dsh-provider-proxy 0.4.0 → 0.5.0

package/lib/client.js

@@ -39,13 +39,13 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var require_client = __commonJS({
   "src/client.css"(exports, module2) {
     "use strict";
-    var __dshMap = { "root": "1b9ac577_root", "lead": "4a359f22_lead", "empty": "ffd21b3b_empty", "card": "16611c9b_card", "cardActive": "2d004466_cardActive", "cardHead": "640fee25_cardHead", "cardTitles": "f6fe8b3f_cardTitles", "name": "f9d2db09_name", "id": "c90ce2e0_id", "pillOn": "75541864_pillOn", "pillLive": "3097d90f_pillLive", "pillOff": "a58f86be_pillOff", "toggle": "e5b81c4b_toggle", "field": "f4d34839_field", "label": "a4061c91_label", "hint": "13bd3ec9_hint", "input": "851d7bd9_input", "diag": "f92a10d9_diag", "diagSummary": "5b66e072_diagSummary", "diagList": "dc8d3a6f_diagList" };
+    var __dshMap = { "root": "7a51762d_root", "lead": "c71659b2_lead", "empty": "c42c4abe_empty", "card": "53acf569_card", "cardActive": "bd4546f8_cardActive", "defaultCard": "1103ba6e_defaultCard", "defaultLead": "0b907dc6_defaultLead", "cardHead": "d06dccdb_cardHead", "cardTitles": "ff20149f_cardTitles", "name": "4e36a10e_name", "id": "79208064_id", "pillOn": "3e0969fd_pillOn", "pillLive": "895a1b6e_pillLive", "pillOff": "f5c4d227_pillOff", "toggle": "94e6424f_toggle", "field": "5dfb5268_field", "label": "2e13439d_label", "hint": "cdd952c6_hint", "input": "31dd2d99_input", "testButton": "028bc91c_testButton", "diag": "5d114b0b_diag", "diagSummary": "27518b39_diagSummary", "diagList": "b3005b62_diagList" };
     var __dshStyles = globalThis.__dshPluginStyles || (globalThis.__dshPluginStyles = /* @__PURE__ */ new Set());
     if (!__dshStyles.has("dsh-provider-proxy/client.css")) {
       __dshStyles.add("dsh-provider-proxy/client.css");
       __dshStyle = document.createElement("style");
       __dshStyle.setAttribute("data-plugin-css", "dsh-provider-proxy/client.css");
-      __dshStyle.textContent = "/* dsh-provider-proxy \u2014 provider proxy settings page.\n   Tokens only: no literal colours, matching the shared --dsw-* system. */\n\n.1b9ac577_root {\n  display: flex;\n  flex-direction: column;\n  gap: 12px;\n  max-width: 640px;\n}\n\n.4a359f22_lead {\n  margin: 0 0 4px;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.ffd21b3b_empty {\n  margin: 0;\n  padding: 16px;\n  border: 1px dashed var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 12px;\n  text-align: center;\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- provider card ---- */\n\n.16611c9b_card,\n.2d004466_cardActive {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n}\n\n.2d004466_cardActive {\n  border-color: var(--dsw-alias-state-success-primary);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n.640fee25_cardHead {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n}\n\n.f6fe8b3f_cardTitles {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  min-width: 0;\n}\n\n.f9d2db09_name {\n  overflow: hidden;\n  font-size: 13px;\n  font-weight: 600;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n  color: var(--dsw-alias-label-primary);\n}\n\n.c90ce2e0_id {\n  flex: none;\n  padding: 1px 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-bg-layer-2);\n  font-family: ui-monospace, monospace;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n/* ---- status pill ---- */\n\n.75541864_pillOn,\n.3097d90f_pillLive,\n.a58f86be_pillOff {\n  flex: none;\n  padding: 2px 8px;\n  border-radius: 999px;\n  font-size: 11px;\n  font-weight: 500;\n  white-space: nowrap;\n}\n\n.75541864_pillOn {\n  background: var(--dsw-alias-state-success-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.3097d90f_pillLive {\n  border: 1px solid var(--dsw-alias-border-l2);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.a58f86be_pillOff {\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- toggle ---- */\n\n.e5b81c4b_toggle {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  padding-top: 2px;\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n}\n\n.e5b81c4b_toggle input {\n  accent-color: var(--dsw-alias-brand-primary);\n  cursor: pointer;\n}\n\n/* ---- fields ---- */\n\n.f4d34839_field {\n  display: grid;\n  grid-template-columns: 96px 1fr;\n  align-items: center;\n  gap: 10px;\n  font-size: 12px;\n}\n\n.a4061c91_label {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.13bd3ec9_hint {\n  grid-column: 2;\n  margin-top: -2px;\n  font-size: 11px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.851d7bd9_input {\n  box-sizing: border-box;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 8px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  outline: none;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font: inherit;\n  font-size: 12px;\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n.851d7bd9_input:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l2);\n}\n\n.851d7bd9_input:focus {\n  border-color: var(--dsw-alias-brand-primary);\n}\n\n.851d7bd9_input:disabled {\n  color: var(--dsw-alias-state-idle-primary);\n  background: var(--dsw-alias-bg-layer-2);\n  cursor: not-allowed;\n}\n\n/* ---- diagnostics ---- */\n\n.f92a10d9_diag {\n  margin-top: 2px;\n  padding: 8px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.5b66e072_diagSummary {\n  cursor: pointer;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.dc8d3a6f_diagList {\n  margin: 6px 0 0;\n  padding-left: 18px;\n  font-family: ui-monospace, monospace;\n  word-break: break-all;\n}\n";
+      __dshStyle.textContent = '/* dsh-provider-proxy \u2014 provider proxy settings page.\n   Tokens only: no literal colours, matching the shared --dsw-* system. */\n\n.7a51762d_root {\n  display: flex;\n  flex-direction: column;\n  gap: 12px;\n  max-width: 640px;\n}\n\n.c71659b2_lead {\n  margin: 0 0 4px;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.c42c4abe_empty {\n  margin: 0;\n  padding: 16px;\n  border: 1px dashed var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 12px;\n  text-align: center;\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- provider card ---- */\n\n.53acf569_card,\n.bd4546f8_cardActive {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n}\n\n.bd4546f8_cardActive {\n  border-color: var(--dsw-alias-state-success-primary);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n/* ---- shared default endpoint ---- */\n\n/* A distinct outer layer, so it reads as "one setting for the page" rather than\n   as one more provider card. */\n.1103ba6e_defaultCard {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 14px 16px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n.0b907dc6_defaultLead {\n  margin: -2px 0 0;\n  font-size: 11px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.d06dccdb_cardHead {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n}\n\n.ff20149f_cardTitles {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  min-width: 0;\n}\n\n.4e36a10e_name {\n  overflow: hidden;\n  font-size: 13px;\n  font-weight: 600;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n  color: var(--dsw-alias-label-primary);\n}\n\n.79208064_id {\n  flex: none;\n  padding: 1px 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-bg-layer-2);\n  font-family: ui-monospace, monospace;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n/* ---- status pill ---- */\n\n.3e0969fd_pillOn,\n.895a1b6e_pillLive,\n.f5c4d227_pillOff {\n  flex: none;\n  padding: 2px 8px;\n  border-radius: 999px;\n  font-size: 11px;\n  font-weight: 500;\n  white-space: nowrap;\n}\n\n.3e0969fd_pillOn {\n  background: var(--dsw-alias-state-success-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.895a1b6e_pillLive {\n  border: 1px solid var(--dsw-alias-border-l2);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.f5c4d227_pillOff {\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- toggle ---- */\n\n.94e6424f_toggle {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  padding-top: 2px;\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n}\n\n.94e6424f_toggle input {\n  accent-color: var(--dsw-alias-brand-primary);\n  cursor: pointer;\n}\n\n/* ---- fields ---- */\n\n.5dfb5268_field {\n  display: grid;\n  grid-template-columns: 96px 1fr;\n  align-items: center;\n  gap: 10px;\n  font-size: 12px;\n}\n\n.2e13439d_label {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.cdd952c6_hint {\n  grid-column: 2;\n  margin-top: -2px;\n  font-size: 11px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.31dd2d99_input {\n  box-sizing: border-box;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 8px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  outline: none;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font: inherit;\n  font-size: 12px;\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n/* The base look of every input is INLINE too, so these three state rules only\n   ever take effect as author-important declarations \u2014 same reason as the\n   self-check button above. `cursor` has no inline base and needs none, and the\n   hover border uses `l3` because `l1`\u2192`l2` is a 4%\u219210% black step nobody can\n   see. */\n\n.31dd2d99_input:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n}\n\n.31dd2d99_input:focus {\n  border-color: var(--dsw-alias-brand-primary) !important;\n}\n\n.31dd2d99_input:disabled {\n  color: var(--dsw-alias-state-idle-primary) !important;\n  background: var(--dsw-alias-bg-layer-2) !important;\n  cursor: not-allowed;\n}\n\n/* ---- self-check ---- */\n\n/* The hover state is the one thing an inline style cannot express, which is why\n   this element carries a class at all. Layout stays inline.\n\n   Two traps, both hit before this comment existed:\n   - `!important` is load-bearing: the base border and background are INLINE, and\n     the cascade sorts a style attribute after every author rule, so a plain\n     declaration here would ship, match, and still lose.\n   - the TOKENS must be visible ones. `bg-layer-1/2/3` all resolve to\n     `neutral-bluish-00` in the light theme, so a layer swap is a no-op there, and\n     `border-l1`\u2192`l2` is 4%\u219210% black on a 1px line. The app\'s own hovers use\n     `interactive-bg-hover`; using it here is what makes the feedback exist. */\n.028bc91c_testButton {\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n.028bc91c_testButton:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n  background: var(--dsw-alias-interactive-bg-hover) !important;\n}\n\n/* ---- diagnostics ---- */\n\n.5d114b0b_diag {\n  margin-top: 2px;\n  padding: 8px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.27518b39_diagSummary {\n  cursor: pointer;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.b3005b62_diagList {\n  margin: 6px 0 0;\n  padding-left: 18px;\n  font-family: ui-monospace, monospace;\n  word-break: break-all;\n}\n';
       document.head.appendChild(__dshStyle);
     }
     var __dshStyle;
@@ -63,6 +63,27 @@ __export(client_exports, {
 });
 module.exports = __toCommonJS(client_exports);
 var import_client = __toESM(require_client(), 1);
+
+// src/proxy-address.ts
+function defaultProxyProblem(endpoint) {
+  const host = (endpoint.host ?? "").trim();
+  if (host.length === 0) return "\u672A\u586B\u5199\u4EE3\u7406\u5730\u5740";
+  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(host) || host.includes("/")) {
+    return "\u4EE3\u7406\u5730\u5740\u53EA\u586B\u4E3B\u673A\u540D\u6216 IP\uFF0C\u4E0D\u8981\u5E26\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84";
+  }
+  const port = endpoint.port ?? 0;
+  if (!Number.isInteger(port) || port < 1 || port > 65535) {
+    return "\u4EE3\u7406\u7AEF\u53E3\u65E0\u6548\uFF08\u9700\u4E3A 1-65535 \u7684\u6574\u6570\uFF09";
+  }
+  const hasUser = (endpoint.username ?? "").length > 0;
+  const hasPassword = (endpoint.password ?? "").length > 0;
+  if (hasUser !== hasPassword) {
+    return hasUser ? "\u914D\u7F6E\u4E86\u4EE3\u7406\u7528\u6237\u540D\u4F46\u6CA1\u6709\u5BC6\u7801\uFF1B\u8BF7\u8865\u5168\u5BC6\u7801\u6216\u6E05\u7A7A\u7528\u6237\u540D" : "\u914D\u7F6E\u4E86\u4EE3\u7406\u5BC6\u7801\u4F46\u6CA1\u6709\u7528\u6237\u540D\uFF1B\u8BF7\u8865\u5168\u7528\u6237\u540D\u6216\u6E05\u7A7A\u5BC6\u7801";
+  }
+  return void 0;
+}
+
+// src/client.ts
 var ReactCache;
 function react() {
   if (ReactCache === void 0) {
@@ -88,7 +109,7 @@ function apply(ctx) {
         name: "settings.section",
         id: NAMESPACE,
         order: 20,
-        label: () => localeOf(ctx) === "zh" ? "Provider \u4EE3\u7406" : "Provider \u4EE3\u7406"
+        label: () => "Provider \u4EE3\u7406"
       },
       () => renderPage(ctx)
     )
@@ -175,11 +196,24 @@ function testResultFrom(body, strings) {
     ok,
     ms: typeof body?.ms === "number" && Number.isFinite(body.ms) ? body.ms : void 0,
     ip: typeof body?.exitIp === "string" && body.exitIp.length > 0 ? body.exitIp : void 0,
+    // The Host probes a target the way routing would: a loopback/private upstream
+    // (or a bypassHosts match) is reached DIRECT, not through the proxy. The card
+    // says so, so a green check is not read as "the proxy works".
+    direct: body?.viaProxy === false,
     error: ok ? void 0 : typeof body?.error === "string" && body.error.length > 0 ? body.error : strings.testFailed
   };
 }
 var catalogueSetter = () => {
 };
+function relativeTime(at, t) {
+  const seconds = Math.max(0, Math.round((Date.now() - at) / 1e3));
+  if (seconds < 60) return t.justNow;
+  const minutes = Math.floor(seconds / 60);
+  if (minutes < 60) return `${minutes}${t.minutesAgo}`;
+  const hours = Math.floor(minutes / 60);
+  if (hours < 24) return `${hours}${t.hoursAgo}`;
+  return `${Math.floor(hours / 24)}${t.daysAgo}`;
+}
 async function fetchCatalog() {
   const response = await globalThis.fetch(CATALOG_PATH, { headers: { accept: "application/json" } });
   if (!response.ok) throw new Error(`Host answered ${response.status}`);
@@ -197,21 +231,99 @@ async function fetchCatalog() {
       if (typeof count === "number" && Number.isFinite(count)) hits[id] = count;
     }
   }
-  return { rows, hits };
+  const problems = {};
+  const rejected = body?.problems;
+  if (rejected !== null && typeof rejected === "object") {
+    for (const [id, message] of Object.entries(rejected)) {
+      if (typeof message === "string" && message.length > 0) problems[id] = message;
+    }
+  }
+  const lastUse = {};
+  const publishedLastUse = body?.lastUse;
+  if (publishedLastUse !== null && typeof publishedLastUse === "object") {
+    for (const [id, raw] of Object.entries(publishedLastUse)) {
+      const entry = raw;
+      if (entry === null || typeof entry !== "object") continue;
+      const at = typeof entry.at === "number" && Number.isFinite(entry.at) ? entry.at : void 0;
+      const startedAt = typeof entry.startedAt === "number" && Number.isFinite(entry.startedAt) ? entry.startedAt : void 0;
+      if (at === void 0 && startedAt === void 0) continue;
+      lastUse[id] = {
+        ...startedAt === void 0 ? {} : { startedAt },
+        ...at === void 0 ? {} : { at },
+        ...typeof entry.ok === "boolean" ? { ok: entry.ok } : {},
+        ...typeof entry.code === "string" && entry.code.length > 0 ? { code: entry.code } : {}
+      };
+    }
+  }
+  return { rows, hits, problems, lastUse };
+}
+var CATALOG_REFRESH_MS = 1e4;
+var catalogPoll;
+var catalogTouchedAt = 0;
+function touchCatalogPolling() {
+  catalogTouchedAt = Date.now();
+  if (catalogPoll !== void 0) return;
+  catalogPoll = setInterval(() => {
+    if (Date.now() - catalogTouchedAt > CATALOG_REFRESH_MS * 2 + 1e3) {
+      clearInterval(catalogPoll);
+      catalogPoll = void 0;
+      return;
+    }
+    void fetchCatalog().then((catalog) => catalogueSetter?.(catalog)).catch(() => void 0);
+  }, CATALOG_REFRESH_MS);
 }
 var byName = (a, b) => a.name.localeCompare(b.name);
+function deadRuleEntries(raw) {
+  return raw.split(/[,\s]+/).map((entry) => entry.trim()).filter((entry) => /^[a-z][a-z0-9+.-]*:\/\//i.test(entry) || entry.includes("/"));
+}
 function view(route) {
   return {
     enabled: route?.enabled === true,
+    useDefault: route?.useDefault === true,
     protocol: PROTOCOLS.includes(route?.protocol) ? route.protocol : "http",
     host: route?.host ?? "",
     port: route?.port ?? 0,
     username: route?.username ?? "",
     password: route?.password ?? "",
     onlyHosts: route?.onlyHosts ?? "",
-    bypassHosts: route?.bypassHosts ?? ""
+    bypassHosts: route?.bypassHosts ?? "",
+    testTarget: route?.testTarget ?? ""
+  };
+}
+function unbracket(hostname) {
+  return hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
+}
+function splitProxyUrl(text) {
+  const trimmed = text.trim();
+  if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed)) return void 0;
+  let url;
+  try {
+    url = new URL(trimmed);
+  } catch {
+    return void 0;
+  }
+  const scheme = url.protocol.slice(0, -1).toLowerCase();
+  const protocol = scheme === "socks" ? "socks5" : scheme;
+  if (!PROTOCOLS.includes(protocol)) return void 0;
+  if (url.hostname.length === 0) return void 0;
+  const decode = (value) => {
+    try {
+      return decodeURIComponent(value);
+    } catch {
+      return value;
+    }
+  };
+  const parsedPort = url.port.length > 0 ? Number.parseInt(url.port, 10) : 0;
+  return {
+    protocol,
+    host: unbracket(url.hostname),
+    port: Number.isNaN(parsedPort) ? 0 : parsedPort,
+    username: decode(url.username),
+    password: decode(url.password)
   };
 }
+var WRITE_DELAY_MS = 300;
+var pendingWrites = /* @__PURE__ */ new Map();
 var diagnostics = [];
 function note(message) {
   if (!diagnostics.includes(message)) diagnostics.push(message);
@@ -288,6 +400,19 @@ var S = {
     color: "var(--dsw-alias-label-secondary)",
     wordBreak: "break-all"
   },
+  /**
+   * A failed check is the answer, not decoration: it takes the error colour and
+   * a heavier weight, unlike the latency band colour which only tints a number
+   * that is printed anyway.
+   */
+  testFailure: {
+    color: "var(--dsw-alias-state-error-primary, #f85149)",
+    fontWeight: "500"
+  },
+  /** A rejected route is a failure of the settings, not a warning about them. */
+  diagProblem: {
+    color: "var(--dsw-alias-state-error-primary, #f85149)"
+  },
   advanced: {
     marginTop: "4px",
     fontSize: "12px"
@@ -314,6 +439,40 @@ var S = {
     color: "var(--dsw-alias-label-secondary)"
   },
   pillOff: { color: "var(--dsw-alias-state-idle-primary)" },
+  /**
+   * The shared default endpoint sits on its own layer so it reads as global
+   * rather than as one more provider card — the mistake it exists to prevent is
+   * a user typing the same address into every card.
+   */
+  defaultCard: {
+    display: "flex",
+    flexDirection: "column",
+    gap: "10px",
+    padding: "14px 16px",
+    border: "1px solid var(--dsw-alias-border-l2)",
+    borderRadius: "10px",
+    background: "var(--dsw-alias-bg-layer-2)"
+  },
+  defaultLead: {
+    margin: "-2px 0 0",
+    fontSize: "11px",
+    lineHeight: "1.5",
+    color: "var(--dsw-alias-label-secondary)"
+  },
+  inheritNote: {
+    margin: "0",
+    fontSize: "11px",
+    lineHeight: "1.5",
+    color: "var(--dsw-alias-label-secondary)"
+  },
+  /** The default is not configured: an answer, so it takes the error colour. */
+  inheritWarning: {
+    margin: "0",
+    fontSize: "11px",
+    lineHeight: "1.5",
+    fontWeight: "500",
+    color: "var(--dsw-alias-state-error-primary, #f85149)"
+  },
   toggle: {
     display: "flex",
     alignItems: "center",
@@ -363,21 +522,52 @@ function renderPage(ctx) {
   }]))(() => {
     void fetchCatalog().then((catalog) => catalogueSetter?.(catalog)).catch((error) => {
       note(`provider \u5217\u8868\u83B7\u53D6\u5931\u8D25\uFF1A${error?.message ?? error}`);
-      catalogueSetter?.({ rows: [], hits: {} });
+      catalogueSetter?.({ rows: [], hits: {}, problems: {}, lastUse: {} });
     });
-    return { rows: void 0, hits: {}, pending: true };
+    return {
+      rows: void 0,
+      hits: {},
+      problems: {},
+      lastUse: {},
+      pending: true
+    };
   });
-  catalogueSetter = (catalog) => setState({ rows: catalog.rows, hits: catalog.hits, pending: false });
+  catalogueSetter = (catalog) => setState({
+    rows: catalog.rows,
+    hits: catalog.hits,
+    problems: catalog.problems,
+    lastUse: catalog.lastUse,
+    pending: false
+  });
+  touchCatalogPolling();
   const published = state.rows ?? [];
   const hits = state.hits ?? {};
+  const lastUse = state.lastUse ?? {};
+  const lastUseText = (id) => {
+    const use = lastUse[id];
+    if (use === void 0) return void 0;
+    if (use.ok === true) return `${t.recentOk}${relativeTime(use.at ?? use.startedAt ?? Date.now(), t)}`;
+    if (use.ok === false) return `${t.recentFail}${use.code ?? "ERROR"}`;
+    return `${t.recentStarted}${relativeTime(use.startedAt ?? use.at ?? Date.now(), t)}`;
+  };
+  const problems = state.problems ?? {};
+  const problemLines = Object.entries(problems).map(
+    ([id, message]) => h("li", { key: `p:${id}`, style: S.diagProblem }, `${id}\uFF1A${message}`)
+  );
+  const problemCount = problemLines.length;
   note(
     `provider \u5217\u8868\uFF1A\u6765\u81EA Host \u5171 ${published.length} \u4E2A\uFF08${published.map((r) => r.id).join("\u3001") || "\u65E0"}\uFF09`
   );
   const [draft, setDraft] = (React.useState ?? ((v) => [v, () => {
   }]))({});
   const edit = (id, field2, value) => setDraft((current) => ({ ...current, [id]: { ...current[id], [field2]: value } }));
+  const [defaultDraft, setDefaultDraft] = (React.useState ?? ((v) => [v, () => {
+  }]))({});
+  const editDefault = (field2, value) => setDefaultDraft((current) => ({ ...current, [field2]: value }));
   const [tests, setTests] = (React.useState ?? ((v) => [v, () => {
   }]))({});
+  const [filter, setFilter] = (React.useState ?? ((v) => [v, () => {
+  }]))("");
   const runTest = (id) => {
     setTests((current) => ({ ...current, [id]: { pending: true } }));
     void (async () => {
@@ -389,10 +579,6 @@ function renderPage(ctx) {
         });
         const body2 = await response.json();
         setTests((current) => ({ ...current, [id]: testResultFrom(body2, t) }));
-        if (body2?.ok === true) {
-          void fetchCatalog().then((catalog) => catalogueSetter?.(catalog)).catch(() => {
-          });
-        }
       } catch (error) {
         setTests((current) => ({
           ...current,
@@ -402,34 +588,293 @@ function renderPage(ctx) {
     })();
   };
   const rows = knownProviders({ ...configured, ...draft }, published);
-  const save = (id, field2, value) => {
-    void writeConfig(ctx, [{ op: "set", path: ["providers", id, field2], value }]).then(() => {
-      note(`\u5DF2\u4FDD\u5B58 ${id}.${field2} = ${JSON.stringify(value)}`);
-    }).catch((error) => {
-      note(`\u4FDD\u5B58\u5931\u8D25 ${id}.${field2}\uFF1A${error?.message ?? error}`);
-      setDraft((current) => {
-        const next = { ...current };
-        delete next[id];
-        return next;
+  const save = (key, path, label, value, onRefused) => {
+    const pending = pendingWrites.get(key);
+    if (pending !== void 0) clearTimeout(pending.timer);
+    const timer = setTimeout(() => {
+      pendingWrites.delete(key);
+      void writeConfig(ctx, [{ op: "set", path, value }]).then(() => {
+        note(`\u5DF2\u4FDD\u5B58 ${label} = ${JSON.stringify(value)}`);
+      }).catch((error) => {
+        note(`\u4FDD\u5B58\u5931\u8D25 ${label}\uFF1A${error?.message ?? error}`);
+        onRefused();
       });
+    }, WRITE_DELAY_MS);
+    pendingWrites.set(key, { timer });
+  };
+  const rollbackRouteField = (id, field2) => {
+    setDraft((current) => {
+      const entry = current[id];
+      if (entry === void 0 || entry[field2] === void 0) return current;
+      const nextEntry = { ...entry };
+      delete nextEntry[field2];
+      const next = { ...current };
+      if (Object.keys(nextEntry).length === 0) delete next[id];
+      else next[id] = nextEntry;
+      return next;
     });
   };
   const bind = (id, field2) => (value) => {
     edit(id, field2, value);
-    save(id, field2, value);
+    save(
+      `${id}\0${field2}`,
+      ["providers", id, field2],
+      `${id}.${field2}`,
+      value,
+      () => rollbackRouteField(id, field2)
+    );
+  };
+  const bindDefault = (field2) => (value) => {
+    editDefault(field2, value);
+    save(`\0default\0${field2}`, ["defaultProxy", field2], `defaultProxy.${field2}`, value, () => {
+      setDefaultDraft((current) => {
+        if (current[field2] === void 0) return current;
+        const next = { ...current };
+        delete next[field2];
+        return next;
+      });
+    });
+  };
+  const saveMany = (key, ops, label, onRefused) => {
+    const pending = pendingWrites.get(key);
+    if (pending !== void 0) clearTimeout(pending.timer);
+    const timer = setTimeout(() => {
+      pendingWrites.delete(key);
+      void writeConfig(ctx, ops).then(() => {
+        note(`\u5DF2\u4FDD\u5B58 ${label}`);
+      }).catch((error) => {
+        note(`\u4FDD\u5B58\u5931\u8D25 ${label}\uFF1A${error?.message ?? error}`);
+        onRefused();
+      });
+    }, WRITE_DELAY_MS);
+    pendingWrites.set(key, { timer });
+  };
+  const rollbackRouteFields = (id, fields) => {
+    setDraft((current) => {
+      const entry = current[id];
+      if (entry === void 0) return current;
+      const nextEntry = { ...entry };
+      for (const field2 of fields) delete nextEntry[field2];
+      const next = { ...current };
+      if (Object.keys(nextEntry).length === 0) delete next[id];
+      else next[id] = nextEntry;
+      return next;
+    });
+  };
+  const applyCardUrl = (id, parts) => {
+    setDraft((current) => ({ ...current, [id]: { ...current[id], ...parts } }));
+    const fields = Object.keys(parts);
+    saveMany(
+      `${id}\0*paste`,
+      fields.map((field2) => ({ op: "set", path: ["providers", id, field2], value: parts[field2] })),
+      `${id}.*\uFF08\u7C98\u8D34\u4EE3\u7406 URL\uFF09`,
+      () => rollbackRouteFields(id, fields)
+    );
+  };
+  const applyDefaultUrl = (parts) => {
+    setDefaultDraft((current) => ({ ...current, ...parts }));
+    const fields = Object.keys(parts);
+    saveMany(
+      "\0default\0*paste",
+      fields.map((field2) => ({ op: "set", path: ["defaultProxy", field2], value: parts[field2] })),
+      "\u9ED8\u8BA4\u4EE3\u7406\uFF08\u7C98\u8D34\u4EE3\u7406 URL\uFF09",
+      () => {
+        setDefaultDraft((current) => {
+          const next = { ...current };
+          for (const field2 of fields) delete next[field2];
+          return next;
+        });
+      }
+    );
+  };
+  const promoteToDefault = (id) => {
+    const route = view({ ...configured[id], ...draft[id] });
+    applyDefaultUrl({
+      protocol: route.protocol,
+      host: route.host.trim(),
+      port: route.port,
+      username: route.username,
+      password: route.password
+    });
+  };
+  const applyDefaultToAll = () => {
+    const ids = rows.map((row) => row.id);
+    if (ids.length === 0) return;
+    setDraft((current) => {
+      const next = { ...current };
+      for (const id of ids) next[id] = { ...next[id], useDefault: true };
+      return next;
+    });
+    saveMany(
+      "\0default\0applyAll",
+      ids.map((id) => ({ op: "set", path: ["providers", id, "useDefault"], value: true })),
+      "\u6240\u6709 provider \u7684 useDefault",
+      () => setDraft((current) => {
+        const next = { ...current };
+        for (const id of ids) {
+          const entry = next[id];
+          if (entry === void 0 || entry.useDefault === void 0) continue;
+          const nextEntry = { ...entry };
+          delete nextEntry.useDefault;
+          if (Object.keys(nextEntry).length === 0) delete next[id];
+          else next[id] = nextEntry;
+        }
+        return next;
+      })
+    );
+  };
+  const onProxyUrlPaste = (apply2) => (event) => {
+    const text = event?.clipboardData?.getData?.("text");
+    if (typeof text !== "string") return;
+    const parts = splitProxyUrl(text);
+    if (parts === void 0) return;
+    event.preventDefault?.();
+    apply2(parts);
   };
-  const field = (label, control, hint) => h(
+  const field = (label, control, hint, hintError) => h(
     "label",
     { className: import_client.default.field, style: S.field, key: label },
     h("span", { className: import_client.default.label, style: S.label }, label),
     control,
     hint === void 0 ? null : h(
       "span",
-      { className: import_client.default.hint, style: { gridColumn: "2", fontSize: "11px" } },
+      {
+        className: import_client.default.hint,
+        style: {
+          gridColumn: "2",
+          fontSize: "11px",
+          // A warning that a value can never work is an answer, not
+          // decoration — same rule as the failed self-check text.
+          ...hintError === true ? { color: "var(--dsw-alias-state-error-primary, #f85149)" } : {}
+        }
+      },
       hint
     )
   );
-  const body = rows.length === 0 ? [
+  const storedDefault = snapshot.value?.defaultProxy ?? {};
+  const defaultView = view({ ...storedDefault, ...defaultDraft });
+  const defaultWhy = defaultProxyProblem(defaultView);
+  const defaultUsable = defaultWhy === void 0;
+  const defaultOrigin = `${defaultView.protocol}://${defaultView.host}:${defaultView.port}`;
+  const defaultBlock = h(
+    "div",
+    { className: import_client.default.defaultCard, style: S.defaultCard, key: "default-proxy" },
+    h(
+      "header",
+      { className: import_client.default.cardHead, style: S.head },
+      h(
+        "div",
+        { className: import_client.default.cardTitles, style: S.titles },
+        h("span", { className: import_client.default.name, style: S.name }, t.defaultTitle)
+      ),
+      h(
+        "span",
+        {
+          className: defaultUsable ? import_client.default.pillOn : import_client.default.pillOff,
+          style: { ...S.pill, ...defaultUsable ? S.pillOn : S.pillOff }
+        },
+        defaultUsable ? t.on : t.off
+      )
+    ),
+    h("p", { className: import_client.default.defaultLead, style: S.defaultLead }, t.defaultLead),
+    field(
+      t.protocol,
+      h(
+        "select",
+        {
+          className: import_client.default.input,
+          style: S.input,
+          value: defaultView.protocol,
+          onChange: (event) => bindDefault("protocol")(event.target.value)
+        },
+        ...PROTOCOLS.map(
+          (protocol) => h("option", { key: protocol, value: protocol }, protocol.toUpperCase())
+        )
+      )
+    ),
+    field(
+      t.host,
+      h("input", {
+        className: import_client.default.input,
+        style: S.input,
+        placeholder: "127.0.0.1",
+        value: defaultView.host,
+        onChange: (event) => bindDefault("host")(event.target.value),
+        // Same convenience as the cards: a full URL fills the whole block.
+        onPaste: onProxyUrlPaste(applyDefaultUrl)
+      }),
+      t.hostHint
+    ),
+    field(
+      t.port,
+      h("input", {
+        className: import_client.default.input,
+        style: S.input,
+        type: "number",
+        min: 1,
+        max: 65535,
+        placeholder: "7890",
+        value: defaultView.port === 0 ? "" : String(defaultView.port),
+        onChange: (event) => {
+          const parsed = Number.parseInt(event.target.value, 10);
+          bindDefault("port")(Number.isNaN(parsed) ? 0 : parsed);
+        }
+      })
+    ),
+    field(
+      t.username,
+      h("input", {
+        className: import_client.default.input,
+        style: S.input,
+        autocomplete: "off",
+        value: defaultView.username,
+        onChange: (event) => bindDefault("username")(event.target.value)
+      })
+    ),
+    field(
+      t.password,
+      h("input", {
+        className: import_client.default.input,
+        style: S.input,
+        type: "password",
+        autocomplete: "off",
+        value: defaultView.password,
+        onChange: (event) => bindDefault("password")(event.target.value)
+      }),
+      t.passwordHintProxy
+    ),
+    // Bulk opt-in, in ONE write: a per-card walk would rebuild the table N times.
+    // Disabled while the default is unusable, because pointing every card at an
+    // empty endpoint would just refuse them all.
+    h(
+      "div",
+      { style: S.testRow, key: "default:apply" },
+      h(
+        "button",
+        {
+          className: import_client.default.testButton,
+          style: S.testButton,
+          type: "button",
+          disabled: !defaultUsable || rows.length === 0,
+          onClick: applyDefaultToAll
+        },
+        t.applyDefaultAll
+      )
+    )
+  );
+  const query = filter.trim().toLowerCase();
+  const shown = query.length === 0 ? rows : rows.filter((row) => `${row.id} ${row.name}`.toLowerCase().includes(query));
+  const filterRow = rows.length === 0 ? null : field(
+    t.filterLabel,
+    h("input", {
+      className: import_client.default.input,
+      style: S.input,
+      placeholder: t.filterPlaceholder,
+      value: filter,
+      onChange: (event) => setFilter(event.target.value)
+    })
+  );
+  const body = shown.length === 0 ? [
     h(
       "p",
       {
@@ -445,57 +890,18 @@ function renderPage(ctx) {
           color: "var(--dsw-alias-state-idle-primary)"
         }
       },
-      t.empty
+      query.length > 0 ? t.noMatch : t.empty
     )
-  ] : rows.map((row) => {
+  ] : shown.map((row) => {
     const route = view({ ...configured[row.id], ...draft[row.id] });
-    const disabled = !route.enabled;
+    const lastText = lastUseText(row.id) ?? (route.enabled ? t.noRecord : void 0);
     const result = tests[row.id];
-    return h(
-      "section",
-      {
-        className: route.enabled ? import_client.default.cardActive : import_client.default.card,
-        style: route.enabled ? { ...S.card, ...S.cardActive } : S.card,
-        key: row.id
-      },
-      h(
-        "header",
-        { className: import_client.default.cardHead, style: S.head },
-        h(
-          "div",
-          { className: import_client.default.cardTitles, style: S.titles },
-          h("span", { className: import_client.default.name, style: S.name }, row.name),
-          h("span", { className: import_client.default.id, style: S.id }, row.id),
-          // A disabled route can never have hits, so "0" there would only add
-          // noise; the count shows once the route is on (or has counted).
-          route.enabled || (hits[row.id] ?? 0) > 0 ? h(
-            "span",
-            { className: import_client.default.hits, style: S.hits },
-            `${t.hitCountPrefix}${hits[row.id] ?? 0}${t.hitCountSuffix}`
-          ) : null
-        ),
-        h(
-          "span",
-          {
-            className: route.enabled ? import_client.default.pillOn : row.live ? import_client.default.pillLive : import_client.default.pillOff,
-            style: {
-              ...S.pill,
-              ...route.enabled ? S.pillOn : row.live ? S.pillLive : S.pillOff
-            }
-          },
-          route.enabled ? t.on : row.live ? t.live : t.off
-        )
-      ),
-      h(
-        "label",
-        { className: import_client.default.toggle, style: S.toggle },
-        h("input", {
-          type: "checkbox",
-          checked: route.enabled,
-          onChange: (event) => bind(row.id, "enabled")(event.target.checked === true)
-        }),
-        h("span", null, t.useProxy)
-      ),
+    const onlyDead = deadRuleEntries(route.onlyHosts);
+    const bypassDead = deadRuleEntries(route.bypassHosts);
+    const useDefault = route.useDefault === true;
+    const endpointStored = route.useDefault ? defaultUsable : route.host.trim().length > 0 && Number.isInteger(route.port) && route.port >= 1 && route.port <= 65535;
+    const showTest = route.enabled || endpointStored;
+    const endpointFields = [
       field(
         t.protocol,
         h(
@@ -503,7 +909,6 @@ function renderPage(ctx) {
           {
             className: import_client.default.input,
             style: S.input,
-            disabled,
             value: route.protocol,
             onChange: (event) => bind(row.id, "protocol")(event.target.value)
           },
@@ -518,10 +923,11 @@ function renderPage(ctx) {
         h("input", {
           className: import_client.default.input,
           style: S.input,
-          disabled,
           placeholder: "127.0.0.1",
           value: route.host,
-          onChange: (event) => bind(row.id, "host")(event.target.value)
+          onChange: (event) => bind(row.id, "host")(event.target.value),
+          // A pasted full proxy URL fills every transport field at once.
+          onPaste: onProxyUrlPaste((parts) => applyCardUrl(row.id, parts))
         }),
         t.hostHint
       ),
@@ -530,7 +936,6 @@ function renderPage(ctx) {
         h("input", {
           className: import_client.default.input,
           style: S.input,
-          disabled,
           type: "number",
           min: 1,
           max: 65535,
@@ -547,13 +952,12 @@ function renderPage(ctx) {
         h("input", {
           className: import_client.default.input,
           style: S.input,
-          disabled,
           autocomplete: "off",
           value: route.username,
           onChange: (event) => bind(row.id, "username")(event.target.value)
         })
       ),
-      // Every transport accepts a password now: SOCKS5 hands it to
+      // Every transport accepts a password: SOCKS5 hands it to
       // Socks5ProxyAgent as an option, HTTP/HTTPS embed it in the proxy URL
       // userinfo (undici turns that into Proxy-Authorization). It is stored on
       // the route, so it lands in the settings file with the rest of the
@@ -563,19 +967,106 @@ function renderPage(ctx) {
         h("input", {
           className: import_client.default.input,
           style: S.input,
-          disabled,
           type: "password",
           autocomplete: "off",
           value: route.password,
           onChange: (event) => bind(row.id, "password")(event.target.value)
         }),
         route.protocol === "socks5" ? t.passwordHint : t.passwordHintProxy
+      )
+    ];
+    return h(
+      "section",
+      {
+        className: route.enabled ? import_client.default.cardActive : import_client.default.card,
+        style: route.enabled ? { ...S.card, ...S.cardActive } : S.card,
+        key: row.id
+      },
+      h(
+        "header",
+        { className: import_client.default.cardHead, style: S.head },
+        h(
+          "div",
+          { className: import_client.default.cardTitles, style: S.titles },
+          h("span", { className: import_client.default.name, style: S.name }, row.name),
+          h("span", { className: import_client.default.id, style: S.id }, row.id),
+          // A disabled route can never have hits, so "0" there would only add
+          // noise; the count shows once the route is on (or has counted).
+          route.enabled || (hits[row.id] ?? 0) > 0 ? h(
+            "span",
+            { style: S.hits },
+            `${t.hitCountPrefix}${hits[row.id] ?? 0}${t.hitCountSuffix}`
+          ) : null,
+          // The last-use line. A failure takes the error colour, same rule as
+          // a failed self-check: it is an answer, not decoration.
+          lastText === void 0 ? null : h(
+            "span",
+            {
+              style: {
+                ...S.hits,
+                ...lastUse[row.id]?.ok === false ? S.inheritWarning : {}
+              }
+            },
+            lastText
+          )
+        ),
+        h(
+          "span",
+          {
+            className: route.enabled ? import_client.default.pillOn : row.live ? import_client.default.pillLive : import_client.default.pillOff,
+            style: {
+              ...S.pill,
+              ...route.enabled ? S.pillOn : row.live ? S.pillLive : S.pillOff
+            }
+          },
+          route.enabled ? t.on : row.live ? t.live : t.off
+        )
+      ),
+      h(
+        "label",
+        { className: import_client.default.toggle, style: S.toggle },
+        h("input", {
+          type: "checkbox",
+          checked: route.enabled,
+          onChange: (event) => bind(row.id, "enabled")(event.target.checked === true)
+        }),
+        h("span", null, t.useProxy)
+      ),
+      // Opting into the shared endpoint. The card then shows the address it
+      // will actually use — or, when the default is not configured, why the
+      // route is refused — instead of a set of empty inputs the user never
+      // filled and cannot interpret.
+      h(
+        "label",
+        { className: import_client.default.toggle, style: S.toggle, key: `${row.id}:usedefault` },
+        h("input", {
+          type: "checkbox",
+          checked: useDefault,
+          onChange: (event) => bind(row.id, "useDefault")(event.target.checked === true)
+        }),
+        h("span", null, t.useDefault)
       ),
-      // The self-check only makes sense for a route that is ON; a disabled
-      // route is not in the Host's table, so there is nothing to test.
-      route.enabled ? h(
+      ...useDefault ? [
+        h(
+          "p",
+          {
+            key: `${row.id}:inherit`,
+            style: defaultUsable ? S.inheritNote : S.inheritWarning
+          },
+          defaultUsable ? `${t.inheritingDefault}${defaultOrigin}` : `${t.defaultMissing}${defaultWhy}`
+        )
+      ] : endpointFields,
+      // The self-check is offered whenever there is something to check: an
+      // enabled route (the Host's table carries it, and a rejected one still
+      // reports WHY), or a disabled one whose endpoint is already complete —
+      // the Host builds that one for the check alone. A disabled route with
+      // no endpoint has nothing to test and would only answer "not enabled".
+      showTest ? h(
         "div",
-        { className: import_client.default.testRow, style: S.testRow, key: `${row.id}:test` },
+        { style: S.testRow, key: `${row.id}:test` },
+        // A check on a route that is still off is a trial run, and it says
+        // so — otherwise the result reads as though the route were live.
+        route.enabled ? null : h("span", { style: S.testResult }, t.testDisabledNote),
         h(
           "button",
           {
@@ -589,7 +1080,7 @@ function renderPage(ctx) {
         ),
         result?.pending === false ? h(
           "span",
-          { className: import_client.default.testResult, style: S.testResult },
+          { style: S.testResult },
           result.ok === true ? [
             // Only the latency carries the band colour; the exit IP
             // stays in the secondary label colour.
@@ -598,38 +1089,66 @@ function renderPage(ctx) {
               { key: "lat", style: { color: latencyColor(result.ms) } },
               `\u2713 ${typeof result.ms === "number" ? result.ms : "\u2014"} ms`
             ),
-            result.ip === void 0 ? null : ` \xB7 ${t.exitIpLabel}${result.ip}`
-          ] : `\u2717 ${result.error}`
+            result.ip === void 0 ? null : ` \xB7 ${t.exitIpLabel}${result.ip}`,
+            result.direct === true ? ` \xB7 ${t.directLabel}` : null
+          ] : h("span", { key: "err", style: S.testFailure }, `\u2717 ${result.error}`)
+        ) : null,
+        // Promote this card's endpoint to the shared default. Offered only
+        // when the card carries its OWN endpoint: an inheriting card would
+        // just be copying the default onto itself.
+        endpointStored && !useDefault ? h(
+          "button",
+          {
+            className: import_client.default.testButton,
+            style: S.testButton,
+            type: "button",
+            onClick: () => promoteToDefault(row.id)
+          },
+          t.setAsDefault
         ) : null
       ) : null,
       // Target-host rules, collapsed so the common case stays one short card.
       h(
         "details",
-        { className: import_client.default.advanced, style: S.advanced, key: `${row.id}:rules` },
-        h("summary", { className: import_client.default.advancedSummary, style: S.advancedSummary }, t.advanced),
+        { style: S.advanced, key: `${row.id}:rules` },
+        h("summary", { style: S.advancedSummary }, t.advanced),
         field(
           t.onlyHosts,
           h("input", {
             className: import_client.default.input,
             style: S.input,
-            disabled,
             placeholder: "api.example.com",
             value: route.onlyHosts,
             onChange: (event) => bind(row.id, "onlyHosts")(event.target.value)
           }),
-          t.onlyHostsHint
+          onlyDead.length === 0 ? t.onlyHostsHint : `${t.ruleDeadHint}${onlyDead.join("\u3001")}`,
+          onlyDead.length > 0
         ),
         field(
           t.bypassHosts,
           h("input", {
             className: import_client.default.input,
             style: S.input,
-            disabled,
             placeholder: "localhost",
             value: route.bypassHosts,
             onChange: (event) => bind(row.id, "bypassHosts")(event.target.value)
           }),
-          t.bypassHostsHint
+          bypassDead.length === 0 ? t.bypassHostsHint : `${t.ruleDeadHint}${bypassDead.join("\u3001")}`,
+          bypassDead.length > 0
+        ),
+        // The self-check target: empty uses the top-level testUrl, set makes
+        // this card's Test request this URL — a real upstream proves the whole
+        // path, not just the proxy hop.
+        field(
+          t.testTarget,
+          h("input", {
+            className: import_client.default.input,
+            style: S.input,
+            placeholder: "https://api.example.com",
+            value: route.testTarget,
+            onChange: (event) => bind(row.id, "testTarget")(event.target.value)
+          }),
+          t.testTargetHint
         )
       )
     );
@@ -638,6 +1157,8 @@ function renderPage(ctx) {
     "div",
     { className: import_client.default.root, style: S.root },
     h("p", { className: import_client.default.lead, style: { margin: "0 0 4px", fontSize: "12px", lineHeight: "1.6", color: "var(--dsw-alias-label-secondary)" } }, t.lead),
+    defaultBlock,
+    filterRow,
     ...body,
     h(
       "details",
@@ -653,38 +1174,71 @@ function renderPage(ctx) {
           color: "var(--dsw-alias-label-secondary)"
         }
       },
-      h("summary", { className: import_client.default.diagSummary }, t.diagnostics),
+      // The count is the only visible signal while the panel is collapsed: a
+      // rejected route is not a page that refuses to render, it is one that
+      // quietly does nothing.
+      h(
+        "summary",
+        { className: import_client.default.diagSummary },
+        problemCount === 0 ? t.diagnostics : `${t.diagnostics} (${problemCount})`
+      ),
       h(
         "ul",
         { className: import_client.default.diagList, style: { margin: "6px 0 0", paddingLeft: "18px" } },
-        ...diagnostics.length === 0 ? [h("li", { key: "none" }, t.diagPending)] : diagnostics.map((line, index) => h("li", { key: `d${index}` }, line))
+        ...problemCount === 0 && diagnostics.length === 0 ? [h("li", { key: "none" }, t.diagPending)] : [
+          ...problemLines,
+          ...diagnostics.map((line, index) => h("li", { key: `d${index}` }, line))
+        ]
       )
     )
   );
 }
 var EN = {
-  lead: "Route selected model providers through your own forward proxy. Other providers stay direct.",
+  lead: "Route selected model providers through your own forward proxy. Other providers stay direct. Requests to loopback or private addresses (localhost, 127.x, private ranges) always go direct \u2014 a forward proxy cannot reach your own machine.",
   empty: "No providers found yet.",
   useProxy: "Use a proxy for this provider",
+  useDefault: "Use the default proxy",
+  defaultTitle: "Default proxy",
+  defaultLead: 'One endpoint, reused by every provider that turns on "Use the default proxy".',
+  inheritingDefault: "Using the default proxy: ",
+  defaultMissing: "The default proxy cannot be used, so this provider is not proxied: ",
+  filterLabel: "Filter",
+  filterPlaceholder: "Filter by name or id\u2026",
+  noMatch: "No provider matches the filter.",
+  setAsDefault: "Set as the default proxy",
+  applyDefaultAll: "Use the default proxy for all providers",
   protocol: "Type",
   host: "IP / host",
   port: "Port",
   username: "Username",
   password: "Password",
-  hostHint: "Host or IP only, without scheme or path.",
+  hostHint: "Host or IP only, without scheme or path. A full proxy URL (socks5://user:pass@host:1080) can be pasted instead \u2014 it is split into the fields.",
   passwordHint: "Sent to the SOCKS5 proxy for authentication; stored with this setting.",
   passwordHintProxy: "Sent to the proxy as an authentication password; stored with this setting.",
   hitCountPrefix: "",
   hitCountSuffix: " proxied",
+  recentOk: "last ok ",
+  recentFail: "last failure ",
+  recentStarted: "last call ",
+  noRecord: "no proxied request yet",
+  justNow: "just now",
+  minutesAgo: " min ago",
+  hoursAgo: " h ago",
+  daysAgo: " d ago",
   testButton: "Test",
   testRunning: "Testing\u2026",
+  testDisabledNote: "Not enabled \u2014 test only: ",
   testFailed: "Test failed",
   exitIpLabel: "exit IP ",
+  directLabel: "direct (not through the proxy)",
   advanced: "Advanced: target host rules",
   onlyHosts: "Proxy only",
   onlyHostsHint: "Comma/space separated; when set, only requests to these hosts are proxied (suffix match, * for all).",
   bypassHosts: "Bypass",
   bypassHostsHint: "Comma/space separated; requests to these hosts go direct, taking priority.",
+  ruleDeadHint: "These entries never match \u2014 rules take host names only, without scheme or path: ",
+  testTarget: "Self-check target",
+  testTargetHint: "Empty uses the top-level testUrl; when set, this card's Test requests this URL instead \u2014 point it at a real upstream to verify the end-to-end path.",
   socks5Hint: "SOCKS5 tunnels the connection; the proxy resolves the target host name.",
   on: "proxied",
   live: "active",
@@ -693,28 +1247,51 @@ var EN = {
   diagPending: "(collecting\u2026)"
 };
 var ZH = {
-  lead: "\u8BA9\u6307\u5B9A\u7684 provider \u8D70\u4F60\u81EA\u5DF1\u7684\u6B63\u5411\u4EE3\u7406\uFF0C\u5176\u5B83 provider \u4FDD\u6301\u76F4\u8FDE\u3002",
+  lead: "\u8BA9\u6307\u5B9A\u7684 provider \u8D70\u4F60\u81EA\u5DF1\u7684\u6B63\u5411\u4EE3\u7406\uFF0C\u5176\u5B83 provider \u4FDD\u6301\u76F4\u8FDE\u3002\u6307\u5411\u672C\u673A\u6216\u5185\u7F51\u5730\u5740\uFF08localhost\u3001127.x\u3001\u79C1\u6709\u7F51\u6BB5\uFF09\u7684\u8BF7\u6C42\u59CB\u7EC8\u76F4\u8FDE\u2014\u2014\u6B63\u5411\u4EE3\u7406\u591F\u4E0D\u5230\u4F60\u81EA\u5DF1\u7684\u673A\u5668\u3002",
   empty: "\u6CA1\u6709\u68C0\u6D4B\u5230\u4EFB\u4F55 provider\u3002",
   useProxy: "\u4E3A\u8BE5 provider \u542F\u7528\u4EE3\u7406",
+  useDefault: "\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406",
+  defaultTitle: "\u9ED8\u8BA4\u4EE3\u7406",
+  defaultLead: "\u4E3A\u52FE\u9009\u300C\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406\u300D\u7684 provider \u590D\u7528\u7684\u7AEF\u70B9\uFF0C\u53EA\u586B\u4E00\u6B21\u3002",
+  inheritingDefault: "\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406\uFF1A",
+  defaultMissing: "\u9876\u5C42\u9ED8\u8BA4\u4EE3\u7406\u4E0D\u53EF\u7528\uFF0C\u8BE5 provider \u4E0D\u4F1A\u8D70\u4EE3\u7406\uFF1A",
+  filterLabel: "\u8FC7\u6EE4",
+  filterPlaceholder: "\u6309\u540D\u79F0\u6216 id \u8FC7\u6EE4\u2026",
+  noMatch: "\u6CA1\u6709\u5339\u914D\u7684 provider\u3002",
+  setAsDefault: "\u8BBE\u4E3A\u9ED8\u8BA4\u4EE3\u7406",
+  applyDefaultAll: "\u6240\u6709 provider \u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406",
   protocol: "\u7C7B\u578B",
   host: "IP / \u4E3B\u673A",
   port: "\u7AEF\u53E3",
   username: "\u7528\u6237\u540D",
   password: "\u5BC6\u7801",
-  hostHint: "\u53EA\u586B\u4E3B\u673A\u540D\u6216 IP\uFF0C\u4E0D\u8981\u5E26\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84\u3002",
+  hostHint: "\u53EA\u586B\u4E3B\u673A\u540D\u6216 IP\uFF0C\u4E0D\u8981\u5E26\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84\uFF1B\u4E5F\u53EF\u4EE5\u76F4\u63A5\u7C98\u8D34\u5B8C\u6574\u4EE3\u7406 URL\uFF08\u5982 socks5://user:pass@host:1080\uFF09\uFF0C\u4F1A\u81EA\u52A8\u62C6\u5206\u5230\u5404\u5B57\u6BB5\u3002",
   passwordHint: "\u4EC5\u4F5C\u4E3A SOCKS5 \u8BA4\u8BC1\u53E3\u4EE4\u53D1\u9001\u7ED9\u4EE3\u7406\uFF1B\u968F\u8BE5\u8BBE\u7F6E\u4E00\u8D77\u4FDD\u5B58\u3002",
   passwordHintProxy: "\u4F5C\u4E3A\u4EE3\u7406\u8BA4\u8BC1\u53E3\u4EE4\u53D1\u9001\u7ED9\u4EE3\u7406\uFF1B\u968F\u8BE5\u8BBE\u7F6E\u4E00\u8D77\u4FDD\u5B58\u3002",
   hitCountPrefix: "\u5DF2\u4EE3\u7406 ",
   hitCountSuffix: " \u6B21",
+  recentOk: "\u6700\u8FD1\u6210\u529F ",
+  recentFail: "\u6700\u8FD1\u5931\u8D25 ",
+  recentStarted: "\u6700\u8FD1\u8C03\u7528 ",
+  noRecord: "\u5C1A\u65E0\u4EE3\u7406\u8BB0\u5F55",
+  justNow: "\u521A\u521A",
+  minutesAgo: " \u5206\u949F\u524D",
+  hoursAgo: " \u5C0F\u65F6\u524D",
+  daysAgo: " \u5929\u524D",
   testButton: "\u6D4B\u8BD5",
   testRunning: "\u6D4B\u8BD5\u4E2D\u2026",
+  testDisabledNote: "\u672A\u542F\u7528\uFF0C\u4EC5\u6D4B\u8BD5\uFF1A",
   testFailed: "\u6D4B\u8BD5\u5931\u8D25",
   exitIpLabel: "\u51FA\u53E3 IP ",
+  directLabel: "\u76F4\u8FDE\uFF08\u672A\u7ECF\u8FC7\u4EE3\u7406\uFF09",
   advanced: "\u9AD8\u7EA7\uFF1A\u76EE\u6807\u57DF\u540D\u89C4\u5219",
   onlyHosts: "\u4EC5\u8D70\u4EE3\u7406",
   onlyHostsHint: "\u9017\u53F7\u6216\u7A7A\u683C\u5206\u9694\uFF1B\u975E\u7A7A\u65F6\u53EA\u6709\u5339\u914D\u8FD9\u4E9B\u4E3B\u673A\u7684\u8BF7\u6C42\u8D70\u4EE3\u7406\uFF08\u540E\u7F00\u5339\u914D\uFF0C* \u8868\u793A\u5168\u90E8\uFF09\u3002",
   bypassHosts: "\u76F4\u8FDE",
   bypassHostsHint: "\u9017\u53F7\u6216\u7A7A\u683C\u5206\u9694\uFF1B\u5339\u914D\u8FD9\u4E9B\u4E3B\u673A\u7684\u8BF7\u6C42\u76F4\u8FDE\uFF0C\u4F18\u5148\u4E8E\u4E0A\u4E00\u9879\u3002",
+  ruleDeadHint: "\u4EE5\u4E0B\u6761\u76EE\u6C38\u8FDC\u5339\u914D\u4E0D\u4E0A\u2014\u2014\u89C4\u5219\u53EA\u8BA4\u4E3B\u673A\u540D\uFF0C\u4E0D\u8981\u5E26\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84\uFF1A",
+  testTarget: "\u81EA\u68C0\u76EE\u6807",
+  testTargetHint: "\u7559\u7A7A\u7528\u9876\u5C42 testUrl\uFF1B\u586B\u5199\u540E\u8BE5\u5361\u7247\u7684\u300C\u6D4B\u8BD5\u300D\u6539\u4E3A\u8BF7\u6C42\u8FD9\u4E2A\u5730\u5740\uFF0C\u53EF\u62FF\u771F\u5B9E\u4E0A\u6E38\u9A8C\u8BC1\u7AEF\u5230\u7AEF\u8DEF\u5F84\u3002",
   socks5Hint: "SOCKS5 \u4F1A\u5EFA\u7ACB\u96A7\u9053\uFF0C\u76EE\u6807\u57DF\u540D\u7531\u4EE3\u7406\u7AEF\u89E3\u6790\u3002",
   on: "\u8D70\u4EE3\u7406",
   live: "\u542F\u7528\u4E2D",