dsh-mobile 0.5.1 → 0.5.3

package/lib/index.d.mts

@@ -28,9 +28,9 @@ interface DeviceStore {
   save(snapshot: DeviceSnapshot): Promise<void>;
 }
 /** Validate durable data before it can authorize a device. */
-declare function parseDeviceSnapshot(value: unknown, maximumDevices?: number): DeviceSnapshot;
+export declare function parseDeviceSnapshot(value: unknown, maximumDevices?: number): DeviceSnapshot;
 /** Atomic JSON implementation with symlink refusal and owner-only file creation. */
-declare class JsonDeviceStore implements DeviceStore {
+export declare class JsonDeviceStore implements DeviceStore {
   private readonly file;
   private readonly maximumDevices;
   constructor(file: string, maximumDevices?: number);
@@ -38,7 +38,7 @@ declare class JsonDeviceStore implements DeviceStore {
   save(snapshot: DeviceSnapshot): Promise<void>;
 }
 /** In-memory store useful for embedding and deterministic tests. */
-declare class MemoryDeviceStore implements DeviceStore {
+export declare class MemoryDeviceStore implements DeviceStore {
   private snapshot;
   constructor(initial?: DeviceSnapshot);
   load(): Promise<DeviceSnapshot>;
@@ -49,7 +49,7 @@ declare class MemoryDeviceStore implements DeviceStore {
 //#endregion
 //#region src/access.d.ts
 /** Stable error categories converted to deliberately terse HTTP responses. */
-declare class AccessError extends Error {
+export declare class AccessError extends Error {
   readonly status: number;
   readonly code: string;
   constructor(status: number, code: string);
@@ -105,7 +105,7 @@ interface DeviceSummary {
   readonly revokedAt?: number;
 }
 /** Fixed-window limiter whose attacker-controlled key table is itself bounded. */
-declare class BoundedRateLimiter {
+export declare class BoundedRateLimiter {
   private readonly limit;
   private readonly windowMs;
   private readonly maximumKeys;
@@ -117,7 +117,7 @@ declare class BoundedRateLimiter {
   get size(): number;
 }
 /** Pairing, persistent-device, short-Session, revocation, and CSRF state machine. */
-declare class AccessController {
+export declare class AccessController {
   private readonly store;
   private readonly options;
   private readonly now;
@@ -194,23 +194,23 @@ interface AuthoritySpec {
   readonly port?: number;
 }
 /** Parse and canonicalize one IPv4 or IPv6 CIDR. */
-declare function parseCidr(source: string): ParsedCidr;
+export declare function parseCidr(source: string): ParsedCidr;
 /** Whether a directly connected socket address belongs to at least one allowed CIDR. */
-declare function addressAllowed(address: string | undefined, cidrs: readonly ParsedCidr[]): boolean;
+export declare function addressAllowed(address: string | undefined, cidrs: readonly ParsedCidr[]): boolean;
 /** Whether an IP literal is loopback and therefore eligible for HTTP-only development. */
-declare function isLoopbackAddress(address: string): boolean;
+export declare function isLoopbackAddress(address: string): boolean;
 /**
  * Whether a dotted-quad IPv4 literal is globally routable and therefore usable
  * as a public VPS / remote HTTPS endpoint. Rejects documentation addresses such
  * as 203.0.113.10 alongside private, shared, and reserved space.
  */
-declare function isGloballyRoutableIpv4(address: string): boolean;
+export declare function isGloballyRoutableIpv4(address: string): boolean;
 /** Parse a bare host or host:port authority without accepting URL components. */
-declare function parseAuthority(source: string): AuthoritySpec;
+export declare function parseAuthority(source: string): AuthoritySpec;
 /** Resolve an authority against the actual listener port. */
-declare function resolveAuthority(spec: AuthoritySpec, listenerPort: number): string;
+export declare function resolveAuthority(spec: AuthoritySpec, listenerPort: number): string;
 /** Exact Host/Origin/CIDR policy for the directly exposed listener. */
-declare class RequestTrustPolicy {
+export declare class RequestTrustPolicy {
   readonly cidrs: readonly ParsedCidr[];
   readonly authorities: ReadonlySet<string>;
   readonly origins: ReadonlySet<string>;
@@ -328,11 +328,11 @@ interface ResolvedGatewayConfig {
   readonly maxRateLimitKeys: number;
 }
 /** Loader-facing defaults; {@link parseGatewayConfig} enforces cross-field security rules. */
-declare const Config: z<PluginConfig>;
+export declare const Config: z<PluginConfig>;
 /** Resolve the hidden runtime-control file independently from gateway configuration. */
-declare function parseControlFile(value: unknown): string;
+export declare function parseControlFile(value: unknown): string;
 /** Parse configuration and reject unsafe topology, credential, and resource combinations. */
-declare function parseGatewayConfig(raw: unknown): ResolvedGatewayConfig;
+export declare function parseGatewayConfig(raw: unknown): ResolvedGatewayConfig;
 //#endregion
 //#region src/control.d.ts
 /** Versioned durable preference for the resident mobile-access runtime. */
@@ -350,9 +350,9 @@ interface MobileAccessRuntime {
   close(): Promise<void>;
 }
 /** Validate control state loaded across the filesystem boundary. */
-declare function parseMobileAccessControlState(value: unknown): MobileAccessControlState;
+export declare function parseMobileAccessControlState(value: unknown): MobileAccessControlState;
 /** Atomic JSON store whose absent-file state comes from the installation-time default. */
-declare class JsonMobileAccessControlStore implements MobileAccessControlStore {
+export declare class JsonMobileAccessControlStore implements MobileAccessControlStore {
   private readonly file;
   private readonly initiallyEnabled;
   constructor(file: string, initiallyEnabled: boolean);
@@ -362,7 +362,7 @@ declare class JsonMobileAccessControlStore implements MobileAccessControlStore {
   save(state: MobileAccessControlState): Promise<void>;
 }
 /** Serialized persistent lifecycle for the gateway behind the always-loaded Cordis entry. */
-declare class MobileAccessGatewayController {
+export declare class MobileAccessGatewayController {
   private readonly store;
   private readonly startRuntime;
   private runtime;
@@ -386,18 +386,18 @@ declare class MobileAccessGatewayController {
 //#endregion
 //#region src/websocket-paths.d.ts
 /** Cap the admin-approved extra WebSocket upgrade paths (exact pathnames). */
-declare const MAX_EXTRA_WEBSOCKET_PATHS = 16;
-declare const MAX_WEBSOCKET_PATH_LENGTH = 256;
+export declare const MAX_EXTRA_WEBSOCKET_PATHS = 16;
+export declare const MAX_WEBSOCKET_PATH_LENGTH = 256;
 /**
  * Validate one exact pathname for proxying. Query strings are matched at
  * upgrade time, so only the pathname is stored. Rejects anything the
  * gateway cannot match exactly.
  */
-declare function validateWebSocketPath(value: unknown): string;
+export declare function validateWebSocketPath(value: unknown): string;
 /** Validate a whole replacement list all-or-nothing; duplicates collapse. */
-declare function normalizeWebSocketPaths(value: unknown): string[];
+export declare function normalizeWebSocketPaths(value: unknown): string[];
 /** Cap remembered rejected upgrade paths offered for one-click approval. */
-declare const MAX_BLOCKED_UPGRADE_PATHS = 32;
+export declare const MAX_BLOCKED_UPGRADE_PATHS = 32;
 interface BlockedUpgradePathEntry {
   readonly path: string;
   readonly attempts: number;
@@ -410,13 +410,13 @@ interface BlockedUpgradePathEntry {
  * Bounded and newest-first; a restart clears it (attempts reappear on
  * the next blocked handshake).
  */
-declare class BlockedUpgradePathLog {
+export declare class BlockedUpgradePathLog {
   private readonly entries;
   record(pathname: string): void;
   report(): BlockedUpgradePathEntry[];
 }
 /** File-backed store shared by every gateway instance (LAN and remote). */
-declare class WebSocketPathStore {
+export declare class WebSocketPathStore {
   private readonly file;
   private paths;
   private loaded;
@@ -431,7 +431,7 @@ declare class WebSocketPathStore {
 //#endregion
 //#region src/extensions.d.ts
 /** Maximum sizes enforced at the local-extension filesystem boundary. */
-declare const EXTENSION_LIMITS: Readonly<{
+export declare const EXTENSION_LIMITS: Readonly<{
   manifest: number;
   script: number;
   css: number;
@@ -441,7 +441,7 @@ declare const EXTENSION_LIMITS: Readonly<{
   assetDepth: 8;
 }>;
 /** A controlled business failure returned by an extension action or route. */
-declare class MobileExtensionError extends Error {
+export declare class MobileExtensionError extends Error {
   readonly code: string;
   readonly status: number;
   constructor(code: string, message: string, status?: number);
@@ -533,11 +533,11 @@ interface ActiveLocalExtension {
   readonly digest: string;
 }
 /** Validate a stable extension id. */
-declare function assertExtensionId(value: unknown): string;
+export declare function assertExtensionId(value: unknown): string;
 /** Validate a manifest from JSON or a plugin definition. */
-declare function parseExtensionManifest(value: unknown): LocalExtensionManifest;
+export declare function parseExtensionManifest(value: unknown): LocalExtensionManifest;
 /** Host registry and service consumed by both npm plugins and local extensions. */
-declare class MobileAccessService extends Service {
+export declare class MobileAccessService extends Service {
   private readonly registered;
   private readonly local;
   private readonly retired;
@@ -592,13 +592,13 @@ declare class MobileAccessService extends Service {
   private retire;
 }
 /** Construct the service in a Cordis plugin without importing DSH internals. */
-declare function createMobileAccessService(ctx: Context): MobileAccessService;
+export declare function createMobileAccessService(ctx: Context): MobileAccessService;
 //#endregion
 //#region src/gateway.d.ts
 /** Rewrite the dedicated mobile graph; exclusions are opt-in and leave stock DSH unchanged. */
-declare function rewriteMobileIndex(html: string, excludedClientModules?: readonly string[]): string;
+export declare function rewriteMobileIndex(html: string, excludedClientModules?: readonly string[]): string;
 /** Authenticated TLS edge in front of the ordinary loopback-only DSH Web server. */
-declare class MobileAccessGateway {
+export declare class MobileAccessGateway {
   readonly config: ResolvedGatewayConfig;
   private readonly extensions?;
   private readonly upstreamAuthenticatedUrl?;
@@ -773,13 +773,13 @@ declare class MobileAccessGateway {
 }
 //#endregion
 //#region src/http-security.d.ts
-declare const DEVICE_COOKIE = "dsh_ma_device";
-declare const SESSION_COOKIE = "dsh_ma_session";
-declare const CSRF_COOKIE = "dsh_ma_csrf";
-declare const CSRF_HEADER = "x-dsh-mobile-csrf";
-declare const LOCAL_ADMIN_PREFIX = "/api/mobile-access";
-declare const AUTH_PREFIX = "/mobile-access";
-declare const WS_PATHS: Set<string>;
+export declare const DEVICE_COOKIE = "dsh_ma_device";
+export declare const SESSION_COOKIE = "dsh_ma_session";
+export declare const CSRF_COOKIE = "dsh_ma_csrf";
+export declare const CSRF_HEADER = "x-dsh-mobile-csrf";
+export declare const LOCAL_ADMIN_PREFIX = "/api/mobile-access";
+export declare const AUTH_PREFIX = "/mobile-access";
+export declare const WS_PATHS: Set<string>;
 //#endregion
 //#region src/frp-component.d.ts
 interface FrpArtifact {
@@ -792,7 +792,7 @@ interface FrpArtifact {
   readonly executableName: string;
 }
 /** Pinned official FRP release metadata for supported desktop targets. */
-declare const FRP_COMPONENT_RELEASES: Readonly<Record<string, FrpArtifact>>;
+export declare const FRP_COMPONENT_RELEASES: Readonly<Record<string, FrpArtifact>>;
 /** Public, credential-free description of the managed FRP client. */
 interface FrpComponentStatus {
   readonly supported: boolean;
@@ -814,7 +814,7 @@ interface FrpComponentManagerOptions {
   readonly inspectExecutable?: (executable: string) => Promise<string>;
 }
 /** Owns the optional official frpc binary inside the DSH Mobile state directory. */
-declare class FrpComponentManager {
+export declare class FrpComponentManager {
   readonly executable: string;
   readonly componentRoot: string;
   readonly componentStorage: string;
@@ -842,13 +842,13 @@ declare class FrpComponentManager {
 //#endregion
 //#region src/frp-template.d.ts
 /** Loopback-only HTTP vhost port used between Caddy and frps. */
-declare const FRP_VHOST_HTTP_PORT = 7080;
+export declare const FRP_VHOST_HTTP_PORT = 7080;
 /** Caddy snippet owned entirely by DSH Mobile; the main Caddyfile only imports it. */
-declare const FRP_CADDY_SNIPPET_PATH = "/etc/caddy/dsh-mobile-dsh.caddy";
+export declare const FRP_CADDY_SNIPPET_PATH = "/etc/caddy/dsh-mobile-dsh.caddy";
 /** First line of the owned snippet; also the legacy whole-file marker. */
-declare const FRP_CADDY_SNIPPET_MARKER = "# Managed by DSH Mobile - snippet, safe to delete";
+export declare const FRP_CADDY_SNIPPET_MARKER = "# Managed by DSH Mobile - snippet, safe to delete";
 /** Exact line the main Caddyfile must contain (uncommented) for the site to load. */
-declare const FRP_CADDY_IMPORT_LINE = "import /etc/caddy/dsh-mobile-dsh.caddy";
+export declare const FRP_CADDY_IMPORT_LINE = "import /etc/caddy/dsh-mobile-dsh.caddy";
 /**
  * Entry TLS mode for the FRP channel.
  *
@@ -877,7 +877,7 @@ interface CaddySiteOptions {
  * signature) or a full {@link CaddySiteOptions} object, so existing callers keep
  * working unchanged.
  */
-declare function createCaddySite(publicHost: string, options?: CaddySiteOptions | string): string;
+export declare function createCaddySite(publicHost: string, options?: CaddySiteOptions | string): string;
 /**
  * Build the only supported frps config and Caddy snippet from validated user inputs.
  *
@@ -885,15 +885,15 @@ declare function createCaddySite(publicHost: string, options?: CaddySiteOptions
  * passes the user's real vhost port, and `self-signed` is rejected because that
  * mode publishes a raw TCP proxy instead of an HTTP vhost.
  */
-declare function createRestrictedFrpServerTemplate(serverPort: number, token: string, publicOrigin: string, options?: CaddySiteOptions): string;
+export declare function createRestrictedFrpServerTemplate(serverPort: number, token: string, publicOrigin: string, options?: CaddySiteOptions): string;
 //#endregion
 //#region src/frp-config.d.ts
 /** How the restricted FRP channel is provisioned on the VPS. */
 type FrpMode = 'deploy' | 'attach';
 /** Public entry port used by the self-signed TCP passthrough (never 443 by requirement). */
-declare const FRP_DEFAULT_PUBLIC_PORT = 33080;
+export declare const FRP_DEFAULT_PUBLIC_PORT = 33080;
 /** Ports owned by other DSH Mobile listeners; the public entry may never reuse them. */
-declare const FRP_RESERVED_PORTS: readonly number[];
+export declare const FRP_RESERVED_PORTS: readonly number[];
 /** Credentials and endpoints required by the restricted FRP provider. */
 interface FrpSettings {
   readonly version: 1;
@@ -921,6 +921,8 @@ interface FrpConfigurationStatus {
   readonly publicOrigin?: string;
   readonly vhostHttpPort: number;
   readonly storagePath: string;
+  /** Proxy name frpc registers on the shared frps; unique per DSH installation. */
+  readonly proxyName: string;
   readonly errorCode?: string;
   /** Present only when the saved configuration leaves the upstream `deploy` default. */
   readonly mode?: FrpMode;
@@ -930,31 +932,31 @@ interface FrpConfigurationStatus {
   readonly publicPort?: number;
 }
 /** Validate the FRP server hostname or IP address. */
-declare function validateFrpServerAddress(value: unknown): string;
+export declare function validateFrpServerAddress(value: unknown): string;
 /** Validate the FRP control port. */
-declare function validateFrpServerPort(value: unknown): number;
+export declare function validateFrpServerPort(value: unknown): number;
 /** Validate a high-entropy FRP token before durable storage. */
-declare function validateFrpToken(value: unknown): string;
+export declare function validateFrpToken(value: unknown): string;
 /** Validate the public HTTPS origin used by Caddy and Android pairing. */
-declare function validateFrpPublicOrigin(value: unknown): string;
+export declare function validateFrpPublicOrigin(value: unknown): string;
 /** Validate the provisioning mode. */
-declare function validateFrpMode(value: unknown): FrpMode;
+export declare function validateFrpMode(value: unknown): FrpMode;
 /** Validate the entry TLS mode. */
-declare function validateFrpEntryTls(value: unknown): FrpEntryTls;
+export declare function validateFrpEntryTls(value: unknown): FrpEntryTls;
 /** Validate the loopback vhost port of the target frps. */
-declare function validateFrpVhostHttpPort(value: unknown): number;
+export declare function validateFrpVhostHttpPort(value: unknown): number;
 /** Validate the public entry port of the self-signed TCP proxy. */
-declare function validateFrpPublicPort(value: unknown): number;
+export declare function validateFrpPublicPort(value: unknown): number;
 /** Effective provisioning mode; an absent field keeps the upstream behaviour. */
-declare function resolveFrpMode(settings: FrpSettings): FrpMode;
+export declare function resolveFrpMode(settings: FrpSettings): FrpMode;
 /** Effective entry TLS mode; an absent field keeps the upstream behaviour. */
-declare function resolveFrpEntryTls(settings: FrpSettings): FrpEntryTls;
+export declare function resolveFrpEntryTls(settings: FrpSettings): FrpEntryTls;
 /** Effective loopback vhost port; an absent field keeps the upstream behaviour. */
-declare function resolveFrpVhostHttpPort(settings: FrpSettings): number;
+export declare function resolveFrpVhostHttpPort(settings: FrpSettings): number;
 /** Effective public entry port of the self-signed passthrough. */
-declare function resolveFrpPublicPort(settings: FrpSettings): number;
+export declare function resolveFrpPublicPort(settings: FrpSettings): number;
 /** True when the gateway terminates TLS itself behind a raw frps TCP proxy. */
-declare function isFrpSelfSignedIngress(settings: FrpSettings): boolean;
+export declare function isFrpSelfSignedIngress(settings: FrpSettings): boolean;
 /**
  * Parse FRP settings at the loopback request and filesystem boundaries.
  *
@@ -965,37 +967,77 @@ declare function isFrpSelfSignedIngress(settings: FrpSettings): boolean;
  * attach mode with a public-CA entry must state the user's real vhost port —
  * silently assuming 7080 would disable the plaintext-exposure gate.
  */
-declare function parseFrpSettings(value: unknown): FrpSettings;
+export declare function parseFrpSettings(value: unknown): FrpSettings;
 /**
  * Merge a partial VPS request body with the saved configuration so a blank
  * field keeps its saved value ("已保存时可留空"). Every merged field is still
  * validated; with nothing saved and nothing supplied the result reports a
  * missing configuration instead of silently deploying blanks.
  */
-declare function mergeSavedFrpSettings(partial: Readonly<Record<string, unknown>>, saved: FrpSettings | undefined): FrpSettings;
+export declare function mergeSavedFrpSettings(partial: Readonly<Record<string, unknown>>, saved: FrpSettings | undefined): FrpSettings;
 /** Merge a VPS target (address and control port) with the saved configuration. */
-declare function mergeSavedFrpTarget(partial: Readonly<Record<string, unknown>>, saved: FrpSettings | undefined): {
+export declare function mergeSavedFrpTarget(partial: Readonly<Record<string, unknown>>, saved: FrpSettings | undefined): {
   readonly serverAddress: string;
   readonly serverPort: number;
 };
+/**
+ * Legacy proxy name, kept only as the default of {@link createFrpcToml}.
+ *
+ * A shared frps accepts one proxy per name across *all* its clients, so a fixed
+ * name let any other DSH installation — or a not yet reaped session of this one —
+ * own `dsh-mobile` first. frpc then logged `start error: proxy name [dsh-mobile]
+ * is already in use`, kept running without publishing the entry port, and the
+ * start-up self-check ended in `frp_start_timeout` ("the public endpoint did not
+ * become ready"). Product callers therefore pass an installation-derived name
+ * from {@link frpProxyName}; this constant only keeps the exported API and the
+ * byte-for-byte compatibility test working for legacy callers.
+ */
+export declare const FRP_DEFAULT_PROXY_NAME = "dsh-mobile";
+/**
+ * Validate a proxy name for the generated frpc configuration.
+ *
+ * frps accepts one proxy per name on the whole server, so the name must be a
+ * single safe token: no whitespace, no quotes, no path or bracket characters.
+ */
+export declare function validateFrpProxyName(value: unknown): string;
+/**
+ * Proxy name for one DSH installation.
+ *
+ * Derived from the stable installation identity so two computers sharing one
+ * frps never register the same proxy, while a single installation keeps the
+ * same name across restarts (so its own stale registration is the only possible
+ * conflict, and that one expires with the frps heartbeat).
+ */
+export declare function frpProxyName(instanceId: string): string;
 /**
  * Build the single-purpose frpc configuration for the current loopback gateway.
  *
  * The default (public-CA) entry is an HTTP vhost behind Caddy and is emitted byte
  * for byte as before. The self-signed entry cannot use a vhost at all: frps only
  * forwards raw TCP, and the gateway terminates TLS on that connection.
+ *
+ * `proxyName` defaults to the legacy fixed name only for legacy callers; the
+ * provider and the attach preview always pass {@link frpProxyName}.
  */
-declare function createFrpcToml(settings: FrpSettings, localPort: number): string;
+export declare function createFrpcToml(settings: FrpSettings, localPort: number, proxyName?: string): string;
 /** Build the matching restricted frps and Caddy templates for one VPS. */
-declare function createFrpServerTemplate(settings: FrpSettings): string;
+export declare function createFrpServerTemplate(settings: FrpSettings): string;
 /** Owns private FRP settings and generation-specific frpc configuration. */
-declare class FrpConfigStore {
+export declare class FrpConfigStore {
   readonly stateRoot: string;
   readonly settingsFile: string;
   readonly runtimeConfigFile: string;
+  /**
+   * Proxy name every generated frpc.toml registers.
+   *
+   * Injected by the composing plugin ({@link frpProxyName}) so one frps can
+   * serve several DSH installations; the legacy fixed name stays the default
+   * for direct constructions in tests and for the exported API.
+   */
+  readonly proxyName: string;
   private settingsValue;
   private errorCode;
-  constructor(stateDirectory: string);
+  constructor(stateDirectory: string, proxyName?: string);
   /** Load private settings while rejecting links, oversized files, and unknown fields. */
   initialize(): Promise<void>;
   /**
@@ -1018,13 +1060,13 @@ declare class FrpConfigStore {
 //#endregion
 //#region src/frp-attach.d.ts
 /** Default proof path used to confirm the public entry answered from this computer. */
-declare const FRP_ATTACH_DISCOVERY_PATH = "/mobile-access/discovery";
+export declare const FRP_ATTACH_DISCOVERY_PATH = "/mobile-access/discovery";
 /** Declaration printed above the VPS half of an attach template. */
-declare const FRP_ATTACH_VPS_DECLARATION: string;
+export declare const FRP_ATTACH_VPS_DECLARATION: string;
 /** Declaration printed above the local half of an attach template. */
-declare const FRP_ATTACH_LOCAL_DECLARATION = "# 本机只写入 frpc.toml 并启动 frpc：不安装、不改动本机 frps，也不改动 DSH 自身配置。";
+export declare const FRP_ATTACH_LOCAL_DECLARATION = "# 本机只写入 frpc.toml 并启动 frpc：不安装、不改动本机 frps，也不改动 DSH 自身配置。";
 /** Declaration for the self-signed passthrough, which keeps its CA on this computer. */
-declare const FRP_ATTACH_SELF_SIGNED_DECLARATION: string;
+export declare const FRP_ATTACH_SELF_SIGNED_DECLARATION: string;
 /** Optional inputs for attach artefacts; every field falls back to the validated settings. */
 interface FrpAttachOptions {
   readonly vhostHttpPort?: number;
@@ -1032,6 +1074,14 @@ interface FrpAttachOptions {
   readonly certDir?: string;
   /** Absolute path of the plugin-written frpc.toml, used for the `frpc verify` self-check. */
   readonly configFile?: string;
+  /**
+   * Proxy name the previewed frpc.toml registers.
+   *
+   * Defaults to the legacy fixed name; the panel and the provider pass the
+   * installation-derived {@link frpProxyName} so a preview never describes a
+   * registration that would collide on a shared frps.
+   */
+  readonly proxyName?: string;
   /** Loopback port the gateway will listen on; only a placeholder inside the copied runbook. */
   readonly localPort?: number;
   /**
@@ -1056,7 +1106,7 @@ interface FrpAttachTemplate {
  * artefact is produced. Attach never installs frps, so it must know the user's
  * real vhost port (unless the self-signed passthrough removes the vhost entirely).
  */
-declare function validateAttachSettings(settings: FrpSettings, options?: FrpAttachOptions): void;
+export declare function validateAttachSettings(settings: FrpSettings, options?: FrpAttachOptions): void;
 /** Shared VPS-side inputs of both the copied runbook and the panel plan. */
 interface FrpAttachVpsParts {
   readonly publicHost: string;
@@ -1070,7 +1120,7 @@ interface FrpAttachVpsParts {
  * Derive every VPS-side value once so the copied runbook and the panel plan can
  * never drift apart.
  */
-declare function frpAttachVpsParts(settings: FrpSettings, options?: FrpAttachOptions): FrpAttachVpsParts;
+export declare function frpAttachVpsParts(settings: FrpSettings, options?: FrpAttachOptions): FrpAttachVpsParts;
 /**
  * Build the attach artefact for an existing frps.
  *
@@ -1080,9 +1130,9 @@ declare function frpAttachVpsParts(settings: FrpSettings, options?: FrpAttachOpt
  * contains the generated frpc.toml plus its `frpc verify` self-check. Neither
  * half installs, rewrites, or restarts the user's frps.
  */
-declare function createFrpAttachTemplateParts(settings: FrpSettings, options?: FrpAttachOptions): FrpAttachTemplate;
+export declare function createFrpAttachTemplateParts(settings: FrpSettings, options?: FrpAttachOptions): FrpAttachTemplate;
 /** Combined attach artefact, ready for the clipboard. */
-declare function createFrpAttachTemplate(settings: FrpSettings, options?: FrpAttachOptions): string;
+export declare function createFrpAttachTemplate(settings: FrpSettings, options?: FrpAttachOptions): string;
 //#endregion
 //#region src/frp-attach-plan.d.ts
 /** Stable step identifiers; the panel maps each one to a translated title. */
@@ -1121,11 +1171,11 @@ interface FrpAttachPlan {
  * filesystem write: the caller renders or copies the steps and the local frpc
  * configuration is written by the ordinary provider lifecycle.
  */
-declare function createFrpAttachPlan(settings: FrpSettings, options?: FrpAttachOptions): FrpAttachPlan;
+export declare function createFrpAttachPlan(settings: FrpSettings, options?: FrpAttachOptions): FrpAttachPlan;
 //#endregion
 //#region src/cert-renewal.d.ts
 /** Days left below which the entry certificate is reported as expiring. */
-declare const CERT_EXPIRING_DAYS = 2;
+export declare const CERT_EXPIRING_DAYS = 2;
 /** Read-only lifetime verdict for one certificate; never mutates or renews anything. */
 interface CertRenewalStatus {
   readonly state: 'ok' | 'expiring' | 'expired' | 'unknown';
@@ -1137,14 +1187,14 @@ interface CertRenewalStatus {
   readonly errorCode?: string;
 }
 /** Evaluate one `notAfter` timestamp against the current clock. */
-declare function evaluateCertificateLifetime(notAfter: number, now?: number): CertRenewalStatus;
+export declare function evaluateCertificateLifetime(notAfter: number, now?: number): CertRenewalStatus;
 /**
  * Read one PEM certificate from disk and report only its lifetime.
  *
  * A missing or unreadable file yields `unknown` with the stable
  * `frp_attach_cert_unknown` code so the panel can explain how to re-issue it.
  */
-declare function readCertificateRenewal(file: string, now?: number): Promise<CertRenewalStatus>;
+export declare function readCertificateRenewal(file: string, now?: number): Promise<CertRenewalStatus>;
 /**
  * Ask a live TLS endpoint for its leaf certificate and report its lifetime.
  *
@@ -1152,7 +1202,7 @@ declare function readCertificateRenewal(file: string, now?: number): Promise<Cer
  * an endpoint whose trust anchor is already pinned elsewhere, and a self-signed
  * leaf is the expected answer for the passthrough entry.
  */
-declare function probeOriginCertificate(host: string, port: number, timeoutMs?: number): Promise<CertRenewalStatus>;
+export declare function probeOriginCertificate(host: string, port: number, timeoutMs?: number): Promise<CertRenewalStatus>;
 //#endregion
 //#region src/frp-ingress.d.ts
 /** Private files owned by the self-signed FRP ingress. */
@@ -1192,7 +1242,7 @@ interface FrpIngressSelfCheck {
   };
 }
 /** Private ingress directory, always a sibling of the remote device file. */
-declare function frpIngressPaths(stateFile: string): FrpIngressPaths;
+export declare function frpIngressPaths(stateFile: string): FrpIngressPaths;
 /**
  * Materialize the CA and leaf the gateway terminates TLS with.
  *
@@ -1200,14 +1250,14 @@ declare function frpIngressPaths(stateFile: string): FrpIngressPaths;
  * replaced silently. The leaf is re-signed when expiring or no longer valid for
  * the public IPv4, and the running gateway reloads it after a renewal check.
  */
-declare function ensureFrpIngressCertificate(settings: FrpSettings, stateFile: string, now?: number, expectedCaFingerprint?: string): Promise<FrpIngressCertificate>;
+export declare function ensureFrpIngressCertificate(settings: FrpSettings, stateFile: string, now?: number, expectedCaFingerprint?: string): Promise<FrpIngressCertificate>;
 /**
  * Build the read-only self-check payload shown in the desktop panel.
  *
  * No secret ever leaves this function: the CA is reported by fingerprint only,
  * and the token is never read.
  */
-declare function frpIngressSelfCheck(settings: FrpSettings, stateFile: string): Promise<FrpIngressSelfCheck>;
+export declare function frpIngressSelfCheck(settings: FrpSettings, stateFile: string): Promise<FrpIngressSelfCheck>;
 //#endregion
 //#region src/managed-setup.d.ts
 /** One host a server leaf must be valid for: an IP literal, a DNS name, or both. */
@@ -1234,7 +1284,7 @@ interface ServerCertificateAuthority {
  * required for console addresses (`type: 7`), DNS entries (`type: 2`) cover named
  * hosts; the Android client accepts either through its pinned CA.
  */
-declare function issueServerCertificate(authority: ServerCertificateAuthority, target: ServerCertificateTarget, output: ServerCertificateFiles, lifetimeDays?: number): Promise<void>;
+export declare function issueServerCertificate(authority: ServerCertificateAuthority, target: ServerCertificateTarget, output: ServerCertificateFiles, lifetimeDays?: number): Promise<void>;
 //#endregion
 //#region src/remote.d.ts
 /** Remote transports supported by the desktop plugin and Android client. */
@@ -1264,11 +1314,11 @@ interface RemoteProviderState {
   readonly version: 1;
   readonly provider: RemoteProvider;
 }
-declare const REMOTE_PROVIDERS: readonly RemoteProvider[];
+export declare const REMOTE_PROVIDERS: readonly RemoteProvider[];
 /** Validate the provider selection loaded across the filesystem boundary. */
-declare function parseRemoteProviderState(value: unknown): RemoteProviderState;
+export declare function parseRemoteProviderState(value: unknown): RemoteProviderState;
 /** Atomic selection store whose absent-file state uses the configured default. */
-declare class JsonRemoteProviderStore {
+export declare class JsonRemoteProviderStore {
   private readonly file;
   private readonly defaultProvider;
   constructor(file: string, defaultProvider: RemoteProvider);
@@ -1276,7 +1326,7 @@ declare class JsonRemoteProviderStore {
   save(state: RemoteProviderState): Promise<void>;
 }
 /** Resolve the first-run provider without letting environment values bypass validation. */
-declare function configuredRemoteProvider(environment: NodeJS.ProcessEnv): RemoteProvider;
+export declare function configuredRemoteProvider(environment: NodeJS.ProcessEnv): RemoteProvider;
 //#endregion
 //#region src/frp.d.ts
 /** Product-facing states for the restricted self-hosted FRP transport. */
@@ -1345,7 +1395,7 @@ interface FrpControllerOptions {
   readonly retryIntervalMs?: number;
 }
 /** Owns frpc, its generation-specific configuration, and the remote gateway. */
-declare class FrpController implements RemoteProviderController {
+export declare class FrpController implements RemoteProviderController {
   private readonly options;
   private enabled;
   private initialized;
@@ -1396,7 +1446,7 @@ declare class FrpController implements RemoteProviderController {
 }
 //#endregion
 //#region src/origin-proxy-config.d.ts
-declare const DEFAULT_ORIGIN_LISTEN_PORT = 3444;
+export declare const DEFAULT_ORIGIN_LISTEN_PORT = 3444;
 /** A private HTTP listener behind a user-managed HTTPS reverse proxy. */
 interface OriginSettings {
   readonly version: 1;
@@ -1417,16 +1467,16 @@ interface OriginConfigurationStatus {
   readonly errorCode?: string;
 }
 /** Require a public HTTPS origin; custom external ports are supported. */
-declare function validateOriginPublicOrigin(value: unknown): string;
+export declare function validateOriginPublicOrigin(value: unknown): string;
 /** Bind only one explicit loopback or RFC1918 IPv4 interface, never all interfaces. */
-declare function validateOriginListenHost(value: unknown): string;
-declare function validateOriginListenPort(value: unknown): number;
+export declare function validateOriginListenHost(value: unknown): string;
+export declare function validateOriginListenPort(value: unknown): number;
 /** Authorize direct proxy socket peers, not untrusted forwarded client headers. */
-declare function validateOriginAllowedCidrs(value: unknown, listenHost: string): readonly string[];
+export declare function validateOriginAllowedCidrs(value: unknown, listenHost: string): readonly string[];
 /** Validate both saved settings and local administrative requests. */
-declare function parseOriginSettings(value: unknown): OriginSettings;
+export declare function parseOriginSettings(value: unknown): OriginSettings;
 /** Owns only origin settings; shared paired-device storage is never removed. */
-declare class OriginConfigStore {
+export declare class OriginConfigStore {
   readonly stateRoot: string;
   readonly settingsFile: string;
   private settingsValue;
@@ -1456,7 +1506,7 @@ interface OriginControllerOptions {
   readonly onStatus?: (status: OriginStatus) => void;
 }
 /** Owns an authenticated HTTP gateway, with no tunnel process or public network probes. */
-declare class OriginController implements RemoteProviderController {
+export declare class OriginController implements RemoteProviderController {
   private readonly options;
   private enabled;
   private initialized;
@@ -1504,7 +1554,7 @@ interface CloudflaredArtifact {
  * {@link CLOUDFLARED_COMPONENT_RELEASES} by platform and architecture; this
  * alias preserves the original Windows x64 entry for existing callers.
  */
-declare const CLOUDFLARED_COMPONENT_RELEASE: CloudflaredArtifact;
+export declare const CLOUDFLARED_COMPONENT_RELEASE: CloudflaredArtifact;
 /**
  * Public, credential-free description of the managed cloudflared component.
  *
@@ -1530,7 +1580,7 @@ interface CloudflaredComponentManagerOptions {
   readonly fetchArtifact?: (url: string, signal: AbortSignal) => Promise<Uint8Array>;
 }
 /** Owns the optional cloudflared binary inside DSH Mobile state. */
-declare class CloudflaredComponentManager {
+export declare class CloudflaredComponentManager {
   readonly executable: string;
   readonly componentRoot: string;
   readonly componentStorage: string;
@@ -1594,9 +1644,9 @@ interface CloudflaredTunnelStatus {
  * belongs to quick tunnels, and a `cfargotunnel.com` name is the routing target
  * rather than a routable public address.
  */
-declare function validateCloudflaredTunnelHostname(value: unknown): string;
+export declare function validateCloudflaredTunnelHostname(value: unknown): string;
 /** Validate the stable loopback port Cloudflare's ingress forwards to. */
-declare function validateCloudflaredTunnelPort(value: unknown): number;
+export declare function validateCloudflaredTunnelPort(value: unknown): number;
 /**
  * Validate a connector token before durable storage.
  *
@@ -1604,17 +1654,17 @@ declare function validateCloudflaredTunnelPort(value: unknown): number;
  * and tunnel secret; the provider passes it through the environment rather than
  * the command line, and it is never returned to any client.
  */
-declare function validateCloudflaredTunnelToken(value: unknown): string;
+export declare function validateCloudflaredTunnelToken(value: unknown): string;
 /** Parse tunnel settings at the request and filesystem boundaries. */
-declare function parseCloudflaredTunnelSettings(value: unknown): CloudflaredTunnelSettings;
+export declare function parseCloudflaredTunnelSettings(value: unknown): CloudflaredTunnelSettings;
 /**
  * Merge a partial panel request with the saved named-tunnel settings so a blank
  * field keeps its stored value. The token in particular is write-only, so the
  * panel submits an empty string to mean "keep the existing connector token".
  */
-declare function mergeSavedCloudflaredTunnelSettings(partial: Readonly<Record<string, unknown>>, saved: CloudflaredTunnelSettings | undefined): CloudflaredTunnelSettings;
+export declare function mergeSavedCloudflaredTunnelSettings(partial: Readonly<Record<string, unknown>>, saved: CloudflaredTunnelSettings | undefined): CloudflaredTunnelSettings;
 /** Owns the private cloudflared tunnel configuration for one DSH installation. */
-declare class CloudflaredTunnelStore {
+export declare class CloudflaredTunnelStore {
   readonly stateRoot: string;
   readonly settingsFile: string;
   private settingsValue;
@@ -1669,7 +1719,7 @@ interface CloudflaredControllerOptions {
  * as `https://x.trycloudflare.com.evil.test` fails the hostname check instead of
  * being truncated into an accepted origin.
  */
-declare function parseCloudflaredOrigin(line: string): string | undefined;
+export declare function parseCloudflaredOrigin(line: string): string | undefined;
 /**
  * Whether one cloudflared log line reports an established edge connection.
  *
@@ -1678,7 +1728,7 @@ declare function parseCloudflaredOrigin(line: string): string | undefined;
  * the current and the older wording are accepted; anything else is ignored so a
  * chatty log line cannot be mistaken for readiness.
  */
-declare function isCloudflaredRegistration(line: string): boolean;
+export declare function isCloudflaredRegistration(line: string): boolean;
 /**
  * Owns an installed cloudflared client and a provider-specific DSH remote gateway.
  *
@@ -1687,7 +1737,7 @@ declare function isCloudflaredRegistration(line: string): boolean;
  * hostname from the tunnel store, forward to the configured loopback port, and
  * learn readiness from the connector's registration line rather than a banner.
  */
-declare class CloudflaredController implements RemoteProviderController {
+export declare class CloudflaredController implements RemoteProviderController {
   private readonly options;
   private enabled;
   private initialized;
@@ -1780,19 +1830,19 @@ interface TaskEventWatcherOptions {
   readonly onTaskCompleted: (event: TaskCompletionEvent) => void;
   readonly log?: (event: string, fields: Readonly<Record<string, string | number | boolean>>) => void;
 }
-declare const TASK_EVENT_DEBOUNCE_MS = 1000;
+export declare const TASK_EVENT_DEBOUNCE_MS = 1000;
 /**
  * Subscribe to completed root turns. Subagent turns are skipped so one task
  * announces once, and rapid turn boundaries collapse into a single event.
  * Returns a disposer that also drops pending debounces.
  */
-declare function watchTaskCompletions(ctx: TaskEventContext, options: TaskEventWatcherOptions): () => void;
+export declare function watchTaskCompletions(ctx: TaskEventContext, options: TaskEventWatcherOptions): () => void;
 /** Receives fanned-out completion events (normally a mobile gateway). */
 interface TaskEventSink {
   broadcastTaskEvent(event: TaskCompletionEvent): void;
 }
 /** One subscription feeding every live gateway; gateways register on start. */
-declare class TaskEventHub {
+export declare class TaskEventHub {
   private readonly sinks;
   /** Register a sink; returns its disposer. */
   add(sink: TaskEventSink): () => void;
@@ -1813,13 +1863,13 @@ declare module '@deepseek-ai/dsh-llm' {
   }
 }
 /** Stable Cordis plugin name. */
-declare const name = "dsh-mobile";
+export declare const name = "dsh-mobile";
 /** The stock WebServer serves the control card; Connection authenticates the loopback DSH origin. */
-declare const inject: string[];
+export declare const inject: string[];
 /** Reuse remote HTTPS policy while binding a separately validated private HTTP origin. */
-declare function originGatewayConfig(template: ResolvedGatewayConfig, settings: OriginSettings, stateFile: string, instanceId: string, listenPort?: number): ResolvedGatewayConfig;
+export declare function originGatewayConfig(template: ResolvedGatewayConfig, settings: OriginSettings, stateFile: string, instanceId: string, listenPort?: number): ResolvedGatewayConfig;
 /** Mount the resident control route and its optional authenticated LAN gateway. */
-declare function apply(ctx: Context, config: PluginConfig): Promise<void>;
+export declare function apply(ctx: Context, config: PluginConfig): Promise<void>;
 //#endregion
-export { AUTH_PREFIX, AccessController, type AccessControllerOptions, AccessError, type AuthoritySpec, type BlockedUpgradePathEntry, BlockedUpgradePathLog, BoundedRateLimiter, CERT_EXPIRING_DAYS, CLOUDFLARED_COMPONENT_RELEASE, CSRF_COOKIE, CSRF_HEADER, type CaddySiteOptions, type CertRenewalStatus, CloudflaredComponentManager, type CloudflaredComponentStatus, CloudflaredController, type CloudflaredControllerOptions, type CloudflaredState, type CloudflaredStatus, type CloudflaredTunnelMode, type CloudflaredTunnelSettings, type CloudflaredTunnelStatus, CloudflaredTunnelStore, Config, DEFAULT_ORIGIN_LISTEN_PORT, FRP_VHOST_HTTP_PORT as DEFAULT_VHOST_HTTP_PORT, FRP_VHOST_HTTP_PORT, DEVICE_COOKIE, type DeviceProbeResult, type DeviceSnapshot, type DeviceStore, type DeviceSummary, type DisabledTlsConfig, EXTENSION_LIMITS, FRP_ATTACH_DISCOVERY_PATH, FRP_ATTACH_LOCAL_DECLARATION, FRP_ATTACH_SELF_SIGNED_DECLARATION, FRP_ATTACH_VPS_DECLARATION, FRP_CADDY_IMPORT_LINE, FRP_CADDY_SNIPPET_MARKER, FRP_CADDY_SNIPPET_PATH, FRP_COMPONENT_RELEASES, FRP_DEFAULT_PUBLIC_PORT, FRP_RESERVED_PORTS, type FrpAttachOptions, type FrpAttachPlan, type FrpAttachPlanLocal, type FrpAttachPlanStep, type FrpAttachStepId, type FrpAttachTemplate, type FrpAttachVpsParts, FrpComponentManager, type FrpComponentStatus, FrpConfigStore, type FrpConfigurationStatus, FrpController, type FrpControllerOptions, type FrpEntryTls, type FrpIngressCertificate, type FrpIngressPaths, type FrpIngressSelfCheck, type FrpSettings, type FrpState, type FrpStatus, JsonDeviceStore, JsonMobileAccessControlStore, JsonRemoteProviderStore, LOCAL_ADMIN_PREFIX, type LocalExtensionManifest, MAX_BLOCKED_UPGRADE_PATHS, MAX_EXTRA_WEBSOCKET_PATHS, MAX_WEBSOCKET_PATH_LENGTH, MemoryDeviceStore, type MobileAccessControlState, type MobileAccessControlStore, MobileAccessGateway, MobileAccessGatewayController, type MobileAccessService as MobileAccessRegistry, MobileAccessService, type MobileAccessRuntime, type MobileActionContext, type MobileExtensionClientEntry, type MobileExtensionDefinition, MobileExtensionError, type MobileExtensionManifest, type MobileExtensionStatus, type MobileHostAction, type MobileHostRoute, type MobileRouteRequest, type MobileRouteResponse, OriginConfigStore, type OriginConfigurationStatus, OriginController, type OriginControllerOptions, type OriginSettings, type OriginState, type OriginStatus, type PairingResult, type ParsedCidr, type PluginConfig, type ProvidedTlsConfig, REMOTE_PROVIDERS, type RemoteProvider, type RemoteProviderController, type RemoteProviderState, type RemoteProviderStatus, type RenewalResult, RequestTrustPolicy, type ResolvedGatewayConfig, SESSION_COOKIE, type ServerCertificateAuthority, type ServerCertificateFiles, type ServerCertificateTarget, type SessionAuthorization, type SessionEndReason, type StoredDevice, TASK_EVENT_DEBOUNCE_MS, type TaskCompletionEvent, type TaskEventContext, TaskEventHub, type TaskEventSession, type TaskEventSink, type TaskEventWatcherOptions, type TaskTurnEvent, type TlsConfig, WS_PATHS, WebSocketPathStore, addressAllowed, apply, assertExtensionId, configuredRemoteProvider, createCaddySite, createFrpAttachPlan, createFrpAttachTemplate, createFrpAttachTemplateParts, createFrpServerTemplate, createFrpcToml, createMobileAccessService, createRestrictedFrpServerTemplate, ensureFrpIngressCertificate, evaluateCertificateLifetime, frpAttachVpsParts, frpIngressPaths, frpIngressSelfCheck, inject, isCloudflaredRegistration, isFrpSelfSignedIngress, isGloballyRoutableIpv4, isLoopbackAddress, issueServerCertificate, mergeSavedCloudflaredTunnelSettings, mergeSavedFrpSettings, mergeSavedFrpTarget, name, normalizeWebSocketPaths, originGatewayConfig, parseAuthority, parseCidr, parseCloudflaredOrigin, parseCloudflaredTunnelSettings, parseControlFile, parseDeviceSnapshot, parseExtensionManifest, parseFrpSettings, parseGatewayConfig, parseMobileAccessControlState, parseOriginSettings, parseRemoteProviderState, probeOriginCertificate, readCertificateRenewal, resolveAuthority, resolveFrpEntryTls, resolveFrpMode, resolveFrpPublicPort, resolveFrpVhostHttpPort, rewriteMobileIndex, validateAttachSettings, validateCloudflaredTunnelHostname, validateCloudflaredTunnelPort, validateCloudflaredTunnelToken, validateFrpEntryTls, validateFrpMode, validateFrpPublicOrigin, validateFrpPublicPort, validateFrpServerAddress, validateFrpServerPort, validateFrpToken, validateFrpVhostHttpPort, validateOriginAllowedCidrs, validateOriginListenHost, validateOriginListenPort, validateOriginPublicOrigin, validateWebSocketPath, watchTaskCompletions };
+export { type AccessControllerOptions, type AuthoritySpec, type BlockedUpgradePathEntry, type CaddySiteOptions, type CertRenewalStatus, type CloudflaredComponentStatus, type CloudflaredControllerOptions, type CloudflaredState, type CloudflaredStatus, type CloudflaredTunnelMode, type CloudflaredTunnelSettings, type CloudflaredTunnelStatus, FRP_VHOST_HTTP_PORT as DEFAULT_VHOST_HTTP_PORT, type DeviceProbeResult, type DeviceSnapshot, type DeviceStore, type DeviceSummary, type DisabledTlsConfig, type FrpAttachOptions, type FrpAttachPlan, type FrpAttachPlanLocal, type FrpAttachPlanStep, type FrpAttachStepId, type FrpAttachTemplate, type FrpAttachVpsParts, type FrpComponentStatus, type FrpConfigurationStatus, type FrpControllerOptions, type FrpEntryTls, type FrpIngressCertificate, type FrpIngressPaths, type FrpIngressSelfCheck, type FrpSettings, type FrpState, type FrpStatus, type LocalExtensionManifest, type MobileAccessControlState, type MobileAccessControlStore, type MobileAccessService as MobileAccessRegistry, type MobileAccessRuntime, type MobileActionContext, type MobileExtensionClientEntry, type MobileExtensionDefinition, type MobileExtensionManifest, type MobileExtensionStatus, type MobileHostAction, type MobileHostRoute, type MobileRouteRequest, type MobileRouteResponse, type OriginConfigurationStatus, type OriginControllerOptions, type OriginSettings, type OriginState, type OriginStatus, type PairingResult, type ParsedCidr, type PluginConfig, type ProvidedTlsConfig, type RemoteProvider, type RemoteProviderController, type RemoteProviderState, type RemoteProviderStatus, type RenewalResult, type ResolvedGatewayConfig, type ServerCertificateAuthority, type ServerCertificateFiles, type ServerCertificateTarget, type SessionAuthorization, type SessionEndReason, type StoredDevice, type TaskCompletionEvent, type TaskEventContext, type TaskEventSession, type TaskEventSink, type TaskEventWatcherOptions, type TaskTurnEvent, type TlsConfig };
 //# sourceMappingURL=index.d.mts.map