@linxin666/dsh-remote-web-ui 0.4.1 → 0.4.3

package/lib/client.js

@@ -1231,7 +1231,7 @@ window.__ModuleLoader__.load({
 		//#region src/client/pair-api.ts
 		/** Read the host-authoritative desktop pairing policy. */
 		async function readPairGatePolicy() {
-			const response = await fetch("/api/pair/status");
+			const response = await fetch("api/pair/status");
 			if (!response.ok) throw new Error(`remote-web-ui: status failed with ${String(response.status)}`);
 			const value = await response.json();
 			if (typeof value.requirePairingForLan !== "boolean") throw new Error("remote-web-ui: status omitted requirePairingForLan");
@@ -1248,7 +1248,7 @@ window.__ModuleLoader__.load({
 		* origin — the panel is a desktop control endpoint).
 		*/
 		async function issuePair(address) {
-			const response = await fetch("/api/pair/issue", {
+			const response = await fetch("api/pair/issue", {
 				method: "POST",
 				headers: { "content-type": "application/json" },
 				body: JSON.stringify({ ...address !== void 0 ? { address } : {} })
@@ -1277,7 +1277,7 @@ window.__ModuleLoader__.load({
 		* @returns the wire result.
 		*/
 		async function acceptPair(token) {
-			const response = await fetch("/api/pair/accept", {
+			const response = await fetch("api/pair/accept", {
 				method: "POST",
 				headers: { "content-type": "application/json" },
 				body: JSON.stringify({ token })
@@ -1294,7 +1294,7 @@ window.__ModuleLoader__.load({
 		}
 		/** Revoke mobile access (paired devices + the current token). */
 		async function stopPair() {
-			const response = await fetch("/api/pair/stop", { method: "POST" });
+			const response = await fetch("api/pair/stop", { method: "POST" });
 			if (!response.ok) throw new Error(`remote-web-ui: stop failed with ${String(response.status)}`);
 		}
 		/**
@@ -1302,7 +1302,7 @@ window.__ModuleLoader__.load({
 		* @param deviceId - the session id of the row to drop.
 		*/
 		async function revokePair(deviceId) {
-			const response = await fetch("/api/pair/revoke", {
+			const response = await fetch("api/pair/revoke", {
 				method: "POST",
 				headers: { "content-type": "application/json" },
 				body: JSON.stringify({ deviceId })
@@ -1316,7 +1316,7 @@ window.__ModuleLoader__.load({
 		*   proves this page is not paired (see {@link shouldStopHeartbeat}).
 		*/
 		async function sendHeartbeat() {
-			return (await fetch("/api/pair/heartbeat", { method: "POST" })).status;
+			return (await fetch("api/pair/heartbeat", { method: "POST" })).status;
 		}
 		/**
 		* Whether a heartbeat answer means "this page can never be accepted again" and
@@ -1349,7 +1349,7 @@ window.__ModuleLoader__.load({
 		};
 		/** Read the LAN-bind facts (loopback-only endpoint). */
 		async function readLanBindStatus() {
-			const response = await fetch("/api/pair/lan-bind");
+			const response = await fetch("api/pair/lan-bind");
 			if (!response.ok) throw new LanBindStatusError(response.status, `remote-web-ui: lan-bind status failed with ${String(response.status)}`);
 			return await response.json();
 		}
@@ -1409,7 +1409,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region \0dsh-css:packages/dsh-remote-web-ui/src/client/remote.module.css.mjs
-		const css$1 = ".fThDlq_overlay{z-index:1000;justify-content:center;align-items:center;display:flex;position:fixed;inset:0}.fThDlq_mask{background:var(--dsw-alias-bg-mask-1);backdrop-filter:var(--dsw-mask-blur);position:absolute;inset:0}.fThDlq_trigger{width:36px;height:36px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:50%;flex:none;justify-content:center;align-items:center;padding:0;transition:background-color .12s,color .12s,box-shadow .12s;display:inline-flex;position:relative}.fThDlq_trigger[data-update-available]{color:var(--dsw-alias-brand-primary)}.fThDlq_trigger[data-update-available]:after{box-sizing:border-box;border:2px solid var(--dsw-alias-bg-layer-1);background:var(--dsw-alias-brand-primary);content:\"\";pointer-events:none;border-radius:50%;width:8px;height:8px;position:absolute;top:4px;right:4px}.fThDlq_trigger[data-wide=wide]{border-radius:999px;flex:auto;justify-content:flex-start;gap:8px;width:auto;min-width:0;padding:0 10px}.fThDlq_trigger[data-update-available][data-wide=wide]{flex:none;gap:6px}.fThDlq_trigger[data-update-available][data-wide=wide]:after{display:none}.fThDlq_updateBadgeText{white-space:nowrap;font-size:13px;font-weight:500;line-height:1}.fThDlq_trigger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_trigger:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_trigger:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_trigger:disabled{opacity:.5;cursor:default}.fThDlq_panel{z-index:1;box-sizing:border-box;background:var(--dsw-alias-bg-layer-2);width:560px;max-width:calc(100vw - 48px);max-height:calc(100vh - 48px);box-shadow:var(--dsw-shadow-lv3);color:var(--dsw-alias-label-primary);border-radius:24px;flex-direction:column;gap:14px;padding:24px;font-size:14px;line-height:22px;display:flex;position:relative;overflow:auto}.fThDlq_header{align-items:flex-start;gap:12px;display:flex}.fThDlq_heading{flex:1;min-width:0}.fThDlq_title{margin:0;font-size:18px;font-weight:600;line-height:26px}.fThDlq_subtitle{color:var(--dsw-alias-label-secondary);margin:4px 0 0;font-size:13px}.fThDlq_close{width:28px;height:28px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:50%;flex:none;justify-content:center;align-items:center;padding:0;transition:background-color .12s,color .12s,box-shadow .12s;display:inline-flex}.fThDlq_close:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_close:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_close:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_close:disabled{opacity:.5;cursor:default}.fThDlq_card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;flex-direction:column;align-items:center;gap:12px;padding:16px;display:flex}.fThDlq_cardHeader{justify-content:space-between;align-items:center;gap:12px;width:100%;display:flex}.fThDlq_cardTitle{font-weight:500}.fThDlq_badge{white-space:nowrap;border-radius:999px;flex:none;align-items:center;gap:6px;min-width:0;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex}.fThDlq_badge:before{content:\"\";background:currentColor;border-radius:50%;width:8px;height:8px}.fThDlq_badge-waiting{color:var(--dsw-alias-label-secondary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-connected{color:var(--dsw-alias-state-success-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-disconnected{color:var(--dsw-alias-state-warn-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-stopped{color:var(--dsw-alias-state-error-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badgePublic{color:var(--dsw-alias-brand-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badges{flex:none;align-items:center;gap:6px;display:inline-flex}.fThDlq_qrWrap{background:var(--dsw-alias-bg-base);border-radius:12px;justify-content:center;align-items:center;padding:12px;display:flex}.fThDlq_qr{display:block}.fThDlq_expired{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_expiry{color:var(--dsw-alias-label-secondary);margin:0;font-size:12px}.fThDlq_hint{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_link{text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-caption);font-family:var(--dsw-font-mono,ui-monospace, monospace);margin:0;font-size:12px;display:block;overflow:hidden}.fThDlq_pairLinks{flex-direction:column;gap:8px;display:flex}.fThDlq_pairLinkRow{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:10px;align-items:center;gap:10px;min-width:0;padding:10px 12px;display:flex}.fThDlq_pairLinkText{flex:1;min-width:0}.fThDlq_pairLinkLabel{color:var(--dsw-alias-label-secondary);margin-bottom:3px;font-size:12px;display:block}.fThDlq_copyLink{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-button-elevated-fill);min-height:30px;color:var(--dsw-alias-label-primary);cursor:pointer;border-radius:8px;flex:none;align-items:center;gap:5px;padding:0 10px;display:inline-flex}.fThDlq_oneTimeHint{color:var(--dsw-alias-label-caption);margin:0;font-size:12px}.fThDlq_stoppedHint{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_tunnelNote{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_tunnelFailed{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_actions{gap:8px;display:flex}.fThDlq_action{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-button-elevated-fill);height:34px;color:var(--dsw-alias-label-primary);cursor:pointer;white-space:nowrap;border-radius:10px;justify-content:center;align-items:center;gap:6px;padding:0 14px;font-size:13px;transition:background-color .12s,border-color .12s,box-shadow .12s;display:inline-flex}.fThDlq_action:hover:not(:disabled){background:var(--dsw-alias-button-floating-hover)}.fThDlq_action:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_action:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_action:disabled{opacity:.5;cursor:default}.fThDlq_banner{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;padding:16px}.fThDlq_bannerTitle{color:var(--dsw-alias-state-warn-primary);margin:0;font-weight:500}.fThDlq_bannerHint{color:var(--dsw-alias-label-secondary);margin:6px 0 0;font-size:13px}.fThDlq_fencePage{z-index:2000;box-sizing:border-box;background:var(--dsw-alias-bg-base);text-align:center;flex-direction:column;justify-content:center;align-items:center;padding:40px 24px;display:flex;position:fixed;inset:0;overflow:auto}.fThDlq_fenceCard{box-sizing:border-box;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);width:min(520px,100%);box-shadow:var(--dsw-shadow-lv3);text-align:center;border-radius:20px;margin-inline:auto;padding:36px 40px}.fThDlq_fenceMark{background:var(--dsw-alias-state-error-secondary);width:44px;height:44px;color:var(--dsw-alias-state-error-primary);border-radius:50%;place-items:center;margin-inline:auto;font-size:24px;line-height:1;display:grid}.fThDlq_fenceEyebrow{color:var(--dsw-alias-state-error-primary);margin:22px 0 8px;font-size:13px;font-weight:600}.fThDlq_fenceTitle{color:var(--dsw-alias-label-primary);margin:0;font-size:24px;line-height:1.35}.fThDlq_fenceDetail{color:var(--dsw-alias-label-secondary);margin:12px 0 0;font-size:14px;line-height:1.65}.fThDlq_fenceSteps{background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);text-align:left;border-radius:12px;margin:24px auto 0;padding:20px 20px 20px 42px;font-size:14px;line-height:1.65}.fThDlq_fenceSteps li+li{margin-top:8px}.fThDlq_fenceForm{width:100%;margin-top:20px}.fThDlq_fenceInputRow{gap:8px;width:100%;display:flex}.fThDlq_fenceInput{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);min-width:0;color:var(--dsw-alias-label-primary);font:inherit;border-radius:10px;flex:1;padding:10px 14px;font-size:13px;transition:border-color .12s,box-shadow .12s}.fThDlq_fenceInput:focus{border-color:var(--dsw-alias-brand-primary);outline:none;box-shadow:0 0 0 2px #0066ff26}.fThDlq_fencePairButton{border:1px solid var(--dsw-alias-button-primary-fill);background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground);font:inherit;cursor:pointer;border-radius:10px;flex-shrink:0;padding:10px 18px;font-size:13px;font-weight:500;transition:filter .12s,opacity .12s}.fThDlq_fencePairButton:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover,var(--dsw-alias-button-primary-fill));border-color:var(--dsw-alias-button-primary-hover,var(--dsw-alias-button-primary-fill))}.fThDlq_fencePairButton:disabled{opacity:.55;cursor:not-allowed}.fThDlq_fencePairButton:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.fThDlq_fenceError{color:var(--dsw-alias-state-error-primary);text-align:left;margin:10px 0 0;font-size:13px;line-height:1.4}.fThDlq_fenceRetry{border:1px solid var(--dsw-alias-border-l2);width:100%;color:var(--dsw-alias-label-secondary);font:inherit;cursor:pointer;background:0 0;border-radius:10px;margin-top:12px;padding:10px 16px;font-weight:500;transition:background-color .12s,color .12s}.fThDlq_fenceRetry:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_fenceRetry:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:3px}.fThDlq_fenceFootnote{color:var(--dsw-alias-label-tertiary);margin:14px 0 0;font-size:12px;line-height:1.55}.fThDlq_addresses{border:none;margin:12px 0 0;padding:0}.fThDlq_addresses legend{color:var(--dsw-alias-label-secondary);padding:0;font-size:13px}.fThDlq_address{color:var(--dsw-alias-label-primary);font-variant-numeric:tabular-nums;cursor:pointer;border-radius:6px;align-items:center;gap:8px;margin-top:6px;padding:4px 6px;font-size:13px;transition:background-color .12s;display:flex}.fThDlq_address:hover{background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_address input:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);border-radius:50%;outline:none}.fThDlq_addressValue{text-overflow:ellipsis;white-space:nowrap;min-width:0;color:var(--dsw-alias-label-secondary);flex:1;font-size:12px;overflow:hidden}.fThDlq_addressHint{color:var(--dsw-alias-label-tertiary);margin:6px 0 0;font-size:12px}.fThDlq_devices{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;flex-direction:column;gap:8px;padding:12px 16px 14px;display:flex}.fThDlq_devicesTitle{margin:0;font-size:13px;font-weight:500;line-height:20px}.fThDlq_devicesEmpty{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_deviceList{flex-direction:column;gap:8px;margin:0;padding:0;list-style:none;display:flex}.fThDlq_deviceRow{justify-content:space-between;align-items:flex-start;gap:12px;display:flex}.fThDlq_deviceMeta{flex-direction:column;gap:2px;min-width:0;display:flex}.fThDlq_deviceName{text-overflow:ellipsis;white-space:nowrap;font-size:13px;font-weight:500;overflow:hidden}.fThDlq_devicePresence{font-size:12px;line-height:18px}.fThDlq_deviceOnline{color:var(--dsw-alias-state-success-primary)}.fThDlq_deviceOffline{color:var(--dsw-alias-label-secondary)}.fThDlq_deviceSeen{color:var(--dsw-alias-label-tertiary);font-variant-numeric:tabular-nums;font-size:12px}.fThDlq_deviceRevoke{color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:8px;flex:none;padding:6px 10px;font-size:12px;transition:background-color .12s,color .12s}.fThDlq_deviceRevoke:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_deviceRevoke:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}@media (prefers-reduced-motion:reduce){.fThDlq_trigger,.fThDlq_close,.fThDlq_action,.fThDlq_address,.fThDlq_deviceRevoke{transition:none}}.fThDlq_entryRow{flex:none;align-items:center;gap:6px;min-width:0;display:flex}.fThDlq_entryRow[data-rail=rail]{flex-direction:column-reverse;gap:4px}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footArea]{flex-flow:wrap;align-items:center}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footArea]>:not([class*=settingsArea]):not([class*=footerActions]){flex:100%;min-width:0}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=settingsArea]{flex:auto;order:1;width:auto;min-width:0}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footerActions]{flex:none;order:2;align-items:center;width:auto;min-width:0}.fThDlq_updateStatus{margin:0;font-weight:600}.fThDlq_updateDetail{color:var(--dsw-alias-label-secondary);margin:6px 0 0;font-size:13px}.fThDlq_updateError{color:var(--dsw-alias-text-danger,var(--dsw-alias-label-primary));margin:0;font-weight:600}.fThDlq_updateOutput{background:var(--dsw-alias-bg-layer-1);max-height:180px;color:var(--dsw-alias-label-secondary);white-space:pre-wrap;word-break:break-all;border-radius:10px;margin:10px 0 0;padding:10px 12px;font-size:12px;line-height:18px;overflow:auto}.fThDlq_updateList{flex-direction:column;gap:6px;margin:12px 0 0;padding:0;list-style:none;display:flex}.fThDlq_updateListItem{justify-content:space-between;align-items:baseline;gap:12px;font-size:13px;display:flex}.fThDlq_updateListName{text-overflow:ellipsis;white-space:nowrap;min-width:0;color:var(--dsw-alias-label-primary);overflow:hidden}.fThDlq_updateListVersions{color:var(--dsw-alias-label-secondary);font-variant-numeric:tabular-nums;flex:none}.fThDlq_updateNotes{margin-top:14px}.fThDlq_updateNotesTitle{margin:0 0 8px;font-size:14px;font-weight:600}.fThDlq_updateNoteSection{flex-direction:column;gap:4px;margin-top:10px;display:flex}.fThDlq_updateNoteHeading{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px;font-weight:600}.fThDlq_updateNoteList{flex-direction:column;gap:4px;margin:0;padding-left:18px;font-size:13px;display:flex}.fThDlq_updateNoteItem{color:var(--dsw-alias-label-primary);overflow-wrap:anywhere}.fThDlq_updateVersions{margin-top:12px}.fThDlq_updateVersionsSummary{cursor:pointer;color:var(--dsw-alias-label-secondary);user-select:none;font-size:12px}.fThDlq_updateActions{justify-content:flex-end;margin-top:16px;display:flex}.fThDlq_updateRetry{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary);cursor:pointer;border:none;border-radius:10px;align-items:center;gap:6px;padding:8px 14px;font-size:13px;transition:background-color .12s,color .12s;display:inline-flex}.fThDlq_updateRetry:hover{background:var(--dsw-alias-interactive-bg-active)}@media (prefers-reduced-motion:reduce){.fThDlq_updateRetry{transition:none}}";
+		const css$1 = ".fThDlq_overlay{z-index:1000;justify-content:center;align-items:center;display:flex;position:fixed;inset:0}.fThDlq_mask{background:var(--dsw-alias-bg-mask-1);backdrop-filter:var(--dsw-mask-blur);position:absolute;inset:0}.fThDlq_trigger{width:36px;height:36px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:50%;flex:none;justify-content:center;align-items:center;padding:0;transition:background-color .12s,color .12s,box-shadow .12s;display:inline-flex;position:relative}.fThDlq_trigger[data-wide=wide]{border-radius:999px;flex:auto;justify-content:flex-start;gap:8px;width:auto;min-width:0;padding:0 10px}.fThDlq_trigger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_trigger:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_trigger:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_trigger:disabled{opacity:.5;cursor:default}.fThDlq_panel{z-index:1;box-sizing:border-box;background:var(--dsw-alias-bg-layer-2);width:560px;max-width:calc(100vw - 48px);max-height:calc(100vh - 48px);box-shadow:var(--dsw-shadow-lv3);color:var(--dsw-alias-label-primary);border-radius:24px;flex-direction:column;gap:14px;padding:24px;font-size:14px;line-height:22px;display:flex;position:relative;overflow:auto}.fThDlq_header{align-items:flex-start;gap:12px;display:flex}.fThDlq_heading{flex:1;min-width:0}.fThDlq_title{margin:0;font-size:18px;font-weight:600;line-height:26px}.fThDlq_subtitle{color:var(--dsw-alias-label-secondary);margin:4px 0 0;font-size:13px}.fThDlq_close{width:28px;height:28px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:50%;flex:none;justify-content:center;align-items:center;padding:0;transition:background-color .12s,color .12s,box-shadow .12s;display:inline-flex}.fThDlq_close:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_close:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_close:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_close:disabled{opacity:.5;cursor:default}.fThDlq_card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;flex-direction:column;align-items:center;gap:12px;padding:16px;display:flex}.fThDlq_cardHeader{justify-content:space-between;align-items:center;gap:12px;width:100%;display:flex}.fThDlq_cardTitle{font-weight:500}.fThDlq_badge{white-space:nowrap;border-radius:999px;flex:none;align-items:center;gap:6px;min-width:0;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex}.fThDlq_badge:before{content:\"\";background:currentColor;border-radius:50%;width:8px;height:8px}.fThDlq_badge-waiting{color:var(--dsw-alias-label-secondary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-connected{color:var(--dsw-alias-state-success-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-disconnected{color:var(--dsw-alias-state-warn-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badge-stopped{color:var(--dsw-alias-state-error-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badgePublic{color:var(--dsw-alias-brand-primary);background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_badges{flex:none;align-items:center;gap:6px;display:inline-flex}.fThDlq_qrWrap{background:var(--dsw-alias-bg-base);border-radius:12px;justify-content:center;align-items:center;padding:12px;display:flex}.fThDlq_qr{display:block}.fThDlq_expired{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_expiry{color:var(--dsw-alias-label-secondary);margin:0;font-size:12px}.fThDlq_hint{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_link{text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-caption);font-family:var(--dsw-font-mono,ui-monospace, monospace);margin:0;font-size:12px;display:block;overflow:hidden}.fThDlq_pairLinks{flex-direction:column;gap:8px;display:flex}.fThDlq_pairLinkRow{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:10px;align-items:center;gap:10px;min-width:0;padding:10px 12px;display:flex}.fThDlq_pairLinkText{flex:1;min-width:0}.fThDlq_pairLinkLabel{color:var(--dsw-alias-label-secondary);margin-bottom:3px;font-size:12px;display:block}.fThDlq_copyLink{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-button-elevated-fill);min-height:30px;color:var(--dsw-alias-label-primary);cursor:pointer;border-radius:8px;flex:none;align-items:center;gap:5px;padding:0 10px;display:inline-flex}.fThDlq_oneTimeHint{color:var(--dsw-alias-label-caption);margin:0;font-size:12px}.fThDlq_stoppedHint{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_tunnelNote{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_tunnelFailed{color:var(--dsw-alias-state-error-primary);margin:0;font-size:13px}.fThDlq_actions{gap:8px;display:flex}.fThDlq_action{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-button-elevated-fill);height:34px;color:var(--dsw-alias-label-primary);cursor:pointer;white-space:nowrap;border-radius:10px;justify-content:center;align-items:center;gap:6px;padding:0 14px;font-size:13px;transition:background-color .12s,border-color .12s,box-shadow .12s;display:inline-flex}.fThDlq_action:hover:not(:disabled){background:var(--dsw-alias-button-floating-hover)}.fThDlq_action:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.fThDlq_action:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}.fThDlq_action:disabled{opacity:.5;cursor:default}.fThDlq_banner{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;padding:16px}.fThDlq_bannerTitle{color:var(--dsw-alias-state-warn-primary);margin:0;font-weight:500}.fThDlq_bannerHint{color:var(--dsw-alias-label-secondary);margin:6px 0 0;font-size:13px}.fThDlq_fencePage{z-index:2000;box-sizing:border-box;background:var(--dsw-alias-bg-base);text-align:center;flex-direction:column;justify-content:center;align-items:center;padding:40px 24px;display:flex;position:fixed;inset:0;overflow:auto}.fThDlq_fenceCard{box-sizing:border-box;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);width:min(520px,100%);box-shadow:var(--dsw-shadow-lv3);text-align:center;border-radius:20px;margin-inline:auto;padding:36px 40px}.fThDlq_fenceMark{background:var(--dsw-alias-state-error-secondary);width:44px;height:44px;color:var(--dsw-alias-state-error-primary);border-radius:50%;place-items:center;margin-inline:auto;font-size:24px;line-height:1;display:grid}.fThDlq_fenceEyebrow{color:var(--dsw-alias-state-error-primary);margin:22px 0 8px;font-size:13px;font-weight:600}.fThDlq_fenceTitle{color:var(--dsw-alias-label-primary);margin:0;font-size:24px;line-height:1.35}.fThDlq_fenceDetail{color:var(--dsw-alias-label-secondary);margin:12px 0 0;font-size:14px;line-height:1.65}.fThDlq_fenceSteps{background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);text-align:left;border-radius:12px;margin:24px auto 0;padding:20px 20px 20px 42px;font-size:14px;line-height:1.65}.fThDlq_fenceSteps li+li{margin-top:8px}.fThDlq_fenceForm{width:100%;margin-top:20px}.fThDlq_fenceInputRow{gap:8px;width:100%;display:flex}.fThDlq_fenceInput{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);min-width:0;color:var(--dsw-alias-label-primary);font:inherit;border-radius:10px;flex:1;padding:10px 14px;font-size:13px;transition:border-color .12s,box-shadow .12s}.fThDlq_fenceInput:focus{border-color:var(--dsw-alias-brand-primary);outline:none;box-shadow:0 0 0 2px #0066ff26}.fThDlq_fencePairButton{border:1px solid var(--dsw-alias-button-primary-fill);background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground);font:inherit;cursor:pointer;border-radius:10px;flex-shrink:0;padding:10px 18px;font-size:13px;font-weight:500;transition:filter .12s,opacity .12s}.fThDlq_fencePairButton:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover,var(--dsw-alias-button-primary-fill));border-color:var(--dsw-alias-button-primary-hover,var(--dsw-alias-button-primary-fill))}.fThDlq_fencePairButton:disabled{opacity:.55;cursor:not-allowed}.fThDlq_fencePairButton:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.fThDlq_fenceError{color:var(--dsw-alias-state-error-primary);text-align:left;margin:10px 0 0;font-size:13px;line-height:1.4}.fThDlq_fenceRetry{border:1px solid var(--dsw-alias-border-l2);width:100%;color:var(--dsw-alias-label-secondary);font:inherit;cursor:pointer;background:0 0;border-radius:10px;margin-top:12px;padding:10px 16px;font-weight:500;transition:background-color .12s,color .12s}.fThDlq_fenceRetry:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_fenceRetry:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:3px}.fThDlq_fenceFootnote{color:var(--dsw-alias-label-tertiary);margin:14px 0 0;font-size:12px;line-height:1.55}.fThDlq_addresses{border:none;margin:12px 0 0;padding:0}.fThDlq_addresses legend{color:var(--dsw-alias-label-secondary);padding:0;font-size:13px}.fThDlq_address{color:var(--dsw-alias-label-primary);font-variant-numeric:tabular-nums;cursor:pointer;border-radius:6px;align-items:center;gap:8px;margin-top:6px;padding:4px 6px;font-size:13px;transition:background-color .12s;display:flex}.fThDlq_address:hover{background:var(--dsw-alias-interactive-bg-hover)}.fThDlq_address input:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);border-radius:50%;outline:none}.fThDlq_addressValue{text-overflow:ellipsis;white-space:nowrap;min-width:0;color:var(--dsw-alias-label-secondary);flex:1;font-size:12px;overflow:hidden}.fThDlq_addressHint{color:var(--dsw-alias-label-tertiary);margin:6px 0 0;font-size:12px}.fThDlq_devices{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:16px;flex-direction:column;gap:8px;padding:12px 16px 14px;display:flex}.fThDlq_devicesTitle{margin:0;font-size:13px;font-weight:500;line-height:20px}.fThDlq_devicesEmpty{color:var(--dsw-alias-label-secondary);margin:0;font-size:13px}.fThDlq_deviceList{flex-direction:column;gap:8px;margin:0;padding:0;list-style:none;display:flex}.fThDlq_deviceRow{justify-content:space-between;align-items:flex-start;gap:12px;display:flex}.fThDlq_deviceMeta{flex-direction:column;gap:2px;min-width:0;display:flex}.fThDlq_deviceName{text-overflow:ellipsis;white-space:nowrap;font-size:13px;font-weight:500;overflow:hidden}.fThDlq_devicePresence{font-size:12px;line-height:18px}.fThDlq_deviceOnline{color:var(--dsw-alias-state-success-primary)}.fThDlq_deviceOffline{color:var(--dsw-alias-label-secondary)}.fThDlq_deviceSeen{color:var(--dsw-alias-label-tertiary);font-variant-numeric:tabular-nums;font-size:12px}.fThDlq_deviceRevoke{color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:8px;flex:none;padding:6px 10px;font-size:12px;transition:background-color .12s,color .12s}.fThDlq_deviceRevoke:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fThDlq_deviceRevoke:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-bg-layer-2), 0 0 0 4px var(--dsw-alias-brand-primary);outline:none}@media (prefers-reduced-motion:reduce){.fThDlq_trigger,.fThDlq_close,.fThDlq_action,.fThDlq_address,.fThDlq_deviceRevoke{transition:none}}.fThDlq_entryRow{flex:none;align-items:center;gap:6px;min-width:0;display:flex}.fThDlq_entryRow[data-rail=rail]{flex-direction:column-reverse;gap:4px}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footArea]{flex-flow:wrap;align-items:center}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footArea]>:not([class*=settingsArea]):not([class*=footerActions]){flex:100%;min-width:0}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footArea]>[class*=footerActions]{display:contents}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footerActions]>[data-slot=\"sidebar.footer.action\"]>:not([data-dsh-part=entry]):not([class*=entryRow]){flex:100%;order:1;min-width:0}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footerActions]>[data-slot=\"sidebar.footer.action\"]>[data-dsh-part=entry],[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=footerActions]>[data-slot=\"sidebar.footer.action\"]>[class*=entryRow]{flex:none;order:4;min-width:0}[data-dsh-frame]:not([data-sidebar-collapsed]) [class*=settingsArea]{flex:auto;order:3;width:auto;min-width:0}[data-dsh-frame][data-sidebar-collapsed] [class*=footerActions]:has([data-rail=rail]){flex-direction:column;align-items:center;gap:4px}";
 		const tagId$1 = "@linxin666/dsh-remote-web-ui/packages/dsh-remote-web-ui/src/client/remote.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId$1) + "]") === null) {
 			const tag = document.createElement("style");
@@ -1488,26 +1488,7 @@ window.__ModuleLoader__.load({
 			"title": "fThDlq_title",
 			"trigger": "fThDlq_trigger",
 			"tunnelFailed": "fThDlq_tunnelFailed",
-			"tunnelNote": "fThDlq_tunnelNote",
-			"updateActions": "fThDlq_updateActions",
-			"updateBadgeText": "fThDlq_updateBadgeText",
-			"updateDetail": "fThDlq_updateDetail",
-			"updateError": "fThDlq_updateError",
-			"updateList": "fThDlq_updateList",
-			"updateListItem": "fThDlq_updateListItem",
-			"updateListName": "fThDlq_updateListName",
-			"updateListVersions": "fThDlq_updateListVersions",
-			"updateNoteHeading": "fThDlq_updateNoteHeading",
-			"updateNoteItem": "fThDlq_updateNoteItem",
-			"updateNoteList": "fThDlq_updateNoteList",
-			"updateNoteSection": "fThDlq_updateNoteSection",
-			"updateNotes": "fThDlq_updateNotes",
-			"updateNotesTitle": "fThDlq_updateNotesTitle",
-			"updateOutput": "fThDlq_updateOutput",
-			"updateRetry": "fThDlq_updateRetry",
-			"updateStatus": "fThDlq_updateStatus",
-			"updateVersions": "fThDlq_updateVersions",
-			"updateVersionsSummary": "fThDlq_updateVersionsSummary"
+			"tunnelNote": "fThDlq_tunnelNote"
 		};
 		//#endregion
 		//#region src/client/RemotePanel.tsx
@@ -1861,481 +1842,15 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
-		//#region src/client/update-api.ts
-		/**
-		* Error thrown when the update status probe fails: carries the HTTP status
-		* so the panel can tell "the update route is not mounted" (404 — the host
-		* process runs an older plugin build) apart from real network failures.
-		*/
-		var UpdateStatusError = class extends Error {
-			/** HTTP status of the failed response (0 when the fetch never returned). */
-			status;
-			constructor(status) {
-				super("update status unavailable (HTTP " + String(status) + ")");
-				this.status = status;
-			}
-		};
-		/**
-		* Probe the update status: install mode, owning profile, and the
-		* current-vs-latest comparison for every family package.
-		* @returns the status snapshot.
-		*/
-		async function fetchUpdateStatus() {
-			let response;
-			try {
-				response = await fetch("/api/update/status");
-			} catch {
-				throw new UpdateStatusError(0);
-			}
-			if (!response.ok) throw new UpdateStatusError(response.status);
-			return await response.json();
-		}
-		/**
-		* Run the update (pnpm update in the owning profile). Blocks until pnpm
-		* exits — the panel shows an in-flight state meanwhile.
-		* @returns the run outcome.
-		*/
-		async function runUpdate() {
-			const response = await fetch("/api/update/run", { method: "POST" });
-			if (!response.ok) throw new Error("update run unavailable");
-			return await response.json();
-		}
-		//#endregion
-		//#region src/client/UpdatePanel.tsx
-		/** The anchor package name (aggregate first) for copy purposes. */
-		function anchorName(status) {
-			return status?.anchor ?? status?.packages[0]?.name;
-		}
-		/** The latest npm release of the anchor, for reference copy. */
-		function anchorLatest(status) {
-			return status?.packages[0]?.latest;
-		}
-		/**
-		* Render the update panel.
-		* @param props - copy, view state, and actions.
-		* @returns the panel element tree.
-		*/
-		function UpdatePanel({ t, view, onClose, onRecheck, onStartUpdate }) {
-			const status = view.kind === "result" || view.kind === "updating" ? view.status : void 0;
-			const title = view.kind === "done" && view.result.ok ? t("update.done") : t("update.title");
-			const subtitle = subtitleOf(t, view);
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: remote_module_css_default.panel,
-				role: "dialog",
-				"aria-modal": "true",
-				"aria-label": title,
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: remote_module_css_default.header,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: remote_module_css_default.heading,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
-								className: remote_module_css_default.title,
-								children: title
-							}), subtitle !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								className: remote_module_css_default.subtitle,
-								children: subtitle
-							})]
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-							type: "button",
-							className: remote_module_css_default.close,
-							"aria-label": t("update.close"),
-							onClick: onClose,
-							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCloseOutlineRegular, {})
-						})]
-					}),
-					view.kind === "checking" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: remote_module_css_default.updateStatus,
-						children: t("update.checking")
-					}),
-					view.kind === "result" && status !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ResultBody, {
-						t,
-						status
-					}),
-					view.kind === "result" && status !== void 0 && status.mode === "npm" && status.outdated && status.error === void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: remote_module_css_default.updateActions,
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-							type: "button",
-							className: remote_module_css_default.updateRetry,
-							onClick: () => onStartUpdate(status),
-							children: t("update.start")
-						})
-					}),
-					view.kind === "updating" && status !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-							className: remote_module_css_default.updateStatus,
-							children: t("update.updating", {
-								name: anchorName(status) ?? "",
-								version: anchorLatest(status) ?? ""
-							})
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-							className: remote_module_css_default.updateDetail,
-							children: t("update.cooldownNotice")
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PackageSummary, {
-							t,
-							status
-						})
-					] }),
-					view.kind === "done" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(DoneBody, {
-						t,
-						result: view.result
-					}),
-					view.kind === "error" && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: remote_module_css_default.updateError,
-						children: view.message
-					}), view.detail !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
-						className: remote_module_css_default.updateOutput,
-						children: view.detail
-					})] }),
-					(view.kind === "done" || view.kind === "error") && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: remote_module_css_default.updateActions,
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
-							type: "button",
-							className: remote_module_css_default.updateRetry,
-							onClick: onRecheck,
-							children: [
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconRefreshOutlineRegular, {}),
-								" ",
-								t("update.retry")
-							]
-						})
-					})
-				]
-			});
-		}
-		/** The subtitle copy per view state (absent on plain results). */
-		function subtitleOf(t, view) {
-			switch (view.kind) {
-				case "checking": return t("update.checking");
-				case "updating": return t("update.updatingTitle");
-				case "result": return;
-				case "done": return view.result.ok ? t("update.doneDetail") : t("update.error");
-				case "error": return;
-			}
-		}
-		/** The checked result body: mode banner + version list. */
-		function ResultBody({ t, status }) {
-			const anchor = anchorName(status);
-			const latest = anchorLatest(status);
-			if (status.mode === "link") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateStatus,
-				children: t("update.linkMode")
-			}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateDetail,
-				children: t("update.linkModeDetail", { version: latest ?? "-" })
-			})] });
-			if (status.mode === "missing") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateStatus,
-				children: t("update.missing")
-			}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateDetail,
-				children: t("update.missingDetail")
-			})] });
-			if (status.error === "registry-unreachable") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateStatus,
-				children: t("update.offline")
-			}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateDetail,
-				children: t("update.offlineDetail")
-			})] });
-			if (status.outdated) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [
-				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-					className: remote_module_css_default.updateStatus,
-					children: t("update.found")
-				}),
-				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-					className: remote_module_css_default.updateDetail,
-					children: anchor !== void 0 ? t("update.foundDetail", {
-						name: anchor,
-						version: latest ?? ""
-					}) : ""
-				}),
-				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-					className: remote_module_css_default.updateDetail,
-					children: t("update.cooldownNotice")
-				}),
-				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PackageSummary, {
-					t,
-					status
-				})
-			] });
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [
-				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-					className: remote_module_css_default.updateStatus,
-					children: t("update.upToDate")
-				}),
-				anchor !== void 0 && latest !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-					className: remote_module_css_default.updateDetail,
-					children: t("update.upToDateDetail", {
-						name: anchor,
-						version: latest
-					})
-				}),
-				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PackageSummary, {
-					t,
-					status
-				})
-			] });
-		}
-		/** Release-note summary when available; otherwise fall back to the package list. */
-		function PackageSummary({ t, status }) {
-			if (status.notes === void 0) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PackageList, { status });
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ReleaseNotes, {
-				t,
-				notes: status.notes
-			}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", {
-				className: remote_module_css_default.updateVersions,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", {
-					className: remote_module_css_default.updateVersionsSummary,
-					children: t("update.componentVersions")
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PackageList, { status })]
-			})] });
-		}
-		/** Render GitHub Release sections as a compact three-group list. */
-		function ReleaseNotes({ t, notes }) {
-			const sections = [
-				{
-					key: "features",
-					title: t("update.releaseFeatures"),
-					items: notes.features
-				},
-				{
-					key: "fixes",
-					title: t("update.releaseFixes"),
-					items: notes.fixes
-				},
-				{
-					key: "other",
-					title: t("update.releaseOther"),
-					items: notes.other
-				}
-			].filter((section) => section.items.length > 0);
-			if (sections.length === 0) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateDetail,
-				children: t("update.releaseUnavailable")
-			});
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: remote_module_css_default.updateNotes,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
-					className: remote_module_css_default.updateNotesTitle,
-					children: t("update.releaseNotes", { version: notes.version })
-				}), sections.map((section) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-					className: remote_module_css_default.updateNoteSection,
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", {
-						className: remote_module_css_default.updateNoteHeading,
-						children: section.title
-					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
-						className: remote_module_css_default.updateNoteList,
-						children: section.items.map((item, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", {
-							className: remote_module_css_default.updateNoteItem,
-							children: item
-						}, index))
-					})]
-				}, section.key))]
-			});
-		}
-		/** The per-package current → latest comparison list. */
-		function PackageList({ status }) {
-			if (status.packages.length === 0) return null;
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
-				className: remote_module_css_default.updateList,
-				children: status.packages.map((packageStatus) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
-					className: remote_module_css_default.updateListItem,
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: remote_module_css_default.updateListName,
-						children: packageStatus.name
-					}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-						className: remote_module_css_default.updateListVersions,
-						children: [packageStatus.current, packageStatus.latest !== void 0 && packageStatus.latest !== packageStatus.current && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [" → ", packageStatus.latest] })]
-					})]
-				}, packageStatus.name))
-			});
-		}
-		/** The outcome body: success + restart hint, or the translated failure. */
-		function DoneBody({ t, result }) {
-			if (result.ok) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateDetail,
-				children: t("update.doneDetail")
-			}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateDetail,
-				children: t("update.restartHint")
-			})] });
-			const message = errorMessageOf(t, result);
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: remote_module_css_default.updateError,
-				children: message
-			}), result.output.trim() !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
-				className: remote_module_css_default.updateOutput,
-				children: result.output.trim()
-			})] });
-		}
-		/** Translate a structured failure code; fall back to the raw message. */
-		function errorMessageOf(t, result) {
-			switch (result.errorCode) {
-				case "pnpm-missing": return t("update.error.pnpmMissing");
-				case "timeout": return t("update.error.timeout");
-				case "not-found": return t("update.error.notFound");
-				case "link": return t("update.error.link");
-				case "pnpm-failed": return t("update.error.pnpmFailed", { code: String(result.exitCode ?? "?") });
-				case "stale": return t("update.error.stale");
-				case "verify-failed": return t("update.error.verifyFailed");
-				default: return result.error ?? t("update.error.unknown");
-			}
-		}
-		//#endregion
-		//#region src/client/UpdateEntry.tsx
-		/**
-		* The sidebar update seat: the download trigger beside the remote-control
-		* trigger plus the update panel modal. Owns the flow — probe the registry
-		* on open, show the result, and let the user start the update from the
-		* result view (#507), then report the outcome (restart hint on success,
-		* translated failure on error).
-		* Component-local state per the client stack rules.
-		*/
-		/**
-		* Render the update trigger and panel.
-		* @param props - column state and locale seat.
-		* @returns the entry element tree.
-		*/
-		function UpdateEntry({ wide, t }) {
-			const [open, setOpen] = (0, react.useState)(false);
-			const [view, setView] = (0, react.useState)({ kind: "checking" });
-			const [updateAvailable, setUpdateAvailable] = (0, react.useState)(false);
-			const runToken = (0, react.useRef)(0);
-			const availabilityToken = (0, react.useRef)(0);
-			const mounted = (0, react.useRef)(false);
-			const probeAvailability = (0, react.useCallback)(async () => {
-				const token = ++availabilityToken.current;
-				try {
-					const status = await fetchUpdateStatus();
-					if (token === availabilityToken.current) setUpdateAvailable(status.mode === "npm" && status.outdated);
-				} catch {
-					if (token === availabilityToken.current) setUpdateAvailable(false);
-				}
-			}, []);
-			const check = (0, react.useCallback)(async () => {
-				const availabilityCheck = ++availabilityToken.current;
-				setView({ kind: "checking" });
-				let status;
-				try {
-					status = await fetchUpdateStatus();
-				} catch (error) {
-					if (availabilityCheck === availabilityToken.current) setUpdateAvailable(false);
-					if (error instanceof UpdateStatusError && error.status === 404) {
-						setView({
-							kind: "error",
-							message: t("update.unmounted"),
-							detail: t("update.unmountedDetail")
-						});
-						return;
-					}
-					setView({
-						kind: "error",
-						message: t("update.offline"),
-						detail: t("update.offlineDetail")
-					});
-					return;
-				}
-				if (availabilityCheck === availabilityToken.current) setUpdateAvailable(status.mode === "npm" && status.outdated);
-				if (status.error === "registry-unreachable") {
-					setView({
-						kind: "result",
-						status
-					});
-					return;
-				}
-				setView({
-					kind: "result",
-					status
-				});
-			}, [t]);
-			const startUpdate = (0, react.useCallback)(async (status) => {
-				if (status.mode !== "npm" || !status.outdated) return;
-				setView({
-					kind: "updating",
-					status
-				});
-				const token = ++runToken.current;
-				try {
-					const result = await runUpdate();
-					if (result.ok && mounted.current) setUpdateAvailable(false);
-					if (token !== runToken.current) return;
-					setView({
-						kind: "done",
-						result
-					});
-				} catch {
-					if (token !== runToken.current) return;
-					setView({
-						kind: "error",
-						message: t("update.error"),
-						detail: t("update.offlineDetail")
-					});
-				}
-			}, [t]);
-			const openPanel = (0, react.useCallback)(() => {
-				setOpen(true);
-				check();
-			}, [check]);
-			const closePanel = (0, react.useCallback)(() => {
-				runToken.current++;
-				setOpen(false);
-			}, []);
-			(0, react.useEffect)(() => {
-				mounted.current = true;
-				probeAvailability();
-				return () => {
-					mounted.current = false;
-					runToken.current++;
-					availabilityToken.current++;
-				};
-			}, [probeAvailability]);
-			const updateLabel = updateAvailable ? t("update.availableLabel") : t("update.label");
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
-				type: "button",
-				className: remote_module_css_default.trigger,
-				"data-wide": wide ? updateAvailable ? "wide" : void 0 : "rail",
-				"data-update-available": updateAvailable ? "true" : void 0,
-				"aria-label": updateLabel,
-				"aria-expanded": open,
-				title: updateLabel,
-				onClick: openPanel,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconDownloadOutlineRegular, { size: wide ? 16 : 18 }), updateAvailable && wide && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-					className: remote_module_css_default.updateBadgeText,
-					children: t("update.badge")
-				})]
-			}), open && (0, react_dom.createPortal)(/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: remote_module_css_default.overlay,
-				role: "presentation",
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-					className: remote_module_css_default.mask,
-					"aria-hidden": "true",
-					onClick: closePanel
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UpdatePanel, {
-					t,
-					view,
-					onClose: closePanel,
-					onRecheck: () => {
-						check();
-					},
-					onStartUpdate: (status) => {
-						startUpdate(status);
-					}
-				})]
-			}), document.body)] });
-		}
-		//#endregion
 		//#region src/client/RemoteEntry.tsx
 		/**
-		* The sidebar remote-control seat: the update trigger plus the phone-icon
-		* trigger beside the settings button, and the pairing panel modal. Owns the
-		* panel behavior — token minting on open, the status SSE subscription,
-		* stop/refresh/copy — and renders the pure {@link RemotePanel} body. The
-		* update seat (the dsh-web self-update flow) rides the same footer row,
-		* rendered by {@link UpdateEntry}. Component-local state per the client
-		* stack rules: nothing here survives remounts or crosses entries.
+		* The sidebar remote-control seat: the phone-icon trigger beside the
+		* settings button, and the pairing panel modal. Owns the panel behavior —
+		* token minting on open, the status SSE subscription, stop/refresh/copy — and
+		* renders the pure {@link RemotePanel} body. The family self-update seat is
+		* its own plugin (dsh-update) and no longer rides this row. Component-local
+		* state per the client stack rules: nothing here survives remounts or crosses
+		* entries.
 		*/
 		/**
 		* Apply one status frame onto the current state: the ready state mirrors
@@ -2415,7 +1930,7 @@ window.__ModuleLoader__.load({
 				if (seq !== openSeq.current) return;
 				setState(next);
 				if (next.kind !== "ready" && next.kind !== "lan-required") return;
-				const source = new EventSource("/api/pair/events");
+				const source = new EventSource("api/pair/events");
 				eventSource.current = source;
 				source.onmessage = (event) => {
 					try {
@@ -2503,18 +2018,15 @@ window.__ModuleLoader__.load({
 					}, 1500);
 				});
 			}, []);
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 				className: remote_module_css_default.entryRow,
 				"data-rail": wide ? void 0 : "rail",
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(UpdateEntry, {
-					wide,
-					t
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(TooltipAnchor, {
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(TooltipAnchor, {
 					wide,
 					label: t("entry.label"),
 					onClick: openPanel,
 					expanded: open
-				})]
+				})
 			}), open && (0, react_dom.createPortal)(/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: remote_module_css_default.overlay,
 				role: "presentation",
@@ -3468,8 +2980,6 @@ window.__ModuleLoader__.load({
 				descriptionKey: "settings.description",
 				defaultOpen: false,
 				state,
-				renderChildrenWhenNotExposed: true,
-				hideNotExposedNotice: true,
 				onSave: props.save,
 				onDiscard: props.discard,
 				children: [
@@ -3722,7 +3232,7 @@ window.__ModuleLoader__.load({
 			"status.disconnected": "已配对设备离线",
 			"status.stopped": "已停止远程访问",
 			"status.lanRequired": "此功能需要局域网绑定或公网地址才能使用",
-			"status.lanRequiredHint": "当前服务仅绑定在 127.0.0.1 且未配置公网地址，手机无法访问。请在「设置 → Web 插件 → 远程访问设置」卡片中打开“局域网访问”，或用 dsh web --host 0.0.0.0 重新启动，或填写内网穿透的公网地址。",
+			"status.lanRequiredHint": "当前服务仅绑定在 127.0.0.1 且未配置公网地址，手机无法访问。请在本插件的设置卡片中打开“局域网访问”（装在全家桶里时在「设置 → Web 插件 → 远程访问设置」，单独安装时在设置 → 插件 → 本插件行），或用 dsh web --host 0.0.0.0 重新启动，或填写内网穿透的公网地址。",
 			"status.loopbackRequired": "配对面板仅限本机使用",
 			"status.loopbackRequiredHint": "请通过 http://127.0.0.1 打开此页面后重试；手机请使用配对链接访问。",
 			"status.unreachable": "无法连接配对服务",
@@ -3827,49 +3337,7 @@ window.__ModuleLoader__.load({
 			"settings.discard": "放弃",
 			"settings.unsaved": "未保存",
 			"settings.saveFailed": "部署未接受这些值，已保留供你修改。",
-			"settings.invalidNumber": "请输入数字，留空则使用默认值。",
-			"update.label": "检查更新",
-			"update.badge": "有更新",
-			"update.availableLabel": "发现新版本，检查更新",
-			"update.title": "检查更新",
-			"update.checking": "正在检查远程仓库中的新版本…",
-			"update.upToDate": "当前已是最新版本",
-			"update.upToDateDetail": "{name} 已是最新版本 v{version}。",
-			"update.found": "发现新版本",
-			"update.foundDetail": "{name} 有新版本 v{version}。确认后开始更新。",
-			"update.start": "开始更新",
-			"update.updating": "正在更新 {name} 至 v{version}，可能需要 1-2 分钟…",
-			"update.cooldownNotice": "本次更新由你主动触发，将跳过 pnpm 的 24 小时发布冷却期（供应链保护）直接安装所选版本。",
-			"update.updatingTitle": "正在更新…",
-			"update.done": "更新完成",
-			"update.doneDetail": "所有组件已更新到最新版本。",
-			"update.restartHint": "请重启 dsh web 使新版本生效：在终端按 Ctrl+C 停止后重新运行 dsh web。",
-			"update.linkMode": "当前为本地开发模式",
-			"update.linkModeDetail": "dsh-web 或其组件通过本地链接安装（开发模式），无法自动更新。npm 上最新版本：{version}。请同步本地仓库，或移除与全家桶重复的独立链接。",
-			"update.missing": "未找到 dsh-web 安装",
-			"update.missingDetail": "无法定位已安装的 dsh-web 聚合包。请先运行 dsh plugin --profile <profile> add @linxin666/dsh-web-all。",
-			"update.offline": "无法连接更新源",
-			"update.offlineDetail": "网络不可用或更新服务异常，请稍后重试。",
-			"update.unmounted": "更新服务未加载",
-			"update.unmountedDetail": "当前 dsh web 进程运行的插件版本不含更新服务，请重启 dsh web（Ctrl+C 后重新运行）后再试。",
-			"update.error": "更新失败",
-			"update.packages": "组件版本",
-			"update.releaseNotes": "v{version} 更新说明",
-			"update.releaseFeatures": "新增功能",
-			"update.releaseFixes": "修复",
-			"update.releaseOther": "其他变动",
-			"update.releaseUnavailable": "本次发布说明暂不可用，可前往 GitHub Release 查看。",
-			"update.componentVersions": "查看组件版本",
-			"update.retry": "重新检查",
-			"update.close": "关闭更新面板",
-			"update.error.pnpmMissing": "未找到 pnpm，已尝试 pnpm / corepack / npx 仍不可用。请安装 pnpm 后重启应用（Windows: npm install -g pnpm 或 corepack enable；macOS: brew install pnpm 或 corepack enable）。",
-			"update.error.timeout": "更新超时，已终止安装进程，请重试。",
-			"update.error.notFound": "未找到 dsh-web 聚合包安装，无法更新。",
-			"update.error.link": "dsh-web 或其组件使用本地链接，无法自动更新；请同步本地仓库，或移除与全家桶重复的独立链接。",
-			"update.error.pnpmFailed": "更新执行失败（pnpm 退出码 {code}），详见下方输出。",
-			"update.error.stale": "更新命令已执行，但安装版本未变化。常见原因：pnpm 11 的 minimumReleaseAge 门禁会静默跳过发布不足 24 小时的新版本。请在 profile 目录（~/.dsh/profiles/<profile>）的 pnpm-workspace.yaml 中配置 minimumReleaseAgeExclude（例如 \"@linxin666/*\"）或 minimumReleaseAge: 0 后重新点击更新。",
-			"update.error.verifyFailed": "更新命令已执行，但无法核对安装后的版本（可能是 registry 探测失败或安装路径变化）。请查看下方输出，或稍后重试。",
-			"update.error.unknown": "更新失败，请重试。"
+			"settings.invalidNumber": "请输入数字，留空则使用默认值。"
 		};
 		/** English dictionary, checked complete against the zh key set. */
 		const en = {
@@ -3886,7 +3354,7 @@ window.__ModuleLoader__.load({
 			"status.disconnected": "Paired devices offline",
 			"status.stopped": "Remote access stopped",
 			"status.lanRequired": "This feature needs a LAN bind or a public address",
-			"status.lanRequiredHint": "The server is bound to 127.0.0.1 and no public address is configured, so a phone cannot reach it. Turn on LAN access in the settings card under Settings → Web Plugins → Remote access, or restart with dsh web --host 0.0.0.0, or set the tunneled public address.",
+			"status.lanRequiredHint": "The server is bound to 127.0.0.1 and no public address is configured, so a phone cannot reach it. Turn on LAN access in this plugin settings card (under Settings → Web Plugins → Remote access when the full family is installed, or on this plugin row under Settings → Plugins for a standalone install), or restart with dsh web --host 0.0.0.0, or set the tunneled public address.",
 			"status.loopbackRequired": "The pairing panel works on this machine only",
 			"status.loopbackRequiredHint": "Open this page at http://127.0.0.1 to mint a QR code; phones use the paired link.",
 			"status.unreachable": "Cannot reach the pairing service",
@@ -3991,49 +3459,7 @@ window.__ModuleLoader__.load({
 			"settings.discard": "Discard",
 			"settings.unsaved": "Unsaved",
 			"settings.saveFailed": "The deployment did not accept these values; they were left for you to correct.",
-			"settings.invalidNumber": "Enter a number, or leave blank to use the default.",
-			"update.label": "Check for updates",
-			"update.badge": "Update available",
-			"update.availableLabel": "New version available. Check for updates",
-			"update.title": "Check for updates",
-			"update.checking": "Checking the remote repository for newer releases…",
-			"update.upToDate": "Everything is up to date",
-			"update.upToDateDetail": "{name} is at the latest version v{version}.",
-			"update.found": "A new version is available",
-			"update.foundDetail": "{name} has a newer release v{version}. Confirm to start the update.",
-			"update.start": "Update now",
-			"update.updating": "Updating {name} to v{version}; this may take 1-2 minutes…",
-			"update.cooldownNotice": "This user-initiated update bypasses pnpm's 24-hour release cooldown (supply-chain protection) and installs the selected version immediately.",
-			"update.updatingTitle": "Updating…",
-			"update.done": "Update complete",
-			"update.doneDetail": "All components are up to date.",
-			"update.restartHint": "Restart dsh web for the new version to take effect: stop it with Ctrl+C in the terminal, then run dsh web again.",
-			"update.linkMode": "Local development mode",
-			"update.linkModeDetail": "dsh-web or one of its components is installed via a local link and cannot be updated remotely. Latest npm release: {version}. Sync the local checkout, or remove a standalone link duplicated by the aggregate.",
-			"update.missing": "dsh-web not found",
-			"update.missingDetail": "Could not locate the installed dsh-web aggregate package. Install it with: dsh plugin --profile <profile> add @linxin666/dsh-web-all",
-			"update.offline": "Cannot reach the update source",
-			"update.offlineDetail": "The network is unavailable or the update service is failing; try again later.",
-			"update.unmounted": "The update service is not loaded",
-			"update.unmountedDetail": "The running dsh web process loads a plugin build without the update service; restart dsh web (Ctrl+C, then run dsh web again) and retry.",
-			"update.error": "Update failed",
-			"update.packages": "Component versions",
-			"update.releaseNotes": "v{version} release notes",
-			"update.releaseFeatures": "New Features",
-			"update.releaseFixes": "Bug Fixes",
-			"update.releaseOther": "Other Changes",
-			"update.releaseUnavailable": "Release notes are unavailable for this version; see the GitHub release instead.",
-			"update.componentVersions": "View component versions",
-			"update.retry": "Check again",
-			"update.close": "Close update panel",
-			"update.error.pnpmMissing": "pnpm was not found (tried pnpm / corepack / npx). Install pnpm and restart the app (Windows: npm install -g pnpm or corepack enable; macOS: brew install pnpm or corepack enable).",
-			"update.error.timeout": "The update timed out and the install process was killed; try again.",
-			"update.error.notFound": "The dsh-web aggregate package is not installed; nothing to update.",
-			"update.error.link": "dsh-web or one of its components uses a local link. Sync the checkout, or remove a standalone link duplicated by the aggregate.",
-			"update.error.pnpmFailed": "The update failed (pnpm exited with code {code}); see the output below.",
-			"update.error.stale": "The update command ran but the installed versions did not change. Likely cause: the pnpm 11 minimumReleaseAge gate silently skips releases published less than 24 hours ago. Add minimumReleaseAgeExclude (e.g. \"@linxin666/*\") or set minimumReleaseAge: 0 in pnpm-workspace.yaml under the profile directory (~/.dsh/profiles/<profile>), then run the update again.",
-			"update.error.verifyFailed": "The update command ran but the installed versions could not be verified afterwards (registry probe failed or the install path changed). Inspect the output below, or retry later.",
-			"update.error.unknown": "Update failed; try again."
+			"settings.invalidNumber": "Enter a number, or leave blank to use the default."
 		};
 		//#endregion
 		//#region src/client/deep-link.ts
@@ -4104,6 +3530,102 @@ window.__ModuleLoader__.load({
 		*/
 		/** The gated mirror prefix (must match src/remote-methods.ts). */
 		const REMOTE_PREFIX = "/remote";
+		/**
+		* The schemes that can deliver a page a remote party controls: the network
+		* transports, plus the documents a network page can mint. Every other scheme
+		* is registered and served by an application on this machine, so its page is
+		* the machine's own page whatever the application calls the scheme.
+		*
+		* The list is deliberately the *web* side rather than an allowlist of known
+		* desktop shells. The official DSH Desktop shell serves its Web GUI from
+		* `dsh-app://app/` (`location.hostname === 'app'`), which no hostname
+		* predicate can recognise; a scheme allowlist fixed that instance (#1682) but
+		* left the next shell — or a `file:` page — fenced behind a pairing page it
+		* can never complete, because a pairing link is reachable only over the
+		* network. Naming the web side instead makes an unknown application scheme
+		* local by construction.
+		*
+		* `blob:`, `data:`, `about:` and `filesystem:` stay on the web side: a
+		* network page mints those documents, so they must keep the fence.
+		*/
+		const WEB_PAGE_PROTOCOLS = [
+			"http:",
+			"https:",
+			"blob:",
+			"data:",
+			"about:",
+			"filesystem:"
+		];
+		/**
+		* Whether one page scheme can carry a document a remote party controls.
+		* @param protocol - `location.protocol` of the page (for example `https:`).
+		* @returns true for the network transports and the documents they mint.
+		*/
+		function isWebPageProtocol(protocol) {
+			return WEB_PAGE_PROTOCOLS.includes(protocol);
+		}
+		/**
+		* Hostname-only loopback classification: localhost, the IPv6 loopback literal
+		* (WHATWG keeps its brackets) and any 127/8 IPv4 literal. Kept string-in,
+		* boolean-out and dependency-free so the browser half and the inlined boot
+		* script can both run it verbatim.
+		* @param hostname - a page/cookie hostname, IPv6 literals bracketed.
+		* @returns true for a loopback name or literal.
+		*/
+		function isLoopbackHostname(hostname) {
+			if (hostname === "localhost" || hostname === "::1" || hostname === "[::1]") return true;
+			const parts = hostname.split(".");
+			return parts.length === 4 && parts[0] === "127" && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
+		}
+		/**
+		* Whether the current page is served from the machine running the host, so
+		* its same-origin traffic must NOT be fenced behind the pairing channel.
+		* Three independent facts all describe the page itself and any one is enough:
+		*
+		* - the page's own hostname is loopback;
+		* - the page's protocol is not a {@link WEB_PAGE_PROTOCOLS} web scheme, so an
+		*   application on this machine delivered it — the desktop shell's
+		*   `dsh-app://app/` is one such page, and a scheme this build has never
+		*   heard of is another;
+		* - the official connection transport already declared this shell the host
+		*   owner (`__DSH_TRANSPORT__.ownsHost === true`) AND the page is not a
+		*   network origin. The official client reads the same hook to derive
+		*   `connection.isLoopback`, and the desktop shell sets it before any boot
+		*   entry — without this term the plugin's predicate contradicts the host's
+		*   own conclusion (#1682). The network-origin guard is deliberate: this
+		*   plugin's own device-gated landing (a LAN or tunnel page) publishes the
+		*   same hook to grant a paired remote the full UI, and that page must keep
+		*   riding the gated channel — `ownsHost` buys the presentation, never an
+		*   exemption from the pairing fence.
+		*
+		* The order matters: loopback is checked first so a loopback page keeps its
+		* exemption even on a scheme no list carries, and the scheme test runs before
+		* the hook test so a web page always reaches the network-origin guard. A
+		* missing or empty scheme is not evidence of a local page - the fence stays
+		* up - because a real document always reports its own scheme.
+		*
+		* @param hostname - `location.hostname` of the page.
+		* @param protocol - `location.protocol` of the page (for example `https:`).
+		* @param transportOwnsHost - `__DSH_TRANSPORT__?.ownsHost` as read by the caller.
+		* @returns true when the page is local and needs no remote channel.
+		*/
+		function isLocalPage(hostname, protocol, transportOwnsHost) {
+			if (isLoopbackHostname(hostname)) return true;
+			if (protocol !== void 0 && protocol !== "" && !isWebPageProtocol(protocol)) return true;
+			return transportOwnsHost === true && !isNetworkOrigin(hostname);
+		}
+		/**
+		* Whether a hostname can only be reached across a network, so a page on it is
+		* remote whatever transport hook it carries: any IPv4/IPv6 literal (a dot or a
+		* colon) or any dotted DNS name. A hostname with no dot and no colon is a
+		* scheme-local authority (the desktop shell's `app`), which is why this test,
+		* not a loopback test, is what the `ownsHost` term is gated on.
+		* @param hostname - the page hostname.
+		* @returns true when the page cannot be the machine's own local page.
+		*/
+		function isNetworkOrigin(hostname) {
+			return hostname.includes(".") || hostname.includes(":");
+		}
 		/** The live rule set. */
 		const REMOTE_CHANNEL_RULES = {
 			remotePrefix: REMOTE_PREFIX,
@@ -4126,6 +3648,7 @@ window.__ModuleLoader__.load({
 			deviceQuery: REMOTE_DEVICE_QUERY,
 			uploadPath: "/api/session/uploadFileBinary",
 			uploadHookGlobal: "__DSH_FILE_UPLOAD__",
+			webProtocols: WEB_PAGE_PROTOCOLS,
 			hostGrantGlobal: "__DSH_REMOTE_HOST_GRANT__"
 		};
 		/** The window global the boot patch publishes its seat under. */
@@ -4156,24 +3679,29 @@ window.__ModuleLoader__.load({
 		* the given window and returns their restore.
 		*/
 		const RULES = REMOTE_CHANNEL_RULES;
+		/**
+		* Read the page-origin facts from a window-like object: the hostname and
+		* protocol of the page itself plus the official transport's host-owner flag
+		* (`__DSH_TRANSPORT__.ownsHost`, set by the desktop shell before any boot
+		* entry, and by this plugin's own paired landing).
+		* @param win - the window to read (defaults to the real one).
+		* @returns the facts `isLocalPage`/`remoteChannelRequired` decide from.
+		*/
+		function pageOriginFacts(win = window) {
+			const transport = win.__DSH_TRANSPORT__;
+			return {
+				hostname: win.location.hostname,
+				protocol: win.location.protocol,
+				...transport?.ownsHost === true ? { transportOwnsHost: true } : {}
+			};
+		}
 		/** Decide whether a remote desktop channel is required from local or host policy. */
-		function remoteChannelRequired(hostname, snapshot, hostPairingPolicy) {
-			if (isLoopbackHostname(hostname)) return false;
+		function remoteChannelRequired(origin, snapshot, hostPairingPolicy) {
+			if (isLocalPage(origin.hostname, origin.protocol, origin.transportOwnsHost)) return false;
 			if (snapshot.status === "ready") return (snapshot.value?.enabled ?? true) && (snapshot.value?.requirePairingForLan ?? true);
 			return hostPairingPolicy !== false;
 		}
 		/**
-		* Browser-safe loopback classification for the page origin (the SDK client
-		* exports its own; this copy keeps the module dependency-free).
-		* @param hostname - a location hostname (IPv6 without brackets).
-		* @returns true for localhost, IPv6 loopback, or any 127/8 literal.
-		*/
-		function isLoopbackHostname(hostname) {
-			if (hostname === "localhost" || hostname === "::1" || hostname === "[::1]") return true;
-			const parts = hostname.split(".");
-			return parts.length === 4 && parts[0] === "127" && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
-		}
-		/**
 		* Whether one same-origin path must ride the gated channel (fetch, EventSource,
 		* img/script/iframe src).
 		* @param pathname - the request URL pathname.
@@ -4553,7 +4081,7 @@ window.__ModuleLoader__.load({
 		/** The building package's version, when the bundle carries it. */
 		function bakedVersion() {
 			try {
-				return "0.4.1";
+				return "0.4.3";
 			} catch {
 				return;
 			}
@@ -5677,6 +5205,96 @@ window.__ModuleLoader__.load({
 			reconcile();
 		}
 		//#endregion
+		//#region src/client/settings-entry-form.ts
+		/** The snapshot a form reports before the Host has answered with this entry. */
+		function pendingSnapshot() {
+			return {
+				status: "loading",
+				value: void 0,
+				base: void 0,
+				user: void 0,
+				revision: void 0,
+				writable: false,
+				mode: "host"
+			};
+		}
+		/**
+		* Create a settings form bound to the profile entry id this Host serves, and
+		* rebound whenever the shared describe mirror names a different one of this
+		* package's rows.
+		* @param options - the shared forms service and this package's candidate row ids.
+		* @returns a form delegating to the currently resolved entry's own form.
+		*/
+		function createServedEntryForm(options) {
+			const { forms, entryIds } = options;
+			const fallbackId = entryIds[0];
+			const namespaceId = entryIds[entryIds.length - 1];
+			const listeners = /* @__PURE__ */ new Set();
+			let boundId;
+			let bound;
+			let offBound;
+			let snapshot = pendingSnapshot();
+			/** Republish: the delegated snapshot when one is bound, the pending one otherwise. */
+			const publish = () => {
+				if (bound !== void 0) snapshot = bound.getSnapshot();
+				for (const listener of [...listeners]) listener();
+			};
+			/**
+			* The entry id the mirror currently justifies. An unanswered or empty mirror
+			* is not evidence of absence, so it keeps the first candidate; a mirror that
+			* answers without any of this package's rows leaves the namespace itself.
+			* @returns the entry id to bind.
+			*/
+			const resolve = () => {
+				let served;
+				try {
+					served = forms.describe().getSnapshot().view?.namespaces.map((row) => row.ns);
+				} catch {
+					served = void 0;
+				}
+				if (served === void 0 || served.length === 0) return fallbackId;
+				return entryIds.find((id) => served.includes(id)) ?? namespaceId;
+			};
+			/** Bind (or rebind) the resolved entry's form; a no-op while it is unchanged. */
+			const bind = () => {
+				const target = resolve();
+				if (target === boundId) return;
+				offBound?.();
+				offBound = void 0;
+				let form;
+				try {
+					form = forms.get(target);
+				} catch {
+					boundId = void 0;
+					return;
+				}
+				boundId = target;
+				bound = form;
+				offBound = form.subscribe(() => {
+					publish();
+				});
+				publish();
+			};
+			try {
+				forms.describe().subscribe(() => {
+					bind();
+				});
+			} catch {}
+			bind();
+			return {
+				getSnapshot: () => snapshot,
+				subscribe: (listener) => {
+					listeners.add(listener);
+					return () => {
+						listeners.delete(listener);
+					};
+				},
+				set: (field, value) => bound?.set(field, value) ?? Promise.resolve(false),
+				unset: (field) => bound?.unset(field) ?? Promise.resolve(false),
+				mutate: (ops, expectedRevision) => bound?.mutate(ops, expectedRevision) ?? Promise.resolve(false)
+			};
+		}
+		//#endregion
 		//#region src/client/index.ts
 		/**
 		* Remote control — browser half. Registers the `remote` dictionaries, the
@@ -5689,13 +5307,36 @@ window.__ModuleLoader__.load({
 		*/
 		/** Dictionary namespace owned by this plugin. */
 		const NS = "remote";
-		/** Settings namespace the remote-control card edits (the Host plugin registers it). */
+		/**
+		* Settings namespace the remote-control card edits: the family identity of
+		* this plugin's own settings form, and the row id a standalone bundle install
+		* carries.
+		*/
 		const REMOTE_WEB_UI_NS = "remote-web-ui";
+		/** Profile entry id the family aggregate's generated row carries. */
+		const AGGREGATE_ENTRY_ID = "web-ui-remote-web-ui";
+		/** Profile entry ids this package's patch rows carry, most specific first. */
 		const REMOTE_WEB_UI_ENTRY_IDS = [
-			"web-ui-remote-web-ui",
+			AGGREGATE_ENTRY_ID,
 			"ui-remote-web-ui",
 			REMOTE_WEB_UI_NS
 		];
+		/**
+		* The profile entry id this package's own row carries, for a page that serves
+		* no family binder.
+		*
+		* The shared describe mirror answers asynchronously, so at plugin activation it
+		* usually holds nothing yet — and an unanswered or empty mirror is not evidence
+		* of absence. Binding the bare namespace there left the card bound to an entry
+		* the Host does not serve, and the form is bound once per session, so the card
+		* never recovered (every save answered `No configurable plugin entry`). The
+		* aggregate row id matches nearly every deployment; only a mirror that answers
+		* with OTHER plugins' rows falls back to the namespace itself (the pre-0.1.7
+		* keying shape), because that answer is the one that actually proves this
+		* package's own row is not served.
+		* @param forms - the shared configuration forms service.
+		* @returns the entry id to bind.
+		*/
 		function servedEntryId(forms) {
 			let served;
 			try {
@@ -5703,9 +5344,29 @@ window.__ModuleLoader__.load({
 			} catch {
 				served = void 0;
 			}
-			if (!served || served.length === 0) return REMOTE_WEB_UI_NS;
+			if (served === void 0 || served.length === 0) return AGGREGATE_ENTRY_ID;
 			return REMOTE_WEB_UI_ENTRY_IDS.find((id) => served.includes(id)) ?? REMOTE_WEB_UI_NS;
 		}
+		/**
+		* Bind the settings form the remote-control card reads and writes.
+		*
+		* The family binder comes first: it resolves this package's family namespace
+		* onto the profile entry id the Host serves the form under, and keeps the
+		* loopback bridge as its own fallback. A page without that group (or one where
+		* its client half has not applied yet) binds through the shared forms service,
+		* on the entry id the describe mirror justifies and rebound as soon as the
+		* mirror answers — see {@link createServedEntryForm}.
+		* @param ctx - client context carrying the family binder and/or the shared forms service.
+		* @returns the form the card stages and saves through.
+		*/
+		function bindSettingsForm(ctx) {
+			const family = ctx.get("webUiSettings");
+			if (family !== void 0 && typeof family.bind === "function") return family.bind({ namespace: REMOTE_WEB_UI_NS });
+			return createServedEntryForm({
+				forms: ctx.configForms,
+				entryIds: REMOTE_WEB_UI_ENTRY_IDS
+			});
+		}
 		/** Heartbeat cadence from a paired phone (presence + revocation liveness). */
 		const HEARTBEAT_INTERVAL_MS = 1e4;
 		/** Services required by this plugin. */
@@ -5756,8 +5417,7 @@ window.__ModuleLoader__.load({
 			};
 			const t = ctx.locale.bind(NS);
 			if (adapt !== void 0) adapt.translate = t;
-			const family = ctx.get("webUiSettings");
-			const settingsForm = family !== void 0 && typeof family.bind === "function" ? family.bind({ namespace: REMOTE_WEB_UI_NS }) : ctx.configForms.get(servedEntryId(ctx.configForms));
+			const settingsForm = bindSettingsForm(ctx);
 			const enabled = () => {
 				const snapshot = settingsForm.getSnapshot();
 				return snapshot.status === "ready" ? snapshot.value?.enabled ?? true : snapshot.status === "unavailable";
@@ -5860,7 +5520,7 @@ window.__ModuleLoader__.load({
 				}
 				showFenceNotice();
 			};
-			const channelActive = () => remoteChannelRequired(window.location.hostname, settingsForm.getSnapshot(), hostPairingPolicy);
+			const channelActive = () => remoteChannelRequired(pageOriginFacts(window), settingsForm.getSnapshot(), hostPairingPolicy);
 			const bootSeat = () => window[REMOTE_CHANNEL_BOOT_GLOBAL];
 			const syncChannel = () => {
 				const transition = channelTransition(channelActive(), disposeChannel !== void 0);
@@ -5892,7 +5552,8 @@ window.__ModuleLoader__.load({
 			};
 			settingsForm.subscribe(syncChannel);
 			syncChannel();
-			if (!isLoopbackHostname(window.location.hostname) && settingsForm.getSnapshot().status !== "ready") readPairGatePolicy().then((policy) => {
+			const pageOrigin = pageOriginFacts(window);
+			if (!isLocalPage(pageOrigin.hostname, pageOrigin.protocol, pageOrigin.transportOwnsHost) && settingsForm.getSnapshot().status !== "ready") readPairGatePolicy().then((policy) => {
 				hostPairingPolicy = policy.requirePairingForLan;
 				syncChannel();
 				if (hostPairingPolicy && unpairedWhilePolicyPending) showFenceNotice();
@@ -5918,7 +5579,9 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		exports.apply = apply;
+		exports.bindSettingsForm = bindSettingsForm;
 		exports.inject = inject;
+		exports.servedEntryId = servedEntryId;
 		return module.exports;
 	}
 });