dsh-mobile 0.3.8 → 0.3.9

package/lib/client.js

@@ -466,8 +466,35 @@ window.__ModuleLoader__.load({
 			frpStep2Title: "2 · Prepare the VPS",
 			frpStep2Text: "Copy the restricted frps and Caddy template, then apply it on your VPS.",
 			copyServerTemplate: "Copy server template",
-			templateCopied: "Server template copied. Apply frps.toml and the Caddyfile on the VPS.",
+			templateCopied: "Server template copied. Save frps.toml and the Caddy snippet on the VPS, then add the import line to the Caddyfile.",
 			templateCopyFailed: "Could not copy the template. Check the four fields above.",
+			vpsDeployTitle: "Deploy the VPS automatically",
+			vpsDeployText: "Use an existing OpenSSH key or agent. The VPS must be Ubuntu/Debian with systemd; existing Caddy site configuration is never overwritten.",
+			vpsDeployChangesTitle: "Automatic deployment will change the following on the VPS (manual template changes nothing by itself):",
+			vpsDeployChangePackages: "Install Caddy from its official APT repository, plus a Python venv and Certbot for public-IPv4 certificates.",
+			vpsDeployChangeServices: "Create the dsh-mobile system user (only if missing, otherwise kept), the frps config and service, the Caddy snippet plus one import line, and a daily certificate-renewal timer.",
+			vpsDeployChangeFirewall: "Open the FRP control port, 80/tcp, and 443/tcp in UFW when it is active; other firewalls are left for you to adjust.",
+			vpsDeployChangeManual: "Manual deployment applies the same steps by hand from the copied template; automatic deployment runs them over SSH after you confirm the host keys.",
+			vpsSshUser: "SSH user",
+			vpsSshPort: "SSH port",
+			vpsSshKey: "Private key path (optional)",
+			vpsSshKeyPlaceholder: "Uses ssh-agent or ~/.ssh/config when empty",
+			vpsDeploy: "Deploy frps + Caddy",
+			vpsDeploying: "Deploying to the VPS. Keep DSH running…",
+			vpsDeploySuccess: "VPS deployment completed. Start FRP connection to verify the public endpoint.",
+			vpsDeployFailed: "VPS deployment failed: {error}",
+			vpsDeployNotReady: "Save the FRP settings before deploying the VPS.",
+			vpsHostKeyFetching: "Reading the VPS host keys…",
+			vpsHostKeyFailed: "Could not read the VPS host keys: {error}",
+			vpsDeployConfirmWithKeys: "Deploy DSH Mobile frps and Caddy to this VPS? Only DSH Mobile service/config files and firewall rules will be created. Existing non-empty Caddy configuration will stop the deployment.\n\nThe server presents these host keys. Confirm they match the VPS console before continuing:\n{fingerprints}",
+			vpsCopyUninstall: "Copy VPS uninstall script",
+			vpsUninstallScriptCopied: "Uninstall script copied. Review it before running with root on the VPS.",
+			vpsUninstallScriptFailed: "Could not build the uninstall script: {error}",
+			vpsUninstall: "Remove DSH Mobile from the VPS",
+			vpsUninstallConfirmWithKeys: "Remove all DSH Mobile services, configs, certificates, and owned firewall rules from this VPS? Your own Caddy content and unrelated rules are kept.\n\nThe server presents these host keys. Confirm they match the VPS console before continuing:\n{fingerprints}",
+			vpsUninstalling: "Removing DSH Mobile from the VPS. Keep DSH running…",
+			vpsUninstallSuccess: "VPS cleanup completed. The local FRP settings are unchanged.",
+			vpsUninstallFailed: "VPS cleanup failed: {error}",
 			frpStep3Title: "3 · Prepare this computer",
 			frpStep3Text: "Download and verify the pinned official frpc client only when requested.",
 			installFrpc: "Install official frpc",
@@ -528,8 +555,35 @@ window.__ModuleLoader__.load({
 			frpStep2Title: "2 · Prepara il VPS",
 			frpStep2Text: "Copia il modello limitato per frps e Caddy e applicalo sul VPS.",
 			copyServerTemplate: "Copia modello server",
-			templateCopied: "Modello server copiato. Applica frps.toml e Caddyfile sul VPS.",
+			templateCopied: "Modello server copiato. Salva frps.toml e lo snippet Caddy sul VPS, poi aggiungi la riga import al Caddyfile.",
 			templateCopyFailed: "Impossibile copiare il modello. Controlla i quattro campi sopra.",
+			vpsDeployTitle: "Prepara automaticamente il VPS",
+			vpsDeployText: "Usa una chiave OpenSSH o un agent esistente. Il VPS deve essere Ubuntu/Debian con systemd; una configurazione Caddy non vuota non viene sovrascritta.",
+			vpsDeployChangesTitle: "Il deploy automatico modifica quanto segue sul VPS (il modello manuale da solo non cambia nulla):",
+			vpsDeployChangePackages: "Installa Caddy dal repository APT ufficiale, più un venv Python e Certbot per i certificati IPv4 pubblici.",
+			vpsDeployChangeServices: "Crea l’utente di sistema dsh-mobile (solo se assente, altrimenti mantenuto), la configurazione e il servizio frps, lo snippet Caddy più una riga import, e un timer giornaliero di rinnovo certificati.",
+			vpsDeployChangeFirewall: "Apre la porta di controllo FRP, 80/tcp e 443/tcp in UFW quando attivo; gli altri firewall restano a tuo carico.",
+			vpsDeployChangeManual: "Il deploy manuale applica gli stessi passi a mano dal modello copiato; quello automatico li esegue via SSH dopo la conferma delle chiavi host.",
+			vpsSshUser: "Utente SSH",
+			vpsSshPort: "Porta SSH",
+			vpsSshKey: "Percorso chiave privata (opzionale)",
+			vpsSshKeyPlaceholder: "Usa ssh-agent o ~/.ssh/config se vuoto",
+			vpsDeploy: "Installa frps + Caddy",
+			vpsDeploying: "Deploy sul VPS in corso. Mantieni DSH attivo…",
+			vpsDeploySuccess: "Deploy VPS completato. Avvia FRP per verificare l’endpoint pubblico.",
+			vpsDeployFailed: "Deploy VPS fallito: {error}",
+			vpsDeployNotReady: "Salva le impostazioni FRP prima del deploy VPS.",
+			vpsHostKeyFetching: "Lettura delle chiavi host del VPS…",
+			vpsHostKeyFailed: "Impossibile leggere le chiavi host del VPS: {error}",
+			vpsDeployConfirmWithKeys: "Installare frps e Caddy DSH Mobile su questo VPS? Verranno creati solo file di servizio/configurazione e regole firewall DSH Mobile. Una configurazione Caddy esistente non vuota interromperà il deploy.\n\nIl server presenta queste chiavi host. Verifica che corrispondano alla console del VPS prima di continuare:\n{fingerprints}",
+			vpsCopyUninstall: "Copia script di disinstallazione VPS",
+			vpsUninstallScriptCopied: "Script di disinstallazione copiato. Controllalo prima di eseguirlo come root sul VPS.",
+			vpsUninstallScriptFailed: "Impossibile creare lo script di disinstallazione: {error}",
+			vpsUninstall: "Rimuovi DSH Mobile dal VPS",
+			vpsUninstallConfirmWithKeys: "Rimuovere tutti i servizi, le configurazioni, i certificati e le regole firewall di DSH Mobile da questo VPS? I tuoi contenuti Caddy e le altre regole restano invariati.\n\nIl server presenta queste chiavi host. Verifica che corrispondano alla console del VPS prima di continuare:\n{fingerprints}",
+			vpsUninstalling: "Rimozione di DSH Mobile dal VPS. Mantieni DSH attivo…",
+			vpsUninstallSuccess: "Pulizia VPS completata. Le impostazioni FRP locali restano invariate.",
+			vpsUninstallFailed: "Pulizia VPS fallita: {error}",
 			frpStep3Title: "3 · Prepara questo computer",
 			frpStep3Text: "Scarica e verifica il client frpc ufficiale fissato solo su richiesta.",
 			installFrpc: "Installa frpc ufficiale",
@@ -573,41 +627,68 @@ window.__ModuleLoader__.load({
 		});
 		Object.assign(MOBILE_CONTROL_MESSAGES.zh, {
 			selfHostedConnections: "自建连接",
-			selfHostedDescription: "适合已有 VPS 和域名的用户，不受公共服务带宽限制。",
+			selfHostedDescription: "适合已有 VPS 的用户，可使用域名或公网 IPv4，不受公共服务带宽限制。",
 			advanced: "高级",
 			frpName: "自建 FRP",
-			frpDescription: "只为当前 DSH 网关建立单用途 FRP 通道，VPS 和公开域名由你掌控。",
+			frpDescription: "只为当前 DSH 网关建立单用途 FRP 通道，VPS 和公开入口由你掌控。",
 			prepareFrp: "配置自建 FRP",
-			frpStep1Title: "1 · 填写连接信息",
-			frpStep1Text: "填写 VPS 地址、frps 控制端口、共享 Token 和公开 HTTPS 地址。",
-			frpServerAddress: "VPS 地址",
-			frpServerAddressPlaceholder: "frp.example.com",
-			frpServerPort: "frps 端口",
+			frpStep1Title: "1 · 连接信息",
+			frpStep1Text: "填写中转服务器地址、frps 控制端口、共享 Token 和手机访问地址。没有域名时，可直接使用公网 IPv4。",
+			frpServerAddress: "中转服务器地址",
+			frpServerAddressPlaceholder: "203.0.113.10",
+			frpServerPort: "frps 控制端口",
 			frpToken: "共享 Token",
-			frpTokenPlaceholder: "至少 16 个字符",
-			frpPublicOrigin: "公开 HTTPS 地址",
-			frpPublicOriginPlaceholder: "https://dsh.example.com",
-			frpStep2Title: "2 · 准备 VPS",
-			frpStep2Text: "复制受限的 frps 与 Caddy 模板，并在 VPS 上应用。",
-			copyServerTemplate: "复制服务器模板",
-			templateCopied: "服务器模板已复制，请在 VPS 应用 frps.toml 和 Caddyfile。",
-			templateCopyFailed: "无法复制模板，请检查上方四项信息。",
-			frpStep3Title: "3 · 准备这台电脑",
-			frpStep3Text: "仅在你确认后下载并校验固定版本的官方 frpc。",
+			frpTokenPlaceholder: "已保存时可留空；新建至少 16 个字符",
+			frpPublicOrigin: "手机访问地址（HTTPS）",
+			frpPublicOriginPlaceholder: "https://203.0.113.10",
+			frpStep2Title: "2 · 部署中转服务器",
+			frpStep2Text: "推荐通过 SSH 一键部署。需要手动操作时，也可以复制受限的 frps 与 Caddy 配置模板。",
+			copyServerTemplate: "复制手动部署模板",
+			templateCopied: "服务器模板已复制，请在 VPS 上保存 frps.toml 和 Caddy 片段，并在 Caddyfile 里加一行 import。",
+			templateCopyFailed: "无法复制模板，请检查上方连接信息。",
+			vpsDeployTitle: "中转服务器部署",
+			vpsDeployText: "填写 SSH 登录信息。服务器需为带 systemd 的 Ubuntu/Debian；不会覆盖已有的 Caddy 站点配置。",
+			vpsDeployChangesTitle: "自动部署会在 VPS 上做这些改动（只复制手动模板不会改变任何东西）：",
+			vpsDeployChangePackages: "从官方 APT 源安装 Caddy，并安装 Python venv 与 Certbot（公网 IP 证书用）。",
+			vpsDeployChangeServices: "创建 dsh-mobile 系统用户（如已存在则复用，卸载时保留）、frps 配置与服务、Caddy 片段加一行 import，以及每天自动续证书的定时器。",
+			vpsDeployChangeFirewall: "UFW 开启时放行 FRP 控制端口、80/tcp 和 443/tcp；其他防火墙需要你自己放行。",
+			vpsDeployChangeManual: "手动部署是照着复制的模板一步步自己操作；自动部署是在你确认主机指纹后通过 SSH 执行同样的步骤。",
+			vpsSshUser: "SSH 用户",
+			vpsSshPort: "SSH 端口",
+			vpsSshKey: "私钥文件路径（可选）",
+			vpsSshKeyPlaceholder: "留空则使用 ssh-agent 或 SSH 配置",
+			vpsDeploy: "一键部署 frps + Caddy",
+			vpsDeploying: "正在部署中转服务器，请保持 DSH 运行…",
+			vpsDeploySuccess: "中转服务器部署完成，请继续完成本机组件安装和连接验证。",
+			vpsDeployFailed: "VPS 部署失败：{error}",
+			vpsDeployNotReady: "请先填写完整的连接信息。",
+			vpsHostKeyFetching: "正在读取中转服务器的主机指纹…",
+			vpsHostKeyFailed: "读取中转服务器主机指纹失败：{error}",
+			vpsDeployConfirmWithKeys: "要在这台 VPS 上部署 DSH Mobile 的 frps 和 Caddy 吗？只会创建 DSH Mobile 自己的服务、配置和防火墙规则；如果已有非空 Caddy 配置，部署会停止并保留原配置。\n\n服务器当前的主机指纹如下，请先到 VPS 控制台核对一致后再继续：\n{fingerprints}",
+			vpsCopyUninstall: "复制 VPS 卸载脚本",
+			vpsUninstallScriptCopied: "卸载脚本已复制，请审阅后再以 root 身份在 VPS 上执行。",
+			vpsUninstallScriptFailed: "生成卸载脚本失败：{error}",
+			vpsUninstall: "清理 VPS 上的 DSH Mobile",
+			vpsUninstallConfirmWithKeys: "要删除这台 VPS 上的 DSH Mobile 服务、配置、证书和专属防火墙规则吗？你自己的 Caddy 内容和其他规则会保留。\n\n服务器当前的主机指纹如下，请先到 VPS 控制台核对一致后再继续：\n{fingerprints}",
+			vpsUninstalling: "正在清理 VPS 上的 DSH Mobile，请保持 DSH 运行…",
+			vpsUninstallSuccess: "VPS 清理完成，本机 FRP 设置保持不变。",
+			vpsUninstallFailed: "VPS 清理失败：{error}",
+			frpStep3Title: "3 · 安装本机组件",
+			frpStep3Text: "下载并校验固定版本的官方 frpc，只安装到 DSH Mobile 私有目录。",
 			installFrpc: "安装官方 frpc",
 			frpInstallConfirm: "从 FRP 官方 Release 下载并校验 frpc 0.70.1（约 {size} MB），只提取 frpc 到 DSH Mobile 私有目录？不会安装服务、写入 PATH 或设置开机启动。",
 			installingFrp: "正在安装官方 frpc，完成前请保持 DSH 运行。",
-			frpNotInstalled: "frpc 尚未安装。点击安装前不会下载任何内容。",
+			frpNotInstalled: "frpc 尚未安装；点击下方按钮后才会开始下载。",
 			frpUnsupported: "当前桌面平台暂不支持托管安装 frpc。",
-			frpComponentReady: "官方 frpc {version} 已校验。",
-			frpStep4Title: "4 · 验证并连接",
-			frpStep4Text: "插件只启动 DSH 的 HTTP vhost，并确认公网端点确实属于这台电脑。",
-			frpAppRequirement: "自定义远程域名需要 Android App 0.3.3 或更高版本；局域网、cpolar 和 Tailscale 仍兼容此前受支持的 App。",
-			frpSaveConnect: "保存并验证连接",
+			frpComponentReady: "官方 frpc {version} 已安装并通过校验。",
+			frpStep4Title: "4 · 启用并验证",
+			frpStep4Text: "保存配置、启动受限的 FRP 通道，并确认手机访问地址确实连接到这台电脑。",
+			frpAppRequirement: "通过自定义域名或公网 IP 连接，需要 Android App 0.3.3 或更高版本。局域网、cpolar 和 Tailscale 不受影响。",
+			frpSaveConnect: "保存配置并验证连接",
 			frpSavingConnecting: "正在保存私有配置并验证完整 FRP 链路…",
-			frpConfigurationReady: "服务器配置已保存，Token 只保存在插件私有目录。",
-			frpConfigurationMissing: "请填写完整信息、复制 VPS 模板，然后保存并连接。",
-			frpInputInvalid: "请检查 VPS 地址、端口、HTTPS 地址和 Token。",
+			frpConfigurationReady: "连接配置已安全保存",
+			frpConfigurationMissing: "请按顺序完成连接信息、服务器部署和本机组件安装。",
+			frpInputInvalid: "请检查服务器地址、控制端口、手机访问地址和共享 Token。",
 			frpComponentDetails: "FRP 来源与彻底清理",
 			frpComponentDetailsText: "固定版本客户端来自 fatedier/frp 官方 Release。DSH Mobile 不安装系统服务，也不接受任意 FRP 配置。",
 			frpOfficialRelease: "FRP 官方 Release",
@@ -895,33 +976,98 @@ window.__ModuleLoader__.load({
 		//#region src/frp-template.ts
 		/** Loopback-only HTTP vhost port used between Caddy and frps. */
 		const FRP_VHOST_HTTP_PORT = 7080;
+		/** Caddy snippet owned entirely by DSH Mobile; the main Caddyfile only imports it. */
+		const FRP_CADDY_SNIPPET_PATH = "/etc/caddy/dsh-mobile-dsh.caddy";
+		/** First line of the owned snippet; also the legacy whole-file marker. */
+		const FRP_CADDY_SNIPPET_MARKER = "# Managed by DSH Mobile - snippet, safe to delete";
+		/** Exact line the main Caddyfile must contain (uncommented) for the site to load. */
+		const FRP_CADDY_IMPORT_LINE = `import ${FRP_CADDY_SNIPPET_PATH}`;
+		/** Directory holding the public-IPv4 certificates installed by certbot. */
+		const FRP_CADDY_IP_CERT_DIR = "/var/lib/caddy/dsh-mobile-certs";
+		function publicIpv4Address(value) {
+			const parts = value.split(".");
+			return parts.length === 4 && parts.every((part) => /^(?:0|[1-9][0-9]{0,2})$/u.test(part) && Number(part) <= 255);
+		}
 		function publicDnsHostname(value) {
 			return value.length <= 253 && value.includes(".") && !/^[0-9.]+$/u.test(value) && !value.includes(":") && value.split(".").every((label) => label.length >= 1 && label.length <= 63 && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/u.test(label));
 		}
-		/** Build the only supported frps and Caddy configuration from validated user inputs. */
-		function createRestrictedFrpServerTemplate(serverPort, token, publicOrigin) {
-			if (!Number.isSafeInteger(serverPort) || serverPort < 1 || serverPort > 65535 || token.length < 16 || token.length > 512 || /[\s\u0000-\u001f\u007f]/u.test(token)) throw new Error("frp_template_input_invalid");
+		function parsePublicOrigin(publicOrigin) {
 			let url;
 			try {
 				url = new URL(publicOrigin);
 			} catch {
 				throw new Error("frp_template_input_invalid");
 			}
-			if (url.protocol !== "https:" || url.port !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "" || url.username !== "" || url.password !== "" || !publicDnsHostname(url.hostname)) throw new Error("frp_template_input_invalid");
+			if (url.protocol !== "https:" || url.port !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "" || url.username !== "" || url.password !== "" || !publicIpv4Address(url.hostname) && !publicDnsHostname(url.hostname)) throw new Error("frp_template_input_invalid");
+			return url.hostname;
+		}
+		/** Build the Caddy site for one public host (without markers or import wiring). */
+		function createCaddySite(publicHost, certDir = FRP_CADDY_IP_CERT_DIR) {
+			if (publicIpv4Address(publicHost)) return [
+				"{",
+				`  default_sni ${publicHost}`,
+				"}",
+				"",
+				`http://${publicHost} {`,
+				`  redir https://${publicHost}{uri} permanent`,
+				"}",
+				"",
+				`https://${publicHost} {`,
+				`  tls ${certDir}/fullchain.pem ${certDir}/privkey.pem`,
+				`  reverse_proxy 127.0.0.1:${String(FRP_VHOST_HTTP_PORT)}`,
+				"}",
+				""
+			].join("\n");
+			if (!publicDnsHostname(publicHost)) throw new Error("frp_template_input_invalid");
+			return [
+				`${publicHost} {`,
+				`  reverse_proxy 127.0.0.1:${String(FRP_VHOST_HTTP_PORT)}`,
+				"}",
+				""
+			].join("\n");
+		}
+		/** Manual certbot steps for a public-IPv4 origin (Caddy cannot issue IP certificates itself). */
+		function manualIpCertificateGuide(publicHost) {
 			return [
-				"# frps.toml",
+				"# Public-IPv4 manual HTTPS: Caddy cannot issue IP certificates by itself.",
+				"# On the VPS (Ubuntu/Debian, port 80 reachable from the internet), run once as root:",
+				"#   apt-get install -y python3-venv",
+				"#   python3 -m venv /opt/dsh-mobile/certbot-venv",
+				"#   /opt/dsh-mobile/certbot-venv/bin/pip install 'certbot==5.8.0'",
+				"#   systemctl stop caddy || true",
+				`#   /opt/dsh-mobile/certbot-venv/bin/certbot certonly --standalone --preferred-profile shortlived --ip-address ${publicHost} --agree-tos --register-unsafely-without-email --non-interactive --keep-until-expiring`,
+				"#   install -d -m 0750 -o caddy -g caddy /var/lib/caddy/dsh-mobile-certs",
+				`#   install -m 0640 -o caddy -g caddy /etc/letsencrypt/live/${publicHost}/fullchain.pem /var/lib/caddy/dsh-mobile-certs/fullchain.pem`,
+				`#   install -m 0640 -o caddy -g caddy /etc/letsencrypt/live/${publicHost}/privkey.pem /var/lib/caddy/dsh-mobile-certs/privkey.pem`,
+				"#   systemctl start caddy",
+				"# The site below already references those paths. Certificates last about 6 days: re-run certonly before expiry.",
+				"#"
+			].join("\n");
+		}
+		/** Build the only supported frps config and Caddy snippet from validated user inputs. */
+		function createRestrictedFrpServerTemplate(serverPort, token, publicOrigin) {
+			if (!Number.isSafeInteger(serverPort) || serverPort < 1 || serverPort > 65535 || token.length < 16 || token.length > 512 || /[\s\u0000-\u001f\u007f]/u.test(token)) throw new Error("frp_template_input_invalid");
+			const publicHost = parsePublicOrigin(publicOrigin);
+			const lines = [
+				"# frps.toml — save as /etc/dsh-mobile/frps.toml, then start the frps service.",
 				`bindPort = ${String(serverPort)}`,
 				"proxyBindAddr = \"127.0.0.1\"",
 				`vhostHTTPPort = ${String(FRP_VHOST_HTTP_PORT)}`,
 				"auth.method = \"token\"",
 				`auth.token = ${JSON.stringify(token)}`,
 				"",
-				"# Caddyfile",
-				`${url.hostname} {`,
-				`  reverse_proxy 127.0.0.1:${String(FRP_VHOST_HTTP_PORT)}`,
-				"}",
+				`# Caddy — save the site below as ${FRP_CADDY_SNIPPET_PATH},`,
+				"# then make sure your Caddyfile contains exactly this line at the TOP of the file",
+				"# (create the file with just this line if needed; globals must precede sites):",
+				`#   ${FRP_CADDY_IMPORT_LINE}`,
+				"# finally run: caddy validate --config /etc/caddy/Caddyfile && systemctl reload caddy",
+				"# Uninstall later removes only this snippet file and the import line; your own Caddy content is kept.",
+				`${FRP_CADDY_SNIPPET_MARKER}`,
+				createCaddySite(publicHost).trimEnd(),
 				""
-			].join("\n");
+			];
+			if (publicIpv4Address(publicHost)) lines.push(manualIpCertificateGuide(publicHost), "");
+			return lines.join("\n");
 		}
 		//#endregion
 		//#region src/native-mobile.ts
@@ -1032,6 +1178,8 @@ window.__ModuleLoader__.load({
   [data-dsh-mobile-center] [data-composer-card] ~ * [class*="_root"] { box-sizing:border-box !important; width:100% !important; max-width:100% !important; margin-bottom:-6px !important; padding:3px 4px 0 !important; font-size:11px !important; line-height:18px !important; white-space:normal !important; overflow:visible !important; text-overflow:clip !important; }
   [data-dsh-mobile-center] [data-composer-card] ~ [class*="_root"] [class*="_sep"],
   [data-dsh-mobile-center] [data-composer-card] ~ * [class*="_root"] [class*="_sep"] { margin:0 6px !important; }
+  /* Composer dock stats strip (turns/steps/tokens) reads small on phones. */
+  [data-dsh-mobile-center] [data-slot="conversation.composer.dock"] [class*="_root"] { font-size:10px !important; line-height:16px !important; }
   /* Message runtime details are inline on desktop. Give the clock/runtime
      label its own wrapping row on narrow screens so TTFT and throughput do
      not push the action buttons or clip at the viewport edge. */
@@ -1813,7 +1961,7 @@ window.__ModuleLoader__.load({
 			return node;
 		}
 		const CONTROL_REQUEST_TIMEOUT_MS = 15e3;
-		const LONG_CONTROL_REQUEST_TIMEOUT_MS = 13e4;
+		const LONG_CONTROL_REQUEST_TIMEOUT_MS = 21e4;
 		const GITHUB_RELEASES_URL = "https://github.com/saya-ch/dsh-mobile/releases";
 		const CONTROL_PANEL_ID = "dsh-mobile-control-panel";
 		function releaseVersion(value) {
@@ -2165,7 +2313,60 @@ window.__ModuleLoader__.load({
 			const frpCopyTemplate = element("button", "dsh-mobile-control__secondary dsh-mobile-control__frp-action");
 			frpCopyTemplate.type = "button";
 			frpCopyTemplate.textContent = t("copyServerTemplate");
-			frpStep2.append(frpStep2Title, frpStep2Text, frpCopyTemplate);
+			const vpsDeployText = element("p");
+			vpsDeployText.textContent = t("vpsDeployText");
+			const vpsChangesTitle = element("p");
+			vpsChangesTitle.textContent = t("vpsDeployChangesTitle");
+			const vpsChanges = element("ul", "dsh-mobile-control__frp-changes");
+			for (const key of [
+				"vpsDeployChangePackages",
+				"vpsDeployChangeServices",
+				"vpsDeployChangeFirewall",
+				"vpsDeployChangeManual"
+			]) {
+				const item = element("li");
+				item.textContent = t(key);
+				vpsChanges.append(item);
+			}
+			const vpsDeployFields = element("div", "dsh-mobile-control__frp-fields");
+			const vpsSshUserLabel = element("label", "dsh-mobile-control__field");
+			vpsSshUserLabel.textContent = t("vpsSshUser");
+			const vpsSshUser = element("input");
+			vpsSshUser.type = "text";
+			vpsSshUser.autocomplete = "username";
+			vpsSshUser.value = "ubuntu";
+			vpsSshUser.spellcheck = false;
+			const vpsSshPortLabel = element("label", "dsh-mobile-control__field");
+			vpsSshPortLabel.textContent = t("vpsSshPort");
+			const vpsSshPort = element("input");
+			vpsSshPort.type = "number";
+			vpsSshPort.inputMode = "numeric";
+			vpsSshPort.min = "1";
+			vpsSshPort.max = "65535";
+			vpsSshPort.value = "22";
+			const vpsSshKeyLabel = element("label", "dsh-mobile-control__field");
+			vpsSshKeyLabel.textContent = t("vpsSshKey");
+			const vpsSshKey = element("input");
+			vpsSshKey.type = "text";
+			vpsSshKey.autocomplete = "off";
+			vpsSshKey.spellcheck = false;
+			vpsSshKey.placeholder = t("vpsSshKeyPlaceholder");
+			vpsSshUserLabel.append(vpsSshUser);
+			vpsSshPortLabel.append(vpsSshPort);
+			vpsSshKeyLabel.append(vpsSshKey);
+			vpsDeployFields.append(vpsSshUserLabel, vpsSshPortLabel, vpsSshKeyLabel);
+			const vpsDeploy = element("button", "dsh-mobile-control__primary dsh-mobile-control__frp-action");
+			vpsDeploy.type = "button";
+			vpsDeploy.textContent = t("vpsDeploy");
+			const vpsDeployStatus = element("p", "dsh-mobile-control__component-status");
+			vpsDeployStatus.textContent = "";
+			const vpsCopyUninstall = element("button", "dsh-mobile-control__secondary dsh-mobile-control__frp-action");
+			vpsCopyUninstall.type = "button";
+			vpsCopyUninstall.textContent = t("vpsCopyUninstall");
+			const vpsUninstall = element("button", "dsh-mobile-control__danger dsh-mobile-control__frp-action");
+			vpsUninstall.type = "button";
+			vpsUninstall.textContent = t("vpsUninstall");
+			frpStep2.append(frpStep2Title, frpStep2Text, frpCopyTemplate, vpsDeployText, vpsChangesTitle, vpsChanges, vpsDeployFields, vpsDeploy, vpsDeployStatus, vpsCopyUninstall, vpsUninstall);
 			const frpStep3 = element("section", "dsh-mobile-control__frp-step");
 			const frpStep3Title = element("strong");
 			frpStep3Title.textContent = t("frpStep3Title");
@@ -2208,7 +2409,35 @@ window.__ModuleLoader__.load({
 			frpPurge.textContent = t("purgeFrp");
 			frpDetailsBody.append(frpDetailsText, frpStorage, frpOfficial, frpPurge);
 			frpDetails.append(frpDetailsSummary, frpDetailsBody);
-			frpSetup.append(frpSetupTitle, frpStep1, frpStep2, frpStep3, frpStep4, frpDetails);
+			const frpOverview = element("section", "dsh-mobile-control__frp-overview");
+			frpOverview.hidden = true;
+			const frpOverviewMark = element("span", "dsh-mobile-control__frp-overview-mark");
+			frpOverviewMark.textContent = "✓";
+			const frpOverviewBody = element("div", "dsh-mobile-control__frp-overview-body");
+			const frpOverviewTitle = element("strong");
+			frpOverviewTitle.textContent = t("frpConfigurationReady");
+			const frpOverviewEndpoint = element("span");
+			frpOverviewEndpoint.textContent = "";
+			frpOverviewBody.append(frpOverviewTitle, frpOverviewEndpoint);
+			frpOverview.append(frpOverviewMark, frpOverviewBody);
+			const frpConnectionGroup = element("details", "dsh-mobile-control__frp-group");
+			const frpConnectionSummary = element("summary");
+			frpConnectionSummary.textContent = t("frpStep1Title");
+			frpConnectionGroup.append(frpConnectionSummary, frpStep1);
+			const frpVpsGroup = element("details", "dsh-mobile-control__frp-group");
+			const frpVpsSummary = element("summary");
+			frpVpsSummary.textContent = t("vpsDeployTitle");
+			frpVpsGroup.append(frpVpsSummary, frpStep2);
+			const frpComponentGroup = element("details", "dsh-mobile-control__frp-group");
+			const frpComponentSummary = element("summary");
+			frpComponentSummary.textContent = t("frpStep3Title");
+			frpComponentGroup.append(frpComponentSummary, frpStep3);
+			const frpVerifyGroup = element("details", "dsh-mobile-control__frp-group");
+			frpVerifyGroup.open = true;
+			const frpVerifySummary = element("summary");
+			frpVerifySummary.textContent = t("frpStep4Title");
+			frpVerifyGroup.append(frpVerifySummary, frpStep4);
+			frpSetup.append(frpSetupTitle, frpOverview, frpConnectionGroup, frpVpsGroup, frpComponentGroup, frpVerifyGroup, frpDetails);
 			const tailscaleInfo = element("details", "dsh-mobile-control__details");
 			const tailscaleInfoSummary = element("summary");
 			tailscaleInfoSummary.textContent = t("tailscaleHelp");
@@ -2364,6 +2593,7 @@ window.__ModuleLoader__.load({
 			let cpolarConfigured = false;
 			let frpInstalled = false;
 			let frpConfigured = false;
+			let frpLayoutInitialized = false;
 			let frpDownloadSize = "14.0";
 			let configuredFrpServer = "";
 			let configuredFrpPort = 7e3;
@@ -2640,9 +2870,24 @@ window.__ModuleLoader__.load({
 				frpInstall.textContent = frpDownloadBytes > 0 ? t("installWithSize", { size: formatMegabytes(frpDownloadBytes) }) : t("installFrpc");
 				frpInstall.disabled = remoteProviderBusy;
 				frpConfigure.disabled = remoteProviderBusy || !frpInstalled;
+				vpsDeploy.disabled = remoteProviderBusy || !validVpsDeploymentForm();
+				vpsCopyUninstall.disabled = vpsDeploy.disabled;
+				vpsUninstall.disabled = vpsDeploy.disabled;
 				frpPurge.hidden = !frpInstalled && !frpConfigured;
 				frpComponentStatus.textContent = !frpSupported ? t("frpUnsupported") : frpInstalled ? t("frpComponentReady", { version: frpVersion }) : t("frpNotInstalled");
 				frpConfigurationStatus.textContent = frpConfigured ? t("frpConfigurationReady") : t("frpConfigurationMissing");
+				frpOverview.hidden = !frpConfigured;
+				frpOverviewEndpoint.textContent = configuredFrpOrigin === "" ? configuredFrpServer : `${configuredFrpOrigin} · ${configuredFrpServer}:${String(configuredFrpPort)}`;
+				frpToken.placeholder = frpConfigured ? locale === "zh" ? "已安全保存；留空保持不变" : locale === "it" ? "Salvato; lascia vuoto per mantenerlo" : "Saved securely; leave blank to keep it" : t("frpTokenPlaceholder");
+				vpsDeploy.textContent = frpConfigured ? locale === "zh" ? "修复或重新部署 VPS" : locale === "it" ? "Ripara o ridistribuisci VPS" : "Repair or redeploy VPS" : t("vpsDeploy");
+				frpConnectionSummary.textContent = `${frpConfigured ? "✓ " : ""}${t("frpStep1Title")}`;
+				frpComponentSummary.textContent = `${frpInstalled ? "✓ " : ""}${t("frpStep3Title")}`;
+				if (!frpLayoutInitialized) {
+					frpConnectionGroup.open = !frpConfigured;
+					frpComponentGroup.open = !frpInstalled;
+					frpVpsGroup.open = false;
+					frpLayoutInitialized = true;
+				}
 				selfHostedBadge.textContent = frpConfigured && frpInstalled ? t("ready") : t("advanced");
 				const state = typeof data.state === "string" ? data.state : "error";
 				const errorCode = typeof data.errorCode === "string" ? data.errorCode : "";
@@ -2825,10 +3070,10 @@ window.__ModuleLoader__.load({
 			});
 			const validFrpServer = (value) => value === value.trim() && value.length > 0 && value.length <= 253 && !/[\s\u0000-\u001f\u007f/\\@?#]/u.test(value);
 			const frpForm = () => ({
-				serverAddress: frpServer.value.trim(),
+				serverAddress: String(frpServer.value ?? "").trim(),
 				serverPort: Number(frpPort.value),
-				token: frpToken.value,
-				publicOrigin: frpOrigin.value.trim()
+				token: String(frpToken.value ?? ""),
+				publicOrigin: String(frpOrigin.value ?? "").trim()
 			});
 			const validFrpForm = (form) => {
 				if (!validFrpServer(form.serverAddress)) return false;
@@ -2851,6 +3096,260 @@ window.__ModuleLoader__.load({
 					remoteStatus.textContent = t("templateCopyFailed");
 				});
 			});
+			const validVpsSshUser = (value) => /^[a-z_][a-z0-9_.-]*[$]?$/iu.test(value) && value.length <= 64;
+			const validVpsSshKey = (value) => value === "" || /^[a-zA-Z]:[\\/]/u.test(value) || value.startsWith("/");
+			const vpsFormStorageKey = "dsh-mobile.frp-vps-form.v1";
+			try {
+				const saved = JSON.parse(localStorage.getItem(vpsFormStorageKey) ?? "{}");
+				if (typeof saved.sshUser === "string" && validVpsSshUser(saved.sshUser)) vpsSshUser.value = saved.sshUser;
+				if (typeof saved.sshPort === "number" && Number.isSafeInteger(saved.sshPort) && saved.sshPort >= 1 && saved.sshPort <= 65535) vpsSshPort.value = String(saved.sshPort);
+				if (typeof saved.sshKeyPath === "string" && validVpsSshKey(saved.sshKeyPath)) vpsSshKey.value = saved.sshKeyPath;
+			} catch {}
+			const saveVpsForm = () => {
+				try {
+					localStorage.setItem(vpsFormStorageKey, JSON.stringify({
+						sshUser: String(vpsSshUser.value ?? "").trim(),
+						sshPort: Number(vpsSshPort.value),
+						sshKeyPath: String(vpsSshKey.value ?? "").trim()
+					}));
+				} catch {}
+			};
+			const validVpsDeploymentForm = () => {
+				const sshPort = Number(vpsSshPort.value);
+				return validVpsFrpForm() && validVpsSshUser(String(vpsSshUser.value ?? "").trim()) && Number.isSafeInteger(sshPort) && sshPort >= 1 && sshPort <= 65535 && validVpsSshKey(String(vpsSshKey.value ?? "").trim());
+			};
+			/**
+			* VPS actions accept blank connection fields when a configuration is already
+			* saved; blanks keep their saved values ("已保存时可留空"). The token itself
+			* is never readable here, so a blank token is merged server-side while the
+			* remaining fields still pass the regular template check.
+			*/
+			const vpsEffectiveForm = () => {
+				const form = frpForm();
+				if (!frpConfigured) return form;
+				return {
+					serverAddress: form.serverAddress === "" ? configuredFrpServer : form.serverAddress,
+					serverPort: Number.isSafeInteger(form.serverPort) && form.serverPort >= 1 ? form.serverPort : configuredFrpPort,
+					token: form.token,
+					publicOrigin: form.publicOrigin === "" ? configuredFrpOrigin : form.publicOrigin
+				};
+			};
+			const validVpsFrpForm = () => {
+				const form = vpsEffectiveForm();
+				const token = form.token === "" && frpConfigured ? "0123456789abcdef" : form.token;
+				return validFrpForm({
+					...form,
+					token
+				});
+			};
+			const refreshVpsDeployButton = () => {
+				const disabled = remoteProviderBusy || !validVpsDeploymentForm();
+				vpsDeploy.disabled = disabled;
+				vpsCopyUninstall.disabled = disabled;
+				vpsUninstall.disabled = disabled;
+			};
+			for (const input of [
+				frpServer,
+				frpPort,
+				frpToken,
+				frpOrigin,
+				vpsSshUser,
+				vpsSshPort,
+				vpsSshKey
+			]) input.addEventListener("input", refreshVpsDeployButton);
+			for (const input of [
+				vpsSshUser,
+				vpsSshPort,
+				vpsSshKey
+			]) input.addEventListener("input", saveVpsForm);
+			const vpsCertName = (origin) => {
+				try {
+					const host = new URL(origin).hostname;
+					return /^\d{1,3}(?:\.\d{1,3}){3}$/u.test(host) ? host : void 0;
+				} catch {
+					return;
+				}
+			};
+			const requestVpsHostKeys = (serverAddress, sshUser, sshPort, sshKeyPath) => {
+				const keyPayload = {
+					serverAddress,
+					sshUser,
+					sshPort
+				};
+				if (sshKeyPath !== "") keyPayload.sshKeyPath = sshKeyPath;
+				return controlRequestJson("/api/mobile-access/remote/frp/vps/host-keys", {
+					method: "POST",
+					body: JSON.stringify(keyPayload)
+				}, LONG_CONTROL_REQUEST_TIMEOUT_MS).then((keys) => {
+					const confirmed = (Array.isArray(keys.vpsHostKeys) ? keys.vpsHostKeys : []).filter((key) => typeof key.fingerprint === "string" && typeof key.keyType === "string").map((key) => ({
+						display: `${String(key.keyType)} ${String(key.fingerprint)}`,
+						fingerprint: String(key.fingerprint)
+					}));
+					if (confirmed.length === 0) throw new Error(String(t("vpsHostKeyFailed", { error: "empty" })));
+					return confirmed;
+				});
+			};
+			vpsDeploy.addEventListener("click", () => {
+				if (remoteProviderBusy) return;
+				const form = vpsEffectiveForm();
+				if (!validVpsFrpForm()) {
+					vpsDeployStatus.textContent = t("vpsDeployNotReady");
+					return;
+				}
+				const sshUser = vpsSshUser.value.trim();
+				const sshPort = Number(vpsSshPort.value);
+				const sshKeyPath = vpsSshKey.value.trim();
+				saveVpsForm();
+				if (!validVpsSshUser(sshUser) || !Number.isSafeInteger(sshPort) || sshPort < 1 || sshPort > 65535 || !validVpsSshKey(sshKeyPath)) {
+					vpsDeployStatus.textContent = t("vpsDeployFailed", { error: t("vpsSshKey") });
+					return;
+				}
+				remoteProviderBusy = true;
+				vpsDeploy.disabled = true;
+				vpsCopyUninstall.disabled = true;
+				vpsUninstall.disabled = true;
+				vpsDeployStatus.textContent = t("vpsHostKeyFetching");
+				remoteStatus.textContent = t("vpsHostKeyFetching");
+				requestVpsHostKeys(form.serverAddress, sshUser, sshPort, sshKeyPath).then((hostKeys) => {
+					const display = hostKeys.map((key) => key.display).join("\n");
+					if (!window.confirm(t("vpsDeployConfirmWithKeys", { fingerprints: display }))) {
+						remoteProviderBusy = false;
+						refreshVpsDeployButton();
+						loadRemote();
+						return;
+					}
+					vpsDeployStatus.textContent = t("vpsDeploying");
+					remoteStatus.textContent = t("vpsDeploying");
+					const payload = {
+						confirm: true,
+						...form,
+						sshUser,
+						sshPort,
+						hostFingerprints: hostKeys.map((key) => key.fingerprint)
+					};
+					if (sshKeyPath !== "") payload.sshKeyPath = sshKeyPath;
+					return controlRequestJson("/api/mobile-access/remote/frp/vps/deploy", {
+						method: "POST",
+						body: JSON.stringify(payload)
+					}, LONG_CONTROL_REQUEST_TIMEOUT_MS).then((data) => {
+						const deployment = data.vpsDeployment !== null && typeof data.vpsDeployment === "object" ? data.vpsDeployment : {};
+						vpsDeployStatus.textContent = deployment.deployed === true ? t("vpsDeploySuccess") : t("vpsDeployFailed", { error: t("vpsDeployFailed", { error: "unknown result" }) });
+						remoteStatus.textContent = vpsDeployStatus.textContent;
+						renderRemote(data);
+					}, (error) => {
+						vpsDeployStatus.textContent = t("vpsDeployFailed", { error: String(error) });
+						remoteStatus.textContent = vpsDeployStatus.textContent;
+					}).finally(() => {
+						remoteProviderBusy = false;
+						loadRemote();
+					});
+				}, (error) => {
+					vpsDeployStatus.textContent = t("vpsHostKeyFailed", { error: String(error) });
+					remoteStatus.textContent = vpsDeployStatus.textContent;
+					remoteProviderBusy = false;
+					refreshVpsDeployButton();
+					loadRemote();
+				});
+			});
+			const readVpsSshForm = () => {
+				const sshUser = vpsSshUser.value.trim();
+				const sshPort = Number(vpsSshPort.value);
+				const sshKeyPath = vpsSshKey.value.trim();
+				saveVpsForm();
+				if (!validVpsSshUser(sshUser) || !Number.isSafeInteger(sshPort) || sshPort < 1 || sshPort > 65535 || !validVpsSshKey(sshKeyPath)) {
+					vpsDeployStatus.textContent = t("vpsDeployFailed", { error: t("vpsSshKey") });
+					return;
+				}
+				return {
+					sshUser,
+					sshPort,
+					sshKeyPath
+				};
+			};
+			vpsCopyUninstall.addEventListener("click", () => {
+				if (remoteProviderBusy) return;
+				const form = vpsEffectiveForm();
+				if (!validVpsFrpForm()) {
+					vpsDeployStatus.textContent = t("vpsDeployNotReady");
+					return;
+				}
+				remoteProviderBusy = true;
+				refreshVpsDeployButton();
+				const scriptPayload = { serverPort: form.serverPort };
+				const certName = vpsCertName(form.publicOrigin);
+				if (certName !== void 0) scriptPayload.certName = certName;
+				controlRequestJson("/api/mobile-access/remote/frp/vps/uninstall-script", {
+					method: "POST",
+					body: JSON.stringify(scriptPayload)
+				}, LONG_CONTROL_REQUEST_TIMEOUT_MS).then((data) => {
+					const script = typeof data.vpsUninstallScript === "string" ? data.vpsUninstallScript : "";
+					if (script === "") throw new Error("empty script");
+					return navigator.clipboard.writeText(script);
+				}).then(() => {
+					vpsDeployStatus.textContent = t("vpsUninstallScriptCopied");
+				}, (error) => {
+					vpsDeployStatus.textContent = t("vpsUninstallScriptFailed", { error: String(error) });
+				}).finally(() => {
+					remoteProviderBusy = false;
+					loadRemote();
+				});
+			});
+			vpsUninstall.addEventListener("click", () => {
+				if (remoteProviderBusy) return;
+				const form = vpsEffectiveForm();
+				if (!validVpsFrpForm()) {
+					vpsDeployStatus.textContent = t("vpsDeployNotReady");
+					return;
+				}
+				const ssh = readVpsSshForm();
+				if (ssh === void 0) return;
+				remoteProviderBusy = true;
+				refreshVpsDeployButton();
+				vpsDeployStatus.textContent = t("vpsHostKeyFetching");
+				remoteStatus.textContent = t("vpsHostKeyFetching");
+				requestVpsHostKeys(form.serverAddress, ssh.sshUser, ssh.sshPort, ssh.sshKeyPath).then((hostKeys) => {
+					if (!window.confirm(t("vpsUninstallConfirmWithKeys", { fingerprints: hostKeys.map((key) => key.display).join("\n") }))) {
+						remoteProviderBusy = false;
+						refreshVpsDeployButton();
+						loadRemote();
+						return;
+					}
+					vpsDeployStatus.textContent = t("vpsUninstalling");
+					remoteStatus.textContent = t("vpsUninstalling");
+					const payload = {
+						confirm: true,
+						serverAddress: form.serverAddress,
+						serverPort: form.serverPort,
+						sshUser: ssh.sshUser,
+						sshPort: ssh.sshPort,
+						hostFingerprints: hostKeys.map((key) => key.fingerprint)
+					};
+					if (ssh.sshKeyPath !== "") payload.sshKeyPath = ssh.sshKeyPath;
+					const certName = vpsCertName(form.publicOrigin);
+					if (certName !== void 0) payload.certName = certName;
+					return controlRequestJson("/api/mobile-access/remote/frp/vps/uninstall", {
+						method: "POST",
+						body: JSON.stringify(payload)
+					}, LONG_CONTROL_REQUEST_TIMEOUT_MS).then((data) => {
+						const removal = data.vpsUninstall !== null && typeof data.vpsUninstall === "object" ? data.vpsUninstall : {};
+						vpsDeployStatus.textContent = removal.removed === true ? t("vpsUninstallSuccess") : t("vpsUninstallFailed", { error: t("vpsUninstallFailed", { error: "unknown result" }) });
+						remoteStatus.textContent = vpsDeployStatus.textContent;
+						renderRemote(data);
+					}, (error) => {
+						vpsDeployStatus.textContent = t("vpsUninstallFailed", { error: String(error) });
+						remoteStatus.textContent = vpsDeployStatus.textContent;
+					}).finally(() => {
+						remoteProviderBusy = false;
+						loadRemote();
+					});
+				}, (error) => {
+					vpsDeployStatus.textContent = t("vpsHostKeyFailed", { error: String(error) });
+					remoteStatus.textContent = vpsDeployStatus.textContent;
+					remoteProviderBusy = false;
+					refreshVpsDeployButton();
+					loadRemote();
+				});
+			});
 			frpInstall.addEventListener("click", () => {
 				if (remoteProviderBusy) return;
 				if (!window.confirm(t("frpInstallConfirm", { size: frpDownloadSize }))) return;
@@ -4490,6 +4989,7 @@ window.__ModuleLoader__.load({
 .dsh-mobile-control__self-hosted{margin:8px 0 0;border:1px solid var(--dsw-alias-border-subtle,#dbe1e8);border-radius:12px;background:var(--dsw-alias-bg-layer-1,#f8fafc)}.dsh-mobile-control__self-hosted-summary{display:flex;box-sizing:border-box;min-height:48px;align-items:center;justify-content:space-between;gap:10px;padding:8px 11px;cursor:pointer;list-style-position:inside}.dsh-mobile-control__self-hosted-summary>span:first-child{display:flex;min-width:0;flex-direction:column;gap:1px}.dsh-mobile-control__self-hosted-summary strong{font-size:11px}.dsh-mobile-control__self-hosted-summary span span{color:var(--dsw-alias-label-secondary,#606873);font-size:9px;line-height:1.35}.dsh-mobile-control__provider-badge.is-frp{background:#eef0f3;color:#475569}.dsh-mobile-control__self-hosted-body{padding:0 8px 8px}.dsh-mobile-control__provider.is-frp{width:100%;min-height:64px;background:var(--dsw-alias-bg-layer-2,#fff)}
 .dsh-mobile-control__cpolar-setup{margin:0 0 12px;padding:12px;border:1px solid var(--dsw-alias-border-subtle,#dbe1e8);border-radius:13px;background:var(--dsw-alias-bg-layer-2,#fff)}.dsh-mobile-control__cpolar-setup[hidden],.dsh-mobile-control__cpolar-account[hidden],.dsh-mobile-control__details[hidden],.dsh-mobile-control__view.is-remote .dsh-mobile-control__actions[hidden],.dsh-mobile-control__danger[hidden]{display:none}.dsh-mobile-control__component-status,.dsh-mobile-control__component-note{margin:0 0 10px;color:var(--dsw-alias-label-secondary,#606873);font-size:11px;line-height:1.55}.dsh-mobile-control__cpolar-setup>.dsh-mobile-control__primary{width:100%;min-height:44px;padding:9px 12px;border-radius:10px;font:600 12px/1.3 system-ui;cursor:pointer}.dsh-mobile-control__cpolar-account{margin-top:10px}.dsh-mobile-control__link-row{display:flex;flex-wrap:wrap;gap:6px 12px;margin:0 0 10px}.dsh-mobile-control__text-link{color:#2563eb;font-size:11px;text-decoration:none}.dsh-mobile-control__text-link:hover{text-decoration:underline}.dsh-mobile-control__token-label{display:flex;flex-direction:column;gap:5px;margin:0 0 8px;color:var(--dsw-alias-label-secondary,#606873);font-size:11px}.dsh-mobile-control__token{box-sizing:border-box;width:100%;min-height:44px;padding:9px 10px;border:1px solid var(--dsw-alias-border-normal,#cfd5dd);border-radius:10px;background:var(--dsw-alias-bg-layer-3,var(--dsw-alias-bg-layer-2,#fff));color:var(--dsw-alias-label-primary,#16181d);font:16px/1.4 system-ui}.dsh-mobile-control__cpolar-connect{display:flex;align-items:center;justify-content:center;box-sizing:border-box;width:100%;min-height:44px;padding:10px 14px;border-radius:12px;font:650 13px/1.2 system-ui;cursor:pointer;transition:background-color 160ms ease,border-color 160ms ease,opacity 160ms ease}.dsh-mobile-control__cpolar-connect:hover:not(:disabled){border-color:#1d4ed8;background:#1d4ed8}.dsh-mobile-control__cpolar-connect:active:not(:disabled){border-color:#1e40af;background:#1e40af}.dsh-mobile-control__cpolar-connect:disabled{cursor:wait;opacity:.55}.dsh-mobile-control__details{margin:10px 0 0;border-top:1px solid var(--dsw-alias-border-subtle,#e1e5eb);padding-top:9px}.dsh-mobile-control__details>summary{min-height:30px;color:var(--dsw-alias-label-secondary,#606873);font-size:11px;line-height:30px;cursor:pointer}.dsh-mobile-control__details-body{display:flex;flex-wrap:wrap;align-items:center;gap:7px 12px;padding:4px 0}.dsh-mobile-control__details-body p{flex:1 0 100%;margin:0;color:var(--dsw-alias-label-secondary,#606873);font-size:11px;line-height:1.5}.dsh-mobile-control__storage{display:block;flex:1 0 100%;max-width:100%;overflow:hidden;padding:7px 8px;border-radius:8px;background:var(--dsw-alias-bg-layer-1,#f3f5f8);color:var(--dsw-alias-label-secondary,#475569);font:10px/1.4 ui-monospace,SFMono-Regular,Consolas,monospace;text-overflow:ellipsis;white-space:nowrap}.dsh-mobile-control__danger{flex:1 0 100%;min-height:38px;margin-top:3px;padding:7px 10px;border:1px solid #dc2626;border-radius:9px;background:transparent;color:#dc2626;font:12px/1.3 system-ui;cursor:pointer}
 .dsh-mobile-control__frp-setup{margin:0;padding:12px;border:1px solid var(--dsw-alias-border-subtle,#dbe1e8);border-radius:13px;background:var(--dsw-alias-bg-layer-2,#fff)}.dsh-mobile-control__frp-setup[hidden]{display:none}.dsh-mobile-control__frp-step{padding:11px 0}.dsh-mobile-control__frp-step + .dsh-mobile-control__frp-step{border-top:1px solid var(--dsw-alias-border-subtle,#e1e5eb)}.dsh-mobile-control__frp-step>strong{display:block;margin-bottom:3px;font-size:12px;line-height:1.4}.dsh-mobile-control__frp-step>p{margin:0 0 9px;color:var(--dsw-alias-label-secondary,#606873);font-size:11px;line-height:1.5}.dsh-mobile-control__frp-step>.dsh-mobile-control__frp-requirement{padding:8px 9px;border-radius:9px;background:var(--dsw-alias-bg-layer-1,#f3f5f8);color:var(--dsw-alias-label-primary,#384152);font-size:11px}.dsh-mobile-control__frp-fields{display:grid;grid-template-columns:minmax(0,1fr) 96px;gap:8px}.dsh-mobile-control__field{display:flex;min-width:0;flex-direction:column;gap:5px;color:var(--dsw-alias-label-secondary,#606873);font-size:11px}.dsh-mobile-control__field:nth-child(3),.dsh-mobile-control__field:nth-child(4){grid-column:1/-1}.dsh-mobile-control__field input{box-sizing:border-box;width:100%;min-height:44px;padding:9px 10px;border:1px solid var(--dsw-alias-border-normal,#cfd5dd);border-radius:10px;background:var(--dsw-alias-bg-layer-2,#fff);color:var(--dsw-alias-label-primary,#16181d);font:16px/1.4 system-ui}.dsh-mobile-control__frp-action{box-sizing:border-box;width:100%;min-height:44px;padding:9px 12px;border-radius:10px;font:650 12px/1.3 system-ui;cursor:pointer}.dsh-mobile-control__frp-action:disabled{cursor:not-allowed;opacity:.5}.dsh-mobile-control__remote-workspace{margin:0;padding:12px;border:1px solid var(--dsw-alias-border-subtle,#dbe1e8);border-radius:15px;background:var(--dsw-alias-bg-layer-1,#f7f8fa)}.dsh-mobile-control__stage-header{display:flex;align-items:center;justify-content:space-between;gap:10px;margin-bottom:9px}.dsh-mobile-control__stage-header .dsh-mobile-control__section-title{margin:0}.dsh-mobile-control__stage-meta{display:flex;min-width:0;align-items:center;justify-content:flex-end;gap:5px}.dsh-mobile-control__stage-value{max-width:115px;overflow:hidden;color:var(--dsw-alias-label-primary,#16181d);font:650 10px/1.3 system-ui;text-overflow:ellipsis;white-space:nowrap}.dsh-mobile-control__state-badge{flex:none;padding:3px 7px;border-radius:999px;background:var(--dsw-alias-bg-layer-2,#fff);color:var(--dsw-alias-label-secondary,#606873);font:650 9px/1.25 system-ui}.dsh-mobile-control__state-badge.is-ready{background:#e6f7f0;color:#087454}.dsh-mobile-control__state-badge.is-busy{background:#e8f0ff;color:#1d4ed8}.dsh-mobile-control__state-badge.is-attention{background:#fff4dc;color:#935100}.dsh-mobile-control__remote-workspace>.dsh-mobile-control__status{box-sizing:border-box;margin:0 0 10px;padding:9px 10px;border-radius:10px;background:var(--dsw-alias-bg-layer-2,#fff);font-size:11px;line-height:1.45}.dsh-mobile-control__provider-setup-body{margin:0 0 10px}.dsh-mobile-control__provider-setup-body>.dsh-mobile-control__cpolar-setup{margin:0}.dsh-mobile-control__provider-setup-body>.dsh-mobile-control__cpolar-setup>.dsh-mobile-control__section-title,.dsh-mobile-control__provider-setup-body>.dsh-mobile-control__frp-setup>.dsh-mobile-control__section-title{display:none}.dsh-mobile-control__provider-setup-body>.dsh-mobile-control__details{margin:0;padding:9px 10px;border:1px solid var(--dsw-alias-border-subtle,#dbe1e8);border-radius:11px;background:var(--dsw-alias-bg-layer-2,#fff)}.dsh-mobile-control__remote-workspace>.dsh-mobile-control__actions{margin-top:2px}.dsh-mobile-control__remote-workspace>.dsh-mobile-control__qr{margin:10px 0 0}.dsh-mobile-control__remote-workspace>.dsh-mobile-control__manage-row{margin-top:10px;padding-top:10px;border-top:1px solid var(--dsw-alias-border-subtle,#e1e5eb)}
+.dsh-mobile-control__frp-overview{display:grid;grid-template-columns:32px minmax(0,1fr);align-items:center;gap:10px;margin:0 0 10px;padding:10px;border:1px solid #a9dfc9;border-radius:11px;background:#edf9f4}.dsh-mobile-control__frp-overview[hidden]{display:none}.dsh-mobile-control__frp-overview-mark{display:grid;width:32px;height:32px;place-items:center;border-radius:50%;background:#087454;color:#fff;font:700 15px/1 system-ui}.dsh-mobile-control__frp-overview-body{display:flex;min-width:0;flex-direction:column;gap:2px}.dsh-mobile-control__frp-overview-body strong{color:#075d46;font-size:12px;line-height:1.35}.dsh-mobile-control__frp-overview-body span{overflow:hidden;color:#357061;font:10px/1.4 ui-monospace,SFMono-Regular,Consolas,monospace;text-overflow:ellipsis;white-space:nowrap}.dsh-mobile-control__frp-group{margin:8px 0 0;overflow:hidden;border:1px solid var(--dsw-alias-border-subtle,#dbe1e8);border-radius:11px;background:var(--dsw-alias-bg-layer-1,#f8fafc)}.dsh-mobile-control__frp-group>summary{box-sizing:border-box;min-height:44px;padding:12px 34px 10px 12px;color:var(--dsw-alias-label-primary,#16181d);font:650 12px/1.4 system-ui;cursor:pointer}.dsh-mobile-control__frp-group[open]>summary{border-bottom:1px solid var(--dsw-alias-border-subtle,#e1e5eb);background:var(--dsw-alias-bg-layer-2,#fff)}.dsh-mobile-control__frp-group>.dsh-mobile-control__frp-step{padding:12px}.dsh-mobile-control__frp-group>.dsh-mobile-control__frp-step>strong:first-child{display:none}.dsh-mobile-control__frp-group .dsh-mobile-control__frp-step{border-top:0}.dsh-mobile-control__frp-setup>.dsh-mobile-control__frp-step{margin-bottom:8px;padding:10px;border:1px solid var(--dsw-alias-border-subtle,#dbe1e8);border-radius:11px;background:var(--dsw-alias-bg-layer-1,#f8fafc)}
 .dsh-mobile-control__access{display:flex;align-items:baseline;gap:6px;min-width:0;margin:0 0 12px}.dsh-mobile-control__access[hidden]{display:none}.dsh-mobile-control__access-label{flex:none;color:var(--dsw-alias-label-secondary,#606873);white-space:nowrap}.dsh-mobile-control__access-label::after{content:"："}.dsh-mobile-control__access-link{min-width:0;overflow:hidden;color:#2563eb;text-decoration:none;text-overflow:ellipsis;white-space:nowrap}.dsh-mobile-control__access-link:hover{text-decoration:underline}.dsh-mobile-control__qr{display:flex;justify-content:center;margin:0 0 12px}.dsh-mobile-control__qr[hidden]{display:none}.dsh-mobile-control__qr img{border-radius:12px;background:#fff;padding:8px}
 .dsh-mobile-control__status{margin:0 0 14px;overflow-wrap:anywhere;color:var(--dsw-alias-label-secondary,#606873)}.dsh-mobile-control__status::before{display:inline-block;width:8px;height:8px;margin-right:7px;border-radius:50%;background:#98a1ad;content:""}.dsh-mobile-control__status.is-running::before{background:#16a36a}.dsh-mobile-control__status.is-key{font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:12px;word-break:break-all}
 .dsh-mobile-control__guide{margin:0 0 14px;padding:12px;border:1px solid #6f96db;border-radius:12px;background:var(--dsw-alias-bg-layer-1,#eff6ff)}.dsh-mobile-control__guide[hidden]{display:none}.dsh-mobile-control__guide-title{margin:0;color:var(--dsw-alias-label-primary,#172554);font:650 13px/1.45 system-ui}.dsh-mobile-control__guide-summary,.dsh-mobile-control__guide-note{margin:4px 0 0;color:var(--dsw-alias-label-secondary,#475569);font-size:12px;line-height:1.5}.dsh-mobile-control__guide-steps{margin:8px 0 0;padding-left:20px;color:var(--dsw-alias-label-primary,#1e293b);font-size:12px;line-height:1.6}.dsh-mobile-control__guide-note{color:var(--dsw-alias-label-secondary,#64748b)}.dsh-mobile-control__guide-actions{display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-top:10px}.dsh-mobile-control__guide-actions button{min-width:0;min-height:44px;padding:8px;border-radius:10px;font:12px/1.25 system-ui;cursor:pointer}.dsh-mobile-control__guide-actions button:disabled{cursor:not-allowed;opacity:.45}