dsh-provider-proxy 0.4.1 → 0.5.1

package/lib/client.js

@@ -39,13 +39,13 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var require_client = __commonJS({
   "src/client.css"(exports, module2) {
     "use strict";
-    var __dshMap = { "root": "6d45ff27_root", "lead": "57c30143_lead", "empty": "b6600f2d_empty", "card": "0ba90fef_card", "cardActive": "923630a9_cardActive", "cardHead": "5af7e7c3_cardHead", "cardTitles": "8448919c_cardTitles", "name": "0b023e00_name", "id": "ffa6a1c5_id", "pillOn": "85972c09_pillOn", "pillLive": "d3644cdc_pillLive", "pillOff": "592bd7b2_pillOff", "toggle": "9efc135e_toggle", "field": "93a03683_field", "label": "0bd1d3ec_label", "hint": "52d56786_hint", "input": "f6748c5e_input", "testButton": "eb3b08bd_testButton", "diag": "4d4b11ef_diag", "diagSummary": "2e565ce0_diagSummary", "diagList": "fb9c7553_diagList" };
+    var __dshMap = { "root": "bcf3ba25_root", "lead": "86cd7a9a_lead", "empty": "4ec3d74d_empty", "card": "61dfce67_card", "cardActive": "56b6c433_cardActive", "cardRejected": "24b300e2_cardRejected", "defaultCard": "665ef72b_defaultCard", "defaultLead": "351db191_defaultLead", "cardHead": "9ee651d9_cardHead", "cardTitles": "bb118443_cardTitles", "name": "a1b940d4_name", "id": "1870f756_id", "pillOn": "e9cfdcad_pillOn", "pillLive": "3d3b7405_pillLive", "pillOff": "a517f862_pillOff", "pillRejected": "3e11f4ea_pillRejected", "toggle": "31ab2dc8_toggle", "field": "52ffb01c_field", "label": "b8d05488_label", "hint": "d8b3bd46_hint", "input": "0b74e44b_input", "testButton": "47b71ed7_testButton", "diag": "f395d2a5_diag", "diagSummary": "84895b20_diagSummary", "diagList": "9ecca3cd_diagList" };
     var __dshStyles = globalThis.__dshPluginStyles || (globalThis.__dshPluginStyles = /* @__PURE__ */ new Set());
     if (!__dshStyles.has("dsh-provider-proxy/client.css")) {
       __dshStyles.add("dsh-provider-proxy/client.css");
       __dshStyle = document.createElement("style");
       __dshStyle.setAttribute("data-plugin-css", "dsh-provider-proxy/client.css");
-      __dshStyle.textContent = "/* dsh-provider-proxy \u2014 provider proxy settings page.\n   Tokens only: no literal colours, matching the shared --dsw-* system. */\n\n.6d45ff27_root {\n  display: flex;\n  flex-direction: column;\n  gap: 12px;\n  max-width: 640px;\n}\n\n.57c30143_lead {\n  margin: 0 0 4px;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.b6600f2d_empty {\n  margin: 0;\n  padding: 16px;\n  border: 1px dashed var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 12px;\n  text-align: center;\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- provider card ---- */\n\n.0ba90fef_card,\n.923630a9_cardActive {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n}\n\n.923630a9_cardActive {\n  border-color: var(--dsw-alias-state-success-primary);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n.5af7e7c3_cardHead {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n}\n\n.8448919c_cardTitles {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  min-width: 0;\n}\n\n.0b023e00_name {\n  overflow: hidden;\n  font-size: 13px;\n  font-weight: 600;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n  color: var(--dsw-alias-label-primary);\n}\n\n.ffa6a1c5_id {\n  flex: none;\n  padding: 1px 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-bg-layer-2);\n  font-family: ui-monospace, monospace;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n/* ---- status pill ---- */\n\n.85972c09_pillOn,\n.d3644cdc_pillLive,\n.592bd7b2_pillOff {\n  flex: none;\n  padding: 2px 8px;\n  border-radius: 999px;\n  font-size: 11px;\n  font-weight: 500;\n  white-space: nowrap;\n}\n\n.85972c09_pillOn {\n  background: var(--dsw-alias-state-success-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.d3644cdc_pillLive {\n  border: 1px solid var(--dsw-alias-border-l2);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.592bd7b2_pillOff {\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- toggle ---- */\n\n.9efc135e_toggle {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  padding-top: 2px;\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n}\n\n.9efc135e_toggle input {\n  accent-color: var(--dsw-alias-brand-primary);\n  cursor: pointer;\n}\n\n/* ---- fields ---- */\n\n.93a03683_field {\n  display: grid;\n  grid-template-columns: 96px 1fr;\n  align-items: center;\n  gap: 10px;\n  font-size: 12px;\n}\n\n.0bd1d3ec_label {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.52d56786_hint {\n  grid-column: 2;\n  margin-top: -2px;\n  font-size: 11px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.f6748c5e_input {\n  box-sizing: border-box;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 8px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  outline: none;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font: inherit;\n  font-size: 12px;\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n/* The base look of every input is INLINE too, so these three state rules only\n   ever take effect as author-important declarations \u2014 same reason as the\n   self-check button above. `cursor` has no inline base and needs none, and the\n   hover border uses `l3` because `l1`\u2192`l2` is a 4%\u219210% black step nobody can\n   see. */\n\n.f6748c5e_input:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n}\n\n.f6748c5e_input:focus {\n  border-color: var(--dsw-alias-brand-primary) !important;\n}\n\n.f6748c5e_input:disabled {\n  color: var(--dsw-alias-state-idle-primary) !important;\n  background: var(--dsw-alias-bg-layer-2) !important;\n  cursor: not-allowed;\n}\n\n/* ---- self-check ---- */\n\n/* The hover state is the one thing an inline style cannot express, which is why\n   this element carries a class at all. Layout stays inline.\n\n   Two traps, both hit before this comment existed:\n   - `!important` is load-bearing: the base border and background are INLINE, and\n     the cascade sorts a style attribute after every author rule, so a plain\n     declaration here would ship, match, and still lose.\n   - the TOKENS must be visible ones. `bg-layer-1/2/3` all resolve to\n     `neutral-bluish-00` in the light theme, so a layer swap is a no-op there, and\n     `border-l1`\u2192`l2` is 4%\u219210% black on a 1px line. The app's own hovers use\n     `interactive-bg-hover`; using it here is what makes the feedback exist. */\n.eb3b08bd_testButton {\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n.eb3b08bd_testButton:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n  background: var(--dsw-alias-interactive-bg-hover) !important;\n}\n\n/* ---- diagnostics ---- */\n\n.4d4b11ef_diag {\n  margin-top: 2px;\n  padding: 8px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.2e565ce0_diagSummary {\n  cursor: pointer;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.fb9c7553_diagList {\n  margin: 6px 0 0;\n  padding-left: 18px;\n  font-family: ui-monospace, monospace;\n  word-break: break-all;\n}\n";
+      __dshStyle.textContent = '/* dsh-provider-proxy \u2014 provider proxy settings page.\n   Tokens only: no literal colours, matching the shared --dsw-* system. */\n\n.bcf3ba25_root {\n  display: flex;\n  flex-direction: column;\n  gap: 12px;\n  max-width: 640px;\n}\n\n.86cd7a9a_lead {\n  margin: 0 0 4px;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.4ec3d74d_empty {\n  margin: 0;\n  padding: 16px;\n  border: 1px dashed var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 12px;\n  text-align: center;\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- provider card ---- */\n\n.61dfce67_card,\n.56b6c433_cardActive,\n.24b300e2_cardRejected {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n}\n\n.56b6c433_cardActive {\n  border-color: var(--dsw-alias-state-success-primary);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n/* An enabled route the Host refused: never dress it as active. */\n.24b300e2_cardRejected {\n  border-color: var(--dsw-alias-state-error-primary, #f85149);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n/* ---- shared default endpoint ---- */\n\n/* A distinct outer layer, so it reads as "one setting for the page" rather than\n   as one more provider card. */\n.665ef72b_defaultCard {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 14px 16px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n.351db191_defaultLead {\n  margin: -2px 0 0;\n  font-size: 11px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.9ee651d9_cardHead {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n}\n\n.bb118443_cardTitles {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  min-width: 0;\n}\n\n.a1b940d4_name {\n  overflow: hidden;\n  font-size: 13px;\n  font-weight: 600;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n  color: var(--dsw-alias-label-primary);\n}\n\n.1870f756_id {\n  flex: none;\n  padding: 1px 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-bg-layer-2);\n  font-family: ui-monospace, monospace;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n/* ---- status pill ---- */\n\n.e9cfdcad_pillOn,\n.3d3b7405_pillLive,\n.a517f862_pillOff,\n.3e11f4ea_pillRejected {\n  flex: none;\n  padding: 2px 8px;\n  border-radius: 999px;\n  font-size: 11px;\n  font-weight: 500;\n  white-space: nowrap;\n}\n\n.e9cfdcad_pillOn {\n  background: var(--dsw-alias-state-success-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.3d3b7405_pillLive {\n  border: 1px solid var(--dsw-alias-border-l2);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.a517f862_pillOff {\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n.3e11f4ea_pillRejected {\n  border: 1px solid var(--dsw-alias-state-error-primary, #f85149);\n  color: var(--dsw-alias-state-error-primary, #f85149);\n}\n\n/* ---- toggle ---- */\n\n.31ab2dc8_toggle {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  padding-top: 2px;\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n}\n\n.31ab2dc8_toggle input {\n  accent-color: var(--dsw-alias-brand-primary);\n  cursor: pointer;\n}\n\n/* ---- fields ---- */\n\n.52ffb01c_field {\n  display: grid;\n  grid-template-columns: 96px 1fr;\n  align-items: center;\n  gap: 10px;\n  font-size: 12px;\n}\n\n.b8d05488_label {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.d8b3bd46_hint {\n  grid-column: 2;\n  margin-top: -2px;\n  font-size: 11px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.0b74e44b_input {\n  box-sizing: border-box;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 8px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  outline: none;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font: inherit;\n  font-size: 12px;\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n/* The base look of every input is INLINE too, so these three state rules only\n   ever take effect as author-important declarations \u2014 same reason as the\n   self-check button above. `cursor` has no inline base and needs none, and the\n   hover border uses `l3` because `l1`\u2192`l2` is a 4%\u219210% black step nobody can\n   see. */\n\n.0b74e44b_input:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n}\n\n.0b74e44b_input:focus {\n  border-color: var(--dsw-alias-brand-primary) !important;\n}\n\n.0b74e44b_input:disabled {\n  color: var(--dsw-alias-state-idle-primary) !important;\n  background: var(--dsw-alias-bg-layer-2) !important;\n  cursor: not-allowed;\n}\n\n/* ---- self-check ---- */\n\n/* The hover state is the one thing an inline style cannot express, which is why\n   this element carries a class at all. Layout stays inline.\n\n   Two traps, both hit before this comment existed:\n   - `!important` is load-bearing: the base border and background are INLINE, and\n     the cascade sorts a style attribute after every author rule, so a plain\n     declaration here would ship, match, and still lose.\n   - the TOKENS must be visible ones. `bg-layer-1/2/3` all resolve to\n     `neutral-bluish-00` in the light theme, so a layer swap is a no-op there, and\n     `border-l1`\u2192`l2` is 4%\u219210% black on a 1px line. The app\'s own hovers use\n     `interactive-bg-hover`; using it here is what makes the feedback exist. */\n.47b71ed7_testButton {\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n.47b71ed7_testButton:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n  background: var(--dsw-alias-interactive-bg-hover) !important;\n}\n\n/* ---- diagnostics ---- */\n\n.f395d2a5_diag {\n  margin-top: 2px;\n  padding: 8px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.84895b20_diagSummary {\n  cursor: pointer;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.9ecca3cd_diagList {\n  margin: 6px 0 0;\n  padding-left: 18px;\n  font-family: ui-monospace, monospace;\n  word-break: break-all;\n}\n';
       document.head.appendChild(__dshStyle);
     }
     var __dshStyle;
@@ -63,6 +63,44 @@ __export(client_exports, {
 });
 module.exports = __toCommonJS(client_exports);
 var import_client = __toESM(require_client(), 1);
+
+// src/proxy-address.ts
+var PROXY_HOST_INVALID = "\u4EE3\u7406\u5730\u5740\u53EA\u80FD\u586B IPv4\u3001IPv6 \u6216\u57DF\u540D";
+var IPV4 = /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/;
+var DOMAIN = /^(?=.*[a-z])(?=.{1,253}$)(?!.*\.\d+$)[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?)*$/i;
+var IPV6_CHARS = /^[0-9a-f:.]+$/i;
+function proxyHostProblem(rawHost) {
+  const host = (rawHost ?? "").trim().replace(/\.$/, "");
+  if (host.length === 0) return "\u672A\u586B\u5199\u4EE3\u7406\u5730\u5740";
+  if (IPV4.test(host)) return void 0;
+  if (host.includes(":") || host.startsWith("[")) {
+    const literal = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+    if (!IPV6_CHARS.test(literal)) return PROXY_HOST_INVALID;
+    try {
+      new URL(`http://[${literal}]:1`);
+      return void 0;
+    } catch {
+      return PROXY_HOST_INVALID;
+    }
+  }
+  return DOMAIN.test(host) ? void 0 : PROXY_HOST_INVALID;
+}
+function defaultProxyProblem(endpoint) {
+  const hostProblem = proxyHostProblem(endpoint.host);
+  if (hostProblem !== void 0) return hostProblem;
+  const port = endpoint.port ?? 0;
+  if (!Number.isInteger(port) || port < 1 || port > 65535) {
+    return "\u4EE3\u7406\u7AEF\u53E3\u65E0\u6548\uFF08\u9700\u4E3A 1-65535 \u7684\u6574\u6570\uFF09";
+  }
+  const hasUser = (endpoint.username ?? "").trim().length > 0;
+  const hasPassword = (endpoint.password ?? "").length > 0;
+  if (hasUser !== hasPassword) {
+    return hasUser ? "\u914D\u7F6E\u4E86\u4EE3\u7406\u7528\u6237\u540D\u4F46\u6CA1\u6709\u5BC6\u7801\uFF1B\u8BF7\u8865\u5168\u5BC6\u7801\u6216\u6E05\u7A7A\u7528\u6237\u540D" : "\u914D\u7F6E\u4E86\u4EE3\u7406\u5BC6\u7801\u4F46\u6CA1\u6709\u7528\u6237\u540D\uFF1B\u8BF7\u8865\u5168\u7528\u6237\u540D\u6216\u6E05\u7A7A\u5BC6\u7801";
+  }
+  return void 0;
+}
+
+// src/client.ts
 var ReactCache;
 function react() {
   if (ReactCache === void 0) {
@@ -88,7 +126,7 @@ function apply(ctx) {
         name: "settings.section",
         id: NAMESPACE,
         order: 20,
-        label: () => localeOf(ctx) === "zh" ? "Provider \u4EE3\u7406" : "Provider \u4EE3\u7406"
+        label: () => "Provider \u4EE3\u7406"
       },
       () => renderPage(ctx)
     )
@@ -149,12 +187,15 @@ async function writeConfig(ctx, ops) {
 }
 function knownProviders(configured, published) {
   const rows = /* @__PURE__ */ new Map();
+  const byId = /* @__PURE__ */ new Map();
   for (const row of published) {
+    byId.set(row.id, row);
     if (row.live) rows.set(row.id, row);
   }
-  for (const [id, route] of Object.entries(configured)) {
+  for (const id of Object.keys(configured)) {
     if (rows.has(id)) continue;
-    rows.set(id, { id, name: id, live: route?.enabled === true });
+    const known = byId.get(id);
+    rows.set(id, { id, name: known?.name ?? id, live: known?.live === true });
   }
   return [...rows.values()].sort(byName);
 }
@@ -175,11 +216,24 @@ function testResultFrom(body, strings) {
     ok,
     ms: typeof body?.ms === "number" && Number.isFinite(body.ms) ? body.ms : void 0,
     ip: typeof body?.exitIp === "string" && body.exitIp.length > 0 ? body.exitIp : void 0,
+    // The Host probes a target the way routing would: a loopback/private upstream
+    // (or a bypassHosts match) is reached DIRECT, not through the proxy. The card
+    // says so, so a green check is not read as "the proxy works".
+    direct: body?.viaProxy === false,
     error: ok ? void 0 : typeof body?.error === "string" && body.error.length > 0 ? body.error : strings.testFailed
   };
 }
 var catalogueSetter = () => {
 };
+function relativeTime(at, t) {
+  const seconds = Math.max(0, Math.round((Date.now() - at) / 1e3));
+  if (seconds < 60) return t.justNow;
+  const minutes = Math.floor(seconds / 60);
+  if (minutes < 60) return `${minutes}${t.minutesAgo}`;
+  const hours = Math.floor(minutes / 60);
+  if (hours < 24) return `${hours}${t.hoursAgo}`;
+  return `${Math.floor(hours / 24)}${t.daysAgo}`;
+}
 async function fetchCatalog() {
   const response = await globalThis.fetch(CATALOG_PATH, { headers: { accept: "application/json" } });
   if (!response.ok) throw new Error(`Host answered ${response.status}`);
@@ -204,21 +258,133 @@ async function fetchCatalog() {
       if (typeof message === "string" && message.length > 0) problems[id] = message;
     }
   }
-  return { rows, hits, problems };
+  const lastUse = {};
+  const publishedLastUse = body?.lastUse;
+  if (publishedLastUse !== null && typeof publishedLastUse === "object") {
+    for (const [id, raw] of Object.entries(publishedLastUse)) {
+      const entry = raw;
+      if (entry === null || typeof entry !== "object") continue;
+      const at = typeof entry.at === "number" && Number.isFinite(entry.at) ? entry.at : void 0;
+      const startedAt = typeof entry.startedAt === "number" && Number.isFinite(entry.startedAt) ? entry.startedAt : void 0;
+      if (at === void 0 && startedAt === void 0) continue;
+      lastUse[id] = {
+        ...startedAt === void 0 ? {} : { startedAt },
+        ...at === void 0 ? {} : { at },
+        ...typeof entry.ok === "boolean" ? { ok: entry.ok } : {},
+        ...typeof entry.code === "string" && entry.code.length > 0 ? { code: entry.code } : {}
+      };
+    }
+  }
+  return { rows, hits, problems, lastUse };
+}
+var CATALOG_REFRESH_MS = 1e4;
+var catalogPoll;
+var catalogTouchedAt = 0;
+function touchCatalogPolling() {
+  catalogTouchedAt = Date.now();
+  if (catalogPoll !== void 0) return;
+  catalogPoll = setInterval(() => {
+    if (Date.now() - catalogTouchedAt > CATALOG_REFRESH_MS * 2 + 1e3) {
+      clearInterval(catalogPoll);
+      catalogPoll = void 0;
+      return;
+    }
+    void fetchCatalog().then((catalog) => catalogueSetter?.(catalog)).catch(() => void 0);
+  }, CATALOG_REFRESH_MS);
 }
 var byName = (a, b) => a.name.localeCompare(b.name);
+function deadRuleEntries(raw) {
+  return raw.split(/[,\s]+/).map((entry) => entry.trim()).filter((entry) => /^[a-z][a-z0-9+.-]*:\/\//i.test(entry) || entry.includes("/"));
+}
 function view(route) {
   return {
     enabled: route?.enabled === true,
+    useDefault: route?.useDefault === true,
     protocol: PROTOCOLS.includes(route?.protocol) ? route.protocol : "http",
     host: route?.host ?? "",
     port: route?.port ?? 0,
     username: route?.username ?? "",
     password: route?.password ?? "",
     onlyHosts: route?.onlyHosts ?? "",
-    bypassHosts: route?.bypassHosts ?? ""
+    bypassHosts: route?.bypassHosts ?? "",
+    testTarget: route?.testTarget ?? ""
   };
 }
+function unbracket(hostname) {
+  return hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
+}
+function explicitPortOf(text) {
+  const authority = text.slice(text.indexOf("://") + 3).split(/[/?#]/, 1)[0];
+  const hostPort = authority.slice(authority.lastIndexOf("@") + 1);
+  const match = /^\[[^\]]+\]:(\d+)$/.exec(hostPort) ?? /^[^:]+:(\d+)$/.exec(hostPort);
+  if (match === null) return 0;
+  const port = Number.parseInt(match[1], 10);
+  return Number.isNaN(port) ? 0 : port;
+}
+function splitProxyUrl(text) {
+  const trimmed = text.trim();
+  if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed)) return void 0;
+  let url;
+  try {
+    url = new URL(trimmed);
+  } catch {
+    return void 0;
+  }
+  const scheme = url.protocol.slice(0, -1).toLowerCase();
+  const protocol = scheme === "socks" ? "socks5" : scheme;
+  if (!PROTOCOLS.includes(protocol)) return void 0;
+  if (url.hostname.length === 0) return void 0;
+  const decode = (value) => {
+    try {
+      return decodeURIComponent(value);
+    } catch {
+      return value;
+    }
+  };
+  const parsedPort = url.port.length > 0 ? Number.parseInt(url.port, 10) : explicitPortOf(trimmed);
+  return {
+    protocol,
+    host: unbracket(url.hostname),
+    port: Number.isNaN(parsedPort) ? 0 : parsedPort,
+    username: decode(url.username),
+    password: decode(url.password)
+  };
+}
+var WRITE_DELAY_MS = 300;
+var pendingWrites = /* @__PURE__ */ new Map();
+var writeQueue = Promise.resolve();
+function enqueueWrite(run) {
+  const next = writeQueue.then(run, run);
+  writeQueue = next.catch(() => void 0);
+  return next;
+}
+function scheduleWrite(key, run) {
+  const pending = pendingWrites.get(key);
+  if (pending?.timer !== void 0) clearTimeout(pending.timer);
+  const entry = {
+    flush: () => {
+      if (entry.timer !== void 0) clearTimeout(entry.timer);
+      pendingWrites.delete(key);
+      return enqueueWrite(run);
+    }
+  };
+  entry.timer = setTimeout(() => {
+    void entry.flush();
+  }, WRITE_DELAY_MS);
+  pendingWrites.set(key, entry);
+}
+var testGeneration = /* @__PURE__ */ new Map();
+var TEST_RELEVANT_FIELDS = /* @__PURE__ */ new Set([
+  "protocol",
+  "host",
+  "port",
+  "username",
+  "password",
+  "onlyHosts",
+  "bypassHosts",
+  "testTarget",
+  "useDefault"
+]);
 var diagnostics = [];
 function note(message) {
   if (!diagnostics.includes(message)) diagnostics.push(message);
@@ -244,6 +410,11 @@ var S = {
     borderColor: "var(--dsw-alias-state-success-primary)",
     background: "var(--dsw-alias-bg-layer-2)"
   },
+  /** An enabled route the Host refused: active-looking styling would be a lie. */
+  cardRejected: {
+    borderColor: "var(--dsw-alias-state-error-primary, #f85149)",
+    background: "var(--dsw-alias-bg-layer-2)"
+  },
   head: {
     display: "flex",
     alignItems: "center",
@@ -334,6 +505,44 @@ var S = {
     color: "var(--dsw-alias-label-secondary)"
   },
   pillOff: { color: "var(--dsw-alias-state-idle-primary)" },
+  pillRejected: {
+    border: "1px solid var(--dsw-alias-state-error-primary, #f85149)",
+    color: "var(--dsw-alias-state-error-primary, #f85149)"
+  },
+  /**
+   * The shared default endpoint sits on its own layer so it reads as global
+   * rather than as one more provider card — the mistake it exists to prevent is
+   * a user typing the same address into every card.
+   */
+  defaultCard: {
+    display: "flex",
+    flexDirection: "column",
+    gap: "10px",
+    padding: "14px 16px",
+    border: "1px solid var(--dsw-alias-border-l2)",
+    borderRadius: "10px",
+    background: "var(--dsw-alias-bg-layer-2)"
+  },
+  defaultLead: {
+    margin: "-2px 0 0",
+    fontSize: "11px",
+    lineHeight: "1.5",
+    color: "var(--dsw-alias-label-secondary)"
+  },
+  inheritNote: {
+    margin: "0",
+    fontSize: "11px",
+    lineHeight: "1.5",
+    color: "var(--dsw-alias-label-secondary)"
+  },
+  /** The default is not configured: an answer, so it takes the error colour. */
+  inheritWarning: {
+    margin: "0",
+    fontSize: "11px",
+    lineHeight: "1.5",
+    fontWeight: "500",
+    color: "var(--dsw-alias-state-error-primary, #f85149)"
+  },
   toggle: {
     display: "flex",
     alignItems: "center",
@@ -382,19 +591,42 @@ function renderPage(ctx) {
   const [state, setState] = (React.useState ?? ((fn) => [fn(), () => {
   }]))(() => {
     void fetchCatalog().then((catalog) => catalogueSetter?.(catalog)).catch((error) => {
-      note(`provider \u5217\u8868\u83B7\u53D6\u5931\u8D25\uFF1A${error?.message ?? error}`);
-      catalogueSetter?.({ rows: [], hits: {}, problems: {} });
+      catalogueSetter?.({
+        rows: [],
+        hits: {},
+        problems: {},
+        lastUse: {},
+        error: String(error?.message ?? error)
+      });
     });
     return {
       rows: void 0,
       hits: {},
       problems: {},
+      lastUse: {},
+      error: void 0,
       pending: true
     };
   });
-  catalogueSetter = (catalog) => setState({ rows: catalog.rows, hits: catalog.hits, problems: catalog.problems, pending: false });
+  catalogueSetter = (catalog) => setState({
+    rows: catalog.rows,
+    hits: catalog.hits,
+    problems: catalog.problems,
+    lastUse: catalog.lastUse,
+    error: catalog.error,
+    pending: false
+  });
+  touchCatalogPolling();
   const published = state.rows ?? [];
   const hits = state.hits ?? {};
+  const lastUse = state.lastUse ?? {};
+  const lastUseText = (id) => {
+    const use = lastUse[id];
+    if (use === void 0) return void 0;
+    if (use.ok === true) return `${t.recentOk}${relativeTime(use.at ?? use.startedAt ?? Date.now(), t)}`;
+    if (use.ok === false) return `${t.recentFail}${use.code ?? "ERROR"}`;
+    return `${t.recentStarted}${relativeTime(use.startedAt ?? use.at ?? Date.now(), t)}`;
+  };
   const problems = state.problems ?? {};
   const problemLines = Object.entries(problems).map(
     ([id, message]) => h("li", { key: `p:${id}`, style: S.diagProblem }, `${id}\uFF1A${message}`)
@@ -406,20 +638,52 @@ function renderPage(ctx) {
   const [draft, setDraft] = (React.useState ?? ((v) => [v, () => {
   }]))({});
   const edit = (id, field2, value) => setDraft((current) => ({ ...current, [id]: { ...current[id], [field2]: value } }));
+  const [defaultDraft, setDefaultDraft] = (React.useState ?? ((v) => [v, () => {
+  }]))({});
+  const editDefault = (field2, value) => setDefaultDraft((current) => ({ ...current, [field2]: value }));
   const [tests, setTests] = (React.useState ?? ((v) => [v, () => {
   }]))({});
+  const invalidateTests = (ids) => {
+    if (ids.length === 0) return;
+    for (const id of ids) {
+      testGeneration.set(id, (testGeneration.get(id) ?? 0) + 1);
+    }
+    setTests((current) => {
+      let changed = false;
+      const next = { ...current };
+      for (const id of ids) {
+        if (next[id] === void 0) continue;
+        delete next[id];
+        changed = true;
+      }
+      return changed ? next : current;
+    });
+  };
+  const [filter, setFilter] = (React.useState ?? ((v) => [v, () => {
+  }]))("");
   const runTest = (id) => {
+    const generation = (testGeneration.get(id) ?? 0) + 1;
+    testGeneration.set(id, generation);
     setTests((current) => ({ ...current, [id]: { pending: true } }));
     void (async () => {
       try {
+        for (const [key, entry] of [...pendingWrites]) {
+          if (key.startsWith(`${id}\0`) || key.startsWith("\0default\0")) {
+            void entry.flush();
+          }
+        }
+        await writeQueue;
+        if (testGeneration.get(id) !== generation) return;
         const response = await globalThis.fetch(TEST_PATH, {
           method: "POST",
           headers: { "content-type": "application/json", accept: "application/json" },
           body: JSON.stringify({ provider: id })
         });
         const body2 = await response.json();
+        if (testGeneration.get(id) !== generation) return;
         setTests((current) => ({ ...current, [id]: testResultFrom(body2, t) }));
       } catch (error) {
+        if (testGeneration.get(id) !== generation) return;
         setTests((current) => ({
           ...current,
           [id]: { pending: false, ok: false, error: String(error?.message ?? error) }
@@ -428,34 +692,301 @@ function renderPage(ctx) {
     })();
   };
   const rows = knownProviders({ ...configured, ...draft }, published);
-  const save = (id, field2, value) => {
-    void writeConfig(ctx, [{ op: "set", path: ["providers", id, field2], value }]).then(() => {
-      note(`\u5DF2\u4FDD\u5B58 ${id}.${field2} = ${JSON.stringify(value)}`);
-    }).catch((error) => {
-      note(`\u4FDD\u5B58\u5931\u8D25 ${id}.${field2}\uFF1A${error?.message ?? error}`);
-      setDraft((current) => {
+  const inheritingIds = () => rows.filter((row) => view({ ...configured[row.id], ...draft[row.id] }).useDefault === true).map((row) => row.id);
+  const save = (key, path, label, value, onRefused) => {
+    scheduleWrite(
+      key,
+      () => writeConfig(ctx, [{ op: "set", path, value }]).then(() => {
+        note(`\u5DF2\u4FDD\u5B58 ${label} = ${JSON.stringify(value)}`);
+      }).catch((error) => {
+        note(`\u4FDD\u5B58\u5931\u8D25 ${label}\uFF1A${error?.message ?? error}`);
+        onRefused();
+      })
+    );
+  };
+  const rollbackRouteField = (id, field2) => {
+    setDraft((current) => {
+      const entry = current[id];
+      if (entry === void 0 || entry[field2] === void 0) return current;
+      const nextEntry = { ...entry };
+      delete nextEntry[field2];
+      const next = { ...current };
+      if (Object.keys(nextEntry).length === 0) delete next[id];
+      else next[id] = nextEntry;
+      return next;
+    });
+  };
+  const bind = (id, field2) => (value) => {
+    edit(id, field2, value);
+    if (TEST_RELEVANT_FIELDS.has(field2)) invalidateTests([id]);
+    save(
+      `${id}\0${field2}`,
+      ["providers", id, field2],
+      `${id}.${field2}`,
+      value,
+      () => rollbackRouteField(id, field2)
+    );
+  };
+  const bindDefault = (field2) => (value) => {
+    editDefault(field2, value);
+    invalidateTests(inheritingIds());
+    save(`\0default\0${field2}`, ["defaultProxy", field2], `defaultProxy.${field2}`, value, () => {
+      setDefaultDraft((current) => {
+        if (current[field2] === void 0) return current;
         const next = { ...current };
-        delete next[id];
+        delete next[field2];
         return next;
       });
     });
   };
-  const bind = (id, field2) => (value) => {
-    edit(id, field2, value);
-    save(id, field2, value);
+  const saveMany = (key, ops, label, onRefused) => {
+    scheduleWrite(
+      key,
+      () => writeConfig(ctx, ops).then(() => {
+        note(`\u5DF2\u4FDD\u5B58 ${label}`);
+      }).catch((error) => {
+        note(`\u4FDD\u5B58\u5931\u8D25 ${label}\uFF1A${error?.message ?? error}`);
+        onRefused();
+      })
+    );
+  };
+  const rollbackRouteFields = (id, fields) => {
+    setDraft((current) => {
+      const entry = current[id];
+      if (entry === void 0) return current;
+      const nextEntry = { ...entry };
+      for (const field2 of fields) delete nextEntry[field2];
+      const next = { ...current };
+      if (Object.keys(nextEntry).length === 0) delete next[id];
+      else next[id] = nextEntry;
+      return next;
+    });
+  };
+  const applyCardUrl = (id, parts) => {
+    setDraft((current) => ({ ...current, [id]: { ...current[id], ...parts } }));
+    invalidateTests([id]);
+    const fields = Object.keys(parts);
+    saveMany(
+      `${id}\0*paste`,
+      fields.map((field2) => ({ op: "set", path: ["providers", id, field2], value: parts[field2] })),
+      `${id}.*\uFF08\u7C98\u8D34\u4EE3\u7406 URL\uFF09`,
+      () => rollbackRouteFields(id, fields)
+    );
+  };
+  const applyDefaultUrl = (parts) => {
+    setDefaultDraft((current) => ({ ...current, ...parts }));
+    invalidateTests(inheritingIds());
+    const fields = Object.keys(parts);
+    saveMany(
+      "\0default\0*paste",
+      fields.map((field2) => ({ op: "set", path: ["defaultProxy", field2], value: parts[field2] })),
+      "\u9ED8\u8BA4\u4EE3\u7406\uFF08\u7C98\u8D34\u4EE3\u7406 URL\uFF09",
+      () => {
+        setDefaultDraft((current) => {
+          const next = { ...current };
+          for (const field2 of fields) delete next[field2];
+          return next;
+        });
+      }
+    );
+  };
+  const promoteToDefault = (id) => {
+    const route = view({ ...configured[id], ...draft[id] });
+    applyDefaultUrl({
+      protocol: route.protocol,
+      host: route.host.trim(),
+      port: route.port,
+      username: route.username,
+      password: route.password
+    });
+  };
+  const applyDefaultToAll = () => {
+    const ids = rows.map((row) => row.id);
+    if (ids.length === 0) return;
+    setDraft((current) => {
+      const next = { ...current };
+      for (const id of ids) next[id] = { ...next[id], useDefault: true };
+      return next;
+    });
+    invalidateTests(ids);
+    saveMany(
+      "\0default\0applyAll",
+      ids.map((id) => ({ op: "set", path: ["providers", id, "useDefault"], value: true })),
+      "\u6240\u6709 provider \u7684 useDefault",
+      () => setDraft((current) => {
+        const next = { ...current };
+        for (const id of ids) {
+          const entry = next[id];
+          if (entry === void 0 || entry.useDefault === void 0) continue;
+          const nextEntry = { ...entry };
+          delete nextEntry.useDefault;
+          if (Object.keys(nextEntry).length === 0) delete next[id];
+          else next[id] = nextEntry;
+        }
+        return next;
+      })
+    );
+  };
+  const onProxyUrlPaste = (apply2) => (event) => {
+    const text = event?.clipboardData?.getData?.("text");
+    if (typeof text !== "string") return;
+    const parts = splitProxyUrl(text);
+    if (parts === void 0) return;
+    event.preventDefault?.();
+    apply2(parts);
   };
-  const field = (label, control, hint) => h(
+  const field = (label, control, hint, hintError) => h(
     "label",
     { className: import_client.default.field, style: S.field, key: label },
     h("span", { className: import_client.default.label, style: S.label }, label),
     control,
     hint === void 0 ? null : h(
       "span",
-      { className: import_client.default.hint, style: { gridColumn: "2", fontSize: "11px" } },
+      {
+        className: import_client.default.hint,
+        style: {
+          gridColumn: "2",
+          fontSize: "11px",
+          // A warning that a value can never work is an answer, not
+          // decoration — same rule as the failed self-check text.
+          ...hintError === true ? { color: "var(--dsw-alias-state-error-primary, #f85149)" } : {}
+        }
+      },
       hint
     )
   );
-  const body = rows.length === 0 ? [
+  const storedDefault = snapshot.value?.defaultProxy ?? {};
+  const defaultView = view({ ...storedDefault, ...defaultDraft });
+  const defaultWhy = defaultProxyProblem(defaultView);
+  const defaultHostWhy = defaultView.host.trim().length === 0 ? void 0 : proxyHostProblem(defaultView.host);
+  const defaultComplete = defaultWhy === void 0;
+  const defaultOrigin = `${defaultView.protocol}://${defaultView.host}:${defaultView.port}`;
+  const defaultBlock = h(
+    "div",
+    { className: import_client.default.defaultCard, style: S.defaultCard, key: "default-proxy" },
+    h(
+      "header",
+      { className: import_client.default.cardHead, style: S.head },
+      h(
+        "div",
+        { className: import_client.default.cardTitles, style: S.titles },
+        h("span", { className: import_client.default.name, style: S.name }, t.defaultTitle)
+      ),
+      h(
+        "span",
+        {
+          className: defaultComplete ? import_client.default.pillOn : import_client.default.pillOff,
+          style: { ...S.pill, ...defaultComplete ? S.pillOn : S.pillOff }
+        },
+        defaultComplete ? t.complete : t.notConfigured
+      )
+    ),
+    h("p", { className: import_client.default.defaultLead, style: S.defaultLead }, t.defaultLead),
+    field(
+      t.protocol,
+      h(
+        "select",
+        {
+          className: import_client.default.input,
+          style: S.input,
+          value: defaultView.protocol,
+          onChange: (event) => bindDefault("protocol")(event.target.value)
+        },
+        ...PROTOCOLS.map(
+          (protocol) => h("option", { key: protocol, value: protocol }, protocol.toUpperCase())
+        )
+      )
+    ),
+    field(
+      t.host,
+      h("input", {
+        className: import_client.default.input,
+        style: S.input,
+        placeholder: "127.0.0.1",
+        value: defaultView.host,
+        onChange: (event) => bindDefault("host")(event.target.value),
+        // Same convenience as the cards: a full URL fills the whole block.
+        onPaste: onProxyUrlPaste(applyDefaultUrl)
+      }),
+      defaultHostWhy ?? t.hostHint,
+      defaultHostWhy !== void 0
+    ),
+    field(
+      t.port,
+      h("input", {
+        className: import_client.default.input,
+        style: S.input,
+        type: "number",
+        min: 1,
+        max: 65535,
+        placeholder: "7890",
+        value: defaultView.port === 0 ? "" : String(defaultView.port),
+        onChange: (event) => {
+          const parsed = Number.parseInt(event.target.value, 10);
+          bindDefault("port")(Number.isNaN(parsed) ? 0 : parsed);
+        }
+      })
+    ),
+    field(
+      t.username,
+      h("input", {
+        className: import_client.default.input,
+        style: S.input,
+        autocomplete: "off",
+        value: defaultView.username,
+        onChange: (event) => bindDefault("username")(event.target.value)
+      })
+    ),
+    field(
+      t.password,
+      h("input", {
+        className: import_client.default.input,
+        style: S.input,
+        type: "password",
+        autocomplete: "off",
+        value: defaultView.password,
+        onChange: (event) => bindDefault("password")(event.target.value)
+      }),
+      t.passwordHintProxy
+    ),
+    // Bulk opt-in, in ONE write: a per-card walk would rebuild the table N times.
+    // Disabled while the default configuration is incomplete, because pointing every card at an
+    // empty endpoint would just refuse them all.
+    h(
+      "div",
+      { style: S.testRow, key: "default:apply" },
+      h(
+        "button",
+        {
+          className: import_client.default.testButton,
+          style: S.testButton,
+          type: "button",
+          disabled: !defaultComplete || rows.length === 0,
+          onClick: applyDefaultToAll
+        },
+        t.applyDefaultAll
+      )
+    )
+  );
+  const query = filter.trim().toLowerCase();
+  const shown = query.length === 0 ? rows : rows.filter((row) => `${row.id} ${row.name}`.toLowerCase().includes(query));
+  const filterRow = rows.length === 0 ? null : field(
+    t.filterLabel,
+    h("input", {
+      className: import_client.default.input,
+      style: S.input,
+      placeholder: t.filterPlaceholder,
+      value: filter,
+      onChange: (event) => setFilter(event.target.value)
+    })
+  );
+  const catalogueStatus = rows.length === 0 ? state.pending ? { text: t.catalogueLoading, error: false } : state.error !== void 0 ? { text: `${t.catalogueError}${state.error}`, error: true } : void 0 : void 0;
+  const catalogueNotice = state.error !== void 0 && rows.length > 0 ? h(
+    "p",
+    { key: "catalogue-error", style: S.inheritWarning },
+    `${t.catalogueStale}${state.error}`
+  ) : null;
+  const body = shown.length === 0 ? [
     h(
       "p",
       {
@@ -468,60 +999,29 @@ function renderPage(ctx) {
           borderRadius: "8px",
           fontSize: "12px",
           textAlign: "center",
-          color: "var(--dsw-alias-state-idle-primary)"
+          color: catalogueStatus?.error === true ? "var(--dsw-alias-state-error-primary, #f85149)" : "var(--dsw-alias-state-idle-primary)",
+          ...catalogueStatus?.error === true ? { fontWeight: "500" } : {}
         }
       },
-      t.empty
+      catalogueStatus?.text ?? (query.length > 0 ? t.noMatch : t.empty)
     )
-  ] : rows.map((row) => {
+  ] : shown.map((row) => {
     const route = view({ ...configured[row.id], ...draft[row.id] });
-    const disabled = !route.enabled;
+    const lastText = lastUseText(row.id) ?? (route.enabled ? t.noRecord : void 0);
     const result = tests[row.id];
-    return h(
-      "section",
-      {
-        className: route.enabled ? import_client.default.cardActive : import_client.default.card,
-        style: route.enabled ? { ...S.card, ...S.cardActive } : S.card,
-        key: row.id
-      },
-      h(
-        "header",
-        { className: import_client.default.cardHead, style: S.head },
-        h(
-          "div",
-          { className: import_client.default.cardTitles, style: S.titles },
-          h("span", { className: import_client.default.name, style: S.name }, row.name),
-          h("span", { className: import_client.default.id, style: S.id }, row.id),
-          // A disabled route can never have hits, so "0" there would only add
-          // noise; the count shows once the route is on (or has counted).
-          route.enabled || (hits[row.id] ?? 0) > 0 ? h(
-            "span",
-            { style: S.hits },
-            `${t.hitCountPrefix}${hits[row.id] ?? 0}${t.hitCountSuffix}`
-          ) : null
-        ),
-        h(
-          "span",
-          {
-            className: route.enabled ? import_client.default.pillOn : row.live ? import_client.default.pillLive : import_client.default.pillOff,
-            style: {
-              ...S.pill,
-              ...route.enabled ? S.pillOn : row.live ? S.pillLive : S.pillOff
-            }
-          },
-          route.enabled ? t.on : row.live ? t.live : t.off
-        )
-      ),
-      h(
-        "label",
-        { className: import_client.default.toggle, style: S.toggle },
-        h("input", {
-          type: "checkbox",
-          checked: route.enabled,
-          onChange: (event) => bind(row.id, "enabled")(event.target.checked === true)
-        }),
-        h("span", null, t.useProxy)
-      ),
+    const onlyDead = deadRuleEntries(route.onlyHosts);
+    const bypassDead = deadRuleEntries(route.bypassHosts);
+    const useDefault = route.useDefault === true;
+    const endpointStored = route.useDefault ? defaultComplete : route.host.trim().length > 0 && Number.isInteger(route.port) && route.port >= 1 && route.port <= 65535;
+    const showTest = route.enabled || endpointStored;
+    const problemText = (() => {
+      const recorded = problems[row.id];
+      if (recorded !== void 0) return recorded;
+      if (useDefault) return defaultComplete ? void 0 : `${t.defaultMissing}${defaultWhy}`;
+      return route.enabled ? defaultProxyProblem(route) : void 0;
+    })();
+    const rejected = route.enabled && problemText !== void 0;
+    const endpointFields = [
       field(
         t.protocol,
         h(
@@ -529,7 +1029,6 @@ function renderPage(ctx) {
           {
             className: import_client.default.input,
             style: S.input,
-            disabled,
             value: route.protocol,
             onChange: (event) => bind(row.id, "protocol")(event.target.value)
           },
@@ -544,10 +1043,11 @@ function renderPage(ctx) {
         h("input", {
           className: import_client.default.input,
           style: S.input,
-          disabled,
           placeholder: "127.0.0.1",
           value: route.host,
-          onChange: (event) => bind(row.id, "host")(event.target.value)
+          onChange: (event) => bind(row.id, "host")(event.target.value),
+          // A pasted full proxy URL fills every transport field at once.
+          onPaste: onProxyUrlPaste((parts) => applyCardUrl(row.id, parts))
         }),
         t.hostHint
       ),
@@ -556,7 +1056,6 @@ function renderPage(ctx) {
         h("input", {
           className: import_client.default.input,
           style: S.input,
-          disabled,
           type: "number",
           min: 1,
           max: 65535,
@@ -573,13 +1072,12 @@ function renderPage(ctx) {
         h("input", {
           className: import_client.default.input,
           style: S.input,
-          disabled,
           autocomplete: "off",
           value: route.username,
           onChange: (event) => bind(row.id, "username")(event.target.value)
         })
       ),
-      // Every transport accepts a password now: SOCKS5 hands it to
+      // Every transport accepts a password: SOCKS5 hands it to
       // Socks5ProxyAgent as an option, HTTP/HTTPS embed it in the proxy URL
       // userinfo (undici turns that into Proxy-Authorization). It is stored on
       // the route, so it lands in the settings file with the rest of the
@@ -589,19 +1087,93 @@ function renderPage(ctx) {
         h("input", {
           className: import_client.default.input,
           style: S.input,
-          disabled,
           type: "password",
           autocomplete: "off",
           value: route.password,
           onChange: (event) => bind(row.id, "password")(event.target.value)
         }),
         route.protocol === "socks5" ? t.passwordHint : t.passwordHintProxy
+      )
+    ];
+    const pill = rejected ? { className: import_client.default.pillRejected, style: { ...S.pill, ...S.pillRejected }, text: t.rejected } : route.enabled ? { className: import_client.default.pillOn, style: { ...S.pill, ...S.pillOn }, text: t.on } : { className: import_client.default.pillLive, style: { ...S.pill, ...S.pillLive }, text: t.off };
+    return h(
+      "section",
+      {
+        className: rejected ? import_client.default.cardRejected : route.enabled ? import_client.default.cardActive : import_client.default.card,
+        style: rejected ? { ...S.card, ...S.cardRejected } : route.enabled ? { ...S.card, ...S.cardActive } : S.card,
+        key: row.id
+      },
+      h(
+        "header",
+        { className: import_client.default.cardHead, style: S.head },
+        h(
+          "div",
+          { className: import_client.default.cardTitles, style: S.titles },
+          h("span", { className: import_client.default.name, style: S.name }, row.name),
+          h("span", { className: import_client.default.id, style: S.id }, row.id),
+          // A disabled route can never have hits, so "0" there would only add
+          // noise; the count shows once the route is on (or has counted).
+          route.enabled || (hits[row.id] ?? 0) > 0 ? h(
+            "span",
+            { style: S.hits },
+            `${t.hitCountPrefix}${hits[row.id] ?? 0}${t.hitCountSuffix}`
+          ) : null,
+          // The last-use line. A failure takes the error colour, same rule as
+          // a failed self-check: it is an answer, not decoration.
+          lastText === void 0 ? null : h(
+            "span",
+            {
+              style: {
+                ...S.hits,
+                ...lastUse[row.id]?.ok === false ? S.inheritWarning : {}
+              }
+            },
+            lastText
+          )
+        ),
+        h("span", { className: pill.className, style: pill.style }, pill.text)
       ),
-      // The self-check only makes sense for a route that is ON; a disabled
-      // route is not in the Host's table, so there is nothing to test.
-      route.enabled ? h(
+      h(
+        "label",
+        { className: import_client.default.toggle, style: S.toggle },
+        h("input", {
+          type: "checkbox",
+          checked: route.enabled,
+          onChange: (event) => bind(row.id, "enabled")(event.target.checked === true)
+        }),
+        h("span", null, t.useProxy)
+      ),
+      // Opting into the shared endpoint. The card then shows the address it
+      // will actually use — or, when the default is not configured, why the
+      // route is refused — instead of a set of empty inputs the user never
+      // filled and cannot interpret.
+      h(
+        "label",
+        { className: import_client.default.toggle, style: S.toggle, key: `${row.id}:usedefault` },
+        h("input", {
+          type: "checkbox",
+          checked: useDefault,
+          onChange: (event) => bind(row.id, "useDefault")(event.target.checked === true)
+        }),
+        h("span", null, t.useDefault)
+      ),
+      problemText !== void 0 ? h("p", { key: `${row.id}:problem`, style: S.inheritWarning }, problemText) : useDefault ? h(
+        "p",
+        { key: `${row.id}:inherit`, style: S.inheritNote },
+        `${t.inheritingDefault}${defaultOrigin}`
+      ) : null,
+      ...useDefault ? [] : endpointFields,
+      // The self-check is offered whenever there is something to check: an
+      // enabled route (the Host's table carries it, and a rejected one still
+      // reports WHY), or a disabled one whose endpoint is already complete —
+      // the Host builds that one for the check alone. A disabled route with
+      // no endpoint has nothing to test and would only answer "not enabled".
+      showTest ? h(
         "div",
         { style: S.testRow, key: `${row.id}:test` },
+        // A check on a route that is still off is a trial run, and it says
+        // so — otherwise the result reads as though the route were live.
+        route.enabled ? null : h("span", { style: S.testResult }, t.testDisabledNote),
         h(
           "button",
           {
@@ -624,8 +1196,22 @@ function renderPage(ctx) {
               { key: "lat", style: { color: latencyColor(result.ms) } },
               `\u2713 ${typeof result.ms === "number" ? result.ms : "\u2014"} ms`
             ),
-            result.ip === void 0 ? null : ` \xB7 ${t.exitIpLabel}${result.ip}`
+            result.ip === void 0 ? null : ` \xB7 ${t.exitIpLabel}${result.ip}`,
+            result.direct === true ? ` \xB7 ${t.directLabel}` : null
           ] : h("span", { key: "err", style: S.testFailure }, `\u2717 ${result.error}`)
+        ) : null,
+        // Promote this card's endpoint to the shared default. Offered only
+        // when the card carries its OWN endpoint: an inheriting card would
+        // just be copying the default onto itself.
+        endpointStored && !useDefault ? h(
+          "button",
+          {
+            className: import_client.default.testButton,
+            style: S.testButton,
+            type: "button",
+            onClick: () => promoteToDefault(row.id)
+          },
+          t.setAsDefault
         ) : null
       ) : null,
       // Target-host rules, collapsed so the common case stays one short card.
@@ -638,24 +1224,38 @@ function renderPage(ctx) {
           h("input", {
             className: import_client.default.input,
             style: S.input,
-            disabled,
             placeholder: "api.example.com",
             value: route.onlyHosts,
             onChange: (event) => bind(row.id, "onlyHosts")(event.target.value)
           }),
-          t.onlyHostsHint
+          onlyDead.length === 0 ? t.onlyHostsHint : `${t.ruleDeadHint}${onlyDead.join("\u3001")}`,
+          onlyDead.length > 0
         ),
         field(
           t.bypassHosts,
           h("input", {
             className: import_client.default.input,
             style: S.input,
-            disabled,
             placeholder: "localhost",
             value: route.bypassHosts,
             onChange: (event) => bind(row.id, "bypassHosts")(event.target.value)
           }),
-          t.bypassHostsHint
+          bypassDead.length === 0 ? t.bypassHostsHint : `${t.ruleDeadHint}${bypassDead.join("\u3001")}`,
+          bypassDead.length > 0
+        ),
+        // The self-check target: empty uses the top-level testUrl, set makes
+        // this card's Test request this URL — a real upstream proves the whole
+        // path, not just the proxy hop.
+        field(
+          t.testTarget,
+          h("input", {
+            className: import_client.default.input,
+            style: S.input,
+            placeholder: "https://api.example.com",
+            value: route.testTarget,
+            onChange: (event) => bind(row.id, "testTarget")(event.target.value)
+          }),
+          t.testTargetHint
         )
       )
     );
@@ -664,6 +1264,9 @@ function renderPage(ctx) {
     "div",
     { className: import_client.default.root, style: S.root },
     h("p", { className: import_client.default.lead, style: { margin: "0 0 4px", fontSize: "12px", lineHeight: "1.6", color: "var(--dsw-alias-label-secondary)" } }, t.lead),
+    defaultBlock,
+    catalogueNotice,
+    filterRow,
     ...body,
     h(
       "details",
@@ -699,62 +1302,118 @@ function renderPage(ctx) {
   );
 }
 var EN = {
-  lead: "Route selected model providers through your own forward proxy. Other providers stay direct.",
+  lead: "Route selected model providers through your own forward proxy. Other providers stay direct. Requests to loopback or private addresses (localhost, 127.x, private ranges) go direct by default; set the top-level localDirect to false to proxy them instead \u2014 a forward proxy normally cannot reach your own machine.",
   empty: "No providers found yet.",
+  catalogueLoading: "Loading providers\u2026",
+  catalogueError: "Could not load the provider list: ",
+  catalogueStale: "Could not load the provider list; showing the saved configuration: ",
   useProxy: "Use a proxy for this provider",
+  useDefault: "Use the default proxy",
+  defaultTitle: "Default proxy",
+  defaultLead: 'One endpoint, reused by every provider that turns on "Use the default proxy". The status only reports configuration completeness; use the Test button on a card to verify reachability.',
+  inheritingDefault: "Using the default proxy: ",
+  defaultMissing: "The default proxy configuration is incomplete, so this provider is not proxied: ",
+  filterLabel: "Filter",
+  filterPlaceholder: "Filter by name or id\u2026",
+  noMatch: "No provider matches the filter.",
+  setAsDefault: "Set as the default proxy",
+  applyDefaultAll: "Use the default proxy for all providers",
   protocol: "Type",
   host: "IP / host",
   port: "Port",
   username: "Username",
   password: "Password",
-  hostHint: "Host or IP only, without scheme or path.",
+  hostHint: "Only an IPv4, IPv6, or domain name is allowed. A full proxy URL (socks5://user:pass@host:1080) can be pasted instead \u2014 it is split into the fields.",
   passwordHint: "Sent to the SOCKS5 proxy for authentication; stored with this setting.",
   passwordHintProxy: "Sent to the proxy as an authentication password; stored with this setting.",
   hitCountPrefix: "",
   hitCountSuffix: " proxied",
+  recentOk: "last ok ",
+  recentFail: "last failure ",
+  recentStarted: "last call ",
+  noRecord: "no proxied request yet",
+  justNow: "just now",
+  minutesAgo: " min ago",
+  hoursAgo: " h ago",
+  daysAgo: " d ago",
   testButton: "Test",
   testRunning: "Testing\u2026",
+  testDisabledNote: "Not enabled \u2014 test only: ",
   testFailed: "Test failed",
   exitIpLabel: "exit IP ",
+  directLabel: "direct (not through the proxy)",
   advanced: "Advanced: target host rules",
   onlyHosts: "Proxy only",
   onlyHostsHint: "Comma/space separated; when set, only requests to these hosts are proxied (suffix match, * for all).",
   bypassHosts: "Bypass",
   bypassHostsHint: "Comma/space separated; requests to these hosts go direct, taking priority.",
+  ruleDeadHint: "These entries never match \u2014 rules take host names only, without scheme or path: ",
+  testTarget: "Self-check target",
+  testTargetHint: "Empty uses the top-level testUrl; when set, this card's Test requests this URL instead \u2014 point it at a real upstream to verify the end-to-end path.",
   socks5Hint: "SOCKS5 tunnels the connection; the proxy resolves the target host name.",
   on: "proxied",
-  live: "active",
+  rejected: "config rejected",
   off: "direct",
+  complete: "complete",
+  notConfigured: "not configured",
   diagnostics: "Connection diagnostics",
   diagPending: "(collecting\u2026)"
 };
 var ZH = {
-  lead: "\u8BA9\u6307\u5B9A\u7684 provider \u8D70\u4F60\u81EA\u5DF1\u7684\u6B63\u5411\u4EE3\u7406\uFF0C\u5176\u5B83 provider \u4FDD\u6301\u76F4\u8FDE\u3002",
+  lead: "\u8BA9\u6307\u5B9A\u7684 provider \u8D70\u4F60\u81EA\u5DF1\u7684\u6B63\u5411\u4EE3\u7406\uFF0C\u5176\u5B83 provider \u4FDD\u6301\u76F4\u8FDE\u3002\u6307\u5411\u672C\u673A\u6216\u5185\u7F51\u5730\u5740\uFF08localhost\u3001127.x\u3001\u79C1\u6709\u7F51\u6BB5\uFF09\u7684\u8BF7\u6C42\u9ED8\u8BA4\u76F4\u8FDE\uFF0C\u9876\u5C42 localDirect \u8BBE\u4E3A false \u65F6\u6062\u590D\u8D70\u4EE3\u7406\u2014\u2014\u6B63\u5411\u4EE3\u7406\u901A\u5E38\u591F\u4E0D\u5230\u4F60\u81EA\u5DF1\u7684\u673A\u5668\u3002",
   empty: "\u6CA1\u6709\u68C0\u6D4B\u5230\u4EFB\u4F55 provider\u3002",
+  catalogueLoading: "\u6B63\u5728\u8BFB\u53D6 provider \u5217\u8868\u2026",
+  catalogueError: "\u8BFB\u53D6 provider \u5217\u8868\u5931\u8D25\uFF1A",
+  catalogueStale: "provider \u5217\u8868\u8BFB\u53D6\u5931\u8D25\uFF0C\u4E0B\u9762\u663E\u793A\u7684\u662F\u5DF2\u4FDD\u5B58\u7684\u914D\u7F6E\uFF1A",
   useProxy: "\u4E3A\u8BE5 provider \u542F\u7528\u4EE3\u7406",
+  useDefault: "\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406",
+  defaultTitle: "\u9ED8\u8BA4\u4EE3\u7406",
+  defaultLead: "\u4E3A\u52FE\u9009\u300C\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406\u300D\u7684 provider \u590D\u7528\u7684\u7AEF\u70B9\uFF0C\u53EA\u586B\u4E00\u6B21\u3002\u72B6\u6001\u53EA\u8868\u793A\u914D\u7F6E\u662F\u5426\u5B8C\u6574\uFF1B\u4EE3\u7406\u662F\u5426\u53EF\u8FBE\u8BF7\u7528\u5361\u7247\u4E0A\u7684\u300C\u6D4B\u8BD5\u300D\u9A8C\u8BC1\u3002",
+  inheritingDefault: "\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406\uFF1A",
+  defaultMissing: "\u9876\u5C42\u9ED8\u8BA4\u4EE3\u7406\u914D\u7F6E\u4E0D\u5B8C\u6574\uFF0C\u8BE5 provider \u4E0D\u4F1A\u8D70\u4EE3\u7406\uFF1A",
+  filterLabel: "\u8FC7\u6EE4",
+  filterPlaceholder: "\u6309\u540D\u79F0\u6216 id \u8FC7\u6EE4\u2026",
+  noMatch: "\u6CA1\u6709\u5339\u914D\u7684 provider\u3002",
+  setAsDefault: "\u8BBE\u4E3A\u9ED8\u8BA4\u4EE3\u7406",
+  applyDefaultAll: "\u6240\u6709 provider \u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406",
   protocol: "\u7C7B\u578B",
   host: "IP / \u4E3B\u673A",
   port: "\u7AEF\u53E3",
   username: "\u7528\u6237\u540D",
   password: "\u5BC6\u7801",
-  hostHint: "\u53EA\u586B\u4E3B\u673A\u540D\u6216 IP\uFF0C\u4E0D\u8981\u5E26\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84\u3002",
+  hostHint: "\u53EA\u5141\u8BB8\u586B\u5199 IPv4\u3001IPv6 \u6216\u57DF\u540D\uFF1B\u4E5F\u53EF\u4EE5\u76F4\u63A5\u7C98\u8D34\u5B8C\u6574\u4EE3\u7406 URL\uFF08\u5982 socks5://user:pass@host:1080\uFF09\uFF0C\u4F1A\u81EA\u52A8\u62C6\u5206\u5230\u5404\u5B57\u6BB5\u3002",
   passwordHint: "\u4EC5\u4F5C\u4E3A SOCKS5 \u8BA4\u8BC1\u53E3\u4EE4\u53D1\u9001\u7ED9\u4EE3\u7406\uFF1B\u968F\u8BE5\u8BBE\u7F6E\u4E00\u8D77\u4FDD\u5B58\u3002",
   passwordHintProxy: "\u4F5C\u4E3A\u4EE3\u7406\u8BA4\u8BC1\u53E3\u4EE4\u53D1\u9001\u7ED9\u4EE3\u7406\uFF1B\u968F\u8BE5\u8BBE\u7F6E\u4E00\u8D77\u4FDD\u5B58\u3002",
   hitCountPrefix: "\u5DF2\u4EE3\u7406 ",
   hitCountSuffix: " \u6B21",
+  recentOk: "\u6700\u8FD1\u6210\u529F ",
+  recentFail: "\u6700\u8FD1\u5931\u8D25 ",
+  recentStarted: "\u6700\u8FD1\u8C03\u7528 ",
+  noRecord: "\u5C1A\u65E0\u4EE3\u7406\u8BB0\u5F55",
+  justNow: "\u521A\u521A",
+  minutesAgo: " \u5206\u949F\u524D",
+  hoursAgo: " \u5C0F\u65F6\u524D",
+  daysAgo: " \u5929\u524D",
   testButton: "\u6D4B\u8BD5",
   testRunning: "\u6D4B\u8BD5\u4E2D\u2026",
+  testDisabledNote: "\u672A\u542F\u7528\uFF0C\u4EC5\u6D4B\u8BD5\uFF1A",
   testFailed: "\u6D4B\u8BD5\u5931\u8D25",
   exitIpLabel: "\u51FA\u53E3 IP ",
+  directLabel: "\u76F4\u8FDE\uFF08\u672A\u7ECF\u8FC7\u4EE3\u7406\uFF09",
   advanced: "\u9AD8\u7EA7\uFF1A\u76EE\u6807\u57DF\u540D\u89C4\u5219",
   onlyHosts: "\u4EC5\u8D70\u4EE3\u7406",
   onlyHostsHint: "\u9017\u53F7\u6216\u7A7A\u683C\u5206\u9694\uFF1B\u975E\u7A7A\u65F6\u53EA\u6709\u5339\u914D\u8FD9\u4E9B\u4E3B\u673A\u7684\u8BF7\u6C42\u8D70\u4EE3\u7406\uFF08\u540E\u7F00\u5339\u914D\uFF0C* \u8868\u793A\u5168\u90E8\uFF09\u3002",
   bypassHosts: "\u76F4\u8FDE",
   bypassHostsHint: "\u9017\u53F7\u6216\u7A7A\u683C\u5206\u9694\uFF1B\u5339\u914D\u8FD9\u4E9B\u4E3B\u673A\u7684\u8BF7\u6C42\u76F4\u8FDE\uFF0C\u4F18\u5148\u4E8E\u4E0A\u4E00\u9879\u3002",
+  ruleDeadHint: "\u4EE5\u4E0B\u6761\u76EE\u6C38\u8FDC\u5339\u914D\u4E0D\u4E0A\u2014\u2014\u89C4\u5219\u53EA\u8BA4\u4E3B\u673A\u540D\uFF0C\u4E0D\u8981\u5E26\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84\uFF1A",
+  testTarget: "\u81EA\u68C0\u76EE\u6807",
+  testTargetHint: "\u7559\u7A7A\u7528\u9876\u5C42 testUrl\uFF1B\u586B\u5199\u540E\u8BE5\u5361\u7247\u7684\u300C\u6D4B\u8BD5\u300D\u6539\u4E3A\u8BF7\u6C42\u8FD9\u4E2A\u5730\u5740\uFF0C\u53EF\u62FF\u771F\u5B9E\u4E0A\u6E38\u9A8C\u8BC1\u7AEF\u5230\u7AEF\u8DEF\u5F84\u3002",
   socks5Hint: "SOCKS5 \u4F1A\u5EFA\u7ACB\u96A7\u9053\uFF0C\u76EE\u6807\u57DF\u540D\u7531\u4EE3\u7406\u7AEF\u89E3\u6790\u3002",
   on: "\u8D70\u4EE3\u7406",
-  live: "\u542F\u7528\u4E2D",
+  rejected: "\u914D\u7F6E\u88AB\u62D2",
   off: "\u76F4\u8FDE",
+  complete: "\u914D\u7F6E\u5B8C\u6574",
+  notConfigured: "\u672A\u914D\u7F6E",
   diagnostics: "\u8FDE\u63A5\u8BCA\u65AD",
   diagPending: "\uFF08\u6B63\u5728\u6536\u96C6\u2026\uFF09"
 };