics: false
-  }
-});
-
-const ENUMS = {
-  accessMode: new Set(['trusted-only', 'ask-every-time', 'view-only', 'block-remote-access']),
-  performanceMode: new Set(['auto', 'responsive', 'quality', 'custom']),
-  permissionMode: new Set(['ask', 'safe-auto', 'full-access', 'custom']),
-  wallFrameMode: new Set(['auto', 'mode2-lzo', 'mode3-h264-hw', 'mode4-h264-atlas']),
-  controlFrameMode: new Set(['mode3-h264-hw', 'mode5-lzo-delta']),
-  transport: new Set(['auto', 'encrypted']),
-  recordingQuality: new Set(['standard', 'high']),
-  captureAutoDelete: new Set(['never', '7-days', '30-days'])
-};
-
-function booleanValue(value, fallback) {
-  return typeof value === 'boolean' ? value : fallback;
-}
-
-function numberValue(value, min, max, fallback) {
-  const number = Number(value);
-  return Number.isFinite(number) ? Math.max(min, Math.min(max, Math.round(number))) : fallback;
-}
-
-function enumValue(value, allowed, fallback) {
-  const normalized = String(value ?? fallback).trim().toLowerCase();
-  return allowed.has(normalized) ? normalized : fallback;
-}
-
-function stringValue(value, fallback, maxLength = 600) {
-  return typeof value === 'string' ? value.replace(/[\0\r\n]/g, ' ').trim().slice(0, maxLength) : fallback;
-}
-
-function normalizeSection(source, defaults, rules = {}) {
-  const input = source && typeof source === 'object' && !Array.isArray(source) ? source : {};
-  const result = {};
-  for (const [key, fallback] of Object.entries(defaults)) {
-    const rule = rules[key];
-    if (rule?.type === 'boolean') result[key] = booleanValue(input[key], fallback);
-    else if (rule?.type === 'number') result[key] = numberValue(input[key], rule.min, rule.max, fallback);
-    else if (rule?.type === 'enum') result[key] = enumValue(input[key], rule.values, fallback);
-    else if (rule?.type === 'string') result[key] = stringValue(input[key], fallback, rule.maxLength);
-    else result[key] = input[key] === undefined ? fallback : fallback;
-  }
-  return result;
-}
-
-const bools = keys => Object.fromEntries(keys.map(key => [key, { type: 'boolean' }]));
-const numbers = (entries) => Object.fromEntries(entries.map(([key, min, max]) => [key, { type: 'number', min, max }]));
-
-const RULES = {
-  connection: {},
-  security: {
-    accessMode: { type: 'enum', values: ENUMS.accessMode },
-    ...bools(['allowInternetConnections', 'allowLanConnections', 'lockOnControlEnd']),
-    ...numbers([['idleControlMinutes', 5, 1440]])
-  },
-  control: {
-    ...bools(['allowKeyboardMouse', 'allowSystemShortcuts', 'allowClipboardText', 'allowRemoteRestart', 'reconnectAfterRemoteRestart', 'allowSwitchingMonitors', 'showConnectionToolbar', 'showRemoteCursor', 'openControlOnDoubleClick', 'startRemoteAudioWithControl', 'fitRemoteScreen', 'rememberLastMonitor', 'keepControlReadyBetweenPages'])
-  },
-  wall: {
-    performanceMode: { type: 'enum', values: ENUMS.performanceMode },
-    ...bools(['autoStart', 'connectedOnly', 'keepEmptySlots', 'showDeviceStatus', 'showPerformanceDetails', 'pauseHiddenTiles', 'reduceWhenHidden', 'autoAdjustTileQuality', 'rememberDevicePositions'])
-  },
-  filesAudio: {
-    ...bools(['allowFileTransfer', 'allowFolderSync', 'openReceivedFolder', 'notifyTransferComplete', 'allowRemoteAudio', 'startAudioMuted', 'rememberVolume', 'automaticallyRecoverAudio', 'showAudioTroubleshooting', 'rollingBufferEnabled', 'includeRemoteCursor']),
-    recordingQuality: { type: 'enum', values: ENUMS.recordingQuality },
-    captureAutoDelete: { type: 'enum', values: ENUMS.captureAutoDelete },
-    timelapseIntervalSeconds: { type: 'number', min: 5, max: 60 },
-    defaultReceiveFolder: { type: 'string', maxLength: 600 },
-    captureSaveLocation: { type: 'string', maxLength: 120 },
-    maxFileSizeBytes: { type: 'number', min: 1, max: Number.MAX_SAFE_INTEGER }
-  },
-  agent: {
-    defaultPermissionMode: { type: 'enum', values: ENUMS.permissionMode },
-    ...bools(['enabled', 'askBeforeDestructive', 'allowProcessManagement', 'allowServiceManagement', 'allowFileChanges', 'allowCommandExecution', 'allowSoftwareInstallation', 'allowPowerActions', 'keepAuditHistory']),
-    timeoutMinutes: { type: 'number', min: 1, max: 120 }
-  },
-  advanced: {
-    wallFrameMode: { type: 'enum', values: ENUMS.wallFrameMode },
-    controlFrameMode: { type: 'enum', values: ENUMS.controlFrameMode },
-    transport: { type: 'enum', values: ENUMS.transport },
-    ...bools(['verboseLogs', 'frameStatistics']),
-    ...numbers([['wallFps', 1, 60], ['wallMaxWidth', 320, 3840], ['wallMaxHeight', 180, 2160], ['wallQuality', 20, 95], ['controlFps', 20, 60], ['controlMaxWidth', 640, 3840], ['controlMaxHeight', 360, 2160], ['controlQuality', 20, 95]])
-  }
-};
-
-export function normalizeLiveDeskSettings(value = {}) {
-  const source = value && typeof value === 'object' && !Array.isArray(value) ? value : {};
-  const settings = {
-    settingsSchemaVersion: SETTINGS_SCHEMA_VERSION,
-    connection: normalizeSection(source.connection, DEFAULT_LIVEDESK_SETTINGS.connection, RULES.connection),
-    security: normalizeSection(source.security, DEFAULT_LIVEDESK_SETTINGS.security, RULES.security),
-    control: normalizeSection(source.control, DEFAULT_LIVEDESK_SETTINGS.control, RULES.control),
-    wall: normalizeSection(source.wall, DEFAULT_LIVEDESK_SETTINGS.wall, RULES.wall),
-    filesAudio: normalizeSection(source.filesAudio, DEFAULT_LIVEDESK_SETTINGS.filesAudio, RULES.filesAudio),
-    agent: normalizeSection(source.agent, DEFAULT_LIVEDESK_SETTINGS.agent, RULES.agent),
-    advanced: normalizeSection(source.advanced, DEFAULT_LIVEDESK_SETTINGS.advanced, RULES.advanced)
-  };
-  if (!settings.security.allowInternetConnections) {
-    settings.advanced.transport = settings.advanced.transport === 'encrypted' ? 'encrypted' : 'auto';
-  }
-  if (settings.agent.defaultPermissionMode === 'safe-auto') {
-    settings.agent.askBeforeDestructive = true;
-  }
-  if (![5, 10, 30, 60].includes(settings.filesAudio.timelapseIntervalSeconds)) {
-    settings.filesAudio.timelapseIntervalSeconds = 10;
-  }
-  return settings;
-}
-
-export function defaultSettingsPath(dataDir = undefined) {
-  return path.join(dataDir || path.join(os.homedir(), '.livedesk'), 'settings.json');
-}
-
-export function publicSettings(settings) {
-  return normalizeLiveDeskSettings(settings);
-}
-
-export function effectiveDevicePolicy(settings = DEFAULT_LIVEDESK_SETTINGS) {
-  const normalized = normalizeLiveDeskSettings(settings);
-  // The retired ask-every-time surface has no interactive approval authority,
-  // so a persisted legacy value must fail closed. View-only remains able to
-  // receive video/audio while every mutating operation is blocked.
-  const accessMode = normalized.security.accessMode === 'ask-every-time'
-    ? 'block-remote-access'
-    : normalized.security.accessMode;
-  const allowMutation = accessMode === 'trusted-only';
-  return {
-    settingsSchemaVersion: normalized.settingsSchemaVersion,
-    policyRevision: Number(settings?.revision || 0),
-    accessMode,
-    allowInternetConnections: normalized.security.allowInternetConnections,
-    allowLanConnections: normalized.security.allowLanConnections,
-    // Encryption and no-overwrite are structural invariants. They are not
-    // user preferences and cannot be disabled through a legacy settings file.
-    requireEncryptedConnections: true,
-    allowUnencryptedLanFallback: false,
-    visibleControlIndicator: true,
-    lockOnControlEnd: normalized.security.lockOnControlEnd,
-    disconnectIdleControlSessions: true,
-    idleControlMinutes: normalized.security.idleControlMinutes,
-    allowFileOverwrite: false,
-    maxFileSizeBytes: normalized.filesAudio.maxFileSizeBytes,
-    allowControl: allowMutation && normalized.control.allowKeyboardMouse,
-    allowClipboardText: allowMutation && normalized.control.allowClipboardText,
-    allowPowerActions: allowMutation && normalized.control.allowRemoteRestart,
-    allowFileTransfer: allowMutation && normalized.filesAudio.allowFileTransfer,
-    allowRemoteAudio: accessMode !== 'block-remote-access' && normalized.filesAudio.allowRemoteAudio,
-    allowAgent: allowMutation && normalized.agent.enabled
-  };
-}
+import os from 'node:os';
+import path from 'node:path';
+
+export const SETTINGS_SCHEMA_VERSION = 3;
+
+export const DEFAULT_LIVEDESK_SETTINGS = Object.freeze({
+  settingsSchemaVersion: SETTINGS_SCHEMA_VERSION,
+  connection: {},
+  security: {
+    accessMode: 'trusted-only',
+    allowInternetConnections: true,
+    allowLanConnections: true,
+    lockOnControlEnd: true,
+    idleControlMinutes: 30
+  },
+  control: {
+    allowKeyboardMouse: true,
+    allowSystemShortcuts: true,
+    allowClipboardText: true,
+    allowRemoteRestart: false,
+    reconnectAfterRemoteRestart: true,
+    allowSwitchingMonitors: true,
+    showConnectionToolbar: true,
+    showRemoteCursor: true,
+    openControlOnDoubleClick: true,
+    startRemoteAudioWithControl: false,
+    fitRemoteScreen: true,
+    rememberLastMonitor: true,
+    keepControlReadyBetweenPages: true
+  },
+  wall: {
+    performanceMode: 'auto',
+    autoStart: true,
+    connectedOnly: false,
+    keepEmptySlots: true,
+    showDeviceStatus: true,
+    showPerformanceDetails: false,
+    pauseHiddenTiles: true,
+    reduceWhenHidden: true,
+    autoAdjustTileQuality: true,
+    rememberDevicePositions: true
+  },
+  filesAudio: {
+    allowFileTransfer: true,
+    allowFolderSync: false,
+    openReceivedFolder: false,
+    notifyTransferComplete: true,
+    defaultReceiveFolder: 'Desktop/LiveDeskFiles',
+    maxFileSizeBytes: 1024 * 1024 * 1024,
+    allowRemoteAudio: true,
+    startAudioMuted: false,
+    rememberVolume: true,
+    automaticallyRecoverAudio: true,
+    showAudioTroubleshooting: false,
+    rollingBufferEnabled: false,
+    recordingQuality: 'standard',
+    timelapseIntervalSeconds: 10,
+    includeRemoteCursor: true,
+    captureSaveLocation: 'LiveDesk Captures',
+    captureAutoDelete: 'never'
+  },
+  agent: {
+    enabled: false,
+    defaultPermissionMode: 'safe-auto',
+    askBeforeDestructive: true,
+    allowProcessManagement: true,
+    allowServiceManagement: true,
+    allowFileChanges: true,
+    allowCommandExecution: false,
+    allowSoftwareInstallation: false,
+    allowPowerActions: false,
+    keepAuditHistory: true,
+    timeoutMinutes: 10
+  },
+  advanced: {
+    wallFrameMode: 'auto',
+    wallFps: 20,
+    wallMaxWidth: 960,
+    wallMaxHeight: 540,
+    wallQuality: 55,
+    controlFrameMode: 'mode3-h264-hw',
+    controlFps: 30,
+    controlMaxWidth: 1920,
+    controlMaxHeight: 1080,
+    controlQuality: 60,
+    transport: 'auto',
+    verboseLogs: false,
+    frameStatistics: false
+  }
+});
+
+const ENUMS = {
+  accessMode: new Set(['trusted-only', 'ask-every-time', 'view-only', 'block-remote-access']),
+  performanceMode: new Set(['auto', 'responsive', 'quality', 'custom']),
+  permissionMode: new Set(['ask', 'safe-auto', 'full-access', 'custom']),
+  wallFrameMode: new Set(['auto', 'mode2-lzo', 'mode3-h264-hw', 'mode4-h264-atlas']),
+  controlFrameMode: new Set(['mode3-h264-hw', 'mode5-lzo-delta']),
+  transport: new Set(['auto', 'encrypted']),
+  recordingQuality: new Set(['standard', 'high']),
+  captureAutoDelete: new Set(['never', '7-days', '30-days'])
+};
+
+function booleanValue(value, fallback) {
+  return typeof value === 'boolean' ? value : fallback;
+}
+
+function numberValue(value, min, max, fallback) {
+  const number = Number(value);
+  return Number.isFinite(number) ? Math.max(min, Math.min(max, Math.round(number))) : fallback;
+}
+
+function enumValue(value, allowed, fallback) {
+  const normalized = String(value ?? fallback).trim().toLowerCase();
+  return allowed.has(normalized) ? normalized : fallback;
+}
+
+function stringValue(value, fallback, maxLength = 600) {
+  return typeof value === 'string' ? value.replace(/[\0\r\n]/g, ' ').trim().slice(0, maxLength) : fallback;
+}
+
+function normalizeSection(source, defaults, rules = {}) {
+  const input = source && typeof source === 'object' && !Array.isArray(source) ? source : {};
+  const result = {};
+  for (const [key, fallback] of Object.entries(defaults)) {
+    const rule = rules[key];
+    if (rule?.type === 'boolean') result[key] = booleanValue(input[key], fallback);
+    else if (rule?.type === 'number') result[key] = numberValue(input[key], rule.min, rule.max, fallback);
+    else if (rule?.type === 'enum') result[key] = enumValue(input[key], rule.values, fallback);
+    else if (rule?.type === 'string') result[key] = stringValue(input[key], fallback, rule.maxLength);
+    else result[key] = input[key] === undefined ? fallback : fallback;
+  }
+  return result;
+}
+
+const bools = keys => Object.fromEntries(keys.map(key => [key, { type: 'boolean' }]));
+const numbers = (entries) => Object.fromEntries(entries.map(([key, min, max]) => [key, { type: 'number', min, max }]));
+
+const RULES = {
+  connection: {},
+  security: {
+    accessMode: { type: 'enum', values: ENUMS.accessMode },
+    ...bools(['allowInternetConnections', 'allowLanConnections', 'lockOnControlEnd']),
+    ...numbers([['idleControlMinutes', 5, 1440]])
+  },
+  control: {
+    ...bools(['allowKeyboardMouse', 'allowSystemShortcuts', 'allowClipboardText', 'allowRemoteRestart', 'reconnectAfterRemoteRestart', 'allowSwitchingMonitors', 'showConnectionToolbar', 'showRemoteCursor', 'openControlOnDoubleClick', 'startRemoteAudioWithControl', 'fitRemoteScreen', 'rememberLastMonitor', 'keepControlReadyBetweenPages'])
+  },
+  wall: {
+    performanceMode: { type: 'enum', values: ENUMS.performanceMode },
+    ...bools(['autoStart', 'connectedOnly', 'keepEmptySlots', 'showDeviceStatus', 'showPerformanceDetails', 'pauseHiddenTiles', 'reduceWhenHidden', 'autoAdjustTileQuality', 'rememberDevicePositions'])
+  },
+  filesAudio: {
+    ...bools(['allowFileTransfer', 'allowFolderSync', 'openReceivedFolder', 'notifyTransferComplete', 'allowRemoteAudio', 'startAudioMuted', 'rememberVolume', 'automaticallyRecoverAudio', 'showAudioTroubleshooting', 'rollingBufferEnabled', 'includeRemoteCursor']),
+    recordingQuality: { type: 'enum', values: ENUMS.recordingQuality },
+    captureAutoDelete: { type: 'enum', values: ENUMS.captureAutoDelete },
+    timelapseIntervalSeconds: { type: 'number', min: 5, max: 60 },
+    defaultReceiveFolder: { type: 'string', maxLength: 600 },
+    captureSaveLocation: { type: 'string', maxLength: 120 },
+    maxFileSizeBytes: { type: 'number', min: 1, max: Number.MAX_SAFE_INTEGER }
+  },
+  agent: {
+    defaultPermissionMode: { type: 'enum', values: ENUMS.permissionMode },
+    ...bools(['enabled', 'askBeforeDestructive', 'allowProcessManagement', 'allowServiceManagement', 'allowFileChanges', 'allowCommandExecution', 'allowSoftwareInstallation', 'allowPowerActions', 'keepAuditHistory']),
+    timeoutMinutes: { type: 'number', min: 1, max: 120 }
+  },
+  advanced: {
+    wallFrameMode: { type: 'enum', values: ENUMS.wallFrameMode },
+    controlFrameMode: { type: 'enum', values: ENUMS.controlFrameMode },
+    transport: { type: 'enum', values: ENUMS.transport },
+    ...bools(['verboseLogs', 'frameStatistics']),
+    ...numbers([['wallFps', 1, 60], ['wallMaxWidth', 320, 3840], ['wallMaxHeight', 180, 2160], ['wallQuality', 20, 95], ['controlFps', 20, 60], ['controlMaxWidth', 640, 3840], ['controlMaxHeight', 360, 2160], ['controlQuality', 20, 95]])
+  }
+};
+
+export function migrateLiveDeskSettings(value = {}) {
+  const source = value && typeof value === 'object' && !Array.isArray(value) ? structuredClone(value) : {};
+  const sourceVersion = Math.max(0, Number(source.settingsSchemaVersion) || 0);
+  if (sourceVersion < 3) {
+    source.security = {
+      ...(source.security && typeof source.security === 'object' && !Array.isArray(source.security) ? source.security : {}),
+      allowInternetConnections: true
+    };
+  }
+  return normalizeLiveDeskSettings(source);
+}
+
+export function normalizeLiveDeskSettings(value = {}) {
+  const source = value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+  const settings = {
+    settingsSchemaVersion: SETTINGS_SCHEMA_VERSION,
+    connection: normalizeSection(source.connection, DEFAULT_LIVEDESK_SETTINGS.connection, RULES.connection),
+    security: normalizeSection(source.security, DEFAULT_LIVEDESK_SETTINGS.security, RULES.security),
+    control: normalizeSection(source.control, DEFAULT_LIVEDESK_SETTINGS.control, RULES.control),
+    wall: normalizeSection(source.wall, DEFAULT_LIVEDESK_SETTINGS.wall, RULES.wall),
+    filesAudio: normalizeSection(source.filesAudio, DEFAULT_LIVEDESK_SETTINGS.filesAudio, RULES.filesAudio),
+    agent: normalizeSection(source.agent, DEFAULT_LIVEDESK_SETTINGS.agent, RULES.agent),
+    advanced: normalizeSection(source.advanced, DEFAULT_LIVEDESK_SETTINGS.advanced, RULES.advanced)
+  };
+  if (!settings.security.allowInternetConnections) {
+    settings.advanced.transport = settings.advanced.transport === 'encrypted' ? 'encrypted' : 'auto';
+  }
+  if (settings.agent.defaultPermissionMode === 'safe-auto') {
+    settings.agent.askBeforeDestructive = true;
+  }
+  if (![5, 10, 30, 60].includes(settings.filesAudio.timelapseIntervalSeconds)) {
+    settings.filesAudio.timelapseIntervalSeconds = 10;
+  }
+  return settings;
+}
+
+export function defaultSettingsPath(dataDir = undefined) {
+  return path.join(dataDir || path.join(os.homedir(), '.livedesk'), 'settings.json');
+}
+
+export function publicSettings(settings) {
+  return normalizeLiveDeskSettings(settings);
+}
+
+export function effectiveDevicePolicy(settings = DEFAULT_LIVEDESK_SETTINGS) {
+  const normalized = normalizeLiveDeskSettings(settings);
+  // The retired ask-every-time surface has no interactive approval authority,
+  // so a persisted legacy value must fail closed. View-only remains able to
+  // receive video/audio while every mutating operation is blocked.
+  const accessMode = normalized.security.accessMode === 'ask-every-time'
+    ? 'block-remote-access'
+    : normalized.security.accessMode;
+  const allowMutation = accessMode === 'trusted-only';
+  return {
+    settingsSchemaVersion: normalized.settingsSchemaVersion,
+    policyRevision: Number(settings?.revision || 0),
+    accessMode,
+    allowInternetConnections: normalized.security.allowInternetConnections,
+    allowLanConnections: normalized.security.allowLanConnections,
+    // Encryption and no-overwrite are structural invariants. They are not
+    // user preferences and cannot be disabled through a legacy settings file.
+    requireEncryptedConnections: true,
+    allowUnencryptedLanFallback: false,
+    visibleControlIndicator: true,
+    lockOnControlEnd: normalized.security.lockOnControlEnd,
+    disconnectIdleControlSessions: true,
+    idleControlMinutes: normalized.security.idleControlMinutes,
+    allowFileOverwrite: false,
+    maxFileSizeBytes: normalized.filesAudio.maxFileSizeBytes,
+    allowControl: allowMutation && normalized.control.allowKeyboardMouse,
+    allowClipboardText: allowMutation && normalized.control.allowClipboardText,
+    allowPowerActions: allowMutation && normalized.control.allowRemoteRestart,
+    allowFileTransfer: allowMutation && normalized.filesAudio.allowFileTransfer,
+    allowRemoteAudio: accessMode !== 'block-remote-access' && normalized.filesAudio.allowRemoteAudio,
+    allowAgent: allowMutation && normalized.agent.enabled
+  };
+}