From bd555aad962596fd90651694f673733888f94c56 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Tue, 18 Aug 2026 20:36:54 +0800
Subject: [PATCH] =?UTF-8?q?=E2=9C=A8=20Sync=202026-08-18=2020:36:54?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 luci-app-passwall/Makefile                    |   2 +-
 .../cbi/passwall/server/type/1_sing-box.lua   |   8 +-
 .../model/cbi/passwall/server/type/2_xray.lua |  13 +-
 .../root/usr/share/passwall/subscribe.lua     |   6 +-
 .../root/usr/share/passwall/utils.sh          |   2 +-
 .../references/measuring.md                   |  51 ++-
 .../scripts/bench-dispatch.sh                 |  93 +++++
 .../scripts/bench-fullload.mjs                | 336 ++++++++++++++++++
 luci-theme-aurora/.dev/docs/router.md         | 286 ++++++++++-----
 luci-theme-aurora/Makefile                    |   2 +-
 luci-theme-footstrap/Makefile                 |   2 +-
 .../luci-static/footstrap/app-icon-192.png    | Bin 0 -> 5513 bytes
 .../luci-static/footstrap/app-icon-512.png    | Bin 0 -> 15709 bytes
 .../footstrap/apple-touch-icon.png            | Bin 0 -> 5255 bytes
 .../luci-static/footstrap/manifest.json       |  24 ++
 .../htdocs/luci-static/resources/fs-fit.js    |  52 ++-
 .../htdocs/luci-static/resources/fs-router.js | 146 ++++++--
 luci-theme-footstrap/styles/base/95-luci.css  |  20 +-
 .../themes/footstrap/partials/head.ut         |  28 ++
 modeminfo/Makefile                            |   2 +-
 .../usr/share/modeminfo/scripts/FIBOCOM.at    |   7 +-
 21 files changed, 935 insertions(+), 145 deletions(-)
 create mode 100644 luci-theme-aurora/.claude/skills/aurora-performance/scripts/bench-dispatch.sh
 create mode 100644 luci-theme-aurora/.claude/skills/aurora-performance/scripts/bench-fullload.mjs
 create mode 100644 luci-theme-footstrap/htdocs/luci-static/footstrap/app-icon-192.png
 create mode 100644 luci-theme-footstrap/htdocs/luci-static/footstrap/app-icon-512.png
 create mode 100644 luci-theme-footstrap/htdocs/luci-static/footstrap/apple-touch-icon.png
 create mode 100644 luci-theme-footstrap/htdocs/luci-static/footstrap/manifest.json

diff --git a/luci-app-passwall/Makefile b/luci-app-passwall/Makefile
index da9d9036..f236ec9b 100644
--- a/luci-app-passwall/Makefile
+++ b/luci-app-passwall/Makefile
@@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=luci-app-passwall
 PKG_VERSION:=26.8.12
-PKG_RELEASE:=227
+PKG_RELEASE:=228
 PKG_PO_VERSION:=$(PKG_VERSION)
 
 PKG_CONFIG_DEPENDS:= \
diff --git a/luci-app-passwall/luasrc/model/cbi/passwall/server/type/1_sing-box.lua b/luci-app-passwall/luasrc/model/cbi/passwall/server/type/1_sing-box.lua
index 47a4a249..ac8b945b 100644
--- a/luci-app-passwall/luasrc/model/cbi/passwall/server/type/1_sing-box.lua
+++ b/luci-app-passwall/luasrc/model/cbi/passwall/server/type/1_sing-box.lua
@@ -80,6 +80,12 @@ end
 o:value("direct", "Direct")
 o:depends({ custom = false })
 
+o = s:option(DummyValue, "is_endpoint", "")
+o.not_rewrite = true
+o.template = m:template_path("/cbi/hidevalue")
+o.value = "1"
+o:depends({ custom = false, protocol = "wireguard" })
+
 o = s:option(Value, "port", translate("Listen Port"))
 o.datatype = "port"
 o:depends({ custom = false })
@@ -452,7 +458,7 @@ end
 
 o = s:option(Flag, "bind_local", translate("Bind Local"), translate("When selected, it can only be accessed localhost."))
 o.default = "0"
-o:depends({ custom = false })
+o:depends({ custom = false, is_endpoint = "" })
 
 o = s:option(Flag, "accept_lan", translate("Accept LAN Access"), translate("When selected, it can accessed lan , this will not be safe!"))
 o.default = "0"
diff --git a/luci-app-passwall/luasrc/model/cbi/passwall/server/type/2_xray.lua b/luci-app-passwall/luasrc/model/cbi/passwall/server/type/2_xray.lua
index 89363d00..01186b1c 100644
--- a/luci-app-passwall/luasrc/model/cbi/passwall/server/type/2_xray.lua
+++ b/luci-app-passwall/luasrc/model/cbi/passwall/server/type/2_xray.lua
@@ -11,6 +11,10 @@ if not s1.fields["type"].default then
 	s1.fields["type"].default = type_name
 end
 
+if not s1.val["type"] then
+	s1.val["type"] = type_name
+end
+
 if s1.val["type"] and s1.val["type"] ~= type_name then
 	return
 end
@@ -62,11 +66,16 @@ o:value("wireguard", "WireGuard")
 o:value("dokodemo-door", "dokodemo-door")
 o:depends({ custom = false })
 
+o = s:option(DummyValue, "is_endpoint", "")
+o.not_rewrite = true
+o.template = m:template_path("/cbi/hidevalue")
+o.value = "1"
+o:depends({ custom = false, protocol = "wireguard" })
+
 o = s:option(Value, "port", translate("Listen Port"))
 o.datatype = "port"
 o:depends({ custom = false })
 
-
 o = s:option(DynamicList, "users", translate("User"))
 for i, v in ipairs(user_list) do
 	o:value(v[".name"], v.username)
@@ -402,7 +411,7 @@ end
 --[[acceptProxyProtocol]]
 o = s:option(Flag, "acceptProxyProtocol", translate("acceptProxyProtocol"), translate("Whether to receive PROXY protocol, when this node want to be fallback or forwarded by proxy, it must be enable, otherwise it cannot be used."))
 o.default = "0"
-o:depends({ custom = false })
+o:depends({ custom = false, is_endpoint = "" })
 
 --[[Fast Open]]
 o = s:option(Flag, "tcp_fast_open", "TCP " .. translate("Fast Open"))
diff --git a/luci-app-passwall/root/usr/share/passwall/subscribe.lua b/luci-app-passwall/root/usr/share/passwall/subscribe.lua
index 64de3fa8..9767b8c5 100755
--- a/luci-app-passwall/root/usr/share/passwall/subscribe.lua
+++ b/luci-app-passwall/root/usr/share/passwall/subscribe.lua
@@ -2189,9 +2189,7 @@ local execute = function()
 				else
 					fail_list[#fail_list + 1] = value
 				end
-				if url_is_local then
-					value.http_code = 0
-				else
+				if not url_is_local then
 					luci.sys.call("rm -f " .. tmp_file)
 				end
 			end
@@ -2199,7 +2197,7 @@ local execute = function()
 
 		if #fail_list > 0 then
 			for index, value in ipairs(fail_list) do
-				log(string.format('【%s】订阅失败，可能是订阅地址无效，或是网络问题，请诊断！[%s]', value.remark, tostring(value.http_code)))
+				log(string.format('【%s】订阅失败，可能是订阅地址无效，或是网络问题，请诊断！[%s]', (value.remark or ""), tostring(value.http_code or 0)))
 			end
 		end
 		update_node(0)
diff --git a/luci-app-passwall/root/usr/share/passwall/utils.sh b/luci-app-passwall/root/usr/share/passwall/utils.sh
index 72dd3ed8..4f7db842 100755
--- a/luci-app-passwall/root/usr/share/passwall/utils.sh
+++ b/luci-app-passwall/root/usr/share/passwall/utils.sh
@@ -479,7 +479,7 @@ ln_run() {
 		echolog "  - 找不到 ${ln_name}，无法启动..."
 		return 1
 	}
-	[ "${output}" != "/dev/null" ] && [ -n "$(echo "${output}" | grep -E "default|SOCKS_")" ] && [ "${ln_name}" != "chinadns-ng" ] && {
+	[ "${output}" != "/dev/null" ] && [ -n "$(echo "${output}" | grep -E "default|socks_")" ] && [ "${ln_name}" != "chinadns-ng" ] && {
 		local persist_log_path=$(config_t_get global persist_log_path)
 		local sys_log=$(config_t_get global sys_log "0")
 	}
diff --git a/luci-theme-aurora/.claude/skills/aurora-performance/references/measuring.md b/luci-theme-aurora/.claude/skills/aurora-performance/references/measuring.md
index 735f10ed..2cb6e163 100644
--- a/luci-theme-aurora/.claude/skills/aurora-performance/references/measuring.md
+++ b/luci-theme-aurora/.claude/skills/aurora-performance/references/measuring.md
@@ -61,8 +61,8 @@ HOST=http://<device> COOKIE_NAME=sysauth_http COOKIE_VALUE=<from jar> \
   node ../.claude/skills/aurora-performance/scripts/bench-router.mjs <label>
 ```
 
-`ONLY=walk|timing|soak|back|poison` runs one scenario (`RUNS` defaults to and
-is floored at 10). `walk` visits every page
+`ONLY=walk|timing|soak|back|poison|sheets|hygiene|nodecss|expiry` runs one
+scenario (`RUNS` defaults to and is floored at 10). `walk` visits every page
 the navigation model links to (menu + each page's tab strip) through the
 router, then full-loads the same URL and diffs title, `data-page`,
 `dispatchpath`, tab strip, active nav mark, footer presence and console
@@ -75,13 +75,58 @@ deliberately interleaves alias/firstchild URLs (read from the menu tree)
 with view URLs and asserts each step stayed same-document with the right
 URL and `data-page`. `poison` injects a foreign `<style>` into `<head>` and
 asserts the next navigation is a full load and the one after is
-same-document again.
+same-document again. `sheets` repeats that against the view pages the walk
+found actually inserting their own sheets. `hygiene` checks that no progress
+bar is left in the DOM, that the live region carries the title, and that a
+hidden tab stops polling. `nodecss` checks a `menu.d` node's `css` link is
+enabled on arrival, disabled after leaving and re-enabled without a
+duplicate. `expiry` destroys the session and must land on the login form —
+it always runs last.
 
 Trap: a navigation the router does not take is a real document load and
 tears down the CDP evaluation ("Inspected target navigated"); the harness
 treats that as a fallback, waits for the new document, and re-arms its
 same-document marker there.
 
+## `bench-fullload.mjs` — where one navigation's time goes (CDP)
+
+`bench-router.mjs` answers *how much faster*; this answers *what the full
+load was spending the time on*, which is what the router doc's stage table
+and the architecture diagram quote.
+
+```bash
+HOST=http://<device> COOKIE_NAME=sysauth_http COOKIE_VALUE=<sid> RUNS=10 \
+  node ../.claude/skills/aurora-performance/scripts/bench-fullload.mjs <label>
+```
+
+Per page it reports medians, read off the document's own Navigation/Resource
+Timing rather than the harness clock: `ttfb` and `htmlEnd` (dispatcher run
+#1), `trStart`/`trEnd` (the `admin/translations/<lang>` script — dispatcher
+run #2, parser-blocking), `dcl`, `viewReady`, and the `ubus` window (the
+view's own data calls). It then measures the **same page over the router in
+the same loop**, so both halves see the same device state and are
+subtractable — run-to-run spread on an embedded device is large enough that
+two separately-run harnesses will not agree.
+
+Set `PAGES` to override the sample; the default is the same 8 pages
+`bench-router.mjs timing` uses.
+
+## `bench-dispatch.sh` — what one CGI dispatch costs (on the device)
+
+```bash
+ssh root@<device> 'sh -s' < ../.claude/skills/aurora-performance/scripts/bench-dispatch.sh
+```
+
+Runs on the router, so no network is in the number. Two halves: loopback
+`curl` medians (page HTML, both i18n catalogs, `/admin/menu`, one static
+file) and the per-process cost of each phase every dispatch pays, timed over
+50 `ucode` processes (`fork + ucode VM`, `import luci.dispatcher`, menu tree
+stat + index-cache parse, `session.get` + `session.access`).
+
+The `admin/translations/en` row is the control: a 13-byte response that still
+pays a full dispatch. Compare it against the static-file row to separate
+dispatch cost from payload cost. It makes and destroys its own session.
+
 ## Measurement discipline
 
 - **Median of ≥10 runs**, never a single sample — router-side variance
diff --git a/luci-theme-aurora/.claude/skills/aurora-performance/scripts/bench-dispatch.sh b/luci-theme-aurora/.claude/skills/aurora-performance/scripts/bench-dispatch.sh
new file mode 100644
index 00000000..83452e40
--- /dev/null
+++ b/luci-theme-aurora/.claude/skills/aurora-performance/scripts/bench-dispatch.sh
@@ -0,0 +1,93 @@
+#!/bin/sh
+# bench-dispatch.sh — what one LuCI CGI dispatch costs the device, measured on
+# the device itself so no network is in the number.
+#
+#   ssh root@192.168.1.1 'sh -s' < bench-dispatch.sh
+#
+# Two halves:
+#   requests  curl against 127.0.0.1, median of 15, time_starttransfer + bytes.
+#             The `en` catalog is the control: a 13-byte response that still
+#             pays the whole dispatch, so the cost is the dispatch, not the
+#             payload.
+#   steps     the per-process cost of each phase every dispatch runs, timed as
+#             50 ucode processes so the shell's own overhead averages out.
+#             `spawn` is the floor; subtract it to read a phase's own cost.
+#
+# Needs a LuCI session for the view-page rows; it makes one and destroys it.
+# Output is JSON on stdout, progress on stderr.
+
+set -u
+N_REQ=15
+N_PROC=50
+
+log() { echo "$@" >&2; }
+
+# --- a throwaway session, so the authenticated rows are measurable ----------
+SID=$(ubus call session login '{"username":"root","password":""}' 2>/dev/null |
+      sed -n 's/.*"ubus_rpc_session": "\([a-f0-9]*\)".*/\1/p')
+if [ -n "$SID" ]; then
+  ubus call session set "{\"ubus_rpc_session\":\"$SID\",\"values\":{\"token\":\"0123456789abcdef0123456789abcdef\"}}" >/dev/null 2>&1
+else
+  log "warning: no passwordless root login; authenticated rows will be skipped"
+fi
+
+# median of N_REQ, printed as "<seconds> <bytes>"
+req() {
+  n=0
+  while [ $n -lt $N_REQ ]; do
+    curl -s -o /dev/null ${SID:+-b "sysauth_http=$SID"} \
+      -w "%{time_starttransfer} %{size_download}\n" "$1"
+    n=$((n + 1))
+  done | sort -n | sed -n "$(( (N_REQ + 1) / 2 ))p"
+}
+
+row() { # name url
+  set -- "$1" "$2"
+  r=$(req "$2") || r="0 0"
+  ms=$(echo "$r" | awk '{printf "%.1f", $1 * 1000}')
+  by=$(echo "$r" | awk '{print $2}')
+  log "  $1: $ms ms, $by B"
+  printf '    {"what":"%s","url":"%s","ms":%s,"bytes":%s}' "$1" "$2" "$ms" "$by"
+}
+
+# per-process ms for a ucode snippet, over N_PROC processes
+proc() { # name expr
+  name=$1; expr=$2
+  cat > /tmp/.bd-loop.sh <<EOF
+i=0; while [ \$i -lt $N_PROC ]; do ucode -e '$expr' >/dev/null 2>&1; i=\$((i+1)); done
+EOF
+  t=$( { time -p sh /tmp/.bd-loop.sh; } 2>&1 | awk '/^real/ {print $2}' )
+  [ -n "$t" ] || t=$( { time sh /tmp/.bd-loop.sh; } 2>&1 | awk '/real/ {gsub("m"," ");print $(NF-1)*60+$NF}' )
+  ms=$(echo "$t $N_PROC" | awk '{printf "%.1f", $1 * 1000 / $2}')
+  log "  $name: $ms ms/process"
+  printf '    {"what":"%s","ms":%s}' "$name" "$ms"
+  rm -f /tmp/.bd-loop.sh
+}
+
+CACHE=$(ls /tmp/luci-indexcache.*.json 2>/dev/null | head -1)
+MENUD=$(ls /usr/share/luci/menu.d/*.json 2>/dev/null | wc -l)
+CACHESZ=$(wc -c < "$CACHE" 2>/dev/null || echo 0)
+LANG_UCI=$(uci get luci.main.lang 2>/dev/null || echo auto)
+
+log "requests (median of $N_REQ, loopback):"
+printf '{\n'
+printf '  "device": %s,\n' "$(ubus call system board | tr -d '\n' | sed 's/  */ /g')"
+printf '  "menuFiles": %s, "indexCacheBytes": %s, "lang": "%s",\n' "$MENUD" "$CACHESZ" "$LANG_UCI"
+printf '  "requests": [\n'
+row "page HTML (view node)"   "http://127.0.0.1/cgi-bin/luci/admin/status/routesj"; printf ',\n'
+row "i18n catalog (en)"       "http://127.0.0.1/cgi-bin/luci/admin/translations/en"; printf ',\n'
+row "i18n catalog (zh-cn)"    "http://127.0.0.1/cgi-bin/luci/admin/translations/zh-cn"; printf ',\n'
+row "/admin/menu — once per session" "http://127.0.0.1/cgi-bin/luci/admin/menu"; printf ',\n'
+row "static main.css"          "http://127.0.0.1/luci-static/aurora/main.css"; printf '\n'
+printf '  ],\n'
+
+log "dispatch steps (per process, over $N_PROC processes):"
+printf '  "steps": [\n'
+proc "fork + ucode VM"                 'x=1;'; printf ',\n'
+proc "import luci.dispatcher"          'import d from "luci.dispatcher";'; printf ',\n'
+proc "menu tree: stat + parse cache"   "import { open, glob, stat } from \"fs\"; for (let f in glob(\"/usr/share/luci/menu.d/*.json\",\"/usr/lib/lua/luci/controller/*.lua\",\"/usr/lib/lua/luci/controller/*/*.lua\")) stat(f); json(open(\"$CACHE\",\"r\"));"; printf ',\n'
+proc "session.get + session.access"    "import { connect } from \"ubus\"; let u = connect(); u.call(\"session\",\"get\",{ubus_rpc_session:\"$SID\"}); u.call(\"session\",\"access\",{ubus_rpc_session:\"$SID\"});"; printf '\n'
+printf '  ]\n}\n'
+
+[ -n "$SID" ] && ubus call session destroy "{\"ubus_rpc_session\":\"$SID\"}" >/dev/null 2>&1
+exit 0
diff --git a/luci-theme-aurora/.claude/skills/aurora-performance/scripts/bench-fullload.mjs b/luci-theme-aurora/.claude/skills/aurora-performance/scripts/bench-fullload.mjs
new file mode 100644
index 00000000..9acd1de5
--- /dev/null
+++ b/luci-theme-aurora/.claude/skills/aurora-performance/scripts/bench-fullload.mjs
@@ -0,0 +1,336 @@
+#!/usr/bin/env node
+/**
+ * bench-fullload.mjs <label> — where the time goes in ONE full-page LuCI
+ * navigation, split between the device and the browser, over raw CDP
+ * (headless Chrome, no npm deps, node >= 22).
+ *
+ * bench-router.mjs answers "how much faster is the same-document router";
+ * this answers "what is the full load actually spending its time on", which
+ * is what the router.md stage table and the architecture diagram quote.
+ *
+ * Every measured load is preceded by another full load, so static assets are
+ * already cached and only the uncacheable work is left — the same warm state
+ * bench-router.mjs measures the router in.
+ *
+ * env: HOST (default http://192.168.1.1), COOKIE_NAME, COOKIE_VALUE,
+ *      CHROME_BIN, RUNS (default and minimum 10), PAGES (comma-separated
+ *      paths under /cgi-bin/luci; defaults to the router.md sample).
+ *
+ * Per page it reports the medians of, all on the document's own clock
+ * (time origin = navigation start):
+ *   ttfb        responseStart of the page HTML — dispatcher run #1
+ *   htmlEnd     responseEnd of the page HTML
+ *   trStart/End the admin/translations/<lang> script — dispatcher run #2,
+ *               a parser-blocking <script> in <head>
+ *   dcl         domContentLoadedEventEnd
+ *   viewReady   first non-spinner child inside #view — the view is painted
+ *   serverMs    htmlEnd + (trEnd - trStart): wall time owned by the device
+ *   bytes       transferEncodedBodyLength of the HTML and the catalog
+ */
+import { spawn } from "node:child_process";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { setTimeout as sleep } from "node:timers/promises";
+
+const HOST = (process.env.HOST ?? "http://192.168.1.1").replace(/\/+$/, "");
+const LABEL = process.argv[2] ?? "run";
+// measuring.md: medians of at least 10 runs.
+const RUNS = Math.max(10, +(process.env.RUNS ?? 10) || 10);
+const CHROME =
+  process.env.CHROME_BIN ??
+  (process.platform === "darwin"
+    ? "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"
+    : "google-chrome");
+if (!process.env.COOKIE_NAME || !process.env.COOKIE_VALUE)
+  throw new Error("COOKIE_NAME and COOKIE_VALUE are required");
+const COOKIE = {
+  name: process.env.COOKIE_NAME,
+  value: process.env.COOKIE_VALUE,
+  domain: new URL(HOST).hostname,
+  path: "/",
+};
+// The bench-router.mjs timing sample, verbatim, so the two runs compare.
+const PAGES = (
+  process.env.PAGES ??
+  [
+    "admin/status/routesj",
+    "admin/status/nftables",
+    "admin/status/logs",
+    "admin/status/processes",
+    "admin/status/channel_analysis",
+    "admin/status/realtime",
+    "admin/system/system",
+    "admin/system/admin",
+  ].join(",")
+)
+  .split(",")
+  .map((p) => `${HOST}/cgi-bin/luci/${p.trim().replace(/^\/+/, "")}`);
+// Loaded between measured loads so the measured one is never the first hit.
+const WARMUP = `${HOST}/cgi-bin/luci/admin/status/overview`;
+
+const median = (v) => {
+  const s = [...v].sort((a, b) => a - b);
+  const m = s.length >> 1;
+  return s.length % 2 ? s[m] : (s[m - 1] + s[m]) / 2;
+};
+const r0 = (v) => (v == null ? null : +v.toFixed(0));
+
+/* ---------- chrome + CDP ---------- */
+const profile = mkdtempSync(join(tmpdir(), "cdp-aurora-fullload-"));
+const chrome = spawn(
+  CHROME,
+  [
+    "--headless=new",
+    "--remote-debugging-port=0",
+    `--user-data-dir=${profile}`,
+    "--no-first-run",
+    "--no-default-browser-check",
+    "--ignore-certificate-errors",
+    "about:blank",
+  ],
+  { stdio: ["ignore", "ignore", "pipe"] },
+);
+let wsUrl = "";
+chrome.stderr.setEncoding("utf8");
+chrome.stderr.on("data", (d) => {
+  const m = d.match(/ws:\/\/[^\s]+/);
+  if (m && !wsUrl) wsUrl = m[0];
+});
+const deadline = Date.now() + 20000;
+while (!wsUrl && Date.now() < deadline) await sleep(50);
+if (!wsUrl) throw new Error("chrome did not report a devtools endpoint");
+
+const ws = new WebSocket(wsUrl);
+await new Promise((res, rej) => {
+  ws.addEventListener("open", res, { once: true });
+  ws.addEventListener("error", rej, { once: true });
+});
+let msgId = 0;
+const pending = new Map();
+const handlers = new Set();
+ws.addEventListener("message", (ev) => {
+  const m = JSON.parse(ev.data);
+  if (m.id != null && pending.has(m.id)) {
+    const { res, rej } = pending.get(m.id);
+    pending.delete(m.id);
+    m.error ? rej(new Error(m.error.message)) : res(m.result);
+    return;
+  }
+  for (const h of handlers) h(m);
+});
+function send(method, params = {}, sessionId) {
+  const id = ++msgId;
+  ws.send(JSON.stringify({ id, method, params, sessionId }));
+  return new Promise((res, rej) => pending.set(id, { res, rej }));
+}
+function waitEvent(method, sessionId, timeout = 30000) {
+  return new Promise((res, rej) => {
+    const t = setTimeout(() => (handlers.delete(h), rej(new Error(`timeout ${method}`))), timeout);
+    const h = (m) => {
+      if (m.method !== method || (sessionId && m.sessionId !== sessionId)) return;
+      clearTimeout(t);
+      handlers.delete(h);
+      res(m.params);
+    };
+    handlers.add(h);
+  });
+}
+
+const { targetId } = await send("Target.createTarget", { url: "about:blank" });
+const { sessionId } = await send("Target.attachToTarget", { targetId, flatten: true });
+await send("Page.enable", {}, sessionId);
+await send("Runtime.enable", {}, sessionId);
+
+await send("Storage.setCookies", { cookies: [COOKIE] });
+await send(
+  "Emulation.setDeviceMetricsOverride",
+  { width: 1280, height: 800, deviceScaleFactor: 1, mobile: false },
+  sessionId,
+);
+// Same view-paint clock bench-router.mjs uses for full loads.
+await send(
+  "Page.addScriptToEvaluateOnNewDocument",
+  {
+    source: `
+    window.__viewReady = null;
+    new MutationObserver(() => {
+      const v = document.getElementById('view');
+      if (v && v.querySelector(':scope > :not(.spinning):not(script)') && window.__viewReady == null)
+        window.__viewReady = performance.now();
+    }).observe(document, { childList: true, subtree: true });`,
+  },
+  sessionId,
+);
+
+async function evaljs(expression, awaitPromise = false, timeout = 30000) {
+  const r = await Promise.race([
+    send("Runtime.evaluate", { expression, returnByValue: true, awaitPromise }, sessionId),
+    new Promise((_, rej) => setTimeout(() => rej(new Error("evaluate stalled")), timeout)),
+  ]);
+  if (r.exceptionDetails)
+    throw new Error(r.exceptionDetails.exception?.description ?? r.exceptionDetails.text);
+  return r.result.value;
+}
+async function waitViewSettled(timeout = 15000) {
+  const t0 = Date.now();
+  while (Date.now() - t0 < timeout) {
+    const ok = await evaljs(`(() => {
+      const v = document.getElementById('view');
+      return !v || !!v.querySelector(':scope > :not(.spinning):not(script)') ||
+        (v.childElementCount === 0 && document.readyState === 'complete' && (window.L?.loaded ?? false));
+    })()`);
+    if (ok) return;
+    await sleep(50);
+  }
+}
+async function fullLoad(url) {
+  const load = waitEvent("Page.loadEventFired", sessionId);
+  await send("Page.navigate", { url }, sessionId);
+  await load;
+  await waitViewSettled();
+  if (await evaljs(`!!document.querySelector('input[name="luci_username"]')`))
+    throw new Error(`landed on the login form for ${url} — session expired?`);
+}
+
+/* Everything below is read off the document's own performance timeline, so
+ * the numbers are the browser's, not the harness's. */
+const SAMPLE = `(() => {
+  const nav = performance.getEntriesByType('navigation')[0];
+  const res = performance.getEntriesByType('resource');
+  const tr = res.find(e => /\\/admin\\/translations\\//.test(e.name));
+  // The view's own data calls: the one piece of device work both paths share.
+  const ub = res.filter(e => /\\/ubus/.test(e.name));
+  return JSON.stringify({
+    ubusStart: ub.length ? Math.min(...ub.map(e => e.startTime)) : null,
+    ubusEnd: ub.length ? Math.max(...ub.map(e => e.responseEnd)) : null,
+    ubusCount: ub.length,
+    ttfb: nav.responseStart,
+    htmlEnd: nav.responseEnd,
+    htmlBytes: nav.transferSize,
+    trStart: tr ? tr.startTime : null,
+    trEnd: tr ? tr.responseEnd : null,
+    trBytes: tr ? tr.transferSize : null,
+    trUrl: tr ? new URL(tr.name).pathname : null,
+    dcl: nav.domContentLoadedEventEnd,
+    load: nav.loadEventEnd,
+    viewReady: window.__viewReady,
+    // Every request the document made, so nothing counted here is invisible.
+    requests: res.length,
+  });
+})()`;
+
+/* The same page over the same-document router, measured in the same loop so
+ * both halves of the comparison see the same device state. Mirrors
+ * bench-router.mjs: hover first (a user does), then navigate and await the
+ * navigation's own `finished` promise. */
+const SPA = (url) => `(async () => {
+  const link = [...document.querySelectorAll('a[href]')].find(a => a.href === ${JSON.stringify(url)});
+  if (link) { link.dispatchEvent(new Event('pointerover', { bubbles: true })); await new Promise(r => setTimeout(r, 400)); }
+  performance.clearResourceTimings();
+  const t0 = performance.now();
+  let error = null;
+  try {
+    await Promise.race([navigation.navigate(${JSON.stringify(url)}).finished,
+      new Promise((_, rej) => setTimeout(() => rej(new Error('router did not finish in 20 s')), 20000))]);
+  } catch (e) { error = String(e); }
+  const t1 = performance.now();
+  const res = performance.getEntriesByType('resource').filter(e => e.startTime >= t0);
+  const ub = res.filter(e => /\\/ubus/.test(e.name));
+  return JSON.stringify({
+    ms: t1 - t0, error, sameDoc: window.__sameDocMarker === 1,
+    ubusStart: ub.length ? Math.min(...ub.map(e => e.startTime)) - t0 : null,
+    ubusEnd: ub.length ? Math.max(...ub.map(e => e.responseEnd)) - t0 : null,
+    ubusCount: ub.length, requests: res.length,
+  });
+})()`;
+
+const rows = [];
+for (const url of PAGES) {
+  const s = [];
+  for (let i = 0; i < RUNS; i++) {
+    await fullLoad(WARMUP);
+    await fullLoad(url);
+    const one = JSON.parse(await evaljs(SAMPLE));
+    if (one.viewReady != null) s.push(one);
+  }
+  // Router path: one document, warmed on the start page, RUNS round trips.
+  const spa = [];
+  await fullLoad(WARMUP);
+  await evaljs("window.__sameDocMarker = 1");
+  await evaljs(SPA(url), true); // cold: module not yet required in this document
+  for (let i = 0; i < RUNS; i++) {
+    const back = JSON.parse(await evaljs(SPA(WARMUP), true));
+    if (!back.sameDoc) { await evaljs("window.__sameDocMarker = 1"); continue; }
+    const r = JSON.parse(await evaljs(SPA(url), true));
+    if (!r.error && r.sameDoc) spa.push(r);
+  }
+  if (!s.length) {
+    rows.push({ page: url.replace(`${HOST}/cgi-bin/luci`, ""), n: 0 });
+    continue;
+  }
+  const med = (k) => median(s.map((x) => x[k]).filter((v) => v != null));
+  const smed = (k) => (spa.length ? median(spa.map((x) => x[k]).filter((v) => v != null)) : null);
+  const row = {
+    page: url.replace(`${HOST}/cgi-bin/luci`, ""),
+    n: s.length,
+    spaN: spa.length,
+    spaMs: r0(smed("ms")),
+    spaUbusStart: r0(smed("ubusStart")),
+    spaUbusEnd: r0(smed("ubusEnd")),
+    spaUbusCount: r0(smed("ubusCount")),
+    spaRequests: r0(smed("requests")),
+    ttfb: r0(med("ttfb")),
+    htmlEnd: r0(med("htmlEnd")),
+    trStart: r0(med("trStart")),
+    trEnd: r0(med("trEnd")),
+    dcl: r0(med("dcl")),
+    viewReady: r0(med("viewReady")),
+    ubusStart: r0(med("ubusStart")),
+    ubusEnd: r0(med("ubusEnd")),
+    ubusCount: r0(med("ubusCount")),
+    htmlBytes: r0(med("htmlBytes")),
+    trBytes: r0(med("trBytes")),
+    trUrl: s[0].trUrl,
+    requests: r0(med("requests")),
+  };
+  // Wall time the device owns: the HTML response plus the blocking catalog.
+  row.serverMs = r0((row.htmlEnd ?? 0) + ((row.trEnd ?? 0) - (row.trStart ?? 0)));
+  row.browserMs = r0((row.viewReady ?? 0) - row.serverMs);
+  rows.push(row);
+  console.error(
+    `${row.page}: ttfb ${row.ttfb} · html ${row.htmlEnd} · tr ${row.trStart}→${row.trEnd} · dcl ${row.dcl} · view ${row.viewReady} · ubus ${row.ubusStart}→${row.ubusEnd} (${row.ubusCount}) || router ${row.spaMs} · ubus ${row.spaUbusStart}→${row.spaUbusEnd} (${row.spaUbusCount}) n=${row.spaN}`,
+  );
+}
+
+const agg = (k) => r0(median(rows.filter((r) => r.n).map((r) => r[k])));
+const out = {
+  label: LABEL,
+  host: HOST,
+  runs: RUNS,
+  pages: rows,
+  median: {
+    ttfb: agg("ttfb"),
+    htmlEnd: agg("htmlEnd"),
+    trStart: agg("trStart"),
+    trEnd: agg("trEnd"),
+    dcl: agg("dcl"),
+    viewReady: agg("viewReady"),
+    serverMs: agg("serverMs"),
+    browserMs: agg("browserMs"),
+    ubusStart: agg("ubusStart"),
+    ubusEnd: agg("ubusEnd"),
+    spaMs: r0(median(rows.filter((r) => r.spaN).map((r) => r.spaMs))),
+    spaUbusStart: r0(median(rows.filter((r) => r.spaN).map((r) => r.spaUbusStart))),
+    spaUbusEnd: r0(median(rows.filter((r) => r.spaN).map((r) => r.spaUbusEnd))),
+  },
+};
+console.log(JSON.stringify(out, null, 2));
+
+await send("Target.closeTarget", { targetId });
+ws.close();
+chrome.kill();
+// Chrome unlinks its profile lazily; removing it under the exiting process
+// races and throws ENOTEMPTY, which would mask a clean run.
+await sleep(400);
+try { rmSync(profile, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 }); } catch {}
diff --git a/luci-theme-aurora/.dev/docs/router.md b/luci-theme-aurora/.dev/docs/router.md
index 02fc0c56..1c39cc5f 100644
--- a/luci-theme-aurora/.dev/docs/router.md
+++ b/luci-theme-aurora/.dev/docs/router.md
@@ -8,7 +8,7 @@ or to any view** — the router is additive theme JS plus three small template
 hooks (a patch manifest, a `<footer>` boundary, and `data-aurora-*` markers
 on the stylesheets header.ut itself renders).
 
-![Full reload vs the same-document router: timings above, the router's five stages below](https://raw.githubusercontent.com/eamonxg/assets/master/shared/architecture/same-document-router-architecture.png)
+![One LuCI navigation: what the device does, what the browser does, and which of those steps the same-document router deletes](https://raw.githubusercontent.com/eamonxg/assets/master/shared/architecture/same-document-router-architecture.svg)
 
 ## Prior art
 
@@ -29,40 +29,79 @@ transition — each its own section below.
 
 ## Why it pays, measured
 
-One full-load navigation on an `ipq60xx` router (RE-SS-01) over plain
-HTTP, median of 10 over the 8 sample pages below, this branch (2026-08-16):
+**Cudy TR3000** (mediatek/filogic, ARMv8), OpenWrt SNAPSHOT r0-20d94d5, this
+branch deployed, plain HTTP, warm cache, 2026-08-18. Both paths are measured
+in one loop (`bench-fullload.mjs`, RUNS=10, medians over the 8 pages below)
+so they see the same device state. Run-to-run spread is ±40 ms on a full
+load: the ratios are the claim, the digits are not.
 
-| stage | ms | note |
+### Where a full load's time goes
+
+| stage | ms | what it is |
 |---|--:|---|
-| dispatcher renders the page HTML | 106 | TTFB; menu tree + ACL + template |
-| `admin/translations/<lang>` | 106→205 | a second dispatcher run, render-blocking, uncacheable |
-| DOMContentLoaded | 211 | right behind the translations |
-| view module + ubus calls + render | 211→313 | static assets are already 0-byte cache hits |
+| dispatch #1 — the page HTML | 0→123 | TTFB 118: menu tree, ACL fold, `view.ut` → `header.ut` |
+| dispatch #2 — `admin/translations/<lang>` | 124→209 | a *second* CGI process, parser-blocking, uncacheable |
+| DOMContentLoaded | 215 | the shell is back, byte-identical to the one just discarded |
+| view module + ubus data + render | 215→321 | static assets are already cache hits |
 
-≈ 210 ms of the 313 is the router-side work of rebuilding a document whose
-content is rendered client-side anyway. A same-document swap keeps only the
-last row (view module from cache + data RPCs + render): the same 8 pages
-land at a median of 99 ms warm. Speculation-rules prefetch cannot reach
-that number on HTTP at all (secure-context API) and on HTTPS only hides the
-first row.
+**209 of the 321 ms passes before anything page-specific has happened.** Both
+dispatches re-derive a shell the browser already had on screen; the view's own
+ubus calls do not start until 227 ms. A same-document swap deletes both
+dispatches and keeps the last row — the same 8 pages land at a median of
+**91 ms** warm, with the data calls starting at 2 ms instead of 227 ms.
 
-End to end, click → view painted, median of 10 on the same device
-(`bench-router.mjs timing`, RUNS=10, 2026-08-16):
+### What one dispatch costs the device
+
+Measured on the device itself, so no network is in the number
+(`bench-dispatch.sh`).
+
+| request | ms | bytes |
+|---|--:|--:|
+| page HTML, a `view` node | 75.4 | 18,583 |
+| `admin/translations/en` | 62.7 | **13** |
+| `admin/translations/zh-cn` | 60.3 | 229,503 |
+| `admin/menu` — once per *session*, not per navigation | 68.2 | 45,022 |
+| static `main.css` | **0.8** | 191,899 |
+
+| inside one dispatch, per process | ms |
+|---|--:|
+| fork + ucode VM | 2.2 |
+| `import luci.dispatcher` (runtime, http, ubus, uci, core, authplugins) | 37.2 |
+| menu tree: stat 8 `menu.d` files + parse the 28,307 B index cache | 13.8 |
+| `session.get` + `session.access` over ubus | 6.0 |
+
+The `en` row is the control: a **13-byte** response still costs 62.7 ms, while
+a 191,899-byte static file is served in 0.8 ms. The cost is the dispatch, not
+the payload — and a full page load pays that block **twice**. (`zh-cn` clients
+additionally re-transfer 229,503 B every navigation: `write_headers()` in
+`http.uc` sets `Cache-Control: no-cache` and `Expires: 0` with no `ETag` or
+`Last-Modified`, so there is nothing to revalidate against.)
+
+### End to end, click → view painted
+
+Median of 10 per page, full load = navigation start → first non-spinner child
+of `#view`; router = click → the navigation's `finished` promise.
 
 | page | full load | router (warm) | faster |
 |---|--:|--:|--:|
-| status/routesj | 286 | 112 | 61 % |
-| status/nftables | 277 | 85 | 69 % |
-| status/logs | 309 | 124 | 60 % |
-| status/processes | 455 | 251 | 45 % |
-| status/channel_analysis | 412 | 63 | 85 % |
-| status/realtime | 241 | 49 | 80 % |
-| system/system | 544 | 194 | 64 % |
-| system/admin | 268 | 63 | 76 % |
+| status/routesj | 326 | 92 | 72 % |
+| status/nftables | 316 | 90 | 72 % |
+| status/logs | 281 | 100 | 64 % |
+| status/processes | 457 | 228 | 50 % |
+| status/channel_analysis | 401 | 54 | 87 % |
+| status/realtime | 211 | 37 | 82 % |
+| system/system | 496 | 132 | 73 % |
+| system/admin | 231 | 40 | 83 % |
 
-Median **67 % faster** (45–85 % across the sample). Absolute numbers move
-with CPU, network and page; the ratio is the point — the same-document swap
-skips the router-side rebuild above and keeps only the view render.
+Median **73 % faster**, range 50–87 %. `bench-router.mjs timing`, an
+independent harness, was run twice the same day and landed at 72 % and
+74.5 % — all of that is inside the device's own spread, so treat the range,
+not the digit, as the result.
+
+Speculation-rules prefetch cannot reach it: the API is secure-context only,
+so it is inert on HTTP, and on HTTPS a document prefetch hides only the
+first dispatch — the catalog is a subresource, fetched after the document
+arrives.
 
 ## Why it is possible
 
@@ -98,13 +137,17 @@ Why this API rather than the History API footstrap uses:
 - **The fallback is free.** Where the API is missing, the theme is the
   MPA it already was; nothing has to be polyfilled or feature-forked.
 
-**Browsers without the API stay MPA.** Feature-detected at module eval:
-`window.navigation?.addEventListener` and `NavigateEvent.prototype.intercept`.
-Chrome/Edge 102+, Safari 26.2+, Firefox 147+ get the router; the theme's
-declared floor (Chrome 111 / Safari 16.4 / Firefox 128) keeps working as it
-does today. This is a deliberate trade: one code path, correct by
-construction, over a second history-API path that would double the surface
-of everything below.
+**Browsers without the API stay MPA.** `footer.ut` only requires the module
+when `window.navigation` exists, and `__init__` re-checks the surface it
+actually uses: `navigation.addEventListener`, `NavigateEvent`, and
+`intercept` on its prototype. Chrome/Edge **105+**, Safari 26.2+, Firefox
+147+ get the router — 105, not the 102 that first shipped the Navigation
+API, because the method was called `transitionWhile()` until Chrome 108 and
+`canIntercept` was `canTransition`; gating on `intercept` is what makes the
+floor 105. The theme's declared floor (Chrome 111 / Safari 16.4 /
+Firefox 128) keeps working as it does today. This is a deliberate trade:
+one code path, correct by construction, over a second history-API path that
+would double the surface of everything below.
 
 ## Compatibility
 
@@ -124,26 +167,54 @@ detection only — the gate is the same API surface, not a UA sniff.
 
 ### OpenWrt / LuCI
 
-The theme already requires OpenWrt 23.05+ (ucode templates). The router
-touches only luci-base surfaces that exist unchanged in the `openwrt-23.05`,
-`openwrt-24.10`, `openwrt-25.12` and `master` branches of `openwrt/luci`
-(checked by source, 2026-08): `L.require` with instance caching and
+The theme already requires OpenWrt 23.05+ (ucode templates). Except for the
+two version-scoped items called out below, the router touches only luci-base
+surfaces that are identical in the `openwrt-23.05`, `openwrt-24.10`,
+`openwrt-25.12` and `master` branches of `openwrt/luci` (checked against the
+branch sources, 2026-08): `L.require` with instance caching and
 `prototype.constructor`, `L.view`, `L.dom.content` and the `data-idref`
 registry, `L.env.{scriptname, base_url, resource_version, media,
 requestpath, dispatchpath, pathinfo, nodespec}`, `L.hasSystemFeature`,
-`L.Poll.{queue, tick, timer, start, stop}` and the `poll-start/poll-stop`
-events, `ui.menu.load()`'s session-cached tree with `satisfied` /
+`L.Poll.{queue, start, stop, active, timer}` (and `start()`'s reset of
+`tick`, which is what re-arms an incoming view's first poll),
+`ui.menu.load()`'s session-cached tree with `satisfied` /
 `firstchild_ineligible` / `wildcard` / `action.type` (`view`, `alias`,
-`firstchild`, `template`), `ui.instantiateView`, `ui.hideIndicator`,
+`firstchild`, `template`), the `poll-status` indicator id `setupDOM`'s
+`poll-start` handler registers (the teardown hides it by that name),
+`ui.instantiateView`, `ui.hideIndicator`,
 `ui.hideModal`, `uci.state.values` / `uci.unload()` / `uci.load()`,
 `network.js`'s uci-backed state, `Request.addInterceptor` /
 `rpc.addInterceptor` and the `-32002` → `session.access` probe in
-`setupDOM`, `dispatcher.uc`'s `ctx_append` acl folding and `node.css`
-(schema since 7c6d8ff, 2026-08 — older trees simply carry no `css`),
-`view.ut`'s `#view` + inline `instantiateView` shell, and `dispatcher.uc`'s `resolve_firstchild` /
-`node_weight` / alias re-dispatch semantics (ported verbatim). Live
-verification so far: OpenWrt SNAPSHOT (2026-08, ipq60xx) — 23.05/24.10 by
-inspection, not yet on device.
+`setupDOM`, `dispatcher.uc`'s `ctx_append` acl folding, `view.ut`'s `#view` +
+inline `instantiateView` shell, and `dispatcher.uc`'s `resolve_firstchild` /
+`node_weight` / alias re-dispatch semantics (ported line for line).
+
+**Two surfaces are not the same across those branches**, and the resolver is
+written against the newer one:
+
+- **`node.css`** entered `build_pagetree`'s schema in master only
+  (7c6d8ff, 2026-08). 23.05, 24.10 and 25.12 carry no `css` on any node, so
+  `nodeCss()` returns `null` and the feature is simply inert there.
+- **Wildcard descent.** `wildcardaction` exists in 25.12 and master, not in
+  23.05 or 24.10 — an absent key just falls back to `node.action`, which is
+  what those releases do anyway, so that part is safe. The *resolution rule*
+  around it is not: 25.12 and master descend into a matching `satisfied`
+  child before treating trailing segments as args, while 23.05 and 24.10
+  capture every remaining segment the moment a `wildcard` node is reached.
+  The router ports the 25.12/master rule. On 23.05 or 24.10 a tree that has
+  both `foo/*` and a real `foo/bar` child would therefore resolve differently
+  in the router than in the dispatcher — the exact "click opens one page, F5
+  opens another" failure this resolver exists to avoid. Both the rule and
+  `wildcardaction` came in as one commit (df90c60a7, 2026-01-17) whose stated
+  purpose is to let `path/*` carry an action distinct from the bare path, so
+  the shape had no defined behaviour before it and a tree written for
+  23.05/24.10 is unlikely to use it — but that is an argument, not a survey
+  of every installed `menu.d`, and the router has not been run on either
+  release. Treat 23.05/24.10 as inspected, not verified.
+
+Live verification so far: OpenWrt SNAPSHOT r0-20d94d5 (2026-08,
+mediatek/filogic) and an earlier SNAPSHOT on ipq60xx. 23.05 / 24.10 / 25.12
+by branch source only, not on device.
 
 That list is also executable: `contract()` in `router-aurora.js` looks every
 one of those surfaces up at boot (`L.view`, `L.require`, `L.dom.content`,
@@ -194,10 +265,18 @@ Resolved with a port of the dispatcher's own rules, not a paraphrase:
   `auth.login`; a `firstchild` candidate counts only if it resolves further;
   `firstchild_ineligible` excluded; ties keep key order. The ACL check is
   skipped because `/admin/menu` is already filtered for the session;
-- `wildcard` nodes accept trailing segments as request args, and — as the
-  dispatcher does — run the node's `wildcardaction` (the `path/*` entry's
-  own action) when args are present and `action` for the bare path;
-- a hop counter breaks cycles in a foreign `menu.d`.
+- `wildcard` nodes are descended into first — a segment that matches a
+  `satisfied` child wins over arg capture — and only the remainder becomes
+  request args; with args present the node's `wildcardaction` (the `path/*`
+  entry's own action) runs, and `action` for the bare path. This is the
+  25.12/master rule; 23.05 and 24.10 capture at the first `wildcard` node
+  instead — see "OpenWrt / LuCI" above;
+- a hop counter (32) breaks cycles in a foreign `menu.d`;
+- **any segment that does not match a `satisfied` child ends the attempt.**
+  The dispatcher would fall back to the deepest satisfied ancestor and
+  re-resolve from there; the router returns `null` and hands the navigation
+  to the server. Deliberate: the fallback costs one full load, guessing the
+  ancestor wrong costs the wrong page.
 
 Two tracks are kept, as a full load keeps them: **requested** segments →
 `L.env.requestpath`, `L.env.pathinfo`, `body[data-page]`; **resolved**
@@ -212,8 +291,11 @@ one page while F5 opens another — that is why the resolver is a port.
 | `template` whose page is a view shell (Status → Overview) | yes — shell fetched once, see below |
 | Lua `template`, `call`, `function`, `cbi`, `rewrite` | no → full load |
 
-`rewrite` is deliberately not resolved: it is not in the tree and a splice
-mistake opens the wrong page, which is worse than the reload it falls back to.
+`rewrite` is deliberately not resolved. The node and its action *are* in the
+tree, but following it means re-implementing `dispatcher.uc`'s
+`splice(request_path, 0, action.remove)` and re-dispatching from the result;
+an off-by-one there opens the wrong page, which is worse than the reload it
+falls back to.
 
 ### Template nodes: the server's own shell, never a hand port
 
@@ -247,11 +329,13 @@ real full load, not against expectation.
 `intercept({ handler, focusReset: 'manual', scroll: 'after-transition' })`,
 handler in order:
 
-1. **Generation.** `gen = ++navGen`; every later DOM write is gated on it.
+1. **Generation.** `const gen = ++this.gen`; every later DOM write is gated
+   on it.
    `event.signal` aborts our own awaits, but it cannot cancel a LuCI XHR
-   (`L.Request` never exposes its handle) or a `View.__init__` chain already
-   running, so the generation is the correctness mechanism and the signal is
-   hygiene.
+   (`L.Request` hands back a bare promise; the `XMLHttpRequest` only surfaces
+   on the *resolved* `Response`, too late to abort) or a `View.__init__`
+   chain already running, so the generation is the correctness mechanism and
+   the signal is hygiene.
 2. **Teardown of the departing document state**, i.e. what a document
    death would have done for free:
    - `Poll`: `queue.length = 0; stop(); start()` — three steps. The flush
@@ -267,7 +351,8 @@ handler in order:
      package's request promise — a rejected one included — until
      `unload()`, so a failed load left there would be handed to every later
      view). Then, if `L.network` has been loaded,
-     `load(['network','wireless','luci'])` is re-issued and **awaited** —
+     `load(['network','luci'])` — plus `'wireless'` when
+     `L.hasSystemFeature('wifi')` — is re-issued and **awaited** —
      and a rejection propagates to the hard-load fallback rather than
      leaving `network.js` on an empty config: `network.js` fills its `_state` once and
      from then on answers out of the uci cache (`getWifiDevices()` *is*
@@ -277,8 +362,10 @@ handler in order:
      full load; saved changes live on the server and the Unsaved-changes
      indicator is unaffected.
    - bare `setInterval`s registered since the router booted are cleared
-     (`setInterval` is hooked at module eval; the one interval `L.Poll`
-     owns is preserved). `setTimeout` and rAF are **not** touched: the
+     (`setInterval`/`clearInterval` are hooked in `__init__`, i.e. when
+     `L.require('router-aurora')` instantiates the class; `poll.timer`, the
+     one interval `L.Poll` owns, is skipped). `setTimeout` and rAF are
+     **not** touched: the
      core keeps tooltips, notification timeouts and a request timeout on
      `setTimeout`, and there is no self-rescheduling timeout in any
      shipped view.
@@ -296,9 +383,15 @@ handler in order:
      credited to the class and released when a later warm render of the
      same class registers the same target/type, which proves them
      per-render.
+   - `ui.hideIndicator('poll-status')` — luci-base leaves a
+     *Refreshing* / *Paused* indicator behind that a document death would
+     have taken with it.
    - `ui.hideModal()`, the theme's own surfaces (mega
      menu, mobile drawer, palette) close.
    - page-scoped patch CSS is disabled and its JS patch unmounted (below).
+
+   The uci flush is the one part of this that is awaited rather than
+   fire-and-forget, so it is a separate step after `teardown()` returns.
 3. **Environment.** `L.env.requestpath/dispatchpath/pathinfo/nodespec`,
    `body[data-page]`, `document.title`. An alias is re-dispatched
    server-side, so `requestpath` and `data-page` carry the alias target while
@@ -365,23 +458,29 @@ handler in order:
      already ran; LuCI's class system sets `prototype.constructor`, so
      `new instance.constructor()` runs a fresh `__init__` → `load()` →
      `render()` → `dom.content('#view')`, exactly what a full load starts
-     from.
+     from. Either way the required value is checked with
+     `instanceof L.view`; anything else throws into the hard-load path
+     rather than staging a non-view.
    - **completion** is observed, not assumed: a `MutationObserver` on the
      staged element resolves when a non-spinner child lands (or the spinner
      is removed for an empty render). Not completing within 15 s is a
      **failure**, not a completion: committing the spinner and releasing the
      serialization would let the still-running chain paint into a later
      navigation's `#view`, so the timeout rejects and the catch path
-     hard-loads the destination. On completion —
-     and only if this navigation is still the latest — the outgoing region
+     hard-loads the destination. On completion — and only if this navigation
+     is still the latest — the outgoing region
      (everything between `#tabmenu` and `<footer>` except the staged
      element) is removed and the staged view is unhidden inside
      `document.startViewTransition()` when available and reduced motion is
      off; the navigation's `finished` promise resolves after that swap.
+     Each departing element goes through `L.dom.content(el, null)` before
+     `remove()`: that is what drops its `data-idref` registry entries, which
+     would otherwise hold the detached subtree and its class instances
+     alive — which is what the soak test below measures.
    - **Renders are serialized.** Neither an in-flight LuCI XHR nor a running
-     `View.__init__` chain can be cancelled (`L.Request` never exposes its
-     handle), and every chain paints into *whichever* `#view` is first at
-     paint time. So a navigation first awaits the previous one's completion
+     `View.__init__` chain can be cancelled (same reason), and every chain
+     paints into *whichever* `#view` is first at paint time. So a navigation
+     first awaits the previous one's completion
      (bounded by the same timeout) before it tears anything down or stages
      anything — the previous chain finishes into its own staged element,
      which is then discarded. Rapid A→B→C therefore never interleaves:
@@ -394,8 +493,8 @@ handler in order:
      may still paint. That first render also runs inside a render window
      (opened after the router's own listeners are registered), so the
      listeners it adds are credited to its class like a cold render's; the
-     ones it registered before the router loaded are out of reach. The cost is
-     that a click during a slow load waits for that load; the alternative —
+     ones it registered before the router loaded are out of reach. The cost
+     is that a click during a slow load waits for that load; the alternative —
      wrapping `prototype.render` per class and repairing stale cold renders
      by re-navigating — leaves a real window open and needs three mechanisms
      where one suffices.
@@ -420,7 +519,11 @@ handler in order:
    motion drops the transitions, not the bar.
 10. Any exception → `console.error` (a silent fallback makes every router
    regression look like "the page is just slow") → `location.href =
-   destination` — a hard full load, never a stuck page.
+   destination` — a hard full load, never a stuck page. A `bypass` flag is
+   set first so the `navigate` event that write produces passes straight
+   through instead of being intercepted back into the failing path, and the
+   handler then parks on a never-settling promise so nothing else runs
+   against a document that is on its way out.
 
 ## The expiry gate
 
@@ -453,16 +556,16 @@ every page after it (a shipped file manager hides Save/Reset on every config
 page with one unlayered `!important` rule). Removing it is not an option: a
 library that imports CSS at module eval never runs again, so deletion is
 one-way (an editor page came back as a black rectangle two million pixels
-tall). Hence a gate, not a sweep: before intercepting, any sheet outside
-`#view` that is not one of the theme's own — header.ut marks everything it
-renders (`data-aurora-shell` on `main.css`, the font, custom and token
+tall). Hence a gate, not a sweep: before intercepting, any sheet outside `#view`
+that is not one of the theme's own marks the document **poisoned** and the
+navigation is a full load — the fresh document carries no view CSS, so the
+router resumes immediately. "Own" means *marked*: header.ut stamps everything
+it renders (`data-aurora-shell` on `main.css`, the font, custom and token
 `<style>`s; `data-aurora-patch` on patches; `data-aurora-node-css` on the
-menu.d node css) — marks the document **poisoned** and the navigation is a
-full load — the fresh document carries no view CSS, so the router resumes
-immediately. The markers, not a boot snapshot, define "own": the boot page's
-modules load concurrently with the router, and a sheet they inserted before
-it snapshotted would have counted as the theme's for the rest of the
-document. Correctness over speed, never the other way.
+menu.d node css). The boot snapshot the gate compares against is filtered by
+those markers, so a sheet the boot page's own modules inserted before the
+router loaded still counts as foreign instead of being grandfathered in for
+the rest of the document. Correctness over speed, never the other way.
 
 An owner-based refinement (stamp each sheet with the inserting module off
 the call stack, enable it for pages whose dependency closure holds that
@@ -479,10 +582,11 @@ Entering (`pointerover`/`focusin`/`pointerdown`) a link to a serviceable
 node `fetch()`es its view module with `priority: 'low'` — not `require()`,
 which would render it. The URL is built byte-for-byte as `LuCI.require()`
 builds it (`<base_url>/<name with . → />.js?v=<resource_version>`) or it
-misses the HTTP cache. The walk is transitive: the fetched body is scanned
-for its leading `'require x'` string literals with a regex that is **not**
-line-anchored (shipped files are minified onto one line), and dotted names
-are warmed the same way; dotless names are either luci-base's file-less
+misses the HTTP cache. The walk is transitive: the fetched body's **first
+4 KB** is scanned for the leading run of `'require x'` string literals with
+a regex that is **not** line-anchored (shipped files are minified onto one
+line), and dotted
+names are warmed the same way; dotless names are either luci-base's file-less
 built-ins (`view`, `baseclass`, `dom`, `poll`, `request`, `session`) or flat
 libraries the chrome has already loaded, so they are declined outright.
 Deduplicated per class name; stops once a navigation to that link has
@@ -497,8 +601,9 @@ already 0-byte cache hits.
   a hover prefetch of a document the router will never load is pure router
   CPU. Browsers without the Navigation API keep the rules and the MPA path.
 - **No `unload`/`beforeunload`**, ever (bfcache).
-- **No cancellation of in-flight XHR** — `L.Request` gives no handle; the
-  generation gate makes it a waste, not a bug. Upstream-only.
+- **No cancellation of in-flight XHR** — there is no handle to cancel with
+  (see step 1); the generation gate makes it a waste, not a bug.
+  Upstream-only.
 - **No sweeping of a view's global listeners or timeouts** — one-way
   deletions of module-eval registrations. If a per-render offender ever
   appears, the answer is a targeted teardown, not a global hook.
@@ -539,5 +644,14 @@ already 0-byte cache hits.
   The walk also compares `nodespec.readonly`, `L.hasViewPermission()`, the
   set of enabled node-css links and the live-region text against the full
   load, and reports which pages carry sheets that are not the theme's.
-- The perf skill's N1 is rewritten to describe this router and its
-  boundaries; N2 keeps document prefetch for the non-router path.
+- Device (`bench-fullload.mjs`, CDP): where one full load's time goes —
+  dispatch #1, the parser-blocking catalog, DOMContentLoaded, the view's own
+  ubus window — and the same page over the router, both in one loop so the
+  two are subtractable.
+- Device (`bench-dispatch.sh`, run on the router): what one CGI dispatch costs
+  before any page-specific work — process, module graph, menu tree, session
+  probe — plus the loopback cost and size of each response a navigation pulls.
+  The `en`-catalog row is the control that separates dispatch cost from payload.
+- The perf skill (`.claude/skills/aurora-performance/`) documents all three
+  harnesses in `references/measuring.md`; the server-side cost this router
+  removes is the S1/S2 budget in `references/server.md`.
diff --git a/luci-theme-aurora/Makefile b/luci-theme-aurora/Makefile
index c398e386..adc3b952 100644
--- a/luci-theme-aurora/Makefile
+++ b/luci-theme-aurora/Makefile
@@ -9,7 +9,7 @@ LUCI_TITLE:=Aurora Theme (A modern browser theme built with Vite and Tailwind CS
 LUCI_DEPENDS:=+luci-base
 
 PKG_VERSION:=1.2.3
-PKG_RELEASE:=68
+PKG_RELEASE:=69
 PKG_LICENSE:=Apache-2.0
 
 LUCI_MINIFY_CSS:=
diff --git a/luci-theme-footstrap/Makefile b/luci-theme-footstrap/Makefile
index 4eaec10c..fbaa2839 100644
--- a/luci-theme-footstrap/Makefile
+++ b/luci-theme-footstrap/Makefile
@@ -17,7 +17,7 @@ LUCI_NAME:=luci-theme-footstrap
 FOOTSTRAP_VERSION?=
 ifneq ($(FOOTSTRAP_VERSION),)
 PKG_VERSION:=$(FOOTSTRAP_VERSION)
-PKG_RELEASE:=23
+PKG_RELEASE:=24
 endif
 
 LUCI_TITLE:=Footstrap Theme
diff --git a/luci-theme-footstrap/htdocs/luci-static/footstrap/app-icon-192.png b/luci-theme-footstrap/htdocs/luci-static/footstrap/app-icon-192.png
new file mode 100644
index 0000000000000000000000000000000000000000..708b9c565f0ce15dcc126bdd27033b45e3d418e8
GIT binary patch
literal 5513
zcmd5=^;Z;J6Q-6}fhAQyVrfAZq;pvTk(BO5a_MmCh9#F2MCnvQS`k=6Kv<FPl$7q4
zu8;S>_<nfqopa}$d(O-}GiPR^HDA9X1JVO=aB#?!l@zq^@1OsH81Md^Yq`?I!J)uW
zR(PT7leLpg<fE%M9Wq$cr)DE4^t1pMOv1v!p6H~X5#vFb$ZGmChBdD~1`o*E%hPd+
z?qS_6?xwP5h2ZLcm{%pHC}lTS0#kF2UiIBs+~yV{_L|*o-n&N~Lw%15vb6U4rHTU<
zBo=5*oX8dO&toaHxF2hxxDEdwfu;oH2YlXs-*M8^QRwZ@=Tb!rl|BGeH_E&TUtzVV
zCysaka7$u=vunl>#IG*BqFGu4CaH15Kw_ZJFof42Q#RY+#xsE?NSdjEv&#xU8RC=8
z;!=tVvQhim(AtnKomj@2nCZRB2}=)d^D*qBRqKFOxJ8^ReU}2G$oqs0f%928@Cy(w
z7&0VM=8q`xR4)<n85tw!5|(}gmDD0!W(1nb>9Bn6y^?S6R8K!K|42P960D`H$k`S3
ztDBVrTyISxf`S;sb7|8JQjIBnr5U&~v&x+cNlVC|dJyyoHLlTQ)ag$BK->8#s4l4L
zdklr=C$i8GOc%Nb=-XZDbrwIsMa`@0|BFju&B3~&%$-ku``$qDI3;hBD&7Z-!aq{B
zEuYYv0U9^|^)*@=Yde+fcIf4yU@IF07k!+R-z<J)SsrV!U>@=D)CIup@S-%oP=Kk_
zl(k+fX)B#S{Iix06R?Sg>Ud7C$i2vWlO~`C89_&kUjP9C4<B^k6?psgxm0zN<tDZ5
zHdrE4r9zins2hBIc|B8NG}!2K2|^S9PT|P_DR{o+HA|LP7>}^SN#|iM4+<<UjJr}z
zYwD{Evr_r?*a#=vc$x-izjiFl7E!vgKc&$48wKOUc+X1QT)Hu|<5PW_vnpU5r!ph}
zoW_%HPT~7?-tu&MRWRPx62F^&Ufp5u5T8c0Oa~(15s)BSH=s4X$%XWWf3b~odRty&
zAd@cLb>ZGbbW=Q1S2=sS4{YjKZdE2LXcyVca1z;EWE}xaYuWGT7R%p`NXkjKpgx(E
zKl?PX&@bS8+0fpy(g<keSmFPxd1pw+`uG!I+R!EJ>G$B{@qr|ZeRkePh4H|GJ@mW;
zrt3plEn8~{Y*_UKOIec0JCthBKMG-JNWdK$l&0qO$0UW;)b>eycYl-Q8<;NJgg39D
z^;%Vrl@+X;CpNg93SZBnaHa;|)-^~b|3w@~e1D*iA9a!?zs}Fu)9O-51w?1+Cvy+Q
zP;GCo*YizUv<ZGj{&FPi+TGf>_KiNl_A2sq!Zvn_D5<+m=99S-C$|G{pGCdALKFPi
z;Vku=Dhc_{`RE@->N808sH2DPKbP~J2#mDaPd!$Y3TqtI0~Yw$(u9lMEFYa7gkQX7
zr!k^XLF1*WyPz=DQJp!pWcW7^V!7ZlV|%~f=Mp*)0eR9Pq|&}L!Xsz#@!WuB444+!
zyL0NGEEF6#UFJ^OJNcXt+?K;E$RhXJ(hxnXEc{vC9(dR|kzu{Zpt#sd!tC#HT8b0#
zj;$lqWq70wSq(iA=WkGT+RHC4OJH!wqD^uFu?EoXWAnkt>V4zVLb%JeOSY9~iRUpH
zLr_6ICyR`rfW9c}n_ENnC>$0$>5ET`xg9B2!7uA&(AO|lap59ZYtarQ3aX?Rl-O=z
z)THN_sbdGV`O@qxpU9J*@oA%n16X?iI-YqH?|mB{;7`G?O?M_PTxI`@U?Mgtm)D8;
zQO0Y!u=mZj1eRJt+8^hPT&2P#PQs5Px2k+CKufBECw1~>B0BLF82u<x`s?T9o7+L(
zmy(k#jx)<x)(49Y&kFVHM_Nt_7BEXF8MN7qggMn{bjPgR{?WksT>XcF{unA;`bkY(
zT!iS;hCoT8;-|WER1Tef<hl}yS(S~8EXePcp}NF3DovUa@3ho6o_OLTY)qe@hzBLB
z`G;sX6?aBwn!!b=gAUNt;1T?fGjl_SPuR_WV<Yd`SvDe~1x9L$&=54*A!R(5Y|>@S
z88t$6$6%c0{IqRE>`Il!rjxrlmQCw^f61qcyA&FXw3OZE4UYdd!xBR`0*`C}^Irkm
zyU^#_Y58IwP?9aTUns;0lfAZgOlnWDK8$ZZ(L9N9q952#9=Lw^Wo&N%T5#eo?>}g_
zIr@AAdQvd7%Ccw2nB#1GRm4y?t0F5F+Yw0ug3|9U++|bvEa0m*TVHQwq>rjD70MA?
zgJM&86;LEKhBEW<t93>ZMUGFzTv`*k&4%RS&(*m5P*eNRu<~`O?j9r=HcTsHVDqJF
zmC1dTG=$(s{q9aFDj}I=`yEYT6cNuiRQ1nj<RyeAPD5MGp+FPh>)rfk_hze<PV(jF
z!4J-Nek0?X^er=CK0Jwk9CW(&r^Rs_5>f}Y+#RN_hM&P}O4P00`1FBcC)0@mbKUfA
zZv_r}x`)tvb)DwbUp`z<Y58(pKX}<^c4Ku<<Uc#!zWfx#=HekQ7H>}v-pC%<sk!Y=
zq?hqi-=r`eYk#`FHABfbj_%iXT7Nrbl(p)<g#QxrnZP&YZAg-^`!T-fBPeCHe7z~S
zX=;!AZc^&VWBeWM9fmWsZ7Z4ciS}8Wx%y_s&D_8pbARKj2xmJ+UyT%+oz0ues8@q<
z-5!K5LyLM`?2BuZEuN>pZx8B+`?#6x5EwHlCEN-O6-HXLd(z!z?Sw0<MbDAh6QR{o
zBwc7@A`zm`W~ti454Dpru4uNx+eolR(R297qJC#q?7gLywP*BFWIH9db&fNlCJ*}*
zu2C9zd~Z^vkOS>f!AG#D5KypKyekD07eWdqPlVLnpVhXwYG@B?TXH<sEQQZva%i9|
zTs=YOlM*tyW+ED@dOdsJ*V9RaTv|CwjRcP?C<7(ga(*(PRC;Qia~NH#=cUvMqk^v2
zumaJ!wr!P$rVH@z<@^|=j5R(b3WYp6B*Wf7^ABPEIJJV(uFIkI8%n>3e1xKzgqF*$
zc5%HJdzp_g8c$vi7)7`>t;ZiniW1d6h~+cht1V@@Ceva@hqW5#@vr5um31@0T&sV`
zct2kvxu&oiPswg&?62CyNRj9KT}fP=ND$JQMgawIj^Ttpn8vY;ps$uk99A5T4=hNG
zl4Zu7rW=B{bJ)<J11n<H-3z(&lzhd`pDv90gV}LuT|$yXYnwfxUv0Tno*6DkzV8qE
z*0OA~Bb~M0q&`}3SuDy2`-Kf-vO6BYk2}Rtf4?PEhl<l%xB7@^`-AivUEK{@TI->D
zVAZ=;LPj?OZ}hq`;OtfkA-eZ{Yy3C$u=BKTe$eUg&#Uzjr<HUbe*p}y+^OY`1Xk)1
zX^Tcq;Q1x`aXj#O+gkhflMz6pHvDosNhhu!nk%dbIrj7;bYl!QbliM9h)6T?4Wy&V
zC(gY(?L|lPwK7_co=or+Joq;UGNGIC=y|<A(~!L{npg*aUldtG2o$7neB*6aei0OT
z7E~RW`LJaMW*)dnI3fl91gMtE;tjg)@Mb7cs5Za!`Guz>TcI*3%}A{f#WInVjC3t;
z;C!gYz)vMOdsoO%=P#|0isdxU%W`favx$`0{Q4$ao1UG;D@6XQ<`yGX6A!Gyy2Hf5
zn8cEqR*?3gJOJ`yUdXt|5W05QCD3)zYv`)&m@;yZKCl~zd0IBs28$$)+#qY{72Pv;
z652|yM6+!hJ6^7Ddd*@$dSI$+KIP%EoM%EyZJ5=X?pjmFu!8X0mIEy!^{JwXB=}iL
z{N5z39JFQTr*5O!Bsp5QD;}S&Kc${4^2#MS>#@OC1m#jf|1RTO70guv(KTs8a=&wF
zjBOG$EM&1p_4miZi5V(H8M}!P+egcRxrUit`|Gg>VlJ0ForK>pF@X{-sl=Yd4f0dB
z$$&U#MVV2+1%Om|$fCwzp(n46&oHIv&9DmfAmoCckMj0=p(K|)^{K7*D5u;`u1ts$
z`;*~Juq#k!)5;bC)&?8o$rle?x!?r1Ji7FJb&E%S^MMZF&X`tD8k_1K=$q?TU16jp
z;5eT_yPGRB{*^8iw3;hlAXg0|^{&wIQj~KNZpY!2$rNI1y1E(@OFLV!d1(Pn%zNpe
zt>4SpGV`RTHAE=_j!MWzY+$au5r*vt5w=a9|K|QGLFH}XQ520pDdcH&$M3hs?+)W*
z!zLCbth{K`vb6K_3gu>1o|4RCsj5dFLkhHAe;DdsE4kq-Fogp>^1n=Z<3}5gHTv=Z
z@i<d$XMM3U5p?;VgTz+#O`FXP|4r7|#5qGun_m~f!pSYBc_QVOD>8)Nqw!sXbA~?#
z798DH=TMO5nAnA?1>tP-&T_&b&LaZD-kHE`TuPD>yytUOeGgI0t)!5_pFc9830%x#
z;!$hc((^wj&$?9{cbZW8kG^v40v=idEbGmlk}YZFrTet~tk>HJA3ian#C$$?QhIG&
z|AcQBCEhk=RfZpkrnc#qK$J689(0WVeDKRhBF@Usv~5x%QHAdBa%j|vla3@I1|u+J
z5<A8dSv@(OSwpmhw|oOUe|}^IcTi>?B{F0o8(q~+oW`eYjKfUPg~EVFA<P86*Z~V)
zy)EJc<7e=Jw-Sof>&3<6<l#Ve>*+^}9z^vZB^|eV+AR9-ZHwmO$plD#1@?O-$f`>t
zy$?6&l?}H<mUBP(KY2<rwN$p$(cLHTp)Zfux@h%qb9B9ilt%uX@M4z{4#<#w6OPeU
zyAQu)%D&Re0UTx%EmF7ss2XU&D1ijL#`f%L=`rU5i>du-8Y^#CuRqELh$&SvN1?+t
zQO2ULkLFnR+xNMLgbmQGhek(&avrLJAH@&Ec2_QXTNni96B|RT@K(*ZNq-|Fv`CKR
z-zkcb1^<kztuS`0Htkz};X@iTx+;ks%dcb6W0B(;j>9u@I*m1m%`7Ikt+P>3BFDu4
zsjOYkgcqwr8YpUY(Th>dp<YZI6Pc)|t%^<{g)gw~ljTCH=sDZA_#f^OZ4|_bB!C-B
z#Eqra?%Sg$*mK%KZ7LH8dX_P|g2{fR>BaoTPmQpx@E^wp_l7uT#Qn$O5p6nx>6Sb3
zCD}Js-rMt^TV^Pvg23+q4u8TID^0n1plPr6kbsmO@wcJhLgnabyFiWJU6xMY1E`OO
z_1cYYmxCYAcsS-p|M!=10VhKG{Z3PVBcp%6zJ8`pmqOX7P)fC9<}hgr4O$lssT8=j
zkJQN&jdI_eFhyg^FYSv*I})dYE5(L6f=M22DF4RezQbA)v!tx5bvUw+$bRWuMw_D_
za*G;|7CJjFIKQTWbN;|lQD0fvYw_4^+!qa$tQ{3_)-N|vs?rn<eHjE5EWyD62>!PV
zAc7)K<&q<YZuCX+#WJ`8d*Gy(4Nwi%YOrZukm)pUy4Utcy)7HaIn!ZGi5aA9j3E#+
ztiYY)_lzNlY!k1$zyja!gMslu6`w!~IOpxZe-W#h!4^)0%~hI8m&|A)L{Mk^M(-4%
zcG9v<V7yOz8FRnw=uRzIgKcRM1*^y`OrRT!{bqFA@d+8sH3wFL|2Sx~jpMpQVH8hX
zr_l`_e%aV}wurtbvhURqE{`8UZ}-g5=H@MT*t+Jp{-w`s#qStV=Qy$ip@lo;V!5`X
zN6RlAQ<LfGE(0ziId-<7!IGP_ma(k!__73eIs22l{PyKQ9<}pM%-ww8W6Iy4nNzhp
zKaR|l?CR0n-NVOABtIyL=Sur-2s5{&nX1kj&enEIFAg<p2l<IKTBL7OMft%0`l?+d
z!3WBD|6aW}Ltq4u^>F-!>#LFY8A{xMrnTZ1t~c0z7oxLYNjHBc)wytUWIQlE<~@%O
z8dFa4zv7xoL9(8M<+Q{Gt)ku@tB$sG&3VTmt_TmG7mGgo+q+Xt4?Tfx4F35yJy;a^
ztx~<te*Lx%J1<GSA#d#z@^j5Bs=0eU=WV*jP3q`50<@G3gGKeFEDZW<aGRTyfBjN$
z9X-51c4Xz+avS8n{%C<0GFt7#|Bys1NJM5iiRQj%6b+vvoY=Y#2zHZWccv!oboyZ6
zU7cbZyZ8RE#=|O^pcMHxfO+6S%Em%1+Y&f{mN>21XSX~e3meHOWFi;07ro;_V^_B?
zOKzd|`)J}!D0pkiz%YEeJG>JQ*R|iM-p&-VL~bX%+3`X~>J|V9t?*CiGpW1nvJc+s
z)(G-Fh(oebx-Md1iN^FIi22`U<Sead;#6<@$)Z<L<vEPiRLhp)&2{zVmNP9@GiSL|
zfx-(b`z<?KfsFxT?yO5f_j5vq{e6ahvt(;$t3YZ`dZm*sTYVDQnzHjO;9*sy9u@#k
zIMwQHks4>euoa&FGG?GpXRhC}-Bp5D<VPR(L)K=h<{OrBkOY7l$~}HJtOFG}vNp5)
zpwi$r&}2GY_u`sMfdDV2GL_8tDp@FXn`H$Xy;D=<D4X5x`HTJGZ3oJMwIS$wUN5(G
zYT=FxJ&soe+P&GXZU9?>fQ3vOq7n^FU<K>iWKUCIgU9eIY9fzi#Me$DFgJy!cIAyV
za-fv2uk+Law?yG+DTHaiMVLGP4GmC2PAAXdmb>}6KXPCzH`udbdu@0-@w<OZ@Y&NU
zQW9m)QW6BJ6xDsQ^HRdGZqLo%L4z&YP`K1}@~o4TtZ;JxpCk}fdU5lPY9rpw?To;L
zO(`~EXB4rOmQNus2f_u#!p7}9FBz{ioMhkbq=xxQhLHdg9><rOT&Z=%d+aCD7AC+z
zWS~?S=Fmqv>X;vPj=XBIDuz5{Z4G(mXVc56;n^2yt>jf!w8D%>N(d@}dE<4*lyQie
zmwHsxeA@7nu;!_3!*HzX{l0@fBDL&{r?O%gf9LvvA`>oKr)BvhAT#T6XVZ-tZWK_L
z&F}Mt3Nl@jTd9PZ`Jh-ef>f6U_z<-GRh@+8Kk5GscMouI?(R_hyv6qmRl@(OCq9k}
WP%(}SiL}3e!BKwsTA@<TJoJArURTxt

literal 0
HcmV?d00001

diff --git a/luci-theme-footstrap/htdocs/luci-static/footstrap/app-icon-512.png b/luci-theme-footstrap/htdocs/luci-static/footstrap/app-icon-512.png
new file mode 100644
index 0000000000000000000000000000000000000000..5f6f2dbb6499132d18b9b4b44bf6238c3a5c8237
GIT binary patch
literal 15709
zcmeJE^;=Z$7d8y<fsv3#MQIQOC8fJt1SF(Gy1R1*rMpp(P(VORx<e3<?q&dKhVGtu
z_vib(_j4T2|8V~@412EFSFLrf^ITWtJ5>dOhZGM103c9Ol+^$L4Dc%kfb-uUe+rp0
z03ZgGWTmuxzV0EgeNyC5*hh0q<NRXKq)~%yxq_b&QMyu(<<<#h<<$4EUy`xu{>pP>
z{<!@O4u9kPT`O_P0G@z>Yn!Q3H-m;A9QuAt;BP){JG~e6z0ea3IQzSKnRPwX!ebXc
zAOirBqHn-%rKQ2HaUMbdfbJy}0N}aA;Qt^0@5BE)A^-1Y(0BywEI6NLonKM6<qpw$
zKtFoHMh|XBD6s<%i3IOL+KNRlduWPohPa*Ks81v;p-Kg>S)MR?PEjUnm};@AuxOmi
z7v#6wY9;+#E<D_!)l9TWt%_7n{jNy@>}U!a(qPb0r?#!AHy=hIyeFkh?#}}2CbpRA
zpX6!R@D>}8Po32wW0g`(-?8Gr|Ih(&d%5h6G4!P0vU)T67s9)TdezQ^-S361sVFVh
zdy_L2o=^JGgsevd5FlVqXXkbbIcKmVrgI!fW|E*tHUwlq%NQmRd6Q!1HC6-|kgJaX
z{Ixsw-{FTNn{Fc&8%t%{YK<wZs28JHB>Rtzo|NsA=k1c`De-)G0_h}z0RN6Pzxd~M
zH&-sI?2419VP-}3NIF+vWav6-VqTa@`p^M%vKS$I#YZT^O;qDxbvM%W0nXR-avdYe
zl2(3gg)TZW$LBcoP~ey6_)gvvn9&#OPu-eGxvBQY^GrzM;x;C2g;RJr`F858F4Tb@
zfaB_4Zarxt%l4$My2Y9NDpmZ9xT2M(?=_uqMOP^>D+x#j_PgI~WqES2x$T$9A}VM}
zSh_o)hy=z!v|uZiCPtAC4p4;64|753&3wfO|IFI-%~YFpJLH2;)HnN@FkliJ3QW@M
zZ&$FokGyi>;BXVcJXvh(`<5nu9{B3U^i_|=Sy-+UG4PI(`D@#pwc+w(!Rr7H9cazP
zW%Lvx-K>F+BpUio8SLZ>=ZK(nma9Yk_o*(tCPf#us(=6F!={;P!g8&^`s@Wu9cQAw
zTZPneG!7f<lYCbD<~u(qS3PuD!tA7h4ofQcEAhXTBkUflW9&+~tWfibn9Co}@O@$c
z4r~YjvsEef*Dp6$`H~5r{9~I!#LFw55*2FJ@E8gh{;4vX*`2Esn;qbEt+_(C1|QGi
zKXUpN91XUM)-_)ByU%wNc+(!Uoob==GqOkWImb&lIuwATb>Aa@6u=Z7)Ls64WJLN5
zF?#j3=@ktZfCksv!tu*(ZE~IC?A$9LPvh8yVeOG^1f=LAKs-<1eAt)wgp&OVKjMW(
z!Ii>VMDO@pK|@6s96&172czO^O`z|5Ft%^#lx~GzwcI*8t{=vCX#l79DPzv&T%pB6
zDR*lCiCuoZ-fhr85kJ%78>Z(_xNcf{1CzyE71iuICR$Dh6P0ZjP^<(c!;<|35X&Vp
zzurvnlzWwp{20ws^2E6=f+E|Djt(CRC$`FR70-FE9+ypIsA^K}C7-#iB}PN_2m?cM
z(=7|79$uO`aBLKYjC%KqNgz6)=o^Vahy@XZ&cLGvtyF%Wn#|u!iwP^L99GZZT#y&w
zF>}=&CI(JC7XRHYNbPcnPUCszY9>X-GGxCg)WpE33IP(njhs@i#c31M*G9i%wtY`x
zCztX@%7kI6UorJNvII#Gsllr9{&45;<qm70^D&k~+lNpIn^SD+;17)g@BZZ-Vy3oz
zD3I_uNNr<&f&zvnrRyV@%_fRFzIt)(=srncfWk{hS@@B;o=TO`ICS!5Hntk|ygy5f
zRakE3XLGHZViT>p)SD}i1OG(KE++)$RC93D#^p+$cv$+-(U2!oL*W5?C1;4%k)*XG
zYq>X5CHmx3>@h#J-*05Msh_%xw=zq{i3IlU@e=*i2$t{UYR(yEjGz)5|9d50{Zf>L
zju{8|a>Y9$&Q&tbkk>D>Fzomixn#wD-!xy!XP>X`W0PzHD{#*1ZvD2{Jhxi+*M8Tr
zSMgk6e~8=$yYB&p<Vk7U%3sWl6Q9oA%kRs*rTeT|-_bf2<X9e3mVTMrBBW!4NtjT0
z&Hm3LLWD^+=SE%pU=+$EQSVudDqkDo`NJ8NH`ExCo#KPF?LIBztaES1`QGp_DoHT*
z(apEk^5Rb$h~nX8Njz>IXwg9ErI3F^{V>9(d7Qutg){241e0Kw+86j5`G+f>ugKnu
z^<jM#kSv5qq&7bN>dF4f>%F3j>IaQiKWd}eM9BB)ilqU?5q?(3TV2L_=GIiDK<n>8
zHc@Sn5c3|1Q|RBH8c$U|ZoF{n6KfQ!3jUXsrjGR@n=F|I3QrmBe0`p>Kb6dnOF(AZ
z*v_LQA*i&>f#HchF$`X*GQ0G)HY!mz;@FWDRq>uDv<p>!kdFnSBd?i}aDZKFM2fCY
zDOP+Bq|v_-QLqKg+Yqgx;kv%hv>at%lJ4fW{oDuCgC68La1S~l|Mx#4!X<k>&d>pW
z?4Dg(HJ%H3`XXj+lcVJaahL8?){CUGyXT%(_*wfT2{=$V^szri{lTjRgT8Y<W4j0B
zN%=6QuF3fjdf0uQO1tyJti!A-+O=DLfhNKur-7nyN(x*>2nO7{Q5AjOJh09B?}^cU
zb9?Z=VqQ%KOd4X#XpV=YZKEQE4$apz1b2C^f0R|8<G2t(I%;LSmf=R09$1nMkIS@0
zXGeMK61gDQe?q34xGzNt_eATVhss=Uogc-<KiDD$?&fWd7aM0Z`Zj)aFqS1v2kPH5
zOwHas<!@$ban7pZWcNC5R1~E%zC85enx*OIfdYlwYUjW1H>jM@e@9EQ-wGg>J0i>h
zK`EUF+YTR$za@7K{Wi+ujTY(d`H<4V3I*b=a$LpTX8RZ7-Ba|rDqa6D#J;_9-6W0;
zW{%Uk>on0UDo}52sTPt8Kc}am2O3UKa2FN|9YUCER+f{$!}9dBp8MSg<SG9dp{`hW
z9FUZ0wNp}XR~BXJp@jkp+Zu<M*aKT+C+9^vl*u>M(_@J5m5rJdhQW0EIIZdCYsgaK
z`3L%oTy?DCa$lu@qmQTtLWH$m_e3Sis&=*DM<Qss&1N};ggDR>3ashrF1(*}OMagU
z|1o@8!q7ng1)hRuXWzd+sM-&g)}|Y6fZ4Tfl~~CwmSsY0{{|6HTfDNB_O8kA%(i6v
zmf{)C5kz9i@SRo`cHh8v=R(Evw1eXbeTBRmWh1m8BD;jt*pAe6-JJ7>gyOodd98&h
zRtH|QgrJM}T-`5K4APo@oecRnn-2-Q{ItRoZdaIR74!cpgpFTGe#A;0&wtKT(3z|8
zSMcb>2(?wk0(<$;S|I|p5tK?U_7b-X7DopNN-K}&ilq^3{JV~earod<=9`jV?~vni
zLpT=@?${<nXwnu<b^}K!>;>me(7vp=V7gXJ?abGHmii_y>e>4!XzWj;{H9cOgs?RG
z`J=L#)W#e^4c|rbY;#6bEOG>#a+7V1qg*jdiEu9g0i(SvgsNGI`)~K%ui*~H`UgZJ
zKci42&C7iavGQG&#ot(P=Ra?!N442HO)9c-83ofBJ-PA@P7X<sm)i7xy-XawVRAqR
zG^`OMHD81|iM)${wm<V_EXhYTJZ@D$e=)Pa)u1dJGgX|KwuI>m3350wW65fN%BoC@
zqtVc3`h1kWgn<zjEc`-mlIwzkifH%+xZiA=SB)>c+efqa++!JxZAgE+Z)K9*50PDl
zxpA`J-?9XLT}}iYA(FCWpE_^XeA<Nui#e;U`67+Bs@f5oJSD1|dPq$D-ZvCjdAu9m
znN-s+v~RY3lyel$G3At`I)-Ld!AG`P3G<AO>4-Dy)+}EQRz`8Eir`Q(rJCs#&K~$&
zMVsRQL1Wj~4B@5K<TduU8MX_|Oxe}$)cq~NhtY=7!%h6UqTCB?v-BEbFV$f>RrFcy
zw!f3iW{N&(8wAn{Q|4*2?LUsjlM)ICRuBygPjY6KpT(xp&YynEq7BmKur$2noIExp
z#s9~KyX|&^@MphuIG-krns}+>&9&wvh@uA=R~pSzCr<YAhm$<}8}|plzU>>Cxj!6f
zn#OwvR(_=sh^?lyLXd>3_atX?s_PwtdWqq}i@Gl)3hhb&h9rftgss0=v#LUf@zavb
zEOJM}%W73J{mW>?7P2j~>vUJ9V&eMXT~cs39-mH1g8~g({q#Rd86A-zBt<5DBH|q!
zNQkj*ya0EpQkiI~lV6!0BW}qf)#XWt+xk#dA|$H&EPhHX(-isSfPe>_|4c6fJMUZ%
zhE_YrEnPzbc6uD()wSp{*MW^(EQ(})7oBT4xg91?Dvs^YCQ!`^d%21XFjF-mFZ1PR
zFp~@r%=yA{0d+!X*42ky4o|2{P~WbtKDCts6yL^j;7z>hoB6^ez`U*W*`dbgM|M@k
ztF`SId!@fI?<6v5xCHfR%fqs|Xj|+nERAY&6rCM4%C@P(Z$C0(L+HfZ@r;P5*xL7O
zgthYwXMYFCeNGEVPj9f<S?(W#%xFyh$qnL0_?W!$DL1*m?%S4`@*^!U3h{fNE@*hi
zDu)9o>Fe(`d7}%41(bP;(!9AR9!g6`_l$domV3K9U_1O1a(x>Fu92(l4{VKCruWZS
z_UxG*oekYCAx3|Gn4@26!E8Z?IQ3IQAS>UWGYvxhd@5R`hbbgLysZlvxb1RnDiRk^
z0jp`|F3_74du6)4Iaa=w7hd)>%hfA>nr-(nWtzoDzhEHYR}Oo&lz%^}rUqOMk@in>
z&*pQKgvr0Sl&+RwF!Nu%o*F34S`ubCdn6(}-(a27ecql^lg;%4=TF!F;R5Envj(xm
z%QJ%K!I@pKir$(QOIsf4rphQqx2U|0z_u{Sc2yNN)<bsF<h&bY`I}5mvc~gVy5;q+
zl1^m_TT3+BsI8~eXp&1iT+Sp?22fn$FY#VE;BJ<<a*+SSs=}a%LtW=jD`ps+x-_ah
zQzCBnWJ;ojc`wJ~#tC7hYT~RqI%4}Y@As(54Kd&*sbJmA+M1^!Q$M%-k7#`3x2><2
z=n$oRJu`CIk%YXz?9wA!fPLgxBRL_C2Tlz}7PH_P<LPBNHPqcBXvax4(@2g`pfIH;
zv%`b{eD79qV}uMVOBug<M|Xwlf0?YF@9~KEb8Y{Q2aG4m**CIHZwE&Fe$5UrG|}98
zoxaYwh9rFg-~)Lt(6PyN0@aR1_g|Y|NTKBxwsFor<@yl=F67pTU{mb=oueH1<NV$C
zr}LQ$dDPG;H~?4Hb3VpjHZlGvhD!SWK4B(9E>4Aq1g;Fm2;JA8)>D(~yw&D@jc9(y
z`m<wY)g!x>LUU!012jZn)T6WSHx`aU(*N*HmTcBV{~p>q(m8r5a5p#4?LAZWq6o#E
zaCl<Uns?SpCGx}7Mg23R1N}Ms(C5bH0Wx%OF|7zK{D}FYE5{TIK%bA}E@&2^+|JAs
z?MG<|37~>RJit}F0+9h2Jdrjk@)TukzgNL$na7UTV0}K-|ME%Td)eZY_Z9C=-Xy<K
z-z3nw`Sb)t&z$e1mVG{@qJVqLMoyp3e?wk3YJ&Gq+=Py{qilvQsm-}a;LG$tZa;_}
zmY*t}!^3rBs|-@Yrf-<!-}B@N%T(Ce{v0tn>duyYPbzrFoF#ta`R8E4=+)Hi@O;K(
zw8$4%Pm!<T0C5(Aw#B`|vQ^HE7E}MszsKhGGhg6f(_qBAcw5%M-zpo~1Y|cGOUhe>
zvTw%Ef2JCl?XW`r(E}mcNP@+xW`}s$p6VL!F&=sEw(a`(^@2px^9KUy%`*lqy!aQ&
zjQFIr{RLTOwl1W^lo*nR*BofLQQ9Nbr4m^F8&~`9r~`}p+Qntb_v^TWoE||2+w1KL
zvS{se&!~NhSOsWE7(o1Z|IYB-V8^ws1PvENw7v=p#uaXz<j5A=JQ`y67-Ds?au2Zo
zD5aMQ(dnVX{1XZg&mc7f_ED#GU7^}HC1y1;$>*OQom<7O*S~VE_uC2iV47I+x!t^`
zS<YVDBZ_Zz`&}?NoVwCk&k>ZHDmR?}{P69#M5d{oW75Ls6chnWb35QNMQq^rKuU>b
z{(pvuii%wj3g5QD!bj-PEQyC2D}@z4%TW^G<NoVw|7K+oQ}6I=RcPQ;76-a~hcw)M
z6@UQix6fye?l(+#-pLj}A<CzqwYPY)8W>nFKDN04;>gS{k8Ww@yqm)E%F1!)3MmA*
zwhxUesXTv)rj+GE%T5x*dcrBcgiwb&Rr@Uu)|Ih&CKKD)y{p)zP)48N0vJG$z-^5C
zped_q{B(9WCAo<$g{?GZM#2!;$mgyn-{#`vO3)b`m3_}u>Q=^yfg_WgEs-ATGCH=g
zgVVF=F~M)Bcu|P-Q>^Xu@Quf8Min=W_EbM5?np2IRBw&pt-D@o2n39i1Ck?pCte@4
zH>?rTW<7kZ|4ebJBxr{;Gir@?1x637j2Ms9wFZsLBd0ton{3Ozk6X0%6&eS;U-|m^
zy`FYO`s@G4mmJYH5MuxwtKE<4iVKm<n5%sKmj?0#s^gD}vPsoecFdnFXO-o2>FxL(
zsu`JOlDqB^8A2&Oy4CHDx@xc{XUc<tRFd#6P1*H+l%N)xB65bs+PY`Zj#Bf|O0QJD
zvB{mi1ZEof;_@vCL{A3zJAFzU<h%B1#CaK(GT9$q_FX>znWEzu(ezahiG*il*Vt*T
zyLT08=D@WK=~5|GqhDF&?yz4j|B|Enf|k$pD#RNDVw>ej!1oDAC}eLY3Ot&+<S(>e
z`TW$IR$R(%V}gH7CfT0Hr_eFSGRxe=;o~PPWJuhifOkCQTrNM?TQoA=JFWx~JW_LG
zBH_0hdG~Q2JFZp8TpV)UNdd=C)h$IF(&*^g384qJan??DDm?8FDU(#xD1wTAmZoB6
zHSXNzA%0cqwZ5U{l?tU^Fi-DDiqxnlS?0}C$f7N7d&~C3wfO9Q3AA#7^zmtFeN(Ny
zl4RVGCW{OM)7$&j8%^!ZwIAUof(fZIc5y-CZT&Ii&rHgEf&KHhcBGX}%4|Pj_rlAB
zKQ~>BD;PoRU~hD9yKr=gRD1C8x9Qq)d5s9pUy`7A8=KXQ%CM!jL$!7#o|PVK=4lR0
z8_KPPi}Vpd-<!;XSIvehIQ}tS4Ry^ogGB<@CS^2N*+(|yGi7Ge{LRu-Fa3KWD)ebM
zWBaf5Z#v>kbP89tsi`u|Zp<wbyWi28dZDpa9b<c<8tzDUa+iA(ogCd*H^=mWbmk(w
zR*lMEdDo;R+-D2C?Vqmg{#)WH-s7w8a2$!dnvLBT5+n)KrI5ej1N+~~&}+Wd9LLtA
zgJUHUuvW`8`TR{$h}&&;l?g|KxcK`D{i(UdKOMKK?%@*K_|U8^W9p#QhtSsGT&aSh
z8x7J=8cNHGs}@Z<YV$uV(ATdB=3$x2%yzi7dNuVzUj<^a8*cyhDc_MNOVtN1DUcWU
zK`o#VI@<VF)XvjrZKI3$F??Nt-Ju_`6bTu5a;KY!G<KL^d2XyyYt19?t>`RI>?*1@
zwnB-4g8{dzom+>(5rbB~Nx|5vM)j%1A}1@Y+9JRA6PGPn*+RE5r(<2y%icEQ=%$K=
z?!`pi0i=Y>VDthJRr6lX-fUH0SjCT@Q?oOyv>>ga+i2UH>sq0GO2pjzWhUTQexDm2
zmxsN_vEXz*eyJmCPv#vHyKX*dxQ<)O?um9dE@eG^+^~BZMyY?)ByWGyjVzCy0&$KT
zw-U&n(KL;$5^B9ilRKK*)tk=z^C0rM3Poz6PqQhwwrhJ8h!gOja4M~NYDee5qWl&t
zY~OMGtLuUKaZ1L-jOy!80()#KQzh-gF}Sy*Fw5f1>3agQ5s1M{RV{v&CxJur_GYyL
ze|9s%Zv#S?OP540Qd(!Yo2IAG)0Lc#bM6f{Xq=%o_T`r4Z<dcRsz3<*$+~d(YJK5F
zewaq`>ddfDo)`It^9NnC92G|oKn$7wxLG^Bsia+`ZK;;K*jagUnY03LZD)F;?Zex$
zHWH8S?M(&aQuT9*3InU?^Xg@KIy@YpPb4F2=DfW3zShqo$Et&qXZejv9J7X`rnPC}
z?rn8>PQSEY^t2_24V>a;2vjF8OQ#6Gj^<6lM%OA(RpzwCsj#-Yt0RLOk_2%meEpn~
z4>gk!zZR69oz&pf^LUsC&VdX{vCc_6EW%&*X%}viwar!$KqM7y`En-q?zRT*t?TQ+
z+?;5C2h$cRWFY@FNaApcV$(U|X*>Q@J}-287*+27LE1Dj)MY1S06m)+rEL(kG*anq
zd|#aPWa-=OK(hn;^(A>>`~X^4|NhYLB(_Nl_H))O(DSAqnh(Mc+`MR?FZB{yoVCri
zT`7DfZ<XQ%9yyK5A&Q0SLPN`M7DpdR$DaLUo=}0=e;8%;{X+D$0#yP-$RXbrXgOtG
zn(i{$Li6##hWvM<uh041Boa+VVUr=NRqqTR!t_9Xf3|CyHHh^K=NwXPqw!9Sy3FR%
zzRwTusX1HDh>6Km&Ubs&wI6Sp>0EJu;{IXItCihDrTcH-0pE@^9f8+c9uOKtTW7nT
zEFBbQPy7cFEc1x;*q2;rO4UlxVk2#OCQ~3FZYJc=ua1PLe0#w79+NiP<KH)D&l&E#
ze`-9-F|l!s^a{%B6TK{(WYZ(>BU+TkwT)tZ{mq_nD4gD6%H({ha_HjMShg8C>L5b%
zQn+BHXqjTsDV5akS*YI^=M|n{i=G91sZ9zYqrUQ9)PFvMRLeSt9w1D_?<9RK|LTM*
zybTDKJ7?Z1j}36Xc#e@2N)Bf{r@B}#h(Gw5H)yqEZ}m1Zj+f-(PU@szX`#8$;bi;T
zP&>@{T*cqL_wPGVIVv1zSbWaSy;>$NPojL+aVk&c3$5?3F%z;uhr(5cnhahO5)ixl
zSUaxzjMe4#cAqVa<t^ADf1Pn_>w2~5rcUW765SC^`??IJRnT=^ai~q4zyyV#wcKt<
zcP>S?NZ0o&>wb64DK}8A)0;yX2(IIjHqCQcI5(zRioATr*y}z*d?B8Fn%B#^D4<S5
z43N5S%N|6jh~W4iid}v%GsHIyy9jVvaI8GKZqQO>V|6`W)XvzosGWFUpfT)s|Ees*
zx1zXc@a8<p6UvAKq2toDW~bXjjOGor3Yf^u=DvU}CPpbSL+x(wQj=9p4yg<LS@p8a
z=WEnIDVZO<*lQKBH>D#U4lI8s0*0e~Vw$|L4XjSxl)kHxbXsPI2F&$?z>S=oo)>Fq
z^*!9P1@)%5xnnOi{PsMV=$?>DP3z&Hb}u|gF&HfM-I~B?akyy(s_jvuX_v9hZ_>#I
zyeh2s1u>-N3CwFAr15{W3d<)syBNHN{*RS>LAF~eSAuK4mm%Q=`*nCRzWm4Fq>QkM
z@b$@u>-Li`Z)5ZYl>AZOzJ*lY>j_CXB2*+bh=HWzzItU*@w#+lE=Sa7ttfgWQy)TY
z7BIjJaxE=?<YV_|g_!r_QdVeqCnLyx67YwgCOg{&Z0V@9-faiI^+t&<Gp>G#!NGW{
zILb2P5$S06VXEj`Y_6K|Gv#Numc4CR*wr|S*dRl&Sut<pUgeloSjZUH<_?%TxJ^V<
z#!4T<D?>(+?M*ygNSN_f-Oxcx+f!4Ao{y=}d`z&vQ=L-gm{xHoC^a+b#gY?AB>t6A
z>5rc`^}M0077=~s;r5d(o#WqYGh1UQQ{TmdYyM74zs+?E(y39Xt%7xKEiQUTJp>;s
z78C<(Rp7rrFXYxp)>AuSp&ouhS@-CFWNSe6p7pf9#B$(;6sbOKT@*#4868HnHml9~
zNDK~WPMudj$>cH2${)6*QsOE?F(ff`CGPlssa>*))G^Ut+Gg6A^1!vx8(C}8hWEv@
z+kXq?@t?D?8@1Pt$6?>+Lm(Z^dv_nj6v(shi?v=Z`K&rKQa#?{{$Nw(;xEIX^?s^d
z)1s&Z?Hf<f%pSR6%vmvlUTZ3Y<^y0wA!Qgn8$o-4$?2IEDHAWIRZT1j3#QGv$@D9J
z!>OF{-5O3YH(JwIQ0z3x){fBEE%yGqGIND^xIE2d0gFFfDRAo(u?M~wW2fc5XVM8Q
z23PiR7E5H?%qxbeC~2MC(KSw&iJ6}QTS4S5Sh{76&r+favIcd!fBCJHWCV!A<k7bS
zEDj+AsT#fk8-w|RJdn0f$7dK*m1`YbKc>(bPW!$^sL3ryv&G<(!)PQA=Hx@SSUmwj
zJ(&MTanCyF;Q!$QqEO%Gy>xCsF_7b>+ti`nkbHp|7xq++M#+1k<-k+QoRJp}SD3+}
zB?4k@Bka(tFf!tqO|I-W5`LVV65m-KT(j_4eFzXc`?zg=V^@8#rmZg2`UtjX(I(OT
zE)S_Th8naVdLDnKsJqPP<iPMKiz`8Rf)%$6B_>#e+KQ!d%gfj>r#&5gkc3eKZ%7M5
z+;@|)n&#={VciB@#kg4gT{^LRQTr8pw0t<(_J@BG!STEwhhrvN_S}PEp$DoO1~sSd
zj-_!&>%mW#(N=SuAzwa8s5&pc4h4E&W3J3x+$+qzhuIB|28T#2*TpxAm-mEn%a{4o
z+Wz@QgBxG)1qou**1`Fa1zG3z=WS$YNBsxa-x$27awz-{9YYFUwBO0Yok1F~Y`!J>
z^&?x}n1(Wme?<G!gU-%B#J<|0e6x~blzFK45|2FOLyYyRwbfK=W8Y0^wEc8<2)8@@
zSA5ex@!K$Z7AH8aEW>cD?S-io-vH6;NjxafuI*^*b9tCR=|@Q*s{JA=Zsn<GO90mB
z$U)$%uzQ^sZ*6I8r$Y{s7Z*wq<6_z6y1b2x$Bs2Oumz5=5hQGB*{MDIb+zv$ee<Jq
zv<m^GqnI?>bLRJ2$QOEn3nr>ObKeX|x-NHt7_BfVS|@Wm%&)F6)97)Q&El8*Wmn6^
z7ug?j(RwvEL~mDaNW!IN&OdmIeqGo#Y7eA^#L)wSwFmXBd&6j@nAn4f0_uO1L-1}`
zA_UZ|$`EV*8C@-TVW_9W4wR=}r+@KSU*2a`G*qCp^80)O<2gdeZ@8E`xImfVGYwj3
zJxu)Jg9R_&*4ICOa_1V<Y{s_>(HYlQ`Wt4@<71+uDKf2YDwF5#!n1z#yHBCxWNk&4
z0%iyTad<MlD#g0VkT~GjKsQWk6=pc%iQbBj*&<XG%z@PWQ3ZpDU!Uf3*I8RZ{OH*D
zyse<pPD#@Dzy+^Z3x?b*X{Pij-PE{^%j*2?A}RwM6%Fe9o@t4jGVr}>6B%fwJ?Hpt
zM?<_YQ+i)6GZ@nIb?N1oa-A{XK2Tfjqjt6)-L=6Yw&LHLRfB_yH;p60|MP2})#=@c
zN!gMotiruZk4HRB3#9le0tfF&MOSW?f@esrf)>0}fC^$jblx}OA1Wu)&zk{&xp>xJ
z2*-x~s*K(UC;x9id0E(1IFw@~J*tiwq;QE*TfP|&XSLZ`--s!&03ld_8atkZzx;4c
zkMtHs_vhwv`|a$nd8%G_wMQ$Y7;urf>j!&;cJ1GdSTS6JS?77~KJ1A`a1a*~1B-LM
zM^MwSoe?2LonCE~Sw}2Hq$OYssxn>W=)4&_;Ti{NfFoCnrMbpYb#^us{OzCo>jNs`
zMCI9BiGOx{oJ6Bx#@|GK{hVxF-W+npax-e9O3xvLjT8LzXl<&LniA4*cl^q)%5abn
zF-%A<7WDUkfxt5aSQ(CN!RQS8e4hhS#MZuXwFTMcgv+65d*1?Q=M5N4f=3!5p?c}^
zvywzWK_z7H$-X`@e?RN~3o`o_p$x#97zjAN#cX^a7ZS_*;v8^6jE$p_N(&!BdpM8&
z3(1TRQW>aSPB(j&Lqe~GZ#egj&vetmm>vTzql>wse6fQ8%e^`OX;qG#4Z~TZ)l1#4
zOBt+CI!9*-D1vHs-J-^w6@SUTF4gx3O|Ev_rk@ZkWJnB1NBSe*&=7)~YU-zt<e)2r
z3C$O&u&?&ap8VJOj)U~9C6b#&&3K)vn+$*tIK}}bE6jqrq47w7CGa<;cPa;ad3|(|
z)l)(2!^(zkoM3*H2^`ALkRx13$5Sr}X7XYs*#n#1&5KsccD>eo<1!XcB80W6w*-*{
zH%0CPMlw)~c^JhW5_^^ceeO*}%Yv?L$p)PcFQ%~&J^CDehE*!g==-1>di4odQLZfb
z`iuUSyaSwEXFPIaDb&TQg^$(T?W>}#kP@Q4ISp+F$|BIVn7m<o5)xbUSO{CPd_qDz
zdddWG*h5v9=DX2Ck?`zk*R~|iyd-M{v5j)779DV<VOB}XuWyl0dY$3Z(mBwk<a~*3
zBJ%2#CGEEZ={t>KWHmu;7_g%F`WYL$HFr#GY}BZ&9^#6`%bz7MI%<)TQGCREz2Q!_
z4UE7@`QP+^RvXLxK@3p6;;81P=>9R_2l+65{DzdJ=Au2|xd*yw)cjKYH$Gej2Z&42
z*CR;OAYF}ko9c(T+b_*~C*iD=xWKR+3J+5{4v9^26T&W(1<jFJSy6bn4kwGSw4Xq#
z&cq3+cZB!02*z*Ev;=w8m))`%IFzYg*pOjRJzG7#{_kj!$o@zp3;#yO$(rT}{JJe_
z5PM5A25;)H&82en*Sin-BU?!^9f}x^dYzJL^n~WQ=9s#CCl<Jyz}NEmd>``cT==;{
z&9&wVVORFofa`1mi^<BHBA=F0riOR+HW1ek1hG;{qV;%=*L9bhtXd`WO7hN}<eoSS
z4nPRL@al0D#bEzAJ$&LHW#m@ly58`loi+qcMjSqhu^KTl!UFJ8_+r5kv~@sH!j4NC
z0>5Lo3m*<*)VQLQQYH)I3Q=qm-1%QdbDxXe6APIMJXB{Hb6z3DfHT-VDRE<(xv)>-
z7v&3`Mp<NuR^VN5-xk?SVi^5md-B&Ju4t;XjoOU>4lUzmTRURR(#T$erDgfWQgo?+
zQk`I@Q^b0rEnbB7zqmxxm#owb7XDQ<&Ee{x&m;!h_p>tiwXZrS-Y86GtS0Rw*&>=#
zlI!5bY}%D;?KS~SJ^;(8Giei<>X%lDh41z>yq;Xmd}KihSPqsuM)FqO_{fxjGeG*J
z5BaxF;~Gmc-9|;)CjH}rT#=?l6UJNJxF^pUKtm-3xG+Y|5%)b`Ubx!k?vN>_FJsHo
z*f9L7I}CJ=mVQ!}`CkF07H%hq`r5dPYX)&((!@E7FE(HWNdH&6)8;k#XWsOYw6sUp
z+{KR{QG{<dO!TQRymv!D{8TGLr^;j_E4iS8{~aEE?qo{6X!hxcnO`f`eCVbo-;K0z
zE>GvvB(a@}%WDtYcFOBNELjNqHVqmg(@Pn*JuUG>&L;dj6|0!+jb0)7vd<I7D05wT
z$cIteA@!=(RK+H+q-{!)<m}&mAsLG@`x+}Jf1W%&AU3U=+T7roC5mmg?+yb7@4NOJ
z8rQ%%!UnAkc%rQU=97mJi$=7CnR9h0?46pM5qsw!5SjHj#LI8$Z%831@KAQz5WxHU
zQ{C~ly=xTO%askqoF0NnC;XoAhqTNK%<ZU`yN^pAz&)%q4gPoJ$3NeHr5Z^^<FB-^
zn)9}M#pmJG<qtP0*w=Z*+nbYaJgzP^)aC)a{!j7QT6hR9@bh1z=`9G+@+NB+tH~?W
zgGRZLg??FYkK#A*L7>Y3+LENTA-gBZ&Tm2y>bhq1oujY%G<SYr>bwAz>7p@{B6%qq
zWuE=R#G?-~c`fyKCNEjz5flIhTmc7Yd-*sj2CFY5R!l*a`1c?CR8T~xJxska9w=Jc
zRL&xoEqr)y=1E&0B|OG@T(+4wX7}4pg5Gkvf5KWBhtdXejH|=z63&51Wz9ppP_w%d
z+uB5W%($CEB)~gf@m%eLbHU6ifqr1Hn+bf{r&^x8OuNVCvC(rrtHdU;r#F@h#+_kO
zg|X3*&pSZL+go2i#h`an!F6pIQ`R9;zku%6*UogJTqY!TaFZO`5JE=m-DF+I=&&aq
zu()wS43D0xiJrR3^%v2mwJicC!n>*7S!(v^8nXsZ7U1~cE=WW*Lhta4azc_C^sUKD
zbg#JhGkygF@MyDoK+@BG<|~j6!T@BC!=D=0^z8w_MSYJ9ST+C7t)b`W@JU!2#3Nwi
zM!Ea9@n+-z#~&vP7r9$)s1K-Fs|#2~TX}#q(`FWQg=jcU|ANZuJVvqpt#%%HkqD@d
zm)p!}6n{9U8}}{|0P%xvgP&%?ukltfZTK}<JyEK{eu6jlS7kt#SK)vPfTC^Yf>8Gw
z28-oVfoCcT@n>%5g6(=k0K-K!$n@CxHV(A^0=BXWJpb!mOCW9S$D#H&JSdv$zgQWc
z2C_zl0oN20sihxeTlh7kZ_5mXu<5o&zIM0lorVg6&Oz(+Y?5rJIOGd043!E$QeDrQ
zb3bD=m67_}A&$Ux!H0BIEZm;c4YKKWyDVaBa5+EdLa9}7e5o8u{9pZ<vKd3A&w7^&
z*?R%O2RNVb9$*A>l9fFlT<kf)#6Ji9bj7e^#*5xeT*}}NM{7dLI5;t0XuPNa9G*`%
zm(M!{puh|mr3#pCmUP<>l%_&u&xZ#Oad?at_^ky3f^R+oD-;t-HC-Fol^<R}=*yNX
z4_6`$I|m(SjOF0|I6(RN_9Ro>2KT)6Y1&Od5XS2DQ3)-MvNxi`<>cY{14sv7sPu0S
zM$fvMyUY!VN5pTnhj-qyjX(z-(w1I6sP9k)x4d`#xw%Lx3Vy6eEO@q*9zC0dk{?AU
z5<-E)8<Q!aaT~fps=i@^P|WXg8irO`tv>9gJ9YNt;++`hAg=-OCfZik&A399en{Af
zAQn97FGMr3)jBP{to9X#ypjYIJG#7y7}=<YhcmD5?JzI|1Gv4()(+2SP3uYj7ctk^
zW=uCLGnv|+6uMKX8j{k%K>o{GcqW>g{E*s*01^qd(Iq2;MVuDJJ}qE9$UtX5Am9L=
zEIQL2=laVTTRtcw1{mJg8@s=EqgvQvk+{1gYP62R`J1v#d)3>_gRA^dnx-XsU-1F*
zDM%hn+D#Sx79dV*5l5fW1}aJZ5YKErgRZTi!O=D<bv?!y2L<aG^-s=PC9^^8WaV=$
zv2*)yV)?X(3ndfn^f9JaoI)TKsu(B0(@MY6f^C8tT{|aDNH1JQ=@fJ+>Dqm!lF0QI
zz)1QCBqW80Ey_L<NptsG#Wo>LNTdy#7xnJ;>zw`EjK%W!;r~-6J8PlNc0A(s#m-^@
zr8gBF9bV{*v~Xk8=hr_bY;2;F;FEL!qt&2TJ@JLSs6?t)EUu#A>t`*nPLa|~iAjXO
zMP$@#(gX@9{0}~*kBXg!sA&u#r9%4|JtWc}cJX|g68#DkI?k4{A0^O%g|<ECpY|>)
z&l<FuE~HD8($nc-$8WU^Ud`s5$}f5uf!qKFX}(K?D3tL9F^)%@JDXA2i<mF?O^)so
z4l!8>(seig@@F@)+8n1uk;WxLRUYyn8wSDc#Fz9-d9#tij8>hk7D0H6A2-DYVv{2g
zpZjRTb8j@`m%T-PwtIl-A-0l-PGZ7!Oncy-puAW#@EDeo6kf{Uf-UtEgtX2UMf^v3
z(CLBvr{8TcwxVL`wWmNfegbim56^YA5F;Z~OuGJx2ms(8{C7v7jWQF)NC2UGpS8f>
zoM)m&N=iF)eY{}VPQ0>&GA|5^hcWY}-{u!Giu*i0WquU=3JMQt6+Z|{<(6Ik9nK6p
z+s*ER3To?`H9GDMsCq}#dA4wSHOQAS(OKdExC4qRG(r*kB;VRkZ|=Osujh*=LZJ=o
z9*xeFw;HC!p&_yhKWx1bv*GYR^gzDj>L>3^d|^^jaIZL;GwaM!K?NV-V;xeWhf$?e
zq%4{_lq!;7`oMVFW9uN>!9Yf>DmOKv01HxXIBU&~#MMbSE58%-H@B_x)*CNJHOZSJ
zy3gxlIp|%Q&&2&$f#GDa>F85FcP(hJ3rN&5Ft^?!eyT8Pfy#|PSzy#*o9G8DI^Tz(
zX455VJ2E~byG!PC_X@GSwyvfMCFozUmM8s4wIQE#TrJp~B=A>C|I?pQQOdh!8Rk<P
ztQ6f+Xy>1;(+Onz)m9l}$U$SVGrC0hQ375Kd_8Zu=$L+~c<#BF=hRjOGgn&~4afTV
zb(pxAW%mzi#t@rRYc$cs@p}4K@C|5dNGvA9Z4^d*d)-t`1l**Dzf?n||8BYv(p>6C
zlt`Rc==6NM8NkPo6t`j6E-REz8Wjdva`Rcu1}QcRo5c$n)Zlzsvyu%#`}I7fpBFtH
zCk~)T&Ue*QBGV=jUycRN*!b3R8C}Qhv{<<9B8^z8nl!7>(%o?N>=h>%RwZP9{62p1
zsb@CJiPY_KdE9v(FaGBg3kH5bt<V1KjQH_&mkal9Kdf!K&|U<i>JvG9F`uy~Q1n=x
zl+c9zdgljM@-MNJP*=?#5_kQ*ro|{CLUK5gQ|B|}?}Ynd5Z8WYHzU=!CMoRdsyi)~
zlB9@;_g%O+kLB9%QE8Qj?Scbhu-;`m(~urme?^S5c=A_S!g*Pt^LNoqE7yUuAZx<`
z7@eappDwY!<Y4$GX@G7Iyfu|};DvmV2L7gjoc2@v>Mrk~Ek49N4AtL&rF0Cn8{TnK
zyZS(8q)#;T5A~FLyJpv_b?QH@=Oh$Js5UP=@kd<N4DCEOC4FS;ho&V$h~;tyXUuwT
zU;Wxz>VNg}`M*<y|0C>+){pQ~Qxe@_eGA^Zo3gFPj1FKdTl2|vq}n+xO^3J$t77DG
zyr$wd&WFEc3f-6}^X^^_P7c3o<ugaIersa9s9@~w4&XH%WCuOpN(J@besaDY#5<Z@
zm^!APx53qKJSY?n5O*Tf)bvi271aoui%Nv+f({$8$F$o<=QIYCX<_$=1-lr(UC!^&
zdA|C{O`${iX9WMNg<+(==Z@yVR$EVU$-6J|$1=W0&faR0uHg`yc{lwS);~J_+D)kQ
zEE{o~{4&{fxBk#NpXm`XCWhqW2i=zU@^KQ~y}up(%B=QU>%~P*h82?=!lSS6gTF*;
zx1uVXqx%~K--~qSnq17SJMHU}5@TUV(p`sk&%_61C*$XWAcsj@@GSVZz(XIuKjS8K
zsyA1=qdCY^oftnv)K10sn`n@>Cd+`##8Kp!=t?(?y%s|K7Qv38@{n=xU`!OL?-g<0
zxY=<}-xu;ra`~kCH!VoGQK66@3I)^Fhe69R6GvqNqES(<?HU>EGis5&>1mbm2&%F6
zBiOJBzxx={Y`9!~;^&maTmK!TQ^UHEEDk_IJtC&!FV$k%;TzawA?`QAj(O{)!(w@o
z&=2l@iOlx1+ggK8x0Ho~F{A|gK62)=LkbPvT*5)xcp0OynbMAK0<`niL;RhZZZ3jA
zyPJf}9-9b#fj8rnQEzsCz(D2ckFxlEJF+}kC<0NZ2mW|6id;4&KI*>`Z*2rcu-`M6
z6qD`Nw`8%Ak4Kx@KMehlvlloNbYUAbxZzYP&>GGXris6ONC=^;x$jjqlJNUDwMn<Q
zCW;$WaSIBs42yYF=#p0>i>^j$7-lj+gwsf3a=qw@S#fQWqU;-KheHlWfA8VFsYXX1
zXX=+M>}cPGC6h}Ul;uL3xlm!G$6(O?|Hwf)Q7Dkm^6~ouZDxR=NW7wo+t)_xE&jl!
zn%$`aN1HmLvDDKX*g~`IOmM6S5zUB*Onwj5lggv}r{#OI82}xyBAVGHwAWZaeb<z!
zs2w7;%vL5<eTFqOp_$3|y@EiW-$^%}ITk_VtUdf?t?~MOg^+dC$xq`(BmN4)d3l4I
zIo2J5B%BV=`CnE1|HV~Vd2rL%Fn&Js%Tg_wusIXv3%o~P>c{F^dN<j8D>UJVFGNo5
zpZm0`)^AOIsWuej(D4pzuDiX+I_6R*fv%vzG!WR}UC?=hfcPnP!$KvYrz@KMUi=HM
zc0uPo?U4kSePX@qy+?U-_E^b*;NyS>%VTHJ<NDsi<}APvOqF?>nChOvffs%(Zd&xz
z!^q;G`B8c6cLqqqGw?FV*Md&3Tk{G<GaV5_tvAwpCnHSZ-i2%~gkn++g6>*><~e_e
zqF3JWQS_4Xu7?>fYz2lOiPFQ!0mGg)^SR4-n1Vi$a3mW)%W4j%L>v!It}vKZ=1Ws?
zS-Z2`hMu~drT)_x9M}XCwsrW=dKF<o0j-&GnO=prpZ%V<!vUDhfD@7@?~vSw4^qSr
z=D@)R_I-DfD+-7722X|3F`DZ9!#R!pxnB*x1?(`uG`I`U7c-dna2Do9NH)lQiE$Pa
zv-{&XLjuo`0VEw~v&y}#IDGs!y`i1fe+gQbeC`g5`;MWx+Tf)ce-QC8sbt=R4iPF{
z;+|<m8%sOU=*WZd4jas%D*>YwaUM@B8gjf?`99nVaWAxyzy&?v83w>_juHK_$v*;9
zqeCH9&tt=^QQ|&}M+>zS1dt*ku&#hp{N<XE#CUD+oA6}Gd-YeT9$zjC6b`zuU_~b2
z@78h!8_5!xJh#2IK6a(XX9r2w|3bp``3SoMt?4MB!0W^;lcR(5=uNi!x&3p}BB2K$
z)s4JazxO^vCMo@Qa|w{?ww#XNyt}&gW@XuHFv@M3WZ3{IcC`7V5j!^pDUe1CbQp#X
z9bbQZk`qv!|7%iurGoriczzd#L`lug6MX~YH{xTTRufLW%inv4t{J1DtKS)Do9tKe
zE|<)DvRa9yaR8iJ5PjbLo{?}`fTaNRDil9N#rLNF)nD*zdqU}Ihyh}nLOf+qTKfea
zaYVQp@i7RR2$9R~N1m-myqqCmdQ&Ic*5KSVs{or}we51HrtATjT7Ydd^J)72VBdfg
z?ji#KoT{5o2aVc-{vlPut4||Z7<)4hw`a^<(8glIwe-LuI9l(Mhf(|oq7A;6zd?fB
za^uZ8OaHo{`^d1PO?07k;ULIUK7RNBvVxBRG-w-IAsXBzR6Y(h6H)!`|9AJCVt(#$
zDpdQfu2s0+HZAQ9a1{mseZRElM^x|#ofbVm9401<OFUIjsZmrb=(;n`;<@!2daD$}
z0D!n2P&)Bx6|#=1QhN#}0A&W=I80^!ta$DfPqoXN5i^+|gQY}HkW5iHUa=lCxy}@u
zq=F>|0fl4W@0-YOzo<<q)SRaE!vWTPFhKq1Hb+epK4Dqmw^k#9@Ji1_jcb@PY?W*A
zQh1PHeTr<$z{kppLyc>l%fS?AZMk{hDA_FL{#;z!F-!m>d+?5F3iufk0)VR4V+;V0
ze1`*mm7)hfprQZw;s2eG|IcQaL_+`ojUIYS4rW9HSpP*nn84?Lfy$tfq%80Wpd_a%
KTQ2?K<Npu#0<e1k

literal 0
HcmV?d00001

diff --git a/luci-theme-footstrap/htdocs/luci-static/footstrap/apple-touch-icon.png b/luci-theme-footstrap/htdocs/luci-static/footstrap/apple-touch-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..e53e8a45b90337b8a412daa9cb8ef7a7f54e0645
GIT binary patch
literal 5255
zcmc&&<y#Ygx8A5phqMEv1tb)NjT%Ud?w0P5kP#z>l!PFNbO=nOySqgMMG!$^Y=VHm
zs3|SNe*W&K`xo5%;hgh4=RD^*pU(T9^ClY^z-g&CsQ>@~t+tlB$-mh4U%Nr_&$l#Y
zxB&nR0Bv<uGi1@;YY@^*qc_?kLVpQ+Om+hpi%y8Q7Yrg-7m1~Mp0po3_#DWrN`M!{
zzM#(Kk;D=~8bHRFXtU(Gm+?$YS|mHD)+O9wylvQ>e8guVkI^E?VP>MRKx;tA88+X4
zApat5#<dwpf>u6{R#8#exP6;9kl`f*^oCXvm`p&Oj)aL11f<M}i;n-Gs`BvvsvN(1
zsGdBZ?G)(BzQ>{I(J_HWbbXR=4D8mY>zvq0_^x%K!n^vBOp&}qm<_-K9BkKPC}UPe
zGlUr3;D1X(2#sCXtEDWSSvK(Uov?Y-Gi<*f5T{wnOpq6OhPoOfHT!XW?ffhnRPbQR
zH0?<K@{5jG&=0eAwh}vk*cX*-*Crc9EkTN@40l0z0j{}s?ypO};Pf7uzE)En(e`DK
zNm5;I$qgC)f;cca>()2EqXQG&iU}aMn7CUkrRr?%LpLc+;7TGU&@~_Iup)aPdJl7p
zMYoA2Rb3OLv!x;WBeENt5n!HX*6*_EJ9>RTg?d#tR;OsuW&)cO9}&oGQ*`9_?XRsn
zIT$@SxQ!A1yNn1ZU3&#)&5bzmT`y43Y^AO=jt4&EMoK?ymeSeb-<aLYl@8n!Z;eEn
zJ{_NZ`;{StlKF_O^H-Rl-g_2R$ZdGSmunntf9`!&sSI-16qWLK_>HWG17FteLt=0{
z_vKf@D=q(2TJfwc>|cckIL)T?f_IPf5iQ;T-62Kw)Q5`(_Jwr*{A}tUy?#W4Tlp~?
zpJe1)^giD$TaSG4q8@;Z^4WZIM{wv?<ffDYR=UCbP~6{am2%->&&BiANT-)JD+`8q
z{cT4uKV!QsF%#aHWKj(H>#1*D#pL$$X`in-83%ky@+O~P_K>pXg<jr{@w{6{37!Hj
zBm#yY9Wz|m$qR$CHL8!-RJ&-Z+6J_)tP|5Uy`9-&g<3!sX+vtNetnJCjM#NhbdYyd
z5HebQ(!ZzaP^&!HBl!X*$U1X7B=qE|s0tN<Q~{c1ZarS<RnJYgACLgywJKn*PBK>P
zFmxJN>Xx7Gs{gRzWlJKCn;E7T!UEk_1wnuR_J`<ieen_7jPr8(4Hah*ceQ%lai_C;
zU`p<)c4*scx)Y)U?R;R*E2<e7`2^E+2ebM`Eum(NAk8K^>_>0#Y^r@VCn}<OsSK`9
zpIMI@$sHdRq>oJjn}=AYBeKUVDj4tB3KDDj52aNhbn|DB`u6_U#+knEJr*>X5)(=f
z_BXl&mha)AzdwB*&MoCRE}Ps2OuSEviW*7KQ)>%Z5bWo=mUOf5$j92bBXS<umCIUo
zW6j+W!vgLvljx_Yvj}nTVsA4_YVqC3Caj~>X$wz=Jfw;4QwbzDeRX+&hn<jMMFVNJ
zK4&@`m}?|%(z9e?WOGQ3>h5PHw;Tttx_>)F`g1&B1z*NA+Wo6lb(UgJK*`D}Kg!%P
z&Y=6D^s689b|^x@S7*6LXhPX*TY?Lld7JRZLXig{ciuH_=G0PrI|T-tP{BbuPKTSu
zQ6$S3KeF-E4^H7vpH*@IrWN7+Q8Z@BPx1Ih2C03_+K>G|B&KLNHvC9=Y`#;=Qa$s1
zcPLBZ$18j=_Fxt?%X|G0Hw*z!0T$i0&^)6iqDRC@_S9LekdR+&_mK3C)BWv>eRs!=
zTz%i1Jc3x-FqB6^&E5+<I1K6az*a5U9ur&HJ>P#p27?4AUWRLBly?xLqx#tSo*kJh
z$5C>pisrc9YT+I?FoBF&&1yo^mi8!ndSw=(yEy<y=GKrqdv|1~U0!nPG;~Z&)M-mA
z{-k}6jf@vtzMyk#k_>Q(sZJkcPmlz-Kn5?tKY73RqcLV1);$xoLlbiarvpXHN9M4V
z98#evp~?jqIkNAVz%qQBa&)d99$@tkjxg~uzT_5_Ob7fb?=V>N`LF4tiECY=pij_&
z+@(b>XI`eL=%mK#s~=wKBrozDd_&C_?XqPp-S*`U-W!GuJU+bCj2{<K&|57A%jRCz
z)7Zty8MeKoDyGa*z9q1;FX_(2@^*(S;-h$kjyP>GnLcGkL&~pALN{AnfMHs<^`G_&
z%~jqEli}9k*(Wix6o-4ypx;oNIVd+;?T!I<QOx2neE{vjgi~NoqFqg2oyQ+KjgQY#
zI6Q9W0Tyi5Y&egoJq207yA3~`112Z()V2bY!qBfm61^6&E1NRz-MWS`b{~XknEZI1
zudBH^(=1SH-YPbJ2tnJrPnuaaMwDR)zHI-_ml46jUUoIttzc5`TU33inMyLg%}XU~
zA}dvtA%eRdV}GLG#W*Y5PSE7eA+DtM^JW!RuPmti5AP*#&DJ`#WZ?>8PRi9$<b7&S
z@bD?E=}B^M3~6AV__yT4r>83l#K;fykmo$fmZL!<S1@o5Ysq#4rQZk;XZQg&qkr=7
z1L?gNsq|4PrlC;*_4DqX>4ohZ7iYP{9%Nkr(8hVt)!@<dj|R4SiBUrfXV(rIlkwWW
zIOiSm@jFf}{mr6bnYnl-0`hzCaU!*UF!A18utVJ+G?tq%Dcs+AcV{|FVa$zs5KGYo
zIJh@HR%;z+Z_t-Z#)T6;NR)&zrEnv$jqKon>z2~?zz|(>M;hCC1tX^^8TsdrCGz$}
z+vct*zdECxqw>_*B{tz7$tk^);Sa(cv*gzc{NQZF49<xwSSY0ECeDs(s_IfKX!~7`
zxsrS*2pQK7CVXXuIfaC%{<?zIEu?!VVoH{D7BX~p{aL<c+F)q;%ewCrc@Cke29{j%
z^%L4d7Sww6(Hy2smS9Nm^)*k2FJs8BaewY`)~=X#u<o~gtBXOH@}Hydt5U)0*&fKF
zk{W-<H_|#ne+6`)yz2NbrRI$s!I6Z?b3+e9Queq;uvb3x%AsIAXnt^MksoH_y_anL
z;3?k9s&609Z#(<m<2<g6f{IG|Hi<Iv_;kM6P#tJHEO*<kF9bA6a|1l+6bW)bsf@n@
zs}ZTQ>+*mH678wF^9F-9`=zxK>b?|Y%Doy$ctzf1#v`MmtjOe^sgo5&s)*aHl@ZPb
zA#M#GmD_nuwR89HmQy9LG5fBz+f9Ea&H5X48u&Smk;TGMbiC&^$g|U{PP<5ikv}o}
zej$P|rUT&t;?{~j<F+E*WaUwGjlTQi{-#8J0<_^O3O2+7-jvF($DDGN`$@m?|GO<5
zVJZ_{f)DHs-8Hhn*v(azgU<Hk!;K_WCORC_Mz*M%$l%Zc;z=G(y<OOhj|tVgDz2j4
zWk!hT6SCT?7p`KME0){Q3~lh5TFGactXgty_FF0>`=74mf!v;9(ARNzJQ<0+%>)^I
zeI7?BlU2a!&%YQ>mP5Wqc<7b-nJOgoJXzUG!kV3)U$j+zw^9EBh+?2lJ2d)`cQ73d
zonaI)caz;<xLL-~mXU)0tY^9GO>e$s4QAe9fR=PhTFj?Ev2!k4VuC&{$Ozn9JeqpL
zc=ZG5?$}w-7e=qoqwvJ_=}&i+WwChBx|y1!g%?jM{c4wV@3TnT(l$4gxr0u9!xc-8
z|3RLgl8MTiu;HiZq1x9{kB7cFRK2OvhY35~0fmfC{z7=o(b{t=ks-BG9|l3}%dW+0
z_xV>*-1~@DhgF4tY|D5O9V__vA0h3aNWYDpljG#1xROleN^>q!%0Q-akT71ZRgit)
z%A{D`+>Qum8x1Wd!*@!gfp9s&sA$r1$VY^w2#>yKWYx>vwx`T|y<fdk$}rMy(Y2w_
zrD}d~IUf3)hPuMj$VJ9&V@5!ufV*!4QkbKSb;RezQ&?)?-!gMOUnttC{?(?5s(SlP
z7$WDC_n<Mi+T~`|ts?zipcJVb^nTSXJ+Ad%d4aHI<&gxIXW7(9)YYwE#hvmmGJ!?>
zfktZLaAbhW$EMpu`Zn<t?R4~L&j4921*lX({q~EBUFZcf?GNW=5=ladv#v?@=5t(z
zPe?~5wftq05ScDq#+gi&aRIIG=R}F`v<{{6p%HQr)Er-z!b4m9*i7V-QoKm5$`|oq
zM7Q_*6TF>Z&aP(S(x!nNWI$3DR#<~Nu?c3uEQQ*1OCyee299$GPan@5!*%(VB?SBH
z230muYKF0$kQ}Q94zNeKXZ)V8Q)Pcteeo6f#`|dFX=6Jz#D{yLd}K{<=bVA)mby)r
zI2W&m@hu6FB&y2pC_7q|#$*MVF!VSaPa*2SGsG0|VR57s_i-VN0u<3nb97cNVr-@#
zPRDF6Uz3|)DF*T>AD))#J-oSRZE{?f{pz>zhib9HFLZVKG!{yrd0kRi$X!-)Vp+jX
z!?1K6PFZgsK7X-8^El1<1&AMd*P=#FPsk17=jEYjWo6ZWQ}E;!8kc13CLKNhSmVxH
z`BBf#R%?+a>h(8G&2>5H?aS55fXGi&eU1W&MJ@g_J4<_ky;2RoZb%<QD>=SN|Ix|q
ztKmr^#c4tE7bOzqgMe72F7#a70NuB8cn#)rYu<i7>{@~Qt;Urhqr^VJh?OtuQ4P1C
zbEIU)M15a^nLRu?#(X5-by=*N&nnh7jYOjaro?96ISRlNt8(UOO{A?dNl9`&h}&q6
zhU!6L9y6a3Q=?PoBxW=9(HyOOn=g3)Nm(90pMa4_Cg-OQ_hYK%T7b1fye|HAobHpM
zIeCU&^{kfr#lKZWCwv%NGVHC8x>IjoJ-W-RsS!_7G~`3?H6Bv`xt#y(@-5D>b*l?R
zb64oQc>k-K(572a%I`LJ&6MDk+gi~a$o;MD#e^D%sXn{a`6HP9gVBS4l@H>jo--MK
zX1?KsSNuXX<iT<LK_JiO&6%APiOErsE^;tH0lGXB8QyXATVYkG%@T(e-+|uQxrI>`
zt(er}Rz_6!>43U4pIL+wj>(@>5UfYH=%h#`p>LUfb@8G^IERYEE+u6=>h8IYU%Sk?
zOfJUby2|0egv0_N*n^~=;nS;ez`|nR){Wq}iLzp{^O)CQweVnS6Vpw>wIcFSyT8n~
zU9ZBV)4d}emrnX4zeA#V7AJTa2*PRXTG*eNL>yh$Xyq<ZAM5xd2^guIwn-PzS0NIF
z+N;*J480Cv3WzCrb$xziD;iwLR{RF4ec3f+oYs}*`{?WbnEqd9mj~{Jcy5hKxhTSz
zCSEqfX?X9T#)DDMCsv<J4S{SjsU&XKP67N`Bm2wSS_*omK2Fn+cg0qN{gsI_C#Q5D
za!~M0Ne56@pzH&en|Ae#u=2?F=ZpYLsqE43mJ@G#4(I4$k`lFK=fFn%*hQ^p;T7Vv
z4Zt$cc{b9iwJ)}wF!q)9{n(~?8O}E85dqlfv2lxft=(8|cdnx|=yC%9Ad~v97BHXs
ziy!#j5vBVgm}j~I`#3YWGGMQ6j2`=Z^Bzf~>!&)ys++e~5AGEat&iza62<#~-vWcu
z(u$x@n0;GQ7W@o~TZ^=-ef-yhdW8B1_h#E4wTU~R{Kz^ovm#cb23Zz0LQx0%f#O%r
z7=+rTpY3mn-tk9@Zp(=!hX#M*Iyh3>zn;~dc^m>ta))}h0HOR}%ZbQ*?T;ntLT3?P
zpT&EwS9CX+nL|q;DajlR>^|%M6szxi`zq2nep9u&4!v0Ut1Q{qx$9^uZ0N+<wsk}-
zZBRs{Yx9GKtZoGW{Z{1XHUpJl9?-FU5$+$G&1wsuBKj#4*x9271_MWPP<o+^shl(G
ziSs<eC;UU?5QKwuA@+K%kUG;;n!O|a24$WCYNX90A$-TeIwa9$7sp>Kdnj?I+VT7)
z&aMQ~<|Oj7^Pq=E0vlxIFY_X=J32g$sMb~`uB7~Ad6Aco*QYQM&H9hQ?b^LUqqLz%
z@ZjV$#oyRK9&$~=LC>{Cu4=Kip7@<3|4p{A<0^TLVjifGNN$X#qf~w<m;A{^1vYHV
zjax}dl<)ZbXLgKtWG4D#q#u*bmSZOHDev%0<tevX_*fd}4C=Vlo;$nllcdDu$;L%o
zr6jjf1P9W<>gCUOKeP4xj-qcB_2r_n4PdBYJpWVKjrtnWiiX6q6wAwz26fR~ZRXi!
z*jnzy<7W<<DPxbDIrVdDIMrtJbuIm|K-$fT1G^3hVl)D!$yJm^`Xi**GO}~Gl~%#d
z3Rg|GqW^L_!gqGuUvC(Z%XYI%6wXyCY5)3FS0B}&9jwW4xr6T>+Vbw|{eSO?iJ8qk
z=o4~Vd*C7iM%nu;mwF_Y6fnN#ogPYm&JD)21%9J;0dn^#KbcFeuPun-DCIZ?pK0}H
zwC*`5&=)D5bveH@zUq}kqNuKY>OXlY2hL?=WP(_h5Hj5pB<9NLa<b@YxU_JncOq7M
zTXS}0ql#Z)&~q&G-!%nE{F>64!$P<SVDZJJYJbUKEQQW0ZdR=u7>n3S>gyOlgLgz7
zv#+0U!B10oV0}-;CJPZyUjMv1uH?9UdEVVN>LI~pU?6hWt;gV$0Ud*9M6D;BrRZ+Y
z)7JLBL8cEr1D}yvdK@rkZ?b0LBt*OItZXh(PF_*k`B#m034G{M4J{*AD<fBAKy6d$
zw>5Oenrc(xs%K8?y}$b#DjAk$7A9y~N~0%d22OQq|5UNHNT$?PrT<UK?0?OkAOZmZ
mB5~i4+w7m5Nbz6nAO)y}?z<SXI*9$t0JJp>)Egc;#{LH={@(Qf

literal 0
HcmV?d00001

diff --git a/luci-theme-footstrap/htdocs/luci-static/footstrap/manifest.json b/luci-theme-footstrap/htdocs/luci-static/footstrap/manifest.json
new file mode 100644
index 00000000..6d587bd6
--- /dev/null
+++ b/luci-theme-footstrap/htdocs/luci-static/footstrap/manifest.json
@@ -0,0 +1,24 @@
+{
+	"id": "/cgi-bin/luci/",
+	"name": "LuCI",
+	"short_name": "LuCI",
+	"start_url": "/cgi-bin/luci/",
+	"scope": "/cgi-bin/luci/",
+	"display": "standalone",
+	"background_color": "#f6f8fa",
+	"theme_color": "#f6f8fa",
+	"icons": [
+		{
+			"src": "/luci-static/footstrap/app-icon-192.png",
+			"sizes": "192x192",
+			"type": "image/png",
+			"purpose": "any maskable"
+		},
+		{
+			"src": "/luci-static/footstrap/app-icon-512.png",
+			"sizes": "512x512",
+			"type": "image/png",
+			"purpose": "any maskable"
+		}
+	]
+}
diff --git a/luci-theme-footstrap/htdocs/luci-static/resources/fs-fit.js b/luci-theme-footstrap/htdocs/luci-static/resources/fs-fit.js
index 2e72e29a..33437861 100644
--- a/luci-theme-footstrap/htdocs/luci-static/resources/fs-fit.js
+++ b/luci-theme-footstrap/htdocs/luci-static/resources/fs-fit.js
@@ -143,16 +143,36 @@ let _sampling = false;
  * next frame's probe paid for a layout that had just been dirtied; and `touchstart` starts the
  * sampler, so a plain tap on a button bought ~24 of them.
  *
- * The answer cannot change without the room changing: the two layouts scroll different elements and
- * the switch between them is a width change, which `onResize` already watches and stamps. So the
- * verdict is cached against that stamp and the offset is then read from the scroller directly —
- * `scrollTop` on an element and `scrollY` on the window are both free. */
-let _scroller = null, _scrollerAt = -1;
+ * WHAT IS ASKED IS ALSO NOT WHAT IT USED TO ASK. "Does this element currently overflow" is a
+ * property of the CONTENT, and it was being memoised against a stamp that only moves when a WIDTH
+ * does: open a short page (no overflow, answer cached as "the window scrolls"), navigate to a tall
+ * one — `#view` keeps its identity and its width, so nothing bumps the stamp — and every pass went
+ * on reading `window.scrollY`, which in the sidebar layout is pinned at 0 by
+ * `.fs-shell { height: 100svh; overflow: hidden }`. The offset then never appeared to move, the
+ * sampler never extended `_movingUntil`, and every mid-scroll guard in this file was inert on
+ * exactly the pages tall enough to scroll.
+ *
+ * The question is "which element does this layout scroll", and the STYLESHEET is what decides it:
+ * `theme/20-shell.css` gives `.fs-main` `overflow-y: auto` for the desktop sidebar layout and
+ * nothing else, so the computed value IS the answer — no content-height probe, no viewport literal
+ * copied out of a media query, and correct the moment the CSS changes. `getComputedStyle` resolves
+ * style, not layout, and the verdict is cached against the resize stamp AND the two attributes that
+ * carry a layout change (`data-layout`, `data-narrow`), so the frame loop reads neither. */
+let _scroller = null, _scrollerAt = -1, _scrollerKey = null;
+function layoutKey() {
+	const root = document.documentElement;
+	return (root.getAttribute('data-layout') || '') + (root.hasAttribute('data-narrow') ? '|narrow' : '');
+}
 function scroller() {
-	if (_scrollerAt === _resizeSeq && (_scroller === null || _scroller.isConnected)) return _scroller;
+	const key = layoutKey();
+	if (_scrollerAt === _resizeSeq && _scrollerKey === key &&
+	    (_scroller === null || _scroller.isConnected))
+		return _scroller;
 	const sc = document.getElementById('maincontent');
-	_scroller = (sc && sc.scrollHeight - sc.clientHeight > 4) ? sc : null;
+	const flow = sc ? window.getComputedStyle(sc).overflowY : '';
+	_scroller = (flow === 'auto' || flow === 'scroll') ? sc : null;
 	_scrollerAt = _resizeSeq;
+	_scrollerKey = key;
 	return _scroller;
 }
 function scrollTop() {
@@ -346,13 +366,14 @@ function scheduleAnchor(ref) {
 }
 function applyAnchor(ref) {
 	if (!ref || !ref.el.isConnected) return;
-	const sc = document.getElementById('maincontent');
-	const inner = sc && sc.scrollHeight - sc.clientHeight > 4;
-	const at = inner ? sc.scrollTop : window.scrollY;
+	/* through scroller(), not a second probe of its own: the two asked the same question in the
+	 * same two lines and could already answer differently within one frame */
+	const sc = scroller();
+	const at = sc ? sc.scrollTop : window.scrollY;
 	if (at <= 0) return;
 	const drift = ref.el.getBoundingClientRect().top - ref.top;
 	if (Math.abs(drift) < 1) return;
-	if (inner) sc.scrollTop = at + drift;
+	if (sc) sc.scrollTop = at + drift;
 	else window.scrollTo(0, at + drift);
 }
 
@@ -409,7 +430,13 @@ return baseclass.extend({
 		if (typeof fit !== 'function') return;
 		_fitters.push(fit);
 		observeContent();
-		fit();
+		/* Caught for the same reason runAll() catches, and this was the one run that was not: a
+		 * fitter that throws on its FIRST run propagated out of add() and out of the theme's init(),
+		 * so every registration after it was never made. With the gate already raised that is a page
+		 * whose data tables are `display: none` for good — nothing left to write `.fs-fitted`. The
+		 * five passes in fs-select.js are registered separately precisely so each fails alone. */
+		try { fit(); }
+		catch (e) { console.error('fs-fit: a fitter threw on registration', e); }
 	},
 
 	/* Is the reader scrolling, and "I could not measure, wake me when they stop". A pass that has to
@@ -426,7 +453,6 @@ return baseclass.extend({
 	 * observer re-fits synchronously, and that is rule 2's whole point.) */
 	schedule,
 
-
 	/* Coalesce ANY callback into one call per frame (rule 3, for non-fitters): schedule() runs
 	 * EVERY fitter, so a caller wanting only its own work batched cannot use it — three had
 	 * hand-rolled the identical five lines. NOT for the per-element case: menu-footstrap.js's
diff --git a/luci-theme-footstrap/htdocs/luci-static/resources/fs-router.js b/luci-theme-footstrap/htdocs/luci-static/resources/fs-router.js
index ae560e17..092c2df6 100644
--- a/luci-theme-footstrap/htdocs/luci-static/resources/fs-router.js
+++ b/luci-theme-footstrap/htdocs/luci-static/resources/fs-router.js
@@ -58,8 +58,26 @@ const _viewIntervals = (window.__fsViewIntervals || (window.__fsViewIntervals =
 	let _paused = [];
 	document.addEventListener('visibilitychange', () => {
 		if (document.hidden) {
+			/* LuCI'S OWN TICK IS NOT OURS TO PAUSE, and taking it made the page poll FASTER the
+			 * longer it was left in a background tab. `L.Poll.start()` arms its 1 s tick with a
+			 * plain `setInterval`, so the hook above catches it like any other id. This listener is
+			 * registered at module eval and wireVisibility()'s in init(), so ours ran first: it
+			 * cleared LuCI's tick with the raw `_ci` and dropped it from the map (leaving
+			 * `L.Poll.timer` naming a dead id, which made the `L.Poll.stop()` right after a no-op),
+			 * and on show it re-armed that tick on an id `L.Poll` knew nothing about — after which
+			 * `start()` armed a second one, because `active()` had nothing to see. Two steps per
+			 * second after one hide/show, three after two, and so on for as long as the reader kept
+			 * coming back. Only a client navigation swept the orphans up.
+			 *
+			 * So the tick is skipped here and wireVisibility() keeps both halves of it. When it
+			 * cannot be told apart from a view's timer, NOTHING is paused: a view's poller running
+			 * in a hidden tab costs a wasted RPC, whereas re-arming LuCI's tick behind its back
+			 * costs a doubling that never stops. Same judgement as clearViewIntervals(). */
+			const keep = pollTickId();
+			if (keep === false) return;
 			_paused = [];
 			for (const [ id, spec ] of _viewIntervals) {
+				if (id === keep) continue;
 				_paused.push(spec);
 				_ci.call(window, id);
 				_viewIntervals.delete(id);
@@ -72,43 +90,52 @@ const _viewIntervals = (window.__fsViewIntervals || (window.__fsViewIntervals =
 		}
 	});
 })();
-function clearViewIntervals() {
-	/* `L.Poll.timer` is the id of LuCI's OWN 1 s tick, and it is private state — `add`/`remove`/
-	 * `start`/`stop`/`active` are the documented surface, and upstream has already marked the whole
-	 * `L.Poll` alias deprecated (`'require poll'` is its replacement, and neither 24.10 nor 25.12
-	 * ships poll.js yet, so the alias is still the only way in). If that field ever goes, `keep`
-	 * becomes null and this sweep would clear LuCI's tick along with the view's timers — every poll
-	 * on every later page silently dead, from a rename we did not notice. So the missing field is
-	 * not a null: it is a reason to do NOTHING, once, loudly. A view's leftover interval outliving
-	 * its page costs a wasted RPC; killing the global tick costs the router's live data. */
-	/* Asked through the DOCUMENTED half first: active() says whether LuCI's tick is running at all,
-	 * and `timer` is deleted by stop() — so an absent field is the ordinary "nothing to protect"
-	 * case on a page with no pollers, not a sign that upstream moved it. The anomaly worth reporting
-	 * is the pair disagreeing: a tick that is running while the id it runs on has no name we know.
-	 * Then do NOTHING, once, loudly: a view's leftover interval outliving its page costs a wasted
-	 * RPC, whereas clearing LuCI's own tick costs every live value on every later page. */
-	/* …and the ALIAS ITSELF is the first thing that can go — it is the deprecation the paragraph
-	 * above is about, so this function cannot be the one place that reads it blind. Every other
-	 * `L.Poll` read in this file is guarded, and an unguarded one here throws where a throw costs
-	 * most: navigate() calls this inside the staged render, after the chrome has already switched to
-	 * the incoming page and before its module is required, so a TypeError would leave every click
-	 * showing the previous page's content under the new page's title and menu mark, with the
-	 * navigation dead in a rejected promise — far worse than the leaked interval this exists to
-	 * sweep. No alias is the same answer as an unreadable timer: do NOTHING, once, loudly. */
+/* WHICH id IS LuCI'S OWN TICK — asked in ONE place, because two callers need the answer and both
+ * pay the same price for getting it wrong: the navigation sweep below, and the hidden-tab pause in
+ * the interval hook above (which used to take the tick with the view timers and hand it back on an
+ * id L.Poll had never heard of).
+ *
+ * `L.Poll.timer` is that id, and it is private state — `add`/`remove`/`start`/`stop`/`active` are
+ * the documented surface, and upstream has already marked the whole `L.Poll` alias deprecated
+ * (`'require poll'` is its replacement, and neither 24.10 nor 25.12 ships poll.js yet, so the alias
+ * is still the only way in). If the field is ever renamed, a caller reading it blind would treat
+ * LuCI's tick as a view's: cleared on the next navigation, every poll on every later page silently
+ * dead. So a missing field is not a null — it is a reason to do NOTHING, once, loudly. A view's
+ * leftover interval outliving its page costs a wasted RPC; losing the global tick costs the
+ * router's live data.
+ *
+ * Asked through the DOCUMENTED half first: `active()` says whether the tick is running at all, and
+ * `timer` is deleted by `stop()` — so an absent field is the ordinary "nothing to protect" case on
+ * a page with no pollers, not a sign that upstream moved anything. The anomaly worth reporting is
+ * the pair DISAGREEING: a tick that is running while the id it runs on has no name we know.
+ *
+ * The alias itself is the first thing that can go, so this cannot be the one place that reads it
+ * unguarded either: the sweep is called inside the staged render, after the chrome has switched to
+ * the incoming page and before its module is required, and a TypeError there would leave every
+ * click showing the previous page's content under the new page's title, the navigation dead in a
+ * rejected promise. No alias is the same answer as an unreadable timer.
+ */
+/* -> the tick's id; `null` when LuCI is not polling and there is nothing to protect; `false` when
+ * the two cannot be told apart, which every caller reads as "leave every interval alone". */
+function pollTickId() {
 	if (!L.Poll) {
 		warnPollUnreadable('footstrap: L.Poll is gone from this luci-base, so LuCI\'s own tick cannot be '
 			+ 'told apart from a view\'s timers — leaving view intervals alone. fs-router.js needs '
 			+ 'updating for this luci-base.');
-		return;
+		return false;
 	}
 	const running = (typeof L.Poll.active === 'function') ? L.Poll.active() : (L.Poll.timer != null);
 	if (running && L.Poll.timer == null) {
 		warnPollUnreadable('footstrap: LuCI is polling but L.Poll.timer is not readable — leaving view '
 			+ 'intervals alone rather than risking its tick. fs-router.js needs updating for this '
 			+ 'luci-base.');
-		return;
+		return false;
 	}
-	const keep = running ? L.Poll.timer : null;
+	return running ? L.Poll.timer : null;
+}
+function clearViewIntervals() {
+	const keep = pollTickId();
+	if (keep === false) return;
 	/* Map, not Set: the key is the timer id and the value is what it would take to re-arm it */
 	_viewIntervals.forEach((spec, id) => { if (id !== keep) window.clearInterval(id); });
 }
@@ -1258,10 +1285,74 @@ function bootDocumentIsOurs() {
 	return tree.viewClassFor(node) != null;
 }
 
+/* ---- the boot contract: the luci-base surfaces this router CALLS, looked up before it wires ----
+ *
+ * Every module here is written against somebody else's code, and against parts of it that were never
+ * an API: `L.Poll` is a deprecated alias, `L.dom.content` and `ui.instantiateView` are what `view.ut`
+ * happens to use, `Request.addInterceptor` is how the session probe hears a 403. None of those is a
+ * promise anyone made. tools/upstream-contract.mjs asks whether they still BEHAVE as assumed, which
+ * is the deeper question — but it only ever runs here, against the two userlands this repo owns. On
+ * a router carrying a luci-base that MOVED (a fork, a backport, a distribution that trims luci.js),
+ * the first anyone learns of it is a click that opens nothing: the interception ran, the swap threw
+ * halfway, and the user is left on a page the theme half tore down.
+ *
+ * So: existence is checked at boot, once, and a missing name turns the router OFF rather than on-and-
+ * broken. The page is then the plain server-dispatched MPA the theme was before the router existed —
+ * every link a full load, nothing else lost, and the console says WHICH name is gone so the report
+ * that reaches this repo names it too.
+ *
+ * Deliberately existence-only. A probe that called these to see what they answer would have to run
+ * them for effect (there is no dry `instantiateView`), and a boot check that navigates is worse than
+ * the fault it looks for. Semantics stay in the live gate, which is why both files point at each
+ * other.
+ *
+ * The list is what THIS file calls, and nothing else: `uci` (flushUciCache) and `L.network` are read
+ * through their own guards a few lines from their use, because they are optional there — a document
+ * that never loaded network.js has nothing to refill. */
+const CONTRACT = [
+	[ 'L.require', () => typeof window.L.require === 'function' ],
+	/* classLoaded() tests `instanceof L.Class` to tell a loaded module from L.env/L.url/L.get */
+	[ 'L.Class', () => typeof window.L.Class === 'function' ],
+	[ 'L.dom.content', () => window.L.dom && typeof window.L.dom.content === 'function' ],
+	/* the four L.env keys navigate() RE-POINTS: a view reads them to know which page it is on */
+	[ 'L.env.{base_url,dispatchpath,requestpath,pathinfo,nodespec}', () => {
+		const env = window.L.env;
+		return !!env && [ 'base_url', 'dispatchpath', 'requestpath', 'pathinfo', 'nodespec' ]
+			.every((k) => k in env);
+	} ],
+	[ 'L.Poll.queue', () => window.L.Poll && Array.isArray(window.L.Poll.queue) ],
+	[ 'L.Poll.start/stop', () => window.L.Poll &&
+		typeof window.L.Poll.start === 'function' && typeof window.L.Poll.stop === 'function' ],
+	[ 'L.Request.addInterceptor', () => window.L.Request &&
+		typeof window.L.Request.addInterceptor === 'function' ],
+	[ 'rpc.addInterceptor', () => typeof rpc.addInterceptor === 'function' ],
+	[ 'ui.instantiateView', () => typeof ui.instantiateView === 'function' ],
+	[ 'ui.hideModal', () => typeof ui.hideModal === 'function' ],
+	[ 'ui.hideIndicator', () => typeof ui.hideIndicator === 'function' ],
+	[ 'ui.addNotification', () => typeof ui.addNotification === 'function' ]
+];
+
+/* -> the names that are NOT there, in list order; empty means the document can be navigated.
+ * A probe that throws counts as missing: `L` itself may be a shape nobody here expected. */
+function contractBreaks() {
+	return CONTRACT.filter(([ , present ]) => {
+		try { return !present(); }
+		catch (e) { return true; }
+	}).map(([ name ]) => name);
+}
+
 function wireRouter() {
 	if (_wired) return;
 	_wired = true;
 
+	const broken = contractBreaks();
+	if (broken.length) {
+		console.error('footstrap: this luci-base has no ' + broken.join(', ') +
+			' — the client router stays off and every link is a full page load, which is what the ' +
+			'theme did before it existed. Please report this line: docs/spa-router.md');
+		return;
+	}
+
 	if (!bootDocumentIsOurs())
 		return;
 
@@ -1409,6 +1500,9 @@ return baseclass.extend({
 	wire: wireRouter,
 	wireVisibility,
 	onNavigate,
+	/* exported for the unit suite (tests/router-contract.test.mjs), which drives it against a
+	 * hand-broken `L` — the one way to see the OFF branch without a router that ships one */
+	contractBreaks,
 	/* fs-search warms the pages this admin actually uses (its recents) and the arrow-key-highlighted
 	 * result, both of which the pointer/focus triggers above cannot see. The edge points that way
 	 * round — search → router — because the router must keep no dependency on the palette. */
diff --git a/luci-theme-footstrap/styles/base/95-luci.css b/luci-theme-footstrap/styles/base/95-luci.css
index b5d2e577..5f8e3003 100644
--- a/luci-theme-footstrap/styles/base/95-luci.css
+++ b/luci-theme-footstrap/styles/base/95-luci.css
@@ -654,9 +654,23 @@
 		100% { opacity: 0; }
 	}
 
-	/* .fade-in's animation: theme/45-misc.css (fs-fade) — absorbed. The @keyframes above
-	 * STAY though nothing here rides them: `fade-in` is an upstream animation NAME a
-	 * luci-app-* may ride (coverage contract, docs/conventions.md). */
+	/* THE `fade-in` KEYFRAMES ABOVE STAY THOUGH NOTHING HERE RIDES THEM: `fade-in` is an
+	 * upstream animation NAME a luci-app-* may ride (coverage contract, docs/conventions.md).
+	 * The theme's own rule on the `.fade-in` CLASS is gone on purpose — luci-mod-status re-marks
+	 * with it on every poll tick, so anything hung there replayed once a second across the whole
+	 * column (theme/45-misc.css says it at length).
+	 *
+	 * `fs-fade` is the theme's own, and it is one-shot: the two rules that ride it — the rail
+	 * flyout (theme/20-shell.css) and the search overlay (theme/75-search.css) — each play it
+	 * once, when the surface opens, which is why the 4px rise is right there and was wrong on a
+	 * class the poll rewrites. It sits here beside `fs-spin` because every keyframes in this
+	 * theme does; it was deleted together with the poll's rule and took both fades with it
+	 * silently, since an unresolvable animation-name is simply dropped. */
+	@keyframes fs-fade {
+		from { opacity: 0; transform: translateY(4px); }
+		to { opacity: 1; transform: none; }
+	}
+
 	.fade-out {
 		animation: fade-out var(--fs-dur-fade);
 	}
diff --git a/luci-theme-footstrap/ucode/template/themes/footstrap/partials/head.ut b/luci-theme-footstrap/ucode/template/themes/footstrap/partials/head.ut
index 71c3681f..b1b16ee8 100644
--- a/luci-theme-footstrap/ucode/template/themes/footstrap/partials/head.ut
+++ b/luci-theme-footstrap/ucode/template/themes/footstrap/partials/head.ut
@@ -436,6 +436,34 @@
 		{% endif %}
 		<link rel="icon" href="{{ media }}/logo_48.png" sizes="48x48">
 		<link rel="icon" href="{{ media }}/logo.svg" sizes="any">
+		{# THE ROUTER ON A HOME SCREEN. A phone is where LuCI is opened when something is wrong with
+		   the network, and a browser tab is a poor place to keep it: the manifest lets the admin
+		   install this page as an app, which gets it an icon, its own window and no address bar.
+
+		   Both files are STATIC and cannot be otherwise — a theme may not register a dispatcher node,
+		   so there is nothing here that could render them per request. That fixes two values:
+
+		     start_url/scope — `/cgi-bin/luci/`, uhttpd's own default and the path this template is
+		       being served from on every stock install. An admin who moved LuCI elsewhere gets an
+		       installed app that opens the standard path; the browser tab is unaffected either way.
+		     background/theme_color — the DEFAULT palette's page colour (#f6f8fa). The manifest is
+		       read once at install time and cannot follow a live Appearance change, so it carries
+		       the default rather than a value that would be wrong for everyone who changed it. It
+		       only ever paints the splash and the window chrome, never the page.
+
+		   Chrome offers its install prompt on a secure context only, so over plain HTTP this is
+		   iOS's Add to Home Screen (which reads the manifest and this apple-touch-icon) plus the
+		   icons themselves. Nothing here is on the page's critical path: a manifest is fetched at
+		   idle priority and never blocks a paint.
+
+		   `.json`, NOT the conventional `.webmanifest`, and that is the server's doing: uhttpd's
+		   built-in MIME map has no entry for that extension. Measured on the stand — the same bytes
+		   served as `app.webmanifest` come back `application/octet-stream`, as `t.manifest`
+		   `text/cache-manifest`, and only as `.json` do they come back with a JSON type, which is
+		   what every browser accepts a manifest as. There is no per-extension setting to fix from
+		   here: the map is compiled into uhttpd. #}
+		<link rel="manifest" href="{{ media }}/manifest.json?v={{ pkgs_update_time }}">
+		<link rel="apple-touch-icon" href="{{ media }}/apple-touch-icon.png">
 		{% if (dispatched?.css): %}
 		{# The `css` property of the dispatched menu.d node — an app naming a stylesheet the server
 		   should link for its page, instead of the view injecting one at module eval (which is what
diff --git a/modeminfo/Makefile b/modeminfo/Makefile
index 522a16a3..3d83bc09 100644
--- a/modeminfo/Makefile
+++ b/modeminfo/Makefile
@@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=modeminfo
 PKG_VERSION:=0.4.8
-PKG_RELEASE:=10
+PKG_RELEASE:=11
 PKG_MAINTAINER:=Konstantine Shevlakov <shevlakov@132lan.ru>
 
 include $(INCLUDE_DIR)/package.mk
diff --git a/modeminfo/root/usr/share/modeminfo/scripts/FIBOCOM.at b/modeminfo/root/usr/share/modeminfo/scripts/FIBOCOM.at
index b7b5e9b2..8591501f 100644
--- a/modeminfo/root/usr/share/modeminfo/scripts/FIBOCOM.at
+++ b/modeminfo/root/usr/share/modeminfo/scripts/FIBOCOM.at
@@ -1,7 +1,10 @@
 ATE0
 AT+COPS=3,0; +COPS?; +CREG?
-AT+CEREG=2; +CEREG?
-AT+CGREG=2; +CGREG?; +CSQ
+AT+CEREG=2
+AT+CEREG?
+AT+CGREG=2
+AT+CGREG?
+AT+CSQ
 AT+GTCCINFO?; +GTCAINFO?
 AT*CNTI=0
 AT+MTSM=1