dsh-mobile 0.6.14 → 0.6.16

package/lib/client.js

@@ -6,6 +6,44 @@ window.__ModuleLoader__.load({
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 		let react = require("react");
 		//#region src/client-messages.ts
+		const frpFormMessages = {
+			en: {
+				frpServerAddressInvalid: "Enter the frps IP address or full hostname only, without https://, a port, or a path.",
+				frpServerPortInvalid: "Enter the frps control port as a whole number from 1 to 65535.",
+				frpTokenInvalid: "Enter a shared token of 16–512 characters without spaces or line breaks. Re-enter it when changing saved connection settings.",
+				frpPublicOriginInvalid: "Enter an HTTPS address such as https://phone.example.com or https://1.2.3.4, without a path, credentials, or a non-standard port. An IPv4 address must be publicly routable.",
+				frpPublicOriginHint: "Include https://. Do not include a path or non-standard port. For self-signed ingress, enter https://PUBLIC_IP here and set its port separately below.",
+				frpModeInvalid: "Choose either managed deployment or an existing frps.",
+				frpVhostPortInvalid: "Enter the real frps vhostHTTPPort as a whole number from 1 to 65535.",
+				frpPublicPortInvalid: "Enter the public ingress port as a whole number from 1 to 65535, excluding 3080, 3443, and 3444. Keep this port out of the HTTPS address above.",
+				frpActionBusy: "Another remote operation is in progress. Wait for it to finish before saving.",
+				frpInstallBeforeConnect: "Install the local frpc component in step 3 before saving and verifying the connection."
+			},
+			it: {
+				frpServerAddressInvalid: "Inserisci solo l’indirizzo IP o il nome host completo di frps, senza https://, porta o percorso.",
+				frpServerPortInvalid: "Inserisci la porta di controllo frps come numero intero da 1 a 65535.",
+				frpTokenInvalid: "Inserisci un token condiviso di 16–512 caratteri senza spazi o ritorni a capo. Reinseriscilo quando modifichi una connessione salvata.",
+				frpPublicOriginInvalid: "Inserisci un indirizzo HTTPS come https://phone.example.com o https://1.2.3.4, senza percorso, credenziali o porta non standard. Un indirizzo IPv4 deve essere pubblico e instradabile.",
+				frpPublicOriginHint: "Includi https://, senza percorso o porta non standard. Per l’ingresso autofirmato usa https://IP_PUBBLICO e indica la porta separatamente qui sotto.",
+				frpModeInvalid: "Scegli la distribuzione gestita oppure un frps esistente.",
+				frpVhostPortInvalid: "Inserisci il vero vhostHTTPPort di frps come numero intero da 1 a 65535.",
+				frpPublicPortInvalid: "Inserisci una porta pubblica intera da 1 a 65535, esclusi 3080, 3443 e 3444. Non aggiungerla all’indirizzo HTTPS sopra.",
+				frpActionBusy: "È in corso un’altra operazione remota. Attendi prima di salvare.",
+				frpInstallBeforeConnect: "Installa il componente frpc locale al punto 3 prima di salvare e verificare la connessione."
+			},
+			zh: {
+				frpServerAddressInvalid: "请只填写 frps 的 IP 或完整域名，不要包含 https://、端口或路径。",
+				frpServerPortInvalid: "请填写 1–65535 的整数，作为 frps 控制端口。",
+				frpTokenInvalid: "共享 Token 必须为 16–512 个字符，不能包含空格或换行。修改已保存的连接信息时，请重新输入 Token。",
+				frpPublicOriginInvalid: "请填写 https://phone.example.com 或 https://1.2.3.4 形式的 HTTPS 地址，不含路径、账号密码或非标准端口；IPv4 必须为可路由的公网地址。",
+				frpPublicOriginHint: "必须包含 https://，不要带路径或非标准端口。自签入口在此填 https://公网IP，端口在下方单独填写。",
+				frpModeInvalid: "请选择“由插件部署 frps”或“接入我已有的 frps”。",
+				frpVhostPortInvalid: "请填写你 frps 真实的 vhostHTTPPort，必须为 1–65535 的整数。",
+				frpPublicPortInvalid: "公网入口端口必须为 1–65535 的整数，不能使用 3080、3443、3444；不要把它加到上方 HTTPS 地址中。",
+				frpActionBusy: "另一项远程操作正在进行，请等待完成后再保存。",
+				frpInstallBeforeConnect: "请先在第 3 步安装本机 frpc 组件，再保存并验证连接。"
+			}
+		};
 		const storageMessages = {
 			en: {
 				funnelStateInvalid: "The private Tailscale state folder cannot be accessed safely. Check its permissions or directory links; reinstalling the component is not required.",
@@ -61,6 +99,7 @@ window.__ModuleLoader__.load({
 		};
 		const MOBILE_CONTROL_MESSAGES = {
 			en: {
+				...frpFormMessages.en,
 				mobileAccess: "Mobile access",
 				collapseMobileAccess: "Collapse Mobile access",
 				downloadAndroid: "Download latest Android app",
@@ -229,6 +268,7 @@ window.__ModuleLoader__.load({
 				wsPathsAdvancedHint: "Manual entries are rarely necessary: use the buttons above. Only fill this in when you know the exact path."
 			},
 			it: {
+				...frpFormMessages.it,
 				mobileAccess: "Accesso mobile",
 				collapseMobileAccess: "Riduci Accesso mobile",
 				downloadAndroid: "Scarica l’ultima app Android",
@@ -396,7 +436,7 @@ window.__ModuleLoader__.load({
 				wsPathsAnnounce: "{n} connessioni di plugin in attesa di approvazione",
 				wsPathsAdvancedHint: "Le voci manuali servono raramente: usa i pulsanti qui sopra. Compila solo se conosci il percorso esatto."
 			},
-			zh: {}
+			zh: { ...frpFormMessages.zh }
 		};
 		for (const locale of [
 			"en",
@@ -2494,6 +2534,85 @@ window.__ModuleLoader__.load({
 			return createFrpAttachTemplateParts(settings, options).text;
 		}
 		//#endregion
+		//#region src/frp-form-validation.ts
+		/** Field ownership for errors returned by the Host parser. */
+		const FRP_FORM_ERRORS = {
+			frp_server_address_invalid: {
+				field: "serverAddress",
+				code: "frp_server_address_invalid",
+				messageKey: "frpServerAddressInvalid"
+			},
+			frp_server_port_invalid: {
+				field: "serverPort",
+				code: "frp_server_port_invalid",
+				messageKey: "frpServerPortInvalid"
+			},
+			frp_token_invalid: {
+				field: "token",
+				code: "frp_token_invalid",
+				messageKey: "frpTokenInvalid"
+			},
+			frp_public_origin_invalid: {
+				field: "publicOrigin",
+				code: "frp_public_origin_invalid",
+				messageKey: "frpPublicOriginInvalid"
+			},
+			frp_attach_mode_requires_vhost_port: {
+				field: "vhostHttpPort",
+				code: "frp_attach_mode_requires_vhost_port",
+				messageKey: "frpAttachModeRequiresVhostPort"
+			},
+			frp_entry_tls_invalid: {
+				field: "entryTls",
+				code: "frp_entry_tls_invalid",
+				messageKey: "frpEntryTlsInvalid"
+			},
+			frp_self_signed_requires_public_ipv4: {
+				field: "publicOrigin",
+				code: "frp_self_signed_requires_public_ipv4",
+				messageKey: "frpSelfSignedRequiresPublicIpv4"
+			}
+		};
+		/** Collect field errors using the Host validators; token omission is permitted only for saved configuration. */
+		function validateFrpForm(form, allowSavedToken = false) {
+			const issues = [];
+			const check = (field, messageKey, validate) => {
+				try {
+					validate();
+				} catch (error) {
+					issues.push({
+						field,
+						messageKey,
+						code: error instanceof Error ? error.message : "frp_settings_invalid"
+					});
+				}
+			};
+			check("serverAddress", "frpServerAddressInvalid", () => validateFrpServerAddress(form.serverAddress));
+			check("serverPort", "frpServerPortInvalid", () => validateFrpServerPort(form.serverPort));
+			if (form.token !== "" || !allowSavedToken) check("token", "frpTokenInvalid", () => validateFrpToken(form.token));
+			check("publicOrigin", "frpPublicOriginInvalid", () => validateFrpPublicOrigin(form.publicOrigin));
+			check("mode", "frpModeInvalid", () => validateFrpMode(form.mode));
+			check("entryTls", "frpEntryTlsInvalid", () => validateFrpEntryTls(form.entryTls));
+			if (form.entryTls === "self-signed" && form.mode !== "attach") issues.push(FRP_FORM_ERRORS.frp_entry_tls_invalid);
+			if (form.entryTls !== "self-signed" && form.vhostHttpPort !== void 0) check("vhostHttpPort", "frpVhostPortInvalid", () => validateFrpVhostHttpPort(form.vhostHttpPort));
+			else if (form.entryTls !== "self-signed" && form.mode === "attach") issues.push(FRP_FORM_ERRORS.frp_attach_mode_requires_vhost_port);
+			if (form.publicPort !== void 0 || form.entryTls === "self-signed") check("publicPort", "frpPublicPortInvalid", () => validateFrpPublicPort(form.publicPort));
+			if (issues.length === 0) try {
+				parseFrpSettings({
+					...form,
+					token: form.token === "" && allowSavedToken ? "0123456789abcdef" : form.token
+				});
+			} catch (error) {
+				const code = error instanceof Error ? error.message : "frp_settings_invalid";
+				issues.push(FRP_FORM_ERRORS[code] ?? {
+					field: "mode",
+					code,
+					messageKey: "frpInputInvalid"
+				});
+			}
+			return issues;
+		}
+		//#endregion
 		//#region node_modules/@noble/hashes/esm/utils.js
 		/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */
 		/** Checks if something is Uint8Array. Be careful: nodejs Buffer will return true. */
@@ -4362,14 +4481,27 @@ window.__ModuleLoader__.load({
 				icon.append(body, lens);
 				return icon;
 			};
-			const createMediaAction = (text) => {
+			const createMediaAction = (text, kind = "camera") => {
 				const button = document.createElement("button");
 				button.type = "button";
 				button.className = "dsh-mobile-media-action";
 				button.lang = language;
-				button.dataset.dshMobileMediaAction = "camera";
+				button.dataset.dshMobileMediaAction = kind;
+				button.setAttribute("role", "option");
+				button.setAttribute("aria-selected", "false");
+				button.setAttribute("aria-label", text);
 				const icon = document.createElement("span");
-				icon.append(mediaIcon());
+				const graphic = mediaIcon();
+				if (kind === "gallery") {
+					graphic.replaceChildren();
+					const path = document.createElementNS("http://www.w3.org/2000/svg", "path");
+					path.setAttribute("d", "M2 2h12v12H2z M2 11l4-4 3 3 2-2 3 3 M10 5h.01");
+					path.setAttribute("stroke", "currentColor");
+					path.setAttribute("stroke-width", "1.3");
+					path.setAttribute("stroke-linejoin", "round");
+					graphic.append(path);
+				}
+				icon.append(graphic);
 				button.append(icon);
 				const caption = document.createElement("span");
 				caption.textContent = text;
@@ -4462,6 +4594,9 @@ window.__ModuleLoader__.load({
 			document.body.append(mediaToast);
 			const cameraButton = createMediaAction(label("Scatta foto", "Take photo", "拍照"));
 			cameraButton.disabled = true;
+			const galleryButton = createMediaAction(label("Galleria", "Gallery", "相册"), "gallery");
+			galleryButton.disabled = true;
+			let galleryBusy = false;
 			let branchToastTimer = 0;
 			let mediaToastTimer = 0;
 			const showMediaToast = (message) => {
@@ -4549,40 +4684,48 @@ window.__ModuleLoader__.load({
 				const sectionTitle = Array.from(commandMenu.querySelectorAll("[role=\"listbox\"] [role=\"presentation\"]")).find((candidate) => !candidate.hasAttribute("data-source") && candidate.textContent?.trim() === addGroupLabel);
 				if (sectionTitle === void 0) {
 					cameraButton.remove();
+					galleryButton.remove();
 					return false;
 				}
-				cameraButton.className = "dsh-mobile-media-action";
 				const nativeItem = (() => {
 					let sibling = sectionTitle.nextElementSibling;
 					while (sibling instanceof HTMLElement && sibling.getAttribute("role") !== "presentation") {
-						if (sibling.matches("button[role=\"option\"]:not([aria-selected=\"true\"])")) return sibling;
+						if (!sibling.hasAttribute("data-dsh-mobile-media-action") && sibling.matches("button[role=\"option\"]:not([aria-selected=\"true\"])")) return sibling;
 						sibling = sibling.nextElementSibling;
 					}
 				})();
-				if (nativeItem !== void 0) {
-					cameraButton.className = nativeItem.className;
-					const cameraIcon = cameraButton.firstElementChild;
-					const cameraLabel = cameraButton.lastElementChild;
-					const nativeIcon = firstByClassSuffix(nativeItem, "_itemIcon");
-					const nativeLabel = firstByClassSuffix(nativeItem, "_itemName");
-					if (cameraIcon instanceof HTMLElement && nativeIcon !== void 0) cameraIcon.className = nativeIcon.className;
-					if (cameraLabel instanceof HTMLElement && nativeLabel !== void 0) cameraLabel.className = nativeLabel.className;
-				}
-				cameraButton.setAttribute("role", "option");
-				cameraButton.setAttribute("aria-selected", "false");
-				cameraButton.setAttribute("aria-label", label("Scatta foto", "Take photo", "拍照"));
+				for (const button of [cameraButton, galleryButton]) {
+					const className = nativeItem?.className ?? "dsh-mobile-media-action";
+					if (button.className !== className) button.className = className;
+					const icon = button.firstElementChild;
+					const caption = button.lastElementChild;
+					const nativeIcon = nativeItem === void 0 ? void 0 : firstByClassSuffix(nativeItem, "_itemIcon");
+					const nativeLabel = nativeItem === void 0 ? void 0 : firstByClassSuffix(nativeItem, "_itemName");
+					if (icon instanceof HTMLElement && nativeIcon !== void 0 && icon.className !== nativeIcon.className) icon.className = nativeIcon.className;
+					if (caption instanceof HTMLElement && nativeLabel !== void 0 && caption.className !== nativeLabel.className) caption.className = nativeLabel.className;
+				}
 				let lastItem = sectionTitle;
 				let sibling = sectionTitle.nextElementSibling;
 				while (sibling instanceof HTMLElement && sibling.getAttribute("role") !== "presentation") {
-					if (sibling !== cameraButton) lastItem = sibling;
+					if (sibling !== cameraButton && sibling !== galleryButton) lastItem = sibling;
 					sibling = sibling.nextElementSibling;
 				}
-				if (cameraButton.parentElement !== sectionTitle.parentElement || cameraButton.previousElementSibling !== lastItem) lastItem.after(cameraButton);
+				if (boundComposer?.closest(".dshm-main") !== null && boundComposer !== null) {
+					if (galleryButton.parentElement !== sectionTitle.parentElement || galleryButton.previousElementSibling !== sectionTitle) sectionTitle.after(galleryButton);
+					if (cameraButton.parentElement !== galleryButton.parentElement || cameraButton.previousElementSibling !== galleryButton) galleryButton.after(cameraButton);
+				} else {
+					galleryButton.remove();
+					if (cameraButton.parentElement !== sectionTitle.parentElement || cameraButton.previousElementSibling !== lastItem) lastItem.after(cameraButton);
+				}
 				return true;
 			};
 			const setCameraActionDisabled = (disabled, title) => {
 				if (cameraButton.disabled !== disabled) cameraButton.disabled = disabled;
 				if (cameraButton.title !== title) cameraButton.title = title;
+				const galleryDisabled = disabled || galleryBusy;
+				if (galleryButton.disabled !== galleryDisabled) galleryButton.disabled = galleryDisabled;
+				const galleryTitle = disabled ? title : label("Scegli immagini da allegare", "Choose images to attach", "选择图片并附加到当前消息");
+				if (galleryButton.title !== galleryTitle) galleryButton.title = galleryTitle;
 			};
 			const quietMediaPointer = (event) => {
 				event.preventDefault();
@@ -4614,6 +4757,34 @@ window.__ModuleLoader__.load({
 					showMediaToast(code === "payload_too_large" ? label("La foto supera il limite di 8 MiB", "The photo exceeds the 8 MiB limit", "照片超过 8 MiB 限制") : label("Impossibile aggiungere la foto", "Could not attach the photo", "无法附加照片"));
 				});
 			};
+			const chooseGallery = () => {
+				if (disposed || galleryBusy || galleryButton.disabled || boundComposer?.closest(".dshm-main") == null) return;
+				if (!canAcceptComposerDrop()) {
+					setCameraActionDisabled(true, label("Allegati immagine non disponibili", "Image attachments are unavailable", "图片附件不可用"));
+					dismissCommandMenu();
+					return;
+				}
+				const context = mediaRequestContext();
+				galleryBusy = true;
+				galleryButton.disabled = true;
+				galleryButton.setAttribute("aria-busy", "true");
+				dismissCommandMenu();
+				pickBrowserFiles({
+					accept: "image/*",
+					multiple: true,
+					signal: mediaPickerAbortController.signal
+				}).then((files) => {
+					if (files !== void 0) deliverImages(files, context);
+				}).catch((_error) => {
+					if (mediaRequestIsCurrent(context)) showMediaToast(label("Impossibile aggiungere le immagini", "Could not attach the images", "无法附加图片"));
+				}).finally(() => {
+					galleryBusy = false;
+					galleryButton.removeAttribute("aria-busy");
+					if (!disposed) schedule();
+				});
+			};
+			galleryButton.addEventListener("pointerdown", quietMediaPointer);
+			galleryButton.addEventListener("click", chooseGallery);
 			cameraButton.addEventListener("pointerdown", quietMediaPointer);
 			cameraButton.addEventListener("click", takePhoto);
 			const showBranchToast = () => {
@@ -4878,6 +5049,7 @@ window.__ModuleLoader__.load({
 					syncMediaBinding(null);
 					setCameraActionDisabled(true, label("Apri prima una sessione", "Open a session first", "请先打开会话"));
 					cameraButton.remove();
+					galleryButton.remove();
 					return;
 				}
 				if (center !== void 0) {
@@ -4917,6 +5089,7 @@ window.__ModuleLoader__.load({
 						syncMediaBinding(null);
 						setCameraActionDisabled(true, label("Apri prima una sessione", "Open a session first", "请先打开会话"));
 						cameraButton.remove();
+						galleryButton.remove();
 					}
 					if (composerRow instanceof HTMLElement) {
 						composerRow.dataset.dshMobileComposerRow = "true";
@@ -4936,7 +5109,10 @@ window.__ModuleLoader__.load({
 							setCameraActionDisabled(mediaDisabled, mediaTitle);
 							const commandMenu = composerCard?.querySelector("[data-trigger-menu]") ?? null;
 							if (commandMenu !== null) placeCameraAction(commandMenu);
-							else cameraButton.remove();
+							else {
+								cameraButton.remove();
+								galleryButton.remove();
+							}
 						} else syncComposerEnterNewline(null);
 						if (composerTrailing !== void 0 && composerTrailing !== composerTools) {
 							composerTrailing.dataset.dshMobileComposerTrailing = "true";
@@ -5052,6 +5228,9 @@ window.__ModuleLoader__.load({
 				applyStrip(0);
 				cameraButton.removeEventListener("pointerdown", quietMediaPointer);
 				cameraButton.removeEventListener("click", takePhoto);
+				galleryButton.removeEventListener("pointerdown", quietMediaPointer);
+				galleryButton.removeEventListener("click", chooseGallery);
+				galleryButton.remove();
 				if (branchToastTimer !== 0) window.clearTimeout(branchToastTimer);
 				if (mediaToastTimer !== 0) window.clearTimeout(mediaToastTimer);
 				branchToast.remove();
@@ -5184,6 +5363,363 @@ window.__ModuleLoader__.load({
 				release();
 			};
 		}
+		const LEASE_MS = 3e4;
+		function transferableText(text) {
+			return !/[\uE100-\uE11D\uFFFC]/u.test(text) && new TextEncoder().encode(text).length <= 262144;
+		}
+		function snapshotShape(value) {
+			if (value === null || typeof value !== "object") return false;
+			const s = value;
+			return s.version === 1 && typeof s.token === "string" && /^[a-f0-9]{48}$/u.test(s.token) && typeof s.href === "string" && s.href.length <= 8192 && typeof s.sessionId === "string" && s.sessionId.length > 0 && s.sessionId.length <= 1024 && typeof s.text === "string" && transferableText(s.text) && Number.isSafeInteger(s.revision) && (s.revision ?? -1) >= 0;
+		}
+		function plain(s) {
+			return typeof s.draft === "string" && Number.isSafeInteger(s.draftRev) && s.draftRev >= 0 && s.phase === "plain" && s.claim === void 0 && Array.isArray(s.attachmentIds) && s.attachmentIds.length === 0 && Array.isArray(s.occurrences) && s.occurrences.length === 0 && Array.isArray(s.queue) && s.queue.length === 0;
+		}
+		/** Public state subscriptions are kept for the lifetime of each observed composer,
+		* not just the lease: attachment/submit uncertainty stays sticky until reload. */
+		function createDraftTransfer(view, page) {
+			const observed = /* @__PURE__ */ new Map();
+			const subscriptions = /* @__PURE__ */ new Set();
+			let epoch = 0, risky = false, disposed = false, composing = false;
+			let lease;
+			let timer;
+			let imported;
+			let importTimer;
+			let importClosed = false;
+			const clearImport = () => {
+				if (imported !== void 0) importClosed = true;
+				imported = void 0;
+				if (importTimer !== void 0) view.clearTimeout(importTimer);
+				importTimer = void 0;
+			};
+			const invalidate = () => {
+				epoch += 1;
+			};
+			const clearLease = () => {
+				lease = void 0;
+				if (timer !== void 0) view.clearTimeout(timer);
+				timer = void 0;
+			};
+			const risk = () => {
+				risky = true;
+				invalidate();
+			};
+			const onActivity = (event) => {
+				const inComposer = Boolean(event.target?.closest?.("[data-composer-card]"));
+				if ([
+					"input",
+					"beforeinput",
+					"paste",
+					"compositionstart",
+					"compositionend"
+				].includes(event.type) && !inComposer) {
+					risk();
+					return;
+				}
+				if (event.type === "compositionstart" || event.type === "compositionend") {
+					composing = event.type === "compositionstart";
+					invalidate();
+					return;
+				}
+				if (event.type === "change" && event.target?.type !== "file") return;
+				if (event.type === "paste") {
+					const clipboard = event.clipboardData;
+					if (clipboard !== null && clipboard !== void 0 && clipboard.files.length === 0 && clipboard.types.length === 1 && clipboard.types[0] === "text/plain" && Array.from(clipboard.items).every((item) => item.kind === "string" && item.type === "text/plain")) {
+						invalidate();
+						return;
+					}
+				}
+				if (event.type === "input" || event.type === "beforeinput") invalidate();
+				else risk();
+			};
+			const onClick = (event) => {
+				if (event.target?.closest?.("[data-composer-card] button, [data-dsh-mobile-media-action], [data-voice-activity]")) risk();
+			};
+			const checkVoice = () => {
+				if (page.querySelector("[data-voice-activity=\"requesting\"], [data-voice-activity=\"recording\"], [data-voice-activity=\"transcribing\"]") !== null) risk();
+			};
+			const voiceObserver = new MutationObserver(checkVoice);
+			voiceObserver.observe(page.documentElement, {
+				subtree: true,
+				childList: true,
+				attributes: true,
+				attributeFilter: ["data-voice-activity"]
+			});
+			checkVoice();
+			page.addEventListener("click", onClick, true);
+			const events = [
+				"compositionstart",
+				"compositionend",
+				"drop",
+				"paste",
+				"change",
+				"submit",
+				"input",
+				"beforeinput",
+				"dsh-mobile:voice-start",
+				"dsh-mobile:voice-stop"
+			];
+			for (const name of events) page.addEventListener(name, onActivity, true);
+			const current = () => {
+				if (disposed || risky || composing || observed.size !== 1) return void 0;
+				for (const modal of page.querySelectorAll("[role=\"dialog\"][aria-modal=\"true\"]")) if (!modal.hidden && !modal.closest("[hidden], [inert], [aria-hidden=\"true\"]") && modal.getClientRects().length > 0) {
+					const style = view.getComputedStyle(modal);
+					if (style.display !== "none" && style.visibility !== "hidden") return void 0;
+				}
+				const entry = observed.values().next().value;
+				if (entry === void 0 || !plain(entry.input.state.getSnapshot())) return void 0;
+				return entry;
+			};
+			const api = {
+				capture() {
+					if (lease !== void 0) return null;
+					const entry = current();
+					if (entry === void 0) return null;
+					const state = entry.input.state.getSnapshot();
+					if (!transferableText(state.draft)) return null;
+					const bytes = /* @__PURE__ */ new Uint8Array(24);
+					try {
+						view.crypto.getRandomValues(bytes);
+					} catch {
+						return null;
+					}
+					lease = {
+						version: 1,
+						token: Array.from(bytes, (n) => n.toString(16).padStart(2, "0")).join(""),
+						href: view.location.href,
+						sessionId: entry.sessionId,
+						text: state.draft,
+						revision: epoch
+					};
+					timer = view.setTimeout(clearLease, LEASE_MS);
+					return { ...lease };
+				},
+				validate(value) {
+					if (!snapshotShape(value) || lease === void 0) return false;
+					const entry = current();
+					return entry !== void 0 && value.token === lease.token && value.href === lease.href && value.href === view.location.href && value.sessionId === lease.sessionId && value.sessionId === entry.sessionId && value.revision === lease.revision && value.revision === epoch && value.text === lease.text && value.text === entry.input.state.getSnapshot().draft;
+				},
+				restore(value) {
+					if (!snapshotShape(value)) return false;
+					if (imported !== void 0) return api.verify(value);
+					if (importClosed) return false;
+					const entry = current();
+					if (entry === void 0 || entry.sessionId !== value.sessionId) return false;
+					const state = entry.input.state.getSnapshot();
+					if (state.draft !== "" && state.draft !== value.text) return false;
+					const wrote = state.draft !== value.text;
+					imported = {
+						snapshot: { ...value },
+						entry,
+						epoch,
+						href: view.location.href,
+						wrote,
+						actualText: state.draft,
+						successful: false
+					};
+					importTimer = view.setTimeout(clearImport, LEASE_MS);
+					let writeFailed = false;
+					if (wrote) try {
+						entry.input.setDraft(value.text);
+					} catch {
+						writeFailed = true;
+					}
+					const actual = entry.input.state.getSnapshot();
+					if (current() !== entry || !plain(actual)) return false;
+					imported.epoch = epoch;
+					imported.actualText = actual.draft;
+					imported.successful = !writeFailed && actual.draft === value.text;
+					return imported.successful;
+				},
+				verify(value) {
+					if (!snapshotShape(value) || imported === void 0) return false;
+					const saved = imported.snapshot;
+					return imported.successful && value.token === saved.token && value.href === saved.href && value.sessionId === saved.sessionId && value.text === saved.text && value.revision === saved.revision && current() === imported.entry && epoch === imported.epoch && view.location.href === imported.href && imported.entry.input.state.getSnapshot().draft === saved.text;
+				},
+				rollback(value) {
+					if (!snapshotShape(value) || imported === void 0) return false;
+					const record = imported;
+					const saved = record.snapshot;
+					if (value.token !== saved.token || value.href !== saved.href || value.sessionId !== saved.sessionId || value.text !== saved.text || value.revision !== saved.revision || current() !== record.entry || epoch !== record.epoch || view.location.href !== record.href || record.entry.input.state.getSnapshot().draft !== record.actualText) return false;
+					if (record.wrote) record.entry.input.setDraft("");
+					const restored = !record.wrote || record.entry.input.state.getSnapshot().draft === "";
+					clearImport();
+					return restored;
+				},
+				release(value) {
+					if (!snapshotShape(value)) return;
+					if (value.token === lease?.token) clearLease();
+					if (value.token === imported?.snapshot.token) clearImport();
+				}
+			};
+			return {
+				api: {
+					capture() {
+						try {
+							return api.capture();
+						} catch {
+							risk();
+							clearLease();
+							return null;
+						}
+					},
+					validate(value) {
+						try {
+							return api.validate(value);
+						} catch {
+							risk();
+							return false;
+						}
+					},
+					restore(value) {
+						try {
+							return api.restore(value);
+						} catch {
+							risk();
+							return false;
+						}
+					},
+					verify(value) {
+						try {
+							return api.verify(value);
+						} catch {
+							risk();
+							return false;
+						}
+					},
+					rollback(value) {
+						try {
+							return api.rollback(value);
+						} catch {
+							risk();
+							return false;
+						}
+					},
+					release(value) {
+						try {
+							api.release(value);
+						} catch {}
+					}
+				},
+				observe(sessionId, input) {
+					if (disposed) return () => void 0;
+					const key = {}, entry = {
+						sessionId,
+						input
+					};
+					observed.set(key, entry);
+					invalidate();
+					const changed = () => {
+						invalidate();
+						try {
+							if (!plain(input.state.getSnapshot())) risky = true;
+						} catch {
+							risky = true;
+						}
+					};
+					changed();
+					const unsubscribe = input.state.subscribe(changed);
+					const remove = () => {
+						if (!subscriptions.delete(remove)) return;
+						unsubscribe();
+						observed.delete(key);
+						invalidate();
+					};
+					subscriptions.add(remove);
+					return remove;
+				},
+				dispose() {
+					if (disposed) return;
+					disposed = true;
+					voiceObserver.disconnect();
+					page.removeEventListener("click", onClick, true);
+					clearLease();
+					clearImport();
+					for (const remove of subscriptions) remove();
+					subscriptions.clear();
+					observed.clear();
+					for (const name of events) page.removeEventListener(name, onActivity, true);
+				}
+			};
+		}
+		/** Install only on the authenticated Mobile frontend; identity comes from the
+		* real public session-scoped composer slot, state/writes from the public facade. */
+		function installDraftTransfer(ctx, view, page) {
+			const controller = createDraftTransfer(view, page);
+			const previous = Object.getOwnPropertyDescriptor(view, "__dshMobileDraftTransfer");
+			const mounted = /* @__PURE__ */ new Map();
+			let active = true;
+			let requestedSession;
+			let importedToken;
+			const api = {
+				...controller.api,
+				restore(value) {
+					if (!active || !snapshotShape(value)) return false;
+					if (importedToken !== void 0) return controller.api.restore(value);
+					if (mounted.size === 0 || mounted.size === 1 && ![...mounted.values()].includes(value.sessionId)) {
+						if (ctx.get("sessions")?.list?.getSnapshot?.().byId[value.sessionId] === void 0) return false;
+						if (requestedSession !== value.sessionId) {
+							const navigation = ctx.get("uiWorkspace");
+							if (typeof navigation?.openSession !== "function") return false;
+							try {
+								navigation.openSession(value.sessionId);
+							} catch {
+								return false;
+							}
+							requestedSession = value.sessionId;
+						}
+						return false;
+					}
+					const restored = controller.api.restore(value);
+					if (restored) importedToken = value.token;
+					return restored;
+				},
+				release(value) {
+					controller.api.release(value);
+					if (snapshotShape(value) && value.token === importedToken) importedToken = void 0;
+				}
+			};
+			Object.defineProperty(view, "__dshMobileDraftTransfer", {
+				configurable: true,
+				value: api
+			});
+			function Observer({ sessionId }) {
+				(0, react.useEffect)(() => {
+					if (!active) return;
+					const sessions = ctx.get("sessions");
+					const conversation = ctx.get("conversation");
+					if (typeof sessions?.scope !== "function" || typeof conversation?.input?.for !== "function") return;
+					const scope = sessions.scope(sessionId);
+					if (scope === void 0) return;
+					const key = {};
+					mounted.set(key, sessionId);
+					const remove = controller.observe(sessionId, conversation.input.for(scope));
+					return () => {
+						mounted.delete(key);
+						remove();
+					};
+				}, [sessionId]);
+				return (0, react.createElement)("span", {
+					hidden: true,
+					"data-dsh-mobile-draft-observer": sessionId
+				});
+			}
+			const removeSlot = ctx.slots.inject("conversation.input.overlay", () => ctx.slots.register({
+				name: "conversation.input.overlay",
+				id: "dsh-mobile-draft-transfer"
+			}, Observer));
+			return () => {
+				if (!active) return;
+				active = false;
+				removeSlot();
+				mounted.clear();
+				controller.dispose();
+				if (view.__dshMobileDraftTransfer === api) {
+					if (previous === void 0) delete view.__dshMobileDraftTransfer;
+					else Object.defineProperty(view, "__dshMobileDraftTransfer", previous);
+				}
+			};
+		}
 		//#endregion
 		//#region src/mobile-font-capabilities.ts
 		const NO_ADVANCED_MOBILE_TYPOGRAPHY = Object.freeze({
@@ -6001,12 +6537,17 @@ window.__ModuleLoader__.load({
 		/** Browser-safe desktop-admin Host checks. Do not import Node APIs here. */
 		const DESKTOP_ADMIN_HEADER = "x-dsh-mobile-desktop-admin";
 		const DESKTOP_ADMIN_MARKER = "dsh-app://app";
-		/** Add the forwarded Desktop marker only to this plugin's mutating admin requests. */
+		/** Non-simple source marker for this plugin's same-origin JSON management actions. */
+		const WEB_ADMIN_HEADER = "x-dsh-mobile-web-admin";
+		const WEB_ADMIN_MARKER = "same-origin-json";
+		/** Attach separate Desktop/Web source markers only to matching mutating admin requests. */
 		function localAdminRequestHeaders(init, location) {
 			const headers = new Headers(init?.headers);
 			if (!headers.has("content-type")) headers.set("content-type", "application/json");
 			headers.delete(DESKTOP_ADMIN_HEADER);
+			headers.delete(WEB_ADMIN_HEADER);
 			if (init?.method?.toUpperCase() === "POST" && location.protocol === "dsh-app:" && location.hostname === "app") headers.set(DESKTOP_ADMIN_HEADER, DESKTOP_ADMIN_MARKER);
+			else if (init?.method?.toUpperCase() === "POST" && (location.protocol === "http:" || location.protocol === "https:") && isLocalAdminHostname(location.hostname) && headers.get("content-type")?.split(";", 1)[0]?.trim().toLowerCase() === "application/json") headers.set(WEB_ADMIN_HEADER, WEB_ADMIN_MARKER);
 			return headers;
 		}
 		function unwrapBrackets(hostname) {
@@ -7194,6 +7735,161 @@ window.__ModuleLoader__.load({
 			assetDepth: 8
 		});
 		//#endregion
+		//#region src/client-recovery.ts
+		/** Only a visible, disconnected public transport needs an immediate resume nudge. */
+		function shouldNudgeReconnect(visibility, connection) {
+			return visibility === "visible" && connection !== "connected";
+		}
+		/** A persistent, known disconnection can request one native renewal. */
+		function shouldRenewSession(connection, downForMs) {
+			return isDisconnected(connection) && downForMs >= 5e3;
+		}
+		function isDisconnected(connection) {
+			return connection === "connecting" || connection === "disconnected";
+		}
+		/**
+		* Own resume nudges and one native renewal per continuous disconnection.
+		* @param getConnection - Resolve the current service to reject a replaced owner.
+		* @param page - The document's window and advertised native adapter.
+		* @param document - The mounted document; page replacement withdraws its work.
+		* @returns An awaited disposer, or nothing when no public connection is present.
+		*/
+		function installMobileConnectionRecovery(getConnection, page, document) {
+			const connection = getConnection();
+			const state = connection?.state;
+			if (connection === void 0 || state === void 0 || typeof connection.reconnect !== "function") return;
+			const origin = page.location.origin;
+			let disposed = false;
+			let generation = 0;
+			let currentState = state.getSnapshot();
+			let downSince = isDisconnected(currentState) ? Date.now() : void 0;
+			let attempted = false;
+			let bridge = page.__DSH_MOBILE_NATIVE__;
+			let pending;
+			let pendingAbort;
+			let cleanup;
+			const current = () => !disposed && page.document === document && page.location.origin === origin && getConnection() === connection && connection.state === state;
+			const cancelPending = () => {
+				generation += 1;
+				pendingAbort?.abort(new DOMException("mobile recovery owner ended", "AbortError"));
+			};
+			const updateState = () => {
+				const next = state.getSnapshot();
+				if (!isDisconnected(next)) {
+					downSince = void 0;
+					attempted = false;
+					if (currentState !== next) cancelPending();
+				} else if (downSince === void 0) {
+					downSince = Date.now();
+					attempted = false;
+				}
+				currentState = next;
+			};
+			const updateBridge = () => {
+				const next = page.__DSH_MOBILE_NATIVE__;
+				if (bridge === next) return;
+				cancelPending();
+				bridge = next;
+				attempted = false;
+			};
+			const renew = () => {
+				if (!current()) {
+					dispose();
+					return;
+				}
+				updateState();
+				updateBridge();
+				const adapter = bridge;
+				if (document.visibilityState !== "visible" || adapter === void 0 || pending !== void 0 || attempted || downSince === void 0 || !shouldRenewSession(currentState, Date.now() - downSince)) return;
+				attempted = true;
+				const owner = generation;
+				const abort = new AbortController();
+				pendingAbort = abort;
+				const owns = () => current() && !abort.signal.aborted && generation === owner && page.__DSH_MOBILE_NATIVE__ === adapter && isDisconnected(state.getSnapshot());
+				const task = Promise.resolve().then(async () => {
+					if (!owns()) return;
+					const capabilities = await adapter.capabilities();
+					if (!owns() || !capabilities.includes("auth.renew")) return;
+					const result = await adapter.invoke("auth.renew", {}, { signal: abort.signal });
+					if (!owns() || typeof result !== "object" || result === null || !("renewed" in result) || result.renewed !== true) return;
+					connection.reconnect?.();
+				}).catch((_error) => {}).finally(() => {
+					if (pending !== task) return;
+					pending = void 0;
+					pendingAbort = void 0;
+				});
+				pending = task;
+			};
+			const resume = () => {
+				if (!current()) {
+					dispose();
+					return;
+				}
+				updateState();
+				updateBridge();
+				if (shouldNudgeReconnect(document.visibilityState, currentState)) connection.reconnect?.();
+				renew();
+			};
+			const stopState = state.subscribe(updateState);
+			const timer = setInterval(renew, 2e3);
+			const pagehide = () => {
+				dispose();
+			};
+			const dispose = () => {
+				if (cleanup !== void 0) return cleanup;
+				disposed = true;
+				cancelPending();
+				clearInterval(timer);
+				stopState();
+				document.removeEventListener("visibilitychange", resume);
+				page.removeEventListener("dsh-mobile-native-ready", updateBridge);
+				page.removeEventListener("pagehide", pagehide);
+				cleanup = Promise.resolve(pending);
+				return cleanup;
+			};
+			document.addEventListener("visibilitychange", resume);
+			page.addEventListener("dsh-mobile-native-ready", updateBridge);
+			page.addEventListener("pagehide", pagehide);
+			return dispose;
+		}
+		//#endregion
+		//#region src/browser-ui-locale.ts
+		const UI_LOCALE_COOKIE = "dsh_ma_ui_locale";
+		/** Host-only, non-secret preference, independent of the short authentication session. */
+		function browserUiLocaleCookie(locale, secure) {
+			return `${UI_LOCALE_COOKIE}=${locale}; Path=/mobile-access; Max-Age=31536000; SameSite=Lax${secure ? "; Secure" : ""}`;
+		}
+		//#endregion
+		//#region src/mobile-ui-locale.ts
+		/** Remember the DSH display language only on authenticated Mobile Gateway documents. */
+		function installMobileUiLocalePersistence(page, view) {
+			if (page.querySelector("meta[name=\"dsh-mobile-gateway\"][content=\"authenticated\"]") === null) return () => {};
+			let disposed = false;
+			let previous;
+			const sync = () => {
+				if (disposed) return;
+				const language = page.documentElement.lang.trim().toLowerCase();
+				if (language === "") return;
+				const base = language.split(/[-_]/u)[0];
+				const locale = base === "zh" || base === "it" ? base : "en";
+				if (locale === previous) return;
+				try {
+					page.cookie = browserUiLocaleCookie(locale, view.location.protocol === "https:");
+					previous = locale;
+				} catch {}
+			};
+			const observer = new view.MutationObserver(sync);
+			observer.observe(page.documentElement, {
+				attributes: true,
+				attributeFilter: ["lang"]
+			});
+			sync();
+			return () => {
+				disposed = true;
+				observer.disconnect();
+			};
+		}
+		//#endregion
 		//#region src/client.ts
 		/** Map a host-reported provider onto the UI union, defaulting to the built-in one. */
 		function parseMobileRemoteProvider(value) {
@@ -7742,6 +8438,10 @@ window.__ModuleLoader__.load({
 			frp_discovery_invalid: "frpDiscoveryInvalid",
 			frp_stopped: "frpStopped",
 			frp_exited: "frpExited",
+			frp_server_address_invalid: "frpServerAddressInvalid",
+			frp_server_port_invalid: "frpServerPortInvalid",
+			frp_token_invalid: "frpTokenInvalid",
+			frp_public_origin_invalid: "frpPublicOriginInvalid",
 			frp_attach_mode_requires_vhost_port: "frpAttachModeRequiresVhostPort",
 			frp_attach_cert_unknown: "frpAttachCertUnknownError",
 			frp_entry_tls_invalid: "frpEntryTlsInvalid",
@@ -8475,6 +9175,52 @@ window.__ModuleLoader__.load({
 			frpPortLabel.append(frpPort);
 			frpTokenLabel.append(frpToken);
 			frpOriginLabel.append(frpOrigin);
+			const frpInputs = {
+				serverAddress: frpServer,
+				serverPort: frpPort,
+				token: frpToken,
+				publicOrigin: frpOrigin,
+				mode: frpMode,
+				entryTls: frpEntryTls,
+				vhostHttpPort: frpVhostPort,
+				publicPort: frpPublicPort
+			};
+			const frpInputLabels = {
+				serverAddress: frpServerLabel,
+				serverPort: frpPortLabel,
+				token: frpTokenLabel,
+				publicOrigin: frpOriginLabel,
+				mode: frpModeLabel,
+				entryTls: frpEntryTlsLabel,
+				vhostHttpPort: frpVhostLabel,
+				publicPort: frpPublicPortLabel
+			};
+			const frpLabelKeys = {
+				serverAddress: "frpServerAddress",
+				serverPort: "frpServerPort",
+				token: "frpToken",
+				publicOrigin: "frpPublicOrigin",
+				mode: "frpMode",
+				entryTls: "frpEntryTls",
+				vhostHttpPort: "frpVhostHttpPort",
+				publicPort: "frpPublicPort"
+			};
+			const frpErrors = /* @__PURE__ */ new Map();
+			for (const [name, input] of Object.entries(frpInputs)) {
+				input.id = `dsh-mobile-frp-${name}`;
+				input.setAttribute("aria-label", t(frpLabelKeys[name]));
+				const error = element("p", "dsh-mobile-control__origin-feedback is-error");
+				error.id = `${input.id}-error`;
+				error.hidden = true;
+				input.setAttribute("aria-describedby", [input.getAttribute("aria-describedby"), error.id].filter(Boolean).join(" "));
+				frpInputLabels[name].append(error);
+				frpErrors.set(name, error);
+			}
+			const frpOriginHint = element("p", "dsh-mobile-control__frp-hint");
+			frpOriginHint.id = "dsh-mobile-frp-origin-hint";
+			frpOriginHint.textContent = t("frpPublicOriginHint");
+			frpOriginLabel.append(frpOriginHint);
+			frpOrigin.setAttribute("aria-describedby", `${frpOriginHint.id} ${frpOrigin.getAttribute("aria-describedby") ?? ""}`);
 			frpFields.append(frpServerLabel, frpPortLabel, frpTokenLabel, frpOriginLabel, frpModeLabel, frpEntryTlsLabel, frpVhostLabel, frpPublicPortLabel);
 			frpStep1.append(frpStep1Title, frpStep1Text, frpFields);
 			const frpStep2 = element("section", "dsh-mobile-control__frp-step");
@@ -8576,10 +9322,18 @@ window.__ModuleLoader__.load({
 			frpAppRequirement.textContent = t("frpAppRequirement");
 			const frpConfigurationStatus = element("p", "dsh-mobile-control__component-status");
 			frpConfigurationStatus.textContent = t("frpConfigurationMissing");
+			const frpFeedback = element("p", "dsh-mobile-control__origin-feedback is-error");
+			frpFeedback.setAttribute("role", "status");
+			frpFeedback.setAttribute("aria-live", "polite");
+			frpFeedback.hidden = true;
+			const frpActionHint = element("p", "dsh-mobile-control__frp-hint");
+			frpActionHint.id = "dsh-mobile-frp-action-hint";
+			frpActionHint.hidden = true;
 			const frpConfigure = element("button", "dsh-mobile-control__primary dsh-mobile-control__frp-action");
 			frpConfigure.type = "button";
 			frpConfigure.textContent = t("frpSaveConnect");
-			frpStep4.append(frpStep4Title, frpStep4Text, frpAppRequirement, frpConfigurationStatus, frpConfigure);
+			frpConfigure.setAttribute("aria-describedby", frpActionHint.id);
+			frpStep4.append(frpStep4Title, frpStep4Text, frpAppRequirement, frpConfigurationStatus, frpFeedback, frpActionHint, frpConfigure);
 			const frpDetails = element("details", "dsh-mobile-control__details");
 			const frpDetailsSummary = element("summary");
 			frpDetailsSummary.textContent = t("frpComponentDetails");
@@ -9655,6 +10409,8 @@ window.__ModuleLoader__.load({
 				frpInstall.textContent = frpDownloadBytes > 0 ? t("installWithSize", { size: formatMegabytes(frpDownloadBytes) }) : t("installFrpc");
 				frpInstall.disabled = remoteProviderBusy;
 				frpConfigure.disabled = remoteProviderBusy || !frpInstalled;
+				frpActionHint.hidden = !frpConfigure.disabled;
+				frpActionHint.textContent = t(remoteProviderBusy ? "frpActionBusy" : !frpSupported ? "frpUnsupported" : "frpInstallBeforeConnect");
 				vpsDeploy.disabled = remoteProviderBusy || !validVpsDeploymentForm();
 				vpsCopyUninstall.disabled = vpsDeploy.disabled;
 				vpsUninstall.disabled = vpsDeploy.disabled;
@@ -10092,7 +10848,6 @@ window.__ModuleLoader__.load({
 					loadRemote();
 				});
 			});
-			const validFrpServer = (value) => value === value.trim() && value.length > 0 && value.length <= 253 && !/[\s\u0000-\u001f\u007f/\\@?#]/u.test(value);
 			const frpForm = () => {
 				const vhostHttpPort = Number(frpVhostPort.value);
 				const publicPort = Number(frpPublicPort.value);
@@ -10104,8 +10859,8 @@ window.__ModuleLoader__.load({
 					publicOrigin: String(frpOrigin.value ?? "").trim(),
 					mode,
 					entryTls: frpEntryTls.value === "self-signed" ? "self-signed" : "public-ip-cert",
-					...Number.isSafeInteger(vhostHttpPort) && vhostHttpPort >= 1 ? { vhostHttpPort } : {},
-					...Number.isSafeInteger(publicPort) && publicPort >= 1 ? { publicPort } : {}
+					...frpEntryTls.value === "self-signed" || frpVhostPort.value.trim() === "" ? {} : { vhostHttpPort },
+					...frpEntryTls.value === "self-signed" ? { publicPort } : {}
 				};
 			};
 			/**
@@ -10122,20 +10877,39 @@ window.__ModuleLoader__.load({
 				...form.publicPort === void 0 ? {} : { publicPort: form.publicPort }
 			});
 			const validFrpForm = (form) => {
-				if (!validFrpServer(form.serverAddress)) return false;
-				try {
-					createFrpServerTemplateForClipboard(form.serverPort, form.token, form.publicOrigin);
-					return true;
-				} catch {
-					return false;
-				}
-			};
+				return validateFrpForm(form).length === 0;
+			};
+			let frpValidationShown = false;
+			let frpValidationAllowsSavedToken = false;
+			const renderFrpIssues = (issues, focus = false) => {
+				for (const [name, input] of Object.entries(frpInputs)) {
+					const issue = issues.find((item) => item.field === name);
+					const feedback = frpErrors.get(name);
+					if (issue === void 0) input.removeAttribute("aria-invalid");
+					else input.setAttribute("aria-invalid", "true");
+					feedback.hidden = issue === void 0;
+					feedback.textContent = issue === void 0 ? "" : t(issue.messageKey);
+				}
+				frpFeedback.hidden = issues.length === 0;
+				frpFeedback.textContent = issues.map((issue) => t(issue.messageKey)).join(" ");
+				if (issues.length !== 0 && focus) {
+					frpConnectionGroup.open = true;
+					frpInputs[issues[0].field].focus();
+				}
+			};
+			const checkFrpForm = (form, allowSavedToken = false) => {
+				const issues = validateFrpForm(form, allowSavedToken);
+				frpValidationShown = true;
+				frpValidationAllowsSavedToken = allowSavedToken;
+				renderFrpIssues(issues, true);
+				return issues.length === 0;
+			};
+			for (const [name, input] of Object.entries(frpInputs)) input.addEventListener(name === "mode" || name === "entryTls" ? "change" : "input", () => {
+				if (frpValidationShown) renderFrpIssues(validateFrpForm(frpForm(), frpValidationAllowsSavedToken));
+			});
 			frpCopyTemplate.addEventListener("click", () => {
 				const form = frpForm();
-				if (!validFrpForm(form)) {
-					remoteStatus.textContent = t("frpInputInvalid");
-					return;
-				}
+				if (!checkFrpForm(form)) return;
 				navigator.clipboard.writeText(createFrpServerTemplateForClipboard(form.serverPort, form.token, form.publicOrigin)).then(() => {
 					remoteStatus.textContent = t("templateCopied");
 				}, () => {
@@ -10145,10 +10919,13 @@ window.__ModuleLoader__.load({
 			const frpAttachErrorText = (code) => t(REMOTE_ERROR_MESSAGE_KEYS[code] ?? "frpInputInvalid");
 			const showFrpAttachError = (code) => {
 				const message = frpAttachErrorText(code);
-				if (code === "frp_attach_mode_requires_vhost_port") {
-					frpVhostPort.setAttribute("aria-invalid", "true");
-					frpVhostHint.textContent = message;
-					frpVhostPort.focus();
+				const issue = FRP_FORM_ERRORS[code];
+				if (issue !== void 0) {
+					frpValidationShown = true;
+					renderFrpIssues([issue], true);
+				} else {
+					frpFeedback.textContent = message;
+					frpFeedback.hidden = false;
 				}
 				remoteStatus.textContent = message;
 			};
@@ -10161,10 +10938,7 @@ window.__ModuleLoader__.load({
 			};
 			frpCopyAttachPlan.addEventListener("click", () => {
 				const form = frpForm();
-				if (!validFrpServer(form.serverAddress) || !Number.isSafeInteger(form.serverPort) || form.serverPort < 1 || form.serverPort > 65535 || form.publicOrigin === "") {
-					remoteStatus.textContent = t("frpInputInvalid");
-					return;
-				}
+				if (!checkFrpForm(form, frpConfigured)) return;
 				if (form.token !== "") {
 					const attachForm = attachClipboardForm(form);
 					const code = frpAttachFormErrorCode(attachForm);
@@ -10197,7 +10971,7 @@ window.__ModuleLoader__.load({
 						remoteStatus.textContent = t("frpAttachPlanCopied");
 					});
 				}, (error) => {
-					remoteStatus.textContent = frpAttachErrorText(String(error));
+					showFrpAttachError(error instanceof Error ? error.message : String(error));
 				}).catch((error) => {
 					remoteStatus.textContent = t("frpAttachPlanFailed", { error: String(error) });
 				}).finally(() => {
@@ -10208,10 +10982,7 @@ window.__ModuleLoader__.load({
 			/** Copy a token-bearing frpc.toml only from the token the user just typed. */
 			frpCopyAttachToken.addEventListener("click", () => {
 				const form = frpForm();
-				if (!validFrpServer(form.serverAddress) || !Number.isSafeInteger(form.serverPort) || form.serverPort < 1 || form.serverPort > 65535 || form.publicOrigin === "") {
-					remoteStatus.textContent = t("frpInputInvalid");
-					return;
-				}
+				if (!checkFrpForm(form, frpConfigured)) return;
 				if (form.token !== "") {
 					const attachForm = attachClipboardForm(form);
 					const code = frpAttachFormErrorCode(attachForm);
@@ -10558,15 +11329,13 @@ window.__ModuleLoader__.load({
 				const form = frpForm();
 				const unchanged = frpConfigured && form.token === "" && form.serverAddress === configuredFrpServer && form.serverPort === configuredFrpPort && form.publicOrigin === configuredFrpOrigin && form.mode === (frpConfiguredMode === "attach" ? "attach" : "deploy") && form.entryTls === (frpConfiguredEntryTls === "self-signed" ? "self-signed" : "public-ip-cert") && (form.vhostHttpPort ?? configuredFrpVhostPort) === configuredFrpVhostPort && (form.publicPort ?? configuredFrpPublicPort) === configuredFrpPublicPort;
 				if (!unchanged) {
-					const code = form.mode === "attach" ? frpAttachFormErrorCode(attachClipboardForm(form)) : validFrpForm(form) ? void 0 : "frp_settings_invalid";
-					if (code !== void 0) {
-						if (form.mode === "attach") showFrpAttachError(code);
-						else remoteStatus.textContent = t("frpInputInvalid");
-						return;
-					}
+					if (!checkFrpForm(form)) return;
 				}
+				renderFrpIssues([]);
 				remoteProviderBusy = true;
 				frpConfigure.disabled = true;
+				frpActionHint.hidden = false;
+				frpActionHint.textContent = t("frpActionBusy");
 				frpConfigure.setAttribute("aria-busy", "true");
 				frpConfigure.textContent = t("saving");
 				(unchanged ? Promise.resolve({}) : controlRequestJson("/api/mobile-access/remote/frp/configure", {
@@ -10580,8 +11349,12 @@ window.__ModuleLoader__.load({
 						body: JSON.stringify({ running: true })
 					});
 				}).then(renderRemote, (error) => {
-					remoteFailureText = t("configureFailed", { error: String(error) });
-					remoteStatus.textContent = remoteFailureText;
+					const code = error instanceof Error ? error.message : String(error);
+					if (FRP_FORM_ERRORS[code] !== void 0) showFrpAttachError(code);
+					else {
+						remoteFailureText = t("configureFailed", { error: String(error) });
+						remoteStatus.textContent = remoteFailureText;
+					}
 				}).finally(() => {
 					remoteProviderBusy = false;
 					frpConfigure.setAttribute("aria-busy", "false");
@@ -12455,6 +13228,8 @@ window.__ModuleLoader__.load({
 .dsh-mobile-control__switcher{display:grid;grid-template-columns:repeat(2,1fr);gap:4px;margin:0 0 14px;padding:4px;border-radius:12px;background:var(--dsw-alias-bg-layer-1,#f3f5f8)}.dsh-mobile-control__switcher[hidden]{display:none}.dsh-mobile-control__tab{min-height:36px;border:0;border-radius:9px;background:transparent;color:var(--dsw-alias-label-secondary,#606873);font:600 13px/1 system-ui;cursor:pointer}.dsh-mobile-control__tab.is-active{background:var(--dsw-alias-bg-layer-2,#fff);color:var(--dsw-alias-label-primary,#16181d);box-shadow:0 1px 3px rgb(15 23 42 / 10%)}.dsh-mobile-control__view[hidden]{display:none}.dsh-mobile-control__intro{margin:0 0 12px;color:var(--dsw-alias-label-secondary,#606873);font-size:12px;line-height:1.55}.dsh-mobile-control__http-frame-warning{box-sizing:border-box;margin:-4px 0 12px;padding:8px 10px;border:1px solid #d6a83f;border-radius:9px;background:var(--dsw-alias-bg-layer-1,#fff7df);color:var(--dsw-alias-label-primary,#694b00);font-size:11px;line-height:1.5;overflow-wrap:anywhere}.dsh-mobile-control__http-frame-warning[hidden]{display:none}.dsh-mobile-control__view.is-remote .dsh-mobile-control__actions{display:grid;grid-template-columns:1fr 1fr;gap:8px}.dsh-mobile-control__view.is-remote .dsh-mobile-control__actions button[hidden]{display:none}
 .dsh-mobile-control__provider-section{position:relative;margin:0 0 14px}.dsh-mobile-control__section-title{margin:0 0 8px;color:var(--dsw-alias-label-primary,#16181d);font:650 13px/1.4 system-ui}.dsh-mobile-control__provider-section>.dsh-mobile-control__section-title{padding-right:42px}.dsh-mobile-control__provider-choices{display:grid;grid-template-columns:1fr;gap:8px}.dsh-mobile-control__provider{display:flex;min-width:0;flex-direction:column;gap:6px;min-height:94px;padding:10px 11px;border:1px solid var(--dsw-alias-border-l2,#dbe1e8);border-radius:13px;background:var(--dsw-alias-bg-layer-2,#fff);color:var(--dsw-alias-label-primary,#16181d);text-align:left;cursor:pointer;touch-action:manipulation;transition:border-color 160ms ease,background-color 160ms ease,box-shadow 160ms ease}.dsh-mobile-control__provider:hover{border-color:#6f96db;background:var(--dsw-alias-interactive-bg-hover-solid,var(--dsw-alias-bg-layer-1,#f8fbff))}.dsh-mobile-control__provider.is-selected{border-color:var(--dsw-alias-label-primary-bluish,#2563eb);background:var(--dsw-alias-interactive-bg-active,var(--dsw-alias-bg-layer-1,#f5f8ff));box-shadow:0 0 0 1px var(--dsw-alias-label-primary-bluish,#2563eb) inset}.dsh-mobile-control__provider:disabled{cursor:wait;opacity:.62}.dsh-mobile-control__provider-top{display:flex;min-width:0;align-items:flex-start;justify-content:space-between;gap:5px}.dsh-mobile-control__provider-top strong{min-width:0;font-size:12px;line-height:1.3}.dsh-mobile-control__provider-badge{flex:none;padding:2px 5px;border-radius:999px;background:var(--dsw-alias-state-business-tertiary,#e8f0ff);color:var(--dsw-alias-label-primary,#1d4ed8);font:650 11px/1.25 system-ui}.dsh-mobile-control__provider-badge.is-cpolar{background:var(--dsw-alias-state-success-tertiary,#eaf8f2);color:var(--dsw-alias-label-primary,#087454)}.dsh-mobile-control__provider-description{color:var(--dsw-alias-label-secondary,#606873);font-size:12px;line-height:1.45}.dsh-mobile-control__provider-info{position:absolute;z-index:5;top:-13px;right:-8px}.dsh-mobile-control__provider-info-button{display:flex;align-items:center;justify-content:center;width:44px;height:44px;padding:0;border:0;border-radius:50%;background:transparent;color:var(--dsw-alias-label-secondary,#475569);cursor:pointer;touch-action:manipulation}.dsh-mobile-control__provider-info-button:hover{background:var(--dsw-alias-interactive-bg-hover,#f1f5f9);color:var(--dsw-alias-label-primary-bluish,#2563eb)}.dsh-mobile-control__provider-info-glyph{display:flex;align-items:center;justify-content:center;box-sizing:border-box;width:18px;height:18px;border:1.5px solid currentColor;border-radius:50%;font:700 12px/1 system-ui}.dsh-mobile-control__provider-info-popover{position:absolute;z-index:6;top:38px;right:4px;box-sizing:border-box;width:min(292px,calc(100vw - 72px));padding:10px 12px;border:1px solid var(--dsw-alias-border-l2,#dbe1e8);border-radius:12px;background:var(--dsw-alias-bg-layer-2,#fff);box-shadow:0 10px 28px rgb(15 23 42 / 16%)}.dsh-mobile-control__provider-info-popover[hidden]{display:none}.dsh-mobile-control__provider-info-popover strong,.dsh-mobile-control__provider-info-popover span{display:block}.dsh-mobile-control__provider-info-popover strong{margin-bottom:3px;font-size:12px}.dsh-mobile-control__provider-info-popover span{color:var(--dsw-alias-label-secondary,#606873);font-size:11px;line-height:1.55}
 .dsh-mobile-control__self-hosted{margin:8px 0 0;border:1px solid var(--dsw-alias-border-l2,#dbe1e8);border-radius:12px;background:var(--dsw-alias-bg-layer-1,#f8fafc)}.dsh-mobile-control__self-hosted-summary{display:flex;box-sizing:border-box;min-height:48px;align-items:center;justify-content:space-between;gap:10px;padding:8px 11px;cursor:pointer;list-style-position:inside}.dsh-mobile-control__self-hosted-summary>span:first-child{display:flex;min-width:0;flex-direction:column;gap:1px}.dsh-mobile-control__self-hosted-summary strong{font-size:11px}.dsh-mobile-control__self-hosted-summary span span{color:var(--dsw-alias-label-secondary,#606873);font-size:11px;line-height:1.35}.dsh-mobile-control__provider-badge.is-frp{background:var(--dsw-alias-bg-layer-1,#eef0f3);color:var(--dsw-alias-label-secondary,#475569)}.dsh-mobile-control__self-hosted-body{padding:0 8px 8px}.dsh-mobile-control__provider.is-frp{width:100%;min-height:64px;background:var(--dsw-alias-bg-layer-2,#fff)}
+.dsh-mobile-control__frp-setup input[aria-invalid=true],.dsh-mobile-control__frp-setup select[aria-invalid=true]{border-color:var(--dsw-alias-state-error-primary,#bc3030)}
+.dsh-mobile-control__frp-setup .dsh-mobile-control__field>.dsh-mobile-control__origin-feedback{margin:0}
 /* The cloudflared setup section deliberately reuses this card, so
    .dsh-mobile-control__cloudflared-setup is a DOM hook for targeting rather than a
    style rule of its own. */
@@ -12490,10 +13265,16 @@ window.__ModuleLoader__.load({
 ` + EXTENSION_RECOVERY_STYLES;
 		/** Mount the desktop control or mobile feature enhancements. */
 		function apply(ctx) {
+			ctx.effect(() => installMobileUiLocalePersistence(document, window), "dsh-mobile: browser UI locale persistence");
 			ctx.effect(() => {
 				if (window.__DSH_MOBILE_FRONTEND__ !== "dedicated") return;
-				return trustAuthenticatedGatewayConnection(ctx.get("connection"));
+				const connection = ctx.get("connection");
+				if (connection !== void 0) return trustAuthenticatedGatewayConnection(connection);
 			}, "dsh-mobile: authenticated gateway client trust");
+			ctx.effect(() => {
+				if (!ownsMobileCustomization(document.querySelector("meta[name=\"dsh-mobile-gateway\"][content=\"authenticated\"]") !== null, window.__DSH_MOBILE_FRONTEND__)) return;
+				return installMobileConnectionRecovery(() => ctx.get("connection"), window, document);
+			}, "dsh-mobile: connection recovery");
 			ctx.effect(() => {
 				const desktopAdmin = isDesktopAdminSurface(location.hostname, location.search, window.__DSH_MOBILE_FRONTEND__, location.protocol);
 				const gatewayCustomization = ownsMobileCustomization(document.querySelector("meta[name=\"dsh-mobile-gateway\"][content=\"authenticated\"]") !== null, window.__DSH_MOBILE_FRONTEND__);
@@ -12504,6 +13285,7 @@ window.__ModuleLoader__.load({
 				document.head.append(style);
 				const removeCustom = !desktopAdmin || gatewayCustomization ? installCustomAssets() : () => void 0;
 				const removeVoiceSession = installVoiceSession(!desktopAdmin);
+				const removeDraftTransfer = !desktopAdmin && document.querySelector("meta[name=\"dsh-mobile-gateway\"][content=\"authenticated\"]") !== null ? installDraftTransfer(ctx, window, document) : () => void 0;
 				const removeModuleSettings = ctx.slots.inject("settings.general.item", () => ctx.slots.register({
 					name: "settings.general.item",
 					id: "dsh-mobile-client-modules",
@@ -12557,6 +13339,7 @@ window.__ModuleLoader__.load({
 						removeCustom();
 						removeSurface();
 						removeVoiceSession();
+						removeDraftTransfer();
 						localFont.dispose();
 						style.remove();
 					};
@@ -12607,6 +13390,7 @@ window.__ModuleLoader__.load({
 					removeControl();
 					removeCustom();
 					removeVoiceSession();
+					removeDraftTransfer();
 					style.remove();
 				};
 			}, "dsh-mobile: stock mobile adaptation and local control");
@@ -12655,6 +13439,8 @@ window.__ModuleLoader__.load({
 		exports.selectMobileControlLocale = selectMobileControlLocale;
 		exports.selectedMobileControlLocale = selectedMobileControlLocale;
 		exports.setMobileSurfaceOpen = setMobileSurfaceOpen;
+		exports.shouldNudgeReconnect = shouldNudgeReconnect;
+		exports.shouldRenewSession = shouldRenewSession;
 		exports.startExtensionChangeStream = startExtensionChangeStream;
 		exports.startLifecycleRefreshScheduler = startLifecycleRefreshScheduler;
 		exports.trustAuthenticatedGatewayConnection = trustAuthenticatedGatewayConnection;