dsh-mobile 0.5.5 → 0.6.0

package/lib/client.js

@@ -514,7 +514,24 @@ window.__ModuleLoader__.load({
 			wsPathsAdvancedHint: "通常不需要手动填写：用上方按钮即可。只有当你确切知道所需路径时才填。"
 		});
 		Object.assign(MOBILE_CONTROL_MESSAGES.en, {
+			trustedNetworksTitle: "Additional trusted networks · Advanced",
+			trustedNetworksHelp: "Keep the LAN subnet and explicitly add only networks you control, such as a routed WireGuard subnet. Device pairing and HTTPS are still required. Separate CIDRs with spaces, commas, or newlines.",
+			trustedNetworksLabel: "Additional source networks",
+			trustedNetworksSave: "Save networks",
+			trustedNetworksUnavailable: "Available only with managed LAN setup.",
+			trustedNetworksRestart: "Saved. Restart DSH to apply; existing connections are not interrupted now.",
+			trustedNetworksWindows: "On Windows, the firewall must also allow these source networks; the default rule allows LocalSubnet only.",
+			trustedNetworksFailed: "Could not read this setting. Retry after reopening this section.",
+			trustedNetworksInvalid: "Could not save. Enter valid network CIDRs, for example 11.24.0.0/24, and check that DSH can write its private setup file.",
 			cpolarDownloadFailed: "Could not download cpolar from its official site. Check this computer’s network or proxy, then retry.",
+			caddyUnavailable: "The fixed Caddy component is not published for this candidate. Keep using an existing reverse proxy or another remote provider; unverified downloads will not run.",
+			caddyVerified: "Managed HTTPS entry verified for this computer.",
+			caddyInstalled: "Caddy component installed; the connection is not yet verified.",
+			caddyConnectionFailed: "Managed HTTPS connection was not established. Check the domain, public inbound access, port mapping and DNS credentials.",
+			caddyModeChangeConfirm: "Switching this origin mode closes its current connection. Continue?",
+			caddyInstallConfirm: "Download and verify the fixed Caddy build into DSH Mobile’s private directory? No system service, PATH or startup item will be installed.",
+			caddyInstallFailed: "Caddy was not installed. Check that the fixed artifact is available and verified; do not bypass its checksum.",
+			caddyPurgeFailed: "Cleanup was not completed. Stop the managed connection and retry.",
 			cpolarDownloadTimeout: "The cpolar download timed out. Check this computer’s network or proxy, then retry.",
 			cpolarDownloadHttp: "The official cpolar download returned HTTP {status}. Retry later or check the official download page.",
 			cpolarIntegrityFailed: "The cpolar download did not match the pinned build, so it was not installed. Retry later or update DSH Mobile; do not bypass verification.",
@@ -522,7 +539,24 @@ window.__ModuleLoader__.load({
 			cpolarStorageFailed: "Could not write the cpolar component in DSH Mobile’s private directory. Check disk space, permissions, and security software, then retry."
 		});
 		Object.assign(MOBILE_CONTROL_MESSAGES.it, {
+			trustedNetworksTitle: "Reti attendibili aggiuntive · Avanzate",
+			trustedNetworksHelp: "Mantieni la sottorete LAN e aggiungi solo reti che controlli, come una sottorete WireGuard instradata. Abbinamento e HTTPS restano obbligatori. Separa i CIDR con spazi, virgole o righe nuove.",
+			trustedNetworksLabel: "Reti sorgenti aggiuntive",
+			trustedNetworksSave: "Salva reti",
+			trustedNetworksUnavailable: "Disponibile solo con la configurazione LAN gestita.",
+			trustedNetworksRestart: "Salvato. Riavvia DSH per applicare; le connessioni attuali non vengono interrotte.",
+			trustedNetworksWindows: "Su Windows anche il firewall deve consentire queste reti sorgenti; la regola predefinita consente solo LocalSubnet.",
+			trustedNetworksFailed: "Impossibile leggere questa impostazione. Riapri la sezione e riprova.",
+			trustedNetworksInvalid: "Salvataggio non riuscito. Inserisci CIDR validi, ad esempio 11.24.0.0/24, e verifica che DSH possa scrivere il file privato di configurazione.",
 			cpolarDownloadFailed: "Impossibile scaricare cpolar dal sito ufficiale. Controlla rete o proxy del computer e riprova.",
+			caddyUnavailable: "Il componente Caddy fisso non è pubblicato per questa versione candidata. Usa il tuo proxy o un altro provider; i download non verificati non vengono eseguiti.",
+			caddyVerified: "Ingresso HTTPS gestito verificato per questo computer.",
+			caddyInstalled: "Componente Caddy installato; connessione non ancora verificata.",
+			caddyConnectionFailed: "Connessione HTTPS gestita non stabilita. Controlla dominio, accesso pubblico, porte e credenziali DNS.",
+			caddyModeChangeConfirm: "Cambiare modalità origin chiude la connessione attuale. Continuare?",
+			caddyInstallConfirm: "Scaricare e verificare Caddy nella directory privata DSH Mobile? Nessun servizio, PATH o avvio automatico viene installato.",
+			caddyInstallFailed: "Caddy non installato. Verifica disponibilità e integrità del file fisso; non ignorare il checksum.",
+			caddyPurgeFailed: "Pulizia non completata. Arresta la connessione gestita e riprova.",
 			cpolarDownloadTimeout: "Download di cpolar scaduto. Controlla rete o proxy del computer e riprova.",
 			cpolarDownloadHttp: "Il download ufficiale di cpolar ha restituito HTTP {status}. Riprova più tardi o controlla la pagina ufficiale.",
 			cpolarIntegrityFailed: "Il pacchetto cpolar non corrisponde alla versione verificata e non è stato installato. Riprova più tardi o aggiorna DSH Mobile; non aggirare la verifica.",
@@ -531,6 +565,23 @@ window.__ModuleLoader__.load({
 		});
 		Object.assign(MOBILE_CONTROL_MESSAGES.zh, {
 			cpolarDownloadFailed: "无法从 cpolar 官网下载组件。请检查这台电脑的网络或代理，然后重试。",
+			caddyUnavailable: "本次候选尚未发布固定 Caddy 组件。请继续使用已有反向代理或其他远程方式；不会执行未经校验的下载。",
+			caddyVerified: "托管 HTTPS 入口已验证为这台电脑。",
+			caddyInstalled: "Caddy 组件已安装，远程连接尚未验证。",
+			caddyConnectionFailed: "托管 HTTPS 连接未建立，请检查域名、公网入站、端口映射和 DNS 凭据。",
+			caddyModeChangeConfirm: "切换此自有代理模式会关闭它当前的连接，是否继续？",
+			caddyInstallConfirm: "从固定来源下载并校验 Caddy 到 DSH Mobile 私有目录？不会安装系统服务、写入 PATH 或设置开机启动。",
+			caddyInstallFailed: "Caddy 没有安装成功，请检查固定组件是否可用并通过校验，不要跳过校验。",
+			caddyPurgeFailed: "尚未完成清理，请停止受管连接后重试。",
+			trustedNetworksTitle: "额外可信网段 · 高级",
+			trustedNetworksHelp: "保留当前局域网网段，只追加你可控的网络，例如路由接入的 WireGuard 网段。配对与 HTTPS 校验仍然保留。每行一个 CIDR，也可用空格或逗号分隔。",
+			trustedNetworksLabel: "额外允许的来源网段",
+			trustedNetworksSave: "保存网段",
+			trustedNetworksUnavailable: "仅托管局域网配置支持此设置。",
+			trustedNetworksRestart: "已保存，重启 DSH 后生效；不会立即中断当前连接。",
+			trustedNetworksWindows: "Windows 防火墙也需要放行这些来源网段；默认规则只允许 LocalSubnet。",
+			trustedNetworksFailed: "暂时无法读取设置，请重新打开此区域后重试。",
+			trustedNetworksInvalid: "保存失败。请填写有效的网络 CIDR，例如 11.24.0.0/24，并确认 DSH 可写入私有配置文件。",
 			cpolarDownloadTimeout: "下载 cpolar 组件超时。请检查这台电脑的网络或代理，然后重试。",
 			cpolarDownloadHttp: "cpolar 官网下载返回 HTTP {status}。请稍后重试，或检查官网下载页。",
 			cpolarIntegrityFailed: "下载的 cpolar 组件未通过固定版本校验，因此没有安装。请稍后重试或更新 DSH Mobile，不要跳过校验。",
@@ -1099,6 +1150,19 @@ window.__ModuleLoader__.load({
 			originCopyBackend: "Copy backend address",
 			originBackendCopied: "HTTP backend address copied.",
 			originPurge: "Clear proxy settings",
+			caddyModeManaged: "Managed Caddy (plugin handles HTTPS and certificates)",
+			caddyModeExternal: "I already run my own reverse proxy",
+			caddySectionTitle: "Managed Caddy upstream",
+			caddyInstall: "Install managed Caddy",
+			caddyInstallNote: "Downloaded from the official Caddy custom build (caddy core + Tencent Cloud DNS plugin for DNS-01), verified by checksum, stored in the plugin private directory. No system service, PATH entry, or startup item is added.",
+			caddyDomain: "Public domain",
+			caddyDnsProvider: "DNS provider (DNS-01)",
+			caddySecretId: "Tencent Cloud SecretId",
+			caddySecretKey: "Tencent Cloud SecretKey",
+			caddyListenPort: "Public HTTPS port",
+			caddySaveConnect: "Save and start Caddy",
+			caddyPurge: "Remove managed Caddy and settings",
+			caddyReady: "Managed Caddy is running; certificates are issued and renewed automatically.",
 			originPurgeConfirm: "Stop this private HTTP backend and delete only its reverse-proxy settings? Paired remote devices, LAN access, and other providers are kept.",
 			originPurged: "The backend is stopped and its proxy settings are cleared. Paired devices are kept.",
 			originSaving: "Saving settings and starting the private backend…",
@@ -1141,6 +1205,19 @@ window.__ModuleLoader__.load({
 			originCopyBackend: "Copia indirizzo backend",
 			originBackendCopied: "Indirizzo backend HTTP copiato.",
 			originPurge: "Cancella impostazioni proxy",
+			caddyModeManaged: "Caddy gestito (il plugin gestisce HTTPS e certificati)",
+			caddyModeExternal: "Uso già il mio reverse proxy",
+			caddySectionTitle: "Upstream Caddy gestito",
+			caddyInstall: "Installa Caddy gestito",
+			caddyInstallNote: "Scaricato dalla build personalizzata ufficiale di Caddy (core + plugin DNS Tencent Cloud per DNS-01), verificato tramite checksum e conservato nella directory privata del plugin. Non aggiunge servizi di sistema, voci PATH o avvio automatico.",
+			caddyDomain: "Dominio pubblico",
+			caddyDnsProvider: "Provider DNS (DNS-01)",
+			caddySecretId: "SecretId Tencent Cloud",
+			caddySecretKey: "SecretKey Tencent Cloud",
+			caddyListenPort: "Porta HTTPS pubblica",
+			caddySaveConnect: "Salva e avvia Caddy",
+			caddyPurge: "Rimuovi Caddy gestito e impostazioni",
+			caddyReady: "Caddy gestito in esecuzione; i certificati vengono emessi e rinnovati automaticamente.",
 			originPurgeConfirm: "Fermare questo backend HTTP privato ed eliminare solo le sue impostazioni reverse proxy? Dispositivi remoti abbinati, accesso LAN e altri provider vengono conservati.",
 			originPurged: "Backend fermato e impostazioni proxy cancellate. I dispositivi abbinati sono conservati.",
 			originSaving: "Salvataggio impostazioni e avvio del backend privato…",
@@ -1183,6 +1260,19 @@ window.__ModuleLoader__.load({
 			originCopyBackend: "复制后端地址",
 			originBackendCopied: "已复制 HTTP 后端地址。",
 			originPurge: "清除代理配置",
+			caddyModeManaged: "托管 Caddy（插件负责 HTTPS 与证书）",
+			caddyModeExternal: "我已自行配置反向代理",
+			caddySectionTitle: "托管 Caddy 上游",
+			caddyInstall: "安装托管 Caddy",
+			caddyInstallNote: "从 Caddy 官方定制构建下载（caddy 核心 + 腾讯云 DNS 插件，用于 DNS-01），经校验和验证后保存在插件私有目录。不添加系统服务、PATH 条目或开机启动项。",
+			caddyDomain: "公网域名",
+			caddyDnsProvider: "DNS 提供商（DNS-01）",
+			caddySecretId: "腾讯云 SecretId",
+			caddySecretKey: "腾讯云 SecretKey",
+			caddyListenPort: "公网 HTTPS 端口",
+			caddySaveConnect: "保存并启动 Caddy",
+			caddyPurge: "移除托管 Caddy 与配置",
+			caddyReady: "托管 Caddy 正在运行；证书会自动签发并续期。",
 			originPurgeConfirm: "停止此私有 HTTP 后端，并且只删除它的反向代理配置？已配对的远程设备、局域网访问和其他提供方均保留。",
 			originPurged: "已停止后端并清除代理配置，已配对设备仍保留。",
 			originSaving: "正在保存配置并启动私有后端…",
@@ -2648,6 +2738,16 @@ window.__ModuleLoader__.load({
  .dsh-mobile-settings_selector:active:not(:disabled) { background:var(--dsw-alias-interactive-bg-active,var(--dsw-alias-interactive-bg-hover)); }
  .dsh-mobile-settings_selector:focus-visible { outline:2px solid var(--dsw-alias-label-primary-bluish,#2563eb); outline-offset:2px; }
  .dsh-mobile-settings_selector:disabled { cursor:wait; opacity:.55; }
+ .dsh-mobile-settings_fontControls { display:flex; align-items:center; gap:8px; flex-shrink:0; }
+ .dsh-mobile-settings_fontControls button { min-width:48px; padding:0 12px; }
+ .dsh-mobile-settings_fontControls output { min-width:42px; text-align:center; font-variant-numeric:tabular-nums; }
+ /* The mobile row replaces the Host-backed font control, not the theme selector. */
+ html.dsh-native-mobile-active [data-slot="settings.general.item"]:has([data-mobile-font-setting]) > :not([data-mobile-font-setting])[class*="_row"]:has([class*="_control"] > [class*="_stepper"] > [class*="_arrows"]) { display:none !important; }
+ /* Landscape and wide App windows also constrain standard extension controls. */
+ [data-dsh-mobile-composer-row] { min-width:0 !important; max-width:100% !important; }
+ [data-dsh-mobile-composer-tools]:not([hidden]),[data-dsh-mobile-composer-controls]:not([hidden]) { flex-wrap:wrap !important; min-width:0 !important; max-width:100% !important; }
+ [data-dsh-mobile-composer-tools] > *,[data-dsh-mobile-composer-tools] > [data-slot] > *,[data-dsh-mobile-composer-controls] > *,[data-dsh-mobile-composer-controls] > [data-slot] > * { min-width:0 !important; max-width:100% !important; }
+ [data-dsh-mobile-composer-tools] button,[data-dsh-mobile-composer-controls] button { white-space:normal !important; overflow-wrap:anywhere !important; }
 @media ${NATIVE_MOBILE_OVERLAY_QUERY} {
   html.dsh-native-mobile-active,html.dsh-native-mobile-active body { width:100%; height:100%; overflow:hidden; }
   html.dsh-native-mobile-active { --dsh-mobile-motion-duration:200ms; --dsh-mobile-motion-ease:cubic-bezier(.22,1,.36,1); }
@@ -2826,20 +2926,33 @@ window.__ModuleLoader__.load({
      owned by DSH. Toolbar focus keeps the card expanded during menu taps. */
   [data-dsh-mobile-center] [data-composer-card]:not(:focus-within) > [data-input-scroll] { max-height:72px !important; overflow-y:auto !important; }
   /* Stock Send/Queue/Steer and Stop keep their handlers and disabled state. */
-  [data-dsh-mobile-composer-row] button { min-height:44px !important; touch-action:manipulation; }
+  [data-dsh-mobile-composer-row] button { min-width:44px !important; min-height:44px !important; touch-action:manipulation; }
   [data-dsh-mobile-composer-row] button[class*="_primary"] { min-width:44px !important; flex-shrink:0 !important; }
-   /* The desktop composer intentionally wraps whole toolbar groups. On a phone,
-     dynamic model and status labels made that row alternate between one and
-     two lines. Keep two stable columns and let only the model label shrink. */
-  [data-dsh-mobile-composer-row] { display:grid !important; grid-template-columns:max-content minmax(0,1fr) !important; align-items:center !important; gap:4px 8px !important; }
-  [data-dsh-mobile-composer-tools] { display:flex !important; flex-wrap:nowrap !important; width:max-content !important; min-width:0 !important; max-width:max-content !important; gap:6px !important; }
-  [data-dsh-mobile-composer-trailing] { display:flex !important; flex-wrap:nowrap !important; width:100% !important; min-width:0 !important; max-width:100% !important; gap:6px !important; margin-left:0 !important; justify-content:flex-end !important; }
-  [data-dsh-mobile-composer-model] { flex:1 1 0 !important; width:auto !important; min-width:0 !important; max-width:none !important; }
+  /* Keep ordinary controls on one row. The trailing group reserves room for
+     its model and primary buttons; extra tools wrap only when space is short. */
+  [data-dsh-mobile-composer-row] { display:flex !important; flex-wrap:wrap !important; align-items:center !important; gap:4px 8px !important; min-width:0 !important; max-width:100% !important; }
+  [data-dsh-mobile-composer-tools]:not([hidden]) { display:flex !important; flex:0 1 auto !important; flex-wrap:wrap !important; width:auto !important; min-width:0 !important; max-width:100% !important; gap:6px !important; }
+  [data-dsh-mobile-composer-tools] > *,[data-dsh-mobile-composer-tools] > [data-slot] > * { min-width:0 !important; max-width:100% !important; }
+  [data-dsh-mobile-composer-tools] button { white-space:normal !important; overflow-wrap:anywhere !important; }
+  [data-dsh-mobile-composer-trailing] { display:flex !important; flex:1 0 100px !important; flex-wrap:nowrap !important; width:auto !important; min-width:min(100%,100px) !important; max-width:100% !important; gap:6px !important; margin-left:0 !important; justify-content:flex-end !important; }
+  [data-dsh-mobile-composer-trailing]:has(> button[class*="_primary"] ~ button[class*="_primary"]) { flex-basis:144px !important; min-width:min(100%,144px) !important; }
+  [data-dsh-mobile-composer-controls]:not([hidden]) { display:flex !important; flex:1 1 0 !important; flex-wrap:wrap !important; justify-content:flex-end !important; min-width:0 !important; max-width:100% !important; gap:6px !important; }
+  [data-dsh-mobile-composer-controls] > *,[data-dsh-mobile-composer-controls] > [data-slot] > * { min-width:0 !important; max-width:100% !important; }
+  [data-dsh-mobile-composer-controls] button { white-space:normal !important; overflow-wrap:anywhere !important; }
+  [data-dsh-mobile-composer-model] { flex:0 1 auto !important; width:auto !important; min-width:44px !important; max-width:100% !important; }
   [data-dsh-mobile-composer-model-trigger] { box-sizing:border-box !important; width:100% !important; max-width:100% !important; min-width:0 !important; padding-left:6px !important; padding-right:4px !important; }
   [data-dsh-mobile-composer-model-label] { flex:1 1 auto !important; max-width:none !important; min-width:0 !important; overflow:hidden !important; text-overflow:ellipsis !important; white-space:nowrap !important; }
   [data-dsh-mobile-center] [class*="_root"]:has(> [class*="_card"] textarea) { box-sizing:border-box !important; width:100% !important; padding:0 0 8px !important; }
   [data-dsh-mobile-center] [class*="_root"]:has(> [class*="_card"] textarea) > [class=""]:last-child { display:none !important; }
 }
+@media (max-width:720px) and (max-height:500px) {
+  /* An open software keyboard leaves less room for the focused draft. */
+  html.dsh-native-mobile-active [data-dsh-mobile-center] [data-composer-card] > [data-input-scroll] { max-height:72px !important; overflow-y:auto !important; }
+}
+@media (max-width:720px) and (max-height:400px) {
+  [data-dsh-mobile-center] [data-composer-card] { gap:8px !important; }
+  html.dsh-native-mobile-active [data-dsh-mobile-center] [data-composer-card] > [data-input-scroll] { max-height:48px !important; }
+}
 @keyframes dsh-mobile-fade-in { from { opacity:0; } }
 @keyframes dsh-mobile-panel-in { from { opacity:.72; transform:translateY(6px); } }
 @keyframes dsh-mobile-view-in { from { opacity:.58; transform:translateY(5px); } }
@@ -3107,7 +3220,7 @@ window.__ModuleLoader__.load({
 		/** Only a known on-screen keyboard in an active App composer may change Enter into a line break. */
 		function isSoftKeyboardEnterLineBreak(event, context) {
 			if (context.nativeState?.imeVisible !== true || context.nativeState.noHardwareKeyboard !== true || !context.editable || !context.activeSession || context.commandMenuOpen || context.recentlyComposing) return false;
-			if (!event.isTrusted || event.key !== "Enter" || event.isComposing || event.keyCode === 229 || event.repeat) return false;
+			if (!event.isTrusted || event.key !== "Enter" || event.defaultPrevented || event.isComposing || event.keyCode === 229 || event.repeat) return false;
 			return !event.shiftKey && !event.altKey && !event.ctrlKey && !event.metaKey && !event.getModifierState("AltGraph");
 		}
 		/** Attach the App-only Enter translation while retaining DSH's original physical-key semantics. */
@@ -3146,10 +3259,193 @@ window.__ModuleLoader__.load({
 				editor.removeEventListener("keydown", onKeyDown, { capture: true });
 			};
 		}
+		/**
+		* Touch-primary device hint for the browser Enter translation. Duplicates the literal of
+		* `TOUCH_PRIMARY_QUERY` in mobile-layout.ts, which builds a separate bundle entry that
+		* this module must not import; a source test keeps the two from drifting apart.
+		*/
+		const BROWSER_TOUCH_PRIMARY_QUERY = "(hover: none), (pointer: coarse)";
+		/** The stock composer editor a phone-browser Enter may keep as a native line break. */
+		const BROWSER_COMPOSER_EDITOR_QUERY = "[data-composer-input][contenteditable=\"true\"]";
+		/**
+		* Whether the App adapter or its earlier origin-scoped WebMessage channel owns Enter.
+		* @param view - the page's current native bridge indicators.
+		* @returns true without assuming that native keyboard state is already available.
+		*/
+		function nativeAppOwnsComposerEnter(view) {
+			const channel = view.dshMobileNative;
+			return view.__DSH_MOBILE_NATIVE__ !== void 0 || typeof channel === "object" && channel !== null && "postMessage" in channel && typeof channel.postMessage === "function";
+		}
+		/**
+		* Whether a phone-browser plain Enter keeps its native editing action instead of reaching
+		* DSH's submit shortcut. Unlike the App gate there is no soft-keyboard proof, so this
+		* mirrors the shipped question-card policy: the touch-primary hint plus the same event,
+		* editor, and IME guards. A held key (`repeat`) keeps the native behavior every editor
+		* has, and already-prevented or modified Enters stay under stock control — Cmd/Ctrl+Enter
+		* keeps its stock submit path, which is how an attached hardware keyboard still sends.
+		*/
+		function isBrowserTouchEnterLineBreak(event, context) {
+			if (context.appBridge || !context.browserTouch || !context.editable || !context.activeSession || context.commandMenuOpen || context.recentlyComposing || !context.hasDraft) return false;
+			if (!event.isTrusted || event.key !== "Enter" || event.defaultPrevented || event.isComposing || event.keyCode === 229) return false;
+			return !event.shiftKey && !event.altKey && !event.ctrlKey && !event.metaKey && !event.getModifierState("AltGraph");
+		}
+		/**
+		* Whether the stock composer still holds a draft. Mirrors `composerHasDraft` in
+		* mobile-layout.ts, which builds a separate bundle entry this module must not import;
+		* keep the two shapes aligned (checked against text, embedded decorators, attachments).
+		*/
+		function browserComposerHasDraft(editor, card) {
+			return (editor.textContent ?? "").replaceAll("​", "").trim() !== "" || editor.querySelector("[contenteditable=\"false\"],[data-lexical-decorator],img") !== null || card.querySelector("[data-slot=\"conversation.input.attachments\"] [role=\"group\"] > *") !== null;
+		}
+		/**
+		* Composition tracking for the document-capture Enter translation. iOS Safari fires the
+		* composition-confirming Enter with `isComposing === false` in the same task as
+		* `compositionend`, so ownership extends ten milliseconds past the event — the same window
+		* the stock composer and the App binder use.
+		*/
+		function createDocumentCompositionGuard(target) {
+			let composing = false;
+			let composingUntil = 0;
+			const onCompositionStart = () => {
+				composing = true;
+			};
+			const onCompositionEnd = () => {
+				composing = false;
+				composingUntil = performance.now() + 10;
+			};
+			target.addEventListener("compositionstart", onCompositionStart, { capture: true });
+			target.addEventListener("compositionend", onCompositionEnd, { capture: true });
+			return {
+				recentlyComposing: () => composing || performance.now() < composingUntil,
+				dispose: () => {
+					target.removeEventListener("compositionstart", onCompositionStart, { capture: true });
+					target.removeEventListener("compositionend", onCompositionEnd, { capture: true });
+				}
+			};
+		}
+		/** Locate the stock composer editor under a keydown target: the editor itself or a node inside it. */
+		function resolveBrowserComposerEditor(target) {
+			const candidate = target;
+			if (candidate === null || typeof candidate.closest !== "function") return null;
+			const editor = candidate.closest.call(target, BROWSER_COMPOSER_EDITOR_QUERY);
+			if (editor === null) return null;
+			const card = editor.closest("[data-composer-card]");
+			return card === null ? null : {
+				editor,
+				card
+			};
+		}
+		/**
+		* Phone-browser Enter translation for the stock composer. Lexical refuses keydown Enter
+		* on Apple browsers and performs the line break from the native `beforeinput` flow, so
+		* unlike the App binding this hides the keydown with `stopPropagation` only — no
+		* `preventDefault`, no synthetic event — letting the browser's own insertParagraph produce
+		* the same draft line break desktop Shift+Enter yields, while stock submit never runs.
+		* `stopPropagation` (never the immediate variant) keeps same-node document listeners such
+		* as the send-keyboard typing tracker and the question-card handler running. Document
+		* capture runs before React root handlers and needs no per-editor binding lifecycle.
+		*/
+		function bindBrowserComposerSoftEnter(view, context) {
+			const guard = createDocumentCompositionGuard(view);
+			const touchPrimary = typeof window === "object" && typeof window.matchMedia === "function" ? window.matchMedia(BROWSER_TOUCH_PRIMARY_QUERY) : void 0;
+			const onKeyDown = (event) => {
+				const target = resolveBrowserComposerEditor(event.target);
+				if (target === null) return;
+				if (!isBrowserTouchEnterLineBreak(event, {
+					...context(target.editor, target.card),
+					browserTouch: touchPrimary?.matches === true,
+					hasDraft: browserComposerHasDraft(target.editor, target.card),
+					recentlyComposing: guard.recentlyComposing() || target.editor.hasAttribute("data-composer-composing")
+				})) return;
+				event.stopPropagation();
+			};
+			view.addEventListener("keydown", onKeyDown, { capture: true });
+			return () => {
+				view.removeEventListener("keydown", onKeyDown, { capture: true });
+				guard.dispose();
+			};
+		}
 		/** Check that an asynchronous picker result still belongs to its originating session and composer. */
 		function isComposerMediaOriginCurrent(origin, current) {
 			return !current.disposed && origin.generation === current.generation && origin.href === current.href && origin.composer !== null && current.composerConnected && origin.composer === current.composer && origin.sessionRoot !== null && origin.sessionRoot === current.sessionRoot && origin.sessionId !== null && origin.sessionId === current.sessionId;
 		}
+		/**
+		* The App action that leaves the page for its paired-computer list. Mirrors the literal the
+		* General-settings row invokes; the gesture below reads the same name from the bridge
+		* capability list, so an App that does not advertise it keeps the stock drawer behavior.
+		*/
+		const SWITCH_COMPUTER_NATIVE_ACTION = "mobile.switch-computer";
+		/** Keeps the drawer from following the finger Android lifts at the end of a completed hold. */
+		const SWITCH_COMPUTER_CLICK_SUPPRESSION_MS = 1200;
+		/**
+		* Hold policy for the collapsed header's drawer toggle. The App owns the paired-computer
+		* list, so a hold only acts once the bridge advertises the action; every other press keeps
+		* the stock toggle. DOM events stay in the installer so this policy stays testable.
+		*/
+		function createSwitchComputerHold(options) {
+			let hold;
+			let supported = false;
+			let probing = false;
+			let disposed = false;
+			let suppressClickUntil = 0;
+			let firedAt = 0;
+			const probeSupport = () => {
+				if (disposed || supported || probing) return;
+				probing = true;
+				Promise.resolve().then(options.canSwitchComputer).then((value) => {
+					probing = false;
+					if (!disposed && value) supported = true;
+				}, () => {
+					probing = false;
+				});
+			};
+			const stopTimer = () => {
+				if (hold === void 0) return;
+				options.clearTimer(hold.timer);
+				hold = void 0;
+			};
+			const fire = (current) => {
+				if (hold !== current || current.fired || !supported) return;
+				current.fired = true;
+				firedAt = options.now();
+				suppressClickUntil = firedAt + SWITCH_COMPUTER_CLICK_SUPPRESSION_MS;
+				options.switchComputer();
+			};
+			return {
+				start: (x, y) => {
+					if (disposed) return;
+					stopTimer();
+					suppressClickUntil = 0;
+					firedAt = 0;
+					probeSupport();
+					const current = {
+						x,
+						y,
+						timer: 0,
+						fired: false
+					};
+					current.timer = options.setTimer(() => fire(current), 500);
+					hold = current;
+				},
+				move: (x, y) => {
+					if (hold === void 0 || hold.fired) return;
+					if (Math.abs(x - hold.x) > 14 || Math.abs(y - hold.y) > 14) stopTimer();
+				},
+				end: stopTimer,
+				consumeClickSuppression: (detail) => {
+					if (detail === 0 || suppressClickUntil === 0 || options.now() > suppressClickUntil) return false;
+					suppressClickUntil = 0;
+					return true;
+				},
+				blocksContextMenu: () => firedAt !== 0 && options.now() - firedAt <= 1200,
+				dispose: () => {
+					disposed = true;
+					stopTimer();
+					suppressClickUntil = 0;
+					firedAt = 0;
+				}
+			};
+		}
 		/** Add mobile semantics without replacing feature trees. */
 		function installNativeMobileSurface(backServices) {
 			document.documentElement.classList.add("dsh-native-mobile-active");
@@ -3200,6 +3496,59 @@ window.__ModuleLoader__.load({
 			};
 			document.addEventListener("pointerdown", onPointerDown, true);
 			document.addEventListener("keydown", onKeyDown, true);
+			const switchComputerHold = createSwitchComputerHold({
+				now: () => window.performance.now(),
+				setTimer: (callback, delayMs) => window.setTimeout(callback, delayMs),
+				clearTimer: (handle) => {
+					window.clearTimeout(handle);
+				},
+				canSwitchComputer: async () => {
+					const bridge = window.__DSH_MOBILE_NATIVE__;
+					if (bridge === void 0) return false;
+					try {
+						return (await bridge.capabilities()).includes(SWITCH_COMPUTER_NATIVE_ACTION);
+					} catch {
+						return false;
+					}
+				},
+				switchComputer: () => {
+					const bridge = window.__DSH_MOBILE_NATIVE__;
+					if (bridge === void 0) return;
+					Promise.resolve().then(() => bridge.invoke(SWITCH_COMPUTER_NATIVE_ACTION, {})).catch(() => void 0);
+				}
+			});
+			const isDrawerToggleTarget = (target) => target instanceof Element && target.closest("[data-dsh-mobile-toggle]") !== null;
+			const onTogglePointerDown = (event) => {
+				if (!event.isPrimary || event.button !== 0 || !isDrawerToggleTarget(event.target)) return;
+				switchComputerHold.start(event.clientX, event.clientY);
+			};
+			const onTogglePointerMove = (event) => {
+				switchComputerHold.move(event.clientX, event.clientY);
+			};
+			const onTogglePointerEnd = () => {
+				switchComputerHold.end();
+			};
+			const onToggleVisibilityChange = () => {
+				if (document.hidden) switchComputerHold.end();
+			};
+			const onToggleClickCapture = (event) => {
+				if (!isDrawerToggleTarget(event.target) || !switchComputerHold.consumeClickSuppression(event.detail)) return;
+				event.preventDefault();
+				event.stopPropagation();
+			};
+			const onToggleContextMenu = (event) => {
+				if (!isDrawerToggleTarget(event.target) || !switchComputerHold.blocksContextMenu()) return;
+				event.preventDefault();
+				event.stopPropagation();
+			};
+			document.addEventListener("pointerdown", onTogglePointerDown, true);
+			document.addEventListener("pointermove", onTogglePointerMove, true);
+			document.addEventListener("pointerup", onTogglePointerEnd, true);
+			document.addEventListener("pointercancel", onTogglePointerEnd, true);
+			document.addEventListener("click", onToggleClickCapture, true);
+			document.addEventListener("contextmenu", onToggleContextMenu, true);
+			window.addEventListener("blur", onTogglePointerEnd);
+			document.addEventListener("visibilitychange", onToggleVisibilityChange);
 			const overlayQuery = window.matchMedia(NATIVE_MOBILE_OVERLAY_QUERY);
 			const backdrop = document.createElement("button");
 			backdrop.type = "button";
@@ -3258,6 +3607,12 @@ window.__ModuleLoader__.load({
 					return token;
 				});
 			};
+			const disposeBrowserComposerSoftEnter = bindBrowserComposerSoftEnter(document, (editor, composerCard) => ({
+				appBridge: nativeAppOwnsComposerEnter(window),
+				editable: editor.isConnected && editor.getAttribute("contenteditable") === "true" && editor.getAttribute("aria-disabled") !== "true" && editor.getAttribute("aria-haspopup") !== "menu" && composerCard.getAttribute("aria-busy") !== "true" && editor.getAttribute("inputmode") !== "none",
+				activeSession: activeSessionForSoftEnter(composerCard, currentSessionOrigin().sessionId),
+				commandMenuOpen: composerCard.querySelector("[data-trigger-menu],button[aria-haspopup=\"listbox\"][aria-expanded=\"true\"]") !== null
+			}));
 			const mediaRequestContext = () => {
 				const session = currentSessionOrigin();
 				return {
@@ -3701,6 +4056,8 @@ window.__ModuleLoader__.load({
 							composerTrailing.dataset.dshMobileComposerTrailing = "true";
 							const modelTrigger = composerTrailing.querySelector("button[aria-label^=\"选择模型\"],button[aria-label^=\"Select model\"],button[aria-label^=\"Seleziona modello\"]");
 							if (modelTrigger !== null) {
+								const controls = modelTrigger.closest("[class*=\"_standardControls\"]");
+								if (controls !== null) controls.dataset.dshMobileComposerControls = "true";
 								modelTrigger.dataset.dshMobileComposerModelTrigger = "true";
 								modelTrigger.parentElement?.setAttribute("data-dsh-mobile-composer-model", "true");
 								modelTrigger.querySelector("[class*=\"_triggerLabel\"]")?.setAttribute("data-dsh-mobile-composer-model-label", "true");
@@ -3724,9 +4081,8 @@ window.__ModuleLoader__.load({
 				sidebarRoot.dataset.dshMobileSidebarRoot = "true";
 				for (const brand of sidebarRoot.querySelectorAll("[class*=\"_fallbackBrandName\"]")) if (brand.textContent?.trim() === "DSH Local Build") brand.textContent = "DeepSeek Harness";
 				if (toggle !== void 0) toggle.dataset.dshMobileToggle = "true";
-				const collapsed = classToken(sidebarRoot, "_collapsed");
-				sidebar.dataset.open = String(!collapsed);
-				backdrop.hidden = !drawerScrimVisible(collapsed, overlayQuery.matches);
+				if (frame !== void 0) sidebar.dataset.open = String(!classToken(sidebarRoot, "_collapsed"));
+				backdrop.hidden = frame === void 0 || !drawerScrimVisible(classToken(sidebarRoot, "_collapsed"), overlayQuery.matches);
 			};
 			const schedule = () => {
 				if (scheduled === 0) scheduled = requestAnimationFrame(sync);
@@ -3797,6 +4153,7 @@ window.__ModuleLoader__.load({
 				restoreLanguageMarker();
 				for (const cleanup of [...browserPickerCleanups]) cleanup();
 				disposeEnterBinding?.();
+				disposeBrowserComposerSoftEnter();
 				observer.disconnect();
 				overlayQuery.removeEventListener("change", schedule);
 				document.removeEventListener("click", onBranchClick, true);
@@ -3823,6 +4180,15 @@ window.__ModuleLoader__.load({
 				historyScroller?.removeEventListener("scroll", onHistoryScroll);
 				document.removeEventListener("pointerdown", onPointerDown, true);
 				document.removeEventListener("keydown", onKeyDown, true);
+				document.removeEventListener("pointerdown", onTogglePointerDown, true);
+				document.removeEventListener("pointermove", onTogglePointerMove, true);
+				document.removeEventListener("pointerup", onTogglePointerEnd, true);
+				document.removeEventListener("pointercancel", onTogglePointerEnd, true);
+				document.removeEventListener("click", onToggleClickCapture, true);
+				document.removeEventListener("contextmenu", onToggleContextMenu, true);
+				window.removeEventListener("blur", onTogglePointerEnd);
+				document.removeEventListener("visibilitychange", onToggleVisibilityChange);
+				switchComputerHold.dispose();
 				document.removeEventListener("click", animateNavigation);
 				backdrop.remove();
 				document.documentElement.classList.remove("dsh-native-mobile-active");
@@ -3931,6 +4297,132 @@ window.__ModuleLoader__.load({
 			};
 		}
 		//#endregion
+		//#region src/mobile-font.ts
+		/** Device-local typography for authenticated mobile pages, without Host settings writes. */
+		const MOBILE_FONT_STORAGE_KEY = "dsh-mobile.content-font-size.v1";
+		/** Read one local storage value; malformed or unavailable preferences use the mobile default. */
+		function parseMobileFontSize(value) {
+			if (value === null || !/^\d+$/.test(value)) return 16;
+			const size = Number(value);
+			return Number.isInteger(size) && size >= 12 && size <= 32 ? size : 16;
+		}
+		/** Local preference storage; unavailable browser storage still permits in-page adjustment. */
+		var MobileFontPreference = class {
+			storage;
+			size = 16;
+			listeners = /* @__PURE__ */ new Set();
+			constructor(storage) {
+				this.storage = storage;
+				try {
+					this.size = parseMobileFontSize(storage?.getItem("dsh-mobile.content-font-size.v1") ?? null);
+				} catch (error) {}
+			}
+			getSnapshot = () => this.size;
+			subscribe = (listener) => {
+				this.listeners.add(listener);
+				return () => {
+					this.listeners.delete(listener);
+				};
+			};
+			/** Apply a user-selected size locally; never send it to DSH's settings RPC. */
+			set(size) {
+				if (!Number.isInteger(size) || size < 12 || size > 32) throw new RangeError("Mobile font size must be an integer from 12 to 32");
+				if (this.size === size) return;
+				this.size = size;
+				try {
+					this.storage?.setItem(MOBILE_FONT_STORAGE_KEY, String(size));
+				} catch (error) {}
+				for (const listener of this.listeners) listener();
+			}
+		};
+		/** Keep mobile typography independent from Host theme changes, including body-level portals. */
+		function installMobileFontPreference() {
+			let storage = null;
+			try {
+				storage = window.localStorage;
+			} catch (error) {}
+			const preference = new MobileFontPreference(storage);
+			const property = "--dsh-content-font-size";
+			let previous = document.body.style.getPropertyValue(property);
+			let previousPriority = document.body.style.getPropertyPriority(property);
+			let ownedValue;
+			const apply = () => {
+				const current = document.body.style.getPropertyValue(property);
+				if (ownedValue !== void 0 && current !== ownedValue) {
+					previous = current;
+					previousPriority = document.body.style.getPropertyPriority(property);
+				}
+				const value = `${preference.getSnapshot()}px`;
+				ownedValue = value;
+				if (current !== value) document.body.style.setProperty(property, value);
+			};
+			apply();
+			const unsubscribe = preference.subscribe(apply);
+			const observer = new MutationObserver(apply);
+			observer.observe(document.body, {
+				attributes: true,
+				attributeFilter: ["style"]
+			});
+			return {
+				preference,
+				dispose: () => {
+					observer.disconnect();
+					unsubscribe();
+					if (previous === "") document.body.style.removeProperty(property);
+					else document.body.style.setProperty(property, previous, previousPriority);
+				}
+			};
+		}
+		const messages = {
+			zh: {
+				title: "移动端字号",
+				description: "仅保存在当前访问地址的本地数据中，不影响电脑或其他设备。",
+				decrease: "减小移动端字号",
+				increase: "增大移动端字号"
+			},
+			en: {
+				title: "Mobile font size",
+				description: "Saved locally for this address, without changing your computer or other devices.",
+				decrease: "Decrease mobile font size",
+				increase: "Increase mobile font size"
+			},
+			it: {
+				title: "Dimensione testo mobile",
+				description: "Salvata localmente per questo indirizzo, senza modificare il computer o altri dispositivi.",
+				decrease: "Riduci il testo mobile",
+				increase: "Aumenta il testo mobile"
+			}
+		};
+		/** General settings row matching the existing Mobile controls and DSH theme tokens. */
+		function MobileFontSizeRow({ preference, locale }) {
+			const size = (0, react.useSyncExternalStore)(preference.subscribe, preference.getSnapshot);
+			const copy = messages[locale];
+			return (0, react.createElement)("div", {
+				className: "dsh-mobile-settings_row",
+				lang: locale,
+				"data-mobile-font-setting": true
+			}, (0, react.createElement)("div", { className: "dsh-mobile-settings_rowText" }, (0, react.createElement)("div", { className: "dsh-mobile-settings_title" }, copy.title), (0, react.createElement)("div", { className: "dsh-mobile-settings_desc" }, copy.description)), (0, react.createElement)("div", { className: "dsh-mobile-settings_fontControls" }, (0, react.createElement)("button", {
+				type: "button",
+				className: "dsh-mobile-settings_selector",
+				"aria-label": copy.decrease,
+				disabled: size === 12,
+				onClick: () => {
+					preference.set(size - 1);
+				}
+			}, "−"), (0, react.createElement)("output", {
+				"aria-live": "polite",
+				"aria-label": copy.title
+			}, `${size}px`), (0, react.createElement)("button", {
+				type: "button",
+				className: "dsh-mobile-settings_selector",
+				"aria-label": copy.increase,
+				disabled: size === 32,
+				onClick: () => {
+					preference.set(size + 1);
+				}
+			}, "+")));
+		}
+		//#endregion
 		//#region src/local-admin-host.ts
 		/** Browser-safe desktop-admin Host checks. Do not import Node APIs here. */
 		const DESKTOP_ADMIN_HEADER = "x-dsh-mobile-desktop-admin";
@@ -3991,6 +4483,295 @@ window.__ModuleLoader__.load({
 			return (protocol === "dsh-app:" ? hostname === "app" : (protocol === "" || protocol === "http:" || protocol === "https:") && isLocalAdminHostname(hostname)) && frontend !== "dedicated" && !new URLSearchParams(query).has("dsh-mobile-preview");
 		}
 		//#endregion
+		//#region src/client-module-ui.ts
+		/** Device-local module selection and the computer's defaults share a read-only catalog. */
+		const CLIENT_MODULE_COPY = {
+			zh: {
+				title: "移动页面模块",
+				computer: "为移动访问设置默认加载模块，不卸载电脑上的插件。",
+				device: "只为本设备选择加载模块，不改变其他手机或电脑。",
+				open: "管理",
+				loading: "正在读取模块…",
+				hint: "勾选表示加载。启动必需的模块不能取消；依赖冲突会在保存时说明。",
+				save: "保存，下次打开生效",
+				reset: "恢复默认",
+				close: "关闭",
+				required: "启动必需",
+				dependencies: "依赖：",
+				saved: "已保存，不会自动刷新当前页面。重新打开 DSH 后生效。",
+				failed: "暂时无法完成。请确认移动访问已启用，或检查下面的依赖冲突。",
+				conflict: "无法保存：",
+				computerSource: "使用电脑默认设置",
+				deviceSource: "使用本设备设置",
+				resetConfirm: "恢复默认模块选择？不会重新加载当前会话。"
+			},
+			en: {
+				title: "Mobile page modules",
+				computer: "Choose default modules for mobile access without uninstalling computer plugins.",
+				device: "Choose modules for this device only; other phones and computers are unchanged.",
+				open: "Manage",
+				loading: "Reading modules…",
+				hint: "Checked means loaded. Required boot modules cannot be unchecked; saving explains dependency conflicts.",
+				save: "Save for next open",
+				reset: "Restore defaults",
+				close: "Close",
+				required: "Required for boot",
+				dependencies: "Depends on: ",
+				saved: "Saved. This page is not reloaded automatically. Reopen DSH to apply.",
+				failed: "Could not complete this operation. Enable mobile access or check the dependency conflict below.",
+				conflict: "Could not save: ",
+				computerSource: "Using computer defaults",
+				deviceSource: "Using this device’s settings",
+				resetConfirm: "Restore default module selection? The current conversation will not reload."
+			},
+			it: {
+				title: "Moduli della pagina mobile",
+				computer: "Scegli i moduli predefiniti senza disinstallare i plugin del computer.",
+				device: "Scegli i moduli solo per questo dispositivo, senza cambiare gli altri.",
+				open: "Gestisci",
+				loading: "Lettura dei moduli…",
+				hint: "Selezionato significa caricato. I moduli obbligatori non possono essere rimossi; il salvataggio mostra i conflitti.",
+				save: "Salva per la prossima apertura",
+				reset: "Ripristina predefiniti",
+				close: "Chiudi",
+				required: "Obbligatorio",
+				dependencies: "Dipende da: ",
+				saved: "Salvato. La pagina non viene ricaricata automaticamente. Riapri DSH per applicare.",
+				failed: "Operazione non completata. Abilita accesso mobile o controlla il conflitto sotto.",
+				conflict: "Impossibile salvare: ",
+				computerSource: "Predefiniti del computer",
+				deviceSource: "Impostazioni del dispositivo",
+				resetConfirm: "Ripristinare i moduli predefiniti? La conversazione attuale non verrà ricaricata."
+			}
+		};
+		var ClientModuleUiConflict = class extends Error {
+			detail;
+			constructor(detail) {
+				super("client_module_conflict");
+				this.detail = detail;
+			}
+		};
+		/** Validate catalog response fields before creating interactive controls.
+		* @param value - Gateway or computer-admin JSON response.
+		* @returns The fields used by the module-selection dialog.
+		*/
+		function parseClientModuleView(value) {
+			if (typeof value !== "object" || value === null || !("entries" in value) || !Array.isArray(value.entries) || !("excludedClientModules" in value) || !Array.isArray(value.excludedClientModules) || !("source" in value) || ![
+				"device",
+				"computer",
+				"plugin"
+			].includes(String(value.source))) throw new Error("invalid_module_catalog");
+			return {
+				entries: value.entries.map((entry) => {
+					if (typeof entry !== "object" || entry === null || !("id" in entry) || typeof entry.id !== "string" || !("required" in entry) || typeof entry.required !== "boolean" || !("dependencies" in entry) || !Array.isArray(entry.dependencies)) throw new Error("invalid_module_catalog");
+					const dependencies = entry.dependencies.map((dependency) => {
+						if (typeof dependency !== "string") throw new Error("invalid_module_catalog");
+						return dependency;
+					});
+					return {
+						id: entry.id,
+						required: entry.required,
+						dependencies
+					};
+				}),
+				excludedClientModules: value.excludedClientModules.map((id) => {
+					if (typeof id !== "string") throw new Error("invalid_module_catalog");
+					return id;
+				}),
+				source: value.source === "device" ? "device" : value.source === "computer" ? "computer" : "plugin"
+			};
+		}
+		const CLIENT_MODULE_STYLES = `
+.dsh-module-row{display:flex;align-items:center;gap:8px;padding:16px 0;border-bottom:.5px solid var(--dsw-alias-border-l2)}
+.dsh-module-rowText{flex:1;min-width:0}.dsh-module-title{font-size:14px;line-height:22px;color:var(--dsw-alias-label-primary)}
+.dsh-module-description{margin-top:4px;font-size:12px;line-height:18px;color:var(--dsw-alias-label-tertiary)}
+.dsh-module-button{min-height:48px;padding:0 14px;border:0;border-radius:24px;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-primary);font:inherit;font-size:14px;cursor:pointer}
+.dsh-module-button:focus-visible{outline:2px solid var(--dsw-alias-label-primary-bluish,#2563eb);outline-offset:2px}
+.dsh-module-dialog{box-sizing:border-box;width:min(640px,calc(100vw - 24px));max-height:calc(100dvh - 32px);padding:20px;border:1px solid var(--dsw-alias-border-l2);border-radius:var(--dsw-radius-panel,20px);background:var(--dsw-alias-bg-layer-1,#fff);color:var(--dsw-alias-label-primary,#171a21);font:16px/1.5 var(--dsw-font-family,sans-serif);overflow:auto}
+.dsh-module-dialog::backdrop{background:rgb(15 23 42 / 40%)}.dsh-module-dialog h2{font-size:20px;margin:0 0 12px}
+.dsh-module-dialog p{overflow-wrap:anywhere}.dsh-module-list{display:flex;flex-direction:column;gap:4px;margin:12px 0}
+.dsh-module-choice{display:flex;align-items:flex-start;gap:12px;min-height:48px;padding:8px 0;border-bottom:1px solid var(--dsw-alias-border-l2)}
+.dsh-module-choice input{width:24px;height:24px;flex:none;margin:2px 0}.dsh-module-choice span{min-width:0;overflow-wrap:anywhere}
+.dsh-module-choice small{display:block;font-size:12px;color:var(--dsw-alias-label-tertiary);line-height:18px}.dsh-module-actions{display:flex;flex-wrap:wrap;gap:8px}
+.dsh-module-error{color:var(--dsw-alias-state-error-primary,#b42318)}
+`;
+		const openDialogs = /* @__PURE__ */ new Set();
+		/** Cancel pending dialogs when the owning plugin generation is disposed. */
+		function disposeClientModuleDialogs() {
+			for (const dispose of [...openDialogs]) dispose();
+		}
+		/** Close the foreground module modal before navigating its underlying DSH settings.
+		* @returns Whether an open module modal consumed the return action.
+		*/
+		function closeClientModuleDialog() {
+			const dispose = [...openDialogs].at(-1);
+			if (dispose === void 0) return false;
+			dispose();
+			return true;
+		}
+		/** Open one modal; closing cancels reads and restores focus without reloading the page.
+		* @param scope - Computer defaults or the authenticated device's own override.
+		* @param locale - Current DSH display language.
+		* @param trigger - Control to focus again when the modal closes.
+		*/
+		function openClientModuleSettings(scope, locale, trigger) {
+			const copy = CLIENT_MODULE_COPY[locale];
+			const endpoint = scope === "computer" ? "/api/mobile-access/client-modules" : "/mobile-access/client-modules";
+			const controller = new AbortController();
+			const dialog = document.createElement("dialog");
+			dialog.className = "dsh-module-dialog";
+			dialog.setAttribute("aria-label", copy.title);
+			const title = document.createElement("h2");
+			title.textContent = copy.title;
+			const intro = document.createElement("p");
+			intro.textContent = `${copy[scope]} ${copy.hint}`;
+			const status = document.createElement("p");
+			status.setAttribute("role", "status");
+			status.setAttribute("aria-live", "polite");
+			status.tabIndex = -1;
+			const list = document.createElement("div");
+			list.className = "dsh-module-list";
+			const actions = document.createElement("div");
+			actions.className = "dsh-module-actions";
+			const button = (text) => {
+				const result = document.createElement("button");
+				result.type = "button";
+				result.className = "dsh-module-button";
+				result.textContent = text;
+				return result;
+			};
+			const save = button(copy.save);
+			const reset = button(copy.reset);
+			const close = button(copy.close);
+			actions.append(save, reset, close);
+			dialog.append(title, intro, status, list, actions);
+			let disposed = false;
+			let busy = false;
+			let loaded = false;
+			const choices = /* @__PURE__ */ new Map();
+			const setBusy = (value) => {
+				busy = value;
+				save.disabled = value || !loaded;
+				reset.disabled = value || !loaded;
+				for (const input of choices.values()) if (!input.dataset.required) input.disabled = value;
+			};
+			const request = async (body) => {
+				const init = {
+					method: body === void 0 ? "GET" : "POST",
+					signal: controller.signal,
+					...body === void 0 ? {} : { body: JSON.stringify(body) }
+				};
+				init.headers = scope === "computer" ? localAdminRequestHeaders(init, location) : { "content-type": "application/json" };
+				if (scope === "device" && body !== void 0) {
+					const csrfCookie = document.cookie.split(";").map((value) => value.trim()).find((value) => value.startsWith("__Host-dsh_ma_csrf=")) ?? document.cookie.split(";").map((value) => value.trim()).find((value) => value.startsWith("dsh_ma_csrf="));
+					if (csrfCookie !== void 0) {
+						const headers = new Headers(init.headers);
+						headers.set("x-dsh-mobile-csrf", csrfCookie.slice(csrfCookie.indexOf("=") + 1));
+						init.headers = headers;
+					}
+				}
+				const response = await fetch(endpoint, init);
+				const value = await response.json();
+				if (!response.ok) {
+					const detail = typeof value === "object" && value !== null && "detail" in value && typeof value.detail === "string" ? value.detail.slice(0, 512) : "";
+					if (response.status === 409 && detail !== "" && typeof value === "object" && value !== null && "error" in value && value.error === "excluded_client_modules_invalid") throw new ClientModuleUiConflict(detail);
+					throw new Error("client_module_request_failed");
+				}
+				return parseClientModuleView(value);
+			};
+			const render = (view) => {
+				if (disposed) return;
+				loaded = true;
+				choices.clear();
+				list.replaceChildren();
+				for (const entry of view.entries) {
+					const label = document.createElement("label");
+					label.className = "dsh-module-choice";
+					const input = document.createElement("input");
+					input.type = "checkbox";
+					input.checked = !view.excludedClientModules.includes(entry.id);
+					input.disabled = entry.required;
+					if (entry.required) input.dataset.required = "true";
+					const name = document.createElement("span");
+					name.textContent = entry.id;
+					const hint = document.createElement("small");
+					hint.textContent = entry.required ? copy.required : entry.dependencies.length === 0 ? "" : `${copy.dependencies}${entry.dependencies.join(", ")}`;
+					name.append(hint);
+					label.append(input, name);
+					list.append(label);
+					choices.set(entry.id, input);
+				}
+				status.classList.remove("dsh-module-error");
+				status.textContent = view.source === "device" ? copy.deviceSource : copy.computerSource;
+			};
+			const failed = (error) => {
+				if (disposed || controller.signal.aborted) return;
+				status.classList.add("dsh-module-error");
+				status.textContent = error instanceof ClientModuleUiConflict ? `${copy.conflict}${error.detail}` : copy.failed;
+				status.focus({ preventScroll: true });
+			};
+			const mutate = (body) => {
+				if (busy || !loaded) return;
+				setBusy(true);
+				request(body).then((view) => {
+					render(view);
+					if (!disposed) status.textContent = copy.saved;
+				}, failed).finally(() => {
+					if (!disposed) setBusy(false);
+				});
+			};
+			save.addEventListener("click", () => {
+				mutate({ excludedClientModules: [...choices].filter(([, input]) => !input.checked).map(([id]) => id) });
+			});
+			reset.addEventListener("click", () => {
+				if (window.confirm(copy.resetConfirm)) mutate({ reset: true });
+			});
+			const onBack = (event) => {
+				if (!event.cancelable || !dialog.open || event.defaultPrevented) return;
+				event.preventDefault();
+				event.stopImmediatePropagation();
+				dispose();
+			};
+			window.addEventListener("dsh-mobile:native-back", onBack, true);
+			const dispose = () => {
+				if (disposed) return;
+				disposed = true;
+				controller.abort();
+				openDialogs.delete(dispose);
+				window.removeEventListener("dsh-mobile:native-back", onBack, true);
+				if (dialog.open) dialog.close();
+				dialog.remove();
+				if (trigger?.isConnected) trigger.focus({ preventScroll: true });
+			};
+			openDialogs.add(dispose);
+			dialog.addEventListener("close", dispose, { once: true });
+			close.addEventListener("click", dispose);
+			document.body.append(dialog);
+			dialog.showModal();
+			setBusy(true);
+			status.textContent = copy.loading;
+			request().then(render, failed).finally(() => {
+				if (!disposed) setBusy(false);
+			});
+		}
+		/** Settings row used on mobile pages and on the computer's General settings.
+		* @param props - Selection scope and current locale.
+		* @returns A native-style General settings row.
+		*/
+		function ClientModuleSettingsRow(props) {
+			const copy = CLIENT_MODULE_COPY[props.locale];
+			return (0, react.createElement)("div", {
+				className: "dsh-module-row",
+				lang: props.locale
+			}, (0, react.createElement)("div", { className: "dsh-module-rowText" }, (0, react.createElement)("div", { className: "dsh-module-title" }, copy.title), (0, react.createElement)("div", { className: "dsh-module-description" }, copy[props.scope])), (0, react.createElement)("button", {
+				type: "button",
+				className: "dsh-module-button",
+				onClick: (event) => {
+					openClientModuleSettings(props.scope, props.locale, event.currentTarget);
+				}
+			}, copy.open));
+		}
+		//#endregion
 		//#region src/client.ts
 		/** Map a host-reported provider onto the UI union, defaulting to the built-in one. */
 		function parseMobileRemoteProvider(value) {
@@ -4025,6 +4806,10 @@ window.__ModuleLoader__.load({
 					event.preventDefault();
 					event.stopImmediatePropagation();
 				};
+				if (closeClientModuleDialog()) {
+					claim();
+					return;
+				}
 				const surface = [...page.querySelectorAll("[data-dsh-mobile-surface-placement=\"page\"], [data-dsh-mobile-surface-placement=\"overlay\"]")].filter((element) => visibleBackLayer(view, element)).at(-1);
 				if (surface !== void 0) {
 					setMobileSurfaceOpen(surface, false);
@@ -4756,6 +5541,83 @@ window.__ModuleLoader__.load({
 			const lanSetupStatus = element("p", "dsh-mobile-control__status");
 			lanSetupStatus.setAttribute("role", "status");
 			lanSetupStatus.setAttribute("aria-live", "polite");
+			const trustedNetworks = element("details", "dsh-mobile-control__details");
+			const trustedNetworksSummary = element("summary");
+			trustedNetworksSummary.textContent = t("trustedNetworksTitle");
+			const trustedNetworksHelp = element("p", "dsh-mobile-control__component-note");
+			trustedNetworksHelp.textContent = t("trustedNetworksHelp");
+			const trustedNetworksLabel = element("label", "dsh-mobile-control__field");
+			trustedNetworksLabel.textContent = t("trustedNetworksLabel");
+			const trustedNetworksInput = element("textarea");
+			trustedNetworksInput.rows = 2;
+			trustedNetworksInput.placeholder = "11.24.0.0/24\n2001:db8::/32";
+			trustedNetworksInput.autocomplete = "off";
+			trustedNetworksInput.spellcheck = false;
+			const trustedNetworksSave = element("button", "dsh-mobile-control__secondary");
+			trustedNetworksSave.type = "button";
+			trustedNetworksSave.textContent = t("trustedNetworksSave");
+			const trustedNetworksStatus = element("p", "dsh-mobile-control__status");
+			trustedNetworksStatus.setAttribute("role", "status");
+			trustedNetworksStatus.setAttribute("aria-live", "polite");
+			trustedNetworksLabel.append(trustedNetworksInput);
+			trustedNetworks.append(trustedNetworksSummary, trustedNetworksHelp, trustedNetworksLabel, trustedNetworksSave, trustedNetworksStatus);
+			let trustedNetworksLoaded = false;
+			let trustedNetworksLoading = false;
+			let trustedNetworksSupported = false;
+			let trustedNetworksDirty = false;
+			let trustedNetworksBusy = false;
+			const syncTrustedNetworksControls = () => {
+				const enabled = trustedNetworksLoaded && trustedNetworksSupported && !trustedNetworksLoading && !trustedNetworksBusy;
+				trustedNetworksInput.disabled = !enabled;
+				trustedNetworksSave.disabled = !enabled;
+				trustedNetworks.setAttribute("aria-busy", String(trustedNetworksLoading || trustedNetworksBusy));
+			};
+			syncTrustedNetworksControls();
+			const renderTrustedNetworks = (data) => {
+				trustedNetworksLoaded = true;
+				trustedNetworksSupported = data.supported === true;
+				syncTrustedNetworksControls();
+				if (!trustedNetworksDirty) trustedNetworksInput.value = Array.isArray(data.extraAllowedCidrs) ? data.extraAllowedCidrs.filter((value) => typeof value === "string").join("\n") : "";
+				trustedNetworksStatus.textContent = !trustedNetworksSupported ? t("trustedNetworksUnavailable") : data.restartRequired === true ? t("trustedNetworksRestart") : "";
+				trustedNetworksHelp.textContent = `${t("trustedNetworksHelp")}${data.windowsFirewall === true ? ` ${t("trustedNetworksWindows")}` : ""}`;
+			};
+			trustedNetworks.addEventListener("toggle", () => {
+				if (!trustedNetworks.open || trustedNetworksLoaded || trustedNetworksLoading) return;
+				trustedNetworksLoading = true;
+				syncTrustedNetworksControls();
+				trustedNetworksStatus.textContent = t("loadingStatus");
+				controlRequestJson("/api/mobile-access/lan/trusted-networks").then(renderTrustedNetworks, () => {
+					trustedNetworksLoaded = false;
+					trustedNetworksSupported = false;
+					trustedNetworksStatus.textContent = t("trustedNetworksFailed");
+				}).finally(() => {
+					trustedNetworksLoading = false;
+					syncTrustedNetworksControls();
+				});
+			});
+			trustedNetworksInput.addEventListener("input", () => {
+				trustedNetworksDirty = true;
+				trustedNetworksInput.removeAttribute("aria-invalid");
+			});
+			trustedNetworksSave.addEventListener("click", () => {
+				if (trustedNetworksBusy || !trustedNetworksLoaded || !trustedNetworksSupported) return;
+				trustedNetworksBusy = true;
+				syncTrustedNetworksControls();
+				const extraAllowedCidrs = trustedNetworksInput.value.trim().split(/[\s,]+/u).filter(Boolean);
+				controlRequestJson("/api/mobile-access/lan/trusted-networks", {
+					method: "POST",
+					body: JSON.stringify({ extraAllowedCidrs })
+				}).then((data) => {
+					trustedNetworksDirty = false;
+					renderTrustedNetworks(data);
+				}, () => {
+					trustedNetworksStatus.textContent = t("trustedNetworksInvalid");
+					trustedNetworksInput.setAttribute("aria-invalid", "true");
+				}).finally(() => {
+					trustedNetworksBusy = false;
+					syncTrustedNetworksControls();
+				});
+			});
 			lanSetupLabel.append(lanSetupSelect);
 			lanSetupActions.append(lanSetupRefresh, lanSetupConfigure);
 			lanSetupForm.append(lanSetupLabel, lanSetupNote, lanSetupActions);
@@ -5387,6 +6249,89 @@ window.__ModuleLoader__.load({
 			originCopyBackend.textContent = t("originCopyBackend");
 			originBackend.append(originBackendLabel, originBackendAddress, originCopyBackend);
 			originSetup.append(originSetupTitle, originHelp, originWarning, originFields, originFeedback, originFormActions, originBackend);
+			const caddyModeRow = element("div", "dsh-mobile-control__origin-fields");
+			const caddyModeManagedLabel = element("label", "dsh-mobile-control__field");
+			const caddyModeManaged = element("input");
+			caddyModeManaged.type = "radio";
+			caddyModeManaged.name = "caddy-mode";
+			caddyModeManaged.value = "managed";
+			const caddyModeExternalLabel = element("label", "dsh-mobile-control__field");
+			const caddyModeExternal = element("input");
+			caddyModeExternal.type = "radio";
+			caddyModeExternal.name = "caddy-mode";
+			caddyModeExternal.value = "external";
+			const caddyManagedText = element("span");
+			caddyManagedText.textContent = t("caddyModeManaged");
+			const caddyExternalText = element("span");
+			caddyExternalText.textContent = t("caddyModeExternal");
+			caddyModeManagedLabel.append(caddyModeManaged, caddyManagedText);
+			caddyModeExternalLabel.append(caddyModeExternal, caddyExternalText);
+			caddyModeRow.append(caddyModeManagedLabel, caddyModeExternalLabel);
+			const caddyForm = element("div", "dsh-mobile-control__origin-fields");
+			caddyForm.hidden = true;
+			const caddyDomainLabel = element("label", "dsh-mobile-control__field");
+			caddyDomainLabel.textContent = t("caddyDomain");
+			const caddyDomain = element("input");
+			caddyDomain.type = "url";
+			caddyDomain.placeholder = "https://phone.example.com:8443";
+			caddyDomain.maxLength = 512;
+			caddyDomain.autocomplete = "off";
+			caddyDomain.spellcheck = false;
+			const caddyProviderLabel = element("label", "dsh-mobile-control__field");
+			caddyProviderLabel.textContent = t("caddyDnsProvider");
+			const caddyProvider = element("select");
+			const caddyProviderOption = document.createElement("option");
+			caddyProviderOption.value = "tencentcloud";
+			caddyProviderOption.textContent = "Tencent Cloud DNSPod";
+			caddyProvider.append(caddyProviderOption);
+			const caddySecretIdLabel = element("label", "dsh-mobile-control__field");
+			caddySecretIdLabel.textContent = t("caddySecretId");
+			const caddySecretId = element("input");
+			caddySecretId.type = "password";
+			caddySecretId.autocomplete = "off";
+			caddySecretId.spellcheck = false;
+			const caddySecretKeyLabel = element("label", "dsh-mobile-control__field");
+			caddySecretKeyLabel.textContent = t("caddySecretKey");
+			const caddySecretKey = element("input");
+			caddySecretKey.type = "password";
+			caddySecretKey.autocomplete = "off";
+			caddySecretKey.spellcheck = false;
+			const caddyPortLabel = element("label", "dsh-mobile-control__field");
+			caddyPortLabel.textContent = t("caddyListenPort");
+			const caddyPort = element("input");
+			caddyPort.type = "number";
+			caddyPort.inputMode = "numeric";
+			caddyPort.min = "1024";
+			caddyPort.max = "65535";
+			caddyPort.step = "1";
+			caddyPort.value = "8443";
+			caddyDomainLabel.append(caddyDomain);
+			caddyProviderLabel.append(caddyProvider);
+			caddySecretIdLabel.append(caddySecretId);
+			caddySecretKeyLabel.append(caddySecretKey);
+			caddyPortLabel.append(caddyPort);
+			caddyForm.append(caddyDomainLabel, caddyProviderLabel, caddySecretIdLabel, caddySecretKeyLabel, caddyPortLabel);
+			const caddyInstall = element("button", "dsh-mobile-control__primary");
+			caddyInstall.type = "button";
+			caddyInstall.textContent = t("caddyInstall");
+			const caddyInstallNote = element("p", "dsh-mobile-control__component-note");
+			caddyInstallNote.textContent = t("caddyInstallNote");
+			const caddyStatus = element("p", "dsh-mobile-control__component-status");
+			caddyStatus.hidden = true;
+			const caddySave = element("button", "dsh-mobile-control__primary");
+			caddySave.type = "button";
+			caddySave.textContent = t("caddySaveConnect");
+			caddySave.hidden = true;
+			const caddyPurgeButton = element("button", "dsh-mobile-control__danger");
+			caddyPurgeButton.type = "button";
+			caddyPurgeButton.textContent = t("caddyPurge");
+			caddyPurgeButton.hidden = true;
+			const caddyFeedback = element("p", "dsh-mobile-control__origin-feedback");
+			caddyFeedback.setAttribute("role", "status");
+			caddyFeedback.setAttribute("aria-live", "polite");
+			caddyFeedback.hidden = true;
+			caddyForm.append(caddyInstallNote, caddyInstall, caddyStatus, caddySave, caddyPurgeButton, caddyFeedback);
+			originSetup.append(caddyModeRow, caddyForm);
 			const tailscaleInfo = element("details", "dsh-mobile-control__details");
 			const tailscaleInfoSummary = element("summary");
 			tailscaleInfoSummary.textContent = t("tailscaleHelp");
@@ -5712,7 +6657,7 @@ window.__ModuleLoader__.load({
 			diagnosticsDetails.append(diagnosticsDetailsSummary, diagnosticsReport);
 			header.append(title, headerActions);
 			actions.append(toggle, pair, linkPair);
-			lanView.append(lanSetup, access, qrBox, status, extensionStatus, actions, manageRow, devicePanel);
+			lanView.append(lanSetup, access, qrBox, status, extensionStatus, actions, manageRow, devicePanel, trustedNetworks);
 			remoteView.append(remoteIntro, httpFrameWarning, providerSection, remoteWorkspace);
 			diagnosticsView.append(diagnosticsIntro, diagnosticsSummary, diagnosticsToolbar, diagnosticsFeedback, diagnosticsChecks, wsPathsSection, diagnosticsDetails);
 			panel.append(header, releaseNotice, updateCard, appDownload, switcher, lanView, remoteView, diagnosticsView);
@@ -5747,6 +6692,23 @@ window.__ModuleLoader__.load({
 			let originConfigured = false;
 			let originFormDirty = false;
 			let originFormBusy = false;
+			let caddyFormBusy = false;
+			let caddyModeManagedSelected = false;
+			let caddyFormDirty = false;
+			let caddyModePreviewDirty = false;
+			const showCaddyFeedback = (message, isError = false) => {
+				caddyFeedback.textContent = message;
+				caddyFeedback.classList.toggle("is-error", isError);
+				caddyFeedback.hidden = false;
+			};
+			const setCaddyFormBusy = (busy) => {
+				caddyFormBusy = busy;
+				remoteProviderBusy = busy;
+				remoteSnapshotEpoch += 1;
+				caddyInstall.setAttribute("aria-busy", String(busy));
+				caddySave.setAttribute("aria-busy", String(busy));
+				renderRemote(latestRemoteState);
+			};
 			let remoteSnapshotEpoch = 0;
 			let latestRemoteState = {};
 			let frpInstalled = false;
@@ -6274,6 +7236,44 @@ window.__ModuleLoader__.load({
 				originBackendLabel.textContent = originListening ? t("originBackendListening") : t("originBackendSaved");
 				originBackendAddress.textContent = backendOrigin;
 				originCopyBackend.disabled = remoteProviderBusy || backendOrigin === "";
+				const caddyComponentInfo = originProvider.component;
+				const caddyInstalled = caddyComponentInfo !== void 0 && caddyComponentInfo.installed === true;
+				const caddySupported = caddyComponentInfo !== void 0 && caddyComponentInfo.supported === true;
+				if (!caddyModePreviewDirty) caddyModeManagedSelected = data.originMode === "managed";
+				const showManaged = origin && caddyModeManagedSelected;
+				const caddyConfiguration = typeof data.caddyConfiguration === "object" && data.caddyConfiguration !== null ? data.caddyConfiguration : {};
+				const caddyState = typeof data.caddyState === "object" && data.caddyState !== null ? data.caddyState : {};
+				caddyModeRow.hidden = !origin;
+				caddyForm.hidden = !showManaged;
+				originFields.hidden = showManaged;
+				originFormActions.hidden = showManaged;
+				originHelp.hidden = showManaged;
+				originWarning.hidden = showManaged;
+				if (showManaged) originBackend.hidden = true;
+				caddyInstall.hidden = !showManaged || caddyInstalled;
+				caddyInstallNote.hidden = !showManaged;
+				caddySave.hidden = !showManaged || !caddyInstalled;
+				caddyPurgeButton.hidden = !showManaged || !caddyInstalled && caddyConfiguration.configured !== true;
+				caddyStatus.hidden = !showManaged;
+				caddyStatus.textContent = !caddySupported && !caddyInstalled ? t("caddyUnavailable") : caddyState.enabled === true && caddyState.state === "ready" ? t("caddyVerified") : caddyState.state === "starting" || caddyState.state === "connecting" ? t("remoteStateConnecting") : caddyState.state === "error" ? t("caddyConnectionFailed") : caddyInstalled ? t("caddyInstalled") : t("caddyInstallNote");
+				caddyModeManaged.checked = caddyModeManagedSelected;
+				caddyModeExternal.checked = !caddyModeManagedSelected;
+				caddyModeManaged.disabled = remoteProviderBusy;
+				caddyModeExternal.disabled = remoteProviderBusy;
+				if (!caddyFormBusy && !caddyFormDirty) {
+					caddyDomain.value = typeof caddyConfiguration.publicOrigin === "string" ? caddyConfiguration.publicOrigin : "";
+					caddyPort.value = typeof caddyConfiguration.listenPort === "number" ? String(caddyConfiguration.listenPort) : "8443";
+				}
+				caddyInstall.disabled = remoteProviderBusy || !caddySupported || caddyInstalled;
+				caddySave.disabled = remoteProviderBusy || !caddySupported || !caddyInstalled;
+				caddyPurgeButton.disabled = remoteProviderBusy;
+				for (const input of [
+					caddyDomain,
+					caddyProvider,
+					caddySecretId,
+					caddySecretKey,
+					caddyPort
+				]) input.disabled = remoteProviderBusy || !caddySupported;
 				selfHostedBadge.textContent = origin ? originListening ? t("originBackendReady") : t("advanced") : frpConfigured && frpInstalled ? t("ready") : t("advanced");
 				const state = typeof data.state === "string" ? data.state : "error";
 				const errorCode = typeof data.errorCode === "string" ? data.errorCode : "";
@@ -6315,14 +7315,15 @@ window.__ModuleLoader__.load({
 				remoteSetup.disabled = remoteSetupUrl === "" || remoteReconnectBusy;
 				remoteSetupRetry.disabled = remoteReconnectBusy;
 				remoteToggle.textContent = remoteRunning ? t("disableRemote") : t("enableRemote");
-				const providerPrepared = cpolar ? cpolarInstalled && cpolarConfigured : cloudflared ? cloudflaredInstalled : frp ? frpInstalled && frpConfigured : origin ? originConfigured : true;
+				const originPrepared = data.originMode === "managed" ? caddySupported && caddyInstalled && caddyConfiguration.configured === true : originConfigured && !caddyModeManagedSelected;
+				const providerPrepared = cpolar ? cpolarInstalled && cpolarConfigured : cloudflared ? cloudflaredInstalled : frp ? frpInstalled && frpConfigured : origin ? originPrepared : true;
 				remoteToggle.disabled = remoteProviderBusy || !providerPrepared && !(origin && remoteRunning);
 				remoteLogin.hidden = !tailscale || state !== "needs-login" || remoteLoginUrl === "";
 				remoteReconnect.hidden = needsFunnelSetup || state !== "error" && state !== "unavailable" || !providerPrepared;
 				remoteActions.hidden = !providerPrepared && !(origin && remoteRunning);
-				remotePair.disabled = !remoteReady || originFormBusy;
-				remoteCopyLink.disabled = !remoteReady || originFormBusy;
-				remoteDevices.disabled = !remoteReady || originFormBusy;
+				remotePair.disabled = !remoteReady || remoteProviderBusy;
+				remoteCopyLink.disabled = !remoteReady || remoteProviderBusy;
+				remoteDevices.disabled = !remoteReady || remoteProviderBusy;
 				if (origin) {
 					remoteReconnect.disabled = remoteProviderBusy || remoteReconnectBusy;
 					remoteReset.disabled = remoteProviderBusy;
@@ -6367,7 +7368,7 @@ window.__ModuleLoader__.load({
 			});
 			let remoteLoadInFlight = false;
 			const loadRemote = () => {
-				if (remoteLoadInFlight || originFormBusy) return;
+				if (remoteLoadInFlight || originFormBusy || caddyFormBusy) return;
 				const epoch = remoteSnapshotEpoch;
 				remoteLoadInFlight = true;
 				controlRequestJson("/api/mobile-access/remote/control").then((data) => {
@@ -7185,6 +8186,123 @@ window.__ModuleLoader__.load({
 				clearOriginValidation();
 				originFeedback.hidden = true;
 			});
+			const syncCaddyModeVisibility = () => {
+				caddyModeManagedSelected = caddyModeManaged.checked;
+				caddyModePreviewDirty = true;
+				renderRemote(latestRemoteState);
+			};
+			caddyModeManaged.addEventListener("change", () => {
+				if (remoteProviderBusy) return;
+				originFeedback.hidden = true;
+				syncCaddyModeVisibility();
+			});
+			caddyModeExternal.addEventListener("change", () => {
+				if (remoteProviderBusy) return;
+				if (latestRemoteState.originMode === "managed" && !window.confirm(t("caddyModeChangeConfirm"))) {
+					caddyModeManaged.checked = true;
+					caddyModeExternal.checked = false;
+					return;
+				}
+				originFeedback.hidden = true;
+				syncCaddyModeVisibility();
+				if (latestRemoteState.originMode !== "managed") return;
+				setCaddyFormBusy(true);
+				controlRequestJson("/api/mobile-access/remote/origin/mode", {
+					method: "POST",
+					body: JSON.stringify({ mode: "external" })
+				}).then((data) => {
+					caddyModePreviewDirty = false;
+					renderRemote(data);
+				}, () => {
+					caddyModePreviewDirty = false;
+					renderRemote(latestRemoteState);
+					showOriginFeedback(t("caddyConnectionFailed"), true);
+				}).finally(() => {
+					setCaddyFormBusy(false);
+					loadRemote();
+				});
+			});
+			for (const input of [
+				caddyDomain,
+				caddyProvider,
+				caddySecretId,
+				caddySecretKey,
+				caddyPort
+			]) input.addEventListener("input", () => {
+				caddyFormDirty = true;
+			});
+			caddyProvider.addEventListener("change", () => {
+				caddyFormDirty = true;
+			});
+			caddyInstall.addEventListener("click", () => {
+				if (remoteProviderBusy || caddyInstall.disabled || !window.confirm(t("caddyInstallConfirm"))) return;
+				setCaddyFormBusy(true);
+				showCaddyFeedback(t("checkingComponent"));
+				controlRequestJson("/api/mobile-access/remote/caddy/component/install", {
+					method: "POST",
+					body: JSON.stringify({ confirm: true })
+				}).then((data) => {
+					renderRemote(data);
+					showCaddyFeedback(t("caddyInstalled"));
+				}, () => showCaddyFeedback(t("caddyInstallFailed"), true)).finally(() => {
+					setCaddyFormBusy(false);
+					loadRemote();
+				});
+			});
+			caddySave.addEventListener("click", () => {
+				if (remoteProviderBusy || caddySave.disabled || !caddyModeManagedSelected) return;
+				clearOriginValidation();
+				for (const input of [
+					caddyDomain,
+					caddySecretId,
+					caddySecretKey,
+					caddyPort
+				]) if (!input.reportValidity()) return;
+				const body = {
+					settings: {
+						version: 1,
+						publicOrigin: caddyDomain.value.trim(),
+						dnsProvider: caddyProvider.value,
+						listenPort: Number(caddyPort.value)
+					},
+					secretId: caddySecretId.value.trim(),
+					secretKey: caddySecretKey.value.trim(),
+					connect: true
+				};
+				setCaddyFormBusy(true);
+				showCaddyFeedback(t("saving"));
+				controlRequestJson("/api/mobile-access/remote/caddy/settings", {
+					method: "POST",
+					body: JSON.stringify(body)
+				}).then((data) => {
+					caddySecretId.value = "";
+					caddySecretKey.value = "";
+					caddyFormDirty = false;
+					caddyModePreviewDirty = false;
+					renderRemote(data);
+					if (data.state === "error") showCaddyFeedback(t("caddyConnectionFailed"), true);
+				}, () => showCaddyFeedback(t("caddyConnectionFailed"), true)).finally(() => {
+					setCaddyFormBusy(false);
+					loadRemote();
+				});
+			});
+			caddyPurgeButton.addEventListener("click", () => {
+				if (remoteProviderBusy || !window.confirm(t("caddyPurgeConfirm"))) return;
+				setCaddyFormBusy(true);
+				controlRequestJson("/api/mobile-access/remote/caddy/component/purge", {
+					method: "POST",
+					body: JSON.stringify({ confirm: true })
+				}).then((data) => {
+					caddySecretId.value = "";
+					caddySecretKey.value = "";
+					caddyFormDirty = false;
+					caddyModePreviewDirty = false;
+					renderRemote(data);
+				}, () => showCaddyFeedback(t("caddyPurgeFailed"), true)).finally(() => {
+					setCaddyFormBusy(false);
+					loadRemote();
+				});
+			});
 			originConfigure.addEventListener("click", () => {
 				if (remoteProviderBusy || remoteProvider !== "origin") return;
 				clearOriginValidation();
@@ -7205,7 +8323,10 @@ window.__ModuleLoader__.load({
 				controlRequestJson("/api/mobile-access/remote/origin/configure", {
 					method: "POST",
 					body: JSON.stringify(form)
-				}).then(() => controlRequestJson("/api/mobile-access/remote/control", {
+				}).then(() => controlRequestJson("/api/mobile-access/remote/origin/mode", {
+					method: "POST",
+					body: JSON.stringify({ mode: "external" })
+				})).then(() => controlRequestJson("/api/mobile-access/remote/control", {
 					method: "POST",
 					body: JSON.stringify({ running: true })
 				})).then((data) => {
@@ -8928,10 +10049,29 @@ window.__ModuleLoader__.load({
 				const style = element("style");
 				style.dataset.plugin = "dsh-mobile";
 				style.textContent = desktopAdmin ? CONTROL_STYLES : NATIVE_MOBILE_STYLES;
+				style.textContent += CLIENT_MODULE_STYLES;
 				document.head.append(style);
 				const removeVoiceSession = installVoiceSession(!desktopAdmin);
+				const removeModuleSettings = ctx.slots.inject("settings.general.item", () => ctx.slots.register({
+					name: "settings.general.item",
+					id: "dsh-mobile-client-modules",
+					order: 120
+				}, () => (0, react.createElement)(ClientModuleSettingsRow, {
+					scope: desktopAdmin ? "computer" : "device",
+					locale: selectedMobileControlLocale()
+				})));
 				if (!desktopAdmin) {
+					const localFont = installMobileFontPreference();
 					const removeSettingsAction = ctx.slots.inject("settings.general.item", () => {
+						const removeFontSize = ctx.slots.register({
+							name: "settings.general.item",
+							id: "font-size",
+							order: 11,
+							priority: -1
+						}, () => (0, react.createElement)(MobileFontSizeRow, {
+							preference: localFont.preference,
+							locale: selectedMobileControlLocale()
+						}));
 						const removeSwitchComputer = ctx.slots.register({
 							name: "settings.general.item",
 							id: "dsh-mobile-switch-computer",
@@ -8945,6 +10085,7 @@ window.__ModuleLoader__.load({
 						return () => {
 							removeTaskNotifications();
 							removeSwitchComputer();
+							removeFontSize();
 						};
 					});
 					const removeCustom = installCustomAssets();
@@ -8953,10 +10094,13 @@ window.__ModuleLoader__.load({
 						getSidebarRight: () => ctx.get("sidebarRight")
 					}));
 					return () => {
+						disposeClientModuleDialogs();
+						removeModuleSettings();
 						removeSettingsAction();
 						removeCustom();
 						removeSurface();
 						removeVoiceSession();
+						localFont.dispose();
 						style.remove();
 					};
 				}
@@ -9001,6 +10145,8 @@ window.__ModuleLoader__.load({
 					};
 				});
 				return () => {
+					disposeClientModuleDialogs();
+					removeModuleSettings();
 					removeControl();
 					removeVoiceSession();
 					style.remove();