dsh-provider-proxy 0.5.0 → 0.6.0

package/lib/client.js

@@ -39,13 +39,13 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var require_client = __commonJS({
   "src/client.css"(exports, module2) {
     "use strict";
-    var __dshMap = { "root": "7a51762d_root", "lead": "c71659b2_lead", "empty": "c42c4abe_empty", "card": "53acf569_card", "cardActive": "bd4546f8_cardActive", "defaultCard": "1103ba6e_defaultCard", "defaultLead": "0b907dc6_defaultLead", "cardHead": "d06dccdb_cardHead", "cardTitles": "ff20149f_cardTitles", "name": "4e36a10e_name", "id": "79208064_id", "pillOn": "3e0969fd_pillOn", "pillLive": "895a1b6e_pillLive", "pillOff": "f5c4d227_pillOff", "toggle": "94e6424f_toggle", "field": "5dfb5268_field", "label": "2e13439d_label", "hint": "cdd952c6_hint", "input": "31dd2d99_input", "testButton": "028bc91c_testButton", "diag": "5d114b0b_diag", "diagSummary": "27518b39_diagSummary", "diagList": "b3005b62_diagList" };
+    var __dshMap = { "root": "bcf3ba25_root", "lead": "86cd7a9a_lead", "empty": "4ec3d74d_empty", "card": "61dfce67_card", "cardActive": "56b6c433_cardActive", "cardRejected": "24b300e2_cardRejected", "defaultCard": "665ef72b_defaultCard", "defaultLead": "351db191_defaultLead", "cardHead": "9ee651d9_cardHead", "cardTitles": "bb118443_cardTitles", "name": "a1b940d4_name", "id": "1870f756_id", "pillOn": "e9cfdcad_pillOn", "pillLive": "3d3b7405_pillLive", "pillOff": "a517f862_pillOff", "pillRejected": "3e11f4ea_pillRejected", "toggle": "31ab2dc8_toggle", "field": "52ffb01c_field", "label": "b8d05488_label", "hint": "d8b3bd46_hint", "input": "0b74e44b_input", "testButton": "47b71ed7_testButton", "diag": "f395d2a5_diag", "diagSummary": "84895b20_diagSummary", "diagList": "9ecca3cd_diagList" };
     var __dshStyles = globalThis.__dshPluginStyles || (globalThis.__dshPluginStyles = /* @__PURE__ */ new Set());
     if (!__dshStyles.has("dsh-provider-proxy/client.css")) {
       __dshStyles.add("dsh-provider-proxy/client.css");
       __dshStyle = document.createElement("style");
       __dshStyle.setAttribute("data-plugin-css", "dsh-provider-proxy/client.css");
-      __dshStyle.textContent = '/* dsh-provider-proxy \u2014 provider proxy settings page.\n   Tokens only: no literal colours, matching the shared --dsw-* system. */\n\n.7a51762d_root {\n  display: flex;\n  flex-direction: column;\n  gap: 12px;\n  max-width: 640px;\n}\n\n.c71659b2_lead {\n  margin: 0 0 4px;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.c42c4abe_empty {\n  margin: 0;\n  padding: 16px;\n  border: 1px dashed var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 12px;\n  text-align: center;\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- provider card ---- */\n\n.53acf569_card,\n.bd4546f8_cardActive {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n}\n\n.bd4546f8_cardActive {\n  border-color: var(--dsw-alias-state-success-primary);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n/* ---- shared default endpoint ---- */\n\n/* A distinct outer layer, so it reads as "one setting for the page" rather than\n   as one more provider card. */\n.1103ba6e_defaultCard {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 14px 16px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n.0b907dc6_defaultLead {\n  margin: -2px 0 0;\n  font-size: 11px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.d06dccdb_cardHead {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n}\n\n.ff20149f_cardTitles {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  min-width: 0;\n}\n\n.4e36a10e_name {\n  overflow: hidden;\n  font-size: 13px;\n  font-weight: 600;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n  color: var(--dsw-alias-label-primary);\n}\n\n.79208064_id {\n  flex: none;\n  padding: 1px 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-bg-layer-2);\n  font-family: ui-monospace, monospace;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n/* ---- status pill ---- */\n\n.3e0969fd_pillOn,\n.895a1b6e_pillLive,\n.f5c4d227_pillOff {\n  flex: none;\n  padding: 2px 8px;\n  border-radius: 999px;\n  font-size: 11px;\n  font-weight: 500;\n  white-space: nowrap;\n}\n\n.3e0969fd_pillOn {\n  background: var(--dsw-alias-state-success-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.895a1b6e_pillLive {\n  border: 1px solid var(--dsw-alias-border-l2);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.f5c4d227_pillOff {\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- toggle ---- */\n\n.94e6424f_toggle {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  padding-top: 2px;\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n}\n\n.94e6424f_toggle input {\n  accent-color: var(--dsw-alias-brand-primary);\n  cursor: pointer;\n}\n\n/* ---- fields ---- */\n\n.5dfb5268_field {\n  display: grid;\n  grid-template-columns: 96px 1fr;\n  align-items: center;\n  gap: 10px;\n  font-size: 12px;\n}\n\n.2e13439d_label {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.cdd952c6_hint {\n  grid-column: 2;\n  margin-top: -2px;\n  font-size: 11px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.31dd2d99_input {\n  box-sizing: border-box;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 8px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  outline: none;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font: inherit;\n  font-size: 12px;\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n/* The base look of every input is INLINE too, so these three state rules only\n   ever take effect as author-important declarations \u2014 same reason as the\n   self-check button above. `cursor` has no inline base and needs none, and the\n   hover border uses `l3` because `l1`\u2192`l2` is a 4%\u219210% black step nobody can\n   see. */\n\n.31dd2d99_input:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n}\n\n.31dd2d99_input:focus {\n  border-color: var(--dsw-alias-brand-primary) !important;\n}\n\n.31dd2d99_input:disabled {\n  color: var(--dsw-alias-state-idle-primary) !important;\n  background: var(--dsw-alias-bg-layer-2) !important;\n  cursor: not-allowed;\n}\n\n/* ---- self-check ---- */\n\n/* The hover state is the one thing an inline style cannot express, which is why\n   this element carries a class at all. Layout stays inline.\n\n   Two traps, both hit before this comment existed:\n   - `!important` is load-bearing: the base border and background are INLINE, and\n     the cascade sorts a style attribute after every author rule, so a plain\n     declaration here would ship, match, and still lose.\n   - the TOKENS must be visible ones. `bg-layer-1/2/3` all resolve to\n     `neutral-bluish-00` in the light theme, so a layer swap is a no-op there, and\n     `border-l1`\u2192`l2` is 4%\u219210% black on a 1px line. The app\'s own hovers use\n     `interactive-bg-hover`; using it here is what makes the feedback exist. */\n.028bc91c_testButton {\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n.028bc91c_testButton:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n  background: var(--dsw-alias-interactive-bg-hover) !important;\n}\n\n/* ---- diagnostics ---- */\n\n.5d114b0b_diag {\n  margin-top: 2px;\n  padding: 8px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.27518b39_diagSummary {\n  cursor: pointer;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.b3005b62_diagList {\n  margin: 6px 0 0;\n  padding-left: 18px;\n  font-family: ui-monospace, monospace;\n  word-break: break-all;\n}\n';
+      __dshStyle.textContent = '/* dsh-provider-proxy \u2014 provider proxy settings page.\n   Tokens only: no literal colours, matching the shared --dsw-* system. */\n\n.bcf3ba25_root {\n  display: flex;\n  flex-direction: column;\n  gap: 12px;\n  max-width: 640px;\n}\n\n.86cd7a9a_lead {\n  margin: 0 0 4px;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.4ec3d74d_empty {\n  margin: 0;\n  padding: 16px;\n  border: 1px dashed var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 12px;\n  text-align: center;\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n/* ---- provider card ---- */\n\n.61dfce67_card,\n.56b6c433_cardActive,\n.24b300e2_cardRejected {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n}\n\n.56b6c433_cardActive {\n  border-color: var(--dsw-alias-state-success-primary);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n/* An enabled route the Host refused: never dress it as active. */\n.24b300e2_cardRejected {\n  border-color: var(--dsw-alias-state-error-primary, #f85149);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n/* ---- shared default endpoint ---- */\n\n/* A distinct outer layer, so it reads as "one setting for the page" rather than\n   as one more provider card. */\n.665ef72b_defaultCard {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  padding: 14px 16px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n.351db191_defaultLead {\n  margin: -2px 0 0;\n  font-size: 11px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.9ee651d9_cardHead {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n}\n\n.bb118443_cardTitles {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  min-width: 0;\n}\n\n.a1b940d4_name {\n  overflow: hidden;\n  font-size: 13px;\n  font-weight: 600;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n  color: var(--dsw-alias-label-primary);\n}\n\n.1870f756_id {\n  flex: none;\n  padding: 1px 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-bg-layer-2);\n  font-family: ui-monospace, monospace;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n/* ---- status pill ---- */\n\n.e9cfdcad_pillOn,\n.3d3b7405_pillLive,\n.a517f862_pillOff,\n.3e11f4ea_pillRejected {\n  flex: none;\n  padding: 2px 8px;\n  border-radius: 999px;\n  font-size: 11px;\n  font-weight: 500;\n  white-space: nowrap;\n}\n\n.e9cfdcad_pillOn {\n  background: var(--dsw-alias-state-success-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.3d3b7405_pillLive {\n  border: 1px solid var(--dsw-alias-border-l2);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.a517f862_pillOff {\n  color: var(--dsw-alias-state-idle-primary);\n}\n\n.3e11f4ea_pillRejected {\n  border: 1px solid var(--dsw-alias-state-error-primary, #f85149);\n  color: var(--dsw-alias-state-error-primary, #f85149);\n}\n\n/* ---- toggle ---- */\n\n.31ab2dc8_toggle {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  padding-top: 2px;\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n}\n\n.31ab2dc8_toggle input {\n  accent-color: var(--dsw-alias-brand-primary);\n  cursor: pointer;\n}\n\n/* ---- fields ---- */\n\n.52ffb01c_field {\n  display: grid;\n  grid-template-columns: 96px 1fr;\n  align-items: center;\n  gap: 10px;\n  font-size: 12px;\n}\n\n.b8d05488_label {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.d8b3bd46_hint {\n  grid-column: 2;\n  margin-top: -2px;\n  font-size: 11px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.0b74e44b_input {\n  box-sizing: border-box;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 8px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  outline: none;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font: inherit;\n  font-size: 12px;\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n/* The base look of every input is INLINE too, so these three state rules only\n   ever take effect as author-important declarations \u2014 same reason as the\n   self-check button above. `cursor` has no inline base and needs none, and the\n   hover border uses `l3` because `l1`\u2192`l2` is a 4%\u219210% black step nobody can\n   see. */\n\n.0b74e44b_input:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n}\n\n.0b74e44b_input:focus {\n  border-color: var(--dsw-alias-brand-primary) !important;\n}\n\n.0b74e44b_input:disabled {\n  color: var(--dsw-alias-state-idle-primary) !important;\n  background: var(--dsw-alias-bg-layer-2) !important;\n  cursor: not-allowed;\n}\n\n/* ---- self-check ---- */\n\n/* The hover state is the one thing an inline style cannot express, which is why\n   this element carries a class at all. Layout stays inline.\n\n   Two traps, both hit before this comment existed:\n   - `!important` is load-bearing: the base border and background are INLINE, and\n     the cascade sorts a style attribute after every author rule, so a plain\n     declaration here would ship, match, and still lose.\n   - the TOKENS must be visible ones. `bg-layer-1/2/3` all resolve to\n     `neutral-bluish-00` in the light theme, so a layer swap is a no-op there, and\n     `border-l1`\u2192`l2` is 4%\u219210% black on a 1px line. The app\'s own hovers use\n     `interactive-bg-hover`; using it here is what makes the feedback exist. */\n.47b71ed7_testButton {\n  transition: border-color 120ms ease, background 120ms ease;\n}\n\n.47b71ed7_testButton:hover:not(:disabled) {\n  border-color: var(--dsw-alias-border-l3) !important;\n  background: var(--dsw-alias-interactive-bg-hover) !important;\n}\n\n/* ---- diagnostics ---- */\n\n.f395d2a5_diag {\n  margin-top: 2px;\n  padding: 8px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.84895b20_diagSummary {\n  cursor: pointer;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.9ecca3cd_diagList {\n  margin: 6px 0 0;\n  padding-left: 18px;\n  font-family: ui-monospace, monospace;\n  word-break: break-all;\n}\n';
       document.head.appendChild(__dshStyle);
     }
     var __dshStyle;
@@ -64,18 +64,60 @@ __export(client_exports, {
 module.exports = __toCommonJS(client_exports);
 var import_client = __toESM(require_client(), 1);
 
+// src/host-rules.ts
+function splitHostRules(raw) {
+  return raw.split(/[,\s]+/).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+}
+function normalizeHostRule(raw) {
+  return raw.trim().replace(/^\*?\./, "").toLowerCase();
+}
+function isBracketedIpv6(token) {
+  return /^\[[0-9a-f:.]+\]$/i.test(token);
+}
+function hostRuleProblem(raw) {
+  const token = raw.trim();
+  if (token.length === 0) return void 0;
+  if (token === "*." || normalizeHostRule(token).length === 0) return "\u7A7A\u901A\u914D\u7B26";
+  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(token)) return "\u5E26\u534F\u8BAE\u524D\u7F00";
+  if (token.includes("/")) return "\u5E26\u8DEF\u5F84";
+  if (token.includes(":") && !isBracketedIpv6(token)) return "\u5E26\u7AEF\u53E3\u6216\u975E\u6CD5\u5192\u53F7";
+  const withoutLeadingWildcard = token.replace(/^\*\./, "");
+  if (withoutLeadingWildcard.includes("*") && token !== "*") return "\u6742\u6563\u901A\u914D\u7B26";
+  return void 0;
+}
+function deadRuleEntries(raw) {
+  return splitHostRules(raw).filter((entry) => hostRuleProblem(entry) !== void 0);
+}
+
 // src/proxy-address.ts
-function defaultProxyProblem(endpoint) {
-  const host = (endpoint.host ?? "").trim();
+var PROXY_HOST_INVALID = "\u4EE3\u7406\u5730\u5740\u53EA\u80FD\u586B IPv4\u3001IPv6 \u6216\u57DF\u540D";
+var IPV4 = /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/;
+var DOMAIN = /^(?=.*[a-z])(?=.{1,253}$)(?!.*\.\d+$)[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?)*$/i;
+var IPV6_CHARS = /^[0-9a-f:.]+$/i;
+function proxyHostProblem(rawHost) {
+  const host = (rawHost ?? "").trim().replace(/\.$/, "");
   if (host.length === 0) return "\u672A\u586B\u5199\u4EE3\u7406\u5730\u5740";
-  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(host) || host.includes("/")) {
-    return "\u4EE3\u7406\u5730\u5740\u53EA\u586B\u4E3B\u673A\u540D\u6216 IP\uFF0C\u4E0D\u8981\u5E26\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84";
+  if (IPV4.test(host)) return void 0;
+  if (host.includes(":") || host.startsWith("[")) {
+    const literal = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+    if (!IPV6_CHARS.test(literal)) return PROXY_HOST_INVALID;
+    try {
+      new URL(`http://[${literal}]:1`);
+      return void 0;
+    } catch {
+      return PROXY_HOST_INVALID;
+    }
   }
+  return DOMAIN.test(host) ? void 0 : PROXY_HOST_INVALID;
+}
+function defaultProxyProblem(endpoint) {
+  const hostProblem = proxyHostProblem(endpoint.host);
+  if (hostProblem !== void 0) return hostProblem;
   const port = endpoint.port ?? 0;
   if (!Number.isInteger(port) || port < 1 || port > 65535) {
     return "\u4EE3\u7406\u7AEF\u53E3\u65E0\u6548\uFF08\u9700\u4E3A 1-65535 \u7684\u6574\u6570\uFF09";
   }
-  const hasUser = (endpoint.username ?? "").length > 0;
+  const hasUser = (endpoint.username ?? "").trim().length > 0;
   const hasPassword = (endpoint.password ?? "").length > 0;
   if (hasUser !== hasPassword) {
     return hasUser ? "\u914D\u7F6E\u4E86\u4EE3\u7406\u7528\u6237\u540D\u4F46\u6CA1\u6709\u5BC6\u7801\uFF1B\u8BF7\u8865\u5168\u5BC6\u7801\u6216\u6E05\u7A7A\u7528\u6237\u540D" : "\u914D\u7F6E\u4E86\u4EE3\u7406\u5BC6\u7801\u4F46\u6CA1\u6709\u7528\u6237\u540D\uFF1B\u8BF7\u8865\u5168\u7528\u6237\u540D\u6216\u6E05\u7A7A\u5BC6\u7801";
@@ -170,12 +212,15 @@ async function writeConfig(ctx, ops) {
 }
 function knownProviders(configured, published) {
   const rows = /* @__PURE__ */ new Map();
+  const byId = /* @__PURE__ */ new Map();
   for (const row of published) {
+    byId.set(row.id, row);
     if (row.live) rows.set(row.id, row);
   }
-  for (const [id, route] of Object.entries(configured)) {
+  for (const id of Object.keys(configured)) {
     if (rows.has(id)) continue;
-    rows.set(id, { id, name: id, live: route?.enabled === true });
+    const known = byId.get(id);
+    rows.set(id, { id, name: known?.name ?? id, live: known?.live === true });
   }
   return [...rows.values()].sort(byName);
 }
@@ -183,6 +228,8 @@ var CATALOG_PATH = "/dsh-provider-proxy/providers";
 var TEST_PATH = "/dsh-provider-proxy/test";
 var LATENCY_FAST_MS = 500;
 var LATENCY_SLOW_MS = 1500;
+var DEFAULT_TEST_URL = "https://api.ipify.org?format=json";
+var MAX_TEST_URLS = 5;
 function latencyColor(ms) {
   if (typeof ms !== "number" || !Number.isFinite(ms)) return "var(--dsw-alias-label-secondary)";
   if (ms <= LATENCY_FAST_MS) return "var(--dsw-alias-state-success-primary, #2ea043)";
@@ -196,6 +243,10 @@ function testResultFrom(body, strings) {
     ok,
     ms: typeof body?.ms === "number" && Number.isFinite(body.ms) ? body.ms : void 0,
     ip: typeof body?.exitIp === "string" && body.exitIp.length > 0 ? body.exitIp : void 0,
+    status: typeof body?.status === "number" && Number.isInteger(body.status) ? body.status : void 0,
+    target: typeof body?.target === "string" && body.target.length > 0 ? body.target : void 0,
+    targetSource: body?.targetSource === "route" || body?.targetSource === "upstream" ? body.targetSource : body?.targetSource === "testUrl" ? "testUrl" : void 0,
+    cached: body?.cached === true,
     // The Host probes a target the way routing would: a loopback/private upstream
     // (or a bypassHosts match) is reached DIRECT, not through the proxy. The card
     // says so, so a green check is not read as "the proxy works".
@@ -203,6 +254,57 @@ function testResultFrom(body, strings) {
     error: ok ? void 0 : typeof body?.error === "string" && body.error.length > 0 ? body.error : strings.testFailed
   };
 }
+function splitTestUrls(raw) {
+  return raw.split(/[,\s]+/).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+}
+function testUrlHint(raw, t) {
+  const entries = splitTestUrls(raw);
+  if (entries.length === 0) return t.testUrlEmptyHint;
+  const invalid = entries.filter((entry) => !isAbsoluteHttpUrl(entry));
+  if (invalid.length > 0) return t.testUrlInvalidHint;
+  if (entries.length > MAX_TEST_URLS) return t.testUrlTooManyHint;
+  return void 0;
+}
+function isAbsoluteHttpUrl(value) {
+  try {
+    const url = new URL(value);
+    return (url.protocol === "http:" || url.protocol === "https:") && url.hostname.length > 0;
+  } catch {
+    return false;
+  }
+}
+function targetSourceSuffix(result, t) {
+  switch (result.targetSource) {
+    case "route":
+      return t.targetSourceRoute;
+    case "upstream":
+      return t.targetSourceUpstream;
+    case "testUrl":
+      return t.targetSourceTestUrl;
+    default:
+      return "";
+  }
+}
+function redactSensitiveText(text, secrets = []) {
+  let safe = text;
+  for (const secret of secrets) {
+    if (typeof secret !== "string" || secret.length === 0) continue;
+    safe = safe.split(secret).join("***");
+  }
+  safe = safe.replace(/\b([a-z][a-z0-9+.-]*:\/\/)[^/@\s]+@/gi, "$1");
+  safe = safe.replace(/([?&#])[^\s"'<>]*/g, "$1");
+  return safe.length > 500 ? `${safe.slice(0, 500)}\u2026` : safe;
+}
+function secretsFromOps(ops) {
+  const out = [];
+  for (const op of ops) {
+    const field = op?.path?.[op.path.length - 1];
+    if (field === "password" && typeof op?.value === "string" && op.value.length > 0) {
+      out.push(op.value);
+    }
+  }
+  return out;
+}
 var catalogueSetter = () => {
 };
 function relativeTime(at, t) {
@@ -273,9 +375,6 @@ function touchCatalogPolling() {
   }, CATALOG_REFRESH_MS);
 }
 var byName = (a, b) => a.name.localeCompare(b.name);
-function deadRuleEntries(raw) {
-  return raw.split(/[,\s]+/).map((entry) => entry.trim()).filter((entry) => /^[a-z][a-z0-9+.-]*:\/\//i.test(entry) || entry.includes("/"));
-}
 function view(route) {
   return {
     enabled: route?.enabled === true,
@@ -293,6 +392,14 @@ function view(route) {
 function unbracket(hostname) {
   return hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
 }
+function explicitPortOf(text) {
+  const authority = text.slice(text.indexOf("://") + 3).split(/[/?#]/, 1)[0];
+  const hostPort = authority.slice(authority.lastIndexOf("@") + 1);
+  const match = /^\[[^\]]+\]:(\d+)$/.exec(hostPort) ?? /^[^:]+:(\d+)$/.exec(hostPort);
+  if (match === null) return 0;
+  const port = Number.parseInt(match[1], 10);
+  return Number.isNaN(port) ? 0 : port;
+}
 function splitProxyUrl(text) {
   const trimmed = text.trim();
   if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed)) return void 0;
@@ -313,7 +420,7 @@ function splitProxyUrl(text) {
       return value;
     }
   };
-  const parsedPort = url.port.length > 0 ? Number.parseInt(url.port, 10) : 0;
+  const parsedPort = url.port.length > 0 ? Number.parseInt(url.port, 10) : explicitPortOf(trimmed);
   return {
     protocol,
     host: unbracket(url.hostname),
@@ -324,6 +431,39 @@ function splitProxyUrl(text) {
 }
 var WRITE_DELAY_MS = 300;
 var pendingWrites = /* @__PURE__ */ new Map();
+var writeQueue = Promise.resolve();
+function enqueueWrite(run) {
+  const next = writeQueue.then(run, run);
+  writeQueue = next.catch(() => void 0);
+  return next;
+}
+function scheduleWrite(key, run) {
+  const pending = pendingWrites.get(key);
+  if (pending?.timer !== void 0) clearTimeout(pending.timer);
+  const entry = {
+    flush: () => {
+      if (entry.timer !== void 0) clearTimeout(entry.timer);
+      pendingWrites.delete(key);
+      return enqueueWrite(run);
+    }
+  };
+  entry.timer = setTimeout(() => {
+    void entry.flush();
+  }, WRITE_DELAY_MS);
+  pendingWrites.set(key, entry);
+}
+var testGeneration = /* @__PURE__ */ new Map();
+var TEST_RELEVANT_FIELDS = /* @__PURE__ */ new Set([
+  "protocol",
+  "host",
+  "port",
+  "username",
+  "password",
+  "onlyHosts",
+  "bypassHosts",
+  "testTarget",
+  "useDefault"
+]);
 var diagnostics = [];
 function note(message) {
   if (!diagnostics.includes(message)) diagnostics.push(message);
@@ -349,6 +489,11 @@ var S = {
     borderColor: "var(--dsw-alias-state-success-primary)",
     background: "var(--dsw-alias-bg-layer-2)"
   },
+  /** An enabled route the Host refused: active-looking styling would be a lie. */
+  cardRejected: {
+    borderColor: "var(--dsw-alias-state-error-primary, #f85149)",
+    background: "var(--dsw-alias-bg-layer-2)"
+  },
   head: {
     display: "flex",
     alignItems: "center",
@@ -396,6 +541,14 @@ var S = {
     cursor: "pointer"
   },
   testResult: {
+    // A flex row so the target can drop onto its own line: the container was a
+    // plain span, where `flexBasis: 100%` does nothing and the target ran into
+    // the "cached" label.
+    display: "flex",
+    flexWrap: "wrap",
+    alignItems: "baseline",
+    columnGap: "6px",
+    rowGap: "2px",
     fontSize: "11px",
     color: "var(--dsw-alias-label-secondary)",
     wordBreak: "break-all"
@@ -439,6 +592,10 @@ var S = {
     color: "var(--dsw-alias-label-secondary)"
   },
   pillOff: { color: "var(--dsw-alias-state-idle-primary)" },
+  pillRejected: {
+    border: "1px solid var(--dsw-alias-state-error-primary, #f85149)",
+    color: "var(--dsw-alias-state-error-primary, #f85149)"
+  },
   /**
    * The shared default endpoint sits on its own layer so it reads as global
    * rather than as one more provider card — the mistake it exists to prevent is
@@ -500,6 +657,19 @@ var S = {
     color: "var(--dsw-alias-label-primary)",
     font: "inherit",
     fontSize: "12px"
+  },
+  diag: {
+    marginTop: "4px",
+    padding: "8px 10px",
+    border: "1px solid var(--dsw-alias-border-l1)",
+    borderRadius: "8px",
+    fontSize: "11px",
+    color: "var(--dsw-alias-label-secondary)"
+  },
+  hint: {
+    gridColumn: "2",
+    fontSize: "11px",
+    color: "var(--dsw-alias-label-secondary)"
   }
 };
 function renderPage(ctx) {
@@ -521,14 +691,20 @@ function renderPage(ctx) {
   const [state, setState] = (React.useState ?? ((fn) => [fn(), () => {
   }]))(() => {
     void fetchCatalog().then((catalog) => catalogueSetter?.(catalog)).catch((error) => {
-      note(`provider \u5217\u8868\u83B7\u53D6\u5931\u8D25\uFF1A${error?.message ?? error}`);
-      catalogueSetter?.({ rows: [], hits: {}, problems: {}, lastUse: {} });
+      catalogueSetter?.({
+        rows: [],
+        hits: {},
+        problems: {},
+        lastUse: {},
+        error: String(error?.message ?? error)
+      });
     });
     return {
       rows: void 0,
       hits: {},
       problems: {},
       lastUse: {},
+      error: void 0,
       pending: true
     };
   });
@@ -537,6 +713,7 @@ function renderPage(ctx) {
     hits: catalog.hits,
     problems: catalog.problems,
     lastUse: catalog.lastUse,
+    error: catalog.error,
     pending: false
   });
   touchCatalogPolling();
@@ -564,22 +741,56 @@ function renderPage(ctx) {
   const [defaultDraft, setDefaultDraft] = (React.useState ?? ((v) => [v, () => {
   }]))({});
   const editDefault = (field2, value) => setDefaultDraft((current) => ({ ...current, [field2]: value }));
+  const [globalDraft, setGlobalDraft] = (React.useState ?? ((v) => [v, () => {
+  }]))({});
+  const editGlobal = (field2, value) => setGlobalDraft((current) => ({ ...current, [field2]: value }));
+  const [saveError, setSaveError] = (React.useState ?? ((v) => [v, () => {
+  }]))(void 0);
+  const [savedNote, setSavedNote] = (React.useState ?? ((v) => [v, () => {
+  }]))(void 0);
   const [tests, setTests] = (React.useState ?? ((v) => [v, () => {
   }]))({});
+  const invalidateTests = (ids) => {
+    if (ids.length === 0) return;
+    for (const id of ids) {
+      testGeneration.set(id, (testGeneration.get(id) ?? 0) + 1);
+    }
+    setTests((current) => {
+      let changed = false;
+      const next = { ...current };
+      for (const id of ids) {
+        if (next[id] === void 0) continue;
+        delete next[id];
+        changed = true;
+      }
+      return changed ? next : current;
+    });
+  };
   const [filter, setFilter] = (React.useState ?? ((v) => [v, () => {
   }]))("");
   const runTest = (id) => {
+    const generation = (testGeneration.get(id) ?? 0) + 1;
+    testGeneration.set(id, generation);
     setTests((current) => ({ ...current, [id]: { pending: true } }));
     void (async () => {
       try {
+        for (const [key, entry] of [...pendingWrites]) {
+          if (key.startsWith(`${id}\0`) || key.startsWith("\0default\0") || key.startsWith("\0global\0")) {
+            void entry.flush();
+          }
+        }
+        await writeQueue;
+        if (testGeneration.get(id) !== generation) return;
         const response = await globalThis.fetch(TEST_PATH, {
           method: "POST",
           headers: { "content-type": "application/json", accept: "application/json" },
           body: JSON.stringify({ provider: id })
         });
         const body2 = await response.json();
+        if (testGeneration.get(id) !== generation) return;
         setTests((current) => ({ ...current, [id]: testResultFrom(body2, t) }));
       } catch (error) {
+        if (testGeneration.get(id) !== generation) return;
         setTests((current) => ({
           ...current,
           [id]: { pending: false, ok: false, error: String(error?.message ?? error) }
@@ -588,19 +799,25 @@ function renderPage(ctx) {
     })();
   };
   const rows = knownProviders({ ...configured, ...draft }, published);
+  const inheritingIds = () => rows.filter((row) => view({ ...configured[row.id], ...draft[row.id] }).useDefault === true).map((row) => row.id);
   const save = (key, path, label, value, onRefused) => {
-    const pending = pendingWrites.get(key);
-    if (pending !== void 0) clearTimeout(pending.timer);
-    const timer = setTimeout(() => {
-      pendingWrites.delete(key);
-      void writeConfig(ctx, [{ op: "set", path, value }]).then(() => {
-        note(`\u5DF2\u4FDD\u5B58 ${label} = ${JSON.stringify(value)}`);
+    const field2 = path[path.length - 1];
+    const secret = field2 === "password" && typeof value === "string" ? value : void 0;
+    const safeLabel = secret === void 0 ? label : `${label}\uFF08\u503C\u5DF2\u9690\u85CF\uFF09`;
+    scheduleWrite(
+      key,
+      () => writeConfig(ctx, [{ op: "set", path, value }]).then(() => {
+        setSaveError(void 0);
+        setSavedNote(secret === void 0 ? `\u5DF2\u4FDD\u5B58 ${label}` : `\u5DF2\u4FDD\u5B58 ${safeLabel}`);
       }).catch((error) => {
-        note(`\u4FDD\u5B58\u5931\u8D25 ${label}\uFF1A${error?.message ?? error}`);
+        const message = redactSensitiveText(String(error?.message ?? error), [
+          ...secret === void 0 ? [] : [secret]
+        ]);
+        setSavedNote(void 0);
+        setSaveError({ label: safeLabel, message });
         onRefused();
-      });
-    }, WRITE_DELAY_MS);
-    pendingWrites.set(key, { timer });
+      })
+    );
   };
   const rollbackRouteField = (id, field2) => {
     setDraft((current) => {
@@ -616,6 +833,7 @@ function renderPage(ctx) {
   };
   const bind = (id, field2) => (value) => {
     edit(id, field2, value);
+    if (TEST_RELEVANT_FIELDS.has(field2)) invalidateTests([id]);
     save(
       `${id}\0${field2}`,
       ["providers", id, field2],
@@ -626,6 +844,7 @@ function renderPage(ctx) {
   };
   const bindDefault = (field2) => (value) => {
     editDefault(field2, value);
+    invalidateTests(inheritingIds());
     save(`\0default\0${field2}`, ["defaultProxy", field2], `defaultProxy.${field2}`, value, () => {
       setDefaultDraft((current) => {
         if (current[field2] === void 0) return current;
@@ -635,19 +854,34 @@ function renderPage(ctx) {
       });
     });
   };
+  const bindGlobal = (field2) => (value) => {
+    editGlobal(field2, value);
+    invalidateTests(rows.map((row) => row.id));
+    save(`\0global\0${field2}`, [field2], field2, value, () => {
+      setGlobalDraft((current) => {
+        if (current[field2] === void 0) return current;
+        const next = { ...current };
+        delete next[field2];
+        return next;
+      });
+    });
+  };
   const saveMany = (key, ops, label, onRefused) => {
-    const pending = pendingWrites.get(key);
-    if (pending !== void 0) clearTimeout(pending.timer);
-    const timer = setTimeout(() => {
-      pendingWrites.delete(key);
-      void writeConfig(ctx, ops).then(() => {
-        note(`\u5DF2\u4FDD\u5B58 ${label}`);
+    const secrets = secretsFromOps(ops);
+    const hidesValues = ops.some((op) => op?.path?.[op.path.length - 1] === "password");
+    const safeLabel = hidesValues ? `${label}\uFF08\u503C\u5DF2\u9690\u85CF\uFF09` : label;
+    scheduleWrite(
+      key,
+      () => writeConfig(ctx, ops).then(() => {
+        setSaveError(void 0);
+        setSavedNote(`\u5DF2\u4FDD\u5B58 ${safeLabel}`);
       }).catch((error) => {
-        note(`\u4FDD\u5B58\u5931\u8D25 ${label}\uFF1A${error?.message ?? error}`);
+        const message = redactSensitiveText(String(error?.message ?? error), secrets);
+        setSavedNote(void 0);
+        setSaveError({ label: safeLabel, message });
         onRefused();
-      });
-    }, WRITE_DELAY_MS);
-    pendingWrites.set(key, { timer });
+      })
+    );
   };
   const rollbackRouteFields = (id, fields) => {
     setDraft((current) => {
@@ -663,6 +897,7 @@ function renderPage(ctx) {
   };
   const applyCardUrl = (id, parts) => {
     setDraft((current) => ({ ...current, [id]: { ...current[id], ...parts } }));
+    invalidateTests([id]);
     const fields = Object.keys(parts);
     saveMany(
       `${id}\0*paste`,
@@ -673,6 +908,7 @@ function renderPage(ctx) {
   };
   const applyDefaultUrl = (parts) => {
     setDefaultDraft((current) => ({ ...current, ...parts }));
+    invalidateTests(inheritingIds());
     const fields = Object.keys(parts);
     saveMany(
       "\0default\0*paste",
@@ -705,6 +941,7 @@ function renderPage(ctx) {
       for (const id of ids) next[id] = { ...next[id], useDefault: true };
       return next;
     });
+    invalidateTests(ids);
     saveMany(
       "\0default\0applyAll",
       ids.map((id) => ({ op: "set", path: ["providers", id, "useDefault"], value: true })),
@@ -754,7 +991,8 @@ function renderPage(ctx) {
   const storedDefault = snapshot.value?.defaultProxy ?? {};
   const defaultView = view({ ...storedDefault, ...defaultDraft });
   const defaultWhy = defaultProxyProblem(defaultView);
-  const defaultUsable = defaultWhy === void 0;
+  const defaultHostWhy = defaultView.host.trim().length === 0 ? void 0 : proxyHostProblem(defaultView.host);
+  const defaultComplete = defaultWhy === void 0;
   const defaultOrigin = `${defaultView.protocol}://${defaultView.host}:${defaultView.port}`;
   const defaultBlock = h(
     "div",
@@ -770,10 +1008,10 @@ function renderPage(ctx) {
       h(
         "span",
         {
-          className: defaultUsable ? import_client.default.pillOn : import_client.default.pillOff,
-          style: { ...S.pill, ...defaultUsable ? S.pillOn : S.pillOff }
+          className: defaultComplete ? import_client.default.pillOn : import_client.default.pillOff,
+          style: { ...S.pill, ...defaultComplete ? S.pillOn : S.pillOff }
         },
-        defaultUsable ? t.on : t.off
+        defaultComplete ? t.complete : t.notConfigured
       )
     ),
     h("p", { className: import_client.default.defaultLead, style: S.defaultLead }, t.defaultLead),
@@ -803,7 +1041,8 @@ function renderPage(ctx) {
         // Same convenience as the cards: a full URL fills the whole block.
         onPaste: onProxyUrlPaste(applyDefaultUrl)
       }),
-      t.hostHint
+      defaultHostWhy ?? t.hostHint,
+      defaultHostWhy !== void 0
     ),
     field(
       t.port,
@@ -844,7 +1083,7 @@ function renderPage(ctx) {
       t.passwordHintProxy
     ),
     // Bulk opt-in, in ONE write: a per-card walk would rebuild the table N times.
-    // Disabled while the default is unusable, because pointing every card at an
+    // Disabled while the default configuration is incomplete, because pointing every card at an
     // empty endpoint would just refuse them all.
     h(
       "div",
@@ -855,13 +1094,82 @@ function renderPage(ctx) {
           className: import_client.default.testButton,
           style: S.testButton,
           type: "button",
-          disabled: !defaultUsable || rows.length === 0,
+          disabled: !defaultComplete || rows.length === 0,
           onClick: applyDefaultToAll
         },
         t.applyDefaultAll
       )
     )
   );
+  const storedTestUrl = typeof snapshot.value?.testUrl === "string" ? snapshot.value.testUrl : DEFAULT_TEST_URL;
+  const storedLocalDirect = snapshot.value?.localDirect !== false;
+  const globalTestUrl = typeof globalDraft.testUrl === "string" ? globalDraft.testUrl : storedTestUrl;
+  const globalLocalDirect = typeof globalDraft.localDirect === "boolean" ? globalDraft.localDirect : storedLocalDirect;
+  const globalTestUrlHint = testUrlHint(globalTestUrl, t);
+  const globalBlock = h(
+    "details",
+    {
+      className: import_client.default.diag,
+      style: {
+        ...S.diag,
+        marginTop: "0"
+      },
+      key: "global-settings"
+    },
+    h("summary", { className: import_client.default.diagSummary }, t.globalTitle),
+    h("p", { className: import_client.default.defaultLead, style: S.defaultLead }, t.globalLead),
+    h(
+      "label",
+      { className: import_client.default.field, style: S.field },
+      h("span", { className: import_client.default.label, style: S.label }, t.testUrl),
+      h("input", {
+        className: import_client.default.input,
+        style: S.input,
+        value: globalTestUrl,
+        onChange: (event) => bindGlobal("testUrl")(event.target.value)
+      }),
+      globalTestUrlHint === void 0 ? h("span", { style: S.hint }, t.testUrlHint) : h(
+        "span",
+        {
+          className: import_client.default.hint,
+          style: {
+            ...S.hint,
+            color: "var(--dsw-alias-state-error-primary, #f85149)"
+          }
+        },
+        globalTestUrlHint
+      )
+    ),
+    h(
+      "div",
+      { style: S.testRow },
+      h(
+        "button",
+        {
+          className: import_client.default.testButton,
+          style: S.testButton,
+          type: "button",
+          onClick: () => bindGlobal("testUrl")(DEFAULT_TEST_URL)
+        },
+        t.restoreDefaultTestUrl
+      )
+    ),
+    h(
+      "label",
+      { className: import_client.default.toggle, style: S.toggle },
+      h("input", {
+        type: "checkbox",
+        checked: globalLocalDirect,
+        onChange: (event) => bindGlobal("localDirect")(event.target.checked === true)
+      }),
+      h("span", null, t.localDirect)
+    ),
+    h(
+      "p",
+      { style: S.hint },
+      globalLocalDirect ? t.localDirectOnHint : t.localDirectOffHint
+    )
+  );
   const query = filter.trim().toLowerCase();
   const shown = query.length === 0 ? rows : rows.filter((row) => `${row.id} ${row.name}`.toLowerCase().includes(query));
   const filterRow = rows.length === 0 ? null : field(
@@ -874,6 +1182,12 @@ function renderPage(ctx) {
       onChange: (event) => setFilter(event.target.value)
     })
   );
+  const catalogueStatus = rows.length === 0 ? state.pending ? { text: t.catalogueLoading, error: false } : state.error !== void 0 ? { text: `${t.catalogueError}${state.error}`, error: true } : void 0 : void 0;
+  const catalogueNotice = state.error !== void 0 && rows.length > 0 ? h(
+    "p",
+    { key: "catalogue-error", style: S.inheritWarning },
+    `${t.catalogueStale}${state.error}`
+  ) : null;
   const body = shown.length === 0 ? [
     h(
       "p",
@@ -887,10 +1201,11 @@ function renderPage(ctx) {
           borderRadius: "8px",
           fontSize: "12px",
           textAlign: "center",
-          color: "var(--dsw-alias-state-idle-primary)"
+          color: catalogueStatus?.error === true ? "var(--dsw-alias-state-error-primary, #f85149)" : "var(--dsw-alias-state-idle-primary)",
+          ...catalogueStatus?.error === true ? { fontWeight: "500" } : {}
         }
       },
-      query.length > 0 ? t.noMatch : t.empty
+      catalogueStatus?.text ?? (query.length > 0 ? t.noMatch : t.empty)
     )
   ] : shown.map((row) => {
     const route = view({ ...configured[row.id], ...draft[row.id] });
@@ -899,8 +1214,15 @@ function renderPage(ctx) {
     const onlyDead = deadRuleEntries(route.onlyHosts);
     const bypassDead = deadRuleEntries(route.bypassHosts);
     const useDefault = route.useDefault === true;
-    const endpointStored = route.useDefault ? defaultUsable : route.host.trim().length > 0 && Number.isInteger(route.port) && route.port >= 1 && route.port <= 65535;
+    const endpointStored = route.useDefault ? defaultComplete : route.host.trim().length > 0 && Number.isInteger(route.port) && route.port >= 1 && route.port <= 65535;
     const showTest = route.enabled || endpointStored;
+    const problemText = (() => {
+      const recorded = problems[row.id];
+      if (recorded !== void 0) return recorded;
+      if (useDefault) return defaultComplete ? void 0 : `${t.defaultMissing}${defaultWhy}`;
+      return route.enabled ? defaultProxyProblem(route) : void 0;
+    })();
+    const rejected = route.enabled && problemText !== void 0;
     const endpointFields = [
       field(
         t.protocol,
@@ -975,11 +1297,12 @@ function renderPage(ctx) {
         route.protocol === "socks5" ? t.passwordHint : t.passwordHintProxy
       )
     ];
+    const pill = rejected ? { className: import_client.default.pillRejected, style: { ...S.pill, ...S.pillRejected }, text: t.rejected } : route.enabled ? { className: import_client.default.pillOn, style: { ...S.pill, ...S.pillOn }, text: t.on } : { className: import_client.default.pillLive, style: { ...S.pill, ...S.pillLive }, text: t.off };
     return h(
       "section",
       {
-        className: route.enabled ? import_client.default.cardActive : import_client.default.card,
-        style: route.enabled ? { ...S.card, ...S.cardActive } : S.card,
+        className: rejected ? import_client.default.cardRejected : route.enabled ? import_client.default.cardActive : import_client.default.card,
+        style: rejected ? { ...S.card, ...S.cardRejected } : route.enabled ? { ...S.card, ...S.cardActive } : S.card,
         key: row.id
       },
       h(
@@ -1010,17 +1333,7 @@ function renderPage(ctx) {
             lastText
           )
         ),
-        h(
-          "span",
-          {
-            className: route.enabled ? import_client.default.pillOn : row.live ? import_client.default.pillLive : import_client.default.pillOff,
-            style: {
-              ...S.pill,
-              ...route.enabled ? S.pillOn : row.live ? S.pillLive : S.pillOff
-            }
-          },
-          route.enabled ? t.on : row.live ? t.live : t.off
-        )
+        h("span", { className: pill.className, style: pill.style }, pill.text)
       ),
       h(
         "label",
@@ -1046,16 +1359,12 @@ function renderPage(ctx) {
         }),
         h("span", null, t.useDefault)
       ),
-      ...useDefault ? [
-        h(
-          "p",
-          {
-            key: `${row.id}:inherit`,
-            style: defaultUsable ? S.inheritNote : S.inheritWarning
-          },
-          defaultUsable ? `${t.inheritingDefault}${defaultOrigin}` : `${t.defaultMissing}${defaultWhy}`
-        )
-      ] : endpointFields,
+      problemText !== void 0 ? h("p", { key: `${row.id}:problem`, style: S.inheritWarning }, problemText) : useDefault ? h(
+        "p",
+        { key: `${row.id}:inherit`, style: S.inheritNote },
+        `${t.inheritingDefault}${defaultOrigin}`
+      ) : null,
+      ...useDefault ? [] : endpointFields,
       // The self-check is offered whenever there is something to check: an
       // enabled route (the Host's table carries it, and a rejected one still
       // reports WHY), or a disabled one whose endpoint is already complete —
@@ -1079,19 +1388,56 @@ function renderPage(ctx) {
           result?.pending === true ? t.testRunning : t.testButton
         ),
         result?.pending === false ? h(
-          "span",
+          "div",
           { style: S.testResult },
           result.ok === true ? [
-            // Only the latency carries the band colour; the exit IP
-            // stays in the secondary label colour.
+            // The band colour belongs to the LATENCY alone. The
+            // status sits beside it in the plain label colour:
+            // colouring the whole line made a successful check
+            // over 1500 ms read as a failure.
             h(
               "span",
               { key: "lat", style: { color: latencyColor(result.ms) } },
               `\u2713 ${typeof result.ms === "number" ? result.ms : "\u2014"} ms`
             ),
-            result.ip === void 0 ? null : ` \xB7 ${t.exitIpLabel}${result.ip}`,
-            result.direct === true ? ` \xB7 ${t.directLabel}` : null
-          ] : h("span", { key: "err", style: S.testFailure }, `\u2717 ${result.error}`)
+            typeof result.status === "number" ? h(
+              "span",
+              { key: "status" },
+              `HTTP ${result.status}`
+            ) : null,
+            result.ip === void 0 ? null : h("span", { key: "ip" }, `${t.exitIpLabel}${result.ip}`),
+            result.direct === true ? h("span", { key: "direct" }, t.directLabel) : null,
+            result.cached === true ? h("span", { key: "cached" }, t.cachedLabel) : null,
+            result.target === void 0 ? null : h(
+              "span",
+              {
+                key: "target",
+                style: {
+                  flexBasis: "100%",
+                  fontSize: "11px",
+                  color: "var(--dsw-alias-label-secondary)",
+                  wordBreak: "break-all"
+                }
+              },
+              `${t.testTargetLabel}${result.target}${targetSourceSuffix(result, t)}`
+            )
+          ] : [
+            h("span", { key: "err", style: S.testFailure }, `\u2717 ${result.error}`),
+            typeof result.status === "number" ? h("span", { key: "status" }, `HTTP ${result.status}`) : null,
+            result.target === void 0 ? null : h(
+              "span",
+              {
+                key: "target",
+                style: {
+                  flexBasis: "100%",
+                  fontSize: "11px",
+                  color: "var(--dsw-alias-label-secondary)",
+                  wordBreak: "break-all"
+                }
+              },
+              `${t.testTargetLabel}${result.target}${targetSourceSuffix(result, t)}`
+            )
+          ]
         ) : null,
         // Promote this card's endpoint to the shared default. Offered only
         // when the card carries its OWN endpoint: an inheriting card would
@@ -1157,7 +1503,41 @@ function renderPage(ctx) {
     "div",
     { className: import_client.default.root, style: S.root },
     h("p", { className: import_client.default.lead, style: { margin: "0 0 4px", fontSize: "12px", lineHeight: "1.6", color: "var(--dsw-alias-label-secondary)" } }, t.lead),
+    saveError === void 0 ? null : h(
+      "div",
+      {
+        role: "alert",
+        key: "save-error",
+        style: {
+          display: "flex",
+          alignItems: "flex-start",
+          justifyContent: "space-between",
+          gap: "10px",
+          padding: "8px 10px",
+          border: "1px solid var(--dsw-alias-state-error-primary, #f85149)",
+          borderRadius: "8px",
+          background: "var(--dsw-alias-bg-layer-1)",
+          color: "var(--dsw-alias-state-error-primary, #f85149)",
+          fontSize: "12px",
+          fontWeight: "500",
+          wordBreak: "break-all"
+        }
+      },
+      h("span", null, `${t.saveFailedPrefix}${saveError.label} \u2014 ${saveError.message}`),
+      h(
+        "button",
+        {
+          className: import_client.default.testButton,
+          style: { ...S.testButton, flex: "none" },
+          type: "button",
+          onClick: () => setSaveError(void 0)
+        },
+        t.close
+      )
+    ),
     defaultBlock,
+    globalBlock,
+    catalogueNotice,
     filterRow,
     ...body,
     h(
@@ -1185,8 +1565,9 @@ function renderPage(ctx) {
       h(
         "ul",
         { className: import_client.default.diagList, style: { margin: "6px 0 0", paddingLeft: "18px" } },
-        ...problemCount === 0 && diagnostics.length === 0 ? [h("li", { key: "none" }, t.diagPending)] : [
+        ...problemCount === 0 && diagnostics.length === 0 && savedNote === void 0 ? [h("li", { key: "none" }, t.diagPending)] : [
           ...problemLines,
+          ...savedNote === void 0 ? [] : [h("li", { key: "saved" }, savedNote)],
           ...diagnostics.map((line, index) => h("li", { key: `d${index}` }, line))
         ]
       )
@@ -1194,14 +1575,17 @@ function renderPage(ctx) {
   );
 }
 var EN = {
-  lead: "Route selected model providers through your own forward proxy. Other providers stay direct. Requests to loopback or private addresses (localhost, 127.x, private ranges) always go direct \u2014 a forward proxy cannot reach your own machine.",
+  lead: "Route selected model providers through your own forward proxy. Other providers stay direct. Requests to loopback or private addresses (localhost, 127.x, private ranges) go direct by default; set the top-level localDirect to false to proxy them instead \u2014 a forward proxy normally cannot reach your own machine.",
   empty: "No providers found yet.",
+  catalogueLoading: "Loading providers\u2026",
+  catalogueError: "Could not load the provider list: ",
+  catalogueStale: "Could not load the provider list; showing the saved configuration: ",
   useProxy: "Use a proxy for this provider",
   useDefault: "Use the default proxy",
   defaultTitle: "Default proxy",
-  defaultLead: 'One endpoint, reused by every provider that turns on "Use the default proxy".',
+  defaultLead: 'One endpoint, reused by every provider that turns on "Use the default proxy". The status only reports configuration completeness; use the Test button on a card to verify reachability.',
   inheritingDefault: "Using the default proxy: ",
-  defaultMissing: "The default proxy cannot be used, so this provider is not proxied: ",
+  defaultMissing: "The default proxy configuration is incomplete, so this provider is not proxied: ",
   filterLabel: "Filter",
   filterPlaceholder: "Filter by name or id\u2026",
   noMatch: "No provider matches the filter.",
@@ -1212,7 +1596,7 @@ var EN = {
   port: "Port",
   username: "Username",
   password: "Password",
-  hostHint: "Host or IP only, without scheme or path. A full proxy URL (socks5://user:pass@host:1080) can be pasted instead \u2014 it is split into the fields.",
+  hostHint: "Only an IPv4, IPv6, or domain name is allowed. A full proxy URL (socks5://user:pass@host:1080) can be pasted instead \u2014 it is split into the fields.",
   passwordHint: "Sent to the SOCKS5 proxy for authentication; stored with this setting.",
   passwordHintProxy: "Sent to the proxy as an authentication password; stored with this setting.",
   hitCountPrefix: "",
@@ -1231,30 +1615,53 @@ var EN = {
   testFailed: "Test failed",
   exitIpLabel: "exit IP ",
   directLabel: "direct (not through the proxy)",
+  cachedLabel: "cached",
+  testTargetLabel: "Target: ",
+  targetSourceRoute: " (this card's own target)",
+  targetSourceUpstream: " (this provider's real upstream)",
+  targetSourceTestUrl: " (global self-check URL)",
+  globalTitle: "Global settings (advanced)",
+  globalLead: "These fields are saved with the plugin rather than per provider. Leave testUrl empty to use the built-in default; comma/space separated candidates are tried in order and only the first 5 are used. localDirect is on by default; turn it off only when the proxy itself is a loopback or private target.",
+  testUrl: "Self-check URL",
+  testUrlHint: "Comma/space separated; http(s) URLs in the order they should be tried.",
+  testUrlEmptyHint: "Empty means the Host uses its built-in default URL.",
+  testUrlInvalidHint: "Some candidates are not absolute http(s) URLs. They are saved, but those checks will fail.",
+  testUrlTooManyHint: "More than 5 candidates are listed; only the first 5 take effect.",
+  restoreDefaultTestUrl: "Restore default",
+  localDirect: "Loopback / private targets go direct",
+  localDirectOnHint: "On: localhost, 127.x and private ranges bypass the proxy.",
+  localDirectOffHint: "Off: loopback/private targets also use the proxy. Enable only when the proxy itself is the target.",
   advanced: "Advanced: target host rules",
   onlyHosts: "Proxy only",
   onlyHostsHint: "Comma/space separated; when set, only requests to these hosts are proxied (suffix match, * for all).",
   bypassHosts: "Bypass",
   bypassHostsHint: "Comma/space separated; requests to these hosts go direct, taking priority.",
-  ruleDeadHint: "These entries never match \u2014 rules take host names only, without scheme or path: ",
+  ruleDeadHint: "These entries never match \u2014 use bare host names (no port, scheme or path); a wildcard must be `*` or start with `*.`: ",
   testTarget: "Self-check target",
   testTargetHint: "Empty uses the top-level testUrl; when set, this card's Test requests this URL instead \u2014 point it at a real upstream to verify the end-to-end path.",
   socks5Hint: "SOCKS5 tunnels the connection; the proxy resolves the target host name.",
   on: "proxied",
-  live: "active",
+  rejected: "config rejected",
   off: "direct",
+  complete: "complete",
+  notConfigured: "not configured",
   diagnostics: "Connection diagnostics",
-  diagPending: "(collecting\u2026)"
+  diagPending: "(collecting\u2026)",
+  saveFailedPrefix: "Save failed: ",
+  close: "Close"
 };
 var ZH = {
-  lead: "\u8BA9\u6307\u5B9A\u7684 provider \u8D70\u4F60\u81EA\u5DF1\u7684\u6B63\u5411\u4EE3\u7406\uFF0C\u5176\u5B83 provider \u4FDD\u6301\u76F4\u8FDE\u3002\u6307\u5411\u672C\u673A\u6216\u5185\u7F51\u5730\u5740\uFF08localhost\u3001127.x\u3001\u79C1\u6709\u7F51\u6BB5\uFF09\u7684\u8BF7\u6C42\u59CB\u7EC8\u76F4\u8FDE\u2014\u2014\u6B63\u5411\u4EE3\u7406\u591F\u4E0D\u5230\u4F60\u81EA\u5DF1\u7684\u673A\u5668\u3002",
+  lead: "\u8BA9\u6307\u5B9A\u7684 provider \u8D70\u4F60\u81EA\u5DF1\u7684\u6B63\u5411\u4EE3\u7406\uFF0C\u5176\u5B83 provider \u4FDD\u6301\u76F4\u8FDE\u3002\u6307\u5411\u672C\u673A\u6216\u5185\u7F51\u5730\u5740\uFF08localhost\u3001127.x\u3001\u79C1\u6709\u7F51\u6BB5\uFF09\u7684\u8BF7\u6C42\u9ED8\u8BA4\u76F4\u8FDE\uFF0C\u9876\u5C42 localDirect \u8BBE\u4E3A false \u65F6\u6062\u590D\u8D70\u4EE3\u7406\u2014\u2014\u6B63\u5411\u4EE3\u7406\u901A\u5E38\u591F\u4E0D\u5230\u4F60\u81EA\u5DF1\u7684\u673A\u5668\u3002",
   empty: "\u6CA1\u6709\u68C0\u6D4B\u5230\u4EFB\u4F55 provider\u3002",
+  catalogueLoading: "\u6B63\u5728\u8BFB\u53D6 provider \u5217\u8868\u2026",
+  catalogueError: "\u8BFB\u53D6 provider \u5217\u8868\u5931\u8D25\uFF1A",
+  catalogueStale: "provider \u5217\u8868\u8BFB\u53D6\u5931\u8D25\uFF0C\u4E0B\u9762\u663E\u793A\u7684\u662F\u5DF2\u4FDD\u5B58\u7684\u914D\u7F6E\uFF1A",
   useProxy: "\u4E3A\u8BE5 provider \u542F\u7528\u4EE3\u7406",
   useDefault: "\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406",
   defaultTitle: "\u9ED8\u8BA4\u4EE3\u7406",
-  defaultLead: "\u4E3A\u52FE\u9009\u300C\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406\u300D\u7684 provider \u590D\u7528\u7684\u7AEF\u70B9\uFF0C\u53EA\u586B\u4E00\u6B21\u3002",
+  defaultLead: "\u4E3A\u52FE\u9009\u300C\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406\u300D\u7684 provider \u590D\u7528\u7684\u7AEF\u70B9\uFF0C\u53EA\u586B\u4E00\u6B21\u3002\u72B6\u6001\u53EA\u8868\u793A\u914D\u7F6E\u662F\u5426\u5B8C\u6574\uFF1B\u4EE3\u7406\u662F\u5426\u53EF\u8FBE\u8BF7\u7528\u5361\u7247\u4E0A\u7684\u300C\u6D4B\u8BD5\u300D\u9A8C\u8BC1\u3002",
   inheritingDefault: "\u4F7F\u7528\u9ED8\u8BA4\u4EE3\u7406\uFF1A",
-  defaultMissing: "\u9876\u5C42\u9ED8\u8BA4\u4EE3\u7406\u4E0D\u53EF\u7528\uFF0C\u8BE5 provider \u4E0D\u4F1A\u8D70\u4EE3\u7406\uFF1A",
+  defaultMissing: "\u9876\u5C42\u9ED8\u8BA4\u4EE3\u7406\u914D\u7F6E\u4E0D\u5B8C\u6574\uFF0C\u8BE5 provider \u4E0D\u4F1A\u8D70\u4EE3\u7406\uFF1A",
   filterLabel: "\u8FC7\u6EE4",
   filterPlaceholder: "\u6309\u540D\u79F0\u6216 id \u8FC7\u6EE4\u2026",
   noMatch: "\u6CA1\u6709\u5339\u914D\u7684 provider\u3002",
@@ -1265,7 +1672,7 @@ var ZH = {
   port: "\u7AEF\u53E3",
   username: "\u7528\u6237\u540D",
   password: "\u5BC6\u7801",
-  hostHint: "\u53EA\u586B\u4E3B\u673A\u540D\u6216 IP\uFF0C\u4E0D\u8981\u5E26\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84\uFF1B\u4E5F\u53EF\u4EE5\u76F4\u63A5\u7C98\u8D34\u5B8C\u6574\u4EE3\u7406 URL\uFF08\u5982 socks5://user:pass@host:1080\uFF09\uFF0C\u4F1A\u81EA\u52A8\u62C6\u5206\u5230\u5404\u5B57\u6BB5\u3002",
+  hostHint: "\u53EA\u5141\u8BB8\u586B\u5199 IPv4\u3001IPv6 \u6216\u57DF\u540D\uFF1B\u4E5F\u53EF\u4EE5\u76F4\u63A5\u7C98\u8D34\u5B8C\u6574\u4EE3\u7406 URL\uFF08\u5982 socks5://user:pass@host:1080\uFF09\uFF0C\u4F1A\u81EA\u52A8\u62C6\u5206\u5230\u5404\u5B57\u6BB5\u3002",
   passwordHint: "\u4EC5\u4F5C\u4E3A SOCKS5 \u8BA4\u8BC1\u53E3\u4EE4\u53D1\u9001\u7ED9\u4EE3\u7406\uFF1B\u968F\u8BE5\u8BBE\u7F6E\u4E00\u8D77\u4FDD\u5B58\u3002",
   passwordHintProxy: "\u4F5C\u4E3A\u4EE3\u7406\u8BA4\u8BC1\u53E3\u4EE4\u53D1\u9001\u7ED9\u4EE3\u7406\uFF1B\u968F\u8BE5\u8BBE\u7F6E\u4E00\u8D77\u4FDD\u5B58\u3002",
   hitCountPrefix: "\u5DF2\u4EE3\u7406 ",
@@ -1284,20 +1691,40 @@ var ZH = {
   testFailed: "\u6D4B\u8BD5\u5931\u8D25",
   exitIpLabel: "\u51FA\u53E3 IP ",
   directLabel: "\u76F4\u8FDE\uFF08\u672A\u7ECF\u8FC7\u4EE3\u7406\uFF09",
+  cachedLabel: "\u7F13\u5B58",
+  testTargetLabel: "\u76EE\u6807 ",
+  targetSourceRoute: "\uFF08\u672C\u5361\u7247\u81EA\u68C0\u76EE\u6807\uFF09",
+  targetSourceUpstream: "\uFF08\u8BE5 provider \u7684\u771F\u5B9E\u4E0A\u6E38\uFF09",
+  targetSourceTestUrl: "\uFF08\u5168\u5C40\u81EA\u68C0\u5730\u5740\uFF09",
+  globalTitle: "\u5168\u5C40\u8BBE\u7F6E\uFF08\u9AD8\u7EA7\uFF09",
+  globalLead: "\u8FD9\u91CC\u7684\u4E24\u9879\u5C5E\u4E8E\u63D2\u4EF6\u5168\u5C40\u8BBE\u7F6E\u3002testUrl \u7559\u7A7A\u65F6 Host \u4F7F\u7528\u5185\u7F6E\u9ED8\u8BA4\u503C\uFF1B\u591A\u4E2A\u5019\u9009\u7528\u9017\u53F7\u6216\u7A7A\u683C\u5206\u9694\uFF0C\u6309\u987A\u5E8F\u56DE\u9000\uFF0C\u53EA\u6709\u524D 5 \u4E2A\u751F\u6548\u3002localDirect \u9ED8\u8BA4\u5F00\u542F\uFF1B\u53EA\u6709\u4EE3\u7406\u672C\u8EAB\u5C31\u662F\u672C\u673A\u6216\u5185\u7F51\u76EE\u6807\u65F6\u624D\u9700\u8981\u5173\u95ED\u3002",
+  testUrl: "\u81EA\u68C0\u5730\u5740",
+  testUrlHint: "\u9017\u53F7\u6216\u7A7A\u683C\u5206\u9694\uFF1B\u6309\u987A\u5E8F\u5C1D\u8BD5\u7684 http(s) URL\u3002",
+  testUrlEmptyHint: "\u7559\u7A7A\u65F6 Host \u4F7F\u7528\u5185\u7F6E\u9ED8\u8BA4\u5730\u5740\u3002",
+  testUrlInvalidHint: "\u90E8\u5206\u5019\u9009\u4E0D\u662F\u7EDD\u5BF9\u7684 http(s) URL\u3002\u4ECD\u4F1A\u4FDD\u5B58\uFF0C\u4F46\u8FD9\u4E9B\u5019\u9009\u4F1A\u6D4B\u8BD5\u5931\u8D25\u3002",
+  testUrlTooManyHint: "\u5019\u9009\u8D85\u8FC7 5 \u4E2A\uFF0C\u53EA\u6709\u524D 5 \u4E2A\u751F\u6548\u3002",
+  restoreDefaultTestUrl: "\u6062\u590D\u9ED8\u8BA4",
+  localDirect: "\u672C\u673A / \u5185\u7F51\u76EE\u6807\u76F4\u8FDE",
+  localDirectOnHint: "\u5F00\u542F\uFF1Alocalhost\u3001127.x \u4E0E\u79C1\u6709\u7F51\u6BB5\u7ED5\u8FC7\u4EE3\u7406\u3002",
+  localDirectOffHint: "\u5173\u95ED\uFF1A\u672C\u673A / \u5185\u7F51\u76EE\u6807\u4E5F\u8D70\u4EE3\u7406\uFF1B\u4EC5\u5728\u4EE3\u7406\u672C\u8EAB\u5C31\u662F\u76EE\u6807\u65F6\u4F7F\u7528\u3002",
   advanced: "\u9AD8\u7EA7\uFF1A\u76EE\u6807\u57DF\u540D\u89C4\u5219",
   onlyHosts: "\u4EC5\u8D70\u4EE3\u7406",
   onlyHostsHint: "\u9017\u53F7\u6216\u7A7A\u683C\u5206\u9694\uFF1B\u975E\u7A7A\u65F6\u53EA\u6709\u5339\u914D\u8FD9\u4E9B\u4E3B\u673A\u7684\u8BF7\u6C42\u8D70\u4EE3\u7406\uFF08\u540E\u7F00\u5339\u914D\uFF0C* \u8868\u793A\u5168\u90E8\uFF09\u3002",
   bypassHosts: "\u76F4\u8FDE",
   bypassHostsHint: "\u9017\u53F7\u6216\u7A7A\u683C\u5206\u9694\uFF1B\u5339\u914D\u8FD9\u4E9B\u4E3B\u673A\u7684\u8BF7\u6C42\u76F4\u8FDE\uFF0C\u4F18\u5148\u4E8E\u4E0A\u4E00\u9879\u3002",
-  ruleDeadHint: "\u4EE5\u4E0B\u6761\u76EE\u6C38\u8FDC\u5339\u914D\u4E0D\u4E0A\u2014\u2014\u89C4\u5219\u53EA\u8BA4\u4E3B\u673A\u540D\uFF0C\u4E0D\u8981\u5E26\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84\uFF1A",
+  ruleDeadHint: "\u4EE5\u4E0B\u6761\u76EE\u6C38\u8FDC\u5339\u914D\u4E0D\u4E0A\u2014\u2014\u89C4\u5219\u53EA\u8BA4\u4E3B\u673A\u540D\uFF08\u4E0D\u8981\u5E26\u7AEF\u53E3\u3001\u534F\u8BAE\u524D\u7F00\u6216\u8DEF\u5F84\uFF09\uFF0C\u901A\u914D\u7B26\u53EA\u80FD\u662F\u5355\u72EC\u7684 * \u6216\u4EE5 *. \u5F00\u5934\uFF1A",
   testTarget: "\u81EA\u68C0\u76EE\u6807",
   testTargetHint: "\u7559\u7A7A\u7528\u9876\u5C42 testUrl\uFF1B\u586B\u5199\u540E\u8BE5\u5361\u7247\u7684\u300C\u6D4B\u8BD5\u300D\u6539\u4E3A\u8BF7\u6C42\u8FD9\u4E2A\u5730\u5740\uFF0C\u53EF\u62FF\u771F\u5B9E\u4E0A\u6E38\u9A8C\u8BC1\u7AEF\u5230\u7AEF\u8DEF\u5F84\u3002",
   socks5Hint: "SOCKS5 \u4F1A\u5EFA\u7ACB\u96A7\u9053\uFF0C\u76EE\u6807\u57DF\u540D\u7531\u4EE3\u7406\u7AEF\u89E3\u6790\u3002",
   on: "\u8D70\u4EE3\u7406",
-  live: "\u542F\u7528\u4E2D",
+  rejected: "\u914D\u7F6E\u88AB\u62D2",
   off: "\u76F4\u8FDE",
+  complete: "\u914D\u7F6E\u5B8C\u6574",
+  notConfigured: "\u672A\u914D\u7F6E",
   diagnostics: "\u8FDE\u63A5\u8BCA\u65AD",
-  diagPending: "\uFF08\u6B63\u5728\u6536\u96C6\u2026\uFF09"
+  diagPending: "\uFF08\u6B63\u5728\u6536\u96C6\u2026\uFF09",
+  saveFailedPrefix: "\u4FDD\u5B58\u5931\u8D25\uFF1A",
+  close: "\u5173\u95ED"
 };
 function stringsFor(ctx) {
   const language = localeOf(ctx);