@linxin666/dsh-remote-web-ui 0.3.23 → 0.4.0

package/lib/client.js

@@ -1283,14 +1283,10 @@ window.__ModuleLoader__.load({
 				body: JSON.stringify({ token })
 			});
 			if (response.ok) return { ok: true };
-			if (response.status === 404) return {
+			if (response.status === 404 || response.status === 409) return {
 				ok: false,
 				code: "invalid"
 			};
-			if (response.status === 409) return {
-				ok: false,
-				code: "used"
-			};
 			return {
 				ok: false,
 				code: "forbidden"
@@ -1314,21 +1310,58 @@ window.__ModuleLoader__.load({
 			if (response.status === 404) return;
 			if (!response.ok) throw new Error(`remote-web-ui: revoke failed with ${String(response.status)}`);
 		}
-		/** Presence heartbeat from a paired phone (unpaired heartbeats 401 harmlessly). */
+		/**
+		* Presence heartbeat from a paired phone.
+		* @returns the response status, so the caller can stop polling once the server
+		*   proves this page is not paired (see {@link shouldStopHeartbeat}).
+		*/
 		async function sendHeartbeat() {
-			await fetch("/api/pair/heartbeat", { method: "POST" });
+			return (await fetch("/api/pair/heartbeat", { method: "POST" })).status;
+		}
+		/**
+		* Whether a heartbeat answer means "this page can never be accepted again" and
+		* the 10 s wake source should stop: 401 (unpaired, or the device was revoked)
+		* and 403 (the fence refused it) are permanent for this page, while a network
+		* error or a 5xx is transient and keeps the cadence.
+		* @param status - the heartbeat response status.
+		*/
+		function shouldStopHeartbeat(status) {
+			return status === 401 || status === 403;
 		}
 		/** Whether the current page URL carries a pairing token. */
 		function readPairParams(search) {
 			const pair = new URLSearchParams(search).get("pair");
 			return pair !== null && pair !== "" ? { pair } : {};
 		}
+		/** A failed LAN-bind read, carrying the HTTP status when the server answered. */
+		var LanBindStatusError = class extends Error {
+			status;
+			/**
+			* @param status - the response status, or undefined when the request failed
+			*   before a response (network error).
+			* @param message - the diagnostic message.
+			*/
+			constructor(status, message) {
+				super(message);
+				this.status = status;
+				this.name = "LanBindStatusError";
+			}
+		};
 		/** Read the LAN-bind facts (loopback-only endpoint). */
 		async function readLanBindStatus() {
 			const response = await fetch("/api/pair/lan-bind");
-			if (!response.ok) throw new Error(`remote-web-ui: lan-bind status failed with ${String(response.status)}`);
+			if (!response.ok) throw new LanBindStatusError(response.status, `remote-web-ui: lan-bind status failed with ${String(response.status)}`);
 			return await response.json();
 		}
+		/**
+		* Whether a LAN-bind status failure means this origin can never read the
+		* endpoint (401/403 from the loopback-only fence), so a poll should stop
+		* instead of retrying a known refusal; a transient error keeps the cadence.
+		* @param status - the response status, or undefined for a network failure.
+		*/
+		function shouldStopLanBindPoll(status) {
+			return status === 401 || status === 403;
+		}
 		/** Human-readable expiry clock, e.g. "10:35". */
 		function formatClock(epochMs) {
 			const date = new Date(epochMs);
@@ -1376,7 +1409,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region \0dsh-css:packages/dsh-remote-web-ui/src/client/remote.module.css.mjs
-		const css$1 = ".fThDlq_overlay{z-index:1000;justify-content:center;align-items:center;display:flex;position:fixed;inset:0}.fThDlq_mask{background:var(--dsw-alias-bg-mask-1);backdrop-filter:var(--dsw-mask-blur);position:absolute;inset:0}.fThDlq_trigger{width:36px;height:36px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:50%;flex:none;justify-content:center;align-items:center;padding:0;transition:background-color .12s,color .12s,box-shadow .12s;display:inline-flex;position:relative}.fThDlq_trigger[data-update-available]{color:var(--dsw-alias-brand-primary)}.fThDlq_trigger[data-update-available]:after{box-sizing:border-box;border:2px solid var(--dsw-alias-bg-layer-1);background:var(--dsw-alias-brand-primary);content:\"\";pointer-events:none;border-radius:50%;width:8px;height:8px;position:absolute;top:4px;right:4px}.fThDlq_trigger[data-wide=wide]{border-radius:999px;flex:auto;justify-content:flex-start;gap:8px;width:auto;min-width:0;padding:0 10px}.fThDlq_trigger[data-update-available][data-wide=wide]{flex:none;gap:6px}.fThDlq_trigger[data-update-available][data-wide=wide]:after{display:none}.fThDlq_updateBadgeText{white-space:nowrap;font-size:13px;font-weight:500;line-height:1}.fThDlq_trigger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_trigger:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_trigger:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_trigger:disabled{opacity:.5;cursor:default}.fThDlq_panel{z-index:1;box-sizing:border-box;background:var(--dsw-alias-bg-layer-2);width:560px;max-width:calc(100vw - 48px);max-height:calc(100vh - 48px);box-shadow:var(--dsw-shadow-lv3);color:var(--dsw-alias-label-primary);border-radius:24px;flex-direction:column;gap:14px;padding:24px;font-size:14px;line-height:22px;display:flex;position:relative;overflow:auto}.fThDlq_header{align-items:flex-start;gap:12px;display:flex}.fThDlq_heading{flex:1;min-width:0}.fThDlq_title{margin:0;font-size:18px;font-weight:600;line-height:26px}.fThDlq_subtitle{color:var(--dsw-alias-label-secondary);margin:4px 0 0;font-size:13px}.fThDlq_close{width:28px;height:28px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:50%;flex:none;justify-content:center;align-items:center;padding:0;transition:background-color .12s,color .12s,box-shadow .12s;display:inline-flex}.fThDlq_close:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_close:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_close:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_close:disabled{opacity:.5;cursor:default}.fThDlq_card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;flex-direction:column;align-items:center;gap:12px;padding:16px;display:flex}.fThDlq_cardHeader{justify-content:space-between;align-items:center;gap:12px;width:100%;display:flex}.fThDlq_cardTitle{font-weight:500}.fThDlq_badge{white-space:nowrap;border-radius:999px;flex:none;align-items:center;gap:6px;min-width:0;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex}.fThDlq_badge:before{content:\"\";background:currentColor;border-radius:50%;width:8px;height:8px}.fThDlq_badge-waiting{color:var(--dsw-alias-label-secondary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-connected{color:var(--dsw-alias-state-success-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-disconnected{color:var(--dsw-alias-state-warn-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-stopped{color:var(--dsw-alias-state-error-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badgePublic{color:var(--dsw-alias-brand-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badges{flex:none;align-items:center;gap:6px;display:inline-flex}.fThDlq_qrWrap{background:var(--dsw-alias-bg-base);border-radius:12px;justify-content:center;align-items:center;padding:12px;display:flex}.fThDlq_qr{display:block}.fThDlq_expired{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_expiry{color:var(--dsw-alias-label-secondary);margin:0;font-size:12px}.fThDlq_hint{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_link{text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-caption);font-family:var(--dsw-font-mono,ui-monospace, monospace);margin:0;font-size:12px;display:block;overflow:hidden}.fThDlq_pairLinks{flex-direction:column;gap:8px;display:flex}.fThDlq_pairLinkRow{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:10px;align-items:center;gap:10px;min-width:0;padding:10px 12px;display:flex}.fThDlq_pairLinkText{flex:1;min-width:0}.fThDlq_pairLinkLabel{color:var(--dsw-alias-label-secondary);margin-bottom:3px;font-size:12px;display:block}.fThDlq_copyLink{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-button-elevated-fill);min-height:30px;color:var(--dsw-alias-label-primary);cursor:pointer;border-radius:8px;flex:none;align-items:center;gap:5px;padding:0 10px;display:inline-flex}.fThDlq_oneTimeHint{color:var(--dsw-alias-label-caption);margin:0;font-size:12px}.fThDlq_stoppedHint{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_tunnelNote{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_tunnelFailed{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_actions{gap:8px;display:flex}.fThDlq_action{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-button-elevated-fill);height:34px;color:var(--dsw-alias-label-primary);cursor:pointer;white-space:nowrap;border-radius:10px;justify-content:center;align-items:center;gap:6px;padding:0 14px;font-size:13px;transition:background-color .12s,border-color .12s,box-shadow .12s;display:inline-flex}.fThDlq_action:hover:not(:disabled){background:var(--dsw-alias-button-floating-hover)}.fThDlq_action:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_action:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_action:disabled{opacity:.5;cursor:default}.fThDlq_banner{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;padding:16px}.fThDlq_bannerTitle{color:var(--dsw-alias-state-warn-primary);margin:0;font-weight:500}.fThDlq_bannerHint{color:var(--dsw-alias-label-secondary);margin:6px 0 0;font-size:13px}.fThDlq_fencePage{z-index:2000;box-sizing:border-box;background:var(--dsw-alias-bg-base);text-align:center;flex-direction:column;justify-content:center;align-items:center;padding:40px 24px;display:flex;position:fixed;inset:0;overflow:auto}.fThDlq_fenceCard{box-sizing:border-box;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);width:min(520px,100%);box-shadow:var(--dsw-shadow-lv3);text-align:center;border-radius:20px;margin-inline:auto;padding:36px 40px}.fThDlq_fenceMark{background:var(--dsw-alias-state-error-secondary);width:44px;height:44px;color:var(--dsw-alias-state-error-primary);border-radius:50%;place-items:center;margin-inline:auto;font-size:24px;line-height:1;display:grid}.fThDlq_fenceEyebrow{color:var(--dsw-alias-state-error-primary);margin:22px 0 8px;font-size:13px;font-weight:600}.fThDlq_fenceTitle{color:var(--dsw-alias-label-primary);margin:0;font-size:24px;line-height:1.35}.fThDlq_fenceDetail{color:var(--dsw-alias-label-secondary);margin:12px 0 0;font-size:14px;line-height:1.65}.fThDlq_fenceSteps{background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);text-align:left;border-radius:12px;margin:24px auto 0;padding:20px 20px 20px 42px;font-size:14px;line-height:1.65}.fThDlq_fenceSteps li+li{margin-top:8px}.fThDlq_fenceForm{width:100%;margin-top:20px}.fThDlq_fenceInputRow{gap:8px;width:100%;display:flex}.fThDlq_fenceInput{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);min-width:0;color:var(--dsw-alias-label-primary);font:inherit;border-radius:10px;flex:1;padding:10px 14px;font-size:13px;transition:border-color .12s,box-shadow .12s}.fThDlq_fenceInput:focus{border-color:var(--dsw-alias-brand-primary);outline:none;box-shadow:0 0 0 2px #0066ff26}.fThDlq_fencePairButton{border:1px solid var(--dsw-alias-button-primary-fill);background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground);font:inherit;cursor:pointer;border-radius:10px;flex-shrink:0;padding:10px 18px;font-size:13px;font-weight:500;transition:filter .12s,opacity .12s}.fThDlq_fencePairButton:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover,var(--dsw-alias-button-primary-fill));border-color:var(--dsw-alias-button-primary-hover,var(--dsw-alias-button-primary-fill))}.fThDlq_fencePairButton:disabled{opacity:.55;cursor:not-allowed}.fThDlq_fencePairButton:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.fThDlq_fenceError{color:var(--dsw-alias-state-error-primary);text-align:left;margin:10px 0 0;font-size:13px;line-height:1.4}.fThDlq_fenceRetry{border:1px solid var(--dsw-alias-border-l2);width:100%;color:var(--dsw-alias-label-secondary);font:inherit;cursor:pointer;background:0 0;border-radius:10px;margin-top:12px;padding:10px 16px;font-weight:500;transition:background-color .12s,color .12s}.fThDlq_fenceRetry:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_fenceRetry:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:3px}.fThDlq_fenceFootnote{color:var(--dsw-alias-label-tertiary);margin:14px 0 0;font-size:12px;line-height:1.55}.fThDlq_addresses{border:none;margin:12px 0 0;padding:0}.fThDlq_addresses legend{color:var(--dsw-alias-label-secondary);padding:0;font-size:13px}.fThDlq_address{color:var(--dsw-alias-label-primary);font-variant-numeric:tabular-nums;cursor:pointer;border-radius:6px;align-items:center;gap:8px;margin-top:6px;padding:4px 6px;font-size:13px;transition:background-color .12s;display:flex}.fThDlq_address:hover{background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_address input:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);border-radius:50%;outline:none}.fThDlq_addressValue{text-overflow:ellipsis;white-space:nowrap;min-width:0;color:var(--dsw-alias-label-secondary);flex:1;font-size:12px;overflow:hidden}.fThDlq_addressHint{color:var(--dsw-alias-label-tertiary);margin:6px 0 0;font-size:12px}.fThDlq_devices{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;flex-direction:column;gap:8px;padding:12px 16px 14px;display:flex}.fThDlq_devicesTitle{margin:0;font-size:13px;font-weight:500;line-height:20px}.fThDlq_devicesEmpty{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_deviceList{flex-direction:column;gap:8px;margin:0;padding:0;list-style:none;display:flex}.fThDlq_deviceRow{justify-content:space-between;align-items:flex-start;gap:12px;display:flex}.fThDlq_deviceMeta{flex-direction:column;gap:2px;min-width:0;display:flex}.fThDlq_deviceName{text-overflow:ellipsis;white-space:nowrap;font-size:13px;font-weight:500;overflow:hidden}.fThDlq_devicePresence{font-size:12px;line-height:18px}.fThDlq_deviceOnline{color:var(--dsw-alias-state-success-primary)}.fThDlq_deviceOffline{color:var(--dsw-alias-label-secondary)}.fThDlq_deviceSeen{color:var(--dsw-alias-label-tertiary);font-variant-numeric:tabular-nums;font-size:12px}.fThDlq_deviceRevoke{color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:8px;flex:none;padding:6px 10px;font-size:12px;transition:background-color .12s,color .12s}.fThDlq_deviceRevoke:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_deviceRevoke:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}@media (prefers-reduced-motion:reduce){.fThDlq_trigger,.fThDlq_close,.fThDlq_action,.fThDlq_address,.fThDlq_deviceRevoke{transition:none}}.fThDlq_entryRow{flex:none;align-items:center;gap:6px;min-width:0;display:flex}.fThDlq_entryRow[data-rail=rail]{flex-direction:column-reverse;gap:4px}.fThDlq_updateStatus{margin:0;font-weight:600}.fThDlq_updateDetail{color:var(--dsw-alias-label-secondary);margin:6px 0 0;font-size:13px}.fThDlq_updateError{color:var(--dsw-alias-text-danger,var(--dsw-alias-label-primary));margin:0;font-weight:600}.fThDlq_updateOutput{background:var(--dsw-alias-bg-layer-1);max-height:180px;color:var(--dsw-alias-label-secondary);white-space:pre-wrap;word-break:break-all;border-radius:10px;margin:10px 0 0;padding:10px 12px;font-size:12px;line-height:18px;overflow:auto}.fThDlq_updateList{flex-direction:column;gap:6px;margin:12px 0 0;padding:0;list-style:none;display:flex}.fThDlq_updateListItem{justify-content:space-between;align-items:baseline;gap:12px;font-size:13px;display:flex}.fThDlq_updateListName{text-overflow:ellipsis;white-space:nowrap;min-width:0;color:var(--dsw-alias-label-primary);overflow:hidden}.fThDlq_updateListVersions{color:var(--dsw-alias-label-secondary);font-variant-numeric:tabular-nums;flex:none}.fThDlq_updateNotes{margin-top:14px}.fThDlq_updateNotesTitle{margin:0 0 8px;font-size:14px;font-weight:600}.fThDlq_updateNoteSection{flex-direction:column;gap:4px;margin-top:10px;display:flex}.fThDlq_updateNoteHeading{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px;font-weight:600}.fThDlq_updateNoteList{flex-direction:column;gap:4px;margin:0;padding-left:18px;font-size:13px;display:flex}.fThDlq_updateNoteItem{color:var(--dsw-alias-label-primary);overflow-wrap:anywhere}.fThDlq_updateVersions{margin-top:12px}.fThDlq_updateVersionsSummary{cursor:pointer;color:var(--dsw-alias-label-secondary);user-select:none;font-size:12px}.fThDlq_updateActions{justify-content:flex-end;margin-top:16px;display:flex}.fThDlq_updateRetry{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary);cursor:pointer;border:none;border-radius:10px;align-items:center;gap:6px;padding:8px 14px;font-size:13px;transition:background-color .12s,color .12s;display:inline-flex}.fThDlq_updateRetry:hover{background:var(--dsw-alias-interactive-bg-active)}@media (prefers-reduced-motion:reduce){.fThDlq_updateRetry{transition:none}}";
+		const css$1 = ".fThDlq_overlay{z-index:1000;justify-content:center;align-items:center;display:flex;position:fixed;inset:0}.fThDlq_mask{background:var(--dsw-alias-bg-mask-1);backdrop-filter:var(--dsw-mask-blur);position:absolute;inset:0}.fThDlq_trigger{width:36px;height:36px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:50%;flex:none;justify-content:center;align-items:center;padding:0;transition:background-color .12s,color .12s,box-shadow .12s;display:inline-flex;position:relative}.fThDlq_trigger[data-update-available]{color:var(--dsw-alias-brand-primary)}.fThDlq_trigger[data-update-available]:after{box-sizing:border-box;border:2px solid var(--dsw-alias-bg-layer-1);background:var(--dsw-alias-brand-primary);content:\"\";pointer-events:none;border-radius:50%;width:8px;height:8px;position:absolute;top:4px;right:4px}.fThDlq_trigger[data-wide=wide]{border-radius:999px;flex:auto;justify-content:flex-start;gap:8px;width:auto;min-width:0;padding:0 10px}.fThDlq_trigger[data-update-available][data-wide=wide]{flex:none;gap:6px}.fThDlq_trigger[data-update-available][data-wide=wide]:after{display:none}.fThDlq_updateBadgeText{white-space:nowrap;font-size:13px;font-weight:500;line-height:1}.fThDlq_trigger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_trigger:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_trigger:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_trigger:disabled{opacity:.5;cursor:default}.fThDlq_panel{z-index:1;box-sizing:border-box;background:var(--dsw-alias-bg-layer-2);width:560px;max-width:calc(100vw - 48px);max-height:calc(100vh - 48px);box-shadow:var(--dsw-shadow-lv3);color:var(--dsw-alias-label-primary);border-radius:24px;flex-direction:column;gap:14px;padding:24px;font-size:14px;line-height:22px;display:flex;position:relative;overflow:auto}.fThDlq_header{align-items:flex-start;gap:12px;display:flex}.fThDlq_heading{flex:1;min-width:0}.fThDlq_title{margin:0;font-size:18px;font-weight:600;line-height:26px}.fThDlq_subtitle{color:var(--dsw-alias-label-secondary);margin:4px 0 0;font-size:13px}.fThDlq_close{width:28px;height:28px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:50%;flex:none;justify-content:center;align-items:center;padding:0;transition:background-color .12s,color .12s,box-shadow .12s;display:inline-flex}.fThDlq_close:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_close:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_close:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_close:disabled{opacity:.5;cursor:default}.fThDlq_card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;flex-direction:column;align-items:center;gap:12px;padding:16px;display:flex}.fThDlq_cardHeader{justify-content:space-between;align-items:center;gap:12px;width:100%;display:flex}.fThDlq_cardTitle{font-weight:500}.fThDlq_badge{white-space:nowrap;border-radius:999px;flex:none;align-items:center;gap:6px;min-width:0;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex}.fThDlq_badge:before{content:\"\";background:currentColor;border-radius:50%;width:8px;height:8px}.fThDlq_badge-waiting{color:var(--dsw-alias-label-secondary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-connected{color:var(--dsw-alias-state-success-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-disconnected{color:var(--dsw-alias-state-warn-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-stopped{color:var(--dsw-alias-state-error-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badgePublic{color:var(--dsw-alias-brand-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badges{flex:none;align-items:center;gap:6px;display:inline-flex}.fThDlq_qrWrap{background:var(--dsw-alias-bg-base);border-radius:12px;justify-content:center;align-items:center;padding:12px;display:flex}.fThDlq_qr{display:block}.fThDlq_expired{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_expiry{color:var(--dsw-alias-label-secondary);margin:0;font-size:12px}.fThDlq_hint{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_link{text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-caption);font-family:var(--dsw-font-mono,ui-monospace, monospace);margin:0;font-size:12px;display:block;overflow:hidden}.fThDlq_pairLinks{flex-direction:column;gap:8px;display:flex}.fThDlq_pairLinkRow{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:10px;align-items:center;gap:10px;min-width:0;padding:10px 12px;display:flex}.fThDlq_pairLinkText{flex:1;min-width:0}.fThDlq_pairLinkLabel{color:var(--dsw-alias-label-secondary);margin-bottom:3px;font-size:12px;display:block}.fThDlq_copyLink{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-button-elevated-fill);min-height:30px;color:var(--dsw-alias-label-primary);cursor:pointer;border-radius:8px;flex:none;align-items:center;gap:5px;padding:0 10px;display:inline-flex}.fThDlq_oneTimeHint{color:var(--dsw-alias-label-caption);margin:0;font-size:12px}.fThDlq_stoppedHint{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_tunnelNote{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_tunnelFailed{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_actions{gap:8px;display:flex}.fThDlq_action{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-button-elevated-fill);height:34px;color:var(--dsw-alias-label-primary);cursor:pointer;white-space:nowrap;border-radius:10px;justify-content:center;align-items:center;gap:6px;padding:0 14px;font-size:13px;transition:background-color .12s,border-color .12s,box-shadow .12s;display:inline-flex}.fThDlq_action:hover:not(:disabled){background:var(--dsw-alias-button-floating-hover)}.fThDlq_action:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_action:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_action:disabled{opacity:.5;cursor:default}.fThDlq_banner{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;padding:16px}.fThDlq_bannerTitle{color:var(--dsw-alias-state-warn-primary);margin:0;font-weight:500}.fThDlq_bannerHint{color:var(--dsw-alias-label-secondary);margin:6px 0 0;font-size:13px}.fThDlq_fencePage{z-index:2000;box-sizing:border-box;background:var(--dsw-alias-bg-base);text-align:center;flex-direction:column;justify-content:center;align-items:center;padding:40px 24px;display:flex;position:fixed;inset:0;overflow:auto}.fThDlq_fenceCard{box-sizing:border-box;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);width:min(520px,100%);box-shadow:var(--dsw-shadow-lv3);text-align:center;border-radius:20px;margin-inline:auto;padding:36px 40px}.fThDlq_fenceMark{background:var(--dsw-alias-state-error-secondary);width:44px;height:44px;color:var(--dsw-alias-state-error-primary);border-radius:50%;place-items:center;margin-inline:auto;font-size:24px;line-height:1;display:grid}.fThDlq_fenceEyebrow{color:var(--dsw-alias-state-error-primary);margin:22px 0 8px;font-size:13px;font-weight:600}.fThDlq_fenceTitle{color:var(--dsw-alias-label-primary);margin:0;font-size:24px;line-height:1.35}.fThDlq_fenceDetail{color:var(--dsw-alias-label-secondary);margin:12px 0 0;font-size:14px;line-height:1.65}.fThDlq_fenceSteps{background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);text-align:left;border-radius:12px;margin:24px auto 0;padding:20px 20px 20px 42px;font-size:14px;line-height:1.65}.fThDlq_fenceSteps li+li{margin-top:8px}.fThDlq_fenceForm{width:100%;margin-top:20px}.fThDlq_fenceInputRow{gap:8px;width:100%;display:flex}.fThDlq_fenceInput{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);min-width:0;color:var(--dsw-alias-label-primary);font:inherit;border-radius:10px;flex:1;padding:10px 14px;font-size:13px;transition:border-color .12s,box-shadow .12s}.fThDlq_fenceInput:focus{border-color:var(--dsw-alias-brand-primary);outline:none;box-shadow:0 0 0 2px #0066ff26}.fThDlq_fencePairButton{border:1px solid var(--dsw-alias-button-primary-fill);background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground);font:inherit;cursor:pointer;border-radius:10px;flex-shrink:0;padding:10px 18px;font-size:13px;font-weight:500;transition:filter .12s,opacity .12s}.fThDlq_fencePairButton:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover,var(--dsw-alias-button-primary-fill));border-color:var(--dsw-alias-button-primary-hover,var(--dsw-alias-button-primary-fill))}.fThDlq_fencePairButton:disabled{opacity:.55;cursor:not-allowed}.fThDlq_fencePairButton:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.fThDlq_fenceError{color:var(--dsw-alias-state-error-primary);text-align:left;margin:10px 0 0;font-size:13px;line-height:1.4}.fThDlq_fenceRetry{border:1px solid var(--dsw-alias-border-l2);width:100%;color:var(--dsw-alias-label-secondary);font:inherit;cursor:pointer;background:0 0;border-radius:10px;margin-top:12px;padding:10px 16px;font-weight:500;transition:background-color .12s,color .12s}.fThDlq_fenceRetry:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_fenceRetry:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:3px}.fThDlq_fenceFootnote{color:var(--dsw-alias-label-tertiary);margin:14px 0 0;font-size:12px;line-height:1.55}.fThDlq_addresses{border:none;margin:12px 0 0;padding:0}.fThDlq_addresses legend{color:var(--dsw-alias-label-secondary);padding:0;font-size:13px}.fThDlq_address{color:var(--dsw-alias-label-primary);font-variant-numeric:tabular-nums;cursor:pointer;border-radius:6px;align-items:center;gap:8px;margin-top:6px;padding:4px 6px;font-size:13px;transition:background-color .12s;display:flex}.fThDlq_address:hover{background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_address input:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);border-radius:50%;outline:none}.fThDlq_addressValue{text-overflow:ellipsis;white-space:nowrap;min-width:0;color:var(--dsw-alias-label-secondary);flex:1;font-size:12px;overflow:hidden}.fThDlq_addressHint{color:var(--dsw-alias-label-tertiary);margin:6px 0 0;font-size:12px}.fThDlq_devices{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;flex-direction:column;gap:8px;padding:12px 16px 14px;display:flex}.fThDlq_devicesTitle{margin:0;font-size:13px;font-weight:500;line-height:20px}.fThDlq_devicesEmpty{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_deviceList{flex-direction:column;gap:8px;margin:0;padding:0;list-style:none;display:flex}.fThDlq_deviceRow{justify-content:space-between;align-items:flex-start;gap:12px;display:flex}.fThDlq_deviceMeta{flex-direction:column;gap:2px;min-width:0;display:flex}.fThDlq_deviceName{text-overflow:ellipsis;white-space:nowrap;font-size:13px;font-weight:500;overflow:hidden}.fThDlq_devicePresence{font-size:12px;line-height:18px}.fThDlq_deviceOnline{color:var(--dsw-alias-state-success-primary)}.fThDlq_deviceOffline{color:var(--dsw-alias-label-secondary)}.fThDlq_deviceSeen{color:var(--dsw-alias-label-tertiary);font-variant-numeric:tabular-nums;font-size:12px}.fThDlq_deviceRevoke{color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:8px;flex:none;padding:6px 10px;font-size:12px;transition:background-color .12s,color .12s}.fThDlq_deviceRevoke:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_deviceRevoke:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}@media (prefers-reduced-motion:reduce){.fThDlq_trigger,.fThDlq_close,.fThDlq_action,.fThDlq_address,.fThDlq_deviceRevoke{transition:none}}.fThDlq_entryRow{flex:none;align-items:center;gap:6px;min-width:0;display:flex}.fThDlq_entryRow[data-rail=rail]{flex-direction:column-reverse;gap:4px}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footArea]{flex-flow:wrap;align-items:center}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footArea]>:not([class*=settingsArea]):not([class*=footerActions]){flex:100%;min-width:0}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=settingsArea]{flex:auto;order:1;width:auto;min-width:0}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footerActions]{flex:none;order:2;align-items:center;width:auto;min-width:0}.fThDlq_updateStatus{margin:0;font-weight:600}.fThDlq_updateDetail{color:var(--dsw-alias-label-secondary);margin:6px 0 0;font-size:13px}.fThDlq_updateError{color:var(--dsw-alias-text-danger,var(--dsw-alias-label-primary));margin:0;font-weight:600}.fThDlq_updateOutput{background:var(--dsw-alias-bg-layer-1);max-height:180px;color:var(--dsw-alias-label-secondary);white-space:pre-wrap;word-break:break-all;border-radius:10px;margin:10px 0 0;padding:10px 12px;font-size:12px;line-height:18px;overflow:auto}.fThDlq_updateList{flex-direction:column;gap:6px;margin:12px 0 0;padding:0;list-style:none;display:flex}.fThDlq_updateListItem{justify-content:space-between;align-items:baseline;gap:12px;font-size:13px;display:flex}.fThDlq_updateListName{text-overflow:ellipsis;white-space:nowrap;min-width:0;color:var(--dsw-alias-label-primary);overflow:hidden}.fThDlq_updateListVersions{color:var(--dsw-alias-label-secondary);font-variant-numeric:tabular-nums;flex:none}.fThDlq_updateNotes{margin-top:14px}.fThDlq_updateNotesTitle{margin:0 0 8px;font-size:14px;font-weight:600}.fThDlq_updateNoteSection{flex-direction:column;gap:4px;margin-top:10px;display:flex}.fThDlq_updateNoteHeading{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px;font-weight:600}.fThDlq_updateNoteList{flex-direction:column;gap:4px;margin:0;padding-left:18px;font-size:13px;display:flex}.fThDlq_updateNoteItem{color:var(--dsw-alias-label-primary);overflow-wrap:anywhere}.fThDlq_updateVersions{margin-top:12px}.fThDlq_updateVersionsSummary{cursor:pointer;color:var(--dsw-alias-label-secondary);user-select:none;font-size:12px}.fThDlq_updateActions{justify-content:flex-end;margin-top:16px;display:flex}.fThDlq_updateRetry{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary);cursor:pointer;border:none;border-radius:10px;align-items:center;gap:6px;padding:8px 14px;font-size:13px;transition:background-color .12s,color .12s;display:inline-flex}.fThDlq_updateRetry:hover{background:var(--dsw-alias-interactive-bg-active)}@media (prefers-reduced-motion:reduce){.fThDlq_updateRetry{transition:none}}";
 		const tagId$1 = "@linxin666/dsh-remote-web-ui/packages/dsh-remote-web-ui/src/client/remote.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId$1) + "]") === null) {
 			const tag = document.createElement("style");
@@ -1484,6 +1517,20 @@ window.__ModuleLoader__.load({
 		* actions (stop / refresh / copy). Pure presentation — all state and
 		* actions arrive through props from the entry's behavior component.
 		*/
+		/**
+		* The QR symbol, memoized on the link: the panel re-renders on every SSE state
+		* frame (a paired phone heartbeats every 10s), and qrcode.react rebuilds the
+		* SVG path and element tree on each render.
+		*/
+		const PairQrCode = (0, react.memo)(function PairQrCode({ url, className }) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(QRCodeSVG, {
+				value: url,
+				size: 184,
+				level: "M",
+				marginSize: 1,
+				className
+			});
+		});
 		/** Badge text + tone per phase (ready states only). */
 		function statusOf(t, state) {
 			switch (state.phase) {
@@ -1536,7 +1583,7 @@ window.__ModuleLoader__.load({
 						className: remote_module_css_default.close,
 						"aria-label": t("close.label"),
 						onClick: onClose,
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCloseOutline16, { size: 14 })
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCloseOutlineRegular, { size: 14 })
 					})]
 				}), state.kind === "lan-required" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 					className: remote_module_css_default.banner,
@@ -1602,11 +1649,8 @@ window.__ModuleLoader__.load({
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 								className: remote_module_css_default.qrWrap,
 								"data-testid": "remote-qr",
-								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(QRCodeSVG, {
-									value: state.url,
-									size: 184,
-									level: "M",
-									marginSize: 1,
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PairQrCode, {
+									url: state.url,
 									className: remote_module_css_default.qr
 								})
 							}),
@@ -1641,7 +1685,7 @@ window.__ModuleLoader__.load({
 								type: "button",
 								className: remote_module_css_default.copyLink,
 								onClick: () => onCopy(state.url),
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCopyOutline16, { size: 14 }), copied ? t("action.copied") : t("action.copyLink")]
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCopyOutlineRegular, { size: 14 }), copied ? t("action.copied") : t("action.copyLink")]
 							})]
 						}), state.token !== void 0 && state.token !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 							className: remote_module_css_default.pairLinkRow,
@@ -1659,7 +1703,7 @@ window.__ModuleLoader__.load({
 								type: "button",
 								className: remote_module_css_default.copyLink,
 								onClick: () => onCopyToken ? onCopyToken(state.token) : onCopy(state.token),
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCopyOutline16, { size: 14 }), copiedToken ? t("action.copiedToken") : t("action.copyToken")]
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCopyOutlineRegular, { size: 14 }), copiedToken ? t("action.copiedToken") : t("action.copyToken")]
 							})]
 						})]
 					}),
@@ -1740,12 +1784,12 @@ window.__ModuleLoader__.load({
 							type: "button",
 							className: remote_module_css_default.action,
 							onClick: onStop,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconStopFill16, { size: 14 }), t("action.stop")]
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconStopFillRegular, { size: 14 }), t("action.stop")]
 						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
 							type: "button",
 							className: remote_module_css_default.action,
 							onClick: onRefresh,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconRefreshOutline16, { size: 14 }), t("action.refresh")]
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconRefreshOutlineRegular, { size: 14 }), t("action.refresh")]
 						})]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
@@ -1897,7 +1941,7 @@ window.__ModuleLoader__.load({
 							className: remote_module_css_default.close,
 							"aria-label": t("update.close"),
 							onClick: onClose,
-							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCloseOutline16, {})
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCloseOutlineRegular, {})
 						})]
 					}),
 					view.kind === "checking" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -1952,7 +1996,7 @@ window.__ModuleLoader__.load({
 							className: remote_module_css_default.updateRetry,
 							onClick: onRecheck,
 							children: [
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconRefreshOutline16, {}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconRefreshOutlineRegular, {}),
 								" ",
 								t("update.retry")
 							]
@@ -2258,7 +2302,7 @@ window.__ModuleLoader__.load({
 				"aria-expanded": open,
 				title: updateLabel,
 				onClick: openPanel,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconDownloadOutline16, { size: wide ? 16 : 18 }), updateAvailable && wide && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconDownloadOutlineRegular, { size: wide ? 16 : 18 }), updateAvailable && wide && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 					className: remote_module_css_default.updateBadgeText,
 					children: t("update.badge")
 				})]
@@ -2414,19 +2458,21 @@ window.__ModuleLoader__.load({
 			}, [state]);
 			(0, react.useEffect)(() => closeEventSource, [closeEventSource]);
 			const handleStop = (0, react.useCallback)(() => {
-				stopPair().catch(() => {});
-				setState((previous) => previous.kind === "ready" ? {
-					...previous,
-					phase: "stopped",
-					devices: []
-				} : previous);
+				stopPair().then(() => {
+					setState((previous) => previous.kind === "ready" ? {
+						...previous,
+						phase: "stopped",
+						devices: []
+					} : previous);
+				}).catch(() => {});
 			}, []);
 			const handleRevoke = (0, react.useCallback)((deviceId) => {
-				revokePair(deviceId).catch(() => {});
-				setState((previous) => previous.kind === "ready" ? {
-					...previous,
-					devices: previous.devices.filter((device) => device.id !== deviceId)
-				} : previous);
+				revokePair(deviceId).then(() => {
+					setState((previous) => previous.kind === "ready" ? {
+						...previous,
+						devices: previous.devices.filter((device) => device.id !== deviceId)
+					} : previous);
+				}).catch(() => {});
 			}, []);
 			const handleRefresh = (0, react.useCallback)(() => {
 				mint().then(setState);
@@ -2688,17 +2734,20 @@ window.__ModuleLoader__.load({
 					})
 				]
 			});
-			if (!state.exposed) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
-				className: cardClass,
-				children: [header, expanded ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-					className: settings_card_module_css_default.body,
-					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: settings_card_module_css_default.notExposed,
-						role: "status",
-						children: props.t("settings.notExposed")
-					})
-				}) : null]
-			});
+			if (!state.exposed && props.renderChildrenWhenNotExposed !== true) {
+				const showNotice = props.hideNotExposedNotice !== true;
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
+					className: cardClass,
+					children: [header, expanded ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: settings_card_module_css_default.body,
+						children: showNotice ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: settings_card_module_css_default.notExposed,
+							role: "status",
+							children: props.t("settings.notExposed")
+						}) : null
+					}) : null]
+				});
+			}
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				className: cardClass,
 				children: [header, expanded ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -3098,31 +3147,31 @@ window.__ModuleLoader__.load({
 			specs;
 			staged = /* @__PURE__ */ new Map();
 			listeners = /* @__PURE__ */ new Set();
-			/** The scope subscription installed in the constructor; released by dispose(). */
-			disposeScope;
+			/** The form subscription installed in the constructor; released by dispose(). */
+			disposeForm;
 			disposed = false;
 			saving = false;
 			failed = false;
 			failedReason;
-			/** @param scope - the bound settings scope for this card's namespace. */
+			/** @param scope - the bound configuration form for this card's namespace. */
 			constructor(scope, specs) {
 				this.scope = scope;
 				this.specs = new Map(specs.map((spec) => [spec.field, spec]));
-				this.disposeScope = scope.subscribe(() => {
+				this.disposeForm = scope.subscribe(() => {
 					this.publish();
 				});
 			}
 			/**
-			* Release the scope subscription and every bound store listener. The card
+			* Release the form subscription and every bound store listener. The card
 			* must call this on teardown; later calls are no-ops.
 			*/
 			dispose() {
 				if (this.disposed) return;
 				this.disposed = true;
-				this.disposeScope();
+				this.disposeForm();
 				this.listeners.clear();
 			}
-			/** Publish a projection of this form, rebuilt whenever the scope or a draft changes. */
+			/** Publish a projection of this form, rebuilt whenever the form or a draft changes. */
 			bind(project) {
 				const store = createSnapshotStore(project());
 				this.listeners.add(() => {
@@ -3189,19 +3238,19 @@ window.__ModuleLoader__.load({
 				};
 			}
 			/**
-			* Write every staged edit in one atomic scope mutation, then re-seed from
+			* Write every staged edit in one atomic form mutation, then re-seed from
 			* what the Host accepted.
 			*
 			* The whole batch rides one mutate, so cross-field validate hooks
 			* (baseURL+model) judge it as a unit: the Host either applies every write
-			* or refuses the batch. The 0.1.2 scope contract never rejects a refused
-			* mutation — the scope recovers with a fresh Host view and resolves — so
-			* resolution alone proves nothing: the outcome is judged by reading the
-			* settled snapshot back, one planned write at a time, and one missed write
-			* fails the whole save. A scope that still rejects on refusal (the dsh-web
-			* bridge scope) reports through the same failure path with its rejection
-			* message. A save that did not land keeps its drafts, so the user can
-			* correct them instead of retyping.
+			* or refuses the batch. The form contract answers a refusal or a skipped
+			* write with `false` (it recovers with a fresh Host view instead of
+			* throwing), so the outcome is judged twice: the answer itself, and then the
+			* settled snapshot read back one planned write at a time. One missed write
+			* fails the whole save. A transport that rejects instead (the dsh-web bridge
+			* controller on a dead connection) reports through the same failure path
+			* with its rejection message. A save that did not land keeps its drafts, so
+			* the user can correct them instead of retyping.
 			* @returns settlement after the mutation and the read-back.
 			*/
 			async save() {
@@ -3223,12 +3272,13 @@ window.__ModuleLoader__.load({
 					path: [item.field]
 				});
 				let failedReason;
+				let accepted = false;
 				try {
-					await this.scope.mutate(ops);
+					accepted = await this.scope.mutate(ops);
 				} catch (error) {
 					failedReason = error instanceof Error ? error.message : String(error);
 				}
-				const landed = failedReason === void 0 && valid.every((item) => item.judge());
+				const landed = accepted && failedReason === void 0 && valid.every((item) => item.judge());
 				for (const [field, before] of pending) if (landed && this.staged.get(field) === before) this.staged.delete(field);
 				this.saving = false;
 				this.failed = !landed;
@@ -3338,13 +3388,13 @@ window.__ModuleLoader__.load({
 		/**
 		* The remote-control settings card: pairing security and device limits.
 		* Registers into the `web-ui.plugin.item` child slot the Web UI plugin group
-		* renders, bound to the `remote-web-ui` settings namespace.
+		* renders, bound to the `remote-web-ui` profile entry's configuration form.
 		*/
-		/** Bridges the `remote-web-ui` scope onto the card's staged form. */
+		/** Bridges the `remote-web-ui` form onto the card's staged form. */
 		var RemoteSettingsCardController = class {
 			form;
 			store;
-			/** @param scope - the bound settings scope for the `remote-web-ui` namespace. */
+			/** @param scope - the configuration form for the `remote-web-ui` entry. */
 			constructor(scope) {
 				this.form = new CardForm(scope, [
 					booleanField("enabled"),
@@ -3390,7 +3440,7 @@ window.__ModuleLoader__.load({
 				};
 			}
 			/**
-			* Release the card's scope subscription and bound stores; the slot
+			* Release the card's form subscription and bound stores; the slot
 			* disposer calls this on teardown.
 			*/
 			dispose() {
@@ -3418,6 +3468,8 @@ window.__ModuleLoader__.load({
 				descriptionKey: "settings.description",
 				defaultOpen: false,
 				state,
+				renderChildrenWhenNotExposed: true,
+				hideNotExposedNotice: true,
 				onSave: props.save,
 				onDiscard: props.discard,
 				children: [
@@ -3615,10 +3667,12 @@ window.__ModuleLoader__.load({
 				const read = () => {
 					readLanBindStatus().then((value) => {
 						if (alive) setFrame(value);
-					}).catch(() => {});
+					}).catch((error) => {
+						if (error instanceof LanBindStatusError && shouldStopLanBindPoll(error.status)) window.clearInterval(timer);
+					});
 				};
-				read();
 				const timer = window.setInterval(read, 1e4);
+				read();
 				return () => {
 					alive = false;
 					window.clearInterval(timer);
@@ -3684,9 +3738,9 @@ window.__ModuleLoader__.load({
 			"pair.linkLabel": "配对链接",
 			"pair.tokenLabel": "配对令牌",
 			"pair.dockerHint": "Docker 或反向代理环境下，可直接复制此令牌并在目标设备配对页面输入。",
-			"pair.oneTimeHint": "链接含一次性令牌；任一设备配对成功后立即失效，配对下一台设备请刷新二维码。",
+			"pair.oneTimeHint": "链接含限时令牌；在令牌过期或刷新二维码之前，同一链接可为多台设备完成配对（每次配对各自生成独立设备会话）。",
 			"pair.failed.title": "配对失败",
-			"pair.failed.detail": "链接无效或已使用，请回到电脑端刷新二维码后重新扫码。",
+			"pair.failed.detail": "链接无效或已过期，请回到电脑端刷新二维码后重新扫码。",
 			"fence.unpaired.title": "此设备未配对，无法访问工作区数据",
 			"fence.unpaired.eyebrow": "需要设备配对",
 			"fence.unpaired.hint": "为保护工作区、会话与插件数据，远程电脑必须先通过主电脑授权。",
@@ -3698,7 +3752,6 @@ window.__ModuleLoader__.load({
 			"fence.unpaired.pairAction": "立即配对",
 			"fence.unpaired.pairing": "配对中…",
 			"fence.unpaired.tokenInvalid": "配对链接或 Token 无效已过期",
-			"fence.unpaired.tokenUsed": "该配对链接已被使用",
 			"fence.unpaired.tokenFailed": "配对失败，请检查网络或重新获取链接",
 			"fence.unpaired.footnote": "请勿使用他人提供的配对链接；管理员可随时取消此设备的授权。",
 			"posture.exposed": "/api 通道对未配对设备敞开",
@@ -3849,9 +3902,9 @@ window.__ModuleLoader__.load({
 			"pair.linkLabel": "Pairing link",
 			"pair.tokenLabel": "Pairing token",
 			"pair.dockerHint": "In Docker or reverse proxy environments, copy this token to pair directly on the target device.",
-			"pair.oneTimeHint": "The link carries one single-use token; it dies as soon as any device pairs. Refresh the QR to pair the next device.",
+			"pair.oneTimeHint": "The link carries a time-limited token: until it expires or the QR is refreshed, the same link can pair several devices, each with its own device session.",
 			"pair.failed.title": "Pairing failed",
-			"pair.failed.detail": "The link is invalid or was already used. Refresh the QR code on your computer and scan again.",
+			"pair.failed.detail": "The link is invalid or has expired. Refresh the QR code on your computer and scan again.",
 			"fence.unpaired.title": "This device is not paired and cannot reach workspace data",
 			"fence.unpaired.eyebrow": "Device pairing required",
 			"fence.unpaired.hint": "To protect workspace, session, and plugin data, a remote computer must first be authorized by the primary computer.",
@@ -3863,7 +3916,6 @@ window.__ModuleLoader__.load({
 			"fence.unpaired.pairAction": "Pair Now",
 			"fence.unpaired.pairing": "Pairing…",
 			"fence.unpaired.tokenInvalid": "Pairing link or token is invalid or expired",
-			"fence.unpaired.tokenUsed": "This pairing link has already been used",
 			"fence.unpaired.tokenFailed": "Pairing failed, please check network or issue a new link",
 			"fence.unpaired.footnote": "Do not use pairing links from people you do not trust. An administrator can revoke this device at any time.",
 			"posture.exposed": "The /api channel is open to unpaired devices",
@@ -4066,13 +4118,15 @@ window.__ModuleLoader__.load({
 				"/api/remote.mux",
 				"/sidebar/ws/terminal",
 				"/sidebar/ws/agent-terminals",
+				"/sidebar/ws/agent-opens",
 				"/api/dsh-ssh/terminal"
 			],
 			deviceHeader: REMOTE_DEVICE_HEADER,
 			deviceKey: "dsh-remote-device",
 			deviceQuery: REMOTE_DEVICE_QUERY,
 			uploadPath: "/api/session/uploadFileBinary",
-			uploadHookGlobal: "__DSH_FILE_UPLOAD__"
+			uploadHookGlobal: "__DSH_FILE_UPLOAD__",
+			hostGrantGlobal: "__DSH_REMOTE_HOST_GRANT__"
 		};
 		/** The window global the boot patch publishes its seat under. */
 		const REMOTE_CHANNEL_BOOT_GLOBAL = "__DSH_REMOTE_CHANNEL_BOOT__";
@@ -4115,7 +4169,7 @@ window.__ModuleLoader__.load({
 		* @returns true for localhost, IPv6 loopback, or any 127/8 literal.
 		*/
 		function isLoopbackHostname(hostname) {
-			if (hostname === "localhost" || hostname === "::1") return true;
+			if (hostname === "localhost" || hostname === "::1" || hostname === "[::1]") return true;
 			const parts = hostname.split(".");
 			return parts.length === 4 && parts[0] === "127" && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
 		}
@@ -4233,10 +4287,14 @@ window.__ModuleLoader__.load({
 			const attach = (init) => {
 				if (device === null) return init;
 				const headers = init?.headers;
-				if (typeof Headers !== "undefined" && headers instanceof Headers) {
-					try {
-						headers.set(RULES.deviceHeader, device);
-					} catch {}
+				if (typeof Headers !== "undefined" && headers instanceof Headers) try {
+					const copy = new Headers(headers);
+					copy.set(RULES.deviceHeader, device);
+					return {
+						...init,
+						headers: copy
+					};
+				} catch {
 					return init;
 				}
 				if (typeof headers === "object" && headers !== null) return {
@@ -4259,7 +4317,7 @@ window.__ModuleLoader__.load({
 					rewritten.pathname = rewritePath(url.pathname);
 					const next = typeof input === "string" || input instanceof URL ? rewritten.toString() : new Request(rewritten, input);
 					return Promise.resolve(originalFetch.call(window, next, attach(init))).then(async (response) => {
-						if (await isUnpairedDenied(response.clone())) options.onUnpaired?.();
+						if (response.status === 403 && await isUnpairedDenied(response.clone())) options.onUnpaired?.();
 						else options.onPaired?.();
 						return response;
 					});
@@ -4403,7 +4461,6 @@ window.__ModuleLoader__.load({
 						return;
 					}
 					if (result.code === "invalid") setErrorMsg(t("fence.unpaired.tokenInvalid"));
-					else if (result.code === "used") setErrorMsg(t("fence.unpaired.tokenUsed"));
 					else setErrorMsg(t("fence.unpaired.tokenFailed"));
 				} catch {
 					setErrorMsg(t("fence.unpaired.tokenFailed"));
@@ -4496,7 +4553,7 @@ window.__ModuleLoader__.load({
 		/** The building package's version, when the bundle carries it. */
 		function bakedVersion() {
 			try {
-				return "0.3.23";
+				return "0.4.0";
 			} catch {
 				return;
 			}
@@ -4580,6 +4637,12 @@ window.__ModuleLoader__.load({
 		const COMPACT_CLASS = "dsh-remote-compact-picker";
 		/** Body class while the header actions are seated in the tabs row. */
 		const HEADER_SEATED_CLASS = "dsh-remote-header-seated";
+		/**
+		* Width the seated header actions paint over the tabs row, as a CSS variable
+		* on <html>. The row caps its own width with it (see the v80 rules) instead of
+		* reserving the space with padding.
+		*/
+		const HEADER_RESERVE_VAR = "--dsh-remote-header-actions-reserve";
 		/** Locale-dependent fast path for the official picker cells (zh/en). */
 		const PICKER_CELL_PATTERN = {
 			model: /模型|Model/,
@@ -4678,6 +4741,9 @@ window.__ModuleLoader__.load({
 			"[class$=\"_composerSeat\"] [class$=\"_frame\"] [class$=\"_card\"]{max-width:none;width:100%}",
 			`body.${HEADER_SEATED_CLASS} [class$="_header"] [class$="_titleCluster"] [class$="_headerActions"]{position:absolute;left:0;top:0;margin:0;display:flex;align-items:center;gap:6px;flex:none;z-index:2}`,
 			"[class$=\"_header\"] [class$=\"_tabs\"] [class*=\"_tab\"]{font-size:12px;white-space:nowrap}",
+			`body.${HEADER_SEATED_CLASS} [class$="_header"] [class$="_tabs"]{max-width:max(0px,calc(100% - var(${HEADER_RESERVE_VAR},0px)));overflow-x:auto;overflow-y:hidden;scrollbar-width:none;-webkit-overflow-scrolling:touch;padding-bottom:2px;margin-bottom:-2px}`,
+			`body.${HEADER_SEATED_CLASS} [class$="_header"] [class$="_tabs"]::-webkit-scrollbar{display:none}`,
+			`body.${HEADER_SEATED_CLASS} [class$="_header"] [class$="_tabs"] > [class*="_tab"]{flex:0 0 auto}`,
 			`body.${ACTIVE_CLASS} [class$=\"_detailsCol\"]{display:none !important}`,
 			`body.${ACTIVE_CLASS} [data-dsh-plugin=\"ssh\"],`,
 			`body.${ACTIVE_CLASS} [data-dsh-plugin=\"skill-explorer\"],`,
@@ -4746,7 +4812,7 @@ window.__ModuleLoader__.load({
 			* rail compaction) while the body class stays.
 			*/
 			function ensureAdaptStyle() {
-				if (document.querySelector(`style[data-plugin-css="${ADAPT_CSS_ID}"]`) !== null) return;
+				if (nodeOf(`style[data-plugin-css="${ADAPT_CSS_ID}"]`) !== null) return;
 				const tag = document.createElement("style");
 				tag.dataset.plugin = "remote-web-ui";
 				tag.dataset.pluginCss = ADAPT_CSS_ID;
@@ -4786,6 +4852,7 @@ window.__ModuleLoader__.load({
 					savedViewportContent = null;
 				}
 				if (whaleEl !== null) whaleEl.style.display = "none";
+				whaleShown = false;
 				setWhaleTimer(false);
 				if (whaleObserver !== null) {
 					whaleObserver.disconnect();
@@ -4848,7 +4915,7 @@ window.__ModuleLoader__.load({
 			}
 			function syncCompactPicker() {
 				if (!active) return;
-				const tools = document.querySelector("[class$=\"_composerSeat\"] [class$=\"_tools\"]");
+				const tools = nodeOf("[class$=\"_composerSeat\"] [class$=\"_tools\"]");
 				const trigger = tools?.parentElement?.querySelector("[class$=\"_triggerEffort\"]")?.parentElement;
 				if (tools === null || trigger === null) {
 					removeCompactPicker();
@@ -5002,17 +5069,23 @@ window.__ModuleLoader__.load({
 				document.body.appendChild(whale);
 			}
 			/**
+			* Write one row's recorded official draggable state back onto it.
+			* @param row - the tracked row element.
+			* @param original - the recorded attribute value, or null when it was absent.
+			*/
+			function restoreRowDragState(row, original) {
+				if (original === null) row.removeAttribute("draggable");
+				else row.setAttribute("draggable", original);
+			}
+			/**
 			* Restore the official draggable state this layer overrode while active.
 			* Rows are React-owned and may have been re-created meanwhile, so only the
-			* tracked elements are touched; a detached element is skipped.
+			* tracked elements are touched; a detached element is written back too
+			* (harmless, and it keeps the entry prunable at every tick).
 			*/
 			function restoreRowDrag() {
 				if (dragOverridden.size === 0) return;
-				for (const [row, original] of dragOverridden) {
-					if (!row.isConnected) continue;
-					if (original === null) row.removeAttribute("draggable");
-					else row.setAttribute("draggable", original);
-				}
+				for (const [row, original] of dragOverridden) restoreRowDragState(row, original);
 				dragOverridden.clear();
 			}
 			/** Restore a dragged position when the whale becomes visible again. */
@@ -5038,6 +5111,34 @@ window.__ModuleLoader__.load({
 					if (!dragOverridden.has(row)) dragOverridden.set(row, row.getAttribute("draggable"));
 					row.setAttribute("draggable", "false");
 				}
+				if (dragOverridden.size === 0) return;
+				for (const [row, original] of dragOverridden) {
+					if (row.isConnected) continue;
+					restoreRowDragState(row, original);
+					dragOverridden.delete(row);
+				}
+			}
+			/**
+			* Official nodes resolved through the document and cached while they stay
+			* connected. The sync tick runs every 600ms for the page lifetime, and these
+			* selectors (suffix class matches, :has()) cannot use Blink's fast paths, so
+			* every miss walks the whole mounted DOM — the official chat keeps the whole
+			* conversation mounted, i.e. tens of thousands of elements. React replaces a
+			* node on a major re-render, which the isConnected guard detects.
+			*/
+			const nodeCache = /* @__PURE__ */ new Map();
+			function nodeOf(selector) {
+				const cached = nodeCache.get(selector);
+				if (cached !== void 0 && cached.isConnected) return cached;
+				const found = document.querySelector(selector);
+				if (found === null) nodeCache.delete(selector);
+				else nodeCache.set(selector, found);
+				return found;
+			}
+			/** The official application frame, through the same cached lookup. */
+			function frameEl() {
+				const frame = nodeOf(APP_FRAME_SELECTOR);
+				return frame instanceof HTMLElement ? frame : null;
 			}
 			function syncWhale() {
 				if (active) ensureAdaptStyle();
@@ -5046,8 +5147,8 @@ window.__ModuleLoader__.load({
 					whaleEl.style.display = "none";
 					return;
 				}
-				const collapsed = appFrame()?.hasAttribute("data-sidebar-collapsed") === true;
-				const overlayUp = document.querySelector("[class$=\"_overlay\"]") !== null;
+				const collapsed = frameEl()?.hasAttribute("data-sidebar-collapsed") === true;
+				const overlayUp = nodeOf("[class$=\"_overlay\"]") !== null;
 				const show = collapsed && !overlayUp;
 				if (show && !whaleShown) applyWhalePos();
 				whaleEl.style.display = show ? "" : "none";
@@ -5063,7 +5164,7 @@ window.__ModuleLoader__.load({
 			}
 			function seatHeaderActions() {
 				if (!active) return;
-				const header = document.querySelector("[class$=\"_header\"]");
+				const header = nodeOf("[class$=\"_header\"]");
 				const tabs = header !== null ? header.querySelector("[class$=\"_tabs\"]") : null;
 				const actions = header !== null ? header.querySelector("[class$=\"_titleCluster\"] [class$=\"_headerActions\"]") : null;
 				const seated = header !== null && tabs !== null && actions !== null;
@@ -5072,7 +5173,7 @@ window.__ModuleLoader__.load({
 			}
 			function alignActionsText() {
 				if (!active) return;
-				const header = document.querySelector("[class$=\"_header\"]");
+				const header = nodeOf("[class$=\"_header\"]");
 				if (header === null) return;
 				const tabs = header.querySelector("[class$=\"_tabs\"]");
 				const actions = header.querySelector("[class$=\"_titleCluster\"] [class$=\"_headerActions\"]");
@@ -5096,7 +5197,9 @@ window.__ModuleLoader__.load({
 				let dx = translate !== null ? parseFloat(translate[1] ?? "0") : 0;
 				let dy = translate !== null ? parseFloat(translate[2] ?? "0") : 0;
 				const actionsRect = actions.getBoundingClientRect();
-				const rightDiff = tabs.getBoundingClientRect().right - actionsRect.right;
+				const headerRect = header.getBoundingClientRect();
+				const headerStyle = getComputedStyle(header);
+				const rightDiff = headerRect.right - (parseFloat(headerStyle.paddingRight) || 0) - (parseFloat(headerStyle.borderRightWidth) || 0) - actionsRect.right;
 				if (Math.abs(rightDiff) >= .5) dx = Math.round((dx + rightDiff) * 10) / 10;
 				const tabBottom = textBottom(tabBtn);
 				if (tabBottom !== null) {
@@ -5113,10 +5216,12 @@ window.__ModuleLoader__.load({
 				const next = `translate(${dx}px, ${dy}px)`;
 				if (actions.style.transform !== next) actions.style.transform = next;
 				const reserve = `${Math.ceil(actionsRect.width) + 8}px`;
-				if (tabs.style.paddingRight !== reserve) tabs.style.paddingRight = reserve;
+				const rootStyle = document.documentElement.style;
+				if (rootStyle.getPropertyValue(HEADER_RESERVE_VAR) !== reserve) rootStyle.setProperty(HEADER_RESERVE_VAR, reserve);
 			}
 			function unseatHeaderActions() {
 				document.body.classList.remove(HEADER_SEATED_CLASS);
+				document.documentElement.style.removeProperty(HEADER_RESERVE_VAR);
 				const header = document.querySelector("[class$=\"_header\"]");
 				const tabs = header !== null ? header.querySelector("[class$=\"_tabs\"]") : null;
 				const actions = header !== null ? header.querySelector("[class$=\"_titleCluster\"] [class$=\"_headerActions\"]") : null;
@@ -5175,6 +5280,7 @@ window.__ModuleLoader__.load({
 				if (isMobilePortrait()) {
 					apply();
 					ensureWhaleObserver();
+					if (active && drag === null) applyWhalePos();
 				} else revert();
 			}
 			evaluate();
@@ -5242,7 +5348,7 @@ window.__ModuleLoader__.load({
 				}
 				const t = e.target;
 				const editable = t instanceof HTMLElement && t.isContentEditable;
-				if (t instanceof Element && (t.tagName === "TEXTAREA" || t.tagName === "INPUT" || editable || t.closest(`#${WHALE_ID}`) !== null || insideHScrollable(t) || t.closest("table, [class$=\"_table\"], [class$=\"_tablePane\"]") !== null)) {
+				if (t instanceof Element && (t.tagName === "TEXTAREA" || t.tagName === "INPUT" || editable || t.closest(`#${WHALE_ID}`) !== null || t.closest("table, [class$=\"_table\"], [class$=\"_tablePane\"]") !== null)) {
 					swipeTouch = null;
 					return;
 				}
@@ -5251,7 +5357,8 @@ window.__ModuleLoader__.load({
 				swipeTouch = {
 					x: ct.clientX,
 					y: ct.clientY,
-					id: ct.identifier
+					id: ct.identifier,
+					el: t instanceof Element ? t : null
 				};
 			}, {
 				capture: true,
@@ -5264,12 +5371,14 @@ window.__ModuleLoader__.load({
 				if (ct === void 0 || ct.identifier !== swipeTouch.id) return;
 				const dx = ct.clientX - swipeTouch.x;
 				const dy = ct.clientY - swipeTouch.y;
+				const start = swipeTouch;
 				swipeTouch = null;
 				if (!active) return;
 				if (Math.abs(dx) < 60 || Math.abs(dx) < Math.abs(dy) * 1.5) return;
-				const frame = appFrame();
+				if (start.el !== null && insideHScrollable(start.el)) return;
+				const frame = frameEl();
 				if (frame === null) return;
-				if (document.querySelector("[class$=\"_overlay\"], [class$=\"_dialog\"], [class$=\"_menu\"], [class*=\"_portal\"]") !== null) return;
+				if (nodeOf("[class$=\"_overlay\"], [class$=\"_dialog\"], [class$=\"_menu\"], [class*=\"_portal\"]") !== null) return;
 				const collapsed = frame.hasAttribute("data-sidebar-collapsed");
 				if (dx < 0 && !collapsed) collapseSidebar();
 				else if (dx > 0 && collapsed) toggleSidebarVerified();
@@ -5401,10 +5510,23 @@ window.__ModuleLoader__.load({
 				return isComposerField(el) ? el : null;
 			};
 			const lanOrigFocus = HTMLElement.prototype.focus;
-			HTMLElement.prototype.focus = function(options) {
+			const patchedFocus = function(options) {
 				if (active && isComposerField(this) && Date.now() - lastComposerTap >= 800) return;
 				lanOrigFocus.call(this, options);
 			};
+			/** (Re-)install the composer-focus guard (see setEnabled). */
+			const installFocusPatch = () => {
+				HTMLElement.prototype.focus = patchedFocus;
+			};
+			/**
+			* Remove the guard when the layer is disabled. A patch another plugin
+			* installed after ours is left alone (identity check), so disabling this
+			* layer never removes someone else's behavior.
+			*/
+			const restoreFocusPatch = () => {
+				if (HTMLElement.prototype.focus === patchedFocus) HTMLElement.prototype.focus = lanOrigFocus;
+			};
+			installFocusPatch();
 			document.addEventListener("pointerdown", (e) => {
 				if (!active) return;
 				if (composerFieldOf(e.target) !== null) lastComposerTap = Date.now();
@@ -5416,8 +5538,13 @@ window.__ModuleLoader__.load({
 				translate: null,
 				setEnabled(on) {
 					adaptEnabled = on;
-					if (on) evaluate();
-					else revert();
+					if (on) {
+						installFocusPatch();
+						evaluate();
+					} else {
+						revert();
+						restoreFocusPatch();
+					}
 				},
 				flushCloseDetails() {
 					if (active) w.__dshRemoteAdapt?.closeDetails?.();
@@ -5425,6 +5552,131 @@ window.__ModuleLoader__.load({
 			};
 		}
 		//#endregion
+		//#region src/client/plugin-card-seat.ts
+		/**
+		* Family plugin-card seat.
+		*
+		* A family plugin contributes its settings card to whichever plugin-card seat
+		* the running host actually renders:
+		*
+		* - `web-ui.plugin.item` — the list seat declared by the dsh-web-settings
+		*   group section (this family's own first-level "Web UI plugins" section);
+		* - `plugins.bundle.config` — the official keyed seat of the harness's plugin
+		*   manager page, keyed by the bundle's package name and rendered on that
+		*   bundle's page. alpha.2 removed the `settings.plugin.item` keyed seat of the
+		*   `ui-settings-plugins` tab that this helper used before, so a card keyed by
+		*   its settings namespace has no seat to land in any more.
+		*
+		* SEAT SELECTION IS NOT A DECLARATION PROBE. The official plugin surface
+		* belongs to the harness bundle and declares its seats before any external
+		* plugin's `apply()` runs, so "is the official seat declared?" answers yes even
+		* in the deployment whose whole point is the family group. Choosing on that
+		* probe sends every family card to the official page and leaves the group's own
+		* section permanently empty — the family of reports where the section renders
+		* its heading and zero cards.
+		*
+		* The signal that actually distinguishes the two deployments is whether
+		* dsh-web-settings is loaded: it is the package that owns the group section and
+		* it publishes the `webUiSettings` service during `apply()`, which every
+		* family plugin already reads for its settings form. Group loaded -> the family
+		* seat; group absent -> the official seat.
+		*
+		* The decision is re-evaluated on every `slots/changed` because the group may
+		* apply after this plugin (the family aggregate orders it first, a profile that
+		* installs the group separately need not): the initial contribution goes to the
+		* official seat, then moves to the family seat the moment the group's section
+		* registers. The entry is disposed before the replacement is registered, so a
+		* card is never in two seats at once.
+		*
+		* The shared tree has no client-SDK dependency, so this module reads its
+		* context through the structural shape below; callers pass the plugin's own
+		* `ctx`.
+		*/
+		/** The family list seat key. */
+		const FAMILY_PLUGIN_CARD_SEAT = "web-ui.plugin.item";
+		/** The official keyed plugin-card seat key (the alpha.2 bundle-configuration seat). */
+		const OFFICIAL_PLUGIN_CARD_SEAT = "plugins.bundle.config";
+		/** The service dsh-web-settings publishes while it is loaded. */
+		const FAMILY_GROUP_SERVICE = "webUiSettings";
+		/**
+		* Whether the family group (dsh-web-settings) is loaded in this page. The
+		* service is the group package's own contract, so the probe cannot be fooled
+		* by a harness release that starts declaring the official seat differently.
+		*/
+		function familyGroupLoaded(ctx) {
+			const get = ctx.get;
+			if (typeof get !== "function") return false;
+			try {
+				return get.call(ctx, FAMILY_GROUP_SERVICE) !== void 0;
+			} catch {
+				return false;
+			}
+		}
+		/** Report a refused registration instead of leaving the user with no card. */
+		function warnRefusedSeat(seat, error) {
+			try {
+				console.warn(`[dsh-web] plugin card registration into "${seat}" was refused; the card will not render`, error);
+			} catch {}
+		}
+		/**
+		* Contribute one family plugin card to the seat this host renders, following
+		* the group if it loads later. The entry is disposed and re-registered on a
+		* seat change, never duplicated.
+		* @param ctx - client context (its slot registry decides the seat).
+		* @param seat - the card contribution.
+		*/
+		function installPluginCard(ctx, seat) {
+			const slots = ctx.slots;
+			const component = seat.component;
+			const inject = seat.inject;
+			let dispose;
+			let current;
+			/**
+			* Re-entrancy latch. The registry emits a change event synchronously from
+			* inside both `register` and the previous entry's disposer, so an unguarded
+			* reconcile would re-enter itself mid-move and register the card twice into
+			* the seat it is leaving ("already has an entry for key ...").
+			*/
+			let reconciling = false;
+			/** Reconcile the contribution with the currently live seat (no-op when unchanged). */
+			const reconcile = () => {
+				if (reconciling) return;
+				const target = familyGroupLoaded(ctx) ? FAMILY_PLUGIN_CARD_SEAT : OFFICIAL_PLUGIN_CARD_SEAT;
+				if (current === target) return;
+				reconciling = true;
+				const previous = dispose;
+				dispose = void 0;
+				current = void 0;
+				previous?.();
+				try {
+					dispose = slots.register(target === "web-ui.plugin.item" ? {
+						name: FAMILY_PLUGIN_CARD_SEAT,
+						id: seat.id,
+						...seat.order === void 0 ? {} : { order: seat.order },
+						...seat.label === void 0 ? {} : { label: seat.label },
+						locale: seat.locale,
+						...seat.inject === void 0 ? {} : { inject }
+					} : {
+						name: OFFICIAL_PLUGIN_CARD_SEAT,
+						key: seat.bundle,
+						locale: seat.locale,
+						...seat.inject === void 0 ? {} : { inject }
+					}, component);
+					current = target;
+				} catch (error) {
+					warnRefusedSeat(target, error);
+				} finally {
+					reconciling = false;
+				}
+			};
+			if (typeof ctx.on === "function") try {
+				ctx.on("slots/changed", () => {
+					reconcile();
+				});
+			} catch {}
+			reconcile();
+		}
+		//#endregion
 		//#region src/client/index.ts
 		/**
 		* Remote control — browser half. Registers the `remote` dictionaries, the
@@ -5439,6 +5691,21 @@ window.__ModuleLoader__.load({
 		const NS = "remote";
 		/** Settings namespace the remote-control card edits (the Host plugin registers it). */
 		const REMOTE_WEB_UI_NS = "remote-web-ui";
+		const REMOTE_WEB_UI_ENTRY_IDS = [
+			"web-ui-remote-web-ui",
+			"ui-remote-web-ui",
+			REMOTE_WEB_UI_NS
+		];
+		function servedEntryId(forms) {
+			let served;
+			try {
+				served = forms.describe().getSnapshot().view?.namespaces.map((view) => view.ns);
+			} catch {
+				served = void 0;
+			}
+			if (!served || served.length === 0) return REMOTE_WEB_UI_NS;
+			return REMOTE_WEB_UI_ENTRY_IDS.find((id) => served.includes(id)) ?? REMOTE_WEB_UI_NS;
+		}
 		/** Heartbeat cadence from a paired phone (presence + revocation liveness). */
 		const HEARTBEAT_INTERVAL_MS = 1e4;
 		/** Services required by this plugin. */
@@ -5446,7 +5713,7 @@ window.__ModuleLoader__.load({
 			"slots",
 			"locale",
 			"connection",
-			"settingsScope",
+			"configForms",
 			"remote"
 		];
 		/**
@@ -5489,15 +5756,16 @@ window.__ModuleLoader__.load({
 			};
 			const t = ctx.locale.bind(NS);
 			if (adapt !== void 0) adapt.translate = t;
-			const settingsScope = (ctx.get("webUiSettings") ?? ctx.settingsScope).bind({ namespace: REMOTE_WEB_UI_NS });
+			const family = ctx.get("webUiSettings");
+			const settingsForm = family !== void 0 && typeof family.bind === "function" ? family.bind({ namespace: REMOTE_WEB_UI_NS }) : ctx.configForms.get(servedEntryId(ctx.configForms));
 			const enabled = () => {
-				const snapshot = settingsScope.getSnapshot();
+				const snapshot = settingsForm.getSnapshot();
 				return snapshot.status === "ready" ? snapshot.value?.enabled ?? true : snapshot.status === "unavailable";
 			};
 			const syncAdaptEnabled = () => {
 				window.__dshRemoteAdapt?.setEnabled?.(enabled());
 			};
-			settingsScope.subscribe(syncAdaptEnabled);
+			settingsForm.subscribe(syncAdaptEnabled);
 			syncAdaptEnabled();
 			try {
 				adapt?.flushCloseDetails?.();
@@ -5517,31 +5785,25 @@ window.__ModuleLoader__.load({
 						disposeEntry = void 0;
 					}
 				};
-				const unsubscribe = settingsScope.subscribe(syncEntry);
+				const unsubscribe = settingsForm.subscribe(syncEntry);
 				syncEntry();
 				return () => {
 					unsubscribe();
 					disposeEntry?.();
 				};
 			});
-			const remoteSettings = new RemoteSettingsCardController(settingsScope);
-			ctx.slots.inject("web-ui.plugin.item", () => {
-				try {
-					const unregister = ctx.slots.register({
-						name: "web-ui.plugin.item",
-						id: "remote-web-ui",
-						order: 90,
-						locale: NS,
-						inject: () => remoteSettings.inject()
-					}, RemoteSettingsCard);
-					return () => {
-						remoteSettings.dispose();
-						unregister();
-					};
-				} catch {
-					return () => {};
-				}
+			const remoteSettings = new RemoteSettingsCardController(settingsForm);
+			installPluginCard(ctx, {
+				bundle: "@linxin666/dsh-remote-web-ui",
+				id: "remote-web-ui",
+				order: 90,
+				locale: NS,
+				inject: () => remoteSettings.inject(),
+				component: RemoteSettingsCard
 			});
+			ctx.effect(() => () => {
+				remoteSettings.dispose();
+			}, "remote-web-ui: settings card");
 			let disposeRuntime;
 			const syncRuntime = () => {
 				if (enabled() && disposeRuntime === void 0) disposeRuntime = ctx.effect(() => {
@@ -5549,7 +5811,9 @@ window.__ModuleLoader__.load({
 					runPairBootFlow(ctx, window.location.search);
 					if (loopback) return () => {};
 					const timer = window.setInterval(() => {
-						sendHeartbeat().catch(() => {});
+						sendHeartbeat().then((status) => {
+							if (shouldStopHeartbeat(status)) window.clearInterval(timer);
+						}).catch(() => {});
 					}, HEARTBEAT_INTERVAL_MS);
 					return () => {
 						window.clearInterval(timer);
@@ -5560,7 +5824,7 @@ window.__ModuleLoader__.load({
 					disposeRuntime = void 0;
 				}
 			};
-			settingsScope.subscribe(syncRuntime);
+			settingsForm.subscribe(syncRuntime);
 			syncRuntime();
 			let disposeChannel;
 			let hostPairingPolicy;
@@ -5590,13 +5854,13 @@ window.__ModuleLoader__.load({
 				fenceNotice = void 0;
 			};
 			const handleUnpaired = () => {
-				if (settingsScope.getSnapshot().status !== "ready" && hostPairingPolicy === void 0) {
+				if (settingsForm.getSnapshot().status !== "ready" && hostPairingPolicy === void 0) {
 					unpairedWhilePolicyPending = true;
 					return;
 				}
 				showFenceNotice();
 			};
-			const channelActive = () => remoteChannelRequired(window.location.hostname, settingsScope.getSnapshot(), hostPairingPolicy);
+			const channelActive = () => remoteChannelRequired(window.location.hostname, settingsForm.getSnapshot(), hostPairingPolicy);
 			const bootSeat = () => window[REMOTE_CHANNEL_BOOT_GLOBAL];
 			const syncChannel = () => {
 				const transition = channelTransition(channelActive(), disposeChannel !== void 0);
@@ -5626,9 +5890,9 @@ window.__ModuleLoader__.load({
 					hideFenceNotice();
 				} else if (transition === "none" && !channelActive()) bootSeat()?.restore();
 			};
-			settingsScope.subscribe(syncChannel);
+			settingsForm.subscribe(syncChannel);
 			syncChannel();
-			if (!isLoopbackHostname(window.location.hostname) && settingsScope.getSnapshot().status !== "ready") readPairGatePolicy().then((policy) => {
+			if (!isLoopbackHostname(window.location.hostname) && settingsForm.getSnapshot().status !== "ready") readPairGatePolicy().then((policy) => {
 				hostPairingPolicy = policy.requirePairingForLan;
 				syncChannel();
 				if (hostPairingPolicy && unpairedWhilePolicyPending) showFenceNotice();