dsh-deeppilot 0.4.0 → 0.5.0

package/lib/client.js

@@ -27,21 +27,48 @@ window.__ModuleLoader__.load({
 			enumerable: true
 		}) : target, mod));
 		//#endregion
-		let _deepseek_ai_dsh_client_runtime_client = require("@deepseek-ai/dsh-client-runtime/client");
 		let react = require("react");
+		//#region src/client/snapshot-store.ts
+		function createSnapshotStore(initial) {
+			let snapshot = initial;
+			const listeners = /* @__PURE__ */ new Set();
+			return {
+				getSnapshot: () => snapshot,
+				subscribe(listener) {
+					listeners.add(listener);
+					return () => listeners.delete(listener);
+				},
+				set(value) {
+					if (Object.is(value, snapshot)) return;
+					snapshot = value;
+					for (const listener of listeners) listener();
+				}
+			};
+		}
+		//#endregion
+		//#region src/device-auth.ts
+		const DEVICE_SCOPES = [
+			"sessions.read",
+			"prompt.send",
+			"sessions.manage",
+			"interactions.respond",
+			"notifications.register"
+		];
+		const DEFAULT_DEVICE_SCOPES = DEVICE_SCOPES;
+		function normalizeDeviceScopes(value) {
+			if (!Array.isArray(value)) return [...DEFAULT_DEVICE_SCOPES];
+			const allowed = new Set(DEVICE_SCOPES);
+			return [...new Set(value.filter((scope) => typeof scope === "string" && allowed.has(scope)))];
+		}
+		//#endregion
 		//#region src/report-wire.ts
 		/** The npm package identity both contribution registrations claim. */
 		const REPORT_REMOTE_PACKAGE = "dsh-deeppilot";
 		/** Canonical `<namespace>/<method>` endpoint of the report Remote. */
 		const REPORT_ENDPOINT = "deeppilot/report";
-		/** Explicit, user-triggered endpoint for revealing the pairing secret. */
-		const REVEAL_TOKEN_ENDPOINT = "deeppilot/revealToken";
-		/**
-		* Explicit, user-triggered endpoint that replaces the pairing secret. The old
-		* token stops working immediately; the fresh one is returned so the page can
-		* show/QR it right away.
-		*/
-		const ROTATE_TOKEN_ENDPOINT = "deeppilot/rotateToken";
+		const BEGIN_PAIRING_ENDPOINT = "deeppilot/beginPairing";
+		const REVOKE_DEVICE_ENDPOINT = "deeppilot/revokeDevice";
+		const SET_DEVICE_SCOPES_ENDPOINT = "deeppilot/setDeviceScopes";
 		function reject(field) {
 			throw new TypeError(`deeppilot/report result: invalid ${field}`);
 		}
@@ -89,6 +116,9 @@ window.__ModuleLoader__.load({
 				appVersion: str(s, "appVersion", "device.appVersion"),
 				firstSeenTs: int(s, "firstSeenTs", "device.firstSeenTs"),
 				lastSeenTs: int(s, "lastSeenTs", "device.lastSeenTs"),
+				fingerprint: str(s, "fingerprint", "device.fingerprint"),
+				scopes: normalizeDeviceScopes(s.scopes),
+				...s.revokedAt !== void 0 ? { revokedAt: int(s, "revokedAt", "device.revokedAt") } : {},
 				...apns ? { apns } : {}
 			};
 		}
@@ -196,8 +226,8 @@ window.__ModuleLoader__.load({
 				...s.updateAvailable === true ? { updateAvailable: true } : {},
 				...typeof releaseUrl === "string" && releaseUrl.length > 0 ? { releaseUrl } : {},
 				enabled: bool(s, "enabled", "enabled"),
-				tokenPath: str(s, "tokenPath", "tokenPath"),
-				tokenReady: bool(s, "tokenReady", "tokenReady"),
+				identityPath: str(s, "identityPath", "identityPath"),
+				pairingReady: bool(s, "pairingReady", "pairingReady"),
 				activeConnections: int(s, "activeConnections", "activeConnections"),
 				historyBufferMax: int(s, "historyBufferMax", "historyBufferMax"),
 				debug: bool(s, "debug", "debug"),
@@ -209,10 +239,24 @@ window.__ModuleLoader__.load({
 		const reportSchema = { parse: parseReport };
 		const relayTestSchema = { parse: parseRelayTestResult };
 		const pushTestSchema = { parse: parsePushTestResult };
-		const pairingTokenSchema = { parse(value) {
-			if (typeof value !== "string" || value.length < 32) throw new TypeError("deeppilot/revealToken result: invalid token");
+		const pairingGrantSchema = { parse(value) {
+			const s = rec(value, "pairing grant");
+			const code = str(s, "code", "pairingGrant.code");
+			if (code.length < 32) reject("pairingGrant.code");
+			return {
+				code,
+				expiresAt: int(s, "expiresAt", "pairingGrant.expiresAt"),
+				audience: str(s, "audience", "pairingGrant.audience")
+			};
+		} };
+		const deviceIdSchema = { parse(value) {
+			if (typeof value !== "string" || !/^[A-Za-z0-9_-]{43}$/.test(value)) reject("deviceId");
 			return value;
 		} };
+		const scopesSchema = { parse(value) {
+			if (!Array.isArray(value) || value.some((scope) => typeof scope !== "string" || !DEVICE_SCOPES.includes(scope))) reject("scopes");
+			return normalizeDeviceScopes(value);
+		} };
 		const REPORT_REMOTE_CONTRIBUTION = {
 			package: REPORT_REMOTE_PACKAGE,
 			descriptors: [
@@ -230,29 +274,72 @@ window.__ModuleLoader__.load({
 					}
 				},
 				{
-					id: `${REPORT_REMOTE_PACKAGE}#${REVEAL_TOKEN_ENDPOINT}`,
+					id: `${REPORT_REMOTE_PACKAGE}#${BEGIN_PAIRING_ENDPOINT}`,
 					service: "deeppilotReport",
 					namespace: "deeppilot",
-					method: "revealToken",
+					method: "beginPairing",
 					invocation: { kind: "direct" },
 					parameters: [],
 					result: {
 						mode: "strict",
-						typeSymbol: `${REPORT_REMOTE_PACKAGE}#PairingToken`,
-						schema: pairingTokenSchema
+						typeSymbol: `${REPORT_REMOTE_PACKAGE}#PairingGrantSnapshot`,
+						schema: pairingGrantSchema
 					}
 				},
 				{
-					id: `${REPORT_REMOTE_PACKAGE}#${ROTATE_TOKEN_ENDPOINT}`,
+					id: `${REPORT_REMOTE_PACKAGE}#${REVOKE_DEVICE_ENDPOINT}`,
 					service: "deeppilotReport",
 					namespace: "deeppilot",
-					method: "rotateToken",
+					method: "revokeDevice",
 					invocation: { kind: "direct" },
-					parameters: [],
+					parameters: [{
+						name: "deviceId",
+						wire: "deviceId",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: `${REPORT_REMOTE_PACKAGE}#DeviceId`,
+							schema: deviceIdSchema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: `${REPORT_REMOTE_PACKAGE}#Boolean`,
+						schema: { parse(value) {
+							if (typeof value !== "boolean") reject("boolean");
+							return value;
+						} }
+					}
+				},
+				{
+					id: `${REPORT_REMOTE_PACKAGE}#${SET_DEVICE_SCOPES_ENDPOINT}`,
+					service: "deeppilotReport",
+					namespace: "deeppilot",
+					method: "setDeviceScopes",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "deviceId",
+						wire: "deviceId",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: `${REPORT_REMOTE_PACKAGE}#DeviceId`,
+							schema: deviceIdSchema
+						}
+					}, {
+						name: "scopes",
+						wire: "scopes",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: `${REPORT_REMOTE_PACKAGE}#DeviceScopes`,
+							schema: scopesSchema
+						}
+					}],
 					result: {
 						mode: "strict",
-						typeSymbol: `${REPORT_REMOTE_PACKAGE}#PairingToken`,
-						schema: pairingTokenSchema
+						typeSymbol: `${REPORT_REMOTE_PACKAGE}#DeviceScopes`,
+						schema: scopesSchema
 					}
 				},
 				{
@@ -319,7 +406,7 @@ window.__ModuleLoader__.load({
 			zh: {
 				"nav": "DeepPilot",
 				"meta.title": "DeepPilot",
-				"meta.intro": "把 iPhone 与这台电脑上的 DeepSeek Harness（DSH）连接起来（协议 v1）。",
+				"meta.intro": "把 iPhone 与这台电脑上的 DeepSeek Harness（DSH）连接起来（协议 v2）。",
 				"meta.refresh": "刷新",
 				"master.title": "DeepPilot 连接",
 				"master.loading": "正在读取配置…",
@@ -329,6 +416,13 @@ window.__ModuleLoader__.load({
 				"remote.on": "已配置：内嵌 Funnel 会自动启动并同步状态。",
 				"remote.off": "关闭：仅保留局域网连接。",
 				"remote.openAuth": "打开授权页面",
+				"remote.advancedSettings": "高级设置",
+				"remote.limitTitle": "每个公网来源的连接上限",
+				"remote.limitDescription": "默认 8，范围 1–16。应用后 Funnel 会重启，已有远程连接将短暂重连。",
+				"remote.limitApply": "应用",
+				"remote.limitApplied": "连接上限已保存，远程入口正在重新加载。",
+				"remote.limitInvalid": "请输入 1–16 之间的整数。",
+				"remote.limitFailed": "连接上限保存失败：",
 				"phase.disabled": "未启用",
 				"phase.starting": "正在启动",
 				"phase.login_required": "等待 Tailscale 授权",
@@ -338,6 +432,9 @@ window.__ModuleLoader__.load({
 				"phase.stopped": "已停止",
 				"phase.unknown": "状态未知",
 				"panel.activeConnections": "当前连接",
+				"panel.identity": "设备身份认证",
+				"panel.identityReady": "v2 已就绪",
+				"panel.identityNotReady": "不可用",
 				"panel.token": "配对 Token",
 				"panel.tokenReady": "已就绪",
 				"panel.tokenNotReady": "未生成",
@@ -367,13 +464,17 @@ window.__ModuleLoader__.load({
 				"pair.qrGenerating": "生成中…",
 				"pair.qrAutoHidden": "配对二维码已自动隐藏",
 				"pair.qrFailed": "二维码生成失败：",
+				"pair.codeLabel": "配对码（模拟器可手动输入）",
+				"pair.codeCopyDone": "配对码已复制",
+				"pair.codeCopyFailed": "配对码复制失败：",
 				"pair.publicCopyDone": "公网地址已复制",
 				"pair.publicCopyFailed": "复制失败：",
-				"pair.qrHint": "二维码包含{kind}地址和配对 Token，将在 60 秒后自动隐藏。",
+				"pair.qrHint": "二维码包含{kind}地址和一次性配对码；配对码 5 分钟后失效，二维码将在 60 秒后自动隐藏。",
 				"advanced.summary": "高级信息",
 				"advanced.protocolVersion": "协议版本",
 				"advanced.serverVersion": "服务器版本",
 				"advanced.tokenPath": "Token 路径",
+				"advanced.identityPath": "设备注册表路径",
 				"advanced.bufferMax": "重放缓冲上限",
 				"advanced.frames": " 帧",
 				"push.relayTitle": "离线推送中继",
@@ -394,16 +495,22 @@ window.__ModuleLoader__.load({
 				"push.relayStep.enroll": "自动注册",
 				"push.prefix.ok": "✓ ",
 				"push.prefix.fail": "✗ ",
-				"devices.title": "已配对设备",
+				"devices.title": "设备",
 				"devices.col.name": "设备",
 				"devices.col.appVersion": "App 版本",
 				"devices.col.push": "离线推送",
 				"devices.col.lastSeen": "最近在线",
+				"devices.col.fingerprint": "密钥指纹",
+				"devices.col.actions": "操作",
+				"devices.revoke": "删除",
+				"devices.revokeConfirm": "确定删除设备“{name}”吗？该设备会立即断开，再次使用时需要重新配对。",
+				"devices.revoked": "设备已删除",
+				"devices.revokeFailed": "设备删除失败：",
 				"devices.pushRegistered": "已注册（",
 				"devices.pushNotRegistered": "未注册",
 				"devices.pushEnvProduction": "生产",
 				"devices.pushEnvDevelopment": "开发",
-				"devices.empty": "还没有设备配对过。在 iPhone 上的 DeepPilot App 中扫码或填入本机地址与 Token 即可配对。",
+				"devices.empty": "还没有 v2 设备。请在 iPhone 上扫描一次性配对二维码。",
 				"help.remoteTitle": "远程连接帮助",
 				"help.recommended": "推荐设置流程",
 				"help.step1": "先打开\"DeepPilot 连接\"，再打开\"远程连接（Tailscale Funnel）\"。",
@@ -425,9 +532,9 @@ window.__ModuleLoader__.load({
 				"help.faq3": "已有公网地址但手机超时：等待几分钟后重试，同时确认这台电脑未休眠、DSH 正在运行，再重新扫描最新二维码。",
 				"help.faq4": "没有公网地址：检查 Tailscale 授权是否完成，然后点击\"刷新\"或重启 DSH。",
 				"help.securityTitle": "安全说明",
-				"help.security1": "Funnel 公网地址可从互联网访问，但手机接口仍需要配对 Token。不要分享二维码、Token 或包含它们的截图。",
-				"help.security2": "怀疑 Token 泄露时，点击上方\"更换\"生成新 Token：旧 Token 立即失效，所有已连接设备会被断开并需要重新配对。",
-				"help.security3": "插件只通过 Funnel 转发 /phone 和 /phone/health，不会新增 3098 端口。",
+				"help.security1": "Funnel 公网地址可从互联网访问，但连接必须使用已配对设备的 P-256 私钥签名；不要分享仍在有效期内的配对二维码。",
+				"help.security2": "丢失设备时可在设备列表中单独删除；该设备会立即断开，不影响其他手机。",
+				"help.security3": "插件只通过 Funnel 转发 /phone、/phone/pair 和 /phone/health，不会新增 3098 端口。",
 				"help.security4": "局域网连接沿用 DSH 的 3080 端口；仅在可信网络中使用，不建议直接把 3080 暴露到公网。",
 				"help.security5": "关闭远程连接开关会停止 Funnel，但不会影响可用的局域网连接。",
 				"help.funnelDocs": "Tailscale Funnel 官方文档",
@@ -441,13 +548,15 @@ window.__ModuleLoader__.load({
 				"diag.missingReportHook": "useDeepPilotReport hook 缺失",
 				"diag.missingEnabledHook": "useDeepPilotEnabled hook 缺失",
 				"diag.missingRemoteEnabledHook": "useDeepPilotRemoteEnabled hook 缺失",
+				"diag.missingRemoteLimitHook": "useDeepPilotRemoteConnectionLimit hook 缺失",
 				"diag.missingRefresh": "refresh 回调缺失",
-				"diag.missingReveal": "revealPairingToken 回调缺失",
-				"diag.missingRotate": "rotatePairingToken 回调缺失",
+				"diag.missingReveal": "beginPairing 回调缺失",
+				"diag.missingRotate": "revokeDevice 回调缺失",
 				"diag.missingTestRelay": "testRelay 回调缺失",
 				"diag.missingTestPush": "testPush 回调缺失",
 				"diag.missingSetEnabled": "setDeepPilotEnabled 回调缺失",
 				"diag.missingSetRemote": "setDeepPilotRemoteEnabled 回调缺失",
+				"diag.missingSetRemoteLimit": "setDeepPilotRemoteConnectionLimit 回调缺失",
 				"diag.renderError": "渲染异常: ",
 				"diag.prefix": "diag: ",
 				"clipboard.rejected": "浏览器拒绝了剪贴板写入",
@@ -460,7 +569,7 @@ window.__ModuleLoader__.load({
 			en: {
 				"nav": "DeepPilot",
 				"meta.title": "DeepPilot",
-				"meta.intro": "Connect your iPhone to DeepSeek Harness (DSH) on this Mac (protocol v1).",
+				"meta.intro": "Connect your iPhone to DeepSeek Harness (DSH) on this Mac (protocol v2).",
 				"meta.refresh": "Refresh",
 				"master.title": "DeepPilot connection",
 				"master.loading": "Loading settings…",
@@ -470,6 +579,13 @@ window.__ModuleLoader__.load({
 				"remote.on": "Configured: the embedded Funnel will start and sync state automatically.",
 				"remote.off": "Off: LAN connections only.",
 				"remote.openAuth": "Open authorization page",
+				"remote.advancedSettings": "Advanced settings",
+				"remote.limitTitle": "Connections per public source",
+				"remote.limitDescription": "Default 8; range 1–16. Applying restarts Funnel and briefly reconnects existing remote clients.",
+				"remote.limitApply": "Apply",
+				"remote.limitApplied": "Connection limit saved; the remote endpoint is reloading.",
+				"remote.limitInvalid": "Enter an integer from 1 to 16.",
+				"remote.limitFailed": "Failed to save connection limit: ",
 				"phase.disabled": "Disabled",
 				"phase.starting": "Starting",
 				"phase.login_required": "Awaiting Tailscale authorization",
@@ -479,6 +595,9 @@ window.__ModuleLoader__.load({
 				"phase.stopped": "Stopped",
 				"phase.unknown": "Status unknown",
 				"panel.activeConnections": "Active connections",
+				"panel.identity": "Device authentication",
+				"panel.identityReady": "v2 ready",
+				"panel.identityNotReady": "Unavailable",
 				"panel.token": "Pairing token",
 				"panel.tokenReady": "Ready",
 				"panel.tokenNotReady": "Not generated",
@@ -508,13 +627,17 @@ window.__ModuleLoader__.load({
 				"pair.qrGenerating": "Generating…",
 				"pair.qrAutoHidden": "Pairing QR auto-hidden",
 				"pair.qrFailed": "QR generation failed: ",
+				"pair.codeLabel": "Pairing code (enter manually in Simulator)",
+				"pair.codeCopyDone": "Pairing code copied",
+				"pair.codeCopyFailed": "Failed to copy pairing code: ",
 				"pair.publicCopyDone": "Public URL copied",
 				"pair.publicCopyFailed": "Copy failed: ",
-				"pair.qrHint": "The QR contains a {kind} address and the pairing token; it auto-hides after 60 seconds.",
+				"pair.qrHint": "The QR contains a {kind} address and a single-use pairing code. The code expires after 5 minutes; the QR auto-hides after 60 seconds.",
 				"advanced.summary": "Advanced info",
 				"advanced.protocolVersion": "Protocol version",
 				"advanced.serverVersion": "Server version",
 				"advanced.tokenPath": "Token path",
+				"advanced.identityPath": "Device registry path",
 				"advanced.bufferMax": "Replay buffer cap",
 				"advanced.frames": " frames",
 				"push.relayTitle": "Offline push relay",
@@ -535,16 +658,22 @@ window.__ModuleLoader__.load({
 				"push.relayStep.enroll": "Auto enrollment",
 				"push.prefix.ok": "✓ ",
 				"push.prefix.fail": "✗ ",
-				"devices.title": "Paired devices",
+				"devices.title": "Devices",
 				"devices.col.name": "Device",
 				"devices.col.appVersion": "App version",
 				"devices.col.push": "Push",
 				"devices.col.lastSeen": "Last seen",
+				"devices.col.fingerprint": "Key fingerprint",
+				"devices.col.actions": "Actions",
+				"devices.revoke": "Delete",
+				"devices.revokeConfirm": "Delete “{name}”? It will disconnect immediately and must pair again before reconnecting.",
+				"devices.revoked": "Device deleted",
+				"devices.revokeFailed": "Failed to delete device: ",
 				"devices.pushRegistered": "Registered (",
 				"devices.pushNotRegistered": "Not registered",
 				"devices.pushEnvProduction": "Production",
 				"devices.pushEnvDevelopment": "Development",
-				"devices.empty": "No devices paired yet. Scan the QR code or enter the host address + token in DeepPilot on iPhone to pair.",
+				"devices.empty": "No v2 devices yet. Scan a single-use pairing QR code in DeepPilot on iPhone.",
 				"help.remoteTitle": "Remote connection help",
 				"help.recommended": "Recommended setup",
 				"help.step1": "Turn on \"DeepPilot connection\" first, then \"Remote connection (Tailscale Funnel)\".",
@@ -566,9 +695,9 @@ window.__ModuleLoader__.load({
 				"help.faq3": "Public URL exists but the phone times out: wait a few minutes, confirm the Mac is awake and DSH is running, then re-scan the latest QR code.",
 				"help.faq4": "No public URL: check that Tailscale authorization completed, then click \"Refresh\" or restart DSH.",
 				"help.securityTitle": "Security notes",
-				"help.security1": "A Funnel public URL is reachable from the public Internet, but the phone interface still needs the pairing token. Do not share the QR code, the token, or any screenshot that contains them.",
-				"help.security2": "If you suspect the token leaked, click \"Rotate\" above to mint a new one. The old token stops working immediately and every paired device must re-pair.",
-				"help.security3": "The plugin only forwards /phone and /phone/health through Funnel; no new port 3098 is opened.",
+				"help.security1": "A Funnel URL is public, but every connection requires a signature from a paired device P-256 private key. Do not share a pairing QR while it is valid.",
+				"help.security2": "If a device is lost, delete only that device from the list. It disconnects immediately; other phones stay paired.",
+				"help.security3": "The plugin only forwards /phone, /phone/pair, and /phone/health through Funnel; no new port 3098 is opened.",
 				"help.security4": "LAN connections reuse DSH's existing 3080 port. Use them only on trusted networks; do not expose 3080 directly to the public Internet.",
 				"help.security5": "Disabling the remote switch stops Funnel but does not affect any LAN connection you already have.",
 				"help.funnelDocs": "Tailscale Funnel docs",
@@ -582,13 +711,15 @@ window.__ModuleLoader__.load({
 				"diag.missingReportHook": "useDeepPilotReport hook missing",
 				"diag.missingEnabledHook": "useDeepPilotEnabled hook missing",
 				"diag.missingRemoteEnabledHook": "useDeepPilotRemoteEnabled hook missing",
+				"diag.missingRemoteLimitHook": "useDeepPilotRemoteConnectionLimit hook missing",
 				"diag.missingRefresh": "refresh callback missing",
-				"diag.missingReveal": "revealPairingToken callback missing",
-				"diag.missingRotate": "rotatePairingToken callback missing",
+				"diag.missingReveal": "beginPairing callback missing",
+				"diag.missingRotate": "revokeDevice callback missing",
 				"diag.missingTestRelay": "testRelay callback missing",
 				"diag.missingTestPush": "testPush callback missing",
 				"diag.missingSetEnabled": "setDeepPilotEnabled callback missing",
 				"diag.missingSetRemote": "setDeepPilotRemoteEnabled callback missing",
+				"diag.missingSetRemoteLimit": "setDeepPilotRemoteConnectionLimit callback missing",
 				"diag.renderError": "Render error: ",
 				"diag.prefix": "diag: ",
 				"clipboard.rejected": "Clipboard write rejected by the browser",
@@ -694,6 +825,10 @@ window.__ModuleLoader__.load({
 			".pbb-actionDanger:not(:disabled){color:#fff;background:var(--dsw-alias-label-error);border-color:var(--dsw-alias-label-error)}",
 			".pbb-qrPanel{display:flex;flex-direction:column;align-items:center;gap:9px;padding:12px 0 4px}",
 			".pbb-qrImage{width:240px;height:240px;max-width:100%;background:#fff;border-radius:10px;padding:8px;box-sizing:border-box}",
+			".pbb-pairCodeBlock{width:min(100%,420px);display:flex;flex-direction:column;gap:5px}",
+			".pbb-pairCodeLabel{font-size:11px;color:var(--dsw-alias-label-tertiary);text-align:center}",
+			".pbb-pairCodeRow{display:flex;align-items:center;justify-content:center;gap:8px;flex-wrap:wrap}",
+			".pbb-pairCode{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:15px;line-height:1.4;letter-spacing:.04em;color:var(--dsw-alias-label-primary);word-break:break-all;text-align:center;user-select:all}",
 			".pbb-qrHint{max-width:420px;text-align:center;font-size:11px;line-height:1.5;color:var(--dsw-alias-label-tertiary);margin:0}",
 			".pbb-switchRow{padding:12px 0;display:flex;align-items:center;gap:12px}",
 			".pbb-switchRow+.pbb-field{border-top:1px solid var(--dsw-alias-border-l2)}",
@@ -711,6 +846,12 @@ window.__ModuleLoader__.load({
 			".pbb-switchOn{background:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary))}",
 			".pbb-switchOn::after{transform:translateX(16px);background:#fff}",
 			".pbb-switch:disabled{opacity:.5;cursor:default}",
+			".pbb-limitRow{border-top:1px solid var(--dsw-alias-border-l2);padding:12px 0;display:flex;align-items:center;gap:12px}",
+			".pbb-limitNested{border-top:0;padding:0}",
+			".pbb-limitControl{display:flex;align-items:center;gap:8px;flex:none}",
+			".pbb-numberInput{width:72px;box-sizing:border-box;border:1px solid var(--dsw-alias-border-l2);border-radius:7px;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-primary);font:inherit;font-size:13px;padding:5px 8px}",
+			".pbb-numberInput:focus{outline:2px solid var(--dsw-alias-state-success-primary,#22a06b);outline-offset:1px}",
+			".pbb-numberInput:disabled{opacity:.5}",
 			".pbb-help{border-top:1px solid var(--dsw-alias-border-l2);padding:12px 0}",
 			".pbb-help summary{cursor:pointer;color:var(--dsw-alias-label-primary);font-size:13px;font-weight:500;user-select:none}",
 			".pbb-help summary:hover{color:var(--dsw-alias-label-secondary)}",
@@ -3139,11 +3280,7 @@ window.__ModuleLoader__.load({
 				return SvgRenderer.render(data, opts);
 			});
 		})))(), 1);
-		/**
-		* Protocol-v1 compatibility identifier used by the TestFlight build currently
-		* under review. This is wire data, not the plugin or product display name.
-		*/
-		const PAIRING_QR_TYPE = "dsh-pocket-pairing";
+		const PAIRING_QR_TYPE = "deeppilot-pairing";
 		function isLoopbackHostname(hostname) {
 			const normalized = hostname.toLowerCase();
 			return normalized === "localhost" || normalized.endsWith(".localhost") || normalized === "[::1]" || normalized === "::1" || normalized.startsWith("127.");
@@ -3173,8 +3310,8 @@ window.__ModuleLoader__.load({
 				kind: "lan"
 			};
 		}
-		/** Encode an out-of-band pairing payload without putting the token in a URL. */
-		function encodePairingQRPayload(host, token) {
+		/** Encode a short-lived, single-use pairing grant without URL credentials. */
+		function encodePairingQRPayload(host, grant) {
 			const normalizedHost = host.trim();
 			const parsed = new URL(normalizedHost);
 			if (![
@@ -3183,15 +3320,21 @@ window.__ModuleLoader__.load({
 				"ws:",
 				"wss:"
 			].includes(parsed.protocol) || parsed.hostname === "" || parsed.username !== "" || parsed.password !== "") throw new TypeError("pairing QR requires a valid HTTP(S)/WS(S) host");
-			if (token.trim().length < 32) throw new TypeError("pairing token is invalid");
+			if (grant.code.trim().length < 32 || !Number.isInteger(grant.expiresAt) || grant.expiresAt <= Date.now()) throw new TypeError("pairing grant is invalid or expired");
+			if (!grant.audience.startsWith("deeppilot:")) throw new TypeError("pairing audience is invalid");
 			const payload = {
-				v: 1,
+				v: 2,
 				type: PAIRING_QR_TYPE,
 				host: normalizedHost,
-				token: token.trim()
+				code: grant.code.trim(),
+				expiresAt: grant.expiresAt,
+				audience: grant.audience
 			};
 			return JSON.stringify(payload);
 		}
+		function normalizeFunnelConnectionLimit(value) {
+			return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 16 ? value : 8;
+		}
 		//#endregion
 		//#region src/client/settings-page.ts
 		async function writeClipboard(t, value) {
@@ -3245,12 +3388,11 @@ window.__ModuleLoader__.load({
 		};
 		/** Slot component: hooks come from the slot renderer, named use<Key>. */
 		function DeepPilotSettingsPage(props) {
-			const [revealedToken, setRevealedToken] = (0, react.useState)(null);
-			const [tokenBusy, setTokenBusy] = (0, react.useState)(false);
-			const [tokenMessage, setTokenMessage] = (0, react.useState)("");
-			const [rotateArmed, setRotateArmed] = (0, react.useState)(false);
-			const [remoteMessage, setRemoteMessage] = (0, react.useState)("");
+			const [addressMessage, setAddressMessage] = (0, react.useState)("");
+			const [remoteLimitDraft, setRemoteLimitDraft] = (0, react.useState)(String(8));
+			const [remoteLimitMessage, setRemoteLimitMessage] = (0, react.useState)("");
 			const [qrDataURL, setQRDataURL] = (0, react.useState)(null);
+			const [pairingGrant, setPairingGrant] = (0, react.useState)(null);
 			const [qrBusy, setQRBusy] = (0, react.useState)(false);
 			const [qrMessage, setQRMessage] = (0, react.useState)("");
 			const [relayTestBusy, setRelayTestBusy] = (0, react.useState)(false);
@@ -3259,6 +3401,8 @@ window.__ModuleLoader__.load({
 			const [pushTestBusy, setPushTestBusy] = (0, react.useState)(false);
 			const [pushTestResult, setPushTestResult] = (0, react.useState)(null);
 			const [pushTestError, setPushTestError] = (0, react.useState)("");
+			const [deviceBusy, setDeviceBusy] = (0, react.useState)(null);
+			const [deviceMessage, setDeviceMessage] = (0, react.useState)("");
 			(0, react.useEffect)(() => {
 				if (typeof props.refresh !== "function") return;
 				props.refresh();
@@ -3298,32 +3442,20 @@ window.__ModuleLoader__.load({
 				});
 			};
 			(0, react.useEffect)(() => {
-				if (revealedToken === null) return;
-				const timer = globalThis.setTimeout(() => {
-					setRevealedToken(null);
-					setTokenMessage(translateWith(props.t, "panel.tokenAutoHidden"));
-				}, 3e4);
-				return () => globalThis.clearTimeout(timer);
-			}, [revealedToken]);
-			(0, react.useEffect)(() => {
-				if (!tokenMessage) return;
-				const timer = globalThis.setTimeout(() => setTokenMessage(""), 4e3);
+				if (!addressMessage) return;
+				const timer = globalThis.setTimeout(() => setAddressMessage(""), 2500);
 				return () => globalThis.clearTimeout(timer);
-			}, [tokenMessage]);
+			}, [addressMessage]);
 			(0, react.useEffect)(() => {
-				if (!rotateArmed) return;
-				const timer = globalThis.setTimeout(() => setRotateArmed(false), 5e3);
+				if (!remoteLimitMessage) return;
+				const timer = globalThis.setTimeout(() => setRemoteLimitMessage(""), 4e3);
 				return () => globalThis.clearTimeout(timer);
-			}, [rotateArmed]);
-			(0, react.useEffect)(() => {
-				if (!remoteMessage) return;
-				const timer = globalThis.setTimeout(() => setRemoteMessage(""), 2500);
-				return () => globalThis.clearTimeout(timer);
-			}, [remoteMessage]);
+			}, [remoteLimitMessage]);
 			(0, react.useEffect)(() => {
 				if (qrDataURL === null) return;
 				const timer = globalThis.setTimeout(() => {
 					setQRDataURL(null);
+					setPairingGrant(null);
 					setQRMessage(translateWith(props.t, "pair.qrAutoHidden"));
 				}, 6e4);
 				return () => globalThis.clearTimeout(timer);
@@ -3339,6 +3471,8 @@ window.__ModuleLoader__.load({
 			let switchReady = false;
 			let remoteEnabled = false;
 			let remoteSwitchReady = false;
+			let remoteConnectionLimit = 8;
+			let remoteConnectionLimitReady = false;
 			let failed = false;
 			try {
 				if (typeof props.useDeepPilotReport !== "function") {
@@ -3359,8 +3493,8 @@ window.__ModuleLoader__.load({
 					if (state.status === "unavailable") diag.push(translateWith(props.t, "diag.settingsUnavailable"));
 				} else diag.push(translateWith(props.t, "diag.missingEnabledHook"));
 				if (typeof props.refresh !== "function") diag.push(translateWith(props.t, "diag.missingRefresh"));
-				if (typeof props.revealPairingToken !== "function") diag.push(translateWith(props.t, "diag.missingReveal"));
-				if (typeof props.rotatePairingToken !== "function") diag.push(translateWith(props.t, "diag.missingRotate"));
+				if (typeof props.beginPairing !== "function") diag.push(translateWith(props.t, "diag.missingReveal"));
+				if (typeof props.revokeDevice !== "function") diag.push(translateWith(props.t, "diag.missingRotate"));
 				if (typeof props.testRelay !== "function") diag.push(translateWith(props.t, "diag.missingTestRelay"));
 				if (typeof props.testPush !== "function") diag.push(translateWith(props.t, "diag.missingTestPush"));
 				if (typeof props.setDeepPilotEnabled !== "function") diag.push(translateWith(props.t, "diag.missingSetEnabled"));
@@ -3370,78 +3504,80 @@ window.__ModuleLoader__.load({
 					remoteSwitchReady = state.status === "ready";
 				} else diag.push(translateWith(props.t, "diag.missingRemoteEnabledHook"));
 				if (typeof props.setDeepPilotRemoteEnabled !== "function") diag.push(translateWith(props.t, "diag.missingSetRemote"));
+				if (typeof props.useDeepPilotRemoteConnectionLimit === "function") {
+					const state = props.useDeepPilotRemoteConnectionLimit((s) => s);
+					remoteConnectionLimit = state.value;
+					remoteConnectionLimitReady = state.status === "ready";
+				} else diag.push(translateWith(props.t, "diag.missingRemoteLimitHook"));
+				if (typeof props.setDeepPilotRemoteConnectionLimit !== "function") diag.push(translateWith(props.t, "diag.missingSetRemoteLimit"));
 			} catch (error) {
 				diag.push(translateWith(props.t, "diag.renderError") + (error instanceof Error ? error.message : String(error)));
 				failed = true;
 			}
-			const pairingTarget = report === null ? null : selectPairingTarget(report.remote, report.lanAddresses, typeof window === "undefined" ? void 0 : window.location.origin);
 			(0, react.useEffect)(() => {
-				setQRDataURL(null);
-			}, [pairingTarget?.host]);
-			const toggleToken = () => {
-				if (revealedToken !== null) {
-					setRevealedToken(null);
-					setTokenMessage("");
-					return;
-				}
-				if (typeof props.revealPairingToken !== "function") return;
-				setTokenBusy(true);
-				setTokenMessage("");
-				props.revealPairingToken().then((token) => {
-					setRevealedToken(token);
-				}, (error) => {
-					setTokenMessage(translateWith(props.t, "panel.tokenRevealFailed") + (error instanceof Error ? error.message : String(error)));
-				}).finally(() => setTokenBusy(false));
-			};
-			const copyToken = () => {
-				if (typeof props.revealPairingToken !== "function") return;
-				setTokenBusy(true);
-				setTokenMessage("");
-				(revealedToken !== null ? Promise.resolve(revealedToken) : props.revealPairingToken()).then((value) => writeClipboard(props.t, value)).then(() => setTokenMessage(translateWith(props.t, "panel.tokenCopied")), (error) => {
-					setTokenMessage(translateWith(props.t, "pair.publicCopyFailed") + (error instanceof Error ? error.message : String(error)));
-				}).finally(() => setTokenBusy(false));
-			};
-			const rotateToken = () => {
-				if (typeof props.rotatePairingToken !== "function") return;
-				if (!rotateArmed) {
-					setRotateArmed(true);
-					setRevealedToken(null);
-					setQRDataURL(null);
-					setTokenMessage(translateWith(props.t, "panel.tokenRotateWarning"));
+				setRemoteLimitDraft(String(remoteConnectionLimit));
+			}, [remoteConnectionLimit]);
+			const parsedRemoteLimit = Number(remoteLimitDraft);
+			const remoteLimitValid = Number.isInteger(parsedRemoteLimit) && parsedRemoteLimit >= 1 && parsedRemoteLimit <= 16;
+			const applyRemoteLimit = () => {
+				if (!remoteLimitValid || typeof props.setDeepPilotRemoteConnectionLimit !== "function") {
+					setRemoteLimitMessage(translateWith(props.t, "remote.limitInvalid"));
 					return;
 				}
-				setRotateArmed(false);
-				setTokenBusy(true);
-				setTokenMessage("");
-				props.rotatePairingToken().then((token) => {
-					setRevealedToken(token);
-					setTokenMessage(translateWith(props.t, "panel.tokenRotated"));
+				setRemoteLimitMessage("");
+				props.setDeepPilotRemoteConnectionLimit(parsedRemoteLimit).then(() => {
+					setRemoteLimitMessage(translateWith(props.t, "remote.limitApplied"));
 				}, (error) => {
-					setTokenMessage(translateWith(props.t, "panel.tokenRotateFailed") + (error instanceof Error ? error.message : String(error)));
-				}).finally(() => setTokenBusy(false));
+					setRemoteLimitMessage(translateWith(props.t, "remote.limitFailed") + (error instanceof Error ? error.message : String(error)));
+				});
 			};
+			const pairingTarget = report === null ? null : selectPairingTarget(report.remote, report.lanAddresses, typeof window === "undefined" ? void 0 : window.location.origin);
+			(0, react.useEffect)(() => {
+				setQRDataURL(null);
+				setPairingGrant(null);
+			}, [pairingTarget?.host]);
 			const copyRemoteURL = (url) => {
-				setRemoteMessage("");
+				setAddressMessage("");
 				writeClipboard(props.t, url).then(() => {
-					setRemoteMessage(translateWith(props.t, "pair.publicCopyDone"));
+					setAddressMessage(translateWith(props.t, "pair.publicCopyDone"));
 				}, (error) => {
-					setRemoteMessage(translateWith(props.t, "pair.publicCopyFailed") + (error instanceof Error ? error.message : String(error)));
+					setAddressMessage(translateWith(props.t, "pair.publicCopyFailed") + (error instanceof Error ? error.message : String(error)));
 				});
 			};
 			const showPairingQR = () => {
-				if (typeof props.revealPairingToken !== "function" || pairingTarget === null) return;
+				if (typeof props.beginPairing !== "function" || pairingTarget === null) return;
 				setQRBusy(true);
 				setQRMessage("");
 				setQRDataURL(null);
-				props.revealPairingToken().then((pairingToken) => import_browser.toString(encodePairingQRPayload(pairingTarget.host, pairingToken), {
-					type: "svg",
-					errorCorrectionLevel: "M",
-					margin: 2,
-					width: 512
-				})).then((svg) => setQRDataURL("data:image/svg+xml;charset=utf-8," + encodeURIComponent(svg)), (error) => {
+				setPairingGrant(null);
+				props.beginPairing().then(async (grant) => ({
+					grant,
+					svg: await import_browser.toString(encodePairingQRPayload(pairingTarget.host, grant), {
+						type: "svg",
+						errorCorrectionLevel: "M",
+						margin: 2,
+						width: 512
+					})
+				})).then(({ grant, svg }) => {
+					setPairingGrant(grant);
+					setQRDataURL("data:image/svg+xml;charset=utf-8," + encodeURIComponent(svg));
+				}, (error) => {
 					setQRMessage(translateWith(props.t, "pair.qrFailed") + (error instanceof Error ? error.message : String(error)));
 				}).finally(() => setQRBusy(false));
 			};
+			const hidePairingQR = () => {
+				setQRDataURL(null);
+				setPairingGrant(null);
+			};
+			const copyPairingCode = () => {
+				if (pairingGrant === null) return;
+				setQRMessage("");
+				writeClipboard(props.t, pairingGrant.code).then(() => {
+					setQRMessage(translateWith(props.t, "pair.codeCopyDone"));
+				}, (error) => {
+					setQRMessage(translateWith(props.t, "pair.codeCopyFailed") + (error instanceof Error ? error.message : String(error)));
+				});
+			};
 			const primaryRows = [];
 			const advancedRows = [];
 			if (report !== null) {
@@ -3450,23 +3586,8 @@ window.__ModuleLoader__.load({
 					key: "conn"
 				}, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "panel.activeConnections")), (0, react.createElement)("span", { className: "pbb-value" }, String(report.activeConnections)))), (0, react.createElement)("div", {
 					className: "pbb-field",
-					key: "token"
-				}, (0, react.createElement)("div", { className: "pbb-row pbb-tokenRow" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "panel.token")), (0, react.createElement)("code", { className: "pbb-token " + (report.tokenReady ? "pbb-ok" : "pbb-bad") }, report.tokenReady ? revealedToken ?? "••••••••••••" : translateWith(props.t, "panel.tokenNotReady")), report.tokenReady ? (0, react.createElement)("span", { className: "pbb-tokenActions" }, (0, react.createElement)("button", {
-					type: "button",
-					className: "pbb-action",
-					disabled: tokenBusy,
-					onClick: toggleToken
-				}, tokenBusy ? translateWith(props.t, "panel.tokenAction.showing") : revealedToken === null ? translateWith(props.t, "panel.tokenAction.show") : translateWith(props.t, "panel.tokenAction.hide")), (0, react.createElement)("button", {
-					type: "button",
-					className: "pbb-action",
-					disabled: tokenBusy,
-					onClick: copyToken
-				}, translateWith(props.t, "panel.tokenAction.copy")), (0, react.createElement)("button", {
-					type: "button",
-					className: "pbb-action" + (rotateArmed ? " pbb-actionDanger" : ""),
-					disabled: tokenBusy,
-					onClick: rotateToken
-				}, rotateArmed ? translateWith(props.t, "panel.tokenAction.rotateConfirm") : tokenBusy ? translateWith(props.t, "panel.tokenAction.rotating") : translateWith(props.t, "panel.tokenAction.rotate"))) : null), tokenMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, tokenMessage) : null));
+					key: "identity"
+				}, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "panel.identity")), (0, react.createElement)("code", { className: "pbb-token " + (report.pairingReady ? "pbb-ok" : "pbb-bad") }, report.pairingReady ? translateWith(props.t, "panel.identityReady") : translateWith(props.t, "panel.identityNotReady")))));
 				advancedRows.push((0, react.createElement)("div", {
 					className: "pbb-field",
 					key: "proto"
@@ -3476,12 +3597,29 @@ window.__ModuleLoader__.load({
 				}, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "advanced.serverVersion")), (0, react.createElement)("span", { className: "pbb-value" }, report.serverVersion))), (0, react.createElement)("div", {
 					className: "pbb-field",
 					key: "path"
-				}, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "advanced.tokenPath")), (0, react.createElement)("span", { className: "pbb-value" }, report.tokenPath))), (0, react.createElement)("div", {
+				}, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "advanced.identityPath")), (0, react.createElement)("span", { className: "pbb-value" }, report.identityPath))), (0, react.createElement)("div", {
 					className: "pbb-field",
 					key: "buffer"
 				}, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "advanced.bufferMax")), (0, react.createElement)("span", { className: "pbb-value" }, String(report.historyBufferMax) + translateWith(props.t, "advanced.frames")))));
 			}
-			const deviceTable = report !== null && report.devices.length > 0 ? (0, react.createElement)("table", { className: "pbb-table" }, (0, react.createElement)("thead", null, (0, react.createElement)("tr", null, (0, react.createElement)("th", null, translateWith(props.t, "devices.col.name")), (0, react.createElement)("th", null, translateWith(props.t, "devices.col.appVersion")), (0, react.createElement)("th", null, translateWith(props.t, "devices.col.push")), (0, react.createElement)("th", null, translateWith(props.t, "devices.col.lastSeen")))), (0, react.createElement)("tbody", null, report.devices.map((d) => (0, react.createElement)("tr", { key: d.deviceId }, (0, react.createElement)("td", null, d.deviceName), (0, react.createElement)("td", null, d.appVersion), (0, react.createElement)("td", null, d.apns ? translateWith(props.t, "devices.pushRegistered") + (d.apns.environment === "production" ? translateWith(props.t, "devices.pushEnvProduction") : translateWith(props.t, "devices.pushEnvDevelopment")) + "）" : translateWith(props.t, "devices.pushNotRegistered")), (0, react.createElement)("td", null, new Date(d.lastSeenTs).toLocaleString()))))) : (0, react.createElement)("p", { className: "pbb-empty" }, translateWith(props.t, "devices.empty"));
+			const revokeDevice = (deviceId, name) => {
+				if (typeof props.revokeDevice !== "function") return;
+				if (typeof window !== "undefined" && !window.confirm(translateWith(props.t, "devices.revokeConfirm", { name }))) return;
+				setDeviceBusy(deviceId);
+				setDeviceMessage("");
+				props.revokeDevice(deviceId).then(() => {
+					setDeviceMessage(translateWith(props.t, "devices.revoked"));
+				}, (error) => {
+					setDeviceMessage(translateWith(props.t, "devices.revokeFailed") + (error instanceof Error ? error.message : String(error)));
+				}).finally(() => setDeviceBusy(null));
+			};
+			const visibleDevices = report?.devices.filter((device) => device.revokedAt === void 0) ?? [];
+			const deviceTable = visibleDevices.length > 0 ? (0, react.createElement)("table", { className: "pbb-table" }, (0, react.createElement)("thead", null, (0, react.createElement)("tr", null, (0, react.createElement)("th", null, translateWith(props.t, "devices.col.name")), (0, react.createElement)("th", null, translateWith(props.t, "devices.col.fingerprint")), (0, react.createElement)("th", null, translateWith(props.t, "devices.col.lastSeen")), (0, react.createElement)("th", null, translateWith(props.t, "devices.col.actions")))), (0, react.createElement)("tbody", null, visibleDevices.map((d) => (0, react.createElement)("tr", { key: d.deviceId }, (0, react.createElement)("td", null, d.deviceName, (0, react.createElement)("div", { className: "pbb-diag" }, d.appVersion)), (0, react.createElement)("td", null, (0, react.createElement)("code", { className: "pbb-token" }, d.fingerprint.slice(0, 12))), (0, react.createElement)("td", null, new Date(d.lastSeenTs).toLocaleString()), (0, react.createElement)("td", null, (0, react.createElement)("button", {
+				type: "button",
+				className: "pbb-action pbb-actionDanger",
+				disabled: deviceBusy === d.deviceId,
+				onClick: () => revokeDevice(d.deviceId, d.deviceName)
+			}, translateWith(props.t, "devices.revoke"))))))) : (0, react.createElement)("p", { className: "pbb-empty" }, translateWith(props.t, "devices.empty"));
 			const switchTitle = translateWith(props.t, "master.title");
 			const switchDesc = switchReady ? enabled ? translateWith(props.t, "master.on") : translateWith(props.t, "master.off") : translateWith(props.t, "master.loading");
 			return (0, react.createElement)("div", { className: "pbb-section" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("h2", { className: "pbb-title" }, "DeepPilot"), (0, react.createElement)("div", { style: { flex: "1" } }), (0, react.createElement)("button", {
@@ -3509,7 +3647,7 @@ window.__ModuleLoader__.load({
 				href: report.remote.authURL,
 				target: "_blank",
 				rel: "noreferrer"
-			}, translateWith(props.t, "remote.openAuth"))) : null, report !== null && report.remote.message && (report.remote.phase === "error" || report.remote.phase === "unavailable") ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, report.remote.message) : null, remoteMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, remoteMessage) : null), (0, react.createElement)("button", {
+			}, translateWith(props.t, "remote.openAuth"))) : null, report !== null && report.remote.message && (report.remote.phase === "error" || report.remote.phase === "unavailable") ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, report.remote.message) : null), (0, react.createElement)("button", {
 				type: "button",
 				role: "switch",
 				"aria-checked": remoteEnabled,
@@ -3519,7 +3657,33 @@ window.__ModuleLoader__.load({
 				onClick: () => {
 					if (typeof props.setDeepPilotRemoteEnabled === "function") props.setDeepPilotRemoteEnabled(!remoteEnabled);
 				}
-			})), (0, react.createElement)("details", { className: "pbb-help" }, (0, react.createElement)("summary", null, translateWith(props.t, "help.remoteTitle")), (0, react.createElement)("div", { className: "pbb-helpBody" }, (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.recommended")), (0, react.createElement)("ol", { className: "pbb-helpList" }, (0, react.createElement)("li", null, translateWith(props.t, "help.step1")), (0, react.createElement)("li", null, translateWith(props.t, "help.step2")), (0, react.createElement)("li", null, translateWith(props.t, "help.step3")), (0, react.createElement)("li", null, translateWith(props.t, "help.step4"))), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.funnelHint"))), (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.httpsTitle")), (0, react.createElement)("ol", { className: "pbb-helpList" }, (0, react.createElement)("li", null, translateWith(props.t, "help.httpsStep1")), (0, react.createElement)("li", null, translateWith(props.t, "help.httpsStep2")), (0, react.createElement)("li", null, translateWith(props.t, "help.httpsStep3"))), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.httpsHint"))), (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.allowTitle")), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.allowBody")), (0, react.createElement)("code", { className: "pbb-helpCode" }, "\"nodeAttrs\": [\n  {\n    \"target\": [\"autogroup:member\"],\n    \"attr\": [\"funnel\"],\n  },\n],"), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.allowHint"))), (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.faqTitle")), (0, react.createElement)("ul", { className: "pbb-helpList" }, (0, react.createElement)("li", null, translateWith(props.t, "help.faq1")), (0, react.createElement)("li", null, translateWith(props.t, "help.faq2")), (0, react.createElement)("li", null, translateWith(props.t, "help.faq3")), (0, react.createElement)("li", null, translateWith(props.t, "help.faq4")))), (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.securityTitle")), (0, react.createElement)("ul", { className: "pbb-helpList" }, (0, react.createElement)("li", null, translateWith(props.t, "help.security1")), (0, react.createElement)("li", null, translateWith(props.t, "help.security2")), (0, react.createElement)("li", null, translateWith(props.t, "help.security3")), (0, react.createElement)("li", null, translateWith(props.t, "help.security4")), (0, react.createElement)("li", null, translateWith(props.t, "help.security5"))), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.docsPrefix"), (0, react.createElement)("a", {
+			})), (0, react.createElement)("details", { className: "pbb-help" }, (0, react.createElement)("summary", null, translateWith(props.t, "remote.advancedSettings")), (0, react.createElement)("div", { className: "pbb-helpBody" }, (0, react.createElement)("div", { className: "pbb-limitRow pbb-limitNested" }, (0, react.createElement)("div", { className: "pbb-switchText" }, (0, react.createElement)("label", {
+				className: "pbb-switchTitle",
+				htmlFor: "deeppilot-funnel-source-limit"
+			}, translateWith(props.t, "remote.limitTitle")), (0, react.createElement)("span", { className: "pbb-switchDesc" }, translateWith(props.t, "remote.limitDescription")), !remoteLimitValid ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "remote.limitInvalid")) : remoteLimitMessage ? (0, react.createElement)("p", { className: "pbb-diag" + (remoteLimitMessage.startsWith(translateWith(props.t, "remote.limitFailed")) ? " pbb-diagBad" : "") }, remoteLimitMessage) : null), (0, react.createElement)("div", { className: "pbb-limitControl" }, (0, react.createElement)("input", {
+				id: "deeppilot-funnel-source-limit",
+				className: "pbb-numberInput",
+				type: "number",
+				min: 1,
+				max: 16,
+				step: 1,
+				inputMode: "numeric",
+				value: remoteLimitDraft,
+				disabled: !remoteConnectionLimitReady,
+				"aria-label": translateWith(props.t, "remote.limitTitle"),
+				onChange: (event) => setRemoteLimitDraft(event.currentTarget.value),
+				onKeyDown: (event) => {
+					if (event.key === "Enter") {
+						event.preventDefault();
+						applyRemoteLimit();
+					}
+				}
+			}), (0, react.createElement)("button", {
+				type: "button",
+				className: "pbb-action",
+				disabled: !remoteConnectionLimitReady || !remoteLimitValid || parsedRemoteLimit === remoteConnectionLimit,
+				onClick: applyRemoteLimit
+			}, translateWith(props.t, "remote.limitApply")))))), (0, react.createElement)("details", { className: "pbb-help" }, (0, react.createElement)("summary", null, translateWith(props.t, "help.remoteTitle")), (0, react.createElement)("div", { className: "pbb-helpBody" }, (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.recommended")), (0, react.createElement)("ol", { className: "pbb-helpList" }, (0, react.createElement)("li", null, translateWith(props.t, "help.step1")), (0, react.createElement)("li", null, translateWith(props.t, "help.step2")), (0, react.createElement)("li", null, translateWith(props.t, "help.step3")), (0, react.createElement)("li", null, translateWith(props.t, "help.step4"))), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.funnelHint"))), (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.httpsTitle")), (0, react.createElement)("ol", { className: "pbb-helpList" }, (0, react.createElement)("li", null, translateWith(props.t, "help.httpsStep1")), (0, react.createElement)("li", null, translateWith(props.t, "help.httpsStep2")), (0, react.createElement)("li", null, translateWith(props.t, "help.httpsStep3"))), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.httpsHint"))), (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.allowTitle")), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.allowBody")), (0, react.createElement)("code", { className: "pbb-helpCode" }, "\"nodeAttrs\": [\n  {\n    \"target\": [\"autogroup:member\"],\n    \"attr\": [\"funnel\"],\n  },\n],"), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.allowHint"))), (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.faqTitle")), (0, react.createElement)("ul", { className: "pbb-helpList" }, (0, react.createElement)("li", null, translateWith(props.t, "help.faq1")), (0, react.createElement)("li", null, translateWith(props.t, "help.faq2")), (0, react.createElement)("li", null, translateWith(props.t, "help.faq3")), (0, react.createElement)("li", null, translateWith(props.t, "help.faq4")))), (0, react.createElement)("div", { className: "pbb-helpSection" }, (0, react.createElement)("div", { className: "pbb-helpHeading" }, translateWith(props.t, "help.securityTitle")), (0, react.createElement)("ul", { className: "pbb-helpList" }, (0, react.createElement)("li", null, translateWith(props.t, "help.security1")), (0, react.createElement)("li", null, translateWith(props.t, "help.security2")), (0, react.createElement)("li", null, translateWith(props.t, "help.security3")), (0, react.createElement)("li", null, translateWith(props.t, "help.security4")), (0, react.createElement)("li", null, translateWith(props.t, "help.security5"))), (0, react.createElement)("p", { className: "pbb-helpText" }, translateWith(props.t, "help.docsPrefix"), (0, react.createElement)("a", {
 				className: "pbb-helpLink",
 				href: "https://tailscale.com/docs/features/tailscale-funnel",
 				target: "_blank",
@@ -3527,20 +3691,24 @@ window.__ModuleLoader__.load({
 			}, translateWith(props.t, "help.funnelDocs"))))))), report === null ? null : (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "pair.qrPanelTitle")), pairingTarget === null ? (0, react.createElement)("span", { className: "pbb-value pbb-bad" }, translateWith(props.t, "pair.noAddress")) : (0, react.createElement)("span", { className: "pbb-tokenActions" }, (0, react.createElement)("span", { className: "pbb-badge" }, pairingTarget.kind === "public" ? translateWith(props.t, "pair.kind.public") : translateWith(props.t, "pair.kind.lan")), (0, react.createElement)("button", {
 				type: "button",
 				className: "pbb-action",
-				disabled: qrBusy || !report.tokenReady,
+				disabled: qrBusy || !report.pairingReady,
 				onClick: () => {
 					if (qrDataURL === null) showPairingQR();
-					else setQRDataURL(null);
+					else hidePairingQR();
 				}
-			}, qrBusy ? translateWith(props.t, "pair.qrGenerating") : qrDataURL === null ? translateWith(props.t, "pair.qrShow") : translateWith(props.t, "pair.qrHide")))), pairingTarget === null ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "pair.noAddressHelp")) : null, qrMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, qrMessage) : null, pairingTarget === null || qrDataURL === null ? null : (0, react.createElement)("div", { className: "pbb-qrPanel" }, (0, react.createElement)("img", {
+			}, qrBusy ? translateWith(props.t, "pair.qrGenerating") : qrDataURL === null ? translateWith(props.t, "pair.qrShow") : translateWith(props.t, "pair.qrHide")))), pairingTarget === null ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "pair.noAddressHelp")) : null, qrMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, qrMessage) : null, pairingTarget === null || qrDataURL === null || pairingGrant === null ? null : (0, react.createElement)("div", { className: "pbb-qrPanel" }, (0, react.createElement)("img", {
 				className: "pbb-qrImage",
 				src: qrDataURL,
 				alt: translateWith(props.t, "pair.qrAlt")
-			}), (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("code", { className: "pbb-token" }, pairingTarget.host), (0, react.createElement)("button", {
+			}), (0, react.createElement)("div", { className: "pbb-pairCodeBlock" }, (0, react.createElement)("span", { className: "pbb-pairCodeLabel" }, translateWith(props.t, "pair.codeLabel")), (0, react.createElement)("div", { className: "pbb-pairCodeRow" }, (0, react.createElement)("code", { className: "pbb-pairCode" }, pairingGrant.code), (0, react.createElement)("button", {
+				type: "button",
+				className: "pbb-action",
+				onClick: copyPairingCode
+			}, translateWith(props.t, "panel.tokenAction.copy")))), (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("code", { className: "pbb-token" }, pairingTarget.host), (0, react.createElement)("button", {
 				type: "button",
 				className: "pbb-action",
 				onClick: () => copyRemoteURL(pairingTarget.host)
-			}, translateWith(props.t, "panel.tokenAction.copy"))), (0, react.createElement)("p", { className: "pbb-qrHint" }, translateWith(props.t, "pair.qrHint", { kind: pairingTarget.kind === "public" ? translateWith(props.t, "pair.kind.public") : translateWith(props.t, "pair.kind.lan") }))))), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, primaryRows, advancedRows.length > 0 ? (0, react.createElement)("details", { className: "pbb-help" }, (0, react.createElement)("summary", null, translateWith(props.t, "advanced.summary")), (0, react.createElement)("div", { className: "pbb-helpBody" }, advancedRows)) : null)), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "push.relayTitle")), (0, react.createElement)("span", { className: "pbb-tokenActions" }, (0, react.createElement)("button", {
+			}, translateWith(props.t, "panel.tokenAction.copy"))), addressMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, addressMessage) : null, (0, react.createElement)("p", { className: "pbb-qrHint" }, translateWith(props.t, "pair.qrHint", { kind: pairingTarget.kind === "public" ? translateWith(props.t, "pair.kind.public") : translateWith(props.t, "pair.kind.lan") }))))), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, primaryRows, advancedRows.length > 0 ? (0, react.createElement)("details", { className: "pbb-help" }, (0, react.createElement)("summary", null, translateWith(props.t, "advanced.summary")), (0, react.createElement)("div", { className: "pbb-helpBody" }, advancedRows)) : null)), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "push.relayTitle")), (0, react.createElement)("span", { className: "pbb-tokenActions" }, (0, react.createElement)("button", {
 				type: "button",
 				className: "pbb-action",
 				disabled: relayTestBusy,
@@ -3556,7 +3724,7 @@ window.__ModuleLoader__.load({
 			}, (step.ok ? "✓ " : "✗ ") + (step.id === "health" ? translateWith(props.t, "push.relayStep.health") : translateWith(props.t, "push.relayStep.enroll")) + (step.latencyMs !== void 0 ? ` (${String(step.latencyMs)}ms)` : "") + " — " + step.message))), pushTestError ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, pushTestError) : null, pushTestResult === null ? (0, react.createElement)("p", { className: "pbb-diag" }, translateWith(props.t, "push.pushDefault")) : (0, react.createElement)("div", { className: "pbb-helpBody" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("code", { className: "pbb-token " + (pushTestResult.overall === "sent" ? "pbb-ok" : pushTestResult.overall === "failed" ? "pbb-bad" : "") }, pushTestResult.overall === "sent" ? translateWith(props.t, "push.pushSent") : pushTestResult.overall === "failed" ? translateWith(props.t, "push.pushFailed") : pushTestResult.overall === "no-targets" ? translateWith(props.t, "push.pushNoTargets") : translateWith(props.t, "push.pushNotEnabled"))), pushTestResult.message ? (0, react.createElement)("p", { className: "pbb-diag" }, pushTestResult.message) : null, pushTestResult.results.map((r, index) => (0, react.createElement)("p", {
 				className: "pbb-diag",
 				key: String(index)
-			}, (r.outcome === "sent" ? "✓ " : "✗ ") + r.name + " [" + r.environment + "] — " + r.outcome + (r.reason ? "（" + r.reason + "）" : "") + (r.tokenFingerprint ? "　token:" + r.tokenFingerprint + "…" : "")))))), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "devices.title")), (0, react.createElement)("span", { className: "pbb-badge" }, String(report !== null ? report.devices.length : 0))), deviceTable)), report === null ? null : (0, react.createElement)("div", { className: "pbb-versionFooter" }, (0, react.createElement)("span", null, "DeepPilot v" + report.pluginVersion), report.updateAvailable === true ? (0, react.createElement)("a", {
+			}, (r.outcome === "sent" ? "✓ " : "✗ ") + r.name + " [" + r.environment + "] — " + r.outcome + (r.reason ? "（" + r.reason + "）" : "") + (r.tokenFingerprint ? "　token:" + r.tokenFingerprint + "…" : "")))))), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "devices.title")), (0, react.createElement)("span", { className: "pbb-badge" }, String(visibleDevices.length))), deviceMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, deviceMessage) : null, deviceTable)), report === null ? null : (0, react.createElement)("div", { className: "pbb-versionFooter" }, (0, react.createElement)("span", null, "DeepPilot v" + report.pluginVersion), report.updateAvailable === true ? (0, react.createElement)("a", {
 				href: typeof report.releaseUrl === "string" && /^https:\/\//.test(report.releaseUrl) ? report.releaseUrl : "https://github.com/Mars-Sea/dsh-deeppilot/releases",
 				target: "_blank",
 				rel: "noreferrer"
@@ -3636,7 +3804,7 @@ window.__ModuleLoader__.load({
 			const tPage = (key, vars) => t(ctx, key, vars);
 			const controller = new ReportController(fetchReport, tPage);
 			ctx.effect(() => () => controller.dispose(), "dsh-deeppilot: report controller");
-			const store = (0, _deepseek_ai_dsh_client_runtime_client.createSnapshotStore)(controller.state());
+			const store = createSnapshotStore(controller.state());
 			controller.subscribe(() => store.set(controller.state()));
 			ctx.effect(() => {
 				let cancelled = false;
@@ -3665,12 +3833,18 @@ window.__ModuleLoader__.load({
 					if (unmount !== void 0) unmount();
 				};
 			}, "dsh-deeppilot: report remote mount");
-			const revealPairingToken = async () => {
+			const beginPairing = async () => {
 				if (namespace === void 0) throw new Error(mountError !== void 0 ? t(ctx, "diag.mountFailedShort") + mountError : t(ctx, "diag.remoteUnmounted"));
-				const result = await namespace.revealToken();
-				if (!result.ok) throw new Error(result.error.message ?? t(ctx, "panel.tokenRevealFailed"));
+				const result = await namespace.beginPairing();
+				if (!result.ok) throw new Error(result.error.message ?? t(ctx, "pair.qrFailed"));
 				return result.value;
 			};
+			const revokeDevice = async (deviceId) => {
+				if (namespace === void 0) throw new Error(t(ctx, "diag.remoteUnmounted"));
+				const result = await namespace.revokeDevice(deviceId);
+				if (!result.ok || result.value !== true) throw new Error(result.ok ? t(ctx, "devices.revokeFailed") : result.error.message ?? t(ctx, "devices.revokeFailed"));
+				await controller.refresh();
+			};
 			const sendTestPush = async () => {
 				if (namespace === void 0) throw new Error(mountError !== void 0 ? t(ctx, "diag.mountFailedShort") + mountError : t(ctx, "diag.remoteUnmounted"));
 				if (typeof namespace.testPush !== "function") throw new Error(t(ctx, "push.staleHostPush"));
@@ -3685,13 +3859,7 @@ window.__ModuleLoader__.load({
 				if (!result.ok) throw new Error(result.error.message ?? t(ctx, "push.relayBad"));
 				return result.value;
 			};
-			const rotatePairingToken = async () => {
-				if (namespace === void 0) throw new Error(mountError !== void 0 ? t(ctx, "diag.mountFailedShort") + mountError : t(ctx, "diag.remoteUnmounted"));
-				const result = await namespace.rotateToken();
-				if (!result.ok) throw new Error(result.error.message ?? t(ctx, "panel.tokenRotateFailed"));
-				return result.value;
-			};
-			const enabledStore = (0, _deepseek_ai_dsh_client_runtime_client.createSnapshotStore)({
+			const enabledStore = createSnapshotStore({
 				status: "loading",
 				enabled: true
 			});
@@ -3722,6 +3890,11 @@ window.__ModuleLoader__.load({
 				if (snap?.status === "ready") return snap.value?.remote?.enabled === true;
 				return remoteEnabledStore.getSnapshot().enabled;
 			};
+			const lastConfirmedRemoteConnectionLimit = () => {
+				const snap = scope?.getSnapshot();
+				if (snap?.status === "ready") return normalizeFunnelConnectionLimit(snap.value?.remote?.maxConnectionsPerSource);
+				return remoteConnectionLimitStore.getSnapshot().value;
+			};
 			const setDeepPilotEnabled = (value) => {
 				const previous = lastConfirmedEnabled();
 				enabledStore.set({
@@ -3738,21 +3911,36 @@ window.__ModuleLoader__.load({
 					console.error("[deeppilot] failed to persist enabled=" + String(value) + ": " + message);
 				});
 			};
-			const remoteEnabledStore = (0, _deepseek_ai_dsh_client_runtime_client.createSnapshotStore)({
+			const remoteEnabledStore = createSnapshotStore({
 				status: "loading",
 				enabled: false
 			});
+			const remoteConnectionLimitStore = createSnapshotStore({
+				status: "loading",
+				value: 8
+			});
 			const adoptRemoteEnabled = () => {
 				if (scope === void 0) return;
 				const snap = scope.getSnapshot();
-				if (snap.status === "ready") remoteEnabledStore.set({
-					status: "ready",
-					enabled: snap.value?.remote?.enabled === true
-				});
-				else if (snap.status === "unavailable") remoteEnabledStore.set({
-					status: "unavailable",
-					enabled: false
-				});
+				if (snap.status === "ready") {
+					remoteEnabledStore.set({
+						status: "ready",
+						enabled: snap.value?.remote?.enabled === true
+					});
+					remoteConnectionLimitStore.set({
+						status: "ready",
+						value: normalizeFunnelConnectionLimit(snap.value?.remote?.maxConnectionsPerSource)
+					});
+				} else if (snap.status === "unavailable") {
+					remoteEnabledStore.set({
+						status: "unavailable",
+						enabled: false
+					});
+					remoteConnectionLimitStore.set({
+						status: "unavailable",
+						value: 8
+					});
+				}
 			};
 			if (scope !== void 0) {
 				scope.subscribe(adoptRemoteEnabled);
@@ -3778,6 +3966,31 @@ window.__ModuleLoader__.load({
 					console.error("[deeppilot] failed to persist remote.enabled=" + String(value) + ": " + message);
 				});
 			};
+			const setDeepPilotRemoteConnectionLimit = async (value) => {
+				const next = normalizeFunnelConnectionLimit(value);
+				if (next !== value) throw new RangeError("maxConnectionsPerSource must be an integer between 1 and 16");
+				if (scope === void 0) throw new Error("settings scope unavailable");
+				const previous = lastConfirmedRemoteConnectionLimit();
+				remoteConnectionLimitStore.set({
+					status: "ready",
+					value: next
+				});
+				const currentRemote = scope.getSnapshot().value?.remote ?? {};
+				try {
+					await scope.set("remote", {
+						...currentRemote,
+						maxConnectionsPerSource: next
+					});
+				} catch (error) {
+					remoteConnectionLimitStore.set({
+						status: "ready",
+						value: previous
+					});
+					const message = error instanceof Error ? error.message : String(error);
+					console.error("[deeppilot] failed to persist remote.maxConnectionsPerSource=" + String(next) + ": " + message);
+					throw error;
+				}
+			};
 			if (anyCtx.slots === void 0) console.error("[deeppilot] settings slots service unavailable; the DeepPilot section will not appear");
 			anyCtx.slots?.inject("settings.section", () => anyCtx.slots.register({
 				name: "settings.section",
@@ -3792,17 +4005,19 @@ window.__ModuleLoader__.load({
 					hooks: {
 						deepPilotReport: store,
 						deepPilotEnabled: enabledStore,
-						deepPilotRemoteEnabled: remoteEnabledStore
+						deepPilotRemoteEnabled: remoteEnabledStore,
+						deepPilotRemoteConnectionLimit: remoteConnectionLimitStore
 					},
 					refresh: () => {
 						controller.refresh();
 					},
-					revealPairingToken,
-					rotatePairingToken,
+					beginPairing,
+					revokeDevice,
 					testRelay: testRelayConnection,
 					testPush: sendTestPush,
 					setDeepPilotEnabled,
 					setDeepPilotRemoteEnabled,
+					setDeepPilotRemoteConnectionLimit,
 					t: (key, vars) => t(ctx, key, vars)
 				})
 			}, DeepPilotSettingsPage));