dsh-mobile 0.5.4 → 0.5.5

package/lib/index.d.mts

@@ -1560,10 +1560,12 @@ export declare class OriginController implements RemoteProviderController {
 /**
  * Pinned cloudflared components fetched only after an explicit user action.
  *
- * Unlike the cpolar archive each artifact IS the executable: there is nothing
- * to unpack, so the download digest and the installed digest are the same pair.
- * `--no-autoupdate` is passed at runtime as well, so the pinned bytes stay the
- * bytes that were verified.
+ * Cloudflare ships bare executables for Windows and Linux but a `.tgz` for
+ * macOS, so an artifact carries two digests: the bytes on the wire
+ * (`downloadBytes`/`downloadSha256`) and the executable that ends up installed
+ * (`executableBytes`/`executableSha256`). For bare artifacts the two pairs are
+ * identical. `--no-autoupdate` is passed at runtime as well, so the pinned
+ * bytes stay the bytes that were verified.
  */
 interface CloudflaredArtifact {
   readonly version: string;
@@ -1573,7 +1575,19 @@ interface CloudflaredArtifact {
   readonly downloadBytes: number;
   readonly downloadSha256: string;
   readonly executableName: string;
-}
+  /** Bytes of the installed executable; equals `downloadBytes` for bare artifacts. */
+  readonly executableBytes: number;
+  readonly executableSha256: string;
+  /** Set when the download is an archive rather than the executable itself. */
+  readonly archive?: CloudflaredArchive;
+}
+interface CloudflaredArchive {
+  readonly format: 'tgz';
+  /** Member basename to install, e.g. `cloudflared`. */
+  readonly member: string;
+}
+/** Pinned official cloudflared release metadata for supported desktop targets. */
+export declare const CLOUDFLARED_COMPONENT_RELEASES: Readonly<Record<string, CloudflaredArtifact>>;
 /**
  * Canonical release metadata. New code should select from
  * {@link CLOUDFLARED_COMPONENT_RELEASES} by platform and architecture; this
@@ -1603,6 +1617,7 @@ interface CloudflaredComponentManagerOptions {
   readonly platform?: NodeJS.Platform;
   readonly arch?: string;
   readonly fetchArtifact?: (url: string, signal: AbortSignal) => Promise<Uint8Array>;
+  readonly extractArtifact?: (archive: string, destination: string, member: string) => Promise<void>;
 }
 /** Owns the optional cloudflared binary inside DSH Mobile state. */
 export declare class CloudflaredComponentManager {
@@ -1616,6 +1631,7 @@ export declare class CloudflaredComponentManager {
   private readonly arch;
   private readonly release;
   private readonly fetchArtifact;
+  private readonly extractArtifact;
   private installed;
   private errorCode;
   private queue;

package/lib/index.mjs

@@ -2867,6 +2867,7 @@ function renderPairPage(locale) {
 <html lang="${copy.lang}">
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover">
+<style>input,textarea{font-size:16px}</style>
 <title>${copy.pairTitle}</title>
 <main>
   <h1>${copy.pairHeading}</h1>
@@ -5777,8 +5778,8 @@ var MemoryDeviceStore = class {
 //#endregion
 //#region src/frp-component.ts
 const FRP_VERSION$1 = "0.70.1";
-const MAX_ARCHIVE_ENTRIES = 128;
-const MAX_ARCHIVE_LIST_BYTES = 262144;
+const MAX_ARCHIVE_ENTRIES$1 = 128;
+const MAX_ARCHIVE_LIST_BYTES$1 = 262144;
 /** Pinned official FRP release metadata for supported desktop targets. */
 const FRP_COMPONENT_RELEASES = Object.freeze(Object.fromEntries([
 	{
@@ -5883,12 +5884,12 @@ async function replaceDirectory(target, candidate) {
 function sha256$2(bytes) {
 	return createHash("sha256").update(bytes).digest("hex");
 }
-async function runCapture(file, args) {
+async function runCapture$1(file, args) {
 	return new Promise((resolveRun, reject) => {
 		execFile(file, [...args], {
 			windowsHide: true,
 			timeout: 12e4,
-			maxBuffer: MAX_ARCHIVE_LIST_BYTES,
+			maxBuffer: MAX_ARCHIVE_LIST_BYTES$1,
 			encoding: "utf8"
 		}, (error, stdout) => {
 			if (error === null) resolveRun(stdout);
@@ -5896,7 +5897,7 @@ async function runCapture(file, args) {
 		});
 	});
 }
-function validatedArchiveEntry(rawEntry) {
+function validatedArchiveEntry$1(rawEntry) {
 	if (rawEntry.length === 0 || rawEntry.includes("\\") || rawEntry.includes("\0") || rawEntry.startsWith("/") || /^[a-zA-Z]:/u.test(rawEntry)) throw new Error("frp_archive_path_invalid");
 	const segments = rawEntry.replace(/\/$/u, "").split("/");
 	if (segments.some((segment) => segment === "" || segment === "." || segment === "..")) throw new Error("frp_archive_path_invalid");
@@ -5904,10 +5905,10 @@ function validatedArchiveEntry(rawEntry) {
 }
 /** Select exactly one nested frpc executable from a safe archive listing. */
 function selectFrpExecutableEntry(entries, executableName) {
-	if (entries.length === 0 || entries.length > MAX_ARCHIVE_ENTRIES) throw new Error("frp_archive_entries_invalid");
+	if (entries.length === 0 || entries.length > MAX_ARCHIVE_ENTRIES$1) throw new Error("frp_archive_entries_invalid");
 	let executableEntry;
 	for (const entry of entries) {
-		const segments = validatedArchiveEntry(entry);
+		const segments = validatedArchiveEntry$1(entry);
 		if (segments.length >= 2 && segments.at(-1) === executableName) {
 			if (executableEntry !== void 0) throw new Error("frp_archive_executable_ambiguous");
 			executableEntry = entry.replace(/\/$/u, "");
@@ -5916,22 +5917,22 @@ function selectFrpExecutableEntry(entries, executableName) {
 	if (executableEntry === void 0) throw new Error("frp_archive_executable_missing");
 	return executableEntry;
 }
-async function defaultExtractArtifact$1(archive, destination, executableName) {
+async function defaultExtractArtifact$2(archive, destination, executableName) {
 	const tar = process.platform === "win32" ? "tar.exe" : "tar";
-	const executableEntry = selectFrpExecutableEntry((await runCapture(tar, ["-tf", archive])).split(/\r?\n/u).filter((entry) => entry.length > 0), executableName);
+	const executableEntry = selectFrpExecutableEntry((await runCapture$1(tar, ["-tf", archive])).split(/\r?\n/u).filter((entry) => entry.length > 0), executableName);
 	const unpacked = join(destination, "archive");
 	await mkdir(unpacked, {
 		recursive: true,
 		mode: 448
 	});
-	await runCapture(tar, [
+	await runCapture$1(tar, [
 		"-xf",
 		archive,
 		"-C",
 		unpacked,
 		executableEntry
 	]);
-	const extracted = join(unpacked, ...validatedArchiveEntry(executableEntry));
+	const extracted = join(unpacked, ...validatedArchiveEntry$1(executableEntry));
 	if (!await regularFile$2(extracted)) throw new Error("frp_archive_executable_invalid");
 	await copyFile(extracted, join(destination, executableName));
 }
@@ -5971,7 +5972,7 @@ async function defaultFetchArtifact$2(artifact, signal) {
 	return bytes;
 }
 async function defaultInspectExecutable(executable) {
-	return (await runCapture(executable, ["--version"])).trim();
+	return (await runCapture$1(executable, ["--version"])).trim();
 }
 /** Owns the optional official frpc binary inside the DSH Mobile state directory. */
 var FrpComponentManager = class {
@@ -6006,7 +6007,7 @@ var FrpComponentManager = class {
 			this.stagingRoot
 		]) if (!inside$2(stateDirectory, child)) throw new Error("frp component path escaped its state directory");
 		this.fetchArtifact = options.fetchArtifact ?? defaultFetchArtifact$2;
-		this.extractArtifact = options.extractArtifact ?? defaultExtractArtifact$1;
+		this.extractArtifact = options.extractArtifact ?? defaultExtractArtifact$2;
 		this.inspectExecutable = options.inspectExecutable ?? defaultInspectExecutable;
 	}
 	/** Inspect the managed executable without relying on global FRP installations. */
@@ -8909,6 +8910,10 @@ async function downloadPinnedArtifact(request) {
 }
 //#endregion
 //#region src/cloudflared-component.ts
+/** Upper bound for `tar -t` output; a pinned release listing is a few lines. */
+const MAX_ARCHIVE_LIST_BYTES = 1048576;
+const MAX_ARCHIVE_ENTRIES = 256;
+const DOWNLOAD_TIMEOUT_MS = 3e5;
 const CLOUDFLARED_VERSION = "2026.9.1";
 /** Pinned official cloudflared release metadata for supported desktop targets. */
 const CLOUDFLARED_COMPONENT_RELEASES = Object.freeze(Object.fromEntries([
@@ -8919,7 +8924,9 @@ const CLOUDFLARED_COMPONENT_RELEASES = Object.freeze(Object.fromEntries([
 		downloadUrl: `https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-windows-amd64.exe`,
 		downloadBytes: 54976432,
 		downloadSha256: "2837888cc0f5d58f15b6dc478376de90b4d3ba5241c7947455d1e0a0df429712",
-		executableName: "cloudflared.exe"
+		executableName: "cloudflared.exe",
+		executableBytes: 54976432,
+		executableSha256: "2837888cc0f5d58f15b6dc478376de90b4d3ba5241c7947455d1e0a0df429712"
 	},
 	{
 		version: CLOUDFLARED_VERSION,
@@ -8928,7 +8935,9 @@ const CLOUDFLARED_COMPONENT_RELEASES = Object.freeze(Object.fromEntries([
 		downloadUrl: `https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-amd64`,
 		downloadBytes: 39838488,
 		downloadSha256: "03f1f25d1cc93b9ad6c60569d44060bc4f17ed97075760ed8cfca4b12dcd68cc",
-		executableName: "cloudflared"
+		executableName: "cloudflared",
+		executableBytes: 39838488,
+		executableSha256: "03f1f25d1cc93b9ad6c60569d44060bc4f17ed97075760ed8cfca4b12dcd68cc"
 	},
 	{
 		version: CLOUDFLARED_VERSION,
@@ -8937,7 +8946,39 @@ const CLOUDFLARED_COMPONENT_RELEASES = Object.freeze(Object.fromEntries([
 		downloadUrl: `https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-arm64`,
 		downloadBytes: 37466252,
 		downloadSha256: "3d97437c71848bd8df68041e12436b484a661d95073ea1937f01a845ce88faa3",
-		executableName: "cloudflared"
+		executableName: "cloudflared",
+		executableBytes: 37466252,
+		executableSha256: "3d97437c71848bd8df68041e12436b484a661d95073ea1937f01a845ce88faa3"
+	},
+	{
+		version: CLOUDFLARED_VERSION,
+		platform: "darwin",
+		arch: "x64",
+		downloadUrl: `https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-darwin-amd64.tgz`,
+		downloadBytes: 21118723,
+		downloadSha256: "ff0d3b51d5ff70eceef89d6b32145fee985018a2174596a5dbe405e2766e2ac4",
+		executableName: "cloudflared",
+		executableBytes: 41731488,
+		executableSha256: "1ea07ae775b03236bd6be18ca1848d6bdc4af2f4f3bce398823b5a36e5761b75",
+		archive: {
+			format: "tgz",
+			member: "cloudflared"
+		}
+	},
+	{
+		version: CLOUDFLARED_VERSION,
+		platform: "darwin",
+		arch: "arm64",
+		downloadUrl: `https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-darwin-arm64.tgz`,
+		downloadBytes: 19217478,
+		downloadSha256: "c27ab8fd0aa489449e3d201eb02f957ef460a13b613662928b1b23394bf1bcfe",
+		executableName: "cloudflared",
+		executableBytes: 38893072,
+		executableSha256: "9a0b19f67dc7a3011bc6b972c7ce06a5fcea8784ac6bd599ffa382ea4aeb5a6e",
+		archive: {
+			format: "tgz",
+			member: "cloudflared"
+		}
 	}
 ].map((release) => [`${release.platform}-${release.arch}`, Object.freeze(release)])));
 /**
@@ -8964,6 +9005,60 @@ async function regularFile$1(file, expectedBytes) {
 		throw error;
 	}
 }
+async function runCapture(file, args) {
+	return new Promise((resolveRun, reject) => {
+		execFile(file, [...args], {
+			windowsHide: true,
+			timeout: 12e4,
+			maxBuffer: MAX_ARCHIVE_LIST_BYTES,
+			encoding: "utf8"
+		}, (error, stdout) => {
+			if (error === null) resolveRun(stdout);
+			else reject(error);
+		});
+	});
+}
+/** Reject absolute, traversing, or Windows-shaped archive members. */
+function validatedArchiveEntry(rawEntry) {
+	if (rawEntry.length === 0 || rawEntry.includes("\\") || rawEntry.includes("\0") || rawEntry.startsWith("/") || /^[a-zA-Z]:/u.test(rawEntry)) throw new Error("cloudflared_archive_path_invalid");
+	const segments = rawEntry.replace(/\/$/u, "").split("/");
+	if (segments.some((segment) => segment === "" || segment === "." || segment === "..")) throw new Error("cloudflared_archive_path_invalid");
+	return segments;
+}
+/** Select exactly one archive member named `member`, wherever it sits in the tree. */
+function selectCloudflaredArchiveEntry(entries, member) {
+	if (entries.length === 0 || entries.length > MAX_ARCHIVE_ENTRIES) throw new Error("cloudflared_archive_entries_invalid");
+	let selected;
+	for (const entry of entries) if (validatedArchiveEntry(entry).at(-1) === member) {
+		if (selected !== void 0) throw new Error("cloudflared_archive_executable_ambiguous");
+		selected = entry.replace(/\/$/u, "");
+	}
+	if (selected === void 0) throw new Error("cloudflared_archive_executable_missing");
+	return selected;
+}
+/**
+* Unpack the pinned member out of a `.tgz` using the system `tar`, which ships
+* with Windows 10+, macOS, and every supported Linux base.
+*/
+async function defaultExtractArtifact$1(archive, destination, member) {
+	const tar = process.platform === "win32" ? "tar.exe" : "tar";
+	const selected = selectCloudflaredArchiveEntry((await runCapture(tar, ["-tzf", archive])).split(/\r?\n/u).filter((entry) => entry.length > 0), member);
+	const unpacked = join(destination, "archive");
+	await mkdir(unpacked, {
+		recursive: true,
+		mode: 448
+	});
+	await runCapture(tar, [
+		"-xzf",
+		archive,
+		"-C",
+		unpacked,
+		selected
+	]);
+	const extracted = join(unpacked, ...validatedArchiveEntry(selected));
+	if (!await regularFile$1(extracted)) throw new Error("cloudflared_archive_executable_invalid");
+	await copyFile(extracted, join(destination, member));
+}
 async function defaultFetchArtifact$1(url, signal, expectedBytes) {
 	return downloadPinnedArtifact({
 		url,
@@ -8988,6 +9083,7 @@ var CloudflaredComponentManager = class {
 	arch;
 	release;
 	fetchArtifact;
+	extractArtifact;
 	installed = false;
 	errorCode;
 	queue = Promise.resolve();
@@ -9012,12 +9108,14 @@ var CloudflaredComponentManager = class {
 		]) if (!inside$1(stateDirectory, child)) throw new Error("cloudflared component path escaped its state directory");
 		const release = this.release;
 		this.fetchArtifact = options.fetchArtifact ?? ((url, signal) => defaultFetchArtifact$1(url, signal, release?.downloadBytes ?? 0));
+		this.extractArtifact = options.extractArtifact ?? defaultExtractArtifact$1;
 	}
 	/** Inspect the managed binary without using any global cloudflared state. */
 	async initialize() {
 		const release = this.release;
-		this.installed = release !== void 0 && await regularFile$1(this.executable, release.downloadBytes);
-		if (this.installed && release !== void 0 && await sha256$1(this.executable) !== release.downloadSha256) {
+		this.errorCode = void 0;
+		this.installed = release !== void 0 && await regularFile$1(this.executable, release.executableBytes);
+		if (this.installed && release !== void 0 && await sha256$1(this.executable) !== release.executableSha256) {
 			this.installed = false;
 			this.errorCode = "cloudflared_component_invalid";
 		}
@@ -9030,7 +9128,7 @@ var CloudflaredComponentManager = class {
 			installed: this.installed,
 			version: release.version,
 			downloadBytes: release.downloadBytes,
-			installedBytes: release.downloadBytes,
+			installedBytes: release.executableBytes,
 			sourceUrl: release.downloadUrl,
 			downloadPage: DOWNLOAD_PAGE$1,
 			termsUrl: TERMS_URL$1,
@@ -9052,7 +9150,7 @@ var CloudflaredComponentManager = class {
 				const controller = new AbortController();
 				const timeout = setTimeout(() => {
 					controller.abort();
-				}, 3e5);
+				}, DOWNLOAD_TIMEOUT_MS);
 				timeout.unref();
 				let bytes;
 				try {
@@ -9063,12 +9161,24 @@ var CloudflaredComponentManager = class {
 				if (bytes.byteLength !== release.downloadBytes) throw new Error("cloudflared_download_size_mismatch");
 				if (createHash("sha256").update(bytes).digest("hex") !== release.downloadSha256) throw new Error("cloudflared_download_hash_mismatch");
 				const staged = join(staging, release.executableName);
-				await writeFile(staged, bytes, {
+				if (release.archive === void 0) await writeFile(staged, bytes, {
 					flag: "wx",
 					mode: 384
 				});
+				else {
+					const downloaded = join(staging, `${release.executableName}.download`);
+					await writeFile(downloaded, bytes, {
+						flag: "wx",
+						mode: 384
+					});
+					try {
+						await this.extractArtifact(downloaded, staging, release.archive.member);
+					} finally {
+						await rm(downloaded, { force: true });
+					}
+				}
 				await chmod(staged, 448);
-				if (!await regularFile$1(staged, release.downloadBytes) || await sha256$1(staged) !== release.downloadSha256) throw new Error("cloudflared_executable_hash_mismatch");
+				if (!await regularFile$1(staged, release.executableBytes) || await sha256$1(staged) !== release.executableSha256) throw new Error("cloudflared_executable_hash_mismatch");
 				const candidate = join(this.componentRoot, `.install-${randomBytes(12).toString("hex")}`);
 				await mkdir(candidate, {
 					recursive: true,
@@ -14260,6 +14370,6 @@ async function apply(ctx, config) {
 	}, "dsh-mobile: independent LAN and selectable remote providers with /mobile command");
 }
 //#endregion
-export { AUTH_PREFIX, AccessController, AccessError, BlockedUpgradePathLog, BoundedRateLimiter, CERT_EXPIRING_DAYS, CLOUDFLARED_COMPONENT_RELEASE, CSRF_COOKIE, CSRF_HEADER, CloudflaredComponentManager, CloudflaredController, CloudflaredTunnelStore, Config, DEFAULT_ORIGIN_LISTEN_PORT, FRP_VHOST_HTTP_PORT as DEFAULT_VHOST_HTTP_PORT, FRP_VHOST_HTTP_PORT, DEVICE_COOKIE, EXTENSION_LIMITS, FRP_ATTACH_DISCOVERY_PATH, FRP_ATTACH_LOCAL_DECLARATION, FRP_ATTACH_SELF_SIGNED_DECLARATION, FRP_ATTACH_VPS_DECLARATION, FRP_CADDY_IMPORT_LINE, FRP_CADDY_SNIPPET_MARKER, FRP_CADDY_SNIPPET_PATH, FRP_COMPONENT_RELEASES, FRP_DEFAULT_PROXY_NAME, FRP_DEFAULT_PUBLIC_PORT, FRP_RESERVED_PORTS, FrpComponentManager, FrpConfigStore, FrpController, JsonDeviceStore, JsonMobileAccessControlStore, JsonRemoteProviderStore, LOCAL_ADMIN_PREFIX, MAX_BLOCKED_UPGRADE_PATHS, MAX_EXTRA_WEBSOCKET_PATHS, MAX_WEBSOCKET_PATH_LENGTH, MemoryDeviceStore, MobileAccessGateway, MobileAccessGatewayController, MobileAccessService, MobileExtensionError, OriginConfigStore, OriginController, REMOTE_PROVIDERS, RequestTrustPolicy, SESSION_COOKIE, TASK_EVENT_DEBOUNCE_MS, TaskEventHub, WS_PATHS, WebSocketPathStore, addressAllowed, apply, assertExtensionId, configuredRemoteProvider, createCaddySite, createFrpAttachPlan, createFrpAttachTemplate, createFrpAttachTemplateParts, createFrpServerTemplate, createFrpcToml, createMobileAccessService, createRestrictedFrpServerTemplate, ensureFrpIngressCertificate, evaluateCertificateLifetime, frpAttachVpsParts, frpIngressPaths, frpIngressSelfCheck, frpProxyName, inject, isCloudflaredRegistration, isFrpSelfSignedIngress, isGloballyRoutableIpv4, isLoopbackAddress, issueServerCertificate, mergeSavedCloudflaredTunnelSettings, mergeSavedFrpSettings, mergeSavedFrpTarget, name, normalizeWebSocketPaths, originGatewayConfig, parseAuthority, parseCidr, parseCloudflaredOrigin, parseCloudflaredTunnelSettings, parseControlFile, parseDeviceSnapshot, parseExtensionManifest, parseFrpSettings, parseGatewayConfig, parseMobileAccessControlState, parseOriginSettings, parseRemoteProviderState, probeOriginCertificate, readCertificateRenewal, resolveAuthority, resolveFrpEntryTls, resolveFrpMode, resolveFrpPublicPort, resolveFrpVhostHttpPort, rewriteMobileIndex, validateAttachSettings, validateCloudflaredTunnelHostname, validateCloudflaredTunnelPort, validateCloudflaredTunnelToken, validateFrpEntryTls, validateFrpMode, validateFrpProxyName, validateFrpPublicOrigin, validateFrpPublicPort, validateFrpServerAddress, validateFrpServerPort, validateFrpToken, validateFrpVhostHttpPort, validateOriginAllowedCidrs, validateOriginListenHost, validateOriginListenPort, validateOriginPublicOrigin, validateWebSocketPath, watchTaskCompletions };
+export { AUTH_PREFIX, AccessController, AccessError, BlockedUpgradePathLog, BoundedRateLimiter, CERT_EXPIRING_DAYS, CLOUDFLARED_COMPONENT_RELEASE, CLOUDFLARED_COMPONENT_RELEASES, CSRF_COOKIE, CSRF_HEADER, CloudflaredComponentManager, CloudflaredController, CloudflaredTunnelStore, Config, DEFAULT_ORIGIN_LISTEN_PORT, FRP_VHOST_HTTP_PORT as DEFAULT_VHOST_HTTP_PORT, FRP_VHOST_HTTP_PORT, DEVICE_COOKIE, EXTENSION_LIMITS, FRP_ATTACH_DISCOVERY_PATH, FRP_ATTACH_LOCAL_DECLARATION, FRP_ATTACH_SELF_SIGNED_DECLARATION, FRP_ATTACH_VPS_DECLARATION, FRP_CADDY_IMPORT_LINE, FRP_CADDY_SNIPPET_MARKER, FRP_CADDY_SNIPPET_PATH, FRP_COMPONENT_RELEASES, FRP_DEFAULT_PROXY_NAME, FRP_DEFAULT_PUBLIC_PORT, FRP_RESERVED_PORTS, FrpComponentManager, FrpConfigStore, FrpController, JsonDeviceStore, JsonMobileAccessControlStore, JsonRemoteProviderStore, LOCAL_ADMIN_PREFIX, MAX_BLOCKED_UPGRADE_PATHS, MAX_EXTRA_WEBSOCKET_PATHS, MAX_WEBSOCKET_PATH_LENGTH, MemoryDeviceStore, MobileAccessGateway, MobileAccessGatewayController, MobileAccessService, MobileExtensionError, OriginConfigStore, OriginController, REMOTE_PROVIDERS, RequestTrustPolicy, SESSION_COOKIE, TASK_EVENT_DEBOUNCE_MS, TaskEventHub, WS_PATHS, WebSocketPathStore, addressAllowed, apply, assertExtensionId, configuredRemoteProvider, createCaddySite, createFrpAttachPlan, createFrpAttachTemplate, createFrpAttachTemplateParts, createFrpServerTemplate, createFrpcToml, createMobileAccessService, createRestrictedFrpServerTemplate, ensureFrpIngressCertificate, evaluateCertificateLifetime, frpAttachVpsParts, frpIngressPaths, frpIngressSelfCheck, frpProxyName, inject, isCloudflaredRegistration, isFrpSelfSignedIngress, isGloballyRoutableIpv4, isLoopbackAddress, issueServerCertificate, mergeSavedCloudflaredTunnelSettings, mergeSavedFrpSettings, mergeSavedFrpTarget, name, normalizeWebSocketPaths, originGatewayConfig, parseAuthority, parseCidr, parseCloudflaredOrigin, parseCloudflaredTunnelSettings, parseControlFile, parseDeviceSnapshot, parseExtensionManifest, parseFrpSettings, parseGatewayConfig, parseMobileAccessControlState, parseOriginSettings, parseRemoteProviderState, probeOriginCertificate, readCertificateRenewal, resolveAuthority, resolveFrpEntryTls, resolveFrpMode, resolveFrpPublicPort, resolveFrpVhostHttpPort, rewriteMobileIndex, validateAttachSettings, validateCloudflaredTunnelHostname, validateCloudflaredTunnelPort, validateCloudflaredTunnelToken, validateFrpEntryTls, validateFrpMode, validateFrpProxyName, validateFrpPublicOrigin, validateFrpPublicPort, validateFrpServerAddress, validateFrpServerPort, validateFrpToken, validateFrpVhostHttpPort, validateOriginAllowedCidrs, validateOriginListenHost, validateOriginListenPort, validateOriginPublicOrigin, validateWebSocketPath, watchTaskCompletions };
 
 //# sourceMappingURL=index.mjs.map