dsh-deeppilot 0.6.0-alpha.3 → 0.6.0

package/lib/client.js

@@ -151,6 +151,28 @@ window.__ModuleLoader__.load({
 				updatedAt: int(s, "updatedAt", "remote.updatedAt")
 			};
 		}
+		function parseLocal(value) {
+			const s = rec(value, "local");
+			const phase = str(s, "phase", "local.phase");
+			if (![
+				"disabled",
+				"starting",
+				"online",
+				"error",
+				"stopped"
+			].includes(phase)) reject("local.phase");
+			const endpoints = s.endpoints;
+			if (!Array.isArray(endpoints) || endpoints.some((entry) => typeof entry !== "string")) reject("local.endpoints");
+			const message = s.message;
+			if (message !== void 0 && typeof message !== "string") reject("local.message");
+			return {
+				phase,
+				port: int(s, "port", "local.port"),
+				endpoints,
+				...typeof message === "string" ? { message } : {},
+				updatedAt: int(s, "updatedAt", "local.updatedAt")
+			};
+		}
 		function parseRelayTestStep(value) {
 			const st = rec(value, "step");
 			const id = str(st, "id", "step.id");
@@ -232,6 +254,7 @@ window.__ModuleLoader__.load({
 				historyBufferMax: int(s, "historyBufferMax", "historyBufferMax"),
 				debug: bool(s, "debug", "debug"),
 				lanAddresses,
+				local: parseLocal(s.local),
 				remote: parseRemote(s.remote),
 				devices: devices.map(parseDevice)
 			};
@@ -412,6 +435,19 @@ window.__ModuleLoader__.load({
 				"master.loading": "正在读取配置…",
 				"master.on": "已开启：接受手机连接。",
 				"master.off": "已关闭：不接受手机连接。",
+				"local.title": "局域网连接",
+				"local.on": "已开启：手机可通过独立端口 {port} 连接。",
+				"local.off": "已关闭：不接受局域网连接。",
+				"local.phaseDisabled": "局域网连接未启用",
+				"local.phaseStarting": "局域网连接正在启动",
+				"local.phaseOnline": "局域网连接已就绪",
+				"local.phaseError": "局域网连接失败",
+				"local.phaseStopped": "局域网连接已停止",
+				"local.portTitle": "局域网端口",
+				"local.portDescription": "默认 3098，范围 1024–65535。该端口只提供 DeepPilot 的三个连接端点，不会开放完整 DSH。",
+				"local.portApplied": "局域网端口已保存，监听器正在重新加载。",
+				"local.portInvalid": "请输入 1024–65535 之间的整数。",
+				"local.portFailed": "局域网端口保存失败：",
 				"remote.title": "远程连接（Tailscale Funnel）",
 				"remote.on": "已配置：内嵌 Funnel 会自动启动并同步状态。",
 				"remote.off": "关闭：仅保留局域网连接。",
@@ -457,7 +493,7 @@ window.__ModuleLoader__.load({
 				"pair.kind.public": "公网",
 				"pair.kind.lan": "内网",
 				"pair.noAddress": "没有可用地址",
-				"pair.noAddressHelp": "未发现可供手机访问的局域网地址，请确认这台电脑已连接局域网。",
+				"pair.noAddressHelp": "没有可用的局域网或远程入口。请确认局域网连接已启动，或启用远程连接。",
 				"pair.qrAlt": "DeepPilot 配对二维码",
 				"pair.qrShow": "显示二维码",
 				"pair.qrHide": "隐藏二维码",
@@ -467,7 +503,7 @@ window.__ModuleLoader__.load({
 				"pair.codeLabel": "配对码（模拟器可手动输入）",
 				"pair.codeCopyDone": "配对码已复制",
 				"pair.codeCopyFailed": "配对码复制失败：",
-				"pair.publicCopyDone": "公网地址已复制",
+				"pair.publicCopyDone": "连接地址已复制",
 				"pair.publicCopyFailed": "复制失败：",
 				"pair.qrHint": "二维码包含{kind}地址和一次性配对码；配对码 5 分钟后失效，二维码将在 60 秒后自动隐藏。",
 				"advanced.summary": "高级信息",
@@ -534,8 +570,8 @@ window.__ModuleLoader__.load({
 				"help.securityTitle": "安全说明",
 				"help.security1": "Funnel 公网地址可从互联网访问，但连接必须使用已配对设备的 P-256 私钥签名；不要分享仍在有效期内的配对二维码。",
 				"help.security2": "丢失设备时可在设备列表中单独删除；该设备会立即断开，不影响其他手机。",
-				"help.security3": "插件只通过 Funnel 转发 /phone、/phone/pair 和 /phone/health，不会新增 3098 端口。",
-				"help.security4": "局域网连接沿用 DSH 的 3080 端口；仅在可信网络中使用，不建议直接把 3080 暴露到公网。",
+				"help.security3": "Funnel 和局域网监听器都只提供 /phone、/phone/pair 和 /phone/health，不会暴露完整 DSH Web/API。",
+				"help.security4": "局域网连接使用插件独立的 3098 端口和明文 WebSocket。只在可信网络中使用，不要把 3098 转发到公网。",
 				"help.security5": "关闭远程连接开关会停止 Funnel，但不会影响可用的局域网连接。",
 				"help.funnelDocs": "Tailscale Funnel 官方文档",
 				"help.docsPrefix": "更多信息：",
@@ -547,6 +583,8 @@ window.__ModuleLoader__.load({
 				"diag.settingsUnavailable": "设置命名空间不可用（settingsScope 未提供）",
 				"diag.missingReportHook": "useDeepPilotReport hook 缺失",
 				"diag.missingEnabledHook": "useDeepPilotEnabled hook 缺失",
+				"diag.missingLocalEnabledHook": "useDeepPilotLocalEnabled hook 缺失",
+				"diag.missingLocalPortHook": "useDeepPilotLocalPort hook 缺失",
 				"diag.missingRemoteEnabledHook": "useDeepPilotRemoteEnabled hook 缺失",
 				"diag.missingRemoteLimitHook": "useDeepPilotRemoteConnectionLimit hook 缺失",
 				"diag.missingRefresh": "refresh 回调缺失",
@@ -555,6 +593,8 @@ window.__ModuleLoader__.load({
 				"diag.missingTestRelay": "testRelay 回调缺失",
 				"diag.missingTestPush": "testPush 回调缺失",
 				"diag.missingSetEnabled": "setDeepPilotEnabled 回调缺失",
+				"diag.missingSetLocal": "setDeepPilotLocalEnabled 回调缺失",
+				"diag.missingSetLocalPort": "setDeepPilotLocalPort 回调缺失",
 				"diag.missingSetRemote": "setDeepPilotRemoteEnabled 回调缺失",
 				"diag.missingSetRemoteLimit": "setDeepPilotRemoteConnectionLimit 回调缺失",
 				"diag.renderError": "渲染异常: ",
@@ -575,6 +615,19 @@ window.__ModuleLoader__.load({
 				"master.loading": "Loading settings…",
 				"master.on": "On: accepting phone connections.",
 				"master.off": "Off: not accepting phone connections.",
+				"local.title": "LAN connection",
+				"local.on": "On: phones can connect through the independent port {port}.",
+				"local.off": "Off: LAN connections are not accepted.",
+				"local.phaseDisabled": "LAN connection disabled",
+				"local.phaseStarting": "LAN connection starting",
+				"local.phaseOnline": "LAN connection ready",
+				"local.phaseError": "LAN connection failed",
+				"local.phaseStopped": "LAN connection stopped",
+				"local.portTitle": "LAN port",
+				"local.portDescription": "Default 3098; range 1024–65535. This port exposes only the three DeepPilot endpoints, never the full DSH server.",
+				"local.portApplied": "LAN port saved; the listener is reloading.",
+				"local.portInvalid": "Enter an integer from 1024 to 65535.",
+				"local.portFailed": "Failed to save LAN port: ",
 				"remote.title": "Remote connection (Tailscale Funnel)",
 				"remote.on": "Configured: the embedded Funnel will start and sync state automatically.",
 				"remote.off": "Off: LAN connections only.",
@@ -620,7 +673,7 @@ window.__ModuleLoader__.load({
 				"pair.kind.public": "Public",
 				"pair.kind.lan": "LAN",
 				"pair.noAddress": "No address available",
-				"pair.noAddressHelp": "No LAN address reachable from a phone. Make sure this Mac is on the local network.",
+				"pair.noAddressHelp": "No LAN or remote endpoint is available. Make sure LAN is running or enable remote access.",
 				"pair.qrAlt": "DeepPilot pairing QR code",
 				"pair.qrShow": "Show QR code",
 				"pair.qrHide": "Hide QR code",
@@ -630,7 +683,7 @@ window.__ModuleLoader__.load({
 				"pair.codeLabel": "Pairing code (enter manually in Simulator)",
 				"pair.codeCopyDone": "Pairing code copied",
 				"pair.codeCopyFailed": "Failed to copy pairing code: ",
-				"pair.publicCopyDone": "Public URL copied",
+				"pair.publicCopyDone": "Connection address copied",
 				"pair.publicCopyFailed": "Copy failed: ",
 				"pair.qrHint": "The QR contains a {kind} address and a single-use pairing code. The code expires after 5 minutes; the QR auto-hides after 60 seconds.",
 				"advanced.summary": "Advanced info",
@@ -697,8 +750,8 @@ window.__ModuleLoader__.load({
 				"help.securityTitle": "Security notes",
 				"help.security1": "A Funnel URL is public, but every connection requires a signature from a paired device P-256 private key. Do not share a pairing QR while it is valid.",
 				"help.security2": "If a device is lost, delete only that device from the list. It disconnects immediately; other phones stay paired.",
-				"help.security3": "The plugin only forwards /phone, /phone/pair, and /phone/health through Funnel; no new port 3098 is opened.",
-				"help.security4": "LAN connections reuse DSH's existing 3080 port. Use them only on trusted networks; do not expose 3080 directly to the public Internet.",
+				"help.security3": "Funnel and the LAN listener expose only /phone, /phone/pair, and /phone/health, never the full DSH Web/API surface.",
+				"help.security4": "LAN uses the plugin's independent port 3098 over plaintext WebSocket. Use trusted networks only and never forward 3098 to the public Internet.",
 				"help.security5": "Disabling the remote switch stops Funnel but does not affect any LAN connection you already have.",
 				"help.funnelDocs": "Tailscale Funnel docs",
 				"help.docsPrefix": "More info: ",
@@ -710,6 +763,8 @@ window.__ModuleLoader__.load({
 				"diag.settingsUnavailable": "Settings namespace unavailable (settingsScope not provided)",
 				"diag.missingReportHook": "useDeepPilotReport hook missing",
 				"diag.missingEnabledHook": "useDeepPilotEnabled hook missing",
+				"diag.missingLocalEnabledHook": "useDeepPilotLocalEnabled hook missing",
+				"diag.missingLocalPortHook": "useDeepPilotLocalPort hook missing",
 				"diag.missingRemoteEnabledHook": "useDeepPilotRemoteEnabled hook missing",
 				"diag.missingRemoteLimitHook": "useDeepPilotRemoteConnectionLimit hook missing",
 				"diag.missingRefresh": "refresh callback missing",
@@ -718,6 +773,8 @@ window.__ModuleLoader__.load({
 				"diag.missingTestRelay": "testRelay callback missing",
 				"diag.missingTestPush": "testPush callback missing",
 				"diag.missingSetEnabled": "setDeepPilotEnabled callback missing",
+				"diag.missingSetLocal": "setDeepPilotLocalEnabled callback missing",
+				"diag.missingSetLocalPort": "setDeepPilotLocalPort callback missing",
 				"diag.missingSetRemote": "setDeepPilotRemoteEnabled callback missing",
 				"diag.missingSetRemoteLimit": "setDeepPilotRemoteConnectionLimit callback missing",
 				"diag.renderError": "Render error: ",
@@ -822,6 +879,8 @@ window.__ModuleLoader__.load({
 			".pbb-action{font:inherit;font-size:12px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:none;border:1px solid var(--dsw-alias-border-l2);border-radius:7px;padding:3px 8px}",
 			".pbb-action:hover:not(:disabled){color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-module-platform)}",
 			".pbb-action:disabled{cursor:default;opacity:.5}",
+			".pbb-actionSelected{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-state-success-primary,#22a06b);background:var(--dsw-alias-bg-module-platform)}",
+			".pbb-targetList{display:flex;flex-wrap:wrap;gap:6px;padding-top:4px}",
 			".pbb-actionDanger{color:#fff;background:#dc2626;border-color:#dc2626;line-height:1.35;padding:4px 10px;box-shadow:0 1px 2px rgba(127,29,29,.18);transition:background-color .15s ease,border-color .15s ease,box-shadow .15s ease,transform .1s ease}",
 			".pbb-actionDanger:hover:not(:disabled){color:#fff;background:#b91c1c;border-color:#b91c1c;box-shadow:0 2px 5px rgba(127,29,29,.24)}",
 			".pbb-actionDanger:active:not(:disabled){background:#991b1b;border-color:#991b1b;box-shadow:0 1px 2px rgba(127,29,29,.2);transform:translateY(1px)}",
@@ -3284,34 +3343,38 @@ window.__ModuleLoader__.load({
 			});
 		})))(), 1);
 		const PAIRING_QR_TYPE = "deeppilot-pairing";
-		function isLoopbackHostname(hostname) {
-			const normalized = hostname.toLowerCase();
-			return normalized === "localhost" || normalized.endsWith(".localhost") || normalized === "[::1]" || normalized === "::1" || normalized.startsWith("127.");
-		}
-		/** Prefer an online Funnel; otherwise turn the current web origin into a LAN target. */
-		function selectPairingTarget(remote, lanAddresses, currentOrigin) {
-			let origin;
-			try {
-				if (currentOrigin) origin = new URL(currentOrigin);
-			} catch {}
-			if (remote.publicURL && origin?.origin === remote.publicURL) return {
-				host: remote.publicURL,
-				kind: "public"
-			};
-			if (remote.phase === "online" && remote.publicURL) return {
+		/**
+		* Return every explicit DeepPilot transport target. LAN comes first because
+		* it is private and lower latency; an online Funnel remains available as a
+		* separate choice instead of silently replacing the local address.
+		*/
+		function selectPairingTargets(local, remote) {
+			const targets = [];
+			if (local.phase === "online") {
+				for (const host of local.endpoints) if (validTargetHost(host)) targets.push({
+					host,
+					kind: "lan"
+				});
+			}
+			if (remote.phase === "online" && remote.publicURL && validTargetHost(remote.publicURL)) targets.push({
 				host: remote.publicURL,
 				kind: "public"
-			};
-			if (origin && ["http:", "https:"].includes(origin.protocol) && !isLoopbackHostname(origin.hostname)) return {
-				host: origin.origin,
-				kind: "lan"
-			};
-			const address = lanAddresses[0];
-			if (!address) return null;
-			return {
-				host: `${origin?.protocol === "https:" ? "https:" : "http:"}//${address}${origin?.port ? `:${origin.port}` : ""}`,
-				kind: "lan"
-			};
+			});
+			const seen = /* @__PURE__ */ new Set();
+			return targets.filter(({ host }) => !seen.has(host) && seen.add(host));
+		}
+		function validTargetHost(value) {
+			try {
+				const parsed = new URL(value);
+				return [
+					"http:",
+					"https:",
+					"ws:",
+					"wss:"
+				].includes(parsed.protocol) && parsed.hostname !== "" && parsed.username === "" && parsed.password === "";
+			} catch {
+				return false;
+			}
 		}
 		/** Encode a short-lived, single-use pairing grant without URL credentials. */
 		function encodePairingQRPayload(host, grant) {
@@ -3339,6 +3402,14 @@ window.__ModuleLoader__.load({
 			return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 16 ? value : 8;
 		}
 		//#endregion
+		//#region src/local-policy.ts
+		const DEFAULT_LOCAL_PORT = 3098;
+		const MIN_LOCAL_PORT = 1024;
+		const MAX_LOCAL_PORT = 65535;
+		function normalizeLocalPort(value) {
+			return typeof value === "number" && Number.isInteger(value) && value >= 1024 && value <= 65535 ? value : DEFAULT_LOCAL_PORT;
+		}
+		//#endregion
 		//#region src/client/settings-page.ts
 		async function writeClipboard(t, value) {
 			try {
@@ -3389,11 +3460,36 @@ window.__ModuleLoader__.load({
 				labelKey: "phase.stopped"
 			}
 		};
+		const LOCAL_PHASE_META = {
+			disabled: {
+				dot: "",
+				labelKey: "local.phaseDisabled"
+			},
+			starting: {
+				dot: " pbb-dotWarn",
+				labelKey: "local.phaseStarting"
+			},
+			online: {
+				dot: " pbb-dotOk",
+				labelKey: "local.phaseOnline"
+			},
+			error: {
+				dot: " pbb-dotBad",
+				labelKey: "local.phaseError"
+			},
+			stopped: {
+				dot: "",
+				labelKey: "local.phaseStopped"
+			}
+		};
 		/** Slot component: hooks come from the slot renderer, named use<Key>. */
 		function DeepPilotSettingsPage(props) {
 			const [addressMessage, setAddressMessage] = (0, react.useState)("");
 			const [remoteLimitDraft, setRemoteLimitDraft] = (0, react.useState)(String(8));
 			const [remoteLimitMessage, setRemoteLimitMessage] = (0, react.useState)("");
+			const [localPortDraft, setLocalPortDraft] = (0, react.useState)(String(DEFAULT_LOCAL_PORT));
+			const [localPortMessage, setLocalPortMessage] = (0, react.useState)("");
+			const [selectedPairingHost, setSelectedPairingHost] = (0, react.useState)(null);
 			const [qrDataURL, setQRDataURL] = (0, react.useState)(null);
 			const [pairingGrant, setPairingGrant] = (0, react.useState)(null);
 			const [qrBusy, setQRBusy] = (0, react.useState)(false);
@@ -3454,13 +3550,18 @@ window.__ModuleLoader__.load({
 				const timer = globalThis.setTimeout(() => setRemoteLimitMessage(""), 4e3);
 				return () => globalThis.clearTimeout(timer);
 			}, [remoteLimitMessage]);
+			(0, react.useEffect)(() => {
+				if (!localPortMessage) return;
+				const timer = globalThis.setTimeout(() => setLocalPortMessage(""), 4e3);
+				return () => globalThis.clearTimeout(timer);
+			}, [localPortMessage]);
 			(0, react.useEffect)(() => {
 				if (qrDataURL === null) return;
 				const timer = globalThis.setTimeout(() => {
 					setQRDataURL(null);
 					setPairingGrant(null);
 					setQRMessage(translateWith(props.t, "pair.qrAutoHidden"));
-				}, 6e4);
+				}, 1728e5);
 				return () => globalThis.clearTimeout(timer);
 			}, [qrDataURL]);
 			(0, react.useEffect)(() => {
@@ -3472,6 +3573,10 @@ window.__ModuleLoader__.load({
 			let report = null;
 			let enabled = true;
 			let switchReady = false;
+			let localEnabled = true;
+			let localSwitchReady = false;
+			let localPort = DEFAULT_LOCAL_PORT;
+			let localPortReady = false;
 			let remoteEnabled = false;
 			let remoteSwitchReady = false;
 			let remoteConnectionLimit = 8;
@@ -3501,6 +3606,18 @@ window.__ModuleLoader__.load({
 				if (typeof props.testRelay !== "function") diag.push(translateWith(props.t, "diag.missingTestRelay"));
 				if (typeof props.testPush !== "function") diag.push(translateWith(props.t, "diag.missingTestPush"));
 				if (typeof props.setDeepPilotEnabled !== "function") diag.push(translateWith(props.t, "diag.missingSetEnabled"));
+				if (typeof props.useDeepPilotLocalEnabled === "function") {
+					const state = props.useDeepPilotLocalEnabled((s) => s);
+					localEnabled = state.enabled;
+					localSwitchReady = state.status === "ready";
+				} else diag.push(translateWith(props.t, "diag.missingLocalEnabledHook"));
+				if (typeof props.useDeepPilotLocalPort === "function") {
+					const state = props.useDeepPilotLocalPort((s) => s);
+					localPort = state.value;
+					localPortReady = state.status === "ready";
+				} else diag.push(translateWith(props.t, "diag.missingLocalPortHook"));
+				if (typeof props.setDeepPilotLocalEnabled !== "function") diag.push(translateWith(props.t, "diag.missingSetLocal"));
+				if (typeof props.setDeepPilotLocalPort !== "function") diag.push(translateWith(props.t, "diag.missingSetLocalPort"));
 				if (typeof props.useDeepPilotRemoteEnabled === "function") {
 					const state = props.useDeepPilotRemoteEnabled((s) => s);
 					remoteEnabled = state.enabled;
@@ -3520,6 +3637,23 @@ window.__ModuleLoader__.load({
 			(0, react.useEffect)(() => {
 				setRemoteLimitDraft(String(remoteConnectionLimit));
 			}, [remoteConnectionLimit]);
+			(0, react.useEffect)(() => {
+				setLocalPortDraft(String(localPort));
+			}, [localPort]);
+			const parsedLocalPort = Number(localPortDraft);
+			const localPortValid = Number.isInteger(parsedLocalPort) && parsedLocalPort >= 1024 && parsedLocalPort <= 65535;
+			const applyLocalPort = () => {
+				if (!localPortValid || typeof props.setDeepPilotLocalPort !== "function") {
+					setLocalPortMessage(translateWith(props.t, "local.portInvalid"));
+					return;
+				}
+				setLocalPortMessage("");
+				props.setDeepPilotLocalPort(parsedLocalPort).then(() => {
+					setLocalPortMessage(translateWith(props.t, "local.portApplied"));
+				}, (error) => {
+					setLocalPortMessage(translateWith(props.t, "local.portFailed") + (error instanceof Error ? error.message : String(error)));
+				});
+			};
 			const parsedRemoteLimit = Number(remoteLimitDraft);
 			const remoteLimitValid = Number.isInteger(parsedRemoteLimit) && parsedRemoteLimit >= 1 && parsedRemoteLimit <= 16;
 			const applyRemoteLimit = () => {
@@ -3534,7 +3668,8 @@ window.__ModuleLoader__.load({
 					setRemoteLimitMessage(translateWith(props.t, "remote.limitFailed") + (error instanceof Error ? error.message : String(error)));
 				});
 			};
-			const pairingTarget = report === null ? null : selectPairingTarget(report.remote, report.lanAddresses, typeof window === "undefined" ? void 0 : window.location.origin);
+			const pairingTargets = report === null ? [] : selectPairingTargets(report.local, report.remote);
+			const pairingTarget = pairingTargets.find(({ host }) => host === selectedPairingHost) ?? pairingTargets[0] ?? null;
 			(0, react.useEffect)(() => {
 				setQRDataURL(null);
 				setPairingGrant(null);
@@ -3640,6 +3775,21 @@ window.__ModuleLoader__.load({
 				onClick: () => {
 					if (typeof props.setDeepPilotEnabled === "function") props.setDeepPilotEnabled(!enabled);
 				}
+			})), (0, react.createElement)("div", { className: "pbb-switchRow" }, (0, react.createElement)("div", { className: "pbb-switchText" }, (0, react.createElement)("span", { className: "pbb-switchTitle pbb-dotRow" }, (0, react.createElement)("span", {
+				className: "pbb-dot" + (report !== null ? LOCAL_PHASE_META[report.local.phase].dot : ""),
+				role: "img",
+				"aria-label": report !== null ? translateWith(props.t, LOCAL_PHASE_META[report.local.phase].labelKey) : translateWith(props.t, "phase.unknown"),
+				title: report !== null ? translateWith(props.t, LOCAL_PHASE_META[report.local.phase].labelKey) : void 0
+			}), translateWith(props.t, "local.title")), (0, react.createElement)("span", { className: "pbb-switchDesc" }, localSwitchReady ? localEnabled ? translateWith(props.t, "local.on", { port: localPort }) : translateWith(props.t, "local.off") : translateWith(props.t, "master.loading")), report !== null && report.local.message && report.local.phase === "error" ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, report.local.message) : null), (0, react.createElement)("button", {
+				type: "button",
+				role: "switch",
+				"aria-checked": localEnabled,
+				"aria-label": translateWith(props.t, "local.title"),
+				disabled: !localSwitchReady,
+				className: "pbb-switch" + (localEnabled ? " pbb-switchOn" : ""),
+				onClick: () => {
+					if (typeof props.setDeepPilotLocalEnabled === "function") props.setDeepPilotLocalEnabled(!localEnabled);
+				}
 			})), (0, react.createElement)("div", { className: "pbb-switchRow" }, (0, react.createElement)("div", { className: "pbb-switchText" }, (0, react.createElement)("span", { className: "pbb-switchTitle pbb-dotRow" }, (0, react.createElement)("span", {
 				className: "pbb-dot" + (report !== null ? REMOTE_PHASE_META[report.remote.phase].dot : ""),
 				role: "img",
@@ -3661,6 +3811,32 @@ window.__ModuleLoader__.load({
 					if (typeof props.setDeepPilotRemoteEnabled === "function") props.setDeepPilotRemoteEnabled(!remoteEnabled);
 				}
 			})), (0, react.createElement)("details", { className: "pbb-help" }, (0, react.createElement)("summary", null, translateWith(props.t, "remote.advancedSettings")), (0, react.createElement)("div", { className: "pbb-helpBody" }, (0, react.createElement)("div", { className: "pbb-limitRow pbb-limitNested" }, (0, react.createElement)("div", { className: "pbb-switchText" }, (0, react.createElement)("label", {
+				className: "pbb-switchTitle",
+				htmlFor: "deeppilot-local-port"
+			}, translateWith(props.t, "local.portTitle")), (0, react.createElement)("span", { className: "pbb-switchDesc" }, translateWith(props.t, "local.portDescription")), !localPortValid ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "local.portInvalid")) : localPortMessage ? (0, react.createElement)("p", { className: "pbb-diag" + (localPortMessage.startsWith(translateWith(props.t, "local.portFailed")) ? " pbb-diagBad" : "") }, localPortMessage) : null), (0, react.createElement)("div", { className: "pbb-limitControl" }, (0, react.createElement)("input", {
+				id: "deeppilot-local-port",
+				className: "pbb-numberInput",
+				type: "number",
+				min: MIN_LOCAL_PORT,
+				max: MAX_LOCAL_PORT,
+				step: 1,
+				inputMode: "numeric",
+				value: localPortDraft,
+				disabled: !localPortReady,
+				"aria-label": translateWith(props.t, "local.portTitle"),
+				onChange: (event) => setLocalPortDraft(event.currentTarget.value),
+				onKeyDown: (event) => {
+					if (event.key === "Enter") {
+						event.preventDefault();
+						applyLocalPort();
+					}
+				}
+			}), (0, react.createElement)("button", {
+				type: "button",
+				className: "pbb-action",
+				disabled: !localPortReady || !localPortValid || parsedLocalPort === localPort,
+				onClick: applyLocalPort
+			}, translateWith(props.t, "remote.limitApply")))), (0, react.createElement)("div", { className: "pbb-limitRow pbb-limitNested" }, (0, react.createElement)("div", { className: "pbb-switchText" }, (0, react.createElement)("label", {
 				className: "pbb-switchTitle",
 				htmlFor: "deeppilot-funnel-source-limit"
 			}, translateWith(props.t, "remote.limitTitle")), (0, react.createElement)("span", { className: "pbb-switchDesc" }, translateWith(props.t, "remote.limitDescription")), !remoteLimitValid ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "remote.limitInvalid")) : remoteLimitMessage ? (0, react.createElement)("p", { className: "pbb-diag" + (remoteLimitMessage.startsWith(translateWith(props.t, "remote.limitFailed")) ? " pbb-diagBad" : "") }, remoteLimitMessage) : null), (0, react.createElement)("div", { className: "pbb-limitControl" }, (0, react.createElement)("input", {
@@ -3699,7 +3875,15 @@ window.__ModuleLoader__.load({
 					if (qrDataURL === null) showPairingQR();
 					else hidePairingQR();
 				}
-			}, qrBusy ? translateWith(props.t, "pair.qrGenerating") : qrDataURL === null ? translateWith(props.t, "pair.qrShow") : translateWith(props.t, "pair.qrHide")))), pairingTarget === null ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "pair.noAddressHelp")) : null, qrMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, qrMessage) : null, pairingTarget === null || qrDataURL === null || pairingGrant === null ? null : (0, react.createElement)("div", { className: "pbb-qrPanel" }, (0, react.createElement)("img", {
+			}, qrBusy ? translateWith(props.t, "pair.qrGenerating") : qrDataURL === null ? translateWith(props.t, "pair.qrShow") : translateWith(props.t, "pair.qrHide")))), pairingTarget === null ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "pair.noAddressHelp")) : null, pairingTargets.length < 2 ? null : (0, react.createElement)("div", { className: "pbb-targetList" }, pairingTargets.map((target) => (0, react.createElement)("button", {
+				type: "button",
+				key: target.host,
+				className: "pbb-action" + (target.host === pairingTarget?.host ? " pbb-actionSelected" : ""),
+				onClick: () => {
+					setSelectedPairingHost(target.host);
+					hidePairingQR();
+				}
+			}, (target.kind === "public" ? translateWith(props.t, "pair.kind.public") : translateWith(props.t, "pair.kind.lan")) + " · " + target.host))), qrMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, qrMessage) : null, pairingTarget === null || qrDataURL === null || pairingGrant === null ? null : (0, react.createElement)("div", { className: "pbb-qrPanel" }, (0, react.createElement)("img", {
 				className: "pbb-qrImage",
 				src: qrDataURL,
 				alt: translateWith(props.t, "pair.qrAlt")
@@ -3888,6 +4072,24 @@ window.__ModuleLoader__.load({
 				if (snap?.status === "ready" && snap.value !== void 0) return snap.value.enabled !== false;
 				return enabledStore.getSnapshot().enabled;
 			};
+			const localEnabledStore = createSnapshotStore({
+				status: "loading",
+				enabled: true
+			});
+			const localPortStore = createSnapshotStore({
+				status: "loading",
+				value: DEFAULT_LOCAL_PORT
+			});
+			const lastConfirmedLocalEnabled = () => {
+				const snap = scope?.getSnapshot();
+				if (snap?.status === "ready") return snap.value?.local?.enabled !== false;
+				return localEnabledStore.getSnapshot().enabled;
+			};
+			const lastConfirmedLocalPort = () => {
+				const snap = scope?.getSnapshot();
+				if (snap?.status === "ready") return normalizeLocalPort(snap.value?.local?.port);
+				return localPortStore.getSnapshot().value;
+			};
 			const lastConfirmedRemoteEnabled = () => {
 				const snap = scope?.getSnapshot();
 				if (snap?.status === "ready") return snap.value?.remote?.enabled === true;
@@ -3914,6 +4116,76 @@ window.__ModuleLoader__.load({
 					console.error("[deeppilot] failed to persist enabled=" + String(value) + ": " + message);
 				});
 			};
+			const adoptLocal = () => {
+				if (scope === void 0) return;
+				const snap = scope.getSnapshot();
+				if (snap.status === "ready") {
+					localEnabledStore.set({
+						status: "ready",
+						enabled: snap.value?.local?.enabled !== false
+					});
+					localPortStore.set({
+						status: "ready",
+						value: normalizeLocalPort(snap.value?.local?.port)
+					});
+				} else if (snap.status === "unavailable") {
+					localEnabledStore.set({
+						status: "unavailable",
+						enabled: true
+					});
+					localPortStore.set({
+						status: "unavailable",
+						value: DEFAULT_LOCAL_PORT
+					});
+				}
+			};
+			if (scope !== void 0) {
+				scope.subscribe(adoptLocal);
+				adoptLocal();
+			}
+			const setDeepPilotLocalEnabled = (value) => {
+				const previous = lastConfirmedLocalEnabled();
+				localEnabledStore.set({
+					status: "ready",
+					enabled: value
+				});
+				if (scope === void 0) return;
+				const currentLocal = scope.getSnapshot().value?.local ?? {};
+				scope.set("local", {
+					...currentLocal,
+					enabled: value
+				}).then(() => {}, (error) => {
+					localEnabledStore.set({
+						status: "ready",
+						enabled: previous
+					});
+					console.error("[deeppilot] failed to persist local.enabled=" + String(value) + ": " + (error instanceof Error ? error.message : String(error)));
+				});
+			};
+			const setDeepPilotLocalPort = async (value) => {
+				const next = normalizeLocalPort(value);
+				if (next !== value) throw new RangeError("local port must be an integer between 1024 and 65535");
+				if (scope === void 0) throw new Error("settings scope unavailable");
+				const previous = lastConfirmedLocalPort();
+				localPortStore.set({
+					status: "ready",
+					value: next
+				});
+				const currentLocal = scope.getSnapshot().value?.local ?? {};
+				try {
+					await scope.set("local", {
+						...currentLocal,
+						port: next
+					});
+				} catch (error) {
+					localPortStore.set({
+						status: "ready",
+						value: previous
+					});
+					console.error("[deeppilot] failed to persist local.port=" + String(next) + ": " + (error instanceof Error ? error.message : String(error)));
+					throw error;
+				}
+			};
 			const remoteEnabledStore = createSnapshotStore({
 				status: "loading",
 				enabled: false
@@ -4008,6 +4280,8 @@ window.__ModuleLoader__.load({
 					hooks: {
 						deepPilotReport: store,
 						deepPilotEnabled: enabledStore,
+						deepPilotLocalEnabled: localEnabledStore,
+						deepPilotLocalPort: localPortStore,
 						deepPilotRemoteEnabled: remoteEnabledStore,
 						deepPilotRemoteConnectionLimit: remoteConnectionLimitStore
 					},
@@ -4019,6 +4293,8 @@ window.__ModuleLoader__.load({
 					testRelay: testRelayConnection,
 					testPush: sendTestPush,
 					setDeepPilotEnabled,
+					setDeepPilotLocalEnabled,
+					setDeepPilotLocalPort,
 					setDeepPilotRemoteEnabled,
 					setDeepPilotRemoteConnectionLimit,
 					t: (key, vars) => t(ctx, key, vars)