@xopcai/xopc 0.0.231 → 0.0.232

package/dist/src/gateway/hono/routes/capability-presets.js

@@ -1,187 +0,0 @@
-import { CapabilityPresetSchema, init_schema } from "../../../agent-manifest/schema.js";
-import { init_agent_scope, normalizeAgentId } from "../../../agent/agent-scope.js";
-import { listCapabilityPresets, prepareCreateCapabilityPreset, prepareDeleteCapabilityPreset, prepareUpdateCapabilityPreset, previewCapabilityPresetUpdate } from "../../capability-presets-admin.js";
-//#region src/gateway/hono/routes/capability-presets.ts
-init_schema();
-init_agent_scope();
-function parseJsonObject(raw) {
-	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return { error: "body must be an object" };
-	return raw;
-}
-function isParseError(value) {
-	return typeof value === "object" && value !== null && "error" in value && typeof value.error === "string";
-}
-function parseCreateBody(raw) {
-	const body = parseJsonObject(raw);
-	if (isParseError(body)) return body;
-	const out = {
-		id: typeof body.id === "string" ? body.id : void 0,
-		name: typeof body.name === "string" ? body.name : void 0,
-		description: typeof body.description === "string" ? body.description : void 0
-	};
-	if (Object.hasOwn(body, "version")) out.version = Number(body.version);
-	if (Object.hasOwn(body, "memory")) return { error: "memory is not a capability preset field" };
-	for (const key of [
-		"extends",
-		"models",
-		"tools",
-		"skills",
-		"workflows",
-		"boundaries",
-		"runtime",
-		"locks"
-	]) {
-		if (!Object.hasOwn(body, key)) continue;
-		const parsed = CapabilityPresetSchema.pick({ [key]: true }).safeParse({ [key]: body[key] });
-		if (!parsed.success) return { error: `${key} ${parsed.error.issues[0]?.message ?? "is invalid"}` };
-		out[key] = parsed.data[key];
-	}
-	return out;
-}
-function parseUpdateBody(raw) {
-	const body = parseJsonObject(raw);
-	if (isParseError(body)) return body;
-	const out = {};
-	if (Object.hasOwn(body, "name")) out.name = String(body.name ?? "");
-	if (Object.hasOwn(body, "description")) out.description = body.description === null ? null : String(body.description ?? "");
-	if (Object.hasOwn(body, "version")) out.version = Number(body.version);
-	if (Object.hasOwn(body, "memory")) return { error: "memory is not a capability preset field" };
-	for (const key of [
-		"extends",
-		"models",
-		"tools",
-		"skills",
-		"workflows",
-		"boundaries",
-		"runtime",
-		"locks"
-	]) {
-		if (!Object.hasOwn(body, key)) continue;
-		if (body[key] === null) {
-			out[key] = null;
-			continue;
-		}
-		const parsed = CapabilityPresetSchema.pick({ [key]: true }).safeParse({ [key]: body[key] });
-		if (!parsed.success) return { error: `${key} ${parsed.error.issues[0]?.message ?? "is invalid"}` };
-		out[key] = parsed.data[key];
-	}
-	return out;
-}
-function registerCapabilityPresetsRoutes(authenticated, deps) {
-	const { service, strictRateLimitMiddleware } = deps;
-	authenticated.get("/api/capability-presets", async (c) => {
-		return c.json({
-			ok: true,
-			payload: listCapabilityPresets(service.currentConfig)
-		});
-	});
-	authenticated.post("/api/capability-presets", strictRateLimitMiddleware, async (c) => {
-		let raw;
-		try {
-			raw = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Invalid JSON" }
-			}, 400);
-		}
-		const body = parseCreateBody(raw);
-		if (isParseError(body)) return c.json({
-			ok: false,
-			error: { message: body.error }
-		}, 400);
-		const prep = prepareCreateCapabilityPreset(service.currentConfig, body);
-		if (prep.ok === false) return c.json({
-			ok: false,
-			error: { message: prep.error }
-		}, prep.status ?? 400);
-		const save = await service.saveConfig(prep.data.nextConfig);
-		if (!save.saved) return c.json({
-			ok: false,
-			error: { message: save.error ?? "save failed" }
-		}, 500);
-		return c.json({
-			ok: true,
-			payload: {
-				presetId: prep.data.presetId,
-				presets: listCapabilityPresets(service.currentConfig)
-			}
-		});
-	});
-	authenticated.patch("/api/capability-presets/:id", strictRateLimitMiddleware, async (c) => {
-		const id = normalizeAgentId(c.req.param("id") ?? "");
-		let raw;
-		try {
-			raw = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Invalid JSON" }
-			}, 400);
-		}
-		const body = parseUpdateBody(raw);
-		if (isParseError(body)) return c.json({
-			ok: false,
-			error: { message: body.error }
-		}, 400);
-		const prep = prepareUpdateCapabilityPreset(service.currentConfig, id, body);
-		if (prep.ok === false) return c.json({
-			ok: false,
-			error: { message: prep.error }
-		}, prep.status ?? 400);
-		const save = await service.saveConfig(prep.data.nextConfig);
-		if (!save.saved) return c.json({
-			ok: false,
-			error: { message: save.error ?? "save failed" }
-		}, 500);
-		return c.json({
-			ok: true,
-			payload: listCapabilityPresets(service.currentConfig)
-		});
-	});
-	authenticated.post("/api/capability-presets/:id/preview", strictRateLimitMiddleware, async (c) => {
-		const id = normalizeAgentId(c.req.param("id") ?? "");
-		let raw;
-		try {
-			raw = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Invalid JSON" }
-			}, 400);
-		}
-		const body = parseUpdateBody(raw);
-		if (isParseError(body)) return c.json({
-			ok: false,
-			error: { message: body.error }
-		}, 400);
-		const preview = previewCapabilityPresetUpdate(service.currentConfig, id, body);
-		if (preview.ok === false) return c.json({
-			ok: false,
-			error: { message: preview.error }
-		}, preview.status ?? 400);
-		return c.json({
-			ok: true,
-			payload: preview.data
-		});
-	});
-	authenticated.delete("/api/capability-presets/:id", strictRateLimitMiddleware, async (c) => {
-		const id = normalizeAgentId(c.req.param("id") ?? "");
-		const prep = prepareDeleteCapabilityPreset(service.currentConfig, id);
-		if (prep.ok === false) return c.json({
-			ok: false,
-			error: { message: prep.error }
-		}, prep.status ?? 400);
-		const save = await service.saveConfig(prep.data.nextConfig);
-		if (!save.saved) return c.json({
-			ok: false,
-			error: { message: save.error ?? "save failed" }
-		}, 500);
-		return c.json({
-			ok: true,
-			payload: listCapabilityPresets(service.currentConfig)
-		});
-	});
-}
-//#endregion
-export { registerCapabilityPresetsRoutes };

package/dist/src/gateway/hono/routes/mobile.d.ts

@@ -1,3 +0,0 @@
-import type { Hono } from 'hono';
-import type { AuthenticatedRouteDeps } from './deps.js';
-export declare function registerMobileRoutes(authenticated: Hono, _deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/security/operator-scopes.d.ts

@@ -1,37 +0,0 @@
-/**
- * Operator scope system for fine-grained gateway API authorization.
- *
- * Each gateway API method maps to one or more required scopes.
- * Clients declare their scopes at connection time; the gateway enforces
- * that the declared scopes cover the method being invoked.
- */
-export declare const ADMIN_SCOPE: "operator.admin";
-export declare const READ_SCOPE: "operator.read";
-export declare const WRITE_SCOPE: "operator.write";
-export type OperatorScope = typeof ADMIN_SCOPE | typeof READ_SCOPE | typeof WRITE_SCOPE;
-export declare const KNOWN_OPERATOR_SCOPES: ReadonlySet<OperatorScope>;
-export declare function isOperatorScope(value: unknown): value is OperatorScope;
-/** Default scopes granted to authenticated CLI / direct connections. */
-export declare const DEFAULT_OPERATOR_SCOPES: OperatorScope[];
-/**
- * Check whether a set of granted scopes satisfies the required scope for a route.
- */
-export declare function authorizeRouteScope(routePath: string, grantedScopes: readonly OperatorScope[]): {
-    allowed: true;
-} | {
-    allowed: false;
-    requiredScope: OperatorScope;
-};
-/**
- * Check whether any of the granted scopes satisfies the required scope.
- */
-export declare function authorizeScope(requiredScope: OperatorScope, grantedScopes: readonly OperatorScope[]): {
-    allowed: true;
-} | {
-    allowed: false;
-    requiredScope: OperatorScope;
-};
-/**
- * Parse scopes from a comma-separated header value.
- */
-export declare function parseScopesHeader(headerValue: string | undefined): OperatorScope[];

package/dist/src/gateway/security/operator-scopes.js

@@ -1,147 +0,0 @@
-//#region src/gateway/security/operator-scopes.ts
-/**
-* Operator scope system for fine-grained gateway API authorization.
-*
-* Each gateway API method maps to one or more required scopes.
-* Clients declare their scopes at connection time; the gateway enforces
-* that the declared scopes cover the method being invoked.
-*/
-const ADMIN_SCOPE = "operator.admin";
-const READ_SCOPE = "operator.read";
-const WRITE_SCOPE = "operator.write";
-const KNOWN_OPERATOR_SCOPES = new Set([
-	ADMIN_SCOPE,
-	READ_SCOPE,
-	WRITE_SCOPE
-]);
-function isOperatorScope(value) {
-	return typeof value === "string" && KNOWN_OPERATOR_SCOPES.has(value);
-}
-/** Default scopes granted to authenticated CLI / direct connections. */
-const DEFAULT_OPERATOR_SCOPES = [
-	ADMIN_SCOPE,
-	READ_SCOPE,
-	WRITE_SCOPE
-];
-/**
-* Route-level scope requirements.
-* Maps HTTP route path prefixes to required minimum scope.
-*/
-const ROUTE_SCOPE_REQUIREMENTS = [
-	{
-		prefix: "/api/config",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/update",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/extensions/registry",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/agent",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/sessions",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/automations",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/automation-runs",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/channels",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/agents",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/workspace",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/skills",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/marketplace/install",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/marketplace/uninstall",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/commands",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/host-fs",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/status",
-		scope: READ_SCOPE
-	},
-	{
-		prefix: "/api/models",
-		scope: READ_SCOPE
-	},
-	{
-		prefix: "/api/logs",
-		scope: READ_SCOPE
-	},
-	{
-		prefix: "/api/doctor",
-		scope: READ_SCOPE
-	},
-	{
-		prefix: "/api/realtime",
-		scope: READ_SCOPE
-	}
-];
-/** Scope hierarchy: admin > write > read. */
-const SCOPE_HIERARCHY = {
-	[ADMIN_SCOPE]: 3,
-	[WRITE_SCOPE]: 2,
-	[READ_SCOPE]: 1
-};
-function scopeSatisfies(granted, required) {
-	return SCOPE_HIERARCHY[granted] >= SCOPE_HIERARCHY[required];
-}
-/**
-* Check whether a set of granted scopes satisfies the required scope for a route.
-*/
-function authorizeRouteScope(routePath, grantedScopes) {
-	const routeRequirement = ROUTE_SCOPE_REQUIREMENTS.find((entry) => routePath.startsWith(entry.prefix));
-	if (!routeRequirement) return authorizeScope(READ_SCOPE, grantedScopes);
-	return authorizeScope(routeRequirement.scope, grantedScopes);
-}
-/**
-* Check whether any of the granted scopes satisfies the required scope.
-*/
-function authorizeScope(requiredScope, grantedScopes) {
-	if (grantedScopes.some((granted) => scopeSatisfies(granted, requiredScope))) return { allowed: true };
-	return {
-		allowed: false,
-		requiredScope
-	};
-}
-/**
-* Parse scopes from a comma-separated header value.
-*/
-function parseScopesHeader(headerValue) {
-	if (!headerValue?.trim()) return [...DEFAULT_OPERATOR_SCOPES];
-	return headerValue.split(",").map((scope) => scope.trim()).filter(isOperatorScope);
-}
-//#endregion
-export { ADMIN_SCOPE, DEFAULT_OPERATOR_SCOPES, KNOWN_OPERATOR_SCOPES, READ_SCOPE, WRITE_SCOPE, authorizeRouteScope, authorizeScope, isOperatorScope, parseScopesHeader };

package/dist/src/migrations/config/default-capability-preset.d.ts

@@ -1,10 +0,0 @@
-import { type CapabilityPreset } from '../../agent-manifest/schema.js';
-import { type Config } from '../../config/schema.js';
-import type { Migration } from '../types.js';
-export declare const DEFAULT_CAPABILITY_PRESET_MIGRATION_ID = "2026-07-ensure-default-capability-preset";
-export declare function createDefaultCapabilityPreset(): CapabilityPreset;
-export declare function ensureDefaultCapabilityPresetInitialized(config: Config): {
-    config: Config;
-    changed: boolean;
-};
-export declare const defaultCapabilityPresetMigration: Migration;

package/dist/src/migrations/config/default-capability-preset.js

@@ -1,133 +0,0 @@
-import { CapabilityPresetSchema, DEFAULT_CAPABILITY_PRESET_ID, init_schema } from "../../agent-manifest/schema.js";
-import { ConfigSchema, init_schema as init_schema$1 } from "../../config/schema.js";
-import { existsSync, readFileSync } from "node:fs";
-//#region src/migrations/config/default-capability-preset.ts
-init_schema();
-init_schema$1();
-const DEFAULT_CAPABILITY_PRESET_MIGRATION_ID = "2026-07-ensure-default-capability-preset";
-function createDefaultCapabilityPreset() {
-	return {
-		id: DEFAULT_CAPABILITY_PRESET_ID,
-		name: "Global defaults",
-		description: "Default capabilities inherited by every agent.",
-		version: 1,
-		models: {
-			defaultRole: "deep",
-			roles: {}
-		}
-	};
-}
-function ensureDefaultCapabilityPresetInitialized(config) {
-	const agents = config.agents;
-	const capabilityPresets = { ...agents.capabilityPresets ?? {} };
-	let changed = false;
-	if (!capabilityPresets["default"]) {
-		capabilityPresets[DEFAULT_CAPABILITY_PRESET_ID] = createDefaultCapabilityPreset();
-		changed = true;
-	}
-	const defaultPreset = agents.defaultPreset?.trim() || "default";
-	if (defaultPreset !== agents.defaultPreset) changed = true;
-	if (!changed) return {
-		config,
-		changed: false
-	};
-	return {
-		config: ConfigSchema.parse({
-			...config,
-			agents: {
-				...agents,
-				defaultPreset,
-				capabilityPresets
-			}
-		}),
-		changed: true
-	};
-}
-function planned(message, details) {
-	return {
-		id: DEFAULT_CAPABILITY_PRESET_MIGRATION_ID,
-		title: "Initialize global default capability preset",
-		kind: "config",
-		safety: "auto",
-		status: "planned",
-		message,
-		details
-	};
-}
-function conflict(message, details) {
-	return {
-		id: DEFAULT_CAPABILITY_PRESET_MIGRATION_ID,
-		title: "Initialize global default capability preset",
-		kind: "config",
-		safety: "manual",
-		status: "conflict",
-		message,
-		details
-	};
-}
-function readRawConfigObject(configPath) {
-	if (!existsSync(configPath)) return null;
-	const raw = readFileSync(configPath, "utf8");
-	const parsed = JSON.parse(raw);
-	if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Config root must be an object");
-	return parsed;
-}
-const defaultCapabilityPresetMigration = {
-	id: DEFAULT_CAPABILITY_PRESET_MIGRATION_ID,
-	kind: "config",
-	safety: "auto",
-	detect(ctx) {
-		const raw = readRawConfigObject(ctx.configPath);
-		if (!raw) return null;
-		const rawAgents = raw.agents;
-		if (rawAgents !== void 0 && (rawAgents === null || typeof rawAgents !== "object" || Array.isArray(rawAgents))) return conflict("agents config is not an object; cannot initialize global defaults automatically.");
-		const agents = rawAgents ?? {};
-		const rawPresets = agents.capabilityPresets;
-		if (rawPresets !== void 0 && (rawPresets === null || typeof rawPresets !== "object" || Array.isArray(rawPresets))) return conflict("agents.capabilityPresets is not an object; cannot initialize global defaults automatically.");
-		const existingDefault = (rawPresets ?? {})[DEFAULT_CAPABILITY_PRESET_ID];
-		if (existingDefault !== void 0) {
-			const parsedPreset = CapabilityPresetSchema.safeParse(existingDefault);
-			if (!parsedPreset.success) return conflict("Existing default capability preset is invalid; please repair it manually.", { issues: parsedPreset.error.issues.slice(0, 5).map((issue) => ({
-				path: issue.path.join("."),
-				message: issue.message
-			})) });
-		}
-		const needsDefaultPresetPointer = typeof agents.defaultPreset !== "string" || agents.defaultPreset.trim().length === 0;
-		const needsDefaultPresetObject = existingDefault === void 0;
-		if (!needsDefaultPresetPointer && !needsDefaultPresetObject) return null;
-		return planned("Global default capability preset is missing and will be initialized.", {
-			addDefaultPresetPointer: needsDefaultPresetPointer,
-			addDefaultPresetObject: needsDefaultPresetObject
-		});
-	},
-	apply(ctx) {
-		const detected = this.detect(ctx);
-		if (!detected) return {
-			id: this.id,
-			title: "Initialize global default capability preset",
-			kind: "config",
-			safety: "auto",
-			status: "not_needed",
-			message: "Global default capability preset is already initialized."
-		};
-		if (detected.status === "conflict") return detected;
-		const raw = readRawConfigObject(ctx.configPath);
-		const ensured = ensureDefaultCapabilityPresetInitialized(ConfigSchema.parse(raw ?? void 0));
-		if (!ensured.changed) return {
-			...detected,
-			status: "not_needed",
-			message: "Global default capability preset is already initialized."
-		};
-		return {
-			...detected,
-			status: "applied",
-			message: "Initialized global default capability preset.",
-			details: {
-				...detected.details,
-				config: ensured.config
-			}
-		};
-	}
-};
-//#endregion
-export { DEFAULT_CAPABILITY_PRESET_MIGRATION_ID, createDefaultCapabilityPreset, defaultCapabilityPresetMigration, ensureDefaultCapabilityPresetInitialized };

package/dist/src/tunnel/enable-lan-pairing.d.ts

@@ -1,8 +0,0 @@
-import type { Config } from '../config/schema.js';
-export declare function applyLanPairingGatewayPatch(config: Config): {
-    ok: true;
-    changed: boolean;
-} | {
-    ok: false;
-    message: string;
-};

package/dist/src/tunnel/enable-lan-pairing.js

@@ -1,41 +0,0 @@
-import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../gateway/auth.js";
-import { assertGatewayRuntimeConfig } from "../gateway/runtime-config.js";
-//#region src/tunnel/enable-lan-pairing.ts
-function applyLanPairingGatewayPatch(config) {
-	if (!config.gateway) return {
-		ok: false,
-		message: "Gateway section missing from config"
-	};
-	const previousGateway = JSON.stringify(config.gateway);
-	const nextGateway = {
-		...config.gateway,
-		bind: "lan"
-	};
-	delete nextGateway.customBindHost;
-	const candidate = {
-		...config,
-		gateway: nextGateway
-	};
-	const port = nextGateway.port ?? 18790;
-	try {
-		const auth = resolveGatewayAuth({ authConfig: candidate.gateway.auth });
-		assertGatewayAuthConfigured(auth);
-		assertGatewayRuntimeConfig({
-			cfg: candidate,
-			auth,
-			port
-		});
-	} catch (err) {
-		return {
-			ok: false,
-			message: err instanceof Error ? err.message : String(err)
-		};
-	}
-	config.gateway = candidate.gateway;
-	return {
-		ok: true,
-		changed: previousGateway !== JSON.stringify(config.gateway)
-	};
-}
-//#endregion
-export { applyLanPairingGatewayPatch };

package/dist/src/tunnel/pair-context.d.ts

@@ -1,36 +0,0 @@
-import type { Config } from '../config/schema.js';
-import type { GatewayBindMode } from '../config/schema.js';
-export type MobilePairCandidateKind = 'lan' | 'tunnel' | 'reverse-proxy';
-export type MobilePairBlockReason = 'GATEWAY_LOOPBACK_ONLY' | 'NO_REACHABLE_URL';
-export type MobilePairCandidate = {
-    kind: MobilePairCandidateKind;
-    url: string;
-    label?: string;
-    reachable: boolean;
-    note?: string;
-};
-export type MobilePairContext = {
-    port: number;
-    bindMode: GatewayBindMode;
-    listenHost: string;
-    pairingReady: boolean;
-    blockReason?: MobilePairBlockReason;
-    candidates: MobilePairCandidate[];
-    recommended: {
-        mode: MobilePairCandidateKind | null;
-        url: string | null;
-    };
-    /** Ordered URLs for mobile clients (LAN first when available, then tunnel). */
-    connectUrls: string[];
-};
-export declare function buildMobilePairContext(params: {
-    config: Config;
-    tunnelPublicUrl?: string | null;
-    tunnelConnected?: boolean;
-    /**
-     * Optional override for `gateway.publicUrl`. Falls back to the configured
-     * value when omitted; useful for transient candidates (e.g. UI auto-detect
-     * from `window.location.origin` before the user persists the value).
-     */
-    reverseProxyPublicUrl?: string | null;
-}): MobilePairContext;

package/dist/src/tunnel/pair-context.js

@@ -1,77 +0,0 @@
-import { init_public_url, normalizePublicUrlOrNull } from "../config/public-url.js";
-import { enumerateLanGatewayCandidates } from "../gateway/host.js";
-import { isNetworkAccessibleBindHost, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
-import { buildMobileConnectUrlOrder } from "./pair-url.js";
-//#region src/tunnel/pair-context.ts
-init_public_url();
-function buildMobilePairContext(params) {
-	const port = params.config.gateway?.port ?? 18790;
-	const bindMode = resolveGatewayBindMode(params.config);
-	const listenHost = resolveGatewayEffectiveHost(params.config);
-	const lanListenReady = isNetworkAccessibleBindHost(listenHost);
-	const lanEnumerated = enumerateLanGatewayCandidates(port);
-	const candidates = lanEnumerated.map((entry) => ({
-		kind: "lan",
-		url: entry.url,
-		label: entry.interfaceName,
-		reachable: lanListenReady,
-		...lanListenReady ? {} : { note: "requires_lan_bind" }
-	}));
-	const tunnelUrl = params.tunnelPublicUrl?.trim() || null;
-	const tunnelConnected = params.tunnelConnected === true && Boolean(tunnelUrl);
-	if (tunnelConnected && tunnelUrl) candidates.unshift({
-		kind: "tunnel",
-		url: tunnelUrl,
-		reachable: true
-	});
-	const configuredReverseProxy = normalizePublicUrlOrNull(params.config.gateway?.publicUrl);
-	const reverseProxyUrl = params.reverseProxyPublicUrl !== void 0 ? normalizePublicUrlOrNull(params.reverseProxyPublicUrl) : configuredReverseProxy;
-	if (reverseProxyUrl) candidates.unshift({
-		kind: "reverse-proxy",
-		url: reverseProxyUrl,
-		reachable: true
-	});
-	let recommended = {
-		mode: null,
-		url: null
-	};
-	if (reverseProxyUrl) recommended = {
-		mode: "reverse-proxy",
-		url: reverseProxyUrl
-	};
-	else if (tunnelConnected && tunnelUrl) recommended = {
-		mode: "tunnel",
-		url: tunnelUrl
-	};
-	else if (lanListenReady && lanEnumerated[0]) recommended = {
-		mode: "lan",
-		url: lanEnumerated[0].url
-	};
-	else if (lanEnumerated[0]) recommended = {
-		mode: "lan",
-		url: lanEnumerated[0].url
-	};
-	const pairingReady = Boolean(reverseProxyUrl || tunnelConnected || lanListenReady && lanEnumerated.length > 0);
-	let blockReason;
-	if (!pairingReady) blockReason = !lanListenReady && !tunnelConnected ? "GATEWAY_LOOPBACK_ONLY" : "NO_REACHABLE_URL";
-	const lanUrlForConnect = lanListenReady && lanEnumerated[0] ? lanEnumerated[0].url : null;
-	const hasUpstream = Boolean(reverseProxyUrl) || tunnelConnected;
-	const connectUrls = buildMobileConnectUrlOrder({
-		reverseProxyUrl,
-		baseUrl: reverseProxyUrl ? reverseProxyUrl : tunnelConnected && tunnelUrl ? tunnelUrl : lanListenReady && recommended.url ? recommended.url : null,
-		lanUrl: hasUpstream ? lanUrlForConnect : null,
-		tunnelUrl: tunnelConnected ? tunnelUrl : null
-	});
-	return {
-		port,
-		bindMode,
-		listenHost,
-		pairingReady,
-		...blockReason ? { blockReason } : {},
-		candidates,
-		recommended,
-		connectUrls
-	};
-}
-//#endregion
-export { buildMobilePairContext };