herdr-remote 0.2.3 → 0.2.5

package/dist/tui.mjs

@@ -78,6 +78,10 @@ var require_config = __commonJS({
         remoteUrl: "",
         maxPayloadBytes: 1024 * 1024,
         maxClientsPerHost: 16,
+        maxHosts: 1024,
+        maxPendingHandshakes: 1024,
+        maxBufferedBytesPerClient: 4 * 1024 * 1024,
+        hostReconnectGraceMs: 30 * 1e3,
         allowedOrigins: []
       },
       herdr: {
@@ -203,6 +207,20 @@ var require_config = __commonJS({
       config.relay.port = parseInteger(config.relay.port, DEFAULTS.relay.port, 1, 65535);
       config.relay.maxPayloadBytes = parseInteger(config.relay.maxPayloadBytes, DEFAULTS.relay.maxPayloadBytes, 4096, 16 * 1024 * 1024);
       config.relay.maxClientsPerHost = parseInteger(config.relay.maxClientsPerHost, DEFAULTS.relay.maxClientsPerHost, 1, 256);
+      config.relay.maxHosts = parseInteger(config.relay.maxHosts, DEFAULTS.relay.maxHosts, 1, 1e5);
+      config.relay.maxPendingHandshakes = parseInteger(config.relay.maxPendingHandshakes, DEFAULTS.relay.maxPendingHandshakes, 16, 1e5);
+      config.relay.maxBufferedBytesPerClient = parseInteger(
+        config.relay.maxBufferedBytesPerClient,
+        DEFAULTS.relay.maxBufferedBytesPerClient,
+        64 * 1024,
+        256 * 1024 * 1024
+      );
+      config.relay.hostReconnectGraceMs = parseInteger(
+        config.relay.hostReconnectGraceMs,
+        DEFAULTS.relay.hostReconnectGraceMs,
+        1e3,
+        24 * 60 * 60 * 1e3
+      );
       config.auth.pairingTtlMs = parseInteger(config.auth.pairingTtlMs, DEFAULTS.auth.pairingTtlMs, 30 * 1e3, 24 * 60 * 60 * 1e3);
       config.auth.deviceTtlMs = parseInteger(config.auth.deviceTtlMs, DEFAULTS.auth.deviceTtlMs, 60 * 1e3, 365 * 24 * 60 * 60 * 1e3);
       config.auth.maxDevices = parseInteger(config.auth.maxDevices, DEFAULTS.auth.maxDevices, 1, 1e4);
@@ -238,6 +256,10 @@ var require_config = __commonJS({
       if (env.RELAY_PORT) config.relay.port = env.RELAY_PORT;
       if (env.RELAY_PUBLIC_URL) config.relay.publicUrl = env.RELAY_PUBLIC_URL;
       if (env.RELAY_REMOTE_URL) config.relay.remoteUrl = env.RELAY_REMOTE_URL;
+      if (env.RELAY_MAX_HOSTS) config.relay.maxHosts = env.RELAY_MAX_HOSTS;
+      if (env.RELAY_MAX_PENDING_HANDSHAKES) config.relay.maxPendingHandshakes = env.RELAY_MAX_PENDING_HANDSHAKES;
+      if (env.RELAY_MAX_BUFFERED_BYTES_PER_CLIENT) config.relay.maxBufferedBytesPerClient = env.RELAY_MAX_BUFFERED_BYTES_PER_CLIENT;
+      if (env.RELAY_HOST_RECONNECT_GRACE_MS) config.relay.hostReconnectGraceMs = env.RELAY_HOST_RECONNECT_GRACE_MS;
       if (env.HERDR_SOCKET_PATH) config.herdr.socketPath = env.HERDR_SOCKET_PATH;
       if (env.HERDR_CWD) config.herdr.cwd = env.HERDR_CWD;
       if (env.HERDR_ARGS_JSON) {
@@ -360,7 +382,7 @@ var require_en = __commonJS({
     "use strict";
     module.exports = {
       "app.name": "Herdr Remote",
-      "app.tagline": "Remote browser access to your Herdr workspaces",
+      "app.tagline": "Remote browser access to Herdr workspaces",
       "common.yes": "Yes",
       "common.no": "No",
       "common.on": "on",
@@ -393,12 +415,12 @@ var require_en = __commonJS({
       "nav.about": "Language & about",
       "mode.local": "This machine only",
       "mode.lan": "Local network / Tailscale",
-      "mode.official": "Official relay (no server needed)",
+      "mode.official": "Official relay",
       "mode.remote": "Self-hosted relay",
-      "mode.local.description": "The relay listens on 127.0.0.1. Only a browser on this machine can reach it.",
-      "mode.lan.description": "The relay listens on 0.0.0.0 (every interface), so phones on your LAN or tailnet can reach it.",
-      "mode.official.description": "Reach this machine from anywhere through the relay run by the Herdr Remote project. Nothing to deploy. Your terminal traffic passes through a server you do not control, and only devices you pair can open it.",
-      "mode.remote.description": "No local relay. The workstation dials a relay you run, which is the only way in from outside your network.",
+      "mode.local.description": "Relay listens on 127.0.0.1. Local browser only.",
+      "mode.lan.description": "Relay listens on 0.0.0.0. Accessible over LAN or Tailscale.",
+      "mode.official.description": "Connect via official relay. No server needed.",
+      "mode.remote.description": "Connect via self-hosted relay for external access.",
       "overview.title": "Status",
       "overview.mode": "Access mode",
       "overview.relay": "Relay",
@@ -413,20 +435,20 @@ var require_en = __commonJS({
       "overview.relayRemote": "remote, {url}",
       "overview.socketMissing": "not found \u2014 is Herdr running?",
       "overview.unreachable": "unreachable: {message}",
-      "overview.notStarted": "Services are not running. Open the Services tab to start them.",
+      "overview.notStarted": "Services not running. Open Services tab to start.",
       "pair.title": "Pair a device",
-      "pair.generate": "Generate a one-time pairing code",
-      "pair.regenerate": "Generate another code",
-      "pair.working": "Starting services and requesting a code\u2026",
+      "pair.generate": "Generate pairing code",
+      "pair.regenerate": "Regenerate code",
+      "pair.working": "Generating pairing code\u2026",
       "pair.code": "Pairing code",
-      "pair.url": "Open on your phone",
+      "pair.url": "Access URL",
       "pair.expires": "Expires in {minutes} (at {time})",
-      "pair.expired": "This code has expired. Generate a new one.",
-      "pair.instructions": "Open the URL, enter the code, and the browser is paired for good.",
-      "pair.qrHint": "Scan the code with your phone camera to open the URL.",
-      "pair.qrUnavailable": "The terminal is too narrow for a QR code; use the URL above.",
-      "pair.failed": "Could not create a pairing code: {message}",
-      "pair.hostOffline": "The relay has no workstation connected yet. Start the services first.",
+      "pair.expired": "Code expired. Generate a new one.",
+      "pair.instructions": "Open URL and enter code to pair.",
+      "pair.qrHint": "Scan QR code to open URL.",
+      "pair.qrUnavailable": "Terminal too narrow for QR code; use URL above.",
+      "pair.failed": "Could not create pairing code: {message}",
+      "pair.hostOffline": "Relay has no workstation connected. Start services first.",
       "services.title": "Services",
       "services.start": "Start services",
       "services.stop": "Stop services",
@@ -436,71 +458,74 @@ var require_en = __commonJS({
       "services.restarted": "Services restarted.",
       "services.startFailed": "Could not start services: {message}",
       "services.stopFailed": "Could not stop services: {message}",
-      "services.unsavedBlocked": "There are unsaved changes. Save them first, or the services restart on the configuration still on disk.",
-      "services.managedNotice": "These services are managed by {manager}; the keep-alive unit was used to apply the change.",
-      "services.logs": "Recent log output",
-      "services.logEmpty": "No log output yet.",
+      "services.unsavedBlocked": "Unsaved changes. Save before restarting.",
+      "services.managedNotice": "Managed by {manager}; applied via keep-alive service.",
+      "services.logs": "Recent logs",
+      "services.logEmpty": "No logs.",
       "services.logRelay": "Relay",
       "services.logHost": "Host connector",
       "relay.title": "Relay settings",
       "relay.settings": "Settings",
+      "relay.locked": "fixed",
+      "relay.officialFixed": "The official relay address is fixed and cannot be edited.",
+      "relay.officialHint": "Official relay: address is fixed and no password is needed.",
       "relay.password": "Relay password",
-      "relay.passwordHint": "Must match RELAY_PASSWORD on the relay. Leave empty for a public relay.",
+      "relay.passwordHint": "Must match RELAY_PASSWORD on relay. Leave empty if public.",
       "relay.passwordSet": "set",
-      "relay.passwordEmpty": "not set (public relay)",
-      "relay.passwordSaved": "Relay password saved. Restart the services to apply it.",
-      "relay.showPassword": "Show the password",
-      "relay.hidePassword": "Hide the password",
-      "relay.identity": "Workstation id",
-      "relay.regenerate": "Generate a new workstation identity",
-      "relay.regenerated": "New workstation identity generated. Restart the services to enrol again.",
-      "relay.envSnippet": "Command for your relay server",
-      "relay.envHint": "Run this on the relay host.",
-      "relay.test": "Test the relay connection",
+      "relay.passwordEmpty": "not set (public)",
+      "relay.passwordSaved": "Relay password saved. Restart services to apply.",
+      "relay.showPassword": "Show password",
+      "relay.hidePassword": "Hide password",
+      "relay.identity": "Workstation ID",
+      "relay.regenerate": "Generate new ID",
+      "relay.regenerated": "New workstation identity generated. Restart services to re-register.",
+      "relay.envSnippet": "Relay startup command",
+      "relay.envHint": "Run this command on the relay host.",
+      "relay.test": "Test relay connection",
       "relay.testOk": "Relay reachable: version {version}, {hosts} workstation(s) connected.",
       "relay.testFailed": "Relay unreachable: {message}",
-      "relay.selectAddress": "Choose the address to advertise",
+      "relay.selectAddress": "Choose advertised address",
       "relay.listenAddress": "Listen address",
-      "relay.listenAddressHint": "This is the server bind address. The advertised address below is what browsers open.",
+      "relay.listenAddressHint": "Server bind address. Browsers use advertised address below.",
       "relay.addressTailscale": "Tailscale",
       "relay.addressLan": "LAN",
       "relay.addressVirtual": "virtual",
       "relay.addressLoopback": "loopback",
-      "relay.noAddresses": "No non-loopback addresses found. Connect to a network or start Tailscale.",
-      "relay.docsHint": "Running your own relay: see docs/self-hosted-relay.md",
+      "relay.noAddresses": "No non-loopback addresses found.",
+      "relay.docsHint": "Self-hosting guide: docs/self-hosted-relay.md",
       "keepalive.title": "Keep-alive service",
       "keepalive.manager": "Manager",
       "keepalive.state": "State",
       "keepalive.install": "Install and start",
       "keepalive.uninstall": "Stop and remove",
-      "keepalive.restart": "Restart the service",
+      "keepalive.restart": "Restart service",
       "keepalive.installed": "Keep-alive installed with {manager}.",
       "keepalive.uninstalled": "Keep-alive removed.",
       "keepalive.restarted": "Keep-alive service restarted.",
       "keepalive.failed": "Keep-alive operation failed: {message}",
       "keepalive.unitPath": "Unit file",
-      "keepalive.logsHint": "Follow logs with: {command}",
-      "keepalive.linger": "Start at boot without logging in",
-      "keepalive.lingerEnabled": "Lingering is enabled: the service starts at boot.",
-      "keepalive.lingerDisabled": "Lingering is off, so the service only runs while you are logged in.",
+      "keepalive.logsHint": "View logs: {command}",
+      "keepalive.linger": "Start at boot",
+      "keepalive.lingerEnabled": "Start at boot enabled.",
+      "keepalive.lingerDisabled": "Start at boot disabled (runs while logged in).",
       "keepalive.enableLinger": "Enable start at boot",
-      "keepalive.lingerDone": "Lingering enabled for {username}.",
-      "keepalive.fallbackNote": "No system service manager is available; a supervised background process is used instead. It does not survive a reboot.",
+      "keepalive.lingerDone": "Start at boot enabled for {username}.",
+      "keepalive.fallbackNote": "No system service manager found; background process will not survive reboot.",
       "herdr.title": "Herdr integration",
       "herdr.socketPath": "Socket path",
       "herdr.args": "Extra arguments",
       "herdr.plugin": "Plugin registration",
       "herdr.pluginRegistered": "Registered with Herdr.",
       "herdr.pluginMissing": "Not registered with Herdr.",
-      "herdr.register": "Register this package as a Herdr plugin",
-      "herdr.unregister": "Unregister the Herdr plugin",
+      "herdr.register": "Register as Herdr plugin",
+      "herdr.unregister": "Unregister plugin",
       "herdr.registerDone": "Registered: {path}",
       "herdr.unregisterDone": "Plugin unregistered.",
       "herdr.registerFailed": "Registration failed: {message}",
-      "herdr.cliMissing": "The herdr command was not found on PATH.",
+      "herdr.cliMissing": "Command herdr not found in PATH.",
       "about.title": "Language & about",
       "about.language": "Interface language",
-      "about.languageAuto": "Follow the system ({detected})",
+      "about.languageAuto": "Follow system ({detected})",
       "about.languageZh": "\u4E2D\u6587",
       "about.languageEn": "English",
       "about.version": "Version",
@@ -510,20 +535,20 @@ var require_en = __commonJS({
       "about.docs": "Self-hosting guide: docs/self-hosted-relay.md",
       "wizard.title": "First-time setup",
       "wizard.step": "Step {current} of {total}",
-      "wizard.languageTitle": "Choose your language",
-      "wizard.accessTitle": "How do you want to reach this machine?",
-      "wizard.accessHint": "You can change this later on the Relay screen.",
-      "wizard.addressTitle": "Which address should phones use?",
-      "wizard.relayTitle": "Your relay server",
+      "wizard.languageTitle": "Choose language",
+      "wizard.accessTitle": "Access mode",
+      "wizard.accessHint": "Can be changed later in Relay settings.",
+      "wizard.addressTitle": "Browser access address",
+      "wizard.relayTitle": "Relay server",
       "wizard.relayUrlLabel": "Relay URL (wss://\u2026)",
-      "wizard.relayHint": "The relay must already be running. See docs/self-hosted-relay.md to set one up.",
+      "wizard.relayHint": "Relay must be running. See docs/self-hosted-relay.md.",
       "wizard.passwordTitle": "Relay password",
-      "wizard.passwordHint": "The RELAY_PASSWORD your relay was started with. Leave it empty if the relay has none.",
-      "wizard.finishTitle": "Ready",
+      "wizard.passwordHint": "RELAY_PASSWORD of the relay. Leave empty if unset.",
+      "wizard.finishTitle": "Finish",
       "wizard.finishHint": "Configuration will be saved to {path}.",
-      "wizard.startNow": "Start the services now",
-      "wizard.installKeepalive": "Keep the services running in the background",
-      "wizard.finish": "Save and continue",
+      "wizard.startNow": "Start services now",
+      "wizard.installKeepalive": "Run in background",
+      "wizard.finish": "Save and finish",
       "field.mode": "Access mode",
       "field.port": "Relay port",
       "field.lanHost": "Browser address",
@@ -536,15 +561,15 @@ var require_en = __commonJS({
       "placeholder.autoDiscovered": "auto-discovered",
       "placeholder.none": "none",
       "error.invalidMode": "Unknown access mode.",
-      "error.invalidPort": "The port must be a number between 1 and 65535.",
-      "error.invalidLanHost": "The browser address must be a reachable LAN or Tailscale address, not loopback or 0.0.0.0.",
-      "error.invalidRelayUrl": "The relay URL must start with wss://, ws://, https:// or http://.",
-      "error.invalidPublicUrl": "The browser URL must start with https:// or http:// and cannot use 0.0.0.0 or ::.",
+      "error.invalidPort": "Port must be a number between 1 and 65535.",
+      "error.invalidLanHost": "Browser address must be a reachable LAN or Tailscale address, not loopback or 0.0.0.0.",
+      "error.invalidRelayUrl": "Relay URL must start with wss://, ws://, https:// or http://.",
+      "error.invalidPublicUrl": "Browser URL must start with https:// or http:// and cannot use 0.0.0.0 or ::.",
       "error.invalidLanguage": "Unknown language.",
       "error.invalidKeepalive": "Unknown keep-alive manager.",
       "error.unknownField": "Unknown setting.",
-      "error.remoteUrlRequired": "A relay URL is required for the self-hosted relay mode.",
-      "error.saveFailed": "Could not save the configuration: {message}",
+      "error.remoteUrlRequired": "Relay URL is required for self-hosted relay mode.",
+      "error.saveFailed": "Could not save configuration: {message}",
       "hint.navigate": "\u2191\u2193 move",
       "hint.select": "\u21B5 select",
       "hint.edit": "\u21B5 edit",
@@ -554,22 +579,23 @@ var require_en = __commonJS({
       "hint.mouseOn": "m mouse off",
       "hint.mouseOff": "m mouse on",
       "hint.mouseUnsupported": "mouse unsupported",
-      "hint.restartRequired": "Restart the services to apply these changes.",
-      "hint.unsavedChanges": "Unsaved changes \u2014 press s to save.",
+      "hint.restartRequired": "Restart services to apply changes.",
+      "hint.unsavedChanges": "Unsaved changes (press s to save).",
       "hint.save": "s save",
       "hint.editing": "\u21B5 confirm \xB7 esc cancel",
       "update.title": "Updates",
       "update.check": "Check for updates",
       "update.checking": "Checking npm\u2026",
       "update.upToDate": "Up to date ({version})",
-      "update.available": "Update available: {version} \u2014 press Enter to install",
+      "update.available": "Update {version} available (press Enter to install)",
       "update.updating": "Installing {version}\u2026",
       "update.done": "Updated to {version}",
-      "update.restartHint": "Update installed. Restart herdr-remote to use it.",
-      "update.errorNetwork": "Could not reach the npm registry",
-      "update.errorFailed": "The update failed. Try: npm install -g herdr-remote@latest",
-      "update.cannot.source": "Running from a source checkout \u2014 update with git, not npm",
-      "update.cannot.linked": "Running from a linked working copy \u2014 npm link manages this one"
+      "update.restartHint": "Update installed. Restart herdr-remote to apply.",
+      "update.errorNetwork": "Could not reach any npm registry",
+      "update.errorNetworkDetail": "No registry answered: {message}",
+      "update.errorFailed": "Update failed. Run: npm install -g herdr-remote@latest",
+      "update.cannot.source": "Source checkout \u2014 update with git",
+      "update.cannot.linked": "Linked package \u2014 managed by npm link"
     };
   }
 });
@@ -580,7 +606,7 @@ var require_zh = __commonJS({
     "use strict";
     module.exports = {
       "app.name": "Herdr Remote",
-      "app.tagline": "\u5728\u6D4F\u89C8\u5668\u91CC\u8FDC\u7A0B\u4F7F\u7528\u4F60\u7684 Herdr \u5DE5\u4F5C\u533A",
+      "app.tagline": "\u5728\u6D4F\u89C8\u5668\u4E2D\u4F7F\u7528 Herdr \u5DE5\u4F5C\u533A",
       "common.yes": "\u662F",
       "common.no": "\u5426",
       "common.on": "\u5F00",
@@ -598,11 +624,11 @@ var require_zh = __commonJS({
       "common.disabled": "\u5DF2\u505C\u7528",
       "common.loading": "\u5904\u7406\u4E2D\u2026",
       "common.save": "\u4FDD\u5B58\u8BBE\u7F6E",
-      "common.saved": "\u914D\u7F6E\u5DF2\u4FDD\u5B58\u5230 {path}",
+      "common.saved": "\u914D\u7F6E\u5DF2\u4FDD\u5B58\u81F3 {path}",
       "common.back": "\u8FD4\u56DE",
       "common.cancel": "\u53D6\u6D88",
       "common.confirm": "\u786E\u8BA4",
-      "common.pid": "\u8FDB\u7A0B {pid}",
+      "common.pid": "PID {pid}",
       "common.notApplicable": "\u4E0D\u9002\u7528",
       "nav.overview": "\u6982\u89C8",
       "nav.pair": "\u914D\u5BF9\u8BBE\u5907",
@@ -613,12 +639,12 @@ var require_zh = __commonJS({
       "nav.about": "\u8BED\u8A00\u4E0E\u5173\u4E8E",
       "mode.local": "\u4EC5\u672C\u673A",
       "mode.lan": "\u5C40\u57DF\u7F51 / Tailscale",
-      "mode.official": "\u5B98\u65B9 relay\uFF08\u65E0\u9700\u81EA\u5EFA\u670D\u52A1\u5668\uFF09",
-      "mode.remote": "\u81EA\u5EFA relay",
-      "mode.local.description": "relay \u76D1\u542C 127.0.0.1\uFF0C\u53EA\u6709\u672C\u673A\u6D4F\u89C8\u5668\u80FD\u8BBF\u95EE\u3002",
-      "mode.lan.description": "relay \u76D1\u542C 0.0.0.0\uFF08\u6240\u6709\u7F51\u5361\uFF09\uFF0C\u5C40\u57DF\u7F51\u6216 tailnet \u91CC\u7684\u624B\u673A\u90FD\u80FD\u8BBF\u95EE\u3002",
-      "mode.official.description": "\u901A\u8FC7 Herdr Remote \u5B98\u65B9 relay \u4ECE\u4EFB\u610F\u7F51\u7EDC\u8BBF\u95EE\u672C\u673A\uFF0C\u65E0\u9700\u90E8\u7F72\u4EFB\u4F55\u670D\u52A1\u5668\u3002\u7EC8\u7AEF\u6D41\u91CF\u4F1A\u7ECF\u8FC7\u4E00\u53F0\u4F60\u65E0\u6CD5\u63A7\u5236\u7684\u670D\u52A1\u5668\uFF0C\u4F46\u53EA\u6709\u4F60\u914D\u5BF9\u8FC7\u7684\u8BBE\u5907\u624D\u80FD\u6253\u5F00\u7EC8\u7AEF\u3002",
-      "mode.remote.description": "\u4E0D\u542F\u52A8\u672C\u5730 relay\u3002\u672C\u673A\u8FDE\u63A5\u4F60\u81EA\u5EFA\u7684 relay\uFF0C\u8FD9\u662F\u4ECE\u5916\u7F51\u8BBF\u95EE\u7684\u552F\u4E00\u65B9\u5F0F\u3002",
+      "mode.official": "\u5B98\u65B9 Relay",
+      "mode.remote": "\u81EA\u5EFA Relay",
+      "mode.local.description": "\u76D1\u542C 127.0.0.1\uFF0C\u4EC5\u672C\u673A\u53EF\u8BBF\u95EE\u3002",
+      "mode.lan.description": "\u76D1\u542C 0.0.0.0\uFF0C\u5C40\u57DF\u7F51\u4E0E Tailscale \u8BBE\u5907\u53EF\u8BBF\u95EE\u3002",
+      "mode.official.description": "\u4F7F\u7528\u5B98\u65B9 Relay \u8DE8\u7F51\u8BBF\u95EE\uFF0C\u65E0\u9700\u81EA\u5EFA\u670D\u52A1\u5668\u3002",
+      "mode.remote.description": "\u8FDE\u63A5\u81EA\u5EFA Relay \u8DE8\u7F51\u8BBF\u95EE\u3002",
       "overview.title": "\u72B6\u6001",
       "overview.mode": "\u8BBF\u95EE\u65B9\u5F0F",
       "overview.relay": "Relay",
@@ -628,25 +654,25 @@ var require_zh = __commonJS({
       "overview.keepalive": "\u4FDD\u6D3B\u670D\u52A1",
       "overview.devices": "\u6D4F\u89C8\u5668",
       "overview.hosts": "\u5DE5\u4F5C\u7AD9",
-      "overview.uptime": "Relay \u8FD0\u884C\u65F6\u957F",
+      "overview.uptime": "Relay \u8FD0\u884C\u65F6\u95F4",
       "overview.relayLocal": "\u672C\u5730\uFF0C{bind}:{port}",
       "overview.relayRemote": "\u8FDC\u7A0B\uFF0C{url}",
-      "overview.socketMissing": "\u672A\u627E\u5230 \u2014 Herdr \u5728\u8FD0\u884C\u5417\uFF1F",
+      "overview.socketMissing": "\u672A\u627E\u5230\uFF0C\u8BF7\u786E\u8BA4 Herdr \u662F\u5426\u8FD0\u884C",
       "overview.unreachable": "\u65E0\u6CD5\u8BBF\u95EE\uFF1A{message}",
-      "overview.notStarted": "\u670D\u52A1\u672A\u8FD0\u884C\uFF0C\u8BF7\u5230\u300C\u670D\u52A1\u300D\u9875\u9762\u542F\u52A8\u3002",
+      "overview.notStarted": "\u670D\u52A1\u672A\u8FD0\u884C\uFF0C\u53EF\u524D\u5F80\u300C\u670D\u52A1\u300D\u542F\u52A8\u3002",
       "pair.title": "\u914D\u5BF9\u8BBE\u5907",
-      "pair.generate": "\u751F\u6210\u4E00\u6B21\u6027\u914D\u5BF9\u7801",
-      "pair.regenerate": "\u91CD\u65B0\u751F\u6210\u914D\u5BF9\u7801",
-      "pair.working": "\u6B63\u5728\u542F\u52A8\u670D\u52A1\u5E76\u7533\u8BF7\u914D\u5BF9\u7801\u2026",
+      "pair.generate": "\u751F\u6210\u914D\u5BF9\u7801",
+      "pair.regenerate": "\u91CD\u65B0\u751F\u6210",
+      "pair.working": "\u751F\u6210\u914D\u5BF9\u7801\u4E2D\u2026",
       "pair.code": "\u914D\u5BF9\u7801",
-      "pair.url": "\u5728\u624B\u673A\u4E0A\u6253\u5F00",
+      "pair.url": "\u8BBF\u95EE\u5730\u5740",
       "pair.expires": "\u5269\u4F59 {minutes}\uFF08\u81F3 {time}\uFF09",
-      "pair.expired": "\u914D\u5BF9\u7801\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u751F\u6210\u3002",
-      "pair.instructions": "\u6253\u5F00\u94FE\u63A5\u3001\u8F93\u5165\u914D\u5BF9\u7801\uFF0C\u4E4B\u540E\u8FD9\u53F0\u6D4F\u89C8\u5668\u5C31\u957F\u671F\u53EF\u7528\u4E86\u3002",
-      "pair.qrHint": "\u7528\u624B\u673A\u76F8\u673A\u626B\u7801\u5373\u53EF\u6253\u5F00\u94FE\u63A5\u3002",
-      "pair.qrUnavailable": "\u7EC8\u7AEF\u5BBD\u5EA6\u4E0D\u8DB3\u4EE5\u663E\u793A\u4E8C\u7EF4\u7801\uFF0C\u8BF7\u4F7F\u7528\u4E0A\u9762\u7684\u94FE\u63A5\u3002",
+      "pair.expired": "\u914D\u5BF9\u7801\u5DF2\u8FC7\u671F\uFF0C\u9700\u91CD\u65B0\u751F\u6210\u3002",
+      "pair.instructions": "\u6253\u5F00\u94FE\u63A5\u5E76\u8F93\u5165\u914D\u5BF9\u7801\u3002",
+      "pair.qrHint": "\u626B\u63CF\u4E8C\u7EF4\u7801\u6253\u5F00\u94FE\u63A5\u3002",
+      "pair.qrUnavailable": "\u7EC8\u7AEF\u5BBD\u5EA6\u4E0D\u8DB3\uFF0C\u65E0\u6CD5\u663E\u793A\u4E8C\u7EF4\u7801\u3002",
       "pair.failed": "\u751F\u6210\u914D\u5BF9\u7801\u5931\u8D25\uFF1A{message}",
-      "pair.hostOffline": "relay \u4E0A\u8FD8\u6CA1\u6709\u5DE5\u4F5C\u7AD9\u8FDE\u63A5\uFF0C\u8BF7\u5148\u542F\u52A8\u670D\u52A1\u3002",
+      "pair.hostOffline": "Relay \u672A\u8FDE\u63A5\u5DE5\u4F5C\u7AD9\uFF0C\u9700\u5148\u542F\u52A8\u670D\u52A1\u3002",
       "services.title": "\u670D\u52A1",
       "services.start": "\u542F\u52A8\u670D\u52A1",
       "services.stop": "\u505C\u6B62\u670D\u52A1",
@@ -656,38 +682,41 @@ var require_zh = __commonJS({
       "services.restarted": "\u670D\u52A1\u5DF2\u91CD\u542F\u3002",
       "services.startFailed": "\u542F\u52A8\u670D\u52A1\u5931\u8D25\uFF1A{message}",
       "services.stopFailed": "\u505C\u6B62\u670D\u52A1\u5931\u8D25\uFF1A{message}",
-      "services.unsavedBlocked": "\u6709\u672A\u4FDD\u5B58\u7684\u4FEE\u6539\u3002\u8BF7\u5148\u4FDD\u5B58\uFF0C\u5426\u5219\u670D\u52A1\u4F1A\u7528\u78C1\u76D8\u4E0A\u7684\u65E7\u914D\u7F6E\u91CD\u542F\u3002",
-      "services.managedNotice": "\u670D\u52A1\u7531 {manager} \u6258\u7BA1\uFF0C\u5DF2\u901A\u8FC7\u4FDD\u6D3B\u670D\u52A1\u6267\u884C\u6B64\u64CD\u4F5C\u3002",
+      "services.unsavedBlocked": "\u914D\u7F6E\u672A\u4FDD\u5B58\uFF0C\u8BF7\u5148\u4FDD\u5B58\u518D\u91CD\u542F\u3002",
+      "services.managedNotice": "\u7531 {manager} \u6258\u7BA1\uFF0C\u5DF2\u901A\u8FC7\u4FDD\u6D3B\u670D\u52A1\u6267\u884C\u3002",
       "services.logs": "\u6700\u8FD1\u65E5\u5FD7",
-      "services.logEmpty": "\u6682\u65E0\u65E5\u5FD7\u8F93\u51FA\u3002",
+      "services.logEmpty": "\u6682\u65E0\u65E5\u5FD7\u3002",
       "services.logRelay": "Relay",
       "services.logHost": "\u4E3B\u673A\u8FDE\u63A5\u5668",
       "relay.title": "Relay \u8BBE\u7F6E",
       "relay.settings": "\u8BBE\u7F6E",
+      "relay.locked": "\u56FA\u5B9A",
+      "relay.officialFixed": "\u5B98\u65B9 relay \u5730\u5740\u56FA\u5B9A\uFF0C\u4E0D\u53EF\u4FEE\u6539\u3002",
+      "relay.officialHint": "\u5B98\u65B9 relay\uFF1A\u5730\u5740\u56FA\u5B9A\uFF0C\u65E0\u9700\u5BC6\u7801\u3002",
       "relay.password": "Relay \u5BC6\u7801",
-      "relay.passwordHint": "\u9700\u4E0E relay \u4E0A\u7684 RELAY_PASSWORD \u4E00\u81F4\u3002\u7559\u7A7A\u8868\u793A\u516C\u7528 relay\u3002",
+      "relay.passwordHint": "\u987B\u4E0E Relay \u7AEF\u7684 RELAY_PASSWORD \u4E00\u81F4\u3002\u7559\u7A7A\u4E3A\u516C\u7528 Relay\u3002",
       "relay.passwordSet": "\u5DF2\u8BBE\u7F6E",
-      "relay.passwordEmpty": "\u672A\u8BBE\u7F6E\uFF08\u516C\u7528 relay\uFF09",
-      "relay.passwordSaved": "Relay \u5BC6\u7801\u5DF2\u4FDD\u5B58\uFF0C\u91CD\u542F\u670D\u52A1\u540E\u751F\u6548\u3002",
+      "relay.passwordEmpty": "\u672A\u8BBE\u7F6E\uFF08\u516C\u7528\uFF09",
+      "relay.passwordSaved": "Relay \u5BC6\u7801\u5DF2\u4FDD\u5B58\uFF0C\u91CD\u542F\u670D\u52A1\u751F\u6548\u3002",
       "relay.showPassword": "\u663E\u793A\u5BC6\u7801",
       "relay.hidePassword": "\u9690\u85CF\u5BC6\u7801",
       "relay.identity": "\u5DE5\u4F5C\u7AD9\u6807\u8BC6",
-      "relay.regenerate": "\u91CD\u65B0\u751F\u6210\u5DE5\u4F5C\u7AD9\u6807\u8BC6",
-      "relay.regenerated": "\u5DF2\u751F\u6210\u65B0\u7684\u5DE5\u4F5C\u7AD9\u6807\u8BC6\uFF0C\u91CD\u542F\u670D\u52A1\u540E\u4F1A\u91CD\u65B0\u6CE8\u518C\u3002",
-      "relay.envSnippet": "relay \u670D\u52A1\u5668\u542F\u52A8\u547D\u4EE4",
-      "relay.envHint": "\u5728 relay \u4E3B\u673A\u4E0A\u6267\u884C\u8FD9\u6761\u547D\u4EE4\u3002",
-      "relay.test": "\u6D4B\u8BD5 relay \u8FDE\u63A5",
-      "relay.testOk": "relay \u53EF\u8BBF\u95EE\uFF1A\u7248\u672C {version}\uFF0C\u5DF2\u8FDE\u63A5 {hosts} \u53F0\u5DE5\u4F5C\u7AD9\u3002",
-      "relay.testFailed": "relay \u65E0\u6CD5\u8BBF\u95EE\uFF1A{message}",
-      "relay.selectAddress": "\u9009\u62E9\u5BF9\u5916\u516C\u5E03\u7684\u5730\u5740",
+      "relay.regenerate": "\u91CD\u65B0\u751F\u6210\u6807\u8BC6",
+      "relay.regenerated": "\u5DF2\u751F\u6210\u65B0\u6807\u8BC6\uFF0C\u91CD\u542F\u540E\u91CD\u65B0\u6CE8\u518C\u3002",
+      "relay.envSnippet": "Relay \u542F\u52A8\u547D\u4EE4",
+      "relay.envHint": "\u5728 Relay \u4E3B\u673A\u6267\u884C\u6B64\u547D\u4EE4\u3002",
+      "relay.test": "\u6D4B\u8BD5 Relay \u8FDE\u63A5",
+      "relay.testOk": "Relay \u53EF\u8BBF\u95EE\uFF1A\u7248\u672C {version}\uFF0C\u5DF2\u8FDE\u63A5 {hosts} \u53F0\u5DE5\u4F5C\u7AD9\u3002",
+      "relay.testFailed": "Relay \u65E0\u6CD5\u8BBF\u95EE\uFF1A{message}",
+      "relay.selectAddress": "\u9009\u62E9\u516C\u5E03\u5730\u5740",
       "relay.listenAddress": "\u76D1\u542C\u5730\u5740",
-      "relay.listenAddressHint": "\u8FD9\u662F\u670D\u52A1\u5668\u7ED1\u5B9A\u5730\u5740\uFF1B\u4E0B\u9762\u7684\u5BF9\u5916\u516C\u5E03\u5730\u5740\u624D\u662F\u6D4F\u89C8\u5668\u8981\u6253\u5F00\u7684\u5730\u5740\u3002",
+      "relay.listenAddressHint": "\u670D\u52A1\u5668\u7ED1\u5B9A\u5730\u5740\uFF1B\u6D4F\u89C8\u5668\u8BBF\u95EE\u4E0B\u65B9\u516C\u5E03\u5730\u5740\u3002",
       "relay.addressTailscale": "Tailscale",
       "relay.addressLan": "\u5C40\u57DF\u7F51",
       "relay.addressVirtual": "\u865A\u62DF\u7F51\u5361",
       "relay.addressLoopback": "\u56DE\u73AF",
-      "relay.noAddresses": "\u6CA1\u6709\u627E\u5230\u975E\u56DE\u73AF\u5730\u5740\uFF0C\u8BF7\u5148\u8FDE\u63A5\u7F51\u7EDC\u6216\u542F\u52A8 Tailscale\u3002",
-      "relay.docsHint": "\u81EA\u5EFA relay \u8BF7\u53C2\u9605 docs/self-hosted-relay.zh-CN.md",
+      "relay.noAddresses": "\u672A\u627E\u5230\u975E\u56DE\u73AF\u5730\u5740\u3002",
+      "relay.docsHint": "\u81EA\u5EFA\u6307\u5357\uFF1Adocs/self-hosted-relay.zh-CN.md",
       "keepalive.title": "\u540E\u53F0\u4FDD\u6D3B\u670D\u52A1",
       "keepalive.manager": "\u7BA1\u7406\u65B9\u5F0F",
       "keepalive.state": "\u72B6\u6001",
@@ -700,24 +729,24 @@ var require_zh = __commonJS({
       "keepalive.failed": "\u4FDD\u6D3B\u64CD\u4F5C\u5931\u8D25\uFF1A{message}",
       "keepalive.unitPath": "\u5355\u5143\u6587\u4EF6",
       "keepalive.logsHint": "\u67E5\u770B\u65E5\u5FD7\uFF1A{command}",
-      "keepalive.linger": "\u672A\u767B\u5F55\u4E5F\u5F00\u673A\u81EA\u542F",
-      "keepalive.lingerEnabled": "\u5DF2\u5F00\u542F linger\uFF1A\u5F00\u673A\u5373\u542F\u52A8\u3002",
-      "keepalive.lingerDisabled": "\u672A\u5F00\u542F linger\uFF0C\u670D\u52A1\u53EA\u5728\u4F60\u767B\u5F55\u671F\u95F4\u8FD0\u884C\u3002",
+      "keepalive.linger": "\u5F00\u673A\u81EA\u542F",
+      "keepalive.lingerEnabled": "\u5DF2\u5F00\u542F\u5F00\u673A\u81EA\u542F\u3002",
+      "keepalive.lingerDisabled": "\u672A\u5F00\u542F\u5F00\u673A\u81EA\u542F\uFF08\u4EC5\u767B\u5F55\u671F\u95F4\u8FD0\u884C\uFF09\u3002",
       "keepalive.enableLinger": "\u5F00\u542F\u5F00\u673A\u81EA\u542F",
-      "keepalive.lingerDone": "\u5DF2\u4E3A {username} \u5F00\u542F linger\u3002",
-      "keepalive.fallbackNote": "\u7CFB\u7EDF\u6CA1\u6709\u53EF\u7528\u7684\u670D\u52A1\u7BA1\u7406\u5668\uFF0C\u6539\u7528\u5185\u7F6E\u7684\u540E\u53F0\u5B88\u62A4\u8FDB\u7A0B\uFF0C\u91CD\u542F\u7535\u8111\u540E\u4E0D\u4F1A\u81EA\u52A8\u6062\u590D\u3002",
+      "keepalive.lingerDone": "\u5DF2\u4E3A {username} \u5F00\u542F\u5F00\u673A\u81EA\u542F\u3002",
+      "keepalive.fallbackNote": "\u65E0\u7CFB\u7EDF\u670D\u52A1\u7BA1\u7406\u5668\uFF0C\u4F7F\u7528\u540E\u53F0\u5B88\u62A4\u8FDB\u7A0B\uFF0C\u91CD\u542F\u540E\u4E0D\u81EA\u52A8\u6062\u590D\u3002",
       "herdr.title": "Herdr \u96C6\u6210",
       "herdr.socketPath": "\u5957\u63A5\u5B57\u8DEF\u5F84",
       "herdr.args": "\u9644\u52A0\u53C2\u6570",
       "herdr.plugin": "\u63D2\u4EF6\u6CE8\u518C",
       "herdr.pluginRegistered": "\u5DF2\u6CE8\u518C\u5230 Herdr\u3002",
       "herdr.pluginMissing": "\u5C1A\u672A\u6CE8\u518C\u5230 Herdr\u3002",
-      "herdr.register": "\u628A\u672C\u5305\u6CE8\u518C\u4E3A Herdr \u63D2\u4EF6",
-      "herdr.unregister": "\u53D6\u6D88\u6CE8\u518C Herdr \u63D2\u4EF6",
+      "herdr.register": "\u6CE8\u518C\u4E3A Herdr \u63D2\u4EF6",
+      "herdr.unregister": "\u53D6\u6D88\u6CE8\u518C",
       "herdr.registerDone": "\u5DF2\u6CE8\u518C\uFF1A{path}",
-      "herdr.unregisterDone": "\u63D2\u4EF6\u5DF2\u53D6\u6D88\u6CE8\u518C\u3002",
+      "herdr.unregisterDone": "\u5DF2\u53D6\u6D88\u6CE8\u518C\u3002",
       "herdr.registerFailed": "\u6CE8\u518C\u5931\u8D25\uFF1A{message}",
-      "herdr.cliMissing": "PATH \u4E2D\u627E\u4E0D\u5230 herdr \u547D\u4EE4\u3002",
+      "herdr.cliMissing": "PATH \u4E2D\u672A\u627E\u5230 herdr \u547D\u4EE4\u3002",
       "about.title": "\u8BED\u8A00\u4E0E\u5173\u4E8E",
       "about.language": "\u754C\u9762\u8BED\u8A00",
       "about.languageAuto": "\u8DDF\u968F\u7CFB\u7EDF\uFF08{detected}\uFF09",
@@ -727,23 +756,23 @@ var require_zh = __commonJS({
       "about.configPath": "\u914D\u7F6E\u6587\u4EF6",
       "about.statePath": "\u72B6\u6001\u76EE\u5F55",
       "about.relayPackage": "Relay \u5305",
-      "about.docs": "\u81EA\u5EFA relay \u6307\u5357\uFF1Adocs/self-hosted-relay.zh-CN.md",
+      "about.docs": "\u81EA\u5EFA\u6307\u5357\uFF1Adocs/self-hosted-relay.zh-CN.md",
       "wizard.title": "\u9996\u6B21\u8BBE\u7F6E",
       "wizard.step": "\u7B2C {current} / {total} \u6B65",
       "wizard.languageTitle": "\u9009\u62E9\u8BED\u8A00",
-      "wizard.accessTitle": "\u4F60\u6253\u7B97\u600E\u4E48\u8BBF\u95EE\u8FD9\u53F0\u673A\u5668\uFF1F",
-      "wizard.accessHint": "\u4E4B\u540E\u53EF\u4EE5\u5728 Relay \u9875\u9762\u968F\u65F6\u4FEE\u6539\u3002",
-      "wizard.addressTitle": "\u624B\u673A\u5E94\u8BE5\u4F7F\u7528\u54EA\u4E2A\u5730\u5740\uFF1F",
-      "wizard.relayTitle": "\u4F60\u7684 relay \u670D\u52A1\u5668",
+      "wizard.accessTitle": "\u9009\u62E9\u8BBF\u95EE\u65B9\u5F0F",
+      "wizard.accessHint": "\u540E\u7EED\u53EF\u5728 Relay \u9875\u9762\u4FEE\u6539\u3002",
+      "wizard.addressTitle": "\u9009\u62E9\u8BBF\u95EE\u5730\u5740",
+      "wizard.relayTitle": "Relay \u670D\u52A1\u5668",
       "wizard.relayUrlLabel": "Relay \u5730\u5740\uFF08wss://\u2026\uFF09",
-      "wizard.relayHint": "relay \u9700\u8981\u5DF2\u7ECF\u5728\u8FD0\u884C\u3002\u642D\u5EFA\u65B9\u6CD5\u89C1 docs/self-hosted-relay.zh-CN.md\u3002",
+      "wizard.relayHint": "Relay \u9700\u5148\u8FD0\u884C\u3002\u642D\u5EFA\u6307\u5357\u89C1 docs/self-hosted-relay.zh-CN.md\u3002",
       "wizard.passwordTitle": "Relay \u5BC6\u7801",
-      "wizard.passwordHint": "relay \u542F\u52A8\u65F6\u8BBE\u7F6E\u7684 RELAY_PASSWORD\u3002relay \u6CA1\u8BBE\u5BC6\u7801\u5C31\u7559\u7A7A\u3002",
+      "wizard.passwordHint": "Relay \u7684 RELAY_PASSWORD\u3002\u672A\u8BBE\u7559\u7A7A\u3002",
       "wizard.finishTitle": "\u5B8C\u6210",
-      "wizard.finishHint": "\u914D\u7F6E\u5C06\u4FDD\u5B58\u5230 {path}\u3002",
+      "wizard.finishHint": "\u914D\u7F6E\u5C06\u4FDD\u5B58\u81F3 {path}\u3002",
       "wizard.startNow": "\u7ACB\u5373\u542F\u52A8\u670D\u52A1",
-      "wizard.installKeepalive": "\u8BA9\u670D\u52A1\u5728\u540E\u53F0\u4FDD\u6301\u8FD0\u884C",
-      "wizard.finish": "\u4FDD\u5B58\u5E76\u7EE7\u7EED",
+      "wizard.installKeepalive": "\u540E\u53F0\u4FDD\u6D3B",
+      "wizard.finish": "\u4FDD\u5B58\u5E76\u5B8C\u6210",
       "field.mode": "\u8BBF\u95EE\u65B9\u5F0F",
       "field.port": "Relay \u7AEF\u53E3",
       "field.lanHost": "\u6D4F\u89C8\u5668\u5730\u5740",
@@ -756,14 +785,14 @@ var require_zh = __commonJS({
       "placeholder.autoDiscovered": "\u81EA\u52A8\u63A2\u6D4B",
       "placeholder.none": "\u65E0",
       "error.invalidMode": "\u672A\u77E5\u7684\u8BBF\u95EE\u65B9\u5F0F\u3002",
-      "error.invalidPort": "\u7AEF\u53E3\u5FC5\u987B\u662F 1 \u5230 65535 \u4E4B\u95F4\u7684\u6570\u5B57\u3002",
-      "error.invalidLanHost": "\u6D4F\u89C8\u5668\u5730\u5740\u5FC5\u987B\u662F\u53EF\u8BBF\u95EE\u7684\u5C40\u57DF\u7F51\u6216 Tailscale \u5730\u5740\uFF0C\u4E0D\u80FD\u586B\u5199\u56DE\u73AF\u5730\u5740\u6216 0.0.0.0\u3002",
-      "error.invalidRelayUrl": "Relay \u5730\u5740\u9700\u4EE5 wss://\u3001ws://\u3001https:// \u6216 http:// \u5F00\u5934\u3002",
-      "error.invalidPublicUrl": "\u6D4F\u89C8\u5668\u5730\u5740\u9700\u4EE5 https:// \u6216 http:// \u5F00\u5934\uFF0C\u4E0D\u80FD\u4F7F\u7528 0.0.0.0 \u6216 ::\u3002",
+      "error.invalidPort": "\u7AEF\u53E3\u987B\u4E3A 1 \u5230 65535 \u4E4B\u95F4\u7684\u6570\u5B57\u3002",
+      "error.invalidLanHost": "\u6D4F\u89C8\u5668\u5730\u5740\u987B\u4E3A\u53EF\u8BBF\u95EE\u5C40\u57DF\u7F51\u6216 Tailscale \u5730\u5740\uFF0C\u4E0D\u80FD\u4E3A\u56DE\u73AF\u6216 0.0.0.0\u3002",
+      "error.invalidRelayUrl": "Relay \u5730\u5740\u987B\u4EE5 wss://\u3001ws://\u3001https:// \u6216 http:// \u5F00\u5934\u3002",
+      "error.invalidPublicUrl": "\u6D4F\u89C8\u5668\u5730\u5740\u987B\u4EE5 https:// \u6216 http:// \u5F00\u5934\uFF0C\u4E0D\u80FD\u4E3A 0.0.0.0 \u6216 ::\u3002",
       "error.invalidLanguage": "\u672A\u77E5\u7684\u8BED\u8A00\u3002",
       "error.invalidKeepalive": "\u672A\u77E5\u7684\u4FDD\u6D3B\u7BA1\u7406\u65B9\u5F0F\u3002",
       "error.unknownField": "\u672A\u77E5\u7684\u8BBE\u7F6E\u9879\u3002",
-      "error.remoteUrlRequired": "\u81EA\u5EFA relay \u6A21\u5F0F\u5FC5\u987B\u586B\u5199 Relay \u5730\u5740\u3002",
+      "error.remoteUrlRequired": "\u81EA\u5EFA Relay \u6A21\u5F0F\u987B\u586B\u5199 Relay \u5730\u5740\u3002",
       "error.saveFailed": "\u4FDD\u5B58\u914D\u7F6E\u5931\u8D25\uFF1A{message}",
       "hint.navigate": "\u2191\u2193 \u79FB\u52A8",
       "hint.select": "\u21B5 \u9009\u62E9",
@@ -774,22 +803,23 @@ var require_zh = __commonJS({
       "hint.mouseOn": "m \u5173\u95ED\u9F20\u6807",
       "hint.mouseOff": "m \u5F00\u542F\u9F20\u6807",
       "hint.mouseUnsupported": "\u4E0D\u652F\u6301\u9F20\u6807",
-      "hint.restartRequired": "\u9700\u8981\u91CD\u542F\u670D\u52A1\u624D\u80FD\u751F\u6548\u3002",
-      "hint.unsavedChanges": "\u6709\u672A\u4FDD\u5B58\u7684\u4FEE\u6539 \u2014 \u6309 s \u4FDD\u5B58\u3002",
+      "hint.restartRequired": "\u91CD\u542F\u670D\u52A1\u751F\u6548\u3002",
+      "hint.unsavedChanges": "\u6709\u672A\u4FDD\u5B58\u4FEE\u6539\uFF08\u6309 s \u4FDD\u5B58\uFF09\u3002",
       "hint.save": "s \u4FDD\u5B58",
       "hint.editing": "\u21B5 \u786E\u8BA4 \xB7 esc \u53D6\u6D88",
       "update.title": "\u66F4\u65B0",
       "update.check": "\u68C0\u67E5\u66F4\u65B0",
-      "update.checking": "\u6B63\u5728\u67E5\u8BE2 npm\u2026",
+      "update.checking": "\u67E5\u8BE2 npm \u4E2D\u2026",
       "update.upToDate": "\u5DF2\u662F\u6700\u65B0\uFF08{version}\uFF09",
-      "update.available": "\u6709\u65B0\u7248\u672C {version} \u2014\u2014 \u6309 Enter \u5B89\u88C5",
-      "update.updating": "\u6B63\u5728\u5B89\u88C5 {version}\u2026",
-      "update.done": "\u5DF2\u66F4\u65B0\u5230 {version}",
-      "update.restartHint": "\u66F4\u65B0\u5DF2\u5B89\u88C5\uFF0C\u91CD\u542F herdr-remote \u540E\u751F\u6548\u3002",
-      "update.errorNetwork": "\u65E0\u6CD5\u8FDE\u63A5 npm registry",
+      "update.available": "\u65B0\u7248\u672C {version} \u53EF\u7528\uFF08\u6309 Enter \u5B89\u88C5\uFF09",
+      "update.updating": "\u5B89\u88C5 {version} \u4E2D\u2026",
+      "update.done": "\u5DF2\u66F4\u65B0\u81F3 {version}",
+      "update.restartHint": "\u66F4\u65B0\u5DF2\u5B89\u88C5\uFF0C\u91CD\u542F herdr-remote \u751F\u6548\u3002",
+      "update.errorNetwork": "\u6240\u6709 npm registry \u5747\u65E0\u6CD5\u8FDE\u63A5",
+      "update.errorNetworkDetail": "\u65E0 registry \u5E94\u7B54\uFF1A{message}",
       "update.errorFailed": "\u66F4\u65B0\u5931\u8D25\uFF0C\u53EF\u624B\u52A8\u6267\u884C\uFF1Anpm install -g herdr-remote@latest",
-      "update.cannot.source": "\u5F53\u524D\u4ECE\u6E90\u7801\u76EE\u5F55\u8FD0\u884C \u2014\u2014 \u8BF7\u7528 git \u66F4\u65B0\uFF0C\u800C\u4E0D\u662F npm",
-      "update.cannot.linked": "\u5F53\u524D\u662F npm link \u7684\u5DE5\u4F5C\u526F\u672C \u2014\u2014 \u7531 npm link \u7BA1\u7406"
+      "update.cannot.source": "\u6E90\u7801\u76EE\u5F55\u8FD0\u884C\uFF0C\u8BF7\u4F7F\u7528 git \u66F4\u65B0",
+      "update.cannot.linked": "npm link \u5DE5\u4F5C\u526F\u672C\uFF0C\u7531 npm link \u7BA1\u7406"
     };
   }
 });
@@ -954,6 +984,7 @@ var require_settings_model = __commonJS({
       ACCESS_MODES: ACCESS_MODES2,
       KEEPALIVE_MANAGERS,
       LANGUAGES,
+      OFFICIAL_RELAY_URL: OFFICIAL_RELAY_URL2,
       configDir,
       configPath: configPath2,
       isLoopbackHost,
@@ -976,6 +1007,14 @@ var require_settings_model = __commonJS({
       { id: "keepaliveManager", kind: "choice", choices: KEEPALIVE_MANAGERS, labelKey: "field.keepalive" }
     ];
     var EMPTY = "";
+    var SELECTABLE_MODES2 = ["local", "lan", "official", "remote"];
+    function selectedMode2(draft) {
+      if (draft.relay.mode === "remote" && draft.relay.remoteUrl === OFFICIAL_RELAY_URL2) return "official";
+      return draft.relay.mode;
+    }
+    function isOfficialRelay2(draft) {
+      return selectedMode2(draft) === "official";
+    }
     function clone(value) {
       return JSON.parse(JSON.stringify(value));
     }
@@ -1038,7 +1077,16 @@ var require_settings_model = __commonJS({
       const value = typeof rawValue === "string" ? rawValue.trim() : rawValue;
       switch (id) {
         case "mode": {
-          if (!ACCESS_MODES2.includes(value)) return { draft, errorKey: "error.invalidMode" };
+          if (!SELECTABLE_MODES2.includes(value)) return { draft, errorKey: "error.invalidMode" };
+          if (value === "official") {
+            next.relay.mode = "remote";
+            next.relay.remoteUrl = OFFICIAL_RELAY_URL2;
+            next.relay.publicUrl = EMPTY;
+            break;
+          }
+          if (value === "remote" && next.relay.remoteUrl === OFFICIAL_RELAY_URL2) {
+            next.relay.remoteUrl = EMPTY;
+          }
           next.relay.mode = value;
           if (value === "lan" && (isLoopbackHost(next.relay.lanHost) || isUnspecifiedAddress(next.relay.lanHost))) {
             next.relay.lanHost = EMPTY;
@@ -1139,8 +1187,11 @@ var require_settings_model = __commonJS({
     }
     module.exports = {
       FIELDS: FIELDS2,
+      SELECTABLE_MODES: SELECTABLE_MODES2,
       createDraft: createDraft2,
       fieldsForMode: fieldsForMode2,
+      isOfficialRelay: isOfficialRelay2,
+      selectedMode: selectedMode2,
       getField: getField2,
       getFieldPlaceholder: getFieldPlaceholder2,
       setField: setField2,
@@ -1521,7 +1572,11 @@ var require_service = __commonJS({
             RELAY_PASSWORD: state.hostToken,
             RELAY_AUTH_STATE_FILE: relayAuthStatePath(),
             RELAY_ALLOWED_ORIGINS: (config.relay.allowedOrigins || []).join(","),
-            RELAY_MAX_CLIENTS_PER_HOST: String(config.relay.maxClientsPerHost)
+            RELAY_MAX_CLIENTS_PER_HOST: String(config.relay.maxClientsPerHost),
+            RELAY_MAX_HOSTS: String(config.relay.maxHosts),
+            RELAY_MAX_PENDING_HANDSHAKES: String(config.relay.maxPendingHandshakes),
+            RELAY_MAX_BUFFERED_BYTES_PER_CLIENT: String(config.relay.maxBufferedBytesPerClient),
+            RELAY_HOST_RECONNECT_GRACE_MS: String(config.relay.hostReconnectGraceMs)
           }
         });
       }
@@ -1704,18 +1759,26 @@ var require_service = __commonJS({
       throw lastError || new Error("relay did not become ready");
     }
     async function waitForHost(config, { attempts = 30, delayMs = 100 } = {}) {
-      let lastHealth = null;
+      const state = ensureRuntime2();
+      const statusEndpoint = `${resolveAdminOrigin2(config)}/api/status`;
+      let lastStatus = null;
       for (let attempt = 0; attempt < attempts; attempt += 1) {
         try {
-          lastHealth = await requestJson2(healthUrl(config), { timeout: 800 });
-          if (lastHealth.hosts > 0) return lastHealth;
+          lastStatus = await requestJson2(statusEndpoint, {
+            timeout: 800,
+            headers: {
+              "X-Herdr-Host-Id": state.hostId,
+              "X-Herdr-Host-Token": state.hostToken
+            }
+          });
+          if (lastStatus.hosts?.some((host) => host.id === state.hostId)) return lastStatus;
         } catch (error2) {
-          lastHealth = { ok: false, message: error2.message };
+          lastStatus = { ok: false, message: error2.message };
         }
         await new Promise((resolve) => setTimeout(resolve, delayMs));
       }
-      const error = new Error(lastHealth?.message || "the Herdr host connector did not register with the relay");
-      error.health = lastHealth;
+      const error = new Error(lastStatus?.message || "the Herdr host connector did not register with the relay");
+      error.health = lastStatus;
       throw error;
     }
     async function statusServices() {
@@ -2301,11 +2364,13 @@ var require_updater = __commonJS({
   "src/updater.js"(exports, module) {
     "use strict";
     var fs = __require("node:fs");
+    var os = __require("node:os");
     var path = __require("node:path");
     var { spawn } = __require("node:child_process");
     var { PACKAGE_ROOT } = require_config();
     var PACKAGE_NAME = "herdr-remote";
-    var REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+    var DEFAULT_REGISTRY = "https://registry.npmjs.org";
+    var MIRROR_REGISTRY = "https://registry.npmmirror.com";
     function currentVersion() {
       try {
         return __require(path.join(PACKAGE_ROOT, "package.json")).version;
@@ -2325,6 +2390,43 @@ var require_updater = __commonJS({
     function canSelfUpdate2() {
       return installKind2() === "npm";
     }
+    function normalizeRegistry(value) {
+      if (typeof value !== "string") return null;
+      const trimmed = value.trim().replace(/\/+$/, "");
+      if (!/^https?:\/\//i.test(trimmed)) return null;
+      return trimmed;
+    }
+    function registryFromNpmrc(filePath) {
+      let contents;
+      try {
+        contents = fs.readFileSync(filePath, "utf8");
+      } catch {
+        return null;
+      }
+      let found = null;
+      for (const rawLine of contents.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith("#") || line.startsWith(";")) continue;
+        const match = /^registry\s*=\s*(.+)$/i.exec(line);
+        if (match) found = normalizeRegistry(match[1].replace(/^["']|["']$/g, ""));
+      }
+      return found;
+    }
+    function registryCandidates({ env = process.env, home = os.homedir(), cwd = process.cwd() } = {}) {
+      const candidates = [];
+      const add = (value) => {
+        const normalized = normalizeRegistry(value);
+        if (normalized && !candidates.includes(normalized)) candidates.push(normalized);
+      };
+      add(env.npm_config_registry);
+      add(env.NPM_CONFIG_REGISTRY);
+      add(env.HERDR_REMOTE_REGISTRY);
+      add(registryFromNpmrc(path.join(cwd, ".npmrc")));
+      add(registryFromNpmrc(path.join(home, ".npmrc")));
+      add(DEFAULT_REGISTRY);
+      add(MIRROR_REGISTRY);
+      return candidates;
+    }
     function compareVersions(a, b) {
       const parse = (value) => String(value).split("-")[0].split(".").map((part) => Number.parseInt(part, 10) || 0);
       const left = parse(a);
@@ -2336,39 +2438,64 @@ var require_updater = __commonJS({
       }
       return 0;
     }
-    async function checkForUpdate2({ timeoutMs = 8e3, fetchImpl = globalThis.fetch } = {}) {
-      const current = currentVersion();
+    async function askRegistry(registry, { timeoutMs, fetchImpl }) {
       const controller = new AbortController();
       const timer = setTimeout(() => controller.abort(), timeoutMs);
       try {
-        const response = await fetchImpl(REGISTRY_URL, {
+        const response = await fetchImpl(`${registry}/${PACKAGE_NAME}/latest`, {
           signal: controller.signal,
           headers: { Accept: "application/vnd.npm.install-v1+json" }
         });
-        if (!response.ok) {
-          return { ok: false, current, errorKey: "update.errorNetwork" };
-        }
+        if (!response.ok) return { ok: false, message: `HTTP ${response.status ?? "?"}` };
         const body = await response.json();
         const latest = typeof body?.version === "string" ? body.version : null;
-        if (!latest) return { ok: false, current, errorKey: "update.errorNetwork" };
-        return {
-          ok: true,
-          current,
-          latest,
-          updateAvailable: compareVersions(latest, current) > 0
-        };
-      } catch {
-        return { ok: false, current, errorKey: "update.errorNetwork" };
+        if (!latest) return { ok: false, message: "registry answered without a version" };
+        return { ok: true, latest };
+      } catch (error) {
+        return { ok: false, message: error?.name === "AbortError" ? "timed out" : String(error?.message || error) };
       } finally {
         clearTimeout(timer);
       }
     }
+    async function checkForUpdate2({
+      timeoutMs = 6e3,
+      fetchImpl = globalThis.fetch,
+      registries = registryCandidates()
+    } = {}) {
+      const current = currentVersion();
+      const failures = [];
+      for (const registry of registries) {
+        const attempt = await askRegistry(registry, { timeoutMs, fetchImpl });
+        if (attempt.ok) {
+          return {
+            ok: true,
+            current,
+            latest: attempt.latest,
+            registry,
+            updateAvailable: compareVersions(attempt.latest, current) > 0
+          };
+        }
+        failures.push(`${registry}: ${attempt.message}`);
+      }
+      return {
+        ok: false,
+        current,
+        errorKey: "update.errorNetwork",
+        message: failures.join("; "),
+        triedRegistries: registries
+      };
+    }
     function performUpdate2({
       spawnImpl = spawn,
       timeoutMs = 18e4,
       // Seam for tests: the suite runs from a checkout, where the guard below is
       // correctly the only reachable outcome.
-      installKindImpl = installKind2
+      installKindImpl = installKind2,
+      // The registry that just answered the version check. Installing from
+      // somewhere the machine has been shown to reach beats installing from a
+      // default it may have no route to. Empty means "whatever npm is configured
+      // with", which is the right answer when no check has run.
+      registry = ""
     } = {}) {
       return new Promise((resolve) => {
         const kind = installKindImpl();
@@ -2376,7 +2503,10 @@ var require_updater = __commonJS({
           resolve({ ok: false, errorKey: `update.cannot.${kind}` });
           return;
         }
-        const child = spawnImpl("npm", ["install", "-g", `${PACKAGE_NAME}@latest`], {
+        const args = ["install", "-g", `${PACKAGE_NAME}@latest`];
+        const normalizedRegistry = normalizeRegistry(registry);
+        if (normalizedRegistry) args.push("--registry", normalizedRegistry);
+        const child = spawnImpl("npm", args, {
           encoding: "utf8",
           timeout: timeoutMs
         });
@@ -2396,12 +2526,15 @@ var require_updater = __commonJS({
     }
     module.exports = {
       PACKAGE_NAME,
+      DEFAULT_REGISTRY,
+      MIRROR_REGISTRY,
       canSelfUpdate: canSelfUpdate2,
       checkForUpdate: checkForUpdate2,
       compareVersions,
       currentVersion,
       installKind: installKind2,
-      performUpdate: performUpdate2
+      performUpdate: performUpdate2,
+      registryCandidates
     };
   }
 });
@@ -2728,12 +2861,26 @@ function relayStartCommand(config, password) {
   return parts.join(" ");
 }
 async function probeRelay(config) {
+  const origin = (0, import_config.resolveAdminOrigin)(config);
+  let health;
   try {
-    const health = await (0, import_service.requestJson)(`${(0, import_config.resolveAdminOrigin)(config)}/healthz`, { timeout: 4e3 });
-    return { ok: true, version: health.version, hosts: health.hosts };
+    health = await (0, import_service.requestJson)(`${origin}/healthz`, { timeout: 4e3 });
   } catch (error) {
     return { ok: false, message: error.message };
   }
+  try {
+    const runtime = (0, import_service.ensureRuntime)();
+    const status = await (0, import_service.requestJson)(`${origin}/api/status`, {
+      timeout: 4e3,
+      headers: {
+        "X-Herdr-Host-Id": runtime.hostId,
+        "X-Herdr-Host-Token": runtime.hostToken
+      }
+    });
+    return { ok: true, version: String(health.version || status.version || ""), hosts: Array.isArray(status.hosts) ? status.hosts.length : 0 };
+  } catch {
+    return { ok: true, version: String(health.version || ""), hosts: void 0 };
+  }
 }
 function formatUptime(seconds, t) {
   if (!Number.isFinite(seconds)) return t("common.unknown");
@@ -3105,6 +3252,7 @@ function RelayScreen({ ctx }) {
   const [revealTokens, setRevealTokens] = useState5(false);
   const [showEnv, setShowEnv] = useState5(false);
   const [password, setPassword] = useState5(ctx.runtime.relayPassword || "");
+  const official = (0, import_settings_model.isOfficialRelay)(draft);
   const fields = useMemo2(
     () => (0, import_settings_model.fieldsForMode)(draft.relay.mode).filter((field) => ["mode", "port", "lanHost", "remoteUrl", "publicUrl"].includes(field.id)),
     [draft.relay.mode]
@@ -3112,20 +3260,24 @@ function RelayScreen({ ctx }) {
   const entries = [
     ...fields.map((field) => ({
       id: field.id,
-      kind: "field",
+      // The official relay's address is ours and its browser URL follows from
+      // it, so neither is offered for editing: an editable box holding a value
+      // that must not change is an invitation to break the setup.
+      kind: official && (field.id === "remoteUrl" || field.id === "publicUrl") ? "readonly" : "field",
       fieldKind: field.kind,
       label: t(field.labelKey)
     })),
     // The password only matters when talking to a relay somebody else started;
-    // a local relay is configured with our own token automatically.
-    ...draft.relay.mode === "remote" ? [{ id: "password", kind: "password", label: t("relay.password") }] : [],
+    // a local relay is configured with our own token automatically, and the
+    // official one authenticates workstations by their own host token.
+    ...draft.relay.mode === "remote" && !official ? [{ id: "password", kind: "password", label: t("relay.password") }] : [],
     // Saving needs a row of its own. Every field here only edits a draft, and
     // the services restart from what is on disk — with `s` as the sole way to
     // commit, a change could look applied, survive a restart, and never take
     // effect. It is also the only way to save with the mouse.
     { id: "save", kind: "action", label: t("common.save") },
     { id: "test", kind: "action", label: t("relay.test") },
-    ...draft.relay.mode === "remote" ? [
+    ...draft.relay.mode === "remote" && !official ? [
       { id: "reveal", kind: "action", label: revealTokens ? t("relay.hidePassword") : t("relay.showPassword") },
       { id: "env", kind: "action", label: t("relay.envSnippet") }
     ] : [],
@@ -3160,6 +3312,10 @@ function RelayScreen({ ctx }) {
   const activate = (id) => {
     const entry = entries.find((candidate) => candidate.id === id);
     if (!entry) return;
+    if (entry.kind === "readonly") {
+      ctx.notify(t("relay.officialFixed"), "info");
+      return;
+    }
     if (entry.kind === "field" || entry.kind === "password") {
       ctx.setEditing(id);
       return;
@@ -3214,14 +3370,13 @@ function RelayScreen({ ctx }) {
           { id: "official", label: t("mode.official"), description: t("mode.official.description") },
           { id: "remote", label: t("mode.remote"), description: t("mode.remote.description") }
         ],
-        current: draft.relay.mode === "remote" && draft.relay.remoteUrl === import_config.OFFICIAL_RELAY_URL ? "official" : draft.relay.mode,
+        current: (0, import_settings_model.selectedMode)(draft),
         onPick: (choice) => {
+          if (!applyField("mode", choice)) return;
           if (choice === "official") {
-            applyFields([["mode", "remote"], ["remoteUrl", import_config.OFFICIAL_RELAY_URL]]);
-            ctx.setEditing(null);
-            return;
+            setPassword("");
+            (0, import_service.setRelayPassword)("");
           }
-          applyField("mode", choice);
           ctx.setEditing(null);
         },
         onCancel: () => ctx.setEditing(null)
@@ -3285,10 +3440,14 @@ function RelayScreen({ ctx }) {
             },
             onCancel: () => ctx.setEditing(null)
           }
+        ) : entry.kind === "readonly" ? (
+          // Fixed by us, so it is printed rather than offered for editing.
+          /* @__PURE__ */ jsx7(Text6, { color: theme.muted, children: `${(0, import_settings_model.getField)(draft, entry.id) || placeholderText(ctx, entry.id)}  (${t("relay.locked")})` })
         ) : entry.fieldKind === "choice" ? (
           // Choice fields are picked from a list, never typed, so they
-          // show the translated label rather than the stored id.
-          /* @__PURE__ */ jsx7(Text6, { children: t(`mode.${(0, import_settings_model.getField)(draft, entry.id)}`) })
+          // show the translated label rather than the stored id — and the
+          // official relay is named as itself, not as "self-hosted".
+          /* @__PURE__ */ jsx7(Text6, { children: t(`mode.${(0, import_settings_model.selectedMode)(draft)}`) })
         ) : /* @__PURE__ */ jsx7(
           TextField,
           {
@@ -3305,13 +3464,13 @@ function RelayScreen({ ctx }) {
       entry.id
     )),
     ctx.dirty ? /* @__PURE__ */ jsx7(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text6, { color: theme.warn, children: t("hint.unsavedChanges") }) }) : null,
-    draft.relay.mode === "remote" ? /* @__PURE__ */ jsx7(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text6, { color: theme.muted, children: t("relay.passwordHint") }) }) : null,
+    draft.relay.mode === "remote" ? /* @__PURE__ */ jsx7(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text6, { color: theme.muted, children: official ? t("relay.officialHint") : t("relay.passwordHint") }) }) : null,
     /* @__PURE__ */ jsx7(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx7(Row, { label: t("relay.identity"), children: /* @__PURE__ */ jsx7(Text6, { color: theme.muted, children: ctx.runtime.hostId }) }) }),
     showEnv ? /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", marginTop: 1, borderStyle: "round", borderColor: theme.border, paddingX: 1, children: [
       /* @__PURE__ */ jsx7(Text6, { color: theme.muted, children: t("relay.envHint") }),
       /* @__PURE__ */ jsx7(Text6, { children: relayStartCommand(ctx.config, password) })
     ] }) : null,
-    /* @__PURE__ */ jsx7(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text6, { color: theme.muted, children: t("relay.docsHint") }) }),
+    official ? null : /* @__PURE__ */ jsx7(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text6, { color: theme.muted, children: t("relay.docsHint") }) }),
     /* @__PURE__ */ jsx7(Message, { text: ctx.message?.text ?? null, level: ctx.message?.level ?? "info" })
   ] });
 }
@@ -3603,6 +3762,7 @@ function About({ ctx }) {
   const { t, draft } = ctx;
   const [selected, setSelected] = useState8("auto");
   const [update, setUpdate] = useState8({ phase: "idle" });
+  const registryRef = useState8(() => ({ current: "" }))[0];
   const detected = detectLocale({ preference: "auto" });
   const languageOptions = [
     { id: "auto", label: t("about.languageAuto", { detected }) },
@@ -3634,13 +3794,15 @@ function About({ ctx }) {
     const result = await (0, import_updater.checkForUpdate)();
     if (!result.ok) {
       setUpdate({ phase: "error", messageKey: result.errorKey ?? "update.errorNetwork" });
+      if (result.message) ctx.notify(t("update.errorNetworkDetail", { message: result.message }), "error");
       return;
     }
+    registryRef.current = result.registry ?? "";
     setUpdate(result.updateAvailable ? { phase: "available", latest: result.latest } : { phase: "current", latest: result.latest });
   };
   const runUpdate = async (latest) => {
     setUpdate({ phase: "updating", latest });
-    const result = await (0, import_updater.performUpdate)();
+    const result = await (0, import_updater.performUpdate)({ registry: registryRef.current });
     if (!result.ok) {
       setUpdate({ phase: "error", messageKey: result.errorKey ?? "update.errorFailed" });
       ctx.notify(t("update.errorFailed"), "error");
@@ -3717,7 +3879,7 @@ function About({ ctx }) {
         children: updateLabel
       }
     ) }),
-    /* @__PURE__ */ jsx10(Row, { label: t("about.version"), children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: "0.2.3" }) }),
+    /* @__PURE__ */ jsx10(Row, { label: t("about.version"), children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: "0.2.5" }) }),
     /* @__PURE__ */ jsx10(Row, { label: t("about.configPath"), children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: (0, import_config.configPath)() }) }),
     /* @__PURE__ */ jsx10(Row, { label: t("about.statePath"), children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: (0, import_config.stateDir)() }) }),
     /* @__PURE__ */ jsx10(Box9, { marginTop: 1, children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: t("about.docs") }) }),
@@ -3848,16 +4010,16 @@ function Wizard({ ctx, onDone }) {
               description: t("mode.remote.description")
             }
           ],
-          current: draft.relay.mode === "remote" && draft.relay.remoteUrl === import_config.OFFICIAL_RELAY_URL ? "official" : draft.relay.mode,
+          current: (0, import_settings_model.selectedMode)(draft),
           onPick: (choice) => {
             if (choice === "official") {
-              if (!applyAll([["mode", "remote"], ["remoteUrl", import_config.OFFICIAL_RELAY_URL]])) return;
+              if (!apply("mode", "official")) return;
               (0, import_service.setRelayPassword)("");
               advance("access", stepsFor("remote", import_config.OFFICIAL_RELAY_URL));
               return;
             }
             if (apply("mode", choice)) {
-              advance("access", stepsFor(choice, draft.relay.remoteUrl));
+              advance("access", stepsFor(choice, choice === "remote" ? "" : draft.relay.remoteUrl));
             }
           },
           onCancel: back