dsh-mobile 0.4.7 → 0.5.0

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 Notable changes to DSH Mobile are recorded here. GitHub Releases remain the source for downloadable packages and complete generated commit notes.
 
+## 0.5.0 - 2026-09-26
+
+- Recognize the official DSH Desktop `dsh-app://app` page as a Mobile administration surface, while requiring its signed DSH browser session for forwarded management requests (thanks @Sanksu for [PR #118](https://github.com/saya-ch/dsh-mobile/pull/118) and @up-and-down-0618 for [#115](https://github.com/saya-ch/dsh-mobile/issues/115)).
+- Send paired-page file uploads through the authenticated Mobile transport so PDF and other binary attachments reach DSH without bypassing the gateway's CSRF checks (thanks @ayiejosh for [PR #116](https://github.com/saya-ch/dsh-mobile/pull/116)).
+- Allow the paired page to request microphone access for DSH voice input. App 0.5.0 asks for Android microphone permission on first use and grants audio-only capture to the paired HTTPS Origin (thanks @ayiejosh for [PR #119](https://github.com/saya-ch/dsh-mobile/pull/119)).
+- Let narrow phone headers reveal hidden controls by horizontal drag or keyboard focus while keeping menus accessible; remove the redundant header arrow (thanks @ayiejosh for [PR #117](https://github.com/saya-ch/dsh-mobile/pull/117)).
+- Keep composer statistics readable beside the context ring on narrow screens instead of clipping the values (thanks @ayiejosh for [PR #120](https://github.com/saya-ch/dsh-mobile/pull/120)).
+- On touch devices, switching sessions no longer opens the soft keyboard automatically; tapping the composer still opens it normally.
+- Explain cpolar download, extraction and private-storage failures more clearly and preserve the previous component if replacement fails ([#114](https://github.com/saya-ch/dsh-mobile/issues/114)). Diagnostics also flag an active, competing third-party remote pairing channel without modifying its traffic ([#111](https://github.com/saya-ch/dsh-mobile/issues/111)).
+
 ## 0.4.7 - 2026-09-25
 
 - Expose `panelInfo` on the mobile layout service for DSH `0.1.7-rc.2`, so built-in panels such as Plugin Manager can mount without breaking the dedicated mobile frontend (thanks @chintoleung for [PR #104](https://github.com/saya-ch/dsh-mobile/pull/104) and [#103](https://github.com/saya-ch/dsh-mobile/issues/103)).

package/CONTRIBUTORS.md

@@ -2,7 +2,7 @@
 
 GitHub 的 [Contributors 图表](https://github.com/saya-ch/dsh-mobile/graphs/contributors) 按进入默认分支的提交自动统计，无法手动加入仅提交 issue 或 PR 提案的成员。本页按实际参与方式感谢社区成员；仓库维护者与自动依赖更新仍可在 GitHub 历史记录中查看。
 
-GitHub's Contributors graph counts commits on the default branch; issue reports and PR proposals cannot be manually added to it. This page credits community members by how they contributed, through 2026-09-25. The repository maintainer and automated dependency updates remain visible in GitHub's history.
+GitHub's Contributors graph counts commits on the default branch; issue reports and PR proposals cannot be manually added to it. This page credits community members by how they contributed, through 2026-09-26. The repository maintainer and automated dependency updates remain visible in GitHub's history.
 
 ## 已发布版本中的合并 PR / Merged PRs in released versions
 
@@ -10,13 +10,14 @@ GitHub's Contributors graph counts commits on the default branch; issue reports
 | --- | --- |
 | [@1624318455](https://github.com/1624318455) | [#93](https://github.com/saya-ch/dsh-mobile/pull/93) |
 | [@abworks-dev](https://github.com/abworks-dev) | [#91](https://github.com/saya-ch/dsh-mobile/pull/91), [#98](https://github.com/saya-ch/dsh-mobile/pull/98), [#99](https://github.com/saya-ch/dsh-mobile/pull/99) |
-| [@ayiejosh](https://github.com/ayiejosh) | [#109](https://github.com/saya-ch/dsh-mobile/pull/109), [#110](https://github.com/saya-ch/dsh-mobile/pull/110) |
+| [@ayiejosh](https://github.com/ayiejosh) | [#109](https://github.com/saya-ch/dsh-mobile/pull/109), [#110](https://github.com/saya-ch/dsh-mobile/pull/110), [#116](https://github.com/saya-ch/dsh-mobile/pull/116), [#117](https://github.com/saya-ch/dsh-mobile/pull/117), [#119](https://github.com/saya-ch/dsh-mobile/pull/119) |
 | [@chintoleung](https://github.com/chintoleung) | [#104](https://github.com/saya-ch/dsh-mobile/pull/104) |
 | [@idoall](https://github.com/idoall) | [#61](https://github.com/saya-ch/dsh-mobile/pull/61), [#66](https://github.com/saya-ch/dsh-mobile/pull/66), [#67](https://github.com/saya-ch/dsh-mobile/pull/67), [#77](https://github.com/saya-ch/dsh-mobile/pull/77) |
 | [@JackRushante](https://github.com/JackRushante) | [#16](https://github.com/saya-ch/dsh-mobile/pull/16) |
 | [@liudasheng](https://github.com/liudasheng) | [#100](https://github.com/saya-ch/dsh-mobile/pull/100) |
 | [@longisland-icetea](https://github.com/longisland-icetea) | [#59](https://github.com/saya-ch/dsh-mobile/pull/59), [#60](https://github.com/saya-ch/dsh-mobile/pull/60), [#63](https://github.com/saya-ch/dsh-mobile/pull/63) |
 | [@qzyqmzn](https://github.com/qzyqmzn) | [#38](https://github.com/saya-ch/dsh-mobile/pull/38), [#75](https://github.com/saya-ch/dsh-mobile/pull/75) |
+| [@Sanksu](https://github.com/Sanksu) | [#118](https://github.com/saya-ch/dsh-mobile/pull/118) |
 | [@StrawberryAO](https://github.com/StrawberryAO) | [#34](https://github.com/saya-ch/dsh-mobile/pull/34), [#40](https://github.com/saya-ch/dsh-mobile/pull/40) |
 | [@xhwxt](https://github.com/xhwxt) | [#105](https://github.com/saya-ch/dsh-mobile/pull/105) |
 | [@xingleiwu](https://github.com/xingleiwu) | [#79](https://github.com/saya-ch/dsh-mobile/pull/79), [#84](https://github.com/saya-ch/dsh-mobile/pull/84), [#85](https://github.com/saya-ch/dsh-mobile/pull/85), [#86](https://github.com/saya-ch/dsh-mobile/pull/86) |
@@ -41,6 +42,7 @@ GitHub's Contributors graph counts commits on the default branch; issue reports
 | [@CharlesLueng](https://github.com/CharlesLueng) | [#68](https://github.com/saya-ch/dsh-mobile/issues/68) |
 | [@chintoleung](https://github.com/chintoleung) | [#103](https://github.com/saya-ch/dsh-mobile/issues/103) |
 | [@chmzs](https://github.com/chmzs) | [#73](https://github.com/saya-ch/dsh-mobile/issues/73) |
+| [@hairyf](https://github.com/hairyf) | [#114](https://github.com/saya-ch/dsh-mobile/issues/114) |
 | [@idoall](https://github.com/idoall) | [#42](https://github.com/saya-ch/dsh-mobile/issues/42), [#45](https://github.com/saya-ch/dsh-mobile/issues/45), [#46](https://github.com/saya-ch/dsh-mobile/issues/46), [#47](https://github.com/saya-ch/dsh-mobile/issues/47), [#62](https://github.com/saya-ch/dsh-mobile/issues/62), [#64](https://github.com/saya-ch/dsh-mobile/issues/64) |
 | [@IvyC-zz](https://github.com/IvyC-zz) | [#58](https://github.com/saya-ch/dsh-mobile/issues/58), [#78](https://github.com/saya-ch/dsh-mobile/issues/78) |
 | [@jillkayat](https://github.com/jillkayat) | [#10](https://github.com/saya-ch/dsh-mobile/issues/10) |
@@ -56,6 +58,7 @@ GitHub's Contributors graph counts commits on the default branch; issue reports
 | [@sortjiajun](https://github.com/sortjiajun) | [#90](https://github.com/saya-ch/dsh-mobile/issues/90) |
 | [@StrawberryAO](https://github.com/StrawberryAO) | [#39](https://github.com/saya-ch/dsh-mobile/issues/39) |
 | [@Surpass567](https://github.com/Surpass567) | [#80](https://github.com/saya-ch/dsh-mobile/issues/80), [#81](https://github.com/saya-ch/dsh-mobile/issues/81) |
+| [@up-and-down-0618](https://github.com/up-and-down-0618) | [#115](https://github.com/saya-ch/dsh-mobile/issues/115) |
 | [@taki-ohh](https://github.com/taki-ohh) | [#19](https://github.com/saya-ch/dsh-mobile/issues/19) |
 | [@Xingcheng-wang](https://github.com/Xingcheng-wang) | [#76](https://github.com/saya-ch/dsh-mobile/issues/76) |
 | [@xhwxt](https://github.com/xhwxt) | [#107](https://github.com/saya-ch/dsh-mobile/issues/107), [#108](https://github.com/saya-ch/dsh-mobile/issues/108) |

package/README.en.md

@@ -31,14 +31,14 @@
 
 > DSH Mobile is a DeepSeek Harness community plugin; the native app supports Android only.
 >
-> **Current version: 0.4.7**. It supports DSH `0.1.7-rc.2`, avoids duplicate mobile boot downloads, and improves Android recovery, the phone-width sidebar, and input handling. [Release notes](CHANGELOG.md#047---2026-09-25).
+> **Current version: 0.5.0**. It supports the official DSH Desktop, paired-page file uploads and microphone permissions for voice input, with improved narrow-screen controls and remote diagnostics. [Release notes](CHANGELOG.md#050---2026-09-26).
 >
-> **Upgrade reminder**: update both the plugin and Android app to 0.4.7 when practical. Existing pairings remain intact. The self-signed FRP entry requires at least the 0.4.6 app; older apps can still use existing LAN and trusted-certificate remote connections. [Compatibility notes](#compatibility).
+> **Upgrade reminder**: update both the plugin and Android app to 0.5.0 when practical. Existing pairings remain intact. App microphone permission support requires 0.5.0; older apps keep their existing connection methods. [Compatibility notes](#compatibility).
 
 <p align="center">
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.4.7/dsh-mobile-android-v0.4.7.apk"><img src="assets/brand/app-icon-rounded.svg" alt="DSH Mobile Android app icon" width="72" height="72"></a><br>
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.4.7/dsh-mobile-android-v0.4.7.apk"><strong>Download Android app 0.4.7</strong></a><br>
-  <sub><a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.4.7">Release notes and checksums</a></sub>
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.5.0/dsh-mobile-android-v0.5.0.apk"><img src="assets/brand/app-icon-rounded.svg" alt="DSH Mobile Android app icon" width="72" height="72"></a><br>
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.5.0/dsh-mobile-android-v0.5.0.apk"><strong>Download Android app 0.5.0</strong></a><br>
+  <sub><a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.5.0">Release notes and checksums</a></sub>
 </p>
 
 DSH Mobile is a DeepSeek Harness plugin that lets a mobile browser or the Android app connect over a protected LAN or an optional Tailscale Funnel, cpolar, cloudflared, self-hosted FRP, or own reverse-proxy remote path. Local and remote access keep the same sessions, Workspaces, messages, and tools while using separate switches and paired-device stores without modifying DeepSeek Harness source.
@@ -216,7 +216,7 @@ Compatibility and WebSocket rules:
 
 Proxied pages allow HTTP frames for compatibility with some community plugins; those pages are unencrypted and can be altered, and browsers may still block them as mixed content. Use HTTPS for sensitive work. The same warning appears at the top of the remote panel when it is opened over HTTPS.
 
-- Version 0.4.7 has been contract-checked and boot-tested against DSH `0.1.7-alpha.2`, `0.1.7-rc.1`, and `0.1.7-rc.2` (renderer-v2). The DSH page must expose the standard session, `main`/`panelInfo`, and `rightbar` slots; the community plugin must register its panel or sidebar content through DSH's standard entry points.
+- Version 0.5.0 continues contract and boot checks against DSH `0.1.7-alpha.2`, `0.1.7-rc.1`, and `0.1.7-rc.2`. Official DSH Desktop `0.1.7-rc.2` uses a `dsh-app://app/` page; the Mobile administration surface still requires Desktop's forwarded authenticated DSH session and does not loosen ordinary Web administration requests.
 - The gateway allows first-party DSH WebSocket paths by default, including `/sidebar/ws/terminal`. Other paths used by community sidebar plugins are blocked by default and appear in Diagnostics; the `/sidebar/ws/agent-opens` and `/sidebar/ws/agent-terminals` paths in the image are examples that must be reviewed for the actual plugin.
 - In **Connection diagnostics → Third-party WebSocket paths**, select **Allow** only for an exact path you have verified. Query strings and fuzzy prefixes are rejected; **Allow all** is not recommended. Approved paths can be removed at any time, and the same policy applies to LAN and remote connections.
 - Approval only lets that path pass through the authenticated, same-origin DSH Mobile gateway. It does not open arbitrary TCP/UDP ports or bypass device pairing. If a community plugin still fails, check the path recorded by Diagnostics and approve one path at a time.
@@ -288,6 +288,7 @@ See [SECURITY.md](SECURITY.md).
 
 ## Troubleshooting
 
+- **The phone shows another plugin’s pairing-code page**: `dsh-remote-web-ui` and DSH Mobile have separate remote channels and pairing codes; they cannot be mixed. If DSH Mobile diagnostics warn about a competing remote plugin, turn off that plugin’s remote access on the computer, refresh, and scan the current DSH Mobile QR code. Merely installing the other plugin without enabling its remote channel does not trigger this warning.
 - **Development diagnostics say “reachable through the computer's proxy”**: the check tries a direct request first, then an HTTP proxy from the DSH process environment only if direct access fails; `NO_PROXY` may exclude the target. This proves only that the computer completed an HTTPS probe through the proxy, not that the phone or actual tunnel can connect. Test from the phone's mobile network. If both paths fail, diagnostics continue to report the endpoint unreachable instead of treating an offline route as ready.
 - **Boot fails with `saved LAN interface "XXX" is not connected`**: the
   computer switched networks (Wi-Fi/Ethernet/dock) and the previously saved
@@ -316,6 +317,7 @@ On macOS, local network, self-hosted FRP, and the own reverse proxy work; the th
 
 | DSH Mobile plugin | Verified DeepSeek Harness version |
 | --- | --- |
+| `0.5.0` | `0.1.7-alpha.2`, `0.1.7-rc.1`, and `0.1.7-rc.2`; official Desktop `0.1.7-rc.2` (administration surface) |
 | `0.4.7` | `0.1.7-alpha.2`, `0.1.7-rc.1`, and `0.1.7-rc.2` (source contract, isolated pairing, and workspace baseline over WebSocket) |
 | `0.4.6` | `0.1.7-alpha.2` and `0.1.7-rc.1` (source contract, isolated pairing, and workspace baseline over WebSocket) |
 | `0.4.5` | `0.1.7-alpha.2` (source contract check, local and remote gateway integration) |

package/README.md

@@ -31,14 +31,14 @@
 
 > DSH Mobile 是 DeepSeek Harness 社区插件，原生 App 仅支持 Android。
 >
-> **当前版本：0.4.7**。适配 DSH `0.1.7-rc.2`，减少移动端启动资源的重复下载，并改善 Android 连接恢复、窄屏侧栏与输入体验。[更新记录](CHANGELOG.md#047---2026-09-25)。
+> **当前版本：0.5.0**。适配 DSH 官方桌面端，支持移动端文件上传与语音输入权限，并优化窄屏操作和远程故障提示。[更新记录](CHANGELOG.md#050---2026-09-26)。
 >
-> **升级提醒**：建议插件与 Android App 同步更新至 0.4.7，已有配对会保留。自签 FRP 入口需要至少 0.4.6 App；更早的 App 仍可使用原有局域网和受信任证书的远程连接。[兼容说明](#兼容性)。
+> **升级提醒**：建议插件与 Android App 同步更新至 0.5.0，已有配对会保留。App 的麦克风权限适配需要 0.5.0；旧版 App 的既有连接方式不受影响。[兼容说明](#兼容性)。
 
 <p align="center">
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.4.7/dsh-mobile-android-v0.4.7.apk"><img src="assets/brand/app-icon-rounded.svg" alt="DSH Mobile 安卓应用图标" width="72" height="72"></a><br>
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.4.7/dsh-mobile-android-v0.4.7.apk"><strong>下载 Android App 0.4.7</strong></a><br>
-  <sub><a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.4.7">版本说明与校验文件</a></sub>
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.5.0/dsh-mobile-android-v0.5.0.apk"><img src="assets/brand/app-icon-rounded.svg" alt="DSH Mobile 安卓应用图标" width="72" height="72"></a><br>
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.5.0/dsh-mobile-android-v0.5.0.apk"><strong>下载 Android App 0.5.0</strong></a><br>
+  <sub><a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.5.0">版本说明与校验文件</a></sub>
 </p>
 
 DSH Mobile 是一个 DeepSeek Harness 插件，让手机浏览器或 Android App 通过局域网，或可选的 Tailscale Funnel、cpolar、cloudflared、自建 FRP 或自有反向代理远程通道连接电脑，继续使用同一份会话、工作区、消息和工具。局域网与远程访问分别启停、分别管理设备，且都不修改 DeepSeek Harness 源码。
@@ -216,7 +216,7 @@ Android App 用一个“已配对设备”列表同时显示多台电脑：局
 
 代理页面为兼容部分社区插件允许嵌入 HTTP 页面；这类内容未加密，可能被篡改，浏览器也可能因混合内容策略拦截。处理敏感内容时请使用 HTTPS。通过 HTTPS 管理入口打开远程面板时，页面顶部会显示相同提醒。
 
-- 0.4.7 已按 DSH `0.1.7-alpha.2`、`0.1.7-rc.1` 和 `0.1.7-rc.2` 做 renderer-v2 契约检查与隔离启动联调。DSH 页面需要提供标准的会话、`main`/`panelInfo` 和 `rightbar` 插槽；插件自身需要通过 DSH 的标准面板或侧边栏入口注册内容。
+- 0.5.0 延续对 DSH `0.1.7-alpha.2`、`0.1.7-rc.1` 和 `0.1.7-rc.2` 的契约及启动检查。官方 DSH Desktop `0.1.7-rc.2` 使用 `dsh-app://app/` 页面；移动访问管理入口仍要求桌面端转发的已认证 DSH 会话，不放宽普通 Web 页面的管理请求。
 - 网关默认只允许 DSH 内置的第一方 WebSocket 路径。社区侧边栏插件使用的其他路径默认拦截，通常会在诊断页显示为待处理项目；截图中的`/sidebar/ws/agent-opens` 和`/sidebar/ws/agent-terminals` 就属于这类需要按实际插件确认的路径。
 - 在 **连接诊断 → 第三方 WebSocket 路径** 中，只对确认过的精确路径点击 **允许**。系统不接受带查询字符串或模糊前缀的路径；不建议使用“全部允许”。已允许的路径可以随时移除，局域网和远程连接使用同一套规则。
 - 放行只代表该路径可以通过已认证、同源的 DSH Mobile 网关，不会开放任意 TCP/UDP 端口，也不会绕过设备配对。若社区插件仍然连接失败，先看诊断页的实际拦截路径，再按一条路径放行。
@@ -290,6 +290,7 @@ flowchart LR
 
 ## 故障排查
 
+- **手机出现另一插件的“输入配对码”页面**：`dsh-remote-web-ui` 与 DSH Mobile 各有独立的远程通道和配对码，不能交叉使用。若电脑端连接诊断提示“第三方远程插件”，先关闭该插件的远程访问并刷新，再扫描 DSH Mobile 当前二维码。仅安装该插件而未启用它的远程接管，不会触发这条诊断。
 - **开发版远程诊断显示“电脑经代理可访问”**：诊断先直连，失败后才尝试 DSH 进程环境变量中的 HTTP 代理；`NO_PROXY` 可排除目标。此结果只说明电脑经代理完成 HTTPS 探测，不代表手机或实际隧道可用。请用手机流量实际连接；若直连和代理都失败，报告仍为不可达，不会把离线误报为就绪。
 - **启动报 `saved LAN interface "XXX" is not connected` 且 DSH 起不来**：
   电脑切换过网络（WiFi/有线/扩展坞），之前保存的网卡当前未连接。处理方式
@@ -316,6 +317,7 @@ macOS 上局域网、自建 FRP 与自有反向代理可用；三个托管组件
 
 | DSH Mobile 插件                         | 验证支持的 DeepSeek Harness 版本                             |
 | ----------------------------------------- | -------------------------------------------------------------- |
+| `0.5.0` | `0.1.7-alpha.2`、`0.1.7-rc.1`、`0.1.7-rc.2`；官方 Desktop `0.1.7-rc.2`（桌面管理入口） |
 | `0.4.7` | `0.1.7-alpha.2`、`0.1.7-rc.1`、`0.1.7-rc.2`（源码契约、隔离配对及 WebSocket 工作区读取） |
 | `0.4.6` | `0.1.7-alpha.2`、`0.1.7-rc.1`（源码契约、隔离配对及 WebSocket 工作区读取） |
 | `0.4.5` | `0.1.7-alpha.2`（源码契约检查、本机局域网及远程网关联调） |

package/SECURITY.md

@@ -16,7 +16,7 @@ The maintainer will acknowledge a complete report within seven days. Publication
 
 - Keep the ordinary DSH Web listener on loopback.
 - Expose only the plugin-owned HTTPS listener to the LAN.
-- The desktop admin API may accept an RFC1918 or IPv4 link-local Host only when the TCP peer is loopback, for a trusted local reverse proxy or headless host. Do not publicly forward `/api/mobile-access`; Host and loopback checks are not a replacement for proxy access control. Mutating admin requests must carry a same-origin `Origin` header.
+- The desktop admin API may accept an RFC1918 or IPv4 link-local Host only when the TCP peer is loopback, for a trusted local reverse proxy or headless host. Do not publicly forward `/api/mobile-access`; Host and loopback checks are not a replacement for proxy access control. Mutating admin requests require a same-origin `Origin` header, except official DSH Desktop requests: its forwarder strips `Origin` and `Sec-Fetch-Site` and supplies a signed Host browser-session Cookie, so the plugin client sends an exact non-simple marker that survives forwarding. The plugin requires both that marker and Connection's successful browser-session verification before accepting an Origin-less write.
 - DNS-SD/mDNS, periodic UDP announcements, active UDP query replies, and HTTPS discovery return only the device name, public HTTPS origin, port, protocol version, and stable non-secret installation identifier. Discovery never returns the CA, a pairing key, a device token, Cookies, credentials, or private configuration.
 - For LAN pairing, only after a user selects a device and enters the fingerprint-bound pairing key may Android fetch the public CA from that exact HTTPS origin. The bootstrap GET sends no key or credential. The app retains the CA in its encrypted credential record and never adds it to Android's system trust settings. Native requests use a private trust store; WebView accepts only the otherwise-untrusted leaf signed by that CA, for the exact origin and validity period. Every other TLS error is cancelled.
 - Public remote origins provided by Funnel, cpolar, cloudflared, the FRP public-CA entry, or an operator-managed reverse proxy use platform-trusted HTTPS. Android stores no private CA for those credentials and cancels every TLS error. It sends a persisted device token only to the exact Origin that previously received it; a changed remote Origin requires a current one-time pairing token before the app replaces the saved credential. A QR-provided installation identifier alone never authorizes credential renewal. Browser clients likewise require a certificate trusted by their platform.

package/lib/client.js

@@ -513,6 +513,30 @@ window.__ModuleLoader__.load({
 			wsPathsAnnounce: "{n} 条插件连接等待放行",
 			wsPathsAdvancedHint: "通常不需要手动填写：用上方按钮即可。只有当你确切知道所需路径时才填。"
 		});
+		Object.assign(MOBILE_CONTROL_MESSAGES.en, {
+			cpolarDownloadFailed: "Could not download cpolar from its official site. Check this computer’s network or proxy, then retry.",
+			cpolarDownloadTimeout: "The cpolar download timed out. Check this computer’s network or proxy, then retry.",
+			cpolarDownloadHttp: "The official cpolar download returned HTTP {status}. Retry later or check the official download page.",
+			cpolarIntegrityFailed: "The cpolar download did not match the pinned build, so it was not installed. Retry later or update DSH Mobile; do not bypass verification.",
+			cpolarExtractFailed: "The cpolar download completed, but extraction failed. Check system extraction tools and security software, then retry.",
+			cpolarStorageFailed: "Could not write the cpolar component in DSH Mobile’s private directory. Check disk space, permissions, and security software, then retry."
+		});
+		Object.assign(MOBILE_CONTROL_MESSAGES.it, {
+			cpolarDownloadFailed: "Impossibile scaricare cpolar dal sito ufficiale. Controlla rete o proxy del computer e riprova.",
+			cpolarDownloadTimeout: "Download di cpolar scaduto. Controlla rete o proxy del computer e riprova.",
+			cpolarDownloadHttp: "Il download ufficiale di cpolar ha restituito HTTP {status}. Riprova più tardi o controlla la pagina ufficiale.",
+			cpolarIntegrityFailed: "Il pacchetto cpolar non corrisponde alla versione verificata e non è stato installato. Riprova più tardi o aggiorna DSH Mobile; non aggirare la verifica.",
+			cpolarExtractFailed: "Download di cpolar completato, ma estrazione non riuscita. Controlla gli strumenti di estrazione e il software di sicurezza, poi riprova.",
+			cpolarStorageFailed: "Impossibile scrivere cpolar nella directory privata di DSH Mobile. Controlla spazio, permessi e software di sicurezza, poi riprova."
+		});
+		Object.assign(MOBILE_CONTROL_MESSAGES.zh, {
+			cpolarDownloadFailed: "无法从 cpolar 官网下载组件。请检查这台电脑的网络或代理，然后重试。",
+			cpolarDownloadTimeout: "下载 cpolar 组件超时。请检查这台电脑的网络或代理，然后重试。",
+			cpolarDownloadHttp: "cpolar 官网下载返回 HTTP {status}。请稍后重试，或检查官网下载页。",
+			cpolarIntegrityFailed: "下载的 cpolar 组件未通过固定版本校验，因此没有安装。请稍后重试或更新 DSH Mobile，不要跳过校验。",
+			cpolarExtractFailed: "cpolar 下载完成，但解包失败。请检查系统解压组件和安全软件，然后重试。",
+			cpolarStorageFailed: "无法把 cpolar 写入 DSH Mobile 私有目录。请检查磁盘空间、目录权限和安全软件，然后重试。"
+		});
 		Object.assign(MOBILE_CONTROL_MESSAGES.en, {
 			lanSetupTitle: "Finish local network setup",
 			lanSetupIntro: "Choose the network shared by this computer and your phone. DSH Mobile creates private certificates only after you confirm.",
@@ -1402,6 +1426,7 @@ window.__ModuleLoader__.load({
 				"remote-needs-login": ["Tailscale is waiting for login to finish.", "Return to Remote access and continue login."],
 				"remote-connecting": ["The {provider} remote channel is still connecting.", "Wait briefly, then check again."],
 				"remote-controller-error": ["The {provider} controller reported {controllerCode}.", "Return to Remote access and reconnect."],
+				"competing-remote-channel": ["Another remote plugin is injecting its own request channel; the phone may show that plugin’s pairing screen.", "Turn off dsh-remote-web-ui remote access on the computer, refresh, and pair using the current DSH Mobile QR code. Do not mix pairing codes."],
 				"phone-network-unknown": ["The computer cannot determine whether the router isolates the phone.", "Confirm the phone and computer use the same network, then disable guest-network or AP isolation."]
 			},
 			it: {
@@ -1426,6 +1451,7 @@ window.__ModuleLoader__.load({
 				"remote-needs-login": ["Tailscale attende il completamento dell’accesso.", "Torna ad Accesso remoto e continua l’accesso."],
 				"remote-connecting": ["Il canale remoto {provider} è ancora in connessione.", "Attendi qualche istante e ripeti il controllo."],
 				"remote-controller-error": ["Il controller {provider} ha segnalato {controllerCode}.", "Torna ad Accesso remoto e riconnettiti."],
+				"competing-remote-channel": ["Un altro plugin remoto sta inserendo il proprio canale di richieste; sul telefono potrebbe apparire la sua schermata di abbinamento.", "Disattiva l’accesso remoto di dsh-remote-web-ui sul computer, aggiorna la pagina e usa il codice QR corrente di DSH Mobile. Non mescolare i codici."],
 				"phone-network-unknown": ["Il computer non può stabilire se il router isola il telefono.", "Verifica che telefono e computer usino la stessa rete, poi disattiva rete ospiti o isolamento AP."]
 			},
 			zh: {
@@ -1450,6 +1476,7 @@ window.__ModuleLoader__.load({
 				"remote-needs-login": ["Tailscale 正在等待完成登录。", "返回远程访问并继续登录。"],
 				"remote-connecting": ["{provider} 远程通道仍在连接。", "等待片刻后重新检查。"],
 				"remote-controller-error": ["{provider} 控制器报告 {controllerCode}。", "返回远程访问并重新连接。"],
+				"competing-remote-channel": ["检测到另一个远程插件注入自己的请求通道；手机可能显示它的配对页面。", "在电脑端关闭 dsh-remote-web-ui 的远程访问并刷新，再用 DSH Mobile 当前二维码配对；不要混用配对码。"],
 				"phone-network-unknown": ["电脑无法判断路由器是否隔离了手机。", "确认手机与电脑使用同一网络，并关闭访客网络或 AP 隔离。"]
 			}
 		};
@@ -2599,12 +2626,13 @@ window.__ModuleLoader__.load({
   [data-dsh-mobile-center] { grid-column:2 !important; width:100vw !important; min-width:0 !important; }
   [data-dsh-mobile-center] > * { min-width:0 !important; }
   [data-dsh-mobile-header] { box-sizing:border-box !important; width:calc(100% - 16px) !important; margin:0 8px !important; min-width:0; padding-top:max(4px,env(safe-area-inset-top)) !important; padding-right:8px !important; padding-left:42px !important; }
+  [data-dsh-mobile-header] :is([class*="_titleRow"],[class*="_headerLeading"]) { touch-action:pan-y; }
   [data-dsh-mobile-header] [class*="_titleRow"] { box-sizing:border-box !important; display:flex !important; align-items:center !important; min-width:0; min-height:32px !important; height:32px !important; gap:6px !important; padding:0 6px !important; }
   [data-dsh-mobile-header] [class*="_titleCluster"] { min-width:0; }
   [data-dsh-mobile-header] [class*="_crumbs"] { min-width:0; overflow:hidden; }
   [data-dsh-mobile-header] [class*="_crumb"] { max-width:46vw; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
-  [data-dsh-mobile-header] [class*="_headerActions"] { min-width:0; overflow-x:auto; scrollbar-width:none; }
-  [data-dsh-mobile-header] [class*="_headerActions"]::-webkit-scrollbar { display:none; }
+  /* Nested header actions (including the Jobs menu) must paint outside the row. */
+  [data-dsh-mobile-header] [class*="_headerActions"] { flex:none; min-width:max-content; overflow:visible; }
   [data-dsh-mobile-header] [class*="_headerUtilities"] { gap:2px !important; }
   [data-dsh-mobile-header] [class*="_sessionLogButton"] { width:40px; min-width:40px; padding:0 !important; overflow:hidden; color:transparent; font-size:0 !important; }
   [data-dsh-mobile-header] [class*="_sessionLogButton"] > * { display:none !important; }
@@ -2691,6 +2719,15 @@ window.__ModuleLoader__.load({
   [data-dsh-mobile-center] [data-composer-card] ~ * [class*="_root"] [class*="_sep"] { margin:0 6px !important; }
   /* Composer dock stats strip (turns/steps/tokens) reads small on phones. */
   [data-dsh-mobile-center] [data-slot="conversation.composer.dock"] [class*="_root"] { font-size:10px !important; line-height:16px !important; }
+  /* The context ring is a composer-metadata _root too, so the metadata rule
+     above stretched it across the whole dock. It cannot shrink, which left the
+     session statistics beside it a few pixels wide, every number clipped to an
+     ellipsis. Put the numbers in a wrapping left column and the ring in a right
+     column it cannot grow out of: a phone then shows every number in full, and
+     a wide screen keeps the ring beside them on one line. */
+  [data-dsh-mobile-center] [data-composer-card] ~ * [class*="_root"]:has(> [class*="_trigger"][aria-haspopup="dialog"]) { width:auto !important; max-width:none !important; flex:0 0 auto !important; }
+  [data-dsh-mobile-center] [class*="_dock"]:has([data-composer-stats]) { display:grid !important; grid-template-columns:minmax(0,1fr) max-content !important; align-items:center !important; column-gap:12px !important; }
+  [data-dsh-mobile-center] [data-composer-card] ~ * [class*="_root"][data-composer-stats] { box-sizing:border-box !important; width:auto !important; max-width:none !important; flex:0 1 auto !important; flex-wrap:wrap !important; justify-content:flex-start !important; row-gap:2px !important; }
   /* Message runtime details are inline on desktop. Give the clock/runtime
      label its own wrapping row on narrow screens so TTFT and throughput do
      not push the action buttons or clip at the viewport edge. */
@@ -2739,7 +2776,6 @@ window.__ModuleLoader__.load({
 @keyframes dsh-mobile-panel-in { from { opacity:.72; transform:translateY(6px); } }
 @keyframes dsh-mobile-view-in { from { opacity:.58; transform:translateY(5px); } }
 @media (max-width:420px) {
-  [data-dsh-mobile-header] [class*="_headerActions"] { max-width:42vw; }
   [data-dsh-mobile-settings-options] [data-slot="settings.general.item"] [class*="_selector"] { align-self:stretch !important; width:100% !important; }
   [data-dsh-mobile-message-column] [data-context-fields] > * { grid-template-columns:1fr !important; }
 }
@@ -2782,6 +2818,93 @@ window.__ModuleLoader__.load({
 			return marked;
 		}
 		const AUTO_HISTORY_THRESHOLD_PX = 64;
+		/** Travel, in CSS pixels, that separates a header strip pan from a tap on a chip. */
+		const STRIP_DRAG_THRESHOLD_PX = 8;
+		/** Measure flowing title controls without counting an open absolute-positioned menu. */
+		function measureHeaderStripOverflow(row) {
+			const left = row.getBoundingClientRect().left;
+			const controls = Array.from(row.children);
+			const actions = row.querySelector(":scope > [class*=\"_titleCluster\"] [class*=\"_headerActions\"]");
+			if (actions !== null) controls.push(actions);
+			const right = Math.max(left, ...controls.map((control) => control.getBoundingClientRect().right));
+			return Math.max(0, right - left - row.clientWidth);
+		}
+		/** Touch-only pan state; browser pointer cancellation does not interrupt the touch stream. */
+		function createHeaderStripPanController(options) {
+			let offset = 0;
+			let drag;
+			let suppressUntil = 0;
+			const clamp = (value) => Math.min(Math.max(0, options.range()), Math.max(0, value));
+			const setOffset = (value) => {
+				const next = clamp(value);
+				if (next === offset) return;
+				offset = next;
+				options.render(offset);
+			};
+			const end = () => {
+				if (drag === void 0) return;
+				if (drag.claimed) suppressUntil = options.now() + 400;
+				drag = void 0;
+			};
+			const cancel = () => {
+				if (drag?.claimed) suppressUntil = options.now() + 400;
+				drag = void 0;
+			};
+			return {
+				offset: () => offset,
+				start: (x, y) => {
+					drag = {
+						x,
+						y,
+						offset,
+						claimed: false
+					};
+					suppressUntil = 0;
+				},
+				move: (x, y) => {
+					if (drag === void 0) return false;
+					const travel = x - drag.x;
+					if (!drag.claimed) {
+						const drift = y - drag.y;
+						if (Math.abs(travel) < STRIP_DRAG_THRESHOLD_PX && Math.abs(drift) < STRIP_DRAG_THRESHOLD_PX) return false;
+						if (Math.abs(drift) > Math.abs(travel)) {
+							drag = void 0;
+							return false;
+						}
+						drag.claimed = true;
+					}
+					setOffset(drag.offset - travel);
+					return true;
+				},
+				end,
+				cancel,
+				sync: () => {
+					if (options.range() === 0) {
+						drag = void 0;
+						suppressUntil = 0;
+					}
+					setOffset(offset);
+				},
+				reveal: (left, right, visibleLeft, visibleRight) => {
+					if (left < visibleLeft) setOffset(offset - (visibleLeft - left));
+					else if (right > visibleRight) setOffset(offset + right - visibleRight);
+				},
+				resetClickSuppression: () => {
+					suppressUntil = 0;
+				},
+				suppressClick: (inHeader, detail) => {
+					if (suppressUntil === 0 || detail === 0) return false;
+					const suppress = inHeader && options.now() <= suppressUntil;
+					suppressUntil = 0;
+					return suppress;
+				},
+				dispose: () => {
+					drag = void 0;
+					suppressUntil = 0;
+					setOffset(0);
+				}
+			};
+		}
 		function controlledFileDragEvent(type, files, initialDropEffect) {
 			const event = new Event(type, {
 				bubbles: true,
@@ -3180,6 +3303,101 @@ window.__ModuleLoader__.load({
 				if (branch === null || branch.hasAttribute("disabled") || branch.getAttribute("aria-disabled") === "true") return;
 				window.setTimeout(showBranchToast, 80);
 			};
+			let stripHeader;
+			const stripParts = () => {
+				const row = stripHeader?.querySelector("[class*=\"_titleRow\"]");
+				if (row === void 0 || row === null) return void 0;
+				return {
+					row,
+					lead: stripHeader?.querySelector("[class*=\"_headerLeading\"]") ?? void 0
+				};
+			};
+			const stripRange = () => {
+				const parts = stripParts();
+				if (!overlayQuery.matches || parts === void 0) return 0;
+				const overflow = measureHeaderStripOverflow(parts.row);
+				return overflow > 1 ? overflow : 0;
+			};
+			const applyStrip = (offset) => {
+				const parts = stripParts();
+				if (parts === void 0) return;
+				const value = offset === 0 ? "" : `translateX(${-offset}px)`;
+				if (parts.row.style.transform !== value) parts.row.style.transform = value;
+				if (parts.lead !== void 0 && parts.lead.style.transform !== value) parts.lead.style.transform = value;
+			};
+			const pan = createHeaderStripPanController({
+				range: stripRange,
+				render: applyStrip,
+				now: () => performance.now()
+			});
+			const syncPanHeader = (header) => {
+				if (header !== stripHeader) {
+					pan.dispose();
+					stripHeader = header;
+				}
+				pan.sync();
+				applyStrip(pan.offset());
+			};
+			let activeTouchId;
+			const onStripTouchStart = (event) => {
+				if (activeTouchId !== void 0) pan.cancel();
+				activeTouchId = void 0;
+				pan.resetClickSuppression();
+				if (event.touches.length !== 1) return;
+				if (!overlayQuery.matches) return;
+				if (!(event.target instanceof Element)) return;
+				if (event.target.closest("[data-dsh-mobile-header]") !== stripHeader) return;
+				if (event.target.closest("[data-dsh-mobile-header] [class*=\"_titleRow\"],[data-dsh-mobile-header] [class*=\"_headerLeading\"]") === null) return;
+				if (stripRange() === 0) return;
+				const touch = event.touches[0];
+				if (touch === void 0) return;
+				activeTouchId = touch.identifier;
+				pan.start(touch.clientX, touch.clientY);
+			};
+			const onStripTouchMove = (event) => {
+				if (activeTouchId === void 0) return;
+				if (event.touches.length !== 1) {
+					activeTouchId = void 0;
+					pan.cancel();
+					return;
+				}
+				const touch = event.touches[0];
+				if (touch === void 0 || touch.identifier !== activeTouchId) return;
+				if (pan.move(touch.clientX, touch.clientY)) event.preventDefault();
+			};
+			const onStripTouchEnd = (event) => {
+				if (activeTouchId === void 0 || !Array.from(event.changedTouches).some((touch) => touch.identifier === activeTouchId)) return;
+				activeTouchId = void 0;
+				pan.end();
+			};
+			const onStripTouchCancel = (event) => {
+				if (activeTouchId === void 0 || !Array.from(event.changedTouches).some((touch) => touch.identifier === activeTouchId)) return;
+				activeTouchId = void 0;
+				pan.cancel();
+			};
+			const onStripFocus = (event) => {
+				if (!(event.target instanceof HTMLElement)) return;
+				const header = event.target.closest("[data-dsh-mobile-header]");
+				if (header === null || header !== stripHeader || stripRange() === 0 || event.target.closest("[class*=\"_titleRow\"],[class*=\"_headerLeading\"]") === null) return;
+				const focused = event.target.getBoundingClientRect();
+				const visible = header.getBoundingClientRect();
+				pan.reveal(focused.left, focused.right, visible.left + 42, visible.right - 8);
+			};
+			const onStripClickCapture = (event) => {
+				const inHeader = event.target instanceof Element && event.target.closest("[data-dsh-mobile-header]") !== null;
+				if (!pan.suppressClick(inHeader, event.detail)) return;
+				event.preventDefault();
+				event.stopPropagation();
+			};
+			document.addEventListener("touchstart", onStripTouchStart, true);
+			document.addEventListener("touchmove", onStripTouchMove, {
+				capture: true,
+				passive: false
+			});
+			document.addEventListener("touchend", onStripTouchEnd, true);
+			document.addEventListener("touchcancel", onStripTouchCancel, true);
+			document.addEventListener("focusin", onStripFocus, true);
+			document.addEventListener("click", onStripClickCapture, true);
 			document.addEventListener("click", onBranchClick, true);
 			let frame;
 			let sidebar;
@@ -3280,6 +3498,7 @@ window.__ModuleLoader__.load({
 				const handle = frame === void 0 ? void 0 : firstByClassSuffix(frame, "_handle");
 				markNativeMobileSettings(document);
 				if (center === void 0) {
+					syncPanHeader(void 0);
 					syncComposerEnterNewline(null);
 					bindHistoryScroller(void 0);
 					syncMediaBinding(null);
@@ -3289,7 +3508,9 @@ window.__ModuleLoader__.load({
 				}
 				if (center !== void 0) {
 					center.dataset.dshMobileCenter = "true";
-					center.querySelector("header")?.setAttribute("data-dsh-mobile-header", "true");
+					const header = center.querySelector("header") ?? void 0;
+					header?.setAttribute("data-dsh-mobile-header", "true");
+					syncPanHeader(header);
 					viewArea = firstByClassSuffix(center, "_viewArea");
 					if (viewArea !== void 0) viewArea.dataset.dshMobileView = "true";
 					const conversation = center.querySelector("[data-conversation-scroll]");
@@ -3421,6 +3642,14 @@ window.__ModuleLoader__.load({
 				observer.disconnect();
 				overlayQuery.removeEventListener("change", schedule);
 				document.removeEventListener("click", onBranchClick, true);
+				document.removeEventListener("touchstart", onStripTouchStart, true);
+				document.removeEventListener("touchmove", onStripTouchMove, true);
+				document.removeEventListener("touchend", onStripTouchEnd, true);
+				document.removeEventListener("touchcancel", onStripTouchCancel, true);
+				document.removeEventListener("focusin", onStripFocus, true);
+				document.removeEventListener("click", onStripClickCapture, true);
+				pan.dispose();
+				applyStrip(0);
 				cameraButton.removeEventListener("pointerdown", quietMediaPointer);
 				cameraButton.removeEventListener("click", takePhoto);
 				if (branchToastTimer !== 0) window.clearTimeout(branchToastTimer);
@@ -3445,6 +3674,16 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/local-admin-host.ts
 		/** Browser-safe desktop-admin Host checks. Do not import Node APIs here. */
+		const DESKTOP_ADMIN_HEADER = "x-dsh-mobile-desktop-admin";
+		const DESKTOP_ADMIN_MARKER = "dsh-app://app";
+		/** Add the forwarded Desktop marker only to this plugin's mutating admin requests. */
+		function localAdminRequestHeaders(init, location) {
+			const headers = new Headers(init?.headers);
+			if (!headers.has("content-type")) headers.set("content-type", "application/json");
+			headers.delete(DESKTOP_ADMIN_HEADER);
+			if (init?.method?.toUpperCase() === "POST" && location.protocol === "dsh-app:" && location.hostname === "app") headers.set(DESKTOP_ADMIN_HEADER, DESKTOP_ADMIN_MARKER);
+			return headers;
+		}
 		function unwrapBrackets(hostname) {
 			return hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
 		}
@@ -3485,11 +3724,12 @@ window.__ModuleLoader__.load({
 		/**
 		* Whether the current browser document should mount the desktop Mobile access
 		* control. Dedicated Mobile HTTPS (the phone surface) stays native even when
-		* the Host is a private LAN address.
+		* the Host is a private LAN address. DSH Desktop (dsh-app://app) has neither,
+		* so its protocol gated on the fixed hostname "app" counts too.
 		*/
-		function isDesktopAdminSurface(hostname, search = "", frontend) {
+		function isDesktopAdminSurface(hostname, search = "", frontend, protocol = "") {
 			const query = search.startsWith("?") ? search.slice(1) : search;
-			return isLocalAdminHostname(hostname) && frontend !== "dedicated" && !new URLSearchParams(query).has("dsh-mobile-preview");
+			return (protocol === "dsh-app:" ? hostname === "app" : (protocol === "" || protocol === "http:" || protocol === "https:") && isLocalAdminHostname(hostname)) && frontend !== "dedicated" && !new URLSearchParams(query).has("dsh-mobile-preview");
 		}
 		//#endregion
 		//#region src/client.ts
@@ -3810,10 +4050,7 @@ window.__ModuleLoader__.load({
 				const response = await fetch(path, {
 					...init,
 					signal: controller.signal,
-					headers: {
-						"content-type": "application/json",
-						...init?.headers
-					}
+					headers: localAdminRequestHeaders(init, location)
 				});
 				const body = await response.json();
 				if (!response.ok) throw new Error(typeof body.error === "string" ? body.error : `HTTP ${String(response.status)}`);
@@ -3913,6 +4150,18 @@ window.__ModuleLoader__.load({
 			control_channel_failed: "controlChannelFailed",
 			cpolar_component_missing: "cpolarMissing",
 			cpolar_component_invalid: "cpolarInvalid",
+			cpolar_download_failed: "cpolarDownloadFailed",
+			cpolar_download_timeout: "cpolarDownloadTimeout",
+			cpolar_download_size_mismatch: "cpolarIntegrityFailed",
+			cpolar_download_hash_mismatch: "cpolarIntegrityFailed",
+			cpolar_executable_hash_mismatch: "cpolarIntegrityFailed",
+			cpolar_download_redirect_missing: "cpolarDownloadFailed",
+			cpolar_download_redirect_invalid: "cpolarDownloadFailed",
+			cpolar_download_redirect_rejected: "cpolarDownloadFailed",
+			cpolar_installer_missing: "cpolarExtractFailed",
+			cpolar_executable_missing: "cpolarExtractFailed",
+			cpolar_extract_failed: "cpolarExtractFailed",
+			cpolar_storage_failed: "cpolarStorageFailed",
 			cpolar_config_missing: "cpolarConfigMissing",
 			cpolar_config_invalid: "cpolarConfigInvalid",
 			cpolar_port_unavailable: "cpolarPortUnavailable",
@@ -4048,6 +4297,8 @@ window.__ModuleLoader__.load({
 			*/
 			const remoteFailureTextFor = (error, fallbackKey) => {
 				const message = error instanceof Error ? error.message : String(error);
+				const cpolarHttpStatus = /^cpolar_download_http_(\d{3})$/u.exec(message)?.[1];
+				if (cpolarHttpStatus !== void 0) return t("cpolarDownloadHttp", { status: cpolarHttpStatus });
 				const key = REMOTE_ERROR_MESSAGE_KEYS[message];
 				return key === void 0 ? t(fallbackKey, { error: message }) : t(key);
 			};
@@ -8286,7 +8537,7 @@ window.__ModuleLoader__.load({
 				return trustAuthenticatedGatewayConnection(ctx.get("connection"));
 			}, "dsh-mobile: authenticated gateway client trust");
 			ctx.effect(() => {
-				const desktopAdmin = isDesktopAdminSurface(location.hostname, location.search, window.__DSH_MOBILE_FRONTEND__);
+				const desktopAdmin = isDesktopAdminSurface(location.hostname, location.search, window.__DSH_MOBILE_FRONTEND__, location.protocol);
 				const style = element("style");
 				style.dataset.plugin = "dsh-mobile";
 				style.textContent = desktopAdmin ? CONTROL_STYLES : NATIVE_MOBILE_STYLES;