diff --git a/.gitignore b/.gitignore
index 12ad49a5a6..b155905cff 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,6 +2,7 @@ node_modules/
 .pnpm-store/
 /dist/
 /build/
+/build-mobile-native/
 coverage/
 .DS_Store
 .history
diff --git a/apps/remote-ios/src-tauri/.gitignore b/apps/remote-ios/src-tauri/.gitignore
new file mode 100644
index 0000000000..6993591f6b
--- /dev/null
+++ b/apps/remote-ios/src-tauri/.gitignore
@@ -0,0 +1,3 @@
+# Generated by Cargo and Tauri tooling
+/target/
+/gen/schemas/
diff --git a/apps/remote-ios/src-tauri/Cargo.lock b/apps/remote-ios/src-tauri/Cargo.lock
new file mode 100644
index 0000000000..e5951caeae
--- /dev/null
+++ b/apps/remote-ios/src-tauri/Cargo.lock
@@ -0,0 +1,5581 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c982642fa9e8606056828ee9a8505737230110bb1099153c79efe865c59d12ba"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "alloc-no-stdlib"
+version = "2.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc7bb162ec39d46ab1ca8c77bf72e890535becd1751bb45f64c597edb4c8c6b3"
+
+[[package]]
+name = "alloc-stdlib"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e76a019e91224d279006ff972f1e984179a6e9feb050adba6ce8274aef23195"
+dependencies = [
+ "alloc-no-stdlib",
+]
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae221649c9976a6f6c56ae1facf410f3ddb33cc661c4b7b61020a912d4237fbc"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.104"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"
+
+[[package]]
+name = "async-broadcast"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "435a87a52755b8f27fcf321ac4f04b2802e337c8c4872923137471ec39c37532"
+dependencies = [
+ "event-listener",
+ "event-listener-strategy",
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-channel"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "924ed96dd52d1b75e9c1a3e6275715fd320f5f9439fb5a4a11fa51f4221158d2"
+dependencies = [
+ "concurrent-queue",
+ "event-listener-strategy",
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-executor"
+version = "1.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c96bf972d85afc50bf5ab8fe2d54d1586b4e0b46c97c50a0c9e71e2f7bcd812a"
+dependencies = [
+ "async-task",
+ "concurrent-queue",
+ "fastrand",
+ "futures-lite",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "async-io"
+version = "2.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "456b8a8feb6f42d237746d4b3e9a178494627745c3c56c6ea55d92ba50d026fc"
+dependencies = [
+ "autocfg",
+ "cfg-if",
+ "concurrent-queue",
+ "futures-io",
+ "futures-lite",
+ "parking",
+ "polling",
+ "rustix",
+ "slab",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "async-lock"
+version = "3.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "290f7f2596bd5b78a9fec8088ccd89180d7f9f55b94b0576823bbbdc72ee8311"
+dependencies = [
+ "event-listener",
+ "event-listener-strategy",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-process"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc50921ec0055cdd8a16de48773bfeec5c972598674347252c0399676be7da75"
+dependencies = [
+ "async-channel",
+ "async-io",
+ "async-lock",
+ "async-signal",
+ "async-task",
+ "blocking",
+ "cfg-if",
+ "event-listener",
+ "futures-lite",
+ "rustix",
+]
+
+[[package]]
+name = "async-recursion"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b43422f69d8ff38f95f1b2bb76517c91589a924d1559a0e935d7c8ce0274c11"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "async-signal"
+version = "0.2.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52b5aaafa020cf5053a01f2a60e8ff5dccf550f0f77ec54a4e47285ac2bab485"
+dependencies = [
+ "async-io",
+ "async-lock",
+ "atomic-waker",
+ "cfg-if",
+ "futures-core",
+ "futures-io",
+ "rustix",
+ "signal-hook-registry",
+ "slab",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "async-task"
+version = "4.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b75356056920673b02621b35afd0f7dda9306d03c79a30f5c56c44cf256e3de"
+
+[[package]]
+name = "async-trait"
+version = "0.1.92"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82f6aeea286b8eb4dd3431a1be1b59d290ace00f5bfd8e2a159bc2a05e2c1667"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+]
+
+[[package]]
+name = "atk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "241b621213072e993be4f6f3a9e4b45f65b7e6faad43001be957184b7bb1824b"
+dependencies = [
+ "atk-sys",
+ "glib",
+ "libc",
+]
+
+[[package]]
+name = "atk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5e48b684b0ca77d2bbadeef17424c2ea3c897d44d566a1617e7e8f30614d086"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
+
+[[package]]
+name = "base64"
+version = "0.21.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "bit-set"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
+dependencies = [
+ "bit-vec",
+]
+
+[[package]]
+name = "bit-vec"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2",
+]
+
+[[package]]
+name = "blocking"
+version = "1.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a70e4329df6cb94385eed412ec92375c3cdd8a6e502493d1229b6414e4036dfa"
+dependencies = [
+ "async-channel",
+ "async-task",
+ "futures-io",
+ "futures-lite",
+ "piper",
+]
+
+[[package]]
+name = "brotli"
+version = "8.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5cc91aac060a7a1e25823bdccbfb6af1875b88f17c6daac97894eed8207166b3"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+ "brotli-decompressor",
+]
+
+[[package]]
+name = "brotli-decompressor"
+version = "5.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a32acac15fe1967bc3986b2a6347dffc965602354ea6f450ad07e8bfd253583"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+]
+
+[[package]]
+name = "bs58"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf88ba1141d185c399bee5288d850d63b8369520c1eafc32a0430b5b6c287bf4"
+dependencies = [
+ "tinyvec",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.20.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
+
+[[package]]
+name = "bytemuck"
+version = "1.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95832e849adfb21180ccb6826a99da14e5d266ae5c2e668e1602cf234f153797"
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cairo-rs"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ca26ef0159422fb77631dc9d17b102f253b876fe1586b03b803e63a309b4ee2"
+dependencies = [
+ "bitflags 2.13.1",
+ "cairo-sys-rs",
+ "glib",
+ "libc",
+ "once_cell",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "cairo-sys-rs"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "685c9fa8e590b8b3d678873528d83411db17242a73fccaed827770ea0fedda51"
+dependencies = [
+ "glib-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "camino"
+version = "1.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb1307f12aa967b5a58416e87b3653360e0fd614a016b6e970db08fecbb1b80d"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "cargo-platform"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e35af189006b9c0f00a064685c727031e3ed2d8020f7ba284d78cc2671bd36ea"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cargo_metadata"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd5eb614ed4c27c5d706420e4320fbe3216ab31fa1c33cd8246ac36dae4479ba"
+dependencies = [
+ "camino",
+ "cargo-platform",
+ "semver",
+ "serde",
+ "serde_json",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "cargo_toml"
+version = "0.22.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "374b7c592d9c00c1f4972ea58390ac6b18cbb6ab79011f3bdc90a0b82ca06b77"
+dependencies = [
+ "serde",
+ "toml 0.9.12+spec-1.1.0",
+]
+
+[[package]]
+name = "cc"
+version = "1.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ad534f4357a5264cce5019c989cf66a4f0dc4e0d1b1d15f8aacec0ff7360273"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "cesu8"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
+
+[[package]]
+name = "cfb"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38f2da7a0a2c4ccf0065be06397cc26a81f4e528be095826eee9d4adbb8c60f"
+dependencies = [
+ "byteorder",
+ "fnv",
+ "uuid",
+]
+
+[[package]]
+name = "cfg-expr"
+version = "0.15.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d067ad48b8650848b989a59a86c6c36a995d02d2bf778d45c3c5d57bc2718f02"
+dependencies = [
+ "smallvec",
+ "target-lexicon",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "chrono"
+version = "0.4.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1aa79e62e7697b8e29b513a68abacf485adcd1fe8284a4316c5ae868e6633327"
+dependencies = [
+ "iana-time-zone",
+ "num-traits",
+ "serde",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "combine"
+version = "4.6.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfc320937d09e6de266b31b9afb480f197d7a861be86be7cb2ea7e5d1bfffc5e"
+dependencies = [
+ "bytes",
+ "memchr",
+]
+
+[[package]]
+name = "concurrent-queue"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "const-random"
+version = "0.1.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "87e00182fe74b066627d63b85fd550ac2998d4b0bd86bfed477a0ae4c7c71359"
+dependencies = [
+ "const-random-macro",
+]
+
+[[package]]
+name = "const-random-macro"
+version = "0.1.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9d839f2a20b0aee515dc581a6172f2321f96cab76c1a38a4c584a194955390e"
+dependencies = [
+ "getrandom 0.2.17",
+ "once_cell",
+ "tiny-keccak",
+]
+
+[[package]]
+name = "convert_case"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6245d59a3e82a7fc217c5828a6692dbc6dfb63a0c8c90495621f7b9d79704a0e"
+
+[[package]]
+name = "cookie"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a373e3602691c3cdea496d2f0ee5935151e6168fe87739483c463db1b2f2f87"
+dependencies = [
+ "time",
+ "version_check",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "core-graphics"
+version = "0.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "064badf302c3194842cf2c5d61f56cc88e54a759313879cdf03abdd27d0c3b97"
+dependencies = [
+ "bitflags 2.13.1",
+ "core-foundation",
+ "core-graphics-types",
+ "foreign-types",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics-types"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d44a101f213f6c4cdc1853d4b78aef6db6bdfa3468798cc1d9912f4735013eb"
+dependencies = [
+ "bitflags 2.13.1",
+ "core-foundation",
+ "libc",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8498c871161e1742aaa9d52551b2d6ebdd4c3d45a3be423e3728f33b955be550"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "crossbeam-channel"
+version = "0.5.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d85363c37faeca707aef026efa9f3b34d077bce547e48f770770625c6013679e"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61803da095bee82a81bb1a452ecc25d3b2f1416d1897eb86430c6159ef717c17"
+
+[[package]]
+name = "crunchy"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "cssparser"
+version = "0.29.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f93d03419cb5950ccfd3daf3ff1c7a36ace64609a1a8746d493df1ca0afde0fa"
+dependencies = [
+ "cssparser-macros",
+ "dtoa-short",
+ "itoa",
+ "matches",
+ "phf 0.10.1",
+ "proc-macro2",
+ "quote",
+ "smallvec",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "cssparser"
+version = "0.36.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dae61cf9c0abb83bd659dab65b7e4e38d8236824c85f0f804f173567bda257d2"
+dependencies = [
+ "cssparser-macros",
+ "dtoa-short",
+ "itoa",
+ "phf 0.13.1",
+ "smallvec",
+]
+
+[[package]]
+name = "cssparser-macros"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13b588ba4ac1a99f7f2964d24b3d896ddc6bf847ee3855dbd4366f058cfcd331"
+dependencies = [
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "ctor"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "352d39c2f7bef1d6ad73db6f5160efcaed66d94ef8c6c573a8410c00bf909a98"
+dependencies = [
+ "ctor-proc-macro",
+ "dtor",
+]
+
+[[package]]
+name = "ctor-proc-macro"
+version = "0.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52560adf09603e58c9a7ee1fe1dcb95a16927b17c127f0ac02d6e768a0e25bc1"
+
+[[package]]
+name = "darling"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25ae13da2f202d56bd7f91c25fba009e7717a1e4a1cc98a76d844b65ae912e9d"
+dependencies = [
+ "darling_core",
+ "darling_macro",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9865a50f7c335f53564bb694ef660825eb8610e0a53d3e11bf1b0d3df31e03b0"
+dependencies = [
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3984ec7bd6cfa798e62b4a642426a5be0e68f9401cfc2a01e3fa9ea2fcdb8d"
+dependencies = [
+ "darling_core",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "defmt"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2953bfe4f93bbd20cc71198842756f77d161884c99ebbabc41d80231ded88d1"
+dependencies = [
+ "bitflags 1.3.2",
+ "defmt-macros",
+]
+
+[[package]]
+name = "defmt-macros"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bad9c72e7ca2137e0dc3813245a0d282fd6daad32fd800af018306a9169b5fe8"
+dependencies = [
+ "defmt-parser",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "defmt-parser"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10d60334b3b2e7c9d91ef8150abfb6fa4c1c39ebbcf4a81c2e346aad939fee3e"
+dependencies = [
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "deranged"
+version = "0.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "derive_more"
+version = "0.99.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6edb4b64a43d977b8e99788fe3a04d483834fba1215a7e02caa415b626497f7f"
+dependencies = [
+ "convert_case",
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "derive_more"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
+dependencies = [
+ "derive_more-impl",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
+[[package]]
+name = "dirs"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e8aa94d75141228480295a7d0e7feb620b1a5ad9f12bc40be62411e38cce4e"
+dependencies = [
+ "dirs-sys",
+]
+
+[[package]]
+name = "dirs-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e01a3366d27ee9890022452ee61b2b63a67e6f13f58900b651ff5665f0bb1fab"
+dependencies = [
+ "libc",
+ "option-ext",
+ "redox_users",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "dispatch2"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2",
+ "libc",
+ "objc2",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6232dd377dcc64799954cbd3a9bb882e9cdc1308ccd87b1c098f1fb2eaf82a8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+]
+
+[[package]]
+name = "dlopen2"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e2c5bd4158e66d1e215c49b837e11d62f3267b30c92f1d171c4d3105e3dc4d4"
+dependencies = [
+ "dlopen2_derive",
+ "libc",
+ "once_cell",
+ "winapi",
+]
+
+[[package]]
+name = "dlopen2_derive"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fbbb781877580993a8707ec48672673ec7b81eeba04cfd2310bd28c08e47c8f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "dlv-list"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "442039f5147480ba31067cb00ada1adae6892028e40e45fc5de7b7df6dcc1b5f"
+dependencies = [
+ "const-random",
+]
+
+[[package]]
+name = "dom_query"
+version = "0.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521e380c0c8afb8d9a1e83a1822ee03556fc3e3e7dbc1fd30be14e37f9cb3f89"
+dependencies = [
+ "bit-set",
+ "cssparser 0.36.0",
+ "foldhash",
+ "html5ever 0.38.0",
+ "precomputed-hash",
+ "selectors 0.36.1",
+ "tendril 0.5.1",
+]
+
+[[package]]
+name = "dpi"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "dtoa"
+version = "1.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c3cf4824e2d5f025c7b531afcb2325364084a16806f6d47fbc1f5fbd9960590"
+
+[[package]]
+name = "dtoa-short"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd1511a7b6a56299bd043a9c167a6d2bfb37bf84a6dfceaba651168adfb43c87"
+dependencies = [
+ "dtoa",
+]
+
+[[package]]
+name = "dtor"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1057d6c64987086ff8ed0fd3fbf377a6b7d205cc7715868cd401705f715cbe4"
+dependencies = [
+ "dtor-proc-macro",
+]
+
+[[package]]
+name = "dtor-proc-macro"
+version = "0.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f678cf4a922c215c63e0de95eb1ff08a958a81d47e485cf9da1e27bf6305cfa5"
+
+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
+[[package]]
+name = "dyn-clone"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
+
+[[package]]
+name = "embed-resource"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fbfdaacccebec3b28e4866b8973543c7647797db5ada1bdab552e48fe665fbbd"
+dependencies = [
+ "cc",
+ "memchr",
+ "rustc_version",
+ "toml 1.1.4+spec-1.1.0",
+ "vswhom",
+ "winreg",
+]
+
+[[package]]
+name = "embed_plist"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ef6b89e5b37196644d8796de5268852ff179b44e96276cf4290264843743bb7"
+
+[[package]]
+name = "endi"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "66b7e2430c6dff6a955451e2cfc438f09cea1965a9d6f87f7e3b90decc014099"
+
+[[package]]
+name = "enumflags2"
+version = "0.7.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1027f7680c853e056ebcec683615fb6fbbc07dbaa13b4d5d9442b146ded4ecef"
+dependencies = [
+ "enumflags2_derive",
+ "serde",
+]
+
+[[package]]
+name = "enumflags2_derive"
+version = "0.7.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67c78a4d8fdf9953a5c9d458f9efe940fd97a0cab0941c075a813ac594733827"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "erased-serde"
+version = "0.4.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2add8a07dd6a8d93ff627029c51de145e12686fbc36ecb298ac22e74cf02dec"
+dependencies = [
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "event-listener"
+version = "5.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a23add41df1562121a9393cb065eab5146a1242410f23a644851e90cfd669d2"
+dependencies = [
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "event-listener-strategy"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8be9f3dfaaffdae2972880079a491a1a8bb7cbed0b8dd7a347f668b4150a3b93"
+dependencies = [
+ "event-listener",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223"
+
+[[package]]
+name = "fdeflate"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c"
+dependencies = [
+ "simd-adler32",
+]
+
+[[package]]
+name = "field-offset"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38e2275cc4e4fc009b0669731a1e5ab7ebf11f469eaede2bab9309a5b4d6057f"
+dependencies = [
+ "memoffset",
+ "rustc_version",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d45db016d36b838f563236e9193d0ee6ce38f3f68b6c94e914b4929c96bbb890"
+
+[[package]]
+name = "flate2"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e634e2e0ebac1ee034020da1ca582e17ffe4e0f5e985823721e168928136dcb"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide 0.9.1",
+ "zlib-rs",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
+[[package]]
+name = "foreign-types"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d737d9aa519fb7b749cbc3b962edcf310a8dd1f4b67c91c4f83975dbdd17d965"
+dependencies = [
+ "foreign-types-macros",
+ "foreign-types-shared",
+]
+
+[[package]]
+name = "foreign-types-macros"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea5190182e6915eb873ddbc16e23b711b6eb1f9c00a0d0a3a91b5f6228475225"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+]
+
+[[package]]
+name = "foreign-types-shared"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa9a19cbb55df58761df49b23516a86d432839add4af60fc256da840f66ed35b"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futf"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df420e2e84819663797d1ec6544b13c5be84629e7bb00dc960d6917db2987843"
+dependencies = [
+ "mac",
+ "new_debug_unreachable",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1f9e3d69d39e4862ffed03ed071a76f9a13ba1d9109d355b0f0aa6b15e393c4"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "031b47cf1a3c6cc8bc2fc76cd437f521619387907d469316e7c0bc278f1f5432"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53c0fa8157de1303bfffdaa1cc2a673bfffb60102f76b0ef4441659124373fed"
+
+[[package]]
+name = "futures-lite"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f78e10609fe0e0b3f4157ffab1876319b5b0db102a2c60dc4626306dc46b44ad"
+dependencies = [
+ "fastrand",
+ "futures-core",
+ "futures-io",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "futures-macro"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fb9654ba8355388abeb8dcb4fc62f511300867002afc858860463bdd9fe0c44"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1944426bf7d03f1d14f708785e4b33efd750b36d48a157b836b3efc15ede8e1d"
+
+[[package]]
+name = "futures-task"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd"
+
+[[package]]
+name = "futures-util"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc"
+dependencies = [
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "fxhash"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c31b6d751ae2c7f11320402d34e41349dd1016f8d5d45e48c4312bc8625af50c"
+dependencies = [
+ "byteorder",
+]
+
+[[package]]
+name = "gdk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9f245958c627ac99d8e529166f9823fb3b838d1d41fd2b297af3075093c2691"
+dependencies = [
+ "cairo-rs",
+ "gdk-pixbuf",
+ "gdk-sys",
+ "gio",
+ "glib",
+ "libc",
+ "pango",
+]
+
+[[package]]
+name = "gdk-pixbuf"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50e1f5f1b0bfb830d6ccc8066d18db35c487b1b2b1e8589b5dfe9f07e8defaec"
+dependencies = [
+ "gdk-pixbuf-sys",
+ "gio",
+ "glib",
+ "libc",
+ "once_cell",
+]
+
+[[package]]
+name = "gdk-pixbuf-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9839ea644ed9c97a34d129ad56d38a25e6756f99f3a88e15cd39c20629caf7"
+dependencies = [
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "gdk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c2d13f38594ac1e66619e188c6d5a1adb98d11b2fcf7894fc416ad76aa2f3f7"
+dependencies = [
+ "cairo-sys-rs",
+ "gdk-pixbuf-sys",
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "pango-sys",
+ "pkg-config",
+ "system-deps",
+]
+
+[[package]]
+name = "gdkwayland-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "140071d506d223f7572b9f09b5e155afbd77428cd5cc7af8f2694c41d98dfe69"
+dependencies = [
+ "gdk-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "pkg-config",
+ "system-deps",
+]
+
+[[package]]
+name = "gdkx11"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3caa00e14351bebbc8183b3c36690327eb77c49abc2268dd4bd36b856db3fbfe"
+dependencies = [
+ "gdk",
+ "gdkx11-sys",
+ "gio",
+ "glib",
+ "libc",
+ "x11",
+]
+
+[[package]]
+name = "gdkx11-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e7445fe01ac26f11601db260dd8608fe172514eb63b3b5e261ea6b0f4428d"
+dependencies = [
+ "gdk-sys",
+ "glib-sys",
+ "libc",
+ "system-deps",
+ "x11",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.1.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fc3cb4d91f53b50155bdcfd23f6a4c39ae1969c2ae85982b135750cccaf5fce"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "wasi 0.9.0+wasi-snapshot-preview1",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "wasi 0.11.1+wasi-snapshot-preview1",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 5.3.0",
+ "wasip2",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 6.0.0",
+]
+
+[[package]]
+name = "gio"
+version = "0.18.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4fc8f532f87b79cbc51a79748f16a6828fb784be93145a322fa14d06d354c73"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-util",
+ "gio-sys",
+ "glib",
+ "libc",
+ "once_cell",
+ "pin-project-lite",
+ "smallvec",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "gio-sys"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37566df850baf5e4cb0dfb78af2e4b9898d817ed9263d1090a2df958c64737d2"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+ "winapi",
+]
+
+[[package]]
+name = "glib"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "233daaf6e83ae6a12a52055f568f9d7cf4671dabb78ff9560ab6da230ce00ee5"
+dependencies = [
+ "bitflags 2.13.1",
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-task",
+ "futures-util",
+ "gio-sys",
+ "glib-macros",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "memchr",
+ "once_cell",
+ "smallvec",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "glib-macros"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bb0228f477c0900c880fd78c8759b95c7636dbd7842707f49e132378aa2acdc"
+dependencies = [
+ "heck 0.4.1",
+ "proc-macro-crate 2.0.2",
+ "proc-macro-error",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "glib-sys"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "063ce2eb6a8d0ea93d2bf8ba1957e78dbab6be1c2220dd3daca57d5a9d869898"
+dependencies = [
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "glob"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4eba85ea1d0a966a983acd07deee566e67395d2d96b6fb39e62b5a833f1eb0b"
+
+[[package]]
+name = "gobject-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0850127b514d1c4a4654ead6dedadb18198999985908e6ffe4436f53c785ce44"
+dependencies = [
+ "glib-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "gtk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd56fb197bfc42bd5d2751f4f017d44ff59fbb58140c6b49f9b3b2bdab08506a"
+dependencies = [
+ "atk",
+ "cairo-rs",
+ "field-offset",
+ "futures-channel",
+ "gdk",
+ "gdk-pixbuf",
+ "gio",
+ "glib",
+ "gtk-sys",
+ "gtk3-macros",
+ "libc",
+ "pango",
+ "pkg-config",
+]
+
+[[package]]
+name = "gtk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f29a1c21c59553eb7dd40e918be54dccd60c52b049b75119d5d96ce6b624414"
+dependencies = [
+ "atk-sys",
+ "cairo-sys-rs",
+ "gdk-pixbuf-sys",
+ "gdk-sys",
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "pango-sys",
+ "system-deps",
+]
+
+[[package]]
+name = "gtk3-macros"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ff3c5b21f14f0736fed6dcfc0bfb4225ebf5725f3c0209edeec181e4d73e9d"
+dependencies = [
+ "proc-macro-crate 1.3.1",
+ "proc-macro-error",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
+
+[[package]]
+name = "hashbrown"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
+
+[[package]]
+name = "hashbrown"
+version = "0.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
+
+[[package]]
+name = "heck"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8"
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hermit-abi"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e17592d60ebacc7d5e169f4663c5f84f9161cc90328abcfe8456f41e4dfcb284"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "html5ever"
+version = "0.29.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b7410cae13cbc75623c98ac4cbfd1f0bedddf3227afc24f370cf0f50a44a11c"
+dependencies = [
+ "log",
+ "mac",
+ "markup5ever 0.14.1",
+ "match_token",
+]
+
+[[package]]
+name = "html5ever"
+version = "0.38.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1054432bae2f14e0061e33d23402fbaa67a921d319d56adc6bcf887ddad1cbc2"
+dependencies = [
+ "log",
+ "markup5ever 0.38.0",
+]
+
+[[package]]
+name = "http"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "918d3568bebf352712bc2ef3d46a8bcf1a75b373be6539de198e9105cbbf9ce0"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca2a8f2913ee65f60facd6a5905613afaa448497a0230cc41ce022d93290bc2c"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23169fe34a5fbcdd3f3862e78fb9b6fccd5f02a6dc6f732547005d45631ce71c"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "hyper"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27b501faa50e7a26c3d3560ca625132f4078a17771f4810baf70475ae48cbe43"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "http",
+ "http-body",
+ "httparse",
+ "itoa",
+ "pin-project-lite",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2",
+ "tokio",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.65"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "log",
+ "wasm-bindgen",
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "ico"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e795dff5605e0f04bff85ca41b51a96b83e80b281e96231bcaaf1ac35103371"
+dependencies = [
+ "byteorder",
+ "png",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa68d21081c4a05d5a901a1c62add574c77048b6a1c67be3b50ce0b60d4ca513"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "utf8_iter",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d56e28588da92eee5c3201a6eff33fabdd49b62269c8938d4ff050ce4d900deb"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12f9cf5f235641ed274641dd81c3f28d870e276763d0797aeeab72317b1c646f"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1563da1ed3e0b3bf3d74c9b85917ac9c56464d2f57242270c09c9e752f8021a0"
+
+[[package]]
+name = "icu_properties"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e7ca276ad3145661a65914e6daf131ca5120cd3dcee8f8f3214b8875184a148"
+dependencies = [
+ "displaydoc",
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e590f038c1464a96894fd6d10127e90a8be4509f56ff7ecef851b15cee0b7caa"
+
+[[package]]
+name = "icu_provider"
+version = "2.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d27bbb9d3abbefac45d55f647c9de1d44aafcd1186eb91879afef17c396c3e73"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb68373c0d6620ef8105e855e7745e18b0d00d3bdb07fb532e434244cdb9a714"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "indexmap"
+version = "1.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
+dependencies = [
+ "autocfg",
+ "hashbrown 0.12.3",
+ "serde",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07aa2048142242915a31d35844fb311e0e53fcca590c3a0a40dcf1b841fa09eb"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.17.1",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "infer"
+version = "0.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a588916bfdfd92e71cacef98a63d9b1f0d74d6599980d11894290e7ddefffcf7"
+dependencies = [
+ "cfb",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a756c3fac73139e83f14c2d742155dd2b78d3ee56597b419a0579b7bdd6dd78"
+
+[[package]]
+name = "is-docker"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "928bae27f42bc99b60d9ac7334e3a21d10ad8f1835a4e12ec3ec0464765ed1b3"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "is-wsl"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "173609498df190136aa7dea1a91db051746d339e18476eed5ca40521f02d7aa5"
+dependencies = [
+ "is-docker",
+ "once_cell",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "javascriptcore-rs"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca5671e9ffce8ffba57afc24070e906da7fc4b1ba66f2cabebf61bf2ea257fcc"
+dependencies = [
+ "bitflags 1.3.2",
+ "glib",
+ "javascriptcore-rs-sys",
+]
+
+[[package]]
+name = "javascriptcore-rs-sys"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af1be78d14ffa4b75b66df31840478fef72b51f8c2465d4ca7c194da9f7a5124"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "jiff"
+version = "0.2.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "668b7183bd07af9a4885f5c35b0cc5c83c4607a913c16b7e17291832910d2dcc"
+dependencies = [
+ "defmt",
+ "jiff-core",
+ "jiff-static",
+ "jiff-tzdb-platform",
+ "log",
+ "portable-atomic",
+ "portable-atomic-util",
+ "serde_core",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "jiff-core"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7feca88439efe53da3754500c1851dedf3cb36c524dd5cf8225cc0794de95d09"
+dependencies = [
+ "defmt",
+]
+
+[[package]]
+name = "jiff-static"
+version = "0.2.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a69dcb3a21cfb32ce1cd056169337ca284af0766dd766e7878819b251a49204"
+dependencies = [
+ "jiff-core",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "jiff-tzdb"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "142bd39932ad231f10513df9ab62661fead8719872150b7ad02a2df79f4e141e"
+
+[[package]]
+name = "jiff-tzdb-platform"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "875a5a69ac2bab1a891711cf5eccbec1ce0341ea805560dcd90b7a2e925132e8"
+dependencies = [
+ "jiff-tzdb",
+]
+
+[[package]]
+name = "jni"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
+dependencies = [
+ "cesu8",
+ "cfg-if",
+ "combine",
+ "jni-sys 0.3.1",
+ "log",
+ "thiserror 1.0.69",
+ "walkdir",
+ "windows-sys 0.45.0",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41a652e1f9b6e0275df1f15b32661cf0d4b78d4d87ddec5e0c3c20f097433258"
+dependencies = [
+ "jni-sys 0.4.1",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6377a88cb3910bee9b0fa88d4f42e1d2da8e79915598f65fb0c7ee14c878af2"
+dependencies = [
+ "jni-sys-macros",
+]
+
+[[package]]
+name = "jni-sys-macros"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38c0b942f458fe50cdac086d2f946512305e5631e720728f2a61aabcd47a6264"
+dependencies = [
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "js-sys"
+version = "0.3.104"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e0c1080212aad755ea003d18543e8768dd432c48819efd73a7bf1e39b7a5a3a"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "json-patch"
+version = "3.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "863726d7afb6bc2590eeff7135d923545e5e964f004c2ccf8716c25e70a86f08"
+dependencies = [
+ "jsonptr",
+ "serde",
+ "serde_json",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "jsonptr"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5dea2b27dd239b2556ed7a25ba842fe47fd602e7fc7433c2a8d6106d4d9edd70"
+dependencies = [
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "keyboard-types"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b750dcadc39a09dbadd74e118f6dd6598df77fa01df0cfcdc52c28dece74528a"
+dependencies = [
+ "bitflags 2.13.1",
+ "serde",
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "kuchikiki"
+version = "0.8.8-speedreader"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02cb977175687f33fa4afa0c95c112b987ea1443e5a51c8f8ff27dc618270cc2"
+dependencies = [
+ "cssparser 0.29.6",
+ "html5ever 0.29.1",
+ "indexmap 2.14.1",
+ "selectors 0.24.0",
+]
+
+[[package]]
+name = "libappindicator"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03589b9607c868cc7ae54c0b2a22c8dc03dd41692d48f2d7df73615c6a95dc0a"
+dependencies = [
+ "glib",
+ "gtk",
+ "gtk-sys",
+ "libappindicator-sys",
+ "log",
+]
+
+[[package]]
+name = "libappindicator-sys"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e9ec52138abedcc58dc17a7c6c0c00a2bdb4f3427c7f63fa97fd0d859155caf"
+dependencies = [
+ "gtk-sys",
+ "libloading",
+ "once_cell",
+]
+
+[[package]]
+name = "libc"
+version = "0.2.189"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
+
+[[package]]
+name = "libloading"
+version = "0.7.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67380fd3b2fbe7527a606e18729d21c6f3951633d0500574c4dc22d2d638b9f"
+dependencies = [
+ "cfg-if",
+ "winapi",
+]
+
+[[package]]
+name = "libredox"
+version = "0.1.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8d8f1ea3f21fd3405dcaf6c9b5c1630af9afc422d9073ea39c5f6d6c772e08ed"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "litemap"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47d9d19d1d6efa0109d2f65ff4c85cddd50bd572e5a00127ab10987290bcefae"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9f8bd3e56ce4dfc153cf470fffbfa98c7620958b312ca5c3a4b8d5181fd13c6"
+
+[[package]]
+name = "mac"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c41e0c4fef86961ac6d6f8a82609f55f31b05e4fce149ac5710e439df7619ba4"
+
+[[package]]
+name = "markup5ever"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7a7213d12e1864c0f002f52c2923d4556935a43dec5e71355c2760e0f6e7a18"
+dependencies = [
+ "log",
+ "phf 0.11.3",
+ "phf_codegen 0.11.3",
+ "string_cache 0.8.9",
+ "string_cache_codegen 0.5.4",
+ "tendril 0.4.3",
+]
+
+[[package]]
+name = "markup5ever"
+version = "0.38.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8983d30f2915feeaaab2d6babdd6bc7e9ed1a00b66b5e6d74df19aa9c0e91862"
+dependencies = [
+ "log",
+ "tendril 0.5.1",
+ "web_atoms",
+]
+
+[[package]]
+name = "match_token"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88a9689d8d44bf9964484516275f5cd4c9b59457a6940c1d5d0ecbb94510a36b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "matches"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2532096657941c2fea9c289d370a250971c689d4f143798ff67113ec042024a5"
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "memoffset"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "mime"
+version = "0.3.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "miniz_oxide"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b63fbc4a50860e98e7b2aa7804ded1db5cbc3aff9193adaff57a6931bf7c4b4c"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "mio"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30d65c71f1ce40ab09135ce117d742b9f8a19ff91a41a8b57ed50bc2de59c427"
+dependencies = [
+ "libc",
+ "wasi 0.11.1+wasi-snapshot-preview1",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "muda"
+version = "0.17.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c9fec5a4e89860383d778d10563a605838f8f0b2f9303868937e5ff32e86177"
+dependencies = [
+ "crossbeam-channel",
+ "dpi",
+ "gtk",
+ "keyboard-types",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "once_cell",
+ "png",
+ "serde",
+ "thiserror 2.0.20",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "ndk"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3f42e7bbe13d351b6bead8286a43aac9534b82bd3cc43e47037f012ebfd62d4"
+dependencies = [
+ "bitflags 2.13.1",
+ "jni-sys 0.3.1",
+ "log",
+ "ndk-sys",
+ "num_enum",
+ "raw-window-handle",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "ndk-context"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27b02d87554356db9e9a873add8782d4ea6e3e58ea071a9adb9a2e8ddb884a8b"
+
+[[package]]
+name = "ndk-sys"
+version = "0.6.0+11769913"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee6cda3051665f1fb8d9e08fc35c96d5a244fb1be711a03b71118828afc9a873"
+dependencies = [
+ "jni-sys 0.3.1",
+]
+
+[[package]]
+name = "new_debug_unreachable"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "650eef8c711430f1a879fdd01d4745a7deea475becfb90269c06775983bbf086"
+
+[[package]]
+name = "nodrop"
+version = "0.1.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72ef4a56884ca558e5ddb05a1d1e7e1bfd9a68d9ed024c21704cc98872dae1bb"
+
+[[package]]
+name = "num-conv"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521739c6d2bac4aa25192232afe6841231376b2b26d4d9fae5ecf8ca5772e441"
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "num_enum"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d0bca838442ec211fa11de3a8b0e0e8f3a4522575b5c4c06ed722e005036f26"
+dependencies = [
+ "num_enum_derive",
+ "rustversion",
+]
+
+[[package]]
+name = "num_enum_derive"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "680998035259dcfcafe653688bf2aa6d3e2dc05e98be6ab46afb089dc84f1df8"
+dependencies = [
+ "proc-macro-crate 3.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "objc2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a12a8ed07aefc768292f076dc3ac8c48f3781c8f2d5851dd3d98950e8c5a89f"
+dependencies = [
+ "objc2-encode",
+ "objc2-exception-helper",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags 2.13.1",
+ "dispatch2",
+ "objc2",
+]
+
+[[package]]
+name = "objc2-core-graphics"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
+dependencies = [
+ "bitflags 2.13.1",
+ "dispatch2",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "objc2-exception-helper"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7a1c5fbb72d7735b076bb47b578523aedc40f3c439bea6dfd595c089d79d98a"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "objc2-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-io-surface"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
+dependencies = [
+ "bitflags 2.13.1",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
+dependencies = [
+ "bitflags 2.13.1",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-ui-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d87d638e33c06f577498cbcc50491496a3ed4246998a7fbba7ccb98b1e7eab22"
+dependencies = [
+ "bitflags 2.13.1",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-web-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2e5aaab980c433cf470df9d7af96a7b46a9d892d521a2cbbb2f8a4c16751e7f"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "open"
+version = "5.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c603ab8300cf18bc3b14146b19fe3dfcc4843ae5a400cd0e7a30b95aa366634"
+dependencies = [
+ "dunce",
+ "is-wsl",
+ "libc",
+]
+
+[[package]]
+name = "option-ext"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
+
+[[package]]
+name = "ordered-multimap"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49203cdcae0030493bad186b28da2fa25645fa276a51b6fec8010d281e02ef79"
+dependencies = [
+ "dlv-list",
+ "hashbrown 0.14.5",
+]
+
+[[package]]
+name = "ordered-stream"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aa2b01e1d916879f73a53d01d1d6cee68adbb31d6d9177a8cfce093cced1d50"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "org2-remote"
+version = "0.1.0"
+dependencies = [
+ "security-framework",
+ "security-framework-sys",
+ "serde_json",
+ "tauri",
+ "tauri-build",
+ "tauri-plugin-deep-link",
+ "tauri-plugin-opener",
+]
+
+[[package]]
+name = "pango"
+version = "0.18.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ca27ec1eb0457ab26f3036ea52229edbdb74dee1edd29063f5b9b010e7ebee4"
+dependencies = [
+ "gio",
+ "glib",
+ "libc",
+ "once_cell",
+ "pango-sys",
+]
+
+[[package]]
+name = "pango-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "436737e391a843e5933d6d9aa102cb126d501e815b83601365a948a518555dc5"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "parking"
+version = "2.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "phf"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3dfb61232e34fcb633f43d12c58f83c1df82962dcdfa565a4e866ffc17dafe12"
+dependencies = [
+ "phf_shared 0.8.0",
+]
+
+[[package]]
+name = "phf"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fabbf1ead8a5bcbc20f5f8b939ee3f5b0f6f281b6ad3468b84656b658b455259"
+dependencies = [
+ "phf_macros 0.10.0",
+ "phf_shared 0.10.0",
+ "proc-macro-hack",
+]
+
+[[package]]
+name = "phf"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd6780a80ae0c52cc120a26a1a42c1ae51b247a253e4e06113d23d2c2edd078"
+dependencies = [
+ "phf_shared 0.11.3",
+]
+
+[[package]]
+name = "phf"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1562dc717473dbaa4c1f85a36410e03c047b2e7df7f45ee938fbef64ae7fadf"
+dependencies = [
+ "phf_macros 0.13.1",
+ "phf_shared 0.13.1",
+ "serde",
+]
+
+[[package]]
+name = "phf_codegen"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cbffee61585b0411840d3ece935cce9cb6321f01c45477d30066498cd5e1a815"
+dependencies = [
+ "phf_generator 0.8.0",
+ "phf_shared 0.8.0",
+]
+
+[[package]]
+name = "phf_codegen"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aef8048c789fa5e851558d709946d6d79a8ff88c0440c587967f8e94bfb1216a"
+dependencies = [
+ "phf_generator 0.11.3",
+ "phf_shared 0.11.3",
+]
+
+[[package]]
+name = "phf_codegen"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49aa7f9d80421bca176ca8dbfebe668cc7a2684708594ec9f3c0db0805d5d6e1"
+dependencies = [
+ "phf_generator 0.13.1",
+ "phf_shared 0.13.1",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "17367f0cc86f2d25802b2c26ee58a7b23faeccf78a396094c13dced0d0182526"
+dependencies = [
+ "phf_shared 0.8.0",
+ "rand 0.7.3",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d5285893bb5eb82e6aaf5d59ee909a06a16737a8970984dd7746ba9283498d6"
+dependencies = [
+ "phf_shared 0.10.0",
+ "rand 0.8.8",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
+dependencies = [
+ "phf_shared 0.11.3",
+ "rand 0.8.8",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "135ace3a761e564ec88c03a77317a7c6b80bb7f7135ef2544dbe054243b89737"
+dependencies = [
+ "fastrand",
+ "phf_shared 0.13.1",
+]
+
+[[package]]
+name = "phf_macros"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "58fdf3184dd560f160dd73922bea2d5cd6e8f064bf4b13110abd81b03697b4e0"
+dependencies = [
+ "phf_generator 0.10.0",
+ "phf_shared 0.10.0",
+ "proc-macro-hack",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "phf_macros"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812f032b54b1e759ccd5f8b6677695d5268c588701effba24601f6932f8269ef"
+dependencies = [
+ "phf_generator 0.13.1",
+ "phf_shared 0.13.1",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c00cf8b9eafe68dde5e9eaa2cef8ee84a9336a47d566ec55ca16589633b65af7"
+dependencies = [
+ "siphasher 0.3.11",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6796ad771acdc0123d2a88dc428b5e38ef24456743ddb1744ed628f9815c096"
+dependencies = [
+ "siphasher 0.3.11",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67eabc2ef2a60eb7faa00097bd1ffdb5bd28e62bf39990626a582201b7a754e5"
+dependencies = [
+ "siphasher 1.0.3",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e57fef6bc5981e38c2ce2d63bfa546861309f875b8a75f092d1d54ae2d64f266"
+dependencies = [
+ "siphasher 1.0.3",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "piper"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c835479a4443ded371d6c535cbfd8d31ad92c5d23ae9770a61bc155e4992a3c1"
+dependencies = [
+ "atomic-waker",
+ "fastrand",
+ "futures-io",
+]
+
+[[package]]
+name = "pkg-config"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6b464fbc74e149a392436b17d523f769e057cb6877f6a5c4618bc6f11800548"
+
+[[package]]
+name = "plist"
+version = "1.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da1d65da6dd5d1e44199ac0f58712d241c0f439f80adea8924d832384087f85"
+dependencies = [
+ "base64 0.22.1",
+ "indexmap 2.14.1",
+ "quick-xml",
+ "serde",
+ "time",
+]
+
+[[package]]
+name = "png"
+version = "0.17.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82151a2fc869e011c153adc57cf2789ccb8d9906ce52c0b39a6b5697749d7526"
+dependencies = [
+ "bitflags 1.3.2",
+ "crc32fast",
+ "fdeflate",
+ "flate2",
+ "miniz_oxide 0.8.9",
+]
+
+[[package]]
+name = "polling"
+version = "3.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d0e4f59085d47d8241c88ead0f274e8a0cb551f3625263c05eb8dd897c34218"
+dependencies = [
+ "cfg-if",
+ "concurrent-queue",
+ "hermit-abi",
+ "pin-project-lite",
+ "rustix",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "portable-atomic"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05c8b63e8d9609db387f0324918f81d68fe27748f084ef092fb35954d0539a85"
+
+[[package]]
+name = "portable-atomic-util"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a106d1259c23fac8e543272398ae0e3c0b8d33c88ed73d0cc71b0f1d902618"
+dependencies = [
+ "portable-atomic",
+]
+
+[[package]]
+name = "potential_utf"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d83eb9bc6d8e5cf568e7a1101d60ee05e81ed50ea106026f3d18deeb046d7661"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "precomputed-hash"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "925383efa346730478fb4838dbe9137d2a47675ad789c546d150a6e1dd4ab31c"
+
+[[package]]
+name = "proc-macro-crate"
+version = "1.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f4c021e1093a56626774e81216a4ce732a735e5bad4868a03f3ed65ca0c3919"
+dependencies = [
+ "once_cell",
+ "toml_edit 0.19.15",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b00f26d3400549137f92511a46ac1cd8ce37cb5598a96d382381458b992a5d24"
+dependencies = [
+ "toml_datetime 0.6.3",
+ "toml_edit 0.20.2",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "3.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e67ba7e9b2b56446f1d419b1d807906278ffa1a658a8a5d8a39dcb1f5a78614f"
+dependencies = [
+ "toml_edit 0.25.13+spec-1.1.0",
+]
+
+[[package]]
+name = "proc-macro-error"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c"
+dependencies = [
+ "proc-macro-error-attr",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro-error-attr"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro-hack"
+version = "0.5.20+deprecated"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc375e1527247fe1a97d8b7156678dfe7c1af2fc075c9a4db3690ecd2a148068"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.41.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e660451e55124f798a69a5af3f49ccfbefbd41910eefd25caf2393e1f3473ec1"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "rand"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a6b1679d49b24bbfe0c803429aa1874472f50d9b363131f0e89fc356b544d03"
+dependencies = [
+ "getrandom 0.1.16",
+ "libc",
+ "rand_chacha 0.2.2",
+ "rand_core 0.5.1",
+ "rand_hc",
+ "rand_pcg",
+]
+
+[[package]]
+name = "rand"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c"
+dependencies = [
+ "libc",
+ "rand_chacha 0.3.1",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f4c8ed856279c9737206bf725bf36935d8666ead7aa69b52be55af369d193402"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.5.1",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "90bde5296fc891b0cef12a6d03ddccc162ce7b2aff54160af9338f8d40df6d19"
+dependencies = [
+ "getrandom 0.1.16",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+dependencies = [
+ "getrandom 0.2.17",
+]
+
+[[package]]
+name = "rand_hc"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca3129af7b92a17112d59ad498c6f81eaf463253766b90396d39ea7a39d6613c"
+dependencies = [
+ "rand_core 0.5.1",
+]
+
+[[package]]
+name = "rand_pcg"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16abd0c1b639e9eb4d7c50c0b8100b0d0f849be2349829c740fe8e6eb4816429"
+dependencies = [
+ "rand_core 0.5.1",
+]
+
+[[package]]
+name = "raw-window-handle"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20675572f6f24e9e76ef639bc5552774ed45f1c30e2951e1e99c59888861c539"
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags 2.13.1",
+]
+
+[[package]]
+name = "redox_users"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4e608c6638b9c18977b00b475ac1f28d14e84b27d8d42f70e0bf1e3dec127ac"
+dependencies = [
+ "getrandom 0.2.17",
+ "libredox",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "ref-cast"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e440fb4e4b4147295338efb76001ab9e4efc0e5839df2c47fc5ac2381d365c3"
+dependencies = [
+ "ref-cast-impl",
+]
+
+[[package]]
+name = "ref-cast-impl"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92ecd8964f8453721699a1ed72037b0db49ce2f5a5138486ee89bed6f67cdf3a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+]
+
+[[package]]
+name = "regex"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f020237b6c8eed93db2e2cb53c00c60a8e1bc73da7d073199a1180401450218d"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad8553b9b26413251cbf30e620595c7a41b3887f03da04579c0e6b0d6a06b4b2"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "reqwest"
+version = "0.13.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "219c5811de6525e5416c7d5d53bb656d3afdbc6c5af816e0802bcfa42dbdc1c3"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "serde",
+ "serde_json",
+ "sync_wrapper",
+ "tokio",
+ "tokio-util",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wasm-streams",
+ "web-sys",
+]
+
+[[package]]
+name = "rust-ini"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "796e8d2b6696392a43bea58116b667fb4c29727dc5abd27d6acf338bb4f688c7"
+dependencies = [
+ "cfg-if",
+ "ordered-multimap",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b1e7f9a428571be2dc5bc0505c13fb6bf936822b894ec87abf8a08a4e51742d"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags 2.13.1",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f"
+
+[[package]]
+name = "same-file"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "schemars"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3fbf2ae1b8bc8e02df939598064d22402220cd5bbcca1c76f7d6a310974d5615"
+dependencies = [
+ "dyn-clone",
+ "indexmap 1.9.3",
+ "schemars_derive",
+ "serde",
+ "serde_json",
+ "url",
+ "uuid",
+]
+
+[[package]]
+name = "schemars"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd191f9397d57d581cddd31014772520aa448f65ef991055d7f61582c65165f"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "687274d293b6cdc6e73e0fee520bf2049650090d7164f87672d212a3c530cf4a"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars_derive"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32e265784ad618884abaea0600a9adf15393368d840e0222d101a072f3f7534d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "serde_derive_internals",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "security-framework"
+version = "3.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
+dependencies = [
+ "bitflags 2.13.1",
+ "core-foundation",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "selectors"
+version = "0.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c37578180969d00692904465fb7f6b3d50b9a2b952b87c23d0e2e5cb5013416"
+dependencies = [
+ "bitflags 1.3.2",
+ "cssparser 0.29.6",
+ "derive_more 0.99.20",
+ "fxhash",
+ "log",
+ "phf 0.8.0",
+ "phf_codegen 0.8.0",
+ "precomputed-hash",
+ "servo_arc 0.2.0",
+ "smallvec",
+]
+
+[[package]]
+name = "selectors"
+version = "0.36.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5d9c0c92a92d33f08817311cf3f2c29a3538a8240e94a6a3c622ce652d7e00c"
+dependencies = [
+ "bitflags 2.13.1",
+ "cssparser 0.36.0",
+ "derive_more 2.1.1",
+ "log",
+ "new_debug_unreachable",
+ "phf 0.13.1",
+ "phf_codegen 0.13.1",
+ "precomputed-hash",
+ "rustc-hash",
+ "servo_arc 0.4.3",
+ "smallvec",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde-untagged"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9faf48a4a2d2693be24c6289dbe26552776eb7737074e6722891fadbe6c5058"
+dependencies = [
+ "erased-serde",
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+]
+
+[[package]]
+name = "serde_derive_internals"
+version = "0.29.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18d26a20a969b9e3fdf2fc2d9f21eda6c40e2de84c9408bb5d3b05d499aae711"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.151"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_repr"
+version = "0.1.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8d3b1629de253c70a0508c3899572da79ca359fdab27c7920ff00406df418906"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "0.6.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6662b5879511e06e8999a8a235d848113e942c9124f211511b16466ee2995f26"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "serde_with"
+version = "3.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee78f1fbe43ac4a0e47aadb3dbd357b69eb0d3793e948624cd03dd2750ab1c0a"
+dependencies = [
+ "base64 0.22.1",
+ "bs58",
+ "chrono",
+ "hex",
+ "indexmap 1.9.3",
+ "indexmap 2.14.1",
+ "jiff",
+ "schemars 0.9.0",
+ "schemars 1.2.2",
+ "serde_core",
+ "serde_json",
+ "serde_with_macros",
+ "time",
+]
+
+[[package]]
+name = "serde_with_macros"
+version = "3.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8705578779c2b6bd90d84d66eb2e206b708b1a4d7b9f17641b293545bf1c7e46"
+dependencies = [
+ "darling",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "serialize-to-javascript"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04f3666a07a197cdb77cdf306c32be9b7f598d7060d50cfd4d5aa04bfd92f6c5"
+dependencies = [
+ "serde",
+ "serde_json",
+ "serialize-to-javascript-impl",
+]
+
+[[package]]
+name = "serialize-to-javascript-impl"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "772ee033c0916d670af7860b6e1ef7d658a4629a6d0b4c8c3e67f09b3765b75d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "servo_arc"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d52aa42f8fdf0fed91e5ce7f23d8138441002fa31dca008acf47e6fd4721f741"
+dependencies = [
+ "nodrop",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "servo_arc"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "170fb83ab34de17dc69aa7c67482b22218ddb85da56546f9bd6b929e32a05930"
+dependencies = [
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "shlex"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a219298ac11a56ea9a6d2120044824d6f01aeb034955e7af7bc16858527deea"
+
+[[package]]
+name = "siphasher"
+version = "0.3.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38b58827f4464d87d377d175e90bf58eb00fd8716ff0a62f80356b5e61555d0d"
+
+[[package]]
+name = "siphasher"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ee5873ec9cce0195efcb7a4e9507a04cd49aec9c83d0389df45b1ef7ba2e649"
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9be42f50aa861c555654aa3a37f52f4b1074bacf4e48fe0ef7fa584e80f1f0f"
+
+[[package]]
+name = "socket2"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "softbuffer"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aac18da81ebbf05109ab275b157c22a653bb3c12cf884450179942f81bcbf6c3"
+dependencies = [
+ "bytemuck",
+ "js-sys",
+ "ndk",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation",
+ "objc2-quartz-core",
+ "raw-window-handle",
+ "redox_syscall",
+ "tracing",
+ "wasm-bindgen",
+ "web-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "soup3"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "471f924a40f31251afc77450e781cb26d55c0b650842efafc9c6cbd2f7cc4f9f"
+dependencies = [
+ "futures-channel",
+ "gio",
+ "glib",
+ "libc",
+ "soup3-sys",
+]
+
+[[package]]
+name = "soup3-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ebe8950a680a12f24f15ebe1bf70db7af98ad242d9db43596ad3108aab86c27"
+dependencies = [
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "string_cache"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf776ba3fa74f83bf4b63c3dcbbf82173db2632ed8452cb2d891d33f459de70f"
+dependencies = [
+ "new_debug_unreachable",
+ "parking_lot",
+ "phf_shared 0.11.3",
+ "precomputed-hash",
+ "serde",
+]
+
+[[package]]
+name = "string_cache"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a18596f8c785a729f2819c0f6a7eae6ebeebdfffbfe4214ae6b087f690e31901"
+dependencies = [
+ "new_debug_unreachable",
+ "parking_lot",
+ "phf_shared 0.13.1",
+ "precomputed-hash",
+]
+
+[[package]]
+name = "string_cache_codegen"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c711928715f1fe0fe509c53b43e993a9a557babc2d0a3567d0a3006f1ac931a0"
+dependencies = [
+ "phf_generator 0.11.3",
+ "phf_shared 0.11.3",
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "string_cache_codegen"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "585635e46db231059f76c5849798146164652513eb9e8ab2685939dd90f29b69"
+dependencies = [
+ "phf_generator 0.13.1",
+ "phf_shared 0.13.1",
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "swift-rs"
+version = "1.0.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e45c444e496845d3f2a351146bff59aae4975b2280238df1dfaa0c7d1846f38e"
+dependencies = [
+ "base64 0.21.7",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "syn"
+version = "1.0.109"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.119"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "3.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6275cddf4610d1775e6d1fe9469b2e77d0f39fd98fb7450901b821e0c53649f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "system-deps"
+version = "6.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3e535eb8dded36d55ec13eddacd30dec501792ff23a0b1682c38601b8cf2349"
+dependencies = [
+ "cfg-expr",
+ "heck 0.5.0",
+ "pkg-config",
+ "toml 0.8.2",
+ "version-compare",
+]
+
+[[package]]
+name = "tao"
+version = "0.34.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9103edf55f2da3c82aea4c7fab7c4241032bfeea0e71fa557d98e00e7ce7cc20"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2",
+ "core-foundation",
+ "core-graphics",
+ "crossbeam-channel",
+ "dispatch2",
+ "dlopen2",
+ "dpi",
+ "gdkwayland-sys",
+ "gdkx11-sys",
+ "gtk",
+ "jni",
+ "libc",
+ "log",
+ "ndk",
+ "ndk-context",
+ "ndk-sys",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "once_cell",
+ "parking_lot",
+ "raw-window-handle",
+ "tao-macros",
+ "unicode-segmentation",
+ "url",
+ "windows",
+ "windows-core 0.61.2",
+ "windows-version",
+ "x11-dl",
+]
+
+[[package]]
+name = "tao-macros"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f7eeb6d99155545da6150a1795945f16ac9c178deb2a5f2e74d776107bd5849"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "target-lexicon"
+version = "0.12.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
+
+[[package]]
+name = "tauri"
+version = "2.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da77cc00fb9028caf5b5d4650f75e31f1ef3693459dfca7f7e506d1ecef0ba2d"
+dependencies = [
+ "anyhow",
+ "bytes",
+ "cookie",
+ "dirs",
+ "dunce",
+ "embed_plist",
+ "getrandom 0.3.4",
+ "glob",
+ "gtk",
+ "heck 0.5.0",
+ "http",
+ "jni",
+ "libc",
+ "log",
+ "mime",
+ "muda",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "objc2-ui-kit",
+ "objc2-web-kit",
+ "percent-encoding",
+ "plist",
+ "raw-window-handle",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "serde_repr",
+ "serialize-to-javascript",
+ "swift-rs",
+ "tauri-build",
+ "tauri-macros",
+ "tauri-runtime",
+ "tauri-runtime-wry",
+ "tauri-utils",
+ "thiserror 2.0.20",
+ "tokio",
+ "tray-icon",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "window-vibrancy",
+ "windows",
+]
+
+[[package]]
+name = "tauri-build"
+version = "2.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9ce40b16101cb6ea63d3e221567affd1c3a9205f95d7bc574941a10636b632"
+dependencies = [
+ "anyhow",
+ "cargo_toml",
+ "dirs",
+ "glob",
+ "heck 0.5.0",
+ "json-patch",
+ "schemars 0.8.22",
+ "semver",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "tauri-winres",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-codegen"
+version = "2.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08279169ff42f8fc45a1dbc9dcae888893ba95288142e5880c59b93a26d2cfc5"
+dependencies = [
+ "base64 0.22.1",
+ "brotli",
+ "ico",
+ "json-patch",
+ "plist",
+ "png",
+ "proc-macro2",
+ "quote",
+ "semver",
+ "serde",
+ "serde_json",
+ "sha2",
+ "syn 2.0.119",
+ "tauri-utils",
+ "thiserror 2.0.20",
+ "time",
+ "url",
+ "uuid",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-macros"
+version = "2.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8b394794f399a421811d06966343e7933fcae92d59f5180b9388d1174497a45"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "tauri-codegen",
+ "tauri-utils",
+]
+
+[[package]]
+name = "tauri-plugin"
+version = "2.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "74be5dd4bed9afbd145e5716b5fa2ec28cbc29c34ffa61c258c9273d896c8020"
+dependencies = [
+ "anyhow",
+ "glob",
+ "plist",
+ "schemars 0.8.22",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-plugin-deep-link"
+version = "2.4.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92d489b8ecceae1cd09f6e1f7606f2095ac721cc8d54cf2f0e6bb377cc52cff6"
+dependencies = [
+ "dunce",
+ "plist",
+ "rust-ini",
+ "serde",
+ "serde_json",
+ "tauri",
+ "tauri-plugin",
+ "tauri-utils",
+ "thiserror 2.0.20",
+ "tracing",
+ "url",
+ "windows-registry",
+ "windows-result 0.3.4",
+]
+
+[[package]]
+name = "tauri-plugin-opener"
+version = "2.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "60d60366174b745b4ef5824b8bbc1c457fd08f0ce101ff643c0a49181a9f4e91"
+dependencies = [
+ "dunce",
+ "glob",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "open",
+ "schemars 0.8.22",
+ "serde",
+ "serde_json",
+ "tauri",
+ "tauri-plugin",
+ "thiserror 2.0.20",
+ "url",
+ "windows",
+ "zbus",
+]
+
+[[package]]
+name = "tauri-runtime"
+version = "2.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2826d79a3297ed08cd6ea7f412644ef58e32969504bc4fbd8d7dbeabc4445ea2"
+dependencies = [
+ "cookie",
+ "dpi",
+ "gtk",
+ "http",
+ "jni",
+ "objc2",
+ "objc2-ui-kit",
+ "objc2-web-kit",
+ "raw-window-handle",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "thiserror 2.0.20",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "windows",
+]
+
+[[package]]
+name = "tauri-runtime-wry"
+version = "2.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e11ea2e6f801d275fdd890d6c9603736012742a1c33b96d0db788c9cdebf7f9e"
+dependencies = [
+ "gtk",
+ "http",
+ "jni",
+ "log",
+ "objc2",
+ "objc2-app-kit",
+ "once_cell",
+ "percent-encoding",
+ "raw-window-handle",
+ "softbuffer",
+ "tao",
+ "tauri-runtime",
+ "tauri-utils",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "windows",
+ "wry",
+]
+
+[[package]]
+name = "tauri-utils"
+version = "2.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e176a18e67764923c4f1ce66f25ae4abe5f688384d5eb1a0fa6c77f3d90f887"
+dependencies = [
+ "anyhow",
+ "brotli",
+ "cargo_metadata",
+ "ctor",
+ "dom_query",
+ "dunce",
+ "glob",
+ "html5ever 0.29.1",
+ "http",
+ "infer",
+ "json-patch",
+ "kuchikiki",
+ "log",
+ "memchr",
+ "phf 0.13.1",
+ "plist",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "schemars 0.8.22",
+ "semver",
+ "serde",
+ "serde-untagged",
+ "serde_json",
+ "serde_with",
+ "swift-rs",
+ "thiserror 2.0.20",
+ "toml 1.1.4+spec-1.1.0",
+ "url",
+ "urlpattern",
+ "uuid",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-winres"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc65d45c68858bfe420dd29e834b5d15dbecf8a07a8a16cf4d532c7b1f69d4b6"
+dependencies = [
+ "dunce",
+ "embed-resource",
+ "toml 1.1.4+spec-1.1.0",
+]
+
+[[package]]
+name = "tempfile"
+version = "3.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
+dependencies = [
+ "fastrand",
+ "getrandom 0.4.3",
+ "once_cell",
+ "rustix",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tendril"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d24a120c5fc464a3458240ee02c299ebcb9d67b5249c8848b09d639dca8d7bb0"
+dependencies = [
+ "futf",
+ "mac",
+ "utf-8",
+]
+
+[[package]]
+name = "tendril"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5fed54709c5b3a53d09bb1c113ea4f5ceafd1e772ddcb0030a82e1d56c087b08"
+dependencies = [
+ "new_debug_unreachable",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec86235f5fcc2a73650310756d2ac5b138a5780bbbdfae3eeccec992c435ba4f"
+dependencies = [
+ "thiserror-impl 2.0.20",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc04cd3e1236dd4a98afca4569f2deb3f120e5422a4023be2cb683f8486292af"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+]
+
+[[package]]
+name = "time"
+version = "0.3.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdb87b95ec50ddfa440816d227a17b2ccbdda963a316a727fda0fc4334f7d134"
+dependencies = [
+ "deranged",
+ "num-conv",
+ "powerfmt",
+ "serde_core",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e1c906769ad99c88eaa54e728060edef082f8e358ff32030cb7c7d315e81109"
+
+[[package]]
+name = "time-macros"
+version = "0.2.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e689342a48d2ea927c87ea50cabf8594854bf940e9310208848d680d668ed85"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tiny-keccak"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c9d3793400a45f954c52e73d068316d76b6f4e36977e3fcebb13a2721e80237"
+dependencies = [
+ "crunchy",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1e27c91459209c2986af3dcf603a5a74a4368754ce37414f59acc971167f643"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb4ebadaa0af04fab11ae01eb5f9fdb5f9c5b875506e210e71c07873528baa7f"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "pin-project-lite",
+ "socket2",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "494815d09bf52b5548659851081238f0ca39ff638363907596da739561c62c52"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "toml"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "185d8ab0dfbb35cf1399a6344d8484209c088f75f8f68230da55d48d95d43e3d"
+dependencies = [
+ "serde",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.3",
+ "toml_edit 0.20.2",
+]
+
+[[package]]
+name = "toml"
+version = "0.9.12+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf92845e79fc2e2def6a5d828f0801e29a2f8acc037becc5ab08595c7d5e9863"
+dependencies = [
+ "indexmap 2.14.1",
+ "serde_core",
+ "serde_spanned 1.1.1",
+ "toml_datetime 0.7.5+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow 0.7.15",
+]
+
+[[package]]
+name = "toml"
+version = "1.1.4+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3aace63f4bbcdfc2c965b059de67119c89c4017a70d633be6c104910f67056f5"
+dependencies = [
+ "indexmap 2.14.1",
+ "serde_core",
+ "serde_spanned 1.1.1",
+ "toml_datetime 1.1.1+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow 1.0.4",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cda73e2f1397b1262d6dfdcef8aafae14d1de7748d66822d3bfeeb6d03e5e4b"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.7.5+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "1.1.1+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3165f65f62e28e0115a00b2ebdd37eb6f3b641855f9d636d3cd4103767159ad7"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.19.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b5bb770da30e5cbfde35a2d7b9b8a2c4b8ef89548a7a6aeab5c9a576e3e7421"
+dependencies = [
+ "indexmap 2.14.1",
+ "toml_datetime 0.6.3",
+ "winnow 0.5.40",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "396e4d48bbb2b7554c944bde63101b5ae446cff6ec4a24227428f15eb72ef338"
+dependencies = [
+ "indexmap 2.14.1",
+ "serde",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.3",
+ "winnow 0.5.40",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.25.13+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6975367e4d2ef766d86af01ffad14b622fecc8d4357a998fbc4deb6e9bacaf9b"
+dependencies = [
+ "indexmap 2.14.1",
+ "toml_datetime 1.1.1+spec-1.1.0",
+ "toml_parser",
+ "winnow 1.0.4",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.1.3+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d38ac1cf9b95face32296c0a3ede1fdc270627c9d9c02a7274dd6d960dc4d56"
+dependencies = [
+ "winnow 1.0.4",
+]
+
+[[package]]
+name = "toml_writer"
+version = "1.1.2+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d56353a2a665ad0f41a421187180aab746c8c325620617ad883a99a1cbe66d2"
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cfcf7e2740e6fc6d4d688b4ef00650406bb94adf4731e43c096c3a19fe40840"
+dependencies = [
+ "bitflags 2.13.1",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "url",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "tray-icon"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5e85aa143ceb072062fc4d6356c1b520a51d636e7bc8e77ec94be3608e5e80c"
+dependencies = [
+ "crossbeam-channel",
+ "dirs",
+ "libappindicator",
+ "muda",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation",
+ "once_cell",
+ "png",
+ "serde",
+ "thiserror 2.0.20",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "typeid"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc7d623258602320d5c55d1bc22793b57daff0ec7efc270ea7d55ce1d5f5471c"
+
+[[package]]
+name = "typenum"
+version = "1.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
+
+[[package]]
+name = "uds_windows"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f6fb2847f6742cd76af783a2a2c49e9375d0a111c7bef6f71cd9e738c72d6e"
+dependencies = [
+ "memoffset",
+ "tempfile",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "unic-char-property"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8c57a407d9b6fa02b4795eb81c5b6652060a15a7903ea981f3d723e6c0be221"
+dependencies = [
+ "unic-char-range",
+]
+
+[[package]]
+name = "unic-char-range"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0398022d5f700414f6b899e10b8348231abf9173fa93144cbc1a43b9793c1fbc"
+
+[[package]]
+name = "unic-common"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "80d7ff825a6a654ee85a63e80f92f054f904f21e7d12da4e22f9834a4aaa35bc"
+
+[[package]]
+name = "unic-ucd-ident"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e230a37c0381caa9219d67cf063aa3a375ffed5bf541a452db16e744bdab6987"
+dependencies = [
+ "unic-char-property",
+ "unic-char-range",
+ "unic-ucd-version",
+]
+
+[[package]]
+name = "unic-ucd-version"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96bd2f2237fe450fcd0a1d2f5f4e91711124f7857ba2e964247776ebeeb7b0c4"
+dependencies = [
+ "unic-common",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.13.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "urlpattern"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70acd30e3aa1450bc2eece896ce2ad0d178e9c079493819301573dae3c37ba6d"
+dependencies = [
+ "regex",
+ "serde",
+ "unic-ucd-ident",
+ "url",
+]
+
+[[package]]
+name = "utf-8"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "uuid"
+version = "1.26.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5772d71c9be8a8a6ac2117d949c5b224c1b72241bb611d9a3012edcf8af7812"
+dependencies = [
+ "getrandom 0.4.3",
+ "js-sys",
+ "serde_core",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "version-compare"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03c2856837ef78f57382f06b2b8563a2f512f7185d732608fd9176cb3b8edf0e"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "vswhom"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be979b7f07507105799e854203b470ff7c78a1639e330a58f183b5fea574608b"
+dependencies = [
+ "libc",
+ "vswhom-sys",
+]
+
+[[package]]
+name = "vswhom-sys"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb067e4cbd1ff067d1df46c9194b5de0e98efd2810bbc95c5d5e5f25a3231150"
+dependencies = [
+ "cc",
+ "libc",
+]
+
+[[package]]
+name = "walkdir"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
+dependencies = [
+ "same-file",
+ "winapi-util",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.9.0+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cccddf32554fecc6acb585f82a32a72e28b48f8c4c1883ddfeeeaa96f7d8e519"
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.4+wasi-0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b70935747edd64d89de3efa29d73789b806c15798f8e7dca4d8ac356b50ce70"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.77"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b7777d5cc23d0e91404e53ce2d5e8ec7acae3026b16233dba62cd3246457950"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77775f8f3f7217702089053b94958f8f54061a3f663417df76e19cbdcca29bc1"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e11d33f857dc2fb11b8bc75aee111aa9cbeb12cd9f25efd3d4c2a3dd4e235284"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ef64dbcc55df09c7e5a46182d181c2cfa3e925f3da937ea764728b4bbb9dcbf"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-streams"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d1ec4f6517c9e11ae630e200b2b65d193279042e28edd4a2cda233e46670bbb"
+dependencies = [
+ "futures-util",
+ "js-sys",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.104"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c435338968042f4f59a557f690a253676d47ce13ceb55d70100e7facf6620a30"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web_atoms"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba8b815c1b593dc0baf78dd0f4fc8fdb2de53198fb1163738093e9a311c33fb3"
+dependencies = [
+ "phf 0.13.1",
+ "phf_codegen 0.13.1",
+ "string_cache 0.9.0",
+ "string_cache_codegen 0.6.1",
+]
+
+[[package]]
+name = "webkit2gtk"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1027150013530fb2eaf806408df88461ae4815a45c541c8975e61d6f2fc4793"
+dependencies = [
+ "bitflags 1.3.2",
+ "cairo-rs",
+ "gdk",
+ "gdk-sys",
+ "gio",
+ "gio-sys",
+ "glib",
+ "glib-sys",
+ "gobject-sys",
+ "gtk",
+ "gtk-sys",
+ "javascriptcore-rs",
+ "libc",
+ "once_cell",
+ "soup3",
+ "webkit2gtk-sys",
+]
+
+[[package]]
+name = "webkit2gtk-sys"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "916a5f65c2ef0dfe12fff695960a2ec3d4565359fdbb2e9943c974e06c734ea5"
+dependencies = [
+ "bitflags 1.3.2",
+ "cairo-sys-rs",
+ "gdk-sys",
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "gtk-sys",
+ "javascriptcore-rs-sys",
+ "libc",
+ "pkg-config",
+ "soup3-sys",
+ "system-deps",
+]
+
+[[package]]
+name = "webview2-com"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7130243a7a5b33c54a444e54842e6a9e133de08b5ad7b5861cd8ed9a6a5bc96a"
+dependencies = [
+ "webview2-com-macros",
+ "webview2-com-sys",
+ "windows",
+ "windows-core 0.61.2",
+ "windows-implement",
+ "windows-interface",
+]
+
+[[package]]
+name = "webview2-com-macros"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67a921c1b6914c367b2b823cd4cde6f96beec77d30a939c8199bb377cf9b9b54"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "webview2-com-sys"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "381336cfffd772377d291702245447a5251a2ffa5bad679c99e61bc48bacbf9c"
+dependencies = [
+ "thiserror 2.0.20",
+ "windows",
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "window-vibrancy"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9bec5a31f3f9362f2258fd0e9c9dd61a9ca432e7306cc78c444258f0dce9a9c"
+dependencies = [
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "raw-window-handle",
+ "windows-sys 0.59.0",
+ "windows-version",
+]
+
+[[package]]
+name = "windows"
+version = "0.61.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9babd3a767a4c1aef6900409f85f5d53ce2544ccdfaa86dad48c91782c6d6893"
+dependencies = [
+ "windows-collections",
+ "windows-core 0.61.2",
+ "windows-future",
+ "windows-link 0.1.3",
+ "windows-numerics",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3beeceb5e5cfd9eb1d76b381630e82c4241ccd0d27f1a39ed41b2760b255c5e8"
+dependencies = [
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link 0.1.3",
+ "windows-result 0.3.4",
+ "windows-strings 0.4.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link 0.2.1",
+ "windows-result 0.4.1",
+ "windows-strings 0.5.1",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc6a41e98427b19fe4b73c550f060b59fa592d7d686537eebf9385621bfbad8e"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+ "windows-threading",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-numerics"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9150af68066c4c5c07ddc0ce30421554771e528bde427614c61038bc2c92c2b1"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-registry"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b8a9ed28765efc97bbc954883f4e6796c33a06546ebafacbabee9696967499e"
+dependencies = [
+ "windows-link 0.1.3",
+ "windows-result 0.3.4",
+ "windows-strings 0.4.2",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.45.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75283be5efb2831d37ea142365f009c02ec203cd29a3ebecbc093d52315b66d0"
+dependencies = [
+ "windows-targets 0.42.2",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e5180c00cd44c9b1c88adb3693291f1cd93605ded80c250a75d472756b4d071"
+dependencies = [
+ "windows_aarch64_gnullvm 0.42.2",
+ "windows_aarch64_msvc 0.42.2",
+ "windows_i686_gnu 0.42.2",
+ "windows_i686_msvc 0.42.2",
+ "windows_x86_64_gnu 0.42.2",
+ "windows_x86_64_gnullvm 0.42.2",
+ "windows_x86_64_msvc 0.42.2",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link 0.2.1",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b66463ad2e0ea3bbf808b7f1d371311c80e115c0b71d60efc142cafbcfb057a6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-version"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4060a1da109b9d0326b7262c8e12c84df67cc0dbc9e33cf49e01ccc2eb63631"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "597a5118570b68bc08d8d59125332c54f1ba9d9adeedeef5b99b02ba2b0698f8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e08e8864a60f06ef0d0ff4ba04124db8b0fb3be5776a5cd47641e942e58c4d43"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c61d927d8da41da96a81f029489353e68739737d3beca43145c8afec9a31a84f"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44d840b6ec649f480a41c8d80f9c65108b92d89345dd94027bfe06ac444d1060"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8de912b8b8feb55c064867cf047dda097f92d51efad5b491dfb98f6bbb70cb36"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26d41b46a36d453748aedef1486d5c7a85db22e56aff34643984ea85514e94a3"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aec5da331524158c6d1a4ac0ab1541149c0b9505fde06423b02f5ef0106b9f0"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "winnow"
+version = "0.5.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f593a95398737aeed53e489c785df13f3618e41dbcd6718c6addbf1395aa6876"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winnow"
+version = "0.7.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
+
+[[package]]
+name = "winnow"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b97319f7b8343df12cc98938e5c3eb436064524c8d2b4e30a1d3a36eecdf81"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winreg"
+version = "0.55.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb5a765337c50e9ec252c2069be9bf91c7df47afb103b642ba3a53bf8101be97"
+dependencies = [
+ "cfg-if",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.57.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
+[[package]]
+name = "writeable"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ad82d2a33cdc9674dc7465672f271e096168fcdbe0f799d9e6db8c5892679dc"
+
+[[package]]
+name = "wry"
+version = "0.54.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5a8135d8676225e5744de000d4dff5a082501bf7db6a1c1495034f8c314edbc"
+dependencies = [
+ "base64 0.22.1",
+ "block2",
+ "cookie",
+ "crossbeam-channel",
+ "dirs",
+ "dom_query",
+ "dpi",
+ "dunce",
+ "gdkx11",
+ "gtk",
+ "http",
+ "javascriptcore-rs",
+ "jni",
+ "libc",
+ "ndk",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "objc2-ui-kit",
+ "objc2-web-kit",
+ "once_cell",
+ "percent-encoding",
+ "raw-window-handle",
+ "sha2",
+ "soup3",
+ "tao-macros",
+ "thiserror 2.0.20",
+ "url",
+ "webkit2gtk",
+ "webkit2gtk-sys",
+ "webview2-com",
+ "windows",
+ "windows-core 0.61.2",
+ "windows-version",
+ "x11-dl",
+]
+
+[[package]]
+name = "x11"
+version = "2.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "502da5464ccd04011667b11c435cb992822c2c0dbde1770c988480d312a0db2e"
+dependencies = [
+ "libc",
+ "pkg-config",
+]
+
+[[package]]
+name = "x11-dl"
+version = "2.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38735924fedd5314a6e548792904ed8c6de6636285cb9fec04d5b1db85c1516f"
+dependencies = [
+ "libc",
+ "once_cell",
+ "pkg-config",
+]
+
+[[package]]
+name = "yoke"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe23a0424b6a435d82152b1bd3fdfb0833487d5fa90d05d42762a9891fef5"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de844c262c8848816172cef550288e7dc6c7b7814b4ee56b3e1553f275f1858e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "synstructure",
+]
+
+[[package]]
+name = "zbus"
+version = "5.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5db4be7c075cb421e4b7ee645541604239bd243ba7c357511f4ff3a74b555907"
+dependencies = [
+ "async-broadcast",
+ "async-executor",
+ "async-io",
+ "async-lock",
+ "async-process",
+ "async-recursion",
+ "async-task",
+ "async-trait",
+ "blocking",
+ "enumflags2",
+ "event-listener",
+ "futures-core",
+ "futures-lite",
+ "hex",
+ "libc",
+ "ordered-stream",
+ "rustix",
+ "serde",
+ "serde_repr",
+ "tracing",
+ "uds_windows",
+ "uuid",
+ "windows-sys 0.61.2",
+ "winnow 1.0.4",
+ "zbus_macros",
+ "zbus_names",
+ "zvariant",
+]
+
+[[package]]
+name = "zbus_macros"
+version = "5.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2990635d09ade6df1868f72f8cac69a876a90981e8bd3c40b1be413f8dc88f40"
+dependencies = [
+ "proc-macro-crate 3.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+ "zbus_names",
+ "zvariant",
+ "zvariant_utils",
+]
+
+[[package]]
+name = "zbus_names"
+version = "4.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8bf88b4a3ff53e883001e0e0115b297a9d53c31b9c1edd2bfdd853e3428624e"
+dependencies = [
+ "serde",
+ "winnow 1.0.4",
+ "zvariant",
+]
+
+[[package]]
+name = "zcheapstr"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1afec51604565183aeb5c54c20aeab286120d4e4460f7f76e3e8bb8c0d99473"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.56"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "556764e583adb45a9f8d413c2a147fa7e8d821e48e12b14fd560b607998b75eb"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.56"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2ab42fc20575779bd240faa45f94a74256f755c0fa9e89f0ede20d91d0cdfc1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ec05a11813ea801ff6d75110ad09cd0824ddba17dfe17128ea0d5f68e6c5272"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11532158c46691caf0f2593ea8358fed6bbf68a0315e80aae9bd41fbade684a1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "synstructure",
+]
+
+[[package]]
+name = "zerotrie"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ea269c3bd32f0a32c321907a2ae912ba6f4649bb0fc764a15627e99a7095a3f"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb0464e17806c1d976d5cba29399c7f08e516e279e2ba493f63123b5fca67dd8"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34df6fc39dbd26ddc9c10e6a2984476e13acce22e64e4487636ef494369225da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+]
+
+[[package]]
+name = "zlib-rs"
+version = "0.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34b31d188d9d685a4f9c7b46d6e36631b07058d2cfe190267adce54dc230bf12"
+
+[[package]]
+name = "zmij"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"
+
+[[package]]
+name = "zvariant"
+version = "5.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1d34c27cc6cdd1f458427519dd6b8612f7b7e3f7b9a0b2355d041dda9869147"
+dependencies = [
+ "endi",
+ "enumflags2",
+ "serde",
+ "winnow 1.0.4",
+ "zcheapstr",
+ "zvariant_derive",
+ "zvariant_utils",
+]
+
+[[package]]
+name = "zvariant_derive"
+version = "5.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "864155e69b4352db0c7f374917bf45d1e0c8d17659c8b3dbf9795f3673f8c497"
+dependencies = [
+ "proc-macro-crate 3.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 3.0.4",
+ "zvariant_utils",
+]
+
+[[package]]
+name = "zvariant_utils"
+version = "4.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bad0294361a320b694a328460dc73add56c306150f5cb6bfafc44446120008a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "serde",
+ "syn 3.0.4",
+ "winnow 1.0.4",
+]
diff --git a/apps/remote-ios/src-tauri/Cargo.toml b/apps/remote-ios/src-tauri/Cargo.toml
new file mode 100644
index 0000000000..4a679467c1
--- /dev/null
+++ b/apps/remote-ios/src-tauri/Cargo.toml
@@ -0,0 +1,29 @@
+[package]
+name = "org2-remote"
+version = "0.1.0"
+description = "ORG2 Remote iOS shell"
+authors = ["ORG2"]
+license = "AGPL-3.0-or-later"
+edition = "2021"
+rust-version = "1.85.0"
+
+[lib]
+name = "org2_remote_lib"
+crate-type = ["staticlib", "cdylib", "rlib"]
+
+[build-dependencies]
+tauri-build = { version = "2.5.6", features = [] }
+
+[dependencies]
+serde_json = "1"
+tauri = { version = "=2.10.3", features = [] }
+tauri-plugin-deep-link = "2"
+tauri-plugin-opener = "2"
+
+[target.'cfg(target_vendor = "apple")'.dependencies]
+security-framework = "3.7.0"
+security-framework-sys = "2.17.0"
+
+[features]
+default = ["custom-protocol"]
+custom-protocol = ["tauri/custom-protocol"]
diff --git a/apps/remote-ios/src-tauri/Info.ios.plist b/apps/remote-ios/src-tauri/Info.ios.plist
new file mode 100644
index 0000000000..af4d75e0f0
--- /dev/null
+++ b/apps/remote-ios/src-tauri/Info.ios.plist
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleURLTypes</key>
+  <array>
+    <dict>
+      <key>CFBundleTypeRole</key>
+      <string>Editor</string>
+      <key>CFBundleURLName</key>
+      <string>org2ai.org2.remote.auth</string>
+      <key>CFBundleURLSchemes</key>
+      <array>
+        <string>org2remote</string>
+      </array>
+    </dict>
+  </array>
+</dict>
+</plist>
diff --git a/apps/remote-ios/src-tauri/build.rs b/apps/remote-ios/src-tauri/build.rs
new file mode 100644
index 0000000000..261851f6b6
--- /dev/null
+++ b/apps/remote-ios/src-tauri/build.rs
@@ -0,0 +1,3 @@
+fn main() {
+    tauri_build::build();
+}
diff --git a/apps/remote-ios/src-tauri/capabilities/mobile.json b/apps/remote-ios/src-tauri/capabilities/mobile.json
new file mode 100644
index 0000000000..c4c7de9373
--- /dev/null
+++ b/apps/remote-ios/src-tauri/capabilities/mobile.json
@@ -0,0 +1,19 @@
+{
+  "$schema": "../gen/schemas/mobile-schema.json",
+  "identifier": "mobile",
+  "description": "Minimal permissions for the ORG2 Remote iOS shell",
+  "windows": ["main"],
+  "platforms": ["iOS"],
+  "permissions": [
+    "core:default",
+    "core:event:default",
+    "deep-link:default",
+    {
+      "identifier": "opener:allow-open-url",
+      "allow": [
+        { "url": "https://fpdyejwbiriliuqqcjoy.supabase.co/**" },
+        { "url": "https://org2-cloud-infra.vercel.app/**" }
+      ]
+    }
+  ]
+}
diff --git a/apps/remote-ios/src-tauri/gen/apple/.gitignore b/apps/remote-ios/src-tauri/gen/apple/.gitignore
new file mode 100644
index 0000000000..6726e2f89b
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/.gitignore
@@ -0,0 +1,3 @@
+xcuserdata/
+build/
+Externals/
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@1x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@1x.png
new file mode 100644
index 0000000000..a6ac2a8ccf
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@1x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@2x-1.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@2x-1.png
new file mode 100644
index 0000000000..2869541f73
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@2x-1.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@2x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@2x.png
new file mode 100644
index 0000000000..2869541f73
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@2x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@3x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@3x.png
new file mode 100644
index 0000000000..cf265a45d3
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-20x20@3x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@1x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@1x.png
new file mode 100644
index 0000000000..29c9746c05
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@1x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@2x-1.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@2x-1.png
new file mode 100644
index 0000000000..a4e68c8d6d
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@2x-1.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@2x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@2x.png
new file mode 100644
index 0000000000..a4e68c8d6d
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@2x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@3x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@3x.png
new file mode 100644
index 0000000000..e4adcbcedc
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-29x29@3x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@1x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@1x.png
new file mode 100644
index 0000000000..2869541f73
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@1x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@2x-1.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@2x-1.png
new file mode 100644
index 0000000000..a414e65bb0
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@2x-1.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@2x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@2x.png
new file mode 100644
index 0000000000..a414e65bb0
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@2x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@3x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@3x.png
new file mode 100644
index 0000000000..a0807e5dfd
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-40x40@3x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-512@2x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-512@2x.png
new file mode 100644
index 0000000000..704c929133
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-512@2x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-60x60@2x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-60x60@2x.png
new file mode 100644
index 0000000000..a0807e5dfd
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-60x60@2x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-60x60@3x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-60x60@3x.png
new file mode 100644
index 0000000000..2a9fbc26ef
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-60x60@3x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-76x76@1x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-76x76@1x.png
new file mode 100644
index 0000000000..2cdf18485f
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-76x76@1x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-76x76@2x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-76x76@2x.png
new file mode 100644
index 0000000000..4723e4b45e
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-76x76@2x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-83.5x83.5@2x.png b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-83.5x83.5@2x.png
new file mode 100644
index 0000000000..f26fee45c0
Binary files /dev/null and b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/AppIcon-83.5x83.5@2x.png differ
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/Contents.json b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/Contents.json
new file mode 100644
index 0000000000..dd3b8bcc55
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/AppIcon.appiconset/Contents.json
@@ -0,0 +1,116 @@
+{
+  "images": [
+    {
+      "size": "20x20",
+      "idiom": "iphone",
+      "filename": "AppIcon-20x20@2x.png",
+      "scale": "2x"
+    },
+    {
+      "size": "20x20",
+      "idiom": "iphone",
+      "filename": "AppIcon-20x20@3x.png",
+      "scale": "3x"
+    },
+    {
+      "size": "29x29",
+      "idiom": "iphone",
+      "filename": "AppIcon-29x29@2x-1.png",
+      "scale": "2x"
+    },
+    {
+      "size": "29x29",
+      "idiom": "iphone",
+      "filename": "AppIcon-29x29@3x.png",
+      "scale": "3x"
+    },
+    {
+      "size": "40x40",
+      "idiom": "iphone",
+      "filename": "AppIcon-40x40@2x.png",
+      "scale": "2x"
+    },
+    {
+      "size": "40x40",
+      "idiom": "iphone",
+      "filename": "AppIcon-40x40@3x.png",
+      "scale": "3x"
+    },
+    {
+      "size": "60x60",
+      "idiom": "iphone",
+      "filename": "AppIcon-60x60@2x.png",
+      "scale": "2x"
+    },
+    {
+      "size": "60x60",
+      "idiom": "iphone",
+      "filename": "AppIcon-60x60@3x.png",
+      "scale": "3x"
+    },
+    {
+      "size": "20x20",
+      "idiom": "ipad",
+      "filename": "AppIcon-20x20@1x.png",
+      "scale": "1x"
+    },
+    {
+      "size": "20x20",
+      "idiom": "ipad",
+      "filename": "AppIcon-20x20@2x-1.png",
+      "scale": "2x"
+    },
+    {
+      "size": "29x29",
+      "idiom": "ipad",
+      "filename": "AppIcon-29x29@1x.png",
+      "scale": "1x"
+    },
+    {
+      "size": "29x29",
+      "idiom": "ipad",
+      "filename": "AppIcon-29x29@2x.png",
+      "scale": "2x"
+    },
+    {
+      "size": "40x40",
+      "idiom": "ipad",
+      "filename": "AppIcon-40x40@1x.png",
+      "scale": "1x"
+    },
+    {
+      "size": "40x40",
+      "idiom": "ipad",
+      "filename": "AppIcon-40x40@2x-1.png",
+      "scale": "2x"
+    },
+    {
+      "size": "76x76",
+      "idiom": "ipad",
+      "filename": "AppIcon-76x76@1x.png",
+      "scale": "1x"
+    },
+    {
+      "size": "76x76",
+      "idiom": "ipad",
+      "filename": "AppIcon-76x76@2x.png",
+      "scale": "2x"
+    },
+    {
+      "size": "83.5x83.5",
+      "idiom": "ipad",
+      "filename": "AppIcon-83.5x83.5@2x.png",
+      "scale": "2x"
+    },
+    {
+      "size": "1024x1024",
+      "idiom": "ios-marketing",
+      "filename": "AppIcon-512@2x.png",
+      "scale": "1x"
+    }
+  ],
+  "info": {
+    "version": 1,
+    "author": "xcode"
+  }
+}
diff --git a/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/Contents.json b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/Contents.json
new file mode 100644
index 0000000000..97a8662ebd
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/Assets.xcassets/Contents.json
@@ -0,0 +1,6 @@
+{
+  "info": {
+    "version": 1,
+    "author": "xcode"
+  }
+}
diff --git a/apps/remote-ios/src-tauri/gen/apple/ExportOptions.plist b/apps/remote-ios/src-tauri/gen/apple/ExportOptions.plist
new file mode 100644
index 0000000000..0428a171b3
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/ExportOptions.plist
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>method</key>
+    <string>debugging</string>
+</dict>
+</plist>
diff --git a/apps/remote-ios/src-tauri/gen/apple/LaunchScreen.storyboard b/apps/remote-ios/src-tauri/gen/apple/LaunchScreen.storyboard
new file mode 100644
index 0000000000..81b5f90e2f
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/LaunchScreen.storyboard
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<document type="com.apple.InterfaceBuilder3.CocoaTouch.Storyboard.XIB" version="3.0" toolsVersion="17150" targetRuntime="iOS.CocoaTouch" propertyAccessControl="none" useAutolayout="YES" useTraitCollections="YES" useSafeAreas="YES" colorMatched="YES" initialViewController="Y6W-OH-hqX">
+    <dependencies>
+        <plugIn identifier="com.apple.InterfaceBuilder.IBCocoaTouchPlugin" version="17122"/>
+        <capability name="Safe area layout guides" minToolsVersion="9.0"/>
+        <capability name="System colors in document resources" minToolsVersion="11.0"/>
+        <capability name="documents saved in the Xcode 8 format" minToolsVersion="8.0"/>
+    </dependencies>
+    <scenes>
+        <!--View Controller-->
+        <scene sceneID="s0d-6b-0kx">
+            <objects>
+                <viewController id="Y6W-OH-hqX" sceneMemberID="viewController">
+                    <view key="view" contentMode="scaleToFill" id="5EZ-qb-Rvc">
+                        <rect key="frame" x="0.0" y="0.0" width="414" height="896"/>
+                        <autoresizingMask key="autoresizingMask" widthSizable="YES" heightSizable="YES"/>
+                        <viewLayoutGuide key="safeArea" id="vDu-zF-Fre"/>
+                        <color key="backgroundColor" systemColor="systemBackgroundColor"/>
+                    </view>
+                </viewController>
+                <placeholder placeholderIdentifier="IBFirstResponder" id="Ief-a0-LHa" userLabel="First Responder" customClass="UIResponder" sceneMemberID="firstResponder"/>
+            </objects>
+        </scene>
+    </scenes>
+    <resources>
+        <systemColor name="systemBackgroundColor">
+            <color white="1" alpha="1" colorSpace="custom" customColorSpace="genericGamma22GrayColorSpace"/>
+        </systemColor>
+    </resources>
+</document>
diff --git a/apps/remote-ios/src-tauri/gen/apple/Podfile b/apps/remote-ios/src-tauri/gen/apple/Podfile
new file mode 100644
index 0000000000..f4263b5dff
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/Podfile
@@ -0,0 +1,21 @@
+# Uncomment the next line to define a global platform for your project
+
+target 'org2-remote_iOS' do
+platform :ios, '17.0'
+  # Pods for org2-remote_iOS
+end
+
+target 'org2-remote_macOS' do
+platform :osx, '11.0'
+  # Pods for org2-remote_macOS
+end
+
+# Delete the deployment target for iOS and macOS, causing it to be inherited from the Podfile
+post_install do |installer|
+ installer.pods_project.targets.each do |target|
+  target.build_configurations.each do |config|
+   config.build_settings.delete 'IPHONEOS_DEPLOYMENT_TARGET'
+   config.build_settings.delete 'MACOSX_DEPLOYMENT_TARGET'
+  end
+ end
+end
diff --git a/apps/remote-ios/src-tauri/gen/apple/Sources/org2-remote/bindings/bindings.h b/apps/remote-ios/src-tauri/gen/apple/Sources/org2-remote/bindings/bindings.h
new file mode 100644
index 0000000000..6c2bd87bf5
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/Sources/org2-remote/bindings/bindings.h
@@ -0,0 +1,7 @@
+#pragma once
+
+namespace ffi {
+    extern "C" {
+        void start_app();
+    }
+}
diff --git a/apps/remote-ios/src-tauri/gen/apple/Sources/org2-remote/main.mm b/apps/remote-ios/src-tauri/gen/apple/Sources/org2-remote/main.mm
new file mode 100644
index 0000000000..7793a9d5cf
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/Sources/org2-remote/main.mm
@@ -0,0 +1,6 @@
+#include "bindings/bindings.h"
+
+int main(int argc, char * argv[]) {
+	ffi::start_app();
+	return 0;
+}
diff --git a/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.pbxproj b/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.pbxproj
new file mode 100644
index 0000000000..04ed3de8b7
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.pbxproj
@@ -0,0 +1,460 @@
+// !$*UTF8*$!
+{
+	archiveVersion = 1;
+	classes = {
+	};
+	objectVersion = 77;
+	objects = {
+
+/* Begin PBXBuildFile section */
+		0E9EE0CB965D103591BBD989 /* assets in Resources */ = {isa = PBXBuildFile; fileRef = 00A146682F01D64966A28084 /* assets */; };
+		0EB3976A263DAD87A4E94A95 /* Security.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = 680653A546C7ECEDBC792278 /* Security.framework */; };
+		175953A36E5BCC8F05AB345E /* Metal.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = 796E95FE899E78FC89082DC8 /* Metal.framework */; };
+		2F2B4648B670483B759E1349 /* CoreGraphics.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = 7B60CA0D0F96997E959F489D /* CoreGraphics.framework */; };
+		394EBC9C61616812C6354349 /* QuartzCore.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = F631FCA96318E256E542A28E /* QuartzCore.framework */; };
+		3E75FAFEEC4294C8CAD163E6 /* libapp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 85005A0A12ECC58CDDA8721F /* libapp.a */; };
+		45613F603D5973E55152DC69 /* MetalKit.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = 4E8C456B445C726BEF9E9257 /* MetalKit.framework */; };
+		52049DEC689E516DA7E7B1D6 /* LaunchScreen.storyboard in Resources */ = {isa = PBXBuildFile; fileRef = 9CDD62C0BC62D57D46EA2416 /* LaunchScreen.storyboard */; };
+		652A1C1A2C4650C0DBB0D107 /* WebKit.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = EA94EAB943C480C6D901740E /* WebKit.framework */; };
+		848449A8A26D5ABCBB9D3D44 /* main.mm in Sources */ = {isa = PBXBuildFile; fileRef = 09999C01BEF32C9D12B9594C /* main.mm */; };
+		A9FBA82AAABB47D494C53BBC /* UIKit.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = E1386F1869ECC7C9F605BB80 /* UIKit.framework */; };
+		FD65BF213E21D25393C10432 /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = 09BEDDA01D3B6AF50AB4C557 /* Assets.xcassets */; };
+/* End PBXBuildFile section */
+
+/* Begin PBXFileReference section */
+		00A146682F01D64966A28084 /* assets */ = {isa = PBXFileReference; lastKnownFileType = folder; path = assets; sourceTree = SOURCE_ROOT; };
+		09999C01BEF32C9D12B9594C /* main.mm */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.objcpp; path = main.mm; sourceTree = "<group>"; };
+		09BEDDA01D3B6AF50AB4C557 /* Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = Assets.xcassets; sourceTree = "<group>"; };
+		4E8C456B445C726BEF9E9257 /* MetalKit.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = MetalKit.framework; path = System/Library/Frameworks/MetalKit.framework; sourceTree = SDKROOT; };
+		582265530F2F2E7B757D7C0E /* org2-remote_iOS.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; path = "org2-remote_iOS.entitlements"; sourceTree = "<group>"; };
+		680653A546C7ECEDBC792278 /* Security.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = Security.framework; path = System/Library/Frameworks/Security.framework; sourceTree = SDKROOT; };
+		796E95FE899E78FC89082DC8 /* Metal.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = Metal.framework; path = System/Library/Frameworks/Metal.framework; sourceTree = SDKROOT; };
+		7B60CA0D0F96997E959F489D /* CoreGraphics.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = CoreGraphics.framework; path = System/Library/Frameworks/CoreGraphics.framework; sourceTree = SDKROOT; };
+		82B24E7A884BA7CFFAF23374 /* org2-remote_iOS.app */ = {isa = PBXFileReference; includeInIndex = 0; lastKnownFileType = wrapper.application; path = "org2-remote_iOS.app"; sourceTree = BUILT_PRODUCTS_DIR; };
+		85005A0A12ECC58CDDA8721F /* libapp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libapp.a; sourceTree = "<group>"; };
+		9CDD62C0BC62D57D46EA2416 /* LaunchScreen.storyboard */ = {isa = PBXFileReference; lastKnownFileType = file.storyboard; path = LaunchScreen.storyboard; sourceTree = "<group>"; };
+		B52735ED30B3C23683CAA44C /* lib.rs */ = {isa = PBXFileReference; path = lib.rs; sourceTree = "<group>"; };
+		D4762AD4F3E431C16214C010 /* bindings.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = bindings.h; sourceTree = "<group>"; };
+		D48791AC88CF67DA5C66910E /* main.rs */ = {isa = PBXFileReference; path = main.rs; sourceTree = "<group>"; };
+		E1386F1869ECC7C9F605BB80 /* UIKit.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = UIKit.framework; path = System/Library/Frameworks/UIKit.framework; sourceTree = SDKROOT; };
+		E49FDFC669F6670256C4A142 /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist; path = Info.plist; sourceTree = "<group>"; };
+		EA94EAB943C480C6D901740E /* WebKit.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = WebKit.framework; path = System/Library/Frameworks/WebKit.framework; sourceTree = SDKROOT; };
+		F631FCA96318E256E542A28E /* QuartzCore.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = QuartzCore.framework; path = System/Library/Frameworks/QuartzCore.framework; sourceTree = SDKROOT; };
+/* End PBXFileReference section */
+
+/* Begin PBXFrameworksBuildPhase section */
+		4F44253CD708F42205F72320 /* Frameworks */ = {
+			isa = PBXFrameworksBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				3E75FAFEEC4294C8CAD163E6 /* libapp.a in Frameworks */,
+				2F2B4648B670483B759E1349 /* CoreGraphics.framework in Frameworks */,
+				175953A36E5BCC8F05AB345E /* Metal.framework in Frameworks */,
+				45613F603D5973E55152DC69 /* MetalKit.framework in Frameworks */,
+				394EBC9C61616812C6354349 /* QuartzCore.framework in Frameworks */,
+				0EB3976A263DAD87A4E94A95 /* Security.framework in Frameworks */,
+				A9FBA82AAABB47D494C53BBC /* UIKit.framework in Frameworks */,
+				652A1C1A2C4650C0DBB0D107 /* WebKit.framework in Frameworks */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXFrameworksBuildPhase section */
+
+/* Begin PBXGroup section */
+		00ACD593888746C230BAE300 /* org2-remote_iOS */ = {
+			isa = PBXGroup;
+			children = (
+				E49FDFC669F6670256C4A142 /* Info.plist */,
+				582265530F2F2E7B757D7C0E /* org2-remote_iOS.entitlements */,
+			);
+			path = "org2-remote_iOS";
+			sourceTree = "<group>";
+		};
+		17905F9C7FFEB18EF5050409 /* Frameworks */ = {
+			isa = PBXGroup;
+			children = (
+				7B60CA0D0F96997E959F489D /* CoreGraphics.framework */,
+				85005A0A12ECC58CDDA8721F /* libapp.a */,
+				796E95FE899E78FC89082DC8 /* Metal.framework */,
+				4E8C456B445C726BEF9E9257 /* MetalKit.framework */,
+				F631FCA96318E256E542A28E /* QuartzCore.framework */,
+				680653A546C7ECEDBC792278 /* Security.framework */,
+				E1386F1869ECC7C9F605BB80 /* UIKit.framework */,
+				EA94EAB943C480C6D901740E /* WebKit.framework */,
+			);
+			name = Frameworks;
+			sourceTree = "<group>";
+		};
+		1CEA201C053502C881A22135 /* bindings */ = {
+			isa = PBXGroup;
+			children = (
+				D4762AD4F3E431C16214C010 /* bindings.h */,
+			);
+			path = bindings;
+			sourceTree = "<group>";
+		};
+		2105A868CDB059AAC34B0648 /* org2-remote */ = {
+			isa = PBXGroup;
+			children = (
+				09999C01BEF32C9D12B9594C /* main.mm */,
+				1CEA201C053502C881A22135 /* bindings */,
+			);
+			path = "org2-remote";
+			sourceTree = "<group>";
+		};
+		6975606B98B6CE5A1D7FB344 /* Externals */ = {
+			isa = PBXGroup;
+			children = (
+			);
+			path = Externals;
+			sourceTree = "<group>";
+		};
+		7A9F39B4AAC74DB176231D10 /* Products */ = {
+			isa = PBXGroup;
+			children = (
+				82B24E7A884BA7CFFAF23374 /* org2-remote_iOS.app */,
+			);
+			name = Products;
+			sourceTree = "<group>";
+		};
+		89AAD6232D481944FE96C297 = {
+			isa = PBXGroup;
+			children = (
+				00A146682F01D64966A28084 /* assets */,
+				09BEDDA01D3B6AF50AB4C557 /* Assets.xcassets */,
+				9CDD62C0BC62D57D46EA2416 /* LaunchScreen.storyboard */,
+				6975606B98B6CE5A1D7FB344 /* Externals */,
+				00ACD593888746C230BAE300 /* org2-remote_iOS */,
+				EE1C037E524428DE19A57872 /* Sources */,
+				E17B4A62217E9DDDFE7431D5 /* src */,
+				17905F9C7FFEB18EF5050409 /* Frameworks */,
+				7A9F39B4AAC74DB176231D10 /* Products */,
+			);
+			sourceTree = "<group>";
+		};
+		E17B4A62217E9DDDFE7431D5 /* src */ = {
+			isa = PBXGroup;
+			children = (
+				B52735ED30B3C23683CAA44C /* lib.rs */,
+				D48791AC88CF67DA5C66910E /* main.rs */,
+			);
+			name = src;
+			path = ../../src;
+			sourceTree = "<group>";
+		};
+		EE1C037E524428DE19A57872 /* Sources */ = {
+			isa = PBXGroup;
+			children = (
+				2105A868CDB059AAC34B0648 /* org2-remote */,
+			);
+			path = Sources;
+			sourceTree = "<group>";
+		};
+/* End PBXGroup section */
+
+/* Begin PBXNativeTarget section */
+		AB9278E3173DC669AC8CB626 /* org2-remote_iOS */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = FE62C932BDE190A0D975578F /* Build configuration list for PBXNativeTarget "org2-remote_iOS" */;
+			buildPhases = (
+				2BF67BF6BCD97BE5029B1BDB /* Build Rust Code */,
+				508C6073A311A14B8FF5C844 /* Sources */,
+				265BA342D117AF17CECEDAAF /* Resources */,
+				4F44253CD708F42205F72320 /* Frameworks */,
+			);
+			buildRules = (
+			);
+			dependencies = (
+			);
+			name = "org2-remote_iOS";
+			packageProductDependencies = (
+			);
+			productName = "org2-remote_iOS";
+			productReference = 82B24E7A884BA7CFFAF23374 /* org2-remote_iOS.app */;
+			productType = "com.apple.product-type.application";
+		};
+/* End PBXNativeTarget section */
+
+/* Begin PBXProject section */
+		06E9AD40CB6F9AD5AFA43100 /* Project object */ = {
+			isa = PBXProject;
+			attributes = {
+				BuildIndependentTargetsInParallel = YES;
+				LastUpgradeCheck = 1430;
+				TargetAttributes = {
+				};
+			};
+			buildConfigurationList = 78128856964939A9B30423E6 /* Build configuration list for PBXProject "org2-remote" */;
+			developmentRegion = en;
+			hasScannedForEncodings = 0;
+			knownRegions = (
+				Base,
+				en,
+			);
+			mainGroup = 89AAD6232D481944FE96C297;
+			minimizedProjectReferenceProxies = 1;
+			preferredProjectObjectVersion = 77;
+			productRefGroup = 7A9F39B4AAC74DB176231D10 /* Products */;
+			projectDirPath = "";
+			projectRoot = "";
+			targets = (
+				AB9278E3173DC669AC8CB626 /* org2-remote_iOS */,
+			);
+		};
+/* End PBXProject section */
+
+/* Begin PBXResourcesBuildPhase section */
+		265BA342D117AF17CECEDAAF /* Resources */ = {
+			isa = PBXResourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				FD65BF213E21D25393C10432 /* Assets.xcassets in Resources */,
+				52049DEC689E516DA7E7B1D6 /* LaunchScreen.storyboard in Resources */,
+				0E9EE0CB965D103591BBD989 /* assets in Resources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXResourcesBuildPhase section */
+
+/* Begin PBXShellScriptBuildPhase section */
+		2BF67BF6BCD97BE5029B1BDB /* Build Rust Code */ = {
+			isa = PBXShellScriptBuildPhase;
+			alwaysOutOfDate = 1;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			inputFileListPaths = (
+			);
+			inputPaths = (
+			);
+			name = "Build Rust Code";
+			outputFileListPaths = (
+			);
+			outputPaths = (
+				"$(SRCROOT)/Externals/x86_64/${CONFIGURATION}/libapp.a",
+				"$(SRCROOT)/Externals/arm64/${CONFIGURATION}/libapp.a",
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+			shellPath = /bin/sh;
+			shellScript = "cd ../.. && ../../../node_modules/.bin/tauri ios xcode-script -v --platform ${PLATFORM_DISPLAY_NAME:?} --sdk-root ${SDKROOT:?} --framework-search-paths \"${FRAMEWORK_SEARCH_PATHS:?}\" --header-search-paths \"${HEADER_SEARCH_PATHS:?}\" --gcc-preprocessor-definitions \"${GCC_PREPROCESSOR_DEFINITIONS:-}\" --configuration ${CONFIGURATION:?} ${FORCE_COLOR} ${ARCHS:?}";
+		};
+/* End PBXShellScriptBuildPhase section */
+
+/* Begin PBXSourcesBuildPhase section */
+		508C6073A311A14B8FF5C844 /* Sources */ = {
+			isa = PBXSourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				848449A8A26D5ABCBB9D3D44 /* main.mm in Sources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXSourcesBuildPhase section */
+
+/* Begin XCBuildConfiguration section */
+		889DD7BF4EC00DBA3D1EC9F7 /* release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
+				ENABLE_NS_ASSERTIONS = NO;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				IPHONEOS_DEPLOYMENT_TARGET = 17.0;
+				MTL_ENABLE_DEBUG_INFO = NO;
+				MTL_FAST_MATH = YES;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SDKROOT = iphoneos;
+				SWIFT_COMPILATION_MODE = wholemodule;
+				SWIFT_OPTIMIZATION_LEVEL = "-O";
+				SWIFT_VERSION = 5.0;
+			};
+			name = release;
+		};
+		8969DEBE1E23219016EE2B5F /* debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = dwarf;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				ENABLE_TESTABILITY = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_DYNAMIC_NO_PIC = NO;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_OPTIMIZATION_LEVEL = 0;
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"$(inherited)",
+					"DEBUG=1",
+				);
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				IPHONEOS_DEPLOYMENT_TARGET = 17.0;
+				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
+				MTL_FAST_MATH = YES;
+				ONLY_ACTIVE_ARCH = YES;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SDKROOT = iphoneos;
+				SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG;
+				SWIFT_OPTIMIZATION_LEVEL = "-Onone";
+				SWIFT_VERSION = 5.0;
+			};
+			name = debug;
+		};
+		8CEFAFD3674C47FB37F73D3E /* debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES;
+				ARCHS = (
+					arm64,
+				);
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_ENTITLEMENTS = "org2-remote_iOS/org2-remote_iOS.entitlements";
+				CODE_SIGN_IDENTITY = "iPhone Developer";
+				ENABLE_BITCODE = NO;
+				"EXCLUDED_ARCHS[sdk=iphoneos*]" = x86_64;
+				FRAMEWORK_SEARCH_PATHS = (
+					"$(inherited)",
+					"\".\"",
+				);
+				INFOPLIST_FILE = "org2-remote_iOS/Info.plist";
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+				);
+				"LIBRARY_SEARCH_PATHS[arch=arm64]" = "$(inherited) $(PROJECT_DIR)/Externals/arm64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)";
+				"LIBRARY_SEARCH_PATHS[arch=x86_64]" = "$(inherited) $(PROJECT_DIR)/Externals/x86_64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)";
+				PRODUCT_BUNDLE_IDENTIFIER = org2ai.org2.remote;
+				PRODUCT_NAME = "ORG2 Remote";
+				SDKROOT = iphoneos;
+				TARGETED_DEVICE_FAMILY = "1,2";
+				VALID_ARCHS = arm64;
+			};
+			name = debug;
+		};
+		A25E148FE30E1CD54EEE789E /* release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES;
+				ARCHS = (
+					arm64,
+				);
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_ENTITLEMENTS = "org2-remote_iOS/org2-remote_iOS.entitlements";
+				CODE_SIGN_IDENTITY = "iPhone Developer";
+				ENABLE_BITCODE = NO;
+				"EXCLUDED_ARCHS[sdk=iphoneos*]" = x86_64;
+				FRAMEWORK_SEARCH_PATHS = (
+					"$(inherited)",
+					"\".\"",
+				);
+				INFOPLIST_FILE = "org2-remote_iOS/Info.plist";
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+				);
+				"LIBRARY_SEARCH_PATHS[arch=arm64]" = "$(inherited) $(PROJECT_DIR)/Externals/arm64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)";
+				"LIBRARY_SEARCH_PATHS[arch=x86_64]" = "$(inherited) $(PROJECT_DIR)/Externals/x86_64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)";
+				PRODUCT_BUNDLE_IDENTIFIER = org2ai.org2.remote;
+				PRODUCT_NAME = "ORG2 Remote";
+				SDKROOT = iphoneos;
+				TARGETED_DEVICE_FAMILY = "1,2";
+				VALID_ARCHS = arm64;
+			};
+			name = release;
+		};
+/* End XCBuildConfiguration section */
+
+/* Begin XCConfigurationList section */
+		78128856964939A9B30423E6 /* Build configuration list for PBXProject "org2-remote" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				8969DEBE1E23219016EE2B5F /* debug */,
+				889DD7BF4EC00DBA3D1EC9F7 /* release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = debug;
+		};
+		FE62C932BDE190A0D975578F /* Build configuration list for PBXNativeTarget "org2-remote_iOS" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				8CEFAFD3674C47FB37F73D3E /* debug */,
+				A25E148FE30E1CD54EEE789E /* release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = debug;
+		};
+/* End XCConfigurationList section */
+	};
+	rootObject = 06E9AD40CB6F9AD5AFA43100 /* Project object */;
+}
diff --git a/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.xcworkspace/contents.xcworkspacedata b/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.xcworkspace/contents.xcworkspacedata
new file mode 100644
index 0000000000..919434a625
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.xcworkspace/contents.xcworkspacedata
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Workspace
+   version = "1.0">
+   <FileRef
+      location = "self:">
+   </FileRef>
+</Workspace>
diff --git a/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.xcworkspace/xcshareddata/WorkspaceSettings.xcsettings b/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.xcworkspace/xcshareddata/WorkspaceSettings.xcsettings
new file mode 100644
index 0000000000..ac90d5ac7a
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.xcworkspace/xcshareddata/WorkspaceSettings.xcsettings
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>BuildSystemType</key>
+	<string>Original</string>
+	<key>DisableBuildSystemDeprecationDiagnostic</key>
+	<true/>
+</dict>
+</plist>
diff --git a/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/xcshareddata/xcschemes/org2-remote_iOS.xcscheme b/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/xcshareddata/xcschemes/org2-remote_iOS.xcscheme
new file mode 100644
index 0000000000..ecebcc073d
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/xcshareddata/xcschemes/org2-remote_iOS.xcscheme
@@ -0,0 +1,131 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Scheme
+   LastUpgradeVersion = "1430"
+   version = "1.7">
+   <BuildAction
+      parallelizeBuildables = "YES"
+      buildImplicitDependencies = "YES"
+      runPostActionsOnFailure = "NO">
+      <BuildActionEntries>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "YES"
+            buildForProfiling = "YES"
+            buildForArchiving = "YES"
+            buildForAnalyzing = "YES">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "AB9278E3173DC669AC8CB626"
+               BuildableName = "org2-remote_iOS.app"
+               BlueprintName = "org2-remote_iOS"
+               ReferencedContainer = "container:org2-remote.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+      </BuildActionEntries>
+   </BuildAction>
+   <TestAction
+      buildConfiguration = "debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      shouldUseLaunchSchemeArgsEnv = "NO"
+      onlyGenerateCoverageForSpecifiedTargets = "NO">
+      <MacroExpansion>
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "AB9278E3173DC669AC8CB626"
+            BuildableName = "org2-remote_iOS.app"
+            BlueprintName = "org2-remote_iOS"
+            ReferencedContainer = "container:org2-remote.xcodeproj">
+         </BuildableReference>
+      </MacroExpansion>
+      <Testables>
+      </Testables>
+      <CommandLineArguments>
+      </CommandLineArguments>
+      <EnvironmentVariables>
+         <EnvironmentVariable
+            key = "RUST_BACKTRACE"
+            value = "full"
+            isEnabled = "YES">
+         </EnvironmentVariable>
+         <EnvironmentVariable
+            key = "RUST_LOG"
+            value = "info"
+            isEnabled = "YES">
+         </EnvironmentVariable>
+      </EnvironmentVariables>
+   </TestAction>
+   <LaunchAction
+      buildConfiguration = "debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      launchStyle = "0"
+      useCustomWorkingDirectory = "NO"
+      ignoresPersistentStateOnLaunch = "NO"
+      debugDocumentVersioning = "YES"
+      debugServiceExtension = "internal"
+      allowLocationSimulation = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "AB9278E3173DC669AC8CB626"
+            BuildableName = "org2-remote_iOS.app"
+            BlueprintName = "org2-remote_iOS"
+            ReferencedContainer = "container:org2-remote.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+      <CommandLineArguments>
+      </CommandLineArguments>
+      <EnvironmentVariables>
+         <EnvironmentVariable
+            key = "RUST_BACKTRACE"
+            value = "full"
+            isEnabled = "YES">
+         </EnvironmentVariable>
+         <EnvironmentVariable
+            key = "RUST_LOG"
+            value = "info"
+            isEnabled = "YES">
+         </EnvironmentVariable>
+      </EnvironmentVariables>
+   </LaunchAction>
+   <ProfileAction
+      buildConfiguration = "release"
+      shouldUseLaunchSchemeArgsEnv = "NO"
+      savedToolIdentifier = ""
+      useCustomWorkingDirectory = "NO"
+      debugDocumentVersioning = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "AB9278E3173DC669AC8CB626"
+            BuildableName = "org2-remote_iOS.app"
+            BlueprintName = "org2-remote_iOS"
+            ReferencedContainer = "container:org2-remote.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+      <CommandLineArguments>
+      </CommandLineArguments>
+      <EnvironmentVariables>
+         <EnvironmentVariable
+            key = "RUST_BACKTRACE"
+            value = "full"
+            isEnabled = "YES">
+         </EnvironmentVariable>
+         <EnvironmentVariable
+            key = "RUST_LOG"
+            value = "info"
+            isEnabled = "YES">
+         </EnvironmentVariable>
+      </EnvironmentVariables>
+   </ProfileAction>
+   <AnalyzeAction
+      buildConfiguration = "debug">
+   </AnalyzeAction>
+   <ArchiveAction
+      buildConfiguration = "release"
+      revealArchiveInOrganizer = "YES">
+   </ArchiveAction>
+</Scheme>
diff --git a/apps/remote-ios/src-tauri/gen/apple/org2-remote_iOS/Info.plist b/apps/remote-ios/src-tauri/gen/apple/org2-remote_iOS/Info.plist
new file mode 100644
index 0000000000..4914aeaca6
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/org2-remote_iOS/Info.plist
@@ -0,0 +1,57 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>$(DEVELOPMENT_LANGUAGE)</string>
+	<key>CFBundleExecutable</key>
+	<string>$(EXECUTABLE_NAME)</string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>$(PRODUCT_NAME)</string>
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>0.1.0</string>
+	<key>CFBundleVersion</key>
+	<string>1</string>
+	<key>LSRequiresIPhoneOS</key>
+	<true/>
+	<key>UILaunchStoryboardName</key>
+	<string>LaunchScreen</string>
+	<key>UIRequiredDeviceCapabilities</key>
+	<array>
+		<string>arm64</string>
+		<string>metal</string>
+	</array>
+	<key>UISupportedInterfaceOrientations</key>
+	<array>
+		<string>UIInterfaceOrientationPortrait</string>
+		<string>UIInterfaceOrientationLandscapeLeft</string>
+		<string>UIInterfaceOrientationLandscapeRight</string>
+	</array>
+	<key>UISupportedInterfaceOrientations~ipad</key>
+	<array>
+		<string>UIInterfaceOrientationPortrait</string>
+		<string>UIInterfaceOrientationPortraitUpsideDown</string>
+		<string>UIInterfaceOrientationLandscapeLeft</string>
+		<string>UIInterfaceOrientationLandscapeRight</string>
+	</array>
+	<key>CFBundleURLTypes</key>
+	<array>
+		<dict>
+			<key>CFBundleTypeRole</key>
+			<string>Editor</string>
+			<key>CFBundleURLName</key>
+			<string>org2ai.org2.remote.auth</string>
+			<key>CFBundleURLSchemes</key>
+			<array>
+				<string>org2remote</string>
+			</array>
+		</dict>
+	</array>
+</dict>
+</plist>
diff --git a/apps/remote-ios/src-tauri/gen/apple/org2-remote_iOS/org2-remote_iOS.entitlements b/apps/remote-ios/src-tauri/gen/apple/org2-remote_iOS/org2-remote_iOS.entitlements
new file mode 100644
index 0000000000..0c67376eba
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/org2-remote_iOS/org2-remote_iOS.entitlements
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict/>
+</plist>
diff --git a/apps/remote-ios/src-tauri/gen/apple/project.yml b/apps/remote-ios/src-tauri/gen/apple/project.yml
new file mode 100644
index 0000000000..29b9c6e3a1
--- /dev/null
+++ b/apps/remote-ios/src-tauri/gen/apple/project.yml
@@ -0,0 +1,88 @@
+name: org2-remote
+options:
+  bundleIdPrefix: org2ai.org2.remote
+  deploymentTarget:
+    iOS: 17.0
+fileGroups: [../../src]
+configs:
+  debug: debug
+  release: release
+settingGroups:
+  app:
+    base:
+      PRODUCT_NAME: ORG2 Remote
+      PRODUCT_BUNDLE_IDENTIFIER: org2ai.org2.remote
+targetTemplates:
+  app:
+    type: application
+    sources:
+      - path: Sources
+    scheme:
+      environmentVariables:
+        RUST_BACKTRACE: full
+        RUST_LOG: info
+    settings:
+      groups: [app]
+targets:
+  org2-remote_iOS:
+    type: application
+    platform: iOS
+    sources:
+      - path: Sources
+      - path: Assets.xcassets
+      - path: Externals
+      - path: org2-remote_iOS
+      - path: assets
+        buildPhase: resources
+        type: folder
+      - path: LaunchScreen.storyboard
+    info:
+      path: org2-remote_iOS/Info.plist
+      properties:
+        LSRequiresIPhoneOS: true
+        UILaunchStoryboardName: LaunchScreen
+        UIRequiredDeviceCapabilities: [arm64, metal]
+        UISupportedInterfaceOrientations:
+          - UIInterfaceOrientationPortrait
+          - UIInterfaceOrientationLandscapeLeft
+          - UIInterfaceOrientationLandscapeRight
+        UISupportedInterfaceOrientations~ipad:
+          - UIInterfaceOrientationPortrait
+          - UIInterfaceOrientationPortraitUpsideDown
+          - UIInterfaceOrientationLandscapeLeft
+          - UIInterfaceOrientationLandscapeRight
+        CFBundleShortVersionString: 0.1.0
+        CFBundleVersion: "1"
+    entitlements:
+      path: org2-remote_iOS/org2-remote_iOS.entitlements
+    scheme:
+      environmentVariables:
+        RUST_BACKTRACE: full
+        RUST_LOG: info
+    settings:
+      base:
+        ENABLE_BITCODE: false
+        ARCHS: [arm64]
+        VALID_ARCHS: arm64
+        LIBRARY_SEARCH_PATHS[arch=x86_64]: $(inherited) $(PROJECT_DIR)/Externals/x86_64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)
+        LIBRARY_SEARCH_PATHS[arch=arm64]: $(inherited) $(PROJECT_DIR)/Externals/arm64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)
+        ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES: true
+        EXCLUDED_ARCHS[sdk=iphoneos*]: x86_64
+      groups: [app]
+    dependencies:
+      - framework: libapp.a
+        embed: false
+      - sdk: CoreGraphics.framework
+      - sdk: Metal.framework
+      - sdk: MetalKit.framework
+      - sdk: QuartzCore.framework
+      - sdk: Security.framework
+      - sdk: UIKit.framework
+      - sdk: WebKit.framework
+    preBuildScripts:
+      - script: cd ../.. && ../../../node_modules/.bin/tauri ios xcode-script -v --platform ${PLATFORM_DISPLAY_NAME:?} --sdk-root ${SDKROOT:?} --framework-search-paths "${FRAMEWORK_SEARCH_PATHS:?}" --header-search-paths "${HEADER_SEARCH_PATHS:?}" --gcc-preprocessor-definitions "${GCC_PREPROCESSOR_DEFINITIONS:-}" --configuration ${CONFIGURATION:?} ${FORCE_COLOR} ${ARCHS:?}
+        name: Build Rust Code
+        basedOnDependencyAnalysis: false
+        outputFiles:
+          - $(SRCROOT)/Externals/x86_64/${CONFIGURATION}/libapp.a
+          - $(SRCROOT)/Externals/arm64/${CONFIGURATION}/libapp.a
diff --git a/apps/remote-ios/src-tauri/src/lib.rs b/apps/remote-ios/src-tauri/src/lib.rs
new file mode 100644
index 0000000000..522e28e609
--- /dev/null
+++ b/apps/remote-ios/src-tauri/src/lib.rs
@@ -0,0 +1,132 @@
+//! Lightweight native shell for ORG2 Remote.
+//!
+//! The agent runtime remains on the paired Desktop. This crate owns only the
+//! iOS webview, deep-link delivery, system-browser handoff, and Keychain.
+
+const KEYCHAIN_SERVICE: &str = "org2ai.org2.remote";
+const MAX_KEYCHAIN_VALUE_BYTES: usize = 64 * 1024;
+const EXACT_KEYCHAIN_KEYS: &[&str] = &[
+    "org2.remote.auth.session.v1",
+    "org2.remote.auth.oauth-attempt.v1",
+    "org2.remote.auth.pairing-intent.v1",
+];
+const PREFIXED_KEYCHAIN_KEYS: &[&str] = &[
+    "org2.remote.auth.pkce.v1:",
+    "org2.remote.pairing-inventory.v1:",
+];
+
+fn validate_keychain_key(key: &str) -> Result<(), String> {
+    let allowed = !key.is_empty()
+        && key.len() <= 512
+        && (EXACT_KEYCHAIN_KEYS.contains(&key)
+            || PREFIXED_KEYCHAIN_KEYS
+                .iter()
+                .any(|prefix| key.starts_with(prefix) && key.len() > prefix.len()));
+    if allowed {
+        Ok(())
+    } else {
+        Err("keychain_key_not_allowed".to_string())
+    }
+}
+
+fn validate_keychain_value(value: &str) -> Result<(), String> {
+    if value.len() <= MAX_KEYCHAIN_VALUE_BYTES {
+        Ok(())
+    } else {
+        Err("keychain_value_too_large".to_string())
+    }
+}
+
+#[cfg(target_vendor = "apple")]
+#[tauri::command]
+fn mobile_keychain_read(key: String) -> Result<Option<String>, String> {
+    use security_framework::passwords::get_generic_password;
+    use security_framework_sys::base::errSecItemNotFound;
+
+    validate_keychain_key(&key)?;
+    match get_generic_password(KEYCHAIN_SERVICE, &key) {
+        Ok(bytes) => String::from_utf8(bytes)
+            .map(Some)
+            .map_err(|_| "keychain_value_invalid_utf8".to_string()),
+        Err(error) if error.code() == errSecItemNotFound => Ok(None),
+        Err(error) => Err(format!("keychain_read_failed:{}", error.code())),
+    }
+}
+
+#[cfg(target_vendor = "apple")]
+#[tauri::command]
+fn mobile_keychain_write(key: String, value: String) -> Result<(), String> {
+    use security_framework::passwords::set_generic_password;
+
+    validate_keychain_key(&key)?;
+    validate_keychain_value(&value)?;
+    set_generic_password(KEYCHAIN_SERVICE, &key, value.as_bytes())
+        .map_err(|error| format!("keychain_write_failed:{}", error.code()))
+}
+
+#[cfg(target_vendor = "apple")]
+#[tauri::command]
+fn mobile_keychain_delete(key: String) -> Result<(), String> {
+    use security_framework::passwords::delete_generic_password;
+    use security_framework_sys::base::errSecItemNotFound;
+
+    validate_keychain_key(&key)?;
+    match delete_generic_password(KEYCHAIN_SERVICE, &key) {
+        Ok(()) => Ok(()),
+        Err(error) if error.code() == errSecItemNotFound => Ok(()),
+        Err(error) => Err(format!("keychain_delete_failed:{}", error.code())),
+    }
+}
+
+#[cfg(not(target_vendor = "apple"))]
+#[tauri::command]
+fn mobile_keychain_read(_key: String) -> Result<Option<String>, String> {
+    Err("keychain_unavailable".to_string())
+}
+
+#[cfg(not(target_vendor = "apple"))]
+#[tauri::command]
+fn mobile_keychain_write(_key: String, _value: String) -> Result<(), String> {
+    Err("keychain_unavailable".to_string())
+}
+
+#[cfg(not(target_vendor = "apple"))]
+#[tauri::command]
+fn mobile_keychain_delete(_key: String) -> Result<(), String> {
+    Err("keychain_unavailable".to_string())
+}
+
+#[cfg_attr(mobile, tauri::mobile_entry_point)]
+pub fn run() {
+    tauri::Builder::default()
+        .plugin(tauri_plugin_deep_link::init())
+        .plugin(tauri_plugin_opener::init())
+        .invoke_handler(tauri::generate_handler![
+            mobile_keychain_read,
+            mobile_keychain_write,
+            mobile_keychain_delete
+        ])
+        .run(tauri::generate_context!())
+        .expect("failed to run ORG2 Remote");
+}
+
+#[cfg(test)]
+mod tests {
+    use super::{validate_keychain_key, validate_keychain_value};
+
+    #[test]
+    fn accepts_only_owned_keychain_namespaces() {
+        assert!(validate_keychain_key("org2.remote.auth.session.v1").is_ok());
+        assert!(validate_keychain_key("org2.remote.auth.pkce.v1:code-verifier").is_ok());
+        assert!(validate_keychain_key("org2.remote.pairing-inventory.v1:user-a").is_ok());
+        assert!(validate_keychain_key("org2.remote.auth.pkce.v1:").is_err());
+        assert!(validate_keychain_key("untrusted.key").is_err());
+        assert!(validate_keychain_key(&"x".repeat(513)).is_err());
+    }
+
+    #[test]
+    fn bounds_keychain_values_before_native_io() {
+        assert!(validate_keychain_value("normal value").is_ok());
+        assert!(validate_keychain_value(&"x".repeat(64 * 1024 + 1)).is_err());
+    }
+}
diff --git a/apps/remote-ios/src-tauri/src/main.rs b/apps/remote-ios/src-tauri/src/main.rs
new file mode 100644
index 0000000000..60e1087de4
--- /dev/null
+++ b/apps/remote-ios/src-tauri/src/main.rs
@@ -0,0 +1,5 @@
+#![cfg_attr(not(debug_assertions), windows_subsystem = "windows")]
+
+fn main() {
+    org2_remote_lib::run();
+}
diff --git a/apps/remote-ios/src-tauri/tauri.conf.json b/apps/remote-ios/src-tauri/tauri.conf.json
new file mode 100644
index 0000000000..3b6144a04b
--- /dev/null
+++ b/apps/remote-ios/src-tauri/tauri.conf.json
@@ -0,0 +1,50 @@
+{
+  "$schema": "../../../../node_modules/@tauri-apps/cli/config.schema.json",
+  "productName": "ORG2 Remote",
+  "version": "0.1.0",
+  "identifier": "org2ai.org2.remote",
+  "build": {
+    "frontendDist": "../../../build-mobile-native",
+    "devUrl": "http://localhost:1998",
+    "beforeDevCommand": "cd ../.. && pnpm dev:mobile-native",
+    "beforeBuildCommand": "cd ../.. && pnpm build:mobile-native"
+  },
+  "app": {
+    "windows": [
+      {
+        "label": "main",
+        "title": "ORG2 Remote",
+        "url": "mobile-native.html",
+        "width": 390,
+        "height": 844,
+        "resizable": true,
+        "fullscreen": false,
+        "decorations": true,
+        "backgroundColor": "#0d0d0d"
+      }
+    ],
+    "security": {
+      "csp": "default-src 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline' 'nonce-orgii-codemirror-style'; style-src-attr 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' data:; connect-src 'self' ipc: http://ipc.localhost https://fpdyejwbiriliuqqcjoy.supabase.co https://org2-cloud-infra.vercel.app wss:; media-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'"
+    }
+  },
+  "bundle": {
+    "active": true,
+    "targets": "all",
+    "icon": ["../../../src-tauri/icons/icon.png"],
+    "iOS": {
+      "bundleVersion": "1",
+      "minimumSystemVersion": "17.0",
+      "infoPlist": "Info.ios.plist"
+    }
+  },
+  "plugins": {
+    "deep-link": {
+      "mobile": [
+        {
+          "scheme": ["org2remote"],
+          "appLink": false
+        }
+      ]
+    }
+  }
+}
diff --git a/config/webpack.config.js b/config/webpack.config.js
index 43fb62845b..ffd91b24a5 100644
--- a/config/webpack.config.js
+++ b/config/webpack.config.js
@@ -18,6 +18,8 @@ const repoRoot = path.resolve(__dirname, "..");
 
 module.exports = (env, argv) => {
   const isProduction = argv.mode === "production";
+  const isMobileRemoteNativeBuild =
+    process.env.ORGII_MOBILE_REMOTE_NATIVE === "true";
 
   const isLightDev = !isProduction && process.env.ORGII_LIGHT_DEV === "true";
 
@@ -93,12 +95,19 @@ module.exports = (env, argv) => {
 
   return {
     context: repoRoot,
-    entry: {
-      main: "./src/index.tsx",
-      mobile: "./src/mobileRemoteEntry.tsx",
-    },
+    entry: isMobileRemoteNativeBuild
+      ? { mobileNative: "./src/mobileRemoteNativeEntry.tsx" }
+      : {
+          main: "./src/index.tsx",
+          mobile: "./src/mobileRemoteEntry.tsx",
+        },
     output: {
-      path: path.resolve(repoRoot, "build"),
+      // The native shell has its own artifact directory so an iOS build cannot
+      // clean or overwrite the Desktop/Web Remote production bundle.
+      path: path.resolve(
+        repoRoot,
+        isMobileRemoteNativeBuild ? "build-mobile-native" : "build"
+      ),
       // IMPORTANT: publicPath must be "/" to ensure assets load from root
       // Without this, deep routes like /orgii/marketplace/callback cause 404s
       publicPath: "/",
@@ -631,24 +640,33 @@ module.exports = (env, argv) => {
       // Dev server uses in-memory FS; output.clean handles the rest.
       isProduction && new CleanWebpackPlugin(),
       // Main app HTML
-      new HtmlWebpackPlugin({
-        template: "./public/index.html",
-        chunks: ["main"],
-        filename: "index.html",
-        // Linux WebKitGTK can internally fail a static <script src="/main.js">
-        // load even after the dev server is ready; a failed script is not
-        // retried, so Linux dev uses the retrying external loader below.
-        inject: retryMainScriptLoad ? false : "body",
-        retryMainScriptLoad,
-      }),
+      !isMobileRemoteNativeBuild &&
+        new HtmlWebpackPlugin({
+          template: "./public/index.html",
+          chunks: ["main"],
+          filename: "index.html",
+          // Linux WebKitGTK can internally fail a static <script src="/main.js">
+          // load even after the dev server is ready; a failed script is not
+          // retried, so Linux dev uses the retrying external loader below.
+          inject: retryMainScriptLoad ? false : "body",
+          retryMainScriptLoad,
+        }),
       // Browser-only Mobile Remote entry. It must not load the Tauri desktop
       // bootstrap from src/index.tsx.
-      new HtmlWebpackPlugin({
-        template: "./public/mobile.html",
-        chunks: ["mobile"],
-        filename: "mobile.html",
-        inject: "body",
-      }),
+      !isMobileRemoteNativeBuild &&
+        new HtmlWebpackPlugin({
+          template: "./public/mobile.html",
+          chunks: ["mobile"],
+          filename: "mobile.html",
+          inject: "body",
+        }),
+      isMobileRemoteNativeBuild &&
+        new HtmlWebpackPlugin({
+          template: "./public/mobile.html",
+          chunks: ["mobileNative"],
+          filename: "mobile-native.html",
+          inject: "body",
+        }),
       // NOTE: HotModuleReplacementPlugin is automatically added by webpack-dev-server when hot: true
       // ReactRefreshWebpackPlugin works with SWC's refresh: true option to enable
       // state-preserving hot reload. Only enabled when not using esbuild/light mode.
diff --git a/docs/architecture/ios-remote-shell.md b/docs/architecture/ios-remote-shell.md
new file mode 100644
index 0000000000..798d42cb40
--- /dev/null
+++ b/docs/architecture/ios-remote-shell.md
@@ -0,0 +1,377 @@
+# ORG2 Remote iOS shell architecture
+
+**Date:** 2026-09-02
+**Scope:** PR2 — an independent, lightweight Tauri iOS shell that reuses Web
+Remote's product root while keeping the agent runtime on the paired Desktop.
+
+This document records the minimum architecture that can be implemented and
+verified in this PR. It does not claim that Universal Links, a server-side
+multi-desktop inventory, background relay sockets, push notifications, or an
+offline transcript database already exist.
+
+## Decision
+
+The iOS app is a sibling Tauri product, not a mobile build of the Desktop
+binary. Its bundle identifier is `org2ai.org2.remote`; its Rust graph owns only
+the WebView, system-browser handoff, deep-link delivery, and narrowly scoped
+Keychain access. The Desktop continues to own and run the agent, session
+EventStore, tools, terminals, repositories, and relay administration.
+
+The shared product root is `MobileRemoteRoot`:
+
+```text
+MobileRemoteRoot
+  -> MobileAuthGate
+  -> MobileRemoteApp
+       -> MobileRemoteProviders
+       -> existing transcript / interaction / navigation UI
+```
+
+The native shell must inject a `MobileRemotePlatform`; it must not copy the
+auth, pairing, connection, transcript, or chat state machines into a parallel
+native screen. A native-only screen is justified only for behavior absent from
+the shared product, and must be reached from a production entry point.
+
+## Acceptance criteria for this PR
+
+- `apps/remote-ios/src-tauri` is an independent crate and does not depend on
+  the Desktop `src-tauri` crate or any Desktop runtime crate.
+- the Rust library exports a mobile entry point and the three required crate
+  types: `staticlib`, `cdylib`, and `rlib`;
+- the Tauri identifier is exactly `org2ai.org2.remote` and the generated iOS
+  target is signed for that registered identifier;
+- the native webpack graph starts at `mobileRemoteNativeEntry.tsx`, reaches
+  `MobileRemoteRoot`, and cannot reach the Desktop entry or browser adapter;
+- cold-start and warm `org2remote://auth/callback` delivery both notify the
+  auth state machine, while malformed/replayed callbacks fail closed;
+- GitHub/Supabase OAuth opens in the system browser, PKCE/session secrets and
+  pairing credentials are stored in Keychain, and raw secrets or callback
+  URLs are never logged;
+- the current WebSocket and relay JSON-RPC wire contract is reused without a
+  native agent runtime or a second transcript store;
+- the UI describes the account-scoped local Keychain inventory and its one
+  active Desktop honestly; it does not present that inventory as a server-side
+  account-authoritative paired-device list;
+- build output, capabilities, CSP, opener allowlists, and generated artifacts
+  are scoped to the iOS product;
+- TypeScript adapter tests, Rust boundary tests, simulator tests, and at least
+  one real-device OAuth return/pairing flow provide evidence before the PR is
+  marked ready.
+
+## Minimal file, dependency, and entry topology
+
+```text
+apps/remote-ios/
+  src-tauri/
+    Cargo.toml
+    Cargo.lock
+    build.rs
+    tauri.conf.json
+    Info.ios.plist                   # org2remote custom URL scheme
+    capabilities/mobile.json
+    src/
+      lib.rs                         # #[cfg_attr(mobile, tauri::mobile_entry_point)]
+      main.rs                        # optional desktop development shim
+    gen/apple/                       # generated by `tauri ios init`, never hand-authored
+
+src/mobileRemoteNativeEntry.tsx
+src/modules/MobileRemote/platform/tauri/
+  tauriMobileRemotePlatform.ts       # production + injected factories
+  tauriMobileAuthClient.ts           # shared PKCE + Keychain storage adapter
+  tests...
+src/modules/MobileRemote/connection/
+  mobilePairedDesktopInventory.ts    # bounded local inventory projection
+```
+
+The implemented Rust dependency set is Tauri, `tauri-plugin-deep-link`,
+`tauri-plugin-opener`, `serde_json`, and Apple's `security-framework` /
+`security-framework-sys`. It deliberately does not use
+`tauri-plugin-keychain`. Repository-owned Tauri commands fix the service to
+`org2ai.org2.remote`, accept only three exact keys or the owned PKCE/inventory
+prefixes, bound key length to 512 bytes and value length to 64 KiB, and return
+stable error codes without secret values. No shell, filesystem, updater,
+terminal, PTY, Git, database, LSP, browser automation, agent-core, or Desktop
+settings dependency is present.
+
+Native and Desktop production builds are isolated. Native webpack emits only
+`mobileNative` into `build-mobile-native`; Desktop/Web continue to emit into
+`build`. The Tauri `frontendDist` points to the native directory, and both the
+native output and native Cargo `target/` are ignored.
+
+## Import graphs
+
+### Browser Remote
+
+```text
+mobileRemoteEntry.tsx
+  -> platform/browser
+       -> Supabase PKCE + browser storage + browser location
+  -> MobileRemoteRoot
+       -> shared auth / connection / transcript / UI
+       -> DOM WebSocket -> relay -> Desktop agent runtime
+```
+
+### Tauri iOS Remote
+
+```text
+mobileRemoteNativeEntry.tsx
+  -> platform/tauri
+       -> register onOpenUrl(), then getCurrent()
+       -> system-browser opener
+       -> Keychain-backed Supabase SupportedStorage
+       -> shared Supabase PKCE client (no browser cookie-session exchange)
+  -> MobileRemoteRoot
+       -> the same shared auth / connection / transcript / UI
+       -> WebView WebSocket -> relay -> Desktop agent runtime
+
+org2_remote_lib
+  -> tauri
+  -> tauri-plugin-deep-link
+  -> tauri-plugin-opener
+  -> repository-owned Security.framework commands
+  -X-> Desktop app crate / agent-core / EventStore / PTY / Git / LSP / DB
+```
+
+Static import-boundary tests should enforce both negative edges. Runtime
+comments or separate webpack entries alone are not evidence of isolation.
+
+## Authoritative data and ownership
+
+| Concern                                           | Authoritative source                                           | Local projection/owner                                                                                | Required invariant                                                                                        |
+| ------------------------------------------------- | -------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------- |
+| Account authentication                            | Supabase/ORG2 Cloud                                            | `MobileAuthGate`; encrypted session in Keychain                                                       | one user-scoped session; refresh-token writes finish before state advances                                |
+| OAuth attempt / PKCE verifier                     | the attempt and verifier created by the shared Supabase client | 10-minute single-use attempt marker plus Supabase-owned verifier under an allowlisted Keychain prefix | callback exchange is rejected when the attempt is absent/expired; Supabase consumes the matching verifier |
+| OAuth callback intent                             | iOS deep-link delivery                                         | ephemeral native driver + auth notification                                                           | exact scheme/host/path validation; consume once; never log raw URL                                        |
+| Pairing approval, tier, and revocation            | relay/Desktop                                                  | opaque pairing intent and device token in Keychain                                                    | account login does not grant relay access; device token remains the relay credential                      |
+| Active Desktop connection                         | the selected local inventory entry plus live relay handshake   | `MobileRemoteProviders`                                                                               | one active config with serialized writes and generation-guarded bootstrap                                 |
+| Locally retained paired Desktops                  | Keychain inventory scoped by encoded Cloud user id             | versioned inventory, capped at 20 entries; UI receives credential-free summaries                      | useful local history/selection, but not proof of current server pairing or revocation state               |
+| Server-side account-wide paired Desktop inventory | **not available in the current protocol**                      | none                                                                                                  | do not present the local inventory as a complete server-backed list                                       |
+| Transcript, rounds, events, and tools             | Desktop EventStore                                             | disposable shared reducers                                                                            | the phone never becomes a second transcript database                                                      |
+| Active socket                                     | current foreground provider generation                         | provider ref only                                                                                     | release when hidden; stale sockets cannot mutate a newer generation                                       |
+
+### Relay permission boundary
+
+The relay endpoints for completing pairing, listing devices, revoking devices,
+and selecting a primary Desktop are Desktop-admin operations authenticated by
+the Desktop token. The mobile device token authorizes the paired mobile socket;
+the Cloud access token authenticates the ORG2 account. These credentials are
+not interchangeable.
+
+The connection port now stores a versioned, account-scoped Keychain inventory,
+exposes credential-free summaries, and lets the user select one active Desktop.
+Parsing rejects unsupported versions and malformed rows, selection must match
+an existing id, and both parsing and insertion cap retained entries at 20. This
+is a truthful local history of pairings made on this phone, but it can be stale
+after remote revocation and cannot discover pairings made elsewhere.
+
+A complete server-backed device list, remote revoke, or account-wide primary
+Desktop requires a separately designed Cloud/relay API, authorization model,
+pagination, reconciliation, and tests. That API is a later feature; local
+inventory support does not remove the relay permission boundary.
+
+## OAuth, deep-link, and Keychain lifecycle
+
+The canonical first-release callback is
+`org2remote://auth/callback`. Configure it under the Tauri mobile deep-link
+plugin and the Supabase redirect allowlist. OAuth must use `openUrl` in the
+system browser; do not use an embedded auth WebView.
+
+Cold and warm delivery are separate entry paths and must converge:
+
+```text
+cold launch
+  -> register onOpenUrl listener
+  -> await getCurrent()
+  -> validate + capture callback/pairing intent
+  -> create platform
+  -> mount MobileRemoteRoot
+
+warm callback
+  -> onOpenUrl(urls)
+  -> validate + capture exactly one supported URL
+  -> notify MobileAuthGate/auth coordinator
+  -> authenticate() performs single-use attempt check and exchange
+```
+
+The production adapter now registers `onOpenUrl` before awaiting `getCurrent`,
+validates only exact `org2remote://auth/callback` and
+`org2remote://pair` intents, and publishes `auth_callback` / `pairing` events
+through `subscribeIntent`. `MobileAuthGate` invalidates any older auth episode,
+waits for pending auth/sign-out work, and re-authenticates from the newest
+intent. The adapter deduplicates at most 16 recent URLs for 60 seconds, retains
+intents for at most 10 minutes, and removes the native listener on `pagehide`.
+Thus cold and warm delivery converge without remounting or refreshing.
+
+The shared reducer uses `checking`, `signed_out`, `redirecting`, `exchanging`,
+`signed_in`, and `error`; in-flight authentication and sign-out cleanup are
+separate guarded lifecycle operations rather than duplicate presentation
+states. Every async result is guarded by the active auth generation. Preserve
+the existing invariants:
+
+- rotated session storage completes before auth state advances;
+- post-write generation checks reject stale auth completion;
+- sign-out waits for pending authentication before final cleanup;
+- a subsequent sign-in waits for that cleanup;
+- malformed, wrong-origin, fragmented, missing-code, missing-attempt, expired,
+  and replayed callbacks fail closed.
+
+The shared Supabase PKCE client makes browser server-session establishment an
+explicit option. Browser Remote retains relative `/v1/mobile/auth/session` and
+its cookie contract. Tauri iOS deliberately passes `serverSessionUrl: null`:
+its authority is the Supabase session plus the paired Desktop device
+credential, so it neither depends on nor silently attempts a same-origin
+browser cookie exchange from the custom-protocol WebView.
+
+Universal Links are a later compatibility enhancement. Do not claim them until
+an owned HTTPS domain serves a valid AASA file containing the Apple team ID,
+`org2ai.org2.remote`, and the exact callback path, and both installed-app and
+browser fallback paths have been tested.
+
+## State, error, compatibility, and lifecycle boundaries
+
+| Boundary                      | Required behavior                                                                                                                                             |
+| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Auth race                     | auth generation rejects late restore/exchange/write completion; callback is single-use                                                                        |
+| Connection race               | provider and adapter serialize writes; bootstrap/load/socket callbacks check generation                                                                       |
+| Hidden/background             | cancel reconnect timers and close the foreground socket; do not promise background agent execution                                                            |
+| Foreground                    | revalidate auth and reconnect only the retained active config when no current socket owns the generation                                                      |
+| Keychain locked/unavailable   | typed, user-visible recoverable error; never fall back to localStorage or plaintext                                                                           |
+| Pairing expired/revoked       | typed pairing/authorization error; preserve account login, clear only invalid connection material                                                             |
+| Network loss                  | bounded retry while visible; retained Desktop/EventStore remains authoritative                                                                                |
+| OAuth cancel/invalid callback | return to signed-out or typed error state without consuming unrelated pairing data                                                                            |
+| Upgrade                       | version and validate stored envelopes; reject unknown versions rather than casting arbitrary JSON                                                             |
+| Sign-out/account switch       | clear auth session and pending intents in an ordered final write; keep inventories isolated by user id and load only the newly authenticated user's inventory |
+| Reinstall                     | explicitly verify the chosen Security.framework persistence behavior on a signed device                                                                       |
+
+The relay wire remains JSON-RPC 2.0 over WebSocket, protocol version `1`. The
+iOS adapter supplies client identity and socket construction only; it does not
+rename methods, reinterpret tool events, or change `session/send`, round, or
+interaction payloads. The same provider continues to enforce serialized
+connection persistence, bootstrap/load generation guards, hidden-socket
+release, and stale-socket ownership guards.
+
+## Initialization parity
+
+| Step                                       | Browser entry                    | iOS entry                                        | Test entry                      |
+| ------------------------------------------ | -------------------------------- | ------------------------------------------------ | ------------------------------- |
+| Capture pairing/callback before auth mount | synchronous URL capture          | listener registered, then `getCurrent()` awaited | seeded driver                   |
+| Build platform                             | browser singleton                | awaited native bridge/platform                   | explicit fake                   |
+| Initialize i18n                            | awaited                          | awaited                                          | explicit provider               |
+| Mount shared root                          | `MobileRemoteRoot`               | `MobileRemoteRoot`                               | same root for integration tests |
+| Handle warm callback                       | browser navigation reloads entry | `onOpenUrl` notifies mounted auth owner          | emit callback after mount       |
+| Revalidate on foreground                   | visibility event                 | app/WebView lifecycle event                      | deterministic runtime fake      |
+| Cleanup                                    | document listener/socket cleanup | deep-link unlisten + timers/socket cleanup       | assert disposer calls           |
+
+The iOS bootstrap must not render until platform creation, cold URL capture,
+and i18n initialization either complete or enter an explicit startup-error
+state. An empty WebView is not a loading state.
+
+## Resolver symmetry
+
+| Value             | Primary source                                       | Retained source                | Finalization                                                                                                 |
+| ----------------- | ---------------------------------------------------- | ------------------------------ | ------------------------------------------------------------------------------------------------------------ |
+| Auth session      | callback exchange                                    | Keychain session refresh       | durable write -> generation check -> signed-in transition; browser alone also establishes its cookie session |
+| Pairing intent    | cold/warm deep link                                  | TTL-bound Keychain intent      | consume only after signed-in account is established                                                          |
+| Active connection | freshly approved pairing or explicit local selection | user-scoped Keychain inventory | serialized inventory save -> connect with active generation                                                  |
+| Transcript        | live Desktop notification                            | Desktop round/history RPC      | stable-ID reducer reconciliation only                                                                        |
+
+No resolver may use localStorage as a native fallback. Callback and restored
+sessions must converge on the same finalization chain; freshly paired and
+restored connections must converge on the same provider connect path.
+
+## Ten-layer architecture audit
+
+| Layer                        | Findings and required disposition                                                                                                                                                                                                                                                                                                                                                                    |
+| ---------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| 1. Compilation correctness   | The production entry awaits the zero-argument Tauri factory, which constructs the real invoke/deep-link/opener bridge and returns `MobileRemotePlatform`. `pnpm typecheck`, host `cargo check`, and the two Rust boundary tests pass; the independent crate has the correct mobile crate types and entry annotation. iPhoneOS SDK, signed iOS build, simulator, and device evidence remain required. |
+| 2. Dead code and duplication | The earlier parallel native access screen is absent. Production mounts `MobileRemoteRoot`; native code supplies environment ports rather than a second auth/device/chat FSM.                                                                                                                                                                                                                         |
+| 3. Naming consistency        | Use `ios`, `native`, `browser`, `Desktop`, `deviceToken`, and `desktopToken` consistently. `bridge` means the narrow Tauri adapter here, not the Desktop mobile-relay bridge.                                                                                                                                                                                                                        |
+| 4. Semantic overloading      | “paired devices” remains two concepts: bounded account-scoped local history vs Relay admin inventory. “Session” is Cloud auth session vs Desktop agent session. Types and copy identify the local inventory and active selection explicitly.                                                                                                                                                         |
+| 5. Default branches          | Reject unknown stored versions, auth callback origins, error codes, and protocol capabilities. Do not default unknown Keychain errors to network retry, or unknown URLs to accepted callbacks.                                                                                                                                                                                                       |
+| 6. Cross-domain leakage      | The iOS Rust crate must not import Desktop agent/runtime crates; shared TS must not import Tauri or browser adapters. Native credentials/navigation stay behind the platform port.                                                                                                                                                                                                                   |
+| 7. New-developer clarity     | The sibling crate and import diagrams make it explicit that the agent runs locally on Desktop, not on the iPhone. Comments must not imply Cloud login grants relay administration.                                                                                                                                                                                                                   |
+| 8. Wire and serialization    | Relay JSON-RPC remains unchanged. Native OAuth intentionally has no browser server-session request. Tests must assert callback validation, `initialize`, pairing payload, `session/send`, versioned inventory envelopes, and sanitized summaries; never inspect only source types.                                                                                                                   |
+| 9. Initialization parity     | Browser and iOS both capture initial intent before auth/root initialization. iOS registers warm delivery before cold `getCurrent`, then both paths publish through the same intent port.                                                                                                                                                                                                             |
+| 10. Resolver symmetry        | Callback/restore auth paths converge on Keychain persistence and generation guards; fresh/restored/selected connections converge on the same provider connect path. Browser-only cookie session establishment is an explicit shell capability, not an accidental fallback.                                                                                                                           |
+
+## Verification matrix
+
+### Automated
+
+- static import tests for native -> shared root and both forbidden edges;
+- adapter tests for cold callback, warm callback after mount, duplicate callback,
+  expired/missing PKCE attempt, pairing-before-login, and ordered Keychain writes;
+- auth gate test proving a warm callback notification invokes exchange without
+  remount/refresh;
+- connection tests for hidden release, foreground reconnect, write ordering,
+  bootstrap generation, and stale socket ownership;
+- full request-shape assertions for `initialize` and `session/send`;
+- Rust tests for owned Keychain namespaces, 512-byte key and 64-KiB value
+  bounds, stable errors, and no secret values in errors/logs;
+- inventory tests for account scoping, malformed/versioned input, 20-entry
+  retention, credential-free summaries, active selection, and serialized writes;
+- webpack stats/import scan showing no Desktop entry/runtime in the native
+  graph;
+- `cargo tree --manifest-path apps/remote-ios/src-tauri/Cargo.toml` review
+  showing no Desktop workspace crates.
+
+### Toolchain and device
+
+```text
+pnpm install --frozen-lockfile
+pnpm typecheck
+pnpm build:mobile-native
+pnpm tauri:ios:init
+cargo check --manifest-path apps/remote-ios/src-tauri/Cargo.toml \
+  --target aarch64-apple-ios
+pnpm tauri:ios:build
+```
+
+Run those with full Xcode selected, a valid development team/profile for
+`org2ai.org2.remote`, and installed device/simulator Rust targets. Then verify
+on a real iPhone: cold login, warm login, cancel, callback replay, app kill and
+restore, background/foreground, pairing, revoked token, network transition,
+Keychain lock/access, sign-out/account switch, loading/empty/error states,
+safe-area/keyboard behavior, Dynamic Type, and VoiceOver.
+
+At audit time the generated Apple project and Rust iOS targets
+(`aarch64-apple-ios`, `aarch64-apple-ios-sim`, and `x86_64-apple-ios`) were
+present, and host `cargo check` passed. The machine still selected Command Line
+Tools rather than full Xcode, so the iPhoneOS SDK, signed iOS build, simulator,
+and device flows could not be verified. Generated Cargo `target/` output is a
+local artifact and is ignored.
+
+## Current hard risks and staging
+
+### Must be resolved before this PR is ready
+
+1. **Apple build and device evidence:** full Xcode/iPhoneOS SDK selection,
+   bundle signing for `org2ai.org2.remote`, simulator launch, and a real-iPhone
+   cold/warm OAuth plus pairing flow remain unverified.
+2. **External OAuth configuration:** Supabase must allow
+   `org2remote://auth/callback`. The repository can configure and validate the
+   app callback, but cannot prove the external redirect allowlist from source.
+3. **Dynamic relay CSP:** opener permissions are narrowed to the official
+   Supabase and ORG2 Cloud origins, and Keychain commands are allowlisted. Relay
+   endpoints are user-configurable, however, so `connect-src` intentionally
+   retains `wss:`. This broader network surface is a conscious compatibility
+   risk; pairing URL validation and per-Desktop device credentials remain the
+   authorization boundary.
+
+### Explicitly later; this PR must not claim them
+
+- a server-authoritative account-wide multi-Desktop list, primary Desktop
+  mutation, or remote revoke action available to the phone (the local bounded
+  inventory and active switching already exist);
+- Universal Links and browser fallback;
+- background/always-on relay connection or local agent execution;
+- APNs, offline transcript/action queue, or a native transcript database.
+
+## References
+
+- [Tauri project structure and mobile library entry](https://v2.tauri.app/start/project-structure/)
+- [Tauri deep linking](https://v2.tauri.app/plugin/deep-linking/)
+- [Tauri opener API](https://v2.tauri.app/reference/javascript/opener/)
+- [Tauri CLI iOS commands](https://v2.tauri.app/reference/cli/)
+- [Tauri configuration reference](https://v2.tauri.app/reference/config/)
+- [Tauri iOS signing](https://v2.tauri.app/distribute/sign/ios/)
diff --git a/docs/architecture/mobile-remote-platform-boundary.md b/docs/architecture/mobile-remote-platform-boundary.md
new file mode 100644
index 0000000000..e584fcd2ba
--- /dev/null
+++ b/docs/architecture/mobile-remote-platform-boundary.md
@@ -0,0 +1,247 @@
+# Mobile Remote platform boundary
+
+**Date:** 2026-09-02
+**Scope:** the first stacked iOS Remote change: extract a platform-neutral
+Mobile Remote root and keep the existing Web Remote behavior behind a browser
+adapter. This document does not claim that the Tauri iOS shell, Keychain,
+Universal Links, APNs, or offline cache already exist.
+
+## Decision and acceptance criteria
+
+`MobileRemoteRoot` is the reusable product root. It owns authentication and the
+existing Remote application lifecycle, but it does not choose a platform or
+read browser globals. A shell must inject one `MobileRemotePlatform`; only the
+shell-specific adapter may access navigation, credential storage, visibility,
+timers, randomness, or construct the WebSocket.
+
+This boundary is complete for this PR when all of the following are true:
+
+- the standalone Web entry and the main-router compatibility entry both render
+  the same `MobileRemoteRoot`;
+- the shared root's static import graph cannot reach `platform/browser`, Tauri
+  packages, or direct `window` / `document` / Web Storage access;
+- auth, connection persistence, socket construction, timers, visibility, clock,
+  randomness, and client identity are obtained from the injected platform;
+- Web storage keys, OAuth PKCE behavior, relay JSON-RPC messages, transcript
+  projection, and user-visible Web behavior remain compatible;
+- stale auth, connection, subscription, and round-load completions remain
+  rejected by their existing generation checks;
+- tests cover the import boundary and the Web adapter path before a Tauri iOS
+  adapter is introduced.
+
+## Authoritative sources and ownership
+
+| Concern                   | Authoritative source                                                                                          | In-memory owner                                                                         | Platform responsibility                                                                                       |
+| ------------------------- | ------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- |
+| Agent/session history     | Desktop `EventStore`, exposed by `session/subscribe`, `session/round`, and live notifications                 | `TranscriptLoadState` in `MobileRemoteProviders` is a disposable projection             | Create the socket only; never invent, reorder, or persist transcript truth                                    |
+| Round identity            | Desktop `roundId`; the submitting client contributes a stable `turnIntentId` until Desktop confirms the round | `transcriptLoadState.ts` owns provisional `local-pending:<turnIntentId>` reconciliation | Provide collision-resistant `randomUUID()`                                                                    |
+| Event/tool identity       | Desktop `eventId` and `callId`                                                                                | `transcriptReducer.ts` performs canonical idempotent upserts                            | No platform-specific interpretation                                                                           |
+| Signed-in account         | ORG2 Cloud/Supabase session plus the exchanged server session                                                 | `MobileAuthGate` and its generation-guarded reducer                                     | Store credentials, perform platform OAuth navigation/callback handling, and create the auth client            |
+| Paired desktop connection | User-scoped connection configuration; Desktop/relay owns actual device authorization                          | `MobileRemoteProviders` owns the active transport and connection projection             | Persist the scoped config and construct the socket                                                            |
+| Runtime lifecycle         | The currently mounted Remote root                                                                             | `MobileRemoteProviders` owns reconnect, subscription, refresh, and cleanup refs         | Supply timers and visibility notifications; native implementations must stop foreground-only work when hidden |
+| Permission prompts        | Desktop interaction request stream                                                                            | `interactionQueueReducer.ts` owns FIFO presentation state                               | No durable copy in the platform adapter                                                                       |
+
+The key invariant is that the phone never becomes an alternative transcript
+database. Optimistic user content is a temporary client projection, identified
+by `turnIntentId`, and is either reconciled to an authoritative `roundId`, kept
+as uncertain after an indeterminate transport failure, or rolled back after a
+definite rejection.
+
+## Port contract
+
+`MobileRemotePlatform` is intentionally split by responsibility rather than by
+screen:
+
+| Port         | Shared callers                            | Browser implementation                                         | Tauri iOS implementation requirement                                                                                     |
+| ------------ | ----------------------------------------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
+| `runtime`    | Auth expiry, reconnect, UUIDs, visibility | `Date`, Web Crypto, `window` timers, Page Visibility           | WebView/app lifecycle bridge, secure UUID generation, deterministic timer cleanup                                        |
+| `auth`       | `MobileAuthGate`                          | Supabase PKCE, browser location/history, session/local storage | System authentication browser, `org2remote`/Universal Link callback, PKCE verifier and refresh tokens in Keychain        |
+| `connection` | `MobileRemoteProviders`                   | DOM WebSocket and user-scoped local storage                    | Foreground relay socket and encrypted retained pairing config; `save` calls must be serialized so latest invocation wins |
+| `clientInfo` | JSON-RPC `initialize`                     | Web client name/version/default label                          | Native product name/version/device label without branching in shared code                                                |
+
+The adapter object is immutable for the lifetime of a mounted root. Switching
+platform objects in place is unsupported; remount the root instead. Shared UI
+must not branch on `platform.kind`. A platform difference belongs in a port
+implementation or, when it changes product behavior, in a new explicit
+capability contract.
+
+## Import graphs
+
+### Web Remote
+
+```text
+mobileRemoteEntry.tsx
+  -> getBrowserMobileRemotePlatform()
+  -> captureInitialPairingIntent() before asynchronous startup
+  -> I18nextProvider
+  -> MobileRemoteRoot(platform)
+       -> MobileRemotePlatformProvider
+       -> MobileAuthGate
+       -> MobileRemoteApp
+            -> MobileRemoteProviders
+            -> navigation / transcript / interaction reducers
+
+BrowserMobileRemotePage.tsx
+  -> getBrowserMobileRemotePlatform()
+  -> captureInitialPairingIntent() at lazy-module evaluation
+  -> MobileRemoteRoot(platform)
+```
+
+Only `mobileRemoteEntry.tsx`, `BrowserMobileRemotePage.tsx`, and
+`platform/browser/**` may import the browser adapter. Both Web entries perform
+the security-sensitive capture and URL scrubbing synchronously before mounting
+auth: the standalone entry does so before asynchronous i18n startup, while the
+main-router page does so when its lazy route module is evaluated.
+
+### Tauri iOS target
+
+```text
+Tauri iOS shell / WebView entry
+  -> createIosMobileRemotePlatform(native bridges)
+  -> receive Universal Link or org2remote callback before root bootstrap
+  -> I18nextProvider
+  -> MobileRemoteRoot(platform)
+       -> the same MobileAuthGate, MobileRemoteApp, providers, reducers and UI
+```
+
+The iOS graph must import `MobileRemoteRoot` and `platform/types`; it must not
+import `BrowserMobileRemotePage` or `platform/browser`. Conversely, shared
+Mobile Remote modules must not import the future iOS adapter. This is what
+allows a lightweight Tauri target without compiling the Desktop Rust runtime.
+
+## State machines and stale-result protection
+
+| State owner             | States/epochs                                                                                                     | Valid progress                                                                              | Stale/late handling                                                                                                                     |
+| ----------------------- | ----------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
+| Auth reducer            | `checking`, `signed_out`, `redirecting`, `exchanging`, `signed_in`, `error`; auth generation                      | check/redirect/exchange -> signed in or error; sign-out is immediate in UI                  | Writes are followed by generation checks; sign-out waits for pending authentication, and a new sign-in waits for sign-out cleanup       |
+| Connection projection   | `disconnected`, `connecting`, `connected`, `error` plus orthogonal presence and demo flags; connection generation | load config -> connect -> initialize -> connected; close -> reconnect while visible         | Bootstrap/load and socket callbacks check their generation; a stale socket must still own `socketRef` before its close callback can act |
+| Transcript load reducer | index phase, selected round, per-round body phase; subscription and request generations                           | subscribe -> index/snapshot -> lazy round body; live upserts merge through the same reducer | Wrong session/generation/round/request results are ignored; full snapshots replace baselines                                            |
+| Send lifecycle          | `submitting`, `accepted`, `completed`, `failed`, `cancelled`, `uncertain` keyed by `turnIntentId`                 | optimistic pending round -> Desktop acknowledgement -> authoritative round confirmation     | Definite rejection rolls back; indeterminate transport failure retains the pending item for later EventStore reconciliation             |
+| Permission queue        | FIFO request queue                                                                                                | enqueue notification -> respond/dismiss -> dequeue                                          | A response is sent only for the current head; disconnect clears disposable requests                                                     |
+
+These machines describe separate dimensions. In particular, transport
+presence must not be used as transcript authority, and send completion must not
+be inferred from arbitrary streaming text. Durable Desktop snapshots and
+identity-bearing terminal messages perform reconciliation.
+
+## Error and lifecycle matrix
+
+| Condition                               | Required behavior                                                                                                                                |
+| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
+| OAuth callback replay/missing attempt   | Fail closed; do not exchange a callback without its retained PKCE attempt                                                                        |
+| Permanent auth/session rejection        | Clear the retained auth session and show a non-retryable error                                                                                   |
+| Retryable auth/network error            | Keep enough rotating-token state to retry without replaying a scrubbed callback                                                                  |
+| App hidden                              | Cancel reconnect timers, release the foreground socket, and do not maintain a permanent background connection                                    |
+| App visible with retained active config | Reconnect only when no client is active                                                                                                          |
+| Socket closes after authentication      | Release transient transport, preserve the active configuration, and schedule bounded backoff                                                     |
+| Explicit disconnect/sign-out            | Bump generations before cleanup; connection writes are serialized, sign-out waits for pending auth, and a new sign-in waits for sign-out cleanup |
+| Session or round request races          | Accept only the active session, subscription generation, selected round, and request generation                                                  |
+| Definite send failure                   | Remove that exact `turnIntentId` provisional round                                                                                               |
+| Indeterminate send failure              | Show `uncertain` and retain the provisional round until authoritative replay resolves it                                                         |
+
+The shared owners order storage mutations: the provider serializes connection
+writes, and the auth gate sequences write guards, pending-auth cleanup, and the
+next sign-in. Native adapters must preserve these completion semantics and make
+each individual Keychain/config mutation atomic.
+
+## Wire and compatibility contract
+
+- The relay remains JSON-RPC 2.0 over `ws`/`wss`; the adapter changes socket
+  construction, not method names or payload interpretation.
+- `initialize.protocolVersion` remains `1`. Platform data only supplies
+  `clientInfo` and the default device label.
+- `session/send` continues to carry a unique `turnIntentId`,
+  `turnIntentSource: "mobile_remote"`, and an attachments array.
+- A round index with `turnIntentId` is preferred. Older Desktop builds can be
+  reconciled from the identity on the opening user event in the latest full
+  snapshot; positional and text-only matching remain forbidden.
+- Missing round-history support continues through the existing legacy latest
+  snapshot path. Optional capabilities must be treated as unavailable, not
+  synthesized by an adapter.
+- Browser storage keys and payload shapes remain owned by the existing pure
+  storage helpers; the browser adapter delegates to them rather than defining a
+  parallel format.
+
+No schema generator is introduced by this refactor. The network bytes are
+still produced by `mobileRpcClient.ts` using `JSON.stringify`. Provider tests
+assert the complete `initialize` and `session/send` request objects, including
+platform client identity, capabilities, device label, `turnIntentSource`, and
+attachments.
+
+## Entry-point initialization parity
+
+| Entry                          | Platform constructed             | Pairing/deep link captured before auth                          | i18n ready                       | Shared root                         | Auth -> provider order |
+| ------------------------------ | -------------------------------- | --------------------------------------------------------------- | -------------------------------- | ----------------------------------- | ---------------------- |
+| Standalone Web entry           | Browser singleton                | Yes, synchronously before async i18n                            | Yes                              | Yes                                 | Yes                    |
+| Main-router compatibility page | Browser singleton                | Yes, synchronously at lazy-module evaluation before auth mounts | Supplied by main app             | Yes                                 | Yes                    |
+| Tauri iOS entry (next PR)      | Native adapter                   | Required in the native link handler before mounting             | Required                         | Yes                                 | Yes                    |
+| Unit/component tests           | Explicit browser or test adapter | Seeded directly by the test                                     | Explicit provider where rendered | Yes where integration is under test | Yes                    |
+
+Both Web paths now scrub pairing data before their auth root mounts. The
+standalone path remains the earliest capture because it runs before i18n and
+the rest of the public Mobile Remote bootstrap; the main-router path runs when
+the lazy route module is evaluated.
+
+## Resolver symmetry
+
+| Resolved concern  | Primary source                    | Retained source                                | Required finalization                                              |
+| ----------------- | --------------------------------- | ---------------------------------------------- | ------------------------------------------------------------------ |
+| Auth session      | PKCE callback exchange            | Platform auth store and refresh                | Persist rotated session, then establish server session             |
+| Pairing intent    | Initial opaque link capture       | Platform intent store                          | Consume only after successful account authentication               |
+| Connection config | Explicit `relayUrl` when supplied | User-scoped platform connection store          | Persist through the same platform port before connecting           |
+| Transcript round  | Exact `roundId`/round directory   | Identity-bearing full/live EventStore snapshot | Reconcile only with `turnIntentId`; never by list position or text |
+
+The two auth paths deliberately differ only at acquisition (callback exchange
+versus restore/refresh); both converge on persistence, server-session exchange,
+pairing-intent consumption, and the same signed-in reducer event.
+
+## Ten-layer architecture audit
+
+| Layer                                   | Evidence and verdict                                                                                                                                                                                                                                                                                                                                                                                    |
+| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| 1. Compilation correctness              | `pnpm typecheck` passes after the cross-domain call-site sweep. The targeted Mobile Remote suite passes 30 files / 144 tests, including the 5-test platform-neutral static boundary. No Rust change is in this PR; the future native shell requires its own `cargo check`/iOS build evidence.                                                                                                           |
+| 2. Dead code and structural duplication | The port is reached from both production Web entries, `MobileAuthGate`, `MobileRemoteProviders`, settings, and RPC timers. Browser auth/storage/socket logic exists only in `platform/browser`; the old shared auth client implementation is removed rather than retained as a second path.                                                                                                             |
+| 3. Naming consistency                   | `MobileRemoteRoot`, `BrowserMobileRemotePage`, `MobileRemotePlatform`, and the `runtime`/`auth`/`connection` suffixes describe ownership. Existing external JSON-RPC names are unchanged.                                                                                                                                                                                                               |
+| 4. Semantic overloading                 | `session` means either ORG2 Cloud auth session or Desktop agent session and always carries an `Auth`/RPC context; `generation` is local to auth, connection, subscription, or round request and is not a global revision; `connection` distinguishes persisted `MobileConnectionConfig`, projected `MobileConnectionState`, and the `ConnectionPort`. These distinctions must remain in names and docs. |
+| 5. Default branches                     | Platform selection has no shared default: every root must receive a platform. Capability absence means unavailable, and an initialize response without a permission tier now fails closed to `read_only` rather than silently granting write access.                                                                                                                                                    |
+| 6. Cross-domain leakage                 | Static graph tests prevent the neutral root from reaching browser/Tauri adapters or browser globals. `WebSocket` remains the connection port's structural transport type; this is an explicit WebView-v1 constraint, not a claim of native-socket neutrality.                                                                                                                                           |
+| 7. New-developer clarity                | The root/adapter import diagrams, ownership table, latest-write storage contract, and shell responsibilities are documented here. Shared components do not inspect platform kind.                                                                                                                                                                                                                       |
+| 8. Wire protocol                        | No method/schema rewrite occurs. Platform client identity is the only new `initialize` input. Provider tests assert the complete `initialize` and `session/send` parameter shapes, while RPC tests exercise JSON-RPC serialization and response correlation.                                                                                                                                            |
+| 9. Initialization parity                | Both Web entries capture the pairing intent before auth and converge on `MobileRemoteRoot -> MobileAuthGate -> MobileRemoteApp`. The future native entry must perform its corresponding deep-link capture before the same root.                                                                                                                                                                         |
+| 10. Resolver symmetry                   | Callback and restored auth sessions converge on the same finalization chain; explicit/persisted connection configs converge on the same connect path; pending/authoritative rounds converge only through stable identity. The matrices above document allowed asymmetry.                                                                                                                                |
+
+## Test boundaries
+
+| Boundary                      | Required evidence in this PR or the next owning PR                                                                                                           |
+| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| Pure reducers                 | Auth stale-generation rejection; transcript full/delta replacement, pending-round reconciliation, out-of-order session/round results; permission FIFO        |
+| Platform-neutral import graph | `MobileRemoteRoot` cannot reach `platform/browser`, browser globals, Desktop/Tauri-only modules, or `@tauri-apps/*`                                          |
+| Browser adapter               | PKCE callback rejection/restore, storage delegation, visibility subscription cleanup, timer injection, socket factory and client identity                    |
+| Provider integration          | Connect/initialize, reconnect/unmount cleanup, optimistic send/uncertain failure, exact round confirmation, settings projection without direct storage reads |
+| iOS adapter (next PR)         | Contract tests using Keychain/deep-link/lifecycle fakes, plus a real-device OAuth return and pairing flow                                                    |
+| Release acceptance            | iPhone foreground/background transitions, network loss/recovery, expired login, revoked pairing, loading/empty/error states, Dynamic Type and VoiceOver      |
+
+## Remaining risks and staged ownership
+
+1. **No native implementation is present yet.** This PR establishes the seam;
+   the next PR must add the Tauri iOS target, Keychain-backed auth/connection
+   stores, system-browser callback, Universal Link handling, and adapter
+   conformance tests.
+2. **The shared connection port currently returns DOM `WebSocket`.** This is
+   compatible with the Tauri WebView v1 design. If background/native sockets
+   become necessary, replace it with a minimal socket interface rather than
+   importing a native plugin into shared code.
+3. **Auth and connection stores are asynchronous on native.** The shared
+   provider now serializes connection saves, and the auth gate orders pending
+   authentication, final sign-out cleanup, and subsequent sign-in. The iOS
+   adapter still must make each Keychain/config mutation atomic and must not
+   resolve a write before durable completion.
+4. **`MobileRemoteProviders` remains a large orchestration owner.** This PR
+   deliberately extracts environment dependencies without rewriting the
+   working transcript/send/reconnect state machines. Future decomposition must
+   preserve one dispatcher, the existing generation guards, and the canonical
+   reducers rather than create parallel iOS logic.
+5. **APNs, conditional Desktop keep-awake, encrypted seven-day/50-session/200MB
+   cache, and no-queued-offline-action policy belong to later staged PRs.**
+   They must consume the same durable Desktop identities and must not turn push
+   payloads or cache rows into a second source of transcript truth.
diff --git a/docs/feature-lifecycle-2026-09-02/IosRemoteShell.md b/docs/feature-lifecycle-2026-09-02/IosRemoteShell.md
new file mode 100644
index 0000000000..6d2a0a22fc
--- /dev/null
+++ b/docs/feature-lifecycle-2026-09-02/IosRemoteShell.md
@@ -0,0 +1,38 @@
+# iOS Remote shell lifecycle
+
+## End-to-end path
+
+1. `mobile-native.html` boots `mobileRemoteNativeEntry.tsx`.
+2. The entry creates the Tauri platform adapter before rendering the shared `MobileRemoteRoot`.
+3. Signed-out users start Supabase OAuth with PKCE in the system browser.
+4. `org2remote://auth/callback` is delivered through the warm/cold deep-link adapter, exchanged, and persisted through the app-owned Keychain command boundary.
+5. A pairing deep link or pasted payload is validated by the shared pairing flow and stored in an account-scoped, bounded local desktop inventory.
+6. Selecting a desktop updates the active record and asks the shared provider to reconnect to that desktop.
+
+## State machine
+
+| State               | Entry                                   | Success                                             | Failure/retry                                    | Terminal/cleanup                                   |
+| ------------------- | --------------------------------------- | --------------------------------------------------- | ------------------------------------------------ | -------------------------------------------------- |
+| Checking auth       | App launch or a newer auth intent       | Authenticated or signed out                         | Storage/read error renders the shared auth error | New intent/unmount invalidates the generation      |
+| Opening sign-in     | User chooses GitHub                     | System browser opens                                | Opener rejection renders retryable error         | PKCE attempt stays bounded to the owned secure key |
+| Exchanging callback | Valid auth callback                     | Session saved and root advances                     | Invalid/stale callback renders retryable error   | A newer callback wins; listener remains app-owned  |
+| Awaiting pairing    | Authenticated without an active desktop | Valid pairing creates/selects a local device record | Invalid payload stays on pairing UI              | Inventory is capped and scoped to the account      |
+| Connecting          | Active desktop selected                 | Shared routes/tabs render                           | Existing connection error/retry path             | Foreground socket is released when backgrounded    |
+| Switching desktop   | User activates an inactive row          | Selected desktop becomes active and reconnects      | Inline shared alert; row remains retryable       | Pending state disables concurrent selection        |
+
+## Edge cases covered
+
+- Cold-start and warm auth callbacks
+- Cold-start and warm pairing links
+- Duplicate deep-link delivery
+- Stale auth completion after a newer intent or unmount
+- System-browser opener rejection
+- Ordered concurrent secure writes
+- Account isolation and bounded paired-device history
+- Selection of an inactive paired desktop
+
+## Deferred to later stacked PRs
+
+- Session transcript/tool/file/control surfaces are the next feature layer
+- APNs, background execution, offline queues, and TestFlight rollout are not claimed here
+- Real-device signing, OAuth redirect allowlisting, and foreground/background measurements remain release gates
diff --git a/docs/frontend-ui-audit-2026-09-02/IosRemoteSharedUi.md b/docs/frontend-ui-audit-2026-09-02/IosRemoteSharedUi.md
new file mode 100644
index 0000000000..a09f814b45
--- /dev/null
+++ b/docs/frontend-ui-audit-2026-09-02/IosRemoteSharedUi.md
@@ -0,0 +1,16 @@
+# IosRemoteSharedUi UI audit
+
+| Line                      | Element                                         | Verdict          | Reason                                                                                                                                                                                                                                   | Suggested change                                                                                                                                                                                              |
+| ------------------------- | ----------------------------------------------- | ---------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `DevicesTab.tsx:128`      | Paired-desktop switch control                   | fix              | A raw `<button>` bypassed the shared focus, pressed, disabled, and visual treatments, and its hit area was smaller than the mobile row.                                                                                                  | Resolved with the shared tertiary ghost `Button`, full label-cell width, a 44px minimum hit area, and `aria-current` for the active desktop.                                                                  |
+| `DevicesTab.tsx:132`      | Asynchronous desktop switch feedback            | fix              | The rejection was discarded and repeated taps could issue duplicate switch intents without pending or failure feedback.                                                                                                                  | Resolved with owner-local pending state, disabled concurrent selection, `aria-busy`, the shared loading presentation, and a retryable `InlineAlert` error while leaving connection ownership in the provider. |
+| `DevicesTab.tsx:80`       | Mobile devices scroll surface                   | keep with reason | Uses the established Mobile Remote spacing scale (`px-4`, `py-4`, `gap-5`) and relies on the existing shell/tab-bar ownership for viewport and safe-area layout; there are no arbitrary Tailwind bridge values or hardcoded colors here. | None.                                                                                                                                                                                                         |
+| `DevicesTab.tsx:82`       | This-device summary                             | keep with reason | Reuses `SectionContainer`, `SectionRow`, `HugeiconsIcon`, and `SECTION_VALUE_SMALL_MUTED_CLASSES`; the layout and typography remain aligned with the shared settings surfaces.                                                           | None.                                                                                                                                                                                                         |
+| `DevicesTab.tsx:110`      | Paired-desktop section and empty state          | keep with reason | Reuses `SectionContainer` and the shared `Placeholder` empty variant instead of rebuilding card or empty-state chrome. Standard Tailwind spacing is used rather than arbitrary pixel values.                                             | None.                                                                                                                                                                                                         |
+| `DevicesTab.tsx:138`      | Device icon                                     | keep with reason | Uses `HugeiconsIcon` and marks the decorative laptop icon `aria-hidden`; the 16px icon size matches the existing compact Mobile Remote row treatment.                                                                                    | None.                                                                                                                                                                                                         |
+| `DevicesTab.tsx:155`      | Desktop presence                                | keep with reason | Reuses `StatusDot` and semantic theme classes (`success`, `warning`, and text tokens), with a visible localized status label; no literal color escapes the theme.                                                                        | None.                                                                                                                                                                                                         |
+| `MobileAuthGate.tsx:269`  | Authentication-state presentation               | keep with reason | The gate owns lifecycle/state but delegates every non-signed-in visible state to `MobileAuthScreen`, so the native runtime does not fork authentication UI.                                                                              | None.                                                                                                                                                                                                         |
+| `MobileAuthScreen.tsx:36` | Authentication shell, loading, and error states | keep with reason | Reuses `MobileShell`, `Placeholder`, and `InlineAlert`; loading uses a polite live region and failures use `role=alert`, covering the visible accessibility states without custom modal or spinner scaffolding.                          | None.                                                                                                                                                                                                         |
+| `MobileAuthScreen.tsx:78` | Sign-in action                                  | keep with reason | Uses the shared primary `Button` with a shared icon, full-width layout, native button semantics, and a centered label rather than raw interactive HTML.                                                                                  | None.                                                                                                                                                                                                         |
+
+Verdict totals: **2 fix**, **8 keep with reason**, **0 abstract**.
diff --git a/docs/frontend-ui-audit-2026-09-02/MobileRemotePlatformBoundary.md b/docs/frontend-ui-audit-2026-09-02/MobileRemotePlatformBoundary.md
new file mode 100644
index 0000000000..d45ccb41b6
--- /dev/null
+++ b/docs/frontend-ui-audit-2026-09-02/MobileRemotePlatformBoundary.md
@@ -0,0 +1,11 @@
+# MobileRemotePlatformBoundary UI audit
+
+| Line                                                            | Element                                           | Verdict          | Reason                                                                                                                                                                                                   | Suggested change |
+| --------------------------------------------------------------- | ------------------------------------------------- | ---------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- |
+| `src/modules/MobileRemote/MobileRemoteRoot.tsx:21`              | Cross-platform application root                   | keep with reason | The root adds no visual shell of its own; it composes the existing platform provider, authentication gate, and `MobileRemoteApp`, so Web and Tauri reuse the same rendered component tree.               | None.            |
+| `src/modules/MobileRemote/auth/MobileAuthGate.tsx:241`          | Authentication loading, error, and sign-in states | keep with reason | All non-authenticated phases continue to render the established `MobileAuthScreen`; the platform boundary changes lifecycle dependencies without duplicating authentication UI.                          | None.            |
+| `src/modules/MobileRemote/screens/ConnectingLiveBridge.tsx:62`  | Connecting state                                  | keep with reason | The bridge delegates presentation to the existing `ConnectingScreen` and only moves timer ownership behind the runtime port.                                                                             | None.            |
+| `src/modules/MobileRemote/screens/settings/SettingsTab.tsx:102` | Settings page structure                           | keep with reason | The page continues to use `MobileTopBar`, `InlineBanner`, `SectionContainer`, and `SectionRow`; the diff replaces a storage read with provider state and does not introduce parallel mobile-only chrome. | None.            |
+| `src/modules/MobileRemote/screens/settings/SettingsTab.tsx:183` | Settings value and action rows                    | keep with reason | Values use the shared `SECTION_VALUE_SMALL_MUTED_CLASSES` token and actions use the shared `Button` primitive, preserving the existing desktop-aligned section pattern.                                  | None.            |
+
+Verdict totals: **0 fix**, **5 keep with reason**, **0 abstract**.
diff --git a/docs/performance-audit-2026-09-02/IosRemoteShell.md b/docs/performance-audit-2026-09-02/IosRemoteShell.md
new file mode 100644
index 0000000000..d27326fe81
--- /dev/null
+++ b/docs/performance-audit-2026-09-02/IosRemoteShell.md
@@ -0,0 +1,21 @@
+# iOS Remote shell performance guard
+
+Scope: the native Web Remote entry, Tauri deep-link/auth bridge, account-scoped paired-device storage, and the shared Mobile Remote provider lifecycle.
+
+| Area               | Verdict | Evidence                                                                                                      | Change or reason kept                                                                                                                                          | Verification                                                                                                 |
+| ------------------ | ------- | ------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
+| Background work    | fix     | The Tauri adapter owns one app-lifetime deep-link listener; the shared provider owns the foreground WebSocket | Register the deep-link listener before reading cold-start URLs, dispose it on `pagehide`, and keep the existing foreground socket teardown/reconnect lifecycle | Warm/cold callback, dedupe, and listener-disposal unit tests; real hidden/foreground iOS measurement not run |
+| Memory             | fix     | Warm deep-link dedupe retains a `Map`; paired desktops retain a local account inventory                       | Cap deep links at 16 entries with a 60-second TTL; cap paired desktops at 20; cap native secure values at 64 KiB                                               | Unit tests cover deep-link dedupe/bounds, inventory bounds, and the Rust value bound                         |
+| Scope/isolation    | fix     | Native auth and paired-desktop records are secure-storage keys                                                | Scope device inventory by encoded authenticated user id; allow only owned Keychain keys/prefixes; invalidate stale auth generations on new intent/unmount      | Account-isolation, serialized-write, warm callback, opener-failure, and Rust allowlist tests                 |
+| Rendering/hot path | keep    | Device rows are derived from a bounded inventory and connection snapshot                                      | Reuse the shared `DevicesTab`; no polling, transcript copy, or native-only duplicate store was added                                                           | Component/selector tests and TypeScript typecheck; rendered iPhone measurement not run                       |
+
+Lifecycle matrix:
+
+| Resource                 | Start/active                                                                           | Idle/hidden                                                              | Identity transition                                                                               | Shutdown                                                                   |
+| ------------------------ | -------------------------------------------------------------------------------------- | ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------- |
+| Deep-link subscription   | Created once before cold-start URL hydration                                           | Event-driven; no timer or polling                                        | New callback increments the auth intent generation so late work cannot commit                     | Unsubscribed on `pagehide`; pending auth is generation-guarded             |
+| OAuth/PKCE secure state  | Written for an explicit sign-in attempt                                                | No background work                                                       | Auth callback consumes the matching attempt; sign-out clears the session; storage is app-owned    | No retained process/resource                                               |
+| Paired desktop inventory | Read or updated on pairing/selection                                                   | No scan or refresh loop                                                  | Key includes authenticated user id; selection writes are serialized                               | Bounded persisted data remains intentionally available for the next launch |
+| Relay WebSocket          | Existing shared provider opens the selected desktop connection while the app is active | Existing provider disconnects on background and reconnects on foreground | Generation/state ownership prevents an old connection from becoming current after a device switch | Existing provider cleanup closes the socket                                |
+
+Performance verdict: **blocked**. The bounded ownership and unit-level lifecycle invariants pass, but this host has no usable `iphoneos` SDK, so visible idle, hidden idle, foreground reconnect, CPU/RSS, listener count after repeated open/close, and real-device account-switch measurements could not run. Those iOS cells remain required before the stacked PR can be marked ready.
diff --git a/docs/performance-audit-2026-09-02/MobileRemotePlatformBoundary.md b/docs/performance-audit-2026-09-02/MobileRemotePlatformBoundary.md
new file mode 100644
index 0000000000..7a961ad724
--- /dev/null
+++ b/docs/performance-audit-2026-09-02/MobileRemotePlatformBoundary.md
@@ -0,0 +1,51 @@
+# MobileRemote platform-boundary performance audit
+
+## Scope
+
+This audit follows the changed production path from `mobileRemoteEntry.tsx` / `BrowserMobileRemotePage.tsx` through `MobileRemoteRoot`, `MobileAuthGate`, `MobileRemoteProviders`, `mobileRpcClient`, and the browser platform adapter. It reviews ownership transferred behind the platform ports; it does not claim real-device iOS evidence because the native adapter and shell are not part of this diff.
+
+## Required performance output
+
+| Area               | Verdict | Evidence                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Change or reason kept                                                                                                                                                                                                                                                    | Verification                                                                                                                                                                                                                                                                                                     |
+| ------------------ | ------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Background work    | keep    | `MobileAuthGate.tsx:199-233` owns one expiry timeout and one visibility subscription; `MobileRemoteProviders.tsx:748-763` owns one exponential-backoff reconnect timeout. The provider visibility handler closes the current transport while hidden and starts one reconnect on foreground (`MobileRemoteProviders.tsx:1107-1128`).                                                                                                                                                                                                                                         | Timers, visibility, and transport creation are centralized behind the platform ports. Hidden/background has no retained socket or reconnect timer; foreground revalidates once.                                                                                          | `MobileRemoteProviders.test.ts:576` proves hidden closes the socket, foreground creates exactly one replacement, and a delayed close from the retired socket cannot disturb the replacement. Auth timer visibility behavior is also unit-covered.                                                                |
+| Memory             | keep    | RPC pending calls are capped at 128 and cleared on response, timeout, socket close, or client close (`mobileRpcClient.ts:29-46`, `mobileRpcClient.ts:57-125`). Transcript items, ready round bodies, and local pending rounds are bounded by existing reducer limits. Refresh coalescing retains at most one in-flight token and one queued session (`MobileRemoteProviders.tsx:583-612`).                                                                                                                                                                                  | These limits and terminal cleanup remain appropriate across platform adapters. The pre-existing permission FIFO is not changed by this diff, but it remains uncapped and should be handled in the permissions feature rather than silently folded into this boundary PR. | Existing reducer and provider tests cover transcript bounds/coalescing; RPC bound/flush behavior remains unit-covered. No heap measurement was run.                                                                                                                                                              |
+| Scope/isolation    | keep    | Browser connection persistence remains user-scoped. Saves are serialized through `connectionWriteChainRef` (`MobileRemoteProviders.tsx:326`, `MobileRemoteProviders.tsx:351-360`), connect checks its generation after persistence, and bootstrap load checks its captured generation (`MobileRemoteProviders.tsx:767-828`, `MobileRemoteProviders.tsx:1130-1162`). Auth refresh checks generation around async commits, while sign-out waits for the old operation and performs the authoritative cleanup before a later sign-in can start (`MobileAuthGate.tsx:100-197`). | The final user intent now wins for async Keychain/storage adapters and old auth/connection episodes cannot project into a newer identity or endpoint.                                                                                                                    | `MobileRemoteProviders.test.ts:623` covers slow bootstrap versus explicit connect; `MobileRemoteProviders.test.ts:685` covers deferred connect-save followed by disconnect-save. `MobileAuthGate.test.ts:432` reaches the server-session side effect before logout and proves final storage/server cleanup wins. |
+| Rendering/hot path | keep    | The platform objects are singleton/stable in the browser adapter; notification handling still filters snapshots by active session and coalesces full refreshes. `connectionConfig` changes only on bootstrap/connect/disconnect, so adding it to the existing context does not add per-delta churn.                                                                                                                                                                                                                                                                         | Keep the platform object stable for the lifetime of the native root. No new polling, render-time sort, eager history load, or duplicate provider was introduced.                                                                                                         | Existing provider tests prove stable session lifecycle callbacks and single queued refresh behavior. No React profiler measurement was run because this diff does not claim a rendering improvement.                                                                                                             |
+
+## Lifecycle matrix
+
+| Resource                       | Start / active                                                      | Idle / visible                               | Hidden / background                                            | Offline / retry                                                                             | Identity or endpoint switch                                                                                                           | Shutdown / unmount                                                      | Verdict |
+| ------------------------------ | ------------------------------------------------------------------- | -------------------------------------------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | ------- |
+| Auth expiry timeout            | Scheduled only for a signed-in, visible session                     | At most one timeout                          | Cleared on visibility change                                   | A visible return performs one force refresh                                                 | Generation guards UI/commit boundaries; logout cleanup is sequenced after the old operation                                           | Timer and visibility listener are removed                               | keep    |
+| Auth in-flight operation       | Single-flight through `inFlightRef`                                 | No repeated work while one operation runs    | No new hidden refresh is started                               | Retry is user/visibility driven                                                             | Logout unmounts protected UI immediately, waits for the old operation, then clears local/server auth; later sign-in waits for cleanup | Promise settlement cannot overwrite the final logout intent             | keep    |
+| Relay WebSocket                | One socket per connection generation                                | Push-driven; no polling                      | Visibility handler closes the socket and clears reconnect work | One recursive backoff timeout, capped at 30 seconds plus jitter; foreground reconnects once | `releaseTransport` invalidates subscription/round generations and close handling verifies socket identity                             | Client/socket close and pending RPC flush run on provider cleanup       | keep    |
+| Reconnect timeout              | Created only after authenticated transport loss or failed reconnect | At most one due to `clearReconnectTimer`     | Cleared/not scheduled while hidden                             | Exponential backoff, no overlap                                                             | Generation rejects a superseded connection attempt                                                                                    | Cleared during disconnect, demo transition, and unmount                 | keep    |
+| RPC pending map                | Entry per outbound call                                             | Maximum 128, 15-second timeout               | Follows socket behavior                                        | Flushed on socket close                                                                     | Old client is closed on transport replacement                                                                                         | Flushed on client close                                                 | keep    |
+| Transcript refresh coordinator | Push invalidation starts one active-session refresh                 | One in-flight plus one latest queued session | Transport cleanup stops further hidden notifications           | Generation/client/session checks reject old results                                         | Cleared by `releaseTransport`; subscription generation advances                                                                       | Cleared during transport cleanup                                        | keep    |
+| Connection persistence         | Bootstrap load; serialized save on connect/disconnect               | No polling                                   | No periodic work                                               | N/A                                                                                         | User-scoped write chain preserves invocation order; generation rejects late load/connect projection                                   | No retained timer/listener; write chain retains only pending operations | keep    |
+| Transcript memory              | Active session index plus bounded ready bodies/items                | Bounds are enforced by reducers              | Retained for foreground return                                 | Reset on explicit disconnect; refreshed after reconnect                                     | Provider is scoped by authenticated root                                                                                              | Reset with provider unmount                                             | keep    |
+
+## Timer, subscription, socket, and cache cleanup
+
+| Resource                       | Owner                                                         | Bound / cadence                                                                           | Cleanup path                                                                                                                                                         | Remaining issue                                                                                                     |
+| ------------------------------ | ------------------------------------------------------------- | ----------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- |
+| Authentication expiry timer    | `MobileAuthGate`                                              | One timeout, scheduled to refresh before expiry                                           | State change, hidden transition, and effect cleanup call `clearTimeout`                                                                                              | No issue found.                                                                                                     |
+| Visibility listeners           | Browser runtime adapter, subscribed by auth gate and provider | Two listeners for one mounted root                                                        | Both hooks call the adapter unsubscribe function on unmount                                                                                                          | Correct, assuming the injected native platform object remains stable.                                               |
+| Demo connection timer          | `ConnectingLiveBridge`                                        | One 900 ms timeout                                                                        | Effect cleanup clears it                                                                                                                                             | No issue found.                                                                                                     |
+| Reconnect timer                | `MobileRemoteProviders`                                       | One recursive timeout; 1-30 s exponential backoff plus less than 500 ms jitter            | Cleared before reschedule, hidden return handling, mode/connection changes, and unmount                                                                              | No overlap found.                                                                                                   |
+| Relay socket and RPC listeners | `MobileRemoteProviders` / `mobileRpcClient`                   | One active foreground transport; 128 pending RPC maximum                                  | `releaseTransport(true)` runs on hidden, disconnect, replacement, and unmount; it unsubscribes notification handling, closes client/socket, and flushes pending RPCs | No issue found.                                                                                                     |
+| Transcript refresh state       | `MobileRemoteProviders`                                       | One in-flight refresh plus one queued session id                                          | Cleared on transport release; generation/client/session checks reject late projection                                                                                | No issue found.                                                                                                     |
+| Transcript cache               | Transcript reducer                                            | 8 ready round bodies, 8 local pending rounds, bounded items per body                      | Evicted by reducer limits; reset on disconnect/provider disposal                                                                                                     | No persistent offline cache is introduced by this PR.                                                               |
+| Connection/auth storage        | Platform adapter plus provider/auth coordinators              | One auth record and scoped connection record per authenticated user; writes are sequenced | Cleared on sign-out/disconnect; stale load and connect projection are generation-guarded                                                                             | No issue found in the shared boundary. Native Keychain behavior remains a later adapter's own verification surface. |
+
+## Evidence and uncovered cells
+
+- Code inspection confirms resource owners, caps, backoff, generation guards, and cleanup paths listed above.
+- The focused lifecycle suite passed: `pnpm test -- src/modules/MobileRemote/auth/MobileAuthGate.test.ts src/modules/MobileRemote/app/MobileRemoteProviders.test.ts src/modules/MobileRemote/connection/mobileRpcClient.test.ts src/modules/MobileRemote/screens/ConnectingLiveBridge.test.ts --reporter=dot` — 4 files, 37 tests.
+- That suite covers the authentication expiry timer and post-commit logout race, hidden socket release and single foreground reconnect, delayed old-socket close, slow bootstrap rejection, serialized persistence, RPC pending cleanup/bounds, provider callback stability, and connection-timer cleanup.
+- `git diff --check` passed after the lifecycle changes and reports.
+- Not run for this boundary-only audit: native iOS background/foreground transitions, real Keychain behavior, CPU/RSS measurements, account switch, endpoint switch, and real-device shutdown/relaunch. Those cells belong to the later native-adapter and TestFlight PRs and are not claimed here.
+- Provider/raw-source and dual-machine matrices are not applicable to this adapter-boundary diff; it does not change desktop history ingestion, provider identity, upload, or download semantics.
+
+Performance verdict: **pass**. For the shared platform-boundary scope, background work is foreground-only, timers and RPC state are bounded and disposable, transcript refresh is single-flight/coalesced, and async auth/connection persistence has explicit final-write ordering with targeted race coverage. Native iOS lifecycle, Keychain, and real-device measurements remain hard gates for their later implementation PRs rather than unsupported claims of this Web/shared-core PR.
diff --git a/package.json b/package.json
index d645c82617..331cd2ca4a 100644
--- a/package.json
+++ b/package.json
@@ -7,6 +7,7 @@
     "prepare": "husky install",
     "postinstall": "node scripts/setup/postinstall.mjs",
     "dev:frontend": "node scripts/dev/webpack-server.js",
+    "dev:mobile-native": "ORGII_MOBILE_REMOTE_NATIVE=true node scripts/dev/webpack-server.js",
     "dev:frontend:rspack": "node scripts/dev/rspack-server.js",
     "dev:frontend:light": "ORGII_LIGHT_DEV=true FAST_DEV=true DEV_SOURCEMAPS=false node scripts/dev/webpack-server.js",
     "dev:cpu-monitor": "bash scripts/dev/cpu-monitor.sh",
@@ -14,6 +15,7 @@
     "diag:memory": "node tools/org2-diagnostics/cli.mjs memory",
     "diag:test": "node --test tools/org2-diagnostics/test/*.test.mjs",
     "build": "webpack --config config/webpack.config.js --mode production",
+    "build:mobile-native": "ORGII_MOBILE_REMOTE_NATIVE=true webpack --config config/webpack.config.js --mode production",
     "download": "python3 scripts/tools/download.py",
     "download:sidecars": "python3 scripts/tools/download_sidecars.py",
     "tauri:dev": "node scripts/dev/tauri-launcher.cjs",
@@ -30,6 +32,9 @@
     "tauri:build:fast:local": "node scripts/tauri/build-fast-local.cjs",
     "tauri:build:fast:open": "node scripts/tauri/build-fast-open.cjs",
     "tauri:build:release": "node scripts/tauri/run-with-features.cjs build",
+    "tauri:ios:init": "cd apps/remote-ios && ../../node_modules/.bin/tauri ios init --ci",
+    "tauri:ios:dev": "cd apps/remote-ios && ../../node_modules/.bin/tauri ios dev",
+    "tauri:ios:build": "cd apps/remote-ios && ../../node_modules/.bin/tauri ios build",
     "clean:cache": "node scripts/dev/clean-cache-if-large.js --node-cache",
     "clean:auto": "node scripts/dev/clean-cache-if-large.js",
     "clean:report": "node scripts/dev/clean-cache-if-large.js --report",
diff --git a/src/i18n/locales/en/mobileRemote.json b/src/i18n/locales/en/mobileRemote.json
index b4a3aec4e8..48f775dca7 100644
--- a/src/i18n/locales/en/mobileRemote.json
+++ b/src/i18n/locales/en/mobileRemote.json
@@ -48,6 +48,8 @@
     "online": "Online",
     "offline": "Offline",
     "unknown": "Connecting",
+    "switchTo": "Switch to {{name}}",
+    "switchFailed": "Could not switch desktops",
     "emptyDesktops": "No paired desktops"
   },
   "settings": {
diff --git a/src/i18n/locales/zh/mobileRemote.json b/src/i18n/locales/zh/mobileRemote.json
index 8cdc5a2e34..3b54fceb22 100644
--- a/src/i18n/locales/zh/mobileRemote.json
+++ b/src/i18n/locales/zh/mobileRemote.json
@@ -48,6 +48,8 @@
     "online": "在线",
     "offline": "离线",
     "unknown": "连接中",
+    "switchTo": "切换到 {{name}}",
+    "switchFailed": "无法切换桌面",
     "emptyDesktops": "暂无配对桌面"
   },
   "settings": {
diff --git a/src/mobileRemoteEntry.tsx b/src/mobileRemoteEntry.tsx
index 4ab7d383b5..2525cb5b9b 100644
--- a/src/mobileRemoteEntry.tsx
+++ b/src/mobileRemoteEntry.tsx
@@ -1,20 +1,20 @@
 import { createRoot } from "react-dom/client";
 import { I18nextProvider } from "react-i18next";
 
-import { MobileRemoteApp } from "@src/modules/MobileRemote/MobileRemoteApp";
-import { MobileAuthGate } from "@src/modules/MobileRemote/auth/MobileAuthGate";
-import { captureOpaquePairingIntent } from "@src/modules/MobileRemote/auth/mobileAuthIntent";
+import { MobileRemoteRoot } from "@src/modules/MobileRemote/MobileRemoteRoot";
 import {
   mobileI18n,
   mobileI18nReady,
 } from "@src/modules/MobileRemote/mobileI18n";
+import { getBrowserMobileRemotePlatform } from "@src/modules/MobileRemote/platform/browser";
 
 import "./index.scss";
 import "./modules/MobileRemote/mobileViewport.scss";
 
 // Pairing payloads contain credentials. Capture them opaquely and scrub the
 // address bar synchronously, before i18n or any other async startup work.
-captureOpaquePairingIntent(window.location, window.history);
+const platform = getBrowserMobileRemotePlatform();
+platform.auth.captureInitialPairingIntent();
 
 function showStartupError(error: unknown): void {
   const root = document.getElementById("root");
@@ -44,14 +44,7 @@ async function mountMobileRemote(): Promise<void> {
 
   createRoot(root).render(
     <I18nextProvider i18n={mobileI18n}>
-      <MobileAuthGate>
-        {({ authUserId, recoveredPairingIntent }) => (
-          <MobileRemoteApp
-            authUserId={authUserId}
-            recoveredPairingIntent={recoveredPairingIntent}
-          />
-        )}
-      </MobileAuthGate>
+      <MobileRemoteRoot platform={platform} />
     </I18nextProvider>
   );
 }
diff --git a/src/mobileRemoteNativeEntry.tsx b/src/mobileRemoteNativeEntry.tsx
new file mode 100644
index 0000000000..ad7832324c
--- /dev/null
+++ b/src/mobileRemoteNativeEntry.tsx
@@ -0,0 +1,63 @@
+import { createRoot } from "react-dom/client";
+import { I18nextProvider } from "react-i18next";
+
+import { MobileRemoteRoot } from "@src/modules/MobileRemote/MobileRemoteRoot";
+import {
+  mobileI18n,
+  mobileI18nReady,
+} from "@src/modules/MobileRemote/mobileI18n";
+import { createTauriMobileRemotePlatform } from "@src/modules/MobileRemote/platform/tauri";
+
+import "./index.scss";
+import "./modules/MobileRemote/mobileViewport.scss";
+
+function showStartupError(error: unknown): void {
+  const root = document.getElementById("root");
+  if (!root) return;
+
+  const panel = document.createElement("main");
+  panel.setAttribute("role", "alert");
+  panel.style.cssText =
+    "min-height:100dvh;display:grid;place-items:center;padding:24px;background:var(--color-bg-2,#f4f4f4);color:var(--color-text-1,#202124);font:14px/1.5 -apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif";
+
+  const message = document.createElement("p");
+  message.textContent =
+    error instanceof Error
+      ? `ORG2 Remote could not start: ${error.message}`
+      : "ORG2 Remote could not start";
+  panel.appendChild(message);
+  root.replaceChildren(panel);
+}
+
+async function mountMobileRemote(): Promise<void> {
+  const [platform] = await Promise.all([
+    createTauriMobileRemotePlatform(),
+    mobileI18nReady,
+  ]);
+
+  const root = document.getElementById("root");
+  if (!root) throw new Error("Missing application root");
+
+  if (process.env.NODE_ENV === "development") {
+    const { MobileRemoteDevelopmentRoot, resolveDevelopmentPairingUserId } =
+      await import("./modules/MobileRemote/dev/MobileRemoteDevelopmentRoot");
+    const pairingUserId = await resolveDevelopmentPairingUserId(platform);
+    createRoot(root).render(
+      <I18nextProvider i18n={mobileI18n}>
+        <MobileRemoteDevelopmentRoot
+          platform={platform}
+          pairingUserId={pairingUserId}
+        />
+      </I18nextProvider>
+    );
+    return;
+  }
+
+  createRoot(root).render(
+    <I18nextProvider i18n={mobileI18n}>
+      <MobileRemoteRoot platform={platform} />
+    </I18nextProvider>
+  );
+}
+
+void mountMobileRemote().catch(showStartupError);
diff --git a/src/modules/AppLogin/index.test.ts b/src/modules/AppLogin/index.test.ts
index 1d9f3927e3..ab442bf54d 100644
--- a/src/modules/AppLogin/index.test.ts
+++ b/src/modules/AppLogin/index.test.ts
@@ -151,7 +151,7 @@ describe("LoginPage return target", () => {
     expect(sessionStorage.getItem("login_redirect")).toBe(
       "/orgii/mobile?relay=wss%3A%2F%2Frelay.example"
     );
-    expect(consumeOpaquePairingIntent()).toBe(
+    expect(consumeOpaquePairingIntent(sessionStorage)).toBe(
       "http://localhost:3000/orgii/mobile?relay=wss%3A%2F%2Frelay.example#pair=device-intent"
     );
     expect(mocks.login).toHaveBeenCalledOnce();
diff --git a/src/modules/AppLogin/index.tsx b/src/modules/AppLogin/index.tsx
index 20e9dd3fdd..3fe66bfb9d 100644
--- a/src/modules/AppLogin/index.tsx
+++ b/src/modules/AppLogin/index.tsx
@@ -274,7 +274,11 @@ const LoginPage: React.FC = () => {
   const [returnLocation] = useState<LoginReturnLocation | undefined>(() => {
     const from = locationState?.from;
     return from?.pathname === MOBILE_REMOTE_ROUTE.path
-      ? captureOpaquePairingReturnLocation(from, window.location.href)
+      ? captureOpaquePairingReturnLocation(
+          from,
+          window.location.href,
+          sessionStorage
+        )
       : from;
   });
   const redirectPath = resolveLoginRedirectPath(returnLocation);
diff --git a/src/modules/MobileRemote/BrowserMobileRemotePage.tsx b/src/modules/MobileRemote/BrowserMobileRemotePage.tsx
new file mode 100644
index 0000000000..a54030a942
--- /dev/null
+++ b/src/modules/MobileRemote/BrowserMobileRemotePage.tsx
@@ -0,0 +1,14 @@
+import React from "react";
+
+import { MobileRemoteRoot } from "./MobileRemoteRoot";
+import { getBrowserMobileRemotePlatform } from "./platform/browser";
+
+const browserPlatform = getBrowserMobileRemotePlatform();
+browserPlatform.auth.captureInitialPairingIntent();
+
+/** Browser/main-router adapter. Native shells inject their own platform port. */
+export default function BrowserMobileRemotePage() {
+  return <MobileRemoteRoot platform={browserPlatform} />;
+}
+
+BrowserMobileRemotePage.displayName = "BrowserMobileRemotePage";
diff --git a/src/modules/MobileRemote/MobileRemoteApp.test.ts b/src/modules/MobileRemote/MobileRemoteApp.test.ts
index 74a257599f..48c9e71b8a 100644
--- a/src/modules/MobileRemote/MobileRemoteApp.test.ts
+++ b/src/modules/MobileRemote/MobileRemoteApp.test.ts
@@ -7,6 +7,18 @@ import i18n, { i18nReady } from "@src/i18n";
 import enMobileRemote from "@src/i18n/locales/en/mobileRemote.json";
 
 import { MobileRemoteApp } from "./MobileRemoteApp";
+import { MobileRemotePlatformProvider } from "./platform";
+import { createBrowserMobileRemotePlatform } from "./platform/browser";
+
+const TestMobileRemotePlatformProvider =
+  MobileRemotePlatformProvider as React.ComponentType<
+    React.PropsWithChildren<
+      Omit<
+        React.ComponentProps<typeof MobileRemotePlatformProvider>,
+        "children"
+      >
+    >
+  >;
 
 describe("MobileRemoteApp", () => {
   it("renders welcome markup within providers", async () => {
@@ -17,7 +29,11 @@ describe("MobileRemoteApp", () => {
       React.createElement(
         I18nextProvider,
         { i18n },
-        React.createElement(MobileRemoteApp, { authUserId: "user-a" })
+        React.createElement(
+          TestMobileRemotePlatformProvider,
+          { platform: createBrowserMobileRemotePlatform() },
+          React.createElement(MobileRemoteApp, { authUserId: "user-a" })
+        )
       )
     );
     expect(markup).toContain("Mobile Remote");
diff --git a/src/modules/MobileRemote/MobileRemoteApp.tsx b/src/modules/MobileRemote/MobileRemoteApp.tsx
index b8c8f20c03..958f5adfa2 100644
--- a/src/modules/MobileRemote/MobileRemoteApp.tsx
+++ b/src/modules/MobileRemote/MobileRemoteApp.tsx
@@ -7,7 +7,6 @@ import React, {
 } from "react";
 
 import { MobileRemoteProviders, useMobileRemote } from "./app";
-import { MobileAuthGate } from "./auth/MobileAuthGate";
 import { MobileShell } from "./components/MobileShell";
 import { MobileTabBar } from "./components/MobileTabBar";
 import { StopConfirmModal } from "./components/modals/StopConfirmModal";
@@ -51,7 +50,7 @@ function MobileRemoteRoutes({
     createInitialMobileRemoteNavState
   );
   const [stopConfirming, setStopConfirming] = useState(false);
-  const consumedPairingLinkRef = useRef(false);
+  const consumedPairingLinkRef = useRef<string | null>(null);
 
   const showTabBar =
     nav.screen === "sessions" &&
@@ -76,8 +75,13 @@ function MobileRemoteRoutes({
   }, [connection.demoMode, connection.status, nav.screen]);
 
   useEffect(() => {
-    if (consumedPairingLinkRef.current || !recoveredPairingIntent) return;
-    consumedPairingLinkRef.current = true;
+    if (
+      !recoveredPairingIntent ||
+      consumedPairingLinkRef.current === recoveredPairingIntent
+    ) {
+      return;
+    }
+    consumedPairingLinkRef.current = recoveredPairingIntent;
     const parsed = parseMobileRemoteWsUrl(recoveredPairingIntent);
     if (parsed.ok) {
       dispatch({ type: "accept_pairing", ...parsed });
@@ -115,7 +119,7 @@ function MobileRemoteRoutes({
   }, [nav.selectedSessionId, stopSession]);
 
   const handleConnectionRetry = useCallback(() => {
-    disconnect();
+    void disconnect();
     dispatch({ type: "back_to_welcome" });
   }, [disconnect]);
 
@@ -239,21 +243,3 @@ export function MobileRemoteApp({
 }
 
 MobileRemoteApp.displayName = "MobileRemoteApp";
-
-/** Main-router compatibility wrapper. The standalone entry uses the same gate explicitly. */
-function AuthenticatedMobileRemotePage() {
-  return (
-    <MobileAuthGate>
-      {({ authUserId, recoveredPairingIntent }) => (
-        <MobileRemoteApp
-          authUserId={authUserId}
-          recoveredPairingIntent={recoveredPairingIntent}
-        />
-      )}
-    </MobileAuthGate>
-  );
-}
-
-AuthenticatedMobileRemotePage.displayName = "AuthenticatedMobileRemotePage";
-
-export default AuthenticatedMobileRemotePage;
diff --git a/src/modules/MobileRemote/MobileRemoteRoot.tsx b/src/modules/MobileRemote/MobileRemoteRoot.tsx
new file mode 100644
index 0000000000..2584552610
--- /dev/null
+++ b/src/modules/MobileRemote/MobileRemoteRoot.tsx
@@ -0,0 +1,35 @@
+import React from "react";
+
+import { MobileRemoteApp } from "./MobileRemoteApp";
+import { MobileAuthGate } from "./auth/MobileAuthGate";
+import {
+  type MobileRemotePlatform,
+  MobileRemotePlatformProvider,
+} from "./platform";
+
+export interface MobileRemoteRootProps {
+  platform: MobileRemotePlatform;
+  relayUrl?: string;
+}
+
+/** Platform-neutral authenticated root shared by the Web and Tauri shells. */
+export function MobileRemoteRoot({
+  platform,
+  relayUrl,
+}: MobileRemoteRootProps) {
+  return (
+    <MobileRemotePlatformProvider platform={platform}>
+      <MobileAuthGate>
+        {({ authUserId, recoveredPairingIntent }) => (
+          <MobileRemoteApp
+            authUserId={authUserId}
+            recoveredPairingIntent={recoveredPairingIntent}
+            relayUrl={relayUrl}
+          />
+        )}
+      </MobileAuthGate>
+    </MobileRemotePlatformProvider>
+  );
+}
+
+MobileRemoteRoot.displayName = "MobileRemoteRoot";
diff --git a/src/modules/MobileRemote/app/MobileRemoteProviders.test.ts b/src/modules/MobileRemote/app/MobileRemoteProviders.test.ts
index a13660ff1d..15887a5d82 100644
--- a/src/modules/MobileRemote/app/MobileRemoteProviders.test.ts
+++ b/src/modules/MobileRemote/app/MobileRemoteProviders.test.ts
@@ -12,6 +12,8 @@ import {
   vi,
 } from "vitest";
 
+import { MobileRemotePlatformProvider } from "../platform";
+import { createBrowserMobileRemotePlatform } from "../platform/browser";
 import {
   type MobileRemoteContextValue,
   MobileRemoteProviders,
@@ -22,6 +24,15 @@ import {
 const TestMobileRemoteProviders = MobileRemoteProviders as React.ComponentType<
   React.PropsWithChildren<Omit<MobileRemoteProvidersProps, "children">>
 >;
+const TestMobileRemotePlatformProvider =
+  MobileRemotePlatformProvider as React.ComponentType<
+    React.PropsWithChildren<
+      Omit<
+        React.ComponentProps<typeof MobileRemotePlatformProvider>,
+        "children"
+      >
+    >
+  >;
 
 const mocks = vi.hoisted(() => ({
   call: vi.fn(),
@@ -38,7 +49,7 @@ vi.mock("../connection/mobileRpcClient", async (importOriginal) => {
     await importOriginal<typeof import("../connection/mobileRpcClient")>();
   return {
     ...original,
-    createMobileRpcClient: () => ({
+    createMobileRpcClient: (socket: WebSocket) => ({
       call: mocks.call,
       notify: vi.fn(),
       onNotification: (
@@ -51,7 +62,10 @@ vi.mock("../connection/mobileRpcClient", async (importOriginal) => {
           }
         };
       },
-      close: mocks.close,
+      close: () => {
+        mocks.close();
+        socket.close();
+      },
       readyState: 1,
     }),
   };
@@ -60,11 +74,22 @@ vi.mock("../connection/mobileRpcClient", async (importOriginal) => {
 class FakeWebSocket extends EventTarget {
   static readonly OPEN = 1;
   static readonly CLOSED = 3;
+  static instances: FakeWebSocket[] = [];
+  static deferCloseEvents = false;
+  static pendingCloseEvents: FakeWebSocket[] = [];
+
+  static flushCloseEvents() {
+    const pending = FakeWebSocket.pendingCloseEvents.splice(0);
+    for (const socket of pending) {
+      socket.dispatchEvent(new Event("close"));
+    }
+  }
 
   readyState = 0;
 
   constructor(_url: string) {
     super();
+    FakeWebSocket.instances.push(this);
     queueMicrotask(() => {
       this.readyState = FakeWebSocket.OPEN;
       this.dispatchEvent(new Event("open"));
@@ -74,7 +99,11 @@ class FakeWebSocket extends EventTarget {
   close() {
     if (this.readyState === FakeWebSocket.CLOSED) return;
     this.readyState = FakeWebSocket.CLOSED;
-    this.dispatchEvent(new Event("close"));
+    if (FakeWebSocket.deferCloseEvents) {
+      FakeWebSocket.pendingCloseEvents.push(this);
+    } else {
+      this.dispatchEvent(new Event("close"));
+    }
   }
 }
 
@@ -116,6 +145,10 @@ describe("MobileRemoteProviders send lifecycle", () => {
     mocks.sendParams = null;
     mocks.externalRoundId = null;
     mocks.notificationHandler = null;
+    mocks.close.mockReset();
+    FakeWebSocket.instances = [];
+    FakeWebSocket.deferCloseEvents = false;
+    FakeWebSocket.pendingCloseEvents = [];
     mocks.call
       .mockReset()
       .mockImplementation(
@@ -190,13 +223,17 @@ describe("MobileRemoteProviders send lifecycle", () => {
     await act(async () => {
       root.render(
         React.createElement(
-          TestMobileRemoteProviders,
-          {
-            authUserId: "user-a",
-            demoByDefault: false,
-            suppressInitialBootstrap: true,
-          },
-          React.createElement(Probe)
+          TestMobileRemotePlatformProvider,
+          { platform: createBrowserMobileRemotePlatform() },
+          React.createElement(
+            TestMobileRemoteProviders,
+            {
+              authUserId: "user-a",
+              demoByDefault: false,
+              suppressInitialBootstrap: true,
+            },
+            React.createElement(Probe)
+          )
         )
       );
     });
@@ -221,6 +258,15 @@ describe("MobileRemoteProviders send lifecycle", () => {
     Reflect.deleteProperty(actEnvironment, "IS_REACT_ACT_ENVIRONMENT");
   });
 
+  it("keeps the browser platform identity in the initialize wire shape", () => {
+    expect(mocks.call).toHaveBeenCalledWith("initialize", {
+      protocolVersion: 1,
+      clientInfo: { name: "orgii-mobile-pwa", version: "0.1.0" },
+      capabilities: { interactions: ["permission"], streaming: true },
+      deviceLabel: "ORGII Mobile",
+    });
+  });
+
   it("renders the user message before the send RPC is acknowledged and deduplicates its echo", async () => {
     let pendingSend!: Promise<void>;
     await act(async () => {
@@ -236,6 +282,13 @@ describe("MobileRemoteProviders send lifecycle", () => {
       }),
     ]);
     const turnIntentId = String(mocks.sendParams?.turnIntentId);
+    expect(mocks.sendParams).toEqual({
+      sessionId: "session-a",
+      content: "visible now",
+      turnIntentId,
+      turnIntentSource: "mobile_remote",
+      attachments: [],
+    });
 
     await act(async () => {
       sendResult.resolve({ execution: "native_agent" });
@@ -530,6 +583,240 @@ describe("MobileRemoteProviders send lifecycle", () => {
     expect(latestContext?.unsubscribeSession).toBe(initialUnsubscribe);
   });
 
+  it("releases the socket while hidden and reconnects only once when visible", async () => {
+    let documentHidden = false;
+    Object.defineProperty(document, "hidden", {
+      configurable: true,
+      get: () => documentHidden,
+    });
+
+    try {
+      const initialSocket = FakeWebSocket.instances[0];
+      expect(initialSocket?.readyState).toBe(FakeWebSocket.OPEN);
+
+      FakeWebSocket.deferCloseEvents = true;
+      documentHidden = true;
+      act(() => document.dispatchEvent(new Event("visibilitychange")));
+
+      expect(initialSocket?.readyState).toBe(FakeWebSocket.CLOSED);
+      expect(latestContext?.connection.presence).toBe("offline");
+
+      documentHidden = false;
+      await act(async () => {
+        document.dispatchEvent(new Event("visibilitychange"));
+        await Promise.resolve();
+        await Promise.resolve();
+      });
+
+      expect(FakeWebSocket.instances).toHaveLength(2);
+      expect(FakeWebSocket.instances[1]?.readyState).toBe(FakeWebSocket.OPEN);
+
+      await act(async () => {
+        FakeWebSocket.flushCloseEvents();
+        await Promise.resolve();
+      });
+      expect(FakeWebSocket.instances).toHaveLength(2);
+      expect(FakeWebSocket.instances[1]?.readyState).toBe(FakeWebSocket.OPEN);
+
+      await act(async () => {
+        document.dispatchEvent(new Event("visibilitychange"));
+        await Promise.resolve();
+      });
+      expect(FakeWebSocket.instances).toHaveLength(2);
+    } finally {
+      FakeWebSocket.deferCloseEvents = false;
+      FakeWebSocket.flushCloseEvents();
+      Reflect.deleteProperty(document, "hidden");
+    }
+  });
+
+  it("does not let a slow bootstrap load replace an explicit connection", async () => {
+    act(() => root.unmount());
+    root = createRoot(container);
+    latestContext = null;
+    FakeWebSocket.instances = [];
+
+    const bootstrap = deferred<{
+      wsUrl: string;
+      deviceToken: string;
+    } | null>();
+    const browserPlatform = createBrowserMobileRemotePlatform();
+    const load = vi.fn(() => bootstrap.promise);
+    const save = vi.fn().mockResolvedValue(undefined);
+    const platform = {
+      ...browserPlatform,
+      connection: {
+        ...browserPlatform.connection,
+        load,
+        save,
+      },
+    };
+
+    await act(async () => {
+      root.render(
+        React.createElement(
+          TestMobileRemotePlatformProvider,
+          { platform },
+          React.createElement(
+            TestMobileRemoteProviders,
+            { authUserId: "user-a", demoByDefault: false },
+            React.createElement(Probe)
+          )
+        )
+      );
+      await Promise.resolve();
+    });
+    expect(load).toHaveBeenCalledWith("user-a");
+
+    const explicitConfig = {
+      wsUrl: "wss://new.example.test/v1/mobile/ws",
+      deviceToken: "new-device-token",
+    };
+    await act(async () => {
+      await latestContext?.connectLive(explicitConfig);
+    });
+
+    await act(async () => {
+      bootstrap.resolve({
+        wsUrl: "wss://stale.example.test/v1/mobile/ws",
+        deviceToken: "stale-device-token",
+      });
+      await bootstrap.promise;
+      await Promise.resolve();
+    });
+
+    expect(
+      (latestContext as MobileRemoteContextValue | null)?.connectionConfig
+    ).toEqual(explicitConfig);
+    expect(FakeWebSocket.instances).toHaveLength(1);
+    expect(save).toHaveBeenCalledTimes(1);
+    expect(save).toHaveBeenCalledWith("user-a", explicitConfig);
+  });
+
+  it("serializes connection persistence so the latest disconnect wins", async () => {
+    act(() => root.unmount());
+    root = createRoot(container);
+    latestContext = null;
+
+    const firstSave = deferred<void>();
+    const secondSave = deferred<void>();
+    const browserPlatform = createBrowserMobileRemotePlatform();
+    const save = vi
+      .fn()
+      .mockImplementationOnce(() => firstSave.promise)
+      .mockImplementationOnce(() => secondSave.promise);
+    const platform = {
+      ...browserPlatform,
+      connection: {
+        ...browserPlatform.connection,
+        save,
+      },
+    };
+
+    await act(async () => {
+      root.render(
+        React.createElement(
+          TestMobileRemotePlatformProvider,
+          { platform },
+          React.createElement(
+            TestMobileRemoteProviders,
+            {
+              authUserId: "user-a",
+              demoByDefault: false,
+              suppressInitialBootstrap: true,
+            },
+            React.createElement(Probe)
+          )
+        )
+      );
+      await Promise.resolve();
+    });
+
+    const config = {
+      wsUrl: "wss://relay.example.test/v1/mobile/ws",
+      deviceToken: "device-token",
+    };
+    let connectPromise!: Promise<void>;
+    let disconnectPromise!: Promise<void>;
+    await act(async () => {
+      connectPromise = latestContext!.connectLive(config);
+      void connectPromise.catch(() => undefined);
+      await Promise.resolve();
+      disconnectPromise = latestContext!.disconnect();
+      await Promise.resolve();
+    });
+
+    expect(save).toHaveBeenCalledTimes(1);
+    expect(save).toHaveBeenNthCalledWith(1, "user-a", config);
+
+    await act(async () => {
+      firstSave.resolve();
+      await firstSave.promise;
+      await Promise.resolve();
+    });
+    expect(save).toHaveBeenCalledTimes(2);
+    expect(save).toHaveBeenNthCalledWith(2, "user-a", null);
+
+    await act(async () => {
+      secondSave.resolve();
+      await secondSave.promise;
+      await disconnectPromise;
+    });
+    await expect(connectPromise).rejects.toThrow("Connection was superseded");
+    expect(
+      (latestContext as MobileRemoteContextValue | null)?.connectionConfig
+    ).toBeNull();
+  });
+
+  it("fails closed to read-only when initialize omits the access tier", async () => {
+    act(() => root.unmount());
+    root = createRoot(container);
+    latestContext = null;
+    mocks.call.mockImplementation(
+      (method: string, params?: Record<string, unknown>) => {
+        if (method === "initialize") {
+          return Promise.resolve({ protocolVersion: 1 });
+        }
+        if (method === "session/list") {
+          return Promise.resolve({ sessions: [] });
+        }
+        return Promise.resolve({ sessionId: params?.sessionId });
+      }
+    );
+
+    await act(async () => {
+      root.render(
+        React.createElement(
+          TestMobileRemotePlatformProvider,
+          { platform: createBrowserMobileRemotePlatform() },
+          React.createElement(
+            TestMobileRemoteProviders,
+            {
+              authUserId: "user-a",
+              demoByDefault: false,
+              suppressInitialBootstrap: true,
+            },
+            React.createElement(Probe)
+          )
+        )
+      );
+      await Promise.resolve();
+    });
+    await act(async () => {
+      await latestContext?.connectLive({
+        wsUrl: "wss://relay.example.test/v1/mobile/ws",
+      });
+    });
+
+    expect(
+      (latestContext as MobileRemoteContextValue | null)?.connection
+    ).toMatchObject({
+      status: "connected",
+      presence: "online",
+      tier: "read_only",
+    });
+  });
+
   it.each([
     {
       name: "CLI status",
diff --git a/src/modules/MobileRemote/app/MobileRemoteProviders.tsx b/src/modules/MobileRemote/app/MobileRemoteProviders.tsx
index f0490ffbe3..df18dd11e8 100644
--- a/src/modules/MobileRemote/app/MobileRemoteProviders.tsx
+++ b/src/modules/MobileRemote/app/MobileRemoteProviders.tsx
@@ -11,10 +11,6 @@ import React, {
 import type { PermissionSheetRequest } from "@src/components/PermissionPrompt";
 
 import { buildMobileWsUrl } from "../connection/buildMobileWsUrl";
-import {
-  loadScopedMobileConnectionConfig,
-  saveScopedMobileConnectionConfig,
-} from "../connection/mobileConnectionStorage";
 import {
   type MobileRpcClient,
   createMobileRpcClient,
@@ -26,6 +22,7 @@ import type {
   MobileConnectionConfig,
   MobileConnectionState,
   MobileModelOption,
+  MobilePairedDesktopSummary,
   MobileSendAttachment,
   MobileSessionModelConfig,
   MobileSessionModelState,
@@ -71,6 +68,8 @@ import {
   type TranscriptItem,
   demoTranscriptItems,
 } from "../lib/transcriptReducer";
+import { useMobileRemotePlatform } from "../platform";
+import type { MobileRemoteRuntimePort } from "../platform/types";
 
 const CONNECT_TIMEOUT_MS = 15_000;
 const PAIRING_TIMEOUT_MS = 130_000;
@@ -121,9 +120,12 @@ export interface MobileRemoteContextValue {
   /** True while an answer is on the wire; the sheet must stay disabled. */
   permissionSubmitting: boolean;
   rpc: MobileRpcClient | null;
+  connectionConfig: MobileConnectionConfig | null;
+  pairedDesktops: MobilePairedDesktopSummary[];
   connectLive: (config: MobileConnectionConfig) => Promise<void>;
+  switchPairedDesktop: (desktopId: string) => Promise<void>;
   enterDemoMode: () => void;
-  disconnect: () => void;
+  disconnect: () => Promise<void>;
   refreshSessions: () => Promise<void>;
   subscribeSession: (sessionId: string) => Promise<void>;
   unsubscribeSession: () => Promise<void>;
@@ -187,10 +189,13 @@ function isIndeterminateTransportError(error: unknown): boolean {
   );
 }
 
-function waitForSocketOpen(socket: WebSocket): Promise<void> {
+function waitForSocketOpen(
+  socket: WebSocket,
+  runtime: Pick<MobileRemoteRuntimePort, "setTimeout" | "clearTimeout">
+): Promise<void> {
   return new Promise((resolve, reject) => {
     const cleanup = () => {
-      window.clearTimeout(timeoutId);
+      runtime.clearTimeout(timeoutId);
       socket.removeEventListener("open", onOpen);
       socket.removeEventListener("error", onError);
       socket.removeEventListener("close", onClose);
@@ -207,7 +212,7 @@ function waitForSocketOpen(socket: WebSocket): Promise<void> {
       cleanup();
       reject(new Error("WebSocket closed before connecting"));
     };
-    const timeoutId = window.setTimeout(() => {
+    const timeoutId = runtime.setTimeout(() => {
       cleanup();
       reject(new Error("WebSocket connection timed out"));
     }, CONNECT_TIMEOUT_MS);
@@ -219,12 +224,13 @@ function waitForSocketOpen(socket: WebSocket): Promise<void> {
 
 function waitForPairingApproval(
   socket: WebSocket,
-  client: MobileRpcClient
+  client: MobileRpcClient,
+  runtime: Pick<MobileRemoteRuntimePort, "setTimeout" | "clearTimeout">
 ): Promise<void> {
   return new Promise((resolve, reject) => {
     let unsubscribe: () => void = () => undefined;
     const cleanup = () => {
-      window.clearTimeout(timeoutId);
+      runtime.clearTimeout(timeoutId);
       unsubscribe();
       socket.removeEventListener("close", onClose);
     };
@@ -232,7 +238,7 @@ function waitForPairingApproval(
       cleanup();
       reject(new Error("Connection closed before pairing was approved"));
     };
-    const timeoutId = window.setTimeout(() => {
+    const timeoutId = runtime.setTimeout(() => {
       cleanup();
       reject(new Error("Pairing confirmation expired"));
     }, PAIRING_TIMEOUT_MS);
@@ -246,12 +252,12 @@ function waitForPairingApproval(
   });
 }
 
-function reconnectDelay(attempt: number): number {
+function reconnectDelay(attempt: number, random: () => number): number {
   const seconds = Math.min(
     MAX_RECONNECT_SECONDS,
     2 ** Math.min(Math.max(attempt - 1, 0), 5)
   );
-  return seconds * 1_000 + Math.floor(Math.random() * 500);
+  return seconds * 1_000 + Math.floor(random() * 500);
 }
 
 function record(value: unknown): Record<string, unknown> | undefined {
@@ -348,6 +354,7 @@ export function MobileRemoteProviders({
   demoByDefault = true,
   suppressInitialBootstrap = false,
 }: MobileRemoteProvidersProps) {
+  const platform = useMobileRemotePlatform();
   const clientRef = useRef<MobileRpcClient | null>(null);
   const socketRef = useRef<WebSocket | null>(null);
   const activeSessionRef = useRef<string | null>(null);
@@ -365,6 +372,7 @@ export function MobileRemoteProviders({
   const queuedRefreshSessionRef = useRef<string | null>(null);
   const reconnectAttemptRef = useRef(0);
   const reconnectTimerRef = useRef<number | null>(null);
+  const connectionWriteChainRef = useRef<Promise<void>>(Promise.resolve());
   const refreshSubscribedSessionRef = useRef<(sessionId: string) => void>(
     () => undefined
   );
@@ -377,6 +385,11 @@ export function MobileRemoteProviders({
     presence: "unknown",
     demoMode: demoByDefault && !suppressInitialBootstrap,
   });
+  const [connectionConfig, setConnectionConfig] =
+    useState<MobileConnectionConfig | null>(null);
+  const [pairedDesktops, setPairedDesktops] = useState<
+    MobilePairedDesktopSummary[]
+  >([]);
   const connectionRef = useRef(connection);
   connectionRef.current = connection;
   const [sessions, setSessions] = useState<MobileSessionRow[]>([]);
@@ -393,6 +406,20 @@ export function MobileRemoteProviders({
     useState<MobileSessionModelState>(INITIAL_SESSION_MODEL_STATE);
   const sessionModelRequestRef = useRef(0);
 
+  const persistConnection = useCallback(
+    (config: MobileConnectionConfig | null) => {
+      const operation = connectionWriteChainRef.current.then(async () => {
+        await platform.connection.save(authUserId, config);
+        setPairedDesktops(
+          await platform.connection.listPairedDesktops(authUserId)
+        );
+      });
+      connectionWriteChainRef.current = operation.catch(() => undefined);
+      return operation;
+    },
+    [authUserId, platform.connection]
+  );
+
   const requestSessionList = useCallback(async (client: MobileRpcClient) => {
     const requestGeneration = ++sessionListGenerationRef.current;
     const list = await client.call<{ sessions?: MobileSessionRow[] }>(
@@ -409,10 +436,10 @@ export function MobileRemoteProviders({
 
   const clearReconnectTimer = useCallback(() => {
     if (reconnectTimerRef.current != null) {
-      window.clearTimeout(reconnectTimerRef.current);
+      platform.runtime.clearTimeout(reconnectTimerRef.current);
       reconnectTimerRef.current = null;
     }
-  }, []);
+  }, [platform.runtime]);
 
   const releaseTransport = useCallback((close: boolean) => {
     // Invalidate every in-flight subscribe/refresh from the old socket before
@@ -438,6 +465,7 @@ export function MobileRemoteProviders({
     sessionListGenerationRef.current += 1;
     clearReconnectTimer();
     activeConfigRef.current = null;
+    setConnectionConfig(null);
     releaseTransport(true);
     setConnection({
       status: "connected",
@@ -646,33 +674,40 @@ export function MobileRemoteProviders({
   const establishConnection = useCallback(
     async (config: MobileConnectionConfig, generation: number) => {
       const deviceLabel =
-        config.deviceLabel?.trim() || resolveMobileDeviceLabel();
+        config.deviceLabel?.trim() ||
+        platform.clientInfo.defaultDeviceLabel ||
+        resolveMobileDeviceLabel();
       const transportConfig = { ...config, deviceLabel };
-      const socket = new WebSocket(buildMobileWsUrl(transportConfig));
+      const socket = platform.connection.createSocket(
+        buildMobileWsUrl(transportConfig)
+      );
       let authenticated = false;
       let intentionalClose = false;
       socketRef.current = socket;
 
       try {
-        await waitForSocketOpen(socket);
+        await waitForSocketOpen(socket, platform.runtime);
         if (generation !== generationRef.current) {
           intentionalClose = true;
           socket.close();
           throw new Error("Connection was superseded");
         }
 
-        const client = createMobileRpcClient(socket);
+        const client = createMobileRpcClient(socket, platform.runtime);
         clientRef.current = client;
         unsubscribeRpcRef.current = client.onNotification(
           handleRpcNotification
         );
         if (config.pairingCode) {
-          await waitForPairingApproval(socket, client);
+          await waitForPairingApproval(socket, client, platform.runtime);
         }
 
         const init = await client.call<InitializeResult>("initialize", {
           protocolVersion: 1,
-          clientInfo: { name: "orgii-mobile-pwa", version: "0.1.0" },
+          clientInfo: {
+            name: platform.clientInfo.name,
+            version: platform.clientInfo.version,
+          },
           capabilities: { interactions: ["permission"], streaming: true },
           deviceLabel,
         });
@@ -689,7 +724,9 @@ export function MobileRemoteProviders({
           presence: "online",
           desktopId: init.desktopId ?? config.desktopId,
           desktopName: init.desktopName ?? DEMO_DESKTOP_NAME,
-          tier: init.tier ?? "full",
+          // Authorization is server-owned. An older/incomplete initialize
+          // response must never silently upgrade the phone to write access.
+          tier: init.tier ?? "read_only",
           capabilities: init.capabilities,
           demoMode: false,
         });
@@ -713,7 +750,8 @@ export function MobileRemoteProviders({
             if (
               intentionalClose ||
               !authenticated ||
-              generation !== generationRef.current
+              generation !== generationRef.current ||
+              socketRef.current !== socket
             ) {
               return;
             }
@@ -736,6 +774,9 @@ export function MobileRemoteProviders({
     },
     [
       handleRpcNotification,
+      platform.clientInfo,
+      platform.connection,
+      platform.runtime,
       releaseTransport,
       requestSessionList,
       requestSessionSnapshot,
@@ -744,7 +785,9 @@ export function MobileRemoteProviders({
 
   const runReconnect = useCallback(
     async (config: MobileConnectionConfig, generation: number) => {
-      if (generation !== generationRef.current || document.hidden) return;
+      if (generation !== generationRef.current || platform.runtime.isHidden()) {
+        return;
+      }
       setConnection((prev) => ({
         ...prev,
         status: "connecting",
@@ -764,20 +807,25 @@ export function MobileRemoteProviders({
         scheduleReconnectRef.current(config, generation);
       }
     },
-    [establishConnection]
+    [establishConnection, platform.runtime]
   );
 
   const scheduleReconnect = useCallback(
     (config: MobileConnectionConfig, generation: number) => {
       clearReconnectTimer();
-      if (generation !== generationRef.current || document.hidden) return;
+      if (generation !== generationRef.current || platform.runtime.isHidden()) {
+        return;
+      }
       reconnectAttemptRef.current += 1;
-      reconnectTimerRef.current = window.setTimeout(() => {
-        reconnectTimerRef.current = null;
-        void runReconnect(config, generation);
-      }, reconnectDelay(reconnectAttemptRef.current));
+      reconnectTimerRef.current = platform.runtime.setTimeout(
+        () => {
+          reconnectTimerRef.current = null;
+          void runReconnect(config, generation);
+        },
+        reconnectDelay(reconnectAttemptRef.current, platform.runtime.random)
+      );
     },
-    [clearReconnectTimer, runReconnect]
+    [clearReconnectTimer, platform.runtime, runReconnect]
   );
   scheduleReconnectRef.current = scheduleReconnect;
 
@@ -789,7 +837,11 @@ export function MobileRemoteProviders({
       releaseTransport(true);
       reconnectAttemptRef.current = 0;
       activeConfigRef.current = config;
-      saveScopedMobileConnectionConfig(authUserId, config);
+      setConnectionConfig(config);
+      await persistConnection(config);
+      if (generation !== generationRef.current) {
+        throw new Error("Connection was superseded");
+      }
       setConnection((prev) => ({
         ...prev,
         status: "connecting",
@@ -811,15 +863,20 @@ export function MobileRemoteProviders({
         throw error;
       }
     },
-    [authUserId, clearReconnectTimer, establishConnection, releaseTransport]
+    [
+      clearReconnectTimer,
+      establishConnection,
+      persistConnection,
+      releaseTransport,
+    ]
   );
 
-  const disconnect = useCallback(() => {
+  const disconnect = useCallback(async () => {
     generationRef.current += 1;
     sessionListGenerationRef.current += 1;
     clearReconnectTimer();
     activeConfigRef.current = null;
-    saveScopedMobileConnectionConfig(authUserId, null);
+    setConnectionConfig(null);
     releaseTransport(true);
     activeSessionRef.current = null;
     subscriptionGenerationRef.current += 1;
@@ -832,7 +889,20 @@ export function MobileRemoteProviders({
     setTranscript(createInitialTranscriptLoadState());
     setSendStatus(null);
     setInteractionQueue({ queue: [] });
-  }, [authUserId, clearReconnectTimer, releaseTransport]);
+    await persistConnection(null);
+  }, [clearReconnectTimer, persistConnection, releaseTransport]);
+
+  const switchPairedDesktop = useCallback(
+    async (desktopId: string) => {
+      const config = await platform.connection.selectPairedDesktop(
+        authUserId,
+        desktopId
+      );
+      if (!config) throw new Error("Paired desktop is unavailable");
+      await connectLive(config);
+    },
+    [authUserId, connectLive, platform.connection]
+  );
 
   const refreshSessions = useCallback(async () => {
     if (connection.demoMode) {
@@ -1128,7 +1198,7 @@ export function MobileRemoteProviders({
     ) => {
       const trimmed = content.trim();
       if (!trimmed && attachments.length === 0) return;
-      const turnIntentId = crypto.randomUUID();
+      const turnIntentId = platform.runtime.randomUUID();
       const optimisticPreview =
         trimmed ||
         attachments
@@ -1201,7 +1271,12 @@ export function MobileRemoteProviders({
         throw error;
       }
     },
-    [connection.demoMode, requireWritableClient, sessionModel.config?.model]
+    [
+      connection.demoMode,
+      platform.runtime,
+      requireWritableClient,
+      sessionModel.config?.model,
+    ]
   );
 
   const openSessionFileInDesktop = useCallback(
@@ -1289,15 +1364,25 @@ export function MobileRemoteProviders({
   useEffect(() => {
     const handleVisible = () => {
       const config = activeConfigRef.current;
-      if (!document.hidden && config && !clientRef.current) {
-        clearReconnectTimer();
+      clearReconnectTimer();
+      if (platform.runtime.isHidden()) {
+        if (clientRef.current || socketRef.current) {
+          releaseTransport(true);
+          setConnection((previous) => ({
+            ...previous,
+            status: "connecting",
+            presence: "offline",
+            error: undefined,
+          }));
+        }
+        return;
+      }
+      if (config && !clientRef.current) {
         void runReconnect(config, generationRef.current);
       }
     };
-    document.addEventListener("visibilitychange", handleVisible);
-    return () =>
-      document.removeEventListener("visibilitychange", handleVisible);
-  }, [clearReconnectTimer, runReconnect]);
+    return platform.runtime.subscribeVisibility(handleVisible);
+  }, [clearReconnectTimer, platform.runtime, releaseTransport, runReconnect]);
 
   useEffect(() => {
     if (suppressInitialBootstrap) {
@@ -1307,15 +1392,28 @@ export function MobileRemoteProviders({
         releaseTransport(true);
       };
     }
-    const config = relayUrl?.trim()
-      ? { wsUrl: relayUrl.trim() }
-      : loadScopedMobileConnectionConfig(authUserId);
-    if (config?.wsUrl || config?.host) {
-      void connectLive(config).catch(() => undefined);
-    } else if (demoByDefault) {
-      enterDemoMode();
-    }
+    let disposed = false;
+    const bootstrapGeneration = generationRef.current;
+    void (async () => {
+      const inventoryPromise =
+        platform.connection.listPairedDesktops(authUserId);
+      const config = relayUrl?.trim()
+        ? { wsUrl: relayUrl.trim() }
+        : await platform.connection.load(authUserId);
+      const inventory = await inventoryPromise;
+      if (disposed || bootstrapGeneration !== generationRef.current) {
+        return;
+      }
+      setPairedDesktops(inventory);
+      setConnectionConfig(config);
+      if (config?.wsUrl || config?.host) {
+        await connectLive(config).catch(() => undefined);
+      } else if (demoByDefault) {
+        enterDemoMode();
+      }
+    })();
     return () => {
+      disposed = true;
       generationRef.current += 1;
       clearReconnectTimer();
       releaseTransport(true);
@@ -1350,7 +1448,10 @@ export function MobileRemoteProviders({
       permissionQueueDepth,
       permissionSubmitting,
       rpc: clientRef.current,
+      connectionConfig,
+      pairedDesktops,
       connectLive,
+      switchPairedDesktop,
       enterDemoMode,
       disconnect,
       refreshSessions,
@@ -1370,6 +1471,7 @@ export function MobileRemoteProviders({
     [
       activePermission,
       connectLive,
+      connectionConfig,
       connection,
       dismissPermissionHead,
       disconnect,
@@ -1379,6 +1481,7 @@ export function MobileRemoteProviders({
       refreshSessionModel,
       refreshSessions,
       openSessionFileInDesktop,
+      pairedDesktops,
       respondPermission,
       retrySelectedRound,
       selectRound,
@@ -1389,6 +1492,7 @@ export function MobileRemoteProviders({
       setSessionModel,
       stopSession,
       subscribeSession,
+      switchPairedDesktop,
       transcript.rounds,
       transcript.roundsComplete,
       transcript.selectedRoundId,
diff --git a/src/modules/MobileRemote/auth/MobileAuthContext.tsx b/src/modules/MobileRemote/auth/MobileAuthContext.tsx
index 2f6c93c639..ba129f7acc 100644
--- a/src/modules/MobileRemote/auth/MobileAuthContext.tsx
+++ b/src/modules/MobileRemote/auth/MobileAuthContext.tsx
@@ -5,6 +5,8 @@ import type { MobileAuthSession } from "./mobileAuthState";
 export interface MobileAuthContextValue {
   session: MobileAuthSession;
   signOut: () => void;
+  /** True only for the compile-time guarded local native development shell. */
+  isDevelopmentBypass: boolean;
 }
 
 export const MobileAuthContext = createContext<MobileAuthContextValue | null>(
diff --git a/src/modules/MobileRemote/auth/MobileAuthGate.test.ts b/src/modules/MobileRemote/auth/MobileAuthGate.test.ts
index 4bfdbad680..cd62406420 100644
--- a/src/modules/MobileRemote/auth/MobileAuthGate.test.ts
+++ b/src/modules/MobileRemote/auth/MobileAuthGate.test.ts
@@ -12,6 +12,9 @@ import {
   vi,
 } from "vitest";
 
+import { MobileRemotePlatformProvider } from "../platform";
+import { createBrowserMobileRemotePlatform } from "../platform/browser";
+import type { MobileRemotePlatform } from "../platform/types";
 import { useMobileAuth } from "./MobileAuthContext";
 import {
   MobileAuthGate,
@@ -38,6 +41,16 @@ const reactActEnvironment = globalThis as typeof globalThis & {
   IS_REACT_ACT_ENVIRONMENT?: boolean;
 };
 
+const TestMobileRemotePlatformProvider =
+  MobileRemotePlatformProvider as React.ComponentType<
+    React.PropsWithChildren<
+      Omit<
+        React.ComponentProps<typeof MobileRemotePlatformProvider>,
+        "children"
+      >
+    >
+  >;
+
 const session: MobileAuthSession = {
   kind: "org2_cloud",
   supabaseUrl: "https://fpdyejwbiriliuqqcjoy.supabase.co",
@@ -59,12 +72,19 @@ function deferred<T>() {
 
 function createGate(
   authClient: MobileAuthClient,
-  children: (props: MobileAuthGateRenderProps) => React.ReactNode
+  children: (props: MobileAuthGateRenderProps) => React.ReactNode,
+  props: Pick<MobileAuthGateProps, "navigate"> = {},
+  platform: MobileRemotePlatform = createBrowserMobileRemotePlatform()
 ) {
-  return React.createElement(MobileAuthGate, {
-    client: authClient,
-    children,
-  } satisfies MobileAuthGateProps);
+  return React.createElement(
+    TestMobileRemotePlatformProvider,
+    { platform },
+    React.createElement(MobileAuthGate, {
+      client: authClient,
+      children,
+      ...props,
+    } satisfies MobileAuthGateProps)
+  );
 }
 
 describe("MobileAuthGate", () => {
@@ -145,11 +165,11 @@ describe("MobileAuthGate", () => {
 
     await act(async () => {
       root.render(
-        React.createElement(MobileAuthGate, {
-          client: authClient,
-          navigate,
-          children: () => React.createElement("div", null, "protected"),
-        } satisfies MobileAuthGateProps)
+        createGate(
+          authClient,
+          () => React.createElement("div", null, "protected"),
+          { navigate }
+        )
       );
       await Promise.resolve();
     });
@@ -170,6 +190,34 @@ describe("MobileAuthGate", () => {
     expect(navigate).toHaveBeenCalledWith("https://login.example");
   });
 
+  it("surfaces a system-browser handoff failure instead of staying redirecting", async () => {
+    const authClient = client();
+    const navigate = vi
+      .fn()
+      .mockRejectedValue(new Error("System browser is unavailable"));
+
+    await act(async () => {
+      root.render(
+        createGate(
+          authClient,
+          () => React.createElement("div", null, "protected"),
+          { navigate }
+        )
+      );
+      await Promise.resolve();
+    });
+
+    await act(async () => {
+      container.querySelector("button")?.click();
+      await Promise.resolve();
+      await Promise.resolve();
+    });
+
+    expect(container.textContent).toContain("System browser is unavailable");
+    expect(container.textContent).toContain("auth.retry");
+    expect(container.textContent).not.toContain("protected");
+  });
+
   it("fails closed without a retry loop when the callback attempt is missing", async () => {
     window.history.replaceState(
       null,
@@ -207,9 +255,10 @@ describe("MobileAuthGate", () => {
         pathname: "/orgii/mobile",
         search: "",
       } as Location,
-      window.history
+      window.history,
+      sessionStorage
     );
-    beginMobileOAuthAttempt("attempt-a");
+    beginMobileOAuthAttempt("attempt-a", sessionStorage);
     window.history.replaceState(
       null,
       "",
@@ -248,11 +297,98 @@ describe("MobileAuthGate", () => {
       authUserId: "user-a",
       recoveredPairingIntent: pairingUrl,
     });
-    expect(consumeOpaquePairingIntent()).toBeNull();
+    expect(consumeOpaquePairingIntent(sessionStorage)).toBeNull();
+  });
+
+  it("reauthenticates a mounted signed-in gate when a warm pairing intent arrives", async () => {
+    writeMobileAuthSession(session, localStorage);
+    const authClient = client();
+    const browserPlatform = createBrowserMobileRemotePlatform();
+    let intentListener: (() => void) | null = null;
+    let pendingPairing: string | null = null;
+    const platform: MobileRemotePlatform = {
+      ...browserPlatform,
+      auth: {
+        ...browserPlatform.auth,
+        subscribeIntent(listener) {
+          intentListener = () => listener("pairing");
+          return () => {
+            intentListener = null;
+          };
+        },
+        async consumePairingIntent() {
+          const value = pendingPairing;
+          pendingPairing = null;
+          return value;
+        },
+      },
+    };
+    let latestProps: MobileAuthGateRenderProps | null = null;
+
+    await act(async () => {
+      root.render(
+        createGate(
+          authClient,
+          (props) => {
+            latestProps = props;
+            return React.createElement("div", null, "protected");
+          },
+          {},
+          platform
+        )
+      );
+      await Promise.resolve();
+      await Promise.resolve();
+    });
+    expect(latestProps).toMatchObject({ recoveredPairingIntent: null });
+
+    pendingPairing = "org2remote://pair#pair=second-device";
+    await act(async () => {
+      intentListener?.();
+      await Promise.resolve();
+      await Promise.resolve();
+      await Promise.resolve();
+    });
+
+    expect(authClient.restoreSession).toHaveBeenCalledTimes(2);
+    expect(latestProps).toMatchObject({
+      recoveredPairingIntent: "org2remote://pair#pair=second-device",
+    });
+  });
+
+  it("releases the warm-intent subscription when the auth gate unmounts", async () => {
+    const authClient = client();
+    const browserPlatform = createBrowserMobileRemotePlatform();
+    const unsubscribe = vi.fn();
+    const subscribeIntent = vi.fn(() => unsubscribe);
+    const platform: MobileRemotePlatform = {
+      ...browserPlatform,
+      auth: {
+        ...browserPlatform.auth,
+        subscribeIntent,
+      },
+    };
+
+    await act(async () => {
+      root.render(
+        createGate(
+          authClient,
+          () => React.createElement("div", null, "protected"),
+          {},
+          platform
+        )
+      );
+      await Promise.resolve();
+    });
+    expect(subscribeIntent).toHaveBeenCalledOnce();
+
+    act(() => root.unmount());
+    expect(unsubscribe).toHaveBeenCalledOnce();
+    root = createRoot(container);
   });
 
   it("unmounts protected content synchronously before remote logout finishes", async () => {
-    writeMobileAuthSession(session);
+    writeMobileAuthSession(session, localStorage);
     const logout = deferred<void>();
     const authClient = client({ signOut: vi.fn(() => logout.promise) });
 
@@ -270,6 +406,10 @@ describe("MobileAuthGate", () => {
 
     act(() => container.querySelector("button")?.click());
     expect(container.textContent).not.toContain("protected");
+    await act(async () => {
+      await Promise.resolve();
+      await Promise.resolve();
+    });
     expect(authClient.signOut).toHaveBeenCalledWith(session);
   });
 
@@ -277,7 +417,7 @@ describe("MobileAuthGate", () => {
     vi.useFakeTimers();
     const setTimeoutSpy = vi.spyOn(window, "setTimeout");
     const clearTimeoutSpy = vi.spyOn(window, "clearTimeout");
-    writeMobileAuthSession(session);
+    writeMobileAuthSession(session, localStorage);
     const authClient = client();
 
     await act(async () => {
@@ -316,7 +456,7 @@ describe("MobileAuthGate", () => {
   });
 
   it("fails closed and clears the persisted session after a permanent server rejection", async () => {
-    writeMobileAuthSession(session);
+    writeMobileAuthSession(session, localStorage);
     const authClient = client({
       establishServerSession: vi
         .fn()
@@ -341,7 +481,7 @@ describe("MobileAuthGate", () => {
   });
 
   it("fails closed when a visible refresh permanently expires", async () => {
-    writeMobileAuthSession(session);
+    writeMobileAuthSession(session, localStorage);
     const restoreSession = vi
       .fn()
       .mockResolvedValueOnce(session)
@@ -371,7 +511,7 @@ describe("MobileAuthGate", () => {
   });
 
   it("does not let a refresh completion resurrect content after logout", async () => {
-    writeMobileAuthSession(session);
+    writeMobileAuthSession(session, localStorage);
     const refresh = deferred<MobileAuthSession>();
     const restoreSession = vi
       .fn()
@@ -388,9 +528,17 @@ describe("MobileAuthGate", () => {
       root.render(createGate(authClient, () => React.createElement(Protected)));
       await Promise.resolve();
       await Promise.resolve();
+      await Promise.resolve();
+      await Promise.resolve();
     });
 
+    documentHidden = true;
     act(() => document.dispatchEvent(new Event("visibilitychange")));
+    documentHidden = false;
+    await act(async () => {
+      document.dispatchEvent(new Event("visibilitychange"));
+      await Promise.resolve();
+    });
     expect(restoreSession).toHaveBeenCalledTimes(2);
     act(() => container.querySelector("button")?.click());
     expect(container.textContent).not.toContain("protected");
@@ -399,10 +547,86 @@ describe("MobileAuthGate", () => {
       refresh.resolve({ ...session, accessToken: "stale-access" });
       await refresh.promise;
       await Promise.resolve();
+      await Promise.resolve();
     });
 
     expect(container.textContent).not.toContain("protected");
     expect(localStorage.getItem("orgii:org2-cloud-v1:auth")).toBeNull();
     expect(authClient.establishServerSession).toHaveBeenCalledTimes(1);
   });
+
+  it("makes sign-out cleanup win after refresh reaches the server-session side effect", async () => {
+    writeMobileAuthSession(session, localStorage);
+    const refreshedSession = {
+      ...session,
+      accessToken: "rotated-access",
+      refreshToken: "rotated-refresh",
+    };
+    const serverRefresh = deferred<void>();
+    const restoreSession = vi
+      .fn()
+      .mockResolvedValueOnce(session)
+      .mockResolvedValueOnce(refreshedSession);
+    const establishServerSession = vi
+      .fn()
+      .mockResolvedValueOnce(undefined)
+      .mockImplementationOnce(() => serverRefresh.promise);
+    const authClient = client({ restoreSession, establishServerSession });
+    const browserPlatform = createBrowserMobileRemotePlatform();
+    const clearSession = vi.fn(() => browserPlatform.auth.clearSession());
+    const platform = {
+      ...browserPlatform,
+      auth: { ...browserPlatform.auth, clearSession },
+    };
+
+    function Protected() {
+      const { signOut } = useMobileAuth();
+      return React.createElement("button", { onClick: signOut }, "protected");
+    }
+
+    await act(async () => {
+      root.render(
+        createGate(
+          authClient,
+          () => React.createElement(Protected),
+          {},
+          platform
+        )
+      );
+      await Promise.resolve();
+      await Promise.resolve();
+      await Promise.resolve();
+      await Promise.resolve();
+    });
+    expect(container.textContent).toContain("protected");
+
+    documentHidden = true;
+    act(() => document.dispatchEvent(new Event("visibilitychange")));
+    documentHidden = false;
+    await act(async () => {
+      document.dispatchEvent(new Event("visibilitychange"));
+      await Promise.resolve();
+      await Promise.resolve();
+    });
+    expect(establishServerSession).toHaveBeenCalledTimes(2);
+    expect(localStorage.getItem("orgii:org2-cloud-v1:auth")).toContain(
+      "rotated-access"
+    );
+
+    act(() => container.querySelector("button")?.click());
+    expect(container.textContent).not.toContain("protected");
+    expect(clearSession).not.toHaveBeenCalled();
+
+    await act(async () => {
+      serverRefresh.resolve();
+      await serverRefresh.promise;
+      await Promise.resolve();
+      await Promise.resolve();
+    });
+
+    expect(container.textContent).not.toContain("protected");
+    expect(clearSession).toHaveBeenCalledOnce();
+    expect(localStorage.getItem("orgii:org2-cloud-v1:auth")).toBeNull();
+    expect(authClient.signOut).toHaveBeenCalledWith(session);
+  });
 });
diff --git a/src/modules/MobileRemote/auth/MobileAuthGate.tsx b/src/modules/MobileRemote/auth/MobileAuthGate.tsx
index a00ab5f691..5bbf4479d5 100644
--- a/src/modules/MobileRemote/auth/MobileAuthGate.tsx
+++ b/src/modules/MobileRemote/auth/MobileAuthGate.tsx
@@ -6,31 +6,18 @@ import React, {
   useRef,
 } from "react";
 
+import { useMobileRemotePlatform } from "../platform";
 import { MobileAuthContext } from "./MobileAuthContext";
 import { MobileAuthScreen } from "./MobileAuthScreen";
 import {
   type MobileAuthClient,
   MobileAuthClientError,
-  createMobileAuthClient,
   isRetryableMobileAuthError,
 } from "./mobileAuthClient";
-import {
-  MOBILE_AUTH_CALLBACK_PATH,
-  beginMobileOAuthAttempt,
-  clearMobileAuthIntents,
-  consumeMobileOAuthAttempt,
-  consumeOpaquePairingIntent,
-  isMobileAuthCallback,
-} from "./mobileAuthIntent";
 import {
   createInitialMobileAuthState,
   reduceMobileAuthState,
 } from "./mobileAuthState";
-import {
-  clearMobileAuthSession,
-  readMobileAuthSession,
-  writeMobileAuthSession,
-} from "./mobileAuthStorage";
 
 const EXPIRY_REFRESH_SKEW_MS = 60_000;
 const MAX_TIMEOUT_MS = 2_147_000_000;
@@ -50,8 +37,9 @@ export interface MobileAuthGateProps {
 export function MobileAuthGate({
   children,
   client: providedClient,
-  navigate = (url) => window.location.assign(url),
+  navigate,
 }: MobileAuthGateProps) {
+  const platform = useMobileRemotePlatform();
   const [state, dispatch] = useReducer(
     reduceMobileAuthState,
     undefined,
@@ -62,29 +50,31 @@ export function MobileAuthGate({
   const generationRef = useRef(0);
   const expiryTimerRef = useRef<number | null>(null);
   const inFlightRef = useRef<Promise<void> | null>(null);
+  const signOutCleanupRef = useRef<Promise<void> | null>(null);
+  const intentGenerationRef = useRef(0);
   const clientRef = useRef<MobileAuthClient | null>(null);
-  clientRef.current ??= providedClient ?? createMobileAuthClient();
+  clientRef.current ??= providedClient ?? platform.auth.createClient();
 
   const clearExpiryTimer = useCallback(() => {
     if (expiryTimerRef.current !== null) {
-      window.clearTimeout(expiryTimerRef.current);
+      platform.runtime.clearTimeout(expiryTimerRef.current);
       expiryTimerRef.current = null;
     }
-  }, []);
+  }, [platform.runtime]);
 
   const authenticate = useCallback(
     (options: { forceRefresh?: boolean } = {}) => {
       if (inFlightRef.current) return inFlightRef.current;
       const generation = ++generationRef.current;
-      const callback = isMobileAuthCallback(window.location);
-      const callbackUrl = window.location.href;
+      const callback = platform.auth.isCallback();
+      const callbackUrl = platform.auth.currentUrl();
 
       if (callback) {
         dispatch({ type: "begin", phase: "exchanging", generation });
-        window.history.replaceState(window.history.state, "", "/orgii/mobile");
+        platform.auth.scrubCallback();
       } else if (
         stateRef.current.phase !== "signed_in" ||
-        stateRef.current.session.expiresAt <= Date.now() / 1_000
+        stateRef.current.session.expiresAt <= platform.runtime.now() / 1_000
       ) {
         dispatch({ type: "begin", phase: "checking", generation });
       }
@@ -93,7 +83,7 @@ export function MobileAuthGate({
         try {
           let session;
           if (callback) {
-            if (!consumeMobileOAuthAttempt()) {
+            if (!(await platform.auth.consumeOAuthAttempt())) {
               throw new MobileAuthClientError(
                 "Authentication callback has expired",
                 false
@@ -101,7 +91,7 @@ export function MobileAuthGate({
             }
             session = await clientRef.current!.exchangeCallback(callbackUrl);
           } else {
-            const stored = readMobileAuthSession();
+            const stored = await platform.auth.readSession();
             if (!stored) {
               dispatch({ type: "signed_out", generation });
               return;
@@ -113,7 +103,8 @@ export function MobileAuthGate({
           // Persist the rotating refresh token before the server-session
           // exchange. A transient exchange failure can then recover on Retry
           // without replaying an already-scrubbed OAuth callback.
-          writeMobileAuthSession(session);
+          await platform.auth.writeSession(session);
+          if (generation !== generationRef.current) return;
           await clientRef.current!.establishServerSession(session.accessToken);
           if (generation !== generationRef.current) return;
 
@@ -121,12 +112,12 @@ export function MobileAuthGate({
             type: "signed_in",
             generation,
             session,
-            recoveredPairingIntent: consumeOpaquePairingIntent(),
+            recoveredPairingIntent: await platform.auth.consumePairingIntent(),
           });
         } catch (error) {
           if (generation !== generationRef.current) return;
           const retryable = isRetryableMobileAuthError(error);
-          if (!retryable) clearMobileAuthSession();
+          if (!retryable) await platform.auth.clearSession();
           dispatch({
             type: "failed",
             generation,
@@ -142,27 +133,52 @@ export function MobileAuthGate({
       });
       return operation;
     },
-    []
+    [platform.auth, platform.runtime]
   );
 
   useEffect(() => {
     void authenticate();
   }, [authenticate]);
 
+  useEffect(() => {
+    let disposed = false;
+    const unsubscribe = platform.auth.subscribeIntent(() => {
+      const intentGeneration = ++intentGenerationRef.current;
+      const pendingAuthentication = inFlightRef.current;
+      if (pendingAuthentication) {
+        // The deep link is a newer user intent. Invalidate the old episode,
+        // then consume the latest callback/pairing value after it settles.
+        generationRef.current += 1;
+      }
+      void Promise.allSettled([
+        pendingAuthentication ?? Promise.resolve(),
+        signOutCleanupRef.current ?? Promise.resolve(),
+      ]).then(() => {
+        if (!disposed && intentGeneration === intentGenerationRef.current) {
+          void authenticate();
+        }
+      });
+    });
+    return () => {
+      disposed = true;
+      intentGenerationRef.current += 1;
+      unsubscribe();
+    };
+  }, [authenticate, platform.auth]);
+
   const startSignIn = useCallback(() => {
     const generation = ++generationRef.current;
     clearExpiryTimer();
-    const attemptId = crypto.randomUUID();
-    beginMobileOAuthAttempt(attemptId);
+    const attemptId = platform.runtime.randomUUID();
     dispatch({ type: "begin", phase: "redirecting", generation });
-    const callbackUrl = new URL(
-      MOBILE_AUTH_CALLBACK_PATH,
-      window.location.origin
-    ).toString();
-    void clientRef
-      .current!.buildLoginUrl(callbackUrl)
+    void (signOutCleanupRef.current ?? Promise.resolve())
+      .then(() => platform.auth.beginOAuthAttempt(attemptId))
+      .then(() => clientRef.current!.buildLoginUrl(platform.auth.callbackUrl()))
       .then((url) => {
-        if (generation === generationRef.current) navigate(url);
+        if (generation === generationRef.current) {
+          return (navigate ?? platform.auth.navigate)(url);
+        }
+        return undefined;
       })
       .catch((error) => {
         if (generation !== generationRef.current) return;
@@ -174,59 +190,85 @@ export function MobileAuthGate({
           retryable: isRetryableMobileAuthError(error),
         });
       });
-  }, [clearExpiryTimer, navigate]);
+  }, [clearExpiryTimer, navigate, platform.auth, platform.runtime]);
 
   const signOut = useCallback(() => {
     const currentSession =
-      stateRef.current.phase === "signed_in"
-        ? stateRef.current.session
-        : readMobileAuthSession();
+      stateRef.current.phase === "signed_in" ? stateRef.current.session : null;
     const generation = ++generationRef.current;
+    const pendingAuthentication = inFlightRef.current;
     // Detach any refresh/callback operation from this auth episode. Its
     // generation guard still prevents stale completion from restoring state,
     // while a later sign-in is free to start immediately.
     inFlightRef.current = null;
     clearExpiryTimer();
-    clearMobileAuthSession();
-    clearMobileAuthIntents();
     dispatch({ type: "signed_out", generation });
-    void clientRef.current!.signOut(currentSession);
-  }, [clearExpiryTimer]);
+    const cleanup = (async () => {
+      // Preserve final-write-wins semantics for async Keychain and server
+      // session adapters. The stale operation remains generation-guarded;
+      // sign-out cleanup runs after it and is therefore authoritative.
+      await pendingAuthentication?.catch(() => undefined);
+      const session =
+        currentSession ?? (await platform.auth.readSession().catch(() => null));
+      await Promise.allSettled([
+        Promise.resolve().then(() => platform.auth.clearSession()),
+        Promise.resolve().then(() => platform.auth.clearIntents()),
+        Promise.resolve().then(() => clientRef.current!.signOut(session)),
+      ]);
+    })();
+    signOutCleanupRef.current = cleanup;
+    void cleanup.finally(() => {
+      if (signOutCleanupRef.current === cleanup) {
+        signOutCleanupRef.current = null;
+      }
+    });
+  }, [clearExpiryTimer, platform.auth]);
 
   useEffect(() => {
     clearExpiryTimer();
-    if (state.phase !== "signed_in" || document.hidden) return;
+    if (state.phase !== "signed_in" || platform.runtime.isHidden()) return;
     const delay = Math.min(
       MAX_TIMEOUT_MS,
       Math.max(
         0,
-        state.session.expiresAt * 1_000 - Date.now() - EXPIRY_REFRESH_SKEW_MS
+        state.session.expiresAt * 1_000 -
+          platform.runtime.now() -
+          EXPIRY_REFRESH_SKEW_MS
       )
     );
-    expiryTimerRef.current = window.setTimeout(() => {
+    expiryTimerRef.current = platform.runtime.setTimeout(() => {
       expiryTimerRef.current = null;
       void authenticate({ forceRefresh: true });
     }, delay);
     return clearExpiryTimer;
-  }, [authenticate, clearExpiryTimer, state]);
+  }, [authenticate, clearExpiryTimer, platform.runtime, state]);
 
   useEffect(() => {
     const handleVisibility = () => {
       clearExpiryTimer();
-      if (!document.hidden && stateRef.current.phase === "signed_in") {
+      if (
+        !platform.runtime.isHidden() &&
+        stateRef.current.phase === "signed_in"
+      ) {
         void authenticate({ forceRefresh: true });
       }
     };
-    document.addEventListener("visibilitychange", handleVisibility);
+    const unsubscribe = platform.runtime.subscribeVisibility(handleVisibility);
     return () => {
       clearExpiryTimer();
-      document.removeEventListener("visibilitychange", handleVisibility);
+      unsubscribe();
     };
-  }, [authenticate, clearExpiryTimer]);
+  }, [authenticate, clearExpiryTimer, platform.runtime]);
 
   const contextValue = useMemo(
     () =>
-      state.phase === "signed_in" ? { session: state.session, signOut } : null,
+      state.phase === "signed_in"
+        ? {
+            session: state.session,
+            signOut,
+            isDevelopmentBypass: false,
+          }
+        : null,
     [signOut, state]
   );
 
diff --git a/src/modules/MobileRemote/auth/mobileAuthClient.test.ts b/src/modules/MobileRemote/auth/mobileAuthClient.test.ts
index 1dcd1adc2e..8bc24c354e 100644
--- a/src/modules/MobileRemote/auth/mobileAuthClient.test.ts
+++ b/src/modules/MobileRemote/auth/mobileAuthClient.test.ts
@@ -1,7 +1,7 @@
 // @vitest-environment jsdom
 import { beforeEach, describe, expect, it, vi } from "vitest";
 
-import { createMobileAuthClient } from "./mobileAuthClient";
+import { createBrowserMobileAuthClient } from "../platform/browser/browserMobileAuthClient";
 
 const mocks = vi.hoisted(() => ({
   createClient: vi.fn(),
@@ -17,8 +17,11 @@ vi.mock("@supabase/supabase-js", () => ({
 }));
 
 describe("mobileAuthClient", () => {
+  const fetcher = vi.fn() as unknown as typeof fetch;
+
   beforeEach(() => {
     Object.values(mocks).forEach((mock) => mock.mockReset());
+    vi.mocked(fetcher).mockReset();
     mocks.createClient.mockReturnValue({ auth: mocks });
   });
 
@@ -27,7 +30,10 @@ describe("mobileAuthClient", () => {
       data: { url: "https://github.example/oauth" },
       error: null,
     });
-    const client = createMobileAuthClient();
+    const client = createBrowserMobileAuthClient({
+      oauthStorage: sessionStorage,
+      fetcher,
+    });
     await expect(
       client.buildLoginUrl("https://mobile.example/orgii/mobile/auth/callback")
     ).resolves.toBe("https://github.example/oauth");
@@ -55,7 +61,10 @@ describe("mobileAuthClient", () => {
   });
 
   it("accepts only a PKCE code and never exchanges tokens from the URL fragment", async () => {
-    const client = createMobileAuthClient();
+    const client = createBrowserMobileAuthClient({
+      oauthStorage: sessionStorage,
+      fetcher,
+    });
     await expect(
       client.exchangeCallback(
         "https://mobile.example/orgii/mobile/auth/callback#access_token=secret&refresh_token=secret"
diff --git a/src/modules/MobileRemote/auth/mobileAuthClient.ts b/src/modules/MobileRemote/auth/mobileAuthClient.ts
index e9e52f0482..8f045b539d 100644
--- a/src/modules/MobileRemote/auth/mobileAuthClient.ts
+++ b/src/modules/MobileRemote/auth/mobileAuthClient.ts
@@ -1,19 +1,5 @@
-import {
-  type Session,
-  type SupabaseClient,
-  createClient,
-} from "@supabase/supabase-js";
-
-import {
-  ORG2_CLOUD_OFFICIAL_ANON_KEY,
-  ORG2_CLOUD_OFFICIAL_SUPABASE_URL,
-} from "@src/features/Org2Cloud/config";
-
 import type { MobileAuthSession } from "./mobileAuthState";
 
-const SERVER_SESSION_PATH = "/v1/mobile/auth/session";
-const EXPIRY_SKEW_SECONDS = 60;
-
 export class MobileAuthClientError extends Error {
   constructor(
     message: string,
@@ -24,6 +10,7 @@ export class MobileAuthClientError extends Error {
   }
 }
 
+/** Platform-neutral account authentication contract used by the shared UI. */
 export interface MobileAuthClient {
   buildLoginUrl(callbackUrl: string): Promise<string>;
   exchangeCallback(callbackUrl: string): Promise<MobileAuthSession>;
@@ -35,195 +22,6 @@ export interface MobileAuthClient {
   signOut(session: MobileAuthSession | null): Promise<void>;
 }
 
-function isPermanentStatus(status: unknown): boolean {
-  return status === 400 || status === 401 || status === 403;
-}
-
-function toClientError(error: unknown): MobileAuthClientError {
-  if (error instanceof MobileAuthClientError) return error;
-  if (error && typeof error === "object") {
-    const record = error as { message?: unknown; status?: unknown };
-    return new MobileAuthClientError(
-      typeof record.message === "string"
-        ? record.message
-        : "Authentication failed",
-      !isPermanentStatus(record.status)
-    );
-  }
-  return new MobileAuthClientError(
-    error instanceof Error ? error.message : "Authentication failed"
-  );
-}
-
-function profileFromSession(
-  session: Session,
-  previous?: MobileAuthSession["profile"]
-): MobileAuthSession["profile"] {
-  const metadata = session.user.user_metadata ?? {};
-  const displayName =
-    typeof metadata.full_name === "string"
-      ? metadata.full_name
-      : typeof metadata.name === "string"
-        ? metadata.name
-        : previous?.displayName;
-  const primaryEmail = session.user.email ?? previous?.primaryEmail;
-  const avatarUrl =
-    typeof metadata.avatar_url === "string"
-      ? metadata.avatar_url
-      : previous?.avatarUrl;
-  return displayName || primaryEmail || avatarUrl
-    ? { displayName, primaryEmail, avatarUrl }
-    : undefined;
-}
-
-function toMobileSession(
-  session: Session,
-  previous?: MobileAuthSession
-): MobileAuthSession {
-  const expiresAt = session.expires_at;
-  if (!expiresAt || !session.user.id) {
-    throw new MobileAuthClientError(
-      "Authentication response is incomplete",
-      false
-    );
-  }
-  return {
-    kind: "org2_cloud",
-    supabaseUrl: ORG2_CLOUD_OFFICIAL_SUPABASE_URL,
-    supabaseAnonKey: ORG2_CLOUD_OFFICIAL_ANON_KEY,
-    userId: session.user.id,
-    accessToken: session.access_token,
-    refreshToken: session.refresh_token,
-    expiresAt,
-    profile: profileFromSession(session, previous?.profile),
-  };
-}
-
-function createOfficialClient(): SupabaseClient {
-  return createClient(
-    ORG2_CLOUD_OFFICIAL_SUPABASE_URL,
-    ORG2_CLOUD_OFFICIAL_ANON_KEY,
-    {
-      auth: {
-        autoRefreshToken: false,
-        detectSessionInUrl: false,
-        // Supabase only honors the supplied storage adapter when session
-        // persistence is enabled. PKCE needs that adapter across the OAuth
-        // redirect so the callback can recover its code verifier.
-        persistSession: true,
-        flowType: "pkce",
-        storage:
-          typeof sessionStorage === "undefined" ? undefined : sessionStorage,
-      },
-    }
-  );
-}
-
-export function createMobileAuthClient(): MobileAuthClient {
-  const supabase = createOfficialClient();
-
-  return {
-    async buildLoginUrl(callbackUrl) {
-      const { data, error } = await supabase.auth.signInWithOAuth({
-        provider: "github",
-        options: {
-          redirectTo: callbackUrl,
-          skipBrowserRedirect: true,
-          scopes: "read:user user:email",
-        },
-      });
-      if (error || !data.url) throw toClientError(error);
-      return data.url;
-    },
-
-    async exchangeCallback(callbackUrl) {
-      try {
-        const parsed = new URL(callbackUrl);
-        const code = parsed.searchParams.get("code")?.trim();
-        if (!code || parsed.hash) {
-          throw new MobileAuthClientError(
-            "Authentication callback is incomplete",
-            false
-          );
-        }
-        const result = await supabase.auth.exchangeCodeForSession(code);
-        if (result.error || !result.data.session) {
-          throw toClientError(result.error);
-        }
-        return toMobileSession(result.data.session);
-      } catch (error) {
-        throw toClientError(error);
-      }
-    },
-
-    async restoreSession(stored, options) {
-      if (
-        stored.supabaseUrl !== ORG2_CLOUD_OFFICIAL_SUPABASE_URL ||
-        stored.supabaseAnonKey !== ORG2_CLOUD_OFFICIAL_ANON_KEY
-      ) {
-        throw new MobileAuthClientError(
-          "This session belongs to a different ORG2 Cloud endpoint",
-          false
-        );
-      }
-      try {
-        const shouldRefresh =
-          options?.forceRefresh === true ||
-          stored.expiresAt <= Date.now() / 1_000 + EXPIRY_SKEW_SECONDS;
-        const result = shouldRefresh
-          ? await supabase.auth.refreshSession({
-              refresh_token: stored.refreshToken,
-            })
-          : await supabase.auth.setSession({
-              access_token: stored.accessToken,
-              refresh_token: stored.refreshToken,
-            });
-        if (result.error || !result.data.session) {
-          throw toClientError(result.error);
-        }
-        return toMobileSession(result.data.session, stored);
-      } catch (error) {
-        throw toClientError(error);
-      }
-    },
-
-    async establishServerSession(accessToken) {
-      let response: Response;
-      try {
-        response = await fetch(SERVER_SESSION_PATH, {
-          method: "POST",
-          credentials: "include",
-          headers: { Authorization: `Bearer ${accessToken}` },
-        });
-      } catch (error) {
-        throw toClientError(error);
-      }
-      if (!response.ok) {
-        throw new MobileAuthClientError(
-          `Mobile session exchange failed (${response.status})`,
-          !isPermanentStatus(response.status)
-        );
-      }
-    },
-
-    async signOut(session) {
-      await fetch(SERVER_SESSION_PATH, {
-        method: "DELETE",
-        credentials: "include",
-      }).catch(() => undefined);
-      if (session) {
-        await supabase.auth
-          .setSession({
-            access_token: session.accessToken,
-            refresh_token: session.refreshToken,
-          })
-          .catch(() => undefined);
-      }
-      await supabase.auth.signOut({ scope: "local" }).catch(() => undefined);
-    },
-  };
-}
-
 export function isRetryableMobileAuthError(error: unknown): boolean {
   return !(error instanceof MobileAuthClientError) || error.retryable;
 }
diff --git a/src/modules/MobileRemote/auth/mobileAuthIntent.ts b/src/modules/MobileRemote/auth/mobileAuthIntent.ts
index 1f8187bf79..f26c574580 100644
--- a/src/modules/MobileRemote/auth/mobileAuthIntent.ts
+++ b/src/modules/MobileRemote/auth/mobileAuthIntent.ts
@@ -66,7 +66,7 @@ function storePendingPairingIntent(
 export function captureOpaquePairingReturnLocation(
   location: MobileAuthReturnLocation,
   baseUrl: string,
-  storage: Pick<Storage, "setItem"> = sessionStorage,
+  storage: Pick<Storage, "setItem">,
   nowMs = Date.now()
 ): MobileAuthReturnLocation {
   if (!hasPairingCredential(location.hash)) return location;
@@ -86,7 +86,7 @@ export function captureOpaquePairingReturnLocation(
 export function captureOpaquePairingIntent(
   location: Pick<Location, "href" | "hash" | "pathname" | "search">,
   history: Pick<History, "replaceState" | "state">,
-  storage: Pick<Storage, "setItem"> = sessionStorage,
+  storage: Pick<Storage, "setItem">,
   nowMs = Date.now()
 ): string | null {
   if (!hasPairingCredential(location.hash)) return null;
@@ -101,7 +101,7 @@ export function captureOpaquePairingIntent(
 }
 
 export function consumeOpaquePairingIntent(
-  storage: Pick<Storage, "getItem" | "removeItem"> = sessionStorage,
+  storage: Pick<Storage, "getItem" | "removeItem">,
   nowMs = Date.now()
 ): string | null {
   const intent = parseRecord<PendingPairingIntent>(
@@ -116,7 +116,7 @@ export function consumeOpaquePairingIntent(
 
 export function beginMobileOAuthAttempt(
   attemptId: string,
-  storage: Pick<Storage, "setItem"> = sessionStorage,
+  storage: Pick<Storage, "setItem">,
   nowMs = Date.now()
 ): void {
   const attempt: OAuthAttempt = { version: 1, attemptId, createdAtMs: nowMs };
@@ -124,7 +124,7 @@ export function beginMobileOAuthAttempt(
 }
 
 export function consumeMobileOAuthAttempt(
-  storage: Pick<Storage, "getItem" | "removeItem"> = sessionStorage,
+  storage: Pick<Storage, "getItem" | "removeItem">,
   nowMs = Date.now()
 ): boolean {
   const attempt = parseRecord<OAuthAttempt>(
@@ -136,7 +136,7 @@ export function consumeMobileOAuthAttempt(
 }
 
 export function clearMobileAuthIntents(
-  storage: Pick<Storage, "removeItem"> = sessionStorage
+  storage: Pick<Storage, "removeItem">
 ): void {
   storage.removeItem(PENDING_PAIRING_KEY);
   storage.removeItem(OAUTH_ATTEMPT_KEY);
diff --git a/src/modules/MobileRemote/auth/mobileAuthStorage.ts b/src/modules/MobileRemote/auth/mobileAuthStorage.ts
index f897112ada..cf77f03b41 100644
--- a/src/modules/MobileRemote/auth/mobileAuthStorage.ts
+++ b/src/modules/MobileRemote/auth/mobileAuthStorage.ts
@@ -6,7 +6,7 @@ import type { MobileAuthSession } from "./mobileAuthState";
 export const MOBILE_AUTH_STORAGE_KEY = "orgii:org2-cloud-v1:auth";
 
 export function readMobileAuthSession(
-  storage: Pick<Storage, "getItem"> = localStorage
+  storage: Pick<Storage, "getItem">
 ): MobileAuthSession | null {
   try {
     const raw = storage.getItem(MOBILE_AUTH_STORAGE_KEY);
@@ -18,13 +18,13 @@ export function readMobileAuthSession(
 
 export function writeMobileAuthSession(
   session: MobileAuthSession,
-  storage: Pick<Storage, "setItem"> = localStorage
+  storage: Pick<Storage, "setItem">
 ): void {
   storage.setItem(MOBILE_AUTH_STORAGE_KEY, JSON.stringify(session));
 }
 
 export function clearMobileAuthSession(
-  storage: Pick<Storage, "removeItem"> = localStorage
+  storage: Pick<Storage, "removeItem">
 ): void {
   storage.removeItem(MOBILE_AUTH_STORAGE_KEY);
 }
diff --git a/src/modules/MobileRemote/components/composer/MobileComposer.test.ts b/src/modules/MobileRemote/components/composer/MobileComposer.test.ts
index 09bd9b0dde..afcf6f8afc 100644
--- a/src/modules/MobileRemote/components/composer/MobileComposer.test.ts
+++ b/src/modules/MobileRemote/components/composer/MobileComposer.test.ts
@@ -1,5 +1,6 @@
 // @vitest-environment jsdom
 import { act, createElement } from "react";
+import type { ComponentProps, ComponentType, PropsWithChildren } from "react";
 import { type Root, createRoot } from "react-dom/client";
 import { afterEach, describe, expect, it, vi } from "vitest";
 
@@ -7,6 +8,8 @@ import {
   MOBILE_COMPOSER_CONTENT_INSET_PX,
   MOBILE_COMPOSER_CONTENT_INSET_X_CLASS,
 } from "@src/config/composerStackTokens";
+import { MobileRemotePlatformProvider } from "@src/modules/MobileRemote/platform";
+import { createBrowserMobileRemotePlatform } from "@src/modules/MobileRemote/platform/browser";
 
 import { MobileComposer } from "./MobileComposer";
 
@@ -56,7 +59,13 @@ async function renderComposer(
   document.body.append(host);
   root = createRoot(host);
   await act(async () => {
-    root?.render(createElement(MobileComposer, { onSend }));
+    root?.render(
+      createElement(
+        TestMobileRemotePlatformProvider,
+        { platform: testPlatform },
+        createElement(MobileComposer, { onSend })
+      )
+    );
   });
   const textarea = host.querySelector("textarea");
   const button = host.querySelector<HTMLButtonElement>(
@@ -75,6 +84,17 @@ function enterText(textarea: HTMLTextAreaElement, value: string) {
   textarea.dispatchEvent(new Event("input", { bubbles: true }));
 }
 
+// The model dropdown portals through the platform port, so these renders
+// need a mounted platform exactly like the app tree provides.
+const testPlatform = createBrowserMobileRemotePlatform();
+
+const TestMobileRemotePlatformProvider =
+  MobileRemotePlatformProvider as ComponentType<
+    PropsWithChildren<
+      Omit<ComponentProps<typeof MobileRemotePlatformProvider>, "children">
+    >
+  >;
+
 describe("MobileComposer submission lifecycle", () => {
   it("uses the shared Desktop shell, toolbar layout, and submit control", async () => {
     const { textarea, button } = await renderComposer(vi.fn());
@@ -105,28 +125,32 @@ describe("MobileComposer submission lifecycle", () => {
     root = createRoot(host);
     await act(async () => {
       root?.render(
-        createElement(MobileComposer, {
-          onSend: vi.fn(),
-          modelPicker: {
-            config: {
-              sessionId: "session-a",
-              model: "claude-sonnet-4-5",
-              accountId: "acct-1",
-              modelEditable: true,
-            },
-            options: [
-              {
-                id: "claude-sonnet-4-5",
+        createElement(
+          TestMobileRemotePlatformProvider,
+          { platform: testPlatform },
+          createElement(MobileComposer, {
+            onSend: vi.fn(),
+            modelPicker: {
+              config: {
+                sessionId: "session-a",
+                model: "claude-sonnet-4-5",
                 accountId: "acct-1",
-                accountLabel: "Anthropic",
+                modelEditable: true,
               },
-            ],
-            open: false,
-            onOpen: vi.fn(),
-            onClose: vi.fn(),
-            onSelect: vi.fn(),
-          },
-        })
+              options: [
+                {
+                  id: "claude-sonnet-4-5",
+                  accountId: "acct-1",
+                  accountLabel: "Anthropic",
+                },
+              ],
+              open: false,
+              onOpen: vi.fn(),
+              onClose: vi.fn(),
+              onSelect: vi.fn(),
+            },
+          })
+        )
       );
     });
 
@@ -147,28 +171,32 @@ describe("MobileComposer submission lifecycle", () => {
     root = createRoot(host);
     await act(async () => {
       root?.render(
-        createElement(MobileComposer, {
-          onSend: vi.fn(),
-          modelPicker: {
-            config: {
-              sessionId: "session-a",
-              model: "claude-sonnet-4-5",
-              accountId: "acct-1",
-              modelEditable: true,
-            },
-            options: [
-              {
-                id: "claude-sonnet-4-5",
+        createElement(
+          TestMobileRemotePlatformProvider,
+          { platform: testPlatform },
+          createElement(MobileComposer, {
+            onSend: vi.fn(),
+            modelPicker: {
+              config: {
+                sessionId: "session-a",
+                model: "claude-sonnet-4-5",
                 accountId: "acct-1",
-                accountLabel: "Anthropic",
+                modelEditable: true,
               },
-            ],
-            open: false,
-            onOpen: vi.fn(),
-            onClose: vi.fn(),
-            onSelect: vi.fn(),
-          },
-        })
+              options: [
+                {
+                  id: "claude-sonnet-4-5",
+                  accountId: "acct-1",
+                  accountLabel: "Anthropic",
+                },
+              ],
+              open: false,
+              onOpen: vi.fn(),
+              onClose: vi.fn(),
+              onSelect: vi.fn(),
+            },
+          })
+        )
       );
     });
 
@@ -195,28 +223,32 @@ describe("MobileComposer submission lifecycle", () => {
     root = createRoot(host);
     await act(async () => {
       root?.render(
-        createElement(MobileComposer, {
-          onSend: vi.fn(),
-          modelPicker: {
-            config: {
-              sessionId: "session-a",
-              model: "claude-sonnet-4-5",
-              accountId: "acct-1",
-              modelEditable: true,
-            },
-            options: [
-              {
-                id: "claude-sonnet-4-5",
+        createElement(
+          TestMobileRemotePlatformProvider,
+          { platform: testPlatform },
+          createElement(MobileComposer, {
+            onSend: vi.fn(),
+            modelPicker: {
+              config: {
+                sessionId: "session-a",
+                model: "claude-sonnet-4-5",
                 accountId: "acct-1",
-                accountLabel: "Anthropic",
+                modelEditable: true,
               },
-            ],
-            open: false,
-            onOpen: vi.fn(),
-            onClose: vi.fn(),
-            onSelect: vi.fn(),
-          },
-        })
+              options: [
+                {
+                  id: "claude-sonnet-4-5",
+                  accountId: "acct-1",
+                  accountLabel: "Anthropic",
+                },
+              ],
+              open: false,
+              onOpen: vi.fn(),
+              onClose: vi.fn(),
+              onSelect: vi.fn(),
+            },
+          })
+        )
       );
     });
 
diff --git a/src/modules/MobileRemote/components/composer/MobileModelListDropdown.tsx b/src/modules/MobileRemote/components/composer/MobileModelListDropdown.tsx
index 9f38eac978..ef0fcbd2ae 100644
--- a/src/modules/MobileRemote/components/composer/MobileModelListDropdown.tsx
+++ b/src/modules/MobileRemote/components/composer/MobileModelListDropdown.tsx
@@ -12,6 +12,7 @@ import { useDropdownEngine } from "@src/hooks/dropdown";
 import { useFilteredItems } from "@src/hooks/search";
 import { HugeiconsIcon, Tick01Icon } from "@src/icons";
 import type { MobileModelOption } from "@src/modules/MobileRemote/connection/types";
+import { useMobileRemotePlatform } from "@src/modules/MobileRemote/platform";
 import { formatModelName } from "@src/util/formatModelName";
 import { getViewportSize } from "@src/util/ui/window/viewport";
 
@@ -55,6 +56,8 @@ export function MobileModelListDropdown({
   emptyLabel,
   onSelect,
 }: MobileModelListDropdownProps) {
+  const platform = useMobileRemotePlatform();
+  const portalContainer = platform.runtime.portalContainer();
   const [searchQuery, setSearchQuery] = useState("");
   const inputRef = useRef<HTMLInputElement>(null);
   const familyOptions = allOptions ?? options;
@@ -108,7 +111,7 @@ export function MobileModelListDropdown({
     return () => cancelAnimationFrame(frame);
   }, [isPositioned, open]);
 
-  if (!open || !isPositioned) return null;
+  if (!open || !isPositioned || !portalContainer) return null;
 
   const { width: viewportWidth } = getViewportSize();
   const panelWidth = Math.min(
@@ -201,7 +204,7 @@ export function MobileModelListDropdown({
         )}
       </div>
     </div>,
-    document.body
+    portalContainer
   );
 }
 
diff --git a/src/modules/MobileRemote/components/composer/MobileModelPicker.test.ts b/src/modules/MobileRemote/components/composer/MobileModelPicker.test.ts
index 5ce4c1246a..491025b239 100644
--- a/src/modules/MobileRemote/components/composer/MobileModelPicker.test.ts
+++ b/src/modules/MobileRemote/components/composer/MobileModelPicker.test.ts
@@ -1,8 +1,12 @@
 // @vitest-environment jsdom
 import React, { act, createElement } from "react";
+import type { ComponentProps, ComponentType, PropsWithChildren } from "react";
 import { type Root, createRoot } from "react-dom/client";
 import { afterEach, describe, expect, it, vi } from "vitest";
 
+import { MobileRemotePlatformProvider } from "@src/modules/MobileRemote/platform";
+import { createBrowserMobileRemotePlatform } from "@src/modules/MobileRemote/platform/browser";
+
 import { MobileModelPicker } from "./MobileModelPicker";
 
 vi.mock("@src/components/ModelIcon", () => ({
@@ -79,6 +83,17 @@ afterEach(() => {
   dropdownTestState.isOpen = false;
 });
 
+// The dropdown portals through the platform port, so the unit test needs a
+// mounted platform exactly like the app tree provides.
+const testPlatform = createBrowserMobileRemotePlatform();
+
+const TestMobileRemotePlatformProvider =
+  MobileRemotePlatformProvider as ComponentType<
+    PropsWithChildren<
+      Omit<ComponentProps<typeof MobileRemotePlatformProvider>, "children">
+    >
+  >;
+
 async function renderPicker(
   overrides: Partial<React.ComponentProps<typeof MobileModelPicker>> = {}
 ) {
@@ -87,56 +102,60 @@ async function renderPicker(
   root = createRoot(host);
   await act(async () => {
     root?.render(
-      createElement(MobileModelPicker, {
-        config: {
-          sessionId: "session-a",
-          model: "claude-sonnet-4-5",
-          accountId: "acct-1",
-          modelEditable: true,
-        },
-        options: [
-          {
-            id: "claude-sonnet-4-5",
-            accountId: "acct-1",
-            accountLabel: "Anthropic",
-          },
-          {
-            id: "claude-opus-4-5",
-            accountId: "acct-1",
-            accountLabel: "Anthropic",
-          },
-          {
-            id: "gpt-5.6-sol",
-            accountId: "acct-1",
-            accountLabel: "Anthropic",
-          },
-          {
-            id: "gpt-5.6-sol-low",
-            accountId: "acct-1",
-            accountLabel: "Anthropic",
-          },
-          {
-            id: "gpt-5.6-sol-medium",
-            accountId: "acct-1",
-            accountLabel: "Anthropic",
-          },
-          {
-            id: "gpt-5.6-sol-high",
-            accountId: "acct-1",
-            accountLabel: "Anthropic",
-          },
-          {
-            id: "gpt-5.6-sol-max",
+      createElement(
+        TestMobileRemotePlatformProvider,
+        { platform: testPlatform },
+        createElement(MobileModelPicker, {
+          config: {
+            sessionId: "session-a",
+            model: "claude-sonnet-4-5",
             accountId: "acct-1",
-            accountLabel: "Anthropic",
+            modelEditable: true,
           },
-        ],
-        open: false,
-        onOpen: vi.fn(),
-        onClose: vi.fn(),
-        onSelect: vi.fn(),
-        ...overrides,
-      })
+          options: [
+            {
+              id: "claude-sonnet-4-5",
+              accountId: "acct-1",
+              accountLabel: "Anthropic",
+            },
+            {
+              id: "claude-opus-4-5",
+              accountId: "acct-1",
+              accountLabel: "Anthropic",
+            },
+            {
+              id: "gpt-5.6-sol",
+              accountId: "acct-1",
+              accountLabel: "Anthropic",
+            },
+            {
+              id: "gpt-5.6-sol-low",
+              accountId: "acct-1",
+              accountLabel: "Anthropic",
+            },
+            {
+              id: "gpt-5.6-sol-medium",
+              accountId: "acct-1",
+              accountLabel: "Anthropic",
+            },
+            {
+              id: "gpt-5.6-sol-high",
+              accountId: "acct-1",
+              accountLabel: "Anthropic",
+            },
+            {
+              id: "gpt-5.6-sol-max",
+              accountId: "acct-1",
+              accountLabel: "Anthropic",
+            },
+          ],
+          open: false,
+          onOpen: vi.fn(),
+          onClose: vi.fn(),
+          onSelect: vi.fn(),
+          ...overrides,
+        })
+      )
     );
   });
 }
@@ -217,55 +236,59 @@ describe("MobileModelPicker", () => {
     await act(async () => {
       pill?.click();
       root?.render(
-        createElement(MobileModelPicker, {
-          config: {
-            sessionId: "session-a",
-            model: "gpt-5.6-sol-max",
-            accountId: "acct-1",
-            modelEditable: true,
-          },
-          options: [
-            {
-              id: "claude-sonnet-4-5",
-              accountId: "acct-1",
-              accountLabel: "Anthropic",
-            },
-            {
-              id: "claude-opus-4-5",
-              accountId: "acct-1",
-              accountLabel: "Anthropic",
-            },
-            {
-              id: "gpt-5.6-sol",
+        createElement(
+          TestMobileRemotePlatformProvider,
+          { platform: testPlatform },
+          createElement(MobileModelPicker, {
+            config: {
+              sessionId: "session-a",
+              model: "gpt-5.6-sol-max",
               accountId: "acct-1",
-              accountLabel: "Anthropic",
-            },
-            {
-              id: "gpt-5.6-sol-low",
-              accountId: "acct-1",
-              accountLabel: "Anthropic",
-            },
-            {
-              id: "gpt-5.6-sol-medium",
-              accountId: "acct-1",
-              accountLabel: "Anthropic",
+              modelEditable: true,
             },
-            {
-              id: "gpt-5.6-sol-high",
-              accountId: "acct-1",
-              accountLabel: "Anthropic",
-            },
-            {
-              id: "gpt-5.6-sol-max",
-              accountId: "acct-1",
-              accountLabel: "Anthropic",
-            },
-          ],
-          open: false,
-          onOpen: vi.fn(),
-          onClose: vi.fn(),
-          onSelect: vi.fn(),
-        })
+            options: [
+              {
+                id: "claude-sonnet-4-5",
+                accountId: "acct-1",
+                accountLabel: "Anthropic",
+              },
+              {
+                id: "claude-opus-4-5",
+                accountId: "acct-1",
+                accountLabel: "Anthropic",
+              },
+              {
+                id: "gpt-5.6-sol",
+                accountId: "acct-1",
+                accountLabel: "Anthropic",
+              },
+              {
+                id: "gpt-5.6-sol-low",
+                accountId: "acct-1",
+                accountLabel: "Anthropic",
+              },
+              {
+                id: "gpt-5.6-sol-medium",
+                accountId: "acct-1",
+                accountLabel: "Anthropic",
+              },
+              {
+                id: "gpt-5.6-sol-high",
+                accountId: "acct-1",
+                accountLabel: "Anthropic",
+              },
+              {
+                id: "gpt-5.6-sol-max",
+                accountId: "acct-1",
+                accountLabel: "Anthropic",
+              },
+            ],
+            open: false,
+            onOpen: vi.fn(),
+            onClose: vi.fn(),
+            onSelect: vi.fn(),
+          })
+        )
       );
     });
     expect(
diff --git a/src/modules/MobileRemote/connection/mobileConnectionStorage.test.ts b/src/modules/MobileRemote/connection/mobileConnectionStorage.test.ts
index edaed9e12d..2bb97cda38 100644
--- a/src/modules/MobileRemote/connection/mobileConnectionStorage.test.ts
+++ b/src/modules/MobileRemote/connection/mobileConnectionStorage.test.ts
@@ -1,9 +1,11 @@
 import { describe, expect, it } from "vitest";
 
 import {
+  listScopedMobilePairedDesktops,
   loadScopedMobileConnectionConfig,
   mobileConnectionStorageKey,
   saveScopedMobileConnectionConfig,
+  selectScopedMobilePairedDesktop,
 } from "./mobileConnectionStorage";
 
 class MemoryStorage {
@@ -51,4 +53,76 @@ describe("mobileConnectionStorage", () => {
       "orgii-mobile-remote-config"
     );
   });
+
+  it("retains bounded account-scoped inventory when active selection clears", () => {
+    const storage = new MemoryStorage();
+    saveScopedMobileConnectionConfig(
+      "user-a",
+      {
+        wsUrl: "wss://a.example/v1/mobile/ws",
+        desktopId: "desktop-a",
+        deviceLabel: "Home Mac",
+      },
+      storage,
+      1
+    );
+    saveScopedMobileConnectionConfig(
+      "user-a",
+      {
+        wsUrl: "wss://b.example/v1/mobile/ws",
+        desktopId: "desktop-b",
+        deviceLabel: "Office Mac",
+      },
+      storage,
+      2
+    );
+    saveScopedMobileConnectionConfig("user-a", null, storage, 3);
+
+    expect(loadScopedMobileConnectionConfig("user-a", storage)).toBeNull();
+    expect(listScopedMobilePairedDesktops("user-a", storage)).toEqual([
+      { id: "desktop-b", name: "Office Mac", active: false, updatedAtMs: 2 },
+      { id: "desktop-a", name: "Home Mac", active: false, updatedAtMs: 1 },
+    ]);
+    expect(listScopedMobilePairedDesktops("user-b", storage)).toEqual([]);
+  });
+
+  it("selects an existing desktop without copying credentials into summaries", () => {
+    const storage = new MemoryStorage();
+    saveScopedMobileConnectionConfig(
+      "user-a",
+      {
+        wsUrl: "wss://a.example/v1/mobile/ws",
+        desktopId: "desktop-a",
+        deviceLabel: "Home Mac",
+        deviceToken: "secret-a",
+      },
+      storage,
+      1
+    );
+    saveScopedMobileConnectionConfig(
+      "user-a",
+      {
+        wsUrl: "wss://b.example/v1/mobile/ws",
+        desktopId: "desktop-b",
+        deviceLabel: "Office Mac",
+        deviceToken: "secret-b",
+      },
+      storage,
+      2
+    );
+
+    expect(
+      selectScopedMobilePairedDesktop("user-a", "desktop-a", storage)
+    ).toMatchObject({ desktopId: "desktop-a", deviceToken: "secret-a" });
+    expect(loadScopedMobileConnectionConfig("user-a", storage)).toMatchObject({
+      desktopId: "desktop-a",
+    });
+    expect(listScopedMobilePairedDesktops("user-a", storage)).toEqual([
+      { id: "desktop-b", name: "Office Mac", active: false, updatedAtMs: 2 },
+      { id: "desktop-a", name: "Home Mac", active: true, updatedAtMs: 1 },
+    ]);
+    expect(
+      JSON.stringify(listScopedMobilePairedDesktops("user-a", storage))
+    ).not.toContain("secret-a");
+  });
 });
diff --git a/src/modules/MobileRemote/connection/mobileConnectionStorage.ts b/src/modules/MobileRemote/connection/mobileConnectionStorage.ts
index f8d4f6f2ee..9a7d5e4492 100644
--- a/src/modules/MobileRemote/connection/mobileConnectionStorage.ts
+++ b/src/modules/MobileRemote/connection/mobileConnectionStorage.ts
@@ -1,17 +1,45 @@
-import type { MobileConnectionConfig } from "./types";
+import {
+  type StoredPairingInventory,
+  activePairingConfig,
+  parsePairingInventory,
+  selectPairingInventory,
+  summarizePairingInventory,
+  updatePairingInventory,
+} from "./mobilePairedDesktopInventory";
+import type {
+  MobileConnectionConfig,
+  MobilePairedDesktopSummary,
+} from "./types";
 
 const SCOPED_STORAGE_PREFIX = "orgii-mobile-remote-config:user:";
+const SCOPED_INVENTORY_PREFIX = "orgii-mobile-remote-pairings:user:";
 
 export function mobileConnectionStorageKey(userId: string): string {
   return `${SCOPED_STORAGE_PREFIX}${encodeURIComponent(userId)}`;
 }
 
+export function mobilePairedDesktopStorageKey(userId: string): string {
+  return `${SCOPED_INVENTORY_PREFIX}${encodeURIComponent(userId)}`;
+}
+
+function readInventory(
+  userId: string,
+  storage: Pick<Storage, "getItem">
+): StoredPairingInventory {
+  return parsePairingInventory(
+    storage.getItem(mobilePairedDesktopStorageKey(userId))
+  );
+}
+
 export function loadScopedMobileConnectionConfig(
   userId: string,
-  storage: Pick<Storage, "getItem"> = localStorage
+  storage: Pick<Storage, "getItem">
 ): MobileConnectionConfig | null {
   if (!userId.trim()) return null;
   try {
+    const inventory = readInventory(userId, storage);
+    const active = activePairingConfig(inventory);
+    if (active) return active;
     const raw = storage.getItem(mobileConnectionStorageKey(userId));
     return raw ? (JSON.parse(raw) as MobileConnectionConfig) : null;
   } catch {
@@ -22,10 +50,58 @@ export function loadScopedMobileConnectionConfig(
 export function saveScopedMobileConnectionConfig(
   userId: string,
   config: MobileConnectionConfig | null,
-  storage: Pick<Storage, "setItem" | "removeItem"> = localStorage
+  storage: Pick<Storage, "getItem" | "setItem" | "removeItem">,
+  nowMs = Date.now()
 ): void {
   if (!userId.trim()) return;
   const key = mobileConnectionStorageKey(userId);
-  if (config) storage.setItem(key, JSON.stringify(config));
-  else storage.removeItem(key);
+  const inventory = readInventory(userId, storage);
+  const nextInventory = updatePairingInventory(inventory, config, nowMs);
+  if (!config) {
+    storage.removeItem(key);
+    if (inventory.desktops.length > 0) {
+      storage.setItem(
+        mobilePairedDesktopStorageKey(userId),
+        JSON.stringify(nextInventory)
+      );
+    }
+    return;
+  }
+
+  storage.setItem(key, JSON.stringify(config));
+  storage.setItem(
+    mobilePairedDesktopStorageKey(userId),
+    JSON.stringify(nextInventory)
+  );
+}
+
+export function listScopedMobilePairedDesktops(
+  userId: string,
+  storage: Pick<Storage, "getItem">
+): MobilePairedDesktopSummary[] {
+  if (!userId.trim()) return [];
+  const inventory = readInventory(userId, storage);
+  return summarizePairingInventory(inventory);
+}
+
+export function selectScopedMobilePairedDesktop(
+  userId: string,
+  desktopId: string,
+  storage: Pick<Storage, "getItem" | "setItem">
+): MobileConnectionConfig | null {
+  if (!userId.trim() || !desktopId.trim()) return null;
+  const selected = selectPairingInventory(
+    readInventory(userId, storage),
+    desktopId
+  );
+  if (!selected) return null;
+  storage.setItem(
+    mobilePairedDesktopStorageKey(userId),
+    JSON.stringify(selected.inventory)
+  );
+  storage.setItem(
+    mobileConnectionStorageKey(userId),
+    JSON.stringify(selected.config)
+  );
+  return selected.config;
 }
diff --git a/src/modules/MobileRemote/connection/mobilePairedDesktopInventory.ts b/src/modules/MobileRemote/connection/mobilePairedDesktopInventory.ts
new file mode 100644
index 0000000000..4cf56227d1
--- /dev/null
+++ b/src/modules/MobileRemote/connection/mobilePairedDesktopInventory.ts
@@ -0,0 +1,130 @@
+import type {
+  MobileConnectionConfig,
+  MobilePairedDesktopSummary,
+} from "./types";
+
+const MAX_PAIRED_DESKTOPS = 20;
+
+export interface StoredPairedDesktop {
+  id: string;
+  name: string;
+  config: MobileConnectionConfig;
+  updatedAtMs: number;
+}
+
+export interface StoredPairingInventory {
+  version: 1;
+  activeDesktopId: string | null;
+  desktops: StoredPairedDesktop[];
+}
+
+function isConnectionConfig(value: unknown): value is MobileConnectionConfig {
+  if (!value || typeof value !== "object") return false;
+  const config = value as MobileConnectionConfig;
+  return (
+    (typeof config.wsUrl === "string" && !!config.wsUrl.trim()) ||
+    (typeof config.host === "string" && !!config.host.trim())
+  );
+}
+
+export function parsePairingInventory(
+  raw: string | null
+): StoredPairingInventory {
+  if (!raw) return { version: 1, activeDesktopId: null, desktops: [] };
+  try {
+    const value = JSON.parse(raw) as Partial<StoredPairingInventory>;
+    if (value.version !== 1 || !Array.isArray(value.desktops)) {
+      throw new Error("Unsupported pairing inventory");
+    }
+    const desktops = value.desktops
+      .filter(
+        (desktop): desktop is StoredPairedDesktop =>
+          !!desktop &&
+          typeof desktop.id === "string" &&
+          !!desktop.id &&
+          typeof desktop.name === "string" &&
+          !!desktop.name &&
+          typeof desktop.updatedAtMs === "number" &&
+          isConnectionConfig(desktop.config)
+      )
+      .slice(0, MAX_PAIRED_DESKTOPS);
+    return {
+      version: 1,
+      activeDesktopId:
+        typeof value.activeDesktopId === "string"
+          ? value.activeDesktopId
+          : null,
+      desktops,
+    };
+  } catch {
+    return { version: 1, activeDesktopId: null, desktops: [] };
+  }
+}
+
+export function updatePairingInventory(
+  inventory: StoredPairingInventory,
+  config: MobileConnectionConfig | null,
+  nowMs: number
+): StoredPairingInventory {
+  if (!config) return { ...inventory, activeDesktopId: null };
+  const endpoint =
+    config.wsUrl?.trim() ||
+    [config.host?.trim(), config.port].filter(Boolean).join(":");
+  const id = config.desktopId?.trim() || `endpoint:${endpoint}`;
+  const desktop: StoredPairedDesktop = {
+    id,
+    name:
+      config.deviceLabel?.trim() ||
+      config.desktopId?.trim() ||
+      config.host?.trim() ||
+      "Paired Desktop",
+    config,
+    updatedAtMs: nowMs,
+  };
+  return {
+    version: 1,
+    activeDesktopId: id,
+    desktops: [
+      desktop,
+      ...inventory.desktops.filter((candidate) => candidate.id !== id),
+    ].slice(0, MAX_PAIRED_DESKTOPS),
+  };
+}
+
+export function activePairingConfig(
+  inventory: StoredPairingInventory
+): MobileConnectionConfig | null {
+  return (
+    inventory.desktops.find(
+      (desktop) => desktop.id === inventory.activeDesktopId
+    )?.config ?? null
+  );
+}
+
+export function selectPairingInventory(
+  inventory: StoredPairingInventory,
+  desktopId: string
+): {
+  inventory: StoredPairingInventory;
+  config: MobileConnectionConfig;
+} | null {
+  const desktop = inventory.desktops.find(
+    (candidate) => candidate.id === desktopId
+  );
+  if (!desktop) return null;
+  return {
+    inventory: { ...inventory, activeDesktopId: desktop.id },
+    config: desktop.config,
+  };
+}
+
+export function summarizePairingInventory(
+  inventory: StoredPairingInventory
+): MobilePairedDesktopSummary[] {
+  return inventory.desktops.map(({ id, name, updatedAtMs }) => ({
+    id,
+    name,
+    updatedAtMs,
+    active: id === inventory.activeDesktopId,
+  }));
+}
diff --git a/src/modules/MobileRemote/connection/mobileRpcClient.test.ts b/src/modules/MobileRemote/connection/mobileRpcClient.test.ts
index e2fe4f0f3d..1b85e74bcb 100644
--- a/src/modules/MobileRemote/connection/mobileRpcClient.test.ts
+++ b/src/modules/MobileRemote/connection/mobileRpcClient.test.ts
@@ -24,10 +24,19 @@ function createMockSocket() {
   return socket;
 }
 
+const runtime = {
+  setTimeout: (callback: () => void, delayMs: number) =>
+    window.setTimeout(callback, delayMs),
+  clearTimeout: (timeoutId: number) => window.clearTimeout(timeoutId),
+};
+
 describe("createMobileRpcClient", () => {
   it("resolves call results by id", async () => {
     const socket = createMockSocket();
-    const client = createMobileRpcClient(socket as unknown as WebSocket);
+    const client = createMobileRpcClient(
+      socket as unknown as WebSocket,
+      runtime
+    );
     const promise = client.call<{ ok: boolean }>("initialize", {
       protocolVersion: 1,
     });
@@ -41,7 +50,10 @@ describe("createMobileRpcClient", () => {
 
   it("rejects on rpc error", async () => {
     const socket = createMockSocket();
-    const client = createMobileRpcClient(socket as unknown as WebSocket);
+    const client = createMobileRpcClient(
+      socket as unknown as WebSocket,
+      runtime
+    );
     const promise = client.call("session/list");
     socket.emit(
       "message",
@@ -56,7 +68,10 @@ describe("createMobileRpcClient", () => {
 
   it("dispatches notifications without id", () => {
     const socket = createMockSocket();
-    const client = createMobileRpcClient(socket as unknown as WebSocket);
+    const client = createMobileRpcClient(
+      socket as unknown as WebSocket,
+      runtime
+    );
     const handler = vi.fn();
     client.onNotification(handler);
     socket.emit(
@@ -74,7 +89,10 @@ describe("createMobileRpcClient", () => {
     vi.useFakeTimers();
     try {
       const socket = createMockSocket();
-      const client = createMobileRpcClient(socket as unknown as WebSocket);
+      const client = createMobileRpcClient(
+        socket as unknown as WebSocket,
+        runtime
+      );
       const promise = client.call("session/list");
       const expectation = expect(promise).rejects.toThrow(
         "RPC call timed out: session/list"
@@ -88,7 +106,10 @@ describe("createMobileRpcClient", () => {
 
   it("rejects outstanding calls when the socket closes", async () => {
     const socket = createMockSocket();
-    const client = createMobileRpcClient(socket as unknown as WebSocket);
+    const client = createMobileRpcClient(
+      socket as unknown as WebSocket,
+      runtime
+    );
     const promise = client.call("session/list");
     socket.emit("close", "");
     await expect(promise).rejects.toThrow("WebSocket closed");
diff --git a/src/modules/MobileRemote/connection/mobileRpcClient.ts b/src/modules/MobileRemote/connection/mobileRpcClient.ts
index eac091402c..9251642211 100644
--- a/src/modules/MobileRemote/connection/mobileRpcClient.ts
+++ b/src/modules/MobileRemote/connection/mobileRpcClient.ts
@@ -1,3 +1,4 @@
+import type { MobileRemoteRuntimePort } from "../platform/types";
 import type {
   JsonRpcInbound,
   JsonRpcNotification,
@@ -29,14 +30,17 @@ const CLOSED = 3;
 const MAX_PENDING_CALLS = 128;
 const RPC_TIMEOUT_MS = 15_000;
 
-export function createMobileRpcClient(socket: WebSocket): MobileRpcClient {
+export function createMobileRpcClient(
+  socket: WebSocket,
+  runtime: Pick<MobileRemoteRuntimePort, "setTimeout" | "clearTimeout">
+): MobileRpcClient {
   let nextId = 1;
   const pending = new Map<number, PendingCall>();
   const notificationHandlers = new Set<RpcNotificationHandler>();
 
   const flushPending = (error: Error) => {
     for (const entry of pending.values()) {
-      window.clearTimeout(entry.timeoutId);
+      runtime.clearTimeout(entry.timeoutId);
       entry.reject(error);
     }
     pending.clear();
@@ -54,7 +58,7 @@ export function createMobileRpcClient(socket: WebSocket): MobileRpcClient {
       const waiter = pending.get(parsed.id);
       if (!waiter) return;
       pending.delete(parsed.id);
-      window.clearTimeout(waiter.timeoutId);
+      runtime.clearTimeout(waiter.timeoutId);
       if (parsed.error) {
         waiter.reject(
           new Error(parsed.error.message || `RPC error ${parsed.error.code}`)
@@ -80,7 +84,7 @@ export function createMobileRpcClient(socket: WebSocket): MobileRpcClient {
       return socket.readyState;
     },
     call<T>(method: string, params: Record<string, unknown> = {}): Promise<T> {
-      if (socket.readyState !== WebSocket.OPEN) {
+      if (socket.readyState !== 1) {
         return Promise.reject(new Error("WebSocket is not open"));
       }
       if (pending.size >= MAX_PENDING_CALLS) {
@@ -94,7 +98,7 @@ export function createMobileRpcClient(socket: WebSocket): MobileRpcClient {
         params,
       };
       return new Promise<T>((resolve, reject) => {
-        const timeoutId = window.setTimeout(() => {
+        const timeoutId = runtime.setTimeout(() => {
           pending.delete(id);
           reject(new Error(`RPC call timed out: ${method}`));
         }, RPC_TIMEOUT_MS);
@@ -107,7 +111,7 @@ export function createMobileRpcClient(socket: WebSocket): MobileRpcClient {
       });
     },
     notify(method: string, params: Record<string, unknown> = {}) {
-      if (socket.readyState !== WebSocket.OPEN) return;
+      if (socket.readyState !== 1) return;
       socket.send(JSON.stringify({ jsonrpc: "2.0", method, params }));
     },
     onNotification(handler: RpcNotificationHandler) {
diff --git a/src/modules/MobileRemote/connection/parseMobileRemoteWsUrl.test.ts b/src/modules/MobileRemote/connection/parseMobileRemoteWsUrl.test.ts
index 7754f4f147..1eab3a19f5 100644
--- a/src/modules/MobileRemote/connection/parseMobileRemoteWsUrl.test.ts
+++ b/src/modules/MobileRemote/connection/parseMobileRemoteWsUrl.test.ts
@@ -132,6 +132,36 @@ describe("parseMobileRemoteWsUrl", () => {
     });
   });
 
+  it("parses the native iOS pairing deep link the shell registers", () => {
+    // tauriMobileRemotePlatform accepts org2remote://pair with the payload in
+    // `pair`, as a query parameter or a fragment. Both have to resolve here or
+    // the shell hands the app a link it silently drops.
+    const payload = btoa(
+      JSON.stringify({
+        v: 1,
+        relayUrl: "wss://relay.example.com/v1/mobile/ws",
+        pairingCode: "PAIR-IOS",
+        deviceToken: "device-secret",
+        sasPhrase: "ocean-maple-kite",
+      })
+    )
+      .replace(/\+/g, "-")
+      .replace(/\//g, "_")
+      .replace(/=+$/, "");
+
+    for (const link of [
+      `org2remote://pair#pair=${payload}`,
+      `org2remote://pair?pair=${payload}`,
+    ]) {
+      expect(parseMobileRemoteWsUrl(link)).toMatchObject({
+        ok: true,
+        requiresSas: true,
+        sasPhrase: "ocean-maple-kite",
+        config: { deviceToken: "device-secret", pairingCode: "PAIR-IOS" },
+      });
+    }
+  });
+
   it("rejects unsupported protocol version", () => {
     expect(
       parseMobileRemoteWsUrl(JSON.stringify({ v: 2, relayUrl: "wss://x" }))
diff --git a/src/modules/MobileRemote/connection/parseMobileRemoteWsUrl.ts b/src/modules/MobileRemote/connection/parseMobileRemoteWsUrl.ts
index 7b9b7da6e6..cf9b76fc15 100644
--- a/src/modules/MobileRemote/connection/parseMobileRemoteWsUrl.ts
+++ b/src/modules/MobileRemote/connection/parseMobileRemoteWsUrl.ts
@@ -118,12 +118,15 @@ function parseWsUrl(raw: string): ParseMobileRemoteWsUrlResult {
   }
 }
 
+const PAIRING_LINK_SCHEMES = [
+  "orgii://",
+  "org2remote://",
+  "https://",
+  "http://",
+];
+
 function parsePairingLink(raw: string): ParseMobileRemoteWsUrlResult | null {
-  if (
-    !raw.startsWith("orgii://") &&
-    !raw.startsWith("https://") &&
-    !raw.startsWith("http://")
-  ) {
+  if (!PAIRING_LINK_SCHEMES.some((scheme) => raw.startsWith(scheme))) {
     return null;
   }
   try {
@@ -132,13 +135,21 @@ function parsePairingLink(raw: string): ParseMobileRemoteWsUrlResult | null {
       url.protocol === "orgii:" &&
       url.hostname === "mobile" &&
       url.pathname === "/pair";
+    // The iOS shell registers org2remote://pair and hands the raw link to this
+    // parser, so the native deep link has to resolve here too. Its payload key
+    // is `pair`, in the query or the fragment.
+    const isNativeDeepLink =
+      url.protocol === "org2remote:" && url.hostname === "pair";
     const isWebLink =
       (url.protocol === "http:" || url.protocol === "https:") &&
       url.pathname.endsWith("/orgii/mobile");
-    if (!isDeepLink && !isWebLink) return null;
+    if (!isDeepLink && !isNativeDeepLink && !isWebLink) return null;
     const fragment = new URLSearchParams(url.hash.replace(/^#/, ""));
     const payload =
-      url.searchParams.get("payload") ?? fragment.get("pair") ?? undefined;
+      url.searchParams.get("payload") ??
+      url.searchParams.get("pair") ??
+      fragment.get("pair") ??
+      undefined;
     if (!payload?.trim()) {
       return { ok: false, errorKey: "pairing.errors.invalid" };
     }
diff --git a/src/modules/MobileRemote/connection/types.ts b/src/modules/MobileRemote/connection/types.ts
index 25331faa8f..5c88772613 100644
--- a/src/modules/MobileRemote/connection/types.ts
+++ b/src/modules/MobileRemote/connection/types.ts
@@ -84,6 +84,14 @@ export interface MobileConnectionConfig {
   deviceLabel?: string;
 }
 
+/** Sanitized local pairing metadata; credentials remain inside platform storage. */
+export interface MobilePairedDesktopSummary {
+  id: string;
+  name: string;
+  active: boolean;
+  updatedAtMs: number;
+}
+
 export interface MobileConnectionState {
   status: ConnectionStatus;
   presence: DesktopPresence;
diff --git a/src/modules/MobileRemote/dev/MobileRemoteDevelopmentRoot.test.ts b/src/modules/MobileRemote/dev/MobileRemoteDevelopmentRoot.test.ts
new file mode 100644
index 0000000000..76eff39840
--- /dev/null
+++ b/src/modules/MobileRemote/dev/MobileRemoteDevelopmentRoot.test.ts
@@ -0,0 +1,93 @@
+// @vitest-environment jsdom
+import React from "react";
+import { renderToStaticMarkup } from "react-dom/server";
+import { I18nextProvider } from "react-i18next";
+import { describe, expect, it, vi } from "vitest";
+
+import i18n, { i18nReady } from "@src/i18n";
+import enMobileRemote from "@src/i18n/locales/en/mobileRemote.json";
+
+import { createBrowserMobileRemotePlatform } from "../platform/browser";
+import {
+  MobileRemoteDevelopmentRoot,
+  resolveDevelopmentPairingUserId,
+} from "./MobileRemoteDevelopmentRoot";
+
+describe("MobileRemoteDevelopmentRoot", () => {
+  it("enters the shared Mobile Remote app without constructing an auth client", async () => {
+    await i18nReady;
+    i18n.addResourceBundle("en", "mobileRemote", enMobileRemote, true, true);
+    await i18n.changeLanguage("en");
+    const platform = createBrowserMobileRemotePlatform();
+    const createClient = vi.spyOn(platform.auth, "createClient");
+
+    const markup = renderToStaticMarkup(
+      React.createElement(
+        I18nextProvider,
+        { i18n },
+        React.createElement(MobileRemoteDevelopmentRoot, { platform })
+      )
+    );
+
+    expect(markup).toContain("Mobile Remote");
+    expect(markup).toContain("Try demo");
+    expect(createClient).not.toHaveBeenCalled();
+  });
+
+  it("reuses the stored account scope when development has no own pairings", async () => {
+    const platform = createBrowserMobileRemotePlatform();
+    vi.spyOn(platform.connection, "listPairedDesktops").mockResolvedValue([]);
+    vi.spyOn(platform.auth, "readSession").mockResolvedValue({
+      kind: "org2_cloud",
+      supabaseUrl: "https://cloud.example.test",
+      supabaseAnonKey: "anon-key",
+      userId: "user-a",
+      accessToken: "access",
+      refreshToken: "refresh",
+      expiresAt: 1_900_000_000,
+    });
+
+    await expect(resolveDevelopmentPairingUserId(platform)).resolves.toBe(
+      "user-a"
+    );
+  });
+
+  it("keeps a populated development scope stable across later launches", async () => {
+    const platform = createBrowserMobileRemotePlatform();
+    vi.spyOn(platform.connection, "listPairedDesktops").mockResolvedValue([
+      {
+        id: "desktop-a",
+        name: "Home Mac",
+        updatedAtMs: 1_800_000_000_000,
+        active: true,
+      },
+    ]);
+    vi.spyOn(platform.auth, "readSession").mockResolvedValue({
+      kind: "org2_cloud",
+      supabaseUrl: "https://cloud.example.test",
+      supabaseAnonKey: "anon-key",
+      userId: "user-a",
+      accessToken: "access",
+      refreshToken: "refresh",
+      expiresAt: 1_900_000_000,
+    });
+
+    await expect(resolveDevelopmentPairingUserId(platform)).resolves.toBe(
+      "local-development"
+    );
+  });
+
+  it("falls back to the stable development scope when Keychain reads fail", async () => {
+    const platform = createBrowserMobileRemotePlatform();
+    vi.spyOn(platform.connection, "listPairedDesktops").mockRejectedValue(
+      new Error("keychain unavailable")
+    );
+    vi.spyOn(platform.auth, "readSession").mockRejectedValue(
+      new Error("keychain unavailable")
+    );
+
+    await expect(resolveDevelopmentPairingUserId(platform)).resolves.toBe(
+      "local-development"
+    );
+  });
+});
diff --git a/src/modules/MobileRemote/dev/MobileRemoteDevelopmentRoot.tsx b/src/modules/MobileRemote/dev/MobileRemoteDevelopmentRoot.tsx
new file mode 100644
index 0000000000..c93623d440
--- /dev/null
+++ b/src/modules/MobileRemote/dev/MobileRemoteDevelopmentRoot.tsx
@@ -0,0 +1,112 @@
+import React, { useEffect, useMemo, useState } from "react";
+
+import { MobileRemoteApp } from "../MobileRemoteApp";
+import { MobileAuthContext } from "../auth/MobileAuthContext";
+import type { MobileAuthSession } from "../auth/mobileAuthState";
+import {
+  type MobileRemotePlatform,
+  MobileRemotePlatformProvider,
+} from "../platform";
+
+const DEVELOPMENT_PAIRING_USER_ID = "local-development";
+
+function createDevelopmentAuthSession(userId: string): MobileAuthSession {
+  return {
+    kind: "org2_cloud",
+    supabaseUrl: "https://local-development.invalid",
+    supabaseAnonKey: "local-development",
+    userId,
+    accessToken: "local-development",
+    refreshToken: "local-development",
+    expiresAt: 4_102_444_800,
+    profile: { displayName: "Local development" },
+  };
+}
+
+/**
+ * Development skips Cloud authentication, but pairing ownership still needs a
+ * stable Keychain scope. Prefer an existing development inventory; otherwise
+ * reuse the last signed-in account so enabling the bypass does not orphan its
+ * paired desktops.
+ */
+export async function resolveDevelopmentPairingUserId(
+  platform: MobileRemotePlatform
+): Promise<string> {
+  const [developmentInventory, storedSession] = await Promise.allSettled([
+    platform.connection.listPairedDesktops(DEVELOPMENT_PAIRING_USER_ID),
+    platform.auth.readSession(),
+  ]);
+  if (
+    developmentInventory.status === "fulfilled" &&
+    developmentInventory.value.length > 0
+  ) {
+    return DEVELOPMENT_PAIRING_USER_ID;
+  }
+  if (storedSession.status === "fulfilled") {
+    const storedUserId = storedSession.value?.userId.trim();
+    if (storedUserId) return storedUserId;
+  }
+  return DEVELOPMENT_PAIRING_USER_ID;
+}
+
+export interface MobileRemoteDevelopmentRootProps {
+  platform: MobileRemotePlatform;
+  pairingUserId?: string;
+}
+
+/**
+ * Local native-development root. The production entry removes this dynamic
+ * module entirely, so release builds cannot construct the synthetic identity.
+ */
+export function MobileRemoteDevelopmentRoot({
+  platform,
+  pairingUserId = DEVELOPMENT_PAIRING_USER_ID,
+}: MobileRemoteDevelopmentRootProps) {
+  const [recoveredPairingIntent, setRecoveredPairingIntent] = useState(() =>
+    platform.auth.captureInitialPairingIntent()
+  );
+
+  useEffect(() => {
+    let active = true;
+    let consumeChain = Promise.resolve();
+    const consumePairingIntent = () => {
+      const operation = consumeChain
+        .then(() => platform.auth.consumePairingIntent())
+        .then((intent) => {
+          if (active && intent) setRecoveredPairingIntent(intent);
+        });
+      consumeChain = operation.catch(() => undefined);
+    };
+
+    consumePairingIntent();
+    const unsubscribe = platform.auth.subscribeIntent((event) => {
+      if (event === "pairing") consumePairingIntent();
+    });
+    return () => {
+      active = false;
+      unsubscribe();
+    };
+  }, [platform.auth]);
+
+  const auth = useMemo(() => {
+    const session = createDevelopmentAuthSession(pairingUserId);
+    return {
+      session,
+      signOut: () => undefined,
+      isDevelopmentBypass: true,
+    };
+  }, [pairingUserId]);
+
+  return (
+    <MobileRemotePlatformProvider platform={platform}>
+      <MobileAuthContext.Provider value={auth}>
+        <MobileRemoteApp
+          authUserId={pairingUserId}
+          recoveredPairingIntent={recoveredPairingIntent}
+        />
+      </MobileAuthContext.Provider>
+    </MobileRemotePlatformProvider>
+  );
+}
+
+MobileRemoteDevelopmentRoot.displayName = "MobileRemoteDevelopmentRoot";
diff --git a/src/modules/MobileRemote/index.tsx b/src/modules/MobileRemote/index.tsx
index 69a5e26ffc..4d0b987ed1 100644
--- a/src/modules/MobileRemote/index.tsx
+++ b/src/modules/MobileRemote/index.tsx
@@ -1,5 +1,7 @@
-export { MobileRemoteApp, default } from "./MobileRemoteApp";
+export { MobileRemoteApp } from "./MobileRemoteApp";
 export type { MobileRemoteAppProps } from "./MobileRemoteApp";
+export { MobileRemoteRoot } from "./MobileRemoteRoot";
+export type { MobileRemoteRootProps } from "./MobileRemoteRoot";
 export { MobileRemoteProviders, useMobileRemote } from "./app";
 export {
   createInitialMobileRemoteNavState,
diff --git a/src/modules/MobileRemote/mobileBrowserBoundary.test.ts b/src/modules/MobileRemote/mobileBrowserBoundary.test.ts
index ec9f02585e..93354c7d69 100644
--- a/src/modules/MobileRemote/mobileBrowserBoundary.test.ts
+++ b/src/modules/MobileRemote/mobileBrowserBoundary.test.ts
@@ -1,6 +1,9 @@
+import { readFileSync } from "node:fs";
+import path from "node:path";
 import { describe, expect, it } from "vitest";
 
 import {
+  SRC_ROOT,
   importersOfPackage,
   reachableFilesMatching,
   walkStaticImports,
@@ -12,6 +15,9 @@ describe("mobile remote browser boundary", () => {
     "modules/MobileRemote/auth/MobileAuthGate.tsx",
     "modules/MobileRemote/auth/mobileAuthClient.ts",
   ]);
+  const sharedRootGraph = walkStaticImports([
+    "modules/MobileRemote/MobileRemoteRoot.tsx",
+  ]);
 
   it("keeps desktop transcript renderers out of the public mobile bundle", () => {
     // Mobile may reuse the explicitly listed pure header/config leaves. Keep
@@ -53,4 +59,33 @@ describe("mobile remote browser boundary", () => {
       "Tauri packages became reachable from the browser auth boundary"
     ).toEqual([]);
   });
+
+  it("keeps the shared root independent from the browser platform adapter", () => {
+    const browserPlatformFiles = reachableFilesMatching(
+      sharedRootGraph,
+      /^modules\/MobileRemote\/platform\/browser\//u
+    );
+    expect(
+      browserPlatformFiles.map((file) => sharedRootGraph.explain(file)),
+      "the platform-neutral MobileRemoteRoot reached the browser adapter"
+    ).toEqual([]);
+  });
+
+  it("keeps browser globals out of the shared root import graph", () => {
+    const browserGlobalPattern =
+      /\b(?:window|document)\.|\b(?:localStorage|sessionStorage)\b/u;
+    const offenders = [...sharedRootGraph.files]
+      .filter((file) =>
+        path
+          .relative(SRC_ROOT, file)
+          .startsWith(`modules${path.sep}MobileRemote${path.sep}`)
+      )
+      .filter((file) => browserGlobalPattern.test(readFileSync(file, "utf8")))
+      .map((file) => sharedRootGraph.explain(path.relative(SRC_ROOT, file)));
+
+    expect(
+      offenders,
+      "browser globals became reachable from the platform-neutral MobileRemoteRoot"
+    ).toEqual([]);
+  });
 });
diff --git a/src/modules/MobileRemote/platform/MobileRemotePlatformContext.tsx b/src/modules/MobileRemote/platform/MobileRemotePlatformContext.tsx
new file mode 100644
index 0000000000..c72f4bb642
--- /dev/null
+++ b/src/modules/MobileRemote/platform/MobileRemotePlatformContext.tsx
@@ -0,0 +1,35 @@
+import React, { createContext, useContext } from "react";
+
+import type { MobileRemotePlatform } from "./types";
+
+const MobileRemotePlatformContext = createContext<MobileRemotePlatform | null>(
+  null
+);
+
+export interface MobileRemotePlatformProviderProps {
+  platform: MobileRemotePlatform;
+  children: React.ReactNode;
+}
+
+export function MobileRemotePlatformProvider({
+  platform,
+  children,
+}: MobileRemotePlatformProviderProps) {
+  return (
+    <MobileRemotePlatformContext.Provider value={platform}>
+      {children}
+    </MobileRemotePlatformContext.Provider>
+  );
+}
+
+export function useMobileRemotePlatform(): MobileRemotePlatform {
+  const platform = useContext(MobileRemotePlatformContext);
+  if (!platform) {
+    throw new Error(
+      "useMobileRemotePlatform must be used within MobileRemotePlatformProvider"
+    );
+  }
+  return platform;
+}
+
+MobileRemotePlatformProvider.displayName = "MobileRemotePlatformProvider";
diff --git a/src/modules/MobileRemote/platform/browser/browserMobileAuthClient.ts b/src/modules/MobileRemote/platform/browser/browserMobileAuthClient.ts
new file mode 100644
index 0000000000..253ad05db8
--- /dev/null
+++ b/src/modules/MobileRemote/platform/browser/browserMobileAuthClient.ts
@@ -0,0 +1,21 @@
+import type { SupportedStorage } from "@supabase/supabase-js";
+
+import type { MobileAuthClient } from "../../auth/mobileAuthClient";
+import {
+  type SupabaseMobileAuthClientOptions,
+  createSupabaseMobileAuthClient,
+} from "../supabaseMobileAuthClient";
+
+export type BrowserMobileAuthClientOptions = Pick<
+  SupabaseMobileAuthClientOptions,
+  "oauthStorage" | "fetcher"
+> & {
+  oauthStorage: SupportedStorage;
+};
+
+/** Browser binding retained for compatibility; OAuth behavior is shared. */
+export function createBrowserMobileAuthClient(
+  options: BrowserMobileAuthClientOptions
+): MobileAuthClient {
+  return createSupabaseMobileAuthClient(options);
+}
diff --git a/src/modules/MobileRemote/platform/browser/browserMobileRemotePlatform.ts b/src/modules/MobileRemote/platform/browser/browserMobileRemotePlatform.ts
new file mode 100644
index 0000000000..0e1738d23f
--- /dev/null
+++ b/src/modules/MobileRemote/platform/browser/browserMobileRemotePlatform.ts
@@ -0,0 +1,128 @@
+import {
+  MOBILE_AUTH_CALLBACK_PATH,
+  beginMobileOAuthAttempt,
+  captureOpaquePairingIntent,
+  clearMobileAuthIntents,
+  consumeMobileOAuthAttempt,
+  consumeOpaquePairingIntent,
+  isMobileAuthCallback,
+} from "../../auth/mobileAuthIntent";
+import {
+  clearMobileAuthSession,
+  readMobileAuthSession,
+  writeMobileAuthSession,
+} from "../../auth/mobileAuthStorage";
+import {
+  listScopedMobilePairedDesktops,
+  loadScopedMobileConnectionConfig,
+  saveScopedMobileConnectionConfig,
+  selectScopedMobilePairedDesktop,
+} from "../../connection/mobileConnectionStorage";
+import type { MobileRemotePlatform } from "../types";
+import { createBrowserMobileAuthClient } from "./browserMobileAuthClient";
+
+const MOBILE_AUTH_ROOT_PATH = "/orgii/mobile";
+
+export function createBrowserMobileRemotePlatform(): MobileRemotePlatform {
+  const runtime: MobileRemotePlatform["runtime"] = {
+    now: () => Date.now(),
+    random: () => Math.random(),
+    randomUUID: () => crypto.randomUUID(),
+    setTimeout: (callback, delayMs) => window.setTimeout(callback, delayMs),
+    clearTimeout: (timeoutId) => window.clearTimeout(timeoutId),
+    isHidden: () => document.hidden,
+    subscribeVisibility(listener) {
+      document.addEventListener("visibilitychange", listener);
+      return () => document.removeEventListener("visibilitychange", listener);
+    },
+    portalContainer: () => document.body,
+  };
+
+  return {
+    kind: "browser",
+    clientInfo: {
+      name: "orgii-mobile-pwa",
+      version: "0.1.0",
+      defaultDeviceLabel: "ORGII Mobile",
+    },
+    runtime,
+    auth: {
+      createClient: () =>
+        createBrowserMobileAuthClient({
+          oauthStorage: sessionStorage,
+          fetcher: window.fetch.bind(window),
+        }),
+      captureInitialPairingIntent: () =>
+        captureOpaquePairingIntent(
+          window.location,
+          window.history,
+          sessionStorage,
+          runtime.now()
+        ),
+      isCallback: () => isMobileAuthCallback(window.location),
+      currentUrl: () => window.location.href,
+      callbackUrl: () =>
+        new URL(MOBILE_AUTH_CALLBACK_PATH, window.location.origin).toString(),
+      scrubCallback: () =>
+        window.history.replaceState(
+          window.history.state,
+          "",
+          MOBILE_AUTH_ROOT_PATH
+        ),
+      navigate: (url) => window.location.assign(url),
+      async beginOAuthAttempt(attemptId) {
+        beginMobileOAuthAttempt(attemptId, sessionStorage, runtime.now());
+      },
+      async consumeOAuthAttempt() {
+        return consumeMobileOAuthAttempt(sessionStorage, runtime.now());
+      },
+      async consumePairingIntent() {
+        return consumeOpaquePairingIntent(sessionStorage, runtime.now());
+      },
+      async clearIntents() {
+        clearMobileAuthIntents(sessionStorage);
+      },
+      async readSession() {
+        return readMobileAuthSession(localStorage);
+      },
+      async writeSession(session) {
+        writeMobileAuthSession(session, localStorage);
+      },
+      async clearSession() {
+        clearMobileAuthSession(localStorage);
+      },
+      subscribeIntent() {
+        // Browser redirects remount the page; warm native deep links use the
+        // Tauri implementation of this port.
+        return () => undefined;
+      },
+    },
+    connection: {
+      createSocket: (url) => new WebSocket(url),
+      async load(userId) {
+        return loadScopedMobileConnectionConfig(userId, localStorage);
+      },
+      async listPairedDesktops(userId) {
+        return listScopedMobilePairedDesktops(userId, localStorage);
+      },
+      async selectPairedDesktop(userId, desktopId) {
+        return selectScopedMobilePairedDesktop(userId, desktopId, localStorage);
+      },
+      async save(userId, config) {
+        saveScopedMobileConnectionConfig(
+          userId,
+          config,
+          localStorage,
+          runtime.now()
+        );
+      },
+    },
+  };
+}
+
+let browserPlatform: MobileRemotePlatform | null = null;
+
+export function getBrowserMobileRemotePlatform(): MobileRemotePlatform {
+  browserPlatform ??= createBrowserMobileRemotePlatform();
+  return browserPlatform;
+}
diff --git a/src/modules/MobileRemote/platform/browser/index.ts b/src/modules/MobileRemote/platform/browser/index.ts
new file mode 100644
index 0000000000..59fa526d9a
--- /dev/null
+++ b/src/modules/MobileRemote/platform/browser/index.ts
@@ -0,0 +1,4 @@
+export {
+  createBrowserMobileRemotePlatform,
+  getBrowserMobileRemotePlatform,
+} from "./browserMobileRemotePlatform";
diff --git a/src/modules/MobileRemote/platform/index.ts b/src/modules/MobileRemote/platform/index.ts
new file mode 100644
index 0000000000..1e5a3fc8e3
--- /dev/null
+++ b/src/modules/MobileRemote/platform/index.ts
@@ -0,0 +1,10 @@
+export {
+  MobileRemotePlatformProvider,
+  useMobileRemotePlatform,
+} from "./MobileRemotePlatformContext";
+export type {
+  MobileRemoteAuthPort,
+  MobileRemoteConnectionPort,
+  MobileRemotePlatform,
+  MobileRemoteRuntimePort,
+} from "./types";
diff --git a/src/modules/MobileRemote/platform/supabaseMobileAuthClient.ts b/src/modules/MobileRemote/platform/supabaseMobileAuthClient.ts
new file mode 100644
index 0000000000..034e3267c9
--- /dev/null
+++ b/src/modules/MobileRemote/platform/supabaseMobileAuthClient.ts
@@ -0,0 +1,222 @@
+import {
+  type Session,
+  type SupabaseClient,
+  type SupportedStorage,
+  createClient,
+} from "@supabase/supabase-js";
+
+import {
+  ORG2_CLOUD_OFFICIAL_ANON_KEY,
+  ORG2_CLOUD_OFFICIAL_SUPABASE_URL,
+} from "@src/features/Org2Cloud/config";
+
+import {
+  type MobileAuthClient,
+  MobileAuthClientError,
+} from "../auth/mobileAuthClient";
+import type { MobileAuthSession } from "../auth/mobileAuthState";
+
+export const MOBILE_AUTH_SERVER_SESSION_PATH = "/v1/mobile/auth/session";
+const EXPIRY_SKEW_SECONDS = 60;
+
+function isPermanentStatus(status: unknown): boolean {
+  return status === 400 || status === 401 || status === 403;
+}
+
+export function toMobileAuthClientError(error: unknown): MobileAuthClientError {
+  if (error instanceof MobileAuthClientError) return error;
+  if (error && typeof error === "object") {
+    const record = error as { message?: unknown; status?: unknown };
+    return new MobileAuthClientError(
+      typeof record.message === "string"
+        ? record.message
+        : "Authentication failed",
+      !isPermanentStatus(record.status)
+    );
+  }
+  return new MobileAuthClientError(
+    error instanceof Error ? error.message : "Authentication failed"
+  );
+}
+
+function profileFromSession(
+  session: Session,
+  previous?: MobileAuthSession["profile"]
+): MobileAuthSession["profile"] {
+  const metadata = session.user.user_metadata ?? {};
+  const displayName =
+    typeof metadata.full_name === "string"
+      ? metadata.full_name
+      : typeof metadata.name === "string"
+        ? metadata.name
+        : previous?.displayName;
+  const primaryEmail = session.user.email ?? previous?.primaryEmail;
+  const avatarUrl =
+    typeof metadata.avatar_url === "string"
+      ? metadata.avatar_url
+      : previous?.avatarUrl;
+  return displayName || primaryEmail || avatarUrl
+    ? { displayName, primaryEmail, avatarUrl }
+    : undefined;
+}
+
+function toMobileSession(
+  session: Session,
+  previous?: MobileAuthSession
+): MobileAuthSession {
+  const expiresAt = session.expires_at;
+  if (!expiresAt || !session.user.id) {
+    throw new MobileAuthClientError(
+      "Authentication response is incomplete",
+      false
+    );
+  }
+  return {
+    kind: "org2_cloud",
+    supabaseUrl: ORG2_CLOUD_OFFICIAL_SUPABASE_URL,
+    supabaseAnonKey: ORG2_CLOUD_OFFICIAL_ANON_KEY,
+    userId: session.user.id,
+    accessToken: session.access_token,
+    refreshToken: session.refresh_token,
+    expiresAt,
+    profile: profileFromSession(session, previous?.profile),
+  };
+}
+
+function createOfficialClient(storage: SupportedStorage): SupabaseClient {
+  return createClient(
+    ORG2_CLOUD_OFFICIAL_SUPABASE_URL,
+    ORG2_CLOUD_OFFICIAL_ANON_KEY,
+    {
+      auth: {
+        autoRefreshToken: false,
+        detectSessionInUrl: false,
+        persistSession: true,
+        flowType: "pkce",
+        storage,
+      },
+    }
+  );
+}
+
+export interface SupabaseMobileAuthClientOptions {
+  oauthStorage: SupportedStorage;
+  fetcher: typeof fetch;
+  /** Native shells omit this because they do not own browser cookies. */
+  serverSessionUrl?: string | null;
+  now?: () => number;
+}
+
+/** Shared PKCE implementation. Shells inject storage/navigation boundaries. */
+export function createSupabaseMobileAuthClient({
+  oauthStorage,
+  fetcher,
+  serverSessionUrl = MOBILE_AUTH_SERVER_SESSION_PATH,
+  now = Date.now,
+}: SupabaseMobileAuthClientOptions): MobileAuthClient {
+  const supabase = createOfficialClient(oauthStorage);
+
+  return {
+    async buildLoginUrl(callbackUrl) {
+      const { data, error } = await supabase.auth.signInWithOAuth({
+        provider: "github",
+        options: {
+          redirectTo: callbackUrl,
+          skipBrowserRedirect: true,
+          scopes: "read:user user:email",
+        },
+      });
+      if (error || !data.url) throw toMobileAuthClientError(error);
+      return data.url;
+    },
+
+    async exchangeCallback(callbackUrl) {
+      try {
+        const parsed = new URL(callbackUrl);
+        const code = parsed.searchParams.get("code")?.trim();
+        if (!code || parsed.hash) {
+          throw new MobileAuthClientError(
+            "Authentication callback is incomplete",
+            false
+          );
+        }
+        const result = await supabase.auth.exchangeCodeForSession(code);
+        if (result.error || !result.data.session) {
+          throw toMobileAuthClientError(result.error);
+        }
+        return toMobileSession(result.data.session);
+      } catch (error) {
+        throw toMobileAuthClientError(error);
+      }
+    },
+
+    async restoreSession(stored, options) {
+      if (
+        stored.supabaseUrl !== ORG2_CLOUD_OFFICIAL_SUPABASE_URL ||
+        stored.supabaseAnonKey !== ORG2_CLOUD_OFFICIAL_ANON_KEY
+      ) {
+        throw new MobileAuthClientError(
+          "This session belongs to a different ORG2 Cloud endpoint",
+          false
+        );
+      }
+      try {
+        const shouldRefresh =
+          options?.forceRefresh === true ||
+          stored.expiresAt <= now() / 1_000 + EXPIRY_SKEW_SECONDS;
+        const result = shouldRefresh
+          ? await supabase.auth.refreshSession({
+              refresh_token: stored.refreshToken,
+            })
+          : await supabase.auth.setSession({
+              access_token: stored.accessToken,
+              refresh_token: stored.refreshToken,
+            });
+        if (result.error || !result.data.session) {
+          throw toMobileAuthClientError(result.error);
+        }
+        return toMobileSession(result.data.session, stored);
+      } catch (error) {
+        throw toMobileAuthClientError(error);
+      }
+    },
+
+    async establishServerSession(accessToken) {
+      if (serverSessionUrl === null) return;
+      let response: Response;
+      try {
+        response = await fetcher(serverSessionUrl, {
+          method: "POST",
+          credentials: "include",
+          headers: { Authorization: `Bearer ${accessToken}` },
+        });
+      } catch (error) {
+        throw toMobileAuthClientError(error);
+      }
+      if (!response.ok) {
+        throw new MobileAuthClientError(
+          `Mobile session exchange failed (${response.status})`,
+          !isPermanentStatus(response.status)
+        );
+      }
+    },
+
+    async signOut(session) {
+      if (serverSessionUrl !== null) {
+        await fetcher(serverSessionUrl, {
+          method: "DELETE",
+          credentials: "include",
+        }).catch(() => undefined);
+      }
+      if (session) {
+        await supabase.auth
+          .setSession({
+            access_token: session.accessToken,
+            refresh_token: session.refreshToken,
+          })
+          .catch(() => undefined);
+      }
+      await supabase.auth.signOut({ scope: "local" }).catch(() => undefined);
+    },
+  };
+}
diff --git a/src/modules/MobileRemote/platform/tauri/index.ts b/src/modules/MobileRemote/platform/tauri/index.ts
new file mode 100644
index 0000000000..b8c18826a8
--- /dev/null
+++ b/src/modules/MobileRemote/platform/tauri/index.ts
@@ -0,0 +1,19 @@
+export {
+  TAURI_MOBILE_REMOTE_SECURE_KEYS,
+  createTauriMobileRemotePlatform,
+  createTauriMobileRemotePlatformWithBridge,
+} from "./tauriMobileRemotePlatform";
+export {
+  createTauriMobileAuthClient,
+  createTauriOAuthStorage,
+  TAURI_MOBILE_OAUTH_STORAGE_PREFIX,
+  toTauriMobileAuthError,
+} from "./tauriMobileAuthClient";
+export type { CreatedTauriMobileRemotePlatform } from "./tauriMobileRemotePlatform";
+export type {
+  TauriMobileRemoteBridge,
+  TauriMobileRemoteController,
+  TauriMobileRemoteErrorCode,
+  TauriMobileRemoteNativeError,
+  TauriMobileRemotePlatformOptions,
+} from "./types";
diff --git a/src/modules/MobileRemote/platform/tauri/iosLaunchConfigContract.test.ts b/src/modules/MobileRemote/platform/tauri/iosLaunchConfigContract.test.ts
new file mode 100644
index 0000000000..a557d98992
--- /dev/null
+++ b/src/modules/MobileRemote/platform/tauri/iosLaunchConfigContract.test.ts
@@ -0,0 +1,46 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { describe, expect, it } from "vitest";
+
+const repositoryRoot = process.cwd();
+const tauriRoot = join(repositoryRoot, "apps/remote-ios/src-tauri");
+
+function readRepositoryFile(path: string): string {
+  return readFileSync(join(repositoryRoot, path), "utf8");
+}
+
+describe("iOS launch configuration contract", () => {
+  it("keeps devUrl at the origin and selects the mobile entry from the window URL", () => {
+    const config = JSON.parse(
+      readFileSync(join(tauriRoot, "tauri.conf.json"), "utf8")
+    ) as {
+      build: { devUrl: string };
+      app: { windows: Array<{ url?: string }> };
+    };
+    const devUrl = new URL(config.build.devUrl);
+    const windowUrl = config.app.windows[0]?.url;
+    const resolvedWindowUrl = new URL(windowUrl ?? "", `${devUrl.origin}/`);
+
+    expect(config.build.devUrl).toBe(devUrl.origin);
+    expect(windowUrl).toBe("mobile-native.html");
+    expect(resolvedWindowUrl.origin).toBe(devUrl.origin);
+    expect(resolvedWindowUrl.pathname).toBe("/mobile-native.html");
+  });
+
+  it("runs xcode-script from the mobile src-tauri directory with the root binary", () => {
+    const requiredPrefix =
+      "cd ../.. && ../../../node_modules/.bin/tauri ios xcode-script";
+    const generatedProjectSources = [
+      "apps/remote-ios/src-tauri/gen/apple/project.yml",
+      "apps/remote-ios/src-tauri/gen/apple/org2-remote.xcodeproj/project.pbxproj",
+    ];
+
+    for (const path of generatedProjectSources) {
+      const source = readRepositoryFile(path);
+      expect(source, path).toContain(requiredPrefix);
+      expect(source, path).not.toMatch(
+        /\bpnpm\s+tauri\s+ios\s+xcode-script\b/u
+      );
+    }
+  });
+});
diff --git a/src/modules/MobileRemote/platform/tauri/tauriMobileAuthClient.test.ts b/src/modules/MobileRemote/platform/tauri/tauriMobileAuthClient.test.ts
new file mode 100644
index 0000000000..0c2c2913be
--- /dev/null
+++ b/src/modules/MobileRemote/platform/tauri/tauriMobileAuthClient.test.ts
@@ -0,0 +1,75 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { MobileAuthClientError } from "../../auth/mobileAuthClient";
+import {
+  TAURI_MOBILE_OAUTH_STORAGE_PREFIX,
+  createTauriMobileAuthClient,
+  createTauriOAuthStorage,
+  toTauriMobileAuthError,
+} from "./tauriMobileAuthClient";
+import type { TauriMobileRemoteBridge } from "./types";
+
+// The real `createClient` builds a RealtimeClient, which throws on a Node
+// runtime without a global WebSocket (CI runs Node 20). The adapter under test
+// only owns storage/error/server-session policy, so stub the SDK the same way
+// `auth/mobileAuthClient.test.ts` does.
+const mocks = vi.hoisted(() => ({ createClient: vi.fn(() => ({ auth: {} })) }));
+
+vi.mock("@supabase/supabase-js", () => ({
+  createClient: mocks.createClient,
+}));
+
+function createBridge(): TauriMobileRemoteBridge {
+  return {
+    openExternal: vi.fn().mockResolvedValue(undefined),
+    secureRead: vi.fn().mockResolvedValue(null),
+    secureWrite: vi.fn().mockResolvedValue(undefined),
+    secureDelete: vi.fn().mockResolvedValue(undefined),
+    getInitialDeepLinks: vi.fn().mockResolvedValue([]),
+    subscribeDeepLinks: vi.fn().mockResolvedValue(() => undefined),
+  };
+}
+
+describe("Tauri mobile auth adapter", () => {
+  it("persists Supabase PKCE verifier state through the Keychain bridge", async () => {
+    const bridge = createBridge();
+    vi.mocked(bridge.secureRead).mockResolvedValue("pkce-value");
+    const storage = createTauriOAuthStorage(bridge);
+
+    await expect(storage.getItem("auth-token-code-verifier")).resolves.toBe(
+      "pkce-value"
+    );
+    await storage.setItem("auth-token-code-verifier", "next-value");
+    await storage.removeItem("auth-token-code-verifier");
+
+    const key = `${TAURI_MOBILE_OAUTH_STORAGE_PREFIX}auth-token-code-verifier`;
+    expect(bridge.secureRead).toHaveBeenCalledWith(key);
+    expect(bridge.secureWrite).toHaveBeenCalledWith(key, "next-value");
+    expect(bridge.secureDelete).toHaveBeenCalledWith(key);
+  });
+
+  it.each([
+    ["unauthorized", false],
+    ["invalid_callback", false],
+    ["network", true],
+    ["keychain_locked", true],
+  ] as const)("maps native %s errors to retry policy", (code, retryable) => {
+    expect(toTauriMobileAuthError({ code, message: `native ${code}` })).toEqual(
+      expect.objectContaining<Partial<MobileAuthClientError>>({
+        message: `native ${code}`,
+        retryable,
+      })
+    );
+  });
+
+  it("does not attempt the browser-only server-cookie exchange", async () => {
+    const bridge = createBridge();
+    const fetcher = vi.fn<typeof fetch>();
+    const client = createTauriMobileAuthClient({ bridge, fetcher });
+
+    await expect(client.establishServerSession("access")).resolves.toBe(
+      undefined
+    );
+    expect(fetcher).not.toHaveBeenCalled();
+  });
+});
diff --git a/src/modules/MobileRemote/platform/tauri/tauriMobileAuthClient.ts b/src/modules/MobileRemote/platform/tauri/tauriMobileAuthClient.ts
new file mode 100644
index 0000000000..13eb1e8aeb
--- /dev/null
+++ b/src/modules/MobileRemote/platform/tauri/tauriMobileAuthClient.ts
@@ -0,0 +1,87 @@
+import type { SupportedStorage } from "@supabase/supabase-js";
+
+import {
+  type MobileAuthClient,
+  MobileAuthClientError,
+} from "../../auth/mobileAuthClient";
+import { createSupabaseMobileAuthClient } from "../supabaseMobileAuthClient";
+import type {
+  TauriMobileRemoteBridge,
+  TauriMobileRemoteNativeError,
+} from "./types";
+
+const OAUTH_STORAGE_PREFIX = "org2.remote.auth.pkce.v1:";
+const PERMANENT_NATIVE_CODES = new Set([
+  "oauth_cancelled",
+  "invalid_callback",
+  "invalid_session",
+  "unauthorized",
+]);
+
+export function toTauriMobileAuthError(error: unknown): MobileAuthClientError {
+  if (error instanceof MobileAuthClientError) return error;
+  if (error && typeof error === "object") {
+    const native = error as Partial<TauriMobileRemoteNativeError>;
+    const code = typeof native.code === "string" ? native.code : "";
+    const message =
+      typeof native.message === "string" && native.message.trim()
+        ? native.message
+        : code
+          ? `Native authentication failed (${code})`
+          : "Native authentication failed";
+    return new MobileAuthClientError(
+      message,
+      !PERMANENT_NATIVE_CODES.has(code)
+    );
+  }
+  return new MobileAuthClientError(
+    error instanceof Error ? error.message : "Native authentication failed"
+  );
+}
+
+function oauthKey(key: string): string {
+  return `${OAUTH_STORAGE_PREFIX}${encodeURIComponent(key)}`;
+}
+
+export function createTauriOAuthStorage(
+  bridge: TauriMobileRemoteBridge
+): SupportedStorage {
+  return {
+    async getItem(key) {
+      try {
+        return await bridge.secureRead(oauthKey(key));
+      } catch (error) {
+        throw toTauriMobileAuthError(error);
+      }
+    },
+    async setItem(key, value) {
+      try {
+        await bridge.secureWrite(oauthKey(key), value);
+      } catch (error) {
+        throw toTauriMobileAuthError(error);
+      }
+    },
+    async removeItem(key) {
+      try {
+        await bridge.secureDelete(oauthKey(key));
+      } catch (error) {
+        throw toTauriMobileAuthError(error);
+      }
+    },
+  };
+}
+
+export function createTauriMobileAuthClient(options: {
+  bridge: TauriMobileRemoteBridge;
+  fetcher: typeof fetch;
+}): MobileAuthClient {
+  return createSupabaseMobileAuthClient({
+    oauthStorage: createTauriOAuthStorage(options.bridge),
+    fetcher: options.fetcher,
+    // A Tauri webview does not own the Relay's browser cookie jar. Native
+    // auth is the Supabase session plus the paired Desktop device credential.
+    serverSessionUrl: null,
+  });
+}
+
+export const TAURI_MOBILE_OAUTH_STORAGE_PREFIX = OAUTH_STORAGE_PREFIX;
diff --git a/src/modules/MobileRemote/platform/tauri/tauriMobileRemotePlatform.test.ts b/src/modules/MobileRemote/platform/tauri/tauriMobileRemotePlatform.test.ts
new file mode 100644
index 0000000000..aba9127f66
--- /dev/null
+++ b/src/modules/MobileRemote/platform/tauri/tauriMobileRemotePlatform.test.ts
@@ -0,0 +1,344 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { MobileAuthSession } from "../../auth/mobileAuthState";
+import type { MobileRemoteRuntimePort } from "../types";
+import {
+  TAURI_MOBILE_REMOTE_SECURE_KEYS,
+  createTauriMobileRemotePlatformWithBridge,
+} from "./tauriMobileRemotePlatform";
+import type { TauriMobileRemoteBridge } from "./types";
+
+const NOW_MS = 1_800_000_000_000;
+const session: MobileAuthSession = {
+  kind: "org2_cloud",
+  supabaseUrl: "https://cloud.example.test",
+  supabaseAnonKey: "anon-key",
+  userId: "user-a",
+  accessToken: "access",
+  refreshToken: "refresh",
+  expiresAt: 1_900_000_000,
+};
+
+const runtime: MobileRemoteRuntimePort = {
+  now: () => NOW_MS,
+  random: () => 0.5,
+  randomUUID: () => "00000000-0000-4000-8000-000000000001",
+  setTimeout: () => 1,
+  clearTimeout: () => undefined,
+  isHidden: () => false,
+  subscribeVisibility: () => () => undefined,
+  portalContainer: () => globalThis.document.body,
+};
+
+function deferred<T = void>() {
+  let resolve!: (value: T) => void;
+  const promise = new Promise<T>((resolvePromise) => {
+    resolve = resolvePromise;
+  });
+  return { promise, resolve };
+}
+
+function createMemoryBridge(
+  initialUrls: string[] = [],
+  subscriptionUrls: string[] = []
+) {
+  const secure = new Map<string, string>();
+  const deepLinkListeners = new Set<(urls: string[]) => void>();
+  const bridge: TauriMobileRemoteBridge = {
+    openExternal: vi.fn().mockResolvedValue(undefined),
+    secureRead: vi.fn(async (key) => secure.get(key) ?? null),
+    secureWrite: vi.fn(async (key, value) => {
+      secure.set(key, value);
+    }),
+    secureDelete: vi.fn(async (key) => {
+      secure.delete(key);
+    }),
+    getInitialDeepLinks: vi.fn().mockResolvedValue(initialUrls),
+    subscribeDeepLinks: vi.fn(async (listener) => {
+      deepLinkListeners.add(listener);
+      if (subscriptionUrls.length > 0) listener(subscriptionUrls);
+      return () => deepLinkListeners.delete(listener);
+    }),
+  };
+  return {
+    bridge,
+    secure,
+    emitDeepLinks(urls: string[]) {
+      for (const listener of deepLinkListeners) listener(urls);
+    },
+    listenerCount: () => deepLinkListeners.size,
+  };
+}
+
+async function createPlatform(bridge: TauriMobileRemoteBridge) {
+  return createTauriMobileRemotePlatformWithBridge({
+    bridge,
+    runtime,
+    createSocket: vi.fn(() => ({ readyState: 0 }) as WebSocket),
+    fetcher: vi.fn<typeof fetch>(),
+  });
+}
+
+describe("createTauriMobileRemotePlatformWithBridge", () => {
+  it("persists auth sessions in the injected Keychain boundary", async () => {
+    const { bridge, secure } = createMemoryBridge();
+    const { platform } = await createPlatform(bridge);
+
+    await platform.auth.writeSession(session);
+    await expect(platform.auth.readSession()).resolves.toEqual(session);
+    expect(secure.get(TAURI_MOBILE_REMOTE_SECURE_KEYS.authSession)).toContain(
+      '"accessToken":"access"'
+    );
+
+    await platform.auth.clearSession();
+    await expect(platform.auth.readSession()).resolves.toBeNull();
+  });
+
+  it("propagates a system-browser opener failure to the auth gate", async () => {
+    const { bridge } = createMemoryBridge();
+    vi.mocked(bridge.openExternal).mockRejectedValue(
+      new Error("System browser is unavailable")
+    );
+    const { platform } = await createPlatform(bridge);
+
+    await expect(
+      platform.auth.navigate("https://cloud.example.test/login")
+    ).rejects.toThrow("System browser is unavailable");
+  });
+
+  it("serializes a pending session write before sign-out cleanup", async () => {
+    const { bridge, secure } = createMemoryBridge();
+    const writeStarted = deferred();
+    const releaseWrite = deferred();
+    vi.mocked(bridge.secureWrite).mockImplementationOnce(async (key, value) => {
+      writeStarted.resolve();
+      await releaseWrite.promise;
+      secure.set(key, value);
+    });
+    const { platform } = await createPlatform(bridge);
+
+    const pendingWrite = platform.auth.writeSession(session);
+    await writeStarted.promise;
+    const cleanup = platform.auth.clearSession();
+    expect(bridge.secureDelete).not.toHaveBeenCalled();
+
+    releaseWrite.resolve();
+    await Promise.all([pendingWrite, cleanup]);
+    expect(secure.has(TAURI_MOBILE_REMOTE_SECURE_KEYS.authSession)).toBe(false);
+  });
+
+  it("keeps the newest warm callback and notifies the mounted auth gate", async () => {
+    const source = createMemoryBridge();
+    const { platform, controller } = await createPlatform(source.bridge);
+    const events: string[] = [];
+    const unsubscribe = platform.auth.subscribeIntent((event) =>
+      events.push(event)
+    );
+
+    source.emitDeepLinks([
+      "org2remote://auth/callback?code=old",
+      "org2remote://auth/callback?code=new",
+    ]);
+
+    expect(platform.auth.currentUrl()).toContain("code=new");
+    expect(events).toEqual(["auth_callback", "auth_callback"]);
+    unsubscribe();
+    controller.dispose();
+    expect(source.listenerCount()).toBe(0);
+  });
+
+  it("recovers cold and warm opaque pairing intents without decoding them", async () => {
+    const coldPair = "org2remote://pair#pair=opaque-cold";
+    const source = createMemoryBridge([coldPair]);
+    const { platform } = await createPlatform(source.bridge);
+
+    expect(platform.auth.captureInitialPairingIntent()).toBe(coldPair);
+    await expect(platform.auth.consumePairingIntent()).resolves.toBe(coldPair);
+
+    const events: string[] = [];
+    platform.auth.subscribeIntent((event) => events.push(event));
+    const warmPair = "org2remote://pair#pair=opaque-warm";
+    source.emitDeepLinks([warmPair]);
+    await expect(platform.auth.consumePairingIntent()).resolves.toBe(warmPair);
+    expect(events).toEqual(["pairing"]);
+    expect(platform.auth.currentUrl()).not.toContain("opaque-warm");
+  });
+
+  it("rejects callbacks and pair payloads from unowned schemes or hosts", async () => {
+    const source = createMemoryBridge();
+    const { controller, platform } = await createPlatform(source.bridge);
+    const events: string[] = [];
+    platform.auth.subscribeIntent((event) => events.push(event));
+
+    expect(
+      controller.acceptDeepLink("https://attacker.test/auth/callback?code=x")
+    ).toBe(false);
+    expect(
+      controller.acceptDeepLink("org2remote://attacker/callback?code=x")
+    ).toBe(false);
+    expect(
+      controller.acceptDeepLink("https://attacker.test/pair#pair=secret")
+    ).toBe(false);
+    expect(controller.acceptDeepLink("org2remote://attacker#pair=secret")).toBe(
+      false
+    );
+    expect(events).toEqual([]);
+    expect(platform.auth.captureInitialPairingIntent()).toBeNull();
+  });
+
+  it("deduplicates the same deep link delivered by subscription and cold start", async () => {
+    const pairUrl = "org2remote://pair#pair=delivered-twice";
+    const source = createMemoryBridge([pairUrl], [pairUrl]);
+    const { platform, controller } = await createPlatform(source.bridge);
+
+    expect(platform.auth.captureInitialPairingIntent()).toBe(pairUrl);
+    expect(source.bridge.secureWrite).toHaveBeenCalledTimes(1);
+    const events: string[] = [];
+    platform.auth.subscribeIntent((event) => events.push(event));
+    expect(controller.acceptDeepLink(pairUrl)).toBe(true);
+    expect(events).toEqual([]);
+  });
+
+  it("keeps account-scoped inventory while active selection can be cleared", async () => {
+    const { bridge } = createMemoryBridge();
+    const { platform } = await createPlatform(bridge);
+
+    await platform.connection.save("user/a", {
+      wsUrl: "wss://relay.example/a",
+      desktopId: "desktop-a",
+      deviceLabel: "Home Mac",
+      deviceToken: "secret-a",
+    });
+    await platform.connection.save("user/a", {
+      wsUrl: "wss://relay.example/b",
+      desktopId: "desktop-b",
+      deviceLabel: "Office Mac",
+      deviceToken: "secret-b",
+    });
+
+    await expect(platform.connection.load("user/a")).resolves.toMatchObject({
+      desktopId: "desktop-b",
+    });
+    await expect(
+      platform.connection.listPairedDesktops("user/a")
+    ).resolves.toEqual([
+      expect.objectContaining({ id: "desktop-b", active: true }),
+      expect.objectContaining({ id: "desktop-a", active: false }),
+    ]);
+    await expect(
+      platform.connection.listPairedDesktops("user-b")
+    ).resolves.toEqual([]);
+
+    await expect(
+      platform.connection.selectPairedDesktop("user/a", "desktop-a")
+    ).resolves.toMatchObject({
+      desktopId: "desktop-a",
+      deviceToken: "secret-a",
+    });
+    await expect(platform.connection.load("user/a")).resolves.toMatchObject({
+      desktopId: "desktop-a",
+    });
+    await expect(
+      platform.connection.listPairedDesktops("user/a")
+    ).resolves.toEqual([
+      expect.objectContaining({ id: "desktop-b", active: false }),
+      expect.objectContaining({ id: "desktop-a", active: true }),
+    ]);
+
+    await platform.connection.save("user/a", null);
+    await expect(platform.connection.load("user/a")).resolves.toBeNull();
+    await expect(
+      platform.connection.listPairedDesktops("user/a")
+    ).resolves.toEqual([
+      expect.objectContaining({ id: "desktop-b", active: false }),
+      expect.objectContaining({ id: "desktop-a", active: false }),
+    ]);
+  });
+
+  it("restores the active pairing after the platform is recreated", async () => {
+    const source = createMemoryBridge();
+    const first = await createPlatform(source.bridge);
+
+    await first.platform.connection.save("local-development", {
+      wsUrl: "wss://relay.example/a",
+      desktopId: "desktop-a",
+      deviceLabel: "Home Mac",
+      deviceToken: "secret-a",
+    });
+    first.controller.dispose();
+
+    const second = await createPlatform(source.bridge);
+    await expect(
+      second.platform.connection.load("local-development")
+    ).resolves.toMatchObject({
+      desktopId: "desktop-a",
+      deviceLabel: "Home Mac",
+      deviceToken: "secret-a",
+    });
+    second.controller.dispose();
+  });
+
+  it("serializes concurrent inventory writes so the last user selection wins", async () => {
+    const { bridge, secure } = createMemoryBridge();
+    const firstWriteStarted = deferred();
+    const releaseFirstWrite = deferred();
+    let inventoryWriteCount = 0;
+    vi.mocked(bridge.secureWrite).mockImplementation(async (key, value) => {
+      if (
+        key.startsWith(TAURI_MOBILE_REMOTE_SECURE_KEYS.pairingInventoryPrefix)
+      ) {
+        inventoryWriteCount += 1;
+        if (inventoryWriteCount === 1) {
+          firstWriteStarted.resolve();
+          await releaseFirstWrite.promise;
+        }
+      }
+      secure.set(key, value);
+    });
+    const { platform } = await createPlatform(bridge);
+
+    const firstSave = platform.connection.save("user-a", {
+      wsUrl: "wss://relay.example/a",
+      desktopId: "desktop-a",
+      deviceToken: "secret-a",
+    });
+    await firstWriteStarted.promise;
+    const secondSave = platform.connection.save("user-a", {
+      wsUrl: "wss://relay.example/b",
+      desktopId: "desktop-b",
+      deviceToken: "secret-b",
+    });
+    expect(inventoryWriteCount).toBe(1);
+
+    releaseFirstWrite.resolve();
+    await Promise.all([firstSave, secondSave]);
+
+    expect(inventoryWriteCount).toBe(2);
+    await expect(platform.connection.load("user-a")).resolves.toMatchObject({
+      desktopId: "desktop-b",
+      deviceToken: "secret-b",
+    });
+    await expect(
+      platform.connection.listPairedDesktops("user-a")
+    ).resolves.toEqual([
+      expect.objectContaining({ id: "desktop-b", active: true }),
+      expect.objectContaining({ id: "desktop-a", active: false }),
+    ]);
+  });
+
+  it("bounds retained local desktop inventory", async () => {
+    const { bridge } = createMemoryBridge();
+    const { platform } = await createPlatform(bridge);
+
+    for (let index = 0; index < 25; index += 1) {
+      await platform.connection.save("user-a", {
+        wsUrl: `wss://relay.example/${index}`,
+        desktopId: `desktop-${index}`,
+      });
+    }
+
+    await expect(
+      platform.connection.listPairedDesktops("user-a")
+    ).resolves.toHaveLength(20);
+  });
+});
diff --git a/src/modules/MobileRemote/platform/tauri/tauriMobileRemotePlatform.ts b/src/modules/MobileRemote/platform/tauri/tauriMobileRemotePlatform.ts
new file mode 100644
index 0000000000..1bbdc08e09
--- /dev/null
+++ b/src/modules/MobileRemote/platform/tauri/tauriMobileRemotePlatform.ts
@@ -0,0 +1,398 @@
+import type { MobileAuthSession } from "../../auth/mobileAuthState";
+import {
+  activePairingConfig,
+  parsePairingInventory,
+  selectPairingInventory,
+  summarizePairingInventory,
+  updatePairingInventory,
+} from "../../connection/mobilePairedDesktopInventory";
+import type {
+  MobileRemoteIntentEvent,
+  MobileRemotePlatform,
+  MobileRemoteRuntimePort,
+} from "../types";
+import { createTauriMobileAuthClient } from "./tauriMobileAuthClient";
+import type {
+  TauriMobileRemoteBridge,
+  TauriMobileRemoteController,
+  TauriMobileRemotePlatformOptions,
+} from "./types";
+
+const AUTH_SESSION_KEY = "org2.remote.auth.session.v1";
+const OAUTH_ATTEMPT_KEY = "org2.remote.auth.oauth-attempt.v1";
+const PAIRING_INTENT_KEY = "org2.remote.auth.pairing-intent.v1";
+const PAIRING_INVENTORY_PREFIX = "org2.remote.pairing-inventory.v1:";
+const INTENT_TTL_MS = 10 * 60 * 1_000;
+const MAX_RECENT_DEEP_LINKS = 16;
+const DEEP_LINK_DEDUPE_TTL_MS = 60_000;
+const DEFAULT_CALLBACK_URL = "org2remote://auth/callback";
+const DEFAULT_HOME_URL = "org2remote://";
+
+interface StoredIntent {
+  version: 1;
+  value: string;
+  createdAtMs: number;
+}
+
+function parseJson<T>(raw: string | null): T | null {
+  if (!raw) return null;
+  try {
+    return JSON.parse(raw) as T;
+  } catch {
+    return null;
+  }
+}
+
+function parseIntent(raw: string | null, nowMs: number): StoredIntent | null {
+  const value = parseJson<Partial<StoredIntent>>(raw);
+  if (
+    value?.version !== 1 ||
+    typeof value.value !== "string" ||
+    !value.value ||
+    typeof value.createdAtMs !== "number" ||
+    nowMs < value.createdAtMs ||
+    nowMs - value.createdAtMs > INTENT_TTL_MS
+  ) {
+    return null;
+  }
+  return value as StoredIntent;
+}
+
+function isAuthCallback(raw: string): boolean {
+  try {
+    const url = new URL(raw);
+    return (
+      url.protocol === "org2remote:" &&
+      url.hostname === "auth" &&
+      url.pathname.replace(/\/+$/u, "") === "/callback"
+    );
+  } catch {
+    return false;
+  }
+}
+
+function hasOpaquePairPayload(raw: string): boolean {
+  try {
+    const url = new URL(raw);
+    if (url.protocol !== "org2remote:" || url.hostname !== "pair") {
+      return false;
+    }
+    const hash = url.hash.startsWith("#") ? url.hash.slice(1) : url.hash;
+    return !!(
+      url.searchParams.get("pair")?.trim() ||
+      new URLSearchParams(hash).get("pair")?.trim()
+    );
+  } catch {
+    return false;
+  }
+}
+
+function inventoryKey(userId: string): string {
+  return `${PAIRING_INVENTORY_PREFIX}${encodeURIComponent(userId)}`;
+}
+
+function isAuthSession(value: unknown): value is MobileAuthSession {
+  if (!value || typeof value !== "object") return false;
+  const session = value as Partial<MobileAuthSession>;
+  return (
+    session.kind === "org2_cloud" &&
+    typeof session.userId === "string" &&
+    !!session.userId &&
+    typeof session.accessToken === "string" &&
+    !!session.accessToken &&
+    typeof session.refreshToken === "string" &&
+    !!session.refreshToken &&
+    typeof session.expiresAt === "number"
+  );
+}
+
+export interface CreatedTauriMobileRemotePlatform {
+  platform: MobileRemotePlatform;
+  controller: TauriMobileRemoteController;
+}
+
+/** Injected factory used by tests and alternate native shells. */
+export async function createTauriMobileRemotePlatformWithBridge({
+  bridge,
+  runtime,
+  createSocket,
+  fetcher = globalThis.fetch.bind(globalThis),
+  callbackUrl = DEFAULT_CALLBACK_URL,
+  homeUrl = DEFAULT_HOME_URL,
+  clientInfo = {
+    name: "org2-remote-ios",
+    version: "0.1.0",
+    defaultDeviceLabel: "ORG2 Remote for iPhone",
+  },
+}: TauriMobileRemotePlatformOptions): Promise<CreatedTauriMobileRemotePlatform> {
+  let currentUrl = homeUrl;
+  let pendingPairing: StoredIntent | null = null;
+  let secureMutationChain = Promise.resolve();
+  let nativeUnsubscribe: (() => void) | null = null;
+  let disposed = false;
+  const intentListeners = new Set<(event: MobileRemoteIntentEvent) => void>();
+  const recentDeepLinks = new Map<string, number>();
+
+  const mutateSecure = <T>(operation: () => Promise<T>): Promise<T> => {
+    const mutation = secureMutationChain.then(operation);
+    secureMutationChain = mutation.then(
+      () => undefined,
+      () => undefined
+    );
+    return mutation;
+  };
+  const afterMutations = async () => {
+    await secureMutationChain;
+  };
+  const storeIntent = (key: string, value: StoredIntent) =>
+    mutateSecure(() => bridge.secureWrite(key, JSON.stringify(value)));
+  const notifyIntent = (event: MobileRemoteIntentEvent) => {
+    for (const listener of intentListeners) listener(event);
+  };
+  const isDuplicateDeepLink = (url: string) => {
+    const nowMs = runtime.now();
+    for (const [candidate, seenAtMs] of recentDeepLinks) {
+      if (nowMs - seenAtMs > DEEP_LINK_DEDUPE_TTL_MS) {
+        recentDeepLinks.delete(candidate);
+      }
+    }
+    if (recentDeepLinks.has(url)) return true;
+    recentDeepLinks.set(url, nowMs);
+    while (recentDeepLinks.size > MAX_RECENT_DEEP_LINKS) {
+      const oldest = recentDeepLinks.keys().next().value as string | undefined;
+      if (oldest === undefined) break;
+      recentDeepLinks.delete(oldest);
+    }
+    return false;
+  };
+  const readInventory = async (userId: string) => {
+    await afterMutations();
+    return parsePairingInventory(await bridge.secureRead(inventoryKey(userId)));
+  };
+
+  const controller: TauriMobileRemoteController = {
+    acceptDeepLink(url) {
+      if (disposed) return false;
+      if (hasOpaquePairPayload(url)) {
+        if (isDuplicateDeepLink(url)) return true;
+        pendingPairing = {
+          version: 1,
+          value: url,
+          createdAtMs: runtime.now(),
+        };
+        void storeIntent(PAIRING_INTENT_KEY, pendingPairing).catch(
+          () => undefined
+        );
+        currentUrl = homeUrl;
+        notifyIntent("pairing");
+        return true;
+      }
+      if (isAuthCallback(url)) {
+        if (isDuplicateDeepLink(url)) return true;
+        currentUrl = url;
+        notifyIntent("auth_callback");
+        return true;
+      }
+      return false;
+    },
+    dispose() {
+      disposed = true;
+      nativeUnsubscribe?.();
+      nativeUnsubscribe = null;
+      intentListeners.clear();
+      recentDeepLinks.clear();
+    },
+  };
+
+  const platform: MobileRemotePlatform = {
+    kind: "ios",
+    clientInfo,
+    runtime,
+    auth: {
+      createClient: () => createTauriMobileAuthClient({ bridge, fetcher }),
+      captureInitialPairingIntent() {
+        return pendingPairing?.value ?? null;
+      },
+      isCallback: () => isAuthCallback(currentUrl),
+      currentUrl: () => currentUrl,
+      callbackUrl: () => callbackUrl,
+      scrubCallback: () => {
+        currentUrl = homeUrl;
+      },
+      navigate: (url) => {
+        return bridge.openExternal(url);
+      },
+      beginOAuthAttempt(attemptId) {
+        return storeIntent(OAUTH_ATTEMPT_KEY, {
+          version: 1,
+          value: attemptId,
+          createdAtMs: runtime.now(),
+        });
+      },
+      async consumeOAuthAttempt() {
+        await afterMutations();
+        const attempt = parseIntent(
+          await bridge.secureRead(OAUTH_ATTEMPT_KEY),
+          runtime.now()
+        );
+        await mutateSecure(() => bridge.secureDelete(OAUTH_ATTEMPT_KEY));
+        return !!attempt;
+      },
+      async consumePairingIntent() {
+        await afterMutations();
+        const intent =
+          pendingPairing ??
+          parseIntent(
+            await bridge.secureRead(PAIRING_INTENT_KEY),
+            runtime.now()
+          );
+        pendingPairing = null;
+        await mutateSecure(() => bridge.secureDelete(PAIRING_INTENT_KEY));
+        return intent?.value ?? null;
+      },
+      clearIntents() {
+        pendingPairing = null;
+        return mutateSecure(async () => {
+          await bridge.secureDelete(OAUTH_ATTEMPT_KEY);
+          await bridge.secureDelete(PAIRING_INTENT_KEY);
+        });
+      },
+      async readSession() {
+        await afterMutations();
+        const session = parseJson<unknown>(
+          await bridge.secureRead(AUTH_SESSION_KEY)
+        );
+        return isAuthSession(session) ? session : null;
+      },
+      writeSession(session) {
+        return mutateSecure(() =>
+          bridge.secureWrite(AUTH_SESSION_KEY, JSON.stringify(session))
+        );
+      },
+      clearSession() {
+        return mutateSecure(() => bridge.secureDelete(AUTH_SESSION_KEY));
+      },
+      subscribeIntent(listener) {
+        intentListeners.add(listener);
+        return () => intentListeners.delete(listener);
+      },
+    },
+    connection: {
+      createSocket,
+      async load(userId) {
+        if (!userId.trim()) return null;
+        const inventory = await readInventory(userId);
+        return activePairingConfig(inventory);
+      },
+      async listPairedDesktops(userId) {
+        if (!userId.trim()) return [];
+        return summarizePairingInventory(await readInventory(userId));
+      },
+      async selectPairedDesktop(userId, desktopId) {
+        if (!userId.trim() || !desktopId.trim()) return null;
+        return mutateSecure(async () => {
+          const key = inventoryKey(userId);
+          const selected = selectPairingInventory(
+            parsePairingInventory(await bridge.secureRead(key)),
+            desktopId
+          );
+          if (!selected) return null;
+          await bridge.secureWrite(key, JSON.stringify(selected.inventory));
+          return selected.config;
+        });
+      },
+      save(userId, config) {
+        if (!userId.trim()) return Promise.resolve();
+        return mutateSecure(async () => {
+          const key = inventoryKey(userId);
+          const inventory = parsePairingInventory(await bridge.secureRead(key));
+          const nextInventory = updatePairingInventory(
+            inventory,
+            config,
+            runtime.now()
+          );
+          if (config || inventory.desktops.length > 0) {
+            await bridge.secureWrite(key, JSON.stringify(nextInventory));
+          }
+        });
+      },
+    },
+  };
+
+  nativeUnsubscribe = await bridge.subscribeDeepLinks((urls) => {
+    for (const url of urls) controller.acceptDeepLink(url);
+  });
+  const initialUrls = await bridge.getInitialDeepLinks();
+  for (const url of initialUrls) controller.acceptDeepLink(url);
+
+  return { platform, controller };
+}
+
+function createDefaultRuntime(): MobileRemoteRuntimePort {
+  return {
+    now: () => Date.now(),
+    random: () => Math.random(),
+    randomUUID: () => globalThis.crypto.randomUUID(),
+    setTimeout: (callback, delayMs) =>
+      globalThis.document.defaultView!.setTimeout(callback, delayMs),
+    clearTimeout: (timeoutId) =>
+      globalThis.document.defaultView!.clearTimeout(timeoutId),
+    isHidden: () => globalThis.document.hidden,
+    subscribeVisibility(listener) {
+      globalThis.document.addEventListener("visibilitychange", listener);
+      return () =>
+        globalThis.document.removeEventListener("visibilitychange", listener);
+    },
+    portalContainer: () => globalThis.document.body,
+  };
+}
+
+async function createDefaultBridge(): Promise<TauriMobileRemoteBridge> {
+  const [{ invoke }, { getCurrent, onOpenUrl }, { openUrl }] =
+    await Promise.all([
+      import("@tauri-apps/api/core"),
+      import("@tauri-apps/plugin-deep-link"),
+      import("@tauri-apps/plugin-opener"),
+    ]);
+  return {
+    openExternal: (url) => openUrl(url),
+    async secureRead(key) {
+      return invoke<string | null>("mobile_keychain_read", { key });
+    },
+    async secureWrite(key, value) {
+      await invoke("mobile_keychain_write", { key, value });
+    },
+    async secureDelete(key) {
+      await invoke("mobile_keychain_delete", { key });
+    },
+    async getInitialDeepLinks() {
+      return (await getCurrent()) ?? [];
+    },
+    subscribeDeepLinks: (listener) => onOpenUrl(listener),
+  };
+}
+
+/** Production entry point used by the iOS shell. */
+export async function createTauriMobileRemotePlatform(): Promise<MobileRemotePlatform> {
+  const bridge = await createDefaultBridge();
+  const { platform, controller } =
+    await createTauriMobileRemotePlatformWithBridge({
+      bridge,
+      runtime: createDefaultRuntime(),
+      createSocket: (url) => new globalThis.WebSocket(url),
+      fetcher: globalThis.fetch.bind(globalThis),
+    });
+  globalThis.document.defaultView!.addEventListener(
+    "pagehide",
+    () => controller.dispose(),
+    { once: true }
+  );
+  return platform;
+}
+
+export const TAURI_MOBILE_REMOTE_SECURE_KEYS = {
+  authSession: AUTH_SESSION_KEY,
+  oauthAttempt: OAUTH_ATTEMPT_KEY,
+  pairingIntent: PAIRING_INTENT_KEY,
+  pairingInventoryPrefix: PAIRING_INVENTORY_PREFIX,
+} as const;
diff --git a/src/modules/MobileRemote/platform/tauri/types.ts b/src/modules/MobileRemote/platform/tauri/types.ts
new file mode 100644
index 0000000000..31c7149109
--- /dev/null
+++ b/src/modules/MobileRemote/platform/tauri/types.ts
@@ -0,0 +1,48 @@
+import type { MobileRemoteRuntimePort } from "../types";
+
+export type TauriMobileRemoteErrorCode =
+  | "oauth_cancelled"
+  | "invalid_callback"
+  | "invalid_session"
+  | "unauthorized"
+  | "network"
+  | "keychain_locked"
+  | "bridge_unavailable";
+
+export interface TauriMobileRemoteNativeError {
+  code: TauriMobileRemoteErrorCode | string;
+  message?: string;
+}
+
+/**
+ * Minimal native boundary. OAuth stays in the shared Supabase PKCE client;
+ * native code owns only secure storage, deep-link delivery and browser handoff.
+ */
+export interface TauriMobileRemoteBridge {
+  openExternal(url: string): Promise<void>;
+  secureRead(key: string): Promise<string | null>;
+  secureWrite(key: string, value: string): Promise<void>;
+  secureDelete(key: string): Promise<void>;
+  getInitialDeepLinks(): Promise<string[]>;
+  subscribeDeepLinks(listener: (urls: string[]) => void): Promise<() => void>;
+}
+
+export interface TauriMobileRemotePlatformOptions {
+  bridge: TauriMobileRemoteBridge;
+  runtime: MobileRemoteRuntimePort;
+  createSocket(url: string): WebSocket;
+  fetcher?: typeof fetch;
+  callbackUrl?: string;
+  homeUrl?: string;
+  clientInfo?: {
+    name: string;
+    version: string;
+    defaultDeviceLabel: string;
+  };
+}
+
+export interface TauriMobileRemoteController {
+  /** Accept an OAuth callback or opaque pairing deep link from the shell. */
+  acceptDeepLink(url: string): boolean;
+  dispose(): void;
+}
diff --git a/src/modules/MobileRemote/platform/types.ts b/src/modules/MobileRemote/platform/types.ts
new file mode 100644
index 0000000000..355bceaead
--- /dev/null
+++ b/src/modules/MobileRemote/platform/types.ts
@@ -0,0 +1,72 @@
+import type { MobileAuthClient } from "../auth/mobileAuthClient";
+import type { MobileAuthSession } from "../auth/mobileAuthState";
+import type {
+  MobileConnectionConfig,
+  MobilePairedDesktopSummary,
+} from "../connection/types";
+
+export type MobileRemoteIntentEvent = "auth_callback" | "pairing";
+
+export interface MobileRemoteRuntimePort {
+  now(): number;
+  random(): number;
+  randomUUID(): string;
+  setTimeout(callback: () => void, delayMs: number): number;
+  clearTimeout(timeoutId: number): void;
+  isHidden(): boolean;
+  subscribeVisibility(listener: () => void): () => void;
+  /**
+   * Overlay host for floating surfaces. Returns null when the shell has no
+   * mounted container yet, in which case the caller renders nothing.
+   */
+  portalContainer(): Element | null;
+}
+
+export interface MobileRemoteAuthPort {
+  createClient(): MobileAuthClient;
+  captureInitialPairingIntent(): string | null;
+  isCallback(): boolean;
+  currentUrl(): string;
+  callbackUrl(): string;
+  scrubCallback(): void;
+  navigate(url: string): void | Promise<void>;
+  beginOAuthAttempt(attemptId: string): Promise<void>;
+  consumeOAuthAttempt(): Promise<boolean>;
+  consumePairingIntent(): Promise<string | null>;
+  clearIntents(): Promise<void>;
+  readSession(): Promise<MobileAuthSession | null>;
+  writeSession(session: MobileAuthSession): Promise<void>;
+  clearSession(): Promise<void>;
+  /** Native shells notify warm OAuth callbacks and pairing deep links here. */
+  subscribeIntent(
+    listener: (event: MobileRemoteIntentEvent) => void
+  ): () => void;
+}
+
+export interface MobileRemoteConnectionPort {
+  createSocket(url: string): WebSocket;
+  load(userId: string): Promise<MobileConnectionConfig | null>;
+  listPairedDesktops(userId: string): Promise<MobilePairedDesktopSummary[]>;
+  selectPairedDesktop(
+    userId: string,
+    desktopId: string
+  ): Promise<MobileConnectionConfig | null>;
+  /** Implementations must serialize writes so the latest invocation wins. */
+  save(userId: string, config: MobileConnectionConfig | null): Promise<void>;
+}
+
+/**
+ * The shared Remote application depends on this port rather than browser or
+ * Tauri globals. Platform shells own credentials, navigation and lifecycle.
+ */
+export interface MobileRemotePlatform {
+  readonly kind: "browser" | "ios";
+  readonly clientInfo: {
+    readonly name: string;
+    readonly version: string;
+    readonly defaultDeviceLabel: string;
+  };
+  readonly runtime: MobileRemoteRuntimePort;
+  readonly auth: MobileRemoteAuthPort;
+  readonly connection: MobileRemoteConnectionPort;
+}
diff --git a/src/modules/MobileRemote/screens/ConnectingLiveBridge.test.ts b/src/modules/MobileRemote/screens/ConnectingLiveBridge.test.ts
index ed2222f816..18cce1c98e 100644
--- a/src/modules/MobileRemote/screens/ConnectingLiveBridge.test.ts
+++ b/src/modules/MobileRemote/screens/ConnectingLiveBridge.test.ts
@@ -12,6 +12,10 @@ import {
   vi,
 } from "vitest";
 
+import type { MobileConnectionConfig } from "../connection/types";
+import { MobileRemotePlatformProvider } from "../platform";
+import { createBrowserMobileRemotePlatform } from "../platform/browser";
+import type { MobileRemotePlatform } from "../platform/types";
 import { ConnectingLiveBridge } from "./ConnectingLiveBridge";
 
 const mocks = vi.hoisted(() => ({
@@ -19,6 +23,16 @@ const mocks = vi.hoisted(() => ({
   refreshSessions: vi.fn(),
 }));
 
+const TestMobileRemotePlatformProvider =
+  MobileRemotePlatformProvider as React.ComponentType<
+    React.PropsWithChildren<
+      Omit<
+        React.ComponentProps<typeof MobileRemotePlatformProvider>,
+        "children"
+      >
+    >
+  >;
+
 vi.mock("../app", () => ({
   useMobileRemote: () => ({
     connectLive: mocks.connectLive,
@@ -38,6 +52,23 @@ function deferred() {
   return { promise, resolve };
 }
 
+function renderBridge(
+  platform: MobileRemotePlatform,
+  pendingConfig: MobileConnectionConfig | null,
+  onComplete: () => void,
+  demoMode = false
+) {
+  return React.createElement(
+    TestMobileRemotePlatformProvider,
+    { platform },
+    React.createElement(ConnectingLiveBridge, {
+      pendingConfig,
+      demoMode,
+      onComplete,
+    })
+  );
+}
+
 describe("ConnectingLiveBridge", () => {
   let container: HTMLDivElement;
   let root: Root;
@@ -68,6 +99,7 @@ describe("ConnectingLiveBridge", () => {
   it("finishes navigation when connection state rerenders during setup", async () => {
     const connection = deferred();
     const onComplete = vi.fn();
+    const platform = createBrowserMobileRemotePlatform();
     const pendingConfig = {
       wsUrl: "wss://relay.example.com/v1/mobile/ws",
       deviceToken: "device-token",
@@ -76,25 +108,13 @@ describe("ConnectingLiveBridge", () => {
     mocks.connectLive.mockReturnValue(connection.promise);
 
     await act(async () => {
-      root.render(
-        React.createElement(ConnectingLiveBridge, {
-          pendingConfig,
-          demoMode: false,
-          onComplete,
-        })
-      );
+      root.render(renderBridge(platform, pendingConfig, onComplete));
     });
     expect(mocks.connectLive).toHaveBeenCalledOnce();
 
     mocks.refreshSessions = vi.fn();
     await act(async () => {
-      root.render(
-        React.createElement(ConnectingLiveBridge, {
-          pendingConfig,
-          demoMode: false,
-          onComplete,
-        })
-      );
+      root.render(renderBridge(platform, pendingConfig, onComplete));
     });
 
     await act(async () => {
@@ -109,7 +129,8 @@ describe("ConnectingLiveBridge", () => {
   it("finishes navigation when demo mode clears during the live connect", async () => {
     const connection = deferred();
     const onComplete = vi.fn();
-    const pendingConfig = {
+    const platform = createBrowserMobileRemotePlatform();
+    const pendingConfig: MobileConnectionConfig = {
       wsUrl: "wss://relay.example.com/v1/mobile/ws",
       deviceToken: "device-token",
       pairingCode: "PAIR-1",
@@ -118,25 +139,13 @@ describe("ConnectingLiveBridge", () => {
 
     // First run pairs out of the demo bootstrap, so demoMode starts true.
     await act(async () => {
-      root.render(
-        React.createElement(ConnectingLiveBridge, {
-          pendingConfig,
-          demoMode: true,
-          onComplete,
-        })
-      );
+      root.render(renderBridge(platform, pendingConfig, onComplete, true));
     });
     expect(mocks.connectLive).toHaveBeenCalledOnce();
 
     // connectLive flips connection.demoMode to false mid-attempt.
     await act(async () => {
-      root.render(
-        React.createElement(ConnectingLiveBridge, {
-          pendingConfig,
-          demoMode: false,
-          onComplete,
-        })
-      );
+      root.render(renderBridge(platform, pendingConfig, onComplete, false));
     });
 
     await act(async () => {
@@ -150,7 +159,8 @@ describe("ConnectingLiveBridge", () => {
 
   it("keeps the connecting screen when the live connect fails", async () => {
     const onComplete = vi.fn();
-    const pendingConfig = {
+    const platform = createBrowserMobileRemotePlatform();
+    const pendingConfig: MobileConnectionConfig = {
       wsUrl: "wss://relay.example.com/v1/mobile/ws",
       deviceToken: "device-token",
       pairingCode: "PAIR-1",
@@ -158,22 +168,10 @@ describe("ConnectingLiveBridge", () => {
     mocks.connectLive.mockRejectedValue(new Error("WebSocket closed"));
 
     await act(async () => {
-      root.render(
-        React.createElement(ConnectingLiveBridge, {
-          pendingConfig,
-          demoMode: true,
-          onComplete,
-        })
-      );
+      root.render(renderBridge(platform, pendingConfig, onComplete, true));
     });
     await act(async () => {
-      root.render(
-        React.createElement(ConnectingLiveBridge, {
-          pendingConfig,
-          demoMode: false,
-          onComplete,
-        })
-      );
+      root.render(renderBridge(platform, pendingConfig, onComplete, false));
     });
 
     expect(mocks.connectLive).toHaveBeenCalledOnce();
@@ -184,15 +182,10 @@ describe("ConnectingLiveBridge", () => {
     vi.useFakeTimers();
     try {
       const onComplete = vi.fn();
+      const platform = createBrowserMobileRemotePlatform();
 
       await act(async () => {
-        root.render(
-          React.createElement(ConnectingLiveBridge, {
-            pendingConfig: null,
-            demoMode: true,
-            onComplete,
-          })
-        );
+        root.render(renderBridge(platform, null, onComplete, true));
       });
       expect(mocks.connectLive).not.toHaveBeenCalled();
       expect(onComplete).not.toHaveBeenCalled();
diff --git a/src/modules/MobileRemote/screens/ConnectingLiveBridge.tsx b/src/modules/MobileRemote/screens/ConnectingLiveBridge.tsx
index 3582ca4b05..d2618fc572 100644
--- a/src/modules/MobileRemote/screens/ConnectingLiveBridge.tsx
+++ b/src/modules/MobileRemote/screens/ConnectingLiveBridge.tsx
@@ -2,6 +2,7 @@ import React, { useCallback, useEffect, useRef } from "react";
 
 import { useMobileRemote } from "../app";
 import type { MobileConnectionConfig } from "../connection/types";
+import { useMobileRemotePlatform } from "../platform";
 import { ConnectingScreen } from "./ConnectingScreen";
 
 export interface ConnectingLiveBridgeProps {
@@ -17,12 +18,13 @@ export function ConnectingLiveBridge({
   onComplete,
 }: ConnectingLiveBridgeProps) {
   const { connectLive } = useMobileRemote();
+  const { runtime } = useMobileRemotePlatform();
   const startedRef = useRef(false);
 
   const runDemoConnecting = useCallback(() => {
-    const timer = window.setTimeout(onComplete, 900);
-    return () => window.clearTimeout(timer);
-  }, [onComplete]);
+    const timer = runtime.setTimeout(onComplete, 900);
+    return () => runtime.clearTimeout(timer);
+  }, [onComplete, runtime]);
 
   useEffect(() => {
     startedRef.current = false;
diff --git a/src/modules/MobileRemote/screens/devices/DevicesTab.test.ts b/src/modules/MobileRemote/screens/devices/DevicesTab.test.ts
index a7e4fee3b5..292966f1ee 100644
--- a/src/modules/MobileRemote/screens/devices/DevicesTab.test.ts
+++ b/src/modules/MobileRemote/screens/devices/DevicesTab.test.ts
@@ -1,8 +1,23 @@
-import React from "react";
+// @vitest-environment jsdom
+import React, { act } from "react";
+import { createRoot } from "react-dom/client";
 import { renderToStaticMarkup } from "react-dom/server";
-import { describe, expect, it, vi } from "vitest";
+import {
+  afterAll,
+  afterEach,
+  beforeAll,
+  describe,
+  expect,
+  it,
+  vi,
+} from "vitest";
 
-import { DevicesTab, derivePairedDesktopsFromConnection } from "./DevicesTab";
+import { DevicesTab, derivePairedDesktopsFromInventory } from "./DevicesTab";
+
+const mocks = vi.hoisted(() => ({ switchPairedDesktop: vi.fn() }));
+const reactActEnvironment = globalThis as typeof globalThis & {
+  IS_REACT_ACT_ENVIRONMENT?: boolean;
+};
 
 vi.mock("../../app", () => ({
   useMobileRemote: () => ({
@@ -11,6 +26,21 @@ vi.mock("../../app", () => ({
       desktopName: "Home Mac",
       presence: "online",
     },
+    pairedDesktops: [
+      {
+        id: "desktop-1",
+        name: "Home Mac",
+        active: true,
+        updatedAtMs: 1,
+      },
+      {
+        id: "desktop-2",
+        name: "Office Mac",
+        active: false,
+        updatedAtMs: 2,
+      },
+    ],
+    switchPairedDesktop: mocks.switchPairedDesktop,
   }),
 }));
 
@@ -24,6 +54,8 @@ const translations: Record<string, string> = {
   "devices.online": "Online",
   "devices.offline": "Offline",
   "devices.unknown": "Connecting",
+  "devices.switchTo": "Switch to Office Mac",
+  "devices.switchFailed": "Could not switch desktops",
   "devices.emptyDesktops": "No paired desktops",
 };
 
@@ -34,6 +66,18 @@ vi.mock("react-i18next", () => ({
 }));
 
 describe("DevicesTab", () => {
+  beforeAll(() => {
+    reactActEnvironment.IS_REACT_ACT_ENVIRONMENT = true;
+  });
+
+  afterAll(() => {
+    reactActEnvironment.IS_REACT_ACT_ENVIRONMENT = false;
+  });
+
+  afterEach(() => {
+    mocks.switchPairedDesktop.mockReset();
+  });
+
   it("uses shared section rows, icons, and status presentation", () => {
     const html = renderToStaticMarkup(React.createElement(DevicesTab));
 
@@ -46,9 +90,118 @@ describe("DevicesTab", () => {
     expect(html).toContain("bg-success-6");
   });
 
-  it("does not invent a paired device without an authoritative desktop name", () => {
-    expect(derivePairedDesktopsFromConnection({ presence: "unknown" })).toEqual(
-      []
-    );
+  it("does not invent paired devices from the transient connection", () => {
+    expect(
+      derivePairedDesktopsFromInventory({
+        desktops: [],
+        activePresence: "online",
+      })
+    ).toEqual([]);
+  });
+
+  it("keeps inactive local pairings visible but offline", () => {
+    expect(
+      derivePairedDesktopsFromInventory({
+        desktops: [
+          {
+            id: "desktop-old",
+            name: "Office Mac",
+            active: false,
+            updatedAtMs: 1,
+          },
+        ],
+        activePresence: "online",
+      })
+    ).toEqual([
+      {
+        id: "desktop-old",
+        name: "Office Mac",
+        presence: "offline",
+        primary: false,
+      },
+    ]);
+  });
+
+  it("routes an inactive desktop row through the shared switch action", async () => {
+    mocks.switchPairedDesktop.mockResolvedValue(undefined);
+    const container = document.createElement("div");
+    document.body.appendChild(container);
+    const root = createRoot(container);
+    try {
+      await act(async () => root.render(React.createElement(DevicesTab)));
+      const button = Array.from(container.querySelectorAll("button")).find(
+        (candidate) => candidate.textContent?.includes("Office Mac")
+      );
+      expect(button).toBeTruthy();
+      act(() => button?.click());
+      expect(mocks.switchPairedDesktop).toHaveBeenCalledWith("desktop-2");
+    } finally {
+      act(() => root.unmount());
+      container.remove();
+    }
+  });
+
+  it("disables every desktop row and marks the selected row busy while switching", async () => {
+    let resolveSwitch!: () => void;
+    const pendingSwitch = new Promise<void>((resolve) => {
+      resolveSwitch = resolve;
+    });
+    mocks.switchPairedDesktop.mockReturnValue(pendingSwitch);
+    const container = document.createElement("div");
+    document.body.appendChild(container);
+    const root = createRoot(container);
+    try {
+      await act(async () => root.render(React.createElement(DevicesTab)));
+      const officeButton = container.querySelector<HTMLButtonElement>(
+        'button[aria-label="Switch to Office Mac"]'
+      );
+      expect(officeButton).toBeTruthy();
+
+      act(() => officeButton?.click());
+
+      const buttons = Array.from(container.querySelectorAll("button"));
+      expect(buttons).toHaveLength(2);
+      expect(buttons.every((button) => button.disabled)).toBe(true);
+      expect(officeButton?.getAttribute("aria-busy")).toBe("true");
+      expect(container.querySelector('[role="alert"]')).toBeNull();
+
+      await act(async () => {
+        resolveSwitch();
+        await pendingSwitch;
+      });
+      expect(officeButton?.disabled).toBe(false);
+      expect(officeButton?.getAttribute("aria-busy")).toBe("false");
+    } finally {
+      act(() => root.unmount());
+      container.remove();
+    }
+  });
+
+  it("shows an inline error and restores the inactive row after switching fails", async () => {
+    mocks.switchPairedDesktop.mockRejectedValue(new Error("offline"));
+    const container = document.createElement("div");
+    document.body.appendChild(container);
+    const root = createRoot(container);
+    try {
+      await act(async () => root.render(React.createElement(DevicesTab)));
+      const officeButton = container.querySelector<HTMLButtonElement>(
+        'button[aria-label="Switch to Office Mac"]'
+      );
+
+      await act(async () => {
+        officeButton?.click();
+        await Promise.resolve();
+        await Promise.resolve();
+      });
+
+      expect(mocks.switchPairedDesktop).toHaveBeenCalledWith("desktop-2");
+      expect(officeButton?.disabled).toBe(false);
+      expect(container.querySelector('[role="alert"]')?.textContent).toContain(
+        "Could not switch desktops"
+      );
+    } finally {
+      act(() => root.unmount());
+      container.remove();
+    }
   });
 });
diff --git a/src/modules/MobileRemote/screens/devices/DevicesTab.tsx b/src/modules/MobileRemote/screens/devices/DevicesTab.tsx
index 29bad3c7d8..80f8615a91 100644
--- a/src/modules/MobileRemote/screens/devices/DevicesTab.tsx
+++ b/src/modules/MobileRemote/screens/devices/DevicesTab.tsx
@@ -1,6 +1,8 @@
 import React from "react";
 import { useTranslation } from "react-i18next";
 
+import Button from "@src/components/Button";
+import InlineAlert from "@src/components/InlineAlert";
 import { Placeholder } from "@src/components/Placeholder";
 import StatusDot from "@src/components/StatusDot";
 import { HugeiconsIcon, LaptopIcon, SmartPhone01Icon } from "@src/icons";
@@ -12,7 +14,10 @@ import {
 
 import { useMobileRemote } from "../../app";
 import { MobileTopBar } from "../../components/MobileTopBar";
-import type { DesktopPresence } from "../../connection/types";
+import type {
+  DesktopPresence,
+  MobilePairedDesktopSummary,
+} from "../../connection/types";
 
 export interface PairedDesktopRow {
   id: string;
@@ -21,22 +26,16 @@ export interface PairedDesktopRow {
   primary?: boolean;
 }
 
-export function derivePairedDesktopsFromConnection(input: {
-  desktopId?: string;
-  desktopName?: string;
-  presence: DesktopPresence;
+export function derivePairedDesktopsFromInventory(input: {
+  desktops: MobilePairedDesktopSummary[];
+  activePresence: DesktopPresence;
 }): PairedDesktopRow[] {
-  if (!input.desktopName?.trim()) {
-    return [];
-  }
-  return [
-    {
-      id: input.desktopId ?? input.desktopName,
-      name: input.desktopName,
-      presence: input.presence,
-      primary: true,
-    },
-  ];
+  return input.desktops.map((desktop) => ({
+    id: desktop.id,
+    name: desktop.name,
+    presence: desktop.active ? input.activePresence : "offline",
+    primary: desktop.active,
+  }));
 }
 
 function resolveDotColor(presence: DesktopPresence): string {
@@ -67,8 +66,19 @@ function resolvePresenceLabel(
 /** M-16 Devices — local device stub + paired desktop list from connection context. */
 export function DevicesTab() {
   const { t } = useTranslation("mobileRemote");
-  const { connection } = useMobileRemote();
-  const pairedDesktops = derivePairedDesktopsFromConnection(connection);
+  const [switchingDesktopId, setSwitchingDesktopId] = React.useState<
+    string | null
+  >(null);
+  const [switchError, setSwitchError] = React.useState<string | null>(null);
+  const {
+    connection,
+    pairedDesktops: pairedDesktopInventory,
+    switchPairedDesktop,
+  } = useMobileRemote();
+  const pairedDesktops = derivePairedDesktopsFromInventory({
+    desktops: pairedDesktopInventory,
+    activePresence: connection.presence,
+  });
 
   return (
     <>
@@ -120,14 +130,45 @@ export function DevicesTab() {
                   <SectionRow
                     key={desktop.id}
                     layout="inline"
+                    className="py-1"
                     label={
-                      <span className="flex min-w-0 items-center gap-2">
-                        <HugeiconsIcon
-                          icon={LaptopIcon}
-                          size={16}
-                          className="shrink-0 text-text-3"
-                          aria-hidden="true"
-                        />
+                      <Button
+                        variant="tertiary"
+                        appearance="ghost"
+                        long
+                        className="min-w-0 justify-start text-left disabled:cursor-default"
+                        style={{ height: 44, minHeight: 44, padding: 0 }}
+                        disabled={
+                          desktop.primary || switchingDesktopId !== null
+                        }
+                        loading={switchingDesktopId === desktop.id}
+                        aria-busy={switchingDesktopId === desktop.id}
+                        aria-current={desktop.primary ? "true" : undefined}
+                        aria-label={
+                          desktop.primary
+                            ? undefined
+                            : t("devices.switchTo", { name: desktop.name })
+                        }
+                        icon={
+                          <HugeiconsIcon
+                            icon={LaptopIcon}
+                            size={16}
+                            className="shrink-0 text-text-3"
+                            aria-hidden="true"
+                          />
+                        }
+                        onClick={async () => {
+                          setSwitchError(null);
+                          setSwitchingDesktopId(desktop.id);
+                          try {
+                            await switchPairedDesktop(desktop.id);
+                          } catch {
+                            setSwitchError(t("devices.switchFailed"));
+                          } finally {
+                            setSwitchingDesktopId(null);
+                          }
+                        }}
+                      >
                         <span className="truncate">{desktop.name}</span>
                         {desktop.primary ? (
                           <span
@@ -136,7 +177,7 @@ export function DevicesTab() {
                             · {t("devices.primary")}
                           </span>
                         ) : null}
-                      </span>
+                      </Button>
                     }
                   >
                     <StatusDot
@@ -147,6 +188,18 @@ export function DevicesTab() {
                     />
                   </SectionRow>
                 ))}
+                {switchError ? (
+                  <SectionRow showHeader={false} compact>
+                    <InlineAlert
+                      type="danger"
+                      role="alert"
+                      compact
+                      className="w-full"
+                    >
+                      {switchError}
+                    </InlineAlert>
+                  </SectionRow>
+                ) : null}
               </>
             )}
           </SectionContainer>
diff --git a/src/modules/MobileRemote/screens/settings/SettingsTab.test.ts b/src/modules/MobileRemote/screens/settings/SettingsTab.test.ts
index a9f5e034f1..8f372e55e8 100644
--- a/src/modules/MobileRemote/screens/settings/SettingsTab.test.ts
+++ b/src/modules/MobileRemote/screens/settings/SettingsTab.test.ts
@@ -6,6 +6,7 @@ import { beforeEach, describe, expect, it, vi } from "vitest";
 import { SettingsTab, resolvePermissionTierLabel } from "./SettingsTab";
 
 const mocks = vi.hoisted(() => ({
+  isDevelopmentBypass: false,
   connection: {
     status: "connected" as const,
     presence: "online" as const,
@@ -26,6 +27,7 @@ vi.mock("../../auth/MobileAuthContext", () => ({
       profile: { primaryEmail: "mobile@example.test" },
     },
     signOut: vi.fn(),
+    isDevelopmentBypass: mocks.isDevelopmentBypass,
   }),
 }));
 
@@ -58,6 +60,7 @@ vi.mock("react-i18next", () => ({
 
 describe("SettingsTab", () => {
   beforeEach(() => {
+    mocks.isDevelopmentBypass = false;
     localStorage.clear();
     localStorage.setItem(
       "orgii-mobile-remote-config:user:user-a",
@@ -95,6 +98,15 @@ describe("SettingsTab", () => {
     expect(html.match(/<button/g)).toHaveLength(3);
   });
 
+  it("does not render a non-functional sign-out action for the development bypass", () => {
+    mocks.isDevelopmentBypass = true;
+
+    const html = renderToStaticMarkup(React.createElement(SettingsTab));
+
+    expect(html).toContain("mobile@example.test");
+    expect(html).not.toContain("Sign out");
+  });
+
   it("maps both wire permission tiers to presentation copy", () => {
     const t = (key: string) => translations[key] ?? key;
     expect(resolvePermissionTierLabel("full", t)).toBe("Full access");
diff --git a/src/modules/MobileRemote/screens/settings/SettingsTab.tsx b/src/modules/MobileRemote/screens/settings/SettingsTab.tsx
index f043a9c7c8..9e02795943 100644
--- a/src/modules/MobileRemote/screens/settings/SettingsTab.tsx
+++ b/src/modules/MobileRemote/screens/settings/SettingsTab.tsx
@@ -1,4 +1,4 @@
-import React, { useMemo } from "react";
+import React from "react";
 import { useTranslation } from "react-i18next";
 
 import Button from "@src/components/Button";
@@ -14,7 +14,6 @@ import { useMobileRemote } from "../../app";
 import { useMobileAuth } from "../../auth/MobileAuthContext";
 import { MobileTopBar } from "../../components/MobileTopBar";
 import { buildMobileWsUrl } from "../../connection/buildMobileWsUrl";
-import { loadScopedMobileConnectionConfig } from "../../connection/mobileConnectionStorage";
 import type {
   MobileConnectionConfig,
   MobilePermissionTier,
@@ -82,17 +81,10 @@ export function SettingsTab({
   onRevokePairing,
 }: SettingsTabProps) {
   const { t } = useTranslation("mobileRemote");
-  const { connection } = useMobileRemote();
-  const { session, signOut } = useMobileAuth();
-
-  const relayLabel = useMemo(
-    () =>
-      resolveRelayLabel(
-        loadScopedMobileConnectionConfig(session.userId),
-        connection.demoMode
-      ),
-    [connection.demoMode, session.userId]
-  );
+  const { connection, connectionConfig } = useMobileRemote();
+  const { session, signOut, isDevelopmentBypass } = useMobileAuth();
+
+  const relayLabel = resolveRelayLabel(connectionConfig, connection.demoMode);
 
   const desktopValue = connection.desktopName
     ? `${connection.desktopName} · ${presenceLabel(connection.presence, t)}`
@@ -122,11 +114,13 @@ export function SettingsTab({
                 session.userId
               }
             />
-            <SettingsActionRow
-              label={t("settings.signOut")}
-              danger
-              onClick={signOut}
-            />
+            {!isDevelopmentBypass ? (
+              <SettingsActionRow
+                label={t("settings.signOut")}
+                danger
+                onClick={signOut}
+              />
+            ) : null}
           </SectionContainer>
 
           <SectionContainer
diff --git a/src/router/guards/AuthGuard.test.ts b/src/router/guards/AuthGuard.test.ts
index d5b7c1891e..235a721c89 100644
--- a/src/router/guards/AuthGuard.test.ts
+++ b/src/router/guards/AuthGuard.test.ts
@@ -123,7 +123,7 @@ describe("AuthGuard", () => {
       "?relay=wss%3A%2F%2Frelay.example"
     );
     expect(probe?.getAttribute("data-from-hash")).toBe("");
-    expect(consumeOpaquePairingIntent()).toBe(
+    expect(consumeOpaquePairingIntent(sessionStorage)).toBe(
       "http://localhost:3000/orgii/mobile?relay=wss%3A%2F%2Frelay.example#pair=device-intent"
     );
     expect(container.querySelector('[data-testid="mobile-remote"]')).toBeNull();
diff --git a/src/router/guards/AuthGuard.tsx b/src/router/guards/AuthGuard.tsx
index 82fc9b5b14..817916f979 100644
--- a/src/router/guards/AuthGuard.tsx
+++ b/src/router/guards/AuthGuard.tsx
@@ -100,7 +100,8 @@ export const AuthGuard: React.FC<AuthGuardProps> = ({ children }) => {
             ...location,
             ...captureOpaquePairingReturnLocation(
               location,
-              window.location.href
+              window.location.href,
+              sessionStorage
             ),
           }
         : location;
diff --git a/src/router/lazy/pages.tsx b/src/router/lazy/pages.tsx
index c372b78d38..87b202cb1e 100644
--- a/src/router/lazy/pages.tsx
+++ b/src/router/lazy/pages.tsx
@@ -50,7 +50,7 @@ export const FlowAwarenessTestPage = React.lazy(
 export const MobileRemotePage = React.lazy(
   () =>
     import(
-      /* webpackChunkName: "mobile-remote" */ "@src/modules/MobileRemote/MobileRemoteApp"
+      /* webpackChunkName: "mobile-remote" */ "@src/modules/MobileRemote/BrowserMobileRemotePage"
     )
 );