dsh-mobile 0.6.5 → 0.6.7

package/lib/client.js

@@ -3204,6 +3204,127 @@ window.__ModuleLoader__.load({
   [data-dsh-mobile-composer-model-label] { flex:1 1 auto !important; max-width:none !important; min-width:0 !important; overflow:hidden !important; text-overflow:ellipsis !important; white-space:nowrap !important; }
 }
 `;
+		//#endregion
+		//#region src/browser-file-picker.ts
+		/** Browser chooser lifetime shared by camera controls and the extension SDK. */
+		const BROWSER_FILE_PICKER_DEADLINE_MS = 3e5;
+		const browserEnvironment = {
+			createSource: () => {
+				const input = document.createElement("input");
+				return {
+					input,
+					open: () => {
+						document.body.append(input);
+						input.click();
+					},
+					remove: () => {
+						input.remove();
+					}
+				};
+			},
+			deadline: (callback, milliseconds) => {
+				const timer = window.setTimeout(callback, milliseconds);
+				return () => {
+					window.clearTimeout(timer);
+				};
+			}
+		};
+		/** Select files without treating focus/visibility restoration as cancellation.
+		* @param options - MIME selection, lifetime and optional camera capture mode.
+		* @param environment - Browser DOM and timer owner; tests may supply an owned source.
+		* @returns Selected files, or undefined for explicit cancellation or deadline; abort rejects.
+		*/
+		function pickBrowserFiles(options, environment = browserEnvironment) {
+			const abortReason = () => options.abortReason?.() ?? options.signal.reason ?? new DOMException("File selection aborted", "AbortError");
+			if (options.signal.aborted) return Promise.reject(abortReason());
+			return new Promise((resolve, reject) => {
+				let source;
+				let input;
+				let settled = false;
+				let cancelDeadline;
+				const cleanup = () => {
+					const errors = [];
+					const attempt = (operation) => {
+						try {
+							operation();
+						} catch (error) {
+							errors.push(error);
+						}
+					};
+					if (cancelDeadline !== void 0) attempt(cancelDeadline);
+					cancelDeadline = void 0;
+					attempt(() => {
+						input?.removeEventListener("change", onChange);
+					});
+					attempt(() => {
+						input?.removeEventListener("cancel", onCancel);
+					});
+					attempt(() => {
+						options.signal.removeEventListener("abort", onAbort);
+					});
+					attempt(() => {
+						source?.remove();
+					});
+					return errors;
+				};
+				const finish = (outcome) => {
+					if (settled) return;
+					settled = true;
+					const cleanupErrors = cleanup();
+					if (outcome.kind === "failed") reject(outcome.error);
+					else if (cleanupErrors.length > 0) reject(cleanupErrors[0]);
+					else if (outcome.kind === "cancelled") resolve(void 0);
+					else resolve(outcome.files);
+				};
+				const onChange = () => {
+					if (settled || input === void 0) return;
+					try {
+						const files = input.files === null ? [] : [...input.files];
+						finish(files.length === 0 ? { kind: "cancelled" } : {
+							kind: "files",
+							files: Object.freeze(files)
+						});
+					} catch (error) {
+						finish({
+							kind: "failed",
+							error
+						});
+					}
+				};
+				const onCancel = () => {
+					finish({ kind: "cancelled" });
+				};
+				const onAbort = () => {
+					finish({
+						kind: "failed",
+						error: abortReason()
+					});
+				};
+				try {
+					source = environment.createSource();
+					input = source.input;
+					input.type = "file";
+					input.accept = options.accept;
+					if (options.capture !== void 0) input.capture = options.capture;
+					input.multiple = options.multiple ?? false;
+					input.hidden = true;
+					input.addEventListener("change", onChange);
+					input.addEventListener("cancel", onCancel);
+					options.signal.addEventListener("abort", onAbort, { once: true });
+					cancelDeadline = environment.deadline(onCancel, BROWSER_FILE_PICKER_DEADLINE_MS);
+					if (options.signal.aborted) {
+						onAbort();
+						return;
+					}
+					source.open();
+				} catch (error) {
+					finish({
+						kind: "failed",
+						error
+					});
+				}
+			});
+		}
 		//#endregion
 		//#region src/native-mobile.ts
 		/**
@@ -3276,6 +3397,13 @@ window.__ModuleLoader__.load({
   html.dsh-native-mobile-active [data-dsh-mobile-sidebar] [class*="_sessionRow"] [class*="_pinIndicator"] { display:none !important; }
   html.dsh-native-mobile-active [data-dsh-mobile-sidebar] [class*="_rowActions"] button { box-sizing:border-box !important; width:32px !important; min-width:32px !important; height:32px !important; min-height:32px !important; }
   [data-dsh-mobile-frame] { grid-template-columns:0 minmax(0,1fr) 0 !important; width:100% !important; height:100dvh !important; overflow:hidden !important; }
+  /* The stock frame owns layout, not a tap target. Restore only its content
+     columns; the stock shell-overlay retains its own descendant hit policy. */
+  html.dsh-native-mobile-active [data-dsh-mobile-frame] { pointer-events:none !important; }
+  html.dsh-native-mobile-active [data-dsh-mobile-frame] > :is([data-dsh-mobile-sidebar],[data-dsh-mobile-center],[class*="_rightbarCol"]) { pointer-events:auto !important; }
+  /* Floating slot surfaces paint above mobile drawers; their empty layer
+     stays click-through and each stock occupant retains its own hit policy. */
+  html.dsh-native-mobile-active [data-shell-overlay] { z-index:300 !important; pointer-events:none !important; }
   [data-dsh-mobile-center] { grid-column:2 !important; width:100vw !important; min-width:0 !important; }
   [data-dsh-mobile-center] > * { min-width:0 !important; }
   [data-dsh-mobile-header] { box-sizing:border-box !important; width:calc(100% - 16px) !important; margin:0 8px !important; min-width:0; padding-top:max(4px,env(safe-area-inset-top)) !important; padding-right:8px !important; padding-left:42px !important; }
@@ -3297,6 +3425,10 @@ window.__ModuleLoader__.load({
   [data-dsh-mobile-sidebar] { position:fixed !important; z-index:240 !important; inset:0 auto 0 0 !important; width:0 !important; overflow:visible !important; }
   [data-dsh-mobile-sidebar-root] { position:fixed !important; z-index:241 !important; inset:max(env(safe-area-inset-top),0px) auto 0 0 !important; height:auto !important; transition:width 180ms var(--dsh-mobile-motion-ease),box-shadow 180ms ease !important; }
   [data-dsh-mobile-sidebar][data-open="true"] [data-dsh-mobile-sidebar-root] { width:min(88vw,340px) !important; padding-top:0 !important; box-shadow:18px 0 46px rgb(15 23 42 / 18%); }
+  /* Extra panel/footer seats may exceed a short drawer. Keep a bounded
+     workspace scrollport and let the drawer scroll to the remaining seats. */
+  [data-dsh-mobile-sidebar][data-open="true"]:not(:has([data-dsh-mobile-settings])) [data-dsh-mobile-sidebar-root] { overflow-y:auto !important; overscroll-behavior-y:contain; }
+  [data-dsh-mobile-sidebar][data-open="true"]:not(:has([data-dsh-mobile-settings])) [data-dsh-mobile-sidebar-root] > [class*="_regionArea"] { flex:1 0 50% !important; }
   [data-dsh-mobile-sidebar][data-open="true"] [data-dsh-mobile-sidebar-root] [class*="_logoRow"] { height:52px !important; padding:4px 0 4px 4px !important; margin-bottom:4px !important; }
   [data-dsh-mobile-sidebar][data-open="false"] [data-dsh-mobile-sidebar-root] { width:0 !important; border:0 !important; background:transparent !important; box-shadow:none !important; overflow:visible !important; }
   [data-dsh-mobile-sidebar][data-open="false"] [data-dsh-mobile-sidebar-root] > :not(:has([data-dsh-mobile-toggle])) { display:none !important; }
@@ -3624,19 +3756,66 @@ window.__ModuleLoader__.load({
 				}
 			};
 		}
-		function controlledFileDragEvent(type, files, initialDropEffect) {
-			const event = new Event(type, {
-				bubbles: true,
-				cancelable: true
+		/** A read-only, file-only transfer for engines without usable native constructors. */
+		function controlledFileTransfer(files, initialDropEffect) {
+			const snapshot = [...files];
+			const fileList = Object.assign(snapshot, { item: (index) => snapshot[index] ?? null });
+			const items = Object.assign(snapshot.map((file) => ({
+				kind: "file",
+				type: file.type,
+				getAsFile: () => file,
+				getAsString: () => {},
+				webkitGetAsEntry: () => null
+			})), {
+				add: () => null,
+				clear: () => {},
+				remove: () => {}
 			});
-			const dataTransfer = {
+			Object.freeze(fileList);
+			Object.freeze(items);
+			return {
 				dropEffect: initialDropEffect,
 				effectAllowed: "copy",
-				files: Object.freeze([...files]),
-				types: Object.freeze(["Files"])
-			};
-			Object.defineProperty(event, "dataTransfer", { value: dataTransfer });
-			return event;
+				files: fileList,
+				items,
+				types: Object.freeze(["Files"]),
+				clearData: () => {},
+				getData: () => "",
+				setData: () => {},
+				setDragImage: () => {}
+			};
+		}
+		function nativeFileTransfer(files, initialDropEffect) {
+			const transfer = new DataTransfer();
+			for (const file of files) if (transfer.items.add(file) === null) throw new Error("file_transfer_unavailable");
+			if (transfer.files.length !== files.length) throw new Error("file_transfer_unavailable");
+			transfer.effectAllowed = "copy";
+			transfer.dropEffect = "copy";
+			if (transfer.effectAllowed !== "copy" || transfer.dropEffect !== "copy") throw new Error("file_transfer_unavailable");
+			transfer.dropEffect = initialDropEffect;
+			if (transfer.dropEffect !== initialDropEffect) throw new Error("file_transfer_unavailable");
+			return transfer;
+		}
+		function controlledFileDragEvent(type, files, initialDropEffect) {
+			let transfer;
+			if (typeof DataTransfer === "function") try {
+				transfer = nativeFileTransfer(files, initialDropEffect);
+			} catch (_error) {
+				transfer = controlledFileTransfer(files, initialDropEffect);
+			}
+			else transfer = controlledFileTransfer(files, initialDropEffect);
+			if (typeof DragEvent === "function") try {
+				const event = new DragEvent(type, {
+					bubbles: true,
+					cancelable: true,
+					dataTransfer: transfer
+				});
+				if (event.dataTransfer !== null) return event;
+			} catch (_error) {}
+			return Object.assign(new Event(type, {
+				bubbles: true,
+				cancelable: true
+			}), { dataTransfer: transfer });
 		}
 		/** Ask the official document dragover listener whether the current composer accepts files. */
 		function preflightComposerImageDrop(target, files) {
@@ -4086,7 +4265,6 @@ window.__ModuleLoader__.load({
 			const preflightFile = new File([], "dsh-mobile-preflight.png", { type: "image/png" });
 			const canAcceptComposerDrop = () => preflightComposerImageDrop(document, [preflightFile]);
 			const mediaPickerAbortController = new AbortController();
-			const browserPickerCleanups = /* @__PURE__ */ new Set();
 			let boundEnterEditor = null;
 			let boundEnterCard = null;
 			let disposeEnterBinding;
@@ -4133,63 +4311,18 @@ window.__ModuleLoader__.load({
 			};
 			const deliverImages = (files, context) => {
 				if (files.length === 0 || !mediaRequestIsCurrent(context)) return;
-				dispatchComposerImageDrop(document, files);
+				if (!dispatchComposerImageDrop(document, files)) showMediaToast(label("Allegati immagine non disponibili", "Image attachments are unavailable", "图片附件不可用"));
 			};
 			const launchBrowserCamera = (context) => {
-				const input = document.createElement("input");
-				input.type = "file";
-				input.accept = "image/*";
-				input.capture = "environment";
-				input.hidden = true;
-				const signal = mediaPickerAbortController.signal;
-				let cleanupTimer = 0;
-				let watchdogTimer = 0;
-				let cleaned = false;
-				const scheduleCleanup = () => {
-					if (!cleaned && cleanupTimer === 0) cleanupTimer = window.setTimeout(cleanup, 1e3);
-				};
-				const onVisibilityChange = () => {
-					if (document.visibilityState === "visible") scheduleCleanup();
-				};
-				const onChange = () => {
-					if (cleaned) return;
-					const files = input.files === null ? [] : [...input.files];
-					cleanup();
-					deliverImages(files, context);
-				};
-				const cleanup = () => {
-					if (cleaned) return;
-					cleaned = true;
-					if (cleanupTimer !== 0) window.clearTimeout(cleanupTimer);
-					if (watchdogTimer !== 0) window.clearTimeout(watchdogTimer);
-					cleanupTimer = 0;
-					watchdogTimer = 0;
-					input.removeEventListener("change", onChange);
-					input.removeEventListener("cancel", cleanup);
-					window.removeEventListener("focus", scheduleCleanup);
-					document.removeEventListener("visibilitychange", onVisibilityChange);
-					signal.removeEventListener("abort", cleanup);
-					browserPickerCleanups.delete(cleanup);
-					input.remove();
-				};
-				input.addEventListener("change", onChange);
-				input.addEventListener("cancel", cleanup);
-				window.addEventListener("focus", scheduleCleanup);
-				document.addEventListener("visibilitychange", onVisibilityChange);
-				signal.addEventListener("abort", cleanup, { once: true });
-				watchdogTimer = window.setTimeout(cleanup, 3e5);
-				browserPickerCleanups.add(cleanup);
-				if (signal.aborted) {
-					cleanup();
-					return;
-				}
-				try {
-					document.body.append(input);
-					input.click();
-				} catch {
-					cleanup();
-					if (mediaRequestIsCurrent(context)) showMediaToast(label("Impossibile aprire la fotocamera", "Could not open the camera", "无法打开相机"));
-				}
+				pickBrowserFiles({
+					accept: "image/*",
+					capture: "environment",
+					signal: mediaPickerAbortController.signal
+				}).then((files) => {
+					if (files !== void 0) deliverImages(files, context);
+				}).catch((_error) => {
+					if (mediaRequestIsCurrent(context)) showMediaToast(label("Impossibile aggiungere la foto", "Could not attach the photo", "无法附加照片"));
+				});
 			};
 			const dismissCommandMenu = () => {
 				(boundComposer?.querySelector("button[aria-haspopup=\"listbox\"][aria-expanded=\"true\"]"))?.click();
@@ -4647,7 +4780,6 @@ window.__ModuleLoader__.load({
 				mediaRequestGeneration += 1;
 				mediaPickerAbortController.abort();
 				restoreLanguageMarker();
-				for (const cleanup of [...browserPickerCleanups]) cleanup();
 				disposeEnterBinding?.();
 				disposeBrowserComposerSoftEnter();
 				observer.disconnect();
@@ -6686,6 +6818,122 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/mobile-custom-assets.ts
+		const COPY = {
+			en: {
+				gateway_required: "Custom mobile CSS, scripts and extensions require a paired DSH Mobile access entry. This page is not using the Mobile gateway.",
+				authentication_required: "Mobile customization was not refreshed because device authentication is unavailable. Reconnect through the current Mobile access entry.",
+				manifest_unavailable: "The mobile extension manifest is unavailable. Check the plugin version and proxy routing; legacy custom files can still load when authorized.",
+				manifest_invalid: "The mobile extension manifest is invalid. Existing customization is retained; check the plugin version and proxy routing.",
+				resource_unavailable: "A mobile customization resource could not be loaded or activated. Check the custom files and current Mobile access entry.",
+				refresh_failed: "Mobile customization could not be refreshed. Check the connection and current Mobile access entry.",
+				recovered: "Mobile customization is available again."
+			},
+			it: {
+				gateway_required: "CSS, script ed estensioni mobili personalizzati richiedono un accesso DSH Mobile abbinato. Questa pagina non usa il gateway Mobile.",
+				authentication_required: "La personalizzazione mobile non è stata aggiornata perché l’autenticazione del dispositivo non è disponibile. Riconnettiti tramite l’accesso Mobile attuale.",
+				manifest_unavailable: "Il manifest delle estensioni mobili non è disponibile. Controlla la versione del plugin e le route del proxy; i file personalizzati legacy possono essere caricati se autorizzati.",
+				manifest_invalid: "Il manifest delle estensioni mobili non è valido. La personalizzazione esistente viene mantenuta; controlla la versione del plugin e le route del proxy.",
+				resource_unavailable: "Una risorsa mobile personalizzata non è stata caricata o attivata. Controlla i file personalizzati e l’accesso Mobile attuale.",
+				refresh_failed: "Impossibile aggiornare la personalizzazione mobile. Controlla la connessione e l’accesso Mobile attuale.",
+				recovered: "La personalizzazione mobile è di nuovo disponibile."
+			},
+			zh: {
+				gateway_required: "自定义移动样式、脚本与扩展需要通过已配对的 DSH Mobile 入口访问；当前页面不是移动网关页面。",
+				authentication_required: "设备认证不可用，移动定制暂未刷新；请通过当前移动访问入口重新连接。",
+				manifest_unavailable: "移动扩展清单不可用；请检查插件版本及反向代理路由。通过认证时，旧版自定义文件仍可加载。",
+				manifest_invalid: "移动扩展清单无效，保留现有定制；请检查插件版本及反向代理路由。",
+				resource_unavailable: "移动定制资源加载或激活失败；请检查定制文件及当前移动访问入口。",
+				refresh_failed: "移动定制暂未刷新；请检查网络及当前移动访问入口。",
+				recovered: "移动定制已恢复加载。"
+			}
+		};
+		/** Only the authenticated Gateway owns customization APIs; the older dedicated marker remains supported. */
+		function ownsMobileCustomization(gateway, frontend) {
+			return gateway === true || frontend === "dedicated";
+		}
+		/** Emit each safe failure once until recovery, and ignore work after cancellation or disposal. */
+		function createMobileAssetLoadReporter(locale, output = console) {
+			const reported = /* @__PURE__ */ new Set();
+			let disposed = false;
+			return {
+				fail(reason, signal) {
+					if (disposed || signal?.aborted === true || reported.has(reason)) return;
+					if (reason === "resource_unavailable" && reported.has("authentication_required")) return;
+					reported.add(reason);
+					output.warn(`[DSH Mobile] ${COPY[locale()][reason]}`);
+				},
+				recover(signal) {
+					if (disposed || signal.aborted || reported.size === 0) return;
+					reported.clear();
+					output.info(`[DSH Mobile] ${COPY[locale()].recovered}`);
+				},
+				dispose() {
+					disposed = true;
+					reported.clear();
+				}
+			};
+		}
+		/** Read customization text within its file budget; the aggregate manifest has no existing byte cap. */
+		async function readMobileAssetText(response, signal, maxBytes) {
+			const assertActive = () => {
+				if (signal.aborted) throw signal.reason ?? new DOMException("mobile customization cancelled", "AbortError");
+			};
+			if (response.body === null) {
+				assertActive();
+				return "";
+			}
+			const reader = response.body.getReader();
+			let cancelled;
+			const cancel = () => cancelled ??= reader.cancel().catch((error) => {});
+			const aborted = () => {
+				cancel();
+			};
+			signal.addEventListener("abort", aborted, { once: true });
+			let completed = false;
+			try {
+				assertActive();
+				const chunks = [];
+				let bytes = 0;
+				while (true) {
+					const next = await reader.read();
+					assertActive();
+					if (next.done) {
+						completed = true;
+						break;
+					}
+					bytes += next.value.byteLength;
+					if (maxBytes !== void 0 && bytes > maxBytes) throw new Error("mobile customization resource is too large");
+					chunks.push(next.value);
+				}
+				const body = new Uint8Array(bytes);
+				let offset = 0;
+				for (const chunk of chunks) {
+					body.set(chunk, offset);
+					offset += chunk.byteLength;
+				}
+				return new TextDecoder().decode(body);
+			} finally {
+				signal.removeEventListener("abort", aborted);
+				if (!completed) await cancel();
+				reader.releaseLock();
+			}
+		}
+		//#endregion
+		//#region src/extension-limits.ts
+		/** Maximum sizes accepted for legacy mobile customization resources. */
+		const LEGACY_CUSTOM_ASSET_LIMIT = 262144;
+		/** Maximum sizes enforced when reading local extension files. */
+		const EXTENSION_LIMITS = Object.freeze({
+			manifest: 65536,
+			script: 1048576,
+			css: 524288,
+			asset: 8388608,
+			assetFiles: 256,
+			assetBytes: 33554432,
+			assetDepth: 8
+		});
+		//#endregion
 		//#region src/client.ts
 		/** Map a host-reported provider onto the UI union, defaulting to the built-in one. */
 		function parseMobileRemoteProvider(value) {
@@ -10966,6 +11214,7 @@ window.__ModuleLoader__.load({
 		}
 		/** A missing manifest is authoritative before optional legacy resources finish refreshing. */
 		async function handleMissingExtensionManifest(clearManifestResources, refreshLegacyResources, signal) {
+			if (signal.aborted) return false;
 			clearManifestResources();
 			const results = await refreshLegacyResources();
 			return !signal.aborted && results.every(Boolean);
@@ -11058,10 +11307,11 @@ window.__ModuleLoader__.load({
 		function startExtensionChangeStream(changed, runtime = {
 			window,
 			create: (url) => new EventSource(url, { withCredentials: true })
-		}, onTaskEvent, onDeviceRevoked) {
+		}, onTaskEvent, onDeviceRevoked, initiallyEnabled = true) {
 			let source;
 			let timer;
 			let disposed = false;
+			let enabled = initiallyEnabled;
 			let retryMs = 1e3;
 			const clearTimer = () => {
 				if (timer === void 0) return;
@@ -11069,19 +11319,24 @@ window.__ModuleLoader__.load({
 				timer = void 0;
 			};
 			const connect = () => {
-				if (disposed || source !== void 0) return;
+				if (disposed || !enabled || source !== void 0) return;
 				clearTimer();
 				const next = runtime.create("/mobile-access/extensions/events");
 				source = next;
+				const current = () => !disposed && enabled && source === next;
 				next.onopen = () => {
-					retryMs = 1e3;
+					if (current()) retryMs = 1e3;
 				};
-				next.addEventListener("extensions-changed", changed);
+				next.addEventListener("extensions-changed", () => {
+					if (current()) changed();
+				});
 				if (onTaskEvent !== void 0) next.addEventListener("task-notify", (message) => {
+					if (!current()) return;
 					const data = message.data;
 					onTaskEvent(data);
 				});
 				if (onDeviceRevoked !== void 0) next.addEventListener("device-revoked", (message) => {
+					if (!current()) return;
 					const data = message.data;
 					if (isDeviceRevokedPayload(data)) onDeviceRevoked();
 				});
@@ -11089,14 +11344,14 @@ window.__ModuleLoader__.load({
 					if (source !== next) return;
 					next.close();
 					source = void 0;
-					if (disposed) return;
+					if (disposed || !enabled) return;
 					const delay = retryMs;
 					retryMs = Math.min(3e4, retryMs * 2);
 					timer = runtime.window.setTimeout(connect, delay);
 				};
 			};
 			const reconnectNow = () => {
-				if (disposed) return;
+				if (disposed || !enabled) return;
 				source?.close();
 				source = void 0;
 				retryMs = 1e3;
@@ -11104,13 +11359,23 @@ window.__ModuleLoader__.load({
 			};
 			runtime.window.addEventListener("online", reconnectNow);
 			connect();
-			return () => {
+			const stop = () => {
 				disposed = true;
 				clearTimer();
 				source?.close();
 				source = void 0;
 				runtime.window.removeEventListener("online", reconnectNow);
 			};
+			return Object.assign(stop, { setEnabled(value) {
+				if (disposed || value === enabled) return;
+				enabled = value;
+				if (value) connect();
+				else {
+					clearTimer();
+					source?.close();
+					source = void 0;
+				}
+			} });
 		}
 		/** Keep at most one activation in flight per id and commit only its latest generation. */
 		var PerIdActivationLifecycle = class {
@@ -11238,7 +11503,10 @@ window.__ModuleLoader__.load({
 				});
 			}
 		};
+		/** Install authenticated mobile customization refresh, retaining loaded legacy assets through temporary failures. */
 		function installCustomAssets() {
+			const reporter = createMobileAssetLoadReporter(selectedMobileControlLocale);
+			const customizationOwner = ownsMobileCustomization(document.querySelector("meta[name=\"dsh-mobile-gateway\"][content=\"authenticated\"]") !== null, window.__DSH_MOBILE_FRONTEND__);
 			const legacyStyle = element("style");
 			legacyStyle.dataset.plugin = "dsh-mobile-custom";
 			document.head.append(legacyStyle);
@@ -11263,6 +11531,16 @@ window.__ModuleLoader__.load({
 			const managedDefinitionIds = /* @__PURE__ */ new Set();
 			let manifestEtag = "";
 			let disposed = false;
+			let events;
+			const failed = (reason, signal) => {
+				if (disposed || signal.aborted) return;
+				reporter.fail(reason, signal);
+				if (reason === "authentication_required") events?.setEnabled(false);
+			};
+			const unavailable = (response, signal, fallback) => {
+				failed(response.status === 401 || response.status === 403 ? "authentication_required" : fallback, signal);
+				response.body?.cancel().catch((error) => {});
+			};
 			let expectedDefinitionId;
 			const SURFACE_HOST_STYLES = {
 				"sidebar-action": "position:fixed;z-index:1100;top:calc(env(safe-area-inset-top) + 8px);left:8px;display:flex;flex-direction:column;gap:6px;pointer-events:none",
@@ -11300,6 +11578,16 @@ window.__ModuleLoader__.load({
 			const stopNativeBack = installMobileNativeBack(window, document, () => {
 				toast(mobileBackBlockedMessage(selectedMobileControlLocale()));
 			});
+			if (!customizationOwner) {
+				reporter.fail("gateway_required");
+				return () => {
+					disposed = true;
+					reporter.dispose();
+					stopNativeBack();
+					legacyStyle.remove();
+					document.querySelector("[data-dsh-mobile-extension-layer]")?.remove();
+				};
+			}
 			const materializeNativeFile = (value) => {
 				if (typeof value !== "object" || value === null || !("base64" in value) || !("name" in value)) return value;
 				const candidate = value;
@@ -11326,73 +11614,12 @@ window.__ModuleLoader__.load({
 					await navigator.clipboard.writeText(typeof input === "object" && input !== null && "text" in input ? String(input.text) : "");
 					return { ok: true };
 				}
-				if (action === "files.pick" || action === "camera.capture") {
-					const inputElement = element("input");
-					inputElement.type = "file";
-					inputElement.accept = action === "camera.capture" ? "image/*" : "*/*";
-					if (action === "camera.capture") inputElement.capture = "environment";
-					inputElement.hidden = true;
-					return new Promise((resolve, reject) => {
-						let settled = false;
-						let cleaned = false;
-						let cleanupTimer = 0;
-						let watchdogTimer = 0;
-						const cleanup = () => {
-							if (cleaned) return;
-							cleaned = true;
-							if (cleanupTimer !== 0) window.clearTimeout(cleanupTimer);
-							if (watchdogTimer !== 0) window.clearTimeout(watchdogTimer);
-							window.removeEventListener("focus", scheduleCancel);
-							document.removeEventListener("visibilitychange", onVisibilityChange);
-							signal.removeEventListener("abort", onAbort);
-							inputElement.removeEventListener("change", onChange);
-							inputElement.removeEventListener("cancel", onCancel);
-							inputElement.remove();
-						};
-						const finish = (callback) => {
-							if (settled) return;
-							settled = true;
-							cleanup();
-							callback();
-						};
-						const onChange = () => {
-							const file = inputElement.files?.[0];
-							finish(() => {
-								resolve(file);
-							});
-						};
-						const onCancel = () => {
-							finish(() => {
-								resolve(void 0);
-							});
-						};
-						const onAbort = () => {
-							finish(() => {
-								reject(abortReason());
-							});
-						};
-						const scheduleCancel = () => {
-							if (!settled && cleanupTimer === 0) cleanupTimer = window.setTimeout(onCancel, 1e3);
-						};
-						const onVisibilityChange = () => {
-							if (document.visibilityState === "visible") scheduleCancel();
-						};
-						inputElement.addEventListener("change", onChange, { once: true });
-						inputElement.addEventListener("cancel", onCancel, { once: true });
-						window.addEventListener("focus", scheduleCancel);
-						document.addEventListener("visibilitychange", onVisibilityChange);
-						signal.addEventListener("abort", onAbort, { once: true });
-						watchdogTimer = window.setTimeout(onCancel, 3e5);
-						try {
-							document.body.append(inputElement);
-							inputElement.click();
-						} catch (error) {
-							finish(() => {
-								reject(error);
-							});
-						}
-					});
-				}
+				if (action === "files.pick" || action === "camera.capture") return pickBrowserFiles({
+					signal,
+					accept: action === "camera.capture" ? "image/*" : "*/*",
+					...action === "camera.capture" ? { capture: "environment" } : {},
+					abortReason
+				}).then((files) => files?.[0]);
 				throw new Error("native capability is unavailable");
 			};
 			const makeApi = (id, hostGeneration, controller, surfaces, surfaceIds) => {
@@ -11567,10 +11794,13 @@ window.__ModuleLoader__.load({
 						signal
 					});
 					if (response.status === 304) return true;
-					if (!response.ok) return false;
+					if (!response.ok) {
+						unavailable(response, signal, "resource_unavailable");
+						return false;
+					}
 					const nextEtag = response.headers.get("etag") ?? "";
 					const nextModified = response.headers.get("last-modified") ?? "";
-					const next = await response.text();
+					const next = await readMobileAssetText(response, signal, LEGACY_CUSTOM_ASSET_LIMIT);
 					if (refreshAborted(signal)) return false;
 					if (next === legacySource) {
 						legacyJsEtag = nextEtag;
@@ -11626,6 +11856,7 @@ window.__ModuleLoader__.load({
 				} catch {
 					pendingRoot?.remove();
 					legacyMount = previousMount;
+					failed("resource_unavailable", signal);
 					return false;
 				}
 			};
@@ -11663,16 +11894,40 @@ window.__ModuleLoader__.load({
 						headers,
 						signal
 					});
+					if (disposed || signal.aborted) {
+						response.body?.cancel().catch((error) => {});
+						return false;
+					}
 					if (response.status === 404) {
+						unavailable(response, signal, "manifest_unavailable");
 						legacyScriptRevision = "";
 						legacyStyleRevision = "";
-						return handleMissingExtensionManifest(clearManifestExtensions, () => Promise.all([refreshLegacy(signal), refreshCssLegacy(legacyStyle, signal, legacyCssState)]), signal);
+						if (!await handleMissingExtensionManifest(clearManifestExtensions, () => Promise.all([refreshLegacy(signal), refreshCssLegacy(legacyStyle, signal, legacyCssState, unavailable)]), signal)) failed("resource_unavailable", signal);
+						return false;
+					}
+					if (response.status === 304) {
+						if (!signal.aborted) events?.setEnabled(true);
+						return true;
+					}
+					if (!response.ok) {
+						unavailable(response, signal, "manifest_unavailable");
+						return false;
 					}
-					if (response.status === 304) return true;
-					if (!response.ok) return false;
 					const nextManifestEtag = response.headers.get("etag") ?? "";
-					const payload = parseMobileExtensionManifest(await response.json());
-					if (refreshAborted(signal) || payload === void 0) return false;
+					const manifestSource = await readMobileAssetText(response, signal, void 0);
+					let payload;
+					try {
+						payload = parseMobileExtensionManifest(JSON.parse(manifestSource));
+					} catch {
+						failed("manifest_invalid", signal);
+						return false;
+					}
+					if (refreshAborted(signal)) return false;
+					if (payload === void 0) {
+						failed("manifest_invalid", signal);
+						return false;
+					}
+					events?.setEnabled(true);
 					const entries = payload.extensions;
 					const seen = new Set(entries.map((entry) => entry.id));
 					const scriptRevision = payload.legacy.scriptRevision;
@@ -11683,8 +11938,11 @@ window.__ModuleLoader__.load({
 						else refreshComplete = false;
 					}
 					if (styleRevision === "" || styleRevision !== legacyStyleRevision) {
-						if (await refreshCssLegacy(legacyStyle, signal, legacyCssState)) legacyStyleRevision = styleRevision;
-						else refreshComplete = false;
+						if (await refreshCssLegacy(legacyStyle, signal, legacyCssState, unavailable)) legacyStyleRevision = styleRevision;
+						else {
+							failed("resource_unavailable", signal);
+							refreshComplete = false;
+						}
 					}
 					const commitStyle = (id, change, css, etag) => {
 						if (change === "retain") return;
@@ -11726,9 +11984,12 @@ window.__ModuleLoader__.load({
 									signal
 								});
 								if (cssResponse.status !== 304) {
-									if (!cssResponse.ok) throw new Error("mobile extension style failed to load");
+									if (!cssResponse.ok) {
+										unavailable(cssResponse, signal, "resource_unavailable");
+										throw new Error("mobile extension style failed to load");
+									}
 									pendingStyleEtag = cssResponse.headers.get("etag") ?? void 0;
-									pendingCss = await cssResponse.text();
+									pendingCss = await readMobileAssetText(cssResponse, signal, EXTENSION_LIMITS.css);
 									styleChange = "replace";
 									if (refreshAborted(signal)) return false;
 								}
@@ -11755,9 +12016,12 @@ window.__ModuleLoader__.load({
 								let nextDigest;
 								let nextEtag;
 								if (scriptResponse.status !== 304) {
-									if (!scriptResponse.ok) throw new Error("mobile extension script failed to load");
+									if (!scriptResponse.ok) {
+										unavailable(scriptResponse, signal, "resource_unavailable");
+										throw new Error("mobile extension script failed to load");
+									}
 									nextEtag = scriptResponse.headers.get("etag") ?? void 0;
-									const source = await scriptResponse.text();
+									const source = await readMobileAssetText(scriptResponse, signal, EXTENSION_LIMITS.script);
 									if (refreshAborted(signal)) return false;
 									const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(source));
 									if (refreshAborted(signal)) return false;
@@ -11811,6 +12075,7 @@ window.__ModuleLoader__.load({
 							failClosedExtensionGenerationReplacement(hadActiveGeneration, previousHostGeneration, entry.generation, () => {
 								disposeManifestExtension(entry.id);
 							});
+							failed("resource_unavailable", signal);
 							refreshComplete = false;
 						}
 					}
@@ -11821,13 +12086,17 @@ window.__ModuleLoader__.load({
 					} else manifestEtag = "";
 					return refreshComplete;
 				} catch {
+					failed("refresh_failed", signal);
 					return false;
 				}
 			};
 			started = true;
 			for (const definition of definitions.values()) activateDefinition(definition);
 			const stopRefresh = startLifecycleRefreshScheduler(async (signal) => {
-				await refreshExtensions(signal);
+				if (await refreshExtensions(signal) && !disposed && !signal.aborted) {
+					reporter.recover(signal);
+					events?.setEnabled(true);
+				}
 			});
 			const stopEvents = startExtensionChangeStream(() => {
 				stopRefresh.refresh();
@@ -11845,9 +12114,11 @@ window.__ModuleLoader__.load({
 				});
 			}, () => {
 				fireDeviceRevoked();
-			});
+			}, false);
+			events = stopEvents;
 			return () => {
 				disposed = true;
+				reporter.dispose();
 				stopNativeBack();
 				stopEvents();
 				stopRefresh();
@@ -11866,7 +12137,7 @@ window.__ModuleLoader__.load({
 				else window.dshMobile = previous;
 			};
 		}
-		async function refreshCssLegacy(style, signal, state) {
+		async function refreshCssLegacy(style, signal, state, unavailable) {
 			try {
 				const headers = {};
 				if (state.etag !== "") headers["if-none-match"] = state.etag;
@@ -11890,13 +12161,14 @@ window.__ModuleLoader__.load({
 				if (response.ok) {
 					const nextEtag = response.headers.get("etag") ?? "";
 					const nextModified = response.headers.get("last-modified") ?? "";
-					const css = await response.text();
+					const css = await readMobileAssetText(response, signal, LEGACY_CUSTOM_ASSET_LIMIT);
 					if (refreshAborted(signal)) return false;
 					style.textContent = css;
 					state.etag = nextEtag;
 					state.modified = nextModified;
 					return true;
 				}
+				unavailable(response, signal, "resource_unavailable");
 				return false;
 			} catch {
 				return false;
@@ -11950,11 +12222,13 @@ window.__ModuleLoader__.load({
 			}, "dsh-mobile: authenticated gateway client trust");
 			ctx.effect(() => {
 				const desktopAdmin = isDesktopAdminSurface(location.hostname, location.search, window.__DSH_MOBILE_FRONTEND__, location.protocol);
+				const gatewayCustomization = ownsMobileCustomization(document.querySelector("meta[name=\"dsh-mobile-gateway\"][content=\"authenticated\"]") !== null, window.__DSH_MOBILE_FRONTEND__);
 				const style = element("style");
 				style.dataset.plugin = "dsh-mobile";
 				style.textContent = desktopAdmin ? CONTROL_STYLES : NATIVE_MOBILE_STYLES;
 				style.textContent += CLIENT_MODULE_STYLES;
 				document.head.append(style);
+				const removeCustom = !desktopAdmin || gatewayCustomization ? installCustomAssets() : () => void 0;
 				const removeVoiceSession = installVoiceSession(!desktopAdmin);
 				const removeModuleSettings = ctx.slots.inject("settings.general.item", () => ctx.slots.register({
 					name: "settings.general.item",
@@ -11998,7 +12272,6 @@ window.__ModuleLoader__.load({
 							removeFontSize();
 						};
 					});
-					const removeCustom = installCustomAssets();
 					const removeSurface = installDshLanguageBoundSurface(() => installNativeMobileSurface({
 						getLayout: () => ctx.get("layout"),
 						getSidebarRight: () => ctx.get("sidebarRight")
@@ -12058,6 +12331,7 @@ window.__ModuleLoader__.load({
 					disposeClientModuleDialogs();
 					removeModuleSettings();
 					removeControl();
+					removeCustom();
 					removeVoiceSession();
 					style.remove();
 				};
@@ -12091,6 +12365,7 @@ window.__ModuleLoader__.load({
 		exports.frpAttachFormErrorCode = frpAttachFormErrorCode;
 		exports.handleMissingExtensionManifest = handleMissingExtensionManifest;
 		exports.inject = inject;
+		exports.installCustomAssets = installCustomAssets;
 		exports.installDshLanguageBoundSurface = installDshLanguageBoundSurface;
 		exports.installMobileNativeBack = installMobileNativeBack;
 		exports.mobileBackBlockedMessage = mobileBackBlockedMessage;